Ignoring Authorization Information From The Server; Displaying And Maintaining Port Security; Autolearn Configuration Example; Network Requirements - HP 5920 Series Configuration Manual

Ignoring authorization information from the server

You can configure a port to ignore the authorization information received from the server (an RADIUS
server or the local device) after an 802.1X user or MAC authentication user passes authentication.
To configure a port to ignore authorization information from the server:
Step
1. Enter system view.
2. Enter interface view.
3. Ignore
information received from the
authentication server.

Displaying and maintaining port security

Execute display commands in any view:
Task
Display the port security configuration,
operation information, and statistics.
Display information about secure MAC
addresses.
Display information about blocked MAC
addresses.

autoLearn configuration example

Network requirements

See Figure 34. Configure port Ten-GigabitEthernet 1/0/1 on the device, as follows:
• Accept up to 64 users on the port without authentication.
Permit the port to learn and add MAC addresses as sticky MAC addresses, and set the secure MAC
•
aging timer to 30 minutes.
After the number of secure MAC addresses reaches 64, the port stops learning MAC addresses. If
•
any frame with an unknown MAC address arrives, intrusion protection starts, and the port shuts
down and stays silent for 30 seconds.
Command
system-view
interface interface-type
interface-number
the authorization
port-security authorization ignore
Command
display port-security [ interface interface-type interface-number ]
display port-security mac-address security [ interface
interface-type interface-number ] [ vlan vlan-id ] [ count ]
display port-security mac-address block [ interface interface-type
interface-number ] [ vlan vlan-id ] [ count ]
90
Remarks
N/A
N/A
By default, a port uses the
authorization information received
from the authentication server.