173
[Sysname-GigabitEthernet1/0/1] port-security max-mac-count 100
[Sysname-GigabitEthernet1/0/1] port-security port-mode autolearn
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] port-security mac-address security 0001-0001-0002 interface gigabitethernet
1/0/1 vlan 10
# Enable port security, set port GigabitEthernet 1/0/1 in autoLearn mode, and add a sticky MAC
address 0001-0002-0003 in VLAN 4 in interface view.
<Sysname> system-view
[Sysname] port-security enable
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-security max-mac-count 100
[Sysname-GigabitEthernet1/0/1] port-security port-mode autolearn
[Sysname-GigabitEthernet1/0/1] port-security mac-address security sticky 0001-0002-0003
vlan 4
port-security max-mac-count
Syntax
port-security max-mac-count count-value
undo port-security max-mac-count
View
Layer 2 Ethernet interface view
Default level
2: System level
Parameters
count-value: Specifies the maximum number of secure MAC addresses allowed on the port. The value
ranges from 1 to 1024.
Description
Use the port-security max-mac-count command to set the maximum number of secure MAC addresses
allowed to be added for the port.
Use the undo port-security max-mac-count command to restore the default setting.
By default, the maximum number of secure MAC addresses is not limited.
Secure MAC addresses include MAC addresses automatically learned by the port in a security mode and
those configured manually with the port-security mac-address security command. The maximum number
of secure MAC addresses for a port must not be less than the number of MAC addresses stored on the
port.
You cannot change the maximum number of secure MAC addresses, if the port is operating in autoLearn
mode.
Related commands: display port-security.
Examples
# Set the maximum number of secure MAC addresses allowed on port GigabitEthernet 1/0/1 to 100.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
To Next Page
Loading...
Need help?
General
