AAA and Radius Operation | 3Com 10014298 specification

242CHAPTER 9: AAA AND RADIUS OPERATION

Image 242

3Com 10014298 manual AAA and Radius Operation

Contents

Switch Configuration Guide Marlborough, MA 3Com CorporationCampus Drive 01752-3064 Contents 110 IP Multicast Protocols 112 104 Route Capacity 105 Configuring Route CapacityIP Multicast Overview 109 Configuring the Mstp Running Mode 192 137 Configuring PIM-SM 138 Gmrp Configuring Gmrp 146STP Overview 181 Configuring STP 191 237 Dynamic Vlan with Radius Server Configuration Example 240244 Configuring File Management 245 239 286 274 Configuring Rmon278 Configuring NTP 279 Page Text Conventions Lists icon conventions that are used throughout this bookLists the text conventions used in this book Icon Description Display user-interface Product Overview Console port. To set up the local configuration environment ConfiguringSwitch To set terminal parameters Setting TerminalParameters Dialog box, as shown in Figure Select Properties HyperTerminal Window Enter system view, return to user view by pressing Ctrl+Z Connecting the PC to the SwitchTelnet Connecting Two Switch 7750 Systems Run Telnet Dial-up Modem SW7750telnet Set Up Remote Configuration Environment Interface Dial the Remote PC Entering the User Interface View Configuring the Attributes of the AUX Console PortConfigure the Attributes of the AUX Console Port Enter User Interface View Configuring the Terminal Attributes By default, the terminal screen length is 24 lines Managing Users Configure Authentication Method Perform the following configuration in user interface viewAuthorize users to use the command lines Configure the Local Authentication Password Set Command Level After User Login Perform the following configuration in local-user viewSet Command Level Used After a User Logs Set Command Priority Configuring the Attributes of a ModemConfiguring Redirection Configure Modem Configure Automatic Command Execution Perform the following configuration in user viewConfigure to Send Messages Between User Interfaces Displaying and Debugging User Interface Command Line Interface Command Line Interface Function Feature of Command View Editing Features of the Command Line Command LineDisplaying Features of the Command Line Online Help Common Command Line Error Messages Common Command Line Error MessagesHistory Command Retrieve History Command Editing Functions Editing Features of the Command LineDisplaying Features of the Command Line Display Functions System Access Port Configuration Ethernet Port Overview Enabling and Disabling Ethernet Ports Setting Description Character String for Ethernet PortEntering Ethernet Port View Setting Cable Type for Ethernet Port Setting Duplex Attribute of the Ethernet PortSetting the Speed of the Ethernet Port Permitting/Forbidding Jumbo Frames on the Ethernet port Setting Flow Control for Ethernet PortSetting Ethernet Port Broadcast Suppression Ratio Set Flow Control for Ethernet Port Adding the Ethernet Port to a Vlan Setting the Link Type for an Ethernet PortSetting Ethernet Port Broadcast Suppression Ratio Set Link Type for Ethernet Port Adding the Ethernet Port to Specified VLANs Setting the Default Vlan ID for Ethernet PortSet the Default Vlan ID for the Ethernet Port Displaying and Debugging Ethernet Ports Copying a Port Configuration to Other PortsCopying a Port Configuration to Other Ports Display and Debug Ethernet Port Port Configuration Configuring LinkExample Configuring the Default Vlan ID of the Trunk Port Aggregation Manual and Static Lacp Aggregation Port Configuration Dynamic Lacp aggregation Enabling or Disabling Lacp at a Port Lacp enableUndo lacp enable Enabling/Disabling Lacp at a Port Add/Delete Ethernet Port to/from Aggregation Group Creating or Deleting an Aggregation GroupCreate or Delete an Aggregation Group Configuring System Priority Setting or Deleting an Aggregation Group DescriptorBy default, an aggregation group has no descriptor By default, system priority is Displaying and Debugging Link Aggregation