Nortel 2526T, Configuration

Page: 80 / 228

80 Configuring Security using the CLI
Parameters and
variables
Description
<semi-secure> Specifies a partial security configuration that allows
read access to a small subset of system information
using noAuthNoPriv, and read and write access to
everything using authNoPriv.
<very-secure>
Specifies a maximum security configuration that allows
no access.
Securing your network
You can secure your network using the following CLI commands.
•
"Configuring MAC address filter-based security" (page 80)
• "Configuring EAPOL-based security" (page 87)
Configuring MAC address filter-based security
You configure the BaySecure* application using MAC addresses with the
following commands:
• "show mac-security command" (page 80)
• "mac-security command" (page 81)
• "mac-security mac-address-table address command" (page 83)
• "mac-security security-list command" (page 83)
• "no mac-security command" (page 84)
• "no mac-security mac-address-table command" (page 84)
• "no mac-security security-list command" (page 85)
•
"mac-security command for specific ports" (page 85)
• "mac-security mac-da-filter command" (page 86)
show mac-security command
The
show mac-security
command displays configuration information
for the BaySecure application. The syntax for the
show mac-security
command is:
show mac-security {config|mac-address-table [address
<macaddr>]|port|security-lists|mac-da-filter}
The
show mac-security
command is executed in the Privileged EXEC
command mode.
Table 39 "show mac-security command parameters and variables" (page
81)
describes the parameters and variables for the
show mac-security
command.
Nortel Ethernet Routing Switch 2500 Series
Security — Configuration and Management
NN47215-505 (323165-B) 02.01 Standard
4.1 19 November 2007
Copyright © 2007, Nortel Networks
.