HP Cisco Nexus 5000 Cisco Nexus 5000 Series Switch CLI Software Configuration - Page 685

Configuring Port Security Port Security Activation Procedure Step 1 Step 2 Step 3 Command or Action switch# configuration terminal switch(config)# port-security enable switch(config)# no port-security enable Purpose Enters configuration mode. Enables port security on that switch. Disables (default) port security on that switch. Port Security Activation Activating Port Security To activate port security, perform this task: Procedure Step 1 Step 2 Step 3 Step 4 Command or Action switch# configuration terminal Purpose Enters configuration mode. switch(config)# port-security activate Activates the port security database for the specified vsan vsan-id VSAN, and automatically enables auto-learning. switch(config)# port-security activate Activates the port security database for the specified vsan vsan-id no-auto-learn VSAN, and disables auto-learning. switch(config)# no port-security activate Deactivates the port security database for the vsan vsan-id specified VSAN, and automatically disables auto-learning. Database Activation Rejection Database activation is rejected in the following cases: • Missing or conflicting entries exist in the configuration database but not in the active database. • The auto-learning feature was enabled before the activation. To reactivate a database in this state, disable auto-learning. • The exact security is not configured for each port channel member. • The configured database is empty but the active database is not. If the database activation is rejected due to one or more conflicts listed in the previous section, you may decide to proceed by forcing the port security activation. Forcing Port Security Activation If the port security activation request is rejected, you can force the activation. OL-16597-01 Cisco Nexus 5000 Series Switch CLI Software Configuration Guide 639