R
EVISED
2018-09-21
W
EB
C
ONFIGURATION
S
OFTWARE
D
RAWING
N
O
. LP0991-G
S
ECURITY
N-Tron
®
Series NT24K
®
Software Manual
2-90
NTCD:
This field indicates whether the Configuration Device is enabled or disabled. The default is enabled.
Disabling the NTCD SD card slot allows an administrator to block and unblock reading and writing settings to
and from the SD card.
Generate New Certificate and Keys at Boot Up:
This field indicates whether certificate and keys will be
generated when the switch boots up.
A change to this setting requires that settings be saved and that the
switch be rebooted before changes take effect.
The value will reset to be unchecked when the switch boots up.
The default is no.
2.22.2
Port
Security
Port Security can be enabled on the MAC address level for additional security. The Port Security feature restricts
access to the switch by only accepting dynamically learned MAC addresses and manually entered MAC addresses
as authorized. Dynamically learned MAC addresses are those that the switch detects on any port while in
‘Learning’ mode. A manually entered MAC address must designate the port(s) that the address is authorized on. A
non-authorized MAC address will be discarded and will be shown on the intruder log.
Port security allows secured ports to run with RSTP enabled on the port. Port security also allows the same MAC
address to be authorized on multiple ports. When setting up authorization lists for RSTP ports, any MAC address
that could migrate to other secured ports should also be placed, by the user, in the authorization list for those ports.
Note:
Enabling Port Security can impact boot time.
2.22.2.1
Port
Security
‐
Configuration
The Port Security Configuration View displays the status of Port Security and all the ports with their current
settings. When Status is ‘Locked’ it is in secure mode. When Status is ‘Learning’ it builds an internal list of
authorized MAC addresses and no ports are secured during this time.