Edge-Core ECS3510-26P

To Next Page

To Previous Page

HAPTER

| General Security Measures

Denial of Service Protection

– 709 –

EXAMPLE

Console(config)#flow tcp-udp-port-zero forward

Console(config)#

Main Page

Default Chapter5
- About this Guide5
- Contents7
  - Table of Contents7
- Figures33
- Tables43
Sectioni49
- Key Features51
- Table 1: Key Features51
- Description of Software Features52
- System Defaults57
- Table 2: System Defaults57
Getting Started49
1 Introduction49
2 Initial Switch Configuration61
- Connecting to the Switch61
- Basic Configuration64
- Managing System Files75
  - Saving or Restoring Configuration Settings76
Ection79
Web Configuration79
3 Using the Web Interface81
- Connecting to the Web Interface81
- Navigating the Web Browser Interface82
4 Basic97
- Tasks97
- Displaying System Information97
- Displaying Hardware/Software Versions98
- Figure 4: General Switch Information99
- Configuring Support for Jumbo Frames100
- Displaying Bridge Extension Capabilities101
- Managing System Files102
- Setting the System Clock111
- Configuring the Console Port117
- Figure 17: Console Port Settings118
- Configuring Telnet Settings119
- Displaying CPU Utilization120
- Displaying Memory Utilization121
- Resetting the System122
- Figure 21: Restarting the Switch (Immediately)124
- Figure 22: Restarting the Switch (In)125
- Figure 24: Restarting the Switch (Regularly)126
5 Interface Configuration127
- Port Configuration127
- Trunk Configuration144
- Saving Power159
- Traffic Segmentation161
  - Enabling Traffic Segmentation161
  - Configuring Uplink and Downlink Ports162
- VLAN Trunking163
- Figure 59: Configuring VLAN Trunking165
6 Vlan Configuration167
- IEEE 802.1Q Vlans167
- IEEE 802.1Q Tunneling179
- Protocol Vlans185
- Configuring IP Subnet Vlans189
- Figure 77: Configuring IP Subnet Vlans190
- Configuring MAC-Based Vlans191
- Figure 79: Configuring MAC-Based Vlans192
- Configuring VLAN Mirroring193
- Figure 81: Configuring VLAN Mirroring194
7 Address Table Settings195
- Setting Static Addresses195
- Changing the Aging Time197
- Displaying the Dynamic Address Table198
- Clearing the Dynamic Address Table199
- Configuring MAC Address Mirroring200
- Figure 88: Mirroring Packets Based on the Source MAC Address201
8 Spanning Tree Algorithm203
- Overview203
- Figure 90: STP Root Ports and Designated Ports204
- Figure 91: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree205
- Configuring Loopback Detection206
- Configuring Global Settings for STA207
- 9 Congestion Control227
10 Class of Service239
- Layer 2 Queue Settings239
11 Quality of Service253
- Overview253
- Configuring a Class Map254
- Figure 124: Configuring a Class Map255
- Figure 125: Showing Class Maps256
- Creating Qos Policies257
- Figure 128: Configuring a Policy Map264
- Figure 129: Showing Policy Maps265
- Figure 130: Adding Rules to a Policy Map266
- Attaching a Policy Map to a Port267
12 Oip Traffic Configuration269
- Overview269
- Configuring Voip Traffic270
- V O Ip T Raffic C Onfiguration270
- Configuring Telephony OUI271
- Configuring Voip Traffic Ports272
- Figure 136: Configuring Port Settings for a Voice VLAN274
13 Security Measures275
- AAA Authorization and Accounting276
- Configuring User Accounts292
- Figure 154: Configuring User Accounts293
- Web Authentication294
- Configuring HTTPS306
  - Table 20: HTTPS System Support307
  - Replacing the Default Secure-Site Certificate308
- Configuring the Secure Shell309
- Access Control Lists317
- Configuring Port Security340
- Configuring 802.1X Port Authentication342
14 Basic Administration Protocols369
- Configuring Event Logging369
- Link Layer Discovery Protocol376
- Power over Ethernet393
- Simple Network Management Protocol397
- Remote Monitoring420
- Switch Clustering430
- Settinga Time Range435
- Figure 256: Setting the Name of a Time Range436
- Figure 258: Add a Rule to a Time Range437
15 Ip Configuration439
- Using the Ping Function439
- Address Resolution Protocol441
- Setting the Switch's IP Address (IP Version 4)443
- Figure 263: Configuring a Static Ipv4 Address444
- Setting the Switch's IP Address (IP Version 6)445
16 Ip Services463
- Configuring General DNS Service Parameters463
- Ip Ervice463
- Configuring a List of Domain Names464
- Figure 275: Configuring a List of Domain Names for DNS465
- Configuring a List of Name Servers466
