1-9
The security MAC addresses manually configured are written to the configuration file; they will not get
lost when the port is up or down. As long as the configuration file is saved, the security MAC addresses
can be restored after the device reboots.
Configuration prerequisites
z Port security is enabled.
z The maximum number of security MAC addresses allowed on the port is set.
z The security mode of the port is set to autolearn.
Configuration procedure
Follow these steps to configure a security MAC address
To do… Use the command… Remarks
Enter system view system-view —
In system
view
mac-address security
mac-address interface
interface-type interface-number
vlan vlan-id
interface interface-type
interface-number
Add a security
MAC address
In Ethernet
port view mac-address security
mac-address vlan vlan-id
Either is required.
By default, no security MAC
address is configured.
To do… Use the command… Remarks
Display information about port
security configuration display port-security [ interface
interface-list ]
Display information about security
MAC address configuration
display mac-address security
[ interface interface-type
interface-number ] [ vlan vlan-id ]
[ count ]
Available in any view
Network requirements
As shown in Figure 1-1, implement access user restrictions through the following configuration on
GigabitEthernet 1/0/1 of the switch.
z Allow a maximum of 80 users to access the port without authentication and permit the port to learn
and add the MAC addresses of the users as security MAC addresses.