Asante Technologies 35160 Enabling and Disabling Station Movement Trap, Configuring Port Security

Page 48

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type l to display the duplicated IP list. A screen appears, similar to the following screen.

+

---------------IP Address

+

-----------------Owner MAC

--+

+

-----------------Spoofer MAC

--+

+

P

P

+

xxx.xxx.xxx.xxx---------------

+

-----------------

+--

+

-----------------

+--

+

 

 

00:00:94:CC:C5:36

1

00:00:94:CC:C7:37 17

 

xxx.xxx.xxx.xxx

 

00:00:94:CC:C5:36

1

00:00:94:CC:C7:37 17

 

xxx.xxx.xxx.xxx

 

00:00:94:CC:C5:36

1

00:00:94:CC:C7:37 17

End of Summary,

 

Quit

 

 

 

 

 

4.2.2 Enabling and Disabling Station Movement Trap

The station movement trap security measure ensures that when any end station is moved from one switch port to another, an alert is sent to the designated trap receiver. Station movement is detected when a station’s MAC address (already learned by the switch) appears on a different switch port. The station movement trap includes the station’s MAC address and IP address (if available) and the switch’s port numbers.

By default, station movement trap is disabled.

To enable or disable detection of the movement of a station on the switch:

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type s to toggle the station movement trap.

4.2.3Configuring Port Security

To access the Port Security Configuration Menu, type t in the Configuration Menu to access the Security Management Menu, then type p to access the Port Security Configuration Menu. A screen similar to the following will appear:

IntraCore 35160-T Port Security Configuration Menu

Port: 01 Port Name: <none>

Port Security Info:

[+: Port Security Enabled, -: No Port Security, !: Port Disabled By Security]

Port Security Status:

[01]-------- [09]--------

Port Security Type:

<none>

[Disabled]

Port New Node Detect

Trap Status:

Port Intruder Detect

Trap Status:

[Enabled]

Port Trusted MAC Address: [<none>]

 

<Cmd>

<Description>

 

o

Set/Clear Port Security

 

