Nortel 10BASE-T Using Manual page 44

Using the BayStack 410-24T 10BASE-T Switch
In this configuration example, the following security measures are implemented:
• The switch
-- MAC address-based security is used to allow up to 448 authorized stations
-- RADIUS-based security is used to limit administrative access through user
-- SNMP-based security is used to limit administrative access through
-- The switch is located in a locked closet, accessible only by authorized
• Student dormitory
Dormitory rooms are typically occupied by two students and have been
prewired with two RJ-45 jacks. Only students who are authorized (as
specified by the MAC address-based security feature) can access the switch
on the secured ports.
• Teachers' offices and classrooms
The PCs that are located in the teachers' offices and in the classrooms are
assigned MAC address-based security that is specific for each classroom and
office location. The security feature logically locks each wall jack to the
specified station and prevents unauthorized access to the switch should
someone attempt to connect a personal laptop PC into the wall jack. The
printer is assigned as a single station and is allowed full bandwidth on that
switch port.
It is assumed that all PCs are password protected and that the classrooms and
offices are physically secured.
• Library
The wall jacks in the library are set up so that the PCs can be connected to any
wall jack in the room. This allows the PCs to be moved anywhere in the room.
The exception is the printer, which is assigned as a single station with full
bandwidth to that port.
It is assumed that all PCs are password protected and that access to the library
is physically secured.
1-14
(MAC addresses) access to one or more switch ports
(see "MAC Address-Based
authentication (see "RADIUS-Based Network
selective IP filtering (see
on page 3-111).
Technical Services personnel.
Security" on page
"TELNET/SNMP Manager List
1-15).
Security" on page 1-16).
Configuration"
309985-C Rev 00