Table of Contents
Advertisement
Item
Sticky Mode
Violation Trap Mode Indicates whether the port security feature sends a trap to the SNMP
Last Violation MAC/
VLAN
Refresh
Edit
Edit All
4.4.17.3
Static MAC
Use the Port Security Static MAC Addresses page to add and remove the MAC
addresses of hosts that are allowed to send traffic to specific interfaces on the
device. The number of MAC addresses you can associate with each interface is
determined by the maximum static MAC addresses allowed on a given interface.
To access this page, click Switching > Port Security > Static MAC.
The following table describes the items in the previous figure.
Item
Interface
Static MAC Address The MAC address of the host that is allowed to forward packets on the
VLAN ID
Description
The sticky MAC address learning mode, which is one of the following:
Enabled: MAC addresses learned or manually configured on this
interface are learned in sticky mode. A sticky-mode MAC
address is a MAC address that does not age out and is added to
the running configuration. If the running configuration is saved to
the startup configuration, the sticky addresses are saved to per-
sistent storage and do not need to be relearned when the device
restarts. Upon enabling sticky mode on an interface, all dynami-
cally learned MAC addresses in the MAC address table for that
interface are converted to sticky mode. Additionally, new
addresses dynamically learned on the interface will also become
sticky.
Disabled: When a link goes down on a port, all of the dynamically
learned addresses are cleared from the source MAC address
table the feature maintains. When the link is restored, the inter-
face can once again learn addresses up to the specified limit. If
sticky mode is disabled after being enabled on an interface, the
sticky-mode addresses learned or manually configured on the
interface are converted to dynamic entries and are automatically
removed from persistent storage.
agent when a port is locked and a frame with a MAC address not cur-
rently in the table arrives on the port. A port is considered to be locked
once it has reached the maximum number of allowed dynamic or static
MAC address entries in the port security MAC address table.
The source MAC address and, if applicable, associated VLAN ID of the
last frame that was discarded at a locked port.
Click Refresh to update the screen.
Click Edit to edit the selected entries.
Click Edit All to apply same settings to all interfaces.
Figure 4.241 Switching > Port Security > Static MAC
Description
The interface associated with the rest of the data in the row. When
adding a static MAC address entry, use the Interface menu to select
the interface to associate with the permitted MAC address.
associated interface.
The ID of the VLAN that includes the host with the specified MAC
address.
217
EKI-9500 Series User Manual
Advertisement
Table of Contents
