Digisol DG-GS4528S

To Next Page

To Previous Page

HAPTER

| Security Commands

AAA Commands

– 398 –

Server #5 (0.0.0.0:1813) RADIUS Accounting Statistics:

Rx Responses: 0 Tx Requests: 0

Rx Malformed Responses: 0 Tx Retransmissions: 0

Rx Bad Authenticators: 0 Tx Pending Requests: 0

Rx Unknown Types: 0 Tx Timeouts: 0

Rx Packets Dropped: 0

State: Disabled

Round-Trip Time: 0 ms

Security/AAA>

Main Page

Default Chapter1
- Default Chapter1
  - User Manual1
- About this Guide5
  - Table of Contents7
- Contents7
- Figures23
- Tables27
Sectioni29
- Key Features31
- Table 1: Key Features31
- Description of Software Features32
- System Defaults36
- Table 2: System Defaults36
Getting Started29
1 Introduction29
2 Initial Switch Configuration39
- Connecting to the Switch39
- Basic Configuration42
- Managing System Files49
  - Saving or Restoring Configuration Settings49
Ection51
Web Configuration51
3 Using the Web Interface53
- Connecting to the Web Interface53
- Navigating the Web Browser Interface54
4 Configuring the Switch61
- Configuring System Information61
- Setting an IP Address62
  - Setting an Ipv4 Address62
  - Figure 3: System Information Configuration62
  - Setting an Ipv6 Address64
  - Figure 4: IP Configuration64
- Configuring NTP Service66
- Figure 5: Ipv6 Configuration66
- Configuring Port Connections67
- Figure 6: NTP Configuration67
- Figure 7: Port Configuration69
- Configuring Security70
  - Configuring User Accounts70
  - Figure 8: Showing User Accounts71
  - Configuring User Privilege Levels72
  - Figure 9: Configuring User Accounts72
  - Configuring the Authentication Method for Management Access74
  - Figure 10: Configuring Privilege Levels74
  - Figure 11: Authentication Server Operation75
  - Figure 12: Authentication Method for Management Access76
  - Configuring SSH77
  - Configuring HTTPS78
  - Figure 13: SSH Configuration78
  - Table 5: HTTPS System Support78
  - Filtering IP Addresses for Management Access79
  - Figure 14: HTTPS Configuration79
  - Figure 15: Access Management Configuration80
  - Using Simple Network Management Protocol81
    - Table 6: SNMP Security Models and Levels81
    - Configuring SNMP System and Trap Settings82
    - Figure 16: SNMP System Configuration85
    - Figure 17: Snmpv3 Community Configuration86
    - Setting Snmpv3 Community Access Strings86
    - Configuring Snmpv3 Users87
    - Configuring Snmpv3 Groups88
    - Figure 18: Snmpv3 User Configuration88
    - Figure 19: Snmpv3 Group Configuration89
    - Configuring Snmpv3 Views90
    - Figure 20: Snmpv3 View Configuration90
    - Configuring Snmpv3 Group Access Rights91
  - Configuring Port Limit Controls92
  - Figure 21: Snmpv3 Access Configuration92
  - Configuring Authentication through Network Access Servers94
  - Figure 22: Port Limit Control Configuration94
  - Figure 23: Using Port Security95
  - Table 7: Dynamic Qos Profiles98
  - Filtering Traffic with Access Control Lists105
    - Assigning ACL Policies and Responses105
    - Figure 24: Port Security Configuration105
    - Figure 25: ACL Port Configuration106
    - Configuring Rate Limiters107
    - Configuring Access Control Lists108
    - Figure 26: ACL Rate Limiter Configuration108
    - Table 8: QCE Modification Buttons109
  - Configuring DHCP Snooping115
  - Figure 27: Access Control List Configuration115
  - Figure 28: DHCP Snooping Configuration117
  - Configuring DHCP Relay and Option 82 Information118
  - Configuring IP Source Guard119
    - Configuring Global and Port Settings for IP Source Guard119
    - Figure 29: DHCP Relay Configuration119
    - Configuring Static Bindings for IP Source Guard121
    - Figure 30: Configuring Global and Port-Based Settings for IP Source Guard121
  - Configuring ARP Inspection123
    - Figure 31: Configuring Static Bindings for IP Source Guard123
