3Com 4210, 5500G, 4200G manual # Configure port security trapping, Precautions

54CHAPTER 9: PORT SECURITY CONFIGURATION GUIDE

	[3Com] interface Ethernet 1/0/1
	[3Com-Ethernet1/0/1] port-security port-mode userlogin-withoui
	[3Com-Ethernet1/0/1] quit
	# Configure port security trapping.
	[3Com] port-security trap dot1xlogfailure
	[3Com] port-security trap dot1xlogon
	[3Com] port-security trap dot1xlogoff
Complete Configuration	#
	domain default enable aabbcc.net
	#
	port-security enable
	port-security trap dot1xlogon
	port-security trap dot1xlogoff
	port-security trap dot1xlogfailure
	port-security oui 1234-0100-0000 index 1
	port-security oui 1234-0200-0000 index 2
	#
	radius scheme radius1
	server-type standard
	primary authentication 192.168.1.3
	primary accounting 192.168.1.2
	secondary authentication 192.168.1.2
	secondary accounting 192.168.1.3
	key authentication name
	key accounting money
	timer realtime-accounting 15
	timer response-timeout 5
	retry 5
	user-name-format without-domain
	#
	domain aabbcc.net
	scheme radius-scheme radius1 local
	access-limit enable 30
	idle-cut enable 20 2000
	#
	local-user localuser
	password simple localpass
	service-type lan-access
	#
	interface Ethernet1/0/1
	port-security port-mode userlogin-withoui
	#
Precautions	■ Before enabling port security, be sure to disable 802.1x and MAC
	authentication globally.
	■ On a port configured with port security, you cannot configure the maximum
	number of MAC addresses that the port can learn, reflector port for port
	mirroring, fabric port, or link aggregation.