CHAPTER 6: ACCESS CONSIDERATIONS

ACCESS CONSIDERATIONS

6.2Configuring Port Security through the Command Line Interface

6.2.1Commands

To configure port security, login as a level 2 user or as a manager. Once logged in, get to the port-security configuration level to setup and configure port security with the following command syntax:

configure port-security port-security

For example, using the configure port-securitycommand:

ML1200# configure port-security

ML1200(port-security)##

Alternately, the port-securitycommand can also be used to enter the port-security configuration mode:

ML1200# port-security

ML1200#(port-security)##

From the port security configuration mode, the switch can be configured to:

1.Auto-learn the MAC addresses.

2.Specify individual MAC addresses to allow access to the network.

3.Validate or change the settings.

The command syntax for the above actions are:

allow mac=<addresslistrange> port=<numlistrange>

learn port=<number-list> <enabledisable> show port-security

action port=<numlistrange> <nonedisabledrop>

signal port=<numlistrange> <nonelogtraplogandtrap>

ps <enabledisable>

remove mac=<alladdresslistrange> port=<numlistrange>

signal port=<numlistrange> <nonelogtraplogandtrap>

Where the following hold:

allow mac - configures the switch to setup allowed MAC addresses on specific ports

learn port - configures the switch to learn the MAC addresses associated with specific port or a group of ports

show port-security- shows the information on port security programmed or learnt

action port - specifies the designated action to take in case of a non authorized access

ps - port security - allows port security to be enable or disabled

MULTILINK ML1200 MANAGED FIELD SWITCH – INSTRUCTION MANUAL

6–3

Page 109
Image 109
GE ML1200 instruction manual Commands, For example, using the configure port-securitycommand, Ps enabledisable