3Com Switch 4800G 24-Port

To Next Page

To Previous Page

840 CHAPTER 62: ACL OVERVIEW

IPv6 ACL Step Refer to “IPv4 ACL Step” on page 837.

Effective Period of an

IPv6 ACL

Refer to “Effective Period of an IPv4 ACL” on page 838.

Main Page

Default Chapter1
- Default Chapter1
  - Configuration Guide1
  - Table of Contents3
- Bout this Guide21
  - Conventions21
  - Related Documentation21
- Product23
- Networking23
  - Preface23
Logging I Ethernet Switch27
- N to an27
- Logging in to an Ethernet Switch27
- Introduction to the User Interface27
Logging I N T Hrough the31
- Introduction31
- Setting up the Connection to the Console Port31
- Console Port Login Configuration33
- Console Port Login Configuration with Authentication Mode Being None35
- Console Port Login Configuration with Authentication Mode Being Password38
- Console Port Login Configuration with Authentication Mode Being Scheme41
Logging I Nthrough Telnet47
- Introduction47
- Telnet Configuration with Authentication Mode Being None49
- Telnet Configuration with Authentication Mode Being Password52
- Telnet Configuration with Authentication Mode Being Scheme54
- Telnet Connection Establishment59
Ogging in Using Modem63
- Introduction63
- Configuration on the Administrator Side63
- Configuration on the Switch Side63
- Modem Connection Establishment64
- Logging in67
- Logging in through Nms71
- CONFIGURING SOURCE IP ADDRESS for TELNET SERVICE PACKETS Overview73
  - Displaying the Source IP Address/Interface Specified for Telnet Packets74
- Controlling Login Sers75
- Vlan C83
Voice Vlan Configuration99
- Introduction to Voice VLAN99
- Configuring Voice VLAN101
- Displaying and Maintaining Voice VLAN103
- Voice VLAN Configuration Examples103
Gvrp Configuration109
- Introduction to GVRP109
- GVRP Configuration Task List112
- Configuring GVRP112
- Displaying and Maintaining GVRP114
- GVRP Configuration Examples114
Ip Addressing121
- IP Addressing Overview121
- Configuring IP Addresses123
- Displaying and Maintaining IP Addressing126
Ip Performance127
- IP Performance Overview127
- Enabling Reception and Forwarding of Directed Broadcasts to a Directly Connected Network127
- Configuring TCP Attributes129
- Configuring ICMP to Send Error Packets130
- Displaying and Maintaining IP Performance132
Qin133
- Introduction to Qinq133
- Configuring Basic Qinq135
- Configuring Selective Qinq136
- Configuring the TPID Value to be Carried in VLAN Tags137
- Qinq Configuration Example137
Bpdu Tunneling141
- Introduction to BPDU Tunneling141
- Configuring BPDU Isolation142
- Configuring BPDU Transparent Transmission143
- Configuring Destination Multicast MAC Address for BPDU Tunnel Frames144
- BPDU Tunneling Configuration Example144
- Network Diagram145
Port147
- Ethernet Port Configuration147
- Maintaining and Displaying an Ethernet Port156
Port157
- Introduction to Port Isolation157
- Configuring an Isolation Group157
- Displaying Isolation Groups158
- Port Isolation Configuration Example158
Link Aggregation Overview161
- Link Aggregation161
- Approaches to Link Aggregation162
- Load Sharing in a Link Aggregation Group165
- Service Loop Group165
- Aggregation Port Group166
Link167
- Configuring Link Aggregation167
- Displaying and Maintaining Link Aggregation169
- Link Aggregation Configuration Example170
Mac Address Table Management Configuration173
- Introduction to MAC Address Table173
- Configuring MAC Address Table Management174
- Displaying and Maintaining MAC Address Table Management176
- MAC Address Table Management Configuration Example176
Ip Source177
- IP Source Guard Overview177
- Configuring a Static Binding Entry177
- Configuring Dynamic Binding Function178
- Displaying IP Source Guard178
- IP Source Guard Configuration Examples178
- Troubleshooting182
- Overview183
22 Dldp C Onfiguration190
- DLDP Configuration Task List190
