Port Security - NETGEAR GS700TP Software Administration Manual

GS700TP Smart Switch Software Administration Manual
• Broadcast Rate Threshold – Enter the maximum rate (kilobits per second) at which
broadcast packets are forwarded. GE (Gigabit Ethernet) ports have a range of 3500 -
1000000. The default value for GE ports is 3500.
2. Select the interface.
3. Select Enable or Disable Broadcast Control in the provided field in the first row.
4. If you selected Enable Broadcast Control, select the Broadcast Mode from the list in the
provided field in the first row.
5. If you selected Enable Broadcast Control, enter the Broadcast Rate Threshold in the
provided field in the first row.
6. Click APPLY to update the device.

Port Security

Network security can be increased by limiting access on a specific port only to users with specific
MAC addresses. The MAC addresses can be dynamically learned or statically configured. Locked
port security monitors both received and learned packets that are received on specific ports.
Access to the locked port is limited to users with specific MAC addresses. These addresses are
either manually defined on the port, or learned on that port up to the point when it is locked. When
a packet is received on a locked port and the packet source MAC address is not tied to that port
(either it was learned on a different port, or it is unknown to the system), the protection mechanism
is invoked. It provides the following options for unauthorized packets arriving at a locked port:
• Forwarded
• Discarded with no trap
• Discarded with a trap
• Shuts down the port
Locked port security also enables storing a list of MAC addresses in the configuration file. The
MAC address list can be restored after the device has been reset.
Managing Security
v1.0, April 2008
6-17