SMC Networks 10/100 manual 106, Authorized

Page 138

CONFIGURING THE SWITCH

Mode – Sets the authentication mode to one of the following options:

-Force-Authorized– Configures the port to grant access to all clients, either dot1x-aware or otherwise.

-Force-Unauthorized– Configures the port to deny access to all clients, either dot1x-aware or otherwise.

-Auto – Requires a dot1x-aware connected client to be authorized by the RADIUS server. Clients that are not dot1x-aware will be denied access.

Authorized

-Yes – Connected client is authorized.

-No – Connected client is not authorized.

-Blank – Displays nothing when dot1x is disabled on a port.

Supplicant – Indicates the MAC address of a connected client.

Trunk – Indicates if the port is configured as a trunk port.

Web – Click dot1x, dot1X Port Configuration then select the Mode from the drop- down list.

2-106

Image 138
Contents TigerSwitch 10/100 Page TigerSwitch 10/100 Management Guide Trademarks Limited Warranty Limited Warranty Contents Contents Command Line Interface IiiContents Contents Contents Vii Upgrading Firmware via the Serial Port . . . . . . .B-1 Glossary IndexViii Connecting to the Switch Configuration OptionsSwitch Management Required Connections Remote Connections Basic Configuration Console ConnectionSetting Passwords Setting an IP Address Manual ConfigurationDynamic Configuration Basic Configuration Enabling Snmp Management Access Community StringsBasic Configuration Saving Configuration Settings Trap ReceiversManaging System Files Enter the name of the start-up file. Press EnterSystem Defaults Function Parameter DefaultSnmp Function Parameter Default Pvid Switch Management Configuring the Switch Using the Web InterfaceNavigating the Web Browser Interface Home Panel Display Button ActionMain Menu Menu DescriptionMenu Description Private Vlan Igmp Displaying System Information Configuring the Switch Setting the IP Address CLI Specify the hostname, location and contact informationCommand Attributes Manual Configuration Configuring the Switch Configuring User Authentication Configuring the Logon PasswordCommand Attributes Configuring Radius Logon Authentication Command UsageCommand Attributes Configuring User Authentication Managing Firmware Downloading System Software from a ServerManaging Firmware Saving or Restoring Configuration Settings Downloading Configuration Settings from a ServerManaging Firmware Resetting the System Displaying Bridge Extension CapabilitiesDisplaying Bridge Extension Capabilities 145 Global Setting Enabling or Disabling GvrpDisplaying Switch Hardware/Software Versions Displaying Switch HARDWARE/SOFTWARE Versions Port Configuration Displaying Connection StatusWeb Click Port, Port Information or Trunk Information Configuring Interface Connections CLI This example shows the connection status for PortPort Configuration Setting Broadcast Storm Thresholds Command Usage 102 Configuring Port Mirroring Address Table Settings Setting Static Addresses Displaying the Address Table 109 Spanning Tree Algorithm Configuration Changing the Aging TimeManaging Global Settings Configuring the Switch Displaying the Global Settings for STA 119 Configuring the Global Settings for STA Managing STA Interface SettingsCommand Attributes Spanning Tree Algorithm Configuration Configuring the Switch Displaying the Interface Settings for STA Vlan Configuration Configuring the Interface Settings for STAAssigning Ports to VLANs Configuring the Switch Vlan Configuration Displaying Basic Vlan Information Forwarding Tagged/Untagged FramesCommand Attributes Web Displaying Current VLANsCommand Attributes CLI Creating VLANs 131122 Adding Static Members to VLANs Vlan Index Configuring the Switch 130 Adding Static Members to VLANs Port Index Configuring Vlan Behavior for Interfaces CLI This example adds Port 3 to Vlan 1 as a tagged portConfiguring the