Using the BayStack 450 10/100/1000 Series Switch
1-20 309978-D Rev 01
MAC Address-Based Security
The MAC address-based security feature allows you to set up network access
control, based on source MAC addresses of authorized stations.
You can:
• Create a list of up to 448 MAC addresses and specify which addresses are
authorized to connect to your switch or stack configuration. The 448 MAC
addresses can be configured within a single standalone switch or they can be
distributed in any order among the units in a single stack configuration.
• Specify which of your switch ports each MAC address is allowed to access.
The options for allowed port access include: NONE, ALL, and single or
multiple ports that are specified in a list, for example, 1/1-4,1/6,2/9 (see
“Port
List Syntax” on page 3-35).
• Specify optional actions your switch can take if the software detects a security
violation.
The switch can send a trap, turn on destination address (DA) filtering, disable
the specific port, or use any combination of these three options.
For instructions on using the console interface (CI) to set up MAC address-based
network access control, see
“MAC Address-Based Security” on page 3-24.
See also Appendix E, “Quick Steps to Features,” for configuration flowcharts that
can help you use this feature.
The MAC address-based security feature is based on Nortel Networks
BaySecure
™
LAN Access for Ethernet, a real-time security system that safeguards
Ethernet networks from unauthorized surveillance and intrusion.
To learn more about Nortel Networks BaySecure LAN Access for Ethernet, refer
to the Bay Networks Guide to Implementing BaySecure LAN Access for Ethernet
(Part number 345-1106A).
Note: You cannot configure a port for MAC Address-based security if the port
is currently configured for EAPOL-based security.
To Next Page
Loading...
Need help?
General