Port Security Configuration; Configuring Basic Port Security Attribute - Huawei Quidway S3900 Series Operation Manual

Operation Manual – Port Security & Port Binding
Quidway S3900 Series Ethernet Switches-Release 1510

1.2 Port Security Configuration

1.2.1 Configuring Basic Port Security Attribute

Table 1-2 Basic port security configuration
Operation
Enter system view
Enable
security
Set OUI value for
user
authentication
Enable
sending
type-specific
messages
Enter Ethernet port
view
Set the security
mode of a port
Set the maximum
number of MAC
addresses that can
be accommodated
by a port
Set
transmission mode
Set
corresponding
action
device
after the Intrusion
Protection feature
is enabled.
system-view
port
port-security enable
port-security oui OUI-value
index index-value
port-security
the
{ addresslearned | intrusion |
of
dot1xlogon | dot1xlogoff |
trap
dot1xlogfailure | ralmlogon |
ralmlogoff | ralmlogfailure }*
interface
interface-number
port-security
mode
port-security
max-mac-count count-value
port-security
the NTK {
ntk-withbroadcasts
ntk-withmulticasts }
the
port-security intrusion-mode
that the
{
will take
disableport-temporarily
blockmac }
Huawei Technologies Proprietary
Chapter 1 Port Security Configuration
Command
trap
interface-type
port-mode
ntk-mode
ntkonly |
|
disableport |
|
1-4
Description
-
Required
Optional
Optional
By default, sending of trap
messages is disabled.
-
Required
Users can choose
optimal mode as necessary.
Optional
By default, there is no limit
on the number of MAC
addresses.
Required
By default, no packet
transmission mode of the
NTK feature is set on the
port.
Required
No specific intrusion
detection mode
configured by default.
the
is