- Configuring Static DNS Host to Address Entries467
- Displaying the DNS Cache468
- Figure 281: Showing Entries in the DNS Cache469
17 Multicast471
- Filtering471
- Overview471
- M Ulticast F Iltering471
- Layer 2 IGMP (Snooping and Query)472
- Filtering and Throttling IGMP Groups488
- Multicast VLAN Registration493
18 Using the Command Line I Nterface505
Using the Command Line Interface505
- Accessing the CLI505
  - Console Connection505
  - Telnet Connection506
- Entering Commands507
- CLI Command Groups514
- Table 40: Command Group Index514
19 General Commands517
- Prompt517
- Table 41: General Commands517
- Reload (Global Configuration)518
- Enable519
- Quit520
- Show History520
- Configure521
- Disable522
- Reload (Privileged Exec)522
- Show Reload523
- End523
- Exit523
20 System Management Commands525
- Device Designation525
- System Status526
- Frame Size533
  - Jumbo Frame533
  - Table 45: Frame Size Commands533
- File Management534
- Line544
- SMTP Alerts561
21 Snmp Commands581
- Table 57: SNMP Commands581
- General SNMP Commands582
22 Remote Monitoring Commands601
- Table 62: RMON Commands601
- Rmon Alarm602
- Rmon Event603
- Rmon Collection History604
- Rmon Collection Rmon1605
- Show Rmon Alarms606
- Show Rmon Events606
- Show Rmon History606
- Show Rmon Statistics607
23 Authentication609
- Commands609
- User Accounts609
  - Table 63: Authentication Commands609
  - Table 64: User Access Commands609
  - Enable Password610
  - Table 65: Default Login Settings611
  - Username611
- Authentication Sequence612
  - Authentication Enable612
  - Table 66: Authentication Sequence Commands612
  - Authentication Login613
- RADIUS Client614
  - Radius-Server Acct-Port614
  - Table 67: RADIUS Client Commands614
  - Radius-Server Auth-Port615
  - Radius-Server Host615
  - Radius-Server Key616
  - Radius-Server Retransmit616
  - Radius-Server Timeout617
  - Show Radius-Server617
- TACACS+ Client618
  - Tacacs-Server Host618
  - Table 68: TACACS+ Client Commands618
  - Tacacs-Server Key619
- Tacacs-Server Port620
- Aaa Accounting Commands621
- Table 69: AAA Commands621
- Aaa Accounting Dot1X622
- Aaa Accounting Exec623
- Aaa Accounting Update624
- Aaa Authorization Exec625
- Aaa Group Server626
- Accounting Dot1X627
- Authorization Exec628
- Table 70: Web Server Commands629
- Ip Http Port630
- Ip Http Secure-Port631
- Table 71: HTTPS System Support632
- Table 72: Telnet Server Commands633
- Ip Telnet Port634
- Show Ip Telnet635
- Table 73: Secure Shell Commands635
- Ip Ssh Authentication-Retries638
- Ip Ssh Server-Key Size639
- Ip Ssh Timeout640
- Ip Ssh Crypto Host-Key Generate641
- Ip Ssh Crypto Zeroize642
- Show Public-Key643
  - Table 74: Show Ssh - Display Description644
  - Port Authentication645
  - Management IP Filter660
24 General Security Measures663
- Table 77: General Security Commands663
- Port Security664
- Table 78: Management IP Filter Commands664
- Network Access (MAC Address Authentication)666
  - Table 79: Network Access Commands666
  - Network-Access Aging667
  - Network-Access Mac-Filter667
  - Mac-Authentication Reauth-Time668
  - Network-Access Dynamic-Qos669
  - Table 80: Dynamic Qos Profiles669
- Network-Access Dynamic-Vlan670
- Network-Access Guest-Vlan671
- Network-Access Link-Detection Link-Down672
- Network-Access Link-Detection Link-Up-Down673
- Network-Access Max-Mac-Count674
- Network-Access Port-Mac-Filter675
- Mac-Authentication Intrusion-Action676
- Clear Network-Access677
- Show Network-Access Mac-Address-Table678
- Show Network-Access Mac-Filter679
- Table 81: Web Authentication680
- Web-Auth Login-Attempts680
- Web-Auth Quiet-Period681
- Web-Auth System-Auth-Control682
- Web-Auth Re-Authenticate (Port)683
- Show Web-Auth684
- Show Web-Auth Summary685
- Table 82: DHCP Snooping Commands685
- Ip Dhcp Snooping686
- Ip Dhcp Snooping Information Option688
- Ip Dhcp Snooping Information Policy689
- Ip Dhcp Snooping Vlan690
- Ip Dhcp Snooping Trust691
- Clear Ip Dhcp Snooping Database Flash692
- Show Ip Dhcp Snooping693
- Table 83: IP Source Guard Commands694
- Ip Source-Guard696
- Ip Source-Guard Max-Binding697
- Show Ip Source-Guard698
- Table 84: ARP Inspection Commands699
- Ip Arp Inspection700
- Ip Arp Inspection Filter701
- Ip Arp Inspection Log-Buffer Logs702
- Ip Arp Inspection Validate703
- Ip Arp Inspection Limit704
- Ip Arp Inspection Trust705
