Enterasys Enterasys SecureStack B2 B2G124-24 Especificaciones Pagina 465
- Pagina / 488
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Security Configuration Command Set
Configuring VLAN Authorization (RFC 3580)
SecureStack B2 Configuration Guide 11-29
11.3.3 Configuring VLAN Authorization (RFC 3580)
Purpose
Please see section 3-31 of RFC 3580 for details on configuring a RADIUS server to return the
desired tunnel attributes. From RFC 3580, “... it may be desirable to allow a port to be placed into
a particular Virtual LAN (VLAN), defined in [IEEE8021Q], based on the result of the
authentication ..”
The RADIUS server typically indicates the desired VLAN by including tunnel attributes within the
Access-Accept. However, the IEEE 802.1X Authenticator may also provide a hint as to the VLAN
to be assigned to the Supplicant by including Tunnel attributes within the Access-Request.
For use in VLAN assignment, the following tunnel attributes are used:
• Tunnel-Type=VLAN (13)
• Tunnel-Medium-Type=802
• Tunnel-Private-Group-ID=VLANID
Commands
The commands used to configure RADIUS tunnel attributes are listed below and described in the
associated sections as shown.
• set vlanauthorization (Section 11.3.3.1)
• set vlanauthorization egress (Section 11.3.3.2)
• clear vlanauthorization (Section 11.3.3.3)
• show vlanauthorization (Section 11.3.3.4)
- SecureStack B2 1
- 1.01.xx 3
- Enterasys Networks, Inc 4
- Firmware License Agreement 4
- PORT CONFIGURATION 10
- SNMP CONFIGURATION 11
- SPANNING TREE CONFIGURATION 12
- 802.1Q VLAN CONFIGURATION 13
- Contents 14
- IGMP CONFIGURATION 15
- SECURITY CONFIGURATION 17
- About This Guide 23
- STRUCTURE OF THIS GUIDE 24
- RELATED DOCUMENTS 25
- Related Documents 26
- Introduction 27
- 1.2 DEVICE MANAGEMENT METHODS 28
- 1.3 GETTING HELP 29
- Getting Help 30
- Factory Default Settings 32
- 2.1.3 CLI Command Modes 35
- 2.1.4 Using WebView 36
- Displaying WebView status: 36
- Enabling / disabling WebView: 36
- • ro for Read-Only access 37
- • rw for Read-Write access 37
- User Account 38
- --More-- to indicate 40
- Key Sequence Command 41
- Important 44
- 2.1.10.2 show switch 47
- 2.1.10.5 set switch 51
- 2.1.10.6 set switch copy-sw 52
- 2.1.10.9 set switch member 55
- 2.1.10.10 clear switch member 56
- 2.1.10.13 save config 59
- 2.1.11.1 show system login 61
- 2.1.11.2 set system login 63
- 2.1.11.3 clear system login 64
- 2.1.11.4 set password 65
- 2.1.11.8 show system lockout 69
- 2.1.11.9 set system lockout 70
- 2.1.12.1 show ip address 73
- 2.1.12.2 show ip protocol 74
- 2.1.12.3 set ip address 75
- 2.1.12.4 show system 76
- 2.1.12.5 show system hardware 78
- 2.1.12.7 show time 80
- 2.1.12.8 set time 81
- 2.1.12.9 show summertime 82
- 2.1.12.10 set summertime 83
- 2.1.12.11 set summertime date 84
- 02:00 60 85
- 2.1.12.13 clear summertime 86
- 2.1.12.14 set prompt 87
- 2.1.12.15 show version 88
- 2.1.12.16 set system name 89
- 2.1.12.17 set system location 90
- 2.1.12.18 set system contact 91
- 2.1.12.19 set length 92
- 2.1.12.20 show logout 93
- 2.1.12.21 set logout 94
- 2.1.12.22 show console 95
- 2.1.12.23 set console baud 96
- 2.1.13.1 show inlinepower 98
- 2.1.13.3 set inlinepower trap 100
- 2.1.13.5 set port inlinepower 102
- • Tera Term Pro Version 2.3 103
- 2.1.14.3 show boot system 107
- 2.1.14.4 set boot system 108
- Commands 109
- 2.1.15.1 show telnet 110
