1-6 
To do...  Use the command...  Remarks 
Enter Ethernet port view 
interface interface-type 
interface-number 
— 
Set the maximum number of 
MAC addresses allowed on the 
port 
port-security max-mac-count 
count-value 
Required 
Not limited by default 
 
Setting the Port Security Mode 
Follow these steps to set the port security mode: 
To do...  Use the command...  Remarks 
Enter system view 
system-view 
— 
Set the OUI value for user 
authentication 
port-security oui OUI-value 
index index-value 
Optional 
In userLoginWithOUI mode, a 
port supports one 802.1x user 
plus one user whose source 
MAC address has a specified 
OUI value. 
Enter Ethernet port view 
interface interface-type 
interface-number 
— 
Set the port security mode 
port-security port-mode 
{ autolearn | 
mac-and-userlogin-secure | 
mac-and-userlogin-secure-e
xt | mac-authentication | 
mac-else-userlogin-secure | 
mac-else-userlogin-secure-e
xt | secure | userlogin | 
userlogin-secure | 
userlogin-secure-ext | 
userlogin-secure-or-mac | 
userlogin-secure-or-mac-ext 
| userlogin-withoui } 
Required 
By default, a port operates in 
noRestriction mode. In this 
mode, access to the port is not 
restricted. 
You can set a port security 
mode as needed. 
 
 
z  Before setting the port security mode to autolearn, you need to set the maximum number of MAC 
addresses allowed on the port with the port-security max-mac-count command.  
z  When the port operates in the autoLearn mode, you cannot change the maximum number of MAC 
addresses allowed on the port. 
z  After you set the port security mode to autolearn, you cannot configure any static or blackhole 
MAC addresses on the port.  
z  If the port is in a security mode other than noRestriction, before you can change the port security 
mode, you need to restore the port security mode to noRestriction with the undo port-security 
port-mode command.