Edge-Core ECS2100-28P

725 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

Chapter 9

| General Security Measures

Port-based Traffic Segmentation

– 324 –

Table of Contents

Default Chapter3
- How to Use this Guide3
- Contents7
  - Table of Contents7
- Tables33
Section I39
- Getting Started39
1 Initial Switch Configuration41
- Connecting to the Switch41
- Configuring the Switch for Remote Management45
  - Using the Network Interface45
  - Setting an IP Address45
- Enabling SNMP Management Access51
- Managing System Files53
  - Upgrading the Operation Code54
  - Saving or Restoring Configuration Settings54
- Automatic Installation of Operation Code and Configuration Settings56
  - Downloading Operation Code from a File Server56
  - Specifying a DHCP Client Identifier59
- Downloading a Configuration File and Other Parameters from a DHCP Server60
- Table 1: Options 60, 66 and 67 Statements61
- Table 2: Options 55 and 124 Statements61
- Setting the System Clock62
- Command Line Interface65
2 Using the Command Line Interface67
- Accessing the CLI67
  - Console Connection67
  - Telnet Connection68
- Entering Commands69
- CLI Command Groups76
- Table 6: Command Group Index76
3 General Commands79
- Prompt79
- Table 7: General Commands79
- Reload (Global Configuration)80
- Enable81
- Quit82
- Show History82
- Configure83
- Disable84
- Reload (Privileged Exec)84
- Show Reload85
- End85
- Exit85
4 System Management Commands87
- Device Designation87
- System Status88
- Frame Size99
- File Management100
- Line114
- Event Logging125
- SMTP Alerts132
- Time136
5 SNMP Commands159
- Table 28: SNMP Commands159
- General SNMP Commands161
6 Remote Monitoring Commands185
- Table 33: RMON Commands185
- Rmon Alarm186
- Rmon Event187
- Rmon Collection History188
- Rmon Collection Rmon1189
- Show Rmon Alarms190
- Show Rmon Events190
- Show Rmon History191
- Show Rmon Statistics191
7 Flow Sampling Commands193
- Sflow Owner193
- Table 34: Sflow Commands193
- Sflow Polling Instance195
- Sflow Sampling Instance196
- Show Sflow197
8 Authentication Commands199
- Table 35: Authentication Commands199
- User Accounts and Privilege Levels200
  - Enable Password200
  - Table 36: User Access Commands200
  - Username201
  - Table 37: Default Login Settings202
  - Privilege203
  - Show Privilege203
- Authentication Sequence204
  - Authentication Enable204
  - Table 38: Authentication Sequence Commands204
  - Authentication Login205
- RADIUS Client206
  - Radius-Server Acct-Port206
  - Table 39: RADIUS Client Commands206
  - Radius-Server Auth-Port207
  - Radius-Server Host207
  - Radius-Server Key208
  - Radius-Server Retransmit209
  - Radius-Server Timeout209
  - Show Radius-Server210
- TACACS+ Client210
  - Table 40: TACACS+ Client Commands210
  - Tacacs-Server Host211
  - Tacacs-Server Key211
  - Tacacs-Server Port212
  - Tacacs-Server Retransmit212
  - Show Tacacs-Server213
  - Tacacs-Server Timeout213
  - Aaa214
  - Table 41: AAA Commands214
  - Aaa Accounting Commands215
  - Aaa Accounting Dot1X216
- Aaa Accounting Exec217
- Aaa Accounting Update218
- Aaa Authorization Commands218
- Aaa Authorization Exec219
- Aaa Group Server220
- Accounting Dot1X221
- Server221
- Accounting Commands222
- Accounting Exec222
- Authorization Commands223
- Authorization Exec224
- Show Accounting224
- Show Authorization225
- Web Server226
  - Table 42: Web Server Commands226
  - Ip Http Authentication227
  - Ip Http Port227
  - Ip Http Secure-Port228
  - Ip Http Server228
  - Ip Http Secure-Server229
