To Next Page

To Previous Page

21. Port Security

ROX™ v2.2 User Guide 206 RuggedBackbone™ RX5000

Supplicant Timeout

Synopsis: integer

Default: 30

The time to wait for the supplicant's response to the authentication server's EAP packet.

Server Timeout

Synopsis: integer

Default: 30

The time to wait for the authentication server's response to the supplicant's EAP packet.

Max Requests

Synopsis: integer

Default: 2

The maximum number of times to retransmit the authentication server's EAP Request packet to the

supplicant before the authentication session times out.

Default Chapter3
- Table of Contents3
- Preface22
- Administration23
1 The ROX™ Web Interface24
- Getting Started24
- The ROX™ Web Interface25
  - Top-Level Menu Categories27
- The Structure of the Web Interface25
- Top-Level Menu27
  - Making Configuration Changes28
- Example of Edit Private Mode29
  - Configuring Tables Using Key Settings Forms30
- Key Information in a Table31
  - Viewing more Information in Tables32
- First Table of Information33
2 System Administration34
- Acknowledge All Alarms Menu Action Form34
- Administration Menu34
- Clear All Alarms Menu Action Form34
- System Commands34
- Set New Time and Date Form35
- Shutdown the Device Menu Action Form35
- Administration Form36
- Hostname Form36
- Restore-Factory-Defaults Trigger Action Form36
- Timezone Form37
  - Administrative Access Control38
- Idle-Timeout Field39
- STFP Sessions Form40
- WWW Interface Sessions41
  - User Accounts42
- Idle-Timeout Field42
- Users Menu42
- Users Table42
- Users Form43
  - Software Upgrade44
- Software-Upgrade Menu44
- Upgrade Monitoring45
- Launch Upgrade46
- Rollback and Reboot46
  - Roxflash Cross-Partition Imaging Tool - Software Downgrade47
    - Roxflash Configuration47
    - Uses47
- Roxflash Menu48
- Roxflash Monitoring Form48
  - Scheduling Jobs49
- Roxflash Forms49
- Scheduler Menu49
- Scheduled-Jobs Table50
  - The Featurekey52
- Install Files Forms54
  - Backing up a Featurekey Using the Web User Interface55
  - Installing and Backing up Files56
    - Installing Files56
- Administration Menu56
  - Backing up Files57
- Backup Files Forms56
- Backup Files Forms57
  - Deleting Log Files58
  - Saving Full Configurations58
- Install Files Forms57
- Save-Full-Configuration Menu58
  - Loading Full Configurations59
- Load Full Configuration Forms59
3 Time Synchronization60
- Load-Full-Configuration Menu59
- Save Full Configuration Forms59
- NTP Fundamentals60
  - The NTP Sanity Limit60
- Configuring Time Synchronization61
  - Configuring the System Time and Date61
  - Configuring the System Time Zone61
- Set New Time and Date Form61
  - Configuring the Local Time Settings62
  - Configuring NTP Servers62
- Network Time Protocol (NTP) Servers62
- Timezone Form62
- Network Time Protocol (NTP) Servers Form63
  - Adding Server Keys64
  - Configuring NTP Server Restrictions64
- Server Restrictions Form65
  - Configuring an NTP Server Using Multicast or Broadcast66
- Server Restrictions Key Settings Form65
- NTP Broadcast/Multicast Servers Form66
  - Configuring an NTP Client Using Multicast67
  - Configuring an NTP Client Using Broadcast67
- Network Time Protocol (NTP) Form67
  - Checking NTP Status68
4 Basic Network Configuration69
- IP Interfaces69
  - Configuring an IP Address69
- IP Menu69
  - Simple Network Setup with the Default Ipv4 Addresses70
- Configuring an IP Address70
- Routable Interfaces Form72
- Routable Interfaces Table72
- Addresses Form73
- Addresses Table73
5 IP Network Interfaces74
- Ipv6 Fundamentals74
- Ipv6 Neighbor Discovery75
- Neighbor Discovery Form76
- Neighbor Discovery Ipv6 Prefix77
- Neighbor Discovery Ipv6 Prefix Forms77
  - Adding Interfaces to Switched Ports78
- Explicitly Adding a VLAN Interface to a Switched Port79
  - All-Vlans80
- All Vlans Properties Form81
