BigIron RX Series Configuration Guide 93353-1001986-01Configuring the MAC Port Security feature 32To disable the feature on all interfaces at once.BigIron RX(config)# global-port-securityBigIron RX(config-port-security)# no enableSyntax: [no] global-port-securitySyntax: [no] enableEnabling MAC Port Security on an interfaceTo enable the feature on a specific interface.BigIron RX(config)# int e 7/11BigIron RX(config-if-e100-7/11)# port securityBigIron RX(config-port-security-e100-7/11)# enableSyntax: port-securitySyntax: [no] enableNOTEUnless indicated in the sections below, MAC Port Security commands can be used to configure MACPort Security on the interface or global level. The examples presented below configure thecommands on an interface.Setting the maximum number of secure MAC addresses foran interfaceWhen MAC Port Security feature is enabled, an interface can store one secure MAC address bydefault. You can increase the number of MAC addresses that can be secured up to a maximum of64, plus the total number of global resources available.For example, to configure interface 7/11 to have a maximum of 10 secure MAC addresses.BigIron RX(config)# int e 7/11BigIron RX(config-if-e100-7/11)# port securityBigIron RX(config-if-e100-7/11)# maximum 10Syntax: maximum Enter 0 - 64 for the parameter for the interface; however, you can enter upup to 4160 (64 + 4096). The maximum number of global resources is 4096, which are sharedamong all the interfaces. One interface can use all of them or can use few and the remaining canbe use by other interfaces.The default is 1. Setting the parameter to 0 prevents any MAC addresses from being learned.NOTEIf static and dynamic MAC addresses are used and the number of static MAC addresses is less thanthe maximum number configured for an interface, then the remaining MAC addresses can belearned dynamically.The secure MAC addresses are saved in the start-up configuration if autosave mode is enabled, orif the configuration is saved.
