H3C SOHO IE4300, Command Reference Manual

Page: 2127 / 3296

14
Default
The inactivity aging feature is disabled for secure MAC addresses.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
This command enables the device to periodically detect traffic data from secure MAC addresses.
If only the aging timer is configured, the aging timer counts up regardless of whether traffic data has
been sent from the secure MAC addresses. When you use the aging timer together with the
inactivity aging feature, the aging timer restarts once traffic data is detected from the secure MAC
addresses. The secure MAC addresses age out only when no traffic data is detected within the
aging timer.
The inactivity aging feature prevents the unauthorized use of a secure MAC address when the
authorized user is offline. The feature also removes outdated secure MAC addresses so that new
secure MAC addresses can be learned or configured.
If the aging timer is set to a value not less than 60 seconds, the traffic data detection interval is fixed
at 30 seconds.
If the aging timer is set to a value less than 60 seconds, the traffic data detection interval is the
effective aging period.
To set the aging timer for secure MAC addresses, use the
port-security timer autolearn
aging command.
This command takes effect only on sticky MAC addresses and dynamic secure MAC addresses.
Examples
# Enable inactivity aging for secure MAC addresses on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-security mac-address aging-type inactivity
Related commands
display port-security
port-security mac-address dynamic
Use
port-security mac-address dynamic
to enable the dynamic secure MAC feature.
Use undo port-security mac-address dynamic to disable the dynamic secure MAC
feature.
Syntax
port-security mac-address dynamic
undo port-security mac-address dynamic
Default
The dynamic secure MAC feature is disabled. Sticky MAC addresses can be saved to the
configuration file. Once saved, they survive a device reboot.