Edge-Core ES3510MA-DC - Privileged Exec

Edge-Core ES3510MA-DC

1098 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

C

HAPTER

25

| General Security Measures

ARP Inspection

– 696 –

COMMAND MODE

Privileged Exec

EXAMPLE

Console#show ip arp inspection vlan 1

VLAN ID DAI Status ACL Name ACL Status

-------- --------------- -------------------- --------------------

1 disabled sales static

Console#

Table of Contents

Default Chapter5
- About this Guide5
  - Table of Contents7
- Contents7
- Figures35
- Tables45
Sectioni51
Getting Started51
Introduction51
- Key Features53
- Table 1: Key Features53
- Description of Software Features54
- System Defaults59
- Table 2: System Defaults59
Initial Switch Configuration63
- Connecting to the Switch63
- Basic Configuration66
- Managing System Files77
  - Saving or Restoring Configuration Settings78
Ection81
Web Configuration81
Using the Web Interface83
- Connecting to the Web Interface83
- Navigating the Web Browser Interface84
Basic99
- Tasks99
- Displaying System Information99
- Displaying Hardware/Software Versions100
- Figure 4: General Switch Information101
- Configuring Support for Jumbo Frames102
- Displaying Bridge Extension Capabilities103
- Managing System Files104
- Setting the System Clock113
- Console Port Settings117
- Figure 16: Console Port Settings118
- Telnet Settings119
- Displaying CPU Utilization120
- Displaying Memory Utilization121
- Resetting the System122
- Figure 20: Restarting the Switch (Immediately)124
- Figure 22: Restarting the Switch (At)125
Interface Configuration127
- Port Configuration127
- Trunk Configuration144
- Saving Power156
- Traffic Segmentation158
- VLAN Trunking162
- Figure 57: Configuring VLAN Trunking164
Vlan Configuration165
- IEEE 802.1Q Vlans165
- IEEE 802.1Q Tunneling178
- Protocol Vlans184
- Configuring IP Subnet Vlans189
- Figure 77: Configuring IP Subnet Vlans190
- Configuring MAC-Based Vlans191
- Figure 79: Configuring MAC-Based Vlans192
- Configuring VLAN Mirroring193
- Figure 81: Configuring VLAN Mirroring194
Address Table Settings195
- Setting Static Addresses195
- Changing the Aging Time197
- Displaying the Dynamic Address Table198
- Clearing the Dynamic Address Table199
- Configuring MAC Address Mirroring200
- Figure 88: Mirroring Packets Based on the Source MAC Address201
Spanning Tree Algorithm203
- Overview203
- Figure 90: STP Root Ports and Designated Ports204
- Figure 91: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree205
- Configuring Loopback Detection206
- Configuring Global Settings for STA207
- Figure 94: Configuring Global Settings for STA (STP)211
- Displaying Global Settings for STA212
- Rate Limit Configuration227
Storm Control Configuration229
- Figure 110: Configuring Storm Control230
Class of Service231
- Layer 2 Queue Settings231
Quality of Service245
- Overview245
- Configuring a Class Map246
- Figure 122: Configuring a Class Map247
- Figure 123: Showing Class Maps248
- Creating Qos Policies249
- Figure 126: Configuring a Policy Map257
- Figure 128: Adding Rules to a Policy Map258
- Attaching a Policy Map to a Port259
- Figure 130: Attaching a Policy Map to a Port260
Oip Traffic Configuration261
- Overview261
- Configuring Voip Traffic261
