1-6
This configuration is different from that of the maximum number of MAC addresses that can be leaned
by a port in MAC address management.
Follow these steps to set the maximum number of MAC addresses allowed on a port:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Enter Ethernet port view
interface
interface-type
interface-number
—
Set the maximum number of
MAC addresses allowed on the
port
port-security max-mac-count
count-value
Required
Not limited by default
Setting the Port Security Mode
Follow these steps to set the port security mode:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Set the OUI value for user
authentication
port-security oui OUI-value
index index-value
Optional
In
userLoginWithOUI
mode, a
port supports one 802.1x user
plus one user whose source
MAC address has a specified
OUI value.
Enter Ethernet port view
interface
interface-type
interface-number
—
Set the port security mode
port-security port-mode
{
autolearn
|
mac-and-userlogin-secure
|
mac-and-userlogin-secure-e
xt
|
mac-authentication
|
mac-else-userlogin-secure
|
mac-else-userlogin-secure-e
xt
|
secure
|
userlogin
|
userlogin-secure
|
userlogin-secure-ext
|
userlogin-secure-or-mac
|
userlogin-secure-or-mac-ext
|
userlogin-withoui
}
Required
By default, a port operates in
noRestriction
mode. In this
mode, access to the port is not
restricted.
You can set a port security
mode as needed.
