HPE Moonshot 45Gc Security Configuration Manual page 209

# Set the secure MAC aging timer to 30 minutes.
[Device] port-security timer autolearn aging 30
# Set port security's limit on the number of secure MAC addresses to 64 on port FortyGigE 1/1/1.
[Device] interface fortygige 1/1/1
[Device-FortyGigE1/1/1] port-security max-mac-count 64
# Set the port security mode to autoLearn.
[Device-FortyGigE1/1/1] port-security port-mode autolearn
# Configure the port to be silent for 30 seconds after the intrusion protection feature is triggered.
[Device-FortyGigE1/1/1] port-security intrusion-mode disableport-temporarily
[Device-FortyGigE1/1/1] quit
[Device] port-security timer disableport 30
Verifying the configuration
# Verify the port security configuration.
[Device] display port-security interface fortygige 1/1/1
Port security parameters:
Port security
AutoLearn aging time
Disableport timeout
MAC move
Authorization fail
NAS-ID profile is not configured
OUI value list
FortyGigE1/1/1 is link-up
Port mode
NeedToKnow mode
Intrusion protection mode
Security MAC address attribute
Learning mode
Aging type
Max secure MAC addresses
Current secure MAC addresses
Authorization
NAS-ID profile is not configured
The output shows the following information:
•
The port security's limit on the number of secure MAC addresses on the port is 64.
•
The port security mode is autoLearn.
•
The intrusion protection action is disabling the port (DisablePortTemporarily) for 30 seconds.
The port allows for MAC address learning, and you can display the number of learned MAC
addresses in the Current secure MAC addresses field.
# Display additional information about the learned MAC addresses.
[Device] interface fortygige 1/1/1
[Device-FortyGigE1/1/1] display this
#
interface FortyGigE1/1/1
port-security max-mac-count 64
: Enabled
: 30 min
: 30 s
: Denied
: Online
:
: autoLearn
: Disabled
: DisablePortTemporarily
: Sticky
: Periodical
: 64
: 5
: Permitted
196