Port Security Configuration Example - Huawei Quidway S5600 Series Operation Manual

Operation Manual – Port Security & Port Binding
Quidway S5600 Series Ethernet Switches-Release 1510

1.4 Port Security Configuration Example

I. Network requirements
Enable port security on port GigabitEthernet1/0/1 of switch A
Set the maximum number of the MAC addresses accommodated by the port to 80
Set the port security mode to autolearn
Add the MAC address 0001-0002-0003 of PC1 as Security MAC address to VLAN
1
II. Network diagram
Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A
Figure 1-1 Network diagram for port security configuration
III. Configuration procedure
Configure switch A as follows:
# Enter system view.
<Quidway> system-view
# Enable port security.
[Quidway] port-security enable
# Enter port view for GigabitEthernet1/0/1.
[Quidway] interface GigabitEthernet1/0/1
# Set the maximum number of MAC addresses accommodate by the port to 80.
[Quidway-GigabitEthernet1/0/1] port-security max-mac-count 80
# Set the port security mode to autolearn.
[Quidway-GigabitEthernet1/0/1] port-security port-mode autolearn
# Add the MAC address 0001-0002-0003 of PC1 as Security MAC to VLAN 1.
[Quidway-GigabitEthernet1/0/1] mac-address security 0001-0002-0003 vlan 1
GE1/0/1 GE1/0/1
MAC: 0001-0002-0003 MAC: 0001-0002-0003 MAC: 0001-0002-0003 MAC: 0001-0002-0003 MAC: 0001-0002-0003 MAC: 0001-0002-0003 MAC: 0001-0002-0003 MAC: 0001-0002-0003
Huawei Technologies Proprietary
1-8
Chapter 1 Port Security Configuration
Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B
PC1 PC1 PC1 PC1 PC1 PC1 PC1 PC1