Cisco SGE2000 - Cisco - Gigabit Switch Administration Guide

Configuring Device Security
Defining Traffic Control
Cisco Small Business SFE/SGE Managed Switches Administration Guide 76
4
Defining Port Security
Network security can be increased by limiting access on a specific port only to
users with specific MAC addresses. The MAC addresses can be dynamically
learned or statically configured. Locked port security monitors both received and
learned packets that are received on specific ports. Access to the locked port is
limited to users with specific MAC addresses. These addresses are either
manually defined on the port, or learned on that port up to the point when it is
locked. When a packet is received on a locked port, and the packet source MAC
address is not tied to that port (either it was learned on a different port, or it is
unknown to the system), the protection mechanism is invoked, and can provide
various options. Unauthorized packets arriving at a locked port are either:
• Forwarded
• Discarded with no trap
• Discarded with a trap
• Cause the port to be shut down.
Locked port security also enables storing a list of MAC addresses in the
configuration file. The MAC address list can be restored after the device has been
reset. Disabled ports are activated from the Port Security Page.
NOTE To configure port lock, 802.1x multiple host mode must be enabled.
To d e f i n e p o r t s e c u r i t y :

Cisco SGE2000 - Cisco - Gigabit Switch Specifications

General

Form Factor	Rack-mountable
Switching Capacity	48 Gbps
Forwarding Rate	35.7 Mpps
Layer	Layer 2
Power Supply	Internal
Management	Web-based, SNMP, CLI
MAC Address Table Size	8000 entries
VLANs	256
Features	Quality of Service (QoS), IGMP snooping, Port mirroring
Dimensions (W x D x H)	440 x 257 x 44 mm (17.3 x 10.1 x 1.73 in)
Operating Temperature	0°C to 40°C (32°F to 104°F)
Storage Temperature	-20 to 70°C (-4 to 158°F)
Relative Humidity	10% to 90% non-condensing
Standards Compliance	IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3x