Port Security Configuration Example - 3Com 4200G 12-Port Configuration Manual

Port Security
Configuration
Example
Table 68 Display port security (Continued)
Operation
Display the information about port
binding
Network requirements
Enable port security on port GigabitEthernet1/0/1 of switch A, and set the
■
maximum number of the MAC addresses accommodated by the port to 80.
The NTK packet transmission mode of on the port is ntk-withbroadcasts, and
■
the intrusion Protection mode is disableport.
Connect PC1 to GigabitEthernet1/0/1 through switch B.
■
Bind the MAC and IP addresses of PC1 to GigabitEthernet1/0/1.
■
Network diagram
Figure 28 Network diagram for port security configuration
Switch A Switch A Switch A
IP Address: 10.153.1.1 IP Address: 10.153.1.1 IP Address: 10.153.1.1
MAC Address: 00e0 -fc00 - 3900 MAC Address: 00e0 -fc00 - 3900 MAC Address: 00e0 -fc00 - 3900
Configuration procedure
Configure switch A as follows:
1 Enter system view.
<S4200G> system-view
2 Enable port security.
[4200G] port-security enable
3 Enter port view for GigabitEthernet1/0/1.
[4200G] interface GigabitEthernet1/0/1
4 Set the port mode to MAC authentication.
[4200G-GigabitEthernet1/0/1] port-security port-mode mac-authentication
5 Set the maximum number of MAC addresses accommodate by the port to 80.
[4200G-GigabitEthernet1/0/1] port-security max-mac-count 80
6 Set the NTK packet transmission mode to ntk-withbroadcasts.
[4200G-GigabitEthernet1/0/1] port-security ntk-mode ntk-withbroadcasts
7 Set the Intrusion Protection mode to disableport.
[4200G-GigabitEthernet1/0/1] port-security intrusion-mode disableport
8 Return to system view.
[4200G-GigabitEthernet1/0/1] quit

Port Security Configuration Example

Command
display am user-bind [ interface interface-type
interface-number | mac-addr | ip-addr ]
GE1/0/1
PC1 PC1 PC1 PC1 PC1
Switch B Switch B Switch B
PC2 PC2 PC2 PC2 PC2
91