HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

130
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enable port security.
port-security enable
The port security is disabled.
You can use the undo port-security enable command to disable port security when no online users
are present.
Enabling or disabling port security resets the following security settings to the default:
• 802.1X access control mode is MAC-based, and the port authorization state is auto.
• Port security mode is noRestrictions.
For more information about Configuring 802.1X, see "Configuring 802.1X."
For more information about MAC authentication configuration, see "Configuring MAC
authentication."
Setting port security's limit on the number of MAC
addresses on a port
You can set the maximum number of MAC addresses that port security allows on a port for the
following purposes:
• Controlling the number of concurrent users on the port. The maximum number of concurrent
users on the port equals this limit or the limit of the authentication mode (802.1X for example) in
use, whichever is smaller.
• Controlling the number of secure MAC addresses on the port in autoLearn mode.
The port security's limit on the number of MAC addresses on a port is independent of the MAC
learning limit described in MAC address table configuration in the Layer 2—LAN Switching
Configuration Guide.
To set the maximum number of secure MAC addresses allowed on a port:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter interface view.
interface
interface-type
interface-number
N/A
3. Set the limit of port security
on the number of MAC
addresses.
port-security max-mac-count
count-value
Not limited by default.
Setting the port security mode
The following matrix shows the autoLearn, secure and userLogin modes on Layer 2 Ethernet ports
and hardware compatibility:
Hardware
Port security mode compatibility
autoLearn secure userLogin
MSR900 No No Yes
MSR93X No No Yes

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English