D-Link DXS-3600 Series Reference Manual page 477

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch Web UI Reference Guide
The fields that can be configured in Port Security Settings are described below:
Parameter
Unit
From Port ~ To Port
State
Maximum
Violation Action
Security Mode
Aging Time
Aging Type
Figure 9-2 Port Security Port Settings Window
Description
Select the switch unit that will be used for this configuration here.
Select the appropriate port range used for the configuration here.
Select to enable or disable the port security feature on the port(s)
specified.
Enter the maximum number of secure MAC addresses that will be
allowed on the port(s) specified. This value must be between 0 and
6656. By default, this value is 32.
Select the violation action that will be taken here. Options to choose
from are Protect, Restrict, and Shutdown.
•
Selecting Protect specifies to drop all packets from the insecure
hosts at the port-security process level, but does not increment
the security-violation count.
•
Selecting Restrict specifies to drop all packets from the insecure
hosts at the port-security process level and increments the
security-violation count and record the system log.
•
Selecting Shutdown specifies to shut down the port if there is a
security violation and record the system log.
Select the security mode option here. Options to choose from are
Permanent and Delete-on-Timeout.
•
Selecting Permanent specifies that under this mode, all learned
MAC addresses will not be purged out unless the user manually
deletes those entries.
•
Selecting Delete-on-Timeout specifies that under this mode, all
learned MAC addresses will be purged out when an entry is
aged out or when the user manually deletes these entries.
Enter the aging time value used for auto-learned dynamic secured
addresses on the specified port here. This value must be between 0
and 1440 minutes.
Select the aging type here. Options to choose from are Absolute and
Inactivity.
•
Selecting Absolute specifies that all the secure addresses on
this port age out exactly after the time specified and is removed
from the secure address list. This is the default type.
466