Port-Security Oui - HP FlexNetwork MSR Series Command Reference Manual
Comware 7 security
Hide thumbs
Also See for FlexNetwork MSR Series:
- Configuration manual (392 pages) ,
- Configuration manuals (159 pages)
Advertisement
MSR1002-4/1003-8S.
The NTK feature checks the destination MAC addresses in outbound frames. This feature allows
frames to be sent only to devices passing authentication, preventing illegal devices from intercepting
network traffic.
Examples
# Set the NTK mode of GigabitEthernet 1/0/1 to ntkonly, allowing the port to forward received
packets only to devices passing authentication.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-security ntk-mode ntkonly
Related commands
display port-security
port-security oui
Use port-security oui to configure an OUI value for user authentication.
Use undo port-security oui to delete the OUI value with the specified OUI index.
Syntax
port-security oui index index-value mac-address oui-value
undo port-security oui index index-value
Default
No OUI values are configured.
Views
System view
Predefined user roles
network-admin
Parameters
index-value: Specifies the OUI index, in the range of 1 to 16.
oui-value: Specifies an OUI string, a 48-bit MAC address in the H-H-H format. The system uses only
the 24 high-order bits as the OUI value.
Usage guidelines
You can configure multiple OUI values.
An OUI, the first 24 binary bits of a MAC address, is assigned by IEEE to uniquely identify a device
vendor. Use this command when you configure a device to allow packets from specific wired devices
to pass authentication or to allow packets from certain wireless devices to initiate authentication. For
example, when a company allows only IP phones of vendor A in the Intranet, use this command to
specify the OUI of vendor A.
The OUI values configured by this command apply only to the ports operating in userLoginWithOUI
mode. In userLoginWithOUI mode, a port allows only one 802.1X user and one user whose MAC
address matches one of the configured OUI values.
Examples
# Configure an OUI value of 000d2a, and set the index to 4.
<Sysname> system-view
[Sysname] port-security oui index 4 mac-address 000d-2a10-0033
340
Advertisement
