CTC Union GSW-3208M, Руководство пользователя

Страница: 16 / 148

Chapter 6. Manage / Configure the Switch
16
Note: About Static Mac Address Filter-in (port binding) function
There is a “Mac Security Configuration” function for port security. If it is set to “Accept function”, only these static
Mac addresses can access network through the assigned port. The other Mac addresses will be forbidden for network
access through that port. This function can be used for port binding security application. Please refer to Section 6.3
for the details of the Mac address filter-in operation of the switch.
7. Dynamic Mac ID Number Limit
Beside Static Mac ID Limit, there is another Dynamic Mac ID Number Limit function for Mac address security on
port. This function can limit the Mac ID number to access network through a port. For example, five Mac ID are
allowed for Port 2. That means up to five users are allowed, but don’t care who the users are. It is done by “Limit
by Mac no.” option in “Mac Security Configuration” function.
8. IEEE 802.1x Port Security Function
If the 802.1x function is enabled, the switch will act as an authenticator for users accessing network through the
switch. It will need a RADIUS server for the authentication function. Users will be asked for username and
password before network access. If the RADIUS server authenticates it, the switch will enable the port for network
access. This function is very useful for network security application to prevent illegal users access network through
the switch.
9. Rate Control
This function can limit the traffic rate for physical ports. The traffic could be ingress traffic or egress traffic. This
function can limit the network bandwidth utilization of users.
10. Private VLAN
Three kinds of VLAN are defined for this application – Primary VLAN, Community VLAN, and Isolated VLAN.
Community VLAN and Isolated VLAN can communicate with Primary VLAN, but they cannot communicate with
each other. And users in Isolated VLAN cannot communicate with each other. This is a special VLAN configuration.
This switch supports a dedicated configure interface for such application.
11. IP Multicast with IGMP Snooping
IP multicast function can forward packets to a group of users connected on different ports. The user group is learned
by the switch from packets of IGMP active router with IGMP snooping function. It is often used for video
applications