C
HAPTER
14
| Security Measures
Configuring Port Security
– 344 –
To show a list of IP addresses authorized for management access:
1.
Click Security, IP Filter.
2.
Select Show from the Action list.
Figure 184: Showing IP Addresses Authorized for Management Access
C
ONFIGURING
P
ORT
S
ECURITY
Use the Security > Port Security page to configure a switch port with one
or more device MAC addresses that are authorized to access the network
through that port.
When port security is enabled on a port, the switch stops learning new MAC
addresses on the specified port when it has reached a configured maximum
number. Only incoming traffic with source addresses already stored in the
dynamic or static address table will be authorized to access the network
through that port. If a device with an unauthorized MAC address attempts
to use the switch port, the intrusion will be detected and the switch can
automatically take action by disabling the port and sending a trap
message.
To use port security, specify a maximum number of addresses to allow on
the port and then let the switch dynamically learn the <source MAC
address, VLAN> pair for frames received on the port. Note that you can
also manually add secure addresses to the port using the Static Address
Table (
). When the port has reached the maximum number of
MAC addresses, the selected port will stop learning. The MAC addresses
already in the address table will be retained and will not age out. Any other
device that attempts to use the port will be prevented from accessing the
switch.
CLI R
EFERENCES
u
Summary of Contents for DG-GS4826S
Page 2: ...DG GS4826S DG GS4850S E012011 R01 F1 2 2 0 ...
Page 4: ......
Page 6: ...ABOUT THIS GUIDE 6 ...
Page 60: ...SECTION I Getting Started 60 ...
Page 72: ...CHAPTER 1 Introduction System Defaults 72 ...
Page 90: ...CHAPTER 2 Initial Switch Configuration Managing System Files 90 ...
Page 92: ...SECTION II Web Configuration 92 u Unicast Routing on page 539 u Multicast Routing on page 595 ...
Page 138: ...CHAPTER 4 Basic Management Tasks Resetting the System 138 ...
Page 204: ...CHAPTER 6 VLAN Configuration Configuring MAC based VLANs 204 ...
Page 212: ...CHAPTER 7 Address Table Settings Clearing the Dynamic Address Table 212 ...
Page 238: ...CHAPTER 9 Rate Limit Configuration 238 Figure 106 Configuring Rate Limits ...
Page 268: ...CHAPTER 12 Quality of Service Attaching a Policy Map to a Port 268 ...
Page 368: ...CHAPTER 14 Security Measures DHCP Snooping 368 ...
Page 422: ...CHAPTER 15 Basic Administration Protocols Remote Monitoring 422 ...
Page 488: ...CHAPTER 17 IP Configuration Setting the Switch s IP Address IP Version 6 488 ...
Page 538: ...CHAPTER 20 IP Services Forwarding UDP Service Requests 538 ...
Page 594: ...CHAPTER 21 Unicast Routing Configuring the Open Shortest Path First Protocol Version 2 594 ...
Page 624: ...CHAPTER 22 Multicast Routing Configuring PIMv6 for IPv6 624 ...
Page 638: ...CHAPTER 23 Using the Command Line Interface CLI Command Groups 638 ...
Page 712: ...CHAPTER 26 SNMP Commands 712 ...
Page 720: ...CHAPTER 27 Remote Monitoring Commands 720 ...
Page 776: ...CHAPTER 29 Authentication Commands Management IP Filter 776 ...
Page 876: ...CHAPTER 34 Port Mirroring Commands Local Port Mirroring Commands 876 ...
Page 898: ...CHAPTER 37 Address Table Commands 898 ...
Page 998: ...CHAPTER 41 Quality of Service Commands 998 ...
Page 1060: ...CHAPTER 42 Multicast Filtering Commands MLD Proxy Routing 1060 ...
Page 1078: ...CHAPTER 43 LLDP Commands 1078 ...
Page 1088: ...CHAPTER 44 Domain Name Service Commands 1088 ...
Page 1164: ...CHAPTER 47 IP Interface Commands IPv6 to IPv4 Tunnels 1164 ...
Page 1260: ...CHAPTER 48 IP Routing Commands Open Shortest Path First OSPFv3 1260 ...
Page 1304: ...SECTION IV Appendices 1304 ...
Page 1310: ...APPENDIX A Software Specifications Management Information Bases 1310 ...
Page 1343: ...DG GS4826S DG GS4850S E012011 R02 F1 2 2 0 ...
Page 1344: ......