vi
Configuring access control ································································································································· 284
Configuring application control ························································································································· 285
Configuring bandwidth control ·························································································································· 286
Configuring packet filtering ································································································································ 287
Synchronizing user group configuration for wan interfaces ··········································································· 289
User group configuration example····························································································································· 289
Configuring MSTP ··················································································································································· 297
Introduction to STP ······················································································································································· 297
STP protocol packets ··········································································································································· 297
Basic concepts in STP ·········································································································································· 297
How STP works ···················································································································································· 298
Introduction to RSTP ····················································································································································· 304
Introduction to MSTP ···················································································································································· 304
MSTP features ······················································································································································ 304
MSTP basic concepts ·········································································································································· 305
How MSTP works ················································································································································ 309
MSTP implementation on devices ······················································································································ 309
Protocols and standards ····································································································································· 309
Configuration restrictions and guidelines ·················································································································· 309
Recommended MSTP configuration procedure ········································································································· 310
Configuring an MST region ········································································································································ 310
Configuring MSTP globally ········································································································································· 312
Configuring MSTP on a port ······································································································································· 315
MSTP configuration example ······································································································································ 317
Configuring RADIUS ··············································································································································· 322
Overview ······································································································································································· 322
Configuring a RADIUS scheme ··································································································································· 322
Configuring common parameters ······················································································································ 323
Adding RADIUS servers ······································································································································ 326
RADIUS configuration example ·································································································································· 327
Configuration guidelines ············································································································································· 332
Configuring login control ······································································································································· 334
Configuration procedure ············································································································································· 334
Login control configuration example ·························································································································· 335
Network requirements ········································································································································· 335
Configuring a login control rule so Host A cannot Telnet to Router ······························································ 335
Configuring a login control rule so Host B cannot access Router through the Web ···································· 336
Configuring ARP ······················································································································································ 338
Overview ······································································································································································· 338
Gratuitous ARP ····················································································································································· 338
Displaying ARP entries ················································································································································· 338
Creating a static ARP entry ········································································································································· 339
Removing ARP entries ·················································································································································· 339
Enabling learning of dynamic ARP entries ················································································································ 340
Configuring gratuitous ARP ········································································································································· 341
Static ARP configuration example ······························································································································ 341
Configuring ARP attack protection ························································································································· 346
Overview ······································································································································································· 346
Configuring periodic sending of gratuitous ARP packets ························································································ 346
Configuring ARP automatic scanning ························································································································ 347
Configuring fixed ARP ················································································································································· 348