SNR S2989G-24TX-UPS — настройка функций безопасности в сетевых устройствах [325/553]

Превью страниц Страница 325 / 553

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-52

PC1 PC2 PC30

Figure 6-19 a typical configuration example of AM function

In the topology above, 30 PCs, after converged by HUB1, connect with interface1 on

the switch. The IP addresses of these 30 PCs range from 100.10.10.1 to 100.10.10.30.

Considering security, the system manager will only take user with an IP address within

that range as legal ones. And the switch will only forward data packets from legal users

while dumping packets from other users.

According to the requirements mentioned above, the switch can be configured as

follows:

Switch(config)#am enable

Switch(config)#interface ethernet1/0/1

Switch(Config-If-Ethernet 1/0/1)#am port

Switch(Config-If-Ethernet 1/0/1)#am ip-pool 10.10.10.1 10

6.4.4

AM Function Troubleshooting

AM function is disabled by default, and after it is enabled, relative configuration of AM

can be made.

Users can view the current AM configuration with “show am” command, such as

whether the AM is enabled or not, and AM information on each interface, they can also

use “show am [interface <interface-name>]” command to check the AM configuration

information on a specific interface.

If any operational error happens, the system will display detailed corresponding

prompt.

Internet

SWITCH

Port1

Port2

HUB1

HUB2

………