ZyXEL Communications ES-2024 Series - Port Security Example

Chapter 19 Port Security
ES-2024 Series User’s Guide
151
19.3 Port Security Example
The following example demonstrates the various settings and results associated
with different port security configurations. Ports 1 to 5 are configured to:
• Port 1 - Forward all packets and learn all MAC addresses.
• Port 2 - Forward all packets and learn all MAC addresses.
• Port 3 - Drop all packets from unknown MAC addresses and do not learn MAC
addresses.
• Port 4 - Drop all packets from unknown MAC addresses and do not learn MAC
addresses.
Active Select this check box to enable the port security feature on this port. The
Switch forwards packets whose MAC address(es) is in the MAC address
table on this port. Packets with no matching MAC address(es) are
dropped.
Clear this check box to disable the port security feature. The Switch
forwards all packets on this port.
Address
Learning
MAC address learning reduces outgoing broadcast traffic. For MAC
address learning to occur on a port, the port itself must be active
(activated in the Basic Settings, Port Setup screen) with address
learning enabled.
Limited
Number of
Learned MAC
Address
Use this field to limit the number of (dynamic) MAC addresses that may
be learned on a port. For example, if you set this field to "5" on port 2,
then only the devices with these five learned MAC addresses may access
port 2 at any one time. A sixth device would have to wait until one of the
five learned MAC addresses aged out. MAC address aging out time can be
set in the Switch Setup screen. The valid range is from “0” to “8192”.
“0” means that the limiting of learned addresses is disabled.
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the non-
volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Table 39 Advanced Application > Port Security (continued)
LABEL DESCRIPTION