CHAPTER 6: ACCESS CONSIDERATIONS

ACCESS CONSIDERATIONS

To deny a mac address, use the following:

#port-security (port-security)##ps enable

(port-security)##deny mac=<address,list,range> port=<num,list,range> (port-security)##action port=<num,list,range>drop

Example 6-1views port security settings on a switch. Learning is enabled on port 1. This port has 6 stations connected to it with the MAC addresses as shown. Other ports have learning disabled and the MAC addresses are not configured on those ports.

Example 6-1: Viewing the port security settings

ML1200# show port-security

PORT

STATE

SIGNAL

ACTION

LEARN

COUNT

MAC ADDRESS

----

-----

------

------

-----

-----

-----------

1

ENABLE

LOG

NONE

ENABLE

6

00:e0:29:2a:f1:bd

 

 

 

 

 

 

00:01:03:e2:27:89

 

 

 

 

 

 

00:07:50:ef:31:40

 

 

 

 

 

 

00:e0:29:22:15:85

 

 

 

 

 

 

00:03:47:ca:ac:45

 

 

 

 

 

 

00:30:48:70:71:23

2

ENABLE

NONE

NONE

DISABLE

0

Not Configured

3

ENABLE

NONE

NONE

DISABLE

0

Not Configured

4

ENABLE

NONE

NONE

DISABLE

0

Not Configured

5

ENABLE

NONE

NONE

DISABLE

0

Not Configured

6

ENABLE

NONE

NONE

DISABLE

0

Not Configured

ML1200(port-security)##

Example 6-2: Enabling learning on a port

ML1200(port-security)## learn port=3 enable

Port Learning Enabled on selected port(s)

ML1200(port-security)## show port-security

PORT

STATE

SIGNAL

ACTION

LEARN

COUNT

MAC ADDRESS

----

-----

------

------

-----

-----

-----------

1

ENABLE

LOG

NONE

ENABLE

6

00:e0:29:2a:f1:bd

 

 

 

 

 

 

00:01:03:e2:27:89

 

 

 

 

 

 

00:07:50:ef:31:40

 

 

 

 

 

 

00:e0:29:22:15:85

 

 

 

 

 

 

00:03:47:ca:ac:45

 

 

 

 

 

 

00:30:48:70:71:23

2

ENABLE

NONE

NONE

DISABLE

0

Not Configured

3

ENABLE

NONE

NONE

ENABLE

0

Not Configured

4

ENABLE

NONE

NONE

DISABLE

0

Not Configured

5

ENABLE

NONE

NONE

DISABLE

0

Not Configured

6

ENABLE

NONE

NONE

DISABLE

0

Not Configured

ML1200(port-security)##

MULTILINK ML1200 MANAGED FIELD SWITCH – INSTRUCTION MANUAL

6–5

Page 111
Image 111
GE ML1200 instruction manual To deny a mac address, use the following, Example 6-1 Viewing the port security settings