Huawei Quidway S5600 Series - Port Security Configuration Example

Operation Manual – Port Security & Port Binding
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 1 Port Security Configuration
Huawei Technologies Proprietary
1-8
1.4 Port Security Configuration Example
I. Network requirements
z Enable port security on port GigabitEthernet1/0/1 of switch A
z Set the maximum number of the MAC addresses accommodated by the port to 80
z Set the port security mode to autolearn
z Add the MAC address 0001-0002-0003 of PC1 as Security MAC address to VLAN
1
II. Network diagram
Switch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
GE1/0/1
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
GE1/0/1
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
Figure 1-1 Network diagram for port security configuration
III. Configuration procedure
Configure switch A as follows:
# Enter system view.
<Quidway> system-view
# Enable port security.
[Quidway] port-security enable
# Enter port view for GigabitEthernet1/0/1.
[Quidway] interface GigabitEthernet1/0/1
# Set the maximum number of MAC addresses accommodate by the port to 80.
[Quidway-GigabitEthernet1/0/1] port-security max-mac-count 80
# Set the port security mode to autolearn.
[Quidway-GigabitEthernet1/0/1] port-security port-mode autolearn
# Add the MAC address 0001-0002-0003 of PC1 as Security MAC to VLAN 1.
[Quidway-GigabitEthernet1/0/1] mac-address security 0001-0002-0003 vlan 1