Enterasys SecureStack A2 A2H124-48P Especificaciones Pagina 464
- Pagina / 634
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Process Overview: Security Configuration
10-2 SecureStack A2 Configuration Guide
• MAC Authentication – provides a mechanism for administrators to securely authenticate source
MAC addresses and grant appropriate access to end user devices communicating on SecureStack
A2 ports. For details, refer to Section 10.3.3.
• Multiple Authentication Methods – allows users to authenticate using multiple methods of
authentication on the same port. For details, refer to Section 10.3.4.
• RFC 3580 Tunnel Attributes provide a mechanism to contain an 802.1X authenticated user to a
VLAN regardless of the PVID, refer to Section 10.3.5.
• MAC Locking – locks a port to one or more MAC addresses, preventing the use of unauthorized
devices and MAC spoofing on the port. For details, refer to Section 10.3.6.
• Secure Shell (SSH) – provides secure Telnet. For details, refer to Section 10.3.7.
10.2 PROCESS OVERVIEW: SECURITY CONFIGURATION
Use the following steps as a guide to configuring security methods on the device:
1. Configuring RADIUS (Section 10.3.1)
2. Configuring 802.1X Authentication (Section 10.3.2)
3. Configuring MAC Authentication (Section 10.3.3)
4. Configuring multiple authentication methods (Section 10.3.4)
5. Configuring RFC 3580 RADIUS tunnel attributes (Section 10.3.5)
6. Configuring MAC Locking (Section 10.3.6)
7. Configuring Secure Shell (SSH) (Section 10.3.7)
- SecureStack A2 1
- Enterasys Networks, Inc 4
- Firmware License Agreement 4
- Contents 7
- PORT CONFIGURATION 10
- SNMP CONFIGURATION 12
- SPANNING TREE CONFIGURATION 13
- 802.1Q VLAN CONFIGURATION 14
- ....................... 7-3 15
- IGMP CONFIGURATION 17
- SECURITY CONFIGURATION 17
- CONFIGURING RMON 20
- About This Guide 25
- STRUCTURE OF THIS GUIDE 26
- RELATED DOCUMENTS 27
- Convention Description 28
- Introduction 29
- 1.2 DEVICE MANAGEMENT METHODS 30
- 1.3 GETTING HELP 31
- Getting Help 32
- Does not apply to MATRIX E7 34
- Factory Default Settings 35
- 2.1.3 CLI Command Modes 37
- • show ssl (Section 2.1.4.3) 38
- • set ssl (Section 2.1.4.4) 38
- 2.1.4.1 show webview 39
- 2.1.4.2 set webview 40
- 2.1.4.3 show ssl 41
- 2.1.4.4 set ssl 42
- • ro for Read-Only access 44
- • rw for Read-Write access 44
- User Account 45
- Getting Help with CLI Syntax 47
- --More-- to indicate 48
- Basic Line Editing Commands 50
- Important 52
- 2.1.10.2 show switch 58
- 2.1.10.5 set switch 62
- 2.1.10.6 set switch copy-fw 63
- 2.1.10.9 set switch member 66
- 2.1.10.10 clear switch member 67
- 2.1.11.1 show system login 69
- 2.1.11.2 set system login 71
- 2.1.11.3 clear system login 72
- 2.1.11.4 set password 73
- 2.1.11.8 show system lockout 77
- 2.1.11.9 set system lockout 78
- 2.1.12.1 show ip address 81
- 2.1.12.2 show ip protocol 82
- 2.1.12.3 set ip address 83
- 2.1.12.4 clear ip address 84
- 2.1.12.5 show system 85
- 2.1.12.6 show system hardware 87
- 2.1.12.9 show time 91
- 2.1.12.10 set time 92
- 2.1.12.11 show summertime 93
- 2.1.12.12 set summertime 94
- 2.1.12.13 set summertime date 95
- 02:00 60 96
- 2.1.12.15 clear summertime 97
- 2.1.12.16 set prompt 98
- 2.1.12.17 show banner motd 99
- 2.1.12.18 set banner motd 100
