138
Task Command Remarks
Display information about blocked
MAC addresses.
display port-security mac-address block
[
interface
interface-type interface-number ]
[
vlan
vlan-id ] [
count
] [
|
{
begin
|
exclude
|
include
} regular-expression ]
Available in any
view.
Display information about PSK
users.
display port-security preshared-key user
[
interface
interface-type interface-number ] [
|
{
begin
|
exclude
|
include
} regular-expression ]
Available in any
view.
Port security configuration examples
Configuring the autoLearn mode
Network requirements
See Figure 50. Configure port Ethernet 1/1 on the Device, as follows:
• Accept up to 64 users on the port without authentication.
• Permit the port to learn and add MAC addresses as sticky MAC addresses, and set the secure
MAC aging timer to 30 minutes.
• After the number of secure MAC addresses reaches 64, the port stops learning MAC addresses.
If any frame with an unknown MAC address arrives, intrusion protection starts, and the port
shuts down and stays silent for 30 seconds.
Figure 50 Network diagram
Configuration procedure
# Enable port security.
<Device> system-view
[Device] port-security enable
# Set the secure MAC aging timer to 30 minutes.
[Device] port-security timer autolearn aging 30
# Enable intrusion protection traps on port Ethernet 1/1.
[Device] port-security trap intrusion
[Device] interface ethernet 1/1
# Set port security's limit on the number of MAC addresses to 64 on the port.
[Device-Ethernet1/1] port-security max-mac-count 64
# Set the port security mode to autoLearn.
[Device-Ethernet1/1] port-security port-mode autolearn
# Configure the port to be silent for 30 seconds after the intrusion protection feature is triggered.
[Device-Ethernet1/1] port-security intrusion-mode disableport-temporarily
[Device-Ethernet1/1] quit
[Device] port-security timer disableport 30
To Next Page
Loading...
Need help?
General
