Benutzerhandbuch für 3com WX3000

Inhaltsverzeichnis

• 00-1Cover.pdf

  1
  • Command conventions

    4
  • GUI conventions

    5
  • Symbols

    5
• 01-CLI Operation.pdf

  7
  • 1 CLI Configuration

    8
    • Introduction to the CLI

      8
    • Command Hierarchy

      8
      • Switching User Levels

        9
        • Setting a user level switching password

          9
        • Switching to a specific user level

          9
        • Configuration example

          10
      • Setting the Level of a Command in a Specific View

        10
        • Setting the level of a command in a specific view

          10
        • Configuration example

          10
    • CLI Views

      11
    • CLI Features

      14
      • Online Help

        14
        • Complete online help

          14
        • Partial online help

          15
      • Terminal Display

        15
      • Command History

        15
      • Error Prompts

        16
      • Command Edit

        16
• 02-Login Operation.pdf

  18
  • 1 Logging In to the Switching Engine

    20
    • Logging In to the Switching Engine

      20
    • Introduction to the User Interface

      20
      • Supported User Interfaces

        20
      • User Interface Index

        21
      • Common User Interface Configuration

        21
  • 2 Logging In Through OAP

    23
    • OAP Overview

      23
    • Logging In to the Switching Engine Through OAP

      23
    • Configuring the Management IP Address of the OAP Software System

      23
      • Configuring the Management IP Address of the OAP Software System on the Switching Engine

        24
      • Configuring the Management IP Address of the OAP Software System of the Access Control Engine

        24
    • Resetting the OAP Software System

      25
  • 3 Logging In Through Telnet

    26
    • Introduction

      26
      • Common Configuration

        26
      • Telnet Configurations for Different Authentication Modes

        27
    • Telnet Configuration with Authentication Mode Being None

      28
      • Configuration Procedure

        28
      • Configuration Example

        29
        • Network requirements

          29
        • Configuration procedure

          29
    • Telnet Configuration with Authentication Mode Being Password

      30
      • Configuration Procedure

        30
      • Configuration Example

        31
        • Network requirements

          31
        • Configuration procedure

          31
    • Telnet Configuration with Authentication Mode Being Scheme

      32
      • Configuration Procedure

        32
      • Configuration Example

        35
        • Network requirements

          35
        • Configuration procedure

          35
    • Telnetting to the Switching Engine

      36
      • Telnetting to the Switching Engine from a Terminal

        36
      • Telnetting to the Switching Engine from the Access Control Engine

        38
  • 4 Logging In from the Web-Based Network Management System

    40
    • Introduction

      40
    • Setting Up a Web Configuration Environment

      41
    • Configuring the Login Banner

      42
      • Configuration Procedure

        42
      • Configuration Example

        43
        • Network requirements

          43
        • Configuration Procedure

          43
    • Enabling/Disabling the WEB Server

      44
  • 5 Logging In from NMS

    45
    • Introduction

      45
    • Connection Establishment Using NMS

      45
  • 6 Configuring Source IP Address for Telnet Service Packets

    46
    • Overview

      46
    • Configuring Source IP Address for Telnet Service Packets

      46
      • Configuration in user view

        46
        • Configuration in system view

          46
    • Displaying Source IP Address Configuration

      47
  • 7 User Control

    48
    • Introduction

      48
    • Controlling Telnet Users

      48
      • Prerequisites

        48
      • Controlling Telnet Users by Source IP Addresses

        48
      • Controlling Telnet Users by Source and Destination IP Addresses

        49
      • Controlling Telnet Users by Source MAC Addresses

        50
      • Configuration Example

        50
        • Network requirements

          50
        • Configuration procedure

          50
    • Controlling Network Management Users by Source IP Addresses

      51
      • Prerequisites

        51
      • Controlling Network Management Users by Source IP Addresses

        51
      • Configuration Example

        52
        • Network requirements

          52
        • Configuration procedure

          52
    • Controlling Web Users by Source IP Address

      52
      • Prerequisites

        53
      • Controlling Web Users by Source IP Addresses

        53
      • Disconnecting a Web User by Force

        53
      • Configuration Example

        53
        • Network requirements

          53
        • Configuration procedure

          54
• 03-Configuration File Management Operation.pdf

  55
  • 1 Configuration File Management

    56
    • Introduction to Configuration File

      56
      • Types of configuration

        56
        • Format of configuration file

          56
        • Main/backup attribute of the configuration file

          56
        • Startup with the configuration file

          57
    • Management of Configuration File

      57
      • Saving the Current Configuration

        57
        • Modes in saving the configuration

          57
        • Three attributes of the configuration file

          58
      • Erasing the Startup Configuration File

        58
      • Specifying a Configuration File for Next Startup

        59
        • Assign main attribute to the startup configuration file

          59
        • Assign backup attribute to the startup configuration file

          59
      • Displaying and Maintaining Device Configuration

        60
• 04-VLAN Operation.pdf

  61
  • 1 VLAN Overview

    62
    • VLAN Overview

      62
      • Introduction to VLAN

        62
      • Advantages of VLANs

        63
      • How VLAN Works

        63
        • VLAN tag

          63
        • MAC address learning mechanism of VLANs

          64
      • VLAN Interface

        65
      • VLAN Classification

        65
    • Port-Based VLAN

      65
    • Protocol-Based VLAN

      66
      • Introduction to Protocol-Based VLAN

        66
      • Encapsulation Format of Ethernet Data

        66
        • Ethernet II and 802.2/802.3 encapsulation

          66
        • Extended encapsulation formats of 802.2/802.3 packets

          67
      • Procedure for the Switch to Judge Packet Protocol

        68
      • Encapsulation Formats

        68
      • Implementation of Protocol-Based VLAN

        68
  • 2 VLAN Configuration

    70
    • VLAN Configuration

      70
      • Configuration Task List

        70
      • Basic VLAN Configuration

        70
      • Basic VLAN Interface Configuration

        71
        • Configuration prerequisites

          71
        • Configuration procedure

          71
      • Displaying and Maintaining VLAN

        71
    • Configuring a Port-Based VLAN

      72
      • Configuring a Port-Based VLAN

        72
        • Configuration prerequisites

          72
        • Configuration procedure

          72
      • Protocol-Based VLAN Configuration Example

        72
        • Network requirements

          72
        • Configuration procedure

          73
    • Configuring a Protocol-Based VLAN

      74
      • Configuration Task List

        74
      • Configuring a Protocol Template for a Protocol-Based VLAN

        74
        • Configuration prerequisites

          74
        • Configuration procedure

          74
      • Associating a Port with a Protocol-Based VLAN

        75
        • Configuration prerequisites

          75
        • Configuration procedure

          75
      • Displaying and Maintaining Protocol-Based VLAN

        76
      • Protocol-Based VLAN Configuration Example

        76
        • Network requirements

          76
        • Configuration procedure

          77
• 05-Auto Detect Operation.pdf

  79
  • 1 Auto Detect Configuration

    80
    • Introduction to the Auto Detect Function

      80
    • Auto Detect Configuration

      81
      • Auto Detect Basic Configuration

        81
      • Auto Detect Implementation in Static Routing

        82
      • Auto Detect Implementation in VLAN Interface Backup

        82
    • Auto Detect Configuration Examples

      83
      • Configuration Example for Auto Detect Implementation in Static Routing

        83
        • Network requirements

          83
        • Configuration procedure

          83
      • Configuration Example for Auto Detect Implementation in VLAN Interface Backup

        84
        • Network requirements

          84
        • Configuration procedure

          84
• 06-Voice VLAN Operation.pdf

  85
  • 1 Voice VLAN Configuration

    86
    • Voice VLAN Overview

      86
      • How an IP Phone Works

        86
      • How the Device Identifies Voice Traffic

        88
      • Configuring Operation Mode for Voice VLAN

        88
        • Processing mode of untagged packets sent by IP voice devices

          89
        • Processing mode of tagged packets sent by IP voice devices

          89
      • Support for Voice VLAN on Various Ports

        89
      • Security Mode of Voice VLAN

        90
    • Voice VLAN Configuration

      91
      • Configuration Prerequisites

        91
      • Configuring a Voice VLAN to Operate in Automatic Mode

        91
      • Configuring a Voice VLAN to Operate in Manual Mode

        92
    • Displaying and Maintaining Voice VLAN

      94
    • Voice VLAN Configuration Example

      94
      • Voice VLAN Configuration Example (Automatic Mode)

