Configuring Basic Functions Of Port Security Mac - Raisecom ISCOM2600G-HI (A) Series Configuration Manual

Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
Aging type of dynamic secure MAC address
Restoration time of port security MAC
Dynamic secure MAC sticky learning
Port secure MAC Trap
Port secure MAC violation processing mode
Maximum number of port security MAC

10.2.4 Configuring basic functions of port security MAC





Configure basic functions of port security MAC for the ISCOM2600G-HI series switch as
below.
1
2
3
4
5
6
Function
We do not recommend enabling port security MAC on member interfaces of the
LAG.
We do not recommend using the MAC address management function to configure
static MAC addresses when port security MAC is enabled.
When the 802.1x interface adopts a MAC address-based authentication mode,
port security MAC and 802.1x are mutually exclusive. We do not recommend co-
configuring them concurrently.
Port security MAC and interface-/interface VLAN-based MAC number limit are
mutually exclusive, which cannot be configured concurrently.
Step
Raisecom#config
Raisecom(config)#interface
interface-type interface-number
Raisecom(config-
gigaethernet1/1/port)#switchport
port-security
Raisecom(config-
gigaethernet1/1/port)#switchport
port-security maximum
Raisecom(config-
gigaethernet1/1/port)#switchport
port-security violation { protect |
restrict | shutdown }
Raisecom(config-
gigaethernet1/1/port)#no port-
security shutdown
Raisecom(config-
gigaethernet1/1/port)#exit
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
Command
maximum
Default value
Absolute
Disable, namely, no restoration
Disable
Disable
Protect
1
Description
Enter global configuration mode.
Enter physical layer interface
configuration mode.
Enable port security MAC.
(Optional) configure the
maximum number of secure
MAC addresses.
(Optional) configure secure
MAC violation mode.
(Optional) re-enable the
interface which is shut down due
to violating port security MAC.
10 Security
405