H3C S3100-52P Operation Manual page 209

Operation Manual – Port Security-Port Binding
H3C S3100-52P Ethernet Switch
II. Configuring intrusion protection
Follow these steps to configure the intrusion protection feature:
Enter system view
Enter Ethernet port view
Set the corresponding
action to be taken by the
switch when intrusion
protection is triggered
Return to system view
Set the timer during which
the port remains disabled
Note:
The port-security timer disableport command is used in conjunction with the
port-security intrusion-mode disableport-temporarily command to set the length of
time during which the port remains disabled.
Caution:
If you configure the NTK feature and execute the port-security intrusion-mode
blockmac command on the same port, the switch will be unable to disable the packets
whose destination MAC address is illegal from being sent out that port; that is, the NTK
feature configured will not take effect on the packets whose destination MAC address is
illegal.
To do...
system-view
interface interface-type
interface-number
port-security
intrusion-mode { blockmac |
disableport |
disableport-temporarily }
quit
port-security timer
disableport timer
Chapter 1 Port Security Configuration
Use the command...
1-9
Remarks
—
—
Required
By default, intrusion
protection is
disabled.
—
Optional
20 seconds by
default