63
Chapter 5: Configuring the Switch through the Web Utility
Security
24-Port 10/100 + 2-Port Gigabit Switch with Webview and Power over Ethernet
Port Security
Port security is a feature that allows you to configure a switch port with one or more device MAC addresses that
are authorized to access the network through that port. When port security is enabled on a port, the switch stops
learning new MAC addresses on the specified port when it has reached a configured maximum number. Only
incoming traffic with source addresses already stored in the dynamic or static address table will be accepted as
authorized to access the network through that port. If a device with an unauthorized MAC address attempts to
use the switch port, the intrusion will be detected and the switch can automatically take action by disabling the
port and sending a trap message.
To use port security, specify a maximum number of addresses to allow on the port and then let the switch
dynamically learn the <source MAC address, VLAN> pair for frames received on the port. When the port has
reached the maximum number of MAC addresses the selected port will stop learning. The MAC addresses
already in the address table will be retained and will not age out. Any other device that attempts to use the port
will be prevented from accessing the switch.
Set the action to take when an invalid address is detected on a port, mark the checkbox in the Status column to
enable security for a port, set the maximum number of MAC addresses allowed on a port.
Click
Submit
to save the changes.
Storm Control
You can protect your network from broadcast storms by setting a threshold for broadcast traffic for all ports. Any
broadcast packets exceeding the specified threshold will then be dropped.
Set the threshold using the Threshold text field, to enable storm control on a specified port mark the Enable
checkbox for that port. storm control on a specified port.
Click
Submit
to save the changes.
Figure 5-47: Security - Port Security
Figure 5-48: Security - Storm Control