Netgear FSM726v3 7000 Series Managed Switch Administration Guide for Software - Page 285

Chapter 15 Security Management In this chapter, exmples are provided for the following topics: • "Port Security" • "Protected Ports" on page 15-6 • "802.1x Port Security" on page 15-13 • "Create a Guest VLAN" on page 15-20 • "VLAN Assignment via RADIUS" on page 15-26 • "Dynamic ARP Inspection" on page 15-33 • "DHCP Snooping" on page 15-43 • "IP Source Guard" on page 15-50 Port Security This section describes the Port Security feature. Port Security: • Allows for limiting the number of MAC addresses on a given port • Packets that have a matching MAC address (secure packets) are forwarded; all other packets (unsecure packets) are restricted • Enabled on a per port basis • When locked, only packets with allowable MAC address will be forwarded • Supports both dynamic and static • Implement two traffic filtering methods - Dynamic Locking - User specifies the maximum number of MAC addresses that can be learned on a port. The maximum number of MAC addresses is platform dependent and is given in the software Release Notes. After the limit is reached, additional MAC addresses are not learned. Only frames with an allowable source MAC address are forwarded. - Static Locking - User manually specifies a list of static MAC addresses for a port. Dynamically locked addresses can be converted to statically locked addresses. These methods can be used concurrently Port Security: • Helps secure network by preventing unknown devices from forwarding packets v1.0, October 2009 15-1