19

Port Security

19.1 Overview

This chapter shows you how to set up port security.

Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the Switch. The Switch can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K.

For maximum port security, enable this feature, disable MAC address learning and configure static MAC address(es) for a port. It is not recommended you disable port security together with MAC address learning as this will result in many broadcasts. By default, MAC address learning is still enabled even though the port security is not activated.

19.1.1 What You Can Do

Use the Port Security screen (Section 19.2 on page 172) to enable port security and disable MAC address learning. You can also enable the port security feature on a port.

 

171

GS2200-24 User’s Guide