329
Predefined user roles
network-admin
mdc-admin
Parameters
index-value
: Specifies the OUI index, in the range of 1 to 16.
oui-value
: Specifies an OUI string, a 48-bit MAC address in the H-H-H format. The system uses only
the 24 high-order bits as the OUI value.
Usage guidelines
You can configure multiple OUI values.
An OUI, the first 24 binary bits of a MAC address, is assigned by IEEE to uniquely identify a device
vendor. Use this command to allow devices of specific vendors to access the network without being
authenticated. For example, you can specify the OUIs of IP phones and printers.
The OUI values configured by this command apply only to the ports operating in userLoginWithOUI
mode. In userLoginWithOUI mode, a port allows only one 802.1X user and one user whose MAC
address matches one of the configured OUI values.
Examples
# Configure an OUI value of 000d2a, and set the index to 4.
<Sysname> system-view
[Sysname] port-security oui index 4 mac-address 000d-2a10-0033
Related commands
display port-security
port-security port-mode
Use
port-security port-mode
to set the port security mode of a port.
Use
undo port-security port-mode
to restore the default.
Syntax
port-security port-mode
{
autolearn
|
mac-authentication
|
mac-else-userlogin-secure
|
mac-else-userlogin-secure-ext
|
secure
|
userlogin
|
userlogin-secure
|
userlogin-secure-ext
|
userlogin-secure-or-mac
|
userlogin-secure-or-mac-ext
|
userlogin-withoui
}
undo port-security port-mode
Default
A port operates in noRestrictions mode, where port security does not take effect.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
