Switch User Manual

1-2
Port Security Modes
Table 1-1 describes the available port security modes.
Table 1-1 Description of port security modes
Security mode Description Feature
noRestriction
Port security is disabled on the port and access to the port is
not restricted.
In this mode,
neither the
NTK nor the
intrusion
protection
feature is
triggered.
autolearn
In this mode, a port can learn a specified number of MAC
addresses and save those addresses as secure MAC
addresses.
When the number of secure MAC addresses reaches the
upper limit, the port changes to work in secure mode and
permits only frames whose source MAC addresses are
secure MAC addresses or static MAC addresses configured
by using the mac-address static command.
secure
In this mode, the port is disabled from learning MAC
addresses.
Only those packets whose source MAC addresses are
security MAC addresses learned and static or dynamic MAC
addresses can pass through the port.
In either mode,
the device will
trigger NTK
and intrusion
protection
upon detecting
an illegal
packet.
userlogin
In this mode, port-based 802.1x authentication is performed
for access users.
In this mode,
neither NTK
nor intrusion
protection will
be triggered.