        94
        • Network requirements

          94
        • Configuration procedure

          94
      • Voice VLAN Configuration Example (Manual Mode)

        95
        • Network requirements

          95
        • Configuration procedure

          95
        • Verification

          96
• 07-GVRP Operation.pdf

  97
  • 1 GVRP Configuration

    98
    • Introduction to GVRP

      98
      • GARP

        98
        • GARP messages and timers

          98
        • Operating mechanism of GARP

          99
        • GARP message format

          99
      • GVRP

        101
      • Protocol Specifications

        101
    • GVRP Configuration

      101
      • Configuration Task List

        101
      • Enabling GVRP

        101
        • Configuration Prerequisite

          101
        • Configuration procedure

          102
      • Configuring GVRP Timers

        102
      • Configuring GVRP Port Registration Mode

        103
    • Displaying and Maintaining GVRP

      103
    • GVRP Configuration Example

      104
      • GVRP Configuration Example

        104
        • Network requirements

          104
        • Configuration procedure

          104
• 08-Basic Port Configuration Operation.pdf

  107
  • 1 Basic Port Configuration

    108
    • Ethernet Port Overview

      108
      • Types and Numbers of Ethernet Ports

        108
      • Combo Ports Mapping Relations

        108
      • Link Types of Ethernet Ports

        109
      • Configuring the Default VLAN ID for an Ethernet Port

        109
      • Adding an Ethernet Port to Specified VLANs

        110
    • Configuring Ethernet Ports

      110
      • Making Basic Port Configuration

        110
      • Configuring Port Auto-Negotiation Speed

        111
      • Setting the Ethernet Port Broadcast Suppression Ratio

        112
      • Enabling Flow Control on a Port

        112
      • Configuring Access Port Attribute

        113
      • Configuring Hybrid Port Attribute

        113
      • Configuring Trunk Port Attribute

        113
      • Disabling Up/Down Log Output on a Port

        114
        • Configuration tasks

          114
        • Configuration example

          114
      • Copying Port Configuration to Other Ports

        115
      • Configuring a Port Group

        115
      • Setting Loopback Detection for an Ethernet Port

        116
      • Configuring the Ethernet Port to Run Loopback Test

        117
      • Enabling the System to Test Connected Cable

        118
      • Configuring the Interval to Perform Statistical Analysis on Port Traffic

        118
      • Displaying and Maintaining Ethernet Ports

        119
    • Ethernet Port Configuration Example

      119
      • Network requirements

        119
        • Configuration procedure

          119
    • Troubleshooting Ethernet Port Configuration

      120
• 09-Link Aggregation Operation.pdf

  121
  • 1 Link Aggregation Configuration

    122
    • Overview

      122
      • Introduction to Link Aggregation

        122
      • Introduction to LACP

        122
      • Operation Key

        123
      • Manual Aggregation Group

        123
        • Introduction to manual aggregation group

          123
        • Port status in manual aggregation group

          123
        • Requirements on ports for manual aggregation

          123
      • Static LACP Aggregation Group

        124
        • Introduction to static LACP aggregation

          124
        • Port status of static aggregation group

          124
      • Dynamic LACP Aggregation Group

        125
        • Introduction to dynamic LACP aggregation group

          125
        • Port status of dynamic aggregation group

          125
        • Configuring system priority

          125
        • Configuring port priority

          126
      • Aggregation Group Categories

        126
    • Link Aggregation Configuration

      127
      • Configuring a Manual Aggregation Group

        127
      • Configuring a Static LACP Aggregation Group

        128
      • Configuring a Dynamic LACP Aggregation Group

        129
    • Displaying and Maintaining Link Aggregation

      130
    • Link Aggregation Configuration Example

      130
      • Network requirements

        130
        • Configuration procedure

          131
• 10-Port Isolation Operation.pdf

  133
  • 1 Port Isolation Configuration

    134
    • Port Isolation Overview

      134
      • Introduction to Port Isolation

        134
    • Port Isolation Configuration

      134
    • Displaying and Maintaining Port Isolation

      135
    • Port Isolation Configuration Example

      135
      • Network requirements

        135
        • Configuration procedure

          135
• 11-Port Security-Port Binding Operation.pdf

  137
  • 1 Port Security Configuration

    138
    • Port Security Overview

      138
      • Introduction

        138
      • Port Security Features

        138
      • Port Security Modes

        139
    • Port Security Configuration

      141
      • Enabling Port Security

        141
      • Setting the Maximum Number of MAC Addresses Allowed on a Port

        142
      • Setting the Port Security Mode

        142
      • Configuring Port Security Features

        143
        • Configuring the NTK feature

          143
        • Configuring intrusion protection

          144
        • Configuring the Trap feature

          144
      • Ignoring the Authorization Information from the RADIUS Server

        145
      • Configuring Security MAC Addresses

        145
        • Configuration prerequisites

          146
        • Configuration procedure

          146
    • Displaying and Maintaining Port Security Configuration

      146
    • Port Security Configuration Example

      146
      • Network requirements

        146
        • Configuration procedure

          147
  • 2 Port Binding Configuration

    148
    • Port Binding Overview

      148
      • Introduction

        148
      • Configuring Port Binding

        148
    • Displaying and Maintaining Port Binding Configuration

      148
    • Port Binding Configuration Example

      149
      • Network requirements

        149
        • Configuration procedure

          149
• 12-DLDP Operation.pdf

  150
  • 1 DLDP Configuration

    151
    • DLDP Overview

      151
      • DLDP Fundamentals

        152
        • DLDP status

          152
        • DLDP timers

          153
        • DLDP operating mode

          154
        • DLDP implementation

          154
        • DLDP neighbor state

          156
      • Precautions During DLDP Configuration

        156
    • DLDP Configuration

      156
      • DLDP Configuration Tasks

        156
      • Resetting DLDP Status

        157
    • DLDP Network Example

      158
      • Network requirements

        158
        • Configuration procedure

          158
• 13-MAC Address Table Management Operation.pdf

  160
  • 1 MAC Address Table Management

    161
    • Overview

      161
      • Introduction to MAC Address Table

        161
      • Introduction to MAC Address Learning

        161
      • Managing MAC Address Table

        163
        • Aging of MAC address table

          163
        • Entries in a MAC address table

          164
    • Configuring MAC Address Table Management

      164
      • Configuration Task List

        164
      • Configuring a MAC Address Entry

        165
        • Adding a MAC address entry in system view

          165
        • Adding a MAC address entry in Ethernet port view

          165
      • Setting the Aging Time of MAC Address Entries

        166
      • Setting the Maximum Number of MAC Addresses a Port Can Learn

        166
      • Disabling MAC Address learning for a VLAN

        167
    • Displaying and Maintaining MAC Address Table

      168
    • Configuration Example

      168
      • Adding a Static MAC Address Entry Manually

        168
        • Network requirements

          168
        • Configuration procedure

          168
• 14-MSTP Operation.pdf

  169
  • 1 MSTP Configuration

    171
    • STP Overview

      171
      • STP Overview

        171
        • Functions of STP

          171
        • Protocol packets of STP

          171
        • Basic concepts in STP

          171
        • How STP works

          173
    • MSTP Overview

      179
      • Background of MSTP

        179
        • Disadvantages of STP and RSTP

          179
        • Features of MSTP

          179
      • Basic MSTP Terminologies

        180
        • MST region

          180
        • MSTI

          181
        • VLAN mapping table

          181
        • IST

          181
        • CST

          181
        • CIST

          181
        • Region root

          181
        • Common root bridge

          181
        • Port role

          181
        • Port state

          182
      • Principle of MSTP

        183
        • Calculate the CIST

          183
        • Calculate an MSTI

          183
        • Implement STP algorithm

          183
      • MSTP Implementation on the Device

        184
      • STP-related Standards

        185
    • Configuring Root Bridge

      185
      • Configuration Prerequisites

        186
      • Configuring an MST Region

        186
        • Configuration procedure

          186
        • Configuration example

          187
      • Specifying the Current Device as a Root Bridge/Secondary Root Bridge

        187
        • Specify the current device as the root bridge of a spanning tree

          187
        • Specify the current device as the secondary root bridge of a spanning tree

