Nortel business policy switch 2000, User Manual

Page: 180 / 412

180 Chapter 3 Using the console interface
208700-C
Table 17 describes the MAC Address Security Configuration screen fields.
Table 17 MAC Address Security Configuration fields
Field Description
MAC Address Security When this field is set to enabled, the software checks source MAC addresses
of packets that arrive on secure ports against MAC addresses listed in the
MAC Address Security Table for allowed membership. If the software detects
a source MAC address that is not an allowed member, the software registers
a MAC intrusion event.
Default Disabled
Range Disabled, Enabled
MAC Address Security
SNMP-Locked When this field is set to enabled, the MAC address security screens cannot
be modified using SNMP (SNMP includes the DM management system).
Default Disabled
Range Disabled, Enabled
Partition Port on Intrusion
Detected This field value determines how the switch reacts to an intrusion event. When
an intrusion even is detected (see MAC Address Security field description)
the specified switch port is set to Disabled (partitioned from other switch
ports).
When the field is set to:
• Disabled - the port remains enabled, even if an intrusion event is
detected.
• Enabled - the port becomes disabled, then automatically resets to
enabled depending on the value set in the Partition Time field.
• Forever - the port becomes disabled, and remains disabled (partitioned).
The Partition Time field cannot be used to automatically to reset the port
to Enabled if you set this field to Forever.
You can always manually set the port’s status field to enabled using the Port
Configuration screen (see
“Port Configuration screen” on page 209 ).
Default Disabled
Range Disabled, Enabled, Forever
Partition Time This field appears only when the Partition Port on Intrusion Detected field is
set to enabled. This field determines the length of time a partitioned port
remains disabled. This field is not operational when the Partition Port on
Intrusion Detected field is set to Forever.
Default 1 second (the value 0 indicates forever)
Range 0-65536 seconds