Port Security Configuration Task List; Enabling Port Security; Configuration Prerequisites; Configuration Procedure - H3C S5500-SI Series Operation Manual

Port Security Configuration Task List

Complete the following tasks to configure port security:

Enabling Port Security

Setting the Maximum Number of Secure MAC Addresses
Setting the Port Security Mode
Configuring Port Security Features
Configuring Secure MAC Addresses
Ignoring Authorization Information from the Server
Enabling Port Security

Configuration Prerequisites

Before enabling port security, you need to disable 802.1X and MAC authentication globally.

Configuration Procedure

Follow these steps to enable port security:
To do...
Enter system view
Enable port security
Note that:
1) Enabling port security resets the following configurations on a port to the bracketed defaults. Then,
values of these configurations cannot be changed manually; the system will adjust them based on
the port security mode automatically:
802.1X (disabled), port access control method (macbased), and port access control mode (auto)
MAC authentication (disabled)
2) Disabling port security resets the following configurations on a port to the bracketed defaults:
Port security mode (noRestrictions)
802.1X (disabled), port access control method (macbased), and port access control mode (auto)
MAC authentication (disabled)
3) Port security cannot be disabled if there is any user present on a port.
Task
Configuring NTK
Configuring Intrusion Protection
Configuring Trapping
Use the command...
system-view
port-security enable
1-5
Remarks
Required
Optional
Required
Optional
Choose one or
more features as
required.
Optional
Optional
Remarks
—
Required
Disabled by default