Port-security mac-address | NETGEAR 7300S instruction

User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software

port-security mac-address

This command adds a MAC address to the list of statically locked MAC addresses.

Format	port-security mac-address <vid> <mac-address>
Mode	Interface Config

no port-security mac-address

This command removes a MAC address to the list of statically locked MAC addresses.

Format	no port-security mac-address <vid> <mac-address>
Mode	Interface Config

port-security mac-address move

This command converts dynamically locked MAC addresses to statically locked addresses.

Format	port-security mac-address move
Mode	Interface Config

snmp-server enable traps violation

This command enables the sending of new violation traps designating when a packet with a disallowed MAC address is received on a locked port.

Default	Disabled
Format	snmp-server enable traps violation
Mode	Interface Config

no snmp-server enable traps violation

This command disables the sending of new violation traps.

Format	no snmp-server enable traps violation
Mode	Interface Config

Security Commands

9-3

202-10088-01, March 2005

Image 211

NETGEAR 7300S manual Port-security mac-address move, Snmp-server enable traps violation, No port-security mac-address

Contents

202-10088-01, March Technical Support Canadian Department of Communications Compliance Statement 202-10088-01, March Contents Chapter Command Line Interface Structure 202-10088-01, March 202-10088-01, March 202-10088-01, March 202-10088-01, March Pre-login Banner System Log Syslog User Account Commands 202-10088-01, March 100 202-10088-01, March 202-10088-01, March Chapter Security Commands 202-10088-01, March 202-10088-01, March Chapter Routing Commands Xxii 202-10088-01, March Chapter Quality of Service QoS Commands 202-10088-01, March 202-10088-01, March Chapter Managing Switch Stacks Appendix a Is CLI Mapping Appendix B Cabling Guidelines Contents Xxx Contents How to Use This Document Why the Document was CreatedAudience Special Message Formats Typographical Conventions About This Guide About This Guide Scope Switch Management Overview Comparing Switch Management Methods Set Up Your Switch Using Direct Console Access Chapter Administration Console Interface Connection Description Connection Settings Administration Console Interface Chapter Web-Based Management Interface Web Based Management Overview How to Log In to the Managed Switch Login window opens System Information Web-Based Management Utility Features Interactive switch image Interactive Switch Image Main Menus Menus Secondary Menus SwitchManagement Smart Wizard System-Wide Popup MenusRouting Traffic Management Port-Specific Popup Menus Web-Based Management Interface Command CLI Command Format Values Parameters Macaddr Conventions Annotations Chapter Quick Start up Quick Starting the Switch Quick Start up Software Version Information System Info and System SetupQuick Start up Physical Port Data Quick Start up IP Address Quick Start up User Account Management Quick Start-up IP Address Using Switch as Layer-2 Device Quick Start-up IP Address Using Switch as Layer-3 Device Quick Start up Uploading from Switch to Out-of-Band PC Only Quick Start up Downloading from Tftp Server Quick Start up Factory Defaults Quick Start up Factory Defaults Quick Start up Chapter Mode-based CLI Enter the ip dhcp pool Correct Mode-based Topology Command prompt shown at this level is Mode-based Command Hierarchy Figuration mode to configure the QoS policy map Invalid input detected at ‘’ marker Flow of Operation Behavior of Command Help ? No Form of a CommandSupport for No Form Mode-based CLI System Information and Statistics Commands Chapter Switching Commands Show eventlog Show arp switchShow hardware Show interface Show interface ethernet Packets Received Packets Received Successfully Packets Received with MAC Errors Received Packets not forwarded Packets Transmitted Octets Packets Transmitted Successfully Transmit ErrorsTransmit Discards Protocol Statistics Dot1x Statistics Switching Commands Show mac-addr-table Show logging Show msglog Show running-config Show sysinfo System Management CommandsSnmp-server Transport input telnet TelnetNo transport input telnet Transport output telnet Session-timeoutSession-limit No bridge aging-time No session-timeoutBridge aging-time Seconds No mtu MtuNetwork javamode Network mac-address Network parms Network mac-typeNo network mac-type No telnetcon maxsessions