177
Configuration task list
Task Remarks
Required
Setting the maximum number of secure MAC addresses
Optional
Setting the port security mode
Required
Configuring port security
features
Optional
Configure one or more
features as required.
Configuring intrusion protection
Configuring secure MAC addresses
Optional
Ignoring authorization information from the RADIUS server
Optional
Enabling port security
Configuration prerequisites
Disable 802.1X and MAC authentication globally.
Configuration procedure
To do…
Command…
Remarks
1.
Enter system view.
system-view
—
2.
Enable port security.
port-security enable
Required
Disabled by default
1.
Enabling port security resets the following configurations on a port to the defaults in parentheses
below. Then, values of these configurations cannot be changed manually; the system adjusts them
based on the port security mode automatically.
{
802.1X (
disabled
), port access control method (
macbased
), and port authorization mode (
auto
)
{
MAC authentication (
disabled
)
2.
Disabling port security resets the following configurations on a port to the defaults in parentheses
below:
{
Port security mode (
noRestrictions
)
{
802.1X (
disabled
), port access control method (
macbased
), and port authorization mode (
auto
)
{
MAC authentication (
disabled
)
3.
Port security cannot be disabled when a user is present on a port.
NOTE:
•
For more information about 802.1X configuration, see "
."
•
For more information about MAC authentication configuration, see "