BenutzerhandbuchInhaltsverzeichnisMatrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide1Notice3ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT4Contents7Figures27Tables29About This Guide31Using This Guide31Structure of This Guide32Related Documents33Document Conventions34Typographical and Keystroke Conventions34Introduction371.1 Overview371.2 Getting Help39Management Terminal and Modem Setup Requirements412.1 Connecting to a Console Port for Local Management412.1.1 What Is Needed412.1.2 Connecting to an IBM or Compatible Device422.1.3 Connecting to a VT Series Terminal432.1.4 Connecting to a Modem442.1.4.1 Configuring the Modem to Not Send Login Requests452.1.5 Adapter Wiring and Signal Assignments47Startup and General Configuration493.1 Startup and General Configuration Summary493.1.1 Factory Default Settings493.1.2 Command Defaults Descriptions583.1.3 CLI Command Modes593.1.4 Using WebView603.1.5 Process Overview: CLI Startup and General Configuration613.1.6 Starting and Navigating the Command Line Interface (CLI)623.1.6.1 Using a Console Port Connection623.1.6.2 Logging in with a Default User Account623.1.6.3 Logging in With an Administratively Configured User Account643.1.6.4 Using a Telnet Connection643.1.7 Getting Help with CLI Syntax663.1.8 Displaying Scrolling Screens673.1.9 Basic Line Editing Commands683.2 General Configuration Command Set693.2.1 Setting User Accounts and Passwords693.2.1.1 show system login693.2.1.2 set system login713.2.1.3 clear system login723.2.1.4 set password733.2.1.5 set system password length743.2.1.6 set system password aging753.2.1.7 set system password history753.2.1.8 set system lockout attempts763.2.1.9 set system lockout773.2.2 Setting Basic Device Properties783.2.2.1 show system resources793.2.2.2 show system803.2.2.3 show time813.2.2.4 set time813.2.2.5 set prompt823.2.2.6 show banner motd833.2.2.7 set banner motd833.2.2.8 clear banner motd843.2.2.9 show version853.2.2.10 set system name863.2.2.11 set system location873.2.2.12 set system contact883.2.2.13 show terminal883.2.2.14 set terminal893.2.2.15 set system timeout903.2.2.16 show summertime903.2.2.17 set summertime913.2.2.18 set summertime date923.2.2.19 set summertime recurring933.2.2.20 clear summertime953.2.2.21 set console baud953.2.2.22 show ip address963.2.2.23 set ip address973.2.3 Downloading a Firmware Image983.2.3.1 Downloading via the Serial Port983.2.3.2 Downloading via TFTP993.2.4 Configuring Telnet1023.2.4.1 show telnet1023.2.4.2 set telnet1033.2.5 Managing Switch Configuration Files1053.2.5.1 dir1053.2.5.2 show config1063.2.5.3 configure1083.2.5.4 summaryconfig1103.2.5.5 copy1123.2.5.6 set system bootconfig1143.2.5.7 delete1153.2.6 Configuring Enterasys and Cisco Discovery Protocols1163.2.6.1 show cdp1173.2.6.2 set cdp1183.2.6.3 set cdp interval1203.2.6.4 show ciscodp1203.2.6.5 set ciscodp status1223.2.6.6 set ciscodp timer1223.2.6.7 set ciscodp holdtime1233.2.6.8 set ciscodp populatecdp1243.2.6.9 show port ciscodp info1243.2.6.10 show port ciscodp neighborinfo1263.2.6.11 set port ciscodp status1273.2.6.12 set port ciscodp