Telnetcon timeoutNetwork protocol Telnetcon maxsessions Serial baudrate Serial timeoutNo telnetcon timeout No serial timeout Show telnet Serviceport ipServiceport protocol Set prompt Show network Show forwardingdb agetime Format Mode Java ModeShow telnetcon Show serial Show serviceport Client IP Mask Snmp Community CommandsShow snmpcommunity Client IP Address Show trapflags Show snmptrap No snmp-server community Snmp-server community No snmp-server community ipmask Snmp-server community ipaddrSnmp-server community ipmask No snmp-server community ipaddr Snmp-server community rw Snmp-server community modeNo snmp-server community mode Snmp-server community ro No snmp-server enable traps Snmp-server enable trapsSnmp-server enable traps bcaststorm Snmp-server enable traps linkmode No snmp-server enable traps stpmode Snmp-server enable traps multiusersSnmp-server enable traps stpmode No snmp-server enable traps linkmode Snmptrap ipaddr Snmptrap modeNo snmptrap mode Snmptrap No snmp trap link-status all Snmp trap link-statusSnmp trap link-status all No snmp trap link-status Addport Management Vlan CommandSystem Configuration Commands Network mgmtvlan No auto-negotiate Deleteport Interface ConfigDeleteport Global Config Auto-negotiate all Macfilter adddest MacfilterNo macfilter No macfilter adddest all Macfilter adddest allMacfilter addsrc No macfilter adddest No macfilter addsrc all Macfilter addsrc allMonitor session No macfilter addsrc No monitor session Monitor session modeNo monitor session mode Shutdown 100f 10h 10f Shutdown allSpeed all No shutdown No storm-control broadcast Storm-control broadcast100h 100f Show mac-address-table multicast Storm-control flowcontrolNo storm-control flowcontrol Show mac-address-table staticfiltering Show mac-address-table static Show monitor Show mac-address-table statsShow port Show port protocol No vlan Virtual LAN Vlan CommandsShow storm-control Vlan No vlan ingressfilter Vlan acceptframeVlan ingressfilter No vlan acceptframe No vlan name Vlan makestaticVlan name Vlan participation Auto Vlan participation allVlan port acceptframe all Exclude No vlan port ingressfilter all Vlan port ingressfilter allVlan port pvid all No vlan port acceptframe all No vlan port tagging all Vlan port tagging allVlan protocol group Vlan protocol group add protocol No protocol group Vlan protocol group removeProtocol group No vlan protocol group add protocol No protocol vlan group all Protocol vlan groupProtocol vlan group all No protocol vlan group No vlan pvid Vlan pvidVlan tagging Show vlan Current ConfiguredVlan Name Vlan Type Show vlan port Show vlan briefPort Vlan ID Traceroute System Utility CommandsIngress Filtering Clear igmpsnooping Clear configEnable passwd Clear counters Logout Clear port-channelClear traplog Clear vlan Formatreload PingReload Copy Pre-login Banner No logging cli-command Format CLI Command LoggingConfiguration Scripting Logging cli-command Configscript show Configscript applyConfigscript delete Configscript list System Log Syslog Configscript validate No logging buffered Logging bufferedLogging buffered wrap Logging console No logging history Logging historyLogging host No logging console No logging port Logging host removeLogging port Logging syslog Client Local Port Show logging history Severity Level Filter Admin StatusShow logging buffered Show logging hosts Host Status Sntp client modeSimple Network Time Protocol Sntp Sntp broadcast client poll-interval No sntp client port Sntp client modeSntp client port Sntp unicast client poll-interval Sntp multicast client poll-interval Sntp unicast client poll-timeoutNo sntp unicast client poll-timeout Sntp unicast client poll-retry Show sntp Sntp server Show sntp server Show sntp client Show loginsession User Account CommandsDisconnect Session Time Show usersConnection From Idle Time No users passwd Users nameUsers passwd No users name No users snmpv3 authentication Users snmpv3 accessmodeUsers snmpv3 authentication No users snmpv3 accessmode Users snmpv3 encryption Dhcp Server CommandsNo users snmpv3 encryption No client-name Client-identifierClient-name No client-identifier Hardware-address Default-routerNo default-router Dns-server No host HostIp dhcp excluded-address No hardware-address No ip dhcp excluded-address DefaultnoneIp dhcp ping packets Ip dhcp pool No lease LeaseNetwork No ip dhcp pool No bootfile Service dhcpBootfile No service dhcp Ip dhcp conflict logging Ip dhcp bootp automaticNo ip dhcp bootp automatic