Cabletron Systems Spectrum EMM-E6 User Manual

Also see for SPECTRUM: User guide User guide User guide User guide User guide

Contents

Cabletron Systems Spectrum EMM-E6 User Manual Manual pdf 80 page image

Source Addressing6-6Locking Source AddressesIn addition to activating the security measures as configured via the Securityapplication, locking source addresses has the following effects:• On devices running older versions of firmware, unlinked ports will bedisabled immediately after locking has been enabled; these ports can be re-enabled using their port menus, but they will immediately be disabled againif a device is connected and begins transmitting (since the port’s sourceaddress table was locked in an empty state). On devices with newer firmware,unlinked ports are not automatically disabled in response to port locking, butthey, too, will be immediately disabled if a device is connected and attempts totransmit packets.• Although the Source Aging Interval does not apply to station ports whenSource Address Locking is enabled, the snapshot of the SAT provided by theSource Address List window may show a learned source address aging out ifthat address remains inactive, and the appropriate trap will be generated.• Once Source Address Locking has been enabled, each port’s topology status(station or trunk) remains fixed and will not change while locking remainsenabled, regardless of any changes in the number of source addressesdetected.• If Source Address Locking has been enabled, and one or more ports have beenshut down because a new source address attempted access, those ports willremain disabled even after the EMM-E6 has been reset, and must be re-enabledmanually.Source Address Locking on Older DevicesIf your EMM-E6 is running a firmware version previous to 2.00.16, SourceAddress Locking is implemented somewhat differently:• Station ports are defined as those detecting zero or one source address; trunkports as those detecting two or more.• If a locked station port experiences a violation, the port will be automaticallydisabled and no traffic will be allowed through — not even traffic from theknown source address.• Trunk ports are never locked.• Unlinked ports are immediately disabled.• The Source Aging Interval does not apply to locked station ports.NOTERemember, you must have SuperUser (SU) access to the device in order to lock or unlockports.