trust-ext1283.2.6.13 set port ciscodp cos-ext1293.2.6.14 set port ciscodp vvid1303.2.7 Pausing, Clearing and Closing the CLI1323.2.7.1 wait1323.2.7.2 cls (clear screen)1333.2.7.3 exit1333.2.8 Resetting the Device1353.2.8.1 show reset1353.2.8.2 reset1363.2.8.3 reset at1373.2.8.4 reset in1383.2.8.5 clear config1383.3 Preparing the Device for Router Mode1403.3.1 Pre-Routing Configuration Tasks1403.3.2 Configuring VLANs for IP Routing1413.3.3 Enabling Router Configuration Modes144Port Configuration1474.1 Port Configuration Summary1474.1.1 Port Assignment Scheme1474.1.2 Port String Syntax Used in the CLI1504.2 Process Overview: Port Configuration1524.3 Port Configuration Command Set1534.3.1 Reviewing Port Status1534.3.1.1 show port status1534.3.1.2 show port counters1554.3.1.3 clear port counters1574.3.2 Disabling / Enabling Ports1584.3.2.1 set port disable1584.3.2.2 set port enable1594.3.3 Setting Speed and Duplex Mode1594.3.3.1 show port speed1604.3.3.2 set port speed1614.3.3.3 show port duplex1624.3.3.4 set port duplex1634.3.4 Enabling / Disabling Jumbo Frame Support1644.3.4.1 show port jumbo1644.3.4.2 set port jumbo1654.3.5 Setting Port Auto-Negotiation and Advertised Ability1664.3.5.1 show port negotiation1674.3.5.2 set port negotiation1684.3.5.3 show port advertised ability1694.3.5.4 set port advertised ability1724.3.6 Setting Flow Control and Thesholds1734.3.6.1 show port flowcontrol1744.3.6.2 set port flowcontrol1754.3.6.3 show port buffer threshold1764.3.6.4 set port buffer threshold1774.3.6.5 show flow agetime1804.3.6.6 set flow agetime1814.3.6.7 clear flow agetime1814.3.6.8 show port holbp1824.3.6.9 set port holbp1834.3.7 Setting Port Traps1854.3.7.1 show port trap1854.3.7.2 set port trap1874.3.8 Overview: Port Mirroring1884.3.9 Setting Port Mirroring1894.3.9.1 show port mirroring1894.3.9.2 set port mirroring1904.3.9.3 clear port mirroring1914.3.10 Configuring Link Aggregation1924.3.10.1 Matrix E1 Trunk and LAG Usage Considerations1924.3.10.2 Port Grouping Considerations1934.3.11 Configuring Static Port Trunking1964.3.11.1 show trunk1974.3.11.2 set trunkmode2004.3.11.3 set trunk2004.3.11.4 clear trunk2014.3.11.5 set trunk port2024.3.11.6 clear trunk port2024.3.11.7 set trunk algorithm2034.3.12 Link Aggregation Control Protocol (LACP)2054.3.12.1 LACP Operation2054.3.12.2 LACP Terminology2064.3.12.3 Matrix E1 LAG Usage Considerations2074.3.13 Configuring Link Aggregation2094.3.13.1 set lacp2094.3.13.2 set lacp static2104.3.13.3 clear lacp static2114.3.13.4 show port lacp2124.3.13.5 set port lacp2144.3.14 Configuring Port Broadcast Suppression2164.3.14.1 show port broadcast2164.3.14.2 set port broadcast2174.3.15 Configuring Unknown Destination Address Suppression2194.3.15.1 show port unknowndestsuppress2194.3.15.2 set port unknowndestsuppress2204.3.15.3 clear port unknowndestsuppress221SNMP Configuration2235.1 SNMP Configuration Summary2235.1.1 SNMPv1 and SNMPv22235.1.2 SNMPv32245.1.3 About SNMP Security Models and Levels2245.1.4 Process Overview: SNMP Configuration2255.2 SNMP Command Set2275.2.1 Disabling / Enabling and Reviewing SNMP Statistics2275.2.1.1 