HP 5120 SI Series

175
• You can use the MAC authentication VLAN feature together with security modes that support MAC
authentication. For more information about the MAC authentication guest VLAN, see the chapter
"MAC authentication configuration."
NOTE:
If you configure both an 802.1X Auth-Fail VLAN and a MAC authentication
g
uest VLAN on a port that
performs MAC-based access control, the 802.1X Auth-Fail VLAN has a higher priority.
Port security configuration task list
Complete the following tasks to configure port security:
Task Remarks
Enabling port security Required
Setting the maximum number of secure MAC addresses Optional
Setting the port security mode Required
Configuring port security
features
Configuring NTK
Optional
Configure one
or more features
as required.
Configuring intrusion protection
Configuring port security traps
Configuring secure MAC addresses Optional
Ignoring authorization information from the server Optional
Enabling port security
Configuration prerequisites
Disable 802.1X and MAC authentication globally.
Configuration procedure
Follow these steps to enable port security:
To do… Use the command… Remarks
Enter system view
system-view
—
Enable port security port-security enable
Required
Disabled by default.
1. Enabling port security resets the following configurations on a port to the bracketed defaults. Then,
values of these configurations cannot be changed manually; the system will adjust them based on
the port security mode automatically:
• 802.1X (disabled), port access control method (macbased), and port authorization mode (auto)
• MAC authentication (disabled)
2. Disabling port security resets the following configurations on a port to the bracketed defaults:
• Port security mode (noRestrictions)