Displaying And Maintaining Port Security; Port Security Configuration Examples; Autolearn Configuration Example - HPE FlexNetwork 7500 Series Security Configuration Manual

2. The NAS-ID profile applied globally.
If no NAS-ID profile is applied or no matching binding is found in the selected profile, the device uses
the device name as the NAS-ID.
For more information about the NAS-ID profile configuration, see
To apply a NAS-ID profile to port security:
Step
1. Enter system view.
2. Apply a NAS-ID profile to
port security.

Displaying and maintaining port security

Execute display commands in any view:
Task
Display the port security configuration,
operation information, and statistics.
Display information about secure MAC
addresses.
Display information about blocked MAC
addresses.

Port security configuration examples

autoLearn configuration example

Network requirements
As shown in
requirements:
•
Accept up to 64 users without authentication.
•
Be permitted to learn and add MAC addresses as sticky MAC addresses, and set the secure
MAC aging timer to 30 minutes.
•
Stop learning MAC addresses after the number of secure MAC addresses reaches 64. If any
frame with an unknown MAC address arrives, intrusion protection starts, and the port shuts
down and stays silent for 30 seconds.
Command
system-view
•
•
Figure 68, configure port GigabitEthernet 1/0/1 on the device to meet the following
In system view:
port-security nas-id-profile
profile-name
In Layer 2 Ethernet interface
view:
a. interface interface-type
interface-number
b. port-security
nas-id-profile
profile-name
Command
display port-security [ interface interface-type
interface-number ]
display port-security mac-address security [ interface
interface-type interface-number ] [ vlan vlan-id ] [ count ]
display port-security mac-address block [ interface
interface-type interface-number ] [ vlan vlan-id ] [ count ]
202
"Configuring AAA."
Remarks
N/A
By default, no NAS-ID profile is
applied in system view or in Layer
2 Ethernet interface view.