3Com 5112M-TPLS installation and operation guide Defining Port Action on Intrusion

Page 65

Security Mode is automatically enabled when you issue the SET SECURITY PORT SECURITY_TYPE command.

Security Type is automatically configured to Full (which includes both Eavesdropping and Intrusion security) when you issue the SET SECURITY PORT MODE ENABLE command.

Note: Security mode must be disabled in order for the EMM to Autolearn MAC addresses for ports that have Security Type configured for Intrusion_only or Full. If Security Mode is not disabled for each port that is configured for Intrusion Security:

–MAC addresses are not Autolearned

–The ports report an intrusion

Defining Port Action on Intrusion

An additional feature of Intrusion Detection provides you with the ability to define on a per-port basis the corrective action a management module is to take when a Security Module port experiences a security intrusion attempt. Each option provides Intrusion Detection and data collision on the intruding packet. You may elect to have the management module perform one of the following actions:

❑Disable the port and send a trap (disable_and_trap)

❑Only disable the port (disable_only)

❑No management action (no_action)

❑Only send a trap to stations defined in the management module's community table (trap_only)

Issue the following command to define disable_and_trap as the corrective action a management module will take upon a security Intrusion attempt for all ports on the module in slot 3.

Configuring Security Features 4 - 7

Image 65

Contents Page VDE Class B Compliance Restricted Rights Page Contents Installing and Operating the Module Troubleshooting Appendix B Technical Support Figures Page Tables Page Audience How to Use This GuideStructure of This Guide Usr/snm/agents Document ConventionsConvention Indicates Example Related Documents Reference Documents 3Com DocumentsPage ONline 10BASE-T Security Module IntroductionApplication Theory of OperationONline 10BASE-T Security Module Application ONline ManagementPage Designing and Expanding the Network Basic Network Rules Understanding the General RulesRule Definition Recommendations/Notes Seven Basic Network RulesCertain LAN devices Seven Basic Network Rules LAN Product Equivalent Fiber LAN EquivalenceLAN Product Equivalent Distances Fiber Backbone, Twisted Pair To-The-Desk Fiber Backbone, Twisted Pair To-The-Desk Example Sample Configuration Distance Calculation Cable Gauge Supports Link Distances Up To Twisted Pair Backbone, Twisted Pair To-The-DeskMaximum Link Distance on Twisted Pair Unshielded Twisted Pair Network Patch PanelsRedundant Links Redundant Twisted Pair ConfigurationDesigning and Expanding the Network 2 Page Installing and Operating the Module Quick Installation Chart Precautionary ProceduresProcedures for Completing Installation Step Procedure ReferenceInstalling the Module Unpacking Procedures Security Module Dip Switch SW1 Location Setting the Dip SwitchSwitch Network Selection Switch Settings DIP Switch SW1 Network Selection SettingsOff On DIP Switch SW1 Security and Link Integrity SettingsSwitch Function Factory Setting Installing the Cable Tie-Wrap Kit Installing the ModuleAttaching the Tie-Wrap Bracket to the Module Attaching Cables With 90 Connectors Installing an ONline 10BASE-T Security Module Installing the ModuleONline 10BASE-T Security Module Cable Connection Configuring the Module Port Redundancy Port EnableNetwork Assignment Module Security Link IntegrityAutopartition Threshold Saving Module ConfigurationsReverting Module Configurations Show Module Show Module Verbose Show Port Show Port Verbose Showing Module ConfigurationsMonitoring the Front Panel Security Module Faceplate Color State Indicates Name Interpretation of the Security Module LEDsNetwork Check Codes LED State Network ConfigurationLED and Network Verification Page Configuring Security Features Procedure Command Quick Reference for Configuring SecurityQuick Reference for Configuring the Security Module SET Security Autolearn Eavesdropping Security Configuring Security FeaturesExample of Eavesdropping Security Intrusion DetectionExample of Intrusion Detection Defining Port Security TypeDefining Port Action on Intrusion Enabling Ports Configuring Autolearning MaskConfiguring Autolearning Autolearn capture done learned 0 addresses total Defining a MAC Address Manually Downloading the Autolearning Database Configuring Security Mode Reverting Security Configurations Showing Security ConfigurationsSaving Security Configurations Showing Port Configurations Eavesdrop None ETHERNET1 Showing Security Autolearn Showing Security Intruder List Clearing the MAC Address Table Clearing Security ConfigurationsClearing the Security Intruder List Clearing the Autolearning DatabaseEMM Security Snmp Variables Using 3Com MIB Security VariablesUsing the Security Module Snmp Variables Configuring Security Features 4 Page Troubleshooting TroubleshootingTroubleshooting Using the Port Status LEDs Troubleshooting Using the Status LEDsTroubleshooting Using the Port Status LEDs LED State Possible Problem Troubleshooting Solutions Troubleshooting Using the Activity LEDsTroubleshooting Using the Activity LEDs Technical Assistance Page Electrical Specifications SpecificationsGeneral Specifications Environmental SpecificationsMechanical Specifications Pin Connector and Cable Figure A-1 -Pin Cable Male and Female Connectors Hub Trans Ceiver Table A-1 -Pin Cable Pinouts and Port AssignmentsPort # Function PolarityHub Trans Twisted Pair Connectors and CablesHub Port #Figure A-2. RJ-45 Connector Pinouts Twisted Pair ConnectorsTwisted Pair Cables On-line Technical Support Technical SupportWorld Wide Web Site Support from Your Network SupplierEmail Technical Support Support from 3Com Returning Products for Repair Accessing the 3Com MIB3Com Technical Publications Page Index Activity LEDs, 3-18,3-20 Quick Reference Chart Security Type Default Setting Index