Interlogix NS3562-8P-2S, User Manual, Page: 172 / 245

Chapter 4: Web configuration
170 NS3562-8P-2S User Manual
The page includes the following fields:
Object Description
Port The port number for which the status applies.
Security Enable or disable port security.
Mac L2 Entry The maximum number of MAC addresses that can be secured on this port. If
the limit is exceeded, the corresponding action is taken.
The switch is "born" with a total number of MAC addresses from which all
ports draw whenever a new MAC address is seen on a Port Security-
enabled port. Since all ports draw from the same pool, it may happen that a
configured maximum cannot be granted, if the remaining ports have already
used all available MAC addresses.
Action If a limit is reached, the switch can take one of the following actions:
Forward : Do not allow more than Limit MAC addresses on the port, but take
no further action.
Shutdown : If Limit + 1 MAC addresses is seen on the port, shut down the
port. This implies that all secured MAC addresses will be removed from the
port, and no new ones will be learned. Even if the link is physically
disconnected and reconnected on the port (by disconnecting the cable), the
port will remain shut down. There are three ways to re-open the port:
1) Disable and re-enable Limit Control on the port or the switch,
2) Click the Reopen button.
Discard : If Limit + 1 MAC addresses is seen on the port, it will not learn the
new MAC address and drop the package.
Buttons
• Click Apply to apply changes.
DoS
DoS (Denial of Service) is a simple but effective destructive attack on the internet. The
server under DoS attack will drop normal user data packets due to the non-stop
processing of the attacker’s data packet, leading to denial of the service and could lead
to a leak of sensitive data from the server.
Protocol check is an application that can protect the server from attacks such as DoS.
The protocol check allows the user to drop matched packets based on specified
conditions. This type of security feature provides several simple and effective
protections against DoS attacks while having no influence on the linear forwarding
performance of the switch.