To Next Page

To Previous Page

1239

Chapter 75

Advanced Access Control Lists (ACLs)

This chapter describes the following topics:

 “Overview” on page 1240

 “Creating ACLs” on page 1243

 “Assigning ACLs to Ports” on page 1258

 “Removing ACLs from Ports” on page 1261

 “Restricting Remote Access” on page 1263

 “Unrestricting Remote Access” on page 1268

 “Deleting Numbered IP and MAC Address ACLs” on page 1269

 “Displaying the ACLs” on page 1270

Default Chapter5
- Table of Contents5
- Document Conventions38
- Where to Find Web-Based Guides39
- Contacting Allied Telesis40
Section I: Getting Started41
Chapter 1: Alliedware Plus Command Line Interface43
- Management Sessions44
- Management Interfaces47
- Local Manager Account48
- Alliedware Plus Command Modes49
- Figure 1: Command Modes49
- Table 2. Alliedware Plus Modes50
- Moving down the Hierarchy52
- Moving up the Hierarchy56
- Port Numbers in Commands58
- Figure 18: PORT Parameter in the Command Line Interface58
- Combo Ports 25 to 2860
- Command Format61
- Startup Messages62
- Figure 19: Startup Messages62
- Figure 20: Startup Messages (Continued)63
- Figure 21: Startup Messages (Continued)64
Chapter 2: Starting a Management Session65
- Starting a Local Management Session66
- Figure 22: Connecting the Management Cable to the Console Port66
- Figure 23: Alliedware Plus Command Line Prompt67
- Starting a Remote Telnet or SSH Management Session68
  - VTY Lines69
- What to Configure First70
- Ending a Management Session75
Chapter 3: Basic Command Line Management77
- Clearing the Screen78
- Displaying the On-Line Help79
- Figure 25: Displaying the Keywords of a Mode79
- Figure 26: Displaying Subsequent Keywords of a Keyword79
- Figure 27: Displaying the Class of a Parameter80
- Saving Your Configuration Changes81
- Ending a Management Session82
Chapter 4: Basic Command Line Management Commands83
- Table 5. Basic Command Line Commands83
Chapter 5: Temperature and Fan Control Overview101
- Overview102
- Displaying the System Environmental Status103
- Figure 28: SHOW SYSTEM ENVIRONMENT Command103
- Controlling Eco-Mode LED104
Chapter 6: Temperature and Fan Control Commands105
- Table 6. Temperature and Fan Control Commands105
Section II: Basic Operations111
Chapter 7: Basic Switch Management113
- Adding a Name to the Switch114
- Adding Contact and Location Information115
- Displaying Parameter Settings116
- Manually Setting the Date and Time117
- Pinging Network Devices118
- Resetting the Switch119
- Restoring the Default Settings to the Switch120
- Figure 31: SHOW BOOT Command120
- Setting the Baud Rate of the Console Port122
- Figure 32: SHOW BAUD-RATE Command122
- Configuring the Management Session Timers124
- Setting the Maximum Number of Manager Sessions126
- Configuring the Banners127
- Figure 33: Banner Messages127
Chapter 8: Basic Switch Management Commands131
- Banner Exec133
- Table 8. Basic Switch Management Commands134
- Banner Login135
- Banner Motd137
- Baud-Rate Set139
- Clock Set140
- Erase Startup-Config141
- Exec-Timeout142
- Help144
- Figure 34: HELP Command144
- Hostname145
- Line Console146
- Line Vty147
- No Hostname148
- Ping149
- PING Ipv6151
- Reboot152
- Reload153
- Service Maxmanager154
- Show Banner Login155
- Figure 35: SHOW BANNER LOGIN Command155
- Show Baud-Rate156
- Figure 36: SHOW BAUD-RATE Command156
- Show Clock157
