PN 9030975
Page 1
TRXI LOCAL MANAGEMENT ADDENDUM
This addendum outlines the TRXI’s Ring Security feature and lists its RMON MIB capabilities. Use this
addendum in conjunction with the TRXI User’s Guide.
RING SECURITY SCREEN OVERVIEW
The Ring Security screen allows you to control access to your token ring network. When you enable ring security,
the TRXI stores the MAC address of each station on the token ring network in a secure database or “allowed list.”
Only stations on the allowed list can enter the ring. The TRXI can store up to 250 station MAC addresses on the
allowed list. The TRXI retains the allowed list in its battery-backed Non-Volatile Random Access Memory
(NVRAM). When you power up or reset the TRXI, all MAC addresses will be retained and ring security is
re-enabled automatically.
You can append the allowed list by temporarily disabling ring security, then re-enabling it using the Alarms Only
feature. The TRXI acts as the Ring Security Monitor for the ring and provides security for the entire ring.
Note
: You should enable only one TRXI per ring for Ring Security.
You can select two modes of ring security; Alarm Only and Alarm/Remove. In the Alarm Only mode, new stations
can enter the ring, but a “station added” trap/alarm notifies the Network Management Station (NMS) of the
event. The trap/alarm includes the new station’s MAC address so that the network manager can decide if the new
station should be allowed on the ring.
The Alarm/Remove mode sends a “Remove MAC Frame Command” to new stations attempting to enter the ring,
and a trap/alarm to the NMS informing it of the action taken. If, after three attempts, the station cannot be
removed from the ring, a trap/alarm is sent to the NMS informing it that “the station could not be removed.”
RING SECURITY SCREEN DEFINITIONS
The following section provides a brief explanation of each field and command on the Ring Security screen.
Station Address
This field lists the MAC address of each station on the ring security allowed list. This field can lists up to 250
MAC addresses on 22 local management screens.
Stn Edit
The Station Edit command lets you add or delete stations from the allowed list. Use the Stn Edit command for
single entry edits to the allowed list.
Security Mode
This command lets you set the Security Mode for the ring. You can select the following Security Modes:
•
Disabled
- This is the factory default setting. Use this option to temporarily disable ring security so that
new stations can enter the ring.
•
Alarm Only
- In this mode, new stations can enter the ring, but a “station added” trap/alarm is sent to the
Network Management Station. The “station added” trap message includes the new station’s MAC address
so that the network manager can decide if the new station should be allowed on the ring.