Programmable Internetworking & Communication Operating System Docs ... Click Spaces -> Space Directory to see docs for all releases ...
Page tree
Skip to end of metadata
Go to start of metadata

The set interface gigabit-ethernet port-security violation command configures a protective action for the system to perform when the number of learned MAC addresses exceeds the MAC limit.


Command Syntax
set interface gigabit-ethernet <interface-name> port-security violation <protect | restrict | shutdown | shutdown-temp>


Parameter

Parameter

Description

gigabit-ethernet <interface-name>

Specifies the physical interface name. For example, te-1/1/49, ge-1/1/1.

violation <protect | restrict | shutdown | shutdown-temp>

Specifies the protective action. The value could be protect, restrict, shutdown or shutdown-temp.

  • protect: Discards packets with new source MAC addresses when the number of learned MAC addresses exceeds the limit.
  • restrict: Discards packets with new source MAC addresses and generates a warning syslog message when the number of learned MAC addresses exceeds the limit.
  • shutdown: Shuts the interface down, sets the interface status to error-disabled and generates a warning syslog message when the number of learned MAC addresses exceeds the limit. User can recover the port with the run clear port-security port-error command.
  • shutdown-temp: Shuts the interface down temporarily, sets the interface status to error-discard and generates a warning syslog message when the number of learned MAC addresses exceeds the limit. After 20 seconds (default), the interface comes up. The set interface ethernet-switching-options port-error-discard timeout command configures the port recovery interval when the port security violation mode is configured to shutdown-temp.

The default value is protect.


Usage Guidelines

If it reaches the MAC limit and you are trying to configure a static secure MAC address, your configuration is rejected and an error message is displayed. If it reaches the MAC limit and a new dynamic secure MAC address is added, a violation action is triggered.


Example
• Configure the protective action for the system to perform when the number of learned MAC addresses exceeds the limit to shutdown.

admin@XorPlus# set interface gigabit-ethernet ge-1/1/1 port-security violation shutdown
admin@XorPlus# commit
  • No labels