Configuring Port Security - Nortel BES50GE-12T PWR User Manual

32 BES50 basic configuration
Variable
Configuring port security
Use the Port Security page to configure secure addresses for individual
ports.
Using the port security feature, you can configure a switch port with one or
more device MAC addresses authorized to access the network through
that port.
To use port security, specify a maximum number of addresses to allow on
the port and then let the switch dynamically learn the source pair—MAC
address, VLAN—for frames received on the port. See
port settings" (page
port by using the Static Address table. See
85). When the port reaches the maximum number of MAC addresses, the
selected port stops learning. The MAC addresses already in the address
table are retained and do not age out. Any other device that attempts to use
the port is prevented from accessing the switch.
A secure port:
•
•
•
•
Copyright © 2006, Nortel Networks
.
Value
• ServerIndex—Specifies one of five RADIUS servers that can
be configured. The switch attempts authentication by using the
listed sequence of servers. The process ends when a server
either approves or denies access to a user.
• Server Port Number—Network (UDP) port of authentication
server used for authentication messages. (Range: 1 to 65535;
Default: 1812)
• Secret Text String—Encryption key used to authenticate logon
access for the client. Do not use blank spaces in the string.
(Maximum length: 20 characters)
• Number of Server Transmits—Number of times the switch tries
to authenticate logon access through the authentication server.
(Range: 1 to 30; Default: 2)
• Timeout for a reply—The number of seconds the switch waits
for a reply from the RADIUS server before it resends the
request. (Range: 1 to 65535; Default: 5)
88). You can also manually add secure addresses to the
cannot use port monitoring
cannot be a multi-VLAN port
cannot be used as a member of a static or dynamic trunk
should not be connected to a network interconnection device
Using the Nortel Business Ethernet Switch 50 Series
NN47924-301 01.01 Standard
1.00 October 2006
"Setting static addresses" (page
SMB
"Configuring 802.1X
Nortel Networks Confidential