1164 CHAPTER 91: PORT SECURITY CONFIGURATION
Port Security
Configuration Task
List
Complete the following tasks to configure port security:
Enabling Port Security
Configuration
Prerequisites
Before enabling port security, you need to disable 802.1x and MAC authentication
globally.
Configuration Procedure Follow these steps to enable port security:
n
Enabling port security resets the following configurations on a port to the defaults
bracketed, making them dependent completely on the port security mode:
■ 802.1x (disabled), port access control method (macbased), and port access
control mode (auto)
■ MAC authentication (disabled)
Disabling port security resets the following configurations on a port to the defaults
bracketed:
■ Port security mode (noRestrictions)
■ 802.1x (disabled), port access control method (macbased), and port access
control mode (auto)
■ MAC authentication (disabled)
Port security cannot be disabled if there is any user present on a port.
n
For configuration information about 802.1x authentication and MAC
authentication, refer to “802.1x Configuration” on page 715 and “MAC
Authentication Configuration” on page 739.
Task Remarks
“Enabling Port Security” on page 1164 Required
“Setting the Maximum Number of Secure MAC Addresses” on page 1165 Optional
“Setting the Port Security Mode” on page 1165 Required
“Configuring Port Security Features” on
page 1167
“Configuring NTK” on page 1167 Optional
Choose one
or more
features as
required.
“Configuring Intrusion Protection”
on page 1167
“Configuring Trapping” on page
1167
“Configuring Secure MAC Addresses” on page 1168 Optional
“Ignoring the Authorization Information from the Server” on page 1168 Optional
To do… Use the command… Remarks
Enter system view system-view -
Enable port security port-security enable Required
Disabled by default
To Next Page
Loading...
