62
PROTOCOL PORT SECURITY 
CONFIGURATION COMMANDS
Protocol Port security 
Configuration 
Commands
ip portsafe Syntax
ip portsafe enable
undo ip portsafe enable
View
System view
Parameter
None
Description
Use the ip portsafe enable command to enable the protocol port security 
function to check all IP packets on the interface module. If the destination IP is the 
virtual interface IP of the switch, and the corresponding destination protocol port 
is not open, the packet will be dropped.
Use the undo ip portsafe enable command to disable the protocol port security 
function. Then all packets on the interface module are not checked.
By default, the fabric enables the protocol port security function. So do the 
standby module and the interface module.
At present, the following protocols are being checked:
Tab le  153   State of the protocol port
Protocol  Port  Default State 
IGMP/IGSP  PROTOCOL:2  Close 
OSPF  PROTOCOL:89  Close 
PIM  PROTOCOL:123  Close 
SSH  TCP:22  Close 
TELNET  TCP:23  Close 
HTTP  TCP:80  Open 
BGP  TCP:179  Close 
MPLS LDP  TCP:646  Close