Download Print this page

Port-Security Mac-Address Security - HP FlexNetwork MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

You can display dynamic secure MAC addresses by using the display port-security mac-address
security command.
The undo port-security mac-address dynamic command converts all dynamic secure MAC
addresses on the port to sticky MAC addresses. You can manually configure sticky MAC addresses.
Examples
# Enable the dynamic secure MAC feature on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet1/0/1
[Sysname-GigabitEthernet1/0/1] port-security mac-address dynamic
Related commands
display port-security
display port-security mac-address security

port-security mac-address security

Use port-security mac-address security to add a secure MAC address.
Use undo port-security mac-address security to remove a secure MAC address.
Syntax
In Layer 2 Ethernet interface view:
port-security mac-address security [ sticky ] mac-address vlan vlan-id
undo port-security mac-address security [ sticky ] mac-address vlan vlan-id
In system view:
port-security mac-address security [ sticky ] mac-address interface interface-type
interface-number vlan vlan-id
undo port-security mac-address security [ [ mac-address [ interface interface-type
interface-number ] ] vlan vlan-id ]
Default
No manually configured secure MAC address entries exist.
Views
System view
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Parameters
sticky mac-address: Specifies a sticky MAC address, in H-H-H format. If you do not specify this
keyword, the command configures a static secure MAC address.
interface interface-type interface-number: Specifies a Layer 2 Ethernet port by its type and number.
vlan vlan-id: Specifies the VLAN that has the secure MAC address. The value range for the vlan-id
argument is 1 to 4094.
Usage guidelines
Secure MAC addresses are MAC addresses configured or learned in autoLearn mode, and if saved,
can survive a device reboot. You can bind a secure MAC address only to one port in a VLAN.
335

Advertisement

loading