  - Non-Switched Interface Menu82
- All Vlans Table81
- Routable Ethernet Ports Form82
  - Configuring IP Address Source and Proxyarp for Non-Switched Interfaces84
6 Alarms86
- Routable Ethernet Ports Table82
- Introduction86
- Alarm Configuration87
- Alarms Menu87
- Active Alarms Form88
- Acknowledge Alarm Menu Action Form89
- Acknowledge All Alarms Menu Action Form89
  - Administrative Alarm Configuration90
- Clear All Alarms Menu Action Form89
- Admin Alarm Configuration Form90
  - Chassis Alarm Configuration91
- Admin Alarm Configuration Table90
- Chassis Alarm Configuration Form91
  - Switch Alarm Configuration92
- Chassis Alarm Configuration Table91
- Switch Alarm Configuration Form92
7 Domain Name Search93
- Switch Alarm Configuration Table92
- DNS Menu93
- Domain Name Lookup93
- Domain Name Searches Form93
8 Logging94
- Configuring Local Syslog94
- Configuring the Remote Syslog Server94
- Logging Menu94
- Remote Server Form95
- Remote Server Selector Table95
- Selector Menu95
- Remote Server Selector Form96
  - Deleting Logs97
9 Snmp98
- SNMP Traps98
- SNMP Access Configuration100
- SNMP Menu102
- SNMP Sessions Form103
- SNMP USM Statistics Form105
  - SNMP Discovery106
  - SNMP Community106
- SNMP Engine ID Discover Forms106
- Snmpv1/V2C Community Configuration Table106
  - SNMP Target Addresses107
- Snmpv1/V2C Community Configuration Form107
- Snmpv3 Target Configuration Form108
  - SNMP Users109
- SNMP User Configuration Table109
- SNMP User Configuration Form110
- User Configuration Key Settings Form110
  - SNMP Security to Group Maps111
  - SNMP Access111
- Key Settings Form111
- SNMP Security Model to Group Mapping Form111
- SNMP Security Model to Group Mapping Table111
- Key Settings Form112
- SNMP Group Access Configuration Form112
10 Authentication114
- SNMP Group Access Configuration Table112
- Authentication Menu114
- Radius114
  - RADIUS Overview114
  - RADIUS Usage114
- Primary RADIUS Server Form116
11 Netconf118
- NETCONF Menu118
- Idle-Timeout Field119
- NETCONF State/Statistics Form120
12 Chassis Management122
- Chassis Menu122
  - Power Controller123
- Power Controller Form123
  - Slot Hardware124
  - Slot Identification125
- Slot Identification Form125
  - Cpu126
- Slot Identification Table125
- Slot CPU/RAM Utilization Form126
- Slot CPU/RAM Utilization Table126
- Modules Form130
- Modules Table130
- Module Database Form131
- Module Database Table131
- Configurable Modules Form132
13 PPP Users133
- Configurable Modules Table132
- Overview133
- PPP Configuration133
- PPP Menu133
- Dial-In Users Form134
  - PPP Interfaces and Link Failover136
14 DHCP Relay138
- PPP Configuration Form134
- DHCP Relay Agent Form138
- DHCP Relay Agent Menu138
- DHCP Relay Agent Client Ports Table139
15 DHCP Server140
- DHCP Fundamentals140
  - DHCP Network Organizations140
  - Option 82 Support with Disable NAK140
- Configuring DHCP Server141
- Subnet Configuration Form142
  - DHCP Shared Networks143
  - DHCP Hosts143
- Subnet Configuration Table142
- Host Configuration Table143
- Services/Dhcpserver/Show-Active-Leases Form145
- Client Configuration Form for Subnets and Shared Networks146
- Lease Configuration Form146
- Client Configuration Form for Host-Groups147
- Client Configuration Form for Hosts147
- Client Configuration Form for DHCP Clients148
- Netbios Configuration Form149
  - Custom DHCP Options150
  - Hardware Configuration150
- NIS Configuration Form149
- Hardware Configuration Form150
- Network Interfaces and Ethernet Bridging152
16 Ethernet Ports153
- Controller Protection through LFI153
  - Ethernet Port Configuration154
    - Port Parameters155
- Controller Protection through Link-Fault-Indication (LFI)153
- Switched Ethernet Ports Submenu155
- Switched Ethernet Ports Table155
- Switched Ethernet Ports Form156
  - Port Rate Limiting157
  - Port Mirroring158
