Manuals / Brands / Computer Equipment / Switch / Accton Technology / Computer Equipment / Switch

Accton Technology ES3526XA, ES3552XA 3-79, Configuring MAC Address Filters

1 512

Download 512 pages, 5.86 Mb

User Authentication

3-79

3

CLI – This example displays all entries currently in the secure MAC address table.

Configuring MAC Address Filters

MAC address filters are used to specify MAC addresses to be excluded from

network access authentication. MAC addresses in a filter are not authenticated by a

RADIUS server when seen on a port, the addresses are immediately added to the

secure MAC address table.

MAC address filters must first be created and assigned a filter ID, then the filter can

be applied to a port interface. Multiple MAC addresses can be included in a filter, but

only one filter can be applied to a port.

Command Attributes

•Query – Display all current MAC address filters or a specific filter configuration.

•Add/Remove – Specify a filter ID and MAC address to create a filter. Specify the

same filter ID with other MAC addresses to add them to the filter. Select an entry

in the displayed list and click Remove to delete a MAC address from a filter.

•Filter ID – Specifies a filter to configure. (Range: 1 -64)

•MAC Address – Specifies a single MAC address to add to a filter.

Web – Click Security, Network Access, MAC Filter Configuration.

Figure 3-46 Network Access MAC Filter Configuration

Console#show network-access mac-address-table 4-100

---- ----------------- --------------- --------- -------------------------

Port MAC-Address RADIUS-Server Attribute Time

---- ----------------- --------------- --------- -------------------------

1/1 00-00-01-02-03-04 172.155.120.17 Static 00d06h32m50s

1/1 00-00-01-02-03-05 172.155.120.17 Dynamic 00d06h33m20s

1/1 00-00-01-02-03-06 172.155.120.17 Static 00d06h35m10s

1/3 00-00-01-02-03-07 172.155.120.17 Dynamic 00d06h34m20s

Console#

Contents

Main Page Page Page Contents Page Page Page Page Page Page Page Page Page Page Page Page Page Tables Page Page Page Figures Page Page Page 1-1 Chapter 1: Introduction Key Features 1-2 Description of Software Features Description of Software Features 1-3 1-4 System Defaults 1-5 System Defaults 1-6 Page Page 2-1 Chapter 2: Initial Configuration Connecting to the Switch Configuration Options 2-2 Required Connections 2-3 Remote Connections Basic Configuration Console Connection 2-4 Setting Passwords Setting an IP Address Manual Configuration 2-5 Dynamic Configuration 2-6 Enabling SNMP Management Access Community Strings (for SNMP version 1 and 2c clients) 2-7 Trap Receivers 2-8 Configuring Access for SNMP Version 3 Clients Saving Configuration Settings Managing System Files 2-9 Managing System Files Page 3-1 Chapter 3: Configuring the Switch Using the Web Interface 3-2 Navigating the Web Browser Interface Home Page Panel Display 3-3 Configuration Options Panel Display 3-4 Main Menu Main Menu 3-5 3-6 Main Menu 3-7 3-8 Page 3-10 Basic Configuration Displaying System Information 3-11 Displaying Switch Hardware/Software Versions 3-12 3-13 Displaying Bridge Extension Capabilities 3-14 Setting the Switchs IP Address Page 3-16 Using DHCP/BOOTP 3-17 DHCP Relay and Option 82 Information 3-18 3-19 Managing Firmware Page 3-21 3-22 Saving or Restoring Configuration Settings Page 3-24 Console Port Settings 3-25 3-26 Telnet Settings 3-27 3-28 Configuring Event Logging System Log Configuration 3-29 3-30 Remote Log Configuration 3-31 Displaying Log Messages 3-32 Sending Simple Mail Transfer Protocol Alerts Page 3-34 Resetting the System 3-35 Setting the System Clock Configuring SNTP 3-36 Configuring NTP 3-37 Figure 3-22 NTP Client Configuration 3-38 Setting the Time Zone Simple Network Management Protocol Simple Network Management Protocol 3-39 3-40 Enabling the SNMP Agent Setting Community Access Strings Specifying Trap Managers and Trap Types 3-41 Specifying Trap Managers and Trap Types 3-42 3-43 Configuring SNMPv3 Management Access 