HPE FlexNetwork 5510 HI Series Security Configuration Guide

189
Step
Command
Remarks
disabled.
You can use the undo port-security enable command to disable port security. Because the
command logs off the online users, make sure no online users are present.
Enabling or disabling port security resets the following security settings to the default:
• 802.1X access control mode is MAC based.
• 802.1X port authorization state is auto.
For more information about 802.1X authentication and MAC authentication configuration, see
"Configuring 802.1X" and "Configuring MAC authentication."
Setting port security's limit on the number of
secure MAC addresses on a port
You can set the maximum number of secure MAC addresses that port security allows on a port for
the following purposes:
• Controlling the number of concurrent users on the port.
For a port operating in a security mode (except for autoLearn and secure), the upper limit
equals the smaller of the following values:
 The limit of the secure MAC addresses that port security allows.
 The limit of concurrent users allowed by the authentication mode in use.
• Controlling the number of secure MAC addresses on the port in autoLearn mode.
The port security's limit on the number of secure MAC addresses on a port is independent of the
MAC learning limit described in MAC address table configuration. For more information about MAC
address table configuration, see Layer 2—LAN Switching Configuration Guide.
You can set the maximum number of secure MAC addresses that port security allows for specific
VLANs on a port when the port security mode is autoLearn. When the maximum number is
exceeded, intrusion protection will be triggered in the specified VLANs.
To set the maximum number of secure MAC addresses allowed on a port:
Step
Command
Remarks
1. Enter system view.
system-view
N/A
2. Enter
Layer 2 Ethernet
interface view.
interface
interface-type
interface-number
N/A
3. Set the maximum number of
secure MAC addresses
allowed on a port.
port-security max-mac-count
count-value [
vlan
[ vlan-id-list ] ]
By default, port security does not
limit the number of secure MAC
addresses on a port.
The
vlan
[ vlan-id-list ] option is
available in Release 1121 and
later.
Setting the port security mode
Before you set a port security mode for a port, complete the following tasks:
• Disable 802.1X and MAC authentication.
• Verify that the port does not belong to any aggregation group or service loopback group.

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English