Accton Technology ES4626, ES4650 8.5.2.1 802.1X Configuration

236

Click Authentication configuration, 802.1X configuration, open 802.1x function

configuration management list, user may configure switch 802.1x function.

8.5.2.1 802.1X Configuration

Click Authentication configuration, 802.1X configuration, 802.1X configuration. Configure

802.1x global configuration:

z 802.1x status – Enable, disable switch 802.1x function. It is equivalent to CLI

command 8.2.2.5.

z Maximum retransmission times of EAP-request/identiry (1-10 second) - Configure

sending EAP-request/MD5 frame maximum times before switch did not receive

suppliant response and restart authentication. It is equivalent to CLI command

8.2.2.7.

z Reauthenticate client periodically ---permit, forbid to make seasonal

re-authentication for suppliant. It is equivalent to CLI command 8.2.2.12.

z Hold down time for authentication failure (1-65535 second) -Configure suppliant

quiet-period status time after authentication failure, the same as CLI command

8.2.2.13.

z Reauthenticate client interval(1-65535 second) - Configure time interval of switch

reauthentication client. It is equivalent to CLI command 8.2.2.14.

z Resending EAP-request/identity interval(1-65535 second) - Configure time interval

of switch retransfer EAP-request/identity frame to suppliant. It is equivalent to CLI

command 8.2.2.15.

z EAP relay authentication mode - Configure switch to adopt EAP relay method to

make authentication; use the “no” command to configure switch to adopt EAP local

terminating method to make authentication. It is equivalent to CLI command

8.2.2.4.

z MAC filtering – Enable, disable switch dot1x address filter function. It is equivalent

to CLI command 8.2.2.6.

Choose 802.1x status as Enable 802.1x, Configure Maximum retransmission times of

EAP-request/identiry as 1, choose Reauthenticate client periodically as Disable

Reauthenticate, Configure Hold down time for authentication failure as 1, Configure

Reauthenticate client interval as 1, Configure Resending EAP-request/identity interval as

1, Choose EAP relay authentication mode as forbid, choose MAC filtering as forbid, Click

Apply button to apply the configuration to switch.

