H3C S5120-SI Series

To Next Page

To Previous Page

Troubleshooting AAA ····························································································································1-38

Troubleshooting RADIUS··············································································································1-38

Main Page

Figure 3-2 an Enterprise Network14
- Configuration Guide1
- About this Document4
- Obtaining Documentation9
- Related Documentation9
- Documentation Feedback10
- Technical Support10
- Product Features11
- Table of Contents14
- CLI Configuration15
Table of Contents35
- 1 Logging in to an Ethernet Switch37
  - Introduction to User Interface37
    - Supported User Interfaces37
    - User Interface Number37
  - Common Login in to an Ethernet Switch38
- 2 Logging in through the Console Port40
- 3 Logging in through Telnet/Ssh54
- 5 Logging in through NMS70
  - Introduction70
  - Connection Establishment Using NMS70
- 6 Specifying Source for Telnet Packets71
- 7 Controlling Login Users73
Ethernet Port Configuration81
- Basic Ethernet Port Configuration82
- Ethernet Port Configuration82
- Configuring an Auto-Negotiation Transmission Rate83
- Configuring Flow Control on an Ethernet Port84
- Perfoming Loopback Testing on an Ethernet Port84
- Configuring a Port Group86
- Enabling Auto Power down on an Ethernet Port86
- Configuring Traffic Storm Protection87
  - Configuring Storm Suppression87
  - Configuring the Storm Constrain Function on an Ethernet Port88
- Setting the Interval for Collecting Ethernet Port Statistics89
- Enabling Forwarding of Jumbo Frames90
- Enabling Loopback Detection on an Ethernet Port90
- Configuring the MDI Mode for an Ethernet Port91
- Enabling Bridging on an Ethernet Port92
- Testing the Cable on an Ethernet Port92
- Displaying and Maintaining an Ethernet Port93
Table of Contents94
- Loopback Interface95
  - Introduction to Loopback Interface95
  - Configuring a Loopback Interface95
- Null Interface96
  - Introduction to Null Interface96
  - Configuring Null 0 Interface96
- Displaying and Maintaining Loopback and Null Interfaces97
Ethernet Link Aggregation Configuration98
- Ethernet Link Aggregation Configuration99
- Overview99
- Ethernet Link Aggregation Configuration Task List105
- Configuring an Aggregation Group106
- Configuring an Aggregate Interface108
- Displaying and Maintaining Ethernet Link Aggregation109
- Ethernet Link Aggregation Configuration Examples110
  - Dynamic Aggregation Configuration Example112
Port Isolation Configuration115
- Port Isolation Configuration116
Port Mirroring Configuration119
- Introduction to Port Mirroring120
  - Classification of Port Mirroring120
  - Implementing Port Mirroring120
- Port Mirroring Configuration120
- Configuring Local Port Mirroring121
- Displaying and Maintaining Port Mirroring122
- Port Mirroring Configuration Examples122
  - Local Port Mirroring Configuration Example122
Lldp Configuration124
- LLDP Configuration125
- Overview125
- LLDP Configuration Task List130
- Performing Basic LLDP Configuration131
- Configuring CDP Compatibility135
  - Configuration Prerequisites135
- Configuring LLDP Trapping136
- Displaying and Maintaining LLDP137
- LLDP Configuration Examples137
  - Basic LLDP Configuration Example137
  - CDP-Compatible LLDP Configuration Example140
VLAN Configuration/Voice VLAN Configuration142
- 1 VLAN Configuration143
- 2 Voice VLAN Configuration154
Mstp Configuration165
- Introduction to STP166
- MSTP Configuration166
- Overview166
- Introduction to MSTP174
- Introduction to RSTP174
- MSTP Configuration Task List180
- Configuring MSTP181
- Configuring the VLAN Ignore Feature195
- Displaying and Maintaining MSTP203
- MSTP Configuration Example204
IP Addressing Configuration209
- IP Addressing Configuration210
- IP Addressing Overview210
- Configuring IP Addresses212
  - Assigning an IP Address to an Interface212
- Displaying and Maintaining IP Addressing213
IP Performance Optimization Configuration214
- Enabling Reception and Forwarding of Directed Broadcasts to a Directly Connected Network215
  - Enabling Reception of Directed Broadcasts to a Directly Connected Network215
  - Enabling Forwarding of Directed Broadcasts to a Directly Connected Network216
- IP Performance Optimization Configuration215
- IP Performance Optimization Overview215
