To Next Page

To Previous Page

ip access-group

18-80 Security Configuration

Usage

ACLsmustbeappliedperroutinginterface.Anentry(rule)canbeappliedtoinboundframes

only.

Example

Thisexampleshowshowtoapplyaccesslist1forallinboundframesontheVLAN1interface.

Throughthedefinitionofaccesslist1,onlyframeswithasourceaddressonthe192.5.34.0/24

networkwillberouted.AlltheframeswithothersourceaddressesreceivedontheVLAN1

interface

aredropped:

C2(su)->router(Config)#access-list 1 permit 192.5.34.0 0.0.0.255

C2(su)->router(Config)#interface vlan 1

C2(su)->router(Config-if(Vlan 1))#ip access-group 1 in

Default Chapter7
- Table of Contents7
About this Guide29
- Using this Guide29
- Structure of this Guide29
- Related Documents31
- Conventions Used in this Guide31
- Getting Help32
Chapter 1: Introduction33
- Securestack C2 CLI Overview33
- Switch Management Methods33
- Factory Default Settings34
- Default Settings for Basic Switch and Router Operation34
  - Using the Command Line Interface38
    - Starting a CLI Session38
- Securestack C2 Startup Screen38
  - Logging in39
  - Navigating the Command Line Interface40
- Sample CLI Defaults Description40
- Performing a Keyword Lookup40
- Performing a Partial Keyword Lookup41
- Scrolling Screen Output41
- Abbreviating a Command42
- Basic Line Editing Commands42
Chapter 2 : Configuring Switches in a Stack43
- About Securestack C2 Switch Operation in a Stack43
- Installing a New Stackable System of up to Eight Units44
- Installing Previously-Configured Systems in a Stack45
- Adding a New Unit to an Existing Stack45
- Creating a Virtual Switch Configuration46
- Considerations about Using Clear Config in a Stack47
- Issues Related to Mixed Type Stacks47
  - Feature Support47
  - Configuration47
- Stacking Configuration and Management Commands48
  - Purpose48
  - Commands48
Chapter 3 : Basic Configuration55
- Setting User Accounts and Passwords55
  - Purpose55
  - Commands55
- Show System Lockout Output Details61
  - Setting Basic Switch Properties62
- Show System Output Details66
- Show Version Output Details75
Chapter 4 : Discovery Protocol Configuration107
- Configuring CDP107
  - Purpose107
  - Commands107
    - Show Cdp107
- Show Cdp Output Details108
- Show Ciscodp Output Details113
  - Show Ciscodp Port Info114
- Show Ciscodp Port Info Output Details114
- Show Lldp Port Local-Info Output Details125
- Show Lldp Port Remote-Info Output Display128
Chapter 5 : Port Configuration139
- Port Configuration Summary139
- Reviewing Port Status141
  - Purpose141
  - Commands141
- Show Port Status Output Details143
- Show Port Counters Output Details144
- Show Linkflap Parameters Output Details160
  - Set Linkflap Globalstate161
- Show Linkflap Metrics Output Details161
- LACP Terms and Definitions171
  - Securestack C2 Usage Considerations172
    - Show Lacp173
- Show Lacp Output Details174
Chapter 6 : SNMP Configuration189
- SNMP Configuration Summary189
- SNMP Security Levels190
- Show Snmp Engineid Output Details192
  - Show Snmp Counters193
- Show Snmp Counters Output Details194
  - Configuring SNMP Users, Groups, and Communities195
- Show Snmp User Output Details197
  - Clear Snmp User198
  - Show Snmp Group198
- Show Snmp Group Output Details199
- Show Snmp Access Output Details204
- Show Snmp View Output Details208
  - Clear Snmp View209
  - Configuring SNMP Target Parameters210
- Show Snmp Targetparams Output Details211
  - Clear Snmp Targetparams212
  - Configuring SNMP Target Addresses213
- Show Snmp Targetaddr Output Details214
  - Clear Snmp Targetaddr215
  - Configuring SNMP Notification Parameters216
- Show Snmp Notify Output Details219
- Basic SNMP Trap Configuration224
  - Example225
Chapter 7: Spanning Tree Configuration227
- Spanning Tree Configuration Summary227
- Configuring Spanning Tree Bridge Parameters229
  - Purpose229
    - Show Spantree Stats231
- Show Spantree Output Details232
Chapter 8 : 802.1Q VLAN Configuration279
- VLAN Configuration Summary279
  - Port String Syntax Used in the CLI279
  - Creating a Secure Management VLAN279
- Viewing Vlans280
  - Purpose280
- Command Set for Creating a Secure Management VLAN280
  - Command281
    - Show Vlan281
  - Creating and Naming Static Vlans282
- Show Vlan Output Details282
