跳至主要內容
登出

歡迎來到 Dell

我的帳戶
  • 簡單快速地下訂單
  • 檢視訂單及追蹤商品運送狀態
  • 建立並存取您的產品清單
  • 使用「公司管理」來管理您的 Dell EMC 網站、產品和產品層級連絡人。
登入 建立帳戶 Premier 登入 合作夥伴計畫登入
與我們連絡

您的 Dell.com 購物車

文章編號: 000121440

How to configure MAC based port security on Dell N2000, N3000, and N4000 series switches.

摘要: Dell EMC Networking N-Series configuring MAC based port security on switches.

本文可能採用自動翻譯。如果您對翻譯品質有任何寶貴意見，請使用此頁面底部的表單告訴我們，謝謝。

文章內容

說明

Article Summary: This article shows how to configure MAC based port security on Dell N Series switches



Table of Contents
 

 
  1. How to enable MAC based port security on the N Series Switch
  2. How to statically add MAC address to an Interface
  3. How to configure a maximum amount of allowed MAC addresses
  4. How to configure the maximum limit of dynamically learned mac addresses on a specific interface
 

How to enable MAC based port security on the N series switch

   
Command Parameters
console>enable Enter enable Privilege Exec mode.
console#config Enter configuration mode.
console(config)#switchport port-security Enable port security globally on the switch.  
console(config)#interface gi1/0/5 Enter specific interface that needs port security.
console(config-if-gi1/0/5)#switchport port-security Enable port security on the interface level.
   
 
HOW10392_en_US__1icon Note: When port security is enabled on an interface, all dynamic MAC addresses learned on that port are removed, and the port re-learns any MAC addresses on that interface.
 


How to statically add MAC addresses to an interface

   

 

Command Parameters
console#config Enter configuration mode.
console(config)# mac address-table static c2f3.220a.12f4 vlan 1 interface gi1/0/5 This adds the MAC address c2f3.220a.12f4 to the MAC table for interface gi1/0/5.
console(config)#no mac address-table static c2f3.220a.12f4 vlan 1 interface gi1/0/5 Add "no" to the beginning of the command to remove the MAC address.

 

How to configure a maximum amount of allowed Static MAC addresses

   
Command Parameters
console#config Enter configuration mode.
console(config)#interface gi1/0/5 Enter specific interface that needs port security.
console(config-if-Gi1/0/5)#switchport port-security maximum 3 Sets the max limit of static MAC addresses to 3.  Range is <0-100>  Default is 100.
   
 
HOW10392_en_US__1icon Note: To clear dynamically learned MAC addresses from a port, you must perform the following example command.
console#clear mac address-table dynamic interface gi1/0/5
   
 
HOW10392_en_US__1icon Note: By default when port security violations occur, the port discards any frames on that interface originating from violating MAC addresses. The port is not shut down.  If you are wanting the port to actually shut down you will need to add this command to the specific interfaces that require that feature:  
(config-if-Gi1/0/5)#switchport port-security violation shutdown : 
   
 


How to configure the maximum limit of dynamically learned mac addresses on a specific interface

 

 
Command Parameters
console#config Enter configuration mode.
console(config)#interface gi1/0/5 Enter specific interface that needs port security.
console(config-if-gi1/0/5)#switchport port-security dynamic 0 This example uses 0 as you would normally want the port not to learn macs dynamically.  Range is <0-600>   Default is 100.

 

 

文章屬性

受影響的產品

PowerSwitch N2000 Series, PowerSwitch N3000 Series, PowerSwitch N4000 Series

上次發佈日期

21 2月 2021

版本

3

文章類型

How To

返回頁首