178
Default command level
2: System level
Usage guidelines
After a user passes RADIUS or local authentication, the server performs authorization based on the
authorization attributes configured for the user's account. For example, it can assign a VLAN.
Examples
# Configure port GigabitEthernet 3/0/1 to ignore the authorization information from the authentication
server.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-GigabitEthernet3/0/1] port-security authorization ignore
Related commands
display port-security
port-security enable
Use
port-security enable
to enable port security.
Use
undo port-security enable
to disable port security.
Syntax
port-security enable
undo port-security enable
Default
Port security is disabled.
Views
System view
Default command level
2: System level
Usage guidelines
You must disable global 802.1X and MAC authentications before you enable port security on a port.
Enabling or disabling port security resets the following security settings to the default:
•
802.1X access control mode is MAC-based, and the port authorization state is auto.
•
Port security mode is noRestrictions.
You cannot disable port security when online users are present.
Examples
# Enable port security.
<Sysname> system-view
[Sysname] port-security enable
Related commands
•
display
port-security
•
dot1x
•
dot1x
port-method
