3com 5500-ei pwr Reference Guide

 

1-19 

Related commands: port-security intrusion-mode. 

# Set the intrusion protection mode on Ethernet 1/0/1 to disableport-temporarily. It is required that 

when intrusion protection is triggered, the port be shut down temporarily and then go up 30 seconds 

later.  

<Sysname> system-view 

System View: return to User View with Ctrl+Z. 

[Sysname] port-security timer disableport 30 

[Sysname] interface Ethernet 1/0/1 

[Sysname-Ethernet1/0/1] port-security intrusion-mode disableport-temporarily 

port-security timer guest-vlan-reauth interval 

System view 

interval: Time period in the range of 1 to 3600, in seconds. 

Use the port-security timer guest-vlan-reauth command to configure the interval at which the switch 

triggers MAC address authentication after a port is added to its guest VLAN.  

Use the undo port-security timer guest-vlan-reauth command to restore the default. 

By default, the switch triggers MAC address authentication at intervals of 30 seconds. 

At a certain interval, the switch uses the first MAC address learned in the guest VLAN to trigger MAC 

address authentication. If the authentication succeeds, the port leaves the guest VLAN. 

# Configure the switch to trigger MAC address authentication at intervals of 60 seconds. 

<Sysname> system-view 

[Sysname] port-security timer guest-vlan-reauth 60 

port-security trap { addresslearned  | dot1xlogfailure |  dot1xlogoff  |  dot1xlogon  | intrusion | 

ralmlogfailure | ralmlogoff | ralmlogon } 

undo port-security trap { addresslearned | dot1xlogfailure | dot1xlogoff | dot1xlogon | intrusion | 

ralmlogfailure | ralmlogoff | ralmlogon }