          188
        • Configuration example

          189
      • Configuring the Bridge Priority of the Current Device

        189
        • Configuration procedure

          189
        • Configuration example

          190
      • Configuring the Mode a Port Recognizes and Sends MSTP Packets

        190
        • Configuration procedure

          190
        • Configuration example

          191
      • Configuring the MSTP Operation Mode

        191
        • Configuration procedure

          191
        • Configuration example

          192
      • Configuring the Maximum Hop Count of an MST Region

        192
        • Configuration procedure

          192
        • Configuration example

          192
      • Configuring the Network Diameter of the Switched Network

        192
        • Configuration procedure

          192
        • Configuration example

          193
      • Configuring the MSTP Time-related Parameters

        193
        • Configuration procedure

          193
        • Configuration example

          194
      • Configuring the Timeout Time Factor

        194
        • Configuration procedure

          195
        • Configuration example

          195
      • Configuring the Maximum Transmitting Speed on the Current Port

        195
        • Configure the maximum transmitting speed for specified ports in system view

          195
        • Configure the maximum transmitting speed in Ethernet port view

          195
        • Configuration example

          196
      • Configuring the Current Port as an Edge Port

        196
        • Configure a port as an edge port in system view

          196
        • Configure a port as an edge port in Ethernet port view

          196
        • Configuration example

          197
      • Specifying Whether the Link Connected to a Port Is Point-to-point Link

        197
        • Specify whether the link connected to a port is point-to-point link in system view

          197
        • Specify whether the link connected to a port is point-to-point link in Ethernet port view

          197
        • Configuration example

          198
      • Enabling MSTP

        198
        • Configuration procedure

          198
        • Configuration example

          199
    • Configuring Leaf Nodes

      199
      • Configuration Prerequisites

        200
      • Configuring the MST Region

        200
      • Configuring the Mode a Port Recognizes and Sends MSTP Packets

        200
      • Configuring the Timeout Time Factor

        200
      • Configuring the Maximum Transmitting Speed on the Current Port

        200
      • Configuring a Port as an Edge Port

        200
      • Configuring the Path Cost for a Port

        201
        • Standards for calculating path costs of ports

          201
        • Configure the path cost for specific ports

          202
        • Configuration example (A)

          202
        • Configuration example (B)

          202
      • Configuring Port Priority

        203
        • Configure port priority in system view

          203
        • Configure port priority in Ethernet port view

          203
        • Configuration example

          203
      • Specifying Whether the Link Connected to a Port Is a Point-to-point Link

        204
      • Enabling MSTP

        204
    • Performing mCheck Operation

      204
      • Configuration Prerequisites

        204
      • Configuration Procedure

        204
        • Perform the mCheck operation in system view

          204
        • Perform the mCheck operation in Ethernet port view

          204
      • Configuration Example

        205
    • Configuring Guard Functions

      205
      • Introduction

        205
        • BPDU guard

          205
        • Root guard

          205
        • Loop guard

          206
        • TC-BPDU attack guard

          206
        • BPDU dropping

          206
      • Configuration Prerequisites

        207
      • Configuring BPDU Guard

        207
        • Configuration procedure

          207
        • Configuration example

          207
      • Configuring Root Guard

        207
        • Configuration procedure

          207
        • Configuration example

          207
      • Configuring Loop Guard

        208
        • Configuration procedure

          208
        • Configuration example

          208
      • Configuring TC-BPDU Attack Guard

        208
        • Configuration prerequisites

          208
        • Configuration procedure

          208
        • Configuration example

          208
      • Configuring BPDU Dropping

        209
    • Configuring Digest Snooping

      209
      • Introduction

        209
      • Configuring Digest Snooping

        210
        • Configuration prerequisites

          210
        • Configuration procedure

          210
    • Configuring Rapid Transition

      211
      • Introduction

        211
      • Configuring Rapid Transition

        213
        • Configuration prerequisites

          213
        • Configuration procedure

          213
    • Configuring VLAN-VPN Tunnel

      214
      • Introduction

        214
      • Configuring VLAN-VPN tunnel

        214
    • STP Maintenance Configuration

      215
      • Introduction

        215
      • Enabling Log/Trap Output for Ports of MSTP Instance

        215
      • Configuration Example

        215
    • Enabling Trap Messages Conforming to 802.1d Standard

      216
      • Configuration procedure

        216
        • Configuration example

          216
    • Displaying and Maintaining MSTP

      216
    • MSTP Configuration Example

      217
      • Network requirements

        217
        • Configuration procedure

          217
    • VLAN-VPN tunnel Configuration Example

      219
      • Network requirements

        219
        • Configuration procedure

          219
• 15-802.1x and System Guard Operation.pdf

  221
  • 1 802.1x Configuration

    222
    • Introduction to 802.1x

      222
      • Architecture of 802.1x Authentication

        222
        • Port access entity

          223
        • Controlled port and uncontrolled port

          223
        • The valid direction of a controlled port

          223
        • Port access control method

          223
      • The Mechanism of an 802.1x Authentication System

        224
      • Encapsulation of EAPoL Messages

        224
        • The format of an EAPoL packet

          224
        • The format of an EAP packet

          225
        • Fields added for EAP authentication

          226
      • 802.1x Authentication Procedure

        226
        • EAP relay mode

          226
        • EAP terminating mode

          228
      • Timers Used in 802.1x

        229
      • Additional 802.1x Features Implemented

        230
        • Checking the supplicant system

          230
        • Checking the client version

          231
        • The Guest VLAN function

          231
        • Enabling 802.1x re-authentication

          232
    • Introduction to 802.1x Configuration

      232
    • Basic 802.1x Configuration

      233
      • Configuration Prerequisites

        233
      • Configuring Basic 802.1x Functions

        233
      • Timer and Maximum User Number Configuration

        235
    • Advanced 802.1x Configuration

      236
      • Configuring Proxy Checking

        236
      • Configuring Client Version Checking

        237
      • Enabling DHCP-triggered Authentication

        238
      • Configuring Guest VLAN

        238
      • Configuring 802.1x Re-Authentication

        239
      • Configuring the 802.1x Re-Authentication Timer

        239
    • Displaying and Maintaining 802.1x

      240
    • Configuration Example

      240
      • 802.1x Configuration Example

        240
        • Network requirements

          240
        • Configuration procedure

          241
  • 2 Quick EAD Deployment Configuration

    243
    • Introduction to Quick EAD Deployment

      243
      • Quick EAD Deployment Overview

        243
      • Operation of Quick EAD Deployment

        243
        • Restricted access

          243
        • HTTP redirection

          243
    • Configuring Quick EAD Deployment

      243
      • Configuration Prerequisites

        243
      • Configuration Procedure

        244
        • Configuring a free IP range

          244
        • Setting the ACL timeout period

          244
      • Displaying and Maintaining Quick EAD Deployment

        245
    • Quick EAD Deployment Configuration Example

      245
      • Network requirements

        245
        • Configuration procedure

          246
    • Troubleshooting

      246
  • 3 System-Guard Configuration

    247
    • System-Guard Overview

      247
    • Configuring the System-Guard Feature

      247
      • Configuring the System-Guard Feature

        247
    • Displaying and Maintaining System-Guard

      248
• 16-AAA Operation.pdf

  249
  • 1 AAA Overview

    251
    • Introduction to AAA

      251
      • Authentication

        251
      • Authorization

        251
      • Accounting

        252
      • Introduction to ISP Domain

        252
    • Introduction to AAA Services

      252
      • Introduction to RADIUS

        252
        • Basic message exchange procedure in RADIUS

          253
        • RADIUS message format

          254
      • Introduction to HWTACACS

        256
        • What is HWTACACS

          256
        • Basic message exchange procedure in HWTACACS

          257
  • 2 AAA Configuration

    260
    • AAA Configuration Task List

      260
      • Configuration Introduction

        260
      • Creating an ISP Domain and Configuring Its Attributes

        261
      • Configuring an AAA Scheme for an ISP Domain

        262
        • Configuring a combined AAA scheme

          262
        • Configuring separate AAA schemes

          263
      • Configuring Dynamic VLAN Assignment

        264
      • Configuring the Attributes of a Local User

        265
      • Cutting Down User Connections Forcibly

        267
    • RADIUS Configuration Task List

      267
      • Creating a RADIUS Scheme

        269
      • Configuring RADIUS Authentication/Authorization Servers

        269
      • Configuring RADIUS Accounting Servers

        270
      • Configuring Shared Keys for RADIUS Messages

        271
      • Configuring the Maximum Number of RADIUS Request Transmission Attempts

