Specifications

Security Configuration Command Set
Configuring MAC Locking
10-76 SecureStack A2 Configuration Guide
10.3.6.9 set maclock firstarrival
Use this command to restrict MAC locking on a port to a maximum number of end station addresses
first connected to that port. The maclock first arrival count resets when the link goes down. This
feature is beneficial if you have roaming users—the first arrival count will be reset every time a user
moves to another port, but will still protect against connecting multiple devices on a single port and
will protect against MAC address spoofing.
If you wish to have only statically set MACs use a port, set the first arrival limit to 0.
set maclock firstarrival port-string value
Syntax Description
Command Defaults
None.
Command Mode
Read-Write.
Example
This example shows how to restrict MAC locking to 6 MAC addresses on fe.2.3:
port-string Specifies the port on which to limit MAC locking. For a
detailed description of possible port-string values, refer to
Section 3.1.1.
value Specifies the number of first arrival end station MAC
addresses to be allowed connections to the port. Valid
values are 0 to 600.
A2(rw)->set maclock firstarrival fe.2.3 6