Configuring Port Security

Port Security allows administrators to bind a trusted MAC address or multiple MAC addresses to a specific port to decrease unauthorized access on that port.

To configure secure ports, create MAC address objects for the trusted MAC addresses and bind them to specific ports. Frames whose source addresses are not contained in the table are dropped.

NOTE: Only static Port Security is supported.

NOTE: A secure port is meant to receive untagged frames. If a frame has a tag, even when its Security Association (SA) is trusted, are discarded.

A LACP Port or VLAN trunk port cannot also be a Secure Port at the same time.

Each port can be configured to enable or disable the Discard Tagged option. When it is enabled, all frames with a LLDP 802.1AB tag are discarded. This prevents a non-trunk port from connecting to a trunk port.

Refer to the following configuration procedures:

•	Adding MAC Addresses to an Interface

•	Editing MAC Address Objects

•	Deleting MAC Address Objects