HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

139
Verifying the configuration
# Display the port security configuration.
<Device> display port-security interface ethernet 1/1
Equipment port-security is enabled
Intrusion trap is enabled
AutoLearn aging time is 30 minutes
Disableport Timeout: 30s
OUI value:
Ethernet1/1 is link-up
Port mode is autoLearn
NeedToKnow mode is disabled
Intrusion Protection mode is DisablePortTemporarily
Max MAC address number is 64
Stored MAC address number is 0
Authorization is permitted
Security MAC address learning mode is sticky
Security MAC address aging type is absolute
The output shows that the port security's limit on the number of secure MAC addresses on the port is
64, the port security mode is autoLearn, intrusion protection traps are enabled, and the intrusion
protection action is disabling the port (DisablePortTemporarily) for 30 seconds.
# Perform the display port-security command multiple times to track the number of MAC
addresses learned by the port, or perform the display this command in interface view to display the
learned secure MAC addresses.
<Device> system-view
[Device] interface ethernet 1/1
[Device-Ethernet1/1] display this
#
interface Ethernet1/1
port-security max-mac-count 64
port-security port-mode autolearn
port-security mac-address security sticky 0002-0000-0015 vlan 1
port-security mac-address security sticky 0002-0000-0014 vlan 1
port-security mac-address security sticky 0002-0000-0013 vlan 1
port-security mac-address security sticky 0002-0000-0012 vlan 1
port-security mac-address security sticky 0002-0000-0011 vlan 1
#
Perform the display port-security interface command after the number of MAC addresses learned
by the port reaches 64, and you can see that the port security mode has changed to secure. When
any frame with a new MAC address arrives, intrusion protection is triggered and you can see the
following trap message:
#Jul 14 10:39:47:135 2009 Device PORTSEC/4/VIOLATION:
Trap1.3.6.1.4.1.25506.2.26.1.3.2<hh3cSecureViolation>
An intrusion occurs!
IfIndex: 9437185
Port: 9437185
MAC Addr: 00:02:00:00:00:32
VLAN ID: 1
IfAdminStatus: 1

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English