- V O Ip T Raffic C Onfiguration262
- Configuring Telephony OUI263
- Configuring Voip Traffic Ports264
- Figure 134: Configuring Port Settings for a Voice VLAN266
Security Measures267
- AAA Authorization and Accounting268
- Network Access (MAC Address Authentication)287
- Configuring HTTPS297
- Configuring the Secure Shell300
- Access Control Lists308
- ARP Inspection326
- Filtering IP Addresses for Management Access334
- Figure 188: Creating an IP Address Filter for Management Access335
- Configuring Port Security336
- Configuring 802.1X Port Authentication338
Basic Administration Protocols363
- Configuring Event Logging363
- Link Layer Discovery Protocol368
- Simple Network Management Protocol382
- Remote Monitoring405
- Switch Clustering416
Ip Configuration421
- Using the Ping Function421
- Address Resolution Protocol422
- Setting the Switch's IP Address (IP Version 4)425
- Setting the Switch's IP Address (IP Version 6)429
Ip Services445
- Configuring General DNS Service Parameters445
- Ip Ervice445
- Configuring a List of Domain Names446
- Figure 269: Configuring a List of Domain Names for DNS447
- Configuring a List of Name Servers448
- Configuring Static DNS Host to Address Entries449
- Figure 273: Configuring Static Entries in the DNS Table450
- Displaying the DNS Cache451
Multicast453
- Filtering453
- Overview453
- M Ulticast F Iltering453
- Layer 2 IGMP (Snooping and Query)454
- Filtering and Throttling IGMP Groups470
  - Enabling IGMP Filtering and Throttling471
  - Multicast VLAN Registration476
- 19 Using the Command Line I Nterface487
Using the Command Line Interface487
- Accessing the CLI487
- General Commands499
System Management Commands507
- Device Designation507
- Banner Information508
- System Status517
- Frame Size524
  - Jumbo Frame524
  - Table 44: Frame Size Commands524
- File Management525
- Dir530
- Whichboot531
- Table 46: File Directory Information531
- Upgrade Opcode Auto532
- Upgrade Opcode Path533
- Line535
- Event Logging544
- SMTP Alerts551
- Time555
Snmp Commands569
- Table 56: SNMP Commands569
- Snmp-Server570
- Snmp-Server Community571
- Snmp-Server Contact571
- Show Snmp572
- Snmp-Server Location572
- Snmp-Server Enable Traps573
- Snmp-Server Host574
- Snmp-Server Engine-ID577
- Snmp-Server Group578
- Snmp-Server User579
- Snmp-Server View580
- Show Snmp Engine-ID581
- Table 57: Show Snmp Engine-ID - Display Description581
- Show Snmp Group582
- Show Snmp User583
- Table 58: Show Snmp Group - Display Description583
- Table 59: Show Snmp User - Display Description583
- Nlm584
- Show Snmp View584
- Table 60: Show Snmp View - Display Description584
- Snmp-Server Notify-Filter585
- Show Nlm Oper-Status586
- Show Snmp Notify-Filter587
Remote Monitoring Commands589
- Table 61: RMON Commands589
- Rmon Alarm590
- Rmon Event591
- Rmon Collection History592
- Rmon Collection Rmon1593
- Show Rmon Alarms594
- Show Rmon Events594
- Show Rmon History594
- Show Rmon Statistics595
Authentication597
- Commands597
- User Accounts597
- Authentication Sequence600
- RADIUS Client602
- TACACS+ Client606
- Aaa609
- Aaa Accounting Exec611
- Aaa Accounting Update612
- Aaa Authorization Exec613
- Aaa Group Server614
- Server614
- Accounting Dot1X615
- Accounting Exec615