- 2.1.12.19 clear banner motd 101
- 2.1.12.20 show version 102
- • Bp: BootPROM version 103
- 2.1.12.21 set system name 104
- 2.1.12.22 set system location 105
- 2.1.12.23 set system contact 106
- 2.1.12.24 set width 107
- 2.1.12.25 set length 108
- 2.1.12.26 show logout 109
- 2.1.12.27 set logout 110
- 2.1.12.28 show console 111
- 2.1.12.29 set console baud 112
- 2.1.13.1 show inlinepower 114
- 2.1.13.3 set inlinepower trap 116
- 2.1.13.5 set port inlinepower 118
- • Tera Term Pro Version 2.3 119
- Password 120
- 2.1.14.3 show boot system 123
- 2.1.14.4 set boot system 124
- • telnet (Section 2.1.15.3) 125
- 2.1.15.1 show telnet 126
- 2.1.15.2 set telnet 127
- 2.1.15.3 telnet 128
- 2.1.16.2 set snmp persistmode 132
- 2.1.16.3 save config 133
- 2.1.16.4 dir 134
- 2.1.16.5 show config 135
- 2.1.16.6 configure 137
- 2.1.16.7 copy 138
- 2.1.16.8 delete 139
- 2.1.16.9 show tftp settings 140
- 2.1.16.10 set tftp timeout 141
- 2.1.16.11 clear tftp timeout 142
- 2.1.16.12 set tftp retry 143
- 2.1.16.13 clear tftp retry 144
- 2.1.17 Configuring CDP 145
- 2.1.17.1 show cdp 146
- Configuring CDP 147
- 2.1.17.2 set cdp state 148
- 2.1.17.3 set cdp auth 149
- 2.1.17.5 set cdp hold-time 151
- 2.1.17.6 clear cdp 152
- • cls (Section 2.1.18.1) 153
- • exit (Section 2.1.18.2) 153
- 2.1.18.1 cls (clear screen) 154
- 2.1.18.2 exit 155
- 2.1.19 Resetting the Switch 156
- 2.1.19.1 reset 157
- 2.1.19.2 clear config 158
- Port Configuration 159
- A2H124-24FX Switch Ports 160
- A2H254-16 Switch Ports 160
- Examples 161
- 3.3.1 Reviewing Port Status 163
- Commands 163
- 3.3.1.1 show port 164
- 3.3.1.2 show port status 165
- Reviewing Port Status 166
- 3.3.1.3 show port counters 167
- 3.3.2.1 set port disable 171
- 3.3.2.2 set port enable 172
- 3.3.2.3 show port alias 173
- 3.3.2.4 set port alias 174
- 3.3.3.1 show port speed 176
- 3.3.3.2 set port speed 177
- 3.3.3.3 show port duplex 178
- 3.3.3.4 set port duplex 179
- 3.3.4.1 show port jumbo 181
- 3.3.4.2 set port jumbo 182
- 3.3.4.3 clear port jumbo 183
- 3.3.5.1 show port negotiation 185
- 3.3.5.2 set port negotiation 186
- 3.3.5.3 show port advertise 187
- 3.3.5.4 set port advertise 188
- 3.3.5.5 clear port advertise 189
- Setting Auto-Negotiation 190
- 3.3.6 Setting Flow Control 191
- 3.3.6.1 show flowcontrol 192
- 3.3.6.2 set flowcontrol 193
- 3.3.7 Setting Port Traps 194
- 3.3.7.1 show port trap 195
- 3.3.7.2 set port trap 196
- 3.3.8.1 show port broadcast 198
- 3.3.8.2 set port broadcast 199
- 3.3.8.3 clear port broadcast 200
- 3.4 PORT MIRRORING 201
- 3.4.1 Mirroring Features 201
- 3.4.2 Setting Port Mirroring 201
- 3.4.2.1 show port mirroring 202
- 3.4.2.2 set port mirroring 203
- 3.4.2.3 clear port mirroring 204
- 3.5.1 LACP Operation 205
- 3.5.2 LACP Terminology 206
- 3.5.4.1 show lacp 210
- Configuring Link Aggregation 211
- 3.5.4.2 set lacp 212
- 3.5.4.3 set lacp asyspri 213
- 3.5.4.4 set lacp aadminkey 214
- 3.5.4.5 clear lacp 215
- 3.5.4.6 set lacp static 216
- 3.5.4.7 clear lacp static 217
- 3.5.4.10 show port lacp 220
- 3.5.4.11 set port lacp 222
- (Section 3.5.4.3) 223
- 3.5.4.12 clear port lacp 225
- Configuring Protected Ports 227
- Protected Port Operation 227
- 3.6.2.1 set port protected 228
- 3.6.2.2 show port protected 229
- 3.6.2.3 clear port protected 230
