1-9After executing the port-security intrusion-mode blockmac command, you can only use the displayport-security command to view blocked MAC addresses.Related commands: display port-security, port-security timer disableport.Examples# Configure the intrusion protection mode on Ethernet 1/0/1 as blockmac. system-viewSystem View: return to User View with Ctrl+Z.[Sysname] interface Ethernet 1/0/1[Sysname-Ethernet1/0/1] port-security intrusion-mode blockmac# Display information about blocked MAC addresses after intrusion protection is triggered. display port-securityEquipment port-security is enabledAddressLearn trap is EnabledIntrusion trap is EnabledDot1x logon trap is EnabledDot1x logoff trap is EnabledDot1x logfailure trap is EnabledRALM logon trap is EnabledRALM logoff trap is EnabledRALM logfailure trap is EnabledDisableport Timeout: 20 sOUI value:Index is 5, OUI value is 000100Blocked Mac info:MAC ADDR From Port Vlan--- On unit 1, 2 blocked mac address(es) found. ---0000-0000-0003 Ethernet1/0/1 10000-0000-0004 Ethernet1/0/1 1--- 2 blocked mac address(es) found. ---Ethernet1/0/1 is link-upPort mode is SecureNeedtoKnow mode is disabledIntrusion mode is BlockMacaddressMax mac-address num is 2Stored mac-address num is 2Authorization is permitFor description on the output information, refer to Table 1-2.# Configure the intrusion protection mode on Ethernet 1/0/1 as disableport-temporarily. As a result,the port will be disconnected when intrusion protection is triggered and then re-enabled 30 secondslater. system-viewSystem View: return to User View with Ctrl+Z.[Sysname] port-security timer disableport 30[Sysname] interface Ethernet 1/0/1[Sysname-Ethernet1/0/1] port-security intrusion-mode disableport-temporarily
