Enterasys-networks D-Series Manual de usuario Pagina 520

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 540
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 519
set maclock firstarrival
17-58 Security Configuration
Mode
Switchcommand,readwrite.
Example
ThisexampleshowshowtoresetthenumberofallowablestaticMACsonfe.2.3:
D2(rw)->clear maclock static fe.2.3
set maclock firstarrival
UsethiscommandtorestrictMAClockingonaporttoamaximumnumberofendstation
addressesfirstconnectedtothatport.
Syntax
set maclock firstarrival port-string value
Parameters
Defaults
None.
Mode
Switchcommand,readwrite.
Usage
Themaclockfirstarrivalcountresetswhenthelinkgoesdown.Thisfeatureisbeneficialifyou
haveroamingusers—thefirstarrivalcount willbereseteverytimeausermovestoanotherport,
butwillstillprotectagainstconnectingmultipledevicesonasingleportand willprotectagainst
MAC
addressspoofing.
Example
ThisexampleshowshowtorestrictMAClockingto6MACaddressesonfe.2.3:
D2(su)->set maclock firstarrival fe.2.3 6
portstring SpecifiestheportonwhichtolimitMAClocking.Foradetailed
descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed
intheCLIonpage 61.
value Specif iesthenumberoffirstarrivalendstationMACaddressestobe
allowedconnectionstotheport.Valid
valuesare0to600.
Note: Setting a port’s first arrival limit to 0 does not deny the first MAC address learned on the port
from passing traffic.
Vista de pagina 519
1 2 ... 515 516 517 518 519 520 521 522 523 524 525 ... 539 540

Comentarios a estos manuales

Sin comentarios