- Show Ip Arp Inspection Configuration706
- Show Ip Arp Inspection Log707
- Table 85: Dos Protection Commands708
- Denial of Service Protection708
  - Acces Control List711
  - Access-List Ip712
  - Permit, Deny, Redirect-To (Extended Ipv4 ACL)714
  - Table 88: Priority Bits Processed by Extended Ipv4 ACL716
  - Ip Access-Group717
  - Show Ip Access-List718
  - Table 89: MAC ACL Commands718
  - Access-List Mac719
  - Mac Access-Group722
  - Show Mac Access-List723
  - Table 90: ARP ACL Commands723
  - Permit, Deny (ARP ACL)724
  - Show Arp Access-List725
  - Table 91: ACL Information Commands726
  - Table 92: Interface Commands729
  - Interface Configuration730
  - Alias731
  - Description732
  - Flowcontrol733
  - Giga-Phy-Mode734
  - Negotiation735
  - Shutdown736
  - Clear Counters739
  - Show Interfaces Counters740
  - Show Interfaces Status741
  - Show Interfaces Switchport742
  - Table 93: Show Interfaces Switchport - Display Description743
  - Show Interfaces Transceiver744
- Table 86: Access Control List Commands711
- Table 87: Ipv4 ACL Commands711
25 Access Control Lists712
- Cable Diagnostics745
  - Show Cable-Diagnostics746
- Power Savings747
- Dynamic Configuration Commands751
28 Port Mirroring Commands762
- Local Port Mirroring Commands762
  - Show Port Monitor763
  - Table 101: RSPAN Commands764
- RSPAN Mirroring Commands764
30 Automatic Traffic Controlcommands776
- ATC Display Commands786
31 Address Table Commands790
32 Spanning Tree Commands797
- Configuring IEEE 802.1Q Tunneling836
- Configuring Protocol-Based Vlans842
- Configuring MAC Based Vlans848
34 Class of Service Commands858
- Show Qos Map Phb-Queue868
- Table 125: Quality of Service Commands869
35 Quality of Service Commands870
- Class-Map870
- Description871
- Match872
- Rename873
- Class874
- Police Flow875
- Police Srtcm-Color877
- Police Trtcm-Color879
- Service-Policy884
- Show Class-Map885
- Show Policy-Map Interface886
  - Table 126: Multicast Filtering Commands887
  - Table 127: IGMP Snooping Commands887
  - Ip Igmp Snooping889
- Ip Igmp Snooping Querier890
- Ip Igmp Snooping Router-Port-Expire-Time891
- Ip Igmp Snooping Tcn-Flood892
- Ip Igmp Snooping Tcn-Query-Solicit893
- Ip Igmp Snooping Unsolicited-Report-Interval894
- Ip Igmp Snooping Version895
- Ip Igmp Snooping Vlan General-Query-Suppression896
- Ip Igmp Snooping Vlan Last-Memb-Query-Count898
  - Ip Igmp Snooping Vlan Mrd900
  - Ip Igmp Snooping Vlan Query-Interval901
  - Ip Igmp Snooping Vlan Query-Resp-Intvl902
  - Show Ip Igmp Snooping904
  - Show Ip Igmp Snooping Group905
  - Table 128: Static Multicast Interface Commands906
- Static Multicast Routing906
  - Table 129: IGMP Filtering and Throttling Commands907
  - Ip Igmp Profile908
  - Permit, Deny909
  - Ip Igmp Filter (Interface Configuration)910
  - Ip Igmp Max-Groups Action911
  - Show Ip Igmp Filter912
  - Show Ip Igmp Throttle Interface913
  - Table 130: Multicast VLAN Registration Commands914
  - Mvr Type916
  - Mvr Vlan Group917
  - Show Mvr918
  - Table 131: Show Mvr - Display Description919
  - Table 132: Show Mvr Interface - Display Description919
  - Table 133: Show Mvr Members - Display Description920
  - Table 134: LLDP Commands921
- Lldp923
  - Lldp Med-Fast-Start-Count924
  - Lldp Refresh-Interval925
  - Lldp Tx-Delay926
- Lldp Admin-Status927
- Lldp Basic-Tlv Port-Description928
- Lldp Basic-Tlv System-Capabilities929
- Lldp Basic-Tlv System-Name930
- Lldp Dot1-Tlv Proto-VID931
- Lldp Dot1-Tlv Vlan-Name932
- Lldp Dot3-Tlv Max-Frame933
- Table 135: LLDP MED Location CA Types934
- Lldp Med-Notification935
- Lldp Med-Tlv Ext-Poe936
- Lldp Med-Tlv Location937
- Lldp Med-Tlv Network-Policy938
- Show Lldp Config939
- Show Lldp Info Local-Device940
- Show Lldp Info Remote-Device941
- Show Lldp Info Statistics943
38 Domain Name Service C Ommands945
- Ip Domain-List945
- Table 136: Address Table Commands945
- Ip Domain-Lookup946
- Ip Domain-Name947
- Ip Name-Server949
- Ipv6 Host950
- Clear Host951
- Ipv6 Interface970
- Management Features994
- Standards995
- Management Information Bases996
- Table 151: Troubleshooting Chart997
- Using System Logs998
100 C License Information999
- The GNU General Public License999
  - License Information1000
  - G Lossary1003

Edge-Core ECS3510-26P

Table of Contents

Other manuals for Edge-Core ECS3510-26P

Related product manuals