Switch Vlan Configuration Configuring Private VLANs Displaying Current Private VLANs Command Attributes Configuring Private VLANs Associating Community VLANs Displaying Private Vlan Interface Information Command Attributes Configuring Private Vlan Interfaces Configuring the Switch Class of Service Configuration 137Setting the Queue Mode Port Trunk Configuration Command Usage Group Number Ports Configuring Snmp 152Setting Community Access Strings Access ModeSpecifying Trap Managers and Trap Types Command Usage Multicast Configuration Configuring Igmp Parameters Command Attributes Interfaces Attached to a Multicast Router Command Attributes Displaying Interfaces Attached to a Multicast RouterSpecifying Interfaces Attached to a Multicast Router Displaying Port Members of Multicast Services Command Attribute158 Adding Multicast Addresses to VLANs 156 Showing Port Statistics Showing Port Statistics Rate Limit Configuration CLI This example shows statistics for portOption Configuring 802.1x Port Authentication 100101 Displaying 802.1x Global Settings 102Configuring 802.1x Global Settings 103104 Configuring a Port for Authorization 105106 AuthorizedDisplaying 802.1x Statistics 107108 109 CLI This example displays the dot1x statistics for port110 Using the Command Line Interface Accessing the CLITelnet Connection Using the Command Line Interface Entering Commands Keywords and ArgumentsMinimum Abbreviation Command Completion Getting Help on CommandsNegating the Effect of Commands Using Command HistoryPartial Keyword Lookup Understanding Command Modes Exec CommandsConfiguration Commands Mode Command Prompt Command Groups Command Line ProcessingIgmp Command Description Group General Commands EnableSyntax Enable level Disable Configure Show history Reload EndExit Flash/File Commands QuitCopy Command Usage Delete SyntaxSyntax Dir boot-rom config opcode filename DirWhichboot Column Heading DescriptionBoot system Syntax Boot system boot-romconfig opcode filenameSystem Management Commands Hostname UsernameSyntax Hostname name no hostname Username Access-level Password Guest Admin Enable password Default Setting Command Mode Ip http portSyntax Ip http port port-numberno ip http port Ip http server Show startup-config Show running-config Show running-config Show startup-config Show system Show users Show versionAuthentication Commands Authentication login Command Function ModeRadius-server host Radius-server port Syntax Radius-server port portnumber no radius-server portRadius-server key Radius-server retransmitSyntax Radius-server key keystring no radius-server key Radius-server timeout Show radius-serverPort Authentication Commands Authentication dot1x Default Command Mode Dot1x defaultSyntax Dot1x default Command Mode Dot1x max-reqDefault Command Mode Interface Configuration ExampleDot1x port-control Syntax Dot1x re-authenticate interface Dot1x re-authenticateDot1x re-authentication Ethernet unit/portDot1x timeout quiet-period Dot1x timeout re-authperiodDot1x timeout tx-period Show dot1x Syntax Show dot1x statistics interface interfaceReauthentication State Machine Console#show dot1x Snmp Commands Snmp-server communitySnmp-server contact Syntax Snmp-server contact string no snmp-server contactSnmp-server location Syntax Snmp-server location text no snmp-server locationSnmp-server host No snmp-server host host-addrSnmp-server enable traps Show snmp Normal Exec, Privileged Exec Igmp Snooping Commands Ip igmp snoopingSyntax Ip igmp snooping no ip igmp snooping Ip igmp snooping query-count Ip igmp snooping query-max-response-time Ip igmp snooping router-port-expire-time Ip igmp snooping version Following shows the current Igmp snooping configuration Show ip igmp snoopingShow mac-address-table multicast Line Commands Line Syntax Line console vtyLogin Syntax Login local no loginPassword Syntax Password 0 7 password no passwordExec-timeout