- Displaying and Maintaining DLDP193
- DLDP Configuration Example193
- Troubleshooting195
23 Mstp C Onfiguration197
- MSTP Overview197
- Configuration Task List212
- Configuring the Root Bridge213
- Configuring Leaf Nodes224
- Performing Mcheck228
- Configuring Digest Snooping229
- Configuring no Agreement Check230
- Configuring Protection Functions233
- Displaying and Maintaining MSTP235
- MSTP Configuration Example236
Ip Routing Overview241
- IP Routing and Routing Table241
- Routing Protocol Overview243
- Displaying and Maintaining a Routing Table246
Gr Overview247
- Introduction to Graceful Restart247
- Basic Concepts in Graceful Restart247
- Graceful Restart Communication Procedure248
- Graceful Restart Mechanism for Several Commonly Used Protocols250
Static251
- Introduction251
- Configuring a Static Route252
- Detecting Reachability of the Static Route's Nexthop253
- Displaying and Maintaining Static Routes254
- Configuration Example254
27 Rip Configuration257
- RIP Overview257
- Configuring RIP Basic Functions261
- Configuring RIP Route Control263
- Configuring RIP Network Optimization266
- Displaying and Maintaining RIP269
- RIP Configuration Examples269
- Troubleshooting RIP271
28 Ospf Configuration273
- Introduction to OSPF273
- OSPF Configuration Task List292
- Configuring OSPF Basic Functions293
- Configuring OSPF Area Parameters294
- Configuring OSPF Network Types295
- Configuring OSPF Route Control297
- Configuring OSPF Network Optimization300
- Configuring OSPF Graceful Restart306
- Displaying and Maintaining OSPF309
- OSPF Configuration Examples309
  - Verify the Configuration311
  - Network Requirements322
- Troubleshooting OSPF Configuration323
29 Is-Is Configuration325
- IS-IS Overview325
- IS-IS Configuration Task List340
- Configuring IS-IS Basic Functions341
- Configuring IS-IS Routing Information Control342
- Tuning and Optimizing IS-IS Network346
- Configuring IS-IS GR352
- Displaying and Maintaining IS-IS353
- IS-IS Configuration Example354
30 Bgp Configuration365
- BGP Overview365
- BGP Configuration Task List380
- Configuring BGP Basic Functions381
- Controlling Route Distribution and Reception383
- Configuring BGP Route Attributes386
- Tuning and Optimizing BGP Networks388
- Configuring a Large Scale BGP Network390
- Configuring BGP GR392
- Displaying and Maintaining BGP394
- BGP Configuration Examples395
- Bgp Community Configuration403
- Troubleshooting BGP413
Routing415
- Introduction to Routing Policy415
- Routing Policy Configuration Task List417
- Defining Filtering Lists417
- Configuring a Routing Policy419
- Displaying and Maintaining the Routing Policy422
- Routing Policy Configuration Example422
- Troubleshooting Routing Policy Configuration425
Ip V 6 Static427
- Introduction to Ipv6 Static Routing427
- Configuring an Ipv6 Static Route427
- Displaying and Maintaining Ipv6 Static Routes428
- Ipv6 Static Routing Configuration Example428
Ip V 6 Rip Ng431
- Introduction to Ripng431
- Configuring Ripng Basic Functions433
- Configuring Ripng Route Control434
- Tuning and Optimizing the Ripng Network436
- Displaying and Maintaining Ripng438
- Ripng Configuration Example438
Ipv 6 Ospf443
- Introduction to Ospfv3443
- Ipv6 Ospfv3 Configuration Task List445
- Configuring Ospfv3 Basic Functions446
- Configuring Ospfv3 Area Parameters446
- Configuring Ospfv3 Routing Information Management447
- Tuning and Optimizing an Ospfv3 Network450
- Displaying and Maintaining Ospfv3452
- Ospfv3 Configuration Examples453
  - Troubleshooting Ospfv3 Configuration459
Ipv461
- Introduction to Ipv6 IS-IS461
- Configuring Ipv6 IS-IS Basic Functions461
- Configuring Ipv6 IS-IS Routing Information Control462
- Displaying and Maintaining Ipv6 IS-IS463
- Ipv6 IS-IS Configuration Example464
Ipv467
- Ipv6 BGP Overview467
- Configuration Task List468
