IBM 8265 Nways ATM Switch, Руководство пользователя

Страница: 93 / 192

Enabling or Disabling Security
You can enable or disable security either globally (on all detected ports in the 8265) or on selected ports
only. To enable security on selected ports, security must be enabled globally.
These settings only apply to ports currently detected. Ports newly detected have security enabled or
disabled depending on the default mode setting (see “Security Mode Default” on page 81.)
Enabling Security
To enable security globally, you enter the following command:
à ð
8265ATM
>
set security mode access_control
á ñ
Note: If the access control server or an ARP server is connected via a UNI link, you must ensure that the
port to which it is connected has security disabled. Otherwise, the server(s) will not be able to
connect to the 8265 after a reset.
To enable security on a specific port, you enter the following command:
à ð
8265ATM
>
set security port
<
slot.port
>
mode access_control
á ñ
where
<
slot.port
>
specifies the slot where the module is installed and the port on the module.
Tips:
If you only wish to have security on a few selected ports, the easiest way to do this is by entering the
following commands:
1. SET SECURITY MODE NO_SECURITY (to stop the security system - only required if the system is
active)
2. SET SECURITY DEFAULT MODE NO_SECURITY (to disable security on all ports newly detected
after security is activated)
3. SET SECURITY MODE ACCESS_CONTROL (to start the access security system)
4. SET SECURITY PORT (slot.port) MODE ACCESS_CONTROL (to enable security on the required
ports).
Conversely, if you wish to have security on all or most ports, the easiest way to do this is by entering the
following commands:
1. SET SECURITY MODE NO_SECURITY (to stop the security system - only required if the system is
active)
2. SET SECURITY DEFAULT MODE ACCESS_CONTROL (to enable security on all ports newly
detected when security is activated)
3. SET SECURITY MODE ACCESS_CONTROL (to start the access security system)
4. SET SECURITY PORT (slot.port) MODE NO_SECURITY (to disable security on the ports for which
security is not required).
Chapter 7. Configuring Network Access Security
77