Overview - HP ProCurve 2910al Access Security Manual

N o t e

Overview

Feature
Displaying Current Port Security
Configuring Port Security
Retention of Static Addresses
MAC Lockdown
MAC Lockout
Intrusion Alerts and Alert Flags
Port Security (Page 13-4). This feature enables you to configure each
switch port with a unique list of the MAC addresses of devices that are
authorized to access the network through that port. This enables individual
ports to detect, prevent, and log attempts by unauthorized devices to commu­
nicate through the switch.
This feature does not prevent intruders from receiving broadcast and multi­
cast traffic. Also, Port Security and MAC Lockdown are mutually exclusive on
a switch. If one is enabled, then the other cannot be used.
MAC Lockdown (Page 13-22). This feature, also known as "Static
Addressing", is used to prevent station movement and MAC address "hijack­
ing" by allowing a given MAC address to use only an assigned port on the
switch. MAC Lockdown also restricts the client device to a specific VLAN.
(See also the Note, above.)
MAC Lockout (Page 13-30). This feature enables you to block a specific
MAC address so that the switch drops all traffic to or from the specified
address.
Configuring and Monitoring Port Security
Default Menu CLI
n/a — page 13-8
disabled — page 13-12
n/a — page 13-17
disabled — page 13-22
disabled — page 13-30
n/a page 13-39 page 13-37

Overview

Web
page 13-33
page 13-33
n/a
page 13-40
13-3