User account policies, Authentication methods, Troubleshooting port security – H3C Technologies H3C S12500-X Series Switches User Manual

Page 118: Cannot set the port security mode, Cannot configure secure mac addresses

Advertising
background image

106

Because NTK is enabled, frames with an unknown destination MAC address, multicast address, or

broadcast address are discarded.

74B

Troubleshooting port security

212B

Cannot set the port security mode

437B

Symptom

Cannot set the port security mode for a port.

438B

Analysis

For a port operating in a port security mode other than noRestrictions, you cannot change the port

security mode directly by using the port-security port-mode command.

439B

Solution

1.

Set the port security mode to noRestrictions.

[Device-Ten-GigabitEthernet1/0/1] undo port-security port-mode

2.

Set a new port security mode for the port, for example, autoLearn.

[Device-Ten-GigabitEthernet1/0/1] port-security port-mode autolearn

213B

Cannot configure secure MAC addresses

440B

Symptom

Cannot configure secure MAC addresses.

441B

Analysis

No secure MAC address can be configured on a port operating in a port security mode other than
autoLearn.

442B

Solution

Set the port security mode to autoLearn.

[Device-Ten-GigabitEthernet1/0/1] undo port-security port-mode

[Device-Ten-GigabitEthernet1/0/1] port-security max-mac-count 64

[Device-Ten-GigabitEthernet1/0/1] port-security port-mode autolearn

[Device-Ten-GigabitEthernet1/0/1] port-security mac-address security 1-1-2 vlan 1

Advertising