- Show Running-Config158
- Show Switch159
- Figure 37: SHOW SWITCH Command159
- Table 9. SHOW SWITCH Command159
- Show System161
- Figure 38: SHOW SYSTEM Command161
- Show System Serialnumber162
- Figure 39: SHOW SYSTEM SERIALNUMBER Command162
- Show Users163
- Figure 40: SHOW USERS Command163
- Table 10. SHOW USERS Command163
- Show Version165
- Figure 41: SHOW VERSION Command165
- Snmp-Server Contact166
- Snmp-Server Location167
- System Territory168
Chapter 9: Port Parameters171
- Adding Descriptions172
- Setting the Speed and Duplex Mode173
- Setting the MDI/MDI-X Wiring Configuration175
- Enabling or Disabling Ports176
- Enabling or Disabling Backpressure177
- Enabling or Disabling Flow Control178
- Figure 42: SHOW FLOWCONTROL INTERFACE Command179
- Resetting Ports181
- Configuring Threshold Limits for Ingress Packets182
- Displaying Threshold Limit Settings on Ports184
- Figure 43: SHOW STORM-CONTROL Command184
- Figure 44: SHOW STORM-CONTROL Command184
- Reinitializing Auto-Negotiation185
- Restoring the Default Settings186
- Displaying Port Settings187
- Displaying or Clearing Port Statistics189
- Displaying SFP Information190
Chapter 10: Port Parameter Commands191
- Table 11. Port Parameter Commands191
Chapter 11: Power over Ethernet243
- Overview244
- Enabling and Disabling Poe246
- Adding PD Descriptions to Ports248
- Prioritizing Ports249
- Managing the Maximum Power Limit on Ports250
- Managing Legacy Pds251
- Monitoring Power Consumption252
- Table 20. Receiving Power Consumption Notification252
- Displaying Poe Information253
- Figure 57: SHOW POWER-INLINE Command253
- Table 21. Poe Show Commands253
- Figure 58: SHOW POWER-INLINE INTERFACE Command254
- Figure 59: SHOW POWER-INLINE INTERFACE DETAIL Command254
Chapter 12: Power over Ethernet Commands255
- Table 22. Power over Ethernet Commands255
Chapter 13: Ipv4 and Ipv6 Management Addresses285
- Overview286
- Table 26. Features Requiring an IP Management Address on the Switch286
- Assigning an Ipv4 Management Address and Default Gateway289
- Assigning an Ipv6 Management Address and Default Gateway294
Chapter 14: Ipv4 and Ipv6 Management Address Commands299
- Table 27. Management IP Address Commands299
Chapter 15: DHCP Server with Port-Based IP Assignment323
- Overview324
- Figure 72: DHCP Server with Port-Based IP Assignment324
- Configuring the DHCP Server325
- Displaying Status of Port-Based IP Assignment333
Chapter 16: DHCP Server with Port-Based IP Assignment Commands337
- Default-Router339
- Dhcp-Offer Ip340
- Dns-Server341
- Domain-Name342
- Ip Dhcp Pool343
- Lease344
- Lease Infinite345
- Network346
- No Default-Router347
- No Dhcp-Offer Ip348
- No Dns-Server350
- No Domain-Name351
- No Ip Dhcp Pool352
- No Lease353
- No Network354
- No Range355
- No Range All356
- No Service Dhcp-Server357
- No Subnet-Mask358
- Range359
- Service Dhcp-Server360
- Show Ip Dhcp Binding361
- Figure 76: SHOW IP DHCP BINDING Command361
- Show Ip Dhcp Pool363
- Figure 77: SHOW IP DHCP POOL Command363
- Show Ip Dhcp Server Statistics364
- Figure 78: SHOW IP DHCP SERVER STATISTICS Command364
- Subnet-Mask365
Chapter 17: Simple Network Time Protocol (SNTP) Client367
- Overview368
- Activating the SNTP Client and Specifying the IP Address of an NTP or SNTP Server369
- Configuring Daylight Savings Time and UTC Offset370
- Table 31. SNTP Daylight Savings Time and UTC Offset Commands370
