Allied Telesis AT-S63 - Manual (Page 376)

Chapter 32: MAC Address-based Port Security
376 Section VIII: Port Security
Secured This security level uses only static MAC addresses assigned to a port to
forward frames. Consequently, only those end nodes whose MAC
addresses are entered as static addresses are able to forward frames
through a port. Dynamic MAC addresses already learned on a port are
discarded from the MAC table and no new dynamic addresses are added.
Any ingress frames having a source MAC address not entered as a static
address on a port are discarded.
After activating this security level, you must enter the static MAC
addresses of the end nodes that are to forward frames through the port.
Locked
A port set to this security level immediately stops learning new dynamic
MAC addresses and forwards frames using the dynamic MAC addresses
it has already learned and any static MAC addresses assigned to it.
Ingress frames with an unknown MAC address are discarded. Dynamic
MAC addresses already learned by a port prior to the activation of this
security level never time out from the MAC address table, even when the
corresponding end nodes are inactive.
You can continue to add new static MAC addresses to a port operating
under this security level.
Note
For background information on MAC addresses and aging time,
refer to “Overview” on page 94.