First, open the port security
[switch] port-security enable
Second, a port security maximum allowed secure MAC address number
[Switch] interface interface of the type- interface-Number The // entry port
[switch-interface] port-security max-mac-count count-value
Third, the port security mode - automatic learning
[switch-interface] port-security port-mode autolearn
Fourth, configure the Port Security Features
[switch-interface] port-security ntk-mode { ntk-withbroadcasts | ntk-withmulticasts | ntkonly }
NOTE: ntkonly : the purpose of allowing only MAC address has been certified by the MAC multicast packets by a single address.
• NTK-withbroadcasts on : the purpose of allowing the MAC address has been certified by the MAC single address of a multicast packet or a broadcast address
The packets.
• NTK-withmulticasts : the purpose of allowing the MAC address has been certified by the MAC single address multicast packets, broadcast address
Or messages through a multicast address.
V. configuration detection feature ***
[switch-interface] port-security intrusion-mode { blockmac | disableport | disableport-temporarily }
Note: blockmac: indicate illegal packet's source MAC address of the blocked MAC address list, the source MAC address is blocked
MAC address of the packet will be discarded. MAC address is restored to normal after being blocked for three minutes (not user configurable).
• disableport: it said it will receive packets of illegal port permanently closed.
• disableport-temporarily: it said it will receive packets of illegal port temporarily shut down for some time. You may be configured by a closed length of port-security timer disableport command.
The basic configuration is complete, the following options are available
-----------------------------------------------------------------------------------------------------------------------------------------------------------
六、配置系统暂时关闭端口的时间（可选）
[switch] port-security timer disableport time-valu
七、手动配置MAC安全地址(可选)
[switch] port-security mac-address security [ sticky ] mac-address interface interface-type interface-number vlan vlan-id