Chapter 6
| Address Table Settings
Configuring Extended MAC Security
– 176 –
■
The movable-static function cannot be set for a port that is a member of a
static or dynamic trunk. When a trunk is formed, the trunk takes on the
movable-static status of the first port to join the trunk. When other ports
are subsequently added to a trunk, those ports take on the movable-static
status of the trunk. When a port leaves a trunk, it retains the movable-static
status of the trunk.
■
If port security is enabled (see “Configuring Port Security” on page 321), it
may turn learned MAC addresses into normal static addresses. There is no
conflict between this function and the movable-static address function.
◆ Max MAC Count – Sets the maximum number of MAC addresses which can be
learned on an interface. (Range: 0-1024; Default: Disabled)
■
If an interface reaches its maximum learning count, a packet with a new
source address will be dropped and address will not be learned.
If the sticky-dynamic function or movable-static function is enabled, and
the maximum MAC count has not been set, it will be automatically enabled
by the system and set to 1024.
If the maximum MAC count is changed from small count to bigger one, the
learned MACs on that interface are all retained. However, if it is changed
from a large count to a smaller one, all of the learned MAC addresses on
that interface are cleared.
■
The maximum MAC count cannot be set on a trunk, but can set for the
member ports of a trunk.
◆ Current MAC Count – The number of static MAC address entries in the address
table for this interface.
◆ Sticky Dynamic MAC Trap Status – Sends a trap if an ingress packet violates
the configured settings for the sticky-dynamic function. (Default: Disabled)
◆ Movable Static MAC Trap Status – Sends a trap if an ingress packet violates
the configured settings for the movable-static function. (Default: Disabled)
◆ Max MAC Count Trap Status – Sends a trap if an ingress packet violates the
configured settings for the maximum MAC address count. (Default: Disabled)
Web Interface
To configure extended MAC security:
1. Click MAC Address, Extended MAC Security.
2. Select Configure VLAN or Configure Interface from the Action list.
3. Select the VLAN, port or trunk to configure.
To Next Page
Loading...
Need help?
General