Contents

Main Page Contents 1.1 Management Options ____________________________________________ 12 1.2 Management Interface____________________________________________ 21 2.1 Basic Switch Configuration Commands ___________________________30 2.2 Maintenance and Debug Commands ______________________________37 2.3 Configuring Switch IP Addresses _________________________________53 2.4 SNMP___________________________________________________________ 56 2.5 Switch Upgrade__________________________________________________ 72 2.6 WEB Management _______________________________________________ 90 3.5 WEB Management ______________________________________________ 116 4.1 Introduction to MAC Table_______________________________________ 123 4.2 MAC Table Configuration________________________________________ 126 4.5 MAC Address Function Extension________________________________ 129 4.6 WEB Management ______________________________________________ 137 5.4 VLAN Troubleshooting Help _____________________________________ 160 5.5 WEB Management ______________________________________________ 162 8.1 802.1X Introduction _____________________________________________ 210 6.1 MSTP Introduction______________________________________________ 171 6.2 Configuring MSTP ______________________________________________ 173 8.2 802.1X Configuration____________________________________________ 211 8.5 WEB Management ______________________________________________ 233 9.1 Introduction to ACL_____________________________________________ 239 9.2 ACL configuration ______________________________________________ 240 9.5 Web Management_______________________________________________ 252 10.5 Web Management_____________________________________________ 270 11.3 DHCP Relay Configuration_______________________________________ 284 11.6 WEB Management ______________________________________________ 294 12.1 SNTP Configuration Commands _______________________________ 304 12.4 WEB Management ____________________________________________ 307 13.1 QoS__________________________________________________________ 309 13.2 PBR__________________________________________________________ 345 14.1 Layer3 Interface ______________________________________________ 351 14.2 IP Forwarding ________________________________________________ 353 14.3 ARP__________________________________________________________ 356 15.4 OSPF ________________________________________________________ 389 15.5 Web Management_____________________________________________ 433 16.1 Multicast Protocol Overview ___________________________________447 16.2 Common Multicast Configurations _____________________________ 450 16.3 PIM-DM ______________________________________________________ 451 16.6 IGMP_________________________________________________________ 485 16.7 web Management _____________________________________________ 495 Chapter 1 Switch Management 1.1 Management Options Connect with serial port 1.1.1 Out-of-band Management Page Page 1.1.2 In-band Management 1.1.2.1 Management via Telnet Switch#config Switch(Config)#telnet-user test password 0 test 1.1.2.2 Management via HTTP Switch#config Switch(Config)# username test password 0 test Page 1.2 Management Interface 1.2.1 CLI Interface 1.2.1.1 Configuration Modes 1.2.1.1.1 User Mode 1.2.1.1.2 Admin Mode 1.2.1.1.3 Global Mode 1.2.1.1.3.1 Interface Mode 