- Configuring TCP Attributes216
- Configuring ICMP to Send Error Packets219
- Displaying and Maintaining IP Performance Optimization220
Configuration Procedure················································································································2221
- 1 ARP Configuration222
- 2 ARP Attack Defense Configuration229
Table of Contents239
- 1 DHCP Relay Agent Configuration241
- 2 DHCP Client Configuration252
- 3 DHCP Snooping Configuration254
- 4 BOOTP Client Configuration262
  - Introduction to BOOTP Client262
  - Configuring an Interface to Dynamically Obtain an IP Address through BOOTP263
    - Displaying and Maintaining Bootp Client Configuration263
    - Bootp Client Configuration Example264
Ftp Configuration/Tftp Configuration265
- 1 FTP Configuration266
- 2 TFTP Configuration278
IP Routing Basics Configuration283
- IP Routing Basics Configuration284
  - IP Routing and Routing Table284
    - Routing284
    - Routing Table284
  - Displaying and Maintaining a Routing Table286
Static Routing Configuration287
- Introduction288
- Static Routing Configuration288
- Configuring a Static Route289
  - Configuration Prerequisites289
  - Configuration Procedure289
- Displaying and Maintaining Static Routes290
- Static Route Configuration Example290
  - Basic Static Route Configuration Example290
Multicast Overview/Igmp Snooping Configuration293
- 1 Multicast Overview295
- 2 IGMP Snooping Configuration306
- 3 Multicast VLAN Configuration338
Table of Contents346
- 1 Qos Overview348
- 2 Qos Policy Configuration350
- 3 Priority Mapping Configuration355
- 4 Line Rate Configuration361
  - Line Rate361
    - Line Rate Configuration Example362
- 5 Congestion Management Configuration363
  - Congestion Management Overview363
    - Causes, Impacts, and Countermeasures of Congestion363
    - Congestion Management Policies363
  - Congestion Management Configuration Methods363
- 6 Traffic Filtering Configuration370
- 7 Traffic Redirecting Configuration373
  - Traffic Redirecting Overview373
    - Traffic Redirecting373
  - Configuring Traffic Redirecting373
- 8 Appendix374
- Appendix A Default Priority Mapping Tables374
- Appendix B Introduction to Packet Precedences375
  - IP Precedence and DSCP Values375
  - 802.1P Priority376
Table of Contents378
- 802.1X Overview379
- 802.1X Configuration Task List390
- 802.1X Basic Configuration391
- Enabling the Online User Handshake Function393
- Enabling the Multicast Trigger Function394
- Enabling the Quiet Timer394
  - Specifying a Mandatory Authentication Domain for a Port394
- Configuring a Guest VLAN395
- Enabling the Re-Authentication Function395
- Configuring an Auth-Fail VLAN396
- 802.1X Configuration Example397
  - Guest Vlan and Vlan Assignment Configuration Example400
- Displaying and Maintaining 802.1X397
- ACL Assignment Configuration Example402
Aaa Configuration405
- AAA Configuration407
- Introduction to AAA407
- Introduction to RADIUS407
- Protocols and Standards413
- AAA Configuration Task List414
- Configuring AAA414
- Configuring RADIUS424
- AAA Configuration Examples434
  - AAA for Telnet Users by Separate Servers434
  - AAA for SSH Users by a RADIUS Server435
    - Troubleshooting Aaa444
    - Troubleshooting Radius444
Pki Configuration446
- Introduction to PKI447
- PKI Configuration447
- Configuring an Entity DN450
- PKI Configuration Task List450
- Configuring a PKI Domain452
- Submitting a PKI Certificate Request453
  - Submitting a Certificate Request in Auto Mode453
  - Submitting a Certificate Request in Manual Mode454
- Retrieving a Certificate Manually455
- Configuring PKI Certificate Verification456
- Deleting a Certificate457
- Destroying a Local RSA Key Pair457
- Configuring an Access Control Policy458
- Displaying and Maintaining PKI458
- PKI Configuration Examples459
- Troubleshooting PKI467
Configuration Procedure················································································································3469
- SSL Configuration470
- SSL Overview470
  - SSL Security Mechanism470
  - SSL Protocol Stack471
- Configuring an SSL Server Policy472
- SSL Configuration Task List472
- Configuring an SSL Client Policy475
- Displaying and Maintaining SSL476
- Troubleshooting SSL476
  - SSL Handshake Failure476
Public Key Configuration511
- Asymmetric Key Algorithm Overview512
