Port Security; Interface Configuration - NETGEAR XS728T ProSAFE Software Administration Manual

• Broadcast. If the rate of L2 broadcast traffic ingressing on an interface increases
beyond the configured threshold, the traffic is dropped.
3. From the Status drop-down menu (for each packet type), select Enable or Disable to
specify the administrative status of the mode.
4. In the Threshold field (for each packet type), specify the maximum rate at which packets
are forwarded.
The range is a percentage of the total threshold between 0–100%. The default is 5%.
Storm control is configured as a percentage of the maximum port speed.
5. Click Apply to update the switch with the new settings.

Port Security

A MAC address can be dynamically defined as allowable.
Dynamic locking implements a first arrival mechanism for port security. You specify how
many addresses can be learned on the locked port. If the limit has not been reached, a
packet with an unknown source MAC address is learned and forwarded normally. When the
limit is reached, no more addresses are learned on the port. Any packets with source MAC
addresses that were not already learned are discarded. You can effectively disable dynamic
locking by setting the number of allowable dynamic entries to 0.
The Port Security link provides access to the following:
•

Interface Configuration

• Security MAC Address
Interface Configuration
To configure port security settings:

1. Select Security > Traffic Control > Port Security > Interface Configuration.
2. To configure interface security settings for ports and link aggregation groups (LAGs), click
PORTS, LAGS, or All.
3. Select the check box next to the port or LAG to configure.
Select multiple check boxes to apply the same setting to all selected interfaces. Select
the check box in the heading row to apply the same settings to all interfaces.
4. Specify the following settings:
• Port Security. Enable or disable the port security feature for the selected port.
• Max Allowed Dynamically Learned MAC. Sets the maximum number of
dynamically learned MAC addresses on the selected interface. The valid range is
0–128. The default value is 128.
• Enable Violation Traps. Select Yes or No to enable or disable the sending of new
violation traps designating when a packet with a disallowed MAC address is received
on a locked port.
5. Click Apply to update the switch with the new settings.
XS728T ProSAFE 28-Port 10-Gigabit L2+ Smart Switch
Security
130