HP Cisco Nexus 5000 Cisco MDS 9000 Family CLI Configuration Guide - Release 4. - Page 968

Activating Port Security Chapter 39 Configuring Port Security Send documentation comments to [email protected] Step 2 Command Purpose switch(config)# port-security activate vsan 1 Activates the port security database for the specified VSAN, and automatically enables auto-learning. switch(config)# port-security activate vsan 1 no-auto-learn Activates the port security database for the specified VSAN, and disables auto-learning. switch(config)# no port-security activate vsan 1 Deactivates the port security database for the specified VSAN, and automatically disables auto-learning. Note : If required, you can disable auto-learning (see the "Disabling Auto-learning" section on page 39-8). Database Activation Rejection Database activation is rejected in the following cases: • Missing or conflicting entries exist in the configuration database but not in the active database. • The auto-learning feature was enabled before the activation. To reactivate a database in this state, disable auto-learning. • The exact security is not configured for each PortChannel member. • The configured database is empty but the active database is not. If the database activation is rejected due to one or more conflicts listed in the previous section, you may decide to proceed by forcing the port security activation. Forcing Port Security Activation If the port security activation request is rejected, you can force the activation. Note An activation using the force option can log out existing devices if they violate the active database. You can view missing or conflicting entries using the port-security database diff active vsan command in EXEC mode. To forcefully activate the port security database, follow these steps: Step 1 Step 2 Command switch# config t switch(config)# switch(config)# port-security activate vsan 1 force Purpose Enters configuration mode. Forces the VSAN 1 port security database to activate despite conflicts. 39-6 Cisco MDS 9000 Family CLI Configuration Guide OL-18084-01, Cisco MDS NX-OS Release 4.x