User Manual User Manual
Table Of Contents
- INTRODUCTION
- INSTALLATION
- SWITCH MANAGEMENT
- WEB CONFIGURATION
- Main Web Page
- System
- System Information
- IP Configuration
- IPv6 Configuration
- Users Configuration
- Users Privilege Levels
- NTP Configuration
- UPnP Configuration
- DHCP Relay
- DHCP Relay Statistics
- CPU Load
- _
- System Log
- Detailed Log
- Remote Syslog
- SMTP Configure
- Web Firmware Upgrade
- TFTP Firmware Upgrade
- Configuration Backup
- Configuration Upload
- _
- Factory Default
- _
- System Reboot
- Simple Network Management Protocol
- Port Management
- Link Aggregation
- VLAN
- Spanning Tree Protocol
- Multicast
- Quality of Service
- Access Control Lists
- Access Control List Status
- Access Control List Configuration
- ACE Configuration
- ACL Ports Configuration
- ACL Rate Limiter Configuration
- Understanding IEEE 802.1X Port-Based Authentication
- Authentication Configuration
- Network Access Server Configuration
- Network Access Overview
- Network Access Statistics
- _
- Authentication Server Configuration
- RADIUS Overview
- _
- RADIUS Details
- Windows Platform RADIUS Server Configuration
- 4.11.10 802.1X Client Configuration
- Security
- Address Table
- _
- LLDP
- Network Diagnostics
- Power over Ethernet (GE-DSSG-244-POE / NS3601-24P/4S)
- _
- COMMAND LINE INTERFACE
- Command Line Mode
- _
- System Command
- Stack
- IP Command
- Port Management Command
- MAC Address Table Command
- VLAN Configuration Command
- _
- Private VLAN Configuration Command
- Security Command
- Security Switch User Configuration
- Security Switch User Add
- Security Switch User Delete
- Security Switch Privilege Level Configuration
- Security Switch Privilege Level Group
- Security Switch Privilege Level Current
- Security Switch Auth Configuration
- Security Switch Auth Method
- Security Switch SSH Configuration
- Security Switch SSH Mode
- Security Switch HTTPs Configuration
- Security Switch HTTPs Mode
- Security Switch HTTPs Redirect
- Security Switch Access Configuration
- Security Switch Access Mode
- Security Switch Access Add
- Security Switch Access IPv6 Add
- Security Switch Access Delete
- Security Switch Access Lookup
- Security Switch Access Clear
- Security Switch Access Statistics
- Security Switch SNMP Configuration
- Security Switch SNMP Mode
- Security Switch SNMP Version
- Security Switch SNMP Read Community
- Security Switch SNMP Write Community
- Security Switch SNMP Trap Mode
- Security Switch SNMP Trap Version
- Security Switch SNMP Trap Community
- Security Switch SNMP Trap Destination
- Security Switch SNMP Trap IPv6 Destination
- Security Switch SNMP Trap Authentication Failure
- Security Switch SNMP Trap Link-up
- Security Switch SNMP Trap Inform Mode
- Security Switch SNMP Trap Inform Timeout
- Security Switch SNMP Trap Inform Retry Times
- Security Switch SNMP Trap Probe Security Engine ID
- Security Switch SNMP Trap Security Engine ID
- Security Switch SNMP Trap Security Name
- Security Switch SNMP Engine ID
- Security Switch SNMP Community Add
- Security Switch SNMP Community Delete
- Security Switch SNMP Community Lookup
- Security Switch SNMP User Add
- Security Switch SNMP User Delete
- Security Switch SNMP User Changekey
- Security Switch SNMP User Lookup
- Security Switch SNMP Group Add
- Security Switch SNMP Group Delete
- Security Switch SNMP Group Lookup
- Security Switch SNMP View Add
- Security Switch SNMP View Delete
- Security Switch SNMP View Lookup
- Security Switch SNMP Access Add
- Security Switch SNMP Access Delete
- Security Switch SNMP Access Lookup
- Security Network Psec Switch
- Security Network Psec Port
- Security Network Limit Configuration
- Security Network Limit Mode
- Security Network Limit Aging
- Security Network Limit Agetime
- Security Network Limit Port
- Security Network Limit Limit
- Security Network Limit Action
- Security Network Limit Reopen
- Security Network NAS Configuration
- Security Network NAS Mode
- Security Network NAS State
- Security Network NAS Reauthentication
- Security Network NAS ReauthPeriod
- Security Network NAS EapolTimeout
- Security Network NAS Agetime
- Security Network NAS Holdtime
- Security Network NAS RADIUS_QoS
- Security Network NAS RADIUS_VLAN
- Security Network NAS Guest_VLAN
- Security Network NAS Authenticate
- Security Network NAS Statistics
- Security Network ACL Configuration
- Security Network ACL Action
- Security Network ACL Policy
- Security Network ACL Rate
- Security Network ACL Add
- Security Network ACL Delete
- Security Network ACL Lookup
- Security Network ACL Clear
- Security Network ACL Status
- Security Network DHCP Relay Configuration
- Security Network DHCP Relay Mode
- Security Network DHCP Relay Server
- Security Network DHCP Relay Information Mode
- Security Network DHCP Relay Information Policy
- Security Network DHCP Relay Statistics
