3Com Switch 4800G 24-Port - Configuring Port Security Features

Configuring Port Security Features 1167
n
On a port operating in either macAddressElseUserLoginSecure mode or
macAddressElseUserLoginSecureExt mode, intrusion protection is triggered only
after both MAC authentication and 802.1x authentication for the same frame fail.
Configuring Port
Security Features
Configuring NTK Follow these steps to configure the NTK feature:
Configuring Intrusion
Protection
Follow these steps to configure the intrusion protection feature:
n
If you configure the port-security intrusion-mode command with the
disableport-temporarily keyword, you can use the port-security timer
disableport command to set the silence timeout during which a port remains
disabled.
Configuring Trapping Follow these steps to configure port security trapping:
Set the port security
mode
port-security port-mode
{ mac-authentication |
mac-else-userlogin-secure |
mac-else-userlogin-secure-ext | secure |
userlogin | userlogin-secure |
userlogin-secure-ext |
userlogin-secure-or-mac |
userlogin-secure-or-mac-ext }
Required
By default, a port
operates in
noRestrictions mode.
To do… Use the command… Remarks
To do… Use the command… Remarks
Enter system view system-view -
Enter Ethernet port view interface interface-type
interface-number
-
Configure the NTK feature port-security ntk-mode
{ ntk-withbroadcasts |
ntk-withmulticasts |
ntkonly }
Required
Be default, NTK is disabled on
a port and all frames are
allowed to be sent.
To do… Use the command… Remarks
Enter system view system-view -
Enter Ethernet port view interface interface-type
interface-number
-
Configure the intrusion
protection feature
port-security
intrusion-mode { blockmac |
disableport |
disableport-temporarily }
Required
By default, intrusion
protection is disabled.
Return to system view quit -
Set the silence timeout during
which a port remains disabled
port-security timer
disableport time-value
Optional
20 seconds by default