H3C SOHO IE4300, Command Reference Manual

Page: 2139 / 3296

26
[Sysname-GigabitEthernet1/0/1] undo port-security port-mode
[Sysname-GigabitEthernet1/0/1] port-security port-mode userlogin
Related commands
display port-security
port-security max-mac-count
port-security timer autolearn aging
Use port-security timer autolearn aging to set the secure MAC aging timer.
Use
undo port-security timer autolearn aging
to restore the default.
Syntax
port-security timer autolearn aging [ second ] time-value
undo port-security timer autolearn aging
Default
Secure MAC addresses do not age out.
Views
System view
Predefined user roles
network-admin
Parameters
second : Specifies the aging timer in seconds for secure MAC addresses. If you do not specify this
keyword, the command sets the aging timer in minutes for secure MAC addresses.
time-value
: Specifies the aging timer. The value range is 0 to 129600 if the unit is minute. To
disable the aging timer, set the timer to 0. The value range is 10 to 7776000 if the unit is second.
Usage guidelines
The timer applies to all sticky secure MAC addresses and those automatically learned by a port.
The effective aging timer varies by the aging timer setting:
•
If the aging timer is set in seconds, the effective aging timer can be either of the following
values:

The nearest multiple of 30 seconds to the configured aging timer if the configured timer is
not less than 60 seconds. The effective aging timer is not less than the configured aging
timer.

The configured aging timer if the configured timer is less than 60 seconds.
•
If the aging timer is set in minutes, the effective aging timer is the configured aging timer.
A short aging time improves port access security and port resource utility but affects online user
stability. Set an appropriate secure MAC address aging timer according to your device performance
and the network environment.
When a short aging time (less than 60 seconds) works with inactivity aging, do not assign a large
value to the maximum number of secure MAC addresses on a port. A large value in this case might
affect device performance.
Examples
# Set the secure MAC aging timer to 30 minutes.
<Sysname> system-view