Page 91 / 140 Scroll up to view Page 86 - 90
GS108T Smart Switch Software Administration Manual
Configuring QoS and Security
5-19
v1.0, December 2007
The following fields are displayed. Except for the Port field, all fields are configurable:
Port
. Shows the port number.
Learning Mode
. Specifies whether the learning mode is enabled on the port. The possible
field values are:
Lock Disable
. Specifies that the learning mode is enabled on the port, allowing
unknown source MAC address packets to be learned. This is the default value.
Lock Enable
. Specifies that the learning mode is disabled on the port.
Action
. Specifies the action that must be taken for unknown source MAC address packets.
This field is available only when port learning is disabled. The possible field values are:
Forward
. Specifies that unknown source MAC address packets must be forwarded.
Discard
. Specifies that unknown source MAC address packets must be discarded.
Limited Learning
. Specifies that unknown source MAC address packets must be
dynamically learned, but with a limit of 16 MAC addresses. After 16 MAC addresses,
learning stops.
3.
Click
Apply
to confirm any settings changes.
Access
The Access menu lets you set up IP access lists and trusted source MAC addresses.
IP Access List
The IP Access List screen lets you limit the IP addresses that can access the management portion
of the switch. The switch responds only to requests from computers with an IP address in the list,
so include your IP address and corresponding subnet mask to set this feature.
To configure your IP Access list:
1.
Select Security > Access > IP Access List. A screen similar to the following one displays.
Page 92 / 140
GS108T Smart Switch Software Administration Manual
5-20
Configuring QoS and Security
v1.0, December 2007
2.
The following fields are displayed. Except for the ID field, all fields are configurable:
ID
. Shows the identifier for the IP access list.
IP Address
. Specifies the IP address for the IP access list.
Subnet Mask
. Specifies the subnet mask for the IP access list.
3.
Perform one of the following actions:
To add an IP access list:
a.
Enter an IP address.
b.
Enter a subnet mask.
c.
Click
Add
.
To delete an IP access list:
a.
Select the check box to the left of the ID for the IP access list that you want to remove.
b.
Click
Delete
.
To change the subnet mask for an IP access list:
a.
Select the check box to the left of the ID for the IP access list that you want to change.
b.
Change the subnet mask.
c.
Click
Apply
.
Figure 5-13
Page 93 / 140
GS108T Smart Switch Software Administration Manual
Configuring QoS and Security
5-21
v1.0, December 2007
Trusted MAC
A trusted MAC address protects the switch from an untrusted intruder that attempts to invade the
system. Only the source address (SA) of the packet in the trusted MAC table can be switched to
the destination port. You can add a total of 100 trusted MAC addresses. MAC addresses are port
based. All source MAC addresses are trusted when the Trusted MAC list is empty.
The filter settings that determine whether a source MAC address is trusted depend on the VLAN
configuration:
When the VLAN is in IEEE 802.1Q mode (see
“IEEE 802.1Q VLANs” on page 4-9
), the filter
settings are the port, VLAN ID, and source MAC address.
When the VLAN is in port-based mode (see
“Port-based VLANs” on page 4-9
), the filter
settings are the port and source MAC address.
To configure trusted MAC addresses:
1.
Select Security > Access > Trusted MAC. A screen similar to the following one displays.
2.
The following fields are displayed. Except for the ID fields, all fields are configurable:
ID
. Shows the identifier for the MAC address.
Interface
. Specifies the interface to which the MAC address is assigned. Select an
interface from the drop-down list.
MAC Address
. Specifies the trusted MAC address. Enter a MAC address in the
XX:XX:XX:XX:XX:XX format.
VLAN ID
. Specifies the VLAN ID to which the MAC address is assigned. Select a VLAN
ID from the drop-down list. This field is configurable only when the VLAN is in
IEEE 802.1Q mode.
Figure 5-14
Page 94 / 140
GS108T Smart Switch Software Administration Manual
5-22
Configuring QoS and Security
v1.0, December 2007
3.
Perform one of the following actions:
To add a trusted MAC address:
a.
Select an interface from the drop-down list.
b.
Enter a MAC address.
c.
When the VLAN is in IEEE 802.1Q mode, select a VLAN ID from the drop-down list.
d.
Click
Add
.
To delete a trusted MAC address:
a.
Select the check box to the left of the ID for the trusted MAC address that you want to
remove.
b.
Click
Delete
.
To change a trusted MAC address:
a.
Select the check box to the left of the ID for the trusted MAC address that you want to
change.
b.
Change the interface or VLAN ID.
c.
Click
Apply
.
Page 95 / 140
6-1
v1.0, December 2007
Chapter 6
Monitoring, Maintenance, and Help
This chapter describes how to use the Monitoring tab, the Maintenance tab, and the Help tab.
“Using the Monitoring Tab
“Using the Maintenance Tab
“Using the Help Tab
Using the Monitoring Tab
The navigation tabs on the top of the home page include a Monitoring tab that lets you manage
your GS108T Gigabit Smart Switch using features under the following main menu commands and
subcommands:
“Ports
“Port Statistics
“EAP Statistics
“802.1x Accounting Statistics
“Mirroring
“Port Mirroring
“Log
“Configuration
“Memory Logs
“Flash Logs
“Server Logs
“LLDP
“Statistics
The sections that follow in this chapter cover these features and tell you how to configure them in
the GS108T Smart Switch.

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top