Configuring port security on HP comware switch - Part 2

Configuring port-security on HP comware switches - Part 2

# Enable port security.
system-view
port-security enable

# Set the secure MAC aging timer to 30 minutes.
port-security timer autolearn aging 30

# Set port security's limit on the number of secure MAC addresses to 2.
interface GE1/0/1
port-security max-mac-count 2

# Set the port security mode to autoLearn.
port-security port-mode autolearn

# Configure the port to be silent for 30 seconds after the intrusion protection feature is triggered.
port-security intrusion-mode disableport-temporarily
quit

#By default, the port silence timeout is 20 seconds.
port-security timer disableport 30

Verifying the configuration

# Verify the port security configuration.
display port-security interface GigabitEthernet 1/0/1
display port-security mac-address security
display port-security mac-address security interface GigabitEthernet 1/0/1

interface GE1/0/1
display this

Example of mac-address saved in the current configuration:

interface GigabitEthernet1/0/2
port access vlan 1
stp edged-port
port-security intrusion-mode disableport-temporarily
port-security max-mac-count 2
port-security port-mode autolearn
port-security mac-address security sticky 0002-0000-0015 vlan 1

Lesson learned:
port-security port-mode autolearn = switchport port-security mac-address sticky

You can disable port-security port-mode autolearn if you have a scenario where a
user needs to connect multiple devices to the same port.

#hpe #ccna #port-security

[FerdsTechChannel]

I hope you found this video helpful, please like, subscribe and click the notification bell so you won't miss future videos. Thanks for your support! ❤