Configuration Guide Port-based Flow Control Configuration
1. If the DOT1X has been enabled on the interface and the
authenticated user number has exceeded the maximum limit, it fails
to enable the port security function.
2. With the port security and DOT1X function enabled at the same
time,
If the secure address ages out, the DOT1X user can continue to
communicate after the re-authentication.
3. It needs no authentication to access to the network for the secure
address on the static port.
4. If the violation mode is modified on the interface, the new violation
mode takes effect only after the security port restores to the
non-violation state.
Configuration of Secure Addresses on the Secure Port
In the global configuration mode, add secure addresses for secure ports by using the following
commands:
Ruijie(config)# switch portport-security
interface interface-id mac-address
mac-address］vlan [vlan_id]
In the global configuration mode, manually
configure the secure addresss on the port.
In the interface configuration mode, add secure addresses for secure ports by using the following
commands:
Ruijie(config-if)# switchportport-security
［ mac-address mac-address ］ vlan
[vlan_id]
In the interface configuration mode, manually
configure the secure addresss on the port.
Ruijie(config-if)# switchportport-security
［ mac-address sticky mac-address ］
vlan [vlan_id]
In the interface configuration mode, manually
configure the Sticky secure addresses on the
port.
In the interface configuration mode, you can use the command no switchport port-security
mac-address mac-address to delete the secure address of this interface. Use the command no
switchport port security sticky mac-address mac-address to delete the Sticky secure address of
this interface.
The example below describes how to configure a secure address for interface gigabitethernet 0/3:
00d0.f800.073c and bind it with an IP address: 192.168.12.202.
Ruijie# configure terminal
To Next Page
Loading...