- Egress Source Ports Table159
- Ingress Source Ports Table159
- Port-Mirroring Menu159
  - Diagnostics160
- Cable Diagnostics Results Form160
- Running Cable Diagnostics161
- Start Cable Diagnostics Test Form163
- Clear All Alarms Menu164
  - Link Detection Options165
  - Port Status166
- Interface Status Form167
  - Resetting Ports168
    - Resetting All Switched Ports169
    - Troubleshooting169
- Interface Status Table167
- Reset All Switched Ports Form169
17 Ethernet Statistics171
- Reset All Switched Ports Menu169
- Ethernet Port Statistics Menu171
- Port Statistics Form171
- Viewing Ethernet Port Statistics171
- Viewing Ethernet Statistics171
- RMON Port Statistics Form173
  - Viewing Non-Switched Ethernet Statistics176
- Routable-Only Ethernet Port Status Form177
- Receive Statistics Form178
  - Clearing Switched Ethernet Port Statistics179
- Interfaces Switch (Clearing Port Statistics) Menu179
- Transmit Statistics Form179
- Clear Switched Port Statistics Form180
18 IP Statistics181
- Routable Interface Statistics Form181
- Routable Interface Statistics Table181
- Receive Statistics Form182
- Transmit Statistics Form182
19 Virtual Switch Bridging184
- Overview184
  - Helpful Hints184
- Sample Use Case185
- Virtual Switch Configuration and Status186
- Virtualswitch Table186
- Virtualswitch Form187
- VLAN Table187
- Virtualswitch Form188
- Virtualswitch Table188
- VLAN Form188
- Receive Form189
- Transmit Form189
- VLAN Table190
- VLAN Transmit Form191
20 Link Aggregation192
- Link Aggregation Examples192
  - Link Aggregation Limitations193
  - Link Aggregation Configuration194
    - Configuring Port Trunks194
- Link Aggregation Operation192
  - Link Aggregation Rules192
- Adding Trunks194
- Link Aggregation Menu194
- Entering a Trunk ID195
- Entering Parameters for Forms196
- Trunk-Ports Submenu - Adding a Trunk-Port197
- Key Settings198
- Multicast Filtering Form198
- Trunk Ports Table198
- Trunk Ports Table in Edit Private Mode198
- Cos Form199
- VLAN Form199
- Trunk Ports Table200
21 Port Security201
- Port Security Operation201
  - Static MAC Address-Based Authorization201
  - IEEE 802.1X Authentication201
- X General Topology202
  - Port Security Configuration203
- Port Security RADIUS Primary Form203
- Port Security RADIUS Secondary Form203
  - Port Security Parameters204
  - Parameters205
22 Multicast Filtering207
- Igmp207
- GMRP (GARP Multicast Registration Protocol)210
  - GMRP Example211
- Example Using GMRP212
  - Multicast Filtering Configuration and Status213
    - Configuring IGMP Parameters213
- Multicast Filtering Menu213
- IGMP Snooping Parameters Form214
  - Configuring Static Multicast Groups215
- Router Ports Table214
- Static Multicast Summary Form215
- Static Multicast Summary Table215
- Multicast Group Summary Table216
- Static Ports Table216
- IP Multicast Groups Form217
- IP Multicast Groups Table217
- Router-Ports Table217
  - Configuring GMRP218
- GMRP Form218
- GMRP Dynamic Ports Form219
- GMRP Dynamic Ports Table219
- Multicast Filtering Form219
  - Troubleshooting220
23 Classes of Service222
- Cos Operation222
  - Inspection Phase222
  - Forwarding Phase223
- Cos Configuration223
  - Global Cos Parameters223
- Cos Form223
  - Priority to Cos Mapping224
- Priority to Cos Mapping Form224
  - DSCP to Cos Mapping225
- Priority to Cos Mapping Table224
- Cos Form225
24 MAC Address Tables227
- TOS DSCP to Cos Mapping Form225
- TOS DSCP to Cos Mapping Table225
- MAC Address Table227
- MAC Tables Form228
- Key Settings229
- Static MAC Address Parameters Form229
- Static MAC Address Parameters Table229
- Purge MAC Address Menu230
- Purge MAC Address Table Form230
25 Spanning Tree231
- RSTP Operation231
  - RSTP States and Roles232
- Bridge and Port Roles233
- Example of a Structured Wiring Configuration240
- Spanning Tree Parameter Form243
- Erstp Form245
