6-5
Enabling Port Security
Configuration Prerequisites
Before enabling port security, you need to disable 802.1X and MAC authentication globally.
Configuration Procedure
Follow these steps to enable port security:
To do… Use the command… Remarks
Enter system view system-view —
Enable port security port-security enable
Required
Disabled by default
Note that:
1) Enabling port security resets the following configurations on a port to the bracketed defaults. Then,
values of these configurations cannot be changed manually; the system will adjust them based on
the port security mode automatically:
z 802.1X (disabled), port access control method (macbased), and port access control mode (auto)
z MAC authentication (disabled)
2) Disabling port security resets the following configurations on a port to the bracketed defaults:
z Port security mode (noRestrictions)
z 802.1X (disabled), port access control method (macbased), and port access control mode (auto)
z MAC authentication (disabled)
3) Port security cannot be disabled if there is any user present on a port.
z For detailed 802.1X configuration, refer to 802.1X Configuration in the Security Volume.
z For detailed MAC-based authentication configuration, refer to MAC Authentication Configuration
in the Security Volume.
Setting the Maximum Number of Secure MAC Addresses
With port security enabled, more than one authenticated user is allowed on a port. The number of
authenticated users allowed, however, cannot exceed the specified upper limit.
By setting the maximum number of secure MAC addresses allowed on a port, you can:
z Control the maximum number of users who are allowed to access the network through the port.
z Control the number of secure MAC addresses that can be added with port security.
To Next Page
Loading...
