9-17
Configuring and Monitoring Port Security
MAC Lockdown
Figure 9-8. Example of Port A1 After Removing One MAC Address
MAC Lockdown
MAC Lockdown is available on the Series 2600, 2600-PWR, and 2800
switches only.
MAC Lockdown, also known as “static addressing,” is the permanent assign-
ment of a given MAC address (and VLAN, or Virtual Local Area Network) to
a specific port on the switch. MAC Lockdown is used to prevent station
movement and MAC address hijacking. It also controls address learning on
the switch. When configured, the MAC Address can only be used on the
assigned port and the client device will only be allowed on the assigned VLAN.
N o t e
Port security and MAC Lockdown are mutually exclusive on a given port. You
can either use port security
or
MAC Lockdown, but never both at the same
time on the same port.
You will need to enter a separate command for each MAC/VLAN pair you wish
to lock down. If you do not specify a VLAN ID (VID) the switch inserts a VID
of “1”.
Syntax:
[no] static-mac <
mac-addr
> vlan <
vid
> interface <
port-number
>
Содержание ProCurve 4100 Series
Страница 2: ......
Страница 26: ...1 10 Getting Started Need Only a Quick Start This page is intentionally unused ...
Страница 44: ...2 18 Configuring Username and Password Security Front Panel Security This page is intentionally unused ...
Страница 132: ...5 32 RADIUS Authentication and Accounting Messages Related to RADIUS Operation This page is intentionally unused ...
Страница 182: ...7 22 Configuring Secure Socket Layer SSL Common Errors in SSL Setup This page is intentionally unused ...
Страница 305: ... This page is intentionally unused ...