Configuring A Maximum Number Of Mac Addresses - Cisco Nexus 9000 Series Configuration Manual
Nx-os security configuration guide, release 9.x
Hide thumbs
Also See for Nexus 9000 Series:
- Configuration manual (276 pages) ,
- Troubleshooting manual (126 pages) ,
- Quick start configuration manual (6 pages)
Table of Contents
Advertisement
Configuring Port Security
Command or Action
Example:
switch(config)# clear port-security dynamic
interface ethernet 2/1
Step 3
(Optional) show port-security address
Example:
switch(config)# show port-security address
Step 4
(Optional) copy running-config startup-config
Example:
switch(config-if)# copy running-config
startup-config
Configuring a Maximum Number of MAC Addresses
You can configure the maximum number of MAC addresses that can be learned or statically configured on
a Layer 2 interface. You can also configure a maximum number of MAC addresses per VLAN on a Layer 2
interface. The largest maximum number of addresses that you can configure on an interface is 1025 addresses.
The system maximum number of addresses is 8192.
By default, an interface has a maximum of one secure MAC address. VLANs have no default maximum
number of secure MAC addresses.
Note
When you specify a maximum number of addresses that is less than the number of addresses already learned
or statically configured on the interface, the device rejects the command. To remove all addresses learned by
the dynamic method, use the shutdown and no shutdown commands to restart the interface.
Before you begin
You must have enabled port security globally.
SUMMARY STEPS
1. configure terminal
2. Enter one of the following commands:
3. [no] switchport port-security maximum number [vlan vlan-ID]
4. (Optional) show running-config port-security
• interface ethernet slot/port
• interface port-channel channel-number
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Configuring a Maximum Number of MAC Addresses
Purpose
If you use the interface keyword, you remove all
dynamically learned addresses on the interface that you
specify.
If you use the address keyword, you remove the single,
dynamically learned address that you specify.
Use the vlan keyword if you want to further limit the
command to removing an address or addresses on a
particular VLAN.
Displays secure MAC addresses.
Copies the running configuration to the startup
configuration.
319
- Quick Links:
- Radius and Tacacs+ Security Protocols
Hide quick links:
Advertisement
Table of Contents
