Configuring port security, Port security – Microsens MS453490M Management Guide User Manual

Page 323

Advertising
background image

C

HAPTER

14

| Security Measures

Configuring Port Security

– 323 –

To show a list of IP addresses authorized for management access:

1.

Click Security, IP Filter.

2.

Select Show from the Action list.

Figure 185: Showing IP Addresses Authorized for Management Access

C

ONFIGURING

P

ORT

S

ECURITY

Use the Security > Port Security page to configure a switch port with one

or more device MAC addresses that are authorized to access the network
through that port.

When port security is enabled on a port, the switch stops learning new MAC

addresses on the specified port when it has reached a configured maximum

number. Only incoming traffic with source addresses already stored in the

dynamic or static address table will be authorized to access the network

through that port. If a device with an unauthorized MAC address attempts

to use the switch port, the intrusion will be detected and the switch can

automatically take action by disabling the port and sending a trap

message.

To use port security, specify a maximum number of addresses to allow on

the port and then let the switch dynamically learn the <source MAC

address, VLAN> pair for frames received on the port. Note that you can

also manually add secure addresses to the port using the Static Address

Table (

page 187

). When the port has reached the maximum number of

MAC addresses, the selected port will stop learning. The MAC addresses

already in the address table will be retained and will not age out. Any other

device that attempts to use the port will be prevented from accessing the

switch.

CLI R

EFERENCES

"Port Security" on page 638

Advertising