Port Security Configuration Task List
Complete the following tasks to configure port security:
Enabling Port Security
Setting the Maximum Number of Secure MAC Addresses
Setting the Port Security Mode
Configuring Port
Security Features
Configuring Secure MAC Addresses
Ignoring Authorization Information from the Server
Enabling Port Security
Configuration Prerequisites
Before enabling port security, you need to disable 802.1X and MAC authentication globally.
Configuration Procedure
Follow these steps to enable port security:
To do...
Enter system view
Enable port security
Note that:
1)
Enabling port security resets the following configurations on a port to the bracketed defaults. Then,
values of these configurations cannot be changed manually; the system will adjust them based on
the port security mode automatically:
802.1X (disabled), port access control method (macbased), and port access control mode (auto)
MAC authentication (disabled)
2)
Disabling port security resets the following configurations on a port to the bracketed defaults:
Port security mode (noRestrictions)
802.1X (disabled), port access control method (macbased), and port access control mode (auto)
MAC authentication (disabled)
3)
Port security cannot be disabled if there is any user present on a port.
Task
Configuring NTK
Configuring Intrusion Protection
Configuring Trapping
Use the command...
system-view
port-security enable
1-5
Remarks
Required
Optional
Required
Optional
Choose one or more
features as required.
Optional
Optional
Remarks
—
Required
Disabled by default