Configuring Port Security - Edge-Core ECS4810-12M Layer 2 Management Manual

Hide thumbs Also See for ECS4810-12M Layer 2:

Table of Contents

To show a list of IP addresses authorized for management access:

Click Security, IP Filter.

Select Show from the Action list.

Figure 194: Showing IP Addresses Authorized for Management Access

Use the Security > Port Security page to configure the maximum number

of device MAC addresses that can be learned by a switch port, stored in the

address table, and authorized to access the network.

When port security is enabled on a port, the switch stops learning new MAC

addresses on the specified port when it has reached a configured maximum

number. Only incoming traffic with source addresses already stored in the

address table will be authorized to access the network through that port. If

a device with an unauthorized MAC address attempts to use the switch

port, the intrusion will be detected and the switch can automatically take

action by disabling the port and sending a trap message.

"Port Security" on page 746

To configure the maximum number of address entries which can be

learned on a port, specify the maximum number of dynamic addresses

allowed. The switch will learn up to the maximum number of allowed

address pairs <source MAC address, VLAN> for frames received on the

port. Note that you can manually add additional secure addresses to a

port using the Static Address Table

reached the maximum number of MAC addresses, the port will stop

learning new addresses. The MAC addresses already in the address

table will be retained and will not be aged out.

When the port security state is changed from enabled to disabled, all

dynamically learned entries are cleared from the address table.

| Security Measures

Configuring Port Security

207). When the port has