Chapter 7: Security

Parameter Description

User Module Legend:

The legend shows all user modules that may request port security services.

User Module Name: The full name of a module that may request Port Security services.

Abbr: A one-letter abbreviation of the user module. This is used in the Users column in the port status table.

Port Status: The table has one row for each port on the selected switch and a number of columns:

Port: The port number for which the status applies. Click the port number to see the status for this particular port.

Users: Each of the user modules has a column that shows whether that module has enabled Port Security or not. A “-” means that the corresponding user module is not enabled, whereas a letter indicates that the user module abbreviated by that letter (see Abbr) has enabled port security.

State: Shows the current state of the port. It can take one of four values:

Disabled: No user modules are currently using the Port Security service.

Ready: The Port Security service is in use by at least one user module, and is awaiting frames from unknown MAC addresses to arrive.

Limit Reached: The Port Security service is enabled by at least the Limit Control user module, and that module has indicated that the limit is reached and no more MAC addresses should be taken in.

Shutdown: The Port Security service is enabled by at least the Limit Control user module, and that module has indicated that the limit is exceeded. No MAC addresses can be learned on the port until it is administratively re-opened on the Limit Control configuration Web page.

MAC Count (Current, Limit):

The two columns indicate the number of currently learned MAC addresses (forwarding as well as blocked) and the maximum number of MAC addresses that can be learned on the port, respectively.

If no user modules are enabled on the port, the Current column will show a dash (-).

If the Limit Control user module is not enabled on the port, the Limit column will show a dash (-).

Indicates the number of currently learned MAC addresses (forwarding as well as blocked) on the port. If no user modules are enabled on the port, a dash (-) will be shown.

Auto-refresh: Click on the box next to “Auto-refresh” to refresh the information automatically.

Upper right icon (Refresh): Click on the “Refresh” button to refresh the Port Security Switch Status information manually.

7.7.3 Port Status

This section shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules—the user modules. When a user module has enabled port security on a port, the port is set up for software-based learning. In this mode, frames from unknown MAC addresses are passed on to the port security module, which in turn asks all user modules whether to allow this new MAC address to forward or block it. For a MAC address to be set in the forwarding state, all enabled user modules must unanimously agree on allowing the MAC address to forward. If only one chooses to block it, it will be blocked until that user module decides otherwise.

Web Interface

To configure a Port Security Switch Status Configuration in the Web interface:

1.Specify the port that you want to monitor.

2.Check on the box next to “Auto-refresh.”

LGB5028A User‘s Manual

724-746-5500 blackbox.com

Page 201

 

 

Page 201
Image 201
Black Box LGB5052A, LGB5028A, 24 + or 48 + 4-Port Gigabit Managed Switch with SFP+ 10G user manual Port Status