D-Link xStack DGS-3600 Series User Manual - Port Security
xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch
Port Security
A given ports’ (or a range of ports') dynamic
MAC address learning can be locked such that
the current source MAC addresses entered
into the MAC address forwarding table can
not be changed once the port lock is enabled.
Using the
Admin State
pull-down menu to
Enabled
, and clicking
Apply
can lock the
port.
Port Security is a security feature that prevents
unauthorized computers (with source MAC
addresses) unknown to the Switch prior to
locking the port (or ports) from connecting to
the Switch's locked ports and gaining access to
the network. To view the following window,
open the
Security
folder and click
Port
Security
.
Figure 11- 2. Port Security Settings window
The following parameters can be set:
Parameter Description
From/To
A consecutive group of ports may be configured starting with the selected port.
Admin State
This pull-down menu allows users to enable or disable Port Security (locked MAC address
table for the selected ports).
Max. Learning
Addr. (0-16)
The number of MAC addresses that will be in the MAC address-forwarding table for the
selected switch and group of ports.
Lock Address
Mode
This pull-down menu allows you to select how the MAC address table locking will be
implemented on the Switch, for the selected group of ports. The options are:
Permanent
– The locked addresses will not age out after the aging timer expires.
•
•
•
DeleteOnTimeout
– The locked addresses will age out after the aging timer
expires.
DeleteOnReset
– The locked addresses will not age out until the Switch has been
reset.
Click
Apply
to implement changes made.
202