H3C S3100 8C SI - Setting the Maximum Number of Mac Addresses Allowed on a Port

Operation Manual – Port Security-Port Binding
H3C S3100 Series Ethernet Switches Chapter 1 Port Security Configuration
1-6
Caution:
Enabling port security resets the following configurations on the ports to the defaults
(shown in parentheses below):
z 802.1x (disabled), port access control method (macbased), and port access control
mode (auto)
z MAC authentication (disabled)
In addition, you cannot perform the above-mentioned configurations manually because
these configurations change with the port security mode automatically.
 Note:
z For details about 802.1x configuration, refer to the sections covering 802.1x and
System-Guard.
z For details about MAC authentication configuration, refer to the sections covering
MAC authentication configuration.
1.2.2 Setting the Maximum Number of MAC Addresses Allowed on a Port
Port security allows more than one user to be authenticated on a port. The number of
authenticated users allowed, however, cannot exceed the configured upper limit.
By setting the maximum number of MAC addresses allowed on a port, you can
z Control the maximum number of users who are allowed to access the network
through the port
z Control the number of Security MAC addresses that can be added with port
security
This configuration is different from that of the maximum number of MAC addresses that
can be leaned by a port in MAC address management.
Follow these steps to set the maximum number of MAC addresses allowed on a port:
To do... Use the command... Remarks
Enter system view
system-view
—
Enter Ethernet port view
interface interface-type
interface-number
—
Set the maximum number
of MAC addresses
allowed on the port
port-security
max-mac-count
count-value
Required
Not limited by default