Enterasys-networks D-Series Manual do Utilizador Página 520

  • Descarregar
  • Adicionar aos meus manuais
  • Imprimir
  • Página
    / 540
  • Índice
  • MARCADORES
  • Avaliado. / 5. Com base em avaliações de clientes
Vista de página 519
set maclock firstarrival
17-58 Security Configuration
Mode
Switchcommand,readwrite.
Example
ThisexampleshowshowtoresetthenumberofallowablestaticMACsonfe.2.3:
D2(rw)->clear maclock static fe.2.3
set maclock firstarrival
UsethiscommandtorestrictMAClockingonaporttoamaximumnumberofendstation
addressesfirstconnectedtothatport.
Syntax
set maclock firstarrival port-string value
Parameters
Defaults
None.
Mode
Switchcommand,readwrite.
Usage
Themaclockfirstarrivalcountresetswhenthelinkgoesdown.Thisfeatureisbeneficialifyou
haveroamingusers—thefirstarrivalcount willbereseteverytimeausermovestoanotherport,
butwillstillprotectagainstconnectingmultipledevicesonasingleportand willprotectagainst
MAC
addressspoofing.
Example
ThisexampleshowshowtorestrictMAClockingto6MACaddressesonfe.2.3:
D2(su)->set maclock firstarrival fe.2.3 6
portstring SpecifiestheportonwhichtolimitMAClocking.Foradetailed
descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed
intheCLIonpage 61.
value Specif iesthenumberoffirstarrivalendstationMACaddressestobe
allowedconnectionstotheport.Valid
valuesare0to600.
Note: Setting a port’s first arrival limit to 0 does not deny the first MAC address learned on the port
from passing traffic.
Vista de página 519
1 2 ... 515 516 517 518 519 520 521 522 523 524 525 ... 539 540

Comentários a estes Manuais

Sem comentários