[c-nsp] Broadcast storm control

Sam Stickland sam_mailinglists at spacething.org
Tue Nov 6 12:14:44 EST 2007


Saku Ytti wrote:
> On (2007-11-06 16:56 +0000), Sam Stickland wrote:
>
>   
>> switchport port-security
>> switchport port-security maximum x
>> switchport port-security aging time 5
>> switchport port-security violation restrict
>>
>> Port security doesn't permamently learn MAC addresses unless "switchport 
>> port-security mac-address sticky" is set, and setting the aging time to 5 
>> matches the default CAM table timers.
>>     
>
> Dynamic MACs you can relearn any time. So consider there is L2
> redundancy, with port-security enabled, you have to wait for aging time
> before you can switch. I guess I'm only one who finds this really basic
> and elementary feature that just should be available.
>   
I'm sorry. I don't see how the configuration above would be different 
from a configuration command that said "limit the number of MAC 
addresses on this port to x". Can you explain?

S



More information about the cisco-nsp mailing list