FibroLAN Falcon-RX/812/G/A User Manual page 106

Falcon R-Class | User Guide
Violation Mode If Limit is reached, the switch can take one of the following actions:
•
Protect: Do not allow more than Limit MAC addresses on the port but take
no further action.
•
Restrict: If Limit is reached, subsequent MAC addresses on the port will be
counted and marked as violating. Such MAC addresses are removed from
the MAC table when the hold time expires. At most Violation Limit MAC
addresses can be marked as violating at any given time.
•
Shutdown: If Limit is reached, one additional MAC address will cause the
port to be shut down. This implies that all secured MAC addresses be
removed from the port, and no new addresses be learned. There are three
ways to re-open the port:
1) In the "Configuration → Ports" page's "Configured" column, first disable the
port, then restore the original mode.
2) Make a Port Security configuration change on the port.
3) Boot the switch.
Violation Limit The maximum number of MAC addresses that can be marked as violating on
this port. This number cannot exceed 1023. Default is 4. It is only used when
Violation Mode is Restrict.
Sticky Enables sticky learning of MAC addresses on this port. When the port is in
sticky mode, all MAC addresses that would otherwise have been learned as
dynamic are learned as sticky.
Sticky MAC addresses are part of the running-config and can therefore be
saved to startup-config. Sticky MAC addresses survive link changes (in contrast
to Dynamic, which will have to be learned again). They also survive reboots if
running-config is saved to startup-config.
A port can be Sticky-enabled whether or not Port Security is enabled on that
interface. In that way, it is possible to add sticky MAC addresses management-
wise
"Configuration→Security→Port Security→MAC Addresses" page.
State This column shows the current state of the port as seen from the Limit
Control's point of view. The state takes one of four values:
•
Disabled: Limit Control is either globally disabled or disabled on the port.
•
Ready: The limit is not yet reached. This can be shown for all actions.
•
Limit Reached: Indicates that the limit is reached on this port. This state
can only be shown if Action is set to None or Trap.
Shutdown: Indicates that the port is shut down by the Limit Control module.
This state can only be shown if Action is set to Shut down or Trap & Shutdown.
106
before enabling Port Security. To do that, use the