Procurve Port Security

Aus xinux.net
Zur Navigation springen Zur Suche springen

Port Security anschalten

  • configure terminal
  • port-security 24 learn-mode static
  • end

Port Security anzeigen

  • show port-security 24
 Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 1 
  Action [None] : None                    

  Authorized Addresses
  --------------------
  60eb69-962da5       

Adress Limit erhöhen

  • configure terminal
  • port-security 24 address-limit 3
  • end

Port Security anzeigen

 Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 3 
  Action [None] : None                    

  Authorized Addresses
  --------------------
  00040d-0b2015       
  60eb69-962da5       
 

Action konfigurieren

  • configure terminal
  • port-security 24 action send-disable
  • end

Port Security anzeigen

Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 3 
  Action [None] : Send Alarm, Disable Port

  Authorized Addresses
  --------------------
  00040d-0b2015       
  60eb69-962da5      

Mac Adresse Manuell eintragen

  • configure terminal
  • port-security 24 mac-address 001060-8a2bee
  • end

Port Security anzeigen

 Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 3 
  Action [None] : Send Alarm, Disable Port

  Authorized Addresses
  --------------------
  00040d-0b2015       
  001060-8a2bee       
  60eb69-962da5  

Portsecurity neu setzen (configured)

  • configure terminal
  • no port-security 24
  • port-security 24 learn-mode configured address-limit 1 action send-disable mac-address 60eb69962da5
  • end

Port Security anzeigen

Port Security

  Port : 24     
  Learn Mode [Continuous] : Configured          Address Limit [1] : 1 
  Action [None] : Send Alarm, Disable Port

  Authorized Addresses
  --------------------
  60eb69-962da5    

Nach Anschluss einer nicht zugelassenen Macaddresse

  • show interfaces brief 24
 Status and Counters - Port Status

                    | Intrusion                           MDI   Flow  Bcast 
  Port    Type      | Alert     Enabled Status Mode       Mode  Ctrl  Limit 
  ------- --------- + --------- ------- ------ ---------- ----- ----- ------
  24      24        | No        Yes     Down   1000FDx    MDI   off   0 

Wieder aktivieren

  • configure terminal
  • interface 24 enable
  • end

Links