Allen-Bradley armorstratix 5700, User Manual, Page: 221 / 458

Rockwell Automation Publication 1783-UM007I-EN-P - December 2017 221
Configure Switch Features Chapter 3
Port Security Stratix managed switches implement MAC address-based port security. A
MAC ID is a unique address that is assigned to each Ethernet-capable device.
Switches can enforce communication either dynamically or statically per
MAC ID.
With dynamic port security, a switch port communicates with some number of
devices. The port tracks only the number of devices rather than the MAC IDs
of those devices. Static port security adds devices to the port security table on a
per MAC ID basis. With static dynamic port security, only devices with the
MAC IDs in the security table are able to communicate on that port.
Port Security is not available on Stratix 5700 switches with lite firmware.
Dynamic Secure MAC ID
Many Smartport roles have a maximum number of MAC IDs that can use that
port. For example, the Smartport role ‘Automation Device’ configures the port
for a maximum of one MAC ID. The MAC ID is dynamic, meaning the
switch learns the first source MAC ID to use the port. Attempts by any other
MAC ID to access the port are denied.
If the link becomes inactive, the switch dynamically relearns the MAC ID to be
secured.
The default number of MAC IDs can be changed on the Port Security tab
within Device Manager or the Logix Designer application.
The following table shows the Smartport role and the maximum number of
supported MAC IDs.
Table 84 - Maximum Number of MAC IDs per Smartport Role
Smartport Role Number of MAC IDs (max)
Automation Device 1
Desktop for Automation 1
Switch for Automation Not restricted
Router for Automation Not restricted
Phone for Automation 3
Wireless for Automation Not restricted
Multiport Automation Devices Not restricted
Virtual Desktop for Automation 2
Port Mirroring Not restricted
None Not restricted