GS716Tv2 and GS724Tv3 Software Administration Manual
5-36
Managing Device Security
v1.0, July 2009
Dynamic locking implements a ‘first arrival’ mechanism for Port Security. You specify how many
addresses can be learned on the locked port. If the limit has not been reached, then a packet with an
unknown source MAC address is learned and forwarded normally. When the limit is reached, no
more addresses are learned on the port. Any packets with source MAC addresses that were not
already learned are discarded. You can effectively disable dynamic locking by setting the number
of allowable dynamic entries to zero.
Static locking allows you to specify a list of MAC addresses that are allowed on a port. The
behavior of packets is the same as for dynamic locking: only packets with an allowable source
MAC address can be forwarded.
To display the Port Security Interface Configuration page:
1.
Click
Security
Traffic Control
, and then click the
Port Security
Interface
Configuration
link.
Figure
5-22
Table
5-26. Port Security Configuration Fields
Field
Description
Port
Identifies the port. To change the port security settings for the port, select the
associated check box.
Port Security
Enable or Disable the port security feature for the selected port.