ACCESS CONSIDERATIONS

CHAPTER 6: ACCESS CONSIDERATIONS

Example 6-5 illustrates these steps for setting up port security on a specific port:

Once port security is setup, it is important to manage the log and review the log often. If the signals are sent to the trap receiver, the traps should also be reviewed for intrusion and other infractions.

6.2.3Security Logs

All events occurring on the MultiLink ML1200 Managed Field Switch are logged. The events can be informational (e.g. login, STP synchronization etc.), debugging logs (for debugging network and other values), critical (critical events), activity (traffic activity) and fatal events

Example 6-5: Configuring port security

ML1200# port-security

ML1200(port-security)## ps enable

Port Security is already enabled

ML1200(port-security)## learn port=3 enable

Port Learning Enabled on selected port(s)

ML1200(port-security)## show port-security

PORT

STATE

SIGNAL

ACTION

LEARN

COUNT

MAC ADDRESS

----

-----

------

------

-----

-----

-----------

1

ENABLE

LOG

NONE

ENABLE

6

00:e0:29:2a:f1:bd

 

 

 

 

 

 

00:01:03:e2:27:89

 

 

 

 

 

 

00:07:50:ef:31:40

 

 

 

 

 

 

00:e0:29:22:15:85

 

 

 

 

 

 

00:03:47:ca:ac:45

 

 

 

 

 

 

00:30:48:70:71:23

2

ENABLE

NONE

NONE

DISABLE

0

Not Configured

3

ENABLE

NONE

NONE

ENABLE

0

00:c1:00:7f:ec:00

4

ENABLE

NONE

NONE

DISABLE

0

Not Configured

5

ENABLE

NONE

NONE

DISABLE

0

Not Configured

6

ENABLE

NONE

NONE

DISABLE

0

Not Configured

ML1200(port-security)## save

Saving current configuration

Configuration saved

ML1200(port-security)## learn port=3 disable

Port Learning Disabled on selected port(s)

ML1200(port-security)## action port=3 drop

Port security Action type set to Drop on selected port(s)

ML1200(port-security)##show port-security port=3

PORT

STATE

SIGNAL

ACTION

LEARN

COUNT

MAC ADDRESS

----

-----

------

------

-----

-----

-----------

3

ENABLE

NONE

DROP

ENABLE

0

00:c1:00:7f:ec:00

ML1200(port-security)## signal port=3 logandtrap

Port security Signal type set to Log and Trap on selected port(s)

ML1200(port-security)## exit

ML1200#

6–8

MULTILINK ML1200 MANAGED FIELD SWITCH – INSTRUCTION MANUAL

Page 114
Image 114
GE ML1200 instruction manual Security Logs, Example 6-5 Configuring port security