Displaying Port-Based Traffic Control Settings - Cisco Catalyst 2950 Software Configuration Manual

Chapter 17 Configuring Port-Based Traffic Control
Beginning in privileged EXEC mode, follow these steps to configure port security aging:
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3
switchport port-security aging
{static | time time | type {absolute |
inactivity}}
Step 4
end
Step 5
show port security [interface
interface-id] [address]
Step 6
copy running-config startup-config (Optional) Save your entries in the configuration file.
To disable port security aging for all secure addresses on a port, use the no switchport port-security
aging time interface configuration command. To disable aging for only statically configured secure
addresses, use the no switchport port-security aging static interface configuration command.
This example shows how to set the aging time as 2 hours for the secure addresses on the Fast Ethernet
interface 0/1.
Switch(config)# interface fastethernet0/1
Switch(config-if)# switchport port-security aging time 120
This example shows how to set the aging time as 2 minutes for the inactivity aging type for the
configured secure addresses on the interface.
Switch(config-if)# switchport port-security aging time 2
Switch(config-if)# switchport port-security aging type inactivity
Switch(config-if)# switchport port-security aging static
You can verify the previous commands by entering the show port-security interface interface id
privileged EXEC command.

Displaying Port-Based Traffic Control Settings

The show interfaces interface-id switchport privileged EXEC command displays (among other
characteristics) the interface traffic suppression and control configuration. The show interfaces
counters privileged EXEC commands display the count of discarded packets. The show storm control
and show port-security privileged EXEC commands display those features.
78-11380-04
Purpose
Enter global configuration mode.
Enter interface configuration mode for the port on which you want to enable
port security aging.
Set the aging time, type, and enable or disable static aging for the secure port.
Enter static to enable aging for statically configured secure addresses on this
port.
For time, specify the aging time for this port. Valid range is from 0 to 1440
minutes. If the time is equal to 0, aging is disabled for this port.
For type, select one of these keywords:
absolute— Sets the aging type as absolute aging. All the secure addresses
•
on this port age out exactly after the time (minutes) specified lapses and are
removed from the secure address list .
• inactivity— Sets the aging type as inactivity aging. The secure addresses on
this port age out only if there is no data traffic from the secure source
addresses for the specified time period .
Return to privileged EXEC mode.
Verify your entries.
Catalyst 2950 Desktop Switch Software Configuration Guide
Displaying Port-Based Traffic Control Settings
17-7