Avaya 580 - Manual (Page 260)

8-38 User Guide for the Avaya P580 and P882 Multiservice Switches, v6.1
Chapter 8
Web Agent
Procedure To use the Web Agent to enable the MAC Address Lock feature and traps
for unknown source addresses:
1. Manually add the “permitted” MAC addresses to the Address
Forwarding Table (AFT).
For information on how to manually add MAC address to the AFT, see
“
Adding Static Entries to the AFT ” in Chapter 9 , “ Managing the
Address Forwarding Table .”
2. Open the Switch Port Configuration Web page for the port.
For information on how to open this Web page, see “ Configuring
Switch Ports Settings .”
3. Set the Allow Learning field to Disable.
4. Set the Known Mode field to Enable.
*Note: To prevent the flooding of frames that have unknown
destination addresses, set the Known Mode field to
Enable for all ports on the same VLAN as the port for
which you are enabling MAC address lock.
5. Set the Intrusion Trap field to Enable.
6. Adjust the trap timer, if desired.
The default setting for the intrusion trap timer is 1800 seconds (30
minutes). The valid range for the timer is 60 to 1800 seconds.
7. Click Apply.
CLI Commands To use the CLI to enable the MAC Address Lock feature and traps for
unknown source addresses:
1. Enter Global Configuration mode.
The CLI displays the (configure)# prompt.
2. Use the following command to manually add the “permitted” MAC
addresses to the Address Forwarding Table (AFT):
set aft entry <mac address> VLAN <VLAN-id> port-binding
forward <mod-port-spec>
3. Use the following command to disable learning on a port or port range:
set port allow-learning <mod-swport-range> disable