H3C S5120-EI Series, Руководство по эксплуатации

Страница: 607 / 1191

1-7
Setting the Port Security Mode
Configuration Prerequisites
Before setting the port security mode, ensure that:
z
802.1X is disabled, the port access control method is
macbased
, and the port access control mode
is
auto
.
z
MAC authentication is disabled.
z
The port does not belong to any aggregation group.
The above requirements must be all met. Otherwise, you will see an error message and your
configuration will fail. On the other hand, after setting the port security mode on a port, you cannot
change any configurations of the first three requirements.
z
With port security disabled, you can configure the port security mode, but your configuration does
not take effect.
z
You cannot change the port security mode of a port when any user is present on the port.
z
Before configuring the port to operate in autoLearn mode, set the maximum number of secure MAC
addresses allowed on a port.
Configuring Procedure
Follow these steps to enable any other port security mode:
To do… Use the command… Remarks
Enter system view
system-view
—
Set an OUI value for user
authentication
port-security oui oui-value index
index-value
Optional
Not configured by default.
The command is required for the
userlogin-withoui
mode.
Enter interface view
interface interface-type interface-number
—
Set the port security mode
port-security port-mode
{
autolearn |
mac-authentication |
mac-else-userlogin-secure |
mac-else-userlogin-secure-ext | secure |
userlogin | userlogin-secure |
userlogin-secure-ext |
userlogin-secure-or-mac |
userlogin-secure-or-mac-ext |
userlogin-withoui
}
Required
By default, a port operates in
noRestrictions mode.