Port Security
A given ports' (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC
addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be
locked by using the Admin State pull-down menu to Enabled, and clicking Apply.
Port Security is a security feature that prevents unauthorized computers (with source MAC addresses) unknown to the
Switch prior to locking the port (or ports) from connecting to the Switch's locked ports and gaining access to the network.
To view the following window, click Configuration > Port Security.
The following parameters can be set:
Parameter
From/To
Admin State
Max. Addr. (0-10)
Lock Address
Mode
Click Apply to implement changes made.
DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual
Figure 9- 2. Port Security Settings and Table window
Description
A consecutive group of ports may be configured starting with the selected port.
This pull-down menu allows you to enable or disable Port Security (locked MAC address
table for the selected ports).
The number of MAC addresses that will be in the MAC address forwarding table for the
selected switch and group of ports.
This pull-down menu allows you to select how the MAC address table locking will be
implemented on the Switch, for the selected group of ports. The options are:
Permanent – The locked addresses will not age out after the aging timer
•
expires.
DeleteOnTimeout – The locked addresses will age out after the aging timer
•
expires.
DeleteOnReset – The locked addresses will not age out until the Switch has
•
been reset.
NOTE: The uplink module ports (DES-3010F/G ports 9-10, DES-3018 ports
17-18, DES-3026 ports 25-26) do not support the port security function.
91