H3C Technologies H3C S7500E Series Switches - Manual (Page 182)

9-14
[Switch-GigabitEthernet2/0/1] quit
[Switch] port-security timer disableport 30
2) Verify the configuration
After completing the configurations, you can use the following command to view the port security
configuration information:
display port-security interface gigabitethernet 2/0/1
Equipment port-security is enabled
Intrusion trap is enabled
Disableport Timeout: 30s
OUI value:
GigabitEthernet2/0/1 is link-up
Port mode is autoLearn
NeedToKnow mode is disabled
Intrusion Protection mode is DisablePortTemporarily
Max MAC address number is 64
Stored MAC address number is 0
Authorization is permitted
As shown in the output, the maximum number of secure MAC addresses allowed on the port is 64, the
port security mode is autoLearn, the trapping for intrusion protection is enabled, and the intrusion
protection action is to disable the port (DisablePortTemporarily) for 30 seconds.
You can also use the command above repeatedly to track the number of MAC addresses learned by
the port, or use the display this command in interface view to display the secure MAC addresses
learned, as shown below:
system-view
[Switch] interface gigabitethernet 2/0/1
[Switch-GigabitEthernet2/0/1] display this
#
interface GigabitEthernet2/0/1
port-security max-mac-count 64
port-security port-mode autolearn
port-security mac-address security 0002-0000-0015 vlan 1
port-security mac-address security 0002-0000-0014 vlan 1
port-security mac-address security 0002-0000-0013 vlan 1
port-security mac-address security 0002-0000-0012 vlan 1
port-security mac-address security 0002-0000-0011 vlan 1
#
Issuing the display port-security interface command after the number of MAC addresses learned by
the port reaches 64, you will see that the port security mode has changed to secure. When any frame
with a new MAC address arrives, intrusion protection is triggered and you will see traps as follows:
#Jul 14 10:39:47:135 2009 Switch PORTSEC/4/VIOLATION:Traph3cSecureViolation
An intrusion occurs!
IfIndex: 9437185
Port: 9437185
MAC Addr: 00:02:00:00:00:32
VLAN ID: 1
IfAdminStatus: 1