Asante Technologies 3500 Series user manual Enabling and Disabling Station Movement Trap

Page 47

addresses are used on the system, the MAC addresses of both stations and the ports they accessed are logged.

If you enable both duplicated IP detection and duplicated IP trap, the designated trap receiver gets an alert each time a duplicated IP address is used on the system. In order to send duplicated IP traps, duplicated IP detection must be enabled.

By default, duplicated IP detection and trapping are enabled.

Enabling and Disabling Duplicated IP Detection

To enable or disable detection of duplicated IP addresses:

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type d to toggle duplicated IP detection.

Enabling and Disabling Duplicated IP Trap

To enable the sending of a trap when a duplicated IP is detected, you must first enable duplicated IP detection. See the previous subsection, “Enabling and Disabling Duplicated IP Detection.”

To enable or disable the sending of a trap when a duplicated IP is detected:

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type i to toggle duplicated IP trap.

Viewing a List of Duplicated IP Addresses

To view a list of duplicated IP addresses that have been detected at the switch:

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type l to display the duplicated IP list. A screen appears, similar to the following screen.

+---------------

+-----------------

+--

+-----------------

+--

+

IP Address

Owner MAC

P

Spoofer MAC P

+---------------

+-----------------

+--

+-----------------

+--

+

xxx.xxx.xxx.xxx

 

00:00:94:CC:C5:36

1

00:00:94:CC:C7:37 17

xxx.xxx.xxx.xxx

 

00:00:94:CC:C5:36

1

00:00:94:CC:C7:37 17

xxx.xxx.xxx.xxx

 

00:00:94:CC:C5:36

1

00:00:94:CC:C7:37 17

End of Summary,

 

Quit

 

 

 

 

 

 

 

 

 

 

 

4.3.2 Enabling and Disabling Station Movement Trap

The station movement trap security measure ensures that when any end station is moved from one switch port to another, an alert is sent to the designated trap receiver. Station movement is detected when a station’s MAC address (already learned by the switch) appears on a different switch port. The station movement trap includes the station’s MAC address and IP address (if available) and the switch’s port numbers.

By default, station movement trap is disabled.

To enable or disable detection of the movement of a station on the switch:

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type s to toggle the station movement trap.

47

Image 47
Contents IntraCore 3500 Series Quick Start Guide IntraCore 3500 Series Gigabit Ethernet Switches User’s ManualTable of Contents Page Introduction Package Contents1 IC3524 Models LEDs4810/100 2 IC3548-2GT#49 Front and Back Panel DescriptionsManagement and Configuration Snmp Management Console InterfaceWeb-Based Interface Safety Overview Hardware Installation and SetupInstallation Overview Environmental Requirements Installation into an Equipment RackRecommended Installation Tools Power RequirementsEquipment Rack Guidelines Installing a GbicGbic Interfaces Gbic Care and Handling Installing Optional Hardware ModulesConnecting Power Removing a Gbic1 10/100BaseT Ports Cabling Procedures Connecting to the NetworkConnecting to a Console SetupGigabit Ethernet Ports Cabling Procedures Connecting Via Telnet Changing the PasswordConnecting Via the Web Browser Snmp Management IP AssignmentUsing the Stacking Feature IC3524 only Toggle Stacking Enable/Disable Logging ConfigurationAccessing a Submenu Exiting a Submenu Configuration MenuGeneral Information Changing System Administration Info System Administration ConfigurationChanging System IP Information System IP ConfigurationBootstrap Configuration Changing Community Strings Snmp ConfigurationDeleting a Trap Receiver Enabling Authentication TrapsAdding or Updating a Trap Receiver Basic Port Configuration Menu appears Port ConfigurationEnabling or Disabling a Port Configuring Auto-NegotiationToggling Half to Full Duplex Configuring a Port ManuallyConfiguring 1000BaseX Ports Toggling Port Link SpeedEnabling or Disabling 802.3x Flow Control Advanced Port ConfigurationSetting Port Class of Service Global Port Configuration Setting Port Default PriorityDisplaying the Forwarding Database Unicast Forwarding Database ConfigurationSearching for a MAC Address Setting the MAC Address Age-Out TimeIP Multicast Traffic Management Port Mirroring ConfigurationSecurity Management Vlan ManagementImage Downloading through Tftp File Up/Downloading ConfigurationSetting the Monitor Port Performing a Software Upgrade at Runtime Serial Downloading ConfigurationPerforming a Software Upgrade System Reset ConfigurationResetting the Switch System Log Scheduling a System ResetClearing the System Log User Interface ConfigurationSetting Telnet Idle Time-out Period Setting Console Idle Time-out PeriodEnabling or Disabling the Web Server Changing the PasswordSystem Utility Viewing Statistics Enabling and Disabling STP Configuring Spanning Tree ParametersAdvanced Management Spanning Tree ProtocolSetting Port Priority and Path Cost Spanning Tree Port ConfigurationRmon Management Snmp and Rmon ManagementDuplicated IP Detection and Trap Viewing a List of Duplicated IP Addresses Enabling and Disabling Station Movement TrapEnabling and Disabling Duplicated IP Detection Enabling and Disabling Duplicated IP TrapConfiguring Port New Node Detection Trap Configuring Port SecuritySetting the Intruder Trap Configuring Port Lock and Intruder LockConfiguring Security Level 2 or Level Inserting/Modifying a Port Trusted MAC Address Vlan Specifications for the IntraCore 3500 SeriesResetting Security to Defaults Other Vlan Features of the switchKkxxxxxx Kxxxxxxx Configuring Static Vlan GroupsAdvanced Static Vlan Configuration Specifying Tagging or No Tagging for a Port Configuring Vlan Port AttributesSetting the Port Vlan ID Adding and Deleting VLANs from the Port Configuring Port Receive Frame TypeDisplaying a Summary of Vlan Groups Displaying a Vlan Port SummaryMulticast Addresses Resetting Vlan Configuration to DefaultsDisplaying a Summary of Group Addresses Configuring IP Multicast Traffic ManagementIgmp Snooping Enabling and Disabling Igmp SnoopingRemoving a Multicast Group Address To remove an address IP Multicast Forwarding Database ConfigurationAdding Ports to the Selected Address Inserting a Multicast Group AddressWeb-Based Management Accessing with a Web BrowserGenl Info General Information Button Front Panel ButtonStatistics Button Port Config Port Configuration Button Span Tree Spanning Tree Button Addr Address Table Button Snmp ButtonVlan Button Port Configuration Adding and Deleting Port Members Vlan ConfigurationCreating or Modifying a Vlan Page Security Button Duplicate IP Button Snmp Protocol Snmp ManagementSnmp Management Operations MIB Groups Supported Community Name and SecurityMIB Tree Name Space PathPage Vlan ID and Tagged Frames Switching ConceptsVLANs Port-Based VLANsSpanning Tree Parameters Port Vlan IDHow It Works Port Priority Forward DelayFull Duplex, Flow Control and Auto-negotiation Full DuplexAuto-Negotiation Flow ControlProblem Possible Solutions Appendix A. TroubleshootingSpecifications Appendix B. Features and SpecificationsFeatures Standards Compliance Physical CharacteristicsTechnical Support and Warranty Environmental RangeIntraCare Warranty Statement Appendix C. FCC Compliance and Warranty StatementsFCC Compliance Statement Important Safety Instructions Page Appendix D. Console Port Pin Outs Pin Number Signal NameAppendix E. Online Warranty Registration Loading Software Locally Appendix F. BootP ConfigurationBootstrap Configuration Image Banks