
User’s Manual of LRP-822CS/LRP-1622CS
267
4.9.10 Port Security
This pag
you to configure the P
mit Control system and port settings. Limit Control allows for limiting the
n a given port. A use
VLAN ID. If Limit Control is enabled on a port, the
um number of
ed, an action is taken. The action can be one
of the four as described below.
is one of a ra
er-layer module, the Port Security module, which
ges MAC addresses learned on the port.
The Limit Control configuration consists of two sections, a system- and a port-wide. The IP Source Guard Static Binding Entry
and Table
&
Figure 4-9-65
appear.
e allows
ort Security Li
number of users o
r is identified by a MAC address and
limit specifies the maxim
users on the port. If this number is exceed
The Limit Control module
nge of modules that utilizes a low
mana
Status screens in
Figure 4-9-64
Figure 4-9-64
Port Security Setting Page Screenshot
The page incl
owing fields:
udes the foll
Object
Description
Port
Select port from this drop-down list
Security
Enable or disable the port security
Mac L2 Entry
addresses that can be secured on this port. If the
ing action is taken.
The switch is "born" with a total number of MAC addresses from which all ports
ress is seen on a Port Security-enabled port.
Since all ports draw from the same pool, it may happen that a configured
um cannot
ll
available MAC addresses.
The maximum number of MAC
limit is exceeded, the correspond
draw whenever a new MAC add
maxim
be granted, if the remaining ports have already used a
Action
If Limit is reached, the switch can take one of the following actions:
Forward
: Do not allow more than Limit MAC addresses on the port, but take
no further action.
Shutdown
: If Limit + 1 MAC addresses is seen on the port, shut down the
port. This implies that all secured MAC addresses will be removed from the
port, and no new will be learned. Even if the link is physically disconnected