        272
      • Configuring the Type of RADIUS Servers to be Supported

        272
      • Configuring the Status of RADIUS Servers

        273
      • Configuring the Attributes of Data to be Sent to RADIUS Servers

        274
      • Configuring the Local RADIUS Authentication Server Function

        275
      • Configuring Timers for RADIUS Servers

        276
      • Enabling Sending Trap Message when a RADIUS Server Goes Down

        277
      • Enabling the User Re-Authentication at Restart Function

        277
    • HWTACACS Configuration Task List

      278
      • Creating a HWTACACS Scheme

        279
      • Configuring TACACS Authentication Servers

        279
      • Configuring TACACS Authorization Servers

        280
      • Configuring TACACS Accounting Servers

        281
      • Configuring Shared Keys for HWTACACS Messages

        281
      • Configuring the Attributes of Data to be Sent to TACACS Servers

        282
      • Configuring the Timers Regarding TACACS Servers

        283
    • Displaying and Maintaining AAA

      284
      • Displaying and maintaining AAA information

        284
        • Displaying and maintaining RADIUS protocol information

          284
        • Displaying and maintaining HWTACACS protocol information

          285
    • AAA Configuration Examples

      285
      • Remote RADIUS Authentication of Telnet/SSH Users

        285
        • Network requirements

          285
        • Configuration procedure

          286
      • Local Authentication of FTP/Telnet Users

        287
        • Network requirements

          287
        • Configuration procedure

          287
      • HWTACACS Authentication and Authorization of Telnet Users

        288
        • Network requirements

          288
        • Configuration procedure

          288
    • Troubleshooting AAA

      289
      • Troubleshooting RADIUS Configuration

        289
      • Troubleshooting HWTACACS Configuration

        289
  • 3 EAD Configuration

    290
    • Introduction to EAD

      290
    • Typical Network Application of EAD

      290
    • EAD Configuration

      291
    • EAD Configuration Example

      291
      • Network requirements

        291
        • Configuration procedure

          292
• 17-MAC Address Authentication Operation.pdf

  293
  • 1 MAC Authentication Configuration

    294
    • MAC Authentication Overview

      294
      • Performing MAC Authentication on a RADIUS Server

        294
      • Performing MAC Authentication Locally

        294
    • Related Concepts

      295
      • MAC Authentication Timers

        295
      • Quiet MAC Address

        295
    • Configuring Basic MAC Authentication Functions

      295
    • MAC Address Authentication Enhanced Function Configuration

      297
      • MAC Address Authentication Enhanced Function Configuration Tasks

        297
      • Configuring a Guest VLAN

        297
      • Configuring the Maximum Number of MAC Address Authentication Users Allowed to Access a Port

