HP Cisco MDS 9134 Cisco MDS 9000 Family Command Reference Guide - Release 4.x - Page 853

Chapter 18 P Commands port-security Send documentation comments to [email protected] Command History Release 1.2(1) 2.0(x) Modification This command was introduced. Add the optional swwn keyword to the subcommands under the port-security database vsan command. Usage Guidelines When you activate the port security feature, the auto-learn option is also automatically enabled. You can choose to activate the port-security feature and disable autolearn using the port-security activate vsan number no-auto-learn command. In this case, you need to manually populate the port security database by individually securing each port. If the auto-learn option is enabled on a VSAN, you cannot activate the database for that VSAN without the force option. Examples The following example activates the port security database for the specified VSAN, and automatically enables autolearning. switch# config terminal switch(config)# port-security activate vsan 1 The following example deactivates the port security database for the specified VSAN, and automatically disables auto-learn. switch# config terminal switch(config)# no port-security activate vsan 1 The following example disables the auto-learn feature for the port security database in VSAN 1. switch# config terminal switch(config)# port-security activate vsan 1 no-auto-learn The following example enables auto-learning so the switch can learn about any device that is allowed to access VSAN 1. These devices are logged in the port security active database. switch# config terminal switch(config)# port-security auto-learn vsan 1 The following example disables auto-learning and stops the switch from learning about new devices accessing the switch. Enforces the database contents based on the devices learnt up to this point. switch# config terminal switch(config)# no port-security auto-learn vsan 1 The following example enters the port security database mode for the specified VSAN. switch# config terminal switch(config)# port-security database vsan 1 switch(config-port-security)# The following example configures any WWN to login through the specified interfaces. switch(config-port-security)# any-wwn interface fc1/1 - fc1/8 The following example configures the specified pWWN to only log in through the specified fWWN. switch(config-port-security)# pwwn 20:11:00:33:11:00:2a:4a fwwn 20:81:00:44:22:00:4a:9e The following example deletes the specified pWWN configured in the previous step. OL-18089-01, Cisco MDS NX-OS Release 4.x Cisco MDS 9000 Family Command Reference 18-21