- Public Key Configuration512
- Configuring the Local Asymmetric Key Pair513
- Configuring the Public Key of a Peer514
- Displaying and Maintaining Public Keys516
- Public Key Configuration Examples516
Habp Configuration521
- HABP Configuration522
Acl Configuration526
- ACL Configuration527
- ACL Overview527
- ACL Configuration Task List530
- Configuring an ACL531
- Displaying and Maintaining Acls536
- ACL Configuration Examples537
Device Management538
- Configuring the Exception Handling Method539
- Device Management539
- Device Management Configuration Task List539
- Device Management Overview539
- Rebooting a Device540
- Configuring the Scheduled Automatic Execution Function541
- Upgrading Device Software542
- Clearing the 16-Bit Interface Indexes Not Used in the Current System543
- Identifying and Diagnosing Pluggable Transceivers544
- Displaying and Maintaining Device Management Configuration545
- Device Management Configuration Examples546
  - Remote Scheduled Automatic Upgrade Configuration Example546
Ntp Configuration549
- NTP Configuration550
- NTP Overview550
- Configuring the Operation Modes of NTP556
- NTP Configuration Task List556
- Configuring Optional Parameters of NTP560
- Configuring Access-Control Rights562
  - Configuration Prerequisites562
  - Configuration Procedure562
- Configuring NTP Authentication563
  - Configuration Prerequisites563
  - Configuration Procedure563
- Displaying and Maintaining NTP565
- NTP Configuration Examples565
Snmp Configuration/Mib Style Configuration576
- 1 SNMP Configuration577
- 2 MIB Style Configuration589
  - Setting the MIB Style589
  - Displaying and Maintaining MIB589
Rmon Configuration590
- RMON Configuration591
- RMON Overview591
- Configuring the RMON Statistics Function593
  - Configuring the RMON Ethernet Statistics Function594
  - Configuring the RMON History Statistics Function594
- Configuring the RMON Alarm Function595
  - Configuration Prerequisites595
  - Configuration Procedure595
- Displaying and Maintaining RMON596
- RMON Configuration Example (Logging Information)597
- RMON Configuration Example (Sending Traps)598
Table of Contents601
- File System Management602
- Directory Operations603
- File Operations604
- Batch Operations606
- Storage Medium Operations606
- Displaying and Maintaining the Nand Flash Memory607
- File System Operations Example608
- Setting File System Prompt Modes608
- Configuration File Management610
- Configuration File Overview610
- Saving the Current Configuration611
- Setting Configuration Rollback612
- Backing up the Startup Configuration File616
- Specifying a Startup Configuration File for the Next System Startup616
- Deleting the Startup Configuration File for the Next Startup617
- Displaying and Maintaining Device Configuration618
- Restoring the Startup Configuration File618
Information Center Configuration643
- Information Center Configuration644
- Information Center Overview644
- Configuring Information Center650
- Displaying and Maintaining Information Center658
- Information Center Configuration Examples659
Mac Address Table Configuration664
- MAC Address Table Configuration665
- Overview665
- Configuring a MAC Address Table667
- Displaying and Maintaining MAC Address Tables670
- MAC Address Table Configuration Example670
Http Configuration/Https Configuration694
- 1 HTTP Configuration695
- 2 HTTPS Configuration699
Table of Contents713
- Poe Configuration714
- Poe Overview714
  - Introduction to Poe714
  - Protocol Specification715
- Poe Configuration Task List715
- Enabling Poe716
  - Enabling Poe for a Poe Interface716
- Detecting Pds717
  - Enabling the PSE to Detect Nonstandard Pds717
  - Configuring a PD Disconnection Detection Mode717
- Configuring Poe Power Management718
  - Configuring Poe Interface Power Management718
- Configuring the Poe Power718
  - Configuring the Maximum Poe Interface Power718
- Configuring the Poe Monitoring Function719
  - Onfiguring PSE Power Monitoring720
  - Monitoring720
- Configuring Poe Interface through Poe Profile720
  - Configuring Poe Profile720
  - Applying Poe Profile721
- Displaying and Maintaining Poe722
- Poe Configuration Example722
- Upgrading PSE Processing Software in Service722
- Troubleshooting Poe724

H3C S5120-SI Series

Table of Contents

Other manuals for H3C S5120-SI Series

Related product manuals