DES-3010F/DES-3010FL/DES-3010G/DES-3018/DES-3026 Fast Ethernet Switch Manual
Port Security
A given ports’ (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC
addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be
locked by using the
Admin State
pull-down menu to
Enabled
, and clicking
Apply
.
Port Security
is a security feature that prevents unauthorized computers (with source MAC addresses) unknown to the
Switch prior to locking the port (or ports) from connecting to the Switch's locked ports and gaining access to the network.
To view the following window, click
Security > Port Security
.
Figure 10- 2. Port Security Settings and Table window
The following parameters can be set:
Parameter Description
From/To
A consecutive group of ports may be configured starting with the selected port.
Admin State
This pull-down menu allows you to enable or disable Port Security (locked MAC address
table for the selected ports).
Max. Addr. (0-10)
The number of MAC addresses that will be in the MAC address forwarding table for the
selected switch and group of ports.
Lock Address
Mode
This pull-down menu allows you to select how the MAC address table locking will be
implemented on the Switch, for the selected group of ports. The options are:
•
•
•
Permanent
– The locked addresses will not age out after the aging timer
expires.
DeleteOnTimeout
– The locked addresses will age out after the aging timer
expires.
DeleteOnReset
– The locked addresses will not age out until the Switch has
been reset.
Click
Apply
to implement changes made.
NOTE:
The uplink module ports (DES-3010F/FL/G ports 9-10, DES-3018 ports 17-18,
DES-3026 ports 25-26) do not support the port security function.
116
