Manuals / Accton Technology / Computer Equipment / Switch

Accton Technology VS4512DC manual Port security, Command Usage

Models: VS4512DC VS4512

1 334
Download 334 pages 13.79 Kb
Page 213
Image 213

Authentication Commands

port security

This command enables or configures port security. Use the no form without any keywords to disable port security. Use the no form with the appropriate keyword to restore the default settings for a response to security violation or for the maximum number of allowed addresses.

Syntax

port security [action {shutdown trap trap-and-shutdown} max-mac-count address-count]

no port security [action max-mac-count]

•action - Response to take when port security is violated.

•shutdown - Disable port only.

•trap - Issue SNMP trap message only.

•trap-and-shutdown- Issue SNMP trap message and disable port.

•max-mac-count address-count- The maximum number of MAC addresses that can be learned on a port. (Range: 0 - 20)

Default Setting

Status: Disabled

Action: None

Maximum Addresses: 0

Command Mode

Interface Configuration (Ethernet)

Command Usage

•If you enable port security, the switch will stop dynamically learning new addresses on the specified port. Only incoming traffic with source addresses already stored in the dynamic or static address table will be accepted.

•To use port security, first allow the switch to dynamically learn the <source MAC address, VLAN> pair for frames received on a port for an initial training period, and then enable port security to stop address learning. Be sure you enable the learning function long enough to ensure that all valid VLAN members have been registered on the selected port.

•To add new VLAN members at a later time, you can manually add secure addresses with the mac-address-table static command, or turn off port security to re-enable the learning function long enough for new VLAN members to be registered. Learning may then be disabled again, if desired, for security.

•A secure port has the following restrictions:

•Cannot use port monitoring.

•Cannot be a multi-VLAN port.

•Cannot be connected to a network interconnection device.

•Cannot be a trunk port.

•If a port is disabled due to a security violation, it must be manually re-enabled using the no shutdown command.

4-67

Page 212 Page 214
Page 213
Image 213
Accton Technology VS4512DC manual Port security, Command Usage
Page 212 Page 214

VS4512DC, VS4512 specifications

Accton Technology is renowned for its innovative networking solutions and has made significant strides in the realm of networking devices with its VS4512 and VS4512DC models. These devices cater primarily to the advanced needs of enterprise and data center environments, providing robust features and cutting-edge technologies that enhance network performance and reliability.

The Accton VS4512 is a high-performance Layer 2+ switch designed for top-of-rack applications in data centers. It boasts a compact 1U design, making it highly efficient for space-constrained environments. One of its standout features is the support for Ethernet Flow Control, which significantly reduces data loss during peak traffic loads. This is essential for businesses that rely on real-time data processing and streaming.

In terms of scalability, the VS4512 supports up to 48 Gigabit Ethernet ports, which can be expanded using four 10 Gigabit SFP+ uplink ports. This flexibility allows enterprises to customize their network architecture to meet their growing demands, whether they are scaling up for more users or enhancing service capabilities.

The VS4512DC, on the other hand, is the DC version tailored for data centers. It offers similar features as the VS4512 but includes enhancements for power efficiency and redundancy, ensuring that operations can continue smoothly even in power outage scenarios. The VS4512DC features dual power supplies and advanced thermal management, allowing for improved heat dissipation and lower operational costs.

Both models support advanced Layer 3 routing capabilities, enabling efficient traffic management across complex networks. They also incorporate features like VLAN segmentation and link aggregation, which facilitate better bandwidth utilization and improved network security.

Security is another cornerstone of these switches, with features such as DHCP snooping, port security, and storm control to mitigate risks associated with unauthorized access and network congestion.

In summary, the Accton Technology VS4512 and VS4512DC switches represent significant advancements in networking technology, equipped with a comprehensive set of features tailored for modern enterprise needs. With their scalability, robust performance, and focus on security, these switches are positioned to meet the challenges of today's fast-paced digital environments, making them a preferred choice for organizations aiming to enhance their network infrastructure.