HP FlexNetwork 7500 Series, Справочник по командам

Страница: 325 / 738

310
Field Description
Port mode
Port security mode:
•
noRestrictions.
•
autoLearn.
•
macAddressWithRadius.
•
macAddressElseUserLoginSecure.
•
macAddressElseUserLoginSecureExt.
•
secure.
•
userLogin.
•
userLoginSecure.
•
userLoginSecureExt.
•
macAddressOrUserLoginSecure.
•
macAddressOrUserLoginSecureExt.
•
userLoginWithOUI.
For more information about port security modes, see Security
Configuration Guide .
NeedToKnow mode
Need to know (NTK) mode:
•
NeedToKnowOnly —Allows only unicast packets with
authenticated destination MAC addresses.
•
NeedToKnowWithBroadcast —Allows only unicast packets
and broadcasts with authenticated destination MAC
addresses.
•
NeedToKnowWithMulticast —Allows unicast packets,
multicasts, and broadcasts with authenticated destination
MAC addresses.
•
Disabled —NTK is disabled.
Intrusion protection mode
Intrusion protection action:
•
BlockMacAddress —Adds the source MAC address of the
illegal packet to the blocked MAC address list.
•
DisablePort —Shuts down the port that receives illegal
packets permanently.
•
DisablePortTemporarily —Shuts down the port that receives
illegal packets for some time.
•
NoAction —Does not perform intrusion protection.
Learning mode
Secure MAC address learning mode:
•
Dynamic .
•
Sticky .
Aging type
Secure MAC address aging type:
•
Periodical —Timer aging only.
•
Inactivity —Inactivity aging feature together with the aging
timer.
Max secure MAC addresses
Maximum number of secure MAC addresses (or online users) that
port security allows on the port.
Current secure MAC addresses Number of secure MAC addresses stored.
Authorization
Whether the authorization information from the authentication
server (RADIUS server or local device) is ignored:
•
Permitted —Authorization information from the authentication
server takes effect.
•
Ignored —Authorization information from the authentication
server does not take effect.
NAS-ID profile NAS-ID profile applied to the port.