Alcatel-Lucent 6850-48 参考指南

Learned Port Security Commands

OmniSwitch CLI Reference Guide

page 18-11

Configures a single authorized source MAC address for a port that belongs to a specified VLAN.

port-security slot/port mac mac_address [vlan vlan_id]

port-security slot/port no mac {all | mac_address} [vlan vlan_id]

Enter the slot number for the module and the physical port number on 
that module (e.g., 3/1 specifies port 1 on slot 3).

The source MAC address (e.g., 00:da:39:59:f1:0c) of the port.

The VLAN or the tagged VLAN to which the LPS port belongs. The 
range is 1–4094.

By default, the default VLAN for the port is used.

OmniSwitch 6400, 6850, 6855, 9000, 9000E

• Use the no form of this command to remove statically configured or dynamically learned source MAC 

address entries from the LPS table. When a MAC address is removed from the LPS table, it is automat-
ically cleared from the source learning table at the same time.

• LPS should be enabled on the port before configuring a MAC address. If an attempt is made to config-

ure a MAC address on a non-LPS port, an error message is displayed.

• Any additional source MAC addresses received that do not match configured authorized addresses are 

allowed on the port based on the LPS time limit (if active) and maximum number of MAC addresses 
allowed. 

• Each configured authorized MAC address counts towards the number of addresses allowed on the port 

even if the port has not learned the configured address. For example, if a port has 3 configured autho-
rized MAC addresses and the maximum number of addresses allowed is set to 10, then only 7 addi-
tional MAC addresses are allowed on that port.

-> port-security 4/20 mac 00:20:95:00:fa:5c vlan 2

-> port-security 2/11 no mac 00:20:95:00:fa:5c

Release 6.1; command was introduced.
Release 6.1.5; vlan parameter was added.