- 2.1.15.2 set telnet 111
- 2.1.16.1 dir 113
- 2.1.16.2 show config 114
- 2.1.16.3 configure 116
- 2.1.16.4 copy 117
- 2.1.16.5 delete 118
- 2.1.17 Configuring CDP 119
- 2.1.17.1 show cdp 120
- Output What It Displays 121
- 2.1.17.2 set cdp state 122
- 2.1.17.3 set cdp auth 123
- 2.1.17.4 set cdp interval 124
- 2.1.17.5 set cdp hold-time 125
- 2.1.17.6 clear cdp 126
- 2.1.18.1 cls (clear screen) 128
- 2.1.18.2 exit 129
- 2.1.19 Resetting the Device 129
- 2.1.19.1 reset 130
- 2.1.19.2 clear config 131
- Resetting the Device 132
- Port Configuration 133
- Examples 134
- 3.3.1 Reviewing Port Status 136
- 3.3.1.1 show port 137
- 3.3.1.2 show port status 138
- 3.3.1.3 show port counters 140
- 3.3.2.1 set port disable 144
- 3.3.2.2 set port enable 145
- 3.3.2.3 show port trap 146
- 3.3.3.1 show port speed 148
- 3.3.3.2 set port speed 149
- 3.3.3.3 show port duplex 150
- 3.3.3.4 set port duplex 151
- 3.3.4.1 show port jumbo 153
- 3.3.4.2 set port jumbo 154
- 3.3.4.3 clear port jumbo 155
- 3.3.5.1 show port negotiation 156
- 3.3.5.2 set port negotiation 157
- 3.3.6 Setting Flow Control 158
- 3.3.6.1 show flowcontrol 159
- 3.3.6.3 set flowcontrol 160
- 3.4 PORT MIRRORING 161
- 3.4.1 Mirroring Features 161
- 3.4.2 Setting Port Mirroring 161
- 3.4.2.1 show port mirroring 162
- 3.4.2.2 set port mirroring 163
- 3.4.2.3 clear port mirroring 164
- 3.5.1 LACP Operation 165
- 3.5.2 LACP Terminology 166
- Configuring Link Aggregation 168
- 3.5.4.1 set lacp 170
- 3.5.4.2 show lacp 171
- 3.5.4.3 set lacp asyspri 173
- 3.5.4.4 set lacp aadminkey 174
- 3.5.4.5 clear lacp 175
- 3.5.4.6 set lacp static 176
- 3.5.4.7 clear lacp static 177
- 3.5.4.8 show port lacp 178
- 3.5.4.9 set port lacp 180
- (Section 3.5.4.3) 181
- 3.5.4.10 clear port lacp 183
- 3.5.5.1 show broadcast 186
- 3.5.5.2 set broadcast 187
- SNMP Configuration 189
- 4.1.2 SNMPv3 190
- SNMP Configuration Summary 191
- 4.3.1.1 show snmp engineid 195
- 4.3.1.2 show snmp counters 196
- 4.3.2.1 show snmp user 203
- 4.3.2.2 set snmp user 205
- 4.3.2.3 clear snmp user 206
- 4.3.2.4 show snmp group 207
- 4.3.2.5 set snmp group 209
- 4.3.2.6 clear snmp group 210
- 4.3.2.7 show snmp community 211
- 4.3.2.8 set snmp community 212
- 4.3.2.9 clear snmp community 213
- 4.3.3.1 show snmp access 215
- 4.3.3.2 set snmp access 218
- 4.3.3.3 clear snmp access 220
- 4.3.4.1 show snmp view 222
- 4.3.4.2 show snmp context 224
- 4.3.4.3 set snmp view 225
- 4.3.4.4 clear snmp view 226
- 4.3.5.2 set snmp targetparams 231
- 4.3.6.1 show snmp targetaddr 235
- 4.3.6.2 set snmp targetaddr 237
- TrapSink 238
- 4.3.6.3 clear snmp targetaddr 239
- 4.3.7.1 show snmp notify 241
- 4.3.7.2 set snmp notify 243
- 4.3.7.3 clear snmp notify 244
- About SNMP Notify Filters 244
- 4.3.7.5 set snmp notifyfilter 246
- and associate a target 249
- Spanning Tree Configuration 255
- 5.1.2 Spanning Tree Features 256
- 5.2.1.1 show spantree stats 259
- 5.2.1.2 set spantree 262
- 5.2.1.3 show spantree version 263
- 5.2.1.4 set spantree version 264
- 5.2.1.7 set spantree msti 267
- 5.2.1.8 clear spantree msti 268
- 5.2.1.9 show spantree mstmap 269
- 5.2.1.10 set spantree mstmap 270
- 5.2.1.18 set spantree hello 278
- 5.2.1.19 clear spantree hello 279
- 5.2.1.20 set spantree maxage 280
- 5.2.2.3 show spantree portpri 287
- 5.2.2.4 set spantree portpri 288
- 802.1Q VLAN Configuration 297
