Port Security - Allied Telesis AT-8016F/MT Installation Manual

Product Description

Port Security

The AT-8000 Series Fast Ethernet Switches have three levels of port
security: Limited, Secure, and Lock All Ports. You can use the port
security levels to enhance the security to your network. The security
levels are briefly described below. For further information and
instructions on activating a security level, refer to the AT-S39
Management Software User's Guide.
Limited
You can use this security level to manually specify the maximum number
of dynamic MAC addresses a port on the switch can learn. Once a port
has learned its maximum limit of MAC addresses, it will discard any
frames that it receives with a source MAC address not already learned
and stored in the MAC address table.
This security level can prevent unauthorized individuals from
connecting to your network and gaining access to network resources.
For example, if a switch port is connected to an Ethernet hub with four
workstations attached, you can configure the switch port to learn only
four MAC addresses. Once those addresses are learned, any one else
attempting to connect to the network through the Ethernet hub would
be denied access.
Secure
This security level forwards frames based only on static MAC addresses.
When this security level is activated, the switch deletes all dynamic MAC
addresses and disables the MAC address table so that no new addresses
can be learned.
You must specify the static MAC addresses of the nodes whose frames
the switch should forward. The switch will forward frames only from
those nodes whose MAC addresses you enter in the static MAC address
table. Any node whose MAC address is not in the static MAC address
table will not be able to send frames through the switch.
Lock All Ports
This security level causes the switch to immediately stop learning new
dynamic MAC addresses. The switch forwards frames based on the
dynamic MAC addresses that it has already learned and any static MAC
addresses that the network administrator has entered.
42