addresses are used on the system, the MAC addresses of both stations and the ports they accessed are logged.

If you enable both duplicated IP detection and duplicated IP trap, the designated trap receiver gets an alert each time a duplicated IP address is used on the system. In order to send duplicated IP traps, duplicated IP detection must be enabled.

By default, duplicated IP detection and trapping are enabled.

Enabling and Disabling Duplicated IP Detection

To enable or disable detection of duplicated IP addresses:

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type d to toggle duplicated IP detection.

Enabling and Disabling Duplicated IP Trap

To enable the sending of a trap when a duplicated IP is detected, you must first enable duplicated IP detection. See the previous subsection, “Enabling and Disabling Duplicated IP Detection.”

To enable or disable the sending of a trap when a duplicated IP is detected:

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type i to toggle duplicated IP trap.

Viewing a List of Duplicated IP Addresses

To view a list of duplicated IP addresses that have been detected at the switch:

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type l to display the duplicated IP list. A screen appears, similar to the following screen.

+---------------

+-----------------

+--

+-----------------

+--

+

IP Address

Owner MAC

P

Spoofer MAC P

+---------------

+-----------------

+--

+-----------------

+--

+

xxx.xxx.xxx.xxx

 

00:00:94:CC:C5:36

1

00:00:94:CC:C7:37 17

xxx.xxx.xxx.xxx

 

00:00:94:CC:C5:36

1

00:00:94:CC:C7:37 17

xxx.xxx.xxx.xxx

 

00:00:94:CC:C5:36

1

00:00:94:CC:C7:37 17

End of Summary,

 

Quit

 

 

 

 

 

 

 

 

 

 

 

4.3.2 Enabling and Disabling Station Movement Trap

The station movement trap security measure ensures that when any end station is moved from one switch port to another, an alert is sent to the designated trap receiver. Station movement is detected when a station’s MAC address (already learned by the switch) appears on a different switch port. The station movement trap includes the station’s MAC address and IP address (if available) and the switch’s port numbers.

By default, station movement trap is disabled.

To enable or disable detection of the movement of a station on the switch:

1.From the Configuration Menu, type t to access the Security Management Menu.

2.Type s to toggle the station movement trap.

47

Page 47
Image 47
Asante Technologies 3500 Series Enabling and Disabling Station Movement Trap, Enabling and Disabling Duplicated IP Trap