Setting The Port Security Mode - 3Com 4500 PWR 26-Port Configuration Manual

Setting the Port Security Mode

Follow these steps to set the port security mode:
To do...
Enter system view
Set the OUI value for user
authentication
Enter Ethernet port view
Set the port security mode
Before setting the port to operate in the autoLearn mode, be sure to set the maximum number of
secure MAC addresses allowed on the port with the port-security max-mac-count command.
When the port operates in the autoLearn mode, you cannot change the maximum number of
secure MAC addresses allowed on the port.
After you set the port security mode to autoLearn, you cannot configure any static or blackhole
MAC addresses on the port.
After enabling port security, you can change the port security mode of a port only when the port is
operating in noRestriction mode, the default mode. To change the port security mode of a port
operating in any other mode, use the undo port-security port-mode command to restore the
default port security mode first.
If the port-security port-mode mode command has been executed on a port, none of the following can
be configured on the same port:
Maximum number of secure MAC addresses that the port can learn
Reflector port for port mirroring
Fabric port
Link aggregation
Use the command...
system-view
port-security oui OUI-value
index index-value
interface interface-type
interface-number
port-security port-mode
{ autolearn |
mac-and-userlogin-secure |
mac-and-userlogin-secure-e
xt | mac-authentication |
mac-else-userlogin-secure |
mac-else-userlogin-secure-e
xt | secure | userlogin |
userlogin-secure |
userlogin-secure-ext |
userlogin-secure-or-mac |
userlogin-secure-or-mac-ext
| userlogin-withoui }
15-9
Remarks
—
Optional
In userLoginWithOUI mode, a
port allows only one 802.1X
user and one user whose
source MAC address contains
a specified OUI to pass
authentication at the same
time.
—
Required
By default, a port operates in
noRestriction mode. In this
mode, access to the port is not
restricted.
You can set a port security
mode as needed.