Domain-name No ip dhcp conflict logging Netbios-name-serverNetbios-node-type No netbios-name-server No next-server No netbios-node-typeNext-server Option Show ip dhcp binding Show ip dhcp global configurationNo option Show ip dhcp server statistics Show ip dhcp pool configuration Show ip dhcp conflict Clear ip dhcp conflict Provisioning Ieee 802.1p CommandsClear ip dhcp binding Clear ip dhcp server statistics Vlan priority Classofservice dot1pmappingShow classofservice dot1pmapping Vlan port priority all Set garp timer join Garp CommandsNo set garp timer join No set garp timer leave Set garp timer join allSet garp timer leave No set garp timer join all No set garp timer leaveall Set garp timer leave allSet garp timer leaveall No set garp timer leave all Gvrp Admin Mode Set garp timer leaveall allNo set garp timer leaveall all Gmrp Admin Mode Set gvrp interfacemode Garp Vlan Registration Protocol Gvrp CommandsSet gvrp adminmode No set gvrp adminmode Set gvrp interfacemode all Show gvrp configuration No set gmrp adminmode Garp Multicast Registration Protocol Gmrp CommandsSet gmrp adminmode Port Gmrp Mode No set gmrp interfacemode all Set gmrp interfacemodeSet gmrp interfacemode all No set gmrp interfacemode Show mac-address-table gmrp Show gmrp configuration Set igmp Internet Group Management Protocol Igmp Commands No set igmp Set igmp groupmembership-intervalNo set igmp groupmembership-interval No set igmp maxresponse Set igmp interfacemode allSet igmp maxresponse No set igmp interfacemode all No set igmp mcrtrexpiretime Format Mode Admin ModeSet igmp mcrtrexpiretime Show igmpsnooping Show mac-address-table igmpsnooping Igmp Snooping per Vlan No set igmp groupmembershipinterval Set igmp groupmembershipinterval Set igmp fast-leave Set igmp mcrtexpiretimeNo set igmp mcrtexpiretime No set igmp fast-leave Fast Leave Mode Link Aggregation LAG/Port-Channel 802.3AD CommandsPort-channel staticcapability No port lacpmode Port lacpmodePort lacpmode all No port-channel staticcapability Port-channel linktrap Port-channel adminmode allNo port-channel adminmode Port-channel Show port-channel brief Port-channel name Show port-channel No spanning-tree max-hops Spanning Tree STP CommandsSpanning-tree max-hops Spanning-tree No spanning-tree Spanning-tree configuration nameSpanning-tree configuration revision No spanning-tree configuration name No spanning-tree edgeport No spanning-tree configuration revisionSpanning-tree edgeport Spanning-tree forceversion No spanning-tree forward-time Spanning-tree forward-timeSpanning-tree hello-time No spanning-tree forceversion Spanning-tree mst Spanning-tree max-ageNo spanning-tree max-age No spanning-tree mst Cost auto external-cost auto port-priorty No spanning-tree mst priority Spanning-tree mst instanceSpanning-tree mst priority No spanning-tree mst instance No spanning-tree mst vlan Spanning-tree port modeNo spanning-tree port mode Spanning-tree mst vlan Spanning-tree bpdumigrationcheck Spanning-tree port mode all Show spanning-tree Show spanning-tree interface Port mode Show spanning-tree mst port detailed Show spanning-tree mst detailed Port Path Cost Port PriorityPort Forwarding State Port Role CST Port Cost Show spanning-tree mst port summaryShow spanning-tree mst summary CST Regional Root Show spanning-tree vlan Show spanning-tree summary Switching Commands 133 Mode Designated Root Root Path Cost Topology ChangeRoot Port Identifier Root Port Max Age Bridge Identifier Bridge Max Age Root Port Bridge Forward Delay Derived valueBridge Forward Delay CST Regional Root Regional Root Path Cost MST Instance ID Port Identifier Port Priority STP BPDUs TransmittedRST BPDUs Transmitted Mstp BPDUs Transmitted Mstp BPDUs Received Configured value indicating if this port is an edge port Port-security Port SecurityNo port-security No port-security max-static Port-security max-dynamicPort-security max-static No port-security max-dynamic Port-security mac-address move Snmp-server enable traps violationNo snmp-server enable traps violation Port-security mac-address Show port-security dynamic Show port-securityShow port-security static Authentication login Port Based Network Access Control Ieee 802.1X CommandsShow port-security violation Clear radius statistics Dot1x defaultloginNo authentication login Clear dot1x statistics No dot1x max-req Dot1x loginDot1x initialize Dot1x max-req Dot1x port-control All Dot1x port-controlNo dot1x port-control Dot1x system-auth-control Dot1x re-authenticateDot1x