- Disabling the SNTP Client372
- Displaying the SNTP Client373
- Figure 79: SHOW NTP ASSOCIATIONS Command373
- Figure 80: SHOW NTP STATUS Command373
- Displaying the Date and Time374
Chapter 18: SNTP Client Commands375
- Table 32. Simple Network Time Protocol Commands375
Chapter 19: MAC Address Table387
- Overview388
- Adding Static MAC Addresses390
- Deleting MAC Addresses392
- Setting the Aging Timer394
- Displaying the MAC Address Table395
- Figure 83: SHOW MAC ADDRESS-TABLE Command395
Chapter 20: MAC Address Table Commands397
- Table 34. MAC Address Table Commands397
Chapter 21: Enhanced Stacking409
- Overview410
- Configuring the Command Switch413
- Configuring a Member Switch416
- Managing the Member Switches of an Enhanced Stack418
- Figure 85: SHOW ESTACK REMOTELIST Command418
- Changing the Enhanced Stacking Mode420
- Figure 86: SHOW ESTACK Command420
- Uploading Boot Configuration Files from the Command Switch to Member Switches422
- Uploading the Management Software from the Command Switch to Member Switches429
- Disabling Enhanced Stacking431
Chapter 22: Enhanced Stacking Commands433
- Estack Command-Switch435
- Estack Run436
- Table 37. Enhanced Stacking Commands436
- No Estack Command-Switch437
- No Estack Run438
- Rcommand439
- Reboot Estack Member440
- Show Estack442
- Figure 87: SHOW ESTACK Command442
- Table 38. SHOW ESTACK Command442
- Show Estack Command-Switch444
- Figure 88: SHOW ESTACK COMMAND-SWITCH Command444
- Show Estack Remotelist445
- Figure 89: SHOW ESTACK REMOTELIST Command445
- Upload Config Remotelist447
- Upload Image Remotelist448
Chapter 23: Port Mirror451
- Overview452
- Creating the Port Mirror or Adding New Source Ports453
- Removing Source Ports or Deleting the Port Mirror454
- Combining the Port Mirror with Access Control Lists455
- Displaying the Port Mirror457
- Figure 90: SHOW MIRROR Command457
- Figure 91: SHOW MIRROR Command and Access Control Lists457
Chapter 24: Port Mirror Commands459
- Table 39. Port Mirror Commands459
Chapter 25: Internet Group Management Protocol (IGMP) Snooping467
- Overview468
  - Understanding Multicast Traffic Settings469
  - Enabling the Suppression of Unknown Multicast Traffic469
- Host Node Topology470
  - Single-Host Per Port470
  - Multiple-Hosts Per Port470
- Enabling IGMP Snooping471
- Configuring the IGMP Snooping Commands472
- Table 41. IGMP Snooping Commands472
- Disabling IGMP Snooping474
- Displaying IGMP Snooping475
Chapter 26: IGMP Snooping Commands477
- Table 42. Internet Group Management Protocol Snooping Commands477
Chapter 27: Multicast Commands491
- Table 44. Multicast Commands491
Section III: File System497
Chapter 28: File System499
- Overview500
- Table 45. File Extensions and File Types500
- Copying Boot Configuration Files501
- Renaming Boot Configuration Files502
- Deleting Boot Configuration Files503
- Displaying the Specifications of the File System504
- Figure 96: SHOW FILE SYSTEMS Command504
- Listing the Files in the File System505
Chapter 29: File System Commands507
- Copy508
- Delete509
- Delete Force510
- Table 46. File System Commands510
- Dir511
- Move512
- Show File Systems513
- Figure 97: SHOW FILE SYSTEMS Command513
- Table 47. SHOW FILE SYSTEMS Command513
Chapter 30: Boot Configuration Files515
- Overview516
- Specifying the Active Boot Configuration File517
