C
H A P T E R
17.1 Overview
This chapter shows you how to set up port security.
Port security allows only packets with dynamically learned MAC addresses and/or configured
static MAC addresses to pass through a port on the ONU. See
information on configuring static MAC address forwarding.
For maximum port security, enable this feature, disable MAC address learning and configure
static MAC address(es) for a port. By default, MAC address learning is still enabled even
though the port security is not activated.
Functionally the ONU allows for three possible outcomes with port security. You can
configure the ports to:
• Forward all packets and learn all MAC addresses.
• Drop all packets from unknown MAC addresses and do not learn MAC addresses.
• Drop all packets from unknown MAC addresses and learn a limited number of MAC
addresses.
The ONU supports five possible configurations for port security. See
17.3 on page 127
ONU User's Guide
for supported configurations and an example.
17
Port Security
Chapter 9 on page 91
for
Section
125