    - Configuring Global and Port Settings for ARP Inspection124
    - Configuring Static Bindings for ARP Inspection125
    - Figure 32: Configuring Global and Port Settings for ARP Inspection125
  - Specifying Authentication Servers126
  - Figure 33: Configuring Static Bindings for ARP Inspection126
- Creating Trunk Groups128
  - Figure 34: Authentication Configuration128
  - Configuring Static Trunks129
  - Configuring LACP132
  - Figure 35: Static Trunk Configuration132
  - Figure 36: LACP Port Configuration134
- Configuring the Spanning Tree Algorithm135
  - Figure 37: STP Root Ports and Designated Ports135
  - Figure 38: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree136
  - Configuring Global Settings for STA137
  - Figure 39: Common Internal Spanning Tree, Common Spanning Tree, Internal137
  - Configuring Multiple Spanning Trees140
  - Figure 40: STA Bridge Configuration140
  - Configuring Spanning Tree Bridge Priorities142
  - Figure 41: Adding a VLAN to an MST Instance142
  - Configuring STP/RSTP/CIST Interfaces143
  - Figure 42: Configuring STA Bridge Priorities143
  - Table 10: Recommended STA Path Costs144
  - Table 9: Recommended STA Path Cost Range144
  - Table 11: Default STA Path Costs145
  - Configuring MIST Interfaces147
  - Figure 43: STP/RSTP/CIST Port Configuration147
  - Figure 44: MSTI Port Configuration148
- IGMP Snooping149
  - Configuring Global and Port-Related Settings for IGMP Snooping149
  - Configuring VLAN Settings for IGMP Snooping and Query152
  - Figure 45: Configuring Global and Port-Related Settings for IGMP Snooping152
  - Configuring IGMP Filtering153
  - Figure 46: Configuring VLAN Settings for IGMP Snooping and Query153
- MLD Snooping154
  - Figure 47: IGMP Snooping Port Group Filtering Configuration154
  - Configuring Global and Port-Related Settings for MLD Snooping155
  - Figure 48: Configuring Global and Port-Related Settings for MLD Snooping157
  - Configuring VLAN Settings for MLD Snooping and Query158
  - Configuring MLD Filtering159
  - Figure 49: Configuring VLAN Settings for MLD Snooping and Query159
- Multicast VLAN Registration160
- Figure 50: MLD Snooping Port Group Filtering Configuration160
- Figure 51: MVR Concept161
- Link Layer Discovery Protocol163
  - Configuring LLDP Timing and Tlvs163
  - Figure 52: Configuring MVR163
  - Configuring LLDP-MED Tlvs166
  - Figure 53: LLDP Configuration166
- Configuring the MAC Address Table172
- Figure 54: LLDP-MED Configuration172
- IEEE 802.1Q Vlans174
  - Figure 55: MAC Address Table Configuration174
  - Assigning Ports to Vlans175
  - Configuring VLAN Attributes for Port Members176
  - Figure 56: VLAN Membership Configuration176
- Configuring Private Vlans178
- Figure 57: VLAN Port Configuration178
- Figure 58: Private VLAN Membership Configuration179
- Using Port Isolation180
- Figure 59: Port Isolation Configuration180
- Managing Voip Traffic181
  - Configuring Voip Traffic181
  - Configuring Telephony OUI183
  - Figure 60: Configuring Global and Port Settings for a Voice VLAN183
  - Figure 61: Configuring an OUI Telephony List184
- Quality of Service185
  - Configuring Port-Level Queue Settings185
  - Configuring DSCP Remarking187
  - Figure 62: Port Qos Configuration187
  - Figure 63: DSCP Remarking Configuration188
  - Configuring Qos Control Lists189
  - Table 12: QCE Modification Buttons189
  - Table 13: Mapping Cos Values to Egress Queues190
  - Configuring Rate Limiting191
  - Figure 64: Qos Control List Configuration191
  - Figure 65: Rate Limit Configuration192
  - Configuring Storm Control193
- Configuring Port Mirroring194
- Figure 66: Storm Control Configuration194
- Configuring Upnp195
- Figure 67: Mirror Configuration195
- Home195
- Figure 68: Upnp Configuration196
5 Monitoring the Switch197