- Creating a New Boot Configuration File519
- Displaying the Active Boot Configuration File520
- Figure 98: SHOW BOOT Command520
Chapter 31: Boot Configuration File Commands521
- Boot Config-File522
- Copy Running-Config524
- Table 48. Boot Configuration File Commands524
- Copy Running-Config Startup-Config525
- Erase Startup-Config526
- No Boot Config-File527
- Show Boot528
- Figure 99: SHOW BOOT Command528
- Table 49. SHOW BOOT Command528
- Show Startup-Config530
- Write531
Chapter 32: File Transfer533
- Overview534
- Uploading or Downloading Files with TFTP535
- Uploading or Downloading Files with Zmodem539
  - Downloading Files to the Switch with Zmodem539
  - Uploading Files from the Switch with Zmodem540
- Downloading Files with Enhanced Stacking542
- Figure 100: SHOW ESTACK REMOTELIST542
Chapter 33: File Transfer Commands545
- Copy Filename Zmodem546
- Copy Flash Tftp547
- Copy Tftp Flash548
- Table 50. File Transfer Commands548
- Copy Zmodem550
- Upload Image Remotelist551
Section IV: Event Messages553
Chapter 34: Event Log555
- Overview556
- Displaying the Event Log557
- Figure 101: SHOW LOG Command557
- Clearing the Event Log558
Chapter 35: Event Log Commands559
- Table 51. Event Log Commands559
Chapter 36: Syslog Client573
- Overview574
- Creating Syslog Server Definitions575
- Table 56. Event Message Severity Levels575
- Table 57. Program Abbreviations575
- Deleting Syslog Server Definitions578
- Displaying the Syslog Server Definitions579
- Figure 104: SHOW LOG CONFIG Command with Syslog Server Entries579
Chapter 37: Syslog Client Commands581
- Table 58. Syslog Client Commands581
Section V: Port Trunks587
Chapter 38: Static Port Trunks589
- Overview590
- Creating New Static Port Trunks or Adding Ports to Existing Trunks594
- Specifying the Load Distribution Method595
- Removing Ports from Static Port Trunks or Deleting Trunks596
- Displaying Static Port Trunks597
- Figure 107: SHOW STATIC-CHANNEL-GROUP Command597
Chapter 39: Static Port Trunk Commands599
- No Static-Channel-Group600
- Port-Channel Load-Balance601
- Table 59. Static Port Trunk Commands602
- Show Static-Channel-Group603
- Figure 108: SHOW STATIC-CHANNEL-GROUP Command603
- Static-Channel-Group604
Chapter 40: Link Aggregation Control Protocol (LACP)607
- Overview608
- Creating New Aggregators611
- Setting the Load Distribution Method612
- Adding Ports to Aggregators613
- Removing Ports from Aggregators614
- Deleting Aggregators615
- Displaying Aggregators616
- Figure 109: SHOW ETHERCHANNEL DETAIL616
- Figure 110: SHOW LACP SYS-ID Command617
Chapter 41: LACP Commands619
- Table 60. LACP Port Trunk Commands619
Section VI: Spanning Tree Protocols633
Chapter 42: STP, RSTP and MSTP Protocols635
- Overview636
- Bridge Priority and the Root Bridge637
- Path Costs and Port Costs638
- Port Priority639
- Forwarding Delay and Topology Changes640
- Hello Time and Bridge Protocol Data Units (BPDU)641
- Point-To-Point and Edge Ports642
- Figure 116: Point-To-Point Ports642
- Figure 117: Edge Port643
- Figure 118: Point-To-Point and Edge Port643
- Mixed STP and RSTP Networks644
- Spanning Tree and Vlans645
- Figure 119: VLAN Fragmentation645
- RSTP and MSTP BPDU Guard646
- STP, RSTP, MSTP Loop Guard648
- Figure 120: Loop Guard Example 1649
- Figure 121: Loop Guard Example 2650
- Figure 122: Loop Guard Example 3650
- Figure 123: Loop Guard Example 4651
