Command Manual ( For Soliton ) – Port Security-Port Binding
H3C S3100 Series Ethernet Switches
Chapter 1 Port Security Commands
1-15
Related commands:
port-security port-mode
.
Examples
# Configure an OUI value of
00ef-ec00-0000
, setting the OUI index to 5.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] port-security oui 00ef-ec00-0000 index 5
1.1.10 port-security port-mode
Syntax
port-security port-mode
{
autolearn
|
mac-and-userlogin-secure
|
mac-and-userlogin-secure-ext
|
mac-authentication
|
mac-else-userlogin-secure
|
mac-else-userlogin-secure-ext
|
secure
|
userlogin
|
userlogin-secure
|
userlogin-secure-ext
|
userlogin-secure-or-mac
|
userlogin-secure-or-mac-ext
|
userlogin-withoui
}
undo port-security port-mode
View
Ethernet port view
Parameters
Table 1-3
shows the description on the security mode keywords.
Table 1-3
Keyword description
Keyword
Security mode
Description
autolearn autolearn
In this mode, MAC addresses learned on the
port become security MAC addresses.
When the number of security MAC addresses
exceeds the maximum number of MAC
addresses configured by the
port-security
max-mac-count
command, the port security
mode changes to
secure
automatically.
After that, no more security MAC addresses can
be added to the port and only the packets whose
source MAC addresses are the security MAC
addresses can pass through the port.
mac-and-us
erlogin-sec
ure
macAddressAn
dUserLoginSec
ure
In this mode, users trying to assess the network
through the port must first pass MAC address
authentication and then 802.1x authentication.
In this mode, only one user can access the
network through the port at a time.
