3Com Switch 7754, Configuration Manual

Page: 203 / 940

Port Security Configuration 203
This configuration is different from that of the maximum number of MAC
addresses that can be leaned by a port in MAC address management.
Setting the Port Security
Mode
n
■
Before setting the port security mode to autolearn , you need to set the
maximum number of MAC addresses allowed on the port with the
port-security max-mac-count command.
■
After you set the port security mode to autolearn , you cannot configure any
static or blackhole MAC addresses on the port.
■
To change the security mode of a port that is not in the normal forwarding
state, you need to perform the
undo port-security port-mode command or
disable port security at first.
If the port-security port-mode mode command has been executed on a port,
none of the following can be configured on the same port:
■
Maximum number of MAC addresses that the port can learn
■
Disabling MAC address learning
■
Reflector port for port mirroring
■
Link aggregation
Table 132 Set the maximum number of MAC addresses allowed on a port
Operation Command Remarks
Enter system view system-view -
Enter Ethernet port view interface interface-type
interface-number
-
Set the maximum number of
MAC addresses allowed on
the port port-security
max-mac-count
count-value
Required
Not limited by default
Table 133 Set the port security mode
Operation Command Remarks
Enter system view system-view -
Set the OUI value for
user authentication port-security oui OUI-value index
index-value
Optional
In userlogin-secure-oui
mode, a port supports one
802.1x user plus one user
whose source MAC address
has a specified OUI value.
Enter Ethernet port
view interface interface-type
interface-number
-
Set the port security
mode port-security
port-mode
{ autolearn |
mac-authentication |
mac-else-userlogin-secure |
mac-else-userlogin-secure-ext |
secure
| userlogin | userlogin-secure
| userlogin-secure-ext |
userlogin-secure-or-mac |
userlogin-secure-or-mac-ext |
userlogin-withoui }
Required
By default, a port operates in
normal mode.
You can set a port security
mode as needed.