ATEN ES0152 User Manual page 325

Chapter 12. Security
The maximum number of MAC addresses that can be secured on this port. This
number cannot exceed 1024. If the limit is exceeded, the
corresponding action is taken.
The switch is "born" with a total number of MAC addresses from which all
ports draw whenever a new MAC address is seen on a Port Security-enabled
port. Since all ports draw from the same pool, it may happen that a configured
maximum cannot be granted, if the remaining ports have already used all
available MAC addresses.
Violation Mode:
If Limit is reached, the switch can take one of the following actions:
Protect: Do not allow more than Limit MAC addresses on the port, but take no
further action.
Restrict: If Limit is reached, subsequent MAC addresses on the port will be
counted and marked as violating. Such MAC addreses are removed from the
MAC table when the hold time expires. At most Violation Limit MAC
addresses can be marked as violating at any given time.
Shutdown: If Limit is reached, one additional MAC address will cause the port
to be shut down. This implies that all secured MAC addresses be removed from
the port, and no new addresses be learned. There are three ways to re-open the
port:
1) In the "Configuration→Ports" page's "Configured" column, first disable the
port, then restore the original mode.
2) Make a Port Security configuration change on the port.
3) Boot the switch.
Violation Limit
The maximum number of MAC addresses that can be marked as violating on
this port. This number cannot exceed 1023. Default is 4. It is only used
when Violation Mode is Restrict.
State:
This column shows the current state of the port as seen from the Limit Control's
point of view. The state takes one of four values:
Disabled: Limit Control is either globally disabled or disabled on the port.
Ready: The limit is not yet reached. This can be shown for all actions.
Limit Reached: Indicates that the limit is reached on this port. This state can
only be shown if Action is set to none or Trap.
Shutdown: Indicates that the port is shut down by the Limit Control module.
This state can only be shown if Action is set to Shutdown or Trap & Shutdown.
311