Default value for port priority isConfigure Port Priority Display and Debug Link Aggregation Example Link Aggregation Configuration Networking For Link Aggregation Configuring Link Aggregation Port Configuration Vlan Overview Configuring VLANsConfiguring GARP/GVRP Vlan Overview Specifying the Broadcast Suppression Ratio for a Vlan Setting the Broadcast Suppression Ratio for VlanCreating or Deleting a Vlan Creating or Deleting a Vlan Specifying or Removing Vlan Interfaces Setting or Deleting the Vlan Description Character StringBy default, the string parameter is null Create a Vlan before creating an interface for it Example Vlan Configuration Displaying and Debugging a Vlan Adding Ethernet Ports to a Vlan By default, the system adds all ports to VLAN1Adding Ethernet Ports to a Vlan Creating and Deleting a Vlan Protocol Type Creating and Deleting a Vlan Protocol TypeAdd Ethernet1/0/1 and Ethernet1/0/2 to VLAN2 SW7750-vlan2port ethernet1/0/1 to ethernet1/0/2 Example Protocol-Based Vlan ConfigurationAdd Ethernet1/0/3 and Ethernet1/0/4 to VLAN3 SW7750-vlan3port ethernet1/0/3 to ethernet1/0/4 SW7750-vlan2protocol-vlan ip Configure the protocol Vlan on port G1/0/1SW7750-vlan2protocol-vlan ? SW7750int g1/0/1 Configure port G1/0/3 as Vlan 3 and port G1/0/2 as Vlan Vlan and multicast addresses Setting the Garp Timers Setting the Garp Timers Displaying and Debugging Garp Display and Debug Garp Enabling or Disabling Global Gvrp By default, Gvrp is disabled on a portSetting the Gvrp Registration Type Enabling or Disabling Port Gvrp Setting the Gvrp Registration Type By default, the Gvrp registration type is normalExample Gvrp Configuration Example Displaying and Debugging Gvrp Create VLANs Enable Gvrp globallyEnable Gvrp on the trunk port Configuring IP Address Configure the Host Name and the Corresponding IP Address Configure IP Address and HostName for a HostConfiguring the IP Address of the Vlan Interface Subnet and Mask Displaying and Debugging an IP Address Example Configuring an IP AddressConfigure IP Address for a Vlan Interface Display and Debug IP Address Example IP Address Resolution Configure the IP address for Vlan interfaceAddress Configuration Enter Vlan interface Manually Adding/Deleting Static ARP Mapping Entries Manually Adding/Deleting Static ARP Mapping EntriesLearning Gratuitous ARPs Learning Gratuitous ARPs Displaying and Debugging ARP Configuring the Dynamic ARP Aging TimerDhcp Relay Dhcp-server groupNo ip ipaddress1 Configuring a Dhcp Server IP Address in a Dhcp Server GroupConfigure/Delete the IP Address of the Dhcp Server Ipaddress2 Enabling/Disabling Dhcp Security Features Configuring the Dhcp Server Group for the Vlan InterfaceConfiguring the Address Table Entry Configure/Delete the Address Table Entry Example Configuring Dhcp Relay Displaying and Debugging Dhcp Relay SW7750display dhcp-server Show the configuration of Dhcp server groups in User viewRelay Configuration Dynamically SW7750display dhcp-server interface vlan-interface IP Performance Attributes Configure Whether to Forward L3 Broadcast Packets Display and Debug IP Performance SW7750terminal debugging SW7750debugging tcp packet SW7750terminal debugging SW7750debugging tcp transact Network Protocol Operation IP Routing Protocol Operation About Hops Routing Table Individual static routes can be different Static RoutesUnreliable source Routes Shared Between Routing Protocols Configuring a Static Route Default RouteConfiguring a Static Route Parameters are explained as follows IP address and mask Configuring a Default RouteConfiguring a Default Route Transmitting interface or next hop address Deleting All Static Routes Example Typical Static Route ConfigurationDisplaying and Debugging Static Routes Displaying and Debugging the Routing Table Configure the static route for Ethernet Switch C Configure the static route for Ethernet Switch aConfigure the static route for Ethernet Switch B Enabled, but the IP packets cannot be forwarded normally RIP Network or host is unreachable Rip Enabling RIP and Entering