Configuring Procedure - H3C S5500-SI Series Operation Manual

With port security disabled, you can configure the port security mode, but your configuration does
not take effect.
You cannot change the port security mode of a port when any user is present on the port.
Before configuring the port to operate in autoLearn mode, set the maximum number of secure MAC
addresses allowed on a port.

Configuring Procedure

Follow these steps to enable any other port security mode:
To do...
Enter system view
Set an OUI value for
user authentication
Enter interface view
Set the port security
mode
You cannot change the maximum number of secure MAC addresses allowed on a port that
operates in autoLearn mode.
OUI, defined by IEEE, is the first 24 bits of the MAC address and uniquely identifies a device
vendor.
You can configure multiple OUI values. However, a port in userLoginWithOUI mode allows only
one 802.1X user and one user whose MAC address contains a specified OUI.
After enabling port security, you can change the port security mode of a port only when the port is
operating in noRestrictions mode, the default mode. To change the port security mode of a port
operating in any other mode, use the undo port-security port-mode command to restore the
default port security mode at first.
You cannot change the port security mode of a port with users online.
Use the command...
system-view
port-security oui oui-value index
index-value
interface interface-type
interface-number
port-security port-mode { autolearn |
mac-authentication |
mac-else-userlogin-secure |
mac-else-userlogin-secure-ext |
secure | userlogin | userlogin-secure
| userlogin-secure-ext |
userlogin-secure-or-mac |
userlogin-secure-or-mac-ext |
userlogin-withoui }
1-7
Remarks
—
Optional
Not configured by default.
The command is required for
the userlogin-withoui mode.
—
Required
By default, a port operates in
noRestrictions mode.