94• Configure the port to permit packets of the specified VLAN to pass or add the port to the VLAN.Make sure the VLAN already exists.Configuration procedureTo configure a secure MAC address:Step Command Remarks1. Enter system view. system-view N/A2. (Optional.) Set thesecure MAC agingtimer.port-security timer autolearn agingtime-valueBy default, secure MAC addressesdo not age out.3. Configure a secureMAC address.• In system view:port-security mac-address security[sticky] mac-address interfaceinterface-type interface-number vlanvlan-id• In interface view:a. interface interface-typeinterface-numberb. port-security mac-addresssecurity [ sticky ] mac-addressvlan vlan-idUse either method.No secure MAC address exists bydefault.In the same VLAN, a MAC addresscannot be specified as both a staticsecure MAC address and a stickyMAC address.Ignoring authorization information from the serverYou can configure a port to ignore the authorization information received from the server (an RADIUSserver or the local device) after an 802.1X user or MAC authentication user passes authentication.To configure a port to ignore authorization information from the server:Step Command Remarks1. Enter system view. system-view N/A2. Enter interface view. interface interface-typeinterface-number N/A3. Ignore the authorizationinformation received from theauthentication server.port-security authorization ignoreBy default, a port uses theauthorization information receivedfrom the authentication server.Displaying and maintaining port securityExecute display commands in any view:Task CommandDisplay the port security configuration,operation information, and statistics. display port-security [ interface interface-type interface-number ]
