FBFM2112F897CSLJLS View Datasheet(PDF) - Intel

Part Name

Description

Manufacturer

FBFM2112F897CSLJLS

Intel® FM2112 24-Port 10G/1G Ethernet Switch Chip

Intel 

Intel® FM2112 24-Port 10G/1G Ethernet Switch Chip Data Sheet

3.2.2

3.2.2.1

3.2.3

3.2.3.1

• The Source MAC address in the table

• A Source MAC address in the table is on the correct port

Unknown MAC addresses or known MAC addresses on the wrong port

are considered violations when the security feature is enabled. When a

frame meets the criteria to be considered a security violation the

following actions are possible:

• Security checking is off

— The frame is forwarded normally

— No security violations are counted

— No interrupts are raised

• Security is on

— The frame is discarded

— The frame is counted as a security violation

— A maskable interrupt is raised

— The frame may be trapped to the CPU

IEEE 802.1x - Port Access Control

The FM2112 is fully compliant with IEEE 802.1x, “Port Access Control.”

Supported Modes

• Single host mode: Software enables MAC security, turns aging/learning off, and

statically enters the authenticated supplicant MAC address into the table. Software

responds to a security violation.

• Multi-host mode: Software does not enable MAC security, and then any number of

MAC address may be learned on the authorized port.

• VLAN Security (guest VLANs): The authentication state of the port in SW is de-

authorized, but the physical port is put into the forwarding state, and given a

default VLAN. All packets are tagged with this VLAN, all packets that were tagged

upstream are discarded. EAPOL messages are trapped. Once the authentication

server authorizes the port, it assigns the port a different default VLAN with greater

resource access.

VLAN

{Described in registers Table 65, Table 70, and Table 71}

Tag-based VLANs

The FM2112 is fully compliant with the IEEE 802.1Q-2004 revision of

the VLAN specification. In addition, it supports the following,

• Each port has a default VLAN ID and default priority

• Per port VLAN association and tagging, ingress rule is one of the following:

— Untagged packets received on a port will be associated with the default VLAN

ID and priority configured for that port.

— For tagged packets, each port may be configured in the following modes:

32

Share Link: