Operation Manual – Port Security-Port Binding
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1
Port Security Configuration
1-2
Table 1-1 Description of port security modes
Security
mode
Description Feature
autolearn
In this mode, the port automatically learns MAC
addresses and changes them to security MAC
addresses.
This security mode will automatically change to
the secure mode after the amount of security
MAC addresses on the port reaches the maximum
number configured with the port-security
max-mac-count command.
After changing to the secure mode, only those
packets whose source MAC addresses are
security MAC addresses learned or dynamic MAC
addresses configured can pass through the port.
secure
In this mode, the port is disabled from learning
MAC addresses.
Only those packets whose source MAC addresses
are security MAC addresses learned, static MAC
addresses or dynamic MAC addresses configured
can pass through the port.
In either mode,
the device will
trigger NTK and
intrusion
protection upon
detecting an
illegal packet.
userlogin
In this mode, port-based 802.1x authentication is
performed for access users.
In this mode,
neither NTK nor
intrusion
protection will be
triggered.