Setting Port Security's Limit On The Number Of Mac Addresses On A Port; Setting The Port Security Mode - HP 6125G Configuration Manual

When port security is enabled, you cannot manually enable 802.1X or MAC authentication, or change
the access control mode or port authorization state. The port security automatically modifies these
settings in different security modes.
You cannot disable port security when online users are present.
Before enabling port security, disable 802.1X and MAC authentication globally.
To enable port security:
Step
1. Enter system view.
2. Enable port security.
For more information about 802.1X configuration, see
about MAC authentication configuration, see
Setting port security's limit on the number of MAC
addresses on a port
You can set the maximum number of MAC addresses that port security allows on a port for the following
purposes:
Controlling the number of concurrent users on the port. The maximum number of concurrent users on
•
the port equals this limit or the limit of the authentication mode (802.1X for example) in use,
whichever is smaller.
• Controlling the number of secure MAC addresses on the port in autoLearn mode.
The port security's limit on the number of MAC addresses on a port is independent of the MAC learning
limit described in MAC address table configuration in the Layer 2—LAN Switching Configuration Guide.
To set the maximum number of secure MAC addresses allowed on a port:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view.
3. Set the limit of port security on
the number of MAC
addresses.

Setting the port security mode

After enabling port security, you can change the port security mode of a port only when the port is
operating in noRestrictions (the default) mode. To change the port security mode for a port in any other
mode, first use the undo port-security port-mode command to restore the default port security mode.
You can specify a port security mode when port security is disabled, but your configuration cannot take
effect.
You cannot change the port security mode of a port when online users are present.
Command
system-view
port-security enable
"Configuring
"Configuring MAC
Command
system-view
interface interface-type
interface-number
port-security max-mac-count
count-value
117
Remarks
N/A
By default, the port security is disabled.
802.1X." For more information
authentication."
Remarks
N/A
N/A
Not limited by default.