1-16The manually configured secure MAC addresses are written to the configuration file; theywill not get lost no matter whether the port is up or down. As long as the configuration fileis saved, the secure MAC addresses can be restored after the switch restarts.Configuring a secure MAC address entry manuallyBefore configuring a secure MAC address entry for a port manually, ensure that:z Port security is enabled.z The maximum number of secure MAC addresses allowed on the port is set.z The security mode of the port is set to autoLearn.Follow these steps to configure a secure MAC address entry manually:To do... Use the command... RemarksEnter system view system-view —In systemviewmac-address security mac-addressinterface interface-type interface-numbervlan vlan-idinterface interface-type interface-numberAdd a secureMAC addressentry In Ethernetport view mac-address security mac-address vlanvlan-idEither isrequired.By default, nosecure MACaddress entry isconfigured.Configuring an aging time for learned secure MAC address entriesBy default, learned secure MAC addresses will never age out; they are deleted only whenthe port security feature is disabled or the security mode is not autoLearn any more.However, the learned secure MAC addresses are not deleted when the security mode turnsto the secure mode from autoLearn.You can configure an aging time for secure MAC address entries. When the timer of anentry expires, the entry is removed from the secure MAC address table.Follow these steps to configure an aging time for learned secure MAC address entries:To do... Use the command... RemarksEnter system view system-view —Enable port security port-security enable —Configure the aging time forlearned secure MAC addressentriesport-security timerautolearn ageRequiredAging of MAC addressentries is disabled bydefault.Enter Ethernet port view interface interface-typeinterface-number —
