H3C S6812 Series Command Reference Manual page 1897

port-security mac-address aging-type inactivity
Use port-security mac-address aging-type inactivity to enable inactivity aging for secure MAC
addresses.
Use undo port-security mac-address aging-type inactivity to disable inactivity aging for secure
MAC addresses.
Syntax
port-security mac-address aging-type inactivity
undo port-security mac-address aging-type inactivity
Default
The inactivity aging feature is disabled for secure MAC addresses.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
If only the aging timer is configured, the aging timer counts up regardless of whether traffic data has
been sent from the sticky MAC addresses. When you use the aging timer together with the inactivity
aging feature, the aging timer restarts once traffic data is detected from the sticky MAC addresses.
The inactivity aging feature prevents the unauthorized use of a secure MAC address when the
authorized user is offline. The feature also removes outdated secure MAC addresses so that new
secure MAC addresses can be learned or configured.
This command takes effect only on sticky MAC addresses and dynamic secure MAC addresses.
Examples
# Enable inactivity aging for secure MAC addresses on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] port-security mac-address aging-type inactivity
Related commands
display port-security
port-security mac-address dynamic
Use port-security mac-address dynamic to enable the dynamic secure MAC feature.
Use undo port-security mac-address dynamic to disable the dynamic secure MAC feature.
Syntax
port-security mac-address dynamic
undo port-security mac-address dynamic
Default
The dynamic secure MAC feature is disabled. Sticky MAC addresses can be saved to the
configuration file. Once saved, they survive a device reboot.
Views
Layer 2 Ethernet interface view
9