Procurve Port Security: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 80: Zeile 80:
 
   24      24        | No        Yes    Down  1000FDx    MDI  off  0  
 
   24      24        | No        Yes    Down  1000FDx    MDI  off  0  
 
</pre>
 
</pre>
=Portsecurity neu setzen=
+
=Portsecurity neu setzen (configured)=
 
*configure terminal
 
*configure terminal
 
*no port-security 24  
 
*no port-security 24  
 
*port-security 24 learn-mode configured address-limit 1 action send-disable mac-address 60eb69962da5
 
*port-security 24 learn-mode configured address-limit 1 action send-disable mac-address 60eb69962da5
 
*end
 
*end
 
+
=Port Security anzeigen=
 
<pre>
 
<pre>
 
Port Security
 
Port Security
Zeile 97: Zeile 97:
 
   60eb69-962da5     
 
   60eb69-962da5     
 
</pre>
 
</pre>
 +
 
=Links=
 
=Links=
 
*http://whp-hou9.cold.extweb.hp.com/pub/networking/software/Security-Oct2005-59906024-Chap09-Port_Security.pdf
 
*http://whp-hou9.cold.extweb.hp.com/pub/networking/software/Security-Oct2005-59906024-Chap09-Port_Security.pdf

Version vom 13. April 2016, 11:05 Uhr

Port Security anschalten

  • configure terminal
  • port-security 24 learn-mode static
  • end

Port Security anzeigen

  • show port-security 24
 Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 1 
  Action [None] : None                    

  Authorized Addresses
  --------------------
  60eb69-962da5       

Adress Limit erhöhen

  • configure terminal
  • port-security 24 address-limit 3
  • end

Port Security anzeigen

 Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 3 
  Action [None] : None                    

  Authorized Addresses
  --------------------
  00040d-0b2015       
  60eb69-962da5       
 

Action konfigurieren

  • configure terminal
  • port-security 24 action send-disable
  • end

Port Security anzeigen

Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 3 
  Action [None] : Send Alarm, Disable Port

  Authorized Addresses
  --------------------
  00040d-0b2015       
  60eb69-962da5      

Mac Adresse Manuell eintragen

  • configure terminal
  • port-security 24 mac-address 001060-8a2bee
  • end

Port Security anzeigen

 Port Security

  Port : 24     
  Learn Mode [Continuous] : Static              Address Limit [1] : 3 
  Action [None] : Send Alarm, Disable Port

  Authorized Addresses
  --------------------
  00040d-0b2015       
  001060-8a2bee       
  60eb69-962da5  

Nach Anschluss der 4 Macaddresse

  • show interfaces brief 24
 Status and Counters - Port Status

                    | Intrusion                           MDI   Flow  Bcast 
  Port    Type      | Alert     Enabled Status Mode       Mode  Ctrl  Limit 
  ------- --------- + --------- ------- ------ ---------- ----- ----- ------
  24      24        | No        Yes     Down   1000FDx    MDI   off   0 

Portsecurity neu setzen (configured)

  • configure terminal
  • no port-security 24
  • port-security 24 learn-mode configured address-limit 1 action send-disable mac-address 60eb69962da5
  • end

Port Security anzeigen

Port Security

  Port : 24     
  Learn Mode [Continuous] : Configured          Address Limit [1] : 1 
  Action [None] : Send Alarm, Disable Port

  Authorized Addresses
  --------------------
  60eb69-962da5    

Links