show snmp2275.2.1.2 set snmp2285.2.1.3 show snmp engineid2285.2.1.4 show snmp counters2295.2.2 Configuring SNMP Users, Groups and Communities2365.2.2.1 show snmp user2375.2.2.2 set snmp user2385.2.2.3 clear snmp user2395.2.2.4 show snmp group2405.2.2.5 set snmp group2425.2.2.6 clear snmp group2435.2.2.7 show community2445.2.2.8 set community2455.2.2.9 clear community2465.2.2.10 show snmp community2465.2.2.11 set snmp community2475.2.2.12 clear snmp community2485.2.3 Configuring SNMP Access Rights2495.2.3.1 show snmp access2495.2.3.2 set snmp access2515.2.3.3 clear snmp access2535.2.3.4 show snmp authenticationtrap2535.2.3.5 set snmp authentication trap2545.2.4 Configuring SNMP MIB Views2555.2.4.1 show snmp view2555.2.4.2 set snmp view2575.2.4.3 clear snmp view2575.2.5 Configuring SNMP Target Parameters2595.2.5.1 show snmp targetparams2595.2.5.2 set snmp targetparams2615.2.5.3 clear snmp targetparams2635.2.6 Configuring SNMP Target Addresses2645.2.6.1 show snmp targetaddr2645.2.6.2 set snmp targetaddr2665.2.6.3 clear snmp targetaddr2685.2.7 Configuring SNMP Notification Parameters2695.2.7.1 show trap2705.2.7.2 set trap2715.2.7.3 clear trap2715.2.7.4 show newaddrtrap2725.2.7.5 set newaddrtrap2735.2.7.6 show snmp notify2745.2.7.7 set snmp notify2765.2.7.8 clear snmp notify2775.2.7.9 show snmp notifyfilter2785.2.7.10 set snmp notifyfilter2795.2.7.11 clear snmp notifyfilter2805.2.7.12 show snmp notifyprofile2815.2.7.13 set snmp notifyprofile2825.2.7.14 clear snmp notifyprofile2825.2.8 Basic SNMP Trap Configuration284Spanning Tree Configuration2876.1 Spanning Tree Configuration Summary2876.1.1 Overview: Single, Rapid and Multiple Spanning Tree Protocols2876.1.2 Spanning Tree Features2886.1.3 Process Overview: Spanning Tree Configuration2896.2 Spanning Tree Configuration Command Set2906.2.1 Reviewing and Setting Spanning Tree Bridge Parameters2906.2.1.1 show spantree stats2926.2.1.2 set spantree2956.2.1.3 show spantree version2966.2.1.4 set spantree version2976.2.1.5 clear spantree version2976.2.1.6 show spantree mstilist2986.2.1.7 set spantree msti2996.2.1.8 clear spantree msti2996.2.1.9 show spantree mstmap3006.2.1.10 set spantree mstmap3016.2.1.11 clear spantree mstmap3026.2.1.12 show spantree vlanlist3026.2.1.13 show spantree mstcfgid3036.2.1.14 set spantree mstcfgid3046.2.1.15 clear spantree mstcfgid3056.2.1.16 set spantree priority3056.2.1.17 clear spantree priority3066.2.1.18 show spantree bridgehellomode3076.2.1.19 set spantree bridgehellomode3076.2.1.20 clear spantree bridgehellomode3086.2.1.21 set spantree hello3086.2.1.22 clear spantree hello3096.2.1.23 set spantree maxage3106.2.1.24 clear spantree maxage3116.2.1.25 set spantree fwddelay3126.2.1.26 clear spantree fwddelay3126.2.1.27 show spantree autoedge3136.2.1.28 set spantree autoedge3146.2.1.29 clear spantree autoedge3146.2.1.30 show spantree legacypathcost3156.2.1.31 set spantree legacypathcost3156.2.1.32 clear spantree legacypathcost3166.2.1.33 show spantree tctrapsuppress3166.2.1.34 set spantree tctrapsuppress3176.2.1.35 clear spantree tctrapsuppress3186.2.1.36 show spantree txholdcount3186.2.1.37 