1164 CHAPTER 91: P ORT SECURITY CONFIGURATIONPort SecurityConfiguration TaskListComplete the following tasks to configure port security:Enabling Port SecurityConfigurationPrerequisitesBefore enabling port security, you need to disable 802.1x and MAC authenticationglobally.Configuration Procedure Follow these steps to enable port security:n Enabling port security resets the following configurations on a port to the defaultsbracketed, making them dependent completely on the port security mode:■ 802.1x (disabled), port access control method (macbased), and port accesscontrol mode (auto)■ MAC authentication (disabled)Disabling port security resets the following configurations on a port to the defaultsbracketed:■ Port security mode (noRestrictions)■ 802.1x (disabled), port access control method (macbased), and port accesscontrol mode (auto)■ MAC authentication (disabled)Port security cannot be disabled if there is any user present on a port.n For configuration information about 802.1x authentication and MACauthentication, refer to “802.1x Configuration” on page 715 and “MACAuthentication Configuration” on page 739.Task Remarks“Enabling Port Security” on page 1164 Required“Setting the Maximum Number of Secure MAC Addresses” on page 1165 Optional“Setting the Port Security Mode” on page 1165 Required“Configuring Port Security Features” onpage 1167“Configuring NTK” on page 1167 OptionalChoose oneor morefeatures asrequired.“Configuring Intrusion Protection”on page 1167“Configuring Trapping” on page1167“Configuring Secure MAC Addresses” on page 1168 Optional“Ignoring the Authorization Information from the Server” on page 1168 OptionalTo do… Use the command… RemarksEnter system view system-view -Enable port security port-security enable RequiredDisabled by default