- RSTP Common Instance Form245
  - Port RSTP Parameters247
- Interface/Switch/{Line Module}/Spanning-Tree Submenu247
- Port RSTP Parameter Form247
  - Bridge MSTI Parameters249
- Key Settings Form249
- MSTP ID Table250
- MSTP Instance Table250
  - Port MSTI Parameters251
- MSTI Configuration Form251
  - Spanning Tree Statistics253
    - Bridge RSTP Statistics253
    - Port RSTP Statistics255
- MSTI Configuration Table251
- RSTP Port Statistics Table255
- RSTP Port Statistics Form256
  - MSTI Status258
  - Port MSTP Statistics260
- MSTP Port Statistics Form260
  - Clearing Spanning Tree Statistics261
  - Troubleshooting262
26 Virtual Lans265
- MSTP Port Statistics Table260
- VLAN Operation265
- Using GVRP268
  - VLAN Applications269
- Switched Ethernet Ports Submenu272
  - VLAN Summary273
- VLAN Summary Form274
- All Vlans Properties Form275
- All Vlans Table275
- Untagged Ports Table275
  - Forbidden Ports276
  - Troubleshooting276
- Vlans Table275
- Vlans Form276
27 Network Discovery278
- LLDP Operation278
- LLDP Form279
- LLDP Parameters279
- LLDP Global Statistics Form280
- LLDP Local System Form281
- LLDP Port Statistics Form282
- LLDP Port Statistics Table282
- LLDP Neighbors Table283
- LLDP Neighbors Form284
- LLDP Submenu284
- LLDP Form285
- Routing and Security286
28 ROX™ Routing Overview287
- IP Routing in ROX287
- Physical Ethernet Port Types in ROX287
- Routing287
  - Using VLAN Interfaces for Routing and Layer 3 Switching287
  - Routing IP Packets288
- Layer 3 Switch289
29 Layer 3 Switching289
- Layer 3 Switching Fundamentals289
  - What Is a Layer 3 Switch289
  - Layer 3 Switch Forwarding Table289
- Hardware Acceleration Enabled293
  - Configuring Layer 3 Switching295
- Layer 3 Switching Form295
- Layer 3 Switching Menu295
- Routing Rules Summary Form299
  - Flushing Dynamic Hardware Routing Rules301
- Routing Rules Summary Table299
- Flush Dynamic Hardware Routing Rules Form301
30 Tunnelling302
- Ipsec302
  - VPN Fundamentals302
  - X509 Certificates303
  - Ipsec Configuration305
- Ipsec Form305
- Ipsec Menu305
- Syslog Form305
- Show Public RSA Key Form306
- Install-Certificate Forms307
- Install-Ca-Certificate Forms308
- Install-Crl-File Forms309
- Connection Form310
- ESP Table311
- IKE Table311
- Public IP Address Form312
- Nexthop to Other System Form313
- Network Table314
  - L2TP Tunnelling Configuration315
- DNS Server Form315
- L2TP Form315
- L2TP Menu315
- PPP Options Form316
  - Layer 2 Tunnelling317
- L2Tunneld Menu319
- Generic L2 Tunnel Table320
- Goose Tunnel Table320
- Generic L2 Tunnel Egress Interface Table321
- Generic L2 Tunnel Protocol Form321
- Goose Tunnel Statistics Table321
- Goose Tunnel Statistics Form322
- Connections Statistics Form323
- Connections Statistics Table323
- Generic L2 Tunnel Statistics Form324
- Generic L2 Tunnel Statistics Table324
- Connections Statistics Form325
- Connections Statistics Table325
- Round Trip Time Statistics Form326
  - Generic Routing Encapsulation (GRE)327
    - Generic Routing Encapsulation Configuration327
- Round Trip Time Statistics Table326
- Generic Routing Encapsulation (GRE) Menu327
- GRE Example327
- Generic Routing Encapsulation Interfaces Form328
31 Dynamic Routing330
- Generic Routing Encapsulation Interfaces Table328
- Introduction330
- OSPF and VRRP Example334
- Dynamic Routing Menu335
- RIP Menu335
  - RIP Configuration336
- RIP Configuration Form336
- Routing Timers Form337
- RIP Interface Parameters Table339
- Authentication Form340
  - Ospf341
- RIP Interface Parameters Form340
- OSPF Menu341
  - OSPF Configuration342
- OSPF Configuration Form342
- OSPF Area Distance Form343
- Interface Parameters Form344
- Interface Parameters Table344
- Dead Interval Form345
  - Bgp346
    - BGP Configuration346
- BGP Configuration Form346
- BGP Menu346
- Distance Form347
32 Static Routing353
