Black Box LGB1108A, LGB1126A, LGB1148A, Managed Gigabit Switch manual Security, Page

Chapter 4: Security

4.7.3 Port Status

This section shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules, including the user modules. When a user module has enabled port security on a port, the port is set up for software-based learning. In this mode, frames from unknown MAC addresses are passed on to the port security module, which in turn asks all user modules whether to allow this new MAC address to forward or block it. For a MAC address to be set in the forwarding state, all enabled user modules must unanimously agree on allowing the MAC address to forward. If only one chooses to block it, it will be blocked until that user module decides otherwise.

Web Interface

To configure a Port Security Switch Status Configuration in the Web interface:

1.Specify the Port which you want to monitor.

2.Check “Auto-refresh.”

Figure 4-23. The Port Security Port Status screen.

Parameter Description

•MAC Address & VLAN ID: The MAC address and VLAN ID that is seen on this port. If no MAC addresses are learned, a single row stating "No MAC addresses attached" is displayed.

•State: Indicates whether the corresponding MAC address is blocked or forwarding. In the blocked state, it will not be allowed to transmit or receive traffic.

•Time of Addition: Shows the date and time when this MAC address was first seen on the port.

•Age/Hold: If at least one user module has decided to block this MAC address, it will stay in the locked state until the hold time (measured in seconds) expires. If all user modules have decided to allow this MAC address to forward, and aging is enabled, the Port Security module will periodically check that this MAC address still forwards traffic. If the age period (measured in seconds) expires and no frames have been seen, the MAC address will be removed from the MAC table. Otherwise a new age period will begin. If aging is disabled or a user module has decided to hold the MAC address indefinitely, a dash (—) will be shown.

•Auto-refresh: Check the auto-refresh box to set the unit to refresh information automatically.

•Icon, upper right of screen (Refresh): Click to refresh the Port Security Port Status information manually.

LGB1108A 724-746-5500 blackbox.com Page 195