Edge-Core ES3528-WDM

Edge-Core ES3528-WDM

556 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

Client Security

7-4

7

Table of Contents

Default Chapter5
- Table of Contents5
Section I: Getting Started27
Chapter 1: Introduction29
- Key Features29
- Table 1-1 Key Features29
- Description of Software Features30
- System Defaults34
- Table 1-2 System Defaults34
Chapter 2: Initial Configuration37
- Connecting to the Switch37
- Basic Configuration39
- Managing System Files44
  - Saving Configuration Settings45
Section II: Switch Management47
Chapter 3: Configuring the Switch49
- Using the Web Interface49
- Navigating the Web Browser Interface50
Chapter 4: Basic Management Tasks57
- Displaying System Information57
- Figure 4-1 System Information58
- Configuring the Switch for Normal Operation or Tunneling Mode59
- Figure 4-2 System Mode59
- Configuring the Maximum Frame Size60
- Figure 4-3 System MTU60
- Configuring Support for Jumbo Frames61
- Figure 4-4 Configuring Support for Jumbo Frames61
- Displaying Switch Hardware/Software Versions62
- Figure 4-5 Switch Information62
- Displaying Bridge Extension Capabilities63
- Setting the Switch's IP Address64
  - Figure 4-6 Displaying Bridge Extension Configuration64
  - Figure 4-7 IP Interface Configuration - Manual65
  - Manual Configuration65
  - Figure 4-8 IP Interface Configuration - DHCP66
  - Using DHCP/BOOTP66
- Managing Firmware67
  - Downloading System Software from a Server68
  - Figure 4-9 Copy Firmware68
  - Figure 4-10 Setting the Startup Code68
  - Figure 4-11 Deleting Files69
- Saving or Restoring Configuration Settings70
  - Downloading Configuration Settings from a Server71
  - Figure 4-12 Downloading Configuration Settings for Start-Up71
  - Figure 4-13 Setting the Startup Configuration Settings71
- Console Port Settings72
- Figure 4-14 Configuring the Console Port73
- Telnet Settings74
- Figure 4-15 Configuring the Telnet Interface75
- Configuring Event Logging76
  - System Log Configuration76
  - Table 4-1 Logging Levels76
  - Remote Log Configuration77
  - Figure 4-16 System Logs77
  - Figure 4-17 Remote Logs78
  - Displaying Log Messages79
  - Sending Simple Mail Transfer Protocol Alerts79
  - Figure 4-18 Displaying Logs79
  - Figure 4-19 Enabling and Configuring SMTP Alerts80
- Resetting the System81
- Figure 4-20 Resetting the System81
- Setting the System Clock82
  - Configuring SNTP82
  - Figure 4-21 SNTP Configuration82
  - Setting the Time Zone83
  - Figure 4-22 Clock Time Zone83
Chapter 5: Simple Network Management Protocol85
- Enabling the SNMP Agent86
- Table 5-1 Snmpv3 Security Models and Levels86
- Figure 5-1 Enabling the SNMP Agent86
- Setting Community Access Strings87
- Figure 5-2 Configuring SNMP Community Strings87
- Specifying Trap Managers and Trap Types88
- Figure 5-3 Configuring SNMP Trap Managers90
- Configuring Snmpv3 Management Access91
Chapter 6: User Authentication103
- Configuring User Accounts103
- Configuring Local/Remote Logon Authentication104
- Figure 6-1 User Accounts104
- Figure 6-2 Authentication Server Settings106
- Configuring HTTPS107
- Configuring the Secure Shell109
- Configuring 802.1X Port Authentication115
- Filtering IP Addresses for Management Access122
- Figure 6-10 IP Filter123
Chapter 7: Client Security125
- Configuring Port Security125
- Figure 7-1 Port Security127
Chapter 8: Access Control Lists129
- Configuring Access Control Lists129
- Binding a Port to an Access Control List141
- Figure 8-8 ACL Port Binding142
Chapter 9: Port Configuration143
- Displaying Connection Status143
- Figure 9-1 Port - Port Information143
- Configuring Interface Connections145
- Figure 9-2 Port - Port Configuration147
- Creating Trunk Groups148
- Setting Broadcast Storm Thresholds159
- Figure 9-9 Port Broadcast Control160
- Configuring Port Mirroring161
- Figure 9-10 Mirror Port Configuration161
- Configuring Rate Limits162
- Figure 9-11 Rate Limit Configuration162
- Showing Port Statistics163
- Table 9-4 Port Statistics163