1.2.1.1.3.2 VLAN Mode 1.2.1.1.3.3 DHCP Address Pool Mode 1.2.1.1.3.4 Route Mode 1.2.1.1.3.5 ACL Mode 1.2.1.2 Configuration Syntax 1.2.1.3 Shortcut Key Support 1.2.1.4 Help function 1.2.1.5 Input verification 1.2.1.5.1 Returned Information: success 1.2.1.5.2 Returned Information: error 1.2.1.6 Fuzzy match support 1.2.2 WEB Interface 1.2.2.1 Main page 1.2.2.2 Interface Panel Chapter 2 Basic Switch Configuration 2.1 Basic Switch Configuration Commands 2.1.1 calendar set 2.1.2 config 2.1.3 enable 2.1.4 disable 2.1.5 enable password 2.1.6 exec timeout 2.1.7 exit 2.1.8 help 2.1.9 ip host 2.1.10 hostname 2.1.11 username password 2.1.12 username nopassword 2.1.13 username access-level 2.1.14 reload 2.1.15 set default 2.1.16 setup 2.1.18 write 2.1.17 language 2.2 Maintenance and Debug Commands 2.2.1 ping 2.2.2 Telnet 2.2.2.1 Introduction to Telnet 2.2.2.2 Telnet Task Sequence 2.2.2.3 Telnet Commands 2.2.2.3.1 monitor 2.2.2.3.2 telnet 2.2.2.3.3 ip telnet server 2.2.2.3.4 telnet-server securityip 2.2.3 SSH 2.2.3.1 Introduction to SSH 2.2.3.2 SSH Server Configuration Sequence 2.2.3.3 SSH Configuration Commands 2.2.3.3.1 ssh-server enable 2.2.3.3.2 ssh-user 2.2.3.3.3 ssh-server timeout 2.2.3.3.4 ssh-server authentication-retries 2.2.3.3.5 ssh-server host-key create rsa 2.2.3.3.6 monitor 2.2.3.4 Typical SSH Server Configuration 2.2.3.5 SSH Monitor and Debug Commands 2.2.3.5.1 show ssh-user 2.2.3.5.2 show ssh-server 2.2.4 traceroute 2.2.5 show 2.2.5.1 show calendar 2.2.5.2 show debugging 2.2.5.3 dir 2.2.5.4 show history 2.2.5.5 show memory 2.2.5.6 show running-config 2.2.5.7 show startup-config 2.2.5.8 show interfaces switchport 2.2.5.9 show tcp 2.2.5.10 show udp 2.2.5.11 show users 2.2.5.12 show version 2.2.6 debug 2.3 Configuring Switch IP Addresses 2.3.1 Configuring Switch IP Addresses Task Sequence 2.3.2 Commands for Configuring Switch IP Addresses 2.3.2.1 ip address 2.3.2.2 ip address bootp 2.3.2.3 ip address dhcp 2.4 SNMP 2.4.1 Introduction to SNMP 2.4.2 Introduction to MIB 2.4.3 Introduction to RMON 2.4.4 SNMP Configuration 2.4.4.1 SNMP Configuration Task Sequence Page 2.4.4.2 SNMP Configuration Commands 2.4.4.2.1 snmp-server 2.4.4.2.2 snmp-server community 2.4.4.2.3 snmp-server enable traps 2.4.4.2.4 snmp-server engineid 2.4.4.2.5 snmp-server user 2.4.4.2.6 snmp-server group 2.4.4.2.7 snmp-server view 2.4.4.2.8 snmp-server host 2.4.4.2.9 snmp-server securityip 2.4.4.2.10 snmp-server SecurityIP enable 2.4.4.2.11 rmon enable 2.4.5 Typical SNMP Configuration Examples 2.4.6 SNMP Troubleshooting Help 2.4.6.1 Monitor and Debug Commands 2.4.6.1.1 show snmp Page 2.4.6.1.2 show snmp status 2.4.6.1.3 show snmp engineid 2.4.6.1.4 show snmp user 2.4.6.1.5 show snmp group 2.4.6.1.6 show snmp view 2.4.6.1.7 show snmp mib 2.4.6.2 SNMP Troubleshooting Help 2.5 Switch Upgrade 2.5.1 BootROM Upgrade Page Page 2.5.2 FTP/TFTP Upgrade 2.5.2.1 Introduction to FTP/TFTP Page 2.5.2.2 FTP/TFTP Configuration 2.5.2.2.1 FTP/TFTP Configuration Task Sequence Page 2.5.2.2.2 FTP/TFTP Configuration Commands 2.5.2.2.3 copyFTP 2.5.2.2.4 dir 2.5.2.2.5 ftp-server enable 2.5.2.2.6 ftp-server timeout 2.5.2.2.7 copyTFTP 2.5.2.2.8 tftp-server enable 2.5.2.2.9 tftp-server retransmission-number 2.5.2.2.10 tftp-server transmission-timeout 2.5.2.3 FTP/TFTP Configuration Examples 10. 1. 1. 1 10. 1. 1. 