3-44 Setting a Local Engine ID Specifying a Remote Engine ID 3-45 Configuring SNMPv3 Users 3-46 3-47 Configuring Remote SNMPv3 Users Page 3-49 Configuring SNMPv3 Groups 3-50 Table3-5 Supported Notifi cation Messages 3-51 Table3-5 Supported Notificat ion Messages (Continued) 3-52 3-53 Setting SNMPv3 Views 3-54 User Authentication Configuring User Accounts 3-55 3-56 Configuring Local/Remote Logon Authentication 3-57 3-58 3-59 Configuring HTTPS 3-60 Replacing the Default Secure-site Certificate 3-61 Configuring the Secure Shell 3-62 3-63 Generating the Host Key Pair 3-64 3-65 Configuring the SSH Server 3-66 Configuring Port Security 3-67 3-68 Configuring 802.1X Port Authentication 3-69 Displaying 802.1X Global Settings 3-70 Configuring 802.1X Global Settings Configuring Port Settings for 802.1X 3-71 3-72 3-73 Displaying 802.1X Statistics This switch can display statistics for dot1x protocol exchanges for any port. 3-74 MAC Address Authentication 3-75 Configuring the MAC Authentication Reauthentication Time 3-76 Configuring MAC Authentication for Ports 3-77 Displaying Secure MAC Address Information 3-78 3-79 Configuring MAC Address Filters 3-80 Filtering Addresses for Management Access 3-81 3-82 Access Control Lists Configuring Access Control Lists 3-83 Setting the ACL Name and Type 3-84 Configuring a Standard IP ACL 3-85 Configuring an Extended IP ACL 3-86 3-87 Configuring a MAC ACL 3-88 Binding a Port to an Access Control List 3-89 Port Configuration Displaying Connection Status 3-90 3-91 Configuring Interface Connections 3-92 3-93 Creating Trunk Groups 3-94 Statically Configuring a Trunk } active links statically configured 3-95 Enabling LACP on Selected Ports } } 3-96 3-97 Configuring LACP Parameters Page 3-99 You can display statistics for LACP protocol messages. Displaying LACP Port Counters 3-100 CLI The following example displays LACP counters for port channel 1. 3-101 Displaying LACP Settings and Status for the Local Side 3-102 Figure 3-59 LACP - Port Internal Information 3-103 Displaying LACP Settings and Status for the Remote Side 3-104 3-105 Setting Broadcast Storm Thresholds 3-106 Configuring Port Mirroring 3-107 Configuring Rate Limits Rate Limit Granularity 3-108 Rate Limit Configuration 3-109 Showing Port Statistics 3-110 3-111 3-112 Page 3-114 Address Table Settings Setting Static Addresses Address Table Settings 3-115 Displaying the Address Table Page 3-117 Changing the Aging Time Spanning Tree Algorithm Configuration 3-118 x x 3-119 Displaying Global Settings Region R 3-120 3-121 3-122 This command displays global STA settings, followed by settings for each port CLI . Note: Configuring Global Settings 3-124 Page Page 3-127 Displaying Interface Settings x x 3-128 3-129 3-130 Configuring Interface Settings 3-131 3-132 Configuring Multiple Spanning Trees 3-133 3-134 Figure 3-73 MSTP VLAN Configuration CLI This displays STA settings for instance 1, followed by settings for each port. 3-135 CLI This example sets the priority for MSTI 1, and adds VLANs 1-5 to this MSTI. 3-136 Displaying Interface Settings for MSTP 3-137 Configuring Interface Settings for MSTP 3-138 3-139 VLAN Configuration IEEE 802.1Q VLANs Assigning Ports to VLANs 3-140 3-141 Forwarding Tagged/Untagged Frames 3-142 Enabling or Disabling GVRP (Global Setting) Displaying Basic VLAN Information 3-143 Displaying Current VLANs 3-144 3-145 Creating VLANs 3-146 Figure 3-79 VLAN Static List - Creating VLANs CLI This example creates a new VLAN. 3-147 Adding Static Members to VLANs (VLAN Index) 3-148 Adding Static Members to VLANs (Port Index) 3-149 3-150 Configuring VLAN Behavior for Interfaces 3-151 3-152 Private VLANs 3-153 Displaying Current Private VLANs 3-154 Configuring Private VLANs Associating VLANs 3-155 Displaying Private VLAN Interface Information 3-156 Configuring Private VLAN Interfaces 3-157 3-158 Class of Service Configuration Layer 2 Queue Settings Setting the Default Priority for Interfaces 3-159 Figure 3-88 Port Priority Configuration CLI This example assigns a default priority of 5 to port 3. 