To Next Page

To Previous Page

Triple authentication supporting VLAN assignment and Auth-Fail VLAN configuration example ·············· 189

Configuring port security ········································································································································ 195

Overview ······································································································································································· 195

Port security features ··········································································································································· 195

Port security modes ············································································································································· 195

Working with guest VLAN and Auth-Fail VLAN ······························································································ 198

Configuration task list ·················································································································································· 198

Enabling port security ·················································································································································· 199

Setting port security's limit on the number of MAC addresses on a port······························································· 199

Setting the port security mode ···································································································································· 200

Configuration prerequisites ································································································································ 200

Configuration procedure ···································································································································· 200

Configuring port security features ······························································································································ 201

Configuring NTK ················································································································································· 201

Configuring intrusion protection ························································································································ 201

Enabling port security traps ································································································································ 202

Configuring secure MAC addresses ·························································································································· 202

Ignoring authorization information ···························································································································· 204

Displaying and maintaining port security ·················································································································· 204

Port security configuration examples ························································································································· 205

Configuring the autoLearn mode ······················································································································· 205

Configuring the userLoginWithOUI mode ········································································································ 207

Configuring the macAddressElseUserLoginSecure mode ················································································ 212

Troubleshooting port security ······································································································································ 214

Cannot set the port security mode ····················································································································· 214

Cannot configure secure MAC addresses ········································································································ 215

Cannot change port security mode when a user is online ·············································································· 215

Configuring a user profile ······································································································································ 217

User profile configuration task list ······························································································································ 217

Creating a user profile ················································································································································ 217

Applying a QoS policy ··············································································································································· 218

Enabling a user profile ················································································································································ 218

Displaying and maintaining user profiles ·················································································································· 219

Configuring password control ································································································································ 220

FIPS compliance ··························································································································································· 222

Password control configuration task list ····················································································································· 223

Enabling password control ································································································································· 223

Setting global password control parameters ···································································································· 224

Setting user group password control parameters ···························································································· 225

Setting local user password control parameters ······························································································ 226

Setting super password control parameters ····································································································· 227

Setting a local user password in interactive mode ·························································································· 227

Displaying and maintaining password control ········································································································· 227

Password control configuration example ·················································································································· 228

Configuring HABP ··················································································································································· 231