1-12Displaying and Maintaining Port Security ConfigurationTo do... Use the command... RemarksDisplay information about portsecurity configuration display port-security [ interface interface-list ]Display information aboutsecurity MAC addressconfigurationdisplay mac-address security [ interfaceinterface-type interface-number ] [ vlan vlan-id ][ count ]Available inany viewPort Security Configuration ExamplesPort Security Configuration ExampleNetwork requirementsImplement access user restrictions through the following configuration on Ethernet 1/0/1 of the switch.z Allow a maximum of 80 users to access the port without authentication and permit the port to learnand add the MAC addresses of the users as security MAC addresses.z To ensure that Host can access the network, add the MAC address 0001-0002-0003 of Host as asecurity MAC address to the port in VLAN 1.z After the number of security MAC addresses reaches 80, the port stops learning MAC addresses. Ifany frame with an unknown MAC address arrives, intrusion protection is triggered and the port willbe disabled and stay silent for 30 seconds.Network diagramFigure 1-1 Network diagram for port security configurationConfiguration procedure# Enter system view. system-view# Enable port security.[Switch] port-security enable# Enter Ethernet1/0/1 port view.[Switch] interface Ethernet 1/0/1# Set the maximum number of MAC addresses allowed on the port to 80.[Switch-Ethernet1/0/1] port-security max-mac-count 80# Set the port security mode to autolearn.[Switch-Ethernet1/0/1] port-security port-mode autolearn# Add the MAC address 0001-0002-0003 of Host as a security MAC address to the port in VLAN 1.
