3com 5104M-FIB 사용자 설명서
2-246
SET SECURITY_ADVANCED NETWORK SOURCE_ADDRESS_ CHECKING
SET
SECURITY_ADVANCED
NETWORK
SOURCE_ADDRESS_
CHECKING
SECURITY_ADVANCED
NETWORK
SOURCE_ADDRESS_
CHECKING
Use the SET SECURITY_ADVANCED NETWORK SOURCE_ADDRESS_CHECKING
command to enable source address checking on an Ethernet network that has a
Ethernet Private Line Card assigned to it.
command to enable source address checking on an Ethernet network that has a
Ethernet Private Line Card assigned to it.
When you enable source address checking, the source address of each packet
transmitted on a secure network is checked against an established list of valid
MAC addresses in the security address table. If the source address of the port
does not match an address in the security table, the packet is treated as an
intruder.
transmitted on a secure network is checked against an established list of valid
MAC addresses in the security address table. If the source address of the port
does not match an address in the security table, the packet is treated as an
intruder.
If you enable source address checking on your network, only ports with intruder
checking enabled are looked up in the security address table.
checking enabled are looked up in the security address table.
When you enable source port checking, the Ethernet Private Line Card enables
source address checking automatically.
source address checking automatically.
Format
Example
The following command enables source address checking on ethernet_1:
CB5000> set security_advanced network ethernet_1
source_address_checking enable
ETHERNET_1 Source Address Checking: set to ENABLED.
Related Command
SHOW SECURITY_ADVANCED
ethernet_1...8
Specifies which Ethernet network to apply this command.
isolated_1...8
Specifies which isolated network to apply this command.
enable
Enables source address checking.
disable
Disables source address checking.
set security_advanced network
enable
source_address_checking
disable
isolated_1...8
ethernet_1...8