1-6To do... Use the command... RemarksSet the maximum number ofMAC addresses allowed on theportport-security max-mac-countcount-valueRequiredNot limited by defaultSetting the Port Security ModeFollow these steps to set the port security mode:To do... Use the command... RemarksEnter system view system-view —Set the OUI value for userauthenticationport-security oui OUI-valueindex index-valueOptionalIn userLoginWithOUI mode, aport supports one 802.1x userplus one user whose sourceMAC address has a specifiedOUI value.Enter Ethernet port view interface interface-typeinterface-number —Set the port security modeport-security port-mode{ autolearn |mac-and-userlogin-secure |mac-and-userlogin-secure-ext | mac-authentication |mac-else-userlogin-secure |mac-else-userlogin-secure-ext | secure | userlogin |userlogin-secure |userlogin-secure-ext |userlogin-secure-or-mac |userlogin-secure-or-mac-ext| userlogin-withoui }RequiredBy default, a port operates innoRestriction mode. In thismode, access to the port is notrestricted.You can set a port securitymode as needed.z Before setting the port security mode to autolearn, you need to set the maximum number of MACaddresses allowed on the port with the port-security max-mac-count command.z When the port operates in the autoLearn mode, you cannot change the maximum number of MACaddresses allowed on the port.z After you set the port security mode to autolearn, you cannot configure any static or blackholeMAC addresses on the port.z If the port is in a security mode other than noRestriction, before you can change the port securitymode, you need to restore the port security mode to noRestriction with the undo port-securityport-mode command.z The port security mode of autolearn is not supported on fabric devices.If the port-security port-mode mode command has been executed on a port, none of the following canbe configured on the same port:
