1-11To do… Use the command… Remarksinterface-numberIgnore the authorizationinformation from the RADIUSserverport-security authorizationignoreRequiredBy default, a port uses theauthorization information from theRADIUS server.Displaying and Maintaining Port SecurityTo do… Use the command… RemarksDisplay port security configurationinformation, operation information,and statistics about one or moreports or all portsdisplay port-security [ interface interface-list ] Available in anyviewDisplay information about secureMAC addressesdisplay port-security mac-address security[ interface interface-type interface-number ] [ vlanvlan-id ] [ count ]Available in anyviewDisplay information about blockedMAC addressesdisplay port-security mac-address block[ interface interface-type interface-number ] [ vlanvlan-id ] [ count ]Available in anyviewPort Security Configuration ExamplesConfiguring the autoLearn ModeNetwork requirementsRestrict port GigabitEthernet 1/0/1 of the switch as follows:z Allow up to 64 users to access the port without authentication and permit the port to learn and addthe MAC addresses of the users as secure MAC addresses.z After the number of secure MAC addresses reaches 64, the port stops learning MAC addresses. Ifany frame with an unknown MAC address arrives, intrusion protection is triggered and the port isdisabled and stays silence for 30 seconds.Figure 1-1 Network diagram for configuring the autoLearn modeConfiguration procedure1) Configure port security# Enable port security. system-view[Switch] port-security enable# Enable intrusion protection trap.[Switch] port-security trap intrusion[Switch] interface gigabitethernet 1/0/1# Set the maximum number of secure MAC addresses allowed on the port to 64.