- Figure 9-12 Port Statistics166
Chapter 10: Address Table Settings169
- Setting Static Addresses169
- Figure 10-1 Static Addresses169
- Displaying the Address Table170
- Figure 10-2 Dynamic Addresses171
- Changing the Aging Time172
- Figure 10-3 Address Aging172
Chapter 11: Spanning Tree Algorithm173
- Displaying Global Settings175
- Figure 11-1 STA Information176
- Configuring Global Settings178
- Figure 11-2 STA Global Configuration181
- Displaying Interface Settings182
- Figure 11-3 STA Port Information184
- Configuring Interface Settings185
- Table 11-2 Recommended STA Path Costs186
- Figure 11-4 STA Port Configuration187
- Configuring Multiple Spanning Trees188
- Figure 11-5 MSTP VLAN Configuration189
- Displaying Interface Settings for MSTP191
- Figure 11-6 MSTP Port Information191
- Configuring Interface Settings for MSTP192
- Figure 11-7 MSTP Port Configuration193
Chapter 12: VLAN Configuration195
- IEEE 802.1Q Vlans195
- Configuring IEEE 802.1Q Tunneling206
  - Adding an Interface to a Qinq Tunnel210
  - Figure 12-8 Tunnel Port Configuration210
- Configuring Private Vlans211
- Configuring Protocol-Based Vlans212
Chapter 13: Class of Service217
- Layer 2 Queue Settings217
- Layer 3/4 Priority Settings223
Chapter 14: Quality of Service229
- Configuring Quality of Service Parameters229
Chapter 15: Multicast Filtering237
- Layer 2 IGMP (Snooping and Query)238
- Multicast VLAN Registration245
Chapter 16: Domain Name Service253
- Configuring General DNS Service Parameters253
- Figure 16-1 DNS General Configuration254
- Configuring Static DNS Host to Address Entries255
- Figure 16-2 DNS Static Host Table256
- Displaying the DNS Cache257
- Figure 16-3 DNS Cache257
Section III:command Line Interface259
Chapter 17: Overview of Command Line Interface261
- Using the Command Line Interface261
- Entering Commands263
- Command Groups270
- Table 17-4 Command Group Index270
Chapter 18: General Commands273
- Enable273
- Table 18-1 General Commands273
- Disable274
- Configure274
- Show History275
- Reload276
- Prompt276
- End276
- Exit277
- Quit277
Chapter 19: System Management Commands279
- Device Designation Commands279
- System Status Commands280
- Show System284
- Show Users285
- Show Version285
- System Mode Commands286
- System MTU Commands287
- File Management Commands290
- Line Commands297
- Event Logging Commands306
- SMTP Alert Commands312
Chapter 20: SNMP Commands321
- Table 20-1 SNMP Commands321
- Show Snmp322
- Snmp-Server322
- Snmp-Server Community323
- Snmp-Server Contact324
- Snmp-Server Location324
- Snmp-Server Host325
- Snmp-Server Enable Traps327
- Snmp-Server Engine-ID328
- Show Snmp Engine-ID329
- Table 20-2 Show Snmp Engine-ID - Display Description329
- Snmp-Server View330
- Show Snmp View331
- Snmp-Server Group331
- Table 20-3 Show Snmp View - Display Description331
- Show Snmp Group332
- Table 20-4 Show Snmp Group - Display Description333
- Snmp-Server User334
- Show Snmp User335
- Table 20-5 Show Snmp User - Display Description335
Chapter 21: User Authentication Commands337
- User Account Commands337
- Authentication Sequence340
- RADIUS Client342
- TACACS+ Client345
- Web Server Commands347
- Telnet Server Commands350
  - Ip Telnet Server350
  - Table 21-9 Telnet Server Commands350
- Secure Shell Commands351
- 802.1X Port Authentication360
- Management IP Filter Commands369
Chapter 22: Client Security Commands371
- Port Security Commands371
- IP Source Guard Commands373
- DHCP Snooping Commands377
Chapter 23: Access Control List Commands385
- IP Acls385
- MAC Acls396
- ACL Information403
Chapter 24: Interface Commands406
- Description406
- Speed-Duplex406
- Negotiation407
- Capabilities408
- Table 24-1 Interface Commands408
- Flowcontrol409
- Media-Type410
- Shutdown410
- Switchport Packet-Rate411
- Switchport Block412
- Clear Counters412
- Show Interfaces Status413
- Show Interfaces Counters414
- Show Interfaces Switchport415
- Table 24-2 Show Interfaces Switchport - Display Description416
Chapter 25: Link Aggregation Commands418
