HP ProCurve 6400cl Series Access Security Guide

Configuring and Monitoring Port Security
Port Security
Blocking Unauthorized Traffic
Unless you configure the switch to disable a port on which a security violation
is detected, the switch security measures block unauthorized traffic without
disabling the port. This implementation enables you to apply the security
configuration to ports on which hubs, switches, or other devices are
connected, and to maintain security while also maintaining network access to
authorized users. For example:
Switch A
Switch B
i
i
Switch C
NOT
Switch A
Port Security
i
PC 1
Logi l
i
• i
•
• i
Port Security
Configured
MAC Address
Author zed by
Switch A
PC 1
MAC Address
Authorized by Switch A
PC 2
MAC Address NOT
Authorized by Switch A
PC 3
MAC Address NOT
Author zed by Switch A
MAC Address
Authorized
by Switch A
Configured
Switch B
MAC Address
Author zed by
Switch A
MAC Address
Authorized by Switch A
cal Topo ogy for Access to Switch A
Phys cal Topology
PC1 can access Sw tch A.
PCs 2 and 3 can access Switch B and Switch C, but are
blocked from accessing switch A by the port security
settings in switch A.
Switch C is not author zed to access Switch A.
Figure 11-1. Example of How Port Security Controls Access
Not e Broadcast and Multicast traffic is always allowed, and can be read by intruders
connected to a port on which you have configured port security.
Trunk Group Exclusion
Port security does not operate on either a static or dynamic trunk group. If
you configure port security on one or more ports that are later added to a trunk
group, the switch will reset the port security parameters for those ports to the
factory-default configuration. (Ports configured for either Active or Passive
LACP, and which are not members of a trunk, can be configured for port
security.)
11-6

HP ProCurve 6400cl Series Specifications

General

Brand	HP
Model	ProCurve 6400cl Series
Category	Switch
Language	English