Siemens S323, S223 Port Security Aging, This is an example of configuring port security on port

Models: S323 S223

1 381
Download 381 pages 49.11 Kb
Page 160
Image 160

UMN:CLI

User Manual

 

SURPASS hiD 6615 S223/S323 R1.5

 

 

 

To display the configuration of port security, use the following command.

Command

Mode

Description

 

 

 

show port security [PORTS]

Bridge

Shows port security on the port.

 

 

 

This is an example of configuring port security on port 7.

SWITCH(config)# bridge SWITCH(bridge)# port security 7 SWITCH(bridge)# port security 7 maximum 10000 SWITCH(bridge)# port security 7 violation protect

SWITCH(bridge)# port security 7 mac-address00:02:a5:74:9b:17 vlan 1 SWITCH(bridge)# show port security 7

========================================================================

port security violation aging type static maximum current

========================================================================

7 enabled protect - absolute - 10000 1

========================================================================

port vlan secure-mac-addr status in use

========================================================================

7

1

00:02:a5:74:9b:17

static

-

SWITCH(bridge)# no

port

security 7

maximum

 

SWITCH(bridge)#

no

port

security 7

violation

 

SWITCH(bridge)#

show port security

7

 

========================================================================

port security violation aging type static maximum current

========================================================================

7 enabled shutdown - absolute - 1 0

========================================================================

port vlan secure-mac-addr status in use

========================================================================

SWITCH(bridge)#

7.10.2Port Security Aging

Port security aging is to set the aging time for all secure addresses on a port. Use this feature to remove and add PCs on a secure port without manually deleting the existing secure MAC addresses while still limiting the number of secure addresses on a port.

Command

 

Mode

Description

 

 

 

 

port security PORTS

aging

 

Enables aging for configured secure addresses.

static

 

 

 

 

 

 

 

 

port security PORTS aging time

Bridge

Configures aging time in minutes for the port. All the

<1-1440>

 

secure addresses age out exactly after the time.

 

 

 

 

 

port security PORTS aging type

 

Configures aging type.

{absolute inactivity}

 

 

 

 

 

 

 

 

 

absolute all the secure addresses on this port age out exactly after the time (min- utes) specified lapses and are removed from the secure address list.

inactivity the secure addresses on this port age out only if there is no data traffic from the secure source addresses for the specified time period.

160

A50010-Y3-C150-2-7619

Page 160
Image 160
Siemens S323, S223 Port Security Aging, This is an example of configuring port security on port, Maximum, Violation