- 6.1.1 Port Assignment Scheme 298
- • show vlan (Section 6.3.1.1) 300
- 6.3.1.1 show vlan 301
- 6.3.2.1 set vlan 304
- 6.3.2.2 set vlan name 305
- 6.3.2.3 clear vlan 306
- 6.3.2.4 clear vlan name 307
- 6.3.3.1 show port vlan 309
- 6.3.3.2 set port vlan 310
- 6.3.3.3 clear port vlan 311
- 6.3.3.6 show port discard 314
- 6.3.3.7 set port discard 315
- 6.3.3.8 clear port discard 316
- 6.3.4.1 show port egress 318
- 6.3.4.2 set vlan forbidden 319
- 6.3.4.3 set vlan egress 320
- 6.3.4.4 clear vlan egress 322
- 6.3.5 Setting the Host VLAN 323
- 6.3.5.1 show host vlan 324
- 6.3.5.2 set host vlan 325
- 6.3.5.3 clear host vlan 326
- Purpose 328
- 1H152-51 329
- 6.3.7.1 show gvrp 331
- 6.3.7.2 show garp timer 332
- 6.3.7.3 set gvrp 334
- 6.3.7.4 clear gvrp 335
- 6.3.7.5 set garp timer 336
- CONFIGURATION 337
- {enable 339
- 7.3.2.1 show diffserv info 341
- 7.3.2.2 show diffserv class 342
- 7.3.2.3 set class create 343
- Section 7.3.3.5) 350
- Section 7.3.3.6) 350
- Section 7.3.3.7) 350
- 7.3.3.1 show diffserv policy 351
- Section 7.3.4.3 353
- associate to this policy 355
- 7.3.4.3 set diffserv service 361
- Configuration 363
- COMMAND SET 364
- 8.3.1.1 show port priority 365
- 8.3.1.2 set port priority 366
- 8.3.1.3 clear port priority 367
- • 100Base-T - 4 370
- • 1000Base-T - 4 370
- • 1000Base-X - 8 370
- 8.3.3.1 show port ratelimit 373
- 8.3.3.2 set port ratelimit 375
- This example shows how to: 376
- 8.3.3.3 clear port ratelimit 377
- IGMP Configuration 379
- IGMP Configuration Summary 380
- Enabling / Disabling IGMP 380
- 9.4.1.1 show igmpsnooping 381
- 9.4.2 Configuring IGMP 384
- Configuring IGMP 385
- 9.4.2.5 clear igmpsnooping 389
- 10.2.1.1 show logging server 393
- 10.2.1.2 set logging server 394
- Configuring System Logging 395
- 10.2.1.3 clear logging server 396
- 10.2.1.4 show logging default 397
- 10.2.1.5 set logging default 398
- 10.2.1.7 show logging local 400
- 10.2.1.8 set logging local 401
- 10.2.1.9 clear logging local 402
- 10.2.1.10 show logging buffer 403
- 10.2.2.1 history 405
- 10.2.2.2 show history 406
- 10.2.2.3 set history 407
- 10.2.2.4 ping 408
- 10.2.2.5 show users 410
- 10.2.2.6 disconnect 411
- 10.2.3.1 show arp 413
- 10.2.3.2 clear arp 414
- 10.2.3.3 show mac 415
- • learned 416
- 10.2.3.4 show mac agetime 417
- 10.2.4.1 show sntp 419
- 10.2.4.2 set sntp client 421
- 10.2.4.3 clear sntp client 422
- 10.2.4.4 set sntp server 423
- 10.2.4.5 clear sntp server 424
- 10.2.4.10 set sntp poll-retry 429
- 10.2.5.2 set nodealias 435
- Configuring Node Aliases 436
- Security Configuration 437
- 11.3.1 Configuring RADIUS 439
- 11.3.1.1 show radius 440
- 11.3.1.2 set radius 442
- Configuring RADIUS 443
- 11.3.1.3 clear radius 444
- • IP address 446
- 11.3.2.1 show dot1x 450
- 11.3.2.3 set dot1x 455
- 11.3.2.6 show eapol 460
- 11.3.2.7 set eapol 463
- 11.3.2.8 clear eapol 464
- VLAN id for ingress 470
- 11.3.4.1 show maclock 472
- 11.3.4.3 set maclock enable 476
- 11.3.4.4 set maclock disable 477
- Configuring MAC Locking 478
- 11.3.4.7 set maclock trap 480
- 11.3.5.1 show ssh status 482
- 11.3.5.2 set ssh 483
- 11.3.5.3 set ssh hostkey 484
Relacionado con productos y manuales para Los conmutadores de red Enterasys Enterasys SecureStack B2 B2G124-24
(64 paginas)
(12 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.034 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales