GE ML1200 instruction manual Security Logs, Example 6-5 Configuring port security

ACCESS CONSIDERATIONS CHAPTER 6: ACCESS CONSIDERATIONS

Example 6-5 illustrates these steps for setting up port security on a specific port:

Once port security is setup, it is important to manage the log and review the log often. If the signals are sent to the trap receiver, the traps should also be reviewed for intrusion and other infractions.

6.2.3Security Logs

All events occurring on the MultiLink ML1200 Managed Field Switch are logged. The events can be informational (e.g. login, STP synchronization etc.), debugging logs (for debugging network and other values), critical (critical events), activity (traffic activity) and fatal events

Example 6-5: Configuring port security

ML1200# port-security

ML1200(port-security)## ps enable

Port Security is already enabled

ML1200(port-security)## learn port=3 enable

Port Learning Enabled on selected port(s)

ML1200(port-security)## show port-security

PORT	STATE	SIGNAL	ACTION	LEARN	COUNT	MAC ADDRESS
----	-----	------	------	-----	-----	-----------
1	ENABLE	LOG	NONE	ENABLE	6	00:e0:29:2a:f1:bd
						00:01:03:e2:27:89
						00:07:50:ef:31:40
						00:e0:29:22:15:85
						00:03:47:ca:ac:45
						00:30:48:70:71:23
2	ENABLE	NONE	NONE	DISABLE	0	Not Configured
3	ENABLE	NONE	NONE	ENABLE	0	00:c1:00:7f:ec:00
4	ENABLE	NONE	NONE	DISABLE	0	Not Configured
5	ENABLE	NONE	NONE	DISABLE	0	Not Configured
6	ENABLE	NONE	NONE	DISABLE	0	Not Configured

ML1200(port-security)## save

Saving current configuration

Configuration saved

ML1200(port-security)## learn port=3 disable

Port Learning Disabled on selected port(s)

ML1200(port-security)## action port=3 drop

Port security Action type set to Drop on selected port(s)

ML1200(port-security)##show port-security port=3

PORT	STATE	SIGNAL	ACTION	LEARN	COUNT	MAC ADDRESS
----	-----	------	------	-----	-----	-----------
3	ENABLE	NONE	DROP	ENABLE	0	00:c1:00:7f:ec:00

ML1200(port-security)## signal port=3 logandtrap

Port security Signal type set to Log and Trap on selected port(s)

ML1200(port-security)## exit

ML1200#

6–8 MULTILINK ML1200 MANAGED FIELD SWITCH – INSTRUCTION MANUAL