Conﬁguring Security | Cabletron Systems TRMMIM guide

Ring Security Conﬁguration

duplication exist between the lists, the duplicate entries will be removed from the Disallowed List. There will not be any alert if this occurs.

Selecting this button closes the Security Conﬁg window. Any sets you have made in the window before closing will have taken effect.

Conﬁguring Security

Before conﬁguring security, be sure that your network meets the requirements and conditions speciﬁed in your TRMMIM’s hardware Installation and User’s Guide.

Your TRMMIM must also be properly conﬁgured to send traps to the appropriate network management station; this will ensure that traps generated by ring security arrive at the appropriate destination. Refer to the SPMA Tools Guide for information on using the Trap Table tool.

Building the Allowed List Automatically

When security is set to Warn mode, any station which inserts onto the ring is automatically added to the Allowed List. You can use this feature to build the Allowed List automatically, as follows:

1.Click to select the Enable Security-Warnoption. The TRMMIM will enable ring security and automatically generate the Allowed List, adding to it each station which is currently inserted on the ring. If your network management station address is entered into the TRMMIM’s trap table, you will receive a trap informing you of each device which is added to the list.

2.The Allowed Station List display will update to show you new entries.

Adding New Stations to the Allowed or Disallowed Stations List

To add an individual station to the Allowed or Disallowed Stations List:

NOTE

All entries to the Allowed and Disallowed Lists are veriﬁed for proper MAC format and list duplication. Should you add an entry which already exists in the Allowed or Disallowed List to the other list, the address will be removed from the original list and added to the new one.

1. Click on . The Station Addition window (Figure 6-3) will appear.

Conﬁguring Security

6-7

Image 109

Cabletron Systems TRMMIM manual Conﬁguring Security, Building the Allowed List Automatically

Contents

Trmmim Page Virus Disclaimer Applicable to licenses to the United States Government only Restricted Rights Notice Contents Chapter Ring Map Chapter Alarm ConﬁgurationChapter Statistics Appendix a Trmmim MIB Structure Chapter Ring Security Conﬁguration Contents Trmmim Using the Trmmim User’s Guide Introduction to Spma for the Trmmim What’s not in the Trmmim Guide Screen Displays Conventions Introduction to Spma for the Trmmim Button Using the Mouse FTP Getting Help Trmmim Firmware Introduction to Spma for the Trmmim Trmmim Firmware Using the Hub View Using the Trmmim Hub View Navigating Through the Hub View Using the Trmmim Hub View Trmmim Hub View Hub View Front Panel Time and Date UptimeDevice Name Device Location Using the Trmmim Hub View Using the Mouse in a Hub View Module Module Index FNB Bypass State Port Display Form Hub View Port Color Codes Frames ErrorsTotal Bytes Port Type FNB Display Monitoring Hub Performance Using the Trmmim Hub View Name and Location Checking Device Status and Updating Front Panel Info Contact Checking Module StatusDate and Time Total Rings Speed Fault Location Speed FaultModule Name Module Checking Port Status Admin StatePort Name Module/Port Link State Time Checking Station StatusInsertion Trap Vendor Station NameUpstream Neighbor/Downstream Neighbor Priority Physical LocationPort Mapping Reverse MACs Conﬁguring Station Name, Location, or Priority Checking Ring Port Status Media Fault Fault State TimeClass Media Type Checking Statistics Line BytesBurst Abort Managing the Hub at the Device Level Managing the HubFind MAC Address 12. The Find MAC Address Window Setting the Polling Intervals Contact Status 13. Trmmim Polling Intervals Device Conﬁguration Device General StatusPort Operational State Statistics Controlling Token Ring FNB Multiplexer Connections Managing the Hub at the Module Level INS Left Connect BoardRight Connect Bypass Clearing the Module FNB Conﬁguration Window Selections Controlling Token Ring Speed Enabling All Ports on Token Ring Modules Controlling Token Ring MIM Management ModeAuto AUT Management MGT Converting a Station Port to a Ring-out Port Managing the Hub at the Port LevelEnabling and Disabling Station and Ring Ports Removing a Station from the Ring Ring Map Launching the Ring Map From the command line stand-alone modeFrom the icon From the Hub View Ring Name Selecting a Ring to Map Ring Map Stations SpeedName Utilization Quick Info Popup Window Viewing Station-speciﬁc Information Drop Board and Port Performance and Errors Setting a Station Name Viewing Management Station Conﬁguration Setting a Station Drop Commands Open Status Error Status Active Monitor Error Error Report Timer Setting the Statistics Calculation ModeViewing Ring-level Information Set Calculation Mode Window Viewing the Error Table Error Table Window Isolating Errors Total Errors Non-Isolating Errors Changing the Station Labels Viewing Device Information Device Information Window Setting the Map Poll Interval Active Monitor Changes Viewing Beacon HistoryRing Purges Beacon Events Longest Beacon Last Beacon TypeLast Beacon Beacon Conﬁguration 12. The Beacon Conﬁguration Window Using the Find Options 13. Sample Find Windows Searching by Station Name, MAC Address, Board/Port, or Drop Finding the Active Monitor on the Network Finding the Management Station on the Network Frames or Errors measured/Δ Time in seconds 14. Sample Find Highest and Lowest Windows Accessing Other Spma Applications Alarm Conﬁguration Spmarun e5alarms IP address community name Setting and Viewing Ring Alarms Alarm Conﬁguration Setting a Ring Level Alarm Setting and Viewing Station Alarms Alarm Conﬁguration Alarm Conﬁguration Alarm Conﬁguration Setting a Station Level Alarm Alarm Conﬁguration Setting and Viewing Station Alarms Statistics Using Statistics Spmarun e5stats IP Address community name Viewing the Ring Station List Stn Name Module and PortUpstream Addr Downstream Addr Monitoring Ring and Station Statistics Using the Reverse MAC ButtonRefreshing the Station List Creating a Pie Chart Creating a Graph or Meter Click mouse button 1 on General Ring and Station VariablesProtocols KBytes Line Errors Isolating ErrorsBurst Error AC Error Abort Error Non-Isolating ErrorsInternal Error Frequency Errors Token Errors Statistics Ring and Station Variables About Ring Security Ring Security Conﬁguration Ring Security Conﬁguration Launching the Security Conﬁguration Window Security Conﬁguration Ring Selection window, -1, will appear Allowed Count Allowed Station ListDisallowed Station List Disallowed Count Disable Security Security Mode OptionsEnable Security Allowed/Disallowed List Conﬁguration Buttons Building the Allowed List Automatically Conﬁguring Security Station Addition Window Deleting Stations from the Allowed or Disallowed Lists Clear List Window Clearing All Entries in the Allowed or Disallowed List Remove Changing the Ring Security Mode Trmmim MIB Structure Ietf MIB Support Protocol Stack Chassis MGRSnmp Agent Network One, Network Two Telnet Brief Word About MIB Components and Community Names Trmmim MIB Structure Index Index-2 Index-3 Index-4