Huawei S1700 Series Web User Manual page 149

S1700 Managed Series Ethernet Switches
Web User Manual
Figure 9-21 Configure Port Security for Interface
Table 9-15 Parameters of Configuring Port Security
Item
Interface Name
Port Security
Security Action
Static Address Aging
Sticky Learning
Issue 05 (2012-10-25)
Description
Display interface number.
Enable or Disable port security on the interface.
Protect: When the number of learned MAC address reaches the
limitation number of interface, the interface will drop the message
whose source address is not included in MAC table.
Restrict: When the number of the learned MAC address reaches the
limitation number of interface, the interface will drop the message
whose source address is not included in MAC table, and record it in
the system log.
Shutdown: When the number of the learned MAC address reaches
the limitation number of interface, the interface will execute
Shutdown operation, and record it in the system log.
Enable or Disable static address aging.
Sticky is used to convert the dynamic MAC address learned on the
interface to static MAC address. When the Maximum number of
MAC reaches the upper limitation, the interface will not learn new
MAC address, and only allow the security MAC to communicate
with the switch, which not only avoids the lost dynamic Mac‟s
re-learning after the device reboots, but also prevents the untrusted
MAC host from communicating with the switch through the
interface.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Security
139