the RIP ViewEnabling RIP and Entering the RIP View Undo rip Enabling the RIP Interface By default, RIP is not enabledConfiguring Unicast RIP Messages Specifying the RIP Version Configuring RIP Timers Specifying RIP Version of the Interface Configuring Zero Field Check of the Interface Packet Configuring RIP-1 Zero Field Check of the Interface PacketBy default, RIP-1 performs zero field check on the packet Specifying the Operating State of the Interface Setting RIP-2 Packet Authentication By default, the router receives the host routeBy default, RIP-2 uses the route aggregation function Disabling Host Route Setting RIP-2 Packet Authentication Configuring Split HorizonBy default, split horizon of the interface is enabled Configuring Split Horizon Setting the RIP Preference Configuring the Default Cost for the Imported RouteBy default, the cost value for the RIP imported route is By default, the preference of RIP is Displaying and Debugging RIP Configuring Route FilteringConfiguring RIP to Filter Routes Configure RIP on Switch B Example Typical RIP ConfigurationConfigure RIP on Switch a Configure RIP on Switch C Advertise, receive, and import the route information IP Routing PolicyInformation that meets its conditions IP Prefix Defining a Route Policy IP PrefixDefining a Route Policy Permit deny node Defining If-match Conditions By default, no matching is performedDefining If-match Clauses for a Route Policy Defining Apply Clauses Configuring Importing Routes of Other ProtocolsDefining Apply Clauses for a Route Policy Defining IP Prefix Configuring for Filtering Received RoutesConfiguring Filtering for Received Routes Defining Prefix-list Displaying and Debugging the Routing Policy Configuring for Filtering Distributed RoutesConfiguring Filtering of Distributed Routes Displaying and Debugging the Route Policy Setting the Safety Value for Switch Memory Configuring Route CapacitySetting the Lower Limit for Switch Memory Setting the Lower Limit of the Ethernet Switch Memory Setting the Lower Limit and the Safety Value Simultaneously Setting the Safety Value of the Ethernet Switch Memory Displaying and Debugging Route Capacity Operation Command Enable automatic recovery of disconnectedMemory auto-establish enable Displaying and Debugging Route Capacity IP Routing Protocol Operation Multicast Protocol Comparison Between the Unicast and Multicast Transmission Ranges and Meanings of Class D Addresses Ranges and meanings of Class D addresses are shown in TableEthernet Multicast MAC Addresses Reserved Multicast Address List Internet Group Management Protocol Igmp Multicast Routing Protocol PIM-SM Protocol-Independent Multicast Sparse Mode RPF Reverse Path Forwarding Undo multicast routing-enable By default, multicast routing is disabledMulticast routing-enable Enabling Multicast Clearing MFC Forwarding Entries or Statistic Information Configuring the Multicast Route LimitBy default, the multicast route-limit is Display and Debug Common Multicast Configuration Configuring IgmpDisplaying and Debugging Common Multicast Configuration Participating in multicast must implement Igmp Specific group query Default is Igmp Version By default, Igmp is not enabledConfiguring the Igmp Version Enabling Igmp on an Interface Seconds By default, the interval is 1 secondIgmp lastmember-queryinterval Undo igmp Configure a Router to Be a Member of a Group Configuring the Limit of Igmp Groups on an InterfaceConfiguring a Router to be a Member of a Group Configuring the Igmp Query Message Interval By default, a router does not join a multicast groupLimiting Access to IP Multicast Groups Default interval is 60 seconds Configure the Igmp Querier Present Timer Configuring the Igmp Querier Present TimerConfiguring the Maximum Query Response Time Configure the Maximum Query Response Time Displaying and Debugging Igmp Display and Debug Igmp Igmp Snooping Implement Igmp Snooping Multicast Packet Transmission With Igmp Snooping Implementing Igmp Snooping Enabling/Disabling Igmp Snooping Configure Router Port Aging