Instruction Manual
Table Of Contents
- Contents
- Tables
- Preface
- Section I
- Basic Operations
- Chapter 1
- Starting a Command Line Management Session
- Chapter 2
- Basic Command Line Commands
- Chapter 3
- Basic Switch Commands
- DISABLE DHCPBOOTP
- DISABLE IP REMOTEASSIGN
- DISABLE TELNET
- ENABLE BOOTP
- ENABLE DHCP
- ENABLE IP REMOTEASSIGN
- ENABLE TELNET
- FORMAT DEVICE
- PING
- PURGE IP
- RESET SWITCH
- RESET SYSTEM
- RESTART REBOOT
- RESTART SWITCH
- SET ASYN
- SET IP INTERFACE
- SET IP ROUTE
- SET PASSWORD MANAGER
- SET PASSWORD OPERATOR
- SET SWITCH CONSOLETIMER
- SET SYSTEM
- SET SYSTEM FANCONTROL
- SET USER PASSWORD
- SHOW ASYN
- SHOW CONFIG DYNAMIC
- SHOW CONFIG INFO
- SHOW DHCPBOOTP
- SHOW IP INTERFACE
- SHOW IP ROUTE
- SHOW SWITCH
- SHOW SYSTEM
- SHOW SYSTEM FANCONTROL
- Chapter 4
- Enhanced Stacking Commands
- Chapter 5
- Simple Network Time Protocol (SNTP) Commands
- Chapter 6
- SNMPv2 and SNMPv2c Commands
- Chapter 7
- Port Parameter Commands
- ACTIVATE SWITCH PORT
- DISABLE INTERFACE LINKTRAP
- DISABLE SWITCH PORT
- DISABLE SWITCH PORT FLOW
- ENABLE INTERFACE LINKTRAP
- ENABLE SWITCH PORT
- ENABLE SWITCH PORT FLOW
- PURGE SWITCH PORT
- RESET SWITCH PORT
- RESET SWITCH PORT COUNTER
- SET SWITCH PORT
- SET SWITCH PORT RATELIMITING
- SHOW INTERFACE
- SHOW SWITCH COUNTER
- SHOW SWITCH PORT
- SHOW SWITCH PORT COUNTER
- Chapter 8
- MAC Address Table Commands
- Chapter 9
- Static Port Trunking Commands
- Chapter 10
- LACP Port Trunking Commands
- Chapter 11
- Port Mirroring Commands
- Section II
- Advanced Operations
- Chapter 12
- File System Commands
- Chapter 13
- File Download and Upload Commands
- Chapter 14
- Event Log and Syslog Server Commands
- Chapter 15
- Classifier Commands
- Chapter 16
- Access Control List Commands
- Chapter 17
- Quality of Service (QoS) Commands
- ADD QOS FLOWGROUP
- ADD QOS POLICY
- ADD QOS TRAFFICCLASS
- CREATE QOS FLOWGROUP
- CREATE QOS POLICY
- CREATE QOS TRAFFICCLASS
- DELETE QOS FLOWGROUP
- DELETE QOS POLICY
- DELETE QOS TRAFFICCLASS
- DESTROY QOS FLOWGROUP
- DESTROY QOS POLICY
- DESTROY QOS TRAFFICCLASS
- PURGE QOS
- SET QOS FLOWGROUP
- SET QOS POLICY
- SET QOS PORT
- SET QOS TRAFFICCLASS
- SHOW QOS FLOWGROUP
- SHOW QOS POLICY
- SHOW QOS TRAFFICCLASS
- Chapter 18
- Class of Service (CoS) Commands
- Chapter 19
- IGMP Snooping Commands
- Chapter 20
- Denial of Service Defense Commands
- Chapter 21
- Power Over Ethernet Commands
- Chapter 22
- Networking Stack
- Section III
- SNMPv3
- Chapter 23
- SNMPv3 Commands
- ADD SNMPV3 USER
- CLEAR SNMPV3 ACCESS
- CLEAR SNMPV3 COMMUNITY
- CLEAR SNMPV3 NOTIFY
- CLEAR SNMPV3 TARGETADDR
- CLEAR SNMPV3 VIEW
- CREATE SNMPV3 ACCESS
- CREATE SNMPV3 COMMUNITY
- CREATE SNMPV3 GROUP
- CREATE SNMPV3 NOTIFY
- CREATE SNMPV3 TARGETADDR
- CREATE SNMPV3 TARGETPARAMS
- CREATE SNMPV3 VIEW
- DELETE SNMPV3 USER
- DESTROY SNMPv3 ACCESS
- DESTROY SNMPv3 COMMUNITY
- DESTROY SNMPv3 GROUP
- DESTROY SNMPv3 NOTIFY
- DESTROY SNMPv3 TARGETADDR
- DESTROY SNMPv3 TARGETPARMS
- DESTROY SNMPV3 VIEW
- PURGE SNMPV3 ACCESS
- PURGE SNMPV3 COMMUNITY
- PURGE SNMPV3 NOTIFY
