200
Examples
# Enable MAC move.
<Sysname> system-view
[Sysname] port-security mac-move permit
Related commands
display port-security
port-security max-mac-count
Use port-security max-mac-count to set the maximum number of secure MAC addresses that port security
allows on a port.
Use undo port-security max-mac-count to restore the default.
Syntax
port-security max-mac-count count-value
undo port-security max-mac-count
Default
Port security does not limit the number of secure MAC addresses on a port.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Parameters
count-value: Specifies the maximum number of secure MAC addresses that port security allows on the
port. The value range is 1 to 1024. Make sure this value is no less than the number of MAC addresses
currently saved on the port.
Usage guidelines
In autoLearn mode, this command sets the maximum number of secure MAC addresses (both configured
and automatically learned) on the port.
In any other mode that enables 802.1X, MAC authentication, or both, this command sets the maximum
number of authenticated MAC addresses on the port. The actual maximum number of concurrent users
that the port accepts equals this limit or the authentication method's limit on the number of concurrent
users, whichever is smaller. For example, in userLoginSecureExt mode, if 802.1X allows less concurrent
users than port security's limit on the number of MAC addresses, port security's limit takes effect.
You cannot change port security's limit on the number of MAC addresses when the port is operating in
autoLearn mode or the port is a wireless port that has online users.
Examples
# Set the maximum number of secure MAC address port security allows on port GigabitEthernet 2/1/1
to 100.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] port-security max-mac-count 100