1-10Configuring Secure MAC AddressesSecure MAC addresses are special MAC addresses. They never age out or get lost if saved before thedevice restarts. One secure MAC address can be added to only one port in the same VLAN. Thus, youcan bind a MAC address to one port in the same VLAN.Secure MAC addresses can be:z Learned by a port working in autoLearn mode.z Manually configured through the command line interface (CLI) or management information base(MIB).When the maximum number of secure MAC addresses is reached, no more can be added. The portallows only the packets with the source MAC address being the secure MAC address.Configuration Prerequisitesz Enable port securityz Set the maximum number of secure MAC addresses allowed on the portz Set the port security mode to autoLearnConfiguration ProcedureFollow these steps to configure a secure MAC address:To do… Use the command… RemarksEnter system view system-view —In system viewport-security mac-address securitymac-address interface interface-typeinterface-number vlan vlan-idinterface interface-type interface-numberConfigure asecure MACaddress In interfaceview port-security mac-address securitymac-address vlan vlan-idRequiredUse either approachNo secure MAC addressis configured by default.The configured secure MAC addresses are saved in the configuration file and will not get lost when theport goes up or goes down. After you save the configuration file, the secure MAC address saved in theconfiguration file are maintained even after the device restarts.Ignoring Authorization Information from the ServerAfter an 802.1X user or MAC authenticated user passes RADIUS authentication, the RADIUS serverdelivers the authorization information to the device. You can configure a port to ignore the authorizationinformation from the RADIUS server.Follow these steps to configure a port to ignore the authorization information from the RADIUS server:To do… Use the command… RemarksEnter system view system-view —Enter Ethernet port view interface interface-type —
