华为交换机端口安全配置

Renqy 2021-12-10 原文

端口安全配置，限制MAC地址

[Huawei]int GigabitEthernet 0/0/1
 [Huawei-GigabitEthernet0/0/1]port-security enable
 [Huawei-GigabitEthernet0/0/1]port-security ?
   aging-time      Aging time    MAC地址表老化时间
  enable          Enable port security    开启端口安全
  mac-address     Mac address    绑定mac地址
  max-mac-num     Maximum mac address can learn    MAC地址最大数
  protect-action  Action if beyond the limit    超过MAC最大数执行的操作

[Huawei-GigabitEthernet0/0/1]port-security
 [Huawei-GigabitEthernet0/0/1]port-security protect-action ?
   protect   Discard packets    丢弃报文
  restrict  Discard packets and warning    丢弃报文并告警
  shutdown  Shutdown     关闭接口

[Huawei-GigabitEthernet0/0/1]port-security protect-action


 [Huawei]dis mac-address 查看所有Mac地址
MAC address table of slot 0:
-------------------------------------------------------------------------------
MAC Address    VLAN/       PEVLAN CEVLAN Port            Type      LSP/LSR-ID
                VSI/SI                                              MAC-Tunnel
-------------------------------------------------------------------------------
5489-982a-3a23 1           -      -      GE0/0/1         security  -
-------------------------------------------------------------------------------
Total matching items on slot 0 displayed = 1

[Huawei]
 [Huawei]dis mac-address GigabitEthernet 0/0/1    查看指定接口下的Mac地址
MAC address table of slot 0:
-------------------------------------------------------------------------------
MAC Address    VLAN/       PEVLAN CEVLAN Port            Type      LSP/LSR-ID
                VSI/SI                                              MAC-Tunnel
-------------------------------------------------------------------------------
5489-982a-3a23 1           -      -      GE0/0/1         security  -
-------------------------------------------------------------------------------
Total matching items on slot 0 displayed = 1

[Huawei]

读书和健身总有一个在路上