Changing the Ring Security Mode, Remove | Cabletron Systems TRMMIM

Ring Security Conﬁguration

Changing the Ring Security Mode

Use the Enable Security and Disable Security options at the top of the Security Conﬁg window turn security on and off; use the Security Mode options to select the level of security you wish to activate:

Disable Security

Selecting this option disables ring security so that any station can attempt to enter the ring. The Security Mode selections — those which determine the action that will be taken when an unauthorized station attempts to enter the ring — are de-activated (grayed out) when security is disabled. Security is disabled by default.

Enable Security

Selecting this option enables you to choose one of two Security Mode options which determine the actions that will be taken when an unauthorized MAC address (i.e., one not in the “Allowed List”) is detected trying to enter the ring. The two Security Mode options are:

Warn	This is the default Enable Security mode. In Warn mode, new
	stations can enter the ring, but a “Station Added” trap will be
	sent to the network management station in response. This trap
	message is only sent once, and it includes the new station’s MAC
	address. Because new stations can still be added to the Allowed
	List in Warn Mode, you can use this mode to allow new users to
	enter the ring; while in Warn mode, the TRMMIM automatically
	adds every inserted station to the Allowed List. This saves you
	from entering MAC addresses one at time using the Add button.
	Note that this option will be set as soon as it is selected; there is
	no conﬁrmation required.
Warn and	This is the highest level of ring security, which will lock the ring
Remove	to new stations. The Alarm/Remove mode sends a “Remove
	MAC Frame” command to a new station attempting to enter the
	ring, and a trap to your management station informing it of the
	action taken. If, after three attempts the station cannot be
	removed from the ring, a trap is sent to the management station
	informing it that the station could not be removed.
	Note that, because of the potentially serious consequences of
	setting this high level of security, you will be asked to conﬁrm
	this selection before it is set.

6-10	Conﬁguring Security

Image 112

Cabletron Systems TRMMIM manual Changing the Ring Security Mode, Remove

Contents

Trmmim Page Virus Disclaimer Restricted Rights Notice Applicable to licenses to the United States Government only Contents Chapter Ring Map Chapter Alarm ConﬁgurationChapter Statistics Chapter Ring Security Conﬁguration Appendix a Trmmim MIB Structure Contents Using the Trmmim User’s Guide Trmmim What’s not in the Trmmim Guide Introduction to Spma for the Trmmim Conventions Screen Displays Introduction to Spma for the Trmmim Using the Mouse Button Getting Help FTP Trmmim Firmware Introduction to Spma for the Trmmim Trmmim Firmware Using the Trmmim Hub View Using the Hub View Using the Trmmim Hub View Navigating Through the Hub View Hub View Front Panel Trmmim Hub View Uptime Time and DateDevice Name Device Location Using the Trmmim Hub View Using the Mouse in a Hub View Module Module Index FNB Bypass State Hub View Port Color Codes Port Display Form Errors FramesTotal Bytes Port Type FNB Display Monitoring Hub Performance Using the Trmmim Hub View Checking Device Status and Updating Front Panel Info Name and Location Checking Module Status ContactDate and Time Total Rings Speed Fault Speed Fault LocationModule Name Module Admin State Checking Port StatusPort Name Module/Port Link State Time Checking Station StatusInsertion Trap Vendor Station NameUpstream Neighbor/Downstream Neighbor Physical Location PriorityPort Mapping Reverse MACs Checking Ring Port Status Conﬁguring Station Name, Location, or Priority Fault State Time Media FaultClass Media Type Checking Statistics Bytes LineBurst Abort Managing the Hub at the Device Level Managing the HubFind MAC Address Setting the Polling Intervals 12. The Find MAC Address Window 13. Trmmim Polling Intervals Contact Status Device General Status Device ConﬁgurationPort Operational State Statistics Managing the Hub at the Module Level Controlling Token Ring FNB Multiplexer Connections INS Board Left ConnectRight Connect Bypass Controlling Token Ring Speed Clearing the Module FNB Conﬁguration Window Selections Controlling Token Ring MIM Management Mode Enabling All Ports on Token Ring ModulesAuto AUT Management MGT Converting a Station Port to a Ring-out Port Managing the Hub at the Port LevelEnabling and Disabling Station and Ring Ports Removing a Station from the Ring Ring Map From the command line stand-alone mode Launching the Ring MapFrom the icon From the Hub View Selecting a Ring to Map Ring Name Ring Map Speed StationsName Utilization Viewing Station-speciﬁc Information Quick Info Popup Window Board and Port Drop Setting a Station Name Performance and Errors Setting a Station Drop Viewing Management Station Conﬁguration Commands Error Status Open Status Error Active Monitor Error Report Timer Setting the Statistics Calculation ModeViewing Ring-level Information Viewing the Error Table Set Calculation Mode Window Error Table Window Total Errors Isolating Errors Non-Isolating Errors Changing the Station Labels Viewing Device Information Setting the Map Poll Interval Device Information Window Viewing Beacon History Active Monitor ChangesRing Purges Beacon Events Longest Beacon Last Beacon TypeLast Beacon Beacon Conﬁguration 12. The Beacon Conﬁguration Window Using the Find Options Searching by Station Name, MAC Address, Board/Port, or Drop 13. Sample Find Windows Finding the Active Monitor on the Network Finding the Management Station on the Network Frames or Errors measured/Δ Time in seconds Accessing Other Spma Applications 14. Sample Find Highest and Lowest Windows Alarm Conﬁguration Spmarun e5alarms IP address community name Setting and Viewing Ring Alarms Alarm Conﬁguration Setting and Viewing Station Alarms Setting a Ring Level Alarm Alarm Conﬁguration Alarm Conﬁguration Alarm Conﬁguration Setting a Station Level Alarm Alarm Conﬁguration Setting and Viewing Station Alarms Using Statistics Statistics Viewing the Ring Station List Spmarun e5stats IP Address community name Module and Port Stn NameUpstream Addr Downstream Addr Monitoring Ring and Station Statistics Using the Reverse MAC ButtonRefreshing the Station List Creating a Pie Chart Creating a Graph or Meter Click mouse button 1 on Ring and Station Variables GeneralProtocols KBytes Isolating Errors Line ErrorsBurst Error AC Error Abort Error Non-Isolating ErrorsInternal Error Token Errors Frequency Errors Statistics Ring and Station Variables Ring Security Conﬁguration About Ring Security Launching the Security Conﬁguration Window Ring Security Conﬁguration Security Conﬁguration Ring Selection window, -1, will appear Allowed Station List Allowed CountDisallowed Station List Disallowed Count Disable Security Security Mode OptionsEnable Security Allowed/Disallowed List Conﬁguration Buttons Conﬁguring Security Building the Allowed List Automatically Deleting Stations from the Allowed or Disallowed Lists Station Addition Window Clearing All Entries in the Allowed or Disallowed List Clear List Window Changing the Ring Security Mode Remove Ietf MIB Support Trmmim MIB Structure Chassis MGR Protocol StackSnmp Agent Network One, Network Two Brief Word About MIB Components and Community Names Telnet Trmmim MIB Structure Index Index-2 Index-3 Index-4