Nortel Networks 10BASE-T manual MAC Address Security Configuration Screen Fields, SNMP-Locked

Models: 10BASE-T

1 330
Download 330 pages 13.91 Kb
Page 169
Image 169

Using the Console Interface

Table 3-8. MAC Address Security Configuration Screen Fields

Field

Description

 

 

 

MAC Address Security

When set to Enabled, the software checks source MAC addresses of packets

 

that arrive on secure ports against MAC addresses listed in the MAC Address

 

Security Table for allowed membership (see “MAC Address Security Port

 

Configuration” on page 3-28). If the software detects any source MAC address

 

that is not an allowed member, a MAC intrusion event is registered.

 

Default

Disabled

 

Range

Disabled, Enabled

MAC Address Security

When this field is set to Enabled, the MAC Address Security screens cannot

SNMP-Locked

be modified using SNMP.

 

Default

Disabled

 

Range

Disabled, Enabled

Partition Port on Intrusion This field value determines how the switch reacts to an intrusion event. When an intrusion event is detected (see MAC Address Security field description) the specified port is set to Disabled (partitioned from other switch ports).

 

When this field is set to:

 

• Disabled -- the port remains Enabled even if an intrusion event is detected.

 

• Enabled -- the port becomes Disabled, then automatically resets to

 

Enabled depending on the value set in the Partition Time field (see

 

Partition Time Field description).

 

• Forever -- the port becomes Disabled, and remains Disabled (partitioned).

 

The Partition Time field cannot be used to automatically reset the port to

 

Enabled if you set this field to Forever.

 

You can always manually set the port’s status field to Enabled using the Port

 

Configuration screen.

 

Default

Disabled

 

Range

Disabled, Forever, Enabled

Partition Time

This field appears only if the Partition Port on Intrusion field is set to Enabled

 

(see Partition Port on Intrusion Detected field). This field value determines the

 

length of time a partitioned port remains Disabled. This field is not operational

 

when the Partition Port on Intrusion field is set to Forever.

 

Default

1 second

 

Range

0-65536 seconds (the value 0 indicates forever)

 

 

(continued)

 

 

 

309985-C Rev 00

 

3-27

Page 169
Image 169
Nortel Networks 10BASE-T manual MAC Address Security Configuration Screen Fields, Field Description MAC Address Security