The Port Properties MAC Locking tab lets you enable or disable the MAC Locking feature on the selected port, if the device supports it. You can also view and change a list of MAC addresses that are currently locked on the port.
There are two ways to access the MAC Locking tab:
- Select a device in the left-panel Network Elements tab. In the right-panel Ports tab, select a port and click the Port Properties button. In the Port Properties window, select the MAC Locking tab (in the top row of tabs).
- Select a port in the left-panel Port Groups tab, then select the MAC Locking tab in the right panel.
In order for MAC Locking to take effect on a port, it must be enabled at the device level. You can do this using the Device Configuration wizard, or the device MAC Locking tab. You can also enable MAC Locking for selected ports in the Port Configuration wizard. The MAC Locking tab provides two sub-tabs:
General Tab
This tab lets you enable/disable MAC Locking on the port as well as view the MAC locking status on the device. You can also set MAC locking limits and change all dynamic MACs (with a locking cause of "First Arrival) to statically locked MACs.
Click the graphic for more information.
- Device MAC Locking Status
- Shows whether the MAC Locking feature is enabled or disabled the device. If the device does not support MAC locking, this option is grayed out. In order for MAC Locking to take effect on a port, it must be enabled at the device level. You can do this using the device MAC Locking tab.
- MAC Locking
- Lets you to enable or disable the MAC Locking feature on this port. If the device does not support MAC locking, this option is grayed out.
MAC Locking Limits
- Maximum Number of Dynamic Locked MAC Addresses
- Allows you to set the maximum number of MAC addresses that can be locked dynamically on the port. The numbers in parentheses let you know the range of allowed values for the particular device. When you enable Dynamic MAC Locking on a port, the next MAC address that authenticates or accesses the port (up to the maximum number of dynamic locked MAC addresses) will have exclusive access to that port from that time on. If you are using static locked MAC addresses, the maximum number of dynamic locked MAC addresses is usually set to 0.
- Maximum Number of Static Locked MAC Addresses
- Allows you to set the maximum number of MAC addresses that can be locked administratively on the port. The numbers in parentheses let you know the range of allowed values for the particular device. Static MAC Locking lets you create a list of locked MAC addresses for a port so that the port only accepts traffic from those MAC addresses.
Static MACs
- Static MACs
- Click Apply to change all Dynamic Locked MAC addresses (with the Locking Cause of "First Arrival") to Static Locked MAC addresses. To ensure that all Dynamic Locked MAC addresses are changed to Static, make sure that the Maximum Number of Static Locked MAC Addresses is set to a large enough value.
Locked MAC Addresses Tab
This tab lets you view a list of the MAC addresses currently locked on the selected port. You must click the Retrieve button to display this information.
Click the graphic for more information.
- Locking Cause
- Indicates why the MAC address is locked:
- Authentication - Locked as the result of authentication
- First Arrival - Locked because it was the first MAC address to access the port
- Static - MAC address was added to the list administratively
- Retrieve Button
- Populates the Locked MAC Addresses table with a list of the MAC addresses currently locked on the selected port.
- Add Button
- Opens the Add Static MAC window, where you can create a list of locked MAC addresses for this port.
For information on related concepts:
For information on related tasks:
For information on related windows:
