HP 5500 HI Series User Manual

204
Step Command Remarks
3. Configure a secure MAC
address.
• In system view:
port-security mac-address
security [ sticky] mac-address
interface interface-type
interface-number vlan vlan-id
• In interface view:
a. interface interface-type
interface-number
b. port-security mac-address
security [ sticky]
mac-address vlan vlan-id
c. quit
Use either method.
No secure MAC address exists by
default.
4. Enter Layer 2 Ethernet
interface view.
interface interface-type
interface-number
N/A
5. Enable inactivity aging.
port-security mac-address
aging-type inactivity
Optional.
By default, the inactivity aging
function is disabled.
6. Enable the dynamic secure
MAC function.
port-security mac-address dynamic
Optional.
By default, sticky MAC addresses
can be saved to the configuration
file, and once saved, can survive a
device reboot.
NOTE:
You can display dynamic secure MAC addresses only by using the display port-security mac-address
security command.
Ignoring authorization information
The authorization information is delivered by the RADIUS server or the local device to an 802.1X user or
MAC authenticated user who passes RADIUS or local authentication. You can configure a port to ignore
the authorization information.
To configure a port to ignore the authorization information:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enter Layer 2 Ethernet
interface view.
interface interface-type
interface-number
N/A
3. Ignore the authorization
information from the RADIUS
server or the local device.
port-security authorization ignore
By default, a port uses the
authorization information from the
RADIUS server or the local device.
Displaying and maintaining port security

HP 5500 HI Series Specifications

General

Brand	HP
Model	5500 HI Series
Category	Switch
Language	English