re-authentication No dot1x re-authentication No dot1x system-auth-control Dot1x timeout No dot1x user No dot1x timeoutDot1x user Show radius accounting Show authentication User Show authentication usersShow dot1x Method Protocol Version Control ModeSupplicant Timeout Server Timeout Control Direction Show dot1x users Show users authenticationUsers defaultlogin Users login Radius server host Remote Authentication Dial In User Service Radius CommandsRadius accounting mode No radius accounting mode No radius server host Radius server primary Default10Radius server key Radius server msgauth No radius server retransmit Radius server timeoutNo radius server timeout Show radius Show radius statistics Access Challenges Secure Shell SSH CommandsAccess Accepts Access Rejects Ip ssh protocol Hypertext Transfer Protocol Http CommandsShow ip ssh No ip http secure-port Ip http secure-portIp http secure-protocol Ip http secure-server No ip http server Http ModeIp http server Show ip http Security Commands Arp Address Resolution Protocol ARP CommandsNo arp No arp cachesize Ip proxy-arpArp cachesize No ip proxy-arp No arp dynamicrenew Arp dynamicrenewArp purge Arp resptime Clear arp-cache Arp timeoutNo arp timeout Arp retries Cache Size Show arpAge Time seconds Retries Show arp brief IP RoutingRouting No ip routing Ip routingIp address No routing No ip route Ip route defaultIp route No ip address Ip forwarding No ip route defaultDefaultenabled Ip route distance No ip netdirbcast Ip netdirbcastIp mtu No ip forwarding Show ip interface Show ip brief Show ip route Show ip interface brief Next Hop Intf Show ip route bestroutesShow ip route entry Protocol Preference Show ip route preferencesShow ip stats Next Hop Interface Encapsulation Bootp/DHCP Relay CommandsBootpdhcprelay cidoptmode No bootpdhcprelay cidoptmode Bootpdhcprelay maxhopcount Bootpdhcprelay enableBootpdhcprelay minwaittime Show bootpdhcprelay Bootpdhcprelay serverip No ip irdp Router Discovery Protocol CommandsIp irdp Ip irdp address No ip irdp holdtime Ip irdp holdtimeIp irdp maxadvertinterval No ip irdp address No ip irdp minadvertinterval Ip irdp minadvertintervalIp irdp preference Show ip irdp Vlan routing Virtual LAN Routing Commands Logical Interface Routing Information Protocol RIP CommandsEnable RIP Show ip vlan Ip rip Default-information originate RIPAuto-summary Distance rip Default-metric RIPNo default-information originate RIP No default-metric RIP No distribute-list out Ip rip authenticationNo default-information originate Distribute-list out No ip rip receive version No ip rip authenticationIp rip receive version Ip rip send version No hostroutesaccept HostroutesacceptSplit-horizon No ip rip send version No redistribute RedistributeShow ip rip Format for other source protocol Receive Version RIP ModeShow ip rip interface brief Send Version Show ip rip interface Mac access-list extended name Access Control List ACL Commands No mac access-list extended name Mac access-list extended rename name newnameDenypermit srcmac srcmacmask dstmac dstmacmask Mac access-group name inout sequence Show mac access-lists Show mac access-list nameNo mac access-group name inout Access-list Ip access-group all Ip access-groupShow ip access-lists Source IP Mask Differentiated Services DiffServ CommandsDestination IP Mask Diffserv Traffic Classification Class CommandsService Levels No diffserv No class-map Match secondary-vlan Class-map renameMatch ethertype Match secondary-cos Match class-map Match any Match destination-address mac Match cos Match dstl4port Match dstip Match ip precedence Match ip dscp Match protocol Match ip tos Match srcip Match source-address macMatch srcl4port Match vlan Policy Commands Drop Assign-queueMark secondary-cos Policy Type RedirectConform-color Bandwidth kbps Bandwidth percent IncompatibilitiesClass Expedite percent Expedite kbps Policy Type Mark ip-dscp Mark cos Mark ip-precedence Policy Type IncompatibilitiesPolice-simple Police-single-rate Police-two-rate Policy-map rename Policy-mapRandomdrop Shape peak Shape average Service-policy Service Commands No service-policy Show Commands Match Criteria Show class-mapClass Name Class Type Show diffserv Conform COS Show policy-mapAssign Queue Policing Style Policy NameMark IP Dscp Mark IP Precedence Bandwidth Exceed ActionShaping Average Operational Status Show diffserv serviceClass Members Direction OperStatus Show diffserv service briefDiffServ Mode Policy Details 11-38 Quality of Service