3Com CoreBuilder 7000, Руководство по эксплуатации

Страница: 165 / 264

LANE Security 165
All security tables are empty.
Thus, if the switch has the factory default configuration, all LECs can join
all ELANs.
LMA Security
Commands
This section presents an overview of the LMA LANE security commands
(see “LEC not in ELAN Security List” on page 356 in the Management
Guide“).
“Snapshot”
The snapshot operation inserts the full ATM addresses of all the LECs
currently connected to an ELAN into the security table of the ELAN, with
join privilege ACCEPT. You use this feature when you want the currently
connected LECs to be the permitted configuration for the ELAN. If the
ELAN table already has entries, the new entries are added to them. You
can edit the resulting table (see “Add All Joined LECs to Security List” on
page 362 in the Management Guide“).
Security Check
The security check operation, allows you to determine whether a LEC is
permitted to join an ELAN according to the current configuration (see
“Perform a Security Check on a LEC” on page 366 in the Management
Guide“).
Changes Take Effect
Any changes to the security database done through LMA are effective
immediately, that is, the switch does not have to be rebooted in order
that the change be effective.
If the join privilege of a LEC which is already operational in an ELAN are
changed to REJECT, the LEC is allowed to continue operating in the ELAN
as long as it belongs to the ELAN.
Save your changes (see “Save Security Configuration” on page 369 in the
Management Guide “) after you are finished. Otherwise they will be lost
after the next reboot.
Security on Redundant LES
Make sure that you have set up the same security on a secondary
(redundant) LES as you have on the primary.