To Next Page

To Previous Page

Protection from unauthorized access

Basic - L3P

Release

3.1

06/07

6 Protection from unauthorized

access

Protect your network from unauthorized access. The Switch provides you

with the following functions for protecting against unauthorized access.

D Password for SNMP access,

D Setting the SSH/Telnet/Web-Based access,

D Disabling the HiDiscovery function,

D Port access control via IP- or MAC-address,

D Authentication according to 802.1X,

D Access Control Lists.

Table of Contents3
Contents3
About this Manual9
Key11
Introduction13
Access to the User Interfaces15
System Monitor16
Command Line Interface19
Web Based Interface22
Entering the IP Parameters25
Basics IP Parameter27
- IP Address (Version 4)27
- Network Mask28
- Example of How the Network Mask Is Used30
Entering the IP Parameters Via CLI32
Entering the IP Parameters Via Hidiscovery35
Loading the System Configuration from the ACA37
System Configuration Via BOOTP39
System Configuration Via DHCP43
System Configuration Via DHCP Option46
System Configuration Via the Web-Based Interface47
Faulty Device Replacement49
- Loading/Saving Settings51
Loading Settings52
- Loading from the Local Non-Volatile Memory53
- Loading from the Autoconfiguration Adapter53
- Loading from a File54
- Resetting the Configuration to the State on Delivery56
Saving Settings57
- Saving Locally (and on the ACA)57
- Saving into a File on URL58
- Saving into a Binary File on the PC59
- Saving as Script on the PC59
- Loading Software Updates61
Loading the Software from the ACA63
- Swapping the Software Available63
- Starting the Software65
- Performing a Cold Start65
Loading the Software from the Tftp Server66
Loading Software Via File Selector68
- Configuring Ports69
- Protection from Unauthorized Access73
Password for SNMP Access74
- Description Password for SNMP Access74
- Entering Password for SNMP Access75
Setting Telnet/Web/Ssh Access79
- Description Telnet/Web Access79
- Description Web Access79
- Description of SSH Access80
- Enabling/Disabling Telnet/Web/Ssh Access81
Disabling Hidiscovery Function82
- Description Hidiscovery Protocol82
- Disabling Hidiscovery Function83
Port Access Control84
- Description Port Access Control84
- Defining Port Access Control85
Port Authentication87
- Description Port-Based Network Access Control (802.1X)87
- Authentication Process88
- Preparing the Switch for the 802.1X Port Authentication88
- Setting 802.1X89
Access Control Lists (ACL)90
- Description of IP-Based Acls91
- Description of MAC-Based Acls92
- Configuring IP Acls94
- Configuring MAC Acls95
- Configuring Priorities with IP Acls97
- Specifying the Sequence of the Rules100
Synchronizing the System Time of the Network103
Entering the Time104
Sntp106
- Descripton SNTP106
- Preparing the SNTP Configuration107
- Configuring SNTP108
Precison Time Protocol111
- Funtion Description PTP111
- Preparing the PTP Configuration114
- Configuring PTP115
Interaction PTP and SNTP118
Traffic Control121
Directed Frame Forwarding122
- Store-And-Forward122
- Multi-Address Capability122
- Aging of Learned Addresses123
- Entering Static Address Entries124
- Disabling the Specific Packet Distribution125
Multicast Application126
- Description Multicast Application126
- Example of a Multicast Application127
- Description IGMP Snooping128
- Description GMRP129
- Setting Multicast Applications129
Rate Limiter133
- Description Rate Limiter133
- Setting Rate Limiter for MACH 4000 and Power MICE133
Prioritization135
- Description Prioritization135
- Tagging136
- IP Tos / Diffserv139
- Handling of Received Priority Information142
- Handling of Priority Classes142
- Setting Prioritization144
Flow Control149
- Description Flow Control149
- Setting Flow Control150
Vlans151
- Description Vlans151
- Configuring Vlans154
- Setting up Vlans156
- Displaying the VLAN Configuration157
- Deleting the VLAN Settings157
- Example of a Simple VLAN158
Operation Diagnostics165
Sending Traps166
- SNMP Trap Listing167
- SNMP Traps When Booting168
- Configuring Traps168
Monitoring Device Status171
Out-Of-Band Signaling174
- Manual Setting the Signal Contact175
- Monitoring Correct Operation Via the Signal Contact176
- Monitoring the Device Status with a Signal Contact177
Port Status Indication178
Event Counter on Port Level180
Displaying the SFP Status182
TP Cable Diagnosis183
Topology Discovery184
- Description Topology Discovery184
- Displaying the Topology Discovery186
IP Address Conflict Detection188
- Description of IP Address Conflicts188
- Configuring ACD189
- Displaying ACD189
Reports191
Monitoring Port Traffic (Port Mirroring)193
Apendix A:setting up the Configuration Environment195
Setting up DHCP/BOOTP Server196
Setting up DHCP Server Option202
Tftp Server for Software Updates207
- Setting up the Tftp Process208
- Software Access Rights211
Preparing for Access Via SSH212
- Creating a Key212
- Uploading the Key214
- Access Via SSH215
Appendix B:general Information217
B.1 Hirschmann Competence218
Hirschmann Competence218
Faq219
Management Information BASE MIB220
B.4 Used Abbreviations223
Used Abbreviations223
B.5 List of Rfc's224
List of Rfc's224
Based IEEE Standards226
B.7 Technical Data227
Technical Data227
Copyright of Integrated Software228
- Bouncy Castle Crypto Apis (Java)228
- LVL7 Systems, Inc228
- B.8 Copyright of Integrated Software228
Reader's Comments229

Brand	Hirschmann
Model	MACH 4002-48G
Category	Network Router
Language	English

Hirschmann MACH 4002-48G User Manual

Table of Contents

Questions and Answers:

Hirschmann MACH 4002-48G Specifications

Related product manuals