1-2
Table 1-1 Description of port security modes
Security mode Description Feature
noRestriction
In this mode, access to the port is not
restricted.
In this mode, neither the
NTK nor the intrusion
protection feature is
triggered.
autolearn
In this mode, a port can learn a specified
number of MAC addresses and save those
addresses as security MAC addresses. It
permits only packets whose source MAC
addresses are the security MAC addresses
that were learned or configured manually.
When the number of security MAC addresses
reaches the upper limit configured by the
port-security max-count command, the port
changes to work in secure mode and no more
MAC addresses can be added to the port.
secure
In this mode, MAC address learning is
disabled on the port. The port permits packets
whose source MAC addresses are static and
dynamic MAC addresses that were configured
manually.
When the port mode changes from autolearn
to secure, the security MAC addresses that
were learned in the autolearn mode are
permitted to pass through the port.
In either mode, the device
will trigger NTK and
intrusion protection upon
detecting an illegal
packet.
