Procurve Port Security: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 81: Zeile 81:
 
=Portsecurity neu setzen=
 
=Portsecurity neu setzen=
 
*configure terminal
 
*configure terminal
*port-security 24 learn-mode static address-limit 1 action send-disable mac-address 60eb69962da5
+
*port-security 24 learn-mode configured address-limit 1 action send-disable mac-address 60eb69962da5
 
*end
 
*end
 
*http://whp-hou9.cold.extweb.hp.com/pub/networking/software/Security-Oct2005-59906024-Chap09-Port_Security.pdf
 
*http://whp-hou9.cold.extweb.hp.com/pub/networking/software/Security-Oct2005-59906024-Chap09-Port_Security.pdf

Version vom 13. April 2016, 11:02 Uhr

Port Security anschalten

  • configure terminal
  • port-security 24 learn-mode static
  • end

Port Security anzeigen

  • show port-security 24
 Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 1 
  Action [None] : None                    

  Authorized Addresses
  --------------------
  60eb69-962da5       

Adress Limit erhöhen

  • configure terminal
  • port-security 24 address-limit 3
  • end

Port Security anzeigen

 Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 3 
  Action [None] : None                    

  Authorized Addresses
  --------------------
  00040d-0b2015       
  60eb69-962da5       
 

Action konfigurieren

  • configure terminal
  • port-security 24 action send-disable
  • end

Port Security anzeigen

Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 3 
  Action [None] : Send Alarm, Disable Port

  Authorized Addresses
  --------------------
  00040d-0b2015       
  60eb69-962da5      

Mac Adresse Manuell eintragen

  • configure terminal
  • port-security 24 mac-address 001060-8a2bee
  • end

Port Security anzeigen

 Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 3 
  Action [None] : Send Alarm, Disable Port

  Authorized Addresses
  --------------------
  00040d-0b2015       
  001060-8a2bee       
  60eb69-962da5  

Nach Anschluss der 4 Macaddresse

  • show interfaces brief 24
 Status and Counters - Port Status

                    | Intrusion                           MDI   Flow  Bcast 
  Port    Type      | Alert     Enabled Status Mode       Mode  Ctrl  Limit 
  ------- --------- + --------- ------- ------ ---------- ----- ----- ------
  24      24        | No        Yes     Down   1000FDx    MDI   off   0 

Portsecurity neu setzen