Displaying and maintaining port security, Port security configuration examples, Autolearn configuration example – H3C Technologies H3C S12500-X Series Switches User Manual
Page 110

98
H3C recommends you enable MAC move for wireless users that roam between ports to access the
network.
To enable MAC move:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable MAC move.
port-security mac-move permit
By default, MAC move is disabled.
72B
Displaying and maintaining port security
Execute display commands in any view:
Task Command
Display the port security configuration,
operation information, and statistics.
display port-security [ interface interface-type interface-number ]
Display information about secure MAC
addresses.
display port-security mac-address security [ interface
interface-type interface-number ] [ vlan vlan-id ] [ count ]
Display information about blocked MAC
addresses.
display port-security mac-address block [ interface interface-type
interface-number ] [ vlan vlan-id ] [ count ]
73B
Port security configuration examples
209B
autoLearn configuration example
428B
Network requirements
See
810H
Figure 34
. Configure port Ten-GigabitEthernet 1/0/1 on the device, as follows:
•
Accept up to 64 users on the port without authentication.
•
Permit the port to learn and add MAC addresses as sticky MAC addresses, and set the secure MAC
aging timer to 30 minutes.
•
After the number of secure MAC addresses reaches 64, the port stops learning MAC addresses. If
any frame with an unknown MAC address arrives, intrusion protection starts, and the port shuts
down and stays silent for 30 seconds.
Figure 34 Network diagram
429B
Configuration procedure
# Enable port security.
Internet
Device
XGE1/0/1
Host
- H3C S5560 Series Switches H3C WX6000 Series Access Controllers H3C WX5000 Series Access Controllers H3C WX3000 Series Unified Switches H3C LSWM1WCM10 Access Controller Module H3C LSWM1WCM20 Access Controller Module H3C LSQM1WCMB0 Access Controller Module H3C LSRM1WCM2A1 Access Controller Module H3C LSBM1WCM2A0 Access Controller Module H3C S9800 Series Switches H3C S5130 Series Switches H3C S5120 Series Switches