- Displaying Basic Information about the System197
  - Displaying System Information197
  - Displaying CPU Utilization198
  - Figure 69: System Information198
  - Displaying Log Messages199
  - Figure 70: Displaying CPU Utilization199
  - Displaying Log Details200
  - Figure 71: System Log Information200
  - Figure 72: Detailed System Log Information200
- Displaying Information about Ports201
  - Displaying Port Status on the Front Panel201
  - Displaying an Overview of Port Statistics201
  - Figure 73: Port State Overview201
  - Displaying Qos Statistics202
  - Figure 74: Port Statistics Overview202
  - Displaying Detailed Port Statistics203
  - Figure 75: Queuing Counters203
- Displaying Information about Security Settings205
  - Displaying Access Management Statistics205
  - Figure 76: Detailed Port Statistics205
  - Displaying Information about Switch Settings for Port Security206
  - Figure 77: Access Management Statistics206
  - Displaying Information about Learned MAC Addresses208
  - Figure 78: Port Security Switch Status208
  - Displaying Port Status for Authentication Services209
  - Figure 79: Port Security Port Status209
  - Figure 80: Network Access Server Switch Status210
  - Displaying ACL Status214
  - Figure 81: NAS Statistics for Specified Port214
  - Displaying Statistics for DHCP Snooping215
  - Figure 82: ACL Status215
  - Displaying DHCP Relay Statistics217
  - Figure 83: DHCP Snooping Statistics217
  - Figure 84: DHCP Relay Statistics218
  - Displaying MAC Address Bindings for ARP Packets219
  - Displaying Entries in the IP Source Guard Table219
  - Figure 85: Dynamic ARP Inspection Table219
  - Figure 86: Dynamic IP Source Guard Table219
- Displaying Information on Authentication Servers220
  - Displaying a List of Authentication Servers220
  - Displaying Statistics for Configured Authentication Servers221
  - Figure 87: RADIUS Overview221
  - Figure 88: RADIUS Details224
- Displaying Information on LACP225
  - Displaying an Overview of LACP Groups225
  - Figure 89: LACP System Status225
  - Displaying LACP Port Status226
  - Figure 90: LACP Port Status226
  - Displaying LACP Port Statistics227
  - Figure 91: LACP Port Statistics227
- Displaying Information on the Spanning Tree228
  - Displaying Bridge Status for STA228
  - Displaying Port Status for STA230
  - Figure 92: Spanning Tree Bridge Status230
  - Displaying Port Statistics for STA231
  - Figure 93: Spanning Tree Port Status231
- Showing IGMP Snooping Information232
- Figure 94: Spanning Tree Port Statistics232
- Figure 95: IGMP Snooping Status233
- Showing MLD Snooping Information234
- Displaying MVR Information235
- Figure 96: MLD Snooping Status235
- Figure 97: MLD Snooping Group Information235
- Figure 98: MVR Status236
- Displaying LLDP Information237
  - Displaying LLDP Neighbor Information237
  - Table 14: System Capabilities237
  - Displaying LLDP-MED Neighbor Information238
  - Figure 99: LLDP Neighbor Information238
  - Figure 100: LLDP-MED Neighbor Information240
  - Displaying LLDP Port Statistics241
- Displaying the MAC Address Table242
- Figure 101: LLDP Port Statistics242
- Displaying Information about Vlans243
  - VLAN Membership243
  - Figure 102: MAC Address Table243
  - VLAN Port Status244
  - Figure 103: Showing VLAN Members244
  - Figure 104: Showing VLAN Port Status246
- 6 Performing Basic Diagnostics247
  - Pinging an Ipv4 or Ipv6 Address247
  - Running Cable Diagnostics248
  - Figure 105: ICMP Ping248
  - Figure 106: Veriphy Cable Diagnostics249
- 7 Performing System Maintenance251
  - Restarting the Switch251
  - Figure 107: Restart Device251
  - Restoring Factory Defaults252
  - Upgrading Firmware252
  - Figure 108: Factory Defaults252
  - Managing Configuration Files253
- 8 Using Thecommandlineinterface257
Using the Command Line Interface257
