HP E4510-48G, Command Reference Manual

Page: 732 / 1334

8-8
disableport-temporarily : Disables the port for a specified period of time whenever it receives an
illegal frame. Use the port-security timer disableport command to set the period.
Description
Use the port-security intrusion-mode command to configure the intrusion protection feature, so that
the interface performs configured security policies in response to received illegal packets.
Use the undo port-security intrusion-mode command to restore the default.
By default, intrusion protection is disabled.
You can use the undo shutdown command to restore the connection of the port.
Related commands: display port-security , display port-security mac-address block ,
port-security timer disableport .
Examples
# Configure port GigabitEthernet 1/0/1 to block the source MAC addresses of illegal frames after
intrusion protection is triggered.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-security intrusion-mode blockmac
port-security mac-address security
Syntax
In Layer 2 Ethernet interface view:
port-security mac-address security mac-address vlan vlan-id
In system view:
port-security mac-address security mac-address interface interface-type interface-number vlan
vlan-id
undo port-security mac-address security [ [ mac-address [ interface interface-type
interface-number ] ] vlan vlan-id ]
View
Layer 2 Ethernet Interface view, system view
Default Level
2: System level
Parameters
mac-address : Secure MAC address, in the H-H-H format.
interface interface-type interface-number : Specifies a Layer 2 Ethernet port by its type and number.
vlan-id : ID of the VLAN to which the secure MAC address belongs, in the range 1 to 4094.
Description
Use the port-security mac-address security command to add a secure MAC address.
Use the undo port-security mac-address security command to remove specified secure MAC
addresses.