D-Link DES-3226SM Product Manual - Page 56

Port Security, Port Security Settings

Page 56 highlights

DES-3226S Layer 2 Fast Ethernet Switch User's Guide Port Security A given port's (or a range of port's) dynamic MAC address learning can be locked such that the current source MAC addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be locked by using the Learn pull-down menu to Enabled, and clicking Apply. To disable learning on a port provides added security because it prevents unauthorized computers from connecting to the Switch's locked ports and gaining access to the network. If a computer with source MAC addresses unknown to the Switch prior to locking the port attempts to forward packets through the learning disabled port, the packets are dropped. The following fields can be set: Parameter Description State Toggle the State field to either enable or disable a given port. Speed/Duplex Toggle the Speed/Duplex field to either select the speed and duplex/halfduplex state of the port. Auto - auto-negotiation between 10 and 100 Mbps devices, full- or half-duplex. The Auto setting allows the port to automatically determine the fastest settings the device the port is connected to can handle, and then to use those settings. The other options are 100M/Full, 100M/Half, 10M/Full, and 10M/Half. There is no automatic adjustment of port settings with any option other than Auto. Flow Control: Auto Displays the flow control scheme used for the various port configurations. Ports configured for full-duplex use 802.3x flow control, half-duplex ports use backpressure flow control, and Auto ports use an automatic selection of the two. Learn Allows the selected port (or port's) dynamic MAC address learning to be locked such that new source MAC addresses can not be entered into the MAC address table for the locked port. It can be changed by toggling between Disabled and Enabled. Port Security Settings Click the selection button on the far left that corresponds to the port you want to configure and click the Edit button. Figure 6 - 17. Configure Port Security 53

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124

DES-3226S Layer 2 Fast Ethernet Switch User’s Guide
53
Port Security
A given port’s (or a range of port’s) dynamic MAC address learning can be locked such that the current source MAC addresses
entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be locked by
using the
Learn <
Disabled
>
pull-down menu to
Enabled
, and clicking
Apply
.
To disable learning on a port provides added security because it prevents unauthorized computers from connecting to the
Switch’s locked ports and gaining access to the network. If a computer with source MAC addresses unknown to the Switch
prior to locking the port attempts to forward packets through the learning disabled port, the packets are dropped.
The following fields can be set:
Parameter
Description
State <
Enabled
>
Toggle the State <
Enabled
> field to either enable or disable a given port.
Speed/Duplex <
Auto
>
Toggle the Speed/Duplex <
Auto
> field to either select the speed and duplex/half-
duplex state of the port.
Auto – auto-negotiation between 10 and 100 Mbps
devices, full- or half-duplex. The Auto setting allows the port to automatically
determine the fastest settings the device the port is connected to can handle, and
then to use those settings. The other options are
100M/Full
,
100M/Half, 10M/Full,
and
10M/Half.
There is no automatic adjustment of port settings with any option
other than
Auto
.
Flow Control: Auto
Displays the flow control scheme used for the various port configurations. Ports
configured for full-duplex use 802.3x flow control, half-duplex ports use
backpressure flow control, and Auto ports use an automatic selection of the two.
Learn <
Disabled
>
Allows the selected port (or port’s) dynamic MAC address learning to be locked
such that new source MAC addresses can not be entered into the MAC address
table for the locked port. It can be changed by toggling between
Disabled
and
Enabled
.
Port Security Settings
Figure 6 - 17. Configure Port Security
Click the selection button
on
the
far
left
that
corresponds to the port you
want to configure and click
the Edit button.