OPTICAL SYSTEMS DESIGN
DOC ID: 10118101
OSD2512 OPERATOR MANUAL
PAGE 298
This page shows the Port Security status. Port Security is a module with no direct
configuration. Configuration comes indirectly from other modules - the user modules.
When a user module has enabled port security on a port, the port is set-up for
software-based learning. In this mode, frames from unknown MAC addresses are
passed on to the port security module, which in turn asks all user modules whether to
allow this new MAC address to forward or block it. For a MAC address to be set in
the forwarding state, all enabled user modules must unanimously agree on allowing
the MAC address to forward. If only one chooses to block it, it will be blocked until
that user module decides otherwise.
The status page is divided into two sections - one with a legend of user modules and
one with the actual port status.
USER MODULE LEGEND
The legend shows all user modules that may request Port Security services.
User Module Name
The full name of a module that may request Port Security services.
Abbr
A one-letter abbreviation of the user module. This is used in the Users column in the port
status table.
PORT STATUS
The table has one row for each port on the switch and a number of columns, which are:
Port
The port number for which the status applies. Click the port number to see the status for this
particular port.
Users
Each of the user modules has a column that shows whether that module has enabled Port
Security or not. A '-' means that the corresponding user module is not enabled, whereas a letter
indicates that the user module abbreviated by that letter (see Abbr) has enabled port security.
State
Shows the current state of the port. It can take one of four values:
Disabled
: No user modules are currently using the Port Security service.
Ready
: The Port Security service is in use by at least one user module, and is awaiting frames
from unknown MAC addresses to arrive.
Limit Reached
: The Port Security service is enabled by at least the Limit Control user
module, and that module has indicated that the limit is reached and no more MAC addresses
should be taken in.
Shutdown
: The Port Security service is enabled by at least the Limit Control user module,
and that module has indicated that the limit is exceeded. No MAC addresses can be learned on
the port until it is administratively re-opened on the Limit Control configuration Web-page.
