ECS4660-28F_Management Guide-R03

C HAPTER 13 | Security Measures
Configuring Port Security
– 420 –
Figure 217: Creating an IP Address Filter for Management Access
To show a list of IP addresses authorized for management access:
1. Click Security, IP Filter.
2. Select Show from the Action list.
Figure 218: Showing IP Addresses Authorized for Management Access
CONFIGURING PORT SECURITY
Use the Security > Port Security page to configure the maximum number
of device MAC addresses that can be learned by a switch port, stored in the
address table, and authorized to access the network.
When port security is enabled on a port, the switch stops learning new MAC
addresses on the specified port when it has reached a configured maximum
number. Only incoming traffic with source addresses already stored in the
address table will be authorized to access the network through that port. If
a device with an unauthorized MAC address attempts to use the switch
port, the intrusion will be detected and the switch can automatically take
action by disabling the port and sending a trap message.
CLI REFERENCES
◆ "Port Security" on page 1090
COMMAND USAGE
◆ The default maximum number of MAC addresses allowed on a secure
port is zero (that is, disabled). To use port security, you must configure
the maximum number of addresses allowed on a port.