H3C Technologies H3C WX3000E Series Wireless Switches User Manual
Page 338
325
Figure 312 Configure basic port security control
3.
Configure port security control as described in
.
4.
Click Apply.
Table 91 Configuration items
Item Description
Port
Select the port where you want to configure port security.
By default, port security is disabled on all ports and access to the ports is not restricted.
Max Number of
MAC
Specify the maximum number of secure MAC addresses that can be set on the port.
The number of authenticated users on the port cannot exceed the specified upper limit.
By setting the maximum number of secure MAC addresses allowed on a port, you can
implement the following control:
•
Control the maximum number of users allowed to access the network through the port.
•
Control the number of secure MAC addresses that can be added with port security.
This configuration is independent of the maximum number of MAC addresses that can be
learned by the port in MAC address management.
Enable Intrusion
Protection
Select the option to enable intrusion protection, and select the action to take on illegal
frames.
Available actions include:
•
Disable Port Temporarily—Disables the port for a period of time. The period can be
configured in the global settings. For more information, see "
•
Disable Port Permanently—The port will not come up unless being brought up
manually.
•
Block MAC—Adds the source MAC addresses of illegal frames to the blocked MAC
addresses list and discards the frames. All subsequent frames sourced from a blocked
MAC address will be dropped. A blocked MAC address is restored to normal state
after being blocked for three minutes. The interval is fixed and cannot be changed.