Loading ...
Loading ...
Loading ...
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
429
44-2 switchport port-security aging
This command is used to set the aging time for all secure addresses on an interface. In this way, you can make the
switch automatically add or delete the secure addresses on the interface. Use the no form of the command to disable
port security aging or to set the parameters to their default states.
switchport port-security aging {static | time <min 1–1440> | type {absolute | inactivity}}
no switchport port-security aging {static | time | type}
Parameters
Example
This example shows how to disable port security on the interface tenGigabitEthernet
1/0/1.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1
DXS-3600-32S(config-if)#switchport mode access
DXS-3600-32S(config-if)#no switchport port-security
DXS-3600-32S(config-if)#
Example
This example shows how to set violation handling to the default mode for interface
tenGigabitEthernet 1/0/1.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1
DXS-3600-32S(config-if)#switchport mode access
DXS-3600-32S(config-if)#no switchport port-security violation
DXS-3600-32S(config-if)#
static Specifies to apply the aging time to manually configured secure addresses, sticky
secure addresses and automatically learned addresses. Otherwise, apply it to only
the automatically learned secure addresses.
time Specifies the aging time for the secure address on this port. Its range is from 1 to
1440 in minutes. The aging time is the absolute time, which means that an address
will be deleted automatically after the time specified expires after the address
becomes the secure address of the port.
type Specifies to set the aging type.
absolute Specifies to set absolute aging type. All the secure addresses on this port age out
exactly after the time specified and removed from the secure address list.
inactivity Specifies to set the inactivity aging type. The secure addresses on this port age out
only if there is no data traffic from the secure source address for the specified time
period. If the aging time of mac address table is 0, when there is data traffic, the
inactivity aging time is not effective for the secure addresses.
Default
The port security aging feature is disabled.
The default time is 0 minutes.
The default aging type is absolute.
Command Mode
Interface Configuration Mode.
Command Default Level
Level: 15
Usage Guideline
To disable port security aging for all secure addresses on a port, use no switchport
port-security aging time interface configuration command. To disable aging for
only statically configured secure addresses and sticky secure addresses, use the no
switchport port-security aging static interface configuration command. To recover
the type of aging time, use the no switchport port-security aging type interface
configuration command.
Loading ...
Loading ...
Loading ...