3com S7906E Verweisanleitung
1-8
Related commands: display port-security, display port-security mac-address block, port-security
timer disableport.
Examples
# Configure port GigabitEthernet 2/0/1 to block the source MAC addresses of illegal frames after
intrusion protection is triggered.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/0/1
[Sysname-GigabitEthernet2/0/1] port-security intrusion-mode blockmac
port-security mac-address security
Syntax
In Ethernet port view:
port-security mac-address security mac-address vlan vlan-id
In system view:
port-security mac-address security mac-address interface interface-type interface-number vlan
vlan-id
undo port-security mac-address security [ [ mac-address [ interface interface-type
interface-number ] ] vlan vlan-id ]
View
Ethernet port view, system view
Default Level
2: System level
Parameters
mac-address: Secure MAC address, in the H-H-H format.
interface interface-type interface-number: Specifies a Layer 2 Ethernet port by its type and number.
vlan-id: ID of the VLAN to which the secure MAC address belongs, in the range 1 to 4094.
Description
Use the port-security mac-address security command to add a secure MAC address.
Use the undo port-security mac-address security command to remove specified secure MAC
addresses.
By default, no secure MAC address is configured.
Note that:
z
The port must belong to the specified VLAN.
z
You can configure a secure MAC address only if port security is enabled and the specified port
operates in autoLearn mode.
z
The undo port-security mac-address security command can be used in system view only.
Related commands: display port-security.