HP FlexNetwork NJ5000 User Manual page 377

The page for configuring advanced port security control appears.
Figure 399 Configuring advanced port security control
Configure advanced port security control as described in
4.
Click Apply.
5.
Table 127 Configuration items
Item Description
Select a port where you want to configure port security.
Port
By default, port security is disabled on all ports, and access to the ports is not restricted.
Select a port security mode.
Security Mode
For more information about advanced security modes, see
Specify whether to enable intrusion protection, and select an action to be taken upon
detection of illegal frames.
Available actions:
•
Enable Intrusion
•
Protection
•
Specify whether to enable the outbound traffic control, and select a control method.
Available control methods:
•
Enable Outbound
•
Restriction
•
Specify whether to configure the port to ignore the authorization information from the
authentication server.
Ignore
Authorization
The authorization information is delivered by the authentication server to the device after
an 802.1X user or MAC authenticated user passes authentication.
Disable Port Temporarily—Disables the port for a period of time. The period can
be configured in the global settings. For more information, see
settings for port security."
Disable Port Permanently—Disables the port permanently upon detecting an
illegal frame received on the port. The port does not come up unless you bring it up
manually.
Block MAC—Adds the source MAC addresses of illegal frames to the blocked
MAC addresses list and discards the frames. All subsequent frames sourced from
a blocked source MAC address will be dropped. A blocked MAC address is
restored to normal state after being blocked for 3 minutes. The interval is fixed and
cannot be changed.
Only MAC-Known Unicasts—Allows only unicasts frames with their destination
MAC addresses being authenticated to pass through.
Only Broadcasts and MAC-Known Unicasts—Allows only broadcast and
unicasts packets with their destination MAC addresses being authenticated to pass
through.
Only Broadcasts, Multicasts, and MAC-Known Unicasts—Allows only
broadcast, multicast, and unicasts packets with their destination MAC addresses
being authenticated to pass through.
365
Table 127.
Table 123.
"Configuring global