3-160 Mapping CoS Values to Egress Queues 3-161 Figure 3-89 Traffic Classes CLI The following example shows how to change the CoS assignments. 3-162 Selecting the Queue Mode 3-163 Setting the Service Weight for Traffic Classes 3-164 Layer 3/4 Priority Settings Mapping Layer 3/4 Priorities to CoS Values Selecting IP Precedence/DSCP Priority 3-165 Mapping IP Precedence 3-166 Mapping DSCP Priority 3-167 3-168 Mapping IP Port Priority 3-169 Mapping CoS Values to ACLs 3-170 Multicast Filtering 3-171 Layer 2 IGMP (Snooping and Query) Configuring IGMP Snooping and Query Parameters 3-172 3-173 Enabling IGMP Immediate Leave 3-174 Displaying Interfaces Attached to a Multicast Router 3-175 Specifying Static Interfaces for a Multicast Router 3-176 Displaying Port Members of Multicast Services 3-177 Assigning Ports to Multicast Services 3-178 IGMP Filtering and Throttling Enabling IGMP Filtering and Throttling 3-179 Configuring IGMP Filter Profiles 3-180 3-181 Configuring IGMP Filtering and Throttling for Interfaces 3-182 3-183 Multicast VLAN Registration 3-184 Configuring Global MVR Settings 3-185 Displaying MVR Interface Status 3-186 Displaying Port Members of Multicast Groups 3-187 Configuring MVR Interface Status 3-188 Assigning Static Multicast Groups to Interfaces 3-189 Configuring Domain Name Service Configuring General DNS Service Parameters 3-190 3-191 3-192 Configuring Static DNS Host to Address Entries 3-193 Displaying the DNS Cache 3-194 Switch Clustering Cluster Configuration Switch Clustering 3-195 Cluster Member Configuration 3-196 Cluster Member Information Switch Clustering 3-197 Cluster Candidate Information Page 4-1 Chapter 4: Command Line Interface Using the Command Line Interface Accessing the CLI Console Connection Telnet Connection 4-2 4-3 Entering Commands Keywords and Arguments Minimum Abbreviation Command Completion Getting Help on Commands Showing Commands The command show interfaces ? will display the following information: 4-5 Partial Keyword Lookup Negating the Effect of Commands Using Command History Understanding Command Modes 4-6 Exec Commands 4-7 Configuration Commands 4-8 Command Line Processing Command Groups 4-9 Command Groups The system commands can be broken down into the functional groups show n below Page 4-11 Line Commands line 4-12 login 4-13 password 4-14 timeout login response exec-timeout 4-15 password-thresh 4-16 silent-time databits 4-17 parity 4-18 speed stopbits 4-19 disconnect show line 4-20 General Commands enable General Commands 4-21 disable 4-22 configure show history General Commands 4-23 reload end 4-24 exit quit 4-25 System Management Commands Device Designation Commands prompt 4-26 hostname User Access Commands 4-27 username 4-28 enable password 4-29 IP Filter Commands management 4-30 show management 4-31 Web Server Commands ip http port ip http server 4-32 ip http secure-server 4-33 ip http secure-port 4-34 Telnet Server Commands ip telnet port ip telnet server 4-35 Secure Shell Commands 4-36 4-37 ip ssh server 4-38 ip ssh timeout ip ssh authentication-retries 4-39 ip ssh server-key size delete public-key 4-40 ip ssh crypto host-key generate ip ssh crypto zeroize 4-41 ip ssh save host-key show ip ssh 4-42 Example show ssh This command displays the current SSH server connections. Command Mode 4-43 show public-key 4-44 Event Logging Commands logging on 4-45 logging history 4-46 logging host logging facility 4-47 logging trap clear logging 4-48 show logging 4-49 show log 4-50 SMTP Alert Commands logging sendmail host 4-51 logging sendmail level 4-52 logging sendmail source-email logging sendmail destination-email 4-53 logging sendmail show logging sendmail 4-54 Time Commands sntp client 4-55 sntp server 4-56 sntp poll show sntp 4-57 ntp client ntp server 4-58 ntp poll 4-59 ntp authenticate ntp authentication-key 4-60 show ntp 4-61 clock timezone 4-62 calendar set show calendar 4-63 System Status Commands show startup-config 4-64 Example