H3C S3100 8C SI User Manual

Operation Manual – Port Security-Port Binding
H3C S3100 Series Ethernet Switches Chapter 1 Port Security Configuration
1-2
z Trap feature: When special data packets (generated from illegal intrusion,
abnormal login/logout or other special activities) are passing through the switch
port, Trap feature enables the switch to send Trap messages to help the network
administrator monitor special activities.
1.1.3 Port Security Modes
Table 1-1 describes the available port security modes:
Table 1-1 Description of port security modes
Security mode Description Feature
noRestriction
In this mode, access to the port is not
restricted.
In this mode, neither
the NTK nor the
intrusion protection
feature is triggered.
autolearn
In this mode, the port automatically
learns MAC addresses and changes
them to security MAC addresses.
This security mode will automatically
change to the secure mode after the
amount of security MAC addresses on
the port reaches the maximum number
configured with the port-security
max-mac-count command.
After the port security mode is
changed to the secure mode, only
those packets whose source MAC
addresses are security MAC
addresses learned can pass through
the port.
secure
In this mode, the port is disabled from
learning MAC addresses.
Only those packets whose source
MAC addresses are security MAC
addresses learned and static MAC
addresses can pass through the port.
In either mode, the
device will trigger
NTK and intrusion
protection upon
detecting an illegal
packet.
userlogin
In this mode, port-based 802.1x
authentication is performed for access
users.
In this mode, neither
NTK nor intrusion
protection will be
triggered.

H3C S3100 8C SI Specifications

General

Brand	H3C
Model	S3100 8C SI
Category	Switch
Language	English