Справочник Пользователя для Enterasys Networks E1 Series
Security Configuration Command Set
Configuring MAC Locking
14-43
14.3.4 Configuring MAC Locking
Purpose
To review, disable, enable and configure MAC locking. This locks a port to one or more MAC
addresses, preventing connection of unauthorized devices via the port(s). When source MAC
addresses are received on specified ports, the switch discards all subsequent frames not containing
the configured source addresses. The only frames forwarded on a “locked” port are those with the
“locked” MAC address(es) for that port.
addresses, preventing connection of unauthorized devices via the port(s). When source MAC
addresses are received on specified ports, the switch discards all subsequent frames not containing
the configured source addresses. The only frames forwarded on a “locked” port are those with the
“locked” MAC address(es) for that port.
Commands
The commands needed to configure MAC locking are listed below and described in the associated
section as shown:
section as shown:
•
show maclock (
•
show maclock stations (
•
set maclock enable (
•
set maclock disable (
)
•
set maclock (
)
•
set maclock firstarrival (
)
•
set maclock static (
•
set maclock move (
)
•
clear maclock static (
•
show maclock autostatic (
)
•
set maclock autostatic (
•
set maclock autostatic isl (
)
•
set maclock autostatic publicvlan (
•
set maclock autostatic publicmac (
)
•
set maclock autostatic passthroughmac (
)
NOTE: The Matrix E1 MAC locking commands have no direct interdependencies with
the MAC authentication commands described in
the MAC authentication commands described in
. When a frame arrives
at a port, the Matrix E1 device runs the MAC locking algorithm first. If the frame passes
the MAC lock (i.e., it is not in violation), then the frame is eligible for authentication.
the MAC lock (i.e., it is not in violation), then the frame is eligible for authentication.