Additional Features
Media Access Control (MAC) Security
5-8
SpectraComm IP T1 Router Card
076R200-000
Installation and Operation Manual
Issue 13
MAC Filtering for Security
To prevent unauthorized access from the remote site to the local site, enable a MACL at
SCIP-B
e0
, and then add to the MACL all MACs from the remote hosts. To use the MACL learn
option for this, enable MACL learning on SCIP-B
e0
, and then ping all remote hosts from the local
site. The MACL will automatically learn all remote MACs.
For added security, enable a MACL at SCIP-A
s0
and be sure it includes the same remote MACs
plus the MAC for SCIP-B (necessary to manage SCIP-B). MACL learning can be used to
conveniently accomplish this.
Figure 5-4
MAC Filtering for Security
Note
In order for the SCIP to send SNMP traps to a SNMP trap host, the source MAC address of that host must be
included in the SCIP’s MACL.
T1 (LAN-X)
LOCAL SITE
REMOTE SITE
ILLEGAL
FRAMES
DISCARDED
MACL
FILTER
SCIP
"B"
e0
LOCAL
HOST
LOCAL
HOST
LOCAL
HOST
LOCAL
HOST
LOCAL
HOST
LOCAL
HOST
s0
SCIP
"A"
e0
ILLEGAL
FRAMES
DISCARDED
MACL
FILTER
s0
Содержание SpectraComm IP T1
Страница 119: ......
Страница 120: ...The Best Connections in the Business...