• November 12, 2019, 07:40:10 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Port Security DGS-1210-28  (Read 6043 times)

jimmiec8

  • Level 1 Member
  • *
  • Posts: 3
Port Security DGS-1210-28
« on: June 23, 2016, 11:42:42 AM »

Sorry to cross post, but I realized my first post was in the wrong area. Can anyone tell me the proper way to setup port security on my DGS-1210-28 switch? I have all of my MAC addresses defined in the static MAC table. I enabled port security on all ports and assigned them the Max number of Learning addreses that are needed, (most of them just 1) . The problem I have is that when I test my security with a laptop that is not in my static MAC address table it still is able to connect with no problem. Should the ports that have static MAC addresses already assigned be set to Zero Learning addresses in Port Security?
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 47888
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Port Security DGS-1210-28
« Reply #1 on: June 23, 2016, 11:52:16 AM »

You might check the ref manual on this on page 52 and see if you have everything configured correctly. I don't have much experience with smart switches. I can possibly get some additional help on this if needed.
Logged
Cable:200mb/10Mb>NetGear C7800>DIR-882>DGS-1100>HP 24pt Gb Switch. COVR-3902/2202/1203,DIR-2680,890L,882,880L,868L,DNR-202L,DNS-345x2,DCS-933L,936L and 960L.
Go Here>Router Troubleshooting

jimmiec8

  • Level 1 Member
  • *
  • Posts: 3
Re: Port Security DGS-1210-28
« Reply #2 on: June 23, 2016, 12:58:10 PM »

You might check the ref manual on this on page 52 and see if you have everything configured correctly. I don't have much experience with smart switches. I can possibly get some additional help on this if needed.

Thanks, but I have read it over and over :)
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 47888
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Port Security DGS-1210-28
« Reply #3 on: June 23, 2016, 12:59:51 PM »

Ok, I'll see if we can get some additional eyes on this... ::)
Logged
Cable:200mb/10Mb>NetGear C7800>DIR-882>DGS-1100>HP 24pt Gb Switch. COVR-3902/2202/1203,DIR-2680,890L,882,880L,868L,DNR-202L,DNS-345x2,DCS-933L,936L and 960L.
Go Here>Router Troubleshooting

PacketTracer

  • Level 4 Member
  • ****
  • Posts: 431
Re: Port Security DGS-1210-28
« Reply #4 on: June 23, 2016, 03:02:32 PM »

Hi,

from reading the manual, the following list should be all you have to do:

In "Static MAC configuration"

  • Set "Disable auto learning on ports other than the uplink ports configured below" to "On"
  • In the line "Uplink Port" uncheck all ports, you want to be protected (Unchecking = NO Uplink Port = auto learning will be disabled)
  • Enter the Static MAC Address List

If my understanding is right, the clause "To initiate the removal of auto-learning for any of the uplink ports, click On to enable this feature, and then select the port(s) for autolearning to be disabled" in the manual is misleading. It should say  "To initiate the removal of auto-learning for any of the non-uplink ports, click On to enable this feature, and then uncheck the port(s) for autolearning to be disabled" instead.

If auto learning is disabled this way, the settings for "port security" should be irrelevant because they depend on auto learning being enabled. I would reset these settings to defaults (Admin State = Disabled for any port).

PT
« Last Edit: June 25, 2016, 06:56:32 AM by PacketTracer »
Logged