        299
    • Displaying and Maintaining MAC Authentication

      300
    • MAC Authentication Configuration Example

      300
      • Network requirements

        300
        • Configuration Procedure

          300
• 18-IP Address and Performance Operation.pdf

  302
  • 1 IP Addressing Configuration

    303
    • IP Addressing Overview

      303
      • IP Address Classes

        303
      • Special Case IP Addresses

        304
      • Subnetting and Masking

        304
    • Configuring IP Addresses

      305
    • Displaying and Maintaining IP Addressing

      306
    • IP Address Configuration Examples

      306
      • IP Address Configuration Example I

        306
        • Network requirement

          306
        • Configuration procedure

          306
      • IP Address Configuration Example II

        307
        • Network requirements

          307
        • Configuration procedure

          307
  • 2 IP Performance Configuration

    309
    • IP Performance Overview

      309
      • Introduction to IP Performance Configuration

        309
      • Introduction to FIB

        309
    • Configuring IP Performance

      309
      • Configuration Task List

        309
      • Configuring TCP Attributes

        309
      • Disabling Sending of ICMP Error Packets

        310
    • Displaying and Maintaining IP Performance Configuration

      311
• 19-DHCP Operation.pdf

  312
  • 1 DHCP Overview

    313
    • Introduction to DHCP

      313
    • DHCP IP Address Assignment

      313
      • IP Address Assignment Policy

        313
      • Obtaining IP Addresses Dynamically

        314
      • Updating IP Address Lease

        315
    • DHCP Packet Format

      315
    • Protocols and Standards

      316
  • 2 DHCP Relay Agent Configuration

    317
    • Introduction to DHCP Relay Agent

      317
      • Usage of DHCP Relay Agent

        317
      • DHCP Relay Agent Fundamentals

        317
      • DHCP Relay Agent Support for Option 82

        318
        • Introduction to Option 82

          318
        • Padding content of Option 82

          318
        • Mechanism of Option 82 supported on DHCP relay agent

          319
    • Configuring the DHCP Relay Agent

      320
      • DHCP Relay Agent Configuration Task List

        320
      • Correlating a DHCP Server Group with a Relay Agent Interface

        320
      • Configuring DHCP Relay Agent Security Functions

        321
        • Configuring address checking

          321
        • Configuring the dynamic client address entry updating function

          322
        • Enabling unauthorized DHCP server detection

          323
      • Configuring the DHCP Relay Agent to Support Option 82

        323
        • Prerequisites

          323
        • Configuring the DHCP relay agent to support Option 82

          323
    • Displaying and Maintaining DHCP Relay Agent Configuration

      324
    • DHCP Relay Agent Configuration Example

      324
      • Network requirements

        324
        • Configuration procedure

          325
    • Troubleshooting DHCP Relay Agent Configuration

      325
      • Symptom

        325
        • Analysis

          325
        • Solution

          325
  • 3 DHCP Snooping Configuration

    327
    • DHCP Snooping Overview

      327
      • Function of DHCP Snooping

        327
      • Overview of DHCP Snooping Option 82

        328
        • Introduction to Option 82

          328
        • Padding content and frame format of Option 82

          328
        • Mechanism of DHCP-snooping Option 82

          329
      • Overview of IP Filtering

        330
        • DHCP-snooping table

          331
        • IP static binding table

          331
        • IP filtering

          331
    • DHCP Snooping Configuration

      331
      • Configuring DHCP Snooping

        331
      • Configuring DHCP Snooping to Support Option 82

        332
        • DHCP-Snooping Option 82 Support Configuration Task List

          332
        • Enable DHCP-snooping Option 82 support

          332
        • Configure a handling policy for DHCP packets with Option 82

          333
        • Configure the storage format of Option 82

          333
        • Configure the circuit ID sub-option

          334
        • Configure the remote ID sub-option

          334
        • Configure the padding format for Option 82

          335
      • Configuring IP Filtering

        335
    • DHCP Snooping Configuration Example

      336
      • DHCP-Snooping Option 82 Support Configuration Example

        336
        • Network requirements

          336
        • Configuration procedure

          337
      • IP Filtering Configuration Example

        337
        • Network requirements

          337
        • Configuration procedure

          338
    • Displaying and Maintaining DHCP Snooping Configuration

      339
  • 4 DHCP/BOOTP Client Configuration

    340
    • Introduction to DHCP Client

      340
    • Introduction to BOOTP Client

      340
    • Configuring a DHCP/BOOTP Client

      340
    • DHCP Client Configuration Example

      341
      • Network requirements

        341
        • Configuration procedure

          341
    • Displaying and Maintaining DHCP/BOOTP Client Configuration

      342
• 20-ACL Operation.pdf

  343
  • 1 ACL Configuration

    344
    • ACL Overview

      344
      • ACL Matching Order

        344
        • Depth-first match order for rules of a basic ACL

          345
        • Depth-first match order for rules of an advanced ACL

          345
      • Ways to Apply an ACL on a Device

        345
        • Being applied to the hardware directly

          345
        • Being referenced by upper-level software

          345
      • Types of ACLs Supported by Devices

        346
    • ACL Configuration

      346
      • Configuring Time Range

        346
        • Configuration Procedure

          347
        • Configuration Example

          347
      • Configuring Basic ACL

        348
        • Configuration Prerequisites

          348
        • Configuration Procedure

          348
        • Configuration Example

          348
      • Configuring Advanced ACL

        349
        • Configuration Prerequisites

          349
        • Configuration Procedure

          349
        • Configuration Example

          350
      • Configuring Layer 2 ACL

        350
        • Configuration Prerequisites

          350
        • Configuration Procedure

          350
        • Configuration Example

          351
    • ACL Assignment

      351
      • Assigning an ACL Globally

        352
        • Configuration prerequisites

          352
        • Configure procedure

          352
        • Configuration example

          352
      • Assigning an ACL to a VLAN

        352
        • Configuration prerequisites

          352
        • Configuration procedure

          352
        • Configuration example

          353
      • Assigning an ACL to a Port Group

        353
        • Configuration prerequisites

          353
        • Configuration procedure

          353
        • Configuration example

          353
      • Assigning an ACL to a Port

        354
        • Configuration prerequisites

          354
        • Configuration procedure

          354
        • Configuration example

          354
    • Displaying and Maintaining ACL

      354
    • Examples for Upper-layer Software Referencing ACLs

      355
      • Example for Controlling Telnet Login Users by Source IP

        355
        • Network requirements

          355
        • Configuration procedure

          355
      • Example for Controlling Web Login Users by Source IP

        355
        • Network requirements

          355
        • Configuration procedure

          356
    • Examples for Applying ACLs to Hardware

      356
      • Basic ACL Configuration Example

        356
        • Network requirements

          356
        • Configuration procedure

          356
      • Advanced ACL Configuration Example

        356
        • Network requirements

          356
        • Configuration procedure

          357
      • Layer 2 ACL Configuration Example

        357
        • Network requirements

          357
        • Configuration procedure

          357
      • Example for Applying an ACL to a VLAN

        358
        • Network requirements

          358
        • Configuration procedure

          358
• 21-QoS-QoS Profile Operation.pdf

  360
  • 1 QoS Configuration

    362
    • Overview

      362
      • Introduction to QoS

        362
      • Traditional Packet Forwarding Service

        362
      • New Applications and New Requirements

        362
      • Major Traffic Control Techniques

        363
    • QoS Supported by Devices

      363
      • Traffic Classification

        363
      • Precedence

        364
        • IP precedence, ToS precedence, and DSCP precedence

          364
        • 802.1p priority

          365
      • Priority Trust Mode

        366
        • Trusting the 802.1p precedence

          367
        • Trusting the DSCP precedence

          367
      • Protocol Priority

        369
      • Priority Marking

        369
      • Traffic Policing and Traffic Shaping

        369
        • Token bucket

          369
        • Evaluating the traffic with the token bucket

          370
        • Traffic policing

          370
        • Traffic shaping

          370
      • Traffic Redirecting

        371
      • VLAN Mapping

        371
      • Queue Scheduling

        371
      • Flow-based Traffic Accounting

        374
      • Burst

        374
      • Traffic mirroring

        374
    • QoS Configuration

      374
      • QoS Configuration Task List

        374
      • Configuring Priority Trust Mode

        375
        • Configuration prerequisites

          375
        • Configuration procedure

          375
        • Configuration example

          376
      • Configuring Priority Mapping

        376
        • Configuration prerequisites

          376
        • Configuration procedure

          376
        • Configuration example

          377
      • Setting the Priority of Protocol Packets

        379
        • Configuration prerequisites

          379
        • Configuration procedure

          379
        • Configuration example

          380
      • Marking Packet Priority

        380
        • Configuration prerequisites

          380
        • Configuration procedure

          380
        • Configuration example

          381
      • Configuring Traffic Policing

        381
        • Configuration prerequisites

          382
        • Configuration procedure

          382
        • Configuration example

          383
      • Configuring Traffic Shaping

        383
        • Configuration prerequisites

          383
        • Configuration procedure

          384
        • Configuration examples

          384
      • Configuring Traffic Redirecting

        384
        • Configuration prerequisites

          384
        • Configuration procedure

          384
        • Configuration example

          385
      • Configuring VLAN Mapping

        386
        • Configuration prerequisites

          386
        • Configuration procedure

          386
        • Configuration example

          386
      • Configuring Queue Scheduling

        386
        • Configuration prerequisites

          387
        • Configuration procedure

          387
        • Configuration example

          388
      • Collecting/Clearing Traffic Statistics

        388
        • Configuration prerequisites

          388
        • Configuration procedure

          388
        • Configuration example

          389
      • Enabling the Burst Function

        390
        • Configuration prerequisites

          390
        • Configuration procedure

          390
        • Configuration example

          390
      • Configuring Traffic Mirroring

        390
        • Configuration prerequisites

          390
        • Configuration procedure

          391
        • Configuration example

          392
      • Displaying and Maintaining QoS

        393
    • QoS Configuration Example

      394
      • Configuration Example of Traffic Policing

        394
        • Network requirement

          394
        • Configuration procedure

          394
  • 2 QoS Profile Configuration

    396
    • Overview

      396
      • Introduction to QoS Profile

        396
      • QoS Profile Application Mode

        396
        • Dynamic application mode

          396
        • Manual application mode

          396
    • QoS Profile Configuration

      397
      • QoS Profile Configuration Task List

        397
      • Configuring a QoS Profile

        397
        • Configuration prerequisites

          397
        • Configuration procedure

          397
      • Applying a QoS Profile

        397
        • Configuration prerequisites

          397
        • Configuration procedure

          398
      • Displaying and Maintaining QoS Profile

        398
    • Configuration Example

      399
      • QoS Profile Configuration Example

        399
        • Network requirements

          399
        • Configuration procedure

          399
• 22-Mirroring Operation.pdf

  401