TimeConfigure Router Port Aging Time By default, the maximum response time is 10 seconds By default, the port aging time is 260 secondsConfiguring Maximum Response Time Configure Aging Time of Multicast Group Member Display the status of Gmrp Example Igmp Snooping ConfigurationEnable Igmp Snooping if it is disabled Multicast Protocol Assert Mechanism Diagram Enabling PIM-DM See Configuring Common Multicast onConfiguring the Interface Hello Message Interval Entering PIM View Configuring the Filtering of PIM Neighbors Configuring the Filtering of Multicast Source/GroupPerform the following configuration in the PIM view Configure Hello Message Interval on an Interface Displaying and Debugging PIM-DM Displaying and Debugging PIM-DM Enable the multicast routing protocol Example PIM-DM ConfigurationConfiguration procedure Enable PIM-DM Neighbor discovery mechanism is the same as that of PIM-DM Build the RP shared tree RPT Configure BSRs Preparing to ConfigureConfigure Candidate RPs Configure Static RP Enabling PIM-SM Refer to Configuring Common Multicast onRefer to Configuring Igmp on Enabling PIM-SM Setting the PIM-SM Domain Border Setting the PIM-SM Domain BorderConfiguring Candidate-BSRs Pim bsr-boundary Configuring Candidate-BSRs Configuring Candidate-RPsConfiguring Static RP Configuring Candidate-RPs Configuring RP to Filter the Register Messages Sent by DR See Configuring PIM-DMonConfiguring the Filtering of PIM Neighbor Configuring the Interface Hello Message Interval Bsr-policy acl-number Limiting the Range of Legal BSRLimiting the Range of Legal C-RP Undo bsr-policy Displaying and Debugging PIM-SM Clearing Multicast Route Entries from PIM Routing TableClearing PIM Neighbors Clearing Multicast Route Entries from PIM Routing Table Configure Switch a Enable PIM-SM Execute the debugging command in user view to debug PIM-SMExample Configuring PIM-SIM Display and Debug PIM-SM Configure the C-RP Configure Switch B Enable PIM-SMConfigure the C-BSR Configure PIM domain border Multicast in Vlan Configure Switch C Enable PIM-SMInformation dynamically registered by other switches Enabling/Disabling Gmrp on the Port Enable/Disable Gmrp GloballyExample Configuring Gmrp Displaying and Debugging Gmrp Enable Gmrp on the port Configure LSB Enable Gmrp globally Hardware ACL OverviewFiltering or Classifying Quantitative Limitation to the ACL Value range Maximum Be done in sequence Configuring ACLsConfiguring the Time Range Define an Advanced ACL Defining a Basic ACLBasic ACL is defined by numbers from 2000 to Define Basic ACL Define Advanced ACL Perform the following configuration in designated viewDefining a Layer-2 ACL Define Layer-2 ACL Displaying and Debugging an ACL Activate ACL ACL Configuration Examples Access Control Activate ACL Activate the traffic-of-payserver ACL Select ACL mode Select ip-based ACL modeDefine the work time range Set the time range 800 to Define the time range Define time range 800 to Define the rules for packet with source IP address Configuring QoSSelect ACL mode Select link-based ACL mode Activate ACL Activate the ACL traffic-of-host Traffic Classification Traffic refers to all packets passing through a switchTraffic Bandwidth Assurance Packet FilterTraffic Policing Port Traffic Limit Traffic Mirroring Traffic Counting Operation Command Set port priority Setting Port PrioritySetting Port Priority Restore the default priority Undo priority Setting Port Mirroring Setting Port MirroringSetting Queue Scheduling By default, the switch selects the default mapping Configure the COS local-precedence mapping tableRestore the default mapping Mapping Between Dscp Priority Levels and Outbound Queues Configuring the Traffic Limit Configuring the Traffic LimitConfiguring the Priority for Queue Scheduling Entering QoS View Setting Traffic Redirection Setting Line LimitSetting Traffic Bandwidth Setting the Line Rate Relabeling the Priority Level Configuring the RED OperationConfigure RED Operation Relabeling the Priority Level Displaying and Debugging QoS Configuring Traffic