To Next Page

To Previous Page

HAPTER

| Security Measures

Access Control Lists

– 320 –

WEB INTERFACE

To configure the name and type of an ACL:

1. Click Security, ACL.

2. Select Configure ACL from the Step list.

3. Select Add from the Action list.

4. Fill in the ACL Name field, and select the ACL type.

5. Click Apply.

Figure 172: Creating an ACL

To show a list of ACLs:

1. Click Security, ACL.

2. Select Configure ACL from the Step list.

3. Select Show from the Action list.

Figure 173: Showing a List of ACLs

CONFIGURING A

STANDARD IPV4 ACL

Use the Security > ACL (Configure ACL - Add Rule - IP Standard) page to

configure a Standard IPv4 ACL.

CLI REFERENCES

◆ "permit, deny, redirect-to (Standard IP ACL)" on page 713

◆ "show ip access-list" on page 718

◆ "Time Range" on page 572

Default Chapter5
- About this Guide5
- Contents7
  - Table of Contents7
- Figures33
- Tables43
Sectioni49
- Key Features51
- Table 1: Key Features51
- Description of Software Features52
- System Defaults57
- Table 2: System Defaults57
Getting Started49
1 Introduction49
2 Initial Switch Configuration61
- Connecting to the Switch61
- Basic Configuration64
- Managing System Files75
  - Saving or Restoring Configuration Settings76
Ection79
Web Configuration79
3 Using the Web Interface81
- Connecting to the Web Interface81
- Navigating the Web Browser Interface82
4 Basic97
- Tasks97
- Displaying System Information97
- Displaying Hardware/Software Versions98
- Figure 4: General Switch Information99
- Configuring Support for Jumbo Frames100
- Displaying Bridge Extension Capabilities101
- Managing System Files102
- Setting the System Clock111
- Configuring the Console Port117
- Figure 17: Console Port Settings118
- Configuring Telnet Settings119
- Displaying CPU Utilization120
- Displaying Memory Utilization121
- Resetting the System122
- Figure 21: Restarting the Switch (Immediately)124
- Figure 22: Restarting the Switch (In)125
- Figure 24: Restarting the Switch (Regularly)126
5 Interface Configuration127
- Port Configuration127
- Trunk Configuration144
- Saving Power159
- Traffic Segmentation161
  - Enabling Traffic Segmentation161
  - Configuring Uplink and Downlink Ports162
- VLAN Trunking163
- Figure 59: Configuring VLAN Trunking165
6 Vlan Configuration167
- IEEE 802.1Q Vlans167
- IEEE 802.1Q Tunneling179
- Protocol Vlans185
- Configuring IP Subnet Vlans189
- Figure 77: Configuring IP Subnet Vlans190
- Configuring MAC-Based Vlans191
- Figure 79: Configuring MAC-Based Vlans192
- Configuring VLAN Mirroring193
- Figure 81: Configuring VLAN Mirroring194
7 Address Table Settings195
- Setting Static Addresses195
- Changing the Aging Time197
- Displaying the Dynamic Address Table198
- Clearing the Dynamic Address Table199
- Configuring MAC Address Mirroring200
- Figure 88: Mirroring Packets Based on the Source MAC Address201
8 Spanning Tree Algorithm203
- Overview203
- Figure 90: STP Root Ports and Designated Ports204
- Figure 91: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree205
- Configuring Loopback Detection206
- Configuring Global Settings for STA207
- 9 Congestion Control227
10 Class of Service239
- Layer 2 Queue Settings239
11 Quality of Service253
- Overview253
- Configuring a Class Map254
- Figure 124: Configuring a Class Map255
- Figure 125: Showing Class Maps256
- Creating Qos Policies257
- Figure 128: Configuring a Policy Map264
- Figure 129: Showing Policy Maps265
