HP Networking TopTool Products manual Configuring Port Security-Planning

Setting Up Security for a Device

Switch Port Security

• Automatically sends notice of an attempted security violation to the switch's Intrusion Log and to the Alert Log in the switch's web browser interface.

• Sends an SNMP trap notifying of an attempted security violation to a

	network management station. For more information on configuring
	the switch for SNMP management, see the Management and Config-
	uration Guide you received with the switch.
	■ Prevent Eavesdropping: Block outbound traffic with unknown destina-
	tion addresses from exiting through the port. This prevents an unautho-
	rized device on the port from eavesdropping on the flooded unicast traffic
	intended for other devices.
N o t e	The switch security measures block unauthorized traffic without disabling the
	port. This implementation enables you to apply the security configuration to
	ports on which hubs or other switches are connected, and to maintain security
	while also maintaining network access to authorized users.
	Configuring Port Security—Planning
	Plan your port security configuration and monitoring according to the
	following:
	■ On which ports do you want to configure intruder security?
	■ Which devices (MAC addresses) are authorized on each port?
	■ For each port, what security actions do you want:
	• Block intruders from transmitting to the network?
	• Prevent intruders from eavesdropping on network traffic?
	■ How do you want to learn of the security violation attempts the switch
	detects:
	• Through network management, that is, do you want an SNMP trap
	sent to a network management station when a port detects a security
	violation attempt?
	• Through the switch's web browser interface (Alert Log and Intrusion
	Log)?
	• Through the Event Log and the Intrusion Log in the switch console
	interface?
	Use the web browser interface and/or the switch console to configure port
	security. The following table describes the parameters.
	Table 14-3. Port Security Control Parameters

ParameterDescription

Port Identifies the switch port to view or configure for port security

14-12