StatisticsConfiguring Traffic Statistics Display and Debug QoS Display priority-trust Traffic Bandwidth Traffic StatisticsTraffic Limit and Line Rate Port Mirroring Define the traffic-of-payserver rule in the advanced ACLSet traffic limit for the wage server Enter QoS view SW7750acl number Priority Relabeling Configuration ExampleDefine traffic classification rules for PC1 packets Packet Redirection Rule 0 interface gigabitetherent7/0/8 View the configuration with the display commandOther interface units support only SP algorithm SW7750queue-scheduler wrr 5 5 10 10 15 15 9 Define traffic rules for the packets of IP address Traffic Bandwidth Traffic Statistics Traffic Bandwidth Control Configuring ACLSecurity, see System Access Define traffic rules for PC1 packets Example Controlling Telnet Users with ACL Defining an ACLImporting an ACL Defining a Basic ACL Define a Numbered Basic ACL Call an ACLImporting an ACL to Control Snmp Users Read-view read-view write-view Authentication privacy read-viewExample Controlling Snmp Users with an ACL Snmp-agent group v3 group-name Import the basic ACLs QOS/ Operation Configuring STP STP Overview Algorithm Illustrates the network Configuring STP STP Operation Final Stabilized Spanning Tree Mstp Overview Internal Spanning Tree IST MST RegionVlan Mapping Table Common Spanning Tree CST Common Root Bridge Multiple Spanning Tree Instance MstiMsti Region root Boundary port Cist calculation Configuring MstpMstp Principles Msti calculation Entering MST region view Stp region-configurationUndo stp Region-configuration Enter MST Region View Root Switch Configuring the MST RegionPerform the following configuration in MST region view Configure the MST Region for a Switch Specify the Switch as Primary or Secondary Root Switch Configure the Priority for a Switch By default, the switch priority isConfigure the Mstp Running Mode Configure the Max Hops in an MST Region Configure the Switching Network Diameter Configure the Time Parameters of a Switch Configure the Max Transmission Speed on a Port Configuring in system viewConfiguring in Ethernet port view Port Configure a Port as an Edge Port or a Non-edge Port Instance instance-id cost Configure the Path Cost of a PortSpecify the Standard To BeFollowed in Path Cost Calculation Stp instance instance-id cost Stp pathcost-standard Calculates the default Path Cost for the connectedLink Restore the default standard to be used Dot1d-1998 dot1t legacy Priority priority Configure the Port PriorityInstance instance-id port Stp instance instance-idport Configuring the Port Connection with Point-to-Point Link Configure the Port Connection With the Point-to-point Link Security Function Configure the mCheck Variable of a PortVariable of a Port Mcheck Configure the Switch Security Function Device Enable/Disable Mstp on a DeviceEnable/Disable Mstp on a Port Snooping Configuring DigestDigest Snooping Configure digest snooping Prerequisites Ieee 802.1x Authentication Process Implement 802.1x on Ethernet Switch Enabling/Disabling Setting the Port Access Control ModeSetting Port Access Control Method Enabling Dhcp to Launch Authentication Checking the Users that Log on the Switch by ProxySetting Number of Users on a Port Set to Enable Dhcp to Launch Authentication Configuring Timers Configuring the Authentication Method for 802.1x UsersSetting the Maximum Retransmission Times Enable/Disable a Quiet-Period Timer Enabling/Disabling Quiet-Period TimerExample 802.1x Configuration Displaying and Debugging SW7750radius scheme radius1 SW7750dot1x interface ethernet 1/0/2SW7750dot1x port-method macbased interface ethernet 1/0/2 Protocols ImplementingAAA and Radius Network security management Radius Creating/Deleting an ISP Domain Configuring AAAImplementing AAA/RADIUS on Ethernet Switch Create/Delete ISP Domain Configuring Relevant Attributes of an ISP DomainConfigure Relevant Attributes of ISP Domain Creating a Local User By default, there is no local user in the systemSetting Attributes of a Local User Radius Protocol Disconnecting