IBM RackSwitch G8000

IBM RackSwitch G8000

362 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

© Copyright IBM Corp. 2011 53

Part 2: Securing the

Switch

Table of Contents

Default Chapter5
- Table of Contents5
Preface17
- What You'll Find in this Guide17
- Who Should Use this Guide17
- Additional References19
- Typographic Conventions20
- How to Get Help21
Part 1: Getting Started23
Chapter 1. Switch Administration25
- Administration Interfaces25
  - Command Line Interface25
  - Browser-Based Interface26
- Establishing a Connection26
- BOOTP/DHCP Client IP Address Services33
  - Global BOOTP Relay Agent Configuration33
  - Domain-Specific BOOTP Relay Agent Configuration34
- Switch Login Levels35
- Setup Vs. the Command Line36
Chapter 2. Initial Setup37
- Information Needed for Setup37
- Default Setup Options37
- Stopping and Restarting Setup Manually38
- Setup Part 1: Basic System Configuration38
- Setup Part 2: Port Configuration39
- Setup Part 3: Vlans41
- Setup Part 4: IP Configuration41
- Setup Part 5: Final Steps45
- Optional Setup for Telnet Support46
Chapter 3. Switch Software Management47
- Loading New Software to Your Switch47
- The Boot Management Menu50
Part 2: Securing the Switch55
Chapter 4. Securing Administration57
- Secure Shell and Secure Copy57
- End User Access Control62
Chapter 5. Authentication & Authorization Protocols65
- RADIUS Authentication and Authorization65
- TACACS+ Authentication68
- LDAP Authentication and Authorization71
Chapter 6. 802.1X Port-Based Network Access Control73
- Extensible Authentication Protocol over LAN74
- Eapol Authentication Process75
- Eapol Message Exchange75
- Eapol Port States77
- Guest VLAN77
- Supported RADIUS Attributes78
- Eapol Configuration Guidelines80
Chapter 7. Access Control Lists81
- Summary of Packet Classifiers81
- Summary of ACL Actions83
- Assigning Individual Acls to a Port84
- ACL Order of Precedence84
- ACL Groups85
- Assigning ACL Groups to a Port86
- ACL Metering and Re-Marking86
- ACL Port Mirroring87
- Viewing ACL Statistics87
- ACL Configuration Examples88
- VLAN Maps90
- Using Storm Control Filters91
Part 3: Switch Basics93
Chapter 8. Vlans95
- Vlans Overview95
- Vlans and Port VLAN ID Numbers96
  - VLAN Numbers96
  - PVID Numbers96
- VLAN Tagging97
- VLAN Topologies and Design Considerations101
  - Multiple Vlans with Tagging Adapters101
  - VLAN Configuration Example103
- Protocol-Based Vlans104
- Private Vlans107
Chapter 9. Ports and Trunking109
- Trunking Overview109
- Static Trunks110
- Link Aggregation Control Protocol113
- Configurable Trunk Hash Algorithm116
Chapter 10. Spanning Tree Protocols117
- Spanning Tree Protocol Modes117
- Global STP Control118
- PVRST Mode118
- Rapid Spanning Tree Protocol128
- Multiple Spanning Tree Protocol129
- Port Type and Link Type131
- Edge Port131
  - Link Type132
Chapter 11. Quality of Service133
- Qos Overview133
- Using ACL Filters135
  - Summary of ACL Actions135
  - ACL Metering and Re-Marking136
- Using DSCP Values to Provide Qos136
- Using 802.1P Priority to Provide Qos142
- Queuing and Scheduling143
Part 4: Advanced Switching Features145
Chapter 12. Virtualization147
Chapter 13. Stacking149
- Stacking Overview150
  - Stacking Requirements150
  - Stacking Limitations151
- Stack Membership151
- Configuring a Stack155
- Managing a Stack159
- Upgrading Software in an Existing Stack161
- Replacing or Removing Stacked Switches163
- ISCLI Stacking Commands166
Chapter 14. Vmready167
- VE Capacity167
- Defining Server Ports168
- VM Group Types168
- Local VM Groups168
- Distributed VM Groups170
- Virtualization Management Servers172
- Pre-Provisioning Ves174
- VLAN Maps175
- VM Policy Bandwidth Control176
  - VM Policy Bandwidth Control Commands176
  - Bandwidth Policies Vs. Bandwidth Shaping176
- Vmready Information Displays177
- Vmready Configuration Example180
Part 5: IP Routing183
Chapter 15. Basic IP Routing185
- IP Routing Benefits185
