SNR S2989G-24TX-POE — настройка и устранение неполадок LLDP-MED и безопасности портов [111/553]

Превью страниц Страница 111 / 553

2-47

S2989G-24TX Operation Manual Chapter 2 Layer 2 services

Configuration

MDE information on Ethernet2 of switch A.

2) LLDP-MED device is able to send LLDP packets with MED TLV forwardly, so the

corresponding Remote table with LLDP MED information on Ethernet1 of switch A.

2.10.4

LLDP-MED Troubleshooting

If problems occur when configuring LLDP-MED, please check whether the problem is

caused by the following reasons:

 Check whether the global LLDP is enabled.

 Only network connection device received LLDP packets with LLDP-MED TLV

from the near MED device, it sends LLDP-MED TLV. If network connection device

configured the command for sending LLDP-MED TLV, the packets also without

LLDP-MED TLV sent by the port, that means no MED information is received and

the port does not enable the function for sending LLDP-MED information.

 If neighbor device has sent LLDP-MED information to network connection device,

but there is no LLDP-MED information by checking show lldp neighbors

command, that means LLDP-MED information sent by neighbor is error.

2.11

PORT SECURITY

2.11.1

Introduction to PORT SECURITY

Port security is a MAC address-based security mechanism for network access

controlling. It is an extension to the existing 802.1x authentication and MAC authentication.

It controls the access of unauthorized devices to the network by checking the source MAC

address of the received frame and the access to unauthorized devices by checking the

destination MAC address of the sent frame. With port security, you can define various port

security modes to make that a device learns only legal source MAC addresses, so as to

implement corresponding network security management. After port security is enabled,

the device detects an illegal frame, it triggers the corresponding port security feature and

takes a pre-defined action automatically. This reduces user’s maintenance workload and

greatly enhances system security.

2.11.2

PORT SECURITY Configuration Task List

1. Basic configuration for PORT SECURITY