217
EKI-9500 Series User Manual
4.4.17.3
Static MAC
Use the Port Security Static MAC Addresses page to add and remove the MAC
addresses of hosts that are allowed to send traffic to specific interfaces on the
device. The number of MAC addresses you can associate with each interface is
determined by the maximum static MAC addresses allowed on a given interface.
To access this page, click
Switching
>
Port Security
>
Static MAC
.
Figure 4.241 Switching > Port Security > Static MAC
The following table describes the items in the previous figure.
Sticky Mode
The sticky MAC address learning mode, which is one of the following:
Enabled: MAC addresses learned or manually configured on this
interface are learned in sticky mode. A sticky-mode MAC
address is a MAC address that does not age out and is added to
the running configuration. If the running configuration is saved to
the startup configuration, the sticky addresses are saved to per-
sistent storage and do not need to be relearned when the device
restarts. Upon enabling sticky mode on an interface, all dynami-
cally learned MAC addresses in the MAC address table for that
interface are converted to sticky mode. Additionally, new
addresses dynamically learned on the interface will also become
sticky.
Disabled: When a link goes down on a port, all of the dynamically
learned addresses are cleared from the source MAC address
table the feature maintains. When the link is restored, the inter-
face can once again learn addresses up to the specified limit. If
sticky mode is disabled after being enabled on an interface, the
sticky-mode addresses learned or manually configured on the
interface are converted to dynamic entries and are automatically
removed from persistent storage.
Violation Trap Mode Indicates whether the port security feature sends a trap to the SNMP
agent when a port is locked and a frame with a MAC address not cur-
rently in the table arrives on the port. A port is considered to be locked
once it has reached the maximum number of allowed dynamic or static
MAC address entries in the port security MAC address table.
Last Violation MAC/
VLAN
The source MAC address and, if applicable, associated VLAN ID of the
last frame that was discarded at a locked port.
Refresh
Click
Refresh
to update the screen.
Edit
Click
Edit
to edit the selected entries.
Edit All
Click
Edit
All to apply same settings to all interfaces.
Item
Description
Item
Description
Interface
The interface associated with the rest of the data in the row. When
adding a static MAC address entry, use the Interface menu to select
the interface to associate with the permitted MAC address.
Static MAC Address The MAC address of the host that is allowed to forward packets on the
associated interface.
VLAN ID
The ID of the VLAN that includes the host with the specified MAC
address.
