HP Cisco Nexus 5000 Cisco Nexus 5000 Series Switch CLI Software Configuration - Page 686

Database Reactivation Configuring Port Security Note If you force the activation, existing devices are logged out if they violate the active database. You can view missing or conflicting entries using the port-security database diff active vsan command in EXEC mode. To forcefully activate the port security database, perform this task: Procedure Step 1 Step 2 Command or Action switch# configuration terminal Purpose Enters configuration mode. switch(config)# port-security activate vsan Forces the port security database to activate for vsan-id force the specified VSAN even if conflicts occur. Database Reactivation Tip If auto-learning is enabled, you cannot activate the database without the force option until you disable auto-learning. To reactivate the port security database, perform this task: Procedure Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Command or Action switch# configuration terminal Purpose Enters configuration mode. switch(config)# no port-security auto-learn vsan vsan-id Disables auto-learning and stops the switch from learning about new devices accessing the switch. Enforces the database contents based on the devices learned up to this point. switch(config)# exit switch# port-security database copy vsan vsan-id switch# configuration terminal Copies from the active to the configured database. Re-enters configuration mode. switch(config)# port-security activate Activates the port security database for the vsan vsan-id specified VSAN, and automatically enables auto-learning. Cisco Nexus 5000 Series Switch CLI Software Configuration Guide 640 OL-16597-01