  • 1 Mirroring Configuration

    402
    • Mirroring Overview

      402
      • Local Port Mirroring

        403
      • Remote Port Mirroring

        403
      • MAC-Based Mirroring

        404
      • VLAN-Based Mirroring

        404
    • Mirroring Configuration

      405
      • Configuring Local Port Mirroring

        405
        • Configuration prerequisites

          405
        • Configuration procedure

          405
      • Configuring Remote Port Mirroring

        406
        • Configuration on the device acting as a source switch

          406
        • Configuration on the device acting as an intermediate switch

          407
        • Configuration on the device acting as a destination switch

          407
      • Configuring MAC-Based Mirroring

        408
        • Configuration prerequisites

          409
        • Configuration procedure

          409
        • Configuration example

          409
      • Configuring VLAN-Based Mirroring

        409
        • Configuration prerequisites

          409
        • Configuration procedure

          410
        • Configuration example

          410
      • Displaying and Maintaining Port Mirroring

        410
    • Mirroring Configuration Example

      410
      • Local Port Mirroring Configuration Example

        410
        • Network requirements

          410
        • Configuration procedure

          411
      • Remote Port Mirroring Configuration Example

        411
        • Network requirements

          411
        • Configuration procedure

          412
• 23-ARP Operation.pdf

  415
  • 1 ARP Configuration

    416
    • Introduction to ARP

      416
      • ARP Function

        416
      • ARP Message Format

        416
      • ARP Table

        418
      • ARP Process

        418
      • Introduction to ARP Attack Detection

        419
        • Man-in-the-middle attack

          419
        • ARP attack detection

          419
      • Introduction to Gratuitous ARP

        420
    • Configuring ARP

      420
      • Configuring ARP Basic Functions

        420
      • Configuring ARP Attack Detection

        421
    • Configuring Gratuitous ARP

      422
    • Displaying and Maintaining ARP

      423
    • ARP Configuration Example

      423
      • ARP Basic Configuration Example

        423
        • Network requirement

          423
        • Configuration procedure

          423
      • ARP Attack Detection Configuration Example

        423
        • Network requirements

          423
        • Configuration procedure

          424
• 24-SNMP-RMON Operation.pdf

  425
  • 1 SNMP Configuration

    426
    • SNMP Overview

      426
      • SNMP Operation Mechanism

        426
      • SNMP Versions

        426
      • Supported MIBs

        427
    • Configuring Basic SNMP Functions

      428
      • Configuring basic SNMP functions for SNMPv1 or SNMPv2c

        428
        • Configuring basic SNMP functions for SNMPv3

          429
    • Configuring Trap Parameters

      430
      • Configuring Basic Trap

        430
      • Configuring Extended Trap

        431
    • Enabling Logging for Network Management

      432
    • Displaying and Maintaining SNMP

      432
    • SNMP Configuration Examples

      432
      • SNMP Configuration Examples

        432
        • Network requirements

          432
        • Network procedure

          433
        • Configuring the NMS

          434
  • 2 RMON Configuration

    435
    • Introduction to RMON

      435
      • Working Mechanism of RMON

        435
      • Commonly Used RMON Groups

        436
        • Event group

          436
        • Alarm group

          436
        • Extended alarm group

          436
        • History group

          436
        • Statistics group

          436
    • RMON Configuration

      437
    • Displaying and Maintaining RMON

      438
    • RMON Configuration Examples

      438
      • Network requirements

        438
        • Configuration procedures

          438
• 25-Multicast Operation.pdf

  440
  • 1 Multicast Overview

    441
    • Multicast Overview

      441
      • Information Transmission in the Unicast Mode

        441
      • Information Transmission in the Broadcast Mode

        442
      • Information Transmission in the Multicast Mode

        443
      • Roles in Multicast

        444
      • Advantages and Applications of Multicast

        445
        • Advantages of multicast

          445
        • Application of multicast

          445
    • Multicast Models

      445
      • ASM model

        446
        • SFM model

          446
        • SSM model

          446
    • Multicast Architecture

      446
      • IP multicast address

        447
        • Ethernet multicast MAC address

          448
      • Multicast Protocols

        449
        • Layer 3 multicast protocols

          449
        • Layer 2 multicast protocols

          450
    • Multicast Packet Forwarding Mechanism

      451
      • Implementation of the RPF Mechanism

        451
      • RPF Check

        452
  • 2 IGMP Snooping Configuration

    454
    • IGMP Snooping Overview

      454
      • Principle of IGMP Snooping

        454
      • Basic Concepts in IGMP Snooping

        454
        • IGMP Snooping related ports

          454
        • Port aging timers in IGMP Snooping and related messages and actions

          455
      • Work Mechanism of IGMP Snooping

        455
        • When receiving a general query

          456
        • When receiving a membership report

          456
        • When receiving a leave message

          456
    • IGMP Snooping Configuration

      457
      • IGMP Snooping Configuration Task List

        457
      • Enabling IGMP Snooping

        458
      • Configuring the Version of IGMP Snooping

        458
      • Configuring Timers

        459
      • Configuring Fast Leave Processing

        459
        • Enabling fast leave processing in system view

          459
        • Enabling fast leave processing in Ethernet port view

          460
      • Configuring a Multicast Group Filter

        460
        • Configuring a multicast group filter in system view

          461
        • Configuring a multicast group filter in Ethernet port view

          461
      • Configuring the Maximum Number of Multicast Groups on a Port

        461
      • Configuring IGMP Querier

        462
      • Suppressing Flooding of Unknown Multicast Traffic in a VLAN

        463
      • Configuring Static Member Port for a Multicast Group

        463
        • In Ethernet port view

          464
        • In VLAN interface view

          464
      • Configuring a Static Router Port

        464
        • In Ethernet port view

          464
        • In VLAN view

          465
      • Configuring a Port as a Simulated Group Member

        465
      • Configuring a VLAN Tag for Query Messages

        466
      • Configuring Multicast VLAN

        466
    • Displaying and Maintaining IGMP Snooping

      468
    • IGMP Snooping Configuration Examples

      468
      • Configuring IGMP Snooping

        468
        • Network requirements

          468
        • Configuration procedure

          469
      • Configuring Multicast VLAN

        470
        • Network requirements

          470
        • Configuration procedure

          471
    • Troubleshooting IGMP Snooping

      472
  • 3 Common Multicast Configuration

    473
    • Common Multicast Configuration

      473
      • Configuring a Multicast MAC Address Entry

        473
      • Configuring Dropping Unknown Multicast Packets

        474
    • Displaying and Maintaining Common Multicast Configuration

      474
• 26-NTP Operation.pdf

  475
  • 1 NTP Configuration

    476
    • Introduction to NTP

      476
      • Applications of NTP

        476
      • Implementation Principle of NTP

        477
      • NTP Implementation Modes

        478
        • Server/client mode

          479
        • Symmetric peer mode

          479
        • Broadcast mode

          479
        • Multicast mode

          480
    • NTP Configuration Task List

      481
    • Configuring NTP Implementation Modes

      481
      • Configuring NTP Server/Client Mode

        481
      • Configuring the NTP Symmetric Peer Mode

        482
      • Configuring NTP Broadcast Mode

        483
        • Configuring the device to work in the NTP broadcast server mode

          483
        • Configuring the device to work in the NTP broadcast client mode

          484
      • Configuring NTP Multicast Mode

        484
        • Configuring the device to work in the multicast server mode

          484
        • Configuring the device to work in the multicast client mode

          484
    • Configuring Access Control Right

      485
      • Configuration Prerequisites

        485
      • Configuration Procedure

        485
    • Configuring NTP Authentication

      485
      • Configuration Prerequisites

        486
      • Configuration Procedure

        486
        • Configuring NTP authentication on the client

          486
        • Configuring NTP authentication on the server

          487
    • Configuring Optional NTP Parameters

      488
      • Configuring an Interface on the Local Device to Send NTP Messages

        488
      • Configuring the Number of Dynamic Sessions Allowed on the Local Device

        489
      • Disabling an Interface from Receiving NTP messages

        489
    • Displaying and Maintaining NTP Configuration

      489
    • NTP Configuration Examples

      489
      • Configuring NTP Server/Client Mode

        489
        • Network requirements

          489
        • Configuration procedure

          490
      • Configuring NTP Symmetric Peer Mode

        491
        • Network requirements

          491
        • Configuration procedure

          491
      • Configuring NTP Broadcast Mode

        492
        • Network requirements

          492
        • Configuration procedure

          493
      • Configuring NTP Multicast Mode

        494
        • Network requirements

          494
        • Configuration procedure

          494
      • Configuring NTP Server/Client Mode with Authentication

        495
        • Network requirements

          495
        • Configuration procedure

          495
• 27-SSH Operation.pdf

  497
  • 1 SSH Configuration

    498
    • SSH Overview

      498
      • Introduction to SSH

        498
      • Algorithm and Key

        498
      • Asymmetric Key Algorithm

        499
      • SSH Operating Process

        499
        • Version negotiation

          500
        • Key negotiation

          500
        • Authentication negotiation

          500
        • Session request

          501
        • Data exchange

          501
    • Configuring the SSH Server

      501
      • SSH Server Configuration Tasks

        502
      • Configuring the Protocol Support for the User Interface

        502
      • Generating/Destroying a RSA or DSA Key Pair

        503
      • Exporting the RSA or DSA Public Key

        504
      • Creating an SSH User and Specify an Authentication Type

        504
      • Specifying a Service Type for an SSH User

        505
      • Configuring SSH Management

        505
      • Configuring the Client Public Key on the Server

        506
      • Assigning a Public Key to an SSH User

        508
      • Specifying a Source IP Address/Interface for the SSH Server

        508
    • Configuring the SSH Client

      509
      • SSH Client Configuration Tasks

        509
      • Configuring the SSH Client Using an SSH Client Software

        509
        • Generate a client key

          510
        • Specify the IP address of the Server

          512
        • Select a protocol for remote connection

          513
        • Select an SSH version

          513
        • Open an SSH connection with publickey authentication

          514
        • Open an SSH connection with password authentication

          516
      • Configuring the SSH Client on an SSH2-Capable Device

        516
        • Configure whether first-time authentication is supported

          516
        • Establish the connection between the SSH client and server

          517
      • Specifying a Source IP address/Interface for the SSH client

        518
    • Displaying and Maintaining SSH Configuration

      518
    • SSH Configuration Examples

      519
      • When the Device Acts as the SSH Server and the Authentication Type is Password

        519
        • Network requirements

          519
        • Configuration procedure

          519
      • When the Device Acts as an SSH Server and the Authentication Type is Publickey

        521
        • Network requirements

          521
        • Configuration procedure

          521
      • When the Switch Acts as an SSH Client and the Authentication Type is Password

        527
        • Network requirements

          527
        • Configuration procedure

          527
      • When the Device Acts as an SSH Client and the Authentication Type is Publickey

        528
        • Network requirements

          528
        • Configuration procedure

          528
      • When the Device Acts as an SSH Client and First-time authentication is not Supported

