3 security logs, Ecurity – GE MULTILINK ML1200 User Manual

Page 114

Advertising
background image

6–8

MULTILINK ML1200 MANAGED FIELD SWITCH – INSTRUCTION MANUAL

ACCESS CONSIDERATIONS

CHAPTER 6: ACCESS CONSIDERATIONS

Example 6-5 illustrates these steps for setting up port security on a specific port:

Once port security is setup, it is important to manage the log and review the log often. If
the signals are sent to the trap receiver, the traps should also be reviewed for intrusion and
other infractions.

6.2.3

Security Logs

All events occurring on the MultiLink ML1200 Managed Field Switch are logged. The events
can be informational (e.g. login, STP synchronization etc.), debugging logs (for debugging
network and other values), critical (critical events), activity (traffic activity) and fatal events

Example 6-5: Configuring port security

ML1200#

port-security

ML1200(port-security)##

ps enable

Port Security is already enabled

ML1200(port-security)##

learn port=3 enable

Port Learning Enabled on selected port(s)

ML1200(port-security)##

show port-security

PORT

STATE

SIGNAL

ACTION

LEARN

COUNT

MAC ADDRESS

----

-----

------

------

-----

-----

-----------

1

ENABLE

LOG

NONE

ENABLE

6

00:e0:29:2a:f1:bd

00:01:03:e2:27:89

00:07:50:ef:31:40

00:e0:29:22:15:85

00:03:47:ca:ac:45

00:30:48:70:71:23

2

ENABLE

NONE

NONE

DISABLE

0

Not Configured

3

ENABLE

NONE

NONE

ENABLE

0

00:c1:00:7f:ec:00

4

ENABLE

NONE

NONE

DISABLE

0

Not Configured

5

ENABLE

NONE

NONE

DISABLE

0

Not Configured

6

ENABLE

NONE

NONE

DISABLE

0

Not Configured

ML1200(port-security)##

save

Saving current configuration

Configuration saved

ML1200(port-security)##

learn port=3 disable

Port Learning Disabled on selected port(s)

ML1200(port-security)##

action port=3 drop

Port security Action type set to Drop on selected

port(s)

ML1200(port-security)##

show port-security port=3

PORT

STATE

SIGNAL

ACTION

LEARN

COUNT

MAC ADDRESS

----

-----

------

------

-----

-----

-----------

3

ENABLE

NONE

DROP

ENABLE

0

00:c1:00:7f:ec:00

ML1200(port-security)##

signal port=3 logandtrap

Port security Signal type set to Log and Trap on

selected port(s)

ML1200(port-security)##

exit

ML1200#

Advertising