3com S7906E Guide De Référence

 

1-8 

Related commands: display port-security, display port-security mac-address block, port-security 

timer disableport. 

# Configure port GigabitEthernet 2/0/1 to block the source MAC addresses of illegal frames after 

intrusion protection is triggered.  

<Sysname> system-view 

[Sysname] interface gigabitethernet 2/0/1 

[Sysname-GigabitEthernet2/0/1] port-security intrusion-mode blockmac 

In Ethernet port view: 

port-security mac-address security mac-address vlan vlan-id 

In system view: 

port-security  mac-address  security  mac-address  interface interface-type interface-number  vlan 

undo port-security mac-address security [ [ mac-address  [  interface  interface-type 

interface-number ] ] vlan vlan-id ] 

Ethernet port view, system view 

2: System level 

mac-address: Secure MAC address, in the H-H-H format.  

interface interface-type interface-number: Specifies a Layer 2 Ethernet port by its type and number.  

vlan-id: ID of the VLAN to which the secure MAC address belongs, in the range 1 to 4094.  

Use the port-security mac-address security command to add a secure MAC address.  

Use the undo port-security mac-address security command to remove specified secure MAC 

addresses.  

By default, no secure MAC address is configured. 

Note that: 

z 

The port must belong to the specified VLAN. 

z 

You can configure a secure MAC address only if port security is enabled and the specified port 

operates in autoLearn mode. 

z 

The undo port-security mac-address security command can be used in system view only.  

Related commands: display port-security.