306
4.12.7 Port Security Detail
This Page shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration.
Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the
port is set-up for software-based learning. In this mode, frames from unknown MAC addresses are passed on to the port security
module, which in turn asks all user modules whether to allow this new MAC address to forward or block it. For a MAC address to be
set in the forwarding state, all enabled user modules must unanimously agree on allowing the MAC address to forward. If only one
chooses to block it, it will be blocked until that user module decides otherwise. The Port Security Detail screen in
Figure 4-12-7
appears.
Figure 4-12-7:
Port Security Detail Screen Page Screenshot
The Page includes the following fields:
Object
Description
MAC Address & VLAN
ID
The MAC address and VLAN ID that is seen on this port. If no MAC addresses
are learned, a single row stating "No MAC addresses attached" is displayed.
State
Indicates whether the corresponding MAC address is blocked or forwarding. In
the blocked state, it will not be allowed to transmit or receive traffic.
Time of Addition
Shows the date and time when this MAC address was first seen on the port.
Age/Hold
If at least one user module has decided to block this MAC address, it will
stay in the blocked state until the hold time (measured in seconds) expires.
If all user modules have decided to allow this MAC address to forward, and
aging is enabled, the Port Security module will periodically check that this
MAC address still forwards traffic.
If the age period (measured in seconds) expires and no frames have been
seen, the MAC address will be removed from the MAC table. Otherwise a
new age period will begin.
If aging is disabled or a user module has decided to hold the MAC address
indefinitely, a dash (-) will be shown.
Summary of Contents for NS3702-24P-4S
Page 1: ...NS3702 24P 4S User Manual P N 1072832 REV 00 01 ISS 14JUL14 ...
Page 102: ...102 Figure 4 5 4 LACP Port Configuration Page Screenshot ...
Page 119: ...119 Figure 4 6 4 VLAN Membership Status for Static User Page Screenshot ...
Page 124: ...124 Figure 4 6 6 Private VLAN Membership Configuration page screenshot ...
Page 140: ...140 Figure 4 6 21 Group Name to VLAN Mapping Table Page Screenshot ...
Page 164: ...164 Figure 4 8 2 Multicast Flooding ...
Page 184: ...184 Figure 4 8 15 MLD Snooping Port Group Filtering Configuration Page Screenshot ...
Page 204: ...204 Figure 4 9 6 QoS Egress Port Tag Remarking Page Screenshot ...
Page 209: ...209 QoS Class QoS Class value can be any of 0 7 DPL Drop Precedence Level 0 1 ...
Page 251: ...251 Figure 4 11 3 Authentication Method Configuration Page Screenshot ...
Page 286: ...286 Figure 4 11 11 RADIUS Server Configuration Screenshot ...
Page 290: ...290 Figure 4 11 17 Add User Properties Screen Figure 4 11 18 Add User Properties Screen ...
Page 298: ...298 non committed changes will be lost ...
Page 349: ...349 Figure 4 16 2 PoE Configuration Screenshot ...