Related Commands show running-config (4-65) 4-65 show running-config 4-66 Example Related Commands show startup-config (4-63) 4-67 show system show users 4-68 show version 4-69 Frame Size Commands jumbo frame 4-70 Flash/File Commands copy 4-71 4-72 The following example shows how to copy the running configuration to a startup file. The following example shows how to download a configuration file: 4-73 delete dir 4-74 whichboot 4-75 boot system 4-76 Authentication Commands Authentication Sequence authentication login 4-77 authentication enable 4-78 RADIUS Client radius-server host 4-79 radius-server port radius-server key 4-80 radius-server retransmit radius-server timeout 4-81 show radius-server TACACS+ Client 4-82 tacacs-server host tacacs-server port tacacs-server key 4-83 show tacacs-server 4-84 Port Security Commands port security 4-85 802.1X Port Authentication 4-86 dot1x system-auth-control dot1x default 4-87 dot1x max-req dot1x port-control 4-88 dot1x operation-mode dot1x re-authenticate 4-89 dot1x re-authentication dot1x timeout quiet-period 4-90 dot1x timeout re-authperiod dot1x timeout tx-period show dot1x 4-91 4-92 4-93 4-94 Network Access network-access mode 4-95 network-access max-mac-count 4-96 network-access mac-filter 4-97 network-access port-mac-filter network-access dynamic-vlan 4-98 mac-authentication reauth-time 4-99 clear network-access show network-access 4-100 show network-access mac-filter show network-access mac-address-table 4-101 4-102 Access Control List Commands 4-103 IP ACLs access-list ip 4-104 permit, deny (Standard ACL) 4-105 permit, deny (Extended ACL) 4-106 4-107 show ip access-list ip access-group 4-108 show ip access-group map access-list ip 4-109 show map access-list ip 4-110 MAC ACLs access-list mac 4-111 permit, deny (MAC ACL) 4-112 show mac access-list mac access-group 4-113 show mac access-group map access-list mac 4-114 show map access-list mac 4-115 ACL Information show access-list show access-group 4-116 SNMP Commands 4-117 snmp-server show snmp 4-118 snmp-server community 4-119 snmp-server contact snmp-server location 4-120 snmp-server host 4-121 4-122 snmp-server enable traps 4-123 snmp-server engine-id 4-124 show snmp engine-id 4-125 snmp-server view 4-126 show snmp view snmp-server group 4-127 show snmp group 4-128 snmp-server user 4-129 4-130 show snmp user This command shows information on SNMP users. Command Mode Example Table4-44 show snmp user - display description 4-131 Interface Commands interface 4-132 description speed-duplex 4-133 negotiation 4-134 capabilities 4-135 flowcontrol 4-136 shutdown 4-137 switchport broadcast packet-rate clear counters 4-138 show interfaces status 4-139 show interfaces counters 4-140 show interfaces switchport 4-141 Example This example shows the configuration setting for port 24. 4-142 Mirror Port Commands port monitor Mirror Port Commands 4-143 show port monitor 4-144 Rate Limit Commands rate-limit Rate Limit Commands 4-145 rate-limit granularity show rate-limit 4-146 Link Aggregation Commands 4-147 channel-group 4-148 lacp 4-149 lacp system-priority 4-150 lacp admin-key (Ethernet Interface) 4-151 lacp admin-key (Port Channel) 4-152 lacp port-priority show lacp 4-153 Default Setting Port Channel: all Command Mode Example 4-154 4-155 4-156 Address Table Commands Address Table Commands 4-157 mac-address-table static 4-158 clear mac-address-table dynamic show mac-address-table Address Table Commands 4-159 mac-address-table aging-time show mac-address-table aging-time 4-160 Spanning Tree Commands 4-161 spanning-tree spanning-tree mode 4-162 spanning-tree forward-time 4-163 spanning-tree hello-time 4-164 spanning-tree max-age spanning-tree priority 4-165 spanning-tree pathcost method 4-166 spanning-tree transmission-limit spanning-tree mst-configuration 4-167 mst vlan 4-168 mst priority name 4-169 revision max-hops 4-170 spanning-tree spanning-disabled spanning-tree cost 4-171 spanning-tree port-priority 4-172 spanning-tree edge-port 4-173 