Enterasys C5G124-24

Enterasys C5G124-24

452 pages

To Previous Page

To Previous Page

Loading...

Dynamic ARP Inspection

26-28 Configuring Security Features

Table of Contents

Default Chapter7
- Table of Contents7
- About this Guide25
- Conventions Used in this Guide25
- How to Use this Guide25
- Important Notice25
- Related Documents25
Chapter 1 : Setting up a Switch for the First Time27
- Before You Begin27
- Connecting to the Switch28
- Downloading New Firmware29
  - Deleting a Backup Image File31
- Additional Configuration Tasks31
- Saving the Configuration and Connecting Devices33
- Configuring a Stack of New Switches34
- Where to Go Next35
- Getting Help36
- Downloading Firmware Via the Serial Port36
Chapter 2 : Configuring Switches in a Stack39
- About Switch Operation in a Stack39
  - Stack Initialization39
  - Configuration Management40
- Installing a New Stackable System of up to Eight Units40
- Installing Previously-Configured Systems in a Stack41
- Adding a New Unit to an Existing Stack41
- Removing Units from an Existing Stack42
  - Stack Disruption Times42
- Creating a Virtual Switch Configuration42
  - Example43
  - Considerations about Using "Clear Config" in a Stack43
- Configuring Standalone A4 Stack Ports44
  - When Uplink Ports Are Configured as Ethernet Ports44
Chapter 3: CLI Basics45
- Switch Management Methods45
- Using the Command Line Interface45
  - Starting a CLI Session45
    - Connecting Using Telnet or SSH46
    - Connecting Using the Console Port46
- CLI Startup Screen46
- Sample CLI Defaults Description48
- Performing a Keyword Lookup48
- Performing a Partial Keyword Lookup48
  - Displaying Scrolling Screens49
  - Abbreviating and Completing Commands49
- Scrolling Screen Output49
- Abbreviating a Command49
  - Basic Line Editing Commands50
- Configuring CLI Properties50
- CLI Properties Configuration Commands50
  - Example CLI Properties Configuration51
  - CLI Properties Display Commands51
- CLI Properties Show Commands51
Chapter 4 : System Configuration53
- Factory Default Settings53
- Default Settings for Basic Switch Operation53
- Advanced Configuration53
  - Factory Default Settings54
- Default Settings for Router Operation56
- Default SNTP Parameters65
- Managing and Displaying SNTP66
  - SNTP Configuration Example67
  - DHCP Configuration68
- Managing and Displaying DHCP Server72
- Default DHCP Server Parameters72
  - Configuring DHCP IP Address Pools73
  - Telnet Overview75
- Configuring Pool Parameters75
Chapter 5: User Account and Password Management81
- User Account Overview81
- Password Management Overview86
  - System Level Password Settings86
    - Defaults87
- User Account and Password Parameter Defaults by Security Mode87
  - System Password Settings Configuration88
- User Account and Password Parameter Defaults by Security Mode88
  - Password Reset Button Functionality89
  - Management Authentication Notification MIB Functionality89
Chapter 6: Firmware Image and File Management91
- Managing the Firmware Image91
- Managing Switch Configuration and Files94
- File Management Commands98
Chapter 7: Configuring System Power and Poe99
- Configuring Redundant Power Supplies99
- Power over Ethernet Overview99
  - Implementing Poe100
  - Allocation of Poe Power to Modules100
- Poe Powered Device Classes100
- Poe Settings Supported on Enterasys Devices102
- Poe Show Commands108
Chapter 8: Port Configuration109
- Port Configuration Overview109
- Displaying Port Status115
  - Example116
  - Configuring Port Link Flap Detection116
    - Basic Link Flap Detection Configuration117
- Linkflap Default Parameters117
- Link Flap Detection Show Commands119
- Transmit Queue Monitoring Tasks119
  - Port Mirroring120
Chapter 9 : Configuring Vlans125
- VLAN Overview125
  - Using Vlans to Partition Your Network125
- Implementing Vlans126
- VLAN Business Scenario126
  - Preparing for VLAN Configuration127
- Understanding How Vlans Operate127
- Inside the Switch129
- Frame Format129
- Default VLAN Parameters133
- Displaying VLAN Information138
- VLAN Terms and Definitions138
Chapter 10: Configuring User Authentication141
- User Authentication Overview141
