H3C S6812 Series Command Reference Manual page 1904

Related commands
display port-security
port-security port-mode
Use port-security port-mode to set the port security mode of a port.
Use undo port-security port-mode to restore the default.
Syntax
port-security port-mode { autolearn | mac-authentication | mac-else-userlogin-secure |
mac-else-userlogin-secure-ext | secure | userlogin | userlogin-secure | userlogin-secure-ext |
userlogin-secure-or-mac | userlogin-secure-or-mac-ext | userlogin-withoui }
undo port-security port-mode
Default
A port operates in noRestrictions mode, where port security does not take effect.
Views
Interface view
Predefined user roles
network-admin
Parameters
Keyword
autolearn
mac-authentication
mac-else-userlogin-s
ecure
mac-else-userlogin-s
Security mode Description
A port in this mode can learn MAC addresses. The
automatically learned MAC addresses are not added to
the MAC address table as dynamic MAC address.
Instead, the MAC addresses are added to the secure
MAC address table as secure MAC addresses. You can
also configure secure MAC addresses by using the
port-security mac-address security command.
A port in autoLearn mode allows frames sourced from
autoLearn
the following MAC addresses to pass:
•
•
When the number of secure MAC addresses reaches
the upper limit set by the port-security max-mac-count
command, the port changes to secure mode.
macAddressWithRad In this mode, a port performs MAC authentication for
ius users and services multiple users.
This mode is the combination of the
macAddressWithRadius and userLoginSecure modes,
with MAC authentication having a higher priority. In this
mode, the port allows one 802.1X authentication user
and multiple MAC authentication users to log in.
macAddressElseUse
•
rLoginSecure
•
macAddressElseUse Same as the macAddressElseUserLoginSecure mode
16
Secure MAC addresses.
MAC addresses configured by using the
mac-address dynamic and mac-address static
commands.
Upon receiving a non-802.1X frame, a port in this
mode performs only MAC authentication.
Upon receiving an 802.1X frame, the port performs
MAC authentication and then, if MAC
authentication fails, 802.1X authentication.