R2511-HP MSR Router Series Security Command Reference(V5)

158
Field Descri
p
tion
Intrusion mode
Intrusion protection action mode, which can be one of the following modes:
• BlockMacAddress—Adds the source MAC address of the illegal packet to
the blocked MAC address list.
• DisablePort—Shuts down the port that receives illegal packets permanently.
• DisablePortTemporarily—Shuts down the port that receives illegal packets
for some time.
• NoAction—Performs no intrusion protection.
Max MAC address number Maximum number of MAC addresses that port security allows on the port.
Stored MAC address
number
Number of MAC addresses stored.
Authorization
Whether the authorization information from the server is ignored or not:
• permitted—Authorization information from the RADIUS server takes effect.
• ignored—Authorization information from the RADIUS server does not take
effect.
Security MAC address
learning mode
Secure MAC address learning mode:
• sticky—Learn MAC addresses as sticky secure MAC addresses.
• dynamic—Learns MAC addresses as dynamic secure MAC addresses.
Security MAC address
aging type
Secure MAC address aging type:
• absolute—Timer aging.
• inactivity—Inactivity aging.
Related commands
• port-security enable
• port-security port-mode
• port-security ntk-mode
• port-security intrusion-mode
• port-security max-mac-count
• port-security mac-address security
• port-security authorization ignore
• port-security oui
• port-security trap
display port-security mac-address block
Use display port-security mac-address block to display information about blocked MAC addresses.
Syntax
display port-security mac-address block [ interface interface-type interface-number ] [ vlan vlan-id ]
[ count ] [ | { begin | exclude | include } regular-expression ]
Views
Any view