Configuration Prerequisites; Configuration Procedure - HP 6125G Configuration Manual

Type
Dynamic

Configuration prerequisites

Enable port security.
•
Set port security's limit on the number of MAC addresses on the port. Perform this task before you
•
enable autoLearn mode.
Set the port security mode to autoLearn.
•

Configuration procedure

To configure a secure MAC address:
Step
1. Enter system view.
2. Set the secure MAC aging
timer.
3. Configure a secure MAC
address.
4. Enter Layer 2 Ethernet
interface view.
5. Enable inactivity aging.
Address sources Aging mechanism
Converted from sticky
MAC addresses or
automatically learned
Same as sticky MAC addresses.
after the dynamic
secure MAC function
is enabled.
Command
system-view
port-security timer autolearn aging
time-value
•
•
interface interface-type
interface-number
port-security mac-address
aging-type inactivity
Approach 1 (in system view):
port-security mac-address
security [ sticky] mac-address
interface interface-type
interface-number vlan vlan-id
Approach 2 (in interface view):
a. interface interface-type
interface-number
b. port-security mac-address
security [ sticky]
mac-address vlan vlan-id
c. quit
121
Can be saved and
survive a device
reboot?
No.
All dynamic secure
MAC addresses are
lost at reboot.
Remarks
N/A
Optional.
By default, secure MAC addresses
do note age out, and you can
remove them only by performing the
undo port-security mac-address
security command, changing the
port security mode, or disabling the
port security feature.
Use either approach.
No secure MAC address exists by
default.
N/A
Optional.
By default, the inactivity aging
function is disabled.