199
Examples
# Enable port security, set port GigabitEthernet 2/1/1 in autoLearn mode, and set the maximum number
of secure MAC addresses allowed on the port to 100.
<Sysname> system-view
[Sysname] port-security enable
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] port-security max-mac-count 100
[Sysname-GigabitEthernet2/1/1] port-security port-mode autolearn
# Specify MAC address 0001-0002-0003 in VLAN 4 as a sticky MAC address.
[Sysname-GigabitEthernet2/1/1] port-security mac-address security sticky 0001-0002-0003
vlan 4
[Sysname-GigabitEthernet2/1/1] quit
# In system view, specify MAC address 0001-0001-0002 in VLAN 10 as a secure MAC address for port
GigabitEthernet 2/1/1.
[Sysname] port-security mac-address security 0001-0001-0002 interface gigabitethernet
2/1/1 vlan 10
Related commands
• display port-security
• port-security timer autolearn aging
port-security mac-move permit
Use port-security mac-move permit to enable MAC move on a device.
Use undo port-security mac-move permit to restore the default.
Syntax
port-security mac-move permit
undo port-security mac-move permit
Default
MAC move is denied on the device.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This command takes effect on both 802.1X and MAC authentication users.
MAC move allows 802.1X or MAC authenticated users to move between ports on a device. For example,
if an authenticated 802.1X user moves to another 802.1X-enabled port on the device, the authentication
session is deleted from the first port and the user is reauthenticated on the new port.
If MAC move is disabled and an 802.1X authenticated user moves to another port, the user is not
reauthenticated.
To Next Page
Loading...
Need help?
General
