3Com Switch 7750 Configuration Guide

Port Security Configuration 203
This configuration is different from that of the maximum number of MAC
addresses that can be leaned by a port in MAC address management.
Setting the Port Security
Mode
n
■ Before setting the port security mode to autolearn, you need to set the
maximum number of MAC addresses allowed on the port with the
port-security max-mac-count command.
■ After you set the port security mode to autolearn, you cannot configure any
static or blackhole MAC addresses on the port.
■ To change the security mode of a port that is not in the normal forwarding
state, you need to perform the undo port-security port-mode command or
disable port security at first.
If the port-security port-mode mode command has been executed on a port,
none of the following can be configured on the same port:
■ Maximum number of MAC addresses that the port can learn
■ Disabling MAC address learning
■ Reflector port for port mirroring
■ Link aggregation
Table 132 Set the maximum number of MAC addresses allowed on a port
Operation Command Remarks
Enter system view system-view -
Enter Ethernet port view interface interface-type
interface-number
-
Set the maximum number of
MAC addresses allowed on
the port
port-security
max-mac-count count-value
Required
Not limited by default
Table 133 Set the port security mode
Operation Command Remarks
Enter system view system-view -
Set the OUI value for
user authentication
port-security oui OUI-value index
index-value
Optional
In userlogin-secure-oui
mode, a port supports one
802.1x user plus one user
whose source MAC address
has a specified OUI value.
Enter Ethernet port
view
interface interface-type
interface-number
-
Set the port security
mode
port-security
port-mode { autolearn |
mac-authentication |
mac-else-userlogin-secure |
mac-else-userlogin-secure-ext |
secure | userlogin | userlogin-secure
| userlogin-secure-ext |
userlogin-secure-or-mac |
userlogin-secure-or-mac-ext |
userlogin-withoui }
Required
By default, a port operates in
normal mode.
You can set a port security
mode as needed.