Orion A10E - Configuring Basic Functions of Secure MAC Address; Default Configurations of Secure MAC Address; Preparing for Configurations

Orion Networks
A10E/A28E/A28F Configuration Guide
6 Security
Orion Networks
154
When the MAC address is in drift, that is, the secure interface A receives one user
access corresponding a secure MAC address on secure interface B, secure interface
A will take it as violation processing.
6.2.2 Preparing for configurations
Scenario
In order to ensure the security of data accessed by the interface of the switch, you can control
the input packets according to source MAC address. With secure MAC address, you can
configure permitting specified users to access the interface, or permitting specified number of
users to access from this interface only. However, when the number of users exceeds the limit,
the accessed packets will be processed in accordance with secure MAC address violation
policies.
Prerequisite
N/A
6.2.3 Default configurations of secure MAC address
The default configuration of port security MAC is as below.
Function
Default value
Interface secure MAC
Disable
Aging time of dynamic secure MAC address
300s
Dynamic secure MAC Sticky learning
Disable
Port secure MAC Trap
Disable
Port secure MAC violation processing mode
Protect
The maximum number of port security MAC
1
6.2.4 Configuring basic functions of secure MAC address

We do not suggest that you enable port security MAC on member interfaces of the
link aggregation group.

We do not suggest that you use MAC address management function to configure
static MAC addresses when port security MAC is enabled.

Port security MAC and 802.1x are mutually exclusive. We do not suggest
configuring them concurrently.

Port security MAC and interface-based MAC address number limit are mutually
exclusive. We do not suggest configuring them concurrently.