Troubleshooting Port Security - 3Com Switch 4800G 24-Port Configuration Manual

1178 C 91: P
HAPTER ORT
Troubleshooting Port
Security
Cannot Set the Port
Security Mode
[Switch-GigabitEthernet1/0/1] port-security port-mode autolearn
Error:When we change port-mode, we should first change it to noRestrictions, then change it to the other.
Cannot Configure Secure
MAC Addresses
Cannot Change Port
Security Mode When a
User Is Online
[Switch-GigabitEthernet1/0/1] undo port-security port-mode
Error:Cannot configure port-security for there is 802.1X user(s) on line on port GigabitEthernet1/0/1.
S C
ECURITY ONFIGURATION
In addition, since NTK is enabled, frames with unknown destination MAC
addresses, multicast addresses, and broadcast addresses should be discarded.
Symptom
Cannot set the port security mode.
Analysis
For a port working in a port security mode other than noRestrictions, you cannot
change the port security mode by using the port-security port-mode command
directly.
Solution
Set the port security mode to noRestrictions first.
[Switch-GigabitEthernet1/0/1] undo port-security port-mode
[Switch-GigabitEthernet1/0/1] port-security port-mode autolearn
Symptom
Cannot configure secure MAC addresses.
[Switch-GigabitEthernet1/0/1] port-security mac-address security 1-1-2 vlan 1
Error:Can not operate security MAC address for current port mode is not autoLearn!
Analysis
No secure MAC address can be configured on a port operating in a port security
mode other than autoLearn.
Solution
Set the port security mode to autoLearn.
[Switch-GigabitEthernet1/0/1] undo port-security port-mode
[Switch-GigabitEthernet1/0/1] port-security max-mac-count 64
[Switch-GigabitEthernet1/0/1] port-security port-mode autolearn
[Switch-GigabitEthernet1/0/1] port-security mac-address security 1-1-2 vlan 1
Symptom
Port security mode cannot be changed when an 802.1x-authenticated or MAC
authenticated user is online.
Analysis
Changing port security mode is not allowed when an 802.1x-authenticated or
MAC authenticated user is online.