HP 6120G/XG HP ProCurve Series 6120 Blade Switches Access Security Guide - Page 420
Retention of Static Addresses, Learned Addresses., Assigned/Authorized Addresses.
View all HP 6120G/XG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 420 highlights
Configuring and Monitoring Port Security Port Security Syntax: port-security (Continued) clear-intrusion-flag Clears the intrusion flag for a specific port. (See "Reading Intrusion Alerts and Resetting Alert Flags" on page 11-30.) no port-security mac-address [ ] Removes the specified learned MAC address(es) from the specified port. Retention of Static Addresses Static MAC addresses do not age-out. MAC addresses learned by using learnmode continuous or learn-mode limited-continuous age out according to the currently configured MAC age time. (For information on the mac-age-time command, refer to the chapter titled "Interface Access and System Information" in the Management and Configuration Guide for your switch. Learned Addresses. In the following two cases, a port in Static learn mode retains a learned MAC address even if you later reboot the switch or disable port security for that port: ■ The port learns a MAC address after you configure the port for Static learn mode in both the startup-config file and the running-config file (by executing the write memory command). ■ The port learns a MAC address after you configure the port for Static learn mode in only the running-config file and, after the address is learned, you execute write memory to configure the startup-config file to match the running-config file. To remove an address learned using either of the preceding methods, do one of the following: ■ Delete the address by using no port-security < port-number > mac-address < mac-addr >. ■ Download a configuration file that does not include the unwanted MAC address assignment. ■ Reset the switch to its factory-default configuration. Assigned/Authorized Addresses. : If you manually assign a MAC address (using port-security address-list ) and then execute write memory, the assigned MAC address remains in memory until you do one of the following: 11-17