- Configuring Ipv6 BGP Basic Functions469
- Controlling Route Distribution and Reception471
- Configuring Ipv6 BGP Route Attributes474
- Tuning and Optimizing Ipv6 BGP Networks476
- Configuring a Large Scale Ipv6 BGP Network478
- Displaying and Maintaining Ipv6 BGP Configuration482
- Ipv6 BGP Configuration Examples483
- Troubleshooting Ipv6 BGP Configuration486
Routing489
- Introduction to Routing Policy489
- Defining Filtering Lists490
- Configuring a Routing Policy492
- Displaying and Maintaining the Routing Policy495
- Routing Policy Configuration Example495
- Troubleshooting Routing Policy Configuration497
Ip V 6 Basics499
- Ipv6 Overview499
- Ipv6 Basics Configuration Task List508
- Configuring Basic Ipv6 Functions508
- Configuring Ipv6 NDP510
- Configuring PMTU Discovery513
- Configuring Ipv6 TCP Properties514
- Configuring Icmpv6 Packet Sending514
- Configuring Ipv6 DNS515
- Displaying and Maintaining Ipv6 Basics Configuration516
- Ipv6 Configuration Example517
- Troubleshooting Ipv6 Basics Configuration520
Dual521
- Dual Stack Overview521
- Configuring Dual Stack521
Tunneling523
- Introduction to Tunneling523
- Tunneling Configuration Task List526
- Configuring Ipv6 Manual Tunnel526
- Configuring 6To4 Tunnel530
- Configuring ISATAP Tunnel535
- Displaying and Maintaining Tunneling Configuration538
- Troubleshooting Tunneling Configuration538
Multicast Overview541
- Introduction to Multicast541
- Multicast Models544
- Multicast Architecture545
- Multicast Packet Forwarding Mechanism550
Igmp Snooping553
- IGMP Snooping Overview553
- IGMP Snooping Configuration Task List558
- Configuring Basic Functions of IGMP Snooping559
- Configuring IGMP Snooping Port Functions560
- Configuring IGMP Snooping Querier563
- Configuring an IGMP Snooping Policy565
- Displaying and Maintaining IGMP Snooping569
- IGMP Snooping Configuration Examples570
- Troubleshooting IGMP Snooping Configuration577
43 Mld Snoopingconfiguration579
- MLD Snooping Overview579
- MLD Snooping Configuration Task List583
- Configuring Basic Functions of MLD Snooping584
- Configuring MLD Snooping Port Functions585
- Configuring MLD Snooping Querier589
- Configuring an MLD Snooping Policy591
- Displaying and Maintaining MLD Snooping595
- MLD Snooping Configuration Examples596
- Troubleshooting MLD Snooping602
44 Multicastvlan Configuration605
- Introduction to Multicast VLAN605
- Configuring Multicast VLAN605
- Displaying and Maintaining Multicast VLAN606
- Multicast VLAN Configuration Example606
  - Configuring Ipv6 Multicast VLAN609
  - Introduction to Ipv6 Multicast VLAN609
Ipv6 Multicast VLAN Configuration Examples610
- Displaying and Maintaining Ipv6 Multicast VLAN610
Igmp C613
- IGMP Overview613
- IGMP Configuration Task List617
- Configuring Basic Functions of IGMP618
- Adjusting IGMP Performance620
- Displaying and Maintaining IGMP623
- IGMP Configuration Example624
- Troubleshooting IGMP626
47 Pim Configuration629
- PIM Overview629
- Configuring PIM-DM641
- Configuring PIM-SM643
- Configuring PIM-SSM652
- Configuring PIM Common Information653
- Displaying and Maintaining PIM658
- PIM Configuration Examples659
- Troubleshooting PIM Configuration669
Msdp C673
- MSDP Overview673
- MSDP Configuration Task List679
- Configuring Basic Functions of MSDP679
- Configuring an MSDP Peer Connection680
- Configuring SA Messages Related Parameters682
- Displaying and Maintaining MSDP685
- MSDP Configuration Examples685
- Troubleshooting MSDP697
Multicast Routing and Forwarding Configuration701
- Multicast Routing and Forwarding Overview701
- Configuration Task List705
- Configuring Multicast Routing and Forwarding706
- Displaying and Maintaining Multicast Routing and Forwarding709
- Configuration Examples709
- Troubleshooting Multicast Routing and Forwarding713
- Configuration713
50 802.1X Configuration715