- Telnet Server230
  - Table 43: HTTPS System Support230
  - Table 44: Telnet Server Commands230
  - Ip Telnet Max-Sessions231
  - Ip Telnet Port231
  - Ip Telnet Server232
  - Telnet (Client)232
  - Show Ip Telnet233
- Secure Shell233
  - Table 45: Secure Shell Commands233
  - Ip Ssh Authentication-Retries236
  - Ip Ssh Server236
  - Ip Ssh Server-Key Size237
  - Delete Public-Key238
  - Ip Ssh Timeout238
  - Ip Ssh Crypto Host-Key Generate239
  - Ip Ssh Crypto Zeroize240
  - Ip Ssh Save Host-Key240
  - Show Ip Ssh241
  - 802.1X Port Authentication243
  - Management IP Filter255
9 General Security Measures259
- Table 49: General Security Commands259
- Port Security260
  - Mac-Learning260
  - Table 50: Management IP Filter Commands260
  - Port Security261
  - Show Port Security263
  - Table 51: Show Port Security - Display Description263
- Network Access (MAC Address Authentication)265
  - Network-Access Aging265
  - Network-Access Mac-Filter265
- Network-Access Dynamic-Qos265
- Network-Access Dynamic-Vlan265
- Network-Access Mode Mac-Authentication265
- Table 52: Network Access Commands265
- Mac-Authentication Reauth-Time267
- Table 53: Dynamic Qos Profiles268
- Network-Access Guest-Vlan270
- Network-Access Max-Mac-Count270
- Network-Access Port-Mac-Filter272
- Mac-Authentication Intrusion-Action273
- Mac-Authentication Max-Mac-Count273
- Clear Network-Access274
- Show Network-Access274
- Show Network-Access Mac-Address-Table275
- Show Network-Access Mac-Filter276
- Web Authentication276
  - Web-Auth Login-Attempts277
  - Table 54: Web Authentication277
  - Web-Auth Quiet-Period278
  - Web-Auth Session-Timeout278
  - Web-Auth System-Auth-Control279
  - Web-Auth279
  - Web-Auth Re-Authenticate (Port)280
  - Web-Auth Re-Authenticate (IP)280
  - Show Web-Auth281
  - Show Web-Auth Interface281
  - Show Web-Auth Summary282
- Dhcpv4 Snooping282
  - Table 55: DHCP Snooping Commands282
  - Ip Dhcp Snooping283
  - Ip Dhcp Snooping Information Option285
  - Ip Dhcp Snooping Information Option Encode No-Subtype286
  - Table 56: Option 82 Information287
  - Ip Dhcp Snooping Information Option Remote-ID288
  - Ip Dhcp Snooping Information Option Tr101 Board-ID289
  - Ip Dhcp Snooping Information Policy289
  - Ip Dhcp Snooping Verify Mac-Address290
  - Ip Dhcp Snooping Vlan291
  - Ip Dhcp Snooping Information Option Circuit-ID292
  - Table 57: Option 82 Information292
  - Ip Dhcp Snooping Trust293
  - Ip Dhcp Snooping Max-Number294
  - Ip Dhcp Snooping Trust295
  - Clear Ip Dhcp Snooping Binding296
  - Clear Ip Dhcp Snooping Database Flash296
  - Show Ip Dhcp Snooping297
  - Show Ip Dhcp Snooping Binding297
- Ipv4 Source Guard298
  - Ip Source-Guard Binding298
  - Table 58: Ipv4 Source Guard Commands298
  - Ip Source-Guard300
  - Ip Source-Guard Max-Binding302
  - Ip Source-Guard Mode303
  - Clear Ip Source-Guard Binding Blocked303
  - Show Ip Source-Guard304
  - Show Ip Source-Guard Binding304
- ARP Inspection305
  - Table 59: ARP Inspection Commands305
  - Ip Arp Inspection306
  - Ip Arp Inspection Filter307
  - Ip Arp Inspection Log-Buffer Logs308
  - Ip Arp Inspection Validate309
  - Ip Arp Inspection Vlan310
  - Ip Arp Inspection Limit311
  - Ip Arp Inspection Trust311
  - Show Ip Arp Inspection Configuration312
  - Show Ip Arp Inspection Interface312
  - Show Ip Arp Inspection Log313
  - Show Ip Arp Inspection Statistics313
  - Show Ip Arp Inspection Vlan313
- Denial of Service Protection314
  - Dos-Protection Echo-Chargen314
  - Table 60: Dos Protection Commands314
