Displaying And Maintaining Port Security Configuration - H3C S3100 Series Operation Manual

To do...
Configuring an aging time for learned security MAC address entries
By default, learned security MAC address entries will never be aged; they are deleted only when the
port security feature is disabled or the security mode is not autolearn any more.
You can configure an aging time for security MAC address entries. When the timer of an entry expires,
the entry is removed from the security MAC address table.
Follow these steps to configure an aging time for learned security MAC address entries:
To do...
Enter system view
Enable port security
Configure the aging time for
learned security MAC address
entries
Enter Ethernet port view
Set the maximum number of
MAC addresses allowed on the
port
Set the security mode of the port
to autolearn
After you execute the port-security timer autolearn command, you can display security MAC address
entries by the display mac-address security command. Though the aging time field displayed has a
value of "NOAGED", the aging of security MAC address entries is enabled already.

Displaying and Maintaining Port Security Configuration

To do...
Display information about port
security configuration
interface interface-type interface-number
In Ethernet
port view
mac-address security mac-address vlan
vlan-id
Use the command...
system-view
port-security enable
port-security timer autolearn
age
interface interface-type
interface-number
port-security max-mac-count
count-value
port-security port-mode
autolearn
display port-security [ interface interface-list ]
Use the command...
Use the command...
1-11
Remarks
security MAC
address is
configured.
Remarks
—
—
Required
Aging of MAC address entries
is disabled by default.
—
Required
By default, there is no limit on
the number of MAC
addresses.
Required
By default, a port operates in
noRestriction mode, and
access to the port is not
restricted.
Remarks
Available in
any view