set spantree txholdcount3196.2.1.38 clear spantree txholdcount3206.2.1.39 set spantree maxhops3206.2.1.40 clear spantree maxhops3216.2.2 Reviewing and Setting Spanning Tree Port Parameters3226.2.2.1 show spantree portadmin3236.2.2.2 set spantree portadmin3246.2.2.3 clear spantree portadmin3256.2.2.4 show spantree blocked ports3256.2.2.5 show spantree portpri3266.2.2.6 set spantree portpri3276.2.2.7 clear spantree portpri3286.2.2.8 show spantree portcost3296.2.2.9 set spantree portcost3296.2.2.10 clear spantree portcost3316.2.2.11 show spantree adminedge3316.2.2.12 set spantree adminedge3326.2.2.13 clear spantree adminedge3336.2.2.14 show spantree spanguard3336.2.2.15 set spantree spanguard3346.2.2.16 clear spantree spanguard3356.2.2.17 show spantree spanguardtimeout3356.2.2.18 set spantree spanguardtimeout3366.2.2.19 clear spantree spanguardtimeout3366.2.2.20 show spantree spanguardlock3376.2.2.21 clear spantree spanguardlock3386.2.2.22 show spantree spanguardtrapenable3386.2.2.23 set spantree spanguardtrapenable3396.2.2.24 clear spantree spanguardtrapenable3406.2.2.25 show spantree adminpoint3406.2.2.26 set spantree adminpoint3416.2.2.27 clear spantree adminpoint342802.1Q VLAN Configuration3437.1 VLAN Configuration Summary3437.1.1 Port Assignment Scheme3437.1.2 Port String Syntax Used in the CLI3437.2 Process Overview: 802.1Q VLAN Configuration3447.3 VLAN Configuration Command Set3457.3.1 Reviewing Existing VLANs3457.3.1.1 show vlan3457.3.1.2 show vlan static3487.3.1.3 show vlan portinfo3497.3.2 Creating and Naming Static VLANs3517.3.2.1 set vlan3517.3.2.2 set vlan name3527.3.2.3 clear vlan3537.3.2.4 clear vlan name3547.3.3 Assigning Port VLAN IDs (PVIDs) and Ingress Filtering3557.3.3.1 show port vlan3557.3.3.2 set port vlan3567.3.3.3 clear port vlan3577.3.3.4 show port ingress filter3587.3.3.5 set port ingress filter3597.3.4 Configuring the VLAN Egress List3607.3.4.1 set vlan forbidden3607.3.4.2 show port egress3617.3.4.3 set vlan egress3627.3.4.4 clear vlan egress3637.3.4.5 show vlan dynamic egress3647.3.4.6 set vlan dynamicegress3657.3.5 Assigning VLANs According to Classification Rules3667.3.5.1 show vlan classification3667.3.5.2 set vlan classification3677.3.5.3 Valid Values for VLAN Classification and Frame Filtering3707.3.5.4 Classification Precedence Rules3747.3.5.5 clear vlan classification3767.3.5.6 set vlan classification ingress3777.3.5.7 clear vlan classification ingress3787.3.6 Setting the Host VLAN3807.3.6.1 show host vlan3807.3.6.2 set port vlan host3817.3.6.3 clear host vlan3827.3.7 Creating a Secure Management VLAN3837.3.8 Enabling/Disabling GVRP (GARP VLAN Registration Protocol)3847.3.8.1 show gvrp3867.3.8.2 show garp timer3877.3.8.3 set gvrp3897.3.8.4 set garp timer390Policy Classification Configuration3938.1 Policy Classification Configuration Summary3938.2 Process Overview: Policy Classification Configuration3938.3 Policy Classification Configuration Command Set3948.3.1 Configuring Policy Profiles3948.3.1.1 show policy profile3948.3.1.2 set policy profile3968.3.1.3 clear policy profile3978.3.1.4 show policy invalid