QoS Commands Offered Packets Show service-policySent Octets/Packets Dir Classofservice dot1p-mapping Class of Service CoS CommandsClassofservice ip-dscp-mapping Cos-queue max-bandwidth Classofservice ip-precedence-mappingClassofservice trust No classofservice trust No cos-queue min-bandwidth No cos-queue max-bandwidthCos-queue min-bandwidth Cos-queue random-detect No random-detect Cos-queue strictRandom-detect No cos-queue strict No random-detect queue-parms Random-detect exponential-weighting-constantRandom-detect queue-parms Tail-drop queue-parms Traffic-shape Show classofservice dot1p-mapping Show classofservice trust Show classofservice ip-precedence-mappingShow interfaces cos-queue Show interfaces random-detect Fig indication Show interfaces tail-drop-threshold Drop precedence level for this queue, from 1 to p. The spe 11-50 Quality of Service QoS Commands Understanding Switch Stacks Chapter Managing Switch Stacks Switch Stack Membership Managing Switch Stacks 12-3 Interconnect Ports 51 As shown Stack Member Numbers Stack Master Election and Re-Election Stack Member Priority Values Switch Stack Offline Configuration Managing Switch Stacks 12-7 Incompatible Software and Stack Member Image Upgrades Switch Stack Software Compatibility RecommendationsSwitch Stack Configuration Files Connectivity to the Switch Stack Through Telnet Switch Stack Management ConnectivitySwitch Stack Configuration Scenarios Connectivity to the Switch Stack Through Console Ports Stacking Recommendations General Practices Initial installation and Power-up of a Stack Adding a Unit to an Operating Stack Removing a Unit from the StackReplacing a Stack Member with a New Unit Renumbering Stack Members Removing a Master Unit from an Operating Stack Moving a Master to a Different Unit in the StackMerging Two Operational Stacks Upgrading Firmware Preconfiguration Code Mismatch Migration of Configuration With a Firmware Upgrade Appendix a Is CLI Mapping Config acl rule action aclid Rulenum permit/deny Exec Is CLI Mapping Config diffserv policy police style Policy-Cla Police-simple Is CLI Mapping Show diffserv class summary Privileged Exec User Class-Ma Match not cos Config Class-Ma Match not ip precedence Config Routing Show arp switch Privileged Is CLI Mapping Is CLI Mapping Vlan Router No enable Is CLI Mapping Is CLI Mapping Config Router No auto-summary Router No split-horizon 7300S Series L3 Switch CLI Command Mode Syntax Config snmptrap ipaddr Global Config telnet maxsessions Privileged Remotecon maxsessions Is CLI Mapping Global No spanning-tree configuration name Config Config spanningtree bridge priority Removed 61440 Interface No spanning-tree mst mstid cost Config Config syslocation location Global Snmp-server location loc Transfer download path path Show loginsession Privileged Show vlan summary Privileged Show vlan brief Exec User Show mfdb gmrp Privileged Show mac-address-table gmrp Config lag create name Global Port-channel name Global Deleteport logical slot/port all Config Is CLI Mapping Config protocol vlan add groupid Privileged No set gvrp adminmode Is CLI Mapping Security Show users authentication Privileged Is CLI Mapping Security Show radius server summary Privileged Is CLI Mapping All detail slot/port statistics Is CLI Mapping Fast Ethernet Cable Guidelines Appendix B Cabling Guidelines Category 5 Cable Category 5 Cable Specifications Twisted Pair Cables Specifications Category 5 Cable Requirements 4illustrates crossover twisted pair cable Patch Panels and Cables Return Loss Using 1000BASE-T Gigabit Ethernet over Category 5 CableCabling Length Near End Cross Talk Next RJ-45 Plug and RJ-45 ConnectorsPatch Cables PIN Normal Assignment on Uplink Assignment on Ports 1 to Conclusion Numeric Appendix C Glossary See Area Border Router on See Autonomous System Boundary Router on Packet sent to all devices on a network See Command Line Interface on See Differentiated Services on Computer, printer, or server that is connected to a network See Generic Attribute Registration Protocol on See Garp Multicast Registration Protocol on Internet Control Message Protocol See Local Area Network on Megabits per second See Multi-Protocol Label Switching on See Multiplexing on See Open Systems Interconnection on Set of rules for communication between devices on a network See Routing Information Protocol on See Resource Reservation Setup Protocol on See Simple Network Management Protocol on See TLS on See Virtual Local Area Network on Wins