General Security Measures; Table 45: General Security Commands - Motorola EX-3524 Cli Reference Manual

Layer 2 gigabit ethernet poe/poe+ switch
Hide thumbs Also See for EX-3524:
Table of Contents

Advertisement

8

General Security Measures

This switch supports many methods of segregating traffic for clients attached to
each of the data ports, and for ensuring that only authorized clients gain access to
the network. Port-based authentication using IEEE 802.1X is commonly used for
these purposes. In addition to these method, several other options of providing
client security are described in this chapter. These include port-based
authentication, which can be configured to allow network client access
by specifying a fixed set of MAC addresses. The addresses assigned to DHCP clients
can also be carefully controlled with IP Source Guard and DHCP Snooping
commands.

Table 45: General Security Commands

Command Group
*
Port Security
802.1X Port
Authentication*
Network
Access*
Web
Authentication*
Access Control
Lists*
DHCP
Snooping*
IP Source
Guard*
ARP Inspection
DoS Protection
Port-based Traffic
Segmentation
* The priority of execution for these filtering commands is Port Security, Port Authentication,
Network Access, Web Authentication, Access Control Lists, DHCP Snooping, and then IP Source
Guard.
Function
Configures secure addresses for a port
Configures host authentication on specific ports using 802.1X
Configures MAC authentication and dynamic VLAN assignment
Configures Web authentication
Provides filtering for IP frames (based on address, protocol, TCP/UDP
port number or TCP control code) or non-IP frames (based on MAC
address or Ethernet type)
Filters untrusted DHCP messages on unsecure ports by building and
maintaining a DHCP snooping binding table
Filters IP traffic on insecure ports for which the source address cannot
be identified via DHCP snooping nor static source bindings
Validates the MAC-to-IP address bindings in ARP packets
Protects against Denial-of-Service attacks
Configures traffic segmentation for different client sessions based on
specified downlink and uplink ports
– 219 –

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Ex-3548

Table of Contents