173
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-security ntk-mode ntkonly
port-security oui
Syntax
port-security oui
oui-value
index
index-value
undo port-security oui index
index-value
View
System view
Default level
2: System level
Parameters
oui-value
: Specifies an Organizationally unique identifier (OUI) string, a 48-bit MAC address in the
H-H-H format. The system automatically uses only the 24 high-order bits as the OUI value.
index-value
: Specifies the OUI index, in the range 1 to 16.
Description
Use the
port-security oui
command to configure an OUI value for user authentication. This value is used
when the port security mode is userLoginWithOUI.
Use the
undo port-security oui
command to delete an OUI value with the specified OUI index.
By default, no OUI value is configured.
An OUI, the first 24 binary bits of a MAC address, is assigned by IEEE to uniquely identify a device
vendor. Use this command when you configure a device to allow packets from certain wired devices to
pass authentication or to allow packets from certain wireless devices to initiate authentication. For
example, when a company allows only IP phones of vendor A in the Intranet, use this command to set the
OUI of vendor A.
Related commands:
display port-security
.
Examples
# Configure an OUI value of 000d2a, setting the index to 4.
<Sysname> system-view
[Sysname] port-security oui 000d-2a10-0033 index 4
port-security port-mode
Syntax
port-security port-mode
{
autolearn
|
mac-authentication
|
mac-else-userlogin-secure
|
mac-else-userlogin-secure-ext
|
secure
|
userlogin
|
userlogin-secure
|
userlogin-secure-ext
|
userlogin-secure-or-mac
|
userlogin-secure-or-mac-ext
|
userlogin-withoui
}
undo port-security port-mode
View
Layer 2 Ethernet interface view