2 Page Page Page 2.5.2.4 FTP/TFTP Troubleshooting Help 2.5.2.4.1 Monitor and Debug Commands 2.5.2.4.1.1 show ftp 2.5.2.4.1.2 show tftp 2.5.2.4.2 FTP Troubleshooting Help 2.5.2.4.3 TFTP Troubleshooting Help 2.6 WEB Management 2.6.1 Switch Basic Configuration 2.6.1.1 BasicConfig 2.6.1.2 Configure exec timeout 2.6.2 SNMP Configuration 2.6.2.1 SNMP manager configuration 2.6.2.2 TRAP manager configuration Page 2.6.3 Switch Upgrade 2.6.3.1 TFTP client configuration 2.6.3.2 TFTP server configuration 2.6.3.3 FTP client configuration 2.6.3.4 FTP server configuration 2.6.4 Monitor and debug command 2.6.4.1 Debug command 2.6.4.2 Show port Vlan information 2.6.4.3 Other 2.6.5 Switch basic information 2.6.6 Switch on-off configuration 2.6.7 Switch maintenance 2.6.8 Telnet service configuration 2.6.9 username service 2.6.10 Basic host configuration Chapter 3 Port Configuration 3.1 Introduction to Port 3.2 Port Configuration 3.2.1 Network Port Configuration 3.2.1.1 Network Port Configuration Task Sequence Page 3.2.1.2 Ethernet Port Configuration Commands 3.2.1.2.1 Rate-limit 3.2.1.2.2 combo-forced-mode Page 3.2.1.2.3 flow control 3.2.1.2.4 interface ethernet 3.2.1.2.5 loopback 3.2.1.2.6 mdi 3.2.1.2.7 description 3.2.1.2.8 negotiation 3.2.1.2.9 rate-suppression 3.2.1.2.10 shutdown 3.2.1.2.11 speed-duplex 3.2.2 VLAN Interface Configuration 3.2.2.1 VLAN Interface Configuration Task Sequence 3.2.2.2 VLAN Interface Configuration Commands 3.2.2.2.1 interface vlan 3.2.2.2.2 ip address 3.2.2.2.3 shutdown 3.2.3 Port Mirroring Configuration 3.2.3.1 Introduction to Port Mirroring 3.2.3.2 Port Mirroring Configuration Task Sequence 3.2.3.3 Port Mirroring Configuration 3.2.3.3.1 port monitor 3.2.3.4 Port Mirroring Examples 3.2.3.5 Device Mirroring Troubleshooting Help 3.2.3.5.1 Monitor and Debug Commands 3.2.3.5.1.1 show port monitor 3.2.3.5.2 Device Mirroring Troubleshooting Help 3.3 Port Configuration Example 3.4 Port Troubleshooting Help 3.4.1 Monitor and Debug Commands 3.4.1.1 clear counters 3.4.1.2 show interfaces status 3.4.2 Port Troubleshooting Help 3.5 WEB Management 3.5.1 Ethernet port configuration 3.5.1.1 Physical port configuration 3.5.1.2 Bandwidth control 3.5.2 Vlan interface configuration 3.5.2.1 Allocate IP address for L3 port 3.5.2.2 L3 port IP addr mode configuration 3.5.3 Port mirroring configuration 3.5.3.1 Mirror configuration 3.5.4 Port debug and maintenance Page Page Chapter 4 MAC Table Configuration 4.1 Introduction to MAC Table 4.1.1 Obtaining MAC Table PC1 PC4 PC3 PC2 1/5 1/12 4.1.2 Forward or Filter 4.2 MAC Table Configuration 4.2.1 mac-address-table aging-time 4.2.2 mac-address-table static 4.2.3 mac-address-table discard 4.3 Typical Configuration Examples PC1 4.4.1.1 show mac-address-table PC4 PC3 4.4.2 Troubleshooting Help 4.5 MAC Address Function Extension 4.5.1 MAC Address Binding 4.5.1.1 Introduction to MAC Address Binding Page 4.5.1.2.2 MAC Address Binding Configuration Commands 4.5.1.2.2.1 port security 4.5.1.2.2.2 switchport port-security convert 4.5.1.2.2.3 switchport port-security timeout 4.5.1.2.2.4 switchport port-security mac-address 4.5.1.2.2.5 clear port-security dynamic 4.5.1.2.2.6 switchport port-security maximum 4.5.1.2.2.7 port security action shutdown 4.5.1.3.1.1 show port-security 4.5.1.3.1.2 show port-security interface 4.5.1.3.1.3 show port-security address 4.5.1.3.2 MAC Address Binding Troubleshooting Help 4.6 WEB Management 4.6.1 MAC address