944 BigIron RX Series Configuration Guide53-1001810-01Configuring the MAC port security feature32The maximum number of MAC addresses any single interface can secure is 64 (the maximumnumber of local resources available to the interface), plus the number of global resources notallocated to other interfaces.Configuring the MAC port security featureTo configure the MAC port security feature, you perform the following tasks:• Enable the MAC port security feature• Set the maximum number of secure MAC addresses for an interface• Set the port security age timer• Specify secure MAC addresses• Configure the device to automatically save secure MAC addresses to the startup-config file• Specify the action taken when a security violation occursEnabling the MAC port security featureBy default, the MAC port security feature is disabled on all interfaces. You can enable or disablethe feature globally on all interfaces at once or on individual interfaces.To enable the feature globally.BigIron RX(config)# global-port-securityBigIron RX(config-port-security)# enableTo disable the feature on all interfaces at once.BigIron RX(config)# global-port-securityBigIron RX(config-port-security)# no enableTo enable the feature on a specific interface.BigIron RX(config)# int e 7/11BigIron RX(config-if-e100-7/11)# port securityBigIron RX(config-port-security-e100-7/11)# enableSyntax: global-port-securitySyntax: port-securitySyntax: [no] enableSetting the maximum number of secure MAC addresses for an interfaceWhen the port security feature is enabled, the interface can store 1 secure MAC address. You canincrease the number of MAC addresses that can be secured to a maximum of 64, plus the totalnumber of global resources available.For example, to configure interface 7/11 to have a maximum of 10 secure MAC addresses.BigIron RX(config)# int e 7/11BigIron RX(config-if-e100-7/11)# port securityBigIron RX(config-if-e100-7/11)# maximum 10Syntax: maximum
