HP 5120 SI Series

176
• 802.1X (disabled), port access control method (macbased), and port authorization mode (auto)
• MAC authentication (disabled)
3. Port security cannot be disabled when a user is present on a port.
NOTE:
• For more information about 802.1X configuration, see the chapter "802.1X configuration."
• For more information about MAC authentication configuration, see the chapter "MAC authentication
configuration."
Setting the maximum number of secure MAC
addresses
The maximum number of users a port supports in a port security mode is determined by the maximum
number of secure MAC addresses or the maximum number of authenticated users that the security mode
supports, whichever is smaller.
By setting the maximum number of MAC addresses allowed on a port, you can implement the following
control:
• Control the number of secure MAC addresses that a port can learn for port security.
• Control the maximum number of users who are allowed to access the network through the port.
Follow these steps to set the maximum number of secure MAC addresses allowed on a port:
To do… Use the command… Remarks
Enter system view system-view —
Enter Layer 2 Ethernet interface
view
interface interface-type
interface-number
—
Set the maximum number of secure
MAC addresses allowed on a port
port-security max-mac-count
count-value
Required
Not limited by default
NOTE:
This configuration is independent of the MAC learning limit described in MAC address table confi
g
uration
in the
Layer 2—LAN Switching Configuration Guide .
Setting the port security mode
Configuration prerequisites
Before you set the port security mode, complete the following tasks:
• On the port, disable 802.1X, set the port access control method to macbased, and set the port
authorization mode to auto.
• Disable MAC authentication on the port.
• Makes sure that the port does not belong to any aggregation group.