1-4
Port Security Configuration
Complete the following tasks to configure port security:
Task
Remarks
Enabling Port Security
Required
Setting the Maximum Number of MAC Addresses
Allowed on a Port
Optional
Setting the Port Security Mode
Required
Configuring the NTK feature
Configuring intrusion protection
Configuring Port
Security
Features
Configuring the Trap feature
Optional
Choose one or more features as
required.
Ignoring the Authorization Information from the RADIUS
Server
Optional
Configuring Security MAC Addresses
Optional
Enabling Port Security
Follow these steps to enable port security:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enable port security
port-security enable
Required
Disabled by default
Enabling port security resets the following configurations on the ports to the defaults (shown in
parentheses below):
z
802.1x (disabled), port access control method (
macbased
), and port access control mode (
auto
)
z
MAC authentication (disabled)
In addition, you cannot perform the above-mentioned configurations manually because these
configurations change with the port security mode automatically.
z
For details about 802.1x configuration, refer to the sections covering 802.1x and System-Guard.
z
For details about MAC authentication configuration, refer to the sections covering MAC
authentication configuration.