  - Dos-Protection Smurf315
  - Dos-Protection Tcp-Flooding315
  - Dos-Protection Tcp-Null-Scan316
  - Dos-Protection Tcp-Syn-Fin-Scan316
  - Dos-Protection Tcp-Xmas-Scan317
  - Port-Based Traffic Segmentation319
10 Access Control Lists325
- Ipv4 Acls325
- Ipv6 Acls332
- MAC Acls338
- ARP Acls344
- ACL Information346
11 Interface Commands349
- Table 69: Interface Commands349
- Interface Configuration350
12 Link Aggregation Commands379
- Table 72: Link Aggregation Commands379
- Manual Configuration Commands380
13 Power over Ethernet Commands393
- Table 77: Poe Commands393
- Power Inline Compatible394
- Power Inline Maximum Allocation395
- Table 78: Maximum Poe Based on PD Classification395
- Power Mainpower Maximum Allocation396
- Power Inline397
- Power Inline Maximum Allocation397
- Power Inline Priority398
- Table 79: Maximum Number of Ports Providing Simultaneous Power398
- Power Inline Time-Range399
- Show Power Inline Status400
- Show Power Inline Time-Range401
- Table 80: Show Power Inline Status - Display Description401
- Show Power Mainpower402
- Table 81: Show Power Mainpower - Display Description402
14 Port Mirroring Commands403
- Local Port Mirroring Commands403
- RSPAN Mirroring Commands405
15 Congestion Control Commands413
- Rate Limit Commands413
- Storm Control Commands415
  - Switchport Packet-Rate415
  - Table 87: Rate Limit Commands415
16 Loopback Detection Commands417
- Table 88: Loopback Detection Commands417
- Loopback-Detection418
- Loopback-Detection Action418
- Loopback-Detection Recover-Time419
- Loopback Detection Trap420
- Loopback-Detection Transmit-Interval420
- Loopback-Detection Release421
- Show Loopback-Detection421
17 Address Table Commands423
- Mac-Address-Table Aging-Time423
- Table 89: Address Table Commands423
- Mac-Address-Table Static424
- Clear Collision-Mac-Address-Table425
- Clear Mac-Address-Table Dynamic425
- Show Collision-Mac-Address-Table425
- Show Mac-Address-Table426
- Show Mac-Address-Table Aging-Time427
- Show Mac-Address-Table Count427
18 Spanning Tree Commands429
- Table 90: Spanning Tree Commands429
- Spanning-Tree430
- Spanning-Tree Cisco-Prestandard431
- Spanning-Tree Forward-Time431
- Spanning-Tree Hello-Time432
- Spanning-Tree Max-Age433
- Spanning-Tree Mode433
- Spanning-Tree Mst Configuration435
- Spanning-Tree Pathcost Method435
- Spanning-Tree Priority436
- Spanning-Tree System-Bpdu-Flooding437
- Spanning-Tree Tc-Prop437
- Spanning-Tree Transmission-Limit438
- Max-Hops439
- Mst Priority439
- Mst Vlan440
- Name441
- Revision441
- Spanning-Tree Bpdu-Filter442
- Spanning-Tree Bpdu-Guard443
- Spanning-Tree Cost444
- Table 91: Recommended STA Path Cost Range444
- Table 92: Default STA Path Costs444
- Spanning-Tree Edge-Port445
- Spanning-Tree Link-Type446
- Spanning-Tree Loopback-Detection446
- Spanning-Tree Loopback-Detection Action447
- Spanning-Tree Loopback-Detection Release-Mode448
- Spanning-Tree Loopback-Detection Trap449
- Spanning-Tree Mst Cost449
- Spanning-Tree Mst Port-Priority450
- Spanning-Tree Port-Bpdu-Flooding451
- Spanning-Tree Port-Priority451
- Spanning-Tree Root-Guard452
- Spanning-Tree Spanning-Disabled453
- Spanning-Tree Tc-Prop-Stop453
- Spanning-Tree Loopback-Detection Release454
- Spanning-Tree Protocol-Migration455
- Show Spanning-Tree455
- Show Spanning-Tree Mst Configuration458
- Show Spanning-Tree Tc-Prop458
19 VLAN Commands459
- Editing VLAN Groups459
- Configuring VLAN Interfaces461
- Displaying VLAN Information467
  - Show Vlan467
  - Table 96: Commands for Displaying VLAN Information467
