Nortel 2526T Guía Del Usuario

Configuring Security using the CLI

Table 40
mac-security command parameters and variables

Parameters and
variables

Description

disable|enable

Disables or enables MAC address-based security.

filtering

{enable|disable}

Enables or disables destination address (DA) filtering
when an intrusion is detected.

intrusion-detect

{enable|disable|

forever}

Specifies the partitioning of a port when an intrusion
is detected:

•

enable

— port is partitioned for a period of time.

•

disabled

— port is not partitioned on detection.

•

forever

— port is partitioned until manually

changed.

intrusion-timer

<1-65535>

Specifies, in seconds, length of time a port is partitioned
when an intrusion is detected; enter the number of
seconds to specify.

learning

{enable|disable}

Specifies MAC address learning:

•

enable

— enables learning by ports

•

disable

— disables learning by ports

ATTENTION

The MAC address learning enable command must
be executed to specify learning ports.

learning-ports

<portlist>

Specifies MAC address learning. Learned addresses
are added to the table of allowed MAC addresses. Enter
the ports you want to learn; this can be a single port, a
range of ports, several ranges, all, or none.

mac-address-tabl

Adds addresses to the MAC security address table.

mac-da-filter

Adds or deletes MAC DA filtering addresses.

security-list

Modifies security list port membership.

Nortel Ethernet Routing Switch 2500 Series

Security — Configuration and Management

NN47215-505 (323165-B)

02.01

Standard

4.1

19 November 2007