Syntax Exec-timeout seconds no exec-timeoutPassword-thresh Syntax Password-thresh threshold no password-threshSilent-time Syntax Silent-time seconds no silent-timeDatabits Syntax Databits 7 8 no databitsParity Syntax Parity none even odd no paritySpeed Syntax Speed bps no speedSyntax Stopbits 1 StopbitsShow line Syntax Show line console vtyIP Commands To show all lines, enter this commandIp address Ip dhcp restart Ip default-gateway Syntax Ip default-gateway gateway no ip default-gatewayShow ip interface Show ip redirects PingSyntax Ping host count countsize size Press Esc to stop pinging HOL Blocking Prevention Commands Queue hol-preventionShow queue hol-prevention Interface Commands Interface Port-channel channel-idRangeDescription Speed-duplexSyntax Description string no description Negotiation 3-92 capabilities Syntax Negotiation no negotiation Default Setting NegotiationDefault Setting CapabilitiesSyntax Flowcontrol no flowcontrol Default Setting FlowcontrolNegotiation Capabilities flowcontrol, symmetric Shutdown Switchport broadcast percent Port-channel channel-idRange Default Setting Clear countersSyntax Clear counters interface Show interfaces status Syntax Show interfaces status interfaceShow interfaces counters Syntax Show interfaces counters interface101 Show interfaces switchport Syntax Show interfaces switchport interface103 Rate Limit Commands Rate-limit Address Table Commands Mac-address-table static Clear mac-address-table dynamic Show mac-address-table Mac-address-table aging-time Spanning Tree Commands Show mac-address-table aging-time111 Syntax Spanning-tree no spanning-tree Default Setting Spanning-tree112 Spanning-tree forward-time 113Spanning-tree hello-time 114Spanning-tree max-age 115116 Spanning-tree prioritySpanning-tree cost Syntax Spanning-tree cost cost no spanning-tree costSpanning-tree port-priority 117Spanning-tree portfast 118Show spanning-tree 119Syntax Show spanning-tree interface 120 Vlan Commands 121Vlan database 122Vlan 123Interface vlan 124Syntax Interface vlan vlan-id Switchport mode Syntax Switchport mode trunk access no switchport mode125 Switchport acceptable-frame-types 126Switchport ingress-filtering 127Switchport native vlan 128Switchport allowed vlan 129Switchport forbidden vlan 130Show vlan 131Syntax Show vlan id vlan-idname vlan-name Private Vlan Commands 132133 Private-vlan 134Syntax Private-vlan vlan-idcommunity primary Private vlan association 135No private-vlan primary-vlan-idassociation Switchport mode private-vlan 136Switchport private-vlan host-association 137Switchport private-vlan mapping 138Show vlan private-vlan 139Syntax Show vlan private-vlan community primary Syntax Switchport gvrp no switchport gvrp Gvrp and Bridge Extension CommandsSwitchport gvrp 140Show gvrp configuration Syntax Show gvrp configuration interface141 Garp timer 142Show garp timer Syntax Show garp timer interface143 Syntax Bridge-ext gvrp no bridge-ext gvrp Default Setting Bridge-ext gvrp144 Show bridge-ext 145Priority Commands 146Syntax Queue mode strict wrr no queue mode Queue modeShow queue mode 147Mirror Port Commands Port monitor148 Show port monitor 149Syntax Show port monitor interface Port Trunking Commands 150151 Guidelines for Creating TrunksPort-group 152153 154 Appendix a Troubleshooting Troubleshooting ChartTroubleshooting Appendix B Upgrading Firmware VIA Serial Port Upgrading Firmware VIA the Serial Port Page Restoring Switch Defaults Enter q and then x to return to the main menu Enter G to boot the system Glossary-1 Glossary-2 Glossary-3 Glossary-4 Glossary-5 Glossary-6 Glossary-7 Glossary-8 Virtual LAN VlanXModem Console Port Pin Assignments Figure C-1. DB-9 Console Port Pin NumbersDB-9 Port Pin Assignments Console Port to 9-Pin DTE Port on PCConsole Port to 25-Pin DTE Port on PC Index Index-1Index-2 Page For Technical SUPPORT, Call
Related manuals
Manual 26 pages 52.66 Kb