Chapter 4. Web Configuration & Operation
49
CHAPTER 3
WEB OPERATION & CONFIGURATION
System Configuration
Mode:
Enable or disable port security limit control globally. If globally disabled, other modules may still use the
underlying functionality, but limit checks and corresponding actions are disabled.
Aging Enabled:
If enabled, secured MAC addresses are subject to aging as discussed under Aging Period. With aging
enabled, a timer is started once the end-host gets secured. When the timer expires, the switch starts looking for
frames from the end-host, and if such frames are not seen within the next Aging Period, the end-host is assumed to be
disconnected, and the corresponding resources are freed on the switch.
Aging Period:
If Aging Enabled is checked, then the aging period can be set up with the desired value. By default, the
aging period is set to 3600 seconds. The allowed range is 10
~
10,000,000 second.
Port Configuration
Port:
Display the port number. “Port *” rules apply to all ports.
Mode:
Enable or disable port security limit control on a per port basis. To make limit control function work, port
security limit control needs to be enabled globally and on a port.
Limit:
The maximum number of MAC addresses that can be secured on this port. The number cannot exceed 1024. If
the limit is exceeded, the corresponding action is taken.
Action:
If the limit is exceeded, the selected action will take effect.
None:
Do not allow more than the specified limit of MAC addresses to access on a port. No action is further taken.
Trap:
If Limit + 1 MAC addresses are seen on the port, send an SNMP trap. If Aging is disabled, only one SNMP
trap will be sent, but with Aging enabled, new SNMP traps will be sent every time the limit is exceeded.
Shutdown:
If Limit + 1 MAC addresses is seen on the port, shut down the port. This implies that all secured MAC
addresses will be removed from the port, and no new addresses will be learned. Even if the link is physically
disconnected and reconnected on the port (by disconnecting the cable), the port will remain shut down. There
are three ways to re-open the port:
* Boot the switch
* Disable and re-enable Limit Control on the port or the switch
* Click the “Reopen” button
Trap & Shutdown:
If Limit + 1 MAC addresses is seen on the port, both the “Trap” and the “Shutdown” actions
described above will be taken.
State:
Display the current state of the port from the port security limit control's point of view. The displayed state
might be one of the following:
Disabled:
Limit control is either globally disabled or disabled on a port.
Ready:
The limit is not reached yet.
Limit Reached:
The limit is reached on a port. This state can only be shown if Action is set to None or Trap.
Shutdown:
The port is shut down by the Limit Control module. This state can only be shown if Action is set to
Shutdown or Trap & Shutdown.
Re-open Button:
If a port is shut down by this module, you may reopen it by clicking this button, which will only be
enabled if this is the case. For other methods, refer to Shutdown in the Action section. Note that clicking the Reopen
button causes the page to be refreshed, so non-committed changes will be lost.
Summary of Contents for FRM220-MX210 series
Page 1: ...1 FRM220 MX210 Series 2 Gigabit Ethernet Multiplexer ...
Page 172: ......
Page 173: ......