action3978.3.1.5 set policy invalid action3988.3.1.6 clear policy invalid action3998.3.2 Assigning Classification Rules to Policy Profiles4008.3.2.1 show policy class4008.3.2.2 set policy classify4018.3.2.3 Classification Precedence Rules4078.3.2.4 clear policy class4088.3.2.5 show policy maptable4098.3.2.6 show vlanauthorization4108.3.2.7 set vlanauthorization4118.3.2.8 set policy maptable response4128.3.2.9 clear policy maptable response4128.3.2.10 set policy maptable4138.3.2.11 clear policy maptable4148.3.3 Assigning Ports to Policy Profiles4158.3.3.1 show policy port4158.3.3.2 set policy port4168.3.3.3 clear policy port417Port Priority and Classification Configuration4199.1 Port Priority and Classification Configuration Summary4199.1.1 Priority4199.1.2 Priority Queueing Modes (Algorithms)4209.1.3 Port Classification4219.2 Process Overview: Priority, Classification, And Rate Limiting Configuration4229.3 Port Priority and Classification Configuration Commands4229.3.1 Configuring Port Priority4229.3.1.1 show port priority4239.3.1.2 set port priority4239.3.1.3 clear port priority4249.3.2 Configuring Priority to Transmit Queue Mapping4259.3.2.1 show priority queue4259.3.2.2 set priority queue4279.3.3 Configuring Quality of Service (QoS)4299.3.3.1 show port qos4299.3.3.2 set port qos sp4309.3.3.3 set port qos wrr4319.3.3.4 set port qos hybrid4329.3.4 Configuring Priority Classification4349.3.4.1 show priority classification4359.3.4.2 set priority classification4369.3.4.3 Valid Values for Priority Classification4379.3.4.4 clear priority classification4419.3.4.5 set priority classification tosvalue4429.3.4.6 set priority classification tosstatus4449.3.4.7 show priority classification qtagoverride4459.3.4.8 set priority classification qtagoverride4459.3.5 Classification Precedence Rules4469.3.5.1 set priority classification ingress4499.3.5.2 clear priority classification ingress4509.3.6 Configuring Port Traffic Rate Limiting4529.3.6.1 show port ratelimit4529.3.6.2 set port ratelimit4549.3.6.3 clear port ratelimit455IGMP Configuration45710.1 IGMP Configuration Summary45710.1.1 Process Overview: IGMP Configuration45710.2 IGMP Configuration Command Set45810.2.1 Enabling / Disabling IGMP45810.2.1.1 show igmp45810.2.1.2 set igmp45910.2.2 Setting IGMP Query Interval and Response Time46010.2.2.1 show igmp query-interval46010.2.2.2 set igmp query-interval46110.2.2.3 show igmp response-time46110.2.2.4 set igmp response-time46210.2.3 Reviewing IGMP Groups46310.2.3.1 show igmp groups46310.2.4 Configuring IGMP VLAN Registration46510.2.4.1 show igmp mode46510.2.4.2 set igmp mode vlan46610.2.4.3 set igmp mode ipaddress46710.2.4.4 set igmp mode46810.3 About IGMP46910.3.1 IGMP VLAN Registration469Logging and Switch Network Management47111.1 Process Overview: Logging and Network Management47111.2 Logging and Network Management Command Set47211.2.1 Configuring System Logging47211.2.1.1 set logging47311.2.1.2 show logging all47311.2.1.3 show logging console47711.2.1.4 set logging console47811.2.1.5 show logging server47811.2.1.6 set logging server48011.2.1.7 clear logging server48111.2.1.8 