Digisol DG-GS1550, Management Manual

Page: 136 / 665

Configuring the Switch
3-90
3
Web – Click Security, Port Security. Set the action to take when an invalid address is
detected on a port, mark the checkbox in the Status column to enable security for a
port, set the maximum number of MAC addresses allowed on a port, and click Apply.
Figure 3-54 Configuring Port Security
CLI – This example selects the target port, sets the port security action to send a
trap and disable the port and sets the maximum MAC addresses allowed on the
port, and then enables port security for the port.
Network Access
(
MAC Address Authentication)
Some devices connected to switch ports may not be able to support 802.1X
authentication due to hardware or software limitations. This is often true for devices
such as network printers, IP phones, and some wireless access points. The switch
enables network access from these devices to be controlled by authenticating
device MAC addresses with a central RADIUS server.
Notes: 1.
RADIUS authentication must be activated and configured properly for the
MAC Address authentication feature to work properly. (See "Configuring
Local/Remote Logon Authentication" on page 3-55.)
2.
MAC authentication cannot be configured on trunk ports.
Command Usage
• Network Access authentication controls access to the network by authenticating
the MAC address of each host that attempts to connect to a switch port. Traffic
received from a specific MAC address is forwarded by the switch only if the source
MAC address is successfully authenticated by a central RADIUS server. While
authentication for a MAC address is in progress, all traffic is blocked until
authentication is completed. On successful authentication, the RADIUS server
may optionally assign VLAN settings for the switch port.
Console(config)#interface ethernet 1/5
Console(config-if)#port security action trap-and-shutdown
4-135
Console(config-if)#port security max-mac-count 20 4-135
Console(config-if)#port security 4-135
Console(config-if)#