- Figure 124: Loop Guard Example 5652
- STP and RSTP Root Guard653
Chapter 43: Spanning Tree Protocol (STP) Procedures655
- Designating STP as the Active Spanning Tree Protocol656
- Enabling the Spanning Tree Protocol657
- Setting the Switch Parameters658
- Table 61. STP Switch Parameter Commands658
- Setting the Port Parameters660
- Table 62. STP Port Parameter Commands660
- Disabling the Spanning Tree Protocol661
- Displaying STP Settings662
- Figure 125: SHOW SPANNING-TREE Command for STP662
Chapter 44: STP Commands663
- Table 63. Spanning Tree Protocol Commands663
Chapter 45: Rapid Spanning Tree Protocol (RSTP) Procedures679
- Designating RSTP as the Active Spanning Tree Protocol680
- Enabling the Rapid Spanning Tree Protocol681
- Configuring the Switch Parameters682
- Configuring the Port Parameters685
- Disabling the Rapid Spanning Tree Protocol689
- Displaying RSTP Settings690
- Figure 127: SHOW SPANNING-TREE Command for RSTP690
Chapter 46: RSTP Commands691
- Table 66. Rapid Spanning Tree Protocol Commands691
Chapter 47: Multiple Spanning Tree Protocol (MSTP)715
- Overview716
- Multiple Spanning Tree Instance (MSTI)717
- Figure 129: VLAN Fragmentation with STP or RSTP717
- Figure 130: MSTP Example of Two Spanning Tree Instances718
- Figure 131: Multiple Vlans in an MSTI718
- MSTI Guidelines719
- VLAN and MSTI Associations720
- Ports in Multiple Mstis721
- Multiple Spanning Tree Regions722
- Summary of Guidelines727
- Associating Vlans to Mstis729
- Figure 132: CIST and VLAN Guideline - Example 1729
- Figure 133: CIST and VLAN Guideline - Example 2730
- Connecting Vlans Across Different Regions731
- Figure 134: Spanning Regions - Example 1731
- Figure 135: Spanning Regions Without Blocking732
- Table 68. Two Region Examples732
- MSTP Root Guard733
Chapter 48: MSTP Commands735
- Table 69. Multiple Spanning Tree Protocol Commands735
Section VII: Virtual Lans759
Chapter 49: Port-Based and Tagged Vlans761
- Overview762
- Port-Based VLAN Overview764
- Tagged VLAN Overview770
- Creating Vlans775
- Adding Untagged Ports to Vlans776
- Adding Tagged Ports to Vlans778
- Removing Untagged Ports from Vlans780
- Removing Tagged Ports from Vlans781
- Deleting Vlans782
- Displaying the Vlans783
- Figure 142: SHOW VLAN ALL Command783
Chapter 50: Port-Based and Tagged VLAN Commands785
- Table 72. Port-Based and Tagged VLAN Commands785
Chapter 51: GARP VLAN Registration Protocol805
- Overview806
- Figure 144: GVRP Example807
- Guidelines809
- GVRP and Network Security810
- GVRP-Inactive Intermediate Switches811
- Enabling GVRP on the Switch812
- Enabling GIP on the Switch813
- Enabling GVRP on the Ports814
- Setting the GVRP Timers815
- Disabling GVRP Timers on the Switch816
- Disabling GVRP on the Ports817
- Disabling GIP on the Switch818
- Disabling GVRP on the Switch819
- Restoring the GVRP Default Settings820
- Displaying GVRP821
- Figure 145: SHOW GVRP TIMER Command821
Chapter 52: GARP VLAN Registration Protocol Commands823
- Table 74. GARP VLAN Registration Protocol Commands823
Chapter 53: MAC Address-Based Vlans845
- Overview846
- Guidelines851
- General Steps852
- Creating MAC Address-Based Vlans853
- Adding MAC Addresses to Vlans and Designating Egress Ports854
- Removing MAC Addresses855
- Deleting Vlans856
- Displaying Vlans857
- Figure 147: SHOW VLAN MACADDRESS Command857