show logging default48111.2.1.9 set logging default48211.2.1.10 clear logging default48411.2.1.11 show logging application48411.2.1.12 set logging application48611.2.1.13 clear logging application49011.2.1.14 show logging audit-trail49011.2.1.15 copy audit-trail49111.2.2 Monitoring Switch Network Events and Status49211.2.2.1 show eventlog49211.2.2.2 clear eventlog49311.2.2.3 history49411.2.2.4 repeat49411.2.2.5 show history49611.2.2.6 set history49611.2.2.7 show netstat49711.2.2.8 show rmon stats49811.2.2.9 show users50111.2.2.10 disconnect50311.2.3 Managing Switch Network Addresses50311.2.3.1 show arp50511.2.3.2 set arp50511.2.3.3 clear arp50611.2.3.4 show rad50711.2.3.5 set rad50811.2.3.6 show mac50811.2.3.7 set mac51111.2.3.8 clear mac51211.2.3.9 show mac agingtime51311.2.3.10 set mac agingtime51411.2.3.11 clear mac agingtime51411.2.3.12 show port stopaging51511.2.3.13 set port stopaging51611.2.3.14 clear port stopaging51711.2.3.15 set mac algorithm51711.2.3.16 show dns51911.2.3.17 set dns domain51911.2.3.18 clear dns domain52011.2.3.19 set dns server52111.2.3.20 clear dns server52111.2.3.21 clear dns52211.2.3.22 ping52311.2.3.23 traceroute52511.2.3.24 set mac multicast52711.2.3.25 show mac multicast52911.2.4 Configuring Simple Network Time Protocol (SNTP)53011.2.4.1 show sntp53011.2.4.2 set sntp client53111.2.4.3 set sntp broadcastdelay53211.2.4.4 set sntp poll-interval53211.2.4.5 set sntp server53311.2.4.6 clear sntp server53411.2.4.7 set timezone53511.2.4.8 clear timezone53511.2.5 Configuring Node Aliases53711.2.5.1 show nodealias53711.2.5.2 show nodealias config53911.2.5.3 set nodealias54011.2.5.4 set nodealias maxentries54111.2.5.5 clear nodealias54211.2.5.6 clear nodealias config54311.2.6 Configuring Convergence End Points (CEP) Phone Detection54411.2.6.1 show cep54511.2.6.2 set cep54611.2.6.3 set cep port54711.2.6.4 set cep policy54711.2.6.5 set cep detection54811.2.6.6 set cep detection type54911.2.6.7 set cep detection address55011.2.6.8 set cep detection protocol55111.2.6.9 set cep detection porthigh55211.2.6.10 set cep initialize55311.2.6.11 clear cep554IP Configuration55712.1 Process Overview: Internet Protocol (IP) Configuration55712.2 IP Configuration Command Set55812.2.1 Configuring Routing Interface Settings55812.2.1.1 show interface55912.2.1.2 interface56212.2.1.3 show ip interface56312.2.1.4 ip address56412.2.1.5 no shutdown56412.2.2 Reviewing and Saving the Routing Configuration56512.2.2.1 show running-config56612.2.2.2 write56712.2.2.3 no ip routing56912.2.3 Reviewing and Configuring the ARP Table57012.2.3.1 show ip arp57012.2.3.2 arp57312.2.3.3 ip gratuitous-arp-learning57312.2.3.4 ip proxy-arp57412.2.3.5 ip mac-address57512.2.3.6 arp timeout57612.2.3.7 clear arp-cache57612.2.4 Configuring Broadcast Settings57812.2.4.1 ip directed-broadcast57812.2.4.2 ip forward-protocol57912.2.4.3 ip helper-address58112.2.5 Reviewing IP Traffic and Configuring Routes58312.2.5.1 show ip protocols58312.2.5.2 show limits58412.2.5.3 show ip traffic58512.2.5.4 clear ip stats58712.2.5.5 show ip route58712.2.5.6 ip route58912.2.5.7 ip icmp59012.2.5.8 