Huawei Quidway S5600 Series Operation Manual page 198

Operation Manual – Port Security & Port Binding
Quidway S5600 Series Ethernet Switches-Release 1510
Note:
Refer to the 802.1x module of Quidway S5600 Series Ethernet Switches Operation
Manual for details on 802.1x authentication.
You cannot add a port that configured port security feature to a link aggregation
group.
You cannot configure the port-security port-mode mode command on a port if the
port is in a link aggregation group.
1.2.2 Configuring Security MAC
Security MAC is a special type MAC address and similar with static MAC address. One
Security MAC can only be added to one port in the same VLAN. Using this feature, you
can bind a MAC address with a port in the same VLAN.
Security MAC can be learned by the autolearn function of Port-Security feature, and
can be configured by the command or MIB manually.
Before adding Security MAC, you may configure the port security mode to autolearn
and then the MAC address learning method will change:
Original dynamic MAC address will be deleted;
If the maximum Security MAC number is not reached maximum, the new MAC
address learned by the port will be added as Security MAC;
If the maximum Security MAC number is reached maximum, the new MAC
address cannot be learned by the port and the port mode will be changed from
autolearn to secure.
Note:
The Security MAC addresses configured are written to the configuration file; they will
not get lost whether the port is up or down. Security MAC addresses saved in the
configuration file can be restored after the switch reboots.
Table 1-3 Configure Security MAC address
Operation
Enter system view
Enable the port security
Enter Ethernet port view
Command
system-view
port-security enable
interface interface-type
interface-number
Huawei Technologies Proprietary
1-6
Chapter 1 Port Security Configuration
Description
-
Required
-