H3C S6812 Series Command Reference Manual page 1901

Default
Port security does not limit the number of secure MAC addresses on a port.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Parameters
max-count: Specifies the maximum number of secure MAC addresses that port security allows on
the port. The value range is 1 to 4294967295. Make sure this value is not less than the number of
MAC addresses currently saved on the port.
Usage guidelines
For autoLearn mode, this command sets the maximum number of secure MAC addresses (both
configured and automatically learned) on the port.
In any other mode that enables 802.1X, MAC authentication, or both, this command sets the
maximum number of authenticated MAC addresses on the port. The actual maximum number of
concurrent users that the port accepts equals the smaller of the following values:
•
The value set by using this command.
•
The maximum number of concurrent users allowed by the authentication mode in use.
For example, in userLoginSecureExt mode, if 802.1X allows more concurrent users than port
security's limit on the number of MAC addresses, port security's limit takes effect.
You cannot change port security's limit on the number of MAC addresses when the port is operating
in autoLearn mode.
Examples
# Set the maximum number of secure MAC address port security allows on Ten-GigabitEthernet
1/0/1 to 100.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] port-security max-mac-count 100
Related commands
display port-security
port-security nas-id-profile
Use port-security nas-id-profile to apply a NAS-ID profile to global or port-based port security.
Use undo port-security nas-id-profile to restore the default.
Syntax
port-security nas-id-profile profile-name
undo port-security nas-id-profile
Default
No NAS-ID profile is applied to port security globally or on any port.
Views
System view
Layer 2 Ethernet interface view
13