Port Security

MAC Port Security

This section provides information and instructions about using the MAC Port Security feature. It includes the following topics:

MAC Port Security Overview - An overview of MAC Port Security.

Configuring MAC Port Security - Instructions on how to configure MAC Port Security.

*Note: In the C360, MAC Security implementation applies specifically to the 10/100 BaseT and SFP/Giga ports.

MAC Port Security Overview

The MAC Port Security function is intended to filter incoming frames with an unauthorized source MAC address (SA) on a secured port.

When a frame is received on a secured port, its SA is checked against the MAC Address Table. If the SA is not found in the MAC Address Table or it is found but has a different port location than the incoming frame, the frame is rejected without being learned. A message is then sent to the Agent.

The Agent reports the attempted intrusion with an SNMP security violation trap containing the intruder's MAC address. To prevent the flooding of the Console's trap log or network, the Agent sends an intruder alert every 5 seconds for the first 3 times a specific intruder is detected on a port, and then every 15 minutes if the intrusion continues.

Configuring MAC Port Security

To apply MAC Port Security to a selected port:

1.Select Configure > MAC Port Security. The MAC Port Security dialog box opens.

Avaya C360 Manager User Guide

203

Page 217
Image 217
Avaya C360 manual MAC Port Security Overview, Configuring MAC Port Security