D-Link DGS-6600-48T Product Manual - Page 878

DGS-6604 m switchport port-security switchport port-security Use this command to configure port security setting of a specified port interface to restrict the allowable number of users that can gain access to the port. Use the no form of the command to disable the port security, or delete userdefined secure MAC address. switchport port-security [maximum VALUE | violation {protect | shutdown} | mode {permanent | delete-on-timeout} ] no switchport port-security Syntax Description maximum VALUE (Optional) Specifies the maximum allowable number of secure MAC addresses (users) The range for the VALUE is project dependent. violation {protect | shutdown} (Optional) Specifies the action to be taken when a security violation is detected: protect: Drops all the packets from the insecure hosts at the port-security process level but does not increment the security-violation count. mode { permanent | delete-on-timeout } shutdown: Shutdown the port if there is a security violation. Specifies the port security mode: The different option keywords are described below: permanent: This mode defines that all learnt MAC addresses will not be purged unless a user deletes those entries manually. delete-on-timeout: Setting this mode defines that all learnt MAC addresses will be purged when an entry is aged-out or a user deletes these entries manually. Default Command Mode Usage Guideline Disabled maximum VALUE: 1 mode: delete-on-timeout violation: shutdown Interface configuration at Privilege level 15 Global configuration with Privilege level 15 (only for a no port-security command). The valid interface for this configuration is a physical port. The VLAN does not need to exist for the command to succeed. When the mode is permanent, the learned entries will be stored automatically and restored after a reboot. CLI Reference Guide 868