Loading ...
Loading ...
Loading ...
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
431
Command Default Level
Level 15 for creating configured addresses and sticky addresses and enable sticky
learning and level 8 for configuring the maximum.
Usage Guideline
The first command is used to create secure MAC address, sticky MAC address and
set the maximum of addresses in the secure address table. All configured secure
MAC address and sticky secure MAC addresses can be added to the running
configuration file.
When you configure the MAC address and sticky MAC addresses manually, if the
number of secure addresses which have been learned has hit the maximum number
of the interface, the command will be rejected and the error message will prompt.
When you enter a maximum value for an interface, if the new value is greater than
the number of addresses which have been learned, the new value will override the
previously configured value. If the new value is less than the number of addresses
which have been learned, the command will be rejected and the error message will
prompt. To enable sticky learning, use switchport port-security mac-address
sticky interface configuration command. When sticky learning is enabled, the
interface will convert all the dynamic secure MAC addresses, including those that
were dynamically learned before sticky learning was enabled, to sticky secure MAC
addresses. If the state of port security is disabled, and enables sticky learning, an
error message will prompt.
To create sticky MAC addresses, use switchport port-security mac-address
sticky mac-address interface configuration command. If the state of sticky learning
is disabled, and enters the switchport port-security mac-address sticky mac-
address interface configuration command, an error message will prompt, and the
sticky secure MAC address is not added to the running configuration file. If the port is
trunk port or hybrid port or dot1q-tunnel port, when no VLAN ID is specified, the MAC
address will be added to native VLAN, and otherwise, it will be added to the VLAN
specified, if the VLAN does not exist, an error message will prompt. And if the
interface is not the member of the VLAN, an error message will prompt.
To delete configured secure MAC address, use no switchport port-security mac-
address interface configuration command. And the configured secure MAC
addresses will be removed from address table and running configuration file.
To disable sticky learning, use no switchport port-security mac-address sticky
interface configuration command. And the sticky secure MAC addresses will be
removed from address table.
Example
This example shows how to configure a secure address 00d0.f800.073c on the
default VLAN for interface tenGigabitEthernet 1/0/1.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1
DXS-3600-32S(config-if)#switchport mode access
DXS-3600-32S(config-if)#switchport port-security
DXS-3600-32S(config-if)#switchport port-security mac-address 00d0.f800.073c
DXS-3600-32S(config-if)#
Example
This example shows how to configure a secure address 00d0.f800.073c on specified
VLAN 3 for interface tenGigabitEthernet 1/0/1.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1
DXS-3600-32S(config-if)#switchport mode trunk
DXS-3600-32S(config-if)#switchport port-security
DXS-3600-32S(config-if)#switchport port-security mac-address 00d0.f800.073c vlan 3
DXS-3600-32S(config-if)#
Loading ...
Loading ...
Loading ...