GS-4210-Series (V2) User Manual

User’s Manual of GS-4210 Series
283
4.5.4 Port Security
This page allows you to configure the Port Security Limit Control system and port settings. Limit Control allows for limiting the
number of users on a given port. A user is identified by a MAC address and VLAN ID. If Limit Control is enabled on a port, the
limit specifies the maximum number of users on the port. If this number is exceeded, an action is taken. The action can be one
of four different as described below.
The Limit Control module is one of the modules that utilize a lower-layer module while the Port Security module manages MAC
addresses learned on the port.
The Limit Control configuration consists of two sections, a system- and a port-wid. The IP Source Guard Static Binding Entry
and Table Status screens in Figure 4-5-32 & Figure 4-5-33 appear.
Figure 4-5-32: Port Security Setting Page Screenshot
The page includes the following fields:
Object Description
• Port
Select port for this drop down list.
• Security
Enable or disable the port security.
• Mac L2 Entry
The maximum number of MAC addresses that can be secured on this port. If the
limit is exceeded, the corresponding action is taken.
The switch is "born" with a total number of MAC addresses from which all ports
draw whenever a new MAC address is seen on a Port Security-enabled port.
Since all ports draw from the same pool, it may happen that a configured
maximum cannot be granted, if the remaining ports have already used all
available MAC addresses.
• Action
If Limit is reached, the switch can take one of the following actions:
 Forward: Do not allow more than Limit MAC addresses on the port, but take
no further action.
 Shutdown: If Limit + 1 MAC addresses is seen on the port, shut down the
port. This implies that all secured MAC addresses will be removed from the
port, and no new will be learned. Even if the link is physically disconnected
and reconnected on the port (by disconnecting the cable), the port will