HP 6125XLG R2306-HP 6125XLG Blade Switch Security Configuration Guide - Page 99

Configuration task list, Enabling port security

Page 99 highlights

This mode is the combination of the macAddressWithRadius and userLoginSecure modes. It allows one 802.1X authentication user and multiple MAC authentication users to log in. For wired users, the port performs MAC authentication upon receiving non-802.1X frames and performs 802.1X authentication upon receiving 802.1X frames. • macAddressOrUserLoginSecureExt This mode is similar to the macAddressOrUserLoginSecure mode, except that this mode supports multiple 802.1X and MAC authentication users. • macAddressElseUserLoginSecure This mode is the combination of the macAddressWithRadius and userLoginSecure modes, with MAC authentication having a higher priority as the Else keyword implies. It allows one 802.1X authentication user and multiple MAC authentication users to log in. • macAddressElseUserLoginSecureExt This mode is similar to the macAddressElseUserLoginSecure mode except that this mode supports multiple 802.1X and MAC authentication users as the keyword Ext implies. Configuration task list Tasks at a glance Remarks (Required.) Enabling port security N/A (Optional.) Setting port security's limit on the number of secure MAC addresses on a port N/A (Required.) Setting the port security mode N/A (Required.) Configuring port security features: • Configuring NTK • Configuring intrusion protection Configure one or more port security features according to the network requirements. (Optional.) Configuring secure MAC addresses N/A (Optional.) Ignoring authorization information from the server N/A Enabling port security Before you enable port security, disable 802.1X and MAC authentication globally. When port security is enabled, you cannot enable 802.1X or MAC authentication, or change the access control mode or port authorization state. The port security automatically modifies these settings in different security modes. To enable port security: Step 1. Enter system view. 2. Enable port security. Command system-view port-security enable Remarks N/A By default, the port security is disabled. 90

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276

90
This mode is the combination of the macAddressWithRadius and userLoginSecure modes. It allows
one 802.1X authentication user and multiple MAC authentication users to log in.
For wired users, the port performs MAC authentication upon receiving non-802.1X frames and
performs 802.1X authentication upon receiving 802.1X frames.
macAddressOrUserLoginSecureExt
This mode is similar to the macAddressOrUserLoginSecure mode, except that this mode supports
multiple 802.1X and MAC authentication users.
macAddressElseUserLoginSecure
This mode is the combination of the macAddressWithRadius and userLoginSecure modes, with
MAC authentication having a higher priority as the
Else
keyword implies. It allows one 802.1X
authentication user and multiple MAC authentication users to log in.
macAddressElseUserLoginSecureExt
This mode is similar to the macAddressElseUserLoginSecure mode except that this mode supports
multiple 802.1X and MAC authentication users as the keyword
Ext
implies.
Configuration task list
Tasks at a glance
Remarks
(Required.)
Enabling port security
N/A
(Optional.)
Setting port security's limit on the number of secure MAC
addresses on a port
N/A
(Required.)
Setting the port security mode
N/A
(Required.)
Configuring port security features
:
Configuring NTK
Configuring intrusion protection
Configure one or more port security
features according to the network
requirements.
(Optional.)
Configuring secure MAC addresses
N/A
(Optional.)
Ignoring authorization information from the server
N/A
Enabling port security
Before you enable port security, disable 802.1X and MAC authentication globally.
When port security is enabled, you cannot enable 802.1X or MAC authentication, or change the access
control mode or port authorization state. The port security automatically modifies these settings in
different security modes.
To enable port security:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable port security.
port-security enable
By default, the port security is
disabled.