- Authorization Exec616
- Show Accounting616
- Web Server617
- Telnet Server621
- Secure Shell623
- Port Authentication633
General Security Measures651
- Table 76: General Security Commands651
- Port Security652
- Table 77: Management IP Filter Commands652
- Network Access (MAC Address Authentication)654
- Mac-Authentication Intrusion-Action664
- Mac-Authentication Max-Mac-Count664
- Clear Network-Access665
- Show Network-Access665
- Show Network-Access Mac-Address-Table666
- Show Network-Access Mac-Filter667
- Web Authentication667
- DHCP Snooping673
- IP Source Guard682
- ARP Inspection687
- Lists697
Interface Commands719
- Table 90: Interface Commands719
- Interface720
- Alias721
- Capabilities721
- Description722
- Flowcontrol723
- Media-Type724
- Negotiation725
- Shutdown725
- Speed-Duplex726
- Switchport Packet-Rate727
- Clear Counters728
- Show Interfaces Brief729
- Show Interfaces Counters729
- Interface Commands730
- Show Interfaces Status731
- Show Interfaces Switchport732
- Table 91: Show Interfaces Switchport - Display Description732
- Show Interfaces Transceiver733
- Test Cable-Diagnostics734
- Show Cable-Diagnostics735
- Power-Save736
- Show Power-Save737
Link Aggregation Commands739
- Table 92: Link Aggregation Commands739
- Port Channel Load-Balance740
- Channel-Group742
- Lacp742
- Lacp Admin-Key (Ethernet Interface)744
- Lacp Port-Priority745
- Lacp Admin-Key (Port Channel)746
- Lacp System-Priority746
- Show Lacp747
- Table 93: Show Lacp Counters - Display Description748
- Table 94: Show Lacp Internal - Display Description748
- Table 95: Show Lacp Neighbors - Display Description749
- Table 96: Show Lacp Sysid - Display Description750
Port Mirroring Commands751
- Local Port Mirroring Commands751
- RSPAN Mirroring Commands754
Rate Limit Commands761
- Rate-Limit761
- Table 100: Rate Limit Commands761
Automatic Traffic Control Commands763
- Table 101: ATC Commands763
- Auto-Traffic-Control Apply-Timer765
- Auto-Traffic-Control Release-Timer766
- Auto-Traffic-Control767
- Auto-Traffic-Control Action768
- Auto-Traffic-Control Alarm-Clear-Threshold769
- Auto-Traffic-Control Alarm-Fire-Threshold770
- Auto-Traffic-Control Auto-Control-Release771
- Auto-Traffic-Control Control-Release771
- Snmp-Server Enable Port-Traps Atc Broadcast-Alarm-Clear772
- Snmp-Server Enable Port-Traps Atc Broadcast-Alarm-Fire772
- Snmp-Server Enable Port-Traps Atc Broadcast-Control-Apply773
- Snmp-Server Enable Port-Traps Atc Broadcast-Control-Release773
- Snmp-Server Enable Port-Traps Atc Multicast-Alarm-Clear774
- Snmp-Server Enable Port-Traps Atc Multicast-Alarm-Fire774
- Snmp-Server Enable Port-Traps Atc Multicast-Control-Apply775
- Snmp-Server Enable Port-Traps Atc Multicast-Control-Release775
- Show Auto-Traffic-Control776
- Show Auto-Traffic-Control Interface776
Address Table Commands777
- Mac-Address-Table Aging-Time777
- Table 102: Address Table Commands777
- Mac-Address-Table Static778
- Clear Mac-Address-Table Dynamic779
- Show Mac-Address-Table779
- Show Mac-Address-Table Aging-Time780
- Show Mac-Address-Table Count781
Spanning Tree Commands783
- Table 103: Spanning Tree Commands783
- Spanning-Tree784
- Spanning-Tree Cisco-Prestandard785
- Spanning-Tree Forward-Time785
- Spanning-Tree Hello-Time786
