Download Print this page

Port-Security Mac-Address Dynamic - HP FlexNetwork MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

Default
The inactivity aging feature is disabled for secure MAC addresses.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
If only the aging timer is configured, the aging timer counts up regardless of whether traffic data has
been sent from the sticky MAC addresses. When you use the aging timer together with the inactivity
aging feature, the aging timer restarts once traffic data is detected from the sticky MAC addresses.
The inactivity aging feature prevents the unauthorized use of a secure MAC address when the
authorized user is offline. The feature also removes outdated secure MAC addresses so that new
secure MAC addresses can be learned or configured.
This command takes effect only on sticky MAC addresses and dynamic secure MAC addresses.
Examples
# Enable inactivity aging for secure MAC addresses on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-security mac-address aging-type inactivity
Related commands
display port-security

port-security mac-address dynamic

Use port-security mac-address dynamic to enable the dynamic secure MAC feature.
Use undo port-security mac-address dynamic to disable the dynamic secure MAC feature.
Syntax
port-security mac-address dynamic
undo port-security mac-address dynamic
Default
The dynamic secure MAC feature is disabled. Sticky MAC addresses can be saved to the
configuration file. Once saved, they survive a device reboot.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
The dynamic secure MAC feature converts sticky MAC addresses to dynamic and disables saving
them to the configuration file.
After you execute this command, you cannot manually configure sticky MAC addresses, and secure
MAC addresses learned by a port in autoLearn mode are dynamic. All dynamic MAC addresses are
lost at reboot. Use this command when you want to clear all sticky MAC addresses after a device
reboot.
334

Advertisement

loading