Configuring advanced port security mode, Configuring global settings for port security, Configuring global settings for – H3C Technologies H3C WX3000E Series Wireless Switches User Manual
Page 335: Port security
322
Step Remarks
2. Configuring basic port security
Required.
Configure the basic port security mode, maximum secure MAC
addresses, intrusion protection, and outbound restriction for a port.
By default, port security is disabled on all ports and access to the ports
is not restricted.
Optional.
Secure MAC addresses never age out or get lost if saved before the
device restarts. One secure MAC address can be added to only one
port in the same VLAN. You can bind a MAC address to one port in the
same VLAN.
Secure MAC addresses can be learned by a port working in basic port
security mode, or manually configured through the Web interface.
When the maximum number of secure MAC addresses is reached, no
more can be added. The port allows only packets sourced from a secure
MAC address to pass through.
By default, no secure MAC addresses are configured.
Configuring advanced port security mode
Step Remarks
1. Configuring global settings for
Required.
Enable port security globally and configure advanced parameters.
By default, port security is disabled globally.
Required.
Configure an advanced port security mode, intrusion protection,
outbound restriction, and select whether to ignore the authorization
information from the RADIUS server.
By default, port security is disabled on all ports and access to the ports
is not restricted.
Optional.
This setting is available only with the 802.1X MAC Based Or OUI
mode.
You can configure 16 permitted OUI values at most, however, a port in
802.1X MAC Based Or OUI mode allows only one 802.1X user and
one user whose MAC address contains a specified OUI to pass
authentication at the same time.
By default, no OUI values are configured.
Configuring global settings for port security
1.
From the navigation tree, select Authentication > Port Security.
The Port Security Configuration area displays the global port security configuration and allows
you to make modifications.