Table of Contents
Advertisement
Restrict - Drop all packets from the insecure hosts at the port-security process level and increments the
security-violation count and record the system log.
Shutdown - Shut down the port if there is a security violation and record the system log.
Security Mode: Select the security mode option here. Options to choose from are Permanent and Delete-on-
Timeout.
Permanent - All learned MAC addresses will not be purged out unless the user manually deletes those entries.
Delete-on-Timeout - All learned MAC addresses will be purged out when an entry is aged out or when the
user manually deletes these entries.
Aging Time: Enter the aging time value used for auto-learned dynamic secured addresses on the specified port here.
This value must be between 0 and 1440 minutes.
Aging Type: Select the aging type here. Options to choose from are Absolute and Inactivity.
Absolute - All the secure addresses on this port age out exactly after the time specified and is removed from
the secure address list. This is the default type.
Inactivity - The secure addresses on this port age out only if there is no data traffic from the secure source
address for the specified time period.
Click Apply to accept the changes made.
Port Security Address Entries
This window is used to view, clear and configure the port security address entries.
The fields that can be configured are described below:
Port: Select the port used for the configuration here.
MAC Address: Enter the MAC address here. Tick Permanent so that all learned MAC address will not be purged out
unless the user manually deletes those entries.
VID: Enter the VLAN ID here. This value must be between 1 and 4094.
Click Add to add a new entry based on the information entered.
Click Delete to remove a new entry based on the information entered.
Click Clear by Port to clear the information based on the port selected.
Click Clear by MAC to clear the information based on the MAC address entered.
Click Clear All to clear all the information in this table.
Enter a page number and click Go to navigate to a specific page when multiple pages exist.
Traffic Segmentation Settings
This window is used to view and configure the traffic segmentation settings. When the traffic segmentation forwarding
domain is specified, packets received by the port will be restricted in Layer 2 packet forwarding to interfaces within the
domain. When the forwarding domain of a port is empty, Layer 2 forwarding for packets received by the port is not
restricted.
The traffic segmentation member list can be comprised of different interface types, for example port and port-channel
in the same forwarding domain. If the interfaces specified by the command include a port-channel, all the member
ports of this port-channel will be included in the forwarding domain.
SH-E514TR1 10 Gigabit Ethernet SmartPro Switch User Manual
Figure 12-3 Port Security Address Entries
57
Advertisement
Table of Contents
