• Download PDFs
• Configuring MAC Move Limiting (J-Web Procedure)  

• Related Topics
• Configuring MAC Move Limiting (CLI Procedure)
• Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC Move Limiting, on an EX-series Switch
• Verifying That MAC Move Limiting Is Working Correctly
• Monitoring Port Security
• Understanding MAC Limiting and MAC Move Limiting for Port Security on EX-series Switches

Configuring MAC Move Limiting (J-Web Procedure)

MAC move limiting detects MAC movement and MAC spoofing on access ports. It prevents hosts whose MAC addresses have not been learned by the EX-series switch from accessing the network.

You configure MAC move limiting for each VLAN, not for each interface (port). In the default configuration, the MAC move limit for each VLAN is unlimited; the default action that the switch will take if a limit is set and then that limit is exceeded is none.

To enable MAC move limiting on one or more VLANs by using the J-Web interface:

1. Select Configure>Security>Port Security.
2. Select one or more VLANs from the VLAN list.
3. Click the Edit button. If a message appears asking if you want to enable port security, click Yes.
4. To set a MAC move limit:
   1. Type a limit value in the MAC Movement box.
   2. Select an action from the MAC Movement Action box. The switch takes this action when the limit is exceeded.
   3. Click OK.
5. Click OK after the command has been successfully delivered.

Note: You can enable or disable port security on the switch at any time by clicking the Activate or Deactivate button on the Port Security Configuration page. If security status is shown as Disabled when you try to edit settings for any VLANs or interfaces (ports), the message asking if you want to enable port security appears.