Rockwell Automation Publication 1783-UM007G-EN-P - February 2017 303
Configure Switch Features Chapter 7
Port Security
Stratix managed switches implement MAC address-based port security. A
MAC address is a unique address that is assigned to each Ethernet-capable
device. Switches can enforce communication either dynamically or statically
per MAC address.
With dynamic port security, a switch port communicates with some number of
devices. The port tracks only the number of devices rather than the MAC
addresses of those devices. Static port security adds devices to the port security
table on a per MAC address basis. With static dynamic port security, only
devices with the MAC addresses in the security table are able to communicate
on that port.
Port Security is not available on Stratix 5700 switches with lite firmware.
Dynamic Secure MAC Address (MAC ID)
Many Smartport roles have a maximum number of MAC IDs that can use that
port. For example, the Smartport role ‘Automation Device’ configures the port
for a maximum of one MAC ID. The MAC ID is dynamic, meaning the
switch learns the first source MAC ID to use the port. Attempts by any other
MAC ID to access the port are denied.
If the link becomes inactive, the switch dynamically relearns the MAC ID to be
secured.
The default number of MAC IDs can be changed on the Port Security tab
within Device Manager or the Logix Designer application.
The following table shows the Smartport role and the maximum number of
supported MAC IDs.
Table 77 - Maximum Number of MAC IDs per Smartport Role
Smartport Role Number of MAC IDs (max)
Automation Device 1
Desktop for Automation 1
Switch for Automation Not restricted
Router for Automation Not restricted
Phone for Automation 3
Wireless for Automation Not restricted
Multiport Automation Devices Not restricted
Virtual Desktop for Automation 2
Port Mirroring Not restricted
None Not restricted
To Next Page
Loading...
Need help?
General
