130 CHAPTER 12: PORT SECURITY CONFIGURATION
Network diagram
Figure 40 Network diagram for port security configuration
Configuration procedure
# Enter system view.
<4210> system-view
# Enable port security.
[4210] port-security enable
# Enter Ethernet1/0/1 port view.
[4210] interface Ethernet1/0/1
# Set the maximum number of MAC addresses allowed on the port to 80.
[4210-Ethernet1/0/1] port-security max-mac-count 80
# Set the port security mode to autolearn.
[4210-Ethernet1/0/1] port-security port-mode autolearn
# Add the MAC address 0001-0002-0003 of Host as a security MAC address to
the port in VLAN 1.
[4210-Ethernet1/0/1] mac-address security 0001-0002-0003 vlan 1
# Configure the port to be silent for 30 seconds after intrusion protection is
triggered.
[4210-Ethernet1/0/1] port-security intrusion-mode disableport-temporarily
[4210-Ethernet1/0/1] quit
[4210]port-security timer disableport 30
Internet
Switch
Host
MAC:0001-0002-0003
Eth1/0/1
To Next Page
Loading...