- PURGE SNMPV3 TARGETADDR
- PURGE SNMPV3 VIEW
- SET SNMPV3 ACCESS
- SET SNMPV3 COMMUNITY
- SET SNMPV3 GROUP
- SET SNMPV3 NOTIFY
- SET SNMPV3 TARGETADDR
- SET SNMPV3 TARGETPARAMS
- SET SNMPV3 USER
- SET SNMPV3 VIEW
- SHOW SNMPV3 ACCESS
- SHOW SNMPV3 COMMUNITY
- SHOW SNMPv3 GROUP
- SHOW SNMPV3 NOTIFY
- SHOW SNMPV3 TARGETADDR
- SHOW SNMPV3 TARGETPARAMS
- SHOW SNMPV3 USER
- SHOW SNMPV3 VIEW
- Section IV
- Spanning Tree Protocols
- Chapter 24
- Spanning Tree Protocol Commands
- Chapter 25
- Rapid Spanning Tree Protocol Commands
- Chapter 26
- Multiple Spanning Tree Protocol Commands
- Section V
- Virtual LANs
- Chapter 27
- Port-based, Tagged, and Multiple Mode VLAN Commands
- Chapter 28
- GARP VLAN Registration Protocol Commands
- Chapter 29
- Protected Ports VLAN Commands
- Section VI
- Port Security
- Chapter 30
- MAC Address-based Port Security Commands
- Chapter 31
- 802.1x Port-based Network Access Control Commands
- Section VII
- Management Security
- Chapter 32
- Web Server Commands
- Chapter 33
- Encryption Key Commands
- Chapter 34
- Public Key Infrastructure (PKI) Certificate Commands
- Chapter 35
- Secure Sockets Layer (SSL) Commands
- Chapter 36
- Secure Shell (SSH) Commands
- Chapter 37
- TACACS+ and RADIUS Commands
- Chapter 38
- Management ACL Commands
- Index
AT-S62 Management Software Command Line Interface User’s Guide
Section VI: Port Security 549
The management software displays a confirmation prompt whenever you
perform this command. Responding with Y for yes completes your
command, while N for no cancels the command.
Examples
The following command sets the security level for port 8 to the Limited
mode and specifies a limit of 5 dynamic MAC addresses. Because no
intrusion action is specified, the discard action is assigned by default:
set switch port=8 securitymode=limited learn=5
The following command sets the security level for ports 9 and 12 to the
Limited mode and specifies a limit of 15 dynamic MAC addresses per port.
The disable intrusion action is specified:
set switch port=9,12 securitymode=limited learn=15
intrusionaction=disable participate=yes
In the above example, the Participate option is required to activate the
disable intrusion action. Without it, the port would discard invalid ingress
frames but would not send an SNMP trap and disable the port.
The following command changes the maximum number of learned MAC
addresses to 150 on ports 15 and 16. The command assumes that the
ports have already be set to the Limited security mode:
set switch port=15-16 learn=150
The following command sets the security level to Locked for ports 2, 6, and
18:
set switch port=2,6,18 securitymode=locked
The Limit and Participate options are not included with the above
command because they do not apply to the Locked mode, nor to the
Secured mode.
The following command sets the security level to Secured for ports 12 to
24:
set switch port=12-24 securitymode=secured
The following command returns ports 8 to 11 to the automatic security
level, which disables port security:
set switch port=8-11 securitymode=automatic