1-12z Before setting the port to operate in the autoLearn mode, be sure to set the maximumnumber of secure MAC addresses allowed on the port with the port-securitymax-mac-count command.z When the port operates in the autoLearn mode, you cannot change the maximumnumber of secure MAC addresses allowed on the port.z After you set the port security mode to autoLearn, you cannot configure any static orblackhole MAC addresses on the port.z After enabling port security, you can change the port security mode of a port only whenthe port is operating in noRestriction mode, the default mode. To change the portsecurity mode of a port operating in any other mode, use the undo port-securityport-mode command to restore the default port security mode first.If the port-security port-mode mode command has been executed on a port, none of thefollowing can be configured on the same port:z Maximum number of secure MAC addresses that the port can learnz Reflector port for port mirroringz Fabric portz Link aggregationConfiguring Port Security FeaturesConfiguring the NTK featureFollow these steps to configure the NTK feature:To do... Use the command... RemarksEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-number —Configure the NTK featureport-security ntk-mode{ ntkonly |ntk-withbroadcasts |ntk-withmulticasts }RequiredBy default, NTK is disabled ona port, namely all frames areallowed to be sent.
