Configuring Secure Mac Addresses - HP 6125G Configuration Manual

dot1xlogfailure/dot1xlogon/dot1xlogoff—802.1X authentication failure, success, and 802.1X
•
user logoff.
ralmlogfailure/ralmlogon/ralmlogoff—MAC authentication failure, MAC authentication user
•
logon, and MAC authentication user logoff.
intrusion—Detection of illegal frames.
•
To enable port security traps:
Step
1. Enter system view.
2. Enable port security traps.

Configuring secure MAC addresses

Secure MAC addresses are configured or learned in autoLearn mode and can survive link down/up
events. You can bind a secure MAC address to only one port in a VLAN.
IMPORTANT:
When the maximum number of secure MAC address entries is reached, the port changes to secure mode,
and no more secure MAC addresses can be added or learned. The port allows only frames sourced from
a secure MAC address or a MAC address configured by using the mac-address dynamic or mac-address
static command to pass through.
Secure MAC addresses fall into static, sticky and dynamic secure MAC addresses.
Table 9 A comparison of static, sticky, and dynamic secure MAC addresses
Type
Static
Sticky
Address sources Aging mechanism
Not available.
They never age out unless you manually remove
Manually added
them, change the port security mode, or disable
the port security feature.
Sticky MAC addresses by default do not age
out, but you can configure an aging timer or use
the aging timer together with the inactivity aging
Manually added or
function to delete old sticky MAC addresses:
automatically learned
•
when the dynamic
secure MAC function
(port-security
mac-address
•
dynamic) is disabled.
Command
system-view
port-security trap { addresslearned
| dot1xlogfailure | dot1xlogoff |
dot1xlogon | intrusion |
ralmlogfailure | ralmlogoff |
ralmlogon }
If only an aging timer is configured, the
aging timer counts up regardless of whether
traffic data has been sent from the sticky
MAC address.
If both an aging timer and the inactivity
aging function are configured, the aging
timer restarts once traffic data is detected
from the sticky MAC address.
120
Remarks
N/A
By default, port security traps are
disabled.
Can be saved and
survive a device
reboot?
Yes.
Yes.
The secure MAC aging
timer restarts at a
reboot.