- Accessing the CLI257
- 9 System Commands265
10 Ip Commands271
- Ip Configuration271
- Table 18: IP Commands271
- Ip Dhcp272
- Ip Setup273
- Ip Ping275
- Ip Dns276
- Ip Dns_Proxy276
- Ip Ipv6 Autoconfig277
- Ip Ipv6 Setup278
- Ip Ipv6 Ping6279
- Ip Ntp Configuration280
- Ip Ntp Mode280
- Ip Ntp Server Add281
- Ip Ntp Server Ipv6 Add281
- Ip Ntp Server Delete282
11 Port Commands283
- Port Configuration283
- Table 19: Port Commands283
- Table 20: Port Configuration283
- Port Mode285
- Port Flow Control285
- Port State286
- Port Maxframe287
- Port Power287
- Port Excessive288
- Port Statistics289
- Port Veriphy290
12 Mac Commands293
- Mac Configuration293
- Table 21: MAC Commands293
- Mac Add294
- Mac Delete294
- Mac Lookup295
- Mac Agetime295
- Mac Learning295
- Mac Dump296
- Mac Statistics297
  - Mac Flush297
13 Vlan Commands299
- Vlan Configuration299
- Table 22: VLAN Commands299
- Vlan Aware300
- Vlan Pvid301
- Vlan Frametype301
- Vlan Ingressfilter302
- Vlan Stag302
- Vlan Add303
- Vlan Delete303
- Vlan Lookup304
- Vlan Status304
14 Pvlan Commands307
- Pvlan Configuration307
- Table 23: PVLAN Commands307
- Pvlan Add308
- Pvlan Delete308
- Pvlan Lookup309
- Pvlan Isolate309
15 Security Commands311
- Table 24: Security Commands311
16 Stp Commands399
- Table 42: STP Commands399
17 Igmp Commands419
- Igmp Configuration419
- Table 46: IGMP Commands419
- Table 47: IGMP Configuration420
- Igmp Mode421
- Igmp Leave Proxy421
- Igmp State422
- Igmp Querier423
- Igmp Fastleave423
- Igmp Throttling424
- Igmp Filtering425
- Igmp Router425
- Igmp Flooding426
- Igmp Groups426
- Igmp Status427
18 Link Aggregation Commands429
- Table 48: Link Aggregation Commands429
19 Lacp Commands435
- Table 49: LACP Commands435
20 Lldp Commands441
- Lldp Configuration441
- Table 50: LLDP Commands441
- Lldp Mode442
- Lldp Optional_Tlv442
- Lldp Interval443
- Lldp Hold444
- Lldp Delay444
- Lldp Reinit445
- Lldp Statistics445
- Lldp Info446
- Lldp Cdp_Aware447
21 Lldp-Med Commands449
- Lldpmed Configuration449
- Table 51: LLDP-MED Commands449
- Lldpmed CIVIC450
- Lldpmed Ecs451
- Lldpmed Policy Delete452
- Lldpmed Policy Add452
- Lldpmed Port Policies454
- Lldpmed Coordinates455
- Lldpmed Datum456
- Lldpmed Fast456
- Lldpmed Info457
- Lldpmed Debug_Med_Transmit_Var458
22 O S Commands459
- Table 52: Qos Commands459
23 Mirror Commands471
- Mirror Configuration471
- Table 54: Mirror Commands471
- Mirror Port472
- Mirror Mode472
24 Config Commands473
- Config Save473
- Table 55: Configuration Commands473
25 Firmware Commands475
- Firmware Load475
- Table 56: Firmware Commands475
- Firmware Ipv6 Load477
26 Up N P Commands479
- Upnp Configuration479
- Upnp Mode479
- Table 57: Upnp Commands479
- Upnp Ttl480
- Upnp Advertising Duration481
27 Mvr Commands483
- Table 58: MVR Commands483
28 Oice Vvlan Commands489
- Voice Vlan Configuration489
- Table 59: Voice VLAN Commands489
- Voice Vlan Commands490
- Voice Vlan Discovery Protocol491
- Voice Vlan Mode491
- Voice Vlan ID492
- Voice Vlan Agetime492
- Voice Vlan Traffic Class493
- Voice Vlan Oui Add493
- Voice Vlan Oui Delete494
- Voice Vlan Oui Clear494
- Voice Vlan Oui Lookup494
- Voice Vlan Port Mode495
- Voice Vlan Security495
- 29 Mld Snooping Commands497
  - Table 60: MLD Snooping Commands497
Ection507
Appendices507
- Specifications509
- Software Features509
- Management Features510
- Standards511
- Management Information Bases511
- Problems Accessing the Management Interface513
  - Table 62: Troubleshooting Chart513
  - B Troubleshooting514
    - Using System Logs514
100 C License Information515
- Information515
- The GNU General Public License515
- License Information516
- Glossary519
- Command527
- Ommand ist527
  - List527
- Index531

Related product manuals

Digisol DG-GS4528S - Page 398

Table of Contents

Related product manuals