Cabletron Systems EMM-E6 manual Security

Page 87

Chapter 7

Security

Launching the Security application; LANVIEWSECURE defined; configuring security; enabling security and traps at the repeater, module, and port levels; security on non-LANVIEWSECUREMIMs

The Security application allows you to configure and manage the

LANVIEWSECURE feature incorporated into the new generation of Cabletron’s repeater family of MIMs: the TPRMIM-xxS, FORMIM-xxS, CXRMIM-S, and TPXMIM-xxS. LANVIEWSECURE provides enhanced intruder protection by allowing you to secure two source MAC addresses per port, along with an additional floating cache of up to 32 addresses among ports on a single board; in addition, LANVIEWSECURE provides eavesdrop protection by scrambling the data portion of each packet to all ports except the destination port.

NOTE

Some portions of LANVIEWSECURE functionality will apply to all ports in the EMM- E6-managed chassis, including ports residing on older, non-LANVIEWSECUREMIMs; these will be noted throughout the text, and summarized in the section entitled Security on Non-LANVIEWSECUREMIMs, on page 7-5.

To launch the Security application

from the icon:

1.Click on the appropriate EMM-E6 icon to display the icon menu.

2.Drag down to Security and release.

from the Hub View:

1.Click on to display the Device menu.

2.Drag down to Security and release.

7-1

Image 87
Contents EMM-E6 Page Virus Disclaimer Restricted Rights Notice Contents Chapter Security Chapter Source AddressingAppendix a EMM-E6 MIB Structure Chapter Front Panel RedundancyContents Introduction Using the EMM-E6 User’s GuideUsing the EMM-E6 User’s Guide UPS What’s not in the EMM-E6 User’s GuideConventions Window Conventions Screen DisplaysButton Using the MouseGetting Help Year 2000 Compliance EMM-E6 FirmwareUsing the Hub View Using the EMM-E6 Hub ViewHub View Front Panel Navigating Through the Hub ViewDevice Location UptimeDate and Time Device NameUsing the EMM-E6 Hub View EMM-E6 Ports Display Brim Ports Using the Mouse in a Hub View ModulePort Display Form Hub View Port Color CodesMonitoring Hub Performance Port Display Form Collisions ErrorsLoad TrafficProtocols Frame SizesPort Type Using the EMM-E6 Hub View Checking Device Status and Updating Front Panel Info Name and LocationContact Chassis Type Checking Network StatusActive Users NameModule Type Checking Module StatusLink Status Checking Port StatusMedia Type StatusTopology Type Viewing the IP Address TableChecking Statistics Launching the Global Find MAC Address ToolUsing the EMM-E6 Hub View Broadcast Packets Received BytesTotal Packets Avg Packet SizeOOW Collisions Total ErrorsAlignment Errors CRC ErrorsGiant Frames Runt FramesProtocols/Frames Statistics Viewing the Port Source Address ListUsing the EMM-E6 Hub View Managing the Hub Setting the Polling IntervalsDevice General Status Contact StatusStatistics Configuring FNB ConnectionsDevice Configuration Port Operational StateConfiguring RIC MIM Connections To configure FNB connectivity for an individual port 15. Tpxmim Channel Selection Window Setting a Port’s Trunk TypeTo change a port’s topology status Enabling/Disabling MIM Ports Alarm Configuration From the Hub View Using Alarm ConfigurationFrom the command line stand-alone mode From the iconCRC Configuring AlarmsBroadcast Setting Repeater AlarmsSet Repeater Alarms Window Setting and Changing AlarmsSetting Module Alarms Setting Module and Port AlarmsSet the Status to Enabled Set Module Alarms WindowSet Port Alarms Window Setting Port AlarmsSet the Status to Enabled Alarm Configuration Setting Module and Port Alarms Link/Seg Traps What is a Segmentation Trap?Enabling and Disabling Link/Seg Traps What is a Link Trap?Spmarun r4hwtr IP address community name Viewing and Configuring Link/Seg Traps for Hub Modules Configuring Link/Seg Traps for the RepeaterModule Traps Window Port Traps Window Viewing and Configuring Link/Seg Traps for PortsLink/Seg Traps Link/Seg Traps Enabling and Disabling Link/Seg Traps Repeater Redundancy Setting Network Circuit RedundancySpmarun r4red IP address community name Configuring a Redundant CircuitChannel X Redundancy Window Add Circuit Address Window Repeater Redundancy To set the Poll Interval Monitoring RedundancyDisplaying the Source Address List Source AddressingDisplaying the Source Address List Source Addressing Setting the Aging Time Setting the Hash TypeLocking Source Addresses Source Address Locking on Older Devices Configuring Source Address Traps Repeater-level Traps Module- and Port-level Traps Source Addressing Port Source Address Traps Window Finding a Source AddressClick on to exit the window Security Spmarun r4sec IP address SU community name What is LANVIEWSECURE?New definitions for station and trunk ports Secure address assignmentTrunk port security Full or partial security against eavesdropping Newest Lanviewsecure FeaturesContinuous learning mode Configurable violation responseLearned addresses reset Security on Non-LANVIEWSECUREMIMsForced non-secure status Configuring Security Security To assign secure addresses to a port Addresses Window Add MAC Address Window Boards with Multiple CachesTips for Successfully Implementing Eavesdropper Protection Resetting Learned AddressesEnabling Security and Traps Security Channel X Security Window Repeater-level Security and TrapsModule-level Security and Traps Channel X Module Security Window Channel X Port Security Window Port-level Security and TrapsSecurity Front Panel Redundancy Setting Front Panel RedundancySetting Front Panel Redundancy Add Circuit Address Window Front Panel Redundancy Setting Front Panel Redundancy EMM-E6 MIB Structure Ietf MIB SupportChassis MGR MIB ComponentsCtron Use Only Host ServicesIP Services Repeater One, Repeater Two, and Repeater ThreeRmon Host Rmon DefaultDistributed LAN Monitor MIB NavigatorBrief Word About MIB Components and Community Names EMM-E6 MIB Structure Index Index-2 Index-3 Index Index-4
Related manuals
Manual 64 pages 974 b