Comware

Hi,

how to release mac address lerned in mac-authentication port security process (comware, aruba os)?

I configured port security in autolearn  mode. Switch wrote  mac andress one connected device. I need change host on the port. I can't find anywhere how to do it.

thanks in advance

Hi,

May I have the details of Comware and Aruba product number and model details.

Thank You,

I am a HPE Employee

Hi,

Please find below Update...

Secure MAC addresses are MAC addresses configured or learned in autoLearn mode, and if saved, can survive a device reboot. You can bind a secure MAC address only to one port in a VLAN.

You can add important or frequently used MAC addresses as sticky or static secure MAC addresses to avoid the secure MAC address limit causing authentication failure. To successfully add secure MAC addresses on a port, first complete the following tasks:

· Enable port security on the port.
[Sysname] port-security enable

· Set the port security mode to autoLearn.
[Sysname-GigabitEthernet1/0/1] port-security port-mode autolearn
[Sysname-GigabitEthernet1/0/1] port-security max-mac-count 100

· Configure the port to permit packets of the specified VLAN to pass or add the port to the VLAN. Make sure the VLAN already exists.
[Sysname-GigabitEthernet1/0/1] port-security mac-address security sticky 0001-0002-0003 vlan 4

Sticky MAC addresses can be manually configured or automatically learned in autoLearn mode. Sticky MAC addresses do not age out by default. You can use the port-security timer autolearn aging command to set an aging timer for the sticky MAC addresses. When the timer expires, the sticky MAC addresses are removed.

Static secure MAC addresses never age out unless you perform the following operations:

· Remove these MAC addresses by using the undo port-security mac-address security command.

· Change the port security mode.

· Disable the port security feature.

Related commands

· display port-security

Thank You,

I am a HPE Employee