Configuring Guest Vlan For A Port In Macaddressoruserloginsecure Mode - H3C S5600 Series Operation Manual

Configuring intrusion protection
Follow these steps to configure the intrusion protection feature:
To do...
Enter system view
Enter Ethernet port view
Set the corresponding action
to be taken by the switch when
intrusion protection is
triggered
Return to system view
Set the timer during which the
port remains disabled
The port-security timer disableport command is used in conjunction with the
port-security intrusion-mode disableport-temporarily command to set the length of
time period during which the port remains disabled.
If you configure the NTK feature and execute the port-security intrusion-mode
blockmac command on the same port, the switch will be unable to disable the packets
whose destination MAC address is illegal from being sent out that port; that is, the NTK
feature configured will not take effect on the packets whose destination MAC address is
illegal.
Configuring trapping
Follow these steps to configure port security trapping:
To do...
Enter system view
Enable sending traps for the
specified type of event

Configuring Guest VLAN for a Port in macAddressOrUserLoginSecure mode

Users fails the authentication can access certain specified VLAN. This VLAN is called
guest VLAN. For details about guest VLAN, refer to the sections covering 802.1x and
System-Guard.
Use the command...
system-view
interface interface-type
interface-number
port-security intrusion-mode
{ blockmac | disableport |
disableport-temporarily }
quit
port-security timer disableport
timer
Use the command...
system-view
port-security trap { addresslearned |
dot1xlogfailure | dot1xlogoff | dot1xlogon
| intrusion | ralmlogfailure | ralmlogoff |
ralmlogon }
1-13
Remarks
—
—
Required
By default, intrusion
protection is disabled.
—
Optional
20 seconds by default
Remarks
—
Required
By default, no
trap is sent.