tToggle Port Security Trap Enable/Disable

i Insert/Modify Port Trusted MAC Address

d Display Port Intruder Nodes

h Port Security Help

q Return to previous menu

root>

S)elect port N)ext port P)rev port

48

Image 48
Contents IntraCore 35160 Series Quick Start Guide Layer 2 Gigabit Switches User’s Manual IntraCore 35160 SeriesTable of Contents Page Features IntroductionSwitchCore CXE2010 Package ContentsLEDs 1 IC35160-T 2 IC35160-GManagement and Configuration Front and Back Panel DescriptionsConsole Interface Web-Based InterfaceSnmp Management Hardware Installation and Setup Installation OverviewSafety Overview Recommended Installation ToolsInstallation into an Equipment Rack Power RequirementsEnvironmental Requirements Cooling and AirflowInstalling a Gbic Gbic InterfacesInstalling the Optional Emergency Power Supply Connecting PowerRemoving a Gbic Gbic Care and HandlingConnecting to the Network 1 10/100/1000BaseT Ports Cabling ProceduresSetup Gigabit Ethernet Ports Cabling ProceduresConnecting to a Console Connecting Via the Web Browser Connecting Via TelnetChanging the Password IP AssignmentSimple Network Management Protocol Snmp Configuration Accessing a SubmenuLogging Exiting a SubmenuConfiguration Menu General InformationAdministration Configuration Changing System Administration InfoSystem IP Configuration Port ConfigurationChanging System IP Information Page Advanced Port Configuration Enabling or Disabling a PortSetting Port Class of Service Setting Port Default PrioritySetting Port Maximum Packet Length Enabling or Disabling 802.3x Flow ControlUnicast Forwarding Database Configuration Global Port ConfigurationDisplaying the Forwarding Database Setting the MAC Address Age-Out Time Security ManagementVlan Management Searching for a MAC AddressProtocol Configuration Snmp ConfigurationChanging Community Strings Enabling Authentication Traps Adding or Updating a Trap ReceiverSpanning Tree Protocol STP Configuration Deleting a Trap ReceiverSpanning Tree Port Configuration Setting Port Priority and Path CostEnabling and Disabling STP Trunk Group Configuration QoS Priority Queue Management Defining the Priority ListAssigning Packets to Priority Queues Example User Interface Configuration Setting Console UI Time-out PeriodSetting SSH/Telnet UI Time-out Change Password Adding or Deleting an Access HostEnabling or Disabling SSH and Telnet Access Control System UtilitiesEnabling or Disabling the Web Server Port Mirroring Enabling or Disabling System Port MirroringAdding or Deleting a Monitor Port System Reset Resetting the SwitchSystem Clock Scheduling a System Reset System LogBootstrap Configuration Clearing the System LogTftp File Transfers Statistics Ping UtilityAdvanced Management Snmp and Rmon ManagementRmon Management Duplicated IP Detection and Trap Enabling and Disabling Duplicated IP DetectionEnabling and Disabling Duplicated IP Trap Viewing a List of Duplicated IP AddressesConfiguring Port Security Enabling and Disabling Station Movement TrapConfiguring Port New Node Detection Trap Configuring Port Lock and Intruder LockPort-based Network Access Control Configuring Security Level 2 or LevelSetting the Intruder Trap Resetting Security to DefaultsPage Port Control Settings Name DescriptionSetting Timers Setting Radius Parameters Radius Server IPServer Port Vlan Specifications for the IntraCore 35160 Series Other Vlan Features of the switchVlan Management Configuring Static Vlan Groups Creating a VlanAdvanced Static Vlan Configuration Configuring Vlan Port Attributes Setting the Port Vlan IDConfiguring Port Receive Frame Type Adding and Deleting VLANs from the PortSetting Port Type Displaying a Summary of Vlan GroupsResetting Vlan Configuration to Defaults IP Multicast Traffic ManagementDisplaying a Vlan Port Summary Multicast AddressesConfiguring IP Multicast Traffic Management Igmp SnoopingEnabling and Disabling Igmp Snooping Advanced Igmp Configuration Displaying a Summary of Group AddressesIP Multicast Forwarding Database Configuration Adding Ports to the Selected AddressInserting a Multicast Group Address Removing a Multicast Group AddressAccessing with a Web Browser Web-Based ManagementFront Panel Button Genl Info General Information ButtonManagement Buttons Port Config Port Configuration Button Span Tree Spanning Tree Button Snmp Button Addr Address Table ButtonVlan Configuration Vlan ButtonVlan Group Create Port Configuration Set Port TypePort Vlan ID Pvid Acceptable Frame TypeTrunking Button Security ButtonPort Ingress Filtering Tag/Untag Port Egress TypePage Snmp Management Snmp Management OperationsSnmp Protocol Community Name and Security MIB TreeName Space Path MIB Groups Supported Switching Concepts VLANsPort-Based VLANs Vlan ID and Tagged FramesSpanning Tree Protocol Port Vlan IDHow It Works Spanning Tree ParametersSpanning Tree Port Configuration Full Duplex, Flow Control, and Auto-negotiationFull Duplex Flow Control Auto-NegotiationAppendix A. Troubleshooting Problem Possible SolutionsAppendix B. Features and Specifications SpecificationsPhysical Characteristics Technical Support and Warranty Environmental RangeStandards Compliance Appendix C. FCC Compliance and Warranty Statements FCC Compliance Statement Important Safety InstructionsIntraCare Warranty Statement Page Pin Number Signal Name Appendix D. Console Port Pin OutsAppendix E. Online Warranty Registration Appendix F. BootP Configuration Bootstrap ConfigurationImage Banks Loading Software LocallyBOOTP-TFTP Loading Software Remotely