Filter
Top Products
DES-7200 Configuration Guide Chapter 5 Port-based Flow Control Configuration
5-5
Command Function
DES-7200(config-if)# show interfaces switchport
Show the configuration of the
switching port
You can use the command of show interfaces switchport to view the configuration of
protected port.
DES-7200# show interfaces gigabitethernet 0/3 switchport
Interface Switchport Mode Access Native Protected VLAN lists
--------- ---------- ---- ------ ----- -------- ----
GigabitEthernet 0/3 enabled Trunk 1 1 Enabled ALL
5.3 Port Security
5.3.1 Overview
Port security function allows the packets to enter the switch port by the source MAC
address, source MAC+IP address or source IP address. You can control the packets
by setting the specific MAC address statically, static IP+MAC binding or IP binding, or
dynamically learning limited MAC addresses. The port with port security enabled is
named as secure port. Only the packets with the source MAC address in the port
security address table, or IP+MAC binding configured, or IP binding configured, or the
learned MAC address, can join the switch communication, while other packets are
dropped.
To enhance security, you can bind the MAC address with the IP address as the secure
address. Of course you can also designate the MAC address without binding the IP
address.
You can add the secure addresses on the port in the following ways:
z You can manually configure all the secure addresses of the port by using the
commands in the interface configuration mode.
z You can also let this port automatically learn these addresses, which will become
the secure address on this port till the total number reaches the maximum value.
Note that, however, the automatically-learned secure addresses will not be bound
with the IP address. On the same port, if you have configured a secure address
bound with the IP address, the port cannot be added with any secure address by
automatic learning.
z Manually configure some secure addresses, and let the device to learn the rest.
The port security also supports the Sticky MAC address, which can converts the
secure addresses learned dynamiclly to the statically configured. You can use the
show running-config command to display the configuration. With the configuration
saved, learning these dynamic secure addresses after restarting the system is
unnecessary. If this function is not enabled, then the dynamically learned sercure MAC