Dell N3200-ON Networking N-Series Switches CLI Reference Guide version 6.8.0 - Page 330

- shutdown-Protect the interface or VLAN by error disabling the interface and issuing a log message and a trap. If the MAC address limit is exceeded for a VLAN, the ports participating in the VLAN are shut down. Default Configuration By default, port security is not enabled and VLAN port security is not enabled. The default behavior is to drop unknown packets when the limit is exceeded. There is no default action. Notifications are not sent by default. No static or sticky MAC addresses are learned or configured by default. The default number of dynamic MAC addresses per interface is 600 (300 for the N1500 Series switches). The default number of static MAC addresses per interface is 100. Both limits are subject to the total MAC address limit supported by the system. Command Mode Interface (Ethernet and port-channel) Configuration mode. Interface Range mode - Only when using switchport port-security syntax. User Guidelines Port security allows the network administrator to secure interfaces or VLANs by specifying (or learning) the allowed MAC addresses or a limit on a given port or VLAN. Packets with a matching source MAC address are forwarded normally. All other host packets are discarded. Port security operates on access, trunk and general mode ports. Two methods are used to implement port security: dynamic locking and static locking. Static locking supports an optional sticky mode. Dynamic locking implements a 'first arrival' mechanism for MAC locking. The administrator specifies how many dynamic addresses may be learned on the secure port. If the limit has not been reached, then a packet with an unknown source MAC address is learned and forwarded normally. If the MAC address limit has been reached, the packet is discarded, the MAC address is not learned, and a violation is raised. The administrator can disable dynamic Layer 2 Switching Commands 330