1-6
z
Control the maximum number of users who are allowed to access the network through the port
z
Control the number of Security MAC addresses that can be added with port security
This configuration is different from that of the maximum number of MAC addresses that can be leaned
by a port in MAC address management.
Follow these steps to set the maximum number of MAC addresses allowed on a port:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Enter Ethernet port view
interface
interface-type
interface-number
—
Set the maximum number of
MAC addresses allowed on the
port
port-security max-mac-count
count-value
Required
Not limited by default
Setting the Port Security Mode
Follow these steps to set the port security mode:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Set the OUI value for user
authentication
port-security oui OUI-value
index index-value
Optional
In
userLoginWithOUI
mode, a
port supports one 802.1x user
plus one user whose source
MAC address has a specified
OUI value.
Enter Ethernet port view
interface
interface-type
interface-number
—
Set the port security mode
port-security port-mode
{
autolearn
|
mac-and-userlogin-secure
|
mac-and-userlogin-secure-e
xt
|
mac-authentication
|
mac-else-userlogin-secure
|
mac-else-userlogin-secure-e
xt
|
secure
|
userlogin
|
userlogin-secure
|
userlogin-secure-ext
|
userlogin-secure-or-mac
|
userlogin-secure-or-mac-ext
|
userlogin-withoui
}
Required
By default, a port operates in
noRestriction
mode. In this
mode, access to the port is not
restricted.
You can set a port security
mode as needed.
