Intrusion Protection (Model 3612); Changing The Status Of A Port - Compaq Netelligent 2524 User Manual

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Intrusion Protection (Model 3612)

The 3612 repeater's firmware supports intrusion protection, which provides a
method of preventing unauthorized access to the network. Intrusion protection
allows any SNMP manager to configure one MAC address per port and to
enable or disable intrusion protection on a per port basis.
Do not set intrusion protection on an uplink port that receives multiple MAC
addresses. Otherwise, the repeater partitions the port.
Follow these steps to enable intrusion protection for a port:
1. Using an SNMP MIB browser, set the authorized MAC address in the
mdcIntrusionPortMACAddress or mdcIntrusionPortMACAddressStr
MIB variable.
2. Set the mdcIntrusionPortStatus MIB variable to enable(2).
Once you configure intrusion for a port, the repeater's firmware monitors the
port for intruders. If the port detects an unauthorized MAC address, the repeater
partitions the port, sets mdcIntrusionPortStatus variable to tripped(3), and
generates a Novell Health State trap in the trap table.
To restore the port after it detects an intruder, use an SNMP manager to set the
rptrBasPortAdminState MIB variable (located in the Novell MIB) to enable(2).

Changing the Status of a Port

The SNMP manager lets you change the intrusion status of a port via the
mdcIntrusionPortStatus MIB variable. To do so, follow these steps:
1. Verify that the mdcSecurityStatus MIB variable is set to disable(1).
2. Set the mdcIntrusionPortStatus MIB variable to disable(1) or enable(2).
NOTE: If the SNMP manager tries to change the settings of mdcIntrusionPortStatus
when mdcSecurityStatus is set to enable(2), a PDU error occurs. See "Security" in
the next section for more information about the mdcSecurityStatus settings.
Netelligent 2524/2624 and 3512/3612 100Base-T Repeater User Guide
4-25