Filter
Top Products
DES-7200 Configuration Guide Chapter 5 Port-based Flow Control Configuration
5-11
5.3.2.6 Configuration of Aging Time
for Secure Addresses
You can configure the aging time for all the secure addresses on an interface. To
enable this function, you need to set the maximum number of secure addresses. In this
way, you can make the device automatically add/remove the secure addresses to/from
the interface.
In the interface configuration mode, configure the aging time for secure addresses by
using the following command:
Command Function
DES-7200(config-if)#switchport
port-security aging{static | time time }
static: When this keyword is added, the aging
time will be applied to both the manually
configured secure address and automatically
learnt addresses. Otherwise, it is applied only to
the automatically learnt addresses.
time: indicates the aging time for the secure
address on this port. Its range is 0-1440 and unit
is Minute. If you set it to be 0, the aging function
actually is disabled. The aging time is the
absolute time, which means that an address will
be deleted automatically after the Time specified
expires after the address becomes the secure
address of the port. The default value of Time is
0.
In the interface configuration mode, use no switchport port-security aging time to
disable the port security aging. Use the no switchport port-security aging static to
apply the aging time only to dynamically learned security address.
The example below describes how to configure the port security aging time on
interface Gigabitethernet 0/3. The aging time is set to 8 minutes and it is applicable to
statically-configured secure addresses:
DES-7200# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
DES-7200(config)# interface gigabitthernet 0/3
DES-7200(config-if)# switchport port-security aging time 8
DES-7200(config-if)# switchport port-security aging static
DES-7200(config-if)# end
5.3.3 Viewing Port Security
Information
In the privileged mode, you can view the security information of a port by using the
following commands.