ProCurve 6200yl User's Guide download pdf (Page 536)

100

101

14-22

Configuring and Monitoring Port Security

Port Security

Removing a Device From the “Authorized” List for a Port. This

command option removes unwanted devices (MAC addresses) from the

Authorized Addresses list. (An Authorized Address list is available for each

port for which Learn Mode is currently set to “Static”. Refer to the command

syntax listing under “Configuring Port Security” on page 14-12.)

Caution When learn mode is set to static, the Address Limit (address-limit) parameter

controls how many devices are allowed in the Authorized Addresses (mac-

address) for a given port. If you remove a MAC address from the Authorized

Addresses list without also reducing the Address Limit by 1, the port may

subsequently detect and accept as authorized a MAC address that you do not

intend to include in your Authorized Address list. Thus, if you use the CLI to

remove a device that is no longer authorized, it is recommended that you first

reduce the Address Limit (address-limit) integer by 1, as shown below. This

prevents the possibility of the same device or another unauthorized device on

the network from automatically being accepted as “authorized” for that port.

To remove a device (MAC address) from the “Authorized” list and when the

current number of devices equals the Address Limit value, you should first

reduce the Address Limit value by 1, then remove the unwanted device.

Note You can reduce the address limit below the number of currently authorized

addresses on a port. This enables you to subsequently remove a device from

the “Authorized” list without opening the possibility for an unwanted device

to automatically become authorized.

For example, suppose port A1 is configured as shown below and you want to

remove 0c0090-123456 from the Authorized Address list:

Figure 14-8. Example of Two Authorized Addresses on Port A1

When removing 0c0090-123456, first

reduce the Address Limit by 1 to prevent

the port from automatically adding

another device that it detects on the

network.

1 2 ... 531 532 533 534 535 536 537 538 539 540 541 ... 595 596

Comments to this Manuals

No comments

ProCurve 6200yl User's Guide Page 536

Comments to this Manuals

Related products and manuals for Network switches ProCurve 6200yl