HP 6125XLG R2306-HP 6125XLG Blade Switch Security Configuration Guide - Page 103

Configuring secure MAC addresses Secure MAC addresses are configured or learned in autoLearn mode. If they are saved, they can survive a device reboot. You can bind a secure MAC address to only one port in a VLAN. Secure MAC addresses include static and sticky secure MAC addresses. Table 5 A comparison of static and sticky secure MAC addresses Type Address sources Aging mechanism Can be saved and survive a device reboot? Static Manually added Not available. They never age out unless you manually remove Yes. them, change the port security mode, or disable the port security feature. Sticky Manually added or automatically learned by ports Sticky MAC addresses by default do not age out, but you can configure an aging timer to delete old sticky MAC addresses. If you set the aging timer to 0, sticky MAC addresses never age out. Yes. The aging timer restarts at a reboot. NOTE: When the maximum number of secure MAC address entries is reached, the port changes to secure mode, and it cannot add or learn any more secure MAC addresses. The port allows only frames sourced from a secure MAC address or a MAC address configured by using the mac-address dynamic or mac-address static command to pass through. Configuration prerequisites • Enable port security. • Set port security's limit on the number of MAC addresses on the port. Perform this task before you enable autoLearn mode. • Set the port security mode to autoLearn. • Configure the port to permit packets of the specified VLAN to pass or add the port to the VLAN. Make sure the VLAN already exists. Configuration procedure To configure a secure MAC address: Step 1. Enter system view. 2. (Optional.) Set the secure MAC aging timer. Command system-view port-security timer autolearn aging time-value Remarks N/A By default, secure MAC addresses do not age out. 94