1-5Enabling Port SecurityConfiguration PrerequisitesBefore enabling port security, you need to disable 802.1X and MAC authentication globally.Configuration ProcedureFollow these steps to enable port security:To do… Use the command… RemarksEnter system view system-view —Enable port security port-security enable RequiredDisabled by defaultNote that:1) Enabling port security resets the following configurations on a port to the bracketed defaults. Then,values of these configurations cannot be changed manually; the system will adjust them based onthe port security mode automatically:z 802.1X (disabled), port access control method (macbased), and port access control mode (auto)z MAC authentication (disabled)2) Disabling port security resets the following configurations on a port to the bracketed defaults:z Port security mode (noRestrictions)z 802.1X (disabled), port access control method (macbased), and port access control mode (auto)z MAC authentication (disabled)3) Port security cannot be disabled if there is any user present on a port.z For detailed 802.1X configuration, refer to 802.1X Configuration in the Security Volume.z For detailed MAC-based authentication configuration, refer to MAC Authentication Configuration inthe Security Volume.Setting the Maximum Number of Secure MAC AddressesWith port security enabled, more than one authenticated user is allowed on a port. The number ofauthenticated users allowed, however, cannot exceed the specified upper limit.By setting the maximum number of secure MAC addresses allowed on a port, you can:z Control the maximum number of users who are allowed to access the network through the port.z Control the number of secure MAC addresses that can be added with port security.
