Netgear M5300-52G3 Software Administration Manual - Page 260

15. Security Management 15 In this chapter, examples are provided for the following topics: • Port Security • Set the Dynamic and Static Limit on Port 1/0/1 on page 261 • Convert the Dynamic Address Learned from 1/0/1 to a Static Address on page 263 • Create a Static Address on page 264 • Protected Ports on page 264 • 802.1x Port Security on page 271 • Create a Guest VLAN on page 277 • Assign VLANs Using RADIUS on page 282 • Dynamic ARP Inspection on page 288 • Static Mapping on page 294 • DHCP Snooping on page 296 • Enter Static Binding into the Binding Database on page 299 • Maximum Rate of DHCP Messages on page 300 • IP Source Guard on page 302 Port Security Port Security helps secure the network by preventing unknown devices from forwarding packets. When a link goes down, all dynamically locked addresses are freed. The port security feature offers the following benefits: • You can limit the number of MAC addresses on a given port. Packets that have a matching MAC address (secure packets) are forwarded; all other packets (unsecure packets) are restricted. • You can enable port security on a per port basis. Port security implements two traffic filtering methods, dynamic locking and static locking. These methods can be used concurrently. • Dynamic locking. You can specify the maximum number of MAC addresses that can be learned on a port. The maximum number of MAC addresses is platform dependent and is Chapter 15. Security Management | 260