Table of Contents
Advertisement
Related commands
display dot1x
display mac-authentication
port-security mac-move permit
Use port-security mac-move permit to enable MAC move on the device.
Use undo port-security mac-move permit to disable MAC move on the device.
Syntax
port-security mac-move permit
undo port-security mac-move permit
Default
MAC move is disabled on the device.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command takes effect on both 802.1X and MAC authentication users.
MAC move allows 802.1X or MAC authenticated users to move between ports on a device. For
example, if an 802.1X-authenticated user moves to another 802.1X-enabled port on the device, the
authentication session is deleted from the first port. The user is reauthenticated on the new port.
If MAC move is disabled, 802.1X or MAC users authenticated on one port cannot pass
authentication after they move to another port.
802.1X or MAC authenticated users cannot move between ports on a device if the number of online
users on the authentication server (local or remote) has reached the upper limit.
Examples
# Enable MAC move.
<Sysname> system-view
[Sysname] port-security mac-move permit
Related commands
display port-security
port-security max-mac-count
Use port-security max-mac-count to set the maximum number of secure MAC addresses that port
security allows on a port.
Use undo port-security max-mac-count to restore the default.
Syntax
port-security max-mac-count max-count [ vlan [ vlan-id-list ] ]
undo port-security max-mac-count [ vlan [ vlan-id-list ] ]
325
Advertisement
Table of Contents
