3Com WX3000 Series Operation Manual page 144

The WX3000 series devices do not support the ntkonly NTK feature.
Configuring intrusion protection
Follow these steps to configure the intrusion protection feature:
To do...
Enter system view
Enter Ethernet port view
Set the corresponding action to
be taken by the device when
intrusion protection is triggered
Return to system view
Set the timer during which the
port remains disabled
The port-security timer disableport command is used in conjunction with the port-security
intrusion-mode disableport-temporarily command to set the length of time during which the port
remains disabled.
If you configure the NTK feature and execute the port-security intrusion-mode blockmac command
on the same port, the device will be unable to disable the packets whose destination MAC address is
illegal from being sent out that port; that is, the NTK feature configured will not take effect on the packets
whose destination MAC address is illegal.
Configuring the Trap feature
Follow these steps to configure port security trapping:
Use the command...
system-view
interface interface-type
interface-number
port-security intrusion-mode
{ disableport |
disableport-temporarily |
blockmac }
quit
port-security timer
disableport timer
1-7
Remarks
—
—
Required
By default, no action is taken
when intrusion protection is
triggered.
—
Optional
20 seconds by default