- Protected Port Command Set 231
- Group ID Group Name 232
- 232
- 1 group1 232
- SNMP Configuration 235
- 4.1.2 SNMPv3 236
- SNMP Configuration Summary 237
- 4.3.1.1 show snmp engineid 240
- 4.3.1.2 show snmp counters 241
- Reviewing SNMP Statistics 242
- 4.3.2.1 show snmp user 246
- 4.3.2.2 set snmp user 248
- 4.3.2.3 clear snmp user 249
- 4.3.2.4 show snmp group 250
- 4.3.2.5 set snmp group 252
- 4.3.2.6 clear snmp group 253
- 4.3.2.7 show snmp community 254
- 4.3.2.8 set snmp community 255
- 4.3.2.9 clear snmp community 256
- 4.3.3.1 show snmp access 258
- 4.3.3.2 set snmp access 261
- 4.3.3.3 clear snmp access 263
- 4.3.4.1 show snmp view 265
- Configuring SNMP MIB Views 266
- 4.3.4.2 show snmp context 267
- 4.3.4.3 set snmp view 268
- 4.3.4.4 clear snmp view 269
- 4.3.5.2 set snmp targetparams 273
- 4.3.6.1 show snmp targetaddr 277
- 4.3.6.2 set snmp targetaddr 279
- TrapSink 280
- 4.3.6.3 clear snmp targetaddr 281
- 4.3.7.1 show snmp notify 283
- 4.3.7.2 set snmp notify 285
- 4.3.7.3 clear snmp notify 286
- About SNMP Notify Filters 287
- 4.3.7.5 set snmp notifyfilter 289
- and associate a target 292
- Spanning Tree Configuration 297
- 5.1.2 Spanning Tree Features 298
- 5.2.1.1 show spantree stats 302
- 5.2.1.2 set spantree 305
- 5.2.1.3 show spantree version 306
- 5.2.1.4 set spantree version 307
- BPDU forwarding is disabled 309
- 5.2.1.12 set spantree msti 315
- 5.2.1.13 clear spantree msti 316
- 5.2.1.14 show spantree mstmap 317
- 5.2.1.15 set spantree mstmap 318
- 5.2.1.23 set spantree hello 326
- 5.2.1.24 clear spantree hello 327
- 5.2.1.25 set spantree maxage 328
- Spanguard is disabled 339
- Spanguard timeout: 300 342
- Port fe.1.1 is Unlocked 345
- 5.2.2.4 show spantree portpri 354
- 5.2.2.5 set spantree portpri 355
- 802.1Q VLAN Configuration 363
- • show vlan (Section 6.3.1.1) 365
- 6.3.1.1 show vlan 366
- Reviewing Existing VLANs 367
- 6.3.2.1 set vlan 369
- 6.3.2.2 set vlan name 370
- 6.3.2.3 clear vlan 371
- 6.3.2.4 clear vlan name 372
- 6.3.3.1 show port vlan 374
- 6.3.3.2 set port vlan 375
- 6.3.3.3 clear port vlan 376
- 6.3.3.6 show port discard 379
- 6.3.3.7 set port discard 380
- 6.3.3.8 clear port discard 381
- 6.3.4.1 show port egress 383
- 6.3.4.2 set vlan forbidden 384
- 6.3.4.3 set vlan egress 385
- 6.3.4.4 clear vlan egress 387
- 6.3.5 Setting the Host VLAN 390
- 6.3.5.1 show host vlan 391
- 6.3.5.2 set host vlan 392
- 6.3.5.3 clear host vlan 393
- Purpose 395
- 6.3.7.1 show gvrp 398
- 6.3.7.2 show garp timer 399
- Section 6.3.7.5 400
- 6.3.7.3 set gvrp 401
- 6.3.7.4 clear gvrp 402
- 6.3.7.5 set garp timer 403
- CONFIGURATION 405
- 7.3.2.1 show diffserv info 408
- 7.3.2.2 show diffserv class 409
- 7.3.2.3 set class create 410
- keyword http tcp 415
- 7.3.3.1 show diffserv policy 418
- add admin system 421
- 7.3.4.3 set diffserv service 428
- Configuration 429
- COMMAND SET 430
- 8.3.1.1 show port priority 431
- 8.3.1.2 set port priority 432
- 8.3.1.3 clear port priority 433
- 8.3.3.1 show port txq 439
- 8.3.3.2 set port txq 440
- 8.3.3.3 clear port txq 442
- 8.3.4.1 show port ratelimit 445
- 8.3.4.2 set port ratelimit 447
- This example shows how to: 448
- 125 KBps: 448
- 8.3.4.3 clear port ratelimit 449
- IGMP Configuration 451
- IGMP Configuration Summary 452
