D-Link xStack DGS-3426, User Manual

Page: 219 / 356

xStack DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
Port Security
A given port’s (or a range of ports') dynamic
MAC address learning can be locked such
that the current source MAC addresses
entered into the MAC address forwarding
table can not be changed once the port lock is
enabled. The port can be locked by using the
Admin State pull-down menu to Enabled ,
and clicking Apply .
Port Security is a security feature that
prevents unauthorized computers (with
source MAC addresses) unknown to the
Switch prior to locking the port (or ports)
from connecting to the Switch's locked ports
and gaining access to the network. To view
the following window, click
Security > Port
Security > Port Security Entries .
Figure 10- 3. Port Security Settings and Table
The following parameters can be set:
Parameter Description
Unit Choose the Switch ID number of the Switch in the switch stack to be modified.
From/To A consecutive group of ports may be configured starting with the selected port.
Admin State This pull-down menu allows the user to enable or disable Port Security (locked MAC
address table for the selected ports).
Max. Learning Addr. (0-16) The number of MAC addresses that will be in the MAC address forwarding table for the
selected switch and group of ports.
Mode This pull-down menu allows the option of how the MAC address table locking will be
implemented on the Switch, for the selected group of ports. The options are:
Permanent
– The locked addresses will only age out after the Switch has been reset.
DeleteOnTimeout
– The locked addresses will age out after the aging timer expires.
DeleteOnReset
– The locked addresses will not age out until the Switch has been
reset or rebooted.
Clear Click the to clear MAC address entries which were learned by the Switch by a
specified port. This only relates to the port security function. This command will only
take effect if the Mode is set as
Permanent
or
DeleteonReset
.
205