HP HP ProCurve Series 6600, Access Security Manual

Page: 732 / 778

14-42
Configuring and Monitoring Port Security
Operating Notes for Port Security
Figure 14-24.Example of Log Listing With and Without Detected Security Violations
From the Menu Interface: In the Main Menu, click on 4. Event Log and use
Next page
and
Prev page
to review the Event Log contents.
For More Event Log Information. See “Using the Event Log To Identify
Problem Sources” in the “Troubleshooting” chapter of the
Management and
Configuration Guide for your switch.
Operating Notes for Port Security
Identifying the IP Address of an Intruder. The Intrusion Log lists
detected intruders by MAC address. If you are using PCM+ to manage your
network, you can use the device properties page to link MAC addresses to
their corresponding IP addresses.
Proxy Web Servers.
If you are using the WebAgent through a switch port
configured for Static port security, and your browser access is through a proxy
web server, then it is necessary to do the following:
■ Enter your PC or workstation MAC address in the port’s Authorized
Addresses list.
■
Enter your PC or workstation’s IP address in the switch’s IP Authorized
Managers list. See “Using Authorized IP Managers” in the
Management
and Configuration Guide
for your switch.)
HP Switch(config)# log security
Keys: W=Warning I=Information
M=Major D=Debug E=Error
---- Event Log listing: Events Since Boot ----
W 08/01/02 01:18:15 FFI: port 2 - Security Violation
W 08/01/02 04:28:08 FFI: port 2 - Security Violation
---- Bottom of Log : Events Listed = 2 ----
HP Switch(config)# log security
Keys: W=Warning I=Information
M=Major D=Debug E=Error
---- Event Log listing: Events Since Boot ----
---- Bottom of Log : Events Listed = 0 ----
Log Listing with
Security Violation
Detected
Log Listing with No
Security Violation
Detected
Log Command
with
“security” for
Search String