DES-3226S Layer 2 Fast Ethernet Switch User’s Guide
53
Port Security
A given port’s (or a range of port’s) dynamic MAC address learning can be locked such that the current source MAC addresses
entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be locked by
using the Learn <Disabled> pull-down menu to Enabled, and clicking Apply.
To disable learning on a port provides added security because it prevents unauthorized computers from connecting to the
Switch’s locked ports and gaining access to the network. If a computer with source MAC addresses unknown to the Switch
prior to locking the port attempts to forward packets through the learning disabled port, the packets are dropped.
The following fields can be set:
Parameter Description
State <Enabled>
Toggle the State <Enabled> field to either enable or disable a given port.
Speed/Duplex <Auto>
Toggle the Speed/Duplex <Auto> field to either select the speed and duplex/half-
duplex state of the port. Auto – auto-negotiation between 10 and 100 Mbps
devices, full- or half-duplex. The Auto setting allows the port to automatically
determine the fastest settings the device the port is connected to can handle, and
then to use those settings. The other options are 100M/Full, 100M/Half, 10M/Full,
and 10M/Half. There is no automatic adjustment of port settings with any option
other than Auto.
Flow Control: Auto
Displays the flow control scheme used for the various port configurations. Ports
configured for full-duplex use 802.3x flow control, half-duplex ports use
backpressure flow control, and Auto ports use an automatic selection of the two.
Learn <Disabled>
Allows the selected port (or port’s) dynamic MAC address learning to be locked
such that new source MAC addresses can not be entered into the MAC address
table for the locked port. It can be changed by toggling between Disabled and
Enabled.
Port Security Settings
Figure 6 - 17. Configure Port Security
Click the selection button
on the far left tha