|
|
Description:
|
hpSecPtLearnMode OBJECT-TYPE
SYNTAX INTEGER {
learnContinuous(1),
learnFirstN(2),
learnFirstNConditionally(3),
configureSpecific(4),
learn8021xAuthorized(5),
learnLimitedContinuous(6)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object identifies the learning mode of the port.
The modes are as follows:
LearnContinuous. The port can learn all new MAC
addresses. When a new address is learned,
it is stored in a manner such that it can
be retrieved from the hpSecureAuthAddrTable.
Changing the mode to this value clears any
existing addresses for this port in the
hpSecureAuthAddrTable.
learnFirstN. First N source MAC addresses heard
on this port become the authorized addresses.
N is configured in hpSecPtAddressLimit.
Setting this value initiates learning of up
to N new authorized addresses. When a new
authorized address is learned, it will be
stored in the hpSecureAuthAddrTable. When
the table has reached its limit N for this
port, any new source MAC addresses received
on the port constitutes an intrusion. See
hpSecPtAlarmEnable for possible responses
to the intrusion. This variable will return
learnFirstNConditionally to a GET operation
after it has been set to this value.
learnFirstNConditionally. This option will
initiate learning of up to N new authorized
addresses only if the previous hpSecPtLearnMode
was not set to learnFirstN or learnFirstN-
Conditionally. N is configured in
hpSecPtAddressLimit.
configureSpecific. The port will not learn any
addresses. Rather, specific authorized
MAC addresses for this port are explicitly
configured via the hpSecureCfgAddrTable.
These addresses are also stored in the
hpSecureAuthAddrTable. Any source MAC
address received on this port other than
those configured, constitutes an intrusion.
See hpSecPtAlarmEnable for possible responses.
learn8021xAuthorized. The port will learn only MAC
address of a client authorized by 802.1X
authenticator.
learnLimitedContinuous. First N source MAC addresses
heard on this port become the authorized addresses.
N is specified by the hpSecPtAddressLimit
object. When a new authorized address is learned, it
will be stored in the hpSecureAuthAddrTable. When
the table has reached its limit N for this port, any
new source MAC addresses received on the port
constitutes an intrusion. See hpSecPtAlarmEnable
for possible responses. The authorized addresses in
this mode will age out of the system, therefore the
list of authorized addresses can be dynamic over
time."
|
|
|
|
