Allied Telesis AT-S100 - Manual (Page 46)

Chapter 2: Configuring the AT-S100 Software
46
To set a port to MDIX, enter the following commands:
switch# configure terminal
switch(config)# interface ge12
switch(config-if)# mdix mdix
For more information about this command, see “MDIX” on page 175.
Setting Port
Security
The Port Security feature is based on assigning and limiting MAC
addresses learned by a port. You can use the MAC-Address-based Port
Security feature to enhance the security of your network by controlling
which end nodes can forward frames through the switch, thereby
preventing unauthorized individuals from accessing your network. This
features uses a MAC address to determine whether the switch should
forward a frame or discard it. The source address is the MAC address of
the end node that sent the frame.
There are three levels of port security:
ˆ Limited Mode
ˆ Locked Mode
ˆ Secured Mode
You set port security on a per port basis. Only one security level can be
active on a port at a time.
Limited Mode
The Limited security mode allows you to specify the maximum number of
dynamic MAC addresses a port can learn. The port forwards only packets
of learned source MAC addresses and discards ingress frames with
unknown source MAC addresses.
When the Limited security mode is initially activated on a port, all dynamic
MAC addresses learned by the port are deleted from the MAC address
table. The port then begins to learn new addresses, up to the maximum
allowed. After the port has learned its maximum number of addresses, it
does not learn any new addresses, even when end nodes are inactive.
A dynamic MAC address learned on a port operating in the Limited
security mode never times out from the MAC address table, even when
the corresponding end node is inactive.
Static MAC addresses are retained by the port and are not included in the
count of maximum dynamic addresses. You can continue to add static
MAC addresses to a port operating with this security level, even after the
port has already learned its maximum number of dynamic MAC
addresses.