Port Security Interface Status - Ubiquiti EdgeSwitch ES-24-250W Administration Manual

EdgeSwitch Administration Guide
™

Port Security Interface Status

Use the Port Security Interface Status page to configure the port security feature on a selected interface.
To access the page, click Switching > Port Security > Interface in the navigation menu.
Field
Interface
Port Security Mode
Max Dynamic Addresses
Allowed
Max Static Addresses Allowed
Sticky Mode
Violation Trap Mode
Last Violation MAC/VLAN
Ubiquiti Networks, Inc.
Port Security Interface Status
Port Security Interface Status Fields
Description
The interface associated with the rest of the data in the row. When configuring the port security
settings for one or more interfaces, this field lists the interfaces that are being configured.
The administrative mode of the port security feature on the interface. The port security mode must
be enabled both globally and on an interface to enforce the configured limits for the number of static
and dynamic MAC addresses allowed on that interface.
The number of source MAC addresses that can be manually added to the port security MAC address
table for an interface. If the port link goes down, the statically configured MAC addresses remain in the
MAC address table. The maximum number includes all dynamically learned MAC addresses that have
been converted to static MAC addresses.
The number of source MAC addresses that can be manually added to the port security MAC address
table for an interface. If the port link goes down, the statically configured MAC addresses remain in the
MAC address table. The maximum number includes all dynamically learned MAC addresses that have
been converted to static MAC addresses.
The sticky MAC address learning mode, which is one of the following:
• Enabled MAC addresses learned or manually configured on this interface are learned in sticky
mode. A sticky-mode MAC address is a MAC address that does not age out and is added to the
running configuration. If the running configuration is saved, the sticky addresses do not need to
be relearned when the device restarts. Upon enabling sticky mode on an interface, all dynamically
learned MAC addresses in the MAC address table for that interface are converted to sticky mode.
Additionally, new addresses dynamically learned on the interface will also become sticky.
• Disabled When a link goes down on a port, all of the dynamically learned addresses are cleared
from the source MAC address table for the feature. When the link is restored, the interface can
once again learn addresses up to the specified limit. If sticky mode is disabled after being enabled
on an interface, the sticky-mode addresses learned or manually configured on the interface are
converted to dynamic entries and are automatically removed from persistent storage.
Indicates whether the port security feature sends a trap to the SNMP agent when a port is locked and
a frame with a MAC address not currently in the table arrives on the port. A port is considered to be
locked once it has reached the maximum number of allowed dynamic or static MAC address entries in
the port security MAC address table.
The source MAC address and, if applicable, associated VLAN ID of the last frame discarded at a locked port.
Configuring Switching Information
173