- Security Network DHCP Snooping Configuration
- Security Network DHCP Snooping Mode
- Security Network DHCP Snooping Port Mode
- Security Network DHCP Snooping Statistics
- Security Network IP Source Guard Configuration
- Security Network IP Source Guard Mode
- Security Network IP Source Guard Port Mode
- Security Network IP Source Guard Limit
- Security Network IP Source Guard Entry
- Security Network IP Source Guard Status
- Security Network ARP Inspection Configuration
- Security Network ARP Inspection Mode
- Security Network ARP Inspection Port Mode
- Security Network ARP Inspection Entry
- Security Network ARP Inspection Status
- Security AAA Configuration
- Security AAA Timeout
- Security AAA Deadtime
- Security AAA RADIUS
- Security AAA ACCT_RADIUS
- Security AAA TACACS+
- Security AAA Statistics
- Security Switch User Configuration
- Spanning Tree Protocol Command
- STP Configuration
- STP Version
- STP Tx Hold
- STP MaxHops
- STP MaxAge
- STP FwdDelay
- STP CName
- STP BPDU Filter
- STP BPDU Guard
- STP Recovery
- STP Status
- STP MSTI Priority
- STP MSTI Map
- STP MSTI Add
- STP Port Configuration
- STP Port Mode
- STP Port Edge
- STP Port AutoEdge
- STP Port P2P
- STP Port RestrictedRole
- STP Port RestrictedTcn
- STP Port bpduGuard
- STP Port Statistic
- STP Port Mcheck
- STP MSTI Port Configuration
- STP MSTI Port Cost
- STP MSTI Port Priority
- STP Configuration
- Multicast Configuration Command
- Link Aggregation Command
- Link Aggregation Control Protocol Command
- LLDP Command
- LLDPMED Command
- Power over Ethernet Command
- Quality of Service Command
- Mirror Command
- Configuration Command
- Firmware Command
- UPnP Command
- MVR Command
- Voice VLAN Command
- SMTP Command
- Show Command
- Show ACL Configuration
- Show Link Aggregation Configuration
- Show IGMP Configuration
- Show IP Configuration
- Show LACP Configuration
- Show LLDP Configuration
- Show MAC Configuration
- Show Mirror Configuration
- Show PoE Configuration
- Show Port Configuration
- Show Private VLAN Configuration
- Show QoS Configuration
- Show SNMP Configuration
- Show Stack Configuration
- Show System Configuration
- Show VLAN Configuration
- Show STP Configuration
- Show ACL Configuration
- SWITCH OPERATION
- POWER OVER ETHERNET OVERVIEW
- TROUBLE SHOOTING
- APPENDEX A
- APPENDEX B : GLOSSARY
- APPENDIX C: Local User Privilege Level Table
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
224
Buttons
Auto-refresh
: Check this box to enable an automatic refresh of the page at regular intervals.
: Refreshes the displayed table starting from the "Start from MAC address" and "VLAN" input fields.
: Flushes all dynamic entries.
: Updates the table starting from the first entry in the MAC Table, i.e. the entry with the lowest VLAN ID and MAC address.
: Updates the table, starting with the entry after the last entry currently displayed.
MAC Table Learning
If the learning mode for a given port is grayed out, another module is in control of the mode, so that it cannot be changed by the user.
An example of such a module is the MAC-Based Authentication under 802.1X.
Each port can do learning based upon the following settings:
Port security is a feature that allows you to configure a switch port with one or more device MAC addresses that are authorized to
access the network through that port.
When port security is enabled on a port, the Managed Switch stops learning new MAC addresses on the specified port when it has
reached a configured maximum number. Only incoming traffic with source addresses already stored in the dynamic or static address
table will be authorized to access the network through that port. If a device with an unauthorized MAC address attempts to use the
switch port, the intrusion will be detected and the switch can automatically take action by disabling the port and sending a trap
message.
<source MAC address, VLAN> pair for frames received on the port.
Note that you can also manually add secure addresses to the port using the Static Address Table. The selected port will stop
learning. The MAC addresses already in the address table will be retained and will not age out. Any other device that attempts to use
the port will be prevented from accessing the switch. The MAC Table Learning screen is shown Figure 4-13-4.
Figure 4-13-4 MAC Table Learning screenshot
The page includes the following fields:
Object Description
• Auto
Learning is done automatically as soon as a frame with unknown SMAC is
received.
• Disable
No learning is done.
• Secure
Only static MAC entries are learned, all other frames are dropped.
Make sure that the link used for managing the switch is added to the Static Mac Table before
changing to secure learning mode, otherwise the management link is lost and can only be
restored by using another non-secure port or by connecting to the switch via the serial
interface.