Evidence Cross-8/HPoE-10G, Руководство пользователя

Страница: 226 / 321

11-5 Port Security
11-5.1 Configuration
This section shows you to configure the Port Security settings of the Switch. You can use the
Port Security feature to restrict input to an interface by limiting and identifying MAC
addresses.
Web Interface
To configure a Port Security Configuration in the web interface:
Click Security, Port Security and Configuration.
1. Click to Enable the Aging to specify Aging Period.
2. Set Mode (Enabled, Disabled), Limit, Violation Mode, Violation Limit for each port.
3. Click the Apply to save the setting.
4. If you want to cancel the setting then you need to click the Reset button. It will revert to
previously saved values.
Figure 11-5.1: The Port Security Configuration
Parameter description:
System Configuration

Aging Enabled :
If checked, secured MAC addresses are subject to aging as discussed under Aging Period .

Aging Period :
If Aging Enabled is checked, then the aging period is controlled with this input. If other
modules are using the underlying functionality for securing MAC addresses, they may have
other requirements to the aging period. The underlying functionality will use the shorter
requested aging period of all modules that have aging enabled.
The Aging Period can be set to a number between 10 and 10000000seconds with a default
of 3600 seconds.
To understand why aging may be desired, consider the following scenario: Suppose an
end-host is connected to a 3rd party switch or hub, which in turn is connected to a port on
this switch on which Port Security is enabled. The end-host will be allowed to forward if the
limit is not exceeded. Now suppose that the end-host logs off or powers down. If it wasn't
for aging, the end-host would still take up resources on this switch and will be allowed to
forward. To overcome this situation, enable aging. With aging enabled, a timer is started
once the end-host gets secured. When the timer expires, the switch starts looking for