ping59112.2.5.9 traceroute592Routing Protocol Configuration59513.1 Process Overview: Routing Protocol Configuration59513.1.1 Configuring RIP59613.1.1.1 router rip59713.1.1.2 network59813.1.1.3 neighbor59913.1.1.4 distance60013.1.1.5 ip rip offset60113.1.1.6 timers60213.1.1.7 ip rip send version60313.1.1.8 ip rip receive version60413.1.1.9 key chain60513.1.1.10 key60613.1.1.11 key-string60713.1.1.12 accept-lifetime60813.1.1.13 send-lifetime60913.1.1.14 ip rip authentication keychain61113.1.1.15 ip rip authentication mode61213.1.1.16 no auto-summary61313.1.1.17 ip rip disable-triggered-updates61413.1.1.18 ip split-horizon61413.1.1.19 passive-interface61513.1.1.20 receive-interface61613.1.1.21 distribute-list61713.1.1.22 redistribute61813.1.2 Configuring OSPF62013.1.2.1 router ospf62213.1.2.2 network62313.1.2.3 router id62413.1.2.4 ip ospf cost62513.1.2.5 ip ospf priority62513.1.2.6 timers spf62613.1.2.7 ip ospf retransmit-interval62713.1.2.8 ip ospf transmit-delay62813.1.2.9 ip ospf hello-interval62913.1.2.10 ip ospf dead-interval63013.1.2.11 ip ospf authentication-key63113.1.2.12 ip ospf message digest key md563213.1.2.13 distance ospf63313.1.2.14 area range63413.1.2.15 area authentication63513.1.2.16 area stub63613.1.2.17 area default cost63713.1.2.18 area nssa63813.1.2.19 area virtual-link63913.1.2.20 passive-ospf64113.1.2.21 redistribute64213.1.2.22 database-overflow64413.1.2.23 show ip ospf64513.1.2.24 show ip ospf database64713.1.2.25 show ip ospf border-routers64913.1.2.26 show ip ospf interface65013.1.2.27 show ip ospf neighbor65213.1.2.28 show ip ospf virtual-links65413.1.2.29 clear ip ospf process65513.1.3 Configuring DVMRP65713.1.3.1 ip dvmrp65713.1.3.2 ip dvmrp metric65813.1.3.3 show ip dvmrp route65913.1.3.4 show ip mroute66013.1.4 Configuring IRDP66213.1.4.1 ip irdp66213.1.4.2 ip irdp maxadvertinterval66313.1.4.3 ip irdp minadvertinterval66413.1.4.4 ip irdp holdtime66513.1.4.5 ip irdp preference66613.1.4.6 ip irdp address66713.1.4.7 no ip irdp multicast66713.1.4.8 show ip irdp66813.1.5 Configuring VRRP67013.1.5.1 router vrrp67013.1.5.2 create67113.1.5.3 address67213.1.5.4 priority67313.1.5.5 advertise-interval67513.1.5.6 critical-ip67613.1.5.7 preempt67713.1.5.8 enable67813.1.5.9 ip vrrp authentication-key67913.1.5.10 ip vrrp message-digest-key67913.1.5.11 show ip vrrp680Security Configuration68314.1 Overview of Security Methods68314.2 Process Overview: Security Configuration68414.3 Security Configuration Command Set68514.3.1 Configuring RADIUS68514.3.1.1 show radius68614.3.1.2 set radius68814.3.1.3 clear radius69014.3.1.4 show radius accounting69214.3.1.5 set radius accounting69414.3.1.6 clear radius accounting69614.3.2 Configuring 802.1X Authentication69714.3.2.1 show dot1x69814.3.2.2 show dot1x auth-config70114.3.2.3 set dot1x70214.3.2.4 set dot1x auth-config70314.3.2.5 set dot1x port70514.3.2.6 clear dot1x auth-config70614.3.2.7 show eapol70714.3.2.8 set eapol71114.3.3 Configuring MAC Authentication71214.3.3.1 show macauthentication71314.3.3.2 show macauthentication session71614.3.3.3 set macauthentication71714.3.3.4 set macauthentication