a User by ForceBy default, no online user will be disconnected by force Radius server type, etc Undo radius scheme Creating/Deleting a Radius Server GroupCreate/Delete a Radius Server Group Setting the IP Address and Port Number of Radius Server Set IP Address and Port Number of Radius Server By default, timeout timer of Radius server is 3 seconds Setting the Radius Packet Encryption KeySetting the Response Timeout Timer of Radius Server Setting Retransmission Times of the Radius Request Packet Enabling the Selection of the Radius Accounting Option Setting a Real-time Accounting IntervalEnable the Selection of the Radius Accounting Option Set Retransmission Times of Radius Request Packet Enabling/Disabling Stop Accounting Request Buffer By default, minute is set to 12 minutesSetting Maximum Times of Real-time Accounting Request Recommended Ratio of Minute to Number of Users Setting Radius Server State Setting the Supported Type of Radius ServerBy default, the Radius server type is standard Enable/Disable Stopping Accounting Request Buffer Set the Unit of Data Flow Transmitted to Radius Server Setting Username Format Transmitted to Radius ServerSet Radius Server State Setting the Timers of the Radius Server Configuring a Local Radius Server GroupConfiguring Source Address for Radius Packets Sent by NAS Setting the Response Timeout Timer of the Radius Server 229 Hwtacacs configuration tasks include III. Configure the Radius Server Response Timer35 Configure the Radius server response timer 36 Hwtacacs configuration Configuring Hwtacacs AAA and Radius Operation Configuring Hwtacacs Perform the following configuration in Hwtacacs view Configuring Hwtacacs Interval is in minutes and must be a multiple Setting Tacacs Server TimersDefault response timeout timer is set to 5 seconds RADIUS, DisplayingDebugging the AAA Hwtacacs Protocols Examples Remote Radius Server Configure the association between domain and Radius Configure the domainConfigure Radius scheme Authentication at a Configure name of the delivered Vlan Configure a Hwtacacs schemeConfigure Vlan delivery mode as string Associate the domain with the Hwtacacs Radius packet cannot be transmitted to Radius server ConfigurationsUser authentication/authorization always fails AAA and Radius Operation Managing the MAC Address Table File SystemFile System Managing Devices File Operation Mode of the File SystemPerform the following operation in system view File System Operation Display the working directory in the flash Example File System OperationFormat the flash Create a directory named test Erasing the Configuration Files from Flash Memory Perform the following configuration in all viewsSaving the Current Configuration Configure the FTP Server Authentication and Authorization Configuring the FTP Server Authentication and AuthorizationEnable/Disable FTP Server Enabling and Disabling the FTP Server Displaying and Debugging the FTP Server Configuring FTP Server ParametersBy default, the FTP server connection timeout is 30 minutes Introduction to FTP Client Downloading Files with Tftp Configuring the File Transmission ModeBy default, Tftp transmits files in binary mode Uploading Files with Tftp Setting MAC Address Table Entries Disabling or Enabling MAC Address Learning on a Port By default, the MAC address learning function is enabledDisabling or Enabling Global MAC Address Learning Displaying and Debugging the MAC Address Table Setting MAC Address Aging TimeSetting the MAC Address Aging Time for the System Displaying and Debugging MAC Address Table Display the MAC address configurations in all views Example Configuring MAC Address Table ManagementEnter the system view of the switch Add a MAC address specify the native VLAN, port and state Resetting a Slot Is booted Perform the following configuration in user viewUpgrading BootROM If you input reboot only, the whole system will be reset Maintaining Debugging System Setting the Slot Temperature LimitSetting the Backboard View Setting the Time Zone Setting the System NameSetting