3Com Switch 4800G 24-Port Configuration Manual page 1171

Port Security
Configuration for
userLoginWithOUI Mode
port-security max-mac-count 64
port-security port-mode autolearn
port-security mac-address security 0002-0000-0015 vlan 1
port-security mac-address security 0002-0000-0014 vlan 1
port-security mac-address security 0002-0000-0013 vlan 1
port-security mac-address security 0002-0000-0012 vlan 1
port-security mac-address security 0002-0000-0011 vlan 1
#
Issuing the display port-security interface command after the number of MAC
addresses learned by the port reaches 64, you will see that the port security mode
has changed to secure. When any frame with a new MAC address arrives,
intrusion protection is triggered and you will see trap messages as follows:
#May 2 03:15:55:871 2000 Switch PORTSEC/1/VIOLATION:Traph3cSecureVi
olation
A intrusion occurs!
IfIndex: 9437207
Port: 9437207
MAC Addr: 0.2.0.0.0.21
VLAN ID: 1
IfAdminStatus: 1
In addition, you will see that the port security feature has disabled the port if you
issue the following command:
[Switch-GigabitEthernet1/0/1] display interface gigabitethernet 1/0/1
GigabitEthernet1/0/1 current state:
IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-cb00-5558
Description: GigabitEthernet1/0/1 Interface
......
The port should be re-enabled 30 seconds later.
[Switch-GigabitEthernet1/0/1] display interface gigabitethernet 1/0/1
GigabitEthernet1/0/1 current state: UP
IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-cb00-5558
Description: GigabitEthernet1/0/1 Interface
......
Now, if you manually delete several secure MAC addresses, the port security mode
of the port will be restored to autoLearn, and the port will be able to learn MAC
addresses again.
Network requirements
The client is connected to the switch through port GigabitEthernet 1/0/1. The
switch authenticates the client by the RADIUS server. If the authentication
succeeds, the client is authorized to access the Internet.
Restrict port GigabitEthernet 1/0/1 of the switch as follows:
Allow only one 802.1x user to be authenticated.
■
Allow up to 16 OUI values to be configured and allow one additional user
■
whose MAC address has an OUI among the configured ones to access the port.
Port Security Configuration Examples
Port Security Disabled
1171