HP HP ProCurve Series 6600, Руководство по обеспечению безопасности доступа

Страница: 729 / 778

14-39
Configuring and Monitoring Port Security
Reading Intrusion Alerts and Resetting Alert Flags
CLI: Checking for Intrusions, Listing Intrusion Alerts,
and Resetting Alert Flags
The following commands display port status, including whether there are
intrusion alerts for any port(s), list the last 20 intrusions, and either reset the
alert flag on all ports or for a specific port for which an intrusion was detected.
(The record of the intrusion remains in the log. For more information, refer
to “Operating Notes for Port Security” on page 14-42.)
In the following example, executing
show interfaces brief
lists the switch’s port
status, which indicates an intrusion alert on port A1.
Figure 14-21.Example of an Unacknowledged Intrusion Alert in a Port Status Display
If you wanted to see the details of the intrusion, you would then enter the
show
port-security intrusion-log
command. For example:
Syntax: show interfaces brief
List intrusion alert status (and other port status informa-
tion)’.
show port-security intrusion-log
List intrusion log content.
clear intrusion-flags
Clear intrusion flags on all ports.
port-security [e] < port-number > clear-intrusion-flag
Clear the intrusion flag on one or more specific ports.
HP Switch(config)# show int brief
Status and Counters - Port Status
| Intrusion MDI Flow Bcast
Port Type | Alert Enabled Status Mode Mode Ctrl Limit
------ --------- + --------- ------- ------ ---------- ---- ---- -----
B1 100/1000T | Yes Yes Up 1000FDx MDI off 0
B2 100/1000T | No Yes Up 1000FDx Auto off 0
B3 100/1000T | No Yes Up 1000FDx Auto off 0
B4 100/1000T | No Yes Up 1000FDx Auto off 0
Intrusion Alert on port B1.