3Com Switch 4800G 24-Port - Configuring Secure MAC Addresses; Ignoring the Authorization Information from the Server

1168 CHAPTER 91: PORT SECURITY CONFIGURATION
Configuring Secure
MAC Addresses
Secure MAC addresses are special MAC addresses. They never age out or get lost
if saved before the device restarts. One secure MAC address can be added to only
one port in the same VLAN. Thus, you can bind a MAC address to one port in the
same VLAN.
Secure MAC addresses can be learned by a port working in autoLearn mode. You
can also manually configure them through the command line interface (CLI) or
management information base (MIB).
Configuration
Prerequisites
■ Enable port security
■ Set the maximum number of secure MAC addresses allowed on the port
■ Set the port security mode to autoLearn
Configuration Procedure Follow these steps to configure a secure MAC address:
n
The configured secure MAC addresses are saved in the configuration file and will
not get lost when the port goes up or goes down. After you save the
configuration file, the secure MAC address saved in the configuration file are
maintained even after the device restarts.
Ignoring the
Authorization
Information from the
Server
After an 802.1x user or MAC authenticated user passes RADIUS authentication,
the RADIUS server delivers the authorization information to the device. You can
configure a port to ignore the authorization information from the RADIUS server.
Follow these steps to configure a port to ignore the authorization information
from the RADIUS server:
To do… Use the command… Remarks
Enter system view system-view -
Enable port security traps port-security trap { addresslearned
| dot1xlogfailure | dot1xlogoff |
dot1xlogon | intrusion |
ralmlogfailure | ralmlogoff |
ralmlogon }
Required
By default, no port
security trap is
enabled.
To do… Use the command… Remarks
Enter system view system-view -
Configure a
secure MAC
address
In system view port-security
mac-address security
mac-address interface
interface-type
interface-number vlan
vlan-id
Required
Use either approach
No secure MAC address is
configured by default.
In Ethernet port
view
interface interface-type
interface-number
port-security
mac-address security
mac-address vlan vlan-id