Specifications

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
15
PORT SECURITY COMMANDS
The port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the
following table.
Command Parameters
config
port_security
ports [ <portlist>| all ] {admin_state [enable |
disable]max_learning_addr<max_lock_no 0-10>|lock_address_mode [permanent|
deleteontimeout|deleteonreset]}
delete
port_security_entry
vlan_name <vlan_name 32> mac_address <macaddr> port <port>
clear
port_security_entry
port <portlist>
show port_security {ports <portlist>}
Each command is listed, in detail, in the following sections.
config port_security
Purpose
Used to configure port security.
Syntax ports [ <portlist>| all ] {admin_state [enable |
disable]max_learning_addr<max_lock_no 0-10>|lock_address_mode [permanent|
deleteontimeout|deleteonreset]}
Description
This command allows you to configure port security, including admin state, maximum
learning address, and lock address mode.
Parameters
<portlist> − Specifies a range of ports to be configured.
all − Instructs all ports to be configured.
admin_state − Allows the port security to be enabled or disabled for the ports specified in the
port list.
max_learning_addr − The maximum number of addresses that can be learned.
lock_address_mode − Indicates the mode of locking address. Three choices are offered:
Permanent − Indicates the locked addresses will not age out, even when the system is
rebooted. These locked addresses can be deleted when the system is reset.
DeleteOnTimeout − Indicates the locked addresses can be aged out after the aging timer
expires.
DeleteOnReset − Indicates never age out the locked addresses unless the system is
rebooted or reset in order to prevent port movement or intrusion.
71