H3C S6812 Series Command Reference Manual page 1891

Field
NeedToKnow mode
Intrusion protection mode
Learning mode
Aging type
Max secure MAC addresses
Current secure MAC addresses
Authorization
NAS-ID profile
display port-security mac-address block
Use display port-security mac-address block to display information about blocked MAC
addresses.
Syntax
display port-security mac-address block [ interface interface-type interface-number ] [ vlan
vlan-id ] [ count ]
Description
•
macAddressOrUserLoginSecureExt.
•
userLoginWithOUI.
For more information about port security modes, see Security
Configuration Guide.
Need to know (NTK) mode:
•
NeedToKnowOnly—Allows only unicast packets with
authenticated destination MAC addresses.
•
NeedToKnowWithBroadcast—Allows only unicast packets
and broadcasts with authenticated destination MAC
addresses.
•
NeedToKnowWithMulticast—Allows unicast packets,
multicasts, and broadcasts with authenticated destination
MAC addresses.
•
Disabled—NTK is disabled.
Intrusion protection action:
•
BlockMacAddress—Adds the source MAC address of the
illegal packet to the blocked MAC address list.
•
DisablePort—Shuts down the port that receives illegal
packets permanently.
•
DisablePortTemporarily—Shuts down the port that receives
illegal packets for some time.
•
NoAction—Does not perform intrusion protection.
Secure MAC address learning mode:
•
Dynamic.
•
Sticky.
Secure MAC address aging type:
•
Periodical—Timer aging only.
•
Inactivity—Inactivity aging feature together with the aging
timer.
Maximum number of secure MAC addresses (or online users) that
port security allows on the port.
Number of secure MAC addresses stored.
Whether the authorization information from the authentication
server (RADIUS server or local device) is ignored:
•
Permitted—Authorization information from the authentication
server takes effect.
•
Ignored—Authorization information from the authentication
server does not take effect.
NAS-ID profile applied to the port.
3