H3C S5830V2 series, Security Configuration Manual, Page: 108 / 332

94
• Configure the port to permit packets of the specified VLAN to pass or add the port to the VLAN.
Make sure the VLAN already exists.
Configuration procedure
To configure a secure MAC address:
Step Command Remarks
1. Enter system view.
system-view N/A
2. (Optional.) Set the
secure MAC aging
timer.
port-security timer autolearn aging
time-value
By default, secure MAC addresses
do not age out.
3. Configure a secure
MAC address.
•
In system view:
port-security mac-address security
[
sticky
] mac-address
interface
interface-type interface-number vlan
vlan-id
•
In interface view:
a. interface interface-type
interface-number
b. port-security mac-address
security [ sticky ] mac-address
vlan
vlan-id
Use either method.
No secure MAC address exists by
default.
In the same VLAN, a MAC address
cannot be specified as both a static
secure MAC address and a sticky
MAC address.
Ignoring authorization information from the server
You can configure a port to ignore the authorization information received from the server (an RADIUS
server or the local device) after an 802.1X user or MAC authentication user passes authentication.
To configure a port to ignore authorization information from the server:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Ignore the authorization
information received from the
authentication server.
port-security authorization ignore
By default, a port uses the
authorization information received
from the authentication server.
Displaying and maintaining port security
Execute display commands in any view:
Task Command
Display the port security configuration,
operation information, and statistics.
display port-security [ interface interface-type interface-number ]