HP 6120XG HP ProCurve Series 6120 Blade Switches Access Security Guide - Page 425
MAC Lockdown, Example of Port A1 After Removing One MAC Address
View all HP 6120XG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 425 highlights
Configuring and Monitoring Port Security MAC Lockdown The following command serves this purpose by removing 0c0090-123456 and reducing the Address Limit to 1: ProCurve(config)# port-security a1 address-limit 1 ProCurve(config)# no port-security a1 mac-address 0c0090123456 The above command sequence results in the following configuration for port A1: Note 11-22 Figure 11-9. Example of Port A1 After Removing One MAC Address MAC Lockdown MAC Lockdown, also known as "static addressing," is the permanent assignment of a given MAC address (and VLAN, or Virtual Local Area Network) to a specific port on the switch. MAC Lockdown is used to prevent station movement and MAC address hijacking. It also controls address learning on the switch. When configured, the MAC Address can only be used on the assigned port and the client device will only be allowed on the assigned VLAN. Port security and MAC Lockdown are mutually exclusive on a given port. You can either use port security or MAC Lockdown, but never both at the same time on the same port. Syntax: [no] static-mac < mac-addr > vlan < vid > interface < port-number >