- 802.1X Overview715
- Configuring 802.1X726
- Configuring a Guest VLAN728
- Displaying and Maintaining 802.1X729
- X Configuration Example729
- Configuration Example731
- Guest VLAN Configuration Example732
- ACL Assignment Configuration Example735
Habp C737
- Introduction to HABP737
- Configuring HABP737
- Displaying and Maintaining HABP738
Mac Authentication Configuration739
- MAC Authentication Overview739
- Related Concepts740
- Configuring MAC Authentication741
- Displaying and Maintaining MAC Authentication742
- MAC Authentication Configuration Examples742
Aaa/Radius/Hwtacacs Configuration747
- AAA/RADIUS/HWTACACS Overview747
- AAA/RADIUS/HWTACACS Configuration Task List756
- Configuring AAA758
- Configuring RADIUS765
- Configuring HWTACACS771
- Displaying and Maintaining AAA/RADIUS/HWTACACS775
- AAA/RADIUS/HWTACACS Configuration Examples776
- Troubleshooting AAA/RADIUS/HWTACACS779
54 Arp Configuration781
- ARP Overview781
- Configuring ARP783
- Configuring Gratuitous ARP785
- Displaying and Maintaining ARP786
55 Proxy Arp Configuration787
- Proxy ARP Overview787
- Enabling Proxy ARP787
- Displaying and Maintaining Proxy ARP787
- Proxy ARP Configuration Examples788
Dhcp Overview791
- Introduction to DHCP791
- DHCP Address Allocation792
- DHCP Message Format793
- DHCP Options794
  - Protocols and Standards796
Dhcp Server797
- Introduction to DHCP Server797
- DHCP Server Configuration Task List799
- Enabling DHCP799
- Enabling the DHCP Server on an Interface799
- Configuring an Address Pool for the DHCP Server800
- Configuring the DHCP Server Security Functions806
- Configuring the Handling Mode for Option808
- Displaying and Maintaining the DHCP Server808
- DHCP Server Configuration Examples809
- Troubleshooting DHCP Server Configuration811
Dhcp Relay813
- Introduction to DHCP Relay Agent813
- Configuration Task List815
- Configuring the DHCP Relay Agent815
- Displaying and Maintaining DHCP Relay Agent Configuration819
- DHCP Relay Agent Configuration Example820
- Troubleshooting DHCP Relay Agent Configuration821
59 Dhcp C Lientconfiguration823
- Introduction to DHCP Client823
- Enabling the DHCP Client on an Interface823
- Displaying and Maintaining the DHCP Client824
- DHCP Client Configuration Example824
Dhcp Snooping825
- DHCP Snooping Overview825
- Configuring DHCP Snooping Basic Functions828
- Configuring DHCP Snooping to Support Option828
- Displaying and Maintaining DHCP Snooping829
- DHCP Snooping Configuration Example829
Bootp Client831
- Introduction to BOOTP Client831
- Configuring an Interface to Dynamically Obtain an IP Address through BOOTP832
- Displaying and Maintaining BOOTP Client Configuration832
- BOOTP Client Configuration Example832
Acl Overview835
- Introduction to ACL835
- Introduction to Ipv4 ACL836
- Introduction to Ipv6 ACL838
Ipv841
- Creating a Time Range841
- Configuring a Basic Ipv4 ACL842
- Configuring an Advanced Ipv4 ACL844
- Configuring an Ethernet Frame Header ACL845
- Copying an Ipv4 ACL846
- Displaying and Maintaining Ipv4 Acls847
- Ipv4 ACL Configuration Example847
Ipv851
- Creating a Time Range851
- Configuring a Basic Ipv6 ACL851
- Configuring an Advanced Ipv6 ACL852
- Copying an Ipv6 ACL854
- Displaying and Maintaining Ipv6 Acls854
- Ipv6 ACL Configuration Example854
65 Qos Overview857
- Introduction857
- Traditional Packet Forwarding Service857
- New Requirements Brought Forth by New Services857
- Occurrence and Influence of Congestion and the Countermeasures858
- Major Traffic Management Techniques859
Traffic Classification , Tp, and Lr Configuration861
- Traffic Classification Overview861
- TP and LR Overview864
- Traffic Evaluation and Token Bucket864
- LR Configuration866
- Displaying and Maintaining LR867
67 Qos Policy Configuration869
- Overview869
- Configuring Qos Policy870
- Introduction to Qos Policies870
