H3C S3600 Series

1-6
z The mac-address security command can be configured successfully only when port security is
enabled and the security mode is autolearn.
z To create a security MAC address entry successfully, you must make sure that the specified VLAN
is carried on the specified port.
Examples
# Enable port security; configure the port security mode of Ethernet 1/0/1 as autolearn and create a
security MAC address entry for 0001-0001-0001, setting the associated port to Ethernet 1/0/1 and
assigning the MAC address to VLAN 1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] port-security enable
[Sysname] interface Ethernet1/0/1
[Sysname-Ethernet1/0/1] port-security max-mac-count 100
[Sysname-Ethernet1/0/1] port-security port-mode autolearn
[Sysname-Ethernet1/0/1] mac-address security 0001-0001-0001 vlan 1
# Use the display mac-address interface command to verify the configuration result.
[Sysname]display mac-address interface Ethernet 1/0/1
MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)
0001-0001-0001 1 Security Ethernet1/0/1 NOAGED
--- 1 mac address(es) found on port Ethernet1/0/1 ---
port-security enable
Syntax
port-security enable
undo port-security enable
View
System view
Parameters
None
Description
Use the port-security enable command to enable port security.