IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
213
Port Security Detail
This page shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration.
Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the
port is set-up for software-based learning. In this mode, frames from unknown MAC addresses are passed on to the port security
module, which in turn asks all user modules whether to allow this new MAC address to forward or block it. For a MAC address to be
set in the forwarding state, all enabled user modules must unanimously agree on allowing the MAC address to forward. If only one
chooses to block it, it will be blocked until that user module decides otherwise. The Port Security Detail screen is shown
Figure
4-12-7
.
Figure 4-12-7
Port Security Detail screen page screenshot
The page includes the following fields:
Object
Description
•
MAC Address & VLAN
ID
The MAC address and VLAN ID that is seen on this port. If no MAC addresses
are learned, a single row stating "No MAC addresses attached" is displayed.
•
State
Indicates whether the corresponding MAC address is blocked or forwarding. In
the blocked state, it will not be allowed to transmit or receive traffic.
•
Time of Adding
Shows the date and time when this MAC address was first seen on the port.
•
Age/Hold
If at least one user module has decided to block this MAC address, it will stay in
the blocked state until the hold time (measured in seconds) expires. If all user
modules have decided to allow this MAC address to forward, and aging is
enabled, the Port Security module will periodically check that this MAC address
still forwards traffic. If the age period (measured in seconds) expires and no
frames have been seen, the MAC address will be removed from the MAC table.
Otherwise a new age period will begin.
If aging is disabled or a user module has decided to hold the MAC address
indefinitely, a dash (-) will be shown.
Buttons
: Click to refresh the page immediately.
Auto-refresh
:
Check this box to enable an automatic refresh of the page at regular intervals.
DHCP Snooping
DHCP Snooping is used to block intruder on the untrusted ports of DUT when it tries to intervene by injecting a bogus DHCP reply
packet to a legitimate conversation between the DHCP client and server. Configure DHCP Snooping on this page. The DHCP
Snooping Configuration screen is shown
Figure 4-12-8
.
Содержание GE-DSSG-244
Страница 1: ...P N 1072570 REV 00 10 ISS 13JUN13 IFS NS3601 24P 4S GE DSSG 244 GE DSSG 244 POE User Manual ...
Страница 10: ......
Страница 38: ...IFS NS3601 24P 4S GE DSSG 244 and 244 POE User Manual 36 ...
Страница 43: ...IFS NS3601 24P 4S GE DSSG 244 and 244 POE User Manual 41 Figure 4 1 5 IFS Managed Switch Main Functions Menu ...
Страница 128: ...IFS NS3601 24P 4S GE DSSG 244 and 244 POE User Manual 126 Figure 4 7 13 MST1 MSTI Port Configuration page screenshot ...
Страница 132: ...IFS NS3601 24P 4S GE DSSG 244 and 244 POE User Manual 130 Figure 4 8 1 Multicast Service ...
Страница 136: ...IFS NS3601 24P 4S GE DSSG 244 and 244 POE User Manual 134 Figure 4 8 6 IGMP Port Related Configuration page screenshot ...
Страница 142: ...IFS NS3601 24P 4S GE DSSG 244 and 244 POE User Manual 140 Figure 4 8 10 MVR Configuration page screenshot ...
Страница 161: ...IFS NS3601 24P 4S GE DSSG 244 and 244 POE User Manual 159 Figure 4 9 14 Voice VLAN Configuration page screenshot ...
Страница 388: ...User s Manual of NS3601 24P 4S Series 386 ...