1-5
Enabling Port Security
Configuration Prerequisites
Before enabling port security, you need to disable 802.1X and MAC authentication globally.
Configuration Procedure
Follow these steps to enable port security:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enable port security
port-security enable
Required
Disabled by default
Note that:
1) Enabling port security resets the following configurations on a port to the bracketed defaults. Then,
values of these configurations cannot be changed manually; the system will adjust them based on
the port security mode automatically:
z
802.1X (disabled), port access control method (macbased), and port access control mode (auto)
z
MAC authentication (disabled)
2) Disabling port security resets the following configurations on a port to the bracketed defaults:
z
Port security mode (noRestrictions)
z
802.1X (disabled), port access control method (macbased), and port access control mode (auto)
z
MAC authentication (disabled)
3) Port security cannot be disabled if there is any user present on a port.
z
For detailed 802.1X configuration, refer to
802.1X Configuration
in the
Security Volume
.
z
For detailed MAC-based authentication configuration, refer to
MAC Authentication Configuration
in
the
Security Volume
.
Setting the Maximum Number of Secure MAC Addresses
With port security enabled, more than one authenticated user is allowed on a port. The number of
authenticated users allowed, however, cannot exceed the specified upper limit.
By setting the maximum number of secure MAC addresses allowed on a port, you can:
z
Control the maximum number of users who are allowed to access the network through the port.
z
Control the number of secure MAC addresses that can be added with port security.
