Port Security - Hirschmann Power MICE Reference Manual

Security

3.4 Port Security

In this dialog you can specify for each port from which terminal devices data
can be received and sent to other ports. This function protects the network
from unauthorized access.
First select whether you want MAC-based or IP-based port security.
If you have selected MAC-based security, you enter the MAC addresses
of the devices with which a data exchange at this port is permitted in the
"Allowed Mac Address" column. You can enter up to 10 MAC addresses,
separated by a space character. If no entry is made, all devices can re-
ceive data.
The "Current MAC Address" column shows the MAC address of the de-
vice from which data was last received. By pressing the left mouse button,
you can copy an entry from the "Current MAC Address" column into the
"Allowed MAC Address" column.
If you have selected IP-based security, you enter the IP addresses of the
devices with which a data exchange at this port is permitted in the "Al-
lowed IP Address" column. You can enter up to 10 IP addresses, sepa-
rated by a space character. If no entry is made, all devices can receive
data.
In the "Action" column you select whether an unauthorized access bid
should be followed by
no action (none) or
the sending of an alarm (trap) (trapOnly) or
the disabling of the port by the corresponding entry in the port config-
uration table
alarm (trap) (portDisable).
The "Port Status" column indicates the status of the port.
Display "enabled": this port is switched on and transmitting.
Display "disabled": this port is switched off and not transmitting.
The port is switched on if
an authorized address accesses the port
or
"trapOnly" or "none" are selected under "Action" and an unauthorized ad-
dress attempts to access the port.
48
(see on page 31 „Load/Save")
3.4 Port Security
and the sending of an
RM Web L3P
Release 4.1 03/08