Userloginwithoui Configuration Example - HPE Moonshot 45Gc Security Configuration Manual

port-security port-mode autolearn
port-security mac-address security sticky 0002-0000-0015 vlan 1
port-security mac-address security sticky 0002-0000-0014 vlan 1
port-security mac-address security sticky 0002-0000-0013 vlan 1
port-security mac-address security sticky 0002-0000-0012 vlan 1
port-security mac-address security sticky 0002-0000-0011 vlan 1
#
[Device-FortyGigE1/1/1] quit
# Verify that the port security mode changes to secure after the number of MAC addresses learned
by the port reaches 64.
[Device] display port-security interface fortygige 1/1/1
# Verify that the port will be disabled for 30 seconds after it receives a frame with an unknown MAC
address. (Details not shown.)
# After the port is re-enabled, delete several secure MAC addresses.
[Device] undo port-security mac-address security sticky 0002-0000-0015 vlan 1
[Device] undo port-security mac-address security sticky 0002-0000-0014 vlan 1
# Verify that the port security mode of the port changes to autoLearn, and the port can learn MAC
addresses again. (Details not shown.)

userLoginWithOUI configuration example

Network requirements
As shown in
authenticates the client with a RADIUS server. If the authentication succeeds, the client is authorized
to access the Internet.
•
The RADIUS server at 192.168.1.2 functions as the primary authentication server and the
secondary accounting server. The RADIUS server at 192.168.1.3 functions as the secondary
authentication server and the primary accounting server. The shared key for authentication is
name, and the shared key for accounting is money.
•
All users use the authentication, authorization, and accounting methods of ISP domain sun.
•
The RADIUS server response timeout time is 5 seconds. The maximum number of RADIUS
packet retransmission attempts is five. The device sends real-time accounting packets to the
RADIUS server at 15-minute intervals, and sends usernames without domain names to the
RADIUS server.
Configure port FortyGigE 1/1/1 of the device to allow only one 802.1X user and a user who uses one
of the specified OUI values to be authenticated.
Figure 72 Network diagram
Figure 72, a client is connected to the device through port FortyGigE 1/1/1. The device
197