Security Logs - GE MULTILINK ML2400 Instruction Manual

ACCESS CONSIDERATIONS
6.2.2

Security Logs

6–8
Example 6-5 illustrates these steps for setting up port security on a specific port:
Once port security is setup, it is important to manage the log and review the log often. If
the signals are sent to the trap receiver, the traps should also be reviewed for intrusion and
other infractions.
All events occurring on the MultiLink family of switches are logged. The events can be
informational (e.g. login, STP synchronization etc.), debugging logs (for debugging network
and other values), critical (critical events), activity (traffic activity) and fatal events (such as
Example 6-5: Configuring port security
ML2400#
port-security
ML2400(port-security)##
Port Security is already enabled
ML2400(port-security)##
Port Learning Enabled on selected port(s)
ML2400(port-security)##
PORT STATE SIGNAL
---- ----- ------
9 ENABLE LOG
10 ENABLE NONE
11 ENABLE NONE
12 ENABLE NONE
13 ENABLE NONE
14 ENABLE NONE
15 ENABLE NONE
16 ENABLE NONE
ML2400(port-security)##
Saving current configuration
Configuration saved
ML2400(port-security)##
Port Learning Disabled on selected port(s)
ML2400(port-security)##
Port security Action type set to Drop on selected
port(s)
ML2400(port-security)##
PORT STATE SIGNAL
---- ----- ------
11 ENABLE NONE
ML2400(port-security)##
Port security Signal type set to Log and Trap on
selected port(s)
ML2400(port-security)##
ML2400#
MULTILINK ML2400 ETHERNET COMMUNICATIONS SWITCH – INSTRUCTION MANUAL
CHAPTER 6: ACCESS CONSIDERATIONS
ps enable
learn port=11 enable
show port-security
ACTION LEARN COUNT
------ ----- -----
NONE ENABLE 6
NONE DISABLE 0
NONE ENABLE 0
NONE DISABLE 0
NONE DISABLE 0
NONE DISABLE 0
NONE DISABLE 0
NONE DISABLE 0
save
learn port=11 disable
action port=11 drop
show port-security port=11
ACTION LEARN COUNT
------ ----- -----
DROP ENABLE 0
signal port=11 logandtrap
exit
MAC ADDRESS
-----------
00:e0:29:2a:f1:bd
00:01:03:e2:27:89
00:07:50:ef:31:40
00:e0:29:22:15:85
00:03:47:ca:ac:45
00:30:48:70:71:23
Not Configured
00:c1:00:7f:ec:00
Not Configured
Not Configured
Not Configured
Not Configured
Not Configured
MAC ADDRESS
-----------
00:c1:00:7f:ec:00