- Example of Creating a MAC Address-Based VLAN858
Chapter 54: MAC Address-Based VLAN Commands861
- Table 78. MAC Address-Based VLAN Commands861
Chapter 55: Private Port Vlans875
- Overview876
- Guidelines878
- Creating Private Vlans879
- Adding Host and Uplink Ports880
- Deleting Vlans881
- Displaying Private Vlans882
- Figure 149: SHOW VLAN PRIVATE-VLAN Command882
Chapter 56: Private Port VLAN Commands883
- Table 80. Private Port VLAN Commands883
Chapter 57: Voice VLAN Commands889
- Table 81. Voice VLAN Commands889
Chapter 58: VLAN Stacking895
- Overview896
- Figure 151: Metro Provider 802.1Q Header in Tagged Packets897
- Figure 152: Metro Provider 802.1Q Header in Untagged Packets897
- Components898
- VLAN Stacking Process899
- Figure 153: VLAN Stacking Process899
- Table 82. VLAN Stacking Process899
- Example of VLAN Stacking900
Chapter 59: VLAN Stacking Commands905
- Table 83. VLAN Stacking Commands905
Section VIII: Port Security911
Chapter 60: MAC Address-Based Port Security913
- Overview914
- Configuring Ports916
- Table 84. MAC Address-Based Port Security Commands and Descriptions916
- Enabling MAC Address-Based Security on Ports918
- Disabling MAC Address-Based Security on Ports919
- Displaying Port Settings920
- Figure 155: SHOW PORT-SECURITY INTERFACE Command920
- Figure 156: Example of SHOW PORT-SECURITY INTRUSION INTERFACE Command921
Chapter 61: MAC Address-Based Port Security Commands923
- Table 85. MAC Address-Based Port Security Commands923
Chapter 62: 802.1X Port-Based Network Access Control937
- Overview938
- Authentication Process939
- Port Roles940
  - None Role940
  - Authenticator Role940
- Authentication Methods for Authenticator Ports941
- Operational Settings for Authenticator Ports942
- Operating Modes for Authenticator Ports943
- Supplicant and VLAN Associations947
- Guest VLAN950
- Guidelines951
- Enabling 802.1X Port-Based Network Access Control on the Switch953
- Configuring Authenticator Ports954
- Configuring Reauthentication957
- Table 87. Reauthentication Commands957
- Removing Ports from the Authenticator Role958
- Disabling 802.1X Port-Based Network Access Control on the Switch959
- Displaying Authenticator Ports960
- Figure 163: SHOW DOT1X INTERFACE Command960
- Displaying EAP Packet Statistics961
- Figure 164: SHOW DOT1X STATISTICS INTERFACE Command961
Chapter 63: 802.1X Port-Based Network Access Control Commands963
- Table 88. 802.1X Port-Based Network Access Control Commands963
Section IX: Simple Network Management Protocols1005
Chapter 64: Snmpv1 and Snmpv2C1007
- Overview1008
- Enabling Snmpv1 and Snmpv2C1010
- Creating Community Strings1011
- Adding or Removing IP Addresses of Trap or Inform Receivers1012
- Deleting Community Strings1014
- Disabling Snmpv1 and Snmpv2C1015
- Displaying Snmpv1 and Snmpv2C1016
- Figure 173: SHOW SNMP-SERVER Command1016
- Figure 174: SHOW SNMP-SERVER COMMUNITY Command1016
- Figure 175: SHOW RUNNING-CONFIG SNMP Command1017
Chapter 65: Snmpv1 and Snmpv2C Commands1019
- Table 89. Snmpv1 and Snmpv2C Commands1019
Chapter 66: Snmpv3 Commands1043
- Table 92. Snmpv3 Commands1043
Section X: Network Management1067
Chapter 67: Sflow Agent1069
- Overview1070
- Configuring the Sflow Agent1072
- Configuring the Ports1073
  - Configuring the Sampling Rate1073
  - Configuring the Polling Interval1074
- Enabling the Sflow Agent1075
- Disabling the Sflow Agent1076
