Asante IntraCore 6524, User Manual

Page: 89 / 150

Security Management
Page 4-9
Security Management
The IntraCore 6524’s security management options are summarized in
Table 4-2.
Table 4-2 Security Management Options
Security Option Description Action
Duplicated IP Detection
(Monitoring) Detects the use of a single IP
address by two stations. Detects and logs MAC
addresses of both stations and
the ports they accessed.
Duplicated IP Trap Sends trap with MAC
addresses of both stations and
the ports they accessed.
Station Movement Trap Detects the movement of any
end station from one port to
another. Sends trap with the station’s
MAC address and IP address
(if available) and the switch’s
port numbers.
Port New Node Trap Detects the connection of any
new device to the secured port. Sends trap with the new node’s
MAC address and IP address
(if available) and the port to
which they are connected.
Port Trusted MAC
Address Creates a port-trusted MAC
address for use by other secu-
rity measures. None.
Port Intruder Detection
Trap Disallows traffic from MAC
addresses not belonging to the
port trusted MAC address set.
Station movement is also disal-
lowed. Sends trap with intruder’s
MAC address.
Port Lock Disallows traffic from MAC
addresses that do not belong to
the port trusted MAC address
set. Station movement is also
disallowed. Disables the port if an intruder
is detected. Sends trap with the
port number, and the
intruder’s MAC address,
VLAN ID, and IP address (if
available).