Asante IntraCore 6524, User Manual

Page: 94 / 150

Advanced Management
Page 4-14
Configuring Port New Node Detection Trap
The port new node detection trap security measure (also called “port security
trap”) ensures that when any new device is connected to the secured port, an
alert will be sent to the designated trap receiver. The new device is detected
when it is connected to the IntraCore 6524and its MAC address is recognized
as one not present in the current address table. The information shown in the
alert is the new node’s MAC address and IP address (if available) and the port to
which they are connected.
Once a device has been connected and has generated traffic on the network, the
trap will not be re-sent. If the switch ages out the MAC address of a connected
device from its forwarding database, new traffic from that device will result in a
new node trap being sent. The default age-out time is 300 seconds. You may
reduce the number of traps sent by lengthening the age-out time, as explained
in “Setting the MAC Address Age-Out Time” in Chapter 3.
By default, New Node detection is disabled.
To enable or disable detection of a new node on the system, you must first set
the security level on a port or group of ports to
1 . Then, if it is not already
enabled, you must enable New Node detection.
To set security level 1 on a port:
1
From the Configuration Menu, type t to access the Security
Management Menu.
2
Type p to access the Port Security Configuration Menu, as
shown in Figure 4-5.
3
Select u to Set/Clear port security.
4
Type s to set security.
5
Type the numbers of the ports for which you want to set the
security. You can specify a single port, a series of port num-
bers separated by commas, a range of ports shown with a
hyphen, or a combination of ranges and single ports. For
example, type
1-8, 14 to specify ports one through eight,
and port fourteen. See Help for more information.
6
Type 1 for Port Security Level 1.