spanning-tree portfast spanning-tree link-type 4-174 spanning-tree mst cost 4-175 spanning-tree mst port-priority 4-176 spanning-tree protocol-migration show spanning-tree 4-177 4-178 show spanning-tree mst configuration This command shows the configuration of the multiple spanning tree. Command Mode 4-179 VLAN Commands Editing VLAN Groups vlan database 4-180 vlan 4-181 Configuring VLAN Interfaces interface vlan 4-182 switchport mode switchport acceptable-frame-types 4-183 switchport ingress-filtering 4-184 switchport native vlan 4-185 switchport allowed vlan 4-186 switchport forbidden vlan Displaying VLAN Information 4-187 show vlan 4-188 Configuring Private VLANs 4-189 private-vlan 4-190 private vlan association 4-191 switchport mode private-vlan switchport private-vlan host-association 4-192 switchport private-vlan isolated 4-193 switchport private-vlan mapping show vlan private-vlan 4-194 GVRP and Bridge Extension Commands bridge-ext gvrp GVRP and Bridge Extension Commands 4-195 show bridge-ext switchport gvrp 4-196 show gvrp configuration garp timer GVRP and Bridge Extension Commands 4-197 show garp timer 4-198 Priority Commands Priority Commands (Layer 2) 4-199 queue mode switchport priority default 4-200 queue bandwidth 4-201 queue cos-map 4-202 show queue mode show queue bandwidth 4-203 show queue cos-map 4-204 Priority Commands (Layer 3 and 4) map ip port (Global Configuration) 4-205 map ip port (Interface Configuration) map ip precedence (Global Configuration) 4-206 map ip precedence (Interface Configuration) 4-207 map ip dscp (Global Configuration) map ip dscp (Interface Configuration) 4-208 show map ip port 4-209 show map ip precedence 4-210 show map ip dscp 4-211 Multicast Filtering Commands IGMP Snooping Commands 4-212 ip igmp snooping ip igmp snooping vlan static 4-213 ip igmp snooping version ip igmp snooping immediate-leave 4-214 show ip igmp snooping show mac-address-table multicast 4-215 4-216 IGMP Query Commands (Layer 2) ip igmp snooping querier ip igmp snooping query-count 4-217 ip igmp snooping query-interval 4-218 ip igmp snooping query-max-response-time ip igmp snooping router-port-expire-time 4-219 Static Multicast Routing Commands ip igmp snooping vlan mrouter 4-220 show ip igmp snooping mrouter 4-221 IGMP Filtering and Throttling Commands ip igmp filter (Global Configuration) 4-222 ip igmp profile permit, deny 4-223 range ip igmp filter (Interface Configuration) 4-224 ip igmp max-groups 4-225 ip igmp max-groups action show ip igmp filter 4-226 show ip igmp profile show ip igmp throttle interface 4-227 Multicast VLAN Registration Commands 4-228 mvr (Global Configuration) 4-229 mvr (Interface Configuration) 4-230 show mvr 4-231 4-232 Domain Name Service Commands 4-233 ip host clear host 4-234 ip domain-name 4-235 ip domain-list 4-236 ip name-server ip domain-lookup 4-237 show hosts 4-238 show dns Example This command displays the configuration of the DNS service. Command Mode show dns cache This command displays entries in the DNS cache. Command Mode clear dns cache 4-240 DHCP Commands ip dhcp relay information option DHCP Commands 4-241 ip dhcp relay information policy ip dhcp relay server 4-242 show ip dhcp-relay 4-243 IP Interface Commands ip address 4-244 ip default-gateway 4-245 ip dhcp restart show ip interface 4-246 show ip redirects ping 4-247 4-248 Switch Cluster Commands cluster Switch Cluster Commands 4-249 cluster commander cluster ip-pool 4-250 cluster member rcommand Switch Cluster Commands 4-251 show cluster show cluster members 4-252 show cluster candidates A-1 Appendix A: Software Specifications Software Features Software Specifications A-2 A Management Features Standards Management Information Bases A-3 A Management Information Bases Page B-1 Appendix B: Troubleshooting Problems Accessing the Management Interface TableB-1 Troubleshooting Chart Troubleshooting B-2 B Using System Logs Glossary Page Page Page Page Page Index Index-1 Numerics A B Index-2 G H I J Index-3 Q R S Index-4 T U V W