GE MultiLink ML810, Инструкция по эксплуатации

Страница: 116 / 348

6–8 MULTILINK ML810 MANAGED EDGE SWITCH – INSTRUCTION MANUAL
CONFIGURING PORT SECURITY THROUGH THE COMMAND LINE INTERFACE CHAPTER 6: ACCESS CONSIDERATIONS
Example 6-5 illustrates these steps for setting up port security on a specific port:
Once port security is setup, it is important to manage the log and review the log often. If
the signals are sent to the trap receiver, the traps should also be reviewed for intrusion and
other infractions.
6.2.3 Security Logs
All events occurring on the MultiLink ML810 Managed Edge Switch are logged. The events
can be informational (e.g. login, STP synchronization etc.), debugging logs (for debugging
network and other values), critical (critical events), activity (traffic activity) and fatal events
Example 6-5: Configuring port security
ML810#
port-security
ML810(port-security)##
ps enable
Port Security is already enabled
ML810(port-security)##
learn port=3 enable
Port Learning Enabled on selected port(s)
ML810(port-security)##
show port-security
PORT STATE SIGNAL ACTION LEARN COUNT MAC ADDRESS
---- ----- ------ ------ ----- ----- -----------
1 ENABLE LOG NONE ENABLE 6 00:e0:29:2a:f1:bd
00:01:03:e2:27:89
00:07:50:ef:31:40
00:e0:29:22:15:85
00:03:47:ca:ac:45
00:30:48:70:71:23
2 ENABLE NONE NONE DISABLE 0 Not Configured
3 ENABLE NONE NONE ENABLE 0 00:c1:00:7f:ec:00
4 ENABLE NONE NONE DISABLE 0 Not Configured
5 ENABLE NONE NONE DISABLE 0 Not Configured
6 ENABLE NONE NONE DISABLE 0 Not Configured
ML810(port-security)##
save
Saving current configuration
Configuration saved
ML810(port-security)##
learn port=3 disable
Port Learning Disabled on selected port(s)
ML810(port-security)##
action port=3 drop
Port security Action type set to Drop on selected
port(s)
ML810(port-security)##
show port-security port=3
PORT STATE SIGNAL ACTION LEARN COUNT MAC ADDRESS
---- ----- ------ ------ ----- ----- -----------
3 ENABLE NONE DROP ENABLE 0 00:c1:00:7f:ec:00
ML810(port-security)##
signal port=3 logandtrap
Port security Signal type set to Log and Trap on
selected port(s)