General Concepts - 3Com CoreBuilder 7000 Operation Manual

162 C 7: LAN E
HAPTER

General Concepts

V 1.0
MULATION ERSIONS AND


Security check — You can run a security check on an individual LEC to
if it is authorized for an ELAN.


LMA — The security feature is completely managed by the LMA.


Statistics — You can display the number of attempted LEC
connections that were rejected by the security mechanism.


Default privileges — You can set default join privileges for individual
ELANs.
Security Table
Each ELAN can have a security table of ATM addresses of LECs and their
join privileges. The table entries can be full ATM addresses of individual
LECs or they can be network prefixes corresponding to a group of LECs in
a network section.
Each LEC address in the ELAN security table has a join privilege parameter
which can take one of two values:


ACCEPT – this LEC or all LECs coming from this network section can
join the ELAN.


REJECT – this LEC or all LECs coming from this network section cannot
join the ELAN.
ELAN Default Join Privilege
Each ELAN has a default join privilege, which is applicable in case neither
the ATM address of a candidate LEC nor its network prefix appears in the
security table of the ELAN. If the default join privilege is ACCEPT, such a
LEC will be allowed to join the ELAN; if the default join privilege is
REJECT, the LEC will not be allowed to join. You set the default join
privilege for an ELAN by the LMA.
Switch Security Enable/Disable
The security mechanism can be enabled and disabled on the entire
switch. If the security is disabled on the switch, security checks are not
performed and any LECs can join any ELAN. If the security is enabled,
then security checks are performed for each ELAN, as described
previously.
Security Check—Performed in LES
Whenever a LEC requests to join an ELAN, the LES performs the security
check for the candidate LEC during the Join phase. If the LEC does not
2.0