table configuration 4.6.1.1 Unicast address configuration 4.6.1.2 Remove static MAC address 4.6.1.3 Static MAC query 4.6.1.4 Show mac-address-table 4.6.2 MAC address table configuration 4.6.2.1 Enbale port Mac-binding 4.6.2.1.1 Enbale port Mac-binding 4.6.2.2 Lock port 4.6.2.2.1 Lock port 4.6.2.2.2 Dynamic MAC converting 4.6.2.2.3 Enable port security timeout 4.6.2.2.4 Binding MAC 4.6.2.2.5 Clearing port MAC 4.6.2.3 MAC binding attribution configuration 4.6.2.3.1 Maximum port security IP number configuration 4.6.2.3.2 Port violation mode 4.6.2.4 MAC binding debug 4.6.2.4.1 Port binding MAC information query Page Chapter 5 VLAN Configuration 5.1 Introduction to VLAN 5.2 VLAN Configuration 5.2.1 VLAN Configuration Task Sequence Page 5.2.2 VLAN Configuration Commands 5.2.2.1 vlan 5.2.2.2 switchport access vlan 5.2.2.3 switchport interface 5.2.2.4 switchport mode 5.2.2.5 switchport trunk allowed vlan 5.2.2.6 switchport trunk native vlan 5.2.2.7 switchport ingress-filtering 5.2.2.8 private-vlan 5.2.2.9 private-vlan association 5.2.3 Typical VLAN Application Page 5.3 GVRP Configuration 5.3.1 GVRP Configuration Task Sequence 5.3.2 GVRP Commands 5.3.2.1 garp timer join 5.3.2.2 garp timer leave 5.3.2.3 garp timer hold 5.3.2.4 garp timer leaveall 5.3.2.5 bridge-ext gvrp 5.3.3 Typical GVRP Application Page 5.4 VLAN Troubleshooting Help 5.4.1 Monitor and Debug Information 5.4.1.1 show vlan 5.4.1.2 show garp timer 5.4.1.3 show gvrp configuration 5.4.1.4 debug gvrp 5.4.2 VLAN Troubleshooting Help 5.5.1.1 Create/Remove VLAN 5.5 WEB Management 5.5.1 Vlan configuration 5.5.1.1.1 VID allocation 5.5.1.1.2 VID attribution configuration Page 5.5.1.4 Trunk port configuration 5.5.1.4.1 Vlan setting for trunk port 5.5.1.5 Allocate port for Vlan 5.5.1.5.1 Vlan setting for access port 5.5.1.6 Allocate port for Vlan 5.5.1.6.1 Disable Vlan ingress rules 5.5.2 GVRP configuration 5.5.2.1 Enable global GVRP 5.5.2.2 Enable port GVRP 5.5.2.3 GVRP configuration 5.5.3 VLAN debug and maintenance 5.5.3.1 show Vlan 5.5.3.2 show garp 5.5.3.3 show gvrp Chapter 6 MSTP Configuration 6.1 MSTP Introduction 6.1.1 MSTP Region 6.1.1.1 Operations Within An MSTP Region 6.1.1.2 Operations between MST Regions 6.1.2 Port Roles 6.1.3 MSTP Load Balance 6.2 Configuring MSTP 6.2.1 MSTP Configuration Task Sequence Page Page 6.2.2 MSTP Configuration Command 6.2.2.1 abort 6.2.2.2 exit 6.2.2.3 instance vlan 6.2.2.4 name 6.2.2.5 revision-level 6.2.2.6 spanning-tree 6.2.2.7 spanning-tree forward-time 6.2.2.8 spanning-tree hello-time 6.2.2.9 spanning-tree link-type p2p 6.2.2.10 spanning-tree maxage 6.2.2.11 spanning-tree max-hop 6.2.2.12 spanning-tree mcheck 6.2.2.13 spanning-tree mode 6.2.2.14 spanning-tree mst configuration 6.2.2.15 spanning-tree mst cost 6.2.2.16 spanning-tree mst port-priority 6.2.2.17 spanning-tree mst priority 6.2.2.18 spanning-tree portfast 6.3 MSTP Example Page Page Page Page 6.4 MSTP Troubleshooting 6.4.1 Monitoring And Debugging Command 6.4.1.1 show spanning-tree Page 6.4.1.2 show mst configuration 6.4.1.3 show mst-pending 6.4.1.4 debug spanning-tree 6.4.2 MSTP Troubleshooting Help Chapter 7 IGMP Snooping Configuration 7.1 Introduction to IGMP Snooping 7.2 IGMP Snooping Configuration 7.2.1 IGMP Snooping Configuration Task Page 7.2.2 IGMP Snooping Configuration Command 7.2.2.1 ip igmp snooping 7.2.2.2 ip igmp snooping vlan 7.2.2.3 ip igmp