H3C Technologies H3C S3600 Series Switches - Manual (Page 216)

1-26
# Enable port security.
[Switch] port-security enable
# Specify the switch to trigger MAC authentication at an interval of 60 seconds.
[Switch] port-security timer guest-vlan timer 60
# Create VLAN 10 and assign the port Ethernet 1/0/1 to it.
[Switch] vlan 10
[Switch–vlan10] port Ethernet 1/0/1
# Set the security mode of the port Ethernet 1/0/2 to macAddressOrUserLoginSecure.
[Switch] interface Ethernet1/0/2
[Switch-Ethernet1/0/2] port-security port-mode userlogin-secure-or-mac
# specify VLAN 10 as the guest VLAN of the port.
[Switch-Ethernet1/0/2] port-security guest-vlan 10
You can display the guest VLAN configuration information by the display current-configuration or
display interface ethernet 1/0/2 command.
If a user fails the authentication, you can use the display vlan 10 command to view if the guest VLAN
specified for the port is effective.