319
mdc-admin
Parameters
vlan-id-list
: Specifies a space-separated list of up to 10 VLAN items. Each VLAN item specifies a
VLAN by VLAN ID or specifies a range of VLANs in the form of
start-vlan-id
to
end-vlan-id
. The value
range for VLAN IDs is 1 to 4094. The end VLAN ID must be equal to or greater than the start VLAN
ID.
Usage guidelines
This command allows packets from the specified VLANs to not trigger 802.1X or MAC authentication
on a port configured with any of the following features:
•
802.1X authentication.
•
MAC authentication.
•
Any of the following port security modes:
userLogin.
userLoginSecure.
userLoginWithOUI.
userLoginSecureExt.
macAddressWithRadius.
macAddressOrUserLoginSecure.
macAddressElseUserLoginSecure.
macAddressOrUserLoginSecureExt.
macAddressElseUserLoginSecureExt.
Execute this command multiple times to specify multiple free VLANs for port security.
Examples
# Configure free VLANs for port security on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] port-security free-vlan 2 3
Related commands
display port-security
port-security intrusion-mode
Use
port-security intrusion-mode
to configure the intrusion protection feature so the port takes the
predefined actions when intrusion protection detects illegal frames on the port.
Use
undo port-security intrusion-mode
to restore the default.
Syntax
port-security intrusion-mode
{
blockmac
|
disableport
|
disableport-temporarily
}
undo port-security intrusion-mode
Default
Intrusion protection is disabled.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