snooping vlan mrouter 7.2.2.4 ip igmp snooping vlan static 7.2.2.5 ip igmp snooping vlan immediate-leave 7.2.2.6 ip igmp snooping vlan query 7.2.2.7 ip igmp snooping vlan query robustness 7.2.2.8 ip igmp snooping vlan query interval 7.2.2.9 ip igmp snooping vlan query max-response-time 7.3 IGMP Snooping Example Page Page 7.4 IGMP Snooping Troubleshooting Help 7.4.1 Monitor and Debug Commands 7.4.1.1 show ip igmp snooping Page Page 7.4.1.2 show mac-address-table multicast 7.4.1.3 debug igmp snooping 7.4.2 IGMP Snooping Troubleshooting Help 7.5 Web Management 7.5.2.1 Query configuration 7.5.1 Enable IGMP Snooping on the switch 7.5.2 IGMP Snooping Configuration 7.5.2.2 snooping configuration 7.5.2.3 IGMP configuration 7.5.3 IGMP Snooping static multicast configuration 7.5.3.1 IGMP Snooping static multicast configuration 7.5.3.2 IGMP Snooping display Page Chapter 8 802.1X CONFIGURATION 8.1 802.1X Introduction 8.2 802.1X Configuration 8.2.1 802.1X Configuration Task Sequence Page Page Page Page 8.2.2 802.1X Configuration Command 8.2.2.1 aaa enable 8.2.2.2 aaa-accounting enable 8.2.2.3 dot1x accept-mac 8.2.2.4 dot1x eapor enable 8.2.2.5 dot1x enable 8.2.2.6 dot1x privateclient enable 8.2.2.7 dot1x macfilter enable 8.2.2.8 dot1x max-req 8.2.2.9 dot1x max-use 8.2.2.10 dot1x port-control 8.2.2.11 dot1x port-method 8.2.2.12 dot1x re-authenticate 8.2.2.13 dot1x re-authentication 8.2.2.14 dot1x timeout quiet-period 8.2.2.15 dot1x timeout re-authperiod 8.2.2.16 dot1x timeout tx-period 8.2.2.17 radius-server accounting host 8.2.2.18 radius-server authentication host 8.2.2.19 radius-server dead-time 8.2.2.20 radius-server key 8.2.2.21 radius-server retransmit 8.2.2.22 radius-server timeout 8.3 802.1X Apply Example 10.1.1.1 10.1.1.2 Radius Server 10.1.1.3 8.4 802.1X Trouble Shooting 8.4.1 802.1X Debug and Monitor Command 8.4.1.1 show aaa config Page 8.4.1.2 show aaa authenticated-user 8.4.1.3 show aaa authenticating-user 8.4.1.4 show radius count 8.4.1.5 show dot1x Page 8.4.1.6 debug aaa 8.4.1.7 debug dot1x 8.4.2 802.1X Troubleshooting 8.5 WEB Management 8.5.1 RADIUS client configuration 8.5.1.1 RADIUS global configuration 8.5.1.2 RADIUS authentication configuration 8.5.1.3 RADIUS accounting configuration 8.5.2 802.1X Configuration 8.5.2.1 802.1X Configuration 8.5.2.2 802.1X port authentication configuration 8.5.2.3 802.1x port mac configuration 8.5.2.4 802.1x port status list Chapter 9 ACL Configuration 9.1 Introduction to ACL 9.1.1 Access list 9.1.2 Access-group 9.1.3 Access list Action and Global Default Action 9.2 ACL configuration 9.2.1 ACL Configuration Task Sequence Page Page Page 9.2.2 ACL Configuration Commands 9.2.2.1 access-list(extended) 9.2.2.2 access list(standard) 9.2.2.3 firewall 9.2.2.4 firewall default 9.2.2.5 access-list ip extended 9.2.2.6 access-list ip standard 9.2.2.7 ip access-group 9.2.2.8 permit | deny(extended) 9.2.2.9 permit | deny(standard) 9.3 ACL Example 9.4 ACL Troubleshooting Help 9.4.1 ACL Debug and Monitor Commands 9.4.1.1 show access lists 9.4.1.2 show access-group 9.4.1.3 show firewall 9.4.2 ACL Troubleshooting Help 9.5 Web Management 9.5.1 Add standard numeric IP ACL configuration 9.5.2 Delete standard numeric IP ACL configuration 9.5.3 Extended numeric ACL configuration Page 9.5.4 Standard ACL name configuration 9.5.5 Extended ACL name configuration 9.5.6 Firewall configuration 9.5.7 ACL