Intruder Log - HP J2415A Installation And Reference Manual

Installing and Using HP Stack Manager
Send Alarm
Any port may be configured to send an alarm (trap notification) to the
network management station when an unauthorized MAC address or
training capabilities violation is detected on the secured port. The
functionality of the Send Alarm feature depends on whether you have an
HP 100VG SNMP/Bridge Module installed in any 100VG hub in your
management chain.
Without an HP 100VG SNMP/Bridge Module Installed
If you do not have an HP 100VG SNMP/Bridge Module installed in the stack
of chained hubs, traps will not be received by a network management station.
With an HP 100VG SNMP/Bridge Module Installed
If an HP J2414B 100VG/ET SNMP/Bridge Module is installed in the stack of
chained hubs, you can specify an authorized managers list that specifies the
network addresses of the SNMP management stations authorized to manage
the hub and whether they should receive SNMP event alarms. You must
authorize at least one network management station to receive the trap
notifications by entering the IP or IPX address of the network management
station in the authorized managers list. Use the Authorized Managers
command from the hub's console to configure these addresses.
This module will forward traps for all unmanaged hubs (e.g., Hub-14,
Hub-7M, or Hub-15.)

Intruder Log

You should check this screen periodically for security violations.
This command displays information on stations that try to access the hub
illegally. This screen displays the stations MAC addresses, the type of illegal
access such as invalid training, or invalid address, and the time the violation
occurred. The time of the violation is relative to the current PC date and
time. Selecting an entry for a given port and pressing "Clear Alarm" will
allow the hub to detect future security violations.
2-14