1166 CHAPTER 91: PORT SECURITY CONFIGURATION
Enabling the autoLearn
Mode
Configuration prerequisites
Before enabling the autoLearn mode, you need to set the maximum number of
secure MAC addresses allowed on the port.
Configuration procedure
Follow these steps to enable the autoLearn mode:
n
When a port operates in autoLearn mode, you cannot change the maximum
number of secure MAC addresses allowed on the port.
Enabling the
userLoginWithOUI Mode
In userLoginWithOUI mode, a port supports one 802.1x user as well as users
whose MAC addresses have an OUI value among the specified ones.
Follow these steps to enable the userLoginWithOUI mode:
n
■ An organizationally unique identifier (OUI), the left-most 24 bits of a MAC
address, is a globally unique identifier assigned by IEEE to a certain
manufacturer.
■ You can configure multiple OUI values.
Enabling any other Port
Security Mode
Follow these steps to enable any other port security mode:
To do… Use the command… Remarks
Enter system view system-view -
Enter Ethernet port view interface interface-type
interface-number
-
Enable the autoLearn mode port-security port-mode
autolearn
Required
By default, a port operates in
noRestrictions mode.
To do… Use the command… Remarks
Enter system view system-view -
Set an OUI value for user
authentication
port-security oui oui-value
index index-value
Optional
Not configured by default
Enter Ethernet port view interface interface-type
interface-number
-
Enable the userLoginWithOUI
mode
port-security port-mode
userlogin-withoui
Required
By default, a port operates in
noRestrictions mode.
To do… Use the command… Remarks
Enter system view system-view -
Enter Ethernet port
view
interface interface-type interface-number -
To Next Page
Loading...
