Configuring Security Mac - Huawei Quidway S3900 Series Operation Manual

Hide thumbs Also See for Quidway S3900 Series:
Table of Contents

Advertisement

Operation Manual – Port Security & Port Binding
Quidway S3900 Series Ethernet Switches-Release 1510

1.2.2 Configuring Security MAC

Security MAC is a special type MAC address and similar with static MAC address. One
Security MAC can only be added to one port in the same VLAN. Using this feature, you
can bind a MAC address with a port in the same VLAN.
Security MAC can be learned by the autolearn function of Port-Security feature, and
can be configured by the command or MIB manually.
Before adding Security MAC, you may configure the port security mode to autolearn
and then the MAC address learning method will change:
Original dynamic MAC address will be deleted;
If the maximum Security MAC number is not reached maximum, the new MAC
address learned by the port will be added as Security MAC;
If the maximum Security MAC number is reached maximum, the new MAC
address cannot be learned by the port and the port mode will be changed from
autolearn to secure.
Note:
The Security MAC addresses configured are written to the configuration file; they will
not get lost whether the port is up or down. Security MAC addresses saved in the
configuration file can be restored after the switch reboots.
Table 1-3 Configure Security MAC address
Operation
Enter system view
Enable the port security
Enter Ethernet port view
Set
number of Security MAC
addresses allowed by
the port
Set the port mode to
autolearn
Add a Security MAC
address manually
system-view
port-security enable
interface
interface-number
the
maximum
port-security
max-mac-count
count-value
port-security port-mode
autolearn
mac-address
mac-address [ interface
interface-type
interface-number
vlan-id
Huawei Technologies Proprietary
Chapter 1 Port Security Configuration
Command
interface-type
security
]
vlan
1-6
Description
-
Required
-
Required
By default, the maximum
number of Security MAC
addresses is not limited
Required
Required
This command can be
configured
either
system view or Ethernet
port view
in

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents