Edge-Core ECS4610-24F, Руководство по управлению

Страница: 311 / 1154

C
HAPTER
13
| Security Measures
Configuring Port Security
– 311 –
To show a list of IP addresses authorized for management access:
1.
Click Security, IP Filter.
2.
Select Show from the Action list.
Figure 169: Showing IP Addresses Authorized for Management Access
C
ONFIGURING
P
ORT
S
ECURITY
Use the Security > Port Security page to configure a switch port with one
or more device MAC addresses that are authorized to access the network
through that port.
When port security is enabled on a port, the switch stops learning new MAC
addresses on the specified port when it has reached a configured maximum
number. Only incoming traffic with source addresses already stored in the
dynamic or static address table will be authorized to access the network
through that port. If a device with an unauthorized MAC address attempts
to use the switch port, the intrusion will be detected and the switch can
automatically take action by disabling the port and sending a trap
message.
To use port security, specify a maximum number of addresses to allow on
the port and then let the switch dynamically learn the <source MAC
address, VLAN> pair for frames received on the port. Note that you can
also manually add secure addresses to the port using the Static Address
Table ( page 189 ). When the port has reached the maximum number of
MAC addresses, the selected port will stop learning. The MAC addresses
already in the address table will be retained and will not age out. Any other
device that attempts to use the port will be prevented from accessing the
switch.
CLI R
EFERENCES
◆
"Port Security" on page 708