1-10# Configure the intrusion protection mode on Ethernet 1/0/1 as disableport. As a result, when intrusionprotection is triggered, the port will be disconnected permanently. system-viewSystem View: return to User View with Ctrl+Z.[Sysname] interface Ethernet 1/0/1[Sysname-Ethernet1/0/1] port-security intrusion-mode disableportYou can bring up a port that has been permanently disabled by running the undo shutdown commandor disabling port security on the port.port-security max-mac-countSyntaxport-security max-mac-count count-valueundo port-security max-mac-countViewEthernet port viewParameterscount-value: Maximum number of MAC addresses allowed on the port, in the range of 1 to 1024.DescriptionUse the port-security max-mac-count command to set the maximum number of MAC addressesallowed on the port.Use the undo port-security max-mac-count command to cancel this limit.By default, there is no limit on the number of MAC addresses allowed on the port.By configuring the maximum number of MAC addresses allowed on a port, you can:z Limit the number of users accessing the network through the port.z Limit the number of security MAC addresses that can be added on the port.When the maximum number of MAC addresses allowed on a port is reached, the port will not allowmore users to access the network through this port.
