Operation Manual – Port Security-Port BindingH3C S3100 Series Ethernet Switches Chapter 1 Port Security Configuration1-121.4 Port Security Configuration Example1.4.1 Port Security Configuration ExampleI. Network requirementsImplement access user restrictions through the following configuration on Ethernet1/0/1 of the switch.z Allow a maximum of 80 users to access the port without authentication and permitthe port to learn and add the MAC addresses of the users as security MACaddresses.z To ensure that Host can access the network, add the MAC address0001-0002-0003 of Host as a security MAC address to the port in VLAN 1.z After the number of security MAC addresses reaches 80, the port stops learningMAC addresses. If any frame with an unknown MAC address arrives, intrusionprotection is triggered and the port will be disabled and stay silent for 30 seconds.II. Network diagramFigure 1-1 Network diagram for port security configurationIII. Configuration procedure# Enter system view. system-view# Enable port security.[Switch] port-security enable# Enter Ethernet1/0/1 port view.[Switch] interface Ethernet 1/0/1# Set the maximum number of MAC addresses allowed on the port to 80.[Switch-Ethernet1/0/1] port-security max-mac-count 80# Set the port security mode to autolearn.[Switch-Ethernet1/0/1] port-security port-mode autolearn# Add the MAC address 0001-0002-0003 of Host as a security MAC address to the portin VLAN 1.[Switch-Ethernet1/0/1] mac-address security 0001-0002-0003 vlan 1# Configure the port to be silent for 30 seconds after intrusion protection is triggered.
