3Com 7757 Configuration Manual page 205

Configuring Security
MAC Addresses
n
Table 137 Configure a port to ignore the authorization information from the RADIUS
server
Operation
Enter system view
Enter Ethernet port view
Ignore the authorization
information from the RADIUS
server
Security MAC addresses are special MAC addresses that never age out. One
security MAC address can be added to only one port in the same VLAN so that you
can bind a MAC address to one port in the same VLAN.
Security MAC addresses can be learned by the auto-learn function of port security
or manually configured.
Before adding security MAC addresses to a port, you must configure the port
security mode to autolearn. After this configuration, the port changes its way of
learning MAC addresses as follows.
The port deletes original dynamic MAC addresses;
■
If the amount of security MAC addresses has not yet reach the maximum
■
number, the port will learn new MAC addresses and turn them to security
MAC addresses;
If the amount of security MAC addresses reaches the maximum number, the
■
port will not be able to learn new MAC addresses and the port mode will be
changed from autolearn to secure.
The security MAC addresses manually configured are written to the configuration
file; they will not get lost when the port is up or down. As long as the
configuration file is saved, the security MAC addresses can be restored after the
switch reboots.
Configuration prerequisites
Port security is enabled.
■
The maximum number of security MAC addresses allowed on the port is set.
■
The security mode of the port is set to autolearn.
■
Configuring a security MAC address
Table 138 Configure a security MAC address
Operation Command
Enter system view system-view
Add a security MAC mac-address security mac-address
address interface interface-type
interface-number vlan vlan-id
Command
system-view
interface interface-type
interface-number
port-security authorization
ignore
Port Security Configuration
Remarks
-
-
Required
By default, a port uses the
authorization information
from the RADIUS server.
Remarks
-
Required.
By default, no security MAC
address is configured.
205