Port-Security Max-Mac-Count; Port-Security Ntk-Mode - HPE FlexNetwork HSR6800 Security Command Reference

port-security max-mac-count

Use port-security max-mac-count to set the maximum number of MAC addresses that port
security allows on a port.
Use undo port-security max-mac-count to restore the default setting.
Syntax
port-security max-mac-count count-value
undo port-security max-mac-count
Default
Port security has no limit on the number of MAC addresses on a port.
Views
Ethernet interface view
Default command level
2: System level
Parameters
count-value: Specifies the maximum number of MAC addresses that port security allows on the port.
The value range is 1 to 1024.
Usage guidelines
In autoLearn mode, this command sets the maximum number of secure MAC addresses (both
configured and automatically learned) on the port. The maximum number set by this command
cannot be smaller than the current number of MAC addresses saved on the port.
In any other mode that enables 802.1X, MAC authentication, or both, this command sets the
maximum number of authenticated MAC addresses on the port. The actual maximum number of
concurrent users that the port accepts equals this limit or the authentication method's limit on the
number of concurrent users, whichever is smaller. For example, in userLoginSecureExt mode, if
802.1X allows less concurrent users than port security's limit on the number of MAC addresses, port
security's limit takes effect.
You cannot change port security's limit on the number of MAC addresses when the port is operating
in autoLearn mode.
Examples
# Set port security's limit on the number of MAC addresses to 100 on port GigabitEthernet 3/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-GigabitEthernet3/0/1] port-security max-mac-count 100
Related commands
display port-security

port-security ntk-mode

Use port-security ntk-mode to configure the NTK feature.
Use undo port-security ntk-mode to restore the default.
Syntax
port-security ntk-mode { ntk-withbroadcasts | ntk-withmulticasts | ntkonly }
undo port-security ntk-mode
183