MAC Addresses That Exceed the MAC Limit or MAC Move LimitIf you have configured the port-error-disable statement, you can view which interfacesare temporarily disabled due to exceeding the MAC limit or MAC move limit in the outputfor the show ethernet-switching interfaces command.The log messages that indicate the MAC limit or MAC move limit has been exceededinclude the offending MAC addresses that have exceeded the limit. See “TroubleshootingPort Security” on page 2665 for details.RelatedDocumentationPort Security for J-EX Series Switches Overview on page 2545•• Example: Configuring MAC Limiting, Including Dynamic and Allowed MAC Addresses,to Protect the Switch from Ethernet Switching Table Overflow Attacks on page 2576• Example: Configuring MAC Limiting to Protect the Switch from DHCP Starvation Attackson page 2583• Configuring MAC Limiting (CLI Procedure) on page 2635• Configuring MAC Limiting (J-Web Procedure) on page 2637• Configuring Autorecovery From the Disabled State on Secure or Storm Control Interfaces(CLI Procedure) on page 2516• no-allowed-mac-log on page 2686Understanding Trusted DHCP Servers for Port Security on J-EX Series SwitchesAny interface on the switch that connects to a DHCP server can be configured as a trustedport. Configuring a DHCP server on a trusted port protects against rogue DHCP serverssending leases.Ensure that the DHCP server interface is physically secure—that is, that access to theserver is monitored and controlled at the site—before you configure the port as trusted.RelatedDocumentationUnderstanding DHCP Snooping for Port Security on J-EX Series Switches on page 2549•• Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MACMove Limiting, on a J-EX Series Switch on page 2569• Example: Configuring a DHCP Server Interface as Untrusted to Protect the Switch fromRogue DHCP Server Attacks on page 2579• Enabling a Trusted DHCP Server (CLI Procedure) on page 2632• Enabling a Trusted DHCP Server (J-Web Procedure) on page 26322559Chapter 93: Port Security Overview
