Alcatel-Lucent 6600 Switch User Manual


 
Configuring the Number of MAC Addresses Allowed Configuring Learned Port Security
page 3-8 OmniSwitch 6600 Family Network Configuration Guide April 2006
Configuring the Number of MAC Addresses
Allowed
By default, one MAC address is allowed on an LPS port. To change this number, enter port-security
followed by the port’s slot/port designation then maximum followed by a number between 1 and 100. For
example, the following command sets the maximum number of MAC addresses learned on port 10 of slot
6 to 75:
-> port-security 6/10 maximum 75
To specify a maximum number of MAC addresses allowed for multiple ports, specify a range of ports or
multiple slots. For example:
-> port-security 1/10-15 maximum 10
-> port-security 2/1-5 4/2-8 5/10-14 maximum 25
Not that configured MAC addresses count towards the maximum number allowed. For example, if there
are 10 configured authorized MAC addresses for an LPS port and the maximum number of addresses
allowed is set to 15, then only 5 dynamically learned MAC address are allowed on this port.
If the maximum number of MAC addresses allowed is reached before the switch LPS time limit expires,
then all source learning of dynamic and configured MAC addresses is stopped on the LPS port.
Configuring Authorized MAC Addresses
To configure a single source MAC address entry in the LPS table, enter port-security followed by the
port’s slot/port designation, then mac followed by a valid MAC address. For example, the following
command configures a MAC address for port 4 on slot 6:
-> port-security 6/4 mac 00:20:da:9f:58:0c
To configure a single source MAC address entry for multiple ports, specify a range of ports or multiple
slots. For example:
-> port-security 4/1-5 mac 00:20:95:41:2e:3f
-> port-security 5/12-20 6/10-15 mac 00:20:da:cf:59:4a
Use the no form of this command to clear configured and/or dynamic MAC address entries from the LPS
table. For example, the following command removes a MAC address entry for port 12 of slot 4 from the
LPS table:
-> port-security 4/12 no mac 00:20:95:00:fa:5c
Note that when a MAC address is cleared from the LPS table, it is automatically cleared from the source
learning MAC address table at the same time.