EtherWAN EX26262, Management Manual

Page: 234 / 326

– 234 –
C
HAPTER
5
| Monitoring the Switch
Displaying Information About Security Settings
D
ISPLAYING
I
NFORMATION
A
BOUT
S
WITCH
S
ETTINGS FOR
P
ORT
S
ECURITY
Use the Port Security Switch Status page to show information about MAC
address learning for each port, including the software module requesting
port security services, the service state, the current number of learned
addresses, and the maximum number of secure addresses allowed.
Port Security is a module with no direct configuration. Configuration comes
indirectly from other software modules – the user modules. When a user
module has enabled port security on a port, the port is set up for software-
based learning. In this mode, frames from unknown MAC addresses are
passed on to the port security module, which in turn asks all user modules
whether to allow this new MAC address to be forwarded or blocked. For a
MAC address to be set in the forwarding state, all enabled user modules
must unanimously agree on allowing the MAC address to forward. If only
one chooses to block it, it will be blocked until that user module decides
otherwise.
The status page is divided into two sections – one with a legend of user
modules that may request port security services, and one with the actual
port status.
P
ATH
Monitor, Security, Network, Port Security, Switch
P
ARAMETERS
These parameters are displayed:
User Module Legend
◆
User Module Name – The full name of a module that may request Port
Security services.
◆
Abbr – A one-letter abbreviation of the user module. This is used in the
Users column in the port status table.
Port Status
◆
Port – The port number for which the status applies. Click the port
number to see the status for this particular port.
◆
Users – Each of the user modules has a column that shows whether
that module has enabled Port Security or not. A '-' means that the
corresponding user module is not enabled, whereas a letter indicates
that the user module abbreviated by that letter has enabled port
security.
◆
State – Shows the current state of the port. It can take one of four
values:
■
Disabled: No user modules are currently using the Port Security
service.
■
Ready: The Port Security service is in use by at least one user
module, and is awaiting frames from unknown MAC addresses to
arrive.