password71814.3.3.5 set macauthentication port71914.3.3.6 set macauthentication portinitialize72014.3.3.7 set macauthentication macinitialize72014.3.3.8 set macauthentication reauthentication72114.3.3.9 set macauthentication portreauthenticate72214.3.3.10 set macauthentication macreauthenticate72214.3.3.11 set macauthentication reauthperiod72314.3.3.12 set macauthentication quietperiod72414.3.4 Configuring MAC Locking72514.3.4.1 show maclock72614.3.4.2 show maclock stations72814.3.4.3 set maclock enable73014.3.4.4 set maclock disable73114.3.4.5 set maclock73214.3.4.6 set maclock firstarrival73314.3.4.7 set maclock static73414.3.4.8 set maclock move73514.3.4.9 clear maclock static73514.3.4.10 show maclock autostatic73614.3.4.11 set maclock autostatic73714.3.4.12 set maclock autostatic isl73814.3.4.13 set maclock autostatic publicvlan73914.3.4.14 set maclock autostatic publicmac74014.3.4.15 set maclock autostatic passthroughmac74114.3.4.16 clear maclock autostatic74214.3.4.17 set maclock trap74314.3.4.18 clear maclock74414.3.5 Configuring Port Web Authentication (PWA)74514.3.5.1 show pwa74614.3.5.2 set pwa74914.3.5.3 set pwa hostname75014.3.5.4 set pwa displaylogo75014.3.5.5 set pwa refreshtime75114.3.5.6 set pwa nameservices75214.3.5.7 set pwa ipaddress75214.3.5.8 set pwa protocol75314.3.5.9 set pwa enhancedmode75414.3.5.10 set pwa guestname75514.3.5.11 set pwa guestpassword75514.3.5.12 set pwa gueststatus75614.3.5.13 set pwa initialize75714.3.5.14 set pwa quietperiod75714.3.5.15 set pwa maxrequests75814.3.5.16 set pwa portcontrol75914.3.6 Configuring Secure Shell (SSH)76014.3.6.1 show ssh76114.3.6.2 set ssh76214.3.6.3 ssh76314.3.6.4 set ssh ciphers76414.3.6.5 clear ssh ciphers76514.3.6.6 set ssh port76514.3.6.7 set ssh mac76614.3.6.8 clear ssh mac76714.3.6.9 set ssh rekeyintervalseconds76814.3.6.10 set ssh passwordguesses76814.3.6.11 set ssh logingracetime76914.3.6.12 clear ssh keys76914.3.6.13 clear ssh config77014.3.7 Configuring Access Lists77114.3.7.1 show access-lists77114.3.7.2 access-list (standard)77214.3.7.3 access-list (extended)77414.3.7.4 ip access-group77814.3.8 Configuring Denial of Service Prevention77914.3.8.1 show HostDos78014.3.8.2 HostDos78114.3.8.3 clear hostdos-counters78314.3.9 Configuring Flow Setup Throttling (FST)78414.3.9.1 show flowlimit78514.3.9.2 set flowlimit78714.3.9.3 set flowlimit limit78814.3.9.4 set flowlimit class79014.3.9.5 clear flowlimit action79114.3.9.6 set flowlimit shutdown79214.3.9.7 set flowlimit notification79314.3.9.8 set flowlimit clearstats79314.4 Working with Security Configurations79514.4.1 Host Access Control Authentication (HACA)79514.4.2 802.1X Port Based Network Access Control Overview79614.4.3 MAC Authentication Overview79614.4.3.1 Authentication Method Sequence79714.4.3.2 Concurrent Operation of 802.1X and MAC Authentication79714.4.4 MAC Authentication Control80114.4.5 RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment801Index803Numerics803A803B803C803D804E804F804G804H804I804J804L804M805N805O805P805Q806R806S806T807U807V807W808Größe: 5,83 MBSeiten: 808Language: EnglishHandbuch öffnen
