User's Manual

Table Of Contents
Users Manual of GS-5220-16T2XV(R) Managed LCD Switch
274
MAC table when the hold time expires. At most Violation Limit MAC addresses
can be marked as violating at any given time.
Shutdown: If Limit is reached, one additional MAC address will cause the port to
be shut down. This implies that all secured MAC addresses be removed from the
port, and no new addresses be learned. There are three ways to re-open the
port:
1) In the "ConfigurationPorts" page's "Configured" column, first disable the
port, then restore the original mode.
2) Make a Port Security configuration change on the port.
3) Boot the switch.
Violation Limit The maximum number of MAC addresses that can be marked as violating on
this port. This number cannot exceed 1024. Default is 4. It is only used
when Violation Mode is Restrict.
State
This column shows the current state of the port as seen from the Limit Control's
point of view. The state takes one of four values:
Disabled: Limit Control is either globally disabled or disabled on the port.
Ready: The limit is not yet reached. This can be shown for all actions.
Limit Reached: Indicates that the limit is reached on this port. This state can
only be shown if Action is set to None or Trap.
Shutdown: Indicates that the port is shut down by the Limit Control module. This
state can only be shown if Action is set to Shutdown or Trap & Shutdown.
Buttons
: Click to apply changes
: Click to undo any changes made locally and revert to previously saved values.
: Click to refresh the page. Note that non-committed changes will be lost.
4.5.4.2 Port Security Status
This page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly
from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for
software-based learning. In this mode, frames from unknown MAC addresses are passed on to the port security module, which
in turn asks all user modules whether to allow this new MAC address to forward or block it. For a MAC address to be set in the