Atop EH9711 Series, Руководство пользователя

Страница: 58 / 223

Industrial Managed
Ethernet Switch – EH9711
User Manual
Page 58 of 223
Label Description Factory Default
Port The port number to which the configuration below applies. Port no. 1 ~ 11
Mode
Controls whether Port Security is enabled on this port. Notice that other modules
may still use the underlying port security features without enabling Port Security
on a given port.
Disabled
Limit
The maximum number of MAC addresses that can be secured on this port. This
number cannot exceed 1023. Default is 4. If the limit is exceeded, an action is
taken corresponding to the
violation mode .
The switch is "born" with a total number of MAC addresses from which all ports
draw whenever a new MAC address is seen on a Port Security-enabled port. Since
all ports draw from the same pool, it may happen that a configured maximum
cannot be granted, if the remaining ports have already used all available MAC
addresses.
4
Violation Mode
If Limit is reached, the switch can take one of the following actions:
Protect : Do not allow more than Limit MAC addresses on the port, but take no
further action.
Restrict : If Limit is reached, subsequent MAC addresses on the port will be
counted and marked as violating. Such MAC addresses are removed from the
MAC table when the
hold time expires. At most Violation Limit MAC addresses
can be marked as violating at any given time.
Shutdown : If Limit is reached, one additional MAC address will cause the port to
be shut down. This implies that all secured MAC addresses be removed from the
port, and no new addresses be learned. There are three ways to re-open the port:
1) In the "Configuration→Ports" page's "Configured" column, first disable the
port, then restore the original mode.
2) Make a Port Security configuration change on the port.
3) Boot the switch.
Protect
Violation Limit
The maximum number of MAC addresses that can be marked as violating on this
port. This number cannot exceed 1023. Default is 4. It is only used
when
Violation Mode is Restrict .
4
Sticky
Enables sticky learning of MAC addresses on this port. When the port is in sticky
mode, all MAC addresses that would otherwise have been learned as dynamic are
learned as sticky.
Sticky MAC addresses are part of the running-config and can therefore be saved
to start-up-config. Sticky MAC addresses survive link changes (in contrast to
Dynamic, which will have to be learned again). They also survive reboots if
running-config is saved to startup-config.
A port can be Sticky-enabled whether or not Port Security is enabled on that
interface. In that way, it is possible to add sticky MAC addresses
managementwise before enabling Port Security. To do that, use the
"Configuration→Security→Port Security→MAC Addresses" page.
Unclicked
State
This column shows the current Port Security state of the port. The state takes one
of four values:
Disabled : Port Security is disabled on the port.
Ready : The limit is not yet reached. This can be shown for all violation modes .
Limit Reached : Indicates that the limit is reached on this port. This can be shown
for all violation modes .
Shutdown : Indicates that the port is shut down by Port Security. This state can
only be shown if violation mode is set to Shutdown .
Disabled
2.5.2.2 Port Security MAC Addresses
In this webpage as shown in Figure 2.53, the users may add and delete static and sticky MAC addresses managed by Port
Security. The port security defines three types of MAC addresses, of which static and sticky can be added and removed on this
page:

Static : A MAC address added by end-user through management. Static MAC addresses are not subject to aging and
will be added to the MAC address table once Port Security gets enabled on the interface.