        530
        • Network requirements

          530
        • Configuration procedure

          530
• 28-File System Management Operation.pdf

  533
  • 1 File System Management Configuration

    534
    • File System Configuration

      534
      • Introduction to File System

        534
      • File System Configuration Tasks

        534
      • Directory Operations

        534
      • File Operations

        535
      • Flash Memory Operations

        536
      • Prompt Mode Configuration

        536
      • File System Configuration Example

        537
    • File Attribute Configuration

      538
      • Introduction to File Attributes

        538
      • Configuring File Attributes

        539
• 29-FTP-SFTP-TFTP Operation.pdf

  540
  • 1 FTP and SFTP Configuration

    541
    • Introduction to FTP and SFTP

      541
      • Introduction to FTP

        541
      • Introduction to SFTP

        542
    • FTP Configuration

      542
      • FTP Configuration: The Device Operating as an FTP Server

        542
        • Creating an FTP user

          542
        • Enabling an FTP server

          543
        • Configuring connection idle time

          543
        • Specifying the source interface and source IP address for an FTP server

          543
        • Disconnecting a specified user

          544
        • Configuring the banner for an FTP server

          545
        • Displaying FTP server information

          546
      • FTP Configuration: The Device Operating as an FTP Client

        546
        • Basic configurations on an FTP client

          546
        • Specifying the source interface and source IP address for an FTP client

          548
      • Configuration Example: The Device Operating as an FTP Server

        548
        • Network requirements

          548
        • Configuration procedure

          549
      • FTP Banner Display Configuration Example

        550
        • Network requirements

          550
        • Configuration procedure

          551
      • FTP Configuration: The Device Operating as an FTP Client

        551
        • Network requirements

          551
        • Configuration procedure

          552
    • SFTP Configuration

      553
      • SFTP Configuration: The Device Operating as an SFTP Server

        553
        • Enabling an SFTP server

          553
        • Configuring connection idle time

          553
        • Supported SFTP client software

          554
      • SFTP Configuration: The Device Operating as an SFTP Client

        554
        • Basic configurations on an SFTP client

          554
        • Specifying the source interface or source IP address for an SFTP client

          556
      • SFTP Configuration Example

        556
        • Network requirements

          556
        • Configuration procedure

          556
  • 2 TFTP Configuration

    560
    • Introduction to TFTP

      560
    • TFTP Configuration

      560
      • TFTP Configuration: The Device Operating as a TFTP Client

        561
        • Basic configurations on a TFTP client

          561
        • Specifying the source interface or source IP address for an FTP client

          561
      • TFTP Configuration Example

        562
        • Network requirements

          562
        • Configuration procedure

          563
• 30-Information Center Operation.pdf

  564
  • 1 Information Center

    565
    • Information Center Overview

      565
      • Introduction to Information Center

        565
        • Classification of system information

          565
        • Eight levels of system information

          565
        • Ten channels and six output directions of system information

          566
        • Outputting system information by source module

          567
      • System Information Format

        568
        • Priority

          569
        • Timestamp

          569
        • Sysname

          569
        • Module

          570
        • Level (Severity)

          570
        • Digest

          570
        • Content

          570
    • Information Center Configuration

      570
      • Introduction to the Information Center Configuration Tasks

        570
      • Configuring Synchronous Information Output

        571
      • Configuring to Display the Time Stamp with the UTC Time Zone

        571
      • Setting to Output System Information to the Console

        572
        • Setting to output system information to the console

          572
        • Enabling system information display on the console

          573
      • Setting to Output System Information to a Monitor Terminal

        574
        • Setting to output system information to a monitor terminal

          574
        • Enabling system information display on a monitor terminal

          574
      • Setting to Output System Information to a Log Host

        575
      • Setting to Output System Information to the Trap Buffer

        576
      • Setting to Output System Information to the Log Buffer

        576
      • Setting to Output System Information to the SNMP NMS

        577
    • Displaying and Maintaining Information Center

      578
    • Information Center Configuration Examples

      578
      • Log Output to a UNIX Log Host

        578
        • Network requirements

          578
        • Configuration procedure

          578
      • Log Output to a Linux Log Host

        580
        • Network requirements

          580
        • Configuration procedure

          580
      • Log Output to the Console

        581
        • Network requirements

          581
        • Configuration procedure

          581
      • Configuration Example

        582
        • Network requirements

          582
        • Configuration procedure

          582
• 31-System Maintenance and Debugging Operation.pdf

  583
  • 1 Host Configuration File Loading

    584
    • Introduction to Loading Approaches

      584
      • Remote Loading Using FTP

        584
        • Loading procedure using FTP client

          584
        • Loading procedure using FTP server

          585
      • Remote Loading Using TFTP

        588
  • 2 Basic System Configuration and Debugging

    589
    • Basic System Configuration

      589
    • Displaying the System Status

      590
    • Debugging the System

      590
      • Enabling/Disabling System Debugging

        590
      • Displaying Debugging Status

        591
      • Displaying Operating Information about Modules in System

        591
  • 3 Network Connectivity Test

    592
    • Network Connectivity Test

      592
      • ping

        592
      • tracert

        592
  • 4 Device Management

    593
    • Introduction to Device Management

      593
    • Device Management Configuration

      593
      • Device Management Configuration Tasks

        593
      • Rebooting the Device

        593
      • Scheduling a Reboot on the Device

        594
      • Configuring Real-time Monitoring of the Running Status of the System

        594
      • Specifying the Main Configuration File to be Used at Next Reboot

        594
      • Identifying and Diagnosing Pluggable Transceivers

        595
        • Introduction to pluggable transceivers

          595
        • Identifying pluggable transceivers

          595
        • Diagnosing pluggable transceivers

          596
    • Displaying and Maintaining the Device Management Configuration

      596
• 32-VLAN-VPN Operation.pdf

  597
  • 1 VLAN-VPN Configuration

    598
    • VLAN-VPN Overview

      598
      • Introduction to VLAN-VPN

        598
      • Implementation of VLAN-VPN

        599
      • Adjusting the TPID Values of VLAN-VPN Packets

        599
    • VLAN-VPN Configuration

      600
      • Configuration Task List

        600
      • Enabling the VLAN-VPN Feature for a Port

        600
        • Configuration Prerequisites

          600
        • Configuration procedure

          600
      • TPID Adjusting Configuration

        601
        • Configuration Prerequisites

          601
        • Configuration Procedure

          601
    • Displaying and Maintaining VLAN-VPN

      601
    • VLAN-VPN Configuration Example

      602
      • Transmitting User Packets through a Tunnel in the Public Network by Using VLAN-VPN