  - Implementing User Authentication142
  - Authentication Methods142
- Applying Policy to Multiple Users on a Single Port145
- Authenticating Multiple Users with Different Methods on a Single Port146
  - Remote Authentication Dial-In Service (RADIUS)147
- Selecting Authentication Method When Multiple Methods Are Validated147
- Configuring Authentication152
- Default Authentication Parameters152
- PWA Guest Networking Privileges Configuration157
- Displaying Multiauth Authentication Configuration160
- Authentication Configuration Terms and Definitions168
Chapter 11: Configuring Link Aggregation171
- Link Aggregation Overview171
- LAG Formation174
  - Attached Ports175
- LAG2 Port Priority Assignments175
  - Lags Moved to Attached State176
  - Configuring Link Aggregation179
- Default Link Aggregation Parameters179
- Managing Link Aggregation180
  - Link Aggregation Configuration Example181
- Displaying Link Aggregation Information and Statistics181
- Link Aggregation Example182
- LAG and Physical Port Admin Key Assignments183
- Link Aggregation Configuration Terms and Definitions185
Chapter 12: Configuring SNMP187
- SNMP Overview187
  - Implementing SNMP187
- SNMP Concepts188
  - Manager/Agent Model Components188
  - Message Functions188
- SNMP Message Functions188
- SNMP Terms and Definitions191
  - Security Models and Levels192
  - Access Control192
- SNMP Security Models and Levels192
  - Configuring SNMP193
- Default Enterasys SNMP Configuration194
  - Configuring Snmpv1/Snmpv2C195
  - Reviewing SNMP Settings204
- Commands to Review SNMP Settings204
Chapter 13: Configuring Neighbor Discovery205
- Neighbor Discovery Overview205
  - Neighbor Discovery Operation205
- Communication between LLDP-Enabled Devices207
- Lldp-Med207
- LLDP Show Commands214
- Cisco Discovery Protocol Show Commands216
Chapter 14 : Configuring Syslog219
- System Logging Overview219
- Syslog Operation220
  - Syslog Operation on Enterasys Devices220
  - Filtering by Severity and Facility220
- Syslog Components and Their Use221
- Syslog Terms and Definitions221
  - Basic Syslog Scenario223
- Basic System Scenario223
  - Interpreting Messages224
    - Example224
  - About Security Audit Logging224
- Syslog Message Components224
- Syslog Server Default Settings228
  - Displaying Current Application Severity Levels229
  - Enabling Console Logging and File Storage229
Chapter 15 : Configuring Spanning Tree231
- Spanning Tree Protocol Overview231
  - Why Use Spanning Trees232
  - Spanning Tree on Enterasys Platforms232
- Redundant Link Causes a Loop in a Non-STP Network232
- Loop Avoided When STP Blocks a Duplicate Path232
  - STP Operation233
    - Multiple Spanning Tree Operation234
    - Rapid Spanning Tree Operation234
- Multiple Spanning Tree Overview235
  - Functions and Features Supported on Enterasys Devices236
- Maximum SID Capacities Per Platform236
  - Disabling Spanning Tree237
  - STP Features237
  - Spanning Tree Basics239
- Root Port Selection Based on Lowest Cost or Bridge ID240
- Root Port Selection Based on Lowest Port ID241
  - Identifying Designated, Alternate, and Backup Port Roles242
- Spanning Tree Port Role Overview242
  - Assigning Port States243
- Spanning Tree Port Roles243
- Spanning Tree Port States243
  - RSTP Operation244
  - MSTP Operation244
    - Common and Internal Spanning Tree (CIST)244
    - MST Region245
- Example of an MST Region245
  - Multiple Spanning Tree Instances (MSTI)246
- Multiple Spanning Tree Instance Support246
- MSTI 1 in a Region248
- MSTI2 in the same Region248
  - Configuring STP and RSTP249
- Example of Multiple Regions and Mstis249
  - Reviewing and Enabling Spanning Tree250
- Spanning Tree Port Default Settings251
  - Assigning Port Costs252
  - Adjusting Bridge Protocol Data Unit (BPDU) Intervals252
- BPDU Interval Defaults252
  - Enabling the Backup Root Function253
  - Adjusting RSTP Parameters253
    - Defining Edge Port Status254
  - Configuring MSTP254
  - Example 1: Configuring MSTP for Traffic Segregation255
- Traffic Segregation in a Single STP Network Configuration255
- Traffic Segregation in an MSTP Network Configuration256
  - Example 2: Configuring MSTP for Maximum Bandwidth Utilization257