- Channel-Group418
- Lacp418
- Lacp System-Priority420
- Lacp Admin-Key (Ethernet Interface)420
- Table 25-1 Link Aggregation Commands420
- Lacp Admin-Key (Port Channel)421
- Lacp Port-Priority422
- Show Lacp423
- Table 25-2 Show Lacp Counters - Display Description423
- Table 25-3 Show Lacp Internal - Display Description424
- Table 25-4 Show Lacp Neighbors - Display Description425
- Table 25-5 Show Lacp Sysid - Display Description426
Chapter 26: Mirror Port Commands427
- Port Monitor427
- Table 26-1 Mirror Port Commands427
- Show Port Monitor428
Chapter 27: Rate Limit Commands429
- Rate-Limit429
- Table 27-1 Rate Limit Commands429
- Rate-Limit Cos430
- Table 27-2 Mapping Default to Per Port Cos Priority Levels430
- Show Rate-Limit Cos431
Chapter 28: Address Table Commands433
- Mac-Address-Table Static433
- Table 28-1 Address Table Commands433
- Clear Mac-Address-Table Dynamic434
- Show Mac-Address-Table435
- Mac-Address-Table Aging-Time436
- Show Mac-Address-Table Aging-Time436
Chapter 29: Spanning Tree Commands437
- Table 29-1 Spanning Tree Commands437
- Spanning-Tree438
- Spanning-Tree Mode438
- Spanning-Tree Forward-Time440
- Spanning-Tree Hello-Time440
- Spanning-Tree Max-Age441
- Spanning-Tree Pathcost Method442
- Spanning-Tree Priority442
- Spanning-Tree Mst-Configuration443
- Spanning-Tree Transmission-Limit443
- Mst Vlan444
- Mst Priority445
- Name445
- Revision446
- Max-Hops447
- Spanning-Tree Spanning-Disabled447
- Spanning-Tree Cost448
- Table 11-1 Recommended STA Path Cost Range448
- Table 11-3 Default STA Path Costs448
- Table 29-3 Recommended STA Path Cost448
- Spanning-Tree Port-Priority449
- Spanning-Tree Edge-Port450
- Spanning-Tree Portfast450
- Spanning-Tree Link-Type451
- Spanning-Tree Mst Cost452
- Spanning-Tree Mst Port-Priority453
- Show Spanning-Tree454
- Spanning-Tree Protocol-Migration454
- Show Spanning-Tree Mst Configuration456
Chapter 30: VLAN Commands457
- GVRP and Bridge Extension Commands457
- Editing VLAN Groups462
- Configuring VLAN Interfaces464
- Displaying VLAN Information469
  - Show Vlan469
  - Table 30-5 Commands for Displaying VLAN Information469
- Configuring Private Vlans470
- Configuring Protocol-Based Vlans472
- Configuring IEEE 802.1Q Tunneling476
Chapter 31: Class of Service Commands479
- Priority Commands (Layer 2)479
- Priority Commands (Layer 3 and 4)486
Chapter 32: Quality of Service Commands495
- Table 32-1 Quality of Service Commands495
- Class-Map496
- Match497
- Policy-Map498
- Class499
- Police500
- Set500
- Service-Policy501
- Show Class-Map502
- Show Policy-Map502
- Show Policy-Map Interface503
Chapter 33: Multicast Filtering Commands505
- IGMP Snooping Commands505
- IGMP Query Commands510
- Static Multicast Routing Commands514
- Multicast VLAN Registration Commands515
Chapter 34: Domain Name Service Commands521
- Ip Host521
- Table 34-1 DNS Commands521
- Clear Host522
- Ip Domain-Name523
- Ip Domain-List523
- Ip Name-Server524
- Ip Domain-Lookup525
- Show Hosts526
- Show Dns527
- Show Dns Cache527
- Table 34-2 Show Dns Cache - Display Description527
- Clear Dns Cache528
Chapter 35: IP Interface Commands529
- Basic IP Configuration529
Appendix A: Software Specifications537
- Software Features537
- Management Features538
- Standards538
- Management Information Bases539
Appendix B: Troubleshooting541
- Problems Accessing the Management Interface541
- Table B-1 Troubleshooting Chart541
- Using System Logs542
Glossary543
Index551

Related product manuals

Preview: Edge-Core ES3528M

Edge-Core ES3528M

Preview: Edge-Core ES3510MA

Edge-Core ES3510MA

Preview: Edge-Core ES4626F

Edge-Core ES4626F

Preview: Edge-Core ES4524D

Edge-Core ES4524D

Preview: Edge-Core ES4308-POE

Edge-Core ES4308-POE

Edge-Core ECS4100-12T

Edge-Core ECS2100-28P

Preview: Edge-Core ECS4310-26T

Edge-Core ECS4310-26T

Preview: Edge-Core ECS4310-18T

Edge-Core ECS4310-18T

Edge-Core ECS2100-28PP

Preview: Edge-Core ECS4100 Series

Edge-Core ECS4100 Series

Preview: Edge-Core ECS2020 Series

Edge-Core ECS2020 Series