Port Security - Allied Telesis AT-9410GB Installation Manual

Product Description

Port Security

32
The AT-9410GB Gigabit Ethernet Switch has three levels of port security:
Normal (default), Limited, Secure. You can use the port security levels to
enhance the security to your network. The security levels are briefly
described below. For further information and instructions on activating
a security level, refer to the AT-S45 Management Software User's
Guide.
Normal
This is the default port security setting and indicates that port security
has been disabled.
Limited
You use this security level to manually specify the maximum number of
dynamic MAC addresses a port on the switch can learn. Once a port has
learned its maximum limit of MAC addresses, it will discard any frames
that it receives with a source MAC address not already learned and
stored in the MAC address table.
This security level can prevent unauthorized individuals from
connecting to your network and gaining access to network resources.
For example, if an AT-9410GB port is connected to an Ethernet hub with
four workstations attached, you can configure the switch port to learn
only four MAC addresses. Once those addresses are learned, any one
else attempting to connect to the network through the Ethernet hub
would be denied access.
Secure
This security level causes the switch to immediately stop learning new
dynamic MAC addresses. The switch forwards frames based on the
dynamic MAC addresses that it has already learned and any static MAC
addresses that the network administrator has entered.