- Maximum Bandwidth Utilization in a Single STP Network Configuration257
  - Adjusting MSTP Parameters258
- Maximum Bandwidth in an MSTP Network Configuration258
  - Monitoring MSTP259
  - Understanding and Configuring Spanguard259
    - What Is Spanguard259
- Commands for Monitoring MSTP259
  - How Does It Operate260
  - Configuring Spanguard260
  - Understanding and Configuring Loop Protect261
    - How Does It Operate261
    - What Is Loop Protect261
- Commands for Monitoring Spanguard261
  - Port Modes and Event Triggers262
  - Example: Basic Loop Protect Configuration262
  - Configuring Loop Protect263
- Basic Loop Protect Scenario263
- Spanning Tree Without Loop Protect263
- Spanning Tree with Loop Protect263
  - Enabling or Disabling Loop Protect264
  - Specifying Loop Protect Partners264
  - Setting the Loop Protect Event Threshold and Window264
  - Enabling or Disabling Loop Protect Event Notifications265
  - Setting the Disputed BPDU Threshold265
  - Monitoring Loop Protect Status and Settings265
- Commands for Monitoring Loop Protect265
  - Terms and Definitions266
- Spanning Tree Terms and Definitions266
Chapter 16: Configuring Policy269
- Using Policy in Your Network269
  - Standard and Enhanced Policy on Enterasys Platforms270
  - Implementing Policy270
- Policy Configuration Overview270
- Admin Rule Parameters273
- Policy Rule Traffic Descriptions/Classifications274
- Valid Data Values for Traffic Classification Rules274
  - Applying Policy275
- Non-Edge Protocols276
  - Configuring Policy277
- Displaying Policy Configuration and Statistics279
  - Policy Configuration Example280
- College-Based Policy Configuration280
- Policy Configuration Terms and Definitions286
Chapter 17: Configuring Quality of Service287
- Quality of Service Overview287
- Cos Configuration Terminology289
  - Cos Reference290
    - Port Group and Type290
- Assigning and Marking Traffic with a Priority290
- Strict Priority Queuing Packet Behavior292
  - Hybrid Queuing293
- Weighted Fair Queuing Packet Behavior293
  - Rate Limiting294
- Hybrid Queuing Packet Behavior294
  - Flood Control295
  - Cos Hardware Resource Configuration295
    - Cos Port Configuration Layer295
    - IRL Configuration295
- Rate Limiting Clipping Behavior295
Chapter 18: Configuring Network Monitoring305
- Basic Network Monitoring Features305
- Rmon307
- RMON Monitoring Group Functions and Commands307
  - RMON Design Considerations308
  - Configuring RMON309
- Default RMON Parameters309
  - Sflow313
- Managing RMON313
- Displaying RMON Information and Statistics313
  - Using Sflow in Your Network314
  - Definitions314
- Sflow Definitions314
  - Sflow Agent Functionality315
  - Sampling Mechanisms315
- Default Sflow Parameters317
  - Procedure318
- Displaying Sflow Information319
- Managing Sflow319
Chapter 19: Configuring Multicast321
- Using Multicast in Your Network321
- IGMP Querier Determining Group Membership323
  - Example: Sending a Multicast Stream324
- Sending a Multicast Stream with no Directly Attached Hosts324
  - Distance Vector Multicast Routing Protocol (DVMRP)325
- DVMRP Pruning and Grafting331
- PIM Traffic Flow332
  - PIM Support on Enterasys Devices333
- PIM-SM Message Types333
  - PIM Terms and Definitions334
  - Configuring IGMP335
- Layer 2 IGMP Configuration Commands336
- Layer 3 IGMP Configuration Commands336
  - Basic IGMP Configuration337
    - Example IGMP Configuration on Layer 3337
    - IGMP Display Commands338
  - Configuring DVMRP338
    - DVMRP Configuration Commands338
- Layer 2 IGMP Show Commands338
- Layer 3 IGMP Show Commands338
  - Basic DVMRP Configuration339
    - Example DVMRP Configuration339
- DVMRP Configuration on Two Routers339
  - Displaying DVMRP Information340
  - Configuring PIM-SM341
    - Design Considerations341
    - PIM-SM Configuration Commands341
- DVMRP Show Commands341
- PIM-SM Set Commands341
  - Basic PIM-SM Configuration342
    - Example Configuration342
- PIM-SM Configuration343
  - PIM-SM Display Commands344
- PIM-SM Show Commands344
Chapter 20: IP Configuration345
- Enabling the Switch for Routing345
  - Router Configuration Modes345
