Port Security - D-Link xStack DGS-3426 User Manual

xStack DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch

Port Security

A given port's (or a range of ports') dynamic
MAC address learning can be locked such
that the current source MAC addresses
entered into the MAC address forwarding
table can not be changed once the port lock is
enabled. The port can be locked by using the
Admin State pull-down menu to Enabled,
and clicking Apply.
Port Security is a security feature that
prevents unauthorized
source MAC addresses) unknown to the
Switch prior to locking the port (or ports)
from connecting to the Switch's locked ports
and gaining access to the network. To view
the following window, click Security > Port
Security > Port Security Entries.
The following parameters can be set:
Parameter
Unit
From/To
Admin State
Max. Learning Addr. (0-16)
Mode
Clear
computers (with
Description
Choose the Switch ID number of the Switch in the switch stack to be modified.
A consecutive group of ports may be configured starting with the selected port.
This pull-down menu allows the user to enable or disable Port Security (locked MAC
address table for the selected ports).
The number of MAC addresses that will be in the MAC address forwarding table for the
selected switch and group of ports.
This pull-down menu allows the option of how the MAC address table locking will be
implemented on the Switch, for the selected group of ports. The options are:
Permanent – The locked addresses will only age out after the Switch has been reset.
DeleteOnTimeout – The locked addresses will age out after the aging timer expires.
DeleteOnReset – The locked addresses will not age out until the Switch has been
reset or rebooted.
Click the to clear MAC address entries which were learned by the Switch by a
specified port. This only relates to the port security function. This command will only
take effect if the Mode is set as Permanent or DeleteonReset.
Figure 10- 3. Port Security Settings and Table
205