System information
Configuring the Switch
3-38
3
• Mode - Select the IP filter mode for this port.
• Disabled - Disable the source IP filter.
• Static - Enable the IP filter with configured values in the Address and IP Mask
fields.
• DHCP - The IP address for the device connected to this port will be automatically
assigned by DHCP server and only frames with the assigned IP address are
allowed to access the network. The IP Address and IP Mask fields will be filled
with the assigned IP address and 255.255.255.255 individually by software.
• IP Address - Set up IP addresses to allow access. Frames with IP address outside
the allowed range will be dropped.
• IP Mask - Sets an IP mask to allow access for a specific subnet. To allow frames
with a specific IP address, set the mask to 255.255.255.255.
• DHCP Sever Allowed - Enables or disables access to a DHCP server on a port.
When DHCP Server Allowed is selected on a port, the port is allowed to be linked
to a DHCP server. This can prevent the access of unwanted or unsolicited DHCP
servers.
Web – Click Security, IP Filter.
Figure 3-34 IP Filter Configuration
Port Security
Port security is a feature that allows you to configure a port with one or more MAC
addresses that are authorized to access the network through that port. The Port
Security table has one row for each port and five columns.
When port security is enabled on a port, the switch stops learning new MAC
addresses on the specified port when it has reached a configured maximum
number. Only incoming traffic with source addresses already stored in the dynamic
or static address table will be accepted as authorized to access the network through
that port. If a device with an unauthorized MAC address attempts to use the switch
port, the intrusion will be detected and the switch can automatically take action as
specified by Intrusion Action.