        602
        • Network requirements

          602
        • Configuration procedure

          602
        • Data transfer process

          603
  • 2 Selective QinQ Configuration

    605
    • Selective QinQ Overview

      605
      • Selective QinQ Overview

        605
      • Inner-to-Outer Tag Priority Mapping

        606
    • Selective QinQ Configuration

      606
      • Configuration Task List

        606
      • Enabling the Selective QinQ Feature for a Port

        606
      • Configuring the Inner-to-Outer Tag Priority Mapping Feature

        607
        • Configuration Prerequisites

          607
        • Configuration Procedure

          607
    • Selective QinQ Configuration Example

      607
      • Processing Private Network Packets by Their Types

        607
        • Network requirements

          607
        • Configuration procedure

          608
• 33-HWPing Operation.pdf

  611
  • 1 HWPing Configuration

    612
    • HWPing Overview

      612
      • Introduction to HWPing

        612
      • Test Types Supported by HWPing

        613
      • HWPing Test Parameters

        613
    • HWPing Configuration

      615
      • Configuration on a HWPing Server

        615
        • HWPing server configuration tasks

          615
        • HWPing server configuration

          616
      • HWPing Client Configuration

        616
        • HWPing client configuration

          616
        • Configuring HWPing client to send Trap messages

          627
      • Displaying and Maintaining HWPing

        628
    • HWPing Configuration Example

      628
      • ICMP Test

        628
        • Network requirements

          628
        • Configuration procedure

          628
      • DHCP Test

        629
        • Network requirements

          629
        • Configuration procedure

          629
      • FTP Test

        631
        • Network requirements

          631
        • Configuration procedure

          631
      • HTTP Test

        633
        • Network requirements

          633
        • Configuration procedure

          633
      • Jitter Test

        634
        • Network requirements

          634
        • Network diagram

          635
        • Configuration procedure

          635
      • SNMP Test

        636
        • Network requirements

          636
        • Network diagram

          637
        • Configuration procedure

          637
      • TCP Test (Tcpprivate Test) on the Specified Ports

        638
        • Network requirements

          638
        • Network diagram

          638
        • Configuration procedure

          639
      • UDP Test (Udpprivate Test) on the Specified Ports

        640
        • Network requirements

          640
        • Network diagram

          640
        • Configuration procedure

          640
      • DNS Test

        641
        • Network requirements

          641
        • Network diagram

          642
        • Configuration procedure

          642
• 34-DNS Operation.pdf

  644
  • 1 DNS Configuration

    645
    • DNS Overview

      645
      • Static Domain Name Resolution

        645
      • Dynamic Domain Name Resolution

        645
        • Resolution procedure

          645
        • DNS suffixes

          646
    • Configuring Domain Name Resolution

      646
      • Configuring Static Domain Name Resolution

        646
      • Configuring Dynamic Domain Name Resolution

        647
    • DNS Configuration Example

      647
      • Static Domain Name Resolution Configuration Example

        647
        • Network requirements

          647
        • Configuration procedure

          648
      • Dynamic Domain Name Resolution Configuration Example

        648
        • Network requirements

          648
        • Configuration procedure

          649
    • Displaying and Maintaining DNS

      650
    • Troubleshooting DNS Configuration

      650
      • Symptom

        650
        • Solution

          650
• 35-Smart Link-Monitor Link Operation.pdf

  651
  • 1 Smart Link Configuration

    652
    • Smart Link Overview

      652
      • Basic Concepts in Smart Link

        652
        • Smart Link group

          652
        • Master port

          653
        • Slave port

          653
        • Flush message

          653
        • Control VLAN for sending flush messages

          653
        • Control VLAN for receiving flush messages

          653
      • Operating Mechanism of Smart Link

        654
    • Configuring Smart Link

      654
      • Configuration Task List

        654
      • Configuring a Smart Link Device

        655
      • Configuring Associated Devices

        656
      • Precautions

        656
    • Displaying and Maintaining Smart Link

      657
    • Smart Link Configuration Example

      657
      • Implementing Link Redundancy Backup

        657
        • Network requirements

          657
        • Configuration procedure

          658
  • 2 Monitor Link Configuration

    660
    • Introduction to Monitor Link

      660
      • How Monitor Link Works

        661
    • Configuring Monitor Link

      662
      • Configuration Task List

        662
      • Creating a Monitor Link Group

        662
      • Configuring the Uplink Port

        662
      • Configuring a Downlink Port

        663
    • Displaying and Maintaining Monitor Link

      664
    • Monitor Link Configuration Example

      664
      • Implementing Collaboration Between Smart Link and Monitor Link

        664
        • Network requirements

          664
        • Configuration procedure

          665
• 36-PoE-PoE Profile Operation.pdf

  667
  • 1 PoE Configuration

    668
    • PoE Overview

      668
      • Introduction to PoE

        668
        • Advantages of PoE

          668
        • PoE components

          668
      • PoE Features Supported by the Device

        669
    • PoE Configuration

      669
      • PoE Configuration Task List

        669
      • Enabling the PoE Feature on a Port

        670
      • Setting the Maximum Output Power on a Port

        670
      • Setting PoE Management Mode and PoE Priority of a Port

        671
      • Setting the PoE Mode on a Port

        671
      • Configuring the PD Compatibility Detection Function

        672
      • Upgrading the PSE Processing Software Online

        672
      • Displaying and Maintaining PoE Configuration

        673
    • PoE Configuration Example

      673
      • PoE Configuration Example

        673
        • Networking requirements

          673
        • Configuration procedure

          674
  • 2 PoE Profile Configuration

    675
    • Introduction to PoE Profile

      675
    • PoE Profile Configuration

      675
      • Configuring PoE Profile

        675
    • Displaying and Maintaining PoE Profile Configuration

      676
    • PoE Profile Configuration Example

      677
      • PoE Profile Application Example

        677
        • Network requirements

          677
        • Configuration procedure

          677
• 37-Routing Protocol Operation.pdf

  679
  • 1 IP Routing Protocol Overview

    681
    • Introduction to IP Route and Routing Table

      681
      • IP Route

        681
      • Routing Table

        681
        • Function

          681
        • Routing entry

          681
    • Routing Protocol Overview

      683
      • Static Routing and Dynamic Routing

        683
      • Classification of Dynamic Routing Protocols

        683
        • Operational scope

          683
        • Routing algorithm

          683
        • Type of the destination address

          683
      • Routing Protocols and Routing Priority

        683
      • Load Sharing and Route Backup

        684
        • Load sharing

          684
        • Route backup

          684
      • Routing Information Sharing

        684
    • Displaying and Maintaining a Routing Table

      685
  • 2 Static Route Configuration

    686
    • Introduction to Static Route

      686
      • Static Route

        686
      • Default Route

        687
    • Static Route Configuration

      687
      • Configuration Prerequisites

        687
      • Configuring a Static Route

        687
    • Displaying and Maintaining Static Routes

      688
    • Static Route Configuration Example

      688
      • Network requirements

        688
        • Configuration procedure

          689
    • Troubleshooting a Static Route

      689
  • 3 RIP Configuration

    690
    • RIP Overview

      690
      • Basic Concepts

        690
        • RIP

          690
        • RIP routing database

          690
        • RIP timers

          691
        • Routing loops prevention

          691
      • RIP Startup and Operation

        691
    • RIP Configuration Task List

      692
    • Basic RIP Configuration

      692
      • Configuration Prerequisites

        692
      • Configuring Basic RIP Functions

        692
        • Enabling RIP on the interfaces attached to a specified network segment

          692
        • Setting the RIP operating status on an interface

          693
        • Specifying the RIP version on an interface

          693
    • RIP Route Control

      693
      • Configuration Prerequisites

        694
      • Configuring RIP Route Control

        694
        • Setting the additional routing metrics of an interface

          694
        • Configuring RIP route summarization

          694
        • Disabling the router from receiving host routes

          695
        • Configuring RIP to filter incoming/outgoing routes

          695
        • Setting RIP preference

          696
        • Configuring RIP to redistribute routes from another protocol

          696
    • RIP Network Adjustment and Optimization

      696
      • Configuration Prerequisites

        697
      • Configuration Tasks

        697
        • Configuring RIP timers

          697
        • Configuring split horizon

          697
        • Configuring RIP-1 packet zero field check

          697
        • Setting RIP-2 packet authentication mode

          698
        • Configuring RIP to unicast RIP packets

          698
    • Displaying and Maintaining RIP Configuration

      699
    • RIP Configuration Example

      699
      • Network requirements

        699
        • Configuration procedure

          700
    • Troubleshooting RIP Configuration

      700
      • Failed to Receive RIP Updates

        700
        • Symptom

          700
        • Solution

          700
  • 4 IP Route Policy Configuration

    701
    • IP Route Policy Overview

      701
      • Introduction to IP Route Policy

        701
      • Filters

        701
        • ACL

          701
        • Route policy

          702
    • IP Route Policy Configuration Task List

      702
    • Route Policy Configuration

      702
      • Configuration Prerequisites

        702
      • Defining a Route Policy

        703
      • Defining if-match Clauses and apply Clauses

        703
    • Displaying and Maintaining IP Route Policy

      704
    • IP Route Policy Configuration Example

      704
      • Controlling RIP Packet Cost to Implement Dynamic Route Backup

        704
        • Network requirements

          704
        • Configuration considerations

          705
        • Configuration procedure

          705
        • Configuration verification

          707
        • Precautions

          708
    • Troubleshooting IP Route Policy

      708
      • Symptom

        708
        • Analysis

          708
        • Solution

          708
• 38-UDP Helper Operation.pdf

  709
  • 1 UDP Helper Configuration

    710
    • Introduction to UDP Helper

      710
    • Configuring UDP Helper

      711
    • Displaying and Maintaining UDP Helper

      712
    • UDP Helper Configuration Example

      712
      • Cross-Network Computer Search Through UDP Helper

        712
        • Network requirements

          712
        • Configuration procedure

          712
• 39-Appendix.pdf

  713
  • Appendix A Acronyms

    714