Enterasys D-Series Specifications Page 520

  • Download
  • Add to my manuals
  • Print
  • Page
    / 540
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 519
set maclock firstarrival
17-58 Security Configuration
Mode
Switchcommand,readwrite.
Example
ThisexampleshowshowtoresetthenumberofallowablestaticMACsonfe.2.3:
D2(rw)->clear maclock static fe.2.3
set maclock firstarrival
UsethiscommandtorestrictMAClockingonaporttoamaximumnumberofendstation
addressesfirstconnectedtothatport.
Syntax
set maclock firstarrival port-string value
Parameters
Defaults
None.
Mode
Switchcommand,readwrite.
Usage
Themaclockfirstarrivalcountresetswhenthelinkgoesdown.Thisfeatureisbeneficialifyou
haveroamingusers—thefirstarrivalcount willbereseteverytimeausermovestoanotherport,
butwillstillprotectagainstconnectingmultipledevicesonasingleportand willprotectagainst
MAC
addressspoofing.
Example
ThisexampleshowshowtorestrictMAClockingto6MACaddressesonfe.2.3:
D2(su)->set maclock firstarrival fe.2.3 6
portstring SpecifiestheportonwhichtolimitMAClocking.Foradetailed
descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed
intheCLIonpage 61.
value Specif iesthenumberoffirstarrivalendstationMACaddressestobe
allowedconnectionstotheport.Valid
valuesare0to600.
Note: Setting a port’s first arrival limit to 0 does not deny the first MAC address learned on the port
from passing traffic.
Page view 519
1 2 ... 515 516 517 518 519 520 521 522 523 524 525 ... 539 540

Comments to this Manuals

No comments