1.2 Configuring Port Security

IES-5000/5005/6000 Support Notes

will not be able to access the Internet on port 3. Save the settings to make the changes take effect.

CI command:

TGE1> lcman port macfilter enable 7-3

TGE1> lcman port macfilter set 7-3 00:a0:c5:12:34:56

TGE1> lcman port macfilter set 7-3 00:a0:c5:77:88:99

TGE1> config save

1.2 Configuring Port Security

Alternatively, you can enable port security on port 3 in slot 7 and specify the number of MAC addresses allowed to access through the port at the same time. In this example, we will only allow one user to access at a time. That means when the user is logged in for Internet access on port 3, any user will be blocked.

Note that you cannot activate MAC filtering and port security at the same time.

CI command:

TGE1> lcman port maccount enable 7-3

TGE1> lcman port maccount set 7-3 1

TGE1> config save

DHCP Relay Option 82 Application

In some cases, ISPs may want to limit the number of IP addresses assigned to the users or assign certain IP addresses based on the DSL port, VLAN ID and option 82 string. To set up this flexible client IP address assignment scheme, configure the They DHCP Relay Option 82 feature and set up a DHCP server that supports the Option 82 function. The following figure shows a network example.

85

All contents copyright (c) 2008 ZyXEL Communications Corporation.

Page 86
Image 86
ZyXEL Communications IES-6000, IES-5005 manual DHCP Relay Option 82 Application, Configuring Port Security