Security
802.1X Authentication
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
355
17
•
Trap
—Select to enable traps when a packet is received on a locked port. This is relevant
for lock violations. For Classic Lock, this is any new address received. For Limited
Dynamic Lock, this is any new address that exceeds the number of allowed addresses.
•
Trap Frequency
—Enter minimum time (in seconds) that elapses between traps.
STEP 4
Click
Apply
. Port security is modified, and the Running Configuration file is updated.
802.1X Authentication
See the
Security: 802.1X Authentication
chapter for information about 802.1X authentication.
IP Source Guard
IP Source Guard is a security feature that can be used to prevent traffic attacks caused when a
host tries to use the IP address of its neighbor.
When IP Source Guard is enabled, the device only transmits client IP traffic to IP addresses
contained in the DHCP Snooping Binding database. This includes both addresses added by
DHCP Snooping and manually-added entries.
If the packet matches an entry in the database, the device forwards it. If not, it is dropped.
This section describes the IP Source Guard feature. It covers the following topics:
•
Interactions with Other Features
•
•
•
•
•
