HP 3600 v2 Series Security Configuration Guide

209
Configuration procedure
Follow these steps to configure a secure MAC address:
To do… Use the command… Remarks
Enter system view system-view —
Set the secure MAC aging timer
port-security timer autolearn aging
time-value
Optional
By default, secure MAC addresses
do note age out, and you can
remove them only by performing the
undo port-security mac-address
security command, changing the
port security mode, or disabling the
port security feature.
Configure a secure MAC
address
Approach 1 (in system view):
port-security mac-address security
[ sticky] mac-address interface
interface-type interface-number
vlan vlan-id
Approach 2 (in interface view):
interface interface-type
interface-number
port-security mac-address security
[ sticky] mac-address vlan vlan-id
quit
Required
Use either approach
No secure MAC address exists by
default.
Enter Layer 2 Ethernet interface
view
interface interface-type
interface-number
—
Enable secure MAC aging delay
port-security mac-address
aging-type inactivity
Optional
By default, a stick or dynamic MAC
address is deleted immediately
when the secure MAC aging timer
expires.
Enable the dynamic secure MAC
function
port-security mac-address dynamic
Optional
By default, sticky MAC addresses
can be saved to the configuration
file, and once saved, can survive a
device reboot.
NOTE:
You can display dynamic secure MAC addresses only by using the display port-security mac-address
security command.
Ignoring authorization information from the server
The authorization information is delivered by the RADIUS server to the device after an 802.1X user or
MAC authenticated user passes RADIUS authentication. You can configure a port to ignore the
authorization information from the RADIUS server.

HP 3600 v2 Series Specifications

General

Brand	HP
Model	3600 v2 Series
Category	Switch
Language	English