H3C S3100 8C SI User Manual

Operation Manual – Port Security-Port Binding
H3C S3100 Series Ethernet Switches Chapter 1 Port Security Configuration
1-9
II. Configuring intrusion protection
Follow these steps to configure the intrusion protection feature:
To do... Use the command... Remarks
Enter system view
system-view
—
Enter Ethernet port view
interface interface-type
interface-number
—
Set the corresponding
action to be taken by the
switch when intrusion
protection is triggered
port-security
intrusion-mode { blockmac |
disableport |
disableport-temporarily }
Required
By default, intrusion
protection is
disabled.
Return to system view
quit
—
Set the timer during which
the port remains disabled
port-security timer
disableport timer
Optional
20 seconds by
default
 Note:
The port-security timer disableport command is used in conjunction with the
port-security intrusion-mode disableport-temporarily command to set the length of
time during which the port remains disabled.
Caution:
If you configure the NTK feature and execute the port-security intrusion-mode
blockmac command on the same port, the switch will be unable to disable the packets
whose destination MAC address is illegal from being sent out that port; that is, the NTK
feature configured will not take effect on the packets whose destination MAC address is
illegal.

H3C S3100 8C SI Specifications

General

Brand	H3C
Model	S3100 8C SI
Category	Switch
Language	English