H3C S6812 Series Command Reference Manual page 1903

ntkonly: Forwards only unicast frames with authenticated destination MAC addresses.
Usage guidelines
The NTK feature checks the destination MAC addresses in outbound frames. This feature allows
frames to be sent only to devices passing authentication, preventing illegal devices from
intercepting network traffic.
Examples
# Set the NTK mode of Ten-GigabitEthernet 1/0/1 to ntkonly, allowing the port to forward received
packets only to devices passing authentication.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] port-security ntk-mode ntkonly
Related commands
display port-security
port-security oui
Use port-security oui to configure an OUI value for user authentication.
Use undo port-security oui to delete the OUI value with the specified OUI index.
Syntax
port-security oui index index-value mac-address oui-value
undo port-security oui index index-value
Default
No OUI values are configured.
Views
System view
Predefined user roles
network-admin
Parameters
index-value: Specifies the OUI index, in the range of 1 to 16.
oui-value: Specifies an OUI string, a 48-bit MAC address in the H-H-H format. The system uses only
the 24 high-order bits as the OUI value.
Usage guidelines
You can configure multiple OUI values.
An OUI, the first 24 binary bits of a MAC address, is assigned by IEEE to uniquely identify a device
vendor. Use this command to allow devices of specific vendors to access the network without being
authenticated. For example, you can specify the OUIs of IP phones and printers.
The OUI values configured by this command apply only to the ports operating in userLoginWithOUI
mode. In userLoginWithOUI mode, a port allows only one 802.1X user and one user whose MAC
address matches one of the configured OUI values.
Examples
# Configure an OUI value of 000d2a, and set the index to 4.
<Sysname> system-view
[Sysname] port-security oui index 4 mac-address 000d-2a10-0033
15