202 CHAPTER 25: P ORT SECURITY CONFIGURATIONPort SecurityConfigurationEnabling Port Securityc CAUTION: Enabling port security resets the following configurations on the portsto the defaults (shown in parentheses below)■ 802.1x (disabled), port access control method (macbased), and port accesscontrol mode (auto)■ MAC authentication (disabled)In addition, you cannot perform the above-mentioned configurations manuallybecause these configurations change with the port security mode automatically.n ■ For details about 802.1x configuration, refer to “802.1x Configuration” onpage 389.■ For details about MAC authentication configuration, refer to “Centralized MACAddress Authentication Configuration” on page 233.Setting the MaximumNumber of MACAddresses Allowed on aPortPort security allows more than one user to be authenticated on a port. Thenumber of authenticated users allowed, however, cannot exceed the configuredupper limit.By setting the maximum number of MAC addresses allowed on a port, you can■ Control the maximum number of users who are allowed to access the networkthrough the port■ Control the number of Security MAC addresses that can be added with portsecurityTable 130 Port security configuration tasksTask Remarks“Enabling Port Security” on page 202 Required“Setting the Maximum Number of MAC Addresses Allowedon a Port” on page 202Optional“Setting the Port Security Mode” on page 203 Required“Configuring Port SecurityFeatures” on page 204“Configuring the NTK feature”on page 204OptionalChoose one or more features asrequired.“Configuring intrusionprotection” on page 204“Configuring the Trap feature”on page 204“Ignoring the Authorization Information from the RADIUSServer” on page 204Optional“Configuring Security MAC Addresses” on page 205 OptionalTable 131 Enable port securityOperation Command RemarksEnter system view system-view -Enable port security port-security enable RequiredDisabled by default
