CLI Commands

To use the CLI to enable the MAC Address Lock feature and traps for unknown source addresses:

1. Enter Global Configuration mode.

The CLI displays the (configure)# prompt.

2. Use the following command to manually add the "permitted" MAC addresses to the Address Forwarding Table (AFT):

set aft entry <mac address> VLAN <VLAN-id> port-binding forward <mod-port-spec>

3. Use the following command to disable learning on a port or port range:

set port allow-learning <mod-swport-range> disable

4. Use the following command to enable known mode on a port or port range:

set port known-mode <mod-swport-range> enable

Note: To prevent the flooding of frames that have unknown destination addresses, enter all ports on the same VLAN as the port for which you are enabling MAC address lock.

5. Use the following command to enable intrusion traps on a port or port range:

set port intrusion-trap <mod-swport-range> enable

6. Use the following command to set the intrusion trap timer to other than the default setting:

set port intrusion-trap-timer <mod-swport-range> <intrusion-trap-timer-value>