- Routing between IP Subnets185
- Example of Subnet Routing186
  - Using Vlans to Segregate Broadcast Domains187
  - Configuration Example187
- ECMP Static Routes189
- Dynamic Host Configuration Protocol191
Chapter 16. Internet Protocol Version 6193
- Ipv6 Limitations194
- Ipv6 Address Format195
- Ipv6 Address Types196
- Ipv6 Address Autoconfiguration197
- Ipv6 Interfaces198
- Neighbor Discovery199
- Supported Applications201
- Configuration Guidelines203
- Ipv6 Configuration Examples204
Chapter 17. Ipsec with Ipv6205
- Ipsec Protocols205
- Using Ipsec with the Rackswitch G8000206
Chapter 18. Routing Information Protocol213
- Distance Vector Protocol213
- Stability213
- Routing Updates213
- Ripv1214
- Ripv2214
- Ripv2 in Ripv1 Compatibility Mode214
- RIP Features214
- RIP Configuration Example216
Chapter 19. Internet Group Management Protocol217
- IGMP Terms217
- How IGMP Works218
- IGMP Capacity and Default Values219
- IGMP Snooping220
- IGMP Relay230
- Additional IGMP Features238
Chapter 20. Multicast Listener Discovery241
- MLD Terms242
- How MLD Works243
- MLD Capacity and Default Values245
- Configuring MLD246
Chapter 21. Border Gateway Protocol247
- Internal Routing Versus External Routing247
- Forming BGP Peer Routers248
- Loopback Interfaces249
- What Is a Route Map249
- Aggregating Routes253
- Redistributing Routes253
- BGP Attributes253
- Selecting Route Paths in BGP254
- BGP Failover Configuration255
- Default Redistribution and Route Aggregation Example256
Chapter 22. OSPF259
- Ospfv2 Overview259
- Ospfv2 Implementation in IBM N/OS263
- Ospfv2 Configuration Examples272
- Ospfv3 Implementation in IBM N/OS281
Part 6: High Availability Fundamentals285
Chapter 23. Basic Redundancy287
- Trunking for Link Redundancy287
- Virtual Link Aggregation287
- Hot Links288
- Active Multipath Protocol290
- Stacking for High Availability Topologies293
Chapter 24. Layer 2 Failover295
- Monitoring Trunk Links295
- Setting the Failover Limit295
- Manually Monitoring Port Links296
- L2 Failover with Other Features296
  - Lacp296
  - Spanning Tree Protocol297
- Configuration Guidelines297
- Configuring Layer 2 Failover297
Chapter 25. Virtual Router Redundancy Protocol299
- VRRP Overview300
- Failover Methods302
  - Active-Active Redundancy303
  - Virtual Router Group303
- IBM N/OS Extensions to VRRP304
- Virtual Router Deployment Considerations305
- High Availability Configurations306
Part 7: Network Management311
Chapter 26. Link Layer Discovery Protocol313
- LLDP Overview313
- Enabling or Disabling LLDP313
  - Global LLDP Setting313
  - Transmit and Receive Control314
- LLDP Transmit Features314
- LLDP Receive Features317
- LLDP Example Configuration319
Chapter 27. Simple Network Management Protocol321
- SNMP Version 1 & Version 2321
- SNMP Version 3321
- Default Configuration322
- Configuring SNMP Trap Hosts324
- SNMP Mibs326
- Switch Images and Configuration Files329
Part 8: Monitoring333
Chapter 28. Remote Monitoring335
- RMON Overview335
- RMON Group 1-Statistics335
- RMON Group 2-History336
  - History MIB Object ID336
  - Configuring RMON History337
- RMON Group 3-Alarms338
  - Alarm MIB Objects338
  - Configuring RMON Alarms338
- RMON Group 9-Events340
Chapter 29. Sflow341
- Sflow Statistical Counters341
- Sflow Network Sampling341
- Sflow Example Configuration342
Chapter 30. Port Mirroring343
Part 9: Appendices345
Appendix A. Glossary347
Appendix B. Getting Help and Technical Assistance349
- Before You Call349
- Using the Documentation349
- Getting Help and Information on the World Wide Web349
- Software Service and Support350
- Hardware Service and Support350
- IBM Taiwan Product Service350
Appendix C. Notices351
- Trademarks351
- Important Notes352
- Particulate Contamination353
- Documentation Format353
- Electronic Emission Notices354
Index359

Other manuals for IBM RackSwitch G8000

Related product manuals

Preview: IBM Classic Series

IBM Classic Series