Configuring NTK

About the NTK feature

The NTK feature checks the destination MAC addresses in outbound frames to make sure frames are forwarded only to authenticated devices.

The NTK feature supports the following modes:

Restrictions and guidelines

The NTK feature drops any unicast frame with an unknown destination MAC address.

Not all port security modes support triggering the NTK feature. For more information, see Table 22.

Procedure

  1. Enter system view.

    system-view

  2. Enter interface view.

    interface interface-type interface-number

  3. Configure the NTK feature.

    port-security ntk-mode { ntk-withbroadcasts | ntk-withmulticasts | ntkonly }

    By default, NTK is disabled on a port and all frames are allowed to be sent.