<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:11" />
    <title>Configuring Port Guard </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=820;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1075949"> </a><h1 class="pTitle">
Configuring Port Guard

</h1>
<a name="wp1193141"> </a><p class="pBody">
To enable port guard using DCNM-SAN, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1193142"> </a><li class="pSmartList1">Expand <span style="font-weight: bold">Switches&#160;&gt;&#160;FC Interfaces&#160;&gt;</span>&#160;<span style="font-weight: bold">Physical&#160;&gt;&#160;Port Guard</span> from the Physical Attributes pane. 
</li>
<a name="wp1193143"> </a><p class="pListBodyLevel1">
You see the interfaces listed in the Information pane.

</p>
<a name="wp1193144"> </a><li class="pSmartList1">Click the <span style="font-weight: bold">Link Down </span>tab and then select a switch or port. 
</li>
<a name="wp1193145"> </a><li class="pSmartList1">Check the check box in the Enable column.
</li>
<a name="wp1193146"> </a><li class="pSmartList1">(Optional) Enter the Duration in seconds and the number of flaps. If the values are 0, the port is brought 
to down state if the link flaps even once. Otherwise, the link is brought to down state if the link flaps for 
the number of flaps within the duration.
</li>
<a name="wp1193147"> </a><li class="pSmartList1">Click <span style="font-weight: bold">Apply Changes </span>to activate the configuration.
</li>
<a name="wp1193148"> </a><li class="pSmartList1">Click the <b class="cBold">TrustSec Violation </b>tab, and then select a switch or port. 
</li>
<a name="wp1193149"> </a><li class="pSmartList1">Check the check box in the Enable column.
</li>
<a name="wp1193150"> </a><li class="pSmartList1">(Optional) Enter the duration in seconds and the number of flaps. If the values are 0, the port is brought 
to down state if a trustsec violation occurs even once. Otherwise, the link is brought to down state if there 
is trustsec violation for the number of flaps within the duration.
</li>
<a name="wp1193151"> </a><li class="pSmartList1">Click the <b class="cBold">Bit Errors</b>, <b class="cBold">Signal Loss</b>, <b class="cBold">Sync Loss</b>, <b class="cBold">Link-reset</b>, and <b class="cBold">Credit Loss</b> tabs and complete the port 
guard configuration.
</li>
<a name="wp1193152"> </a><li class="pSmartList1">Click <span style="font-weight: bold">Apply Changes </span>to activate the configuration. 
</li>
</ol></div>
<a name="wp1193154"> </a><p class="pBody">
To enable port guard for single or multiple interfaces using Device Manager, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1193155"> </a><li class="pSmartList1">Expand <span style="font-weight: bold">Switches&#160;&gt;&#160;FC Interfaces&#160;&gt;&#160;Physical&#160;&gt;&#160;Port Guard</span> from the Physical Attributes pane.
</li>
<a name="wp1193156"> </a><p class="pListBodyLevel1">
You see the FC Interfaces listed.

</p>
<a name="wp1193157"> </a><li class="pSmartList1">Click the <span style="font-weight: bold">Link Down </span>tab, and then select the switch or port.
</li>
<a name="wp1193158"> </a><li class="pSmartList1">Check the check box in the Enable column.
</li>
<a name="wp1193159"> </a><li class="pSmartList1">(Optional) Enter the duration in seconds and the number of flaps. If the values are 0, the port goes into 
a down state even if the link flaps once. Otherwise, the link goes into a down state if the link flaps for 
the number of flaps within the duration.
</li>
<a name="wp1193160"> </a><li class="pSmartList1">Click <span style="font-weight: bold">Apply Changes </span>to activate the configuration.
</li>
<a name="wp1193161"> </a><li class="pSmartList1">Click the <b class="cBold">TrustSec Violation </b>tab, and then select the switch or port.
</li>
<a name="wp1193162"> </a><li class="pSmartList1">Check the check box in the Enable column.
</li>
<a name="wp1193163"> </a><li class="pSmartList1">(Optional) Enter the Duration in seconds and the number of flaps. If the values are 0, the port is brought 
to down state if a trustsec violation occurs even once. Otherwise, the link is brought to down state if a 
trustsec violation occurs for the number of flaps within the duration.
</li>
<a name="wp1193164"> </a><li class="pSmartList1">Click <span style="font-weight: bold">Apply Changes </span>to activate the configuration.
</li>
</ol></div>
<a name="wp1098805"> </a><h2 class="pHeading2">
Troubleshooting Tips
</h2>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1098806"> </a><li class="pSmartList1">Link down is the superset of all other causes. A port is brought to down state if the total number of 
other causes equals to the number of allowed link-down failures.
</li>
<a name="wp1098807"> </a><li class="pSmartList1">Even if the link does not flap due to failure of the link, and port guard is not enabled, the port goes 
into a down state if too many invalid FLOGI requests are received from the same host. 
</li>
</ul></div>
<a name="wp1163414"> </a><p class="pBodyAutonumNoRule">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> By default, the port monitor port guard is disabled. To enable this feature, you must explicitly configure 
the port monitor port guard feature on a particular counter by performing Step 3 or Step 4. 

</p>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