- Enabling / Disabling IGMP 452
- 9.4.1.1 show igmpsnooping 453
- 9.4.2 Configuring IGMP 456
- Configuring IGMP 457
- 9.4.2.5 clear igmpsnooping 461
- Security Configuration 463
- 10.3.1 Configuring RADIUS 465
- 10.3.1.1 show radius 466
- Configuring RADIUS 467
- 10.3.1.2 set radius 468
- 10.3.1.3 clear radius 471
- • IP address 473
- 10.3.2.1 show dot1x 477
- 10.3.2.3 set dot1x 482
- Command Defaults 484
- 10.3.2.6 show eapol 487
- 10.3.2.7 set eapol 490
- 10.3.2.8 clear eapol 491
- About Multiple Authentication 511
- 10.3.4.1 show multiauth 512
- 10.3.4.2 set multiauth mode 513
- 10.3.4.3 clear multiauth mode 514
- 10.3.4.6 show multiauth port 517
- 10.3.4.7 set multiauth port 518
- 10.3.4.8 clear multiauth port 519
- 10.3.6.1 show maclock 528
- Configuring MAC Locking 529
- 10.3.6.3 set maclock enable 532
- 10.3.6.4 set maclock disable 533
- 10.3.6.5 set maclock 534
- 10.3.6.6 clear maclock 535
- 10.3.6.7 set maclock static 536
- 10.3.6.8 clear maclock static 537
- 10.3.6.11 set maclock move 540
- 10.3.6.12 set maclock trap 541
- 10.3.7.1 show ssh status 543
- 10.3.7.2 set ssh 544
- 10.3.7.3 set ssh hostkey 545
- 11.2.1.1 show logging server 549
- 11.2.1.2 set logging server 550
- Configuring System Logging 551
- 11.2.1.3 clear logging server 552
- 11.2.1.4 show logging default 553
- 11.2.1.5 set logging default 554
- 11.2.1.7 show logging local 556
- 11.2.1.8 set logging local 557
- 11.2.1.9 clear logging local 558
- 11.2.1.10 show logging buffer 559
- 11.2.2.1 history 561
- 11.2.2.2 show history 562
- 11.2.2.3 set history 563
- 11.2.2.4 ping 564
- 11.2.2.5 show users 565
- 11.2.2.6 disconnect 566
- 11.2.3.1 show arp 568
- 11.2.3.2 clear arp 569
- 11.2.3.3 show mac 570
- • learned 571
- 11.2.3.4 show mac agetime 572
- 11.2.4.1 show sntp 574
- 11.2.4.2 set sntp client 576
- 11.2.4.3 clear sntp client 577
- 11.2.4.4 set sntp server 578
- 11.2.4.5 clear sntp server 579
- 11.2.4.8 set sntp poll-retry 582
- Configuring Node Aliases 587
- 11.2.5.2 set nodealias 588
- Configuring RMON 591
- 12.2 RMON COMMAND SET 593
- 12.2.1.1 show rmon stats 594
- Output What It Displays 595
- 12.2.1.2 set rmon stats 597
- 12.2.1.3 clear rmon stats 598
- 12.2.2 History Group Commands 599
- 12.2.2.1 show rmon history 600
- 12.2.2.2 set rmon history 602
- 12.2.2.3 clear rmon history 603
- 12.2.3 Alarm Group Commands 604
- 12.2.3.1 show rmon alarm 605
- RMON Command Set 607
- Alarm Group Commands 607
- 12.2.3.4 clear rmon alarm 610
- 12.2.4 Event Group Commands 611
- 12.2.4.1 show rmon event 612
- Event Group Commands 614
- 12.2.4.4 clear rmon event 616
- 12.2.5 Filter Group Commands 617
- 12.2.5.1 show rmon channel 618
- 12.2.5.2 set rmon channel 619
- Filter Group Commands 620
- "capture all" 620
- 12.2.5.3 clear rmon channel 621
- 12.2.5.4 show rmon filter 622
- 12.2.5.5 set rmon filter 623
- 12.2.5.6 clear rmon filter 625
- Packet Capture Commands 626
- 12.2.6.1 show rmon capture 627
- 12.2.6.2 set rmon capture 628
- Command Mode 629
- Read-Write 629
- 12.2.6.3 clear rmon capture 630
- Numerics 631
Relacionado con productos y manuales para Los conmutadores de red Enterasys SecureStack A2 A2H124-48P
(82 paginas)
(7 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.065 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales