R211x-HP Flexfabric 11900 Security Command Reference

130
port-security mac-move permit
Use port-security mac-move permit to enable MAC move on a device.
Use undo port-security mac-move permit to restore the default.
Syntax
port-security mac-move permit
undo port-security mac-move permit
Default
MAC move is denied on the device.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command takes effect on both 802.1X and MAC authentication users.
MAC move allows 802.1X or MAC authenticated users to move between ports on a device. For example,
if an authenticated 802.1X user moves to another 802.1X-enabled port on the device, the authentication
session is deleted from the first port and the user is re-authenticated on the new port.
If MAC move is disabled and an 802.1X authenticated user moves to another port, it is not
re-authenticated.
Examples
# Enable MAC move.
<Sysname> system-view
[Sysname] port-security mac-move permit
Related commands
display port-security
port-security max-mac-count
Use port-security max-mac-count to set the maximum number of secure MAC addresses that port security
allows on a port.
Use undo port-security max-mac-count to restore the default.
Syntax
port-security max-mac-count count-value
undo port-security max-mac-count
Default
Port security has no limit on the number of secure MAC addresses on a port.