CTC Union GSW-3208M1, Руководство пользователя

Страница: 207 / 240

204
State of port could be ...
- Disabled: No user modules are currently using the Port Security service.
- Ready: The Port Security service is in use by at least one user module, and is
awaiting frames from unknown MAC addresses to arrive.
- Limit Reached: The Port Security service is enabled by at least the Limit
Control user module, and that module has indicated that the limit is reached
and no more MAC addresses should be taken in.
- Shutdown: The Port Security service is enabled by at least the Limit Control
user module, and that module has indicated that the limit is exceeded. No MAC
addresses can be learned on the port until it is administratively re-opened on
the Limit Control configuration Web-page.
Clicking port will show MAC addresses secured by the Port Security module.
1-2). Monitor - Security - Network - Port Security - Port
This page shows the MAC addresses secured by the Port Security module. Port
Security is a module with no direct configuration. Configuration comes indirectly
from other modules - the user modules. When a user module has enabled port
security on a port, the port is set-up for software-based learning. In this mode,
frames from unknown MAC addresses are passed on to the port security
module, which in turn asks all user modules whether to allow this new MAC
address to forward or block it. For a MAC address to be set in the forwarding
state, all enabled user modules must unanimously agree on allowing the MAC
address to forward. If only one chooses to block it, it will be blocked until that
user module decides otherwise.
About Age/Hold ...
If at least one user module has decided to block this MAC address, it will sta y in
the blocked state until the hold time (measured in seconds) expires. If all user
modules have decided to allow this MAC address to forward, and aging is
enabled, the Port Security module will periodically check that this MAC address
still forwards traffic. If the age period (measured in seconds) expires and no
frames have been seen, the MAC address will be removed from the MAC table.
Otherwise a new age period will begin.
If aging is disabled or a user module has decided to hold the MAC address
indefinitely, a dash (-) will be shown.
2-1). Monitor - Security - Network - NAS - Switch