- Testing Network Connectivity345
  - Entering Router Configuration Modes346
- Router CLI Configuration Modes346
- UDP Broadcast Forwarding Port Default352
- IP Routing Terms and Definitions354
Chapter 21: Ipv4 Basic Routing Protocols357
- Configuring RIP357
  - Using RIP in Your Network357
  - RIP Configuration Overview357
    - RIP Router Configuration357
    - RIP Interface Configuration358
- Routing Protocol Route Preferences358
  - RIP Configuration Example359
- RIP Default Values359
  - Configuring IRDP361
- IRDP Default Values361
Chapter 22: Configuring Ospfv2366
- OSPF Areas366
- OSPF Router Types367
- Designated Router367
- Authentication367
- Basic OSPF Topology Configuration367
  - Configuring the Router ID368
- Basic OSPF Topology368
  - Configuring the Designated Router369
    - Configuring Router Priority370
    - Example370
- OSPF Designated Router Topology370
- OSPF Summarization Topology373
  - Stub Area Default Route Cost374
  - Example374
- OSPF Stub Area Topology374
  - Configuring a Not so Stubby Area (NSSA)375
  - Configuring Area Virtual-Links376
    - Example376
- OSPF NSSA Topology376
- Virtual Link Topology377
- Default OSPF Parameters380
  - Configuration Procedures381
- OSPF Management Tasks383
Chapter 23: Configuring VRRP385
- VRRP Overview385
  - VRRP Virtual Router Creation386
  - VRRP Master Election386
- Basic VRRP Topology386
- Default VRRP Parameters387
  - Configuration Examples388
    - Basic VRRP Configuration388
- Basic Configuration Example389
  - Multiple Backup VRRP Configuration390
- Multi-Backup VRRP Configuration Example390
  - Terms and Definitions392
- VRRP Configuration Terms and Definitions392
Chapter 24 : Configuring Access Control Lists393
- Using Access Control Lists (Acls) in Your Network393
- Implementing Acls393
- ACL Configuration Overview394
- Configuring Acls399
- Access Control Lists on the A4403
- ACL Rule Precedence403
  - Configuring A4 Acls404
    - Extended Ipv4 ACL Configuration404
    - MAC ACL Configuration405
Chapter 25: Configuring and Managing Ipv6407
- Managing Ipv6407
  - Configuring Ipv6 Management408
    - Example408
- Ipv6 Routing Configuration409
  - Overview409
- Monitoring Network Connections at the Switch Level409
  - Defaults410
- Ipv6 Default Conditions410
  - Setting Routing General Parameters411
  - Configuring Routing Interfaces411
- Basic Ipv6 over Ipv4 Tunnel414
  - Configuring Static Routes415
  - Viewing Routing Information416
- Displaying Routing Information416
- Displaying Dhcpv6 Statistics424
Chapter 26 : Configuring Security Features425
- Security Mode Configuration425
  - About the Security Mode425
    - Configuring the Security Mode426
  - Security Mode and SNMP426
- SNMP Commands Affected by Security Mode Settings426
- Logging Commands Affected by Security Mode Settings428
- File Management Commands Affected by Security Mode Settings428
- TACACS+ Parameters437
- TACACS+ Show Commands439
  - Service Acls440
    - Configuring a Service Access Control List441
    - Restricting Management Access to the Console Port441
  - DHCP Snooping442
- DHCP Snooping Default Parameters444
  - Managing DHCP Snooping445
- Displaying DHCP Snooping Information445
  - Dynamic ARP Inspection446
- Dynamic ARP Inspection Default Parameters448
- Displaying Dynamic ARP Inspection Information448
  - Example Configuration449
    - Non-Routing Example449
- Managing Dynamic ARP Inspection449
  - Routing Example450

Other manuals for Enterasys C5G124-24

Quick Reference2 pages

Related product manuals

Preview: Enterasys C3G124-24

Enterasys C3G124-24

Preview: Enterasys SecureStack C2

Enterasys SecureStack C2

Preview: SecureStack C2 C2G124-24

SecureStack C2 C2G124-24

Preview: Enterasys B5G124-24

Enterasys B5G124-24

Preview: Enterasys A4H124-24

Enterasys A4H124-24

Preview: Enterasys 08H20G4-24

Enterasys 08H20G4-24

Preview: Enterasys B5G124-24P2

Enterasys B5G124-24P2

Preview: Enterasys A4H124-24FX

Enterasys A4H124-24FX

Enterasys SSA-G1018-0652

Preview: Enterasys Matrix 2G4072-52

Enterasys Matrix 2G4072-52

Preview: Enterasys Matrix-V V2H124-24

Enterasys Matrix-V V2H124-24

Preview: SecureStack A2 A2H124-24

SecureStack A2 A2H124-24