3com S7906E 설치 설명서
1-11
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
interface-number
—
Ignore the authorization
information from the RADIUS
server
information from the RADIUS
server
port-security authorization
ignore
ignore
Required
By default, a port uses the
authorization information from
the RADIUS server.
authorization information from
the RADIUS server.
Displaying and Maintaining Port Security
To do…
Use the command…
Remarks
Display port security
configuration information,
operation information, and
statistics about one or more
ports or all ports
configuration information,
operation information, and
statistics about one or more
ports or all ports
display port-security
[ interface interface-list ]
[ interface interface-list ]
Available in any view
Display information about
secure MAC addresses
secure MAC addresses
display port-security
mac-address security
[ interface interface-type
interface-number ] [ vlan
vlan-id ] [ count ]
mac-address security
[ interface interface-type
interface-number ] [ vlan
vlan-id ] [ count ]
Available in any view
Display information about
blocked MAC addresses
blocked MAC addresses
display port-security
mac-address block
[ interface interface-type
interface-number ] [ vlan
vlan-id ] [ count ]
mac-address block
[ interface interface-type
interface-number ] [ vlan
vlan-id ] [ count ]
Available in any view
Port Security Configuration Examples
Configuring the autoLearn Mode
Network requirements
Restrict port GigabitEthernet 2/0/1 of the switch as follows:
z
Allow up to 64 users to access the port without authentication and permit the port to learn and add
the MAC addresses of the users as secure MAC addresses.
z
After the number of secure MAC addresses reaches 64, the port stops learning MAC addresses. If
any frame with an unknown MAC address arrives, intrusion protection is triggered and the port is
disabled and stays silence for 30 seconds.
Figure 1-1 Network diagram for configuring the autoLearn mode