- Displaying the Sflow Agent1077
- Figure 181: SHOW SFLOW Command1077
- Configuration Example1078
Chapter 68: Sflow Agent Commands1081
- Table 93. Sflow Agent Commands1081
Chapter 69: LLDP and LLDP-MED1093
- Overview1094
  - Mandatory LLDP Tlvs1095
  - Optional LLDP Tlvs1095
  - Table 95. Mandatory LLDP Tlvs1095
  - Table 96. Optional LLDP Tlvs1095
  - Optional LLDP-MED Tlvs1097
  - Table 97. Optional LLDP-MED Tlvs1097
- Enabling LLDP and LLDP-MED on the Switch1099
- Configuring Ports to Only Receive LLDP and LLDP-MED Tlvs1100
- Configuring Ports to Send Only Mandatory LLDP Tlvs1101
- Configuring Ports to Send Optional LLDP Tlvs1102
- Table 98. Optional LLDP Tlvs - Summary1102
- Configuring Ports to Send Optional LLDP-MED Tlvs1104
- Configuring Ports to Send LLDP-MED CIVIC Location Tlvs1106
- Table 99. Abbreviated List of LLDP-MED CIVIC Location Entry Parameters1106
- Configuring Ports to Send LLDP-MED Coordinate Location Tlvs1109
- Table 100. LLDP-MED Coordinate Location Entry Parameters1109
- Configuring Ports to Send LLDP-MED ELIN Location Tlvs1113
- Removing LLDP Tlvs from Ports1115
- Removing LLDP-MED Tlvs from Ports1116
- Deleting LLDP-MED Location Entries1117
- Disabling LLDP and LLDP-MED on the Switch1118
- Displaying General LLDP Settings1119
- Figure 183: SHOW LLDP Command1119
- Displaying Port Settings1120
- Figure 184: SHOW LLDP INTERFACE Command1120
- Displaying or Clearing Neighbor Information1121
- Displaying Port Tlvs1123
- Displaying and Clearing Statistics1124
- Figure 185: SHOW LLDP STATISTICS Command1124
Chapter 70: LLDP and LLDP-MED Commands1125
- Table 101. LLDP and LLDP-MED Commands1125
Chapter 71: Address Resolution Protocol (ARP)1185
- Overview1186
- Adding Static ARP Entries1187
- Deleting Static and Dynamic ARP Entries1188
- Table 111. Deleting ARP Entries1188
- Displaying the ARP Table1189
- Figure 196: SHOW ARP Command1189
Chapter 72: Address Resolution Protocol (ARP) Commands1191
- Table 112. ARP Commands1191
Chapter 73: RMON1199
- Overview1200
- RMON Port Statistics1201
- RMON Histories1203
- RMON Alarms1206
Chapter 74: RMON Commands1215
- Table 115. RMON Commands1215
Chapter 75: Advanced Access Control Lists (Acls)1239
- Overview1240
- Creating Acls1243
- Assigning Acls to Ports1258
- Removing Acls from Ports1261
- Restricting Remote Access1263
- Unrestricting Remote Access1268
- Table 141. Removing Numbered IP Acls from VTY Lines Example1268
- Deleting Numbered IP and MAC Address Acls1269
- Table 142. Deleting Numbered IP Acls Example 11269
- Table 143. Deleting Numbered IP Acls Example 21269
- Displaying the Acls1270
Chapter 76: ACL Commands1273
- Table 144. Access Control List Commands1273
Chapter 77: Quality of Service (QOS) Commands1309
- Table 146. Quality of Service Commands1309
Section XI: Management Security1331
Chapter 78: Local Manager Accounts1333
- Overview1334
- Creating Local Manager Accounts1337
- Deleting Local Manager Accounts1339
- Activating Command Mode Restriction and Creating the Special Password1340
- Deactivating Command Mode Restriction and Deleting the Special Password1341
- Activating or Deactivating Password Encryption1342
- Displaying the Local Manager Accounts1343
- Figure 216: Displaying the Local Manager Accounts in the Running Configuration1343
Chapter 79: Local Manager Account Commands1345
- Table 148. Local Manager Account Commands1345
