SMC Networks 10/100/1000 SMCGS8P-Smart Manual De Usuario
C
ONFIGURING
THE
S
WITCH
2-44
CLI – Use the interface command to select the target port, then use
the port monitor command to specify the source port. Note that
default mirroring under the CLI is for both received and
transmitted packets.
the port monitor command to specify the source port. Note that
default mirroring under the CLI is for both received and
transmitted packets.
Configuring Port Security
Port security is a feature that allows you to configure a switch port
with one or more device MAC addresses that are authorized to
access the network through that port.
with one or more device MAC addresses that are authorized to
access the network through that port.
When port security is enabled on a port, the switch stops learning
new MAC addresses on the specified port. Only incoming traffic
with source addresses already stored in the dynamic or static
address table will be accepted as authorized to access the network
through that port. If a device with an unauthorized MAC address
attempts to use the switch port, the intrusion will be detected and
the switch can automatically take action by disabling the port and
sending a trap message.
new MAC addresses on the specified port. Only incoming traffic
with source addresses already stored in the dynamic or static
address table will be accepted as authorized to access the network
through that port. If a device with an unauthorized MAC address
attempts to use the switch port, the intrusion will be detected and
the switch can automatically take action by disabling the port and
sending a trap message.
To use port security, first allow the switch to dynamically learn the
<source MAC address, VLAN> pair for frames received on a port
for an initial period, and then enable port security to stop address
learning. Be sure you enable the learning function long enough to
ensure that all valid VLAN members have been registered on the
selected port.
<source MAC address, VLAN> pair for frames received on a port
for an initial period, and then enable port security to stop address
learning. Be sure you enable the learning function long enough to
ensure that all valid VLAN members have been registered on the
selected port.
Note that a secure port has the following restrictions:
•
It should not be connected to a network interconnection
device.
device.
•
It cannot be configured as a member of a static trunk.
Console(config)#interface ethernet 1/10
Console(config-if)#port monitor ethernet 1/11
Console(config-if)#
b_mgmt.book Page 44 Tuesday, July 8, 2003 5:24 PM