- Example of VLAN Propagation Via GVRP297
  - Purpose298
  - Commands298
    - Show Gvrp298
    - Show Garp Timer299
- Show Gvrp Configuration Output Details299
Chapter 9: Policy Classification Configuration303
- Policy Classification Configuration Summary303
- Configuring Policy Profiles303
  - Purpose303
  - Commands304
    - Show Policy Profile304
    - Set Policy Profile305
- Show Policy Profile Output Details305
  - Clear Policy Profile307
  - Purpose307
    - Show Policy Rule307
- Show Policy Rule Output Details309
  - Show Policy Capability310
  - Set Policy Rule311
- Valid Values for Policy Classification Rules313
Chapter 10: Port Priority and Rate Limiting Configuration335
- Port Priority Configuration Summary335
- Configuring Port Priority335
  - Purpose335
- Configuring Priority to Transmit Queue Mapping338
  - Purpose338
  - Commands338
- Configuring Quality of Service (Qos)340
  - Purpose340
  - Commands340
- Configuring Port Traffic Rate Limiting343
  - Commands344
    - Show Port Ratelimit344
- Show Port Ratelimit Output Details344
  - Set Port Ratelimit345
  - Clear Port Ratelimit346
Chapter 11: IGMP Configuration347
- IGMP Overview347
  - About IP Multicast Group Management347
- Configuring IGMP at Layer 2347
- Configuring IGMP on Routing Interfaces355
Chapter 12 : Logging and Network Management363
- Configuring System Logging363
  - Show Logging Server364
- Show Logging Server Output Details364
- Show Logging Application Output Details369
  - Clear Logging Application370
- Mnemonic Values for Logging Applications370
- Show Arp Output Details378
- Show Mac Output Details381
- Show Sntp Output Details388
- Show Nodealias Config Output Details395
  - Clear Nodealias Config396
Chapter 13: RMON Configuration397
- RMON Monitoring Group Functions397
- RMON Monitoring Group Functions and Commands397
- Show Rmon Alarm Output Details404
- Show Rmon Event Output Details408
Chapter 14: DHCP Server Configuration419
- DHCP Overview419
- Configuring General DHCP Server Parameters421
- Configuring IP Address Pools429
  - Manual Pool Configuration Considerations429
  - Purpose429
Chapter 15: Preparing for Router Mode449
- Pre-Routing Configuration Tasks449
  - Example450
- Enabling Router Configuration Modes450
- Enabling the Switch for Routing450
- Router CLI Configuration Modes450
  - Activating Licensed Features451
Chapter 16: IP Configuration455
- Configuring Routing Interface Settings455
  - Purpose455
  - Commands455
- Show Ip Interface Output Details458
- Show Ip Arp Output Details463
Chapter 17 : Ipv4 Routing Protocol Configuration471
- Activating Advanced Routing Features471
  - Router Rip472
- RIP Configuration Task List and Commands472
- OSPF Configuration Task List and Commands480
- Show Ip Ospf Database Output Details497
  - Show Ip Ospf Neighbor498
- Show Ip Ospf Interface Output Details498
  - Show Ip Ospf Virtual-Links499
- Show Ip Ospf Neighbor Output Details499
  - Clear Ip Ospf Process500
- Show Ip Ospf Virtual Links Output Details500
- Show Ip Pimsm Output Detail518
  - Show Ip Pimsm Interface519
- Show Ip Pimsm Componenettable Output Detail519
- Show Ip Pimsm Interface Vlan Output Details520
- Show Ip Pimsm Interface Stats Output Detail520
  - Show Ip Pimsm Neighbor521
  - Show Ip Pimsm Rp521
- Show Ip Pimsm Neighbor Output Detail521
- Show Ip Pimsm Rp Output Detail522
  - Show Ip Pimsm Rphash523
  - Show Ip Pimsm Staticrp523
- Show Ip Pimsm Staticrp Output Details524
Chapter 18: Security Configuration525
- Overview of Security Methods525
  - RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment526
- Configuring RADIUS527
  - Purpose527
  - Commands527
    - Show Radius528
- Show Radius Output Details528
- Show Eapol Output Details540
- Show Macauthentication Output Details544
- Show Macauthentication Session Output Details546
- Show Vlanauthorization Output Details569
  - Configuring MAC Locking570
- Show Maclock Output Details571
  - Show Maclock Stations572
  - Set Maclock Enable573
- Show Maclock Stations Output Details573
- Show Pwa Output Details582

Brand	Enterasys
Model	SecureStack C2
Category	Switch
Language	English

Enterasys SecureStack C2 User Manual

Table of Contents

Questions and Answers:

Enterasys SecureStack C2 Specifications

Related product manuals