1-6
To do...
Use the command...
Remarks
Enter Ethernet port view
interface
interface-type
interface-number
—
Set the maximum number of
MAC addresses allowed on the
port
port-security max-mac-count
count-value
Required
Not limited by default
Setting the Port Security Mode
Follow these steps to set the port security mode:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Set the OUI value for user
authentication
port-security oui OUI-value
index index-value
Optional
In
userLoginWithOUI
mode, a
port supports one 802.1x user
plus one user whose source
MAC address has a specified
OUI value.
Enter Ethernet port view
interface
interface-type
interface-number
—
Set the port security mode
port-security port-mode
{
autolearn
|
mac-and-userlogin-secure
|
mac-and-userlogin-secure-e
xt
|
mac-authentication
|
mac-else-userlogin-secure
|
mac-else-userlogin-secure-e
xt
|
secure
|
userlogin
|
userlogin-secure
|
userlogin-secure-ext
|
userlogin-secure-or-mac
|
userlogin-secure-or-mac-ext
|
userlogin-withoui
}
Required
By default, a port operates in
noRestriction
mode. In this
mode, access to the port is not
restricted.
You can set a port security
mode as needed.
z
Before setting the port security mode to
autolearn
, you need to set the maximum number of MAC
addresses allowed on the port with the
port-security max-mac-count
command.
z
When the port operates in the
autoLearn
mode, you cannot change the maximum number of MAC
addresses allowed on the port.
z
After you set the port security mode to
autolearn
, you cannot configure any static or blackhole
MAC addresses on the port.
z
If the port is in a security mode other than
noRestriction
, before you can change the port security
mode, you need to restore the port security mode to
noRestriction
with the
undo port-security
port-mode
command.
