Huawei Quidway S3900 series Command Manual page 215

Command Manual – Port Security & Port Binding
Quidway S3900 Series Ethernet Switches-Release 1510
View
Ethernet port view
Parameter
ntkonly:
successfully-authenticated destination MAC addresses.
ntk-withbroadcasts: Allows the system to transmit the broadcast packets and the
unicast packets with successfully-authenticated destination MAC addresses.
ntk-withmulticasts: Allows the system to transmit the multicast packets, broadcast
packets and the unicast packets with successfully-authenticated destination MAC
addresses.
Description
Use the port-security ntk-mode command to set the packet transmission mode when
the NTK feature is enabled.
Use the undo port-security ntk-mode command to cancel the packet transmission
mode that has been set.
Table 1-2 shows the modes in which the NTK feature is enabled.
Note:
By checking the destination MAC addresses of the data frames to be sent from a port,
this feature ensures that only successfully authenticated devices can obtain data
frames from the port so as to prevent illegal devices from filching network data.
Example
# Enter system view.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
# Enable port security.
[Quidway] port-security enable
# Enter Ethernet1/0/1 port view.
[Quidway] interface Ethernet1/0/1
# Set the packet transmission mode of the NTK feature to ntk-withbroadcasts on the
current port.
[Quidway-Ethernet1/0/1] port-security ntk-mode ntk-withbroadcasts
Allows the system
Huawei Technologies Proprietary
Chapter 1 Port Security Commands
to transmit only
1-10
unicast packets with