H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 335)

322
Step Remarks
2. Configuring basic port security
control
Required.
Configure the basic port security mode, maximum secure MAC
addresses, intrusion protection, and outbound restriction for a port.
By default, port security is disabled on all ports and access to the ports
is not restricted.
3. Configuring secure MAC
addresses
Optional.
Secure MAC addresses never age out or get lost if saved before the
device restarts. One secure MAC address can be added to only one
port in the same VLAN. You can bind a MAC address to one port in the
same VLAN.
Secure MAC addresses can be learned by a port working in basic port
security mode, or manually configured through the Web interface.
When the maximum number of secure MAC addresses is reached, no
more can be added. The port allows only packets sourced from a secure
MAC address to pass through.
By default, no secure MAC addresses are configured.
Configuring advanced port security mode
Step Remarks
1. Configuring global settings for
port security
Required.
Enable port security globally and configure advanced parameters.
By default, port security is disabled globally.
2. Configuring advanced port
security control
Required.
Configure an advanced port security mode, intrusion protection,
outbound restriction, and select whether to ignore the authorization
information from the RADIUS server.
By default, port security is disabled on all ports and access to the ports
is not restricted.
3. Configuring permitted OUI
Optional.
This setting is available only with the 802.1X MAC Based Or OUI
mode.
You can configure 16 permitted OUI values at most, however, a port in
802.1X MAC Based Or OUI mode allows only one 802.1X user and
one user whose MAC address contains a specified OUI to pass
authentication at the same time.
By default, no OUI values are configured.
Configuring global settings for port security
1. From the navigation tree, select Authentication > Port Security.
The Port Security Configuration area displays the global port security configuration and allows
you to make modifications.