- Configuring IEEE 802.1Q Tunneling468
- Configuring Protocol-Based Vlans475
- Configuring MAC Based Vlans479
- Configuring Voice Vlans481
20 ERPS Commands489
- Table 101: ERPS Commands489
- Erps491
- Control-Vlan492
- Erps Domain492
- Enable493
- Guard-Timer494
- Holdoff-Timer495
- Major-Domain495
- Meg-Level496
- Mep-Monitor497
- Node-ID498
- Non-Erps-Dev-Protect498
- Non-Revertive500
- Propagate-Tc503
- Raps-Def-Mac504
- Raps-Without-VC505
- Ring-Port507
- Rpl Neighbor508
- Rpl Owner508
- Version509
- Wtr-Timer510
- Clear Erps Statistics511
- Erps Clear511
- Erps Forced-Switch512
- Table 102: ERPS Request/State Priority513
- Erps Manual-Switch514
- Show Erps515
- Table 103: Show Erps - Summary Display Description516
- Table 104: Show Erps Domain - Detailed Display Description517
- Table 105: Show Erps Statistics - Detailed Display Description519
21 Class of Service Commands521
- Priority Commands (Layer 2)521
- Priority Commands (Layer 3 and 4)526
22 Quality of Service Commands533
- Table 111: Quality of Service Commands533
- Class-Map534
- Description535
- Match536
- Policy-Map537
- Rename537
- Class538
- Police Rate539
- Set Cos540
- Service-Policy541
- Show Class-Map541
- Show Policy-Map542
- Show Policy-Map Interface543
23 Multicast Filtering Commands545
- IGMP Snooping545
  - Table 112: Multicast Filtering Commands545
  - Table 113: IGMP Snooping Commands545
  - Ip Igmp Snooping547
  - Ip Igmp Snooping Priority548
  - Ip Igmp Snooping Proxy-Reporting548
  - Ip Igmp Snooping Querier549
  - Ip Igmp Snooping Router-Alert-Option-Check550
  - Ip Igmp Snooping Router-Port-Expire-Time550
  - Ip Igmp Snooping Tcn-Flood551
  - Ip Igmp Snooping Tcn-Query-Solicit552
  - Ip Igmp Snooping Unregistered-Data-Flood553
  - Ip Igmp Snooping Unsolicited-Report-Interval553
- Ip Igmp Snooping Version554
- Ip Igmp Snooping Version-Exclusive555
- Ip Igmp Snooping Vlan General-Query-Suppression555
- Ip Igmp Snooping Vlan Immediate-Leave556
- Ip Igmp Snooping Vlan Last-Memb-Query-Count557
- Ip Igmp Snooping Vlan Last-Memb-Query-Intvl558
- Ip Igmp Snooping Vlan Mrd558
- Ip Igmp Snooping Vlan Proxy-Address559
- Ip Igmp Snooping Vlan Query-Interval561
- Ip Igmp Snooping Vlan Query-Resp-Intvl561
- Ip Igmp Snooping Vlan Static562
- Clear Ip Igmp Snooping Groups Dynamic563
- Clear Ip Igmp Snooping Statistics563
- Show Ip Igmp Snooping564
- Show Ip Igmp Snooping Group565
- Show Ip Igmp Snooping Mrouter566
- Show Ip Igmp Snooping Statistics566
- Table 114: Show Ip Igmp Snooping Statistics Input - Display Description567
- Table 115: Show Ip Igmp Snooping Statistics Output - Display Description567
- Table 116: Show Ip Igmp Snooping Statistics Vlan Query - Display Description568
- Static Multicast Routing569
  - Ip Igmp Snooping Vlan Mrouter569
  - Table 117: Static Multicast Interface Commands569
- IGMP Filtering and Throttling570
  - Table 118: IGMP Filtering and Throttling Commands570
  - Ip Igmp Filter (Global Configuration)571
  - Ip Igmp Profile571
  - Range572
  - {Permit | Deny572
  - Ip Igmp Filter (Interface Configuration)573
  - Ip Igmp Max-Groups574
  - Ip Igmp Max-Groups Action574
  - Ip Igmp Query-Drop575
  - Ip Multicast-Data-Drop575
  - Show Ip Igmp Filter576
  - Show Ip Igmp Profile577
  - Show Ip Igmp Query-Drop577
  - Show Ip Igmp Throttle Interface578
  - Show Ip Multicast-Data-Drop579
- MLD Snooping579
  - Table 119: MLD Snooping Commands580
  - Ipv6 Mld Snooping581
  - Ipv6 Mld Snooping Proxy-Reporting581
  - Ipv6 Mld Snooping Querier582
  - Ipv6 Mld Snooping Query-Interval582