- Figure 130: Adding Rules to a Policy Map266
- Attaching a Policy Map to a Port267
12 Oip Traffic Configuration269
- Overview269
- Configuring Voip Traffic270
- V O Ip T Raffic C Onfiguration270
- Configuring Telephony OUI271
- Configuring Voip Traffic Ports272
- Figure 136: Configuring Port Settings for a Voice VLAN274
13 Security Measures275
- AAA Authorization and Accounting276
- Configuring User Accounts292
- Figure 154: Configuring User Accounts293
- Web Authentication294
- Configuring HTTPS306
  - Table 20: HTTPS System Support307
  - Replacing the Default Secure-Site Certificate308
- Configuring the Secure Shell309
- Access Control Lists317
- Configuring Port Security340
- Configuring 802.1X Port Authentication342
14 Basic Administration Protocols369
- Configuring Event Logging369
- Link Layer Discovery Protocol376
- Power over Ethernet393
- Simple Network Management Protocol397
- Remote Monitoring420
- Switch Clustering430
- Settinga Time Range435
- Figure 256: Setting the Name of a Time Range436
- Figure 258: Add a Rule to a Time Range437
15 Ip Configuration439
- Using the Ping Function439
- Address Resolution Protocol441
- Setting the Switch's IP Address (IP Version 4)443
- Figure 263: Configuring a Static Ipv4 Address444
- Setting the Switch's IP Address (IP Version 6)445
16 Ip Services463
- Configuring General DNS Service Parameters463
- Ip Ervice463
- Configuring a List of Domain Names464
- Figure 275: Configuring a List of Domain Names for DNS465
- Configuring a List of Name Servers466
- Configuring Static DNS Host to Address Entries467
- Displaying the DNS Cache468
- Figure 281: Showing Entries in the DNS Cache469
17 Multicast471
- Filtering471
- Overview471
- M Ulticast F Iltering471
- Layer 2 IGMP (Snooping and Query)472
- Filtering and Throttling IGMP Groups488
- Multicast VLAN Registration493
18 Using the Command Line I Nterface505
Using the Command Line Interface505
- Accessing the CLI505
  - Console Connection505
  - Telnet Connection506
- Entering Commands507
- CLI Command Groups514
- Table 40: Command Group Index514
19 General Commands517
- Prompt517
- Table 41: General Commands517
- Reload (Global Configuration)518
- Enable519
- Quit520
- Show History520
- Configure521
- Disable522
- Reload (Privileged Exec)522
- Show Reload523
- End523
- Exit523
20 System Management Commands525
- Device Designation525
- System Status526
- Frame Size533
  - Jumbo Frame533
  - Table 45: Frame Size Commands533
- File Management534
- Line544
- SMTP Alerts561
21 Snmp Commands581
- Table 57: SNMP Commands581
- General SNMP Commands582
22 Remote Monitoring Commands601
- Table 62: RMON Commands601
- Rmon Alarm602
- Rmon Event603
- Rmon Collection History604
- Rmon Collection Rmon1605
- Show Rmon Alarms606
- Show Rmon Events606
- Show Rmon History606
- Show Rmon Statistics607
23 Authentication609
- Commands609
- User Accounts609
  - Table 63: Authentication Commands609
  - Table 64: User Access Commands609
  - Enable Password610
  - Table 65: Default Login Settings611
  - Username611
- Authentication Sequence612
  - Authentication Enable612
  - Table 66: Authentication Sequence Commands612
  - Authentication Login613
- RADIUS Client614
  - Radius-Server Acct-Port614
  - Table 67: RADIUS Client Commands614
  - Radius-Server Auth-Port615
  - Radius-Server Host615
  - Radius-Server Key616
  - Radius-Server Retransmit616
  - Radius-Server Timeout617
  - Show Radius-Server617
- TACACS+ Client618
  - Tacacs-Server Host618
