Port-Security Mac-Address Security - H3C MSR Series Command Reference Manual

After you execute this command, you cannot manually configure sticky MAC addresses, and secure
MAC addresses learned by a port in autoLearn mode are dynamic. All dynamic MAC addresses are
lost at reboot. Use this command when you want to clear all sticky MAC addresses after a device
reboot.
You can display dynamic secure MAC addresses by using the display port-security mac-address
security command.
The undo port-security mac-address dynamic command converts all dynamic secure MAC
addresses on the port to sticky MAC addresses. You can manually configure sticky MAC addresses.
Examples
# Enable the dynamic secure MAC feature on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet1/0/1
[Sysname-GigabitEthernet1/0/1] port-security mac-address dynamic
Related commands
display port-security
display port-security mac-address security

port-security mac-address security

Use port-security mac-address security to add a secure MAC address.
Use undo port-security mac-address security to remove a secure MAC address.
Syntax
In Layer 2 Ethernet interface view:
port-security mac-address security [ sticky ] mac-address vlan vlan-id
undo port-security mac-address security [ sticky ] mac-address vlan vlan-id
In system view:
port-security mac-address security [ sticky ] mac-address interface interface-type
interface-number vlan vlan-id
undo port-security mac-address security [ [ mac-address [ interface interface-type
interface-number ] ] vlan vlan-id ]
Default
No manually configured secure MAC address entries exist.
Views
System view
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Parameters
sticky mac-address: Specifies a sticky MAC address, in H-H-H format. If you do not specify this
keyword, the command configures a static secure MAC address.
interface interface-type interface-number: Specifies a Layer 2 Ethernet port by its type and number.
vlan vlan-id: Specifies the VLAN that has the secure MAC address. The value range for the vlan-id
argument is 1 to 4094.
218