Configure Basic Functions of Port Security
In the configuration tasks of the port security, you should first enable the port security so that the configuration of the other functions can take effect.
Configuration Condition
None
Enable Port Security Function
After enabling the port security and if not configuring any port security rule, the port cannot learn the MAC address.
Table 3-2 Configure the basic functions of the port security
|
Step
|
Command
|
Description
|
|
Enter global configuration mode
|
configure terminal
|
-
|
|
Enter the L2 Ethernet interface configuration mode
|
interface interface-name
|
Either
After entering the L2 Ethernet interface configuration mode, the subsequent configuration just takes effect on the current port. After entering the aggregation group configuration mode, the subsequent configuration just takes effect on the aggregation group.
|
|
Enter the aggregation group configuration mode
|
interface link-aggregation link-aggregation-id
|
|
Enable the port security function
|
port-security enable
|
Mandatory
By default, the port security function is not enabled.
|
-
The IP rule and MAX rule of the port security and 802.1x cannot be used on one port at the same time.
- The IP rule and MAX rule of the port security and MAC address authentication cannot be used on one port at the same time.
- The port security and secure channel authentication function cannot be used on one port at the same time.
- The port security and DAI (Dynamic ARP Inspection) cannot be used on one port at the same time.
Switch
.png){kind=icon}
.png){kind=logo}
