H3C S5600 Series Operation Manual page 213

[Switch] port-security enable
# Specify the switch to trigger MAC authentication at an interval of 60 seconds.
[Switch] port-security timer guest-vlan timer 60
# Create VLAN 10 and assign the port GE1/0/1 to it.
[Switch] vlan 10
[Switch–vlan10] port gigabitethernet 1/0/1
# Set the security mode of the port GE1/0/2 to macAddressOrUserLoginSecure.
[Switch] interface gigabitethernet1/0/2
[Switch-GigabitEthernet1/0/2] port-security port-mode userlogin-secure-or-mac
# specify VLAN 10 as the guest VLAN of the port.
[Switch-GigabitEthernet1/0/2] port-security guest-vlan 10
You can display the guest VLAN configuration information by the display
current-configuration or display interface gigabitethernet 1/0/2 command.
If a user fails the authentication, you can use the display vlan 10 command to view if the
guest VLAN specified for the port is effective.
1-28