HP PROCURVE W.14.03 Instrukcja Użytkownika Pobierz pdf (Strona 538)

100

101

Configuring and Monitoring Port Security

MAC Lockdown

The following command serves this purpose by removing 0c0090-123456 and

reducing the Address Limit to 1:

ProCurve(config)# port-security a1 address-limit 1

ProCurve(config)# no port-security a1 mac-address 0c0090-

123456

The above command sequence results in the following configuration for port

A1:

Figure 13-9. Example of Port A1 After Removing One MAC Address

MAC Lockdown

MAC Lockdown, also known as “static addressing,” is the permanent assign-

ment of a given MAC address (and VLAN, or Virtual Local Area Network) to

a specific port on the switch. MAC Lockdown is used to prevent station

movement and MAC address hijacking. It also controls address learning on

the switch. When configured, the MAC Address can only be used on the

assigned port and the client device will only be allowed on the assigned VLAN.

Note Port security and MAC Lockdown are mutually exclusive on a given port. You

can either use port security or MAC Lockdown, but never both at the same

time on the same port.

Syntax: [no] static-mac < mac-addr > vlan < vid > interface < port-number >

13-22

1 2 ... 533 534 535 536 537 538 539 540 541 542 543 ... 593 594

Komentarze do niniejszej Instrukcji

Brak uwag

HP PROCURVE W.14.03 Instrukcja Użytkownika Strona 538

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Oprogramowanie HP PROCURVE W.14.03