H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 148)

19-9
Secure MAC addresses can be learned by a port working in autoLearn mode. You can also manually
configure them through the command line interface (CLI) or management information base (MIB).
Configuration Prerequisites
z
Enable port security
z
Set the maximum number of secure MAC addresses allowed on the port
z
Set the port security mode to autoLearn
Configuration Procedure
Follow these steps to configure a secure MAC address:
To do… Use the command… Remarks
Enter system view system-view —
In system view
port-security mac-address security
mac-address interface interface-type
interface-number vlan vlan-id
interface interface-type interface-number
Configure a
secure MAC
address
In Ethernet port
view
port-security mac-address security
mac-address vlan vlan-id
Required
Use either approach
No secure MAC address
is configured by default.
The configured secure MAC addresses are saved in the configuration file and will not get lost when the
port goes up or goes down. After you save the configuration file, the secure MAC address saved in the
configuration file are maintained even after the device restarts.
Ignoring the Authorization Information from the Server
After an 802.1x user or MAC authenticated user passes RADIUS authentication, the RADIUS server
delivers the authorization information to the device. You can configure a port to ignore the authorization
information from the RADIUS server.
Follow these steps to configure a port to ignore the authorization information from the RADIUS server:
To do… Use the command… Remarks
Enter system view system-view —
Enter Ethernet port view
interface interface-type
interface-number
—
Ignore the authorization
information from the RADIUS
server
port-security authorization
ignore
Required
By default, a port uses the
authorization information from the
RADIUS server.