D-Link DGS-3700-12 - Port Security

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet User Manual
226
Port Security
The Port Security section includes Port Security Settings, Port Security VLAN Settings, and Port Security Entries.
Port Security Settings
A given ports’ (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC
addresses entered into the MAC address forwarding table cannot be changed once the port lock is enabled. Setting
the Admin State pull-down menu to Enabled, and clicking Apply can lock the port.
Port Security is a security feature that prevents unauthorized computers (with source MAC addresses) unknown to the
Switch prior to locking the port (or ports) from connecting to the Switch's locked ports and gaining access to the
network.
To view this window, click Security > Port Security > Port Security Settings, as shown below:
Figure 8- 36 Port Security Settings window
The following parameters can be set:
Parameter Description
From Port /To Port
A consecutive group of ports may be configured starting with the selected port.
Admin State
This pull-down menu is used to enable or disable Port Security (locked MAC address table for
the selected ports).
Lock Address
Mode
This pull-down menu allows you to select how the MAC address table locking will be
implemented on the Switch, for the selected group of ports. The options are:
Permanent – The locked addresses will not age out after the aging timer expires.
DeleteOnTimeout – The locked addresses will age out after the aging timer expires.
DeleteOnReset – The locked addresses will not age out until the Switch has been reset.
Max. Learning
Address (0-16384)
The number of MAC addresses that will be in the MAC address-forwarding table for the
selected switch and group of ports.
Click Apply to implement changes made.