3Com Switch 7754, Configuration Manual

Page: 202 / 940

202 C
HAPTER
25: P
ORT
S
ECURITY
C
ONFIGURATION
Port Security
Configuration
Enabling Port Security
c
CAUTION: Enabling port security resets the following configurations on the ports
to the defaults (shown in parentheses below)
■
802.1x (disabled), port access control method ( macbased ), and port access
control mode ( auto )
■
MAC authentication (disabled)
In addition, you cannot perform the above-mentioned configurations manually
because these configurations change with the port security mode automatically.
n
■
For details about 802.1x configuration, refer to “802.1x Configuration” on
page 389.
■
For details about MAC authentication configuration, refer to “Centralized MAC
Address Authentication Configuration” on page 233.
Setting the Maximum
Number of MAC
Addresses Allowed on a
Port
Port security allows more than one user to be authenticated on a port. The
number of authenticated users allowed, however, cannot exceed the configured
upper limit.
By setting the maximum number of MAC addresses allowed on a port, you can
■
Control the maximum number of users who are allowed to access the network
through the port
■
Control the number of Security MAC addresses that can be added with port
security
Table 130 Port security configuration tasks
Task Remarks
“Enabling Port Security” on page 202 Required
“Setting the Maximum Number of MAC Addresses Allowed
on a Port” on page 202 Optional
“Setting the Port Security Mode” on page 203 Required
“Configuring Port Security
Features” on page 204 “Configuring the NTK feature”
on page 204 Optional
Choose one or more features as
required.
“Configuring intrusion
protection” on page 204
“Configuring the Trap feature”
on page 204
“Ignoring the Authorization Information from the RADIUS
Server” on page 204 Optional
“Configuring Security MAC Addresses” on page 205 Optional
Table 131 Enable port security
Operation Command Remarks
Enter system view system-view -
Enable port security port-security enable Required
Disabled by default