Configuring Port Security Features - 3Com 4500 Configuration Manual

Before setting the port security mode to autolearn, you need to set the maximum number of MAC
addresses allowed on the port with the port-security max-mac-count command.
When the port operates in the autolearn mode, you cannot change the maximum number of MAC
addresses allowed on the port.
After you set the port security mode to autolearn, you cannot configure any static or blackhole
MAC addresses on the port.
If the port is in a security mode other than noRestriction, before you can change the port security
mode, you need to restore the port security mode to noRestriction with the undo port-security
port-mode command.
If the port-security port-mode mode command has been executed on a port, none of the following can
be configured on the same port:
Maximum number of MAC addresses that the port can learn
Reflector port for port mirroring
Fabric port
Link aggregation

Configuring Port Security Features

Configuring the NTK feature
Follow these steps to configure the NTK feature:
To do...
Enter system view
Enter Ethernet port view
Configure the NTK feature
Configuring intrusion protection
Follow these steps to configure the intrusion protection feature:
To do...
Enter system view
Enter Ethernet port view
Set the corresponding action to
be taken by the switch when
intrusion protection is triggered
Return to system view
Use the command...
system-view
interface interface-type
interface-number
port-security ntk-mode
{ ntkonly |
ntk-withbroadcasts |
ntk-withmulticasts }
Use the command...
system-view
interface interface-type
interface-number
port-security intrusion-mode
{ blockmac | disableport |
disableport-temporarily }
quit
1-7
Remarks
—
—
Required
By default, NTK is disabled on
a port, namely all frames are
allowed to be sent.
Remarks
—
—
Required
By default, intrusion
protection is disabled.
—