Security - GE T1000 Technical Manual

Chapter 8 – Monitoring
3

Security

REASON SWITCHES-TM-EN-3
This section describes the online basic security monitoring possibilities in Reason
Switches, such as Access Management Statistics, Network, AAA (Authentication,
Authorization and Accounting) and RMON.
If desired to update Reason Switches web screen automatically, check the Auto
Refresh checkbox on top to perform it. If selected, monitoring web page will be
updated after 3 seconds of the last update automatically.

Access Management Statistics:
Access Management Statistics option allows user to view basic information about
data traffic (received, allowed and discarded packets) divided in interface protocols
(HTTP, HTTPS, TELNET and SSH). Besides, this menu also provides information about
SNMP traffic (received, allowed and discarded SNMP packets).

Network:
Network option presents information regarding the network where switch is
connected.
Port Security: provides information about the port security status.
o
Port security is a module that does not have a specific direct
configuration; as it is a set of configuration done at the switch.
Information shown in this menu includes port status (users, state
and MAC addresses) and detailed port information (MAC address at
a given port, VLAN ID, time since a given MAC entered in the MAC
table and so on);
NAS: if NAS server is available and in use, NAS menu brings
o
information about such as admin and port states and detailed port
description.
ACL Status: When using Access Control List (ACL), this menus
o
present information about the ACL User, Access Control Entry (ACE)
identifier, Frame type, Action, Rate Limiter, CPU, Counter and
Conflict at a given ACL;
ARP inspection: provides information about the Dynamic ARP
o
Inspection Table. Shown values are port number, VLAN ID, MAC
Address and IP Address of a given port number participating of the
ARP inspection function;
IP Source Guard: provides information about the IP Source Guard
o
Table, such as port number, VLAN ID, IP Address and MAC Address
of a given port number participating of the IP Source Guard
function.
GE Reason Switches
241