- Configuring a Qos Policy870
- Displaying and Maintaining Qos Policy876
Congestion Management877
- Overview877
- Congestion Management Policy877
- Configuring an SP Queue879
69 Priority Mapping883
- Priority Mapping Overview883
- Configuring a Priority Mapping Table884
- Configuring the Port Priority885
- Configuring Port Priority Trust Mode886
- Displaying and Maintaining Priority Mapping887
70 Applying a Qos Policy to Vlans889
- Olicy to Vlan889
- Overview889
- Applying a Qos Policy to Vlans889
- Displaying and Maintaining Qos Policies Applied to Vlans890
- Configuration Examples890
Traffic891
- Overview891
- Configuring Traffic Mirroring891
- Displaying and Maintaining Traffic Mirroring892
- Traffic Mirroring Configuration Examples892
Port895
- Introduction to Port Mirroring895
- Configuring Local Port Mirroring897
- Configuring Remote Port Mirroring898
- Displaying and Maintaining Port Mirroring899
- Port Mirroring Configuration Examples900
Cluster Management Configuration905
- Cluster Management Overview905
- Cluster Configuration Task List911
- Configuring the Management Device912
- Configuring the Member Devices917
- Configuring Access between the Management Device and Its Member Devices918
- Adding a Candidate Device to a Cluster919
- Configuring Advanced Cluster Functions919
- Displaying and Maintaining Cluster Management922
- Cluster Management Configuration Examples922
74 Udp Helper Configuration927
- Introduction to UDP Helper927
- Configuring UDP Helper927
- Displaying and Maintaining UDP Helper928
- UDP Helper Configuration Example928
Snmp Configuration931
- SNMP Overview931
- SNMP Configuration933
- Configuring SNMP Logging935
- Trap Configuration936
- Displaying and Maintaining SNMP937
- SNMP Configuration Example938
- SNMP Logging Configuration Example939
Rmon C941
- RMON Overview941
- Configuring RMON943
- Displaying and Maintaining RMON944
- RMON Configuration Example945
77 Ntp Configuration947
- NTP Overview947
- NTP Configuration Task List953
- Configuring the Operation Modes of NTP953
- Configuring Optional Parameters of NTP956
- Configuring Access-Control Rights957
- Configuring NTP Authentication958
- Displaying and Maintaining NTP960
- NTP Configuration Examples960
78 Dns Configuration971
- DNS Overview971
- Configuring the DNS Client973
- Configuring the DNS Proxy974
- Displaying and Maintaining DNS974
- DNS Configuration Examples975
- Troubleshooting DNS Configuration980
File981
- File System Management981
- Configuration File Management985
- Displaying and Maintaining Device Configuration989
80 Ftp Configuration991
- FTP Overview991
- Configuring the FTP Client992
  - Configuring the FTP Server996
  - Displaying and Maintaining FTP999
81 Tftp Configuration1001
- TFTP Overview1001
- Configuring the TFTP Client1002
- Displaying and Maintaining the TFTP Client1003
- TFTP Client Configuration Example1003
Information1005
- Information Center Overview1005
- Configuring Information Center1009
- Displaying and Maintaining Information Center1015
- Information Center Configuration Examples1015
83 Basic Configurations1021
- Basic Configurations1021
- CLI Features1027
System Aintaining and1033
- System Maintaining and Debugging Overview1033
- System Maintaining and Debugging1035
- System Maintaining Example1036
Device Management1039
- Device Management Overview1039
- Configuring Device Management1039
- Displaying and Maintaining Device Management Configuration1043
- Device Management Configuration Example1043
86 Nqa Configuration1047
- NQA Overview1047
- NQA Configuration Task List1050
- Configuring the NQA Server1050
- Enabling the NQA Client1051
- Creating an NQA Test Group1051
- Configuring an NQA Test Group1051
- Configuring the Collaboration Function1061
- Configuring Trap Delivery1061
- Configuring Optional Parameters Common to an NQA Test Group1062
