H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 144)

19-5
3) Port security cannot be disabled if there is any user present on a port.
For configuration information about 802.1x authentication and MAC authentication, refer to
802.1x-HABP-MAC Authentication in H3C WX6103 Access Controller Switch Interface Board
Configuration Guide .
Setting the Maximum Number of Secure MAC Addresses
With port security enabled, more than one authenticated user is allowed on a port. The number of
authenticated users allowed, however, cannot exceed the specified upper limited.
By setting the maximum number of secure MAC addresses allowed on a port, you can
z
Control the maximum number of users who are allowed access the network through the port
z
Control the number of secure MAC addresses that can be added with port security
This configuration is different from that of the maximum number of MAC addresses that can be leaned
by the port in MAC address management.
Follow these steps to set the maximum number of secure MAC addresses allowed on a port:
To do… Use the command… Remarks
Enter system view system-view —
Enter Ethernet port view interface interface-type interface-number —
Set the maximum number of secure
MAC addresses allowed on a port
port-security max-mac-count count-value
Required
Not limited by default
Setting the Port Security Mode
Before setting the port security mode, ensure that:
z
802.1x is disabled, the port access control method is macbased, and the port access control mode
is auto.
z
MAC authentication is disabled.
Otherwise, you will see an error message and your configuration will fail.
On the other hand, after setting the port security mode on a port, you cannot change any of the above
configurations.