Chapter 80: Telnet Server1355
- Overview1356
- Enabling the Telnet Server1357
- Disabling the Telnet Server1358
- Displaying the Telnet Server1359
- Figure 217: SHOW TELNET Command1359
Chapter 81: Telnet Server Commands1361
- Table 149. Telnet Server Commands1361
Chapter 82: Telnet Client1365
- Overview1366
- Starting a Remote Management Session with the Telnet Client1367
Chapter 83: Telnet Client Commands1369
- Table 150. Telnet Client Commands1369
  - Telnet1370
  - Telnet Ipv61371
Chapter 84: Secure Shell (SSH) Server1373
- Overview1374
  - Algorithms1374
- Support for SSH1375
  - Guidelines1375
- SSH and Enhanced Stacking1377
- Figure 219: SSH Remote Management of a Member Switch1377
- Creating the Encryption Key Pair1379
- Enabling the SSH Server1380
- Disabling the SSH Server1381
- Deleting Encryption Keys1382
- Displaying the SSH Server1383
Chapter 85: SSH Server Commands1385
- Table 151. Secure Shell Server Commands1385
Chapter 86: Non-Secure HTTP Web Browser Server1395
- Overview1396
- Enabling the Web Browser Server1397
- Setting the Protocol Port Number1398
- Disabling the Web Browser Server1399
- Displaying the Web Browser Server1400
- Figure 222: SHOW IP HTTP Command1400
Chapter 87: Non-Secure HTTP Web Browser Server Commands1401
- Table 152. Non-Secure HTTP Web Browser Server Commands1401
Chapter 88: Secure HTTPS Web Browser Server1407
- Overview1408
- Creating a Self-Signed Certificate1411
- Configuring the HTTPS Web Server for a Certificate Issued by a CA1414
- Enabling the Web Browser Server1418
- Disabling the Web Browser Server1419
- Displaying the Web Browser Server1420
- Figure 224: SHOW IP HTTPS Command1420
Chapter 89: Secure HTTPS Web Browser Server Commands1421
- Table 153. Secure HTTPS Web Browser Server Commands1421
Chapter 90: RADIUS and TACACS+ Clients1435
- Overview1436
- Remote Manager Accounts1437
  - Guidelines1439
- Managing the RADIUS Client1440
- Managing the TACACS+ Client1444
- Configuring Remote Authentication of Manager Accounts1447
Chapter 91: RADIUS and TACACS+ Client Commands1451
- Table 155. RADIUS and TACACS+ Client Commands1451
Appendix A: System Monitoring Commands1477
- Table 158. System Monitoring Commands1477
Appendix B: Management Software Default Settings1491
- Boot Configuration File1492
- Class of Service1493
- Console Port1494
- 802.1X Port-Based Network Access Control1495
- Enhanced Stacking1497
- Gvrp1498
- IGMP Snooping1499
- Link Layer Discovery Protocol (LLDP and LLDP-MED)1500
- MAC Address-Based Port Security1501
- MAC Address Table1502
- Management IP Address1503
- Manager Account1504
- Port Settings1505
- RADIUS Client1506
- Remote Manager Account Authentication1507
- Rmon1508
- Secure Shell Server1509
- Sflow Agent1510
- Simple Network Management Protocol (Snmpv1, Snmpv2C and Snmpv3)1511
- Simple Network Time Protocol1512
- Spanning Tree Protocols (STP, RSTP and MSTP)1513
  - Spanning Tree Status1513
  - Spanning Tree Protocol1513
  - Rapid Spanning Tree Protocol1513
- Multiple Spanning Tree Protocol1514
- System Name1515
- TACACS+ Client1516
- Telnet Server1517
- Vlans1518
- Web Server1519
- Command Index1521

Brand	Allied Telesis
Model	AT-9000 Series
Category	Switch
Language	English

Allied Telesis AT-9000 Series User Manual

Table of Contents

Questions and Answers:

Allied Telesis AT-9000 Series Specifications

Related product manuals