  - Table 68: TACACS+ Client Commands618
  - Tacacs-Server Key619
- Tacacs-Server Port620
- Aaa Accounting Commands621
- Table 69: AAA Commands621
- Aaa Accounting Dot1X622
- Aaa Accounting Exec623
- Aaa Accounting Update624
- Aaa Authorization Exec625
- Aaa Group Server626
- Accounting Dot1X627
- Authorization Exec628
- Table 70: Web Server Commands629
- Ip Http Port630
- Ip Http Secure-Port631
- Table 71: HTTPS System Support632
- Table 72: Telnet Server Commands633
- Ip Telnet Port634
- Show Ip Telnet635
- Table 73: Secure Shell Commands635
- Ip Ssh Authentication-Retries638
- Ip Ssh Server-Key Size639
- Ip Ssh Timeout640
- Ip Ssh Crypto Host-Key Generate641
- Ip Ssh Crypto Zeroize642
- Show Public-Key643
  - Table 74: Show Ssh - Display Description644
  - Port Authentication645
  - Management IP Filter660
24 General Security Measures663
- Table 77: General Security Commands663
- Port Security664
- Table 78: Management IP Filter Commands664
- Network Access (MAC Address Authentication)666
  - Table 79: Network Access Commands666
  - Network-Access Aging667
  - Network-Access Mac-Filter667
  - Mac-Authentication Reauth-Time668
  - Network-Access Dynamic-Qos669
  - Table 80: Dynamic Qos Profiles669
- Network-Access Dynamic-Vlan670
- Network-Access Guest-Vlan671
- Network-Access Link-Detection Link-Down672
- Network-Access Link-Detection Link-Up-Down673
- Network-Access Max-Mac-Count674
- Network-Access Port-Mac-Filter675
- Mac-Authentication Intrusion-Action676
- Clear Network-Access677
- Show Network-Access Mac-Address-Table678
- Show Network-Access Mac-Filter679
- Table 81: Web Authentication680
- Web-Auth Login-Attempts680
- Web-Auth Quiet-Period681
- Web-Auth System-Auth-Control682
- Web-Auth Re-Authenticate (Port)683
- Show Web-Auth684
- Show Web-Auth Summary685
- Table 82: DHCP Snooping Commands685
- Ip Dhcp Snooping686
- Ip Dhcp Snooping Information Option688
- Ip Dhcp Snooping Information Policy689
- Ip Dhcp Snooping Vlan690
- Ip Dhcp Snooping Trust691
- Clear Ip Dhcp Snooping Database Flash692
- Show Ip Dhcp Snooping693
- Table 83: IP Source Guard Commands694
- Ip Source-Guard696
- Ip Source-Guard Max-Binding697
- Show Ip Source-Guard698
- Table 84: ARP Inspection Commands699
- Ip Arp Inspection700
- Ip Arp Inspection Filter701
- Ip Arp Inspection Log-Buffer Logs702
- Ip Arp Inspection Validate703
- Ip Arp Inspection Limit704
- Ip Arp Inspection Trust705
- Show Ip Arp Inspection Configuration706
- Show Ip Arp Inspection Log707
- Table 85: Dos Protection Commands708
- Denial of Service Protection708
  - Acces Control List711
  - Access-List Ip712
  - Permit, Deny, Redirect-To (Extended Ipv4 ACL)714
  - Table 88: Priority Bits Processed by Extended Ipv4 ACL716
  - Ip Access-Group717
  - Show Ip Access-List718
  - Table 89: MAC ACL Commands718
  - Access-List Mac719
  - Mac Access-Group722
  - Show Mac Access-List723
  - Table 90: ARP ACL Commands723
  - Permit, Deny (ARP ACL)724
  - Show Arp Access-List725
  - Table 91: ACL Information Commands726
  - Table 92: Interface Commands729
  - Interface Configuration730
  - Alias731
  - Description732
  - Flowcontrol733
  - Giga-Phy-Mode734
  - Negotiation735
  - Shutdown736
  - Clear Counters739
  - Show Interfaces Counters740
  - Show Interfaces Status741
  - Show Interfaces Switchport742
  - Table 93: Show Interfaces Switchport - Display Description743
  - Show Interfaces Transceiver744
- Table 86: Access Control List Commands711