- Spanning-Tree Max-Age787
- Spanning-Tree Mode787
- Spanning-Tree Pathcost Method789
- Spanning-Tree Priority789
- Spanning-Tree Mst Configuration790
- Spanning-Tree System-Bpdu-Flooding791
- Spanning-Tree Transmission-Limit791
- Max-Hops792
- Mst Priority792
- Mst Vlan793
- Name794
- Revision794
- Spanning-Tree Bpdu-Filter795
- Spanning-Tree Bpdu-Guard796
- Spanning-Tree Cost797
- Table 104: Recommended STA Path Cost Range797
- Table 105: Default STA Path Costs797
- Spanning-Tree Edge-Port798
- Spanning-Tree Link-Type799
- Spanning-Tree Loopback-Detection799
- Spanning-Tree Loopback-Detection Release-Mode800
- Spanning-Tree Loopback-Detection Trap801
- Spanning-Tree Mst Cost801
- Spanning-Tree Mst Port-Priority802
- Spanning-Tree Port-Bpdu-Flooding803
- Spanning-Tree Port-Priority804
- Spanning-Tree Root-Guard804
- Spanning-Tree Spanning-Disabled805
- Spanning-Tree Loopback-Detection Release806
- Spanning-Tree Protocol-Migration806
- Show Spanning-Tree807
- Spanning Tree Commands808
- Show Spanning-Tree Mst Configuration809
Erps Commands811
- Figure 303: ERPS Ring Components812
Vlan Commands825
- Table 109: VLAN Commands825
- GVRP and Bridge Extension Commands826
- Editing VLAN Groups830
- Configuring VLAN Interfaces832
- Displaying VLAN Information839
  - Show Vlan839
  - Table 113: Commands for Displaying VLAN Information839
- Configuring IEEE 802.1Q Tunneling840
- Configuring Port-Based Traffic Segmentation846
- Configuring Protocol-Based Vlans848
- Configuring IP Subnet Vlans852
- Configuring MAC Based Vlans854
- Configuring Voice Vlans855
Class of Service Commands863
- Priority Commands (Layer 2)863
- Priority Commands (Layer 3 and 4)868
Quality of Service Commands877
- Table 126: Quality of Service Commands877
- Class-Map878
- Description879
- Match880
- Policy-Map881
- Rename881
- Class882
- Police Flow883
- Police Srtcm-Color885
- Police Trtcm-Color887
- Set Cos889
- Set Ip Dscp890
- Set Phb891
- Service-Policy892
- Show Class-Map893
- Show Policy-Map893
- Show Policy-Map Interface894
38 Multicast Filtering Commands895
- Commands895
- IGMP Snooping895
  - Table 127: Multicast Filtering Commands895
  - Table 128: IGMP Snooping Commands895
  - Ip Igmp Snooping897
  - Ip Igmp Snooping Priority897
  - Ip Igmp Snooping Proxy-Reporting898
  - Ip Igmp Snooping Querier899
  - Ip Igmp Snooping Router-Alert-Option-Check899
  - Ip Igmp Snooping Router-Port-Expire-Time900
- Ip Igmp Snooping Tcn-Flood900
- Ip Igmp Snooping Tcn-Query-Solicit902
- Ip Igmp Snooping Unregistered-Data-Flood902
- Ip Igmp Snooping Unsolicited-Report-Interval903
- Ip Igmp Snooping Version904
- Ip Igmp Snooping Version-Exclusive904
- Ip Igmp Snooping Vlan General-Query-Suppression905
- Ip Igmp Snooping Vlan Immediate-Leave906
- Ip Igmp Snooping Vlan Last-Memb-Query-Count907
- Ip Igmp Snooping Vlan Last-Memb-Query-Intvl907
- Ip Igmp Snooping Vlan Mrd908
- Ip Igmp Snooping Vlan Proxy-Address909
- Ip Igmp Snooping Vlan Proxy-Query-Interval910
- Ip Igmp Snooping Vlan Proxy-Query-Resp-Intvl911
- Ip Igmp Snooping Vlan Static911
- Show Ip Igmp Snooping912
- Show Ip Igmp Snooping Group913
- Static Multicast Routing914
  - Ip Igmp Snooping Vlan Mrouter914
  - Table 129: Static Multicast Interface Commands914
