Reference Guide

If VLAN and port MAC locking are enabled, VLAN MAC locking will be given precedence over port MAC
locking.
Default Disabled
Format mac-address-table limit [action shutdown] [notification
trap ] [maximum-num] [vlan vlan-id]
Mode Global Config
Parameter Description
action shutdown After the MAC limit has been reached, the action will shut down the ports participating
in the VLAN.
notification
trap
Enables snmp-server enable traps violation on the ports participating in the
VLAN.
After the MAC limit has been reached, log message will be generated with the violation
MAC address details.
maximum-num
MAC limit to be configured.
vlan-id
VLAN on which the MAC limit is to be applied.
The following shows an example of the command.
(Extreme 220) (Config) #mac-address-table limit 3 vlan 10
(Extreme 220) (Config) #mac-address-table limit action shutdown 5 vlan 20
(Extreme 220) (Config) #mac-address-table limit notification trap 4 vlan 30
(Extreme 220) (Config) #mac-address-table limit action shutdown notification trap 6 vlan
100
no mac-address-table limit
This command disables VLAN port security on the specified VLAN.
Default
Disabled
Format no mac-address-table limit [action shutdown] [notification
trap ] [maximum-num] [vlan vlan-id]
Mode Global Config
show port-security
This command displays the port-security settings for the port(s). If you do not use a parameter, the
command displays the Port Security Administrative mode. Use the optional parameters to display the
settings on a specific interface or on all interfaces. Instead of unit/slot/port, lag lag-intf-num can be
used as an alternate way to specify the LAG interface. lag lag-intf-num can also be used to specify the
LAG interface where lag-intf-num is the LAG port number.
Format
show port-security [{unit/slot/port | all}]
Mode Privileged EXEC
Switching Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 457