Instruction Manual
44
Change the Port Security Limit Control settings
On the Port Security Limit Control Configuration screen, you can limit the number of
users who are accessing a specific port. Users are identified by a MAC address or VLAN
ID. If Limit Control is enabled on a port, the limit specifies the maximum number of
users that can be on a port, and if the number is exceeded, action is taken. See the
table below for more information about the settings that you can change.
Menu option
Description
Mode
Enable or disable limit control.
Aging Enabled When selected, secure MAC addresses are subject to aging.
Aging Period
Specify the aging period. Set a value between 10 and 10,000,000
seconds.
Port
View the port number.
Mode
Enable or disable Limit Control for a specific port.
Note:
This field
and the Global Mode must be set to Enabled for Limit Control to
be enabled.
Limit
Set the maximum number of MAC addresses that can be secured
on the port. The number can’t exceed 1024 and if the limit is
exceeded, the corresponding action is taken. The switch is “born”
with a total number of MAC addresses from which all ports draw
whenever a new MAC address is seen on a port enabled with Port
Security. Since all ports draw from the same pool, it may happen
that a configured maximum can’t be granted if the remaining ports
have already used all of the available MAC addresses.
Action
If the limit is reached, the switch can take one of the following
actions:
• none (doesn’t allow more than Limit MAC addresses on the port,
but takes no further action).
• Trap (if Limit +1 MAC addresses is seen on the port, send an
SNMP trap. If Aging is disabled, only one SNMP trap will be sent,
but with Aging enabled, new SNMP traps will be sent every time
the limit is exceeded.)
• Shutdown (if Limit+1 MAC addresses is seen on the port, shut
down the port. This implies that all secured MAC addresses will
be removed from the port, and no new address will be learned.
Even if the link is physically disconnected and reconnected on
the port by disconnecting the cable, the port will remain shut
down.)
