The set interface gigabit-ethernet port-security violation command configures a protective action for the system to perform when the number of learned MAC addresses exceeds the MAC limit.
set interface gigabit-ethernet <interface-name> port-security violation <protect | restrict | shutdown | shutdown-temp>
Specifies the physical interface name. For example, te-1/1/49, ge-1/1/1.
violation <protect | restrict | shutdown | shutdown-temp>
Specifies the protective action. The value could be protect, restrict, shutdown or shutdown-temp.
The default value is protect.
If it reaches the MAC limit and you are trying to configure a static secure MAC address, your configuration is rejected and an error message is displayed. If it reaches the MAC limit and a new dynamic secure MAC address is added, a violation action is triggered.
• Configure the protective action for the system to perform when the number of learned MAC addresses exceeds the limit to shutdown.