Advantech EKI-9512-C0IDW10E, Руководство пользователя

Страница: 234 / 326

215 EKI-9500 Series User Manual
4.4.17 Port Security
Port Security can be enabled on a per-port basis. When a port is locked, only packets
with allowable source MAC addresses can be forwarded. All other packets are dis-
carded. A MAC address can be defined as allowable by one of two methods: dynam-
ically or statically. Note that both methods are used concurrently when a port is
locked.
Dynamic locking implements a “first arrival” mechanism for Port Security. You specify
how many addresses can be learned on the locked port. If the limit has not been
reached, a packet with an unknown source MAC address is learned and forwarded
normally. Once the limit is reached, no more addresses are learned on the port. Any
packets with source MAC addresses that were not already learned are discarded.
Note that you can effectively disable dynamic locking by setting the number of allow-
able dynamic entries to zero.
Static locking allows you to specify a list of MAC addresses that are allowed on a
port. The behavior of packets is the same as for dynamic locking: only packets with
an allowable source MAC address can be forwarded.
4.4.17.1 Global
Use the Port Security Global Administration page to configure the global administra-
tive mode for the port security feature. Port security, which is also known as port MAC
locking, allows you to limit the number of source MAC address that can be learned on
a port. If a port reaches the configured limit, any other addresses beyond that limit
are not learned, and the frames are discarded. Frames with a source MAC address
that has already been learned will be forwarded. Port security can help secure the
network by preventing unknown devices from forwarding packets into the network.
To access this page, click Switching > Port Security > Global .
Figure 4.239 Switching > Port Security > Global
The following table describes the items in the previous figure.
4.4.17.2 Interface
Use the Port Security Interface Status page to configure the port security feature on a
selected interface.
Refresh Click Refresh to update the screen.
Clear Counters Click Clear Counters to reset the flap counters for all port channels
and member ports to zero.
Item Description
Item Description
Port Security Admin
Mode Enable or disable the global administrative mode for port security. The
port security mode must be enabled both globally and on an interface
to enforce the configured limits for the number of static and dynamic
MAC addresses allowed on that interface.
Submit Click Submit to save the values and update the screen.
Refresh Click Refresh to update the screen.
Cancel Click Cancel to restore default value.