  - Ipv6 Mld Snooping Query-Max-Response-Time583
  - Ipv6 Mld Snooping Robustness583
  - Ipv6 Mld Snooping Router-Port-Expire-Time584
  - Ipv6 Mld Snooping Unknown-Multicast Mode585
  - Ipv6 Mld Snooping Unsolicited-Report-Interval585
  - Ipv6 Mld Snooping Version586
  - Ipv6 Mld Snooping Vlan Immediate-Leave586
  - Ipv6 Mld Snooping Vlan Mrouter587
  - Clear Ipv6 Mld Snooping Groups Dynamic588
  - Ipv6 Mld Snooping Vlan Static588
  - Clear Ipv6 Mld Snooping Statistics589
  - Show Ipv6 Mld Snooping589
  - Show Ipv6 Mld Snooping Group590
  - Show Ipv6 Mld Snooping Group Source-List591
  - Show Ipv6 Mld Snooping Mrouter591
  - Show Ipv6 Mld Snooping Statistics592
  - Table 120: Show Ipv6 MLD Snooping Statistics Input - Display Description592
  - Table 121: Show Ipv6 MLD Snooping Statistics Output - Display Description593
  - Table 122: Show Ipv6 MLD Snooping Statistics Query - Display Description594
  - Table 123: Show Ipv6 MLD Snooping Statistics Summary - Display Description595
- MLD Filtering and Throttling596
  - Ipv6 Mld Filter (Global Configuration)596
  - Table 124: MLD Filtering and Throttling Commands596
  - Ipv6 Mld Profile597
  - {Permit | Deny598
  - Range598
  - Ipv6 Mld Filter (Interface Configuration)599
  - Ipv6 Mld Max-Groups599
  - Ipv6 Mld Max-Groups Action600
  - Ipv6 Mld Query-Drop601
  - Show Ipv6 Mld Filter601
  - Show Ipv6 Mld Profile602
  - Show Ipv6 Mld Query-Drop602
  - Show Ipv6 Mld Throttle Interface603
24 LLDP Commands605
- Table 125: LLDP Commands605
- Lldp607
- Lldp Holdtime-Multiplier607
- Lldp Med-Fast-Start-Count608
- Lldp Notification-Interval608
- Lldp Refresh-Interval609
- Lldp Reinit-Delay609
- Lldp Tx-Delay610
- Lldp Admin-Status611
- Lldp Basic-Tlv Management-Ip-Address611
- Lldp Basic-Tlv Port-Description612
- Lldp Basic-Tlv System-Capabilities612
- Lldp Basic-Tlv System-Description613
- Lldp Basic-Tlv System-Name613
- Lldp Dot1-Tlv Proto-Ident614
- Lldp Dot1-Tlv Proto-VID614
- Lldp Dot1-Tlv Pvid615
- Lldp Dot1-Tlv Vlan-Name615
- Lldp Dot3-Tlv Link-Agg616
- Lldp Dot3-Tlv Mac-Phy616
- Lldp Dot3-Tlv Max-Frame617
- Lldp Dot3-Tlv Poe617
- Lldp Med-Location CIVIC-Addr618
- Table 126: LLDP MED Location CA Types619
- Lldp Med-Notification620
- Lldp Med-Tlv Ext-Poe620
- Lldp Med-Tlv Inventory621
- Lldp Med-Tlv Location621
- Lldp Med-Tlv Med-Cap622
- Lldp Med-Tlv Network-Policy622
- Lldp Notification623
- Show Lldp Config624
- Show Lldp Info Local-Device625
- Show Lldp Info Remote-Device626
- Show Lldp Info Statistics628
25 Domain Name Service Commands629
- Table 127: Address Table Commands629
- DNS Commands630
- Multicast DNS Commands637
26 DHCP Commands639
- DHCP Client639
- DHCP Relay647
27 IP Interface Commands651
- Ipv4 Interface651
- Ipv6 Interface662
28 IP Routing Commands689
- Global Routing Configuration689
- A Troubleshooting695
- B License Information697

Other manuals for Edge-Core ECS2100-28P

Quick Start Guide8 pages

Installation Guide55 pages

Related product manuals

Edge-Core ECS2100-28T

Edge-Core ECS2100-28PP

Preview: Edge-Core ECS2100-10T

Edge-Core ECS2100-10T

Preview: Edge-Core ECS2100-10P

Edge-Core ECS2100-10P

Preview: Edge-Core ECS2100 Series

Edge-Core ECS2100 Series

Edge-Core ECS2000-10P

Preview: Edge-Core ECS2020 Series

Edge-Core ECS2020 Series

Preview: Edge-Core ECS1100-5P

Edge-Core ECS1100-5P

Preview: Edge-Core ECS4620-28F

Edge-Core ECS4620-28F

Preview: Edge-Core ECS4620-28T

Edge-Core ECS4620-28T

Preview: Edge-Core ECS4310-18T

Edge-Core ECS4310-18T

Edge-Core ECS4110-28P