- Table 87: Ipv4 ACL Commands711
25 Access Control Lists712
- Cable Diagnostics745
  - Show Cable-Diagnostics746
- Power Savings747
- Dynamic Configuration Commands751
28 Port Mirroring Commands762
- Local Port Mirroring Commands762
  - Show Port Monitor763
  - Table 101: RSPAN Commands764
- RSPAN Mirroring Commands764
30 Automatic Traffic Controlcommands776
- ATC Display Commands786
31 Address Table Commands790
32 Spanning Tree Commands797
- Configuring IEEE 802.1Q Tunneling836
- Configuring Protocol-Based Vlans842
- Configuring MAC Based Vlans848
34 Class of Service Commands858
- Show Qos Map Phb-Queue868
- Table 125: Quality of Service Commands869
35 Quality of Service Commands870
- Class-Map870
- Description871
- Match872
- Rename873
- Class874
- Police Flow875
- Police Srtcm-Color877
- Police Trtcm-Color879
- Service-Policy884
- Show Class-Map885
- Show Policy-Map Interface886
  - Table 126: Multicast Filtering Commands887
  - Table 127: IGMP Snooping Commands887
  - Ip Igmp Snooping889
- Ip Igmp Snooping Querier890
- Ip Igmp Snooping Router-Port-Expire-Time891
- Ip Igmp Snooping Tcn-Flood892
- Ip Igmp Snooping Tcn-Query-Solicit893
- Ip Igmp Snooping Unsolicited-Report-Interval894
- Ip Igmp Snooping Version895
- Ip Igmp Snooping Vlan General-Query-Suppression896
- Ip Igmp Snooping Vlan Last-Memb-Query-Count898
  - Ip Igmp Snooping Vlan Mrd900
  - Ip Igmp Snooping Vlan Query-Interval901
  - Ip Igmp Snooping Vlan Query-Resp-Intvl902
  - Show Ip Igmp Snooping904
  - Show Ip Igmp Snooping Group905
  - Table 128: Static Multicast Interface Commands906
- Static Multicast Routing906
  - Table 129: IGMP Filtering and Throttling Commands907
  - Ip Igmp Profile908
  - Permit, Deny909
  - Ip Igmp Filter (Interface Configuration)910
  - Ip Igmp Max-Groups Action911
  - Show Ip Igmp Filter912
  - Show Ip Igmp Throttle Interface913
  - Table 130: Multicast VLAN Registration Commands914
  - Mvr Type916
  - Mvr Vlan Group917
  - Show Mvr918
  - Table 131: Show Mvr - Display Description919
  - Table 132: Show Mvr Interface - Display Description919
  - Table 133: Show Mvr Members - Display Description920
  - Table 134: LLDP Commands921
- Lldp923
  - Lldp Med-Fast-Start-Count924
  - Lldp Refresh-Interval925
  - Lldp Tx-Delay926
- Lldp Admin-Status927
- Lldp Basic-Tlv Port-Description928
- Lldp Basic-Tlv System-Capabilities929
- Lldp Basic-Tlv System-Name930
- Lldp Dot1-Tlv Proto-VID931
- Lldp Dot1-Tlv Vlan-Name932
- Lldp Dot3-Tlv Max-Frame933
- Table 135: LLDP MED Location CA Types934
- Lldp Med-Notification935
- Lldp Med-Tlv Ext-Poe936
- Lldp Med-Tlv Location937
- Lldp Med-Tlv Network-Policy938
- Show Lldp Config939
- Show Lldp Info Local-Device940
- Show Lldp Info Remote-Device941
- Show Lldp Info Statistics943
38 Domain Name Service C Ommands945
- Ip Domain-List945
- Table 136: Address Table Commands945
- Ip Domain-Lookup946
- Ip Domain-Name947
- Ip Name-Server949
- Ipv6 Host950
- Clear Host951
- Ipv6 Interface970
- Management Features994
- Standards995
- Management Information Bases996
- Table 151: Troubleshooting Chart997
- Using System Logs998
100 C License Information999
- The GNU General Public License999
  - License Information1000
  - G Lossary1003

Brand	Edge-Core
Model	ECS3510-26P
Category	Switch
Language	English

Edge-Core ECS3510-26P User Manual

Table of Contents

Other manuals for Edge-Core ECS3510-26P

Questions and Answers:

Edge-Core ECS3510-26P Specifications

Related product manuals