D-Link DGS-3100 Switch User Manual


 
DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
15
1
config port_security
Purpose
To configure port security settings.
Syntax config port_security [<portlist> | all] {admin_state [enable |
disable] | max_learning_addr <int 1-64> | lock_address_mode
[Permanent | DeleteOnTimeout | DeleteOnReset] | trap <interval
1-1000000>}
Description
The config port_security command configures port security
settings for specific ports.
Parameters
portlist – A port or range of ports to be configured.
all – Configures port security for all ports on the Switch.
admin_state [enable | disable] – Enables or disables port security for
the listed ports.
max_learning_addr <int 0-64> -
1-64 Limits the number of MAC addresses dynamically listed in the
FDB for the ports.
lock_address_mode – Defines the TBD and contains the following
options:
Permenant – Learns up to the maximum number of dynamic
addresses allowed on the port. The learned addresses are
not aged out or relearned on other port for as long as the
port is locked.
DeleteOnReset – Deletes the current dynamic MAC
addresses associated with the port. Learn up to the
maximum addresses allowed on the port (this number is
also configurable). Aging is disabled; the addresses are
deleted on reset
DeleteOnTimeout – Deletes the current dynamic MAC
addresses associated with the port. The port learns up to
the maximum addresses allowed on the port. Re-learned
MAC addresses and address aging out are also enabled.
The MAC addresses are deleted when the device is reset
and on when the address is aged out.
trap <interval 1-1000000> - Sends SNMP traps and defines the
minimum amount of time in seconds between consecutive traps.
Restrictions
Only administrator or operator-level users can issue this command
Example usage:
To configure port security:
DGS3100# config port_security 1-5 admin_state enable
max_learning_addr 5 lock_address_mode deleteontimeout trap 50
Success.
DGS3100#