Setting The Maximum Number Of Secure Mac Addresses; Setting The Port Security Mode; Configuration Prerequisites - HP A6600 Configuration Manual

Setting the maximum number of secure MAC
addresses
The maximum number of users a port supports in a port security mode is determined by the maximum
number of secure MAC addresses or the maximum number of authenticated users that the security mode
supports, whichever is smaller.
By setting the maximum number of MAC addresses allowed on a port, implement the following control:
Control the number of secure MAC addresses that a port can learn for port security.
•
Control the maximum number of users who are allowed to access the network through the port.
•
To set the maximum number of secure MAC addresses allowed on a port:
To do...
1. Enter system view.
2. Enter interface view.
3. Set the maximum number of secure MAC
addresses allowed on a port.
NOTE:
This feature is available only on a SAP interface card in bridging mode.
•
This configuration is independent of the MAC learning limit described in MAC address table
•
configuration in the

Setting the port security mode

Configuration prerequisites

Before you set the port security mode, complete the following tasks:
On the port, disable 802.1X, set the port access control method to macbased, and set the port
•
authorization mode to auto.
Disable MAC authentication on the port.
•
The requirements above must be all met. Otherwise, an error message appears when you set a security
mode on the port. After setting a port security mode on a port, you cannot change any of the
configurations above.
Before you configure the port to operate in autoLearn mode, set the maximum number of secure
•
MAC addresses allowed on a port.
NOTE:
With port security disabled, configure a port security mode, but your configuration does not take
•
effect.
You cannot change the port security mode of a port with users online.
•
Layer 2—LAN Switching Configuration Guide
178
Command...
system-view
interface interface-type
interface-number
port-security max-mac-count
count-value
.
Remarks
—
—
Required
Not limited by default