Asante Technologies 35160 - Manual (Page 42)

42
If you enable duplicated IP detection, the switch starts monitoring the broadcast Address Resolution
Protocol (ARP) traffic from all of its ports, to detect duplicated IP address conditions. When duplicate IP
addresses are used on the system, the MAC addresses of both stations and the ports they accessed are
logged.
If you enable both duplicated IP detection and duplicated IP trap, the designated trap receiver gets an alert
each time a duplicated IP address is used on the system. In order to send duplicated IP traps, duplicated IP
detection must be enabled.
By default, duplicated IP detection and trapping are enabled.
Enabling and Disabling Duplicated IP Detection
To enable or disable detection of duplicated IP addresses:
1. From the Configuration Menu, type t to access the Security Management Menu.
2. Type
d to toggle duplicated IP detection.
Enabling and Disabling Duplicated IP Trap
To enable the sending of a trap when a duplicated IP is detected, you must first enable duplicated IP
detection. See the previous subsection, “Enabling and Disabling Duplicated IP Detection.”
To enable or disable the sending of a trap when a duplicated IP is detected:
1. From the Configuration Menu, type t to access the Security Management Menu.
2. Type
i to toggle duplicated IP trap.
Viewing a List of Duplicated IP Addresses
To view a list of duplicated IP addresses that have been detected at the switch:
1. From the Configuration Menu, type t to access the Security Management Menu.
2. Type
l to display the duplicated IP list. A screen appears, similar to the following screen.
+---------------+-----------------+--+-----------------+--+
| IP Address | Owner MAC | P| Spoofer MAC | P|
+---------------+-----------------+--+-----------------+--+
xxx.xxx.xxx.xxx 00:00:94:CC:C5:36 1 00:00:94:CC:C7:37 17
xxx.xxx.xxx.xxx 00:00:94:CC:C5:36 1 00:00:94:CC:C7:37 17
xxx.xxx.xxx.xxx 00:00:94:CC:C5:36 1 00:00:94:CC:C7:37 17
End of Summary, Quit
4.3.2 Enabling and Disabling Station Movement Trap
The station movement trap security measure ensures that when any end station is moved from one switch
port to another, an alert is sent to the designated trap receiver. Station movement is detected when a
station’s MAC address (already learned by the switch) appears on a different switch port. The station
movement trap includes the station’s MAC address and IP address (if available) and the switch’s port
numbers.
By default, station movement trap is disabled.
To enable or disable detection of the movement of a station on the switch:
1. From the Configuration Menu, type t to access the Security Management Menu.
2. Type
s to toggle the station movement trap.