H3C MSR Series Command Reference

223
 MSR2600-10-X1.
 MSR3600-28/3600-51.
 MSR3600-28-SI/3600-51-SI.
The NTK feature checks the destination MAC addresses in outbound frames. This feature allows
frames to be sent only to devices passing authentication, preventing illegal devices from intercepting
network traffic.
Examples
# Set the NTK mode of GigabitEthernet 1/0/1 to ntkonly, allowing the port to forward received
packets only to devices passing authentication.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-security ntk-mode ntkonly
Related commands
display port-security
port-security oui
Use port-security oui to configure an OUI value for user authentication.
Use undo port-security oui to delete the OUI value with the specified OUI index.
Syntax
port-security oui index index-value mac-address oui-value
undo port-security oui index index-value
Default
No OUI values are configured.
Views
System view
Predefined user roles
network-admin
Parameters
index-value: Specifies the OUI index, in the range of 1 to 16.
oui-value: Specifies an OUI string, a 48-bit MAC address in the H-H-H format. The system uses only
the 24 high-order bits as the OUI value.
Usage guidelines
You can configure multiple OUI values.
An OUI, the first 24 binary bits of a MAC address, is assigned by IEEE to uniquely identify a device
vendor. Use this command when you configure a device to allow packets from specific wired devices
to pass authentication or to allow packets from certain wireless devices to initiate authentication. For
example, when a company allows only IP phones of vendor A in the Intranet, use this command to
specify the OUI of vendor A.
The OUI values configured by this command apply only to the ports operating in userLoginWithOUI
mode. In userLoginWithOUI mode, a port allows only one 802.1X user and one user whose MAC
address matches one of the configured OUI values.
Examples
# Configure an OUI value of 000d2a, and set the index to 4.

H3C MSR Series Specifications

General

Category	Network Router
IPv6 Support	Yes
Dimensions	Varies by model
Weight	Varies by model
Product Type	Modular Router
Ports	Varies by model
WAN Interfaces	Varies by model
Firewall	Yes
QoS	Yes
Wireless Support	Varies by model
USB Ports	Varies by model
Console Port	Yes
Power Supply	Varies by model
Redundancy	Varies by model
Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Humidity	5% to 95% non-condensing
Series	MSR
Certifications	CE, FCC, RoHS