Configuring Port Security - Cisco 220 Series Smart Plus Administration Manual

Configuring Security

Configuring Port Security

STEP 6
Configuring Port Security
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
• Unknown Multicast—Check Enable to enable Storm Control for unknown
Multicast traffic. It will count unknown Multicast traffic towards the
bandwidth threshold.
• Storm Control Rate Threshold—Enter the maximum rate at which unknown
Multicast packets can be forwarded. The default for this threshold is 10,000.
• Broadcast—Check Enable to enable Storm Control for Broadcast traffic. It
will count Broadcast traffic towards the bandwidth threshold.
• Storm Control Rate Threshold—Enter the maximum rate at which
Broadcast packets can be forwarded. The default for this threshold is
10,000.
• Action—Choose the action when the rate of Broadcast, unknown Multicast,
or unknown Unicast frames is higher than the user-defined threshold.
Drop
- —Frames received beyond the threshold are discarded.
- Shutdown —The interface shuts down.
Click Apply. The Storm Control settings on a port are modified, and the Running
Configuration is updated.
Network security can be increased by limiting access on a port to users with
specific MAC addresses. The MAC addresses can be either dynamically learned
or statically configured.
Port security monitors received and learned packets. Access to locked ports is
limited to users with specific MAC addresses.
Port security has two modes:
• Classic Lock—All learned MAC addresses on the port are locked, and the
switch learns up to the maximum number of addresses allowed on the port
(defined by Max No. of Addresses Allowed). The learned addresses are not
subject to aging or re-learning.
• Limited Dynamic Lock—The switch learns MAC addresses up to the
configured limit of allowed addresses. After the limit is reached, the switch
does not learn additional addresses. In this mode, the addresses are
subject to aging and re-learning.
16
198