  - Show Ip Igmp Snooping Mrouter915
- IGMP Filtering and Throttling915
  - Table 130: IGMP Filtering and Throttling Commands915
  - Ip Igmp Filter (Global Configuration)916
  - Ip Igmp Profile917
  - Permit, Deny917
  - Ip Igmp Filter (Interface Configuration)918
  - Range918
  - Ip Igmp Max-Groups919
  - Ip Igmp Max-Groups Action920
  - Show Ip Igmp Filter920
  - Show Ip Igmp Profile921
  - Show Ip Igmp Throttle Interface921
- Multicast VLAN Registration922
  - Table 131: Multicast VLAN Registration Commands922
  - Mvr923
  - Mvr Group923
  - Mvr Priority924
  - Mvr Upstream-Source-Ip925
  - Mvr Vlan925
  - Mvr Immediate-Leave926
  - Mvr Type927
  - Mvr Vlan Group928
  - Show Mvr929
  - Table 132: Show Mvr - Display Description930
  - Table 133: Show Mvr Interface - Display Description930
  - Table 134: Show Mvr Members - Display Description931
Lldp Commands933
- Table 135: LLDP Commands933
- Lldp935
- Lldp Holdtime-Multiplier935
- Lldp Med-Fast-Start-Count936
- Lldp Notification-Interval936
- Lldp Refresh-Interval937
- Lldp Reinit-Delay937
- Lldp Tx-Delay938
- Lldp Admin-Status939
- Lldp Basic-Tlv Management-Ip-Address939
- Lldp Basic-Tlv Port-Description940
- Lldp Basic-Tlv System-Capabilities941
- Lldp Basic-Tlv System-Description941
- Lldp Basic-Tlv System-Name942
- Lldp Dot1-Tlv Proto-Ident942
- Lldp Dot1-Tlv Proto-VID943
- Lldp Dot1-Tlv Pvid943
- Lldp Dot1-Tlv Vlan-Name944
- Lldp Dot3-Tlv Link-Agg944
- Lldp Dot3-Tlv Mac-Phy945
- Lldp Dot3-Tlv Max-Frame945
- Lldp Med-Location CIVIC-Addr946
- Table 136: LLDP MED Location CA Types946
- Lldp Med-Notification947
- Lldp Med-Tlv Inventory948
- Lldp Med-Tlv Location949
- Lldp Med-Tlv Med-Cap949
- Lldp Med-Tlv Network-Policy950
- Lldp Notification950
- Show Lldp Config951
- Show Lldp Info Local-Device952
- Show Lldp Info Remote-Device953
- Show Lldp Info Statistics955
Cfm Commands957
- Figure 305: Single CFM Maintenance Domain958
- Ommands1001
Domain Name Service Commands1011
- Ip Domain-List1011
- Table 147: Address Table Commands1011
- Ip Domain-Lookup1012
- Ip Domain-Name1013
- Ip Host1014
- Ip Name-Server1015
- Ipv6 Host1016
- Clear Dns Cache1016
- Clear Host1017
- Show Dns1017
- Show Dns Cache1018
- Show Hosts1018
- Table 148: Show Dns Cache - Display Description1018
- Table 149: Show Hosts - Display Description1019
Dhcp Commands1021
- DHCP Client1021
Ip Interface Commands1027
- Ipv4 Interface1027
- Ipv6 Interface1035
Ection1059
Appendices1059
- Specifications1061
- B Troubleshooting1067
- Information1069
  - The GNU General Public License1069
  - License Information1070
- Glossary1073
- Ommand ist1081
  - List1081
- Index1089

Related product manuals

Preview: Edge-Core ES3510MA

Edge-Core ES3510MA

Preview: Edge-Core ES3528M

Edge-Core ES3528M

Preview: Edge-Core ES3528-WDM

Edge-Core ES3528-WDM

Preview: Edge-Core ES4626F

Edge-Core ES4626F

Preview: Edge-Core ES4524D

Edge-Core ES4524D

Preview: Edge-Core ES4308-POE

Edge-Core ES4308-POE

Preview: Edge-Core ECS1100-5P

Edge-Core ECS1100-5P

Preview: Edge-Core ECS4310-18T

Edge-Core ECS4310-18T

Preview: Edge-Core ECS4620-28F

Edge-Core ECS4620-28F

Edge-Core ECS4110-28P

Preview: Edge-Core ECS5610-52S

Edge-Core ECS5610-52S

Preview: Edge-Core ECS2020 Series

Edge-Core ECS2020 Series