- Static Menu353
- Static Route Using Gateway Form353
- Static Route Using Gateway Table353
- Static Route Using Interface Form354
33 Routing Status355
- Static Route Using Interface Table354
- Ipv4355
- Ipv6356
- Memory Statistics356
- Core Daemon Memory Statistics Form357
  - Rip358
- OSPF Daemon Memory Statistics Form358
  - Ospf359
- RIP Menu358
- Network Table359
- OSPF Menu359
- Reach Table359
- Area Table360
- Net Table360
- Router Table360
- Summary Table361
- ASBR-Summary Table362
  - Bgp363
- BGP Menu363
- Neighbor Table363
- Next Hop Table364
- Route Table364
- BGP Neighbor Table365
34 Multicast Routing366
- Multicast Groups Configuration Table366
- Multicast Routing Menu366
- Static Menu366
- Static Multicast Routing Configuration Form366
- Multicast Groups Configuration Form367
- Outgoing Interfaces Table367
- Multicast Routing Status Form368
35 Firewall370
- Multicast Routing Status Table368
- Firewall Fundamentals370
  - Stateless Vs Stateful Firewalls370
  - Linux® Netfilter, Iptables, and the Firewall370
  - Network Address Translation370
  - Port Forwarding371
- Firewall Quick Setup371
- Firewall Terminology and Concepts372
  - Zones372
  - Interfaces372
  - Hosts373
  - Policy373
  - Masquerading and SNAT374
  - Rules375
- Configuring the Firewall and VPN376
  - Policy-Based Virtual Private Networking376
  - Virtual Private Networking to a DMZ377
- Firewall Configuration377
- Firewall Description Form377
  - Adding a Firewall378
  - Working with Firewall Configurations379
- Firewall Description Table377
- Security Menu377
- Firewall Configuration Form379
  - Zone Configuration380
- Zone Form380
  - Interface Configuration381
  - Host Configuration382
- Zone Table380
- Main Host Settings Form382
  - Policies383
- Main Host Settings Table382
- Main Policy Settings Form383
  - Network Address Translation384
- Main Policy Settings Table383
- Destination Zone Form384
- Net Address Translation Main Settings Table384
  - IP Masquerading385
- Source Zone Form384
- Fwmasq Table385
  - Rules386
- Net Address Translation Main Settings Form385
- Main Rule Settings Table386
- Net Address Translation Main Settings Form386
- Main Rule Settings Form387
- Destination Zone Form388
36 Traffic Control390
- Source Zone Form388
- Traffic Control Modes390
  - Traffic Control Basic (Basic-Configuration) Configuration Mode390
  - Traffic Control Advanced (Advanced-Configuration) Configuration Mode390
- Traffic Control Configuration392
  - Traffic Control Modes392
- Traffic Control Configuration Form392
- Traffic-Control Menu392
- Basic Traffic Control Interfaces Table393
- Enabling Basic-Configuration Mode393
- Interface to Apply Traffic Control Form394
- Basic Traffic Control Priorities Table395
- Enabling Advanced-Configuration Mode397
- Advanced Traffic Control Classes Table398
- TC Classes Form398
- Options Form400
- Advanced Traffic Control Interfaces Table401
- TC Devices Form402
- Advanced Traffic Control Rules Table403
- Tcrules Menu403
- Tcrules Form404
- Set Form406
- Modify Form407
- Restore Form407
- Save Form407
- Continue Form408
37 Vrrp409
- VRRP Fundamentals409
- VRRP Example410
  - VRRP Configuration411
  - Virtual Router Redundancy Protocol (VRRP) Form412
- VRRP Instance Form413
  - VRRP Status414
38 Link Failover416
- Configuring Link Failover416
- Path Failure Discovery416
- Using Routing Protocols and the Default Route416
- Appendices423
  - Upgrading Software424
- A.8. Upgrade Monitoring Form in Reboot-Pending Stage427
- A.9. Upgrade Monitoring Form Showing Successful Upgrade428

Brand	RuggedCom
Model	RUGGEDBACKBONE RX5000
Category	Switch
Language	English

RuggedCom RUGGEDBACKBONE RX5000 User Manual

Table of Contents

Other manuals for RuggedCom RUGGEDBACKBONE RX5000

Questions and Answers:

RuggedCom RUGGEDBACKBONE RX5000 Specifications

Related product manuals