HP 6125G Command Reference Manual page 134

Field
RALM logfailure trap
AutoLearn aging time
Disableport Timeout
OUI value
Port mode
NeedToKnow mode
Intrusion mode
Max MAC address number
Stored MAC address
number
Authorization
Security MAC address
learning mode
Description
Whether trapping for MAC authentication failure is enabled or not. If it is
enabled, the port sends trap information when a user fails MAC address
authentication.
Secure MAC aging timer. The timer applies to sticky or dynamic secure MAC
addresses.
Silence timeout period of the port that receives illegal packets, in seconds.
List of OUI values allowed
Port security mode:
•
noRestrictions
•
autoLearn
•
macAddressWithRadius
•
macAddressElseUserLoginSecure
•
macAddressElseUserLoginSecureExt
•
secure
•
userLogin
•
userLoginSecure
•
userLoginSecureExt
•
macAddressOrUserLoginSecure
•
macAddressOrUserLoginSecureExt
•
userLoginWithOUI
Need to know (NTK) mode:
•
NeedToKnowOnly—Allows only unicast packets with authenticated
destination MAC addresses.
•
NeedToKnowWithBroadcast—Allows only unicast packets and broadcasts
with authenticated destination MAC addresses.
•
NeedToKnowWithMulticast—Allows unicast packets, multicasts and
broadcasts with authenticated destination MAC addresses.
Intrusion protection action mode:
•
BlockMacAddress—Adds the source MAC address of the illegal packet to
the blocked MAC address list.
•
DisablePort—Shuts down the port that receives illegal packets permanently.
•
DisablePortTemporarily—Shuts down the port that receives illegal packets
for some time.
•
NoAction—Performs no intrusion protection.
Maximum number of MAC addresses that port security allows on the port.
Number of MAC addresses stored
Whether the authorization information from the server is ignored or not:
•
permitted—Authorization information from the RADIUS server takes effect.
•
ignored—Authorization information from the RADIUS server does not take
effect.
Secure MAC address learning mode:
•
sticky—Learns MAC addresses as sticky secure MAC addresses.
•
dynamic—Learns MAC addresses as dynamic secure MAC addresses.
125