3Com 5112M-TPLS Clearing Security Configurations, Clearing the MAC Address Table

The following command example displays a Security Intrusion list for a two-port 10BASE-FB Module.

ONline> show security intruder_list [ENTER]

Port	MAC Address	Time Since Intrusion				Auto-Disable?
03.01	08-00-8f-02-c6-be	0d	0h	15m	27s	YES
03.02	09-d3-74-00-2e-01	1d	5h	32m	53s	YES

MAC addresses for unauthorized stations that attempt to transmit data to Security Module ports are not displayed. The MAC addresses are not displayed because the MAC address is intercepted by Intrusion Detection, and cannot reach the network where the EMM can detect the MAC address.

Clearing Security Configurations

The Security Module provides commands to clear a MAC address from a port's MAC address table, and from the Autolearning Database. A cleared MAC address is no longer considered to be a valid address. A command is also available to clear the Security Intruder list.

Clearing the MAC Address Table

You may want to manually clear a MAC address from a port instead of initiating Autolearning to recapture a port's associated MAC addresses. For example, once Autolearning Capture has completed and the information downloaded, a station may be removed from the network.

Issue the following command to clear the MAC address 08-54-6f-01-32-08 from the MAC address table for port 1 on the Security Module in slot 3.

ONline> clear security port 3.1 mac_address 08-54-6f-01-32-08 [ENTER]

Use the All option to remove all associated MAC addresses from a specific port, all ports on a Security Module, or all ports on all Security Modules in a concentrator. If you do not enter a MAC address, the command defaults to All, which clears all MAC addresses from the specified ports.

Configuring Security Features 4 - 19