Quick Reference Guide

PowerConnect B-Series TI24X Configuration Guide 975
53-1002269-02
Configuring the MAC port security feature
29
Setting the maximum number of secure MAC addresses
for an interface
When port security is enabled, an interface can store one secure MAC address. You can increase
the number of MAC addresses that can be stored to a maximum of 64, plus the total number of
global resources available.
For example, to configure interface 11 to have a maximum of 10 secure MAC addresses, enter the
following commands.
PowerConnect(config)# int e 11
PowerConnect(config-if-e10000-11)# port security
PowerConnect(config-port-security-e10000-11)# maximum 10
Syntax: maximum <number-of-addresses>
The <number-of-addresses> parameter can be set to a number from 0 – (64 + the total number of
global resources available). The total number of global resources is 2048 or 4096, depending on
flash memory size. Setting the parameter to 0 prevents any addresses from being learned. The
default is 1.
Setting the port security age timer
By default, learned MAC addresses stay secure indefinitely. You can optionally configure the device
to age out secure MAC addresses after a specified amount of time.
To set the port security age timer to 10 minutes on all interfaces, enter the following commands.
PowerConnect(config)# port security
PowerConnect(config-port-security)# age 10
To set the port security age timer to 10 minutes on a specific interface, enter the following
commands.
PowerConnect(config)# int e 11
PowerConnect(config-if-e10000-11)# port security
PowerConnect(config-port-security-e10000-11)# age 10
Syntax: [no] age <minutes>
The default is 0 (never age out secure MAC addresses).
Specifying secure MAC addresses
This section describes how to configure secure MAC addresses on tagged and untagged interfaces.
On an untagged interface
To specify a secure MAC address on an untagged interface, enter commands such as the following.
PowerConnect(config)# int e 11
PowerConnect(config-if-e10000-11)# port security
PowerConnect(config-port-security-e10000-11)# secure-mac-address 0050.DA18.747C
Syntax: [no] secure-mac-address <mac-address>