Userloginwithoui Configuration Example - HPE FlexNetwork 7500 Series Security Configuration Manual

NeedToKnow mode
Intrusion protection mode
Security MAC address attribute
Learning mode
Aging type
Max secure MAC addresses
Current secure MAC addresses
Authorization
NAS-ID profile
The port allows for MAC address learning, and you can view the number of learned MAC addresses
in the Current secure MAC addresses field.
# Display additional information about the learned MAC addresses.
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port-security max-mac-count 64
port-security port-mode autolearn
port-security mac-address security sticky 0002-0000-0015 vlan 1
port-security mac-address security sticky 0002-0000-0014 vlan 1
port-security mac-address security sticky 0002-0000-0013 vlan 1
port-security mac-address security sticky 0002-0000-0012 vlan 1
port-security mac-address security sticky 0002-0000-0011 vlan 1
#
[Device-GigabitEthernet1/0/1] quit
# Verify that the port security mode changes to secure after the number of MAC addresses learned
by the port reaches 64.
[Device] display port-security interface gigabitethernet 1/0/1
# Verify that the port will be disabled for 30 seconds after it receives a frame with an unknown MAC
address. (Details not shown.)
# After the port is re-enabled, delete several secure MAC addresses.
[Device] undo port-security mac-address security sticky 0002-0000-0015 vlan 1
[Device] undo port-security mac-address security sticky 0002-0000-0014 vlan 1
...
# Verify that the port security mode of the port changes to autoLearn, and the port can learn MAC
addresses again. (Details not shown.)

userLoginWithOUI configuration example

Network requirements
As shown in
authenticates the client with a RADIUS server in ISP domain sun. If the authentication succeeds, the
client is authorized to access the Internet.
•
The RADIUS server at 192.168.1.2 acts as the primary authentication server and the secondary
accounting server. The RADIUS server at 192.168.1.3 acts as the secondary authentication
server and the primary accounting server. The shared key for authentication is name, and the
shared key for accounting is money.
•
All users use the authentication, authorization, and accounting methods of ISP domain sun.
Figure 76, a client is connected to the device through GigabitEthernet 1/0/1. The device
: Disabled
: DisablePortTemporarily
: Sticky
: Periodical
: 64
: 0
: Permitted
: Not configured
237