- Scheduling an NQA Test Group1063
- Displaying and Maintaining NQA1064
- NQA Configuration Examples1064
87 Vrrp C Onfiguration1073
- Introduction to VRRP1073
- Configuring VRRP for Ipv41081
- Configuring VRRP for Ipv61084
- Ipv4-Based VRRP Configuration Examples1088
- Ipv6-Based VRRP Configuration Examples1096
- Troubleshooting VRRP1105
88 Ssh Configuration1107
- SSH2.0 Overview1107
- Configuring the Device as an SSH Server1110
- Configuring the Device as an SSH Client1115
- Displaying and Maintaining SSH1118
- SSH Server Configuration Examples1119
- SSH Client Configuration Examples1125
89 Sftp Service1131
- SFTP Overview1131
- Configuring an SFTP Server1131
- Configuring an SFTP Client1132
- SFTP Configuration Example1135
90 Rrpp C Onfiguration1139
- RRPP Overview1139
- RRPP Configuration Task List1146
- Configuring Master Node1147
- Configuring Transit Node1148
- Configuring Edge Node1149
- Configuring Assistant Edge Node1151
- Displaying and Maintaining RRPP1152
- RRPP Typical Configuration Examples1152
Port1161
- Introduction to Port Security1161
- Port Security Configuration Task List1164
- Enabling Port Security1164
- Setting the Maximum Number of Secure MAC Addresses1165
- Setting the Port Security Mode1165
- Configuring Port Security Features1167
- Configuring Secure MAC Addresses1168
- Ignoring the Authorization Information from the Server1168
- Displaying and Maintaining Port Security1169
- Port Security Configuration Examples1169
- Troubleshooting Port Security1178
92 Lldp Configuration1181
- Introduction to LLDP1181
- LLDP Configuration Tasks List1184
- Performing Basic LLDP Configuration1184
- Configuring LLDP Trap1188
- Displaying and Maintaining LLDP1188
- LLDP Configuration Example1189
93 Poe Configuration1193
- Poe Overview1193
- Poe Configuration Task List1194
- Configuring the Poe Interface1194
- Configuring PD Power Management1196
- Configuring a Power Alarm Threshold for the PSE1197
- Upgrading PSE Processing Software Online1197
- Configuring a PD Disconnection Detection Mode1198
- Enabling the PSE to Detect Nonstandard Pds1198
- Displaying and Maintaining Poe1199
- Poe Configuration Example1199
- Troubleshooting Poe1200
94 Sflowconfiguration1203
- Sflow Overview1203
- Configuring Sflow1204
- Displaying Sflow1204
- Sflow Configuration Example1204
- Troubleshooting Sflow Configuration1206
95 Ssl Configuration1207
- SSL Overview1207
- SSL Configuration Task List1208
- Configuring an SSL Server Policy1208
- Configuring an SSL Client Policy1210
- Displaying and Maintaining SSL1211
- Troubleshooting SSL1211
HTTPS Configuration Task List1213
- HTTPS Overview1213
- Associating the HTTPS Service with an SSL Server Policy1214
- Enabling the HTTPS Service1214
- Associating the HTTPS Service with a Certificate Attribute Access Control Policy1215
- Associating the HTTPS Service with an ACL1215
- Displaying and Maintaining HTTPS1215
- HTTPS Configuration Example1215
97 Pki Configuration1219
- Introduction to PKI1219
- PKI Configuration Task List1222
- Configuring an Entity DN1222
- Configuring a PKI Domain1223
- Submitting a PKI Certificate Request1225
- Retrieving a Certificate Manually1226
- Configuring PKI Certificate Validation1227
- Destroying a Local RSA Key Pair1228
- Deleting a Certificate1229
- Configuring an Access Control Policy1229
- Displaying and Maintaining PKI1229
- PKI Configuration Examples1230
- Troubleshooting PKI1235
Track1237
- Track Overview1237
- Configuring Collaboration between the Track Module and the Detection1237
- Track Configuration Task List1238
- Modules1238
- Modules1239
- Configuring Collaboration between the Track Module and the Application Modules1239
- Displaying and Maintaining Track Object(S)1241
- Track Configuration Example1241

3Com Switch 4800G 24-Port - Page 840

Table of Contents

Related product manuals