the System Clock Setting Daylight Saving Time Setting Daylight Saving Time Perform this command in user viewBy default, daylight saving time is not set Display Commands of the System Displaying Diagnostic Information Enabling and Disabling Debugging Tracert Command Testing Tools forFollowing sections Ping Tracert Command Ping Timeout host Tracert CommandOperation Command Trace a route Tracert -f first-TTL -m Enabling and Disabling the Logging Function Setting the Output Channel of the LogEnable/Disable the Logging Function Numbers and Names of the Channels for Log Output Defining the Log Filtering RulesLog Output Syslog-Defined Severity Define the Filtering Rules of the Channels Configuring the Snmp Timestamp Output FormatConfiguring the Snmp Timestamp Output Format Enable Rstp module debugging Configuring the Info-center LoghostExample Log Configuration SW7750 security messages Displaying and Debugging the Syslog Function Displaying and Debugging the Syslog Function Architecture of the MIB Tree MIB Attribute MIB Content References Setting the Community NameMIBs Supported by the Ethernet Switch Setting the Destination Address of a Trap Setting the Destination Address of a TrapSetting the Community Name Enabling and Disabling the Snmp Agent to Send a Trap Setting Snmp Information Setting the Lifetime of the Trap MessageBy default, the lifetime of a trap message is 120 seconds By default, syslocation is specified as Marlborough MA Setting and Deleting an Snmp Group Setting and Deleting an Snmp GroupSetting the Source Address of the Trap Setting the Source Address of the Trap Creating and Updating View Information or Deleting a View Creating and Updating View Information or Deleting a ViewAdding and Deleting a User to or from an Snmp Group Displaying and Debugging Snmp Enabling and Disabling Transmission of Trap InformationDisabling the Snmp Agent Enter the system view Example Snmp ConfigurationOperation Command Display the contact character string Set the community name, group name, and user Used network management standards Networks Adding and Deleting an Entry to or from the Event Table Adding and Deleting an Entry to or from the Alarm TableAdding or Delete an Entry to or from the Alarm Table Add or Delete an Entry to or from the Event Table Add or Delete an Entry to or from the Statistics Table Configure Rmon Displaying the Rmon ConfigurationExample Rmon Configuration View the configurations in user view NTP Configuring NTP Operating Mode Authentication-keyid keyid Configuring NTP Time ServerNtp-service unicast-server Undo ntp-service unicast-server Configuring NTP Broadcast Server Mode Perform the following configurations in Vlan interface viewConfiguring NTP Peer Mode Configuring NTP Multicast Client Mode Configuring NTP Broadcast Client ModeConfiguring NTP Multicast Server Mode Setting the Specified Key to Be Reliable Configuring NTP ID AuthenticationSetting the NTP Authentication Key Key number key-numberranges from 1 to Setting the NTP Master Clock Designating an Interface to Transmit NTP Message Displaying and Debugging NTP Setting the Authority to Access a Local SwitchSetting Maximum Local Sessions Configure Ethernet Switch SW77502 Enter system view Example Configuring NTP ServersConfigure the Switch SW77501 Enter system view Set the local clock as the NTP master clock at stratum SW77502display ntp-service status Example Configuring NTP Peers Configure Ethernet Switch SW77504 Enter system view SW77504display ntp-service status SW77504display ntp-service sessions Enter Vlan-interface2 view Example Configuring NTP Broadcast ModeConfigure Ethernet Switch SW77501 Enter system view Set it as broadcast server # Set the local clock as a master NTP clock at stratum Example Configuring NTP Multicast ModeConfigure Ethernet Switch SW77503 Enter system view Set it as a multicast server Example Configuring Authentication-Enabled NTP Server Mode SW77501ntp-service reliable authentication-keyid Configure the key as reliableSW77501ntp-service authentication enable System Management