Ethernet SNMP Module Installation and Reference Guide ( J2603B) 1995-10

Security Configuration Parameter Definitions
The following security parameters are configurable on each of the hub’s
network ports. These parameters are defined on the next two pages:
Address selection method, or authorized station address
Send alarm when intruder detected
Eavesdrop prevention
An additional parameter, “Disable port when intruder detected”, is set
automatically by your selection of the address selection method. See “Auto
Port Disable” in appendix C for information on this parameter.
Address selection method, or authorized station address: This is the
method by which the hub automatically learns the address of the device that
is authorized to use the port, or you can enter a specific address. The
following methods are configurable:
Learn Continuously—provides minimum port security. The hub
learns the address of the first device attached to the port and makes it
the authorized station address. If a different device is later attached to
the port, the new address is learned and becomes the authorized
address. Each new device attached becomes the authorized device. You
can be informed of any such changes by setting the Send Alarm
parameter to YES. In that case, when a new address is detected, the
Security and port LEDs flash, the intruder’s station address is displayed
on the console Status command screen, and an alarm is sent to the
authorized network management station(s).
Use the First Address Heard—provides medium port security.
The hub learns the address of the first device attached to the port
and makes it the authorized station address. If you have any security
configured for the port (Send Alarm and/or Eavesdrop Prevention
parameters are set to YES), when a different device is later attached
to the port, the new address is registered as an “intruder address”; a
security violation has occurred. In that case, the port is
automatically disabled, and the Security and affected port LEDs
flash. An alarm is also sent to the authorized network management
station(s) if the Send Alarm parameter is set to YES.
Assign an Address—provides the highest security. You enter the
address of the device that is authorized to be attached to the port. If
you have any security configured for the port (Send Alarm and/or
Eavesdrop Prevention parameters are set to YES), when a different
device is later attached to the port, the new address is registered as
an “intruder address”; a security violation has occurred. In that case,
the port is automatically disabled, and the Security and port LEDs
Extended Hub
Capabilities
Extended Hub Capabilities
2-22