Netgear M4100-26G (GSM7224v2h2) - 22‐port GE + 4 GE Combo L2 Managed Switch User Manual
Manage Device Security
314
M4100 Series Managed Switch
The Port Security Violations table shows information about violations that occurred on ports
that are enabled for port security. The following table describes the fields in the Port Security
violations table.
that are enabled for port security. The following table describes the fields in the Port Security
violations table.
Table 86. Port Security Configuration
Field
Description
Port
Displays the physical interface.
Last Violation MAC
Displays the source MAC address of the last packet that was discarded
at a locked port.
at a locked port.
VLAN ID
Displays the VLAN ID corresponding to the last violation MAC address.
Configure Port Security Settings
A MAC address can be defined as allowable by one of two methods: dynamically or statically.
Both methods are used concurrently when a port is locked.
Dynamic locking implements a first arrival mechanism for port security. You specify how
many addresses can be learned on the locked port. If the limit has not been reached, then a
packet with an unknown source MAC address is learned and forwarded normally. When the
limit is reached, no more addresses are learned on the port. Any packets with source MAC
addresses that were not already learned are discarded. You can effectively disable dynamic
locking by setting the number of allowable dynamic entries to zero.
many addresses can be learned on the locked port. If the limit has not been reached, then a
packet with an unknown source MAC address is learned and forwarded normally. When the
limit is reached, no more addresses are learned on the port. Any packets with source MAC
addresses that were not already learned are discarded. You can effectively disable dynamic
locking by setting the number of allowable dynamic entries to zero.
Static locking allows you to specify a list of MAC addresses that are allowed on a port. The
behavior of packets is the same as for dynamic locking: only packets with an allowable
source MAC address can be forwarded.
behavior of packets is the same as for dynamic locking: only packets with an allowable
source MAC address can be forwarded.
To configure port security settings:
1.
Prepare your computer with a static IP address in the 169.254.100.0 subnet, for
example, 169.254.100.201.
example, 169.254.100.201.
2.
Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on
the switch.
the switch.
3.
Launch a web browser.
4.
Enter the IP address of the switch in the web browser address field.
The default IP address of the switch is 169.254.100.100.
The Login screen displays.
5.
Enter the user name and password.
The default admin user name is admin and the default admin password is blank, that is,
do not enter a password.
do not enter a password.
6.
Click the Login button.
The web management interface menu displays.