port binding configuration Chapter 10 Port Channel Configuration 10.1 Introduction to Port Channel 10.2 Port Channel Configuration 10.2.1 Port Channel Configuration Task Sequence 10.2.2 Port Channel Configuration Commands 10.2.2.1 port-group 10.2.2.2 port-group mode 10.2.2.3 interface port-channel 10.3 Port Channel Example Page 10.4 Port Channel Troubleshooting Help 10.4.1 Monitor and Debug Commands 10.4.1.1 show port-group Page Page Page Page 10.4.1.2 debug lacp 10.4.2 Port Channel Troubleshooting Help 10.5 Web Management 10.5.1 LACP port group configuration 10.5.2 LACP port configuration Chapter 11 DHCP Configuration 11.1 Introduction to DHCP 11.2 DHCP Server Configuration 11.2.1 DHCP Sever Configuration Task Sequence Page 11.2.2 DHCP Server Configuration Commands 11.2.2.1 bootfile 11.2.2.2 client-identifier 11.2.2.3 client-name 11.2.2.4 default-router 11.2.2.5 dns-server 11.2.2.6 domain-name 11.2.2.7 hardware-address 11.2.2.8 host 11.2.2.9 ip dhcp conflict logging 11.2.2.10 p dhcp excluded-address 11.2.2.11 ip dhcp pool 11.2.2.12 loghost dhcp 11.2.2.13 lease 11.2.2.14 netbios-name-server 11.2.2.15 netbios-node-type 11.2.2.16 network-address 11.2.2.17 next-server 11.2.2.18 option 11.2.2.19 service dhcp 11.3 DHCP Relay Configuration 11.3.1 DHCP Relay Configuration Task Sequence 11.3.2 DHCP Relay Configuration Command 11.3.2.1 ip forward-protocol udp 11.3.2.2 ip helper-address 11.3.2.3 ip dhcp relay information policy drop 11.4 DHCP Configuration Example Page 11.5 DHCP Troublesh ooting Help 11.5.1 Monitor and Debug Commands 11.5.1.1 clear ip dhcp binding 11.5.1.2 clear ip dhcp conflict 11.5.1.3 clear ip dhcp server statistics 11.5.1.4 show ip dhcp binding 11.5.1.5 show ip dhcp conflict 11.5.1.6 show ip dhcp server statistics 11.5.1.7 debug ip dhcp server 11.5.2 DHCP Troubleshooting Help 11.6 WEB Management 11.6.1 DHCP server configuration 11.6.1.1 Enable DHCP 11.6.1.2 Address pool configuration 11.6.1.3 Client's default gateway configuration 11.6.1.4 Client DNS server configuration 11.6.1.5 Client WINS server configuration 11.6.1.6 DHCP file server address configuration 11.6.1.7 DHCP network parameter configuration 11.6.1.8 Manual address pool configuration 11.6.1.9 Excluded address 11.6.1.10 DHCP packet statistics 11.6.2 DHCP relay configuration 11.6.2.1 DHCP relay configuration 11.6.3 DHCP debugging 11.6.3.1 Delete binding log 11.6.3.2 Delete conflict log Page Chapter 12 SNTP Configuration 12.1 SNTP Configuration Commands 12.1.1 sntp server 12.1.2 sntp poll 12.1.3 clock timezone 12.2 Typical SNTP Configuration Examples 12.3 SNTP Troubleshooting Help 12.3.1 Monitor and Debug Commands 12.3.1.1 show sntp 12.3.1.2 debug sntp 12.4 WEB Management 12.4.1 12.4.1 SNTP/NTP server configuration 12.4.2 12.4.2 Request interval configuration 12.4.3 12.4.3 Time difference 12.4.4 12.4.4 Show sntp Chapter 13 QoS Configuration 13.1 QoS 13.1.1 Introduction to QoS 13.1.1.1 QoS Terms 13.1.1.2 QoS Implementation 13.1.1.3 Basic QoS Model 13.1.2 QoS Configuration 13.1.2.1 QoS Configuration Task Sequence Page Page Page 13.1.2.2 QoS Configuration Commands 13.1.2.2.1 mls qos 13.1.2.2.2 class-map 13.1.2.2.3 match 13.1.2.2.4 policy-map 13.1.2.2.5 class 13.1.2.2.6 set 13.1.2.2.7 police 13.1.2.2.8 mls qos aggregate-policer 13.1.2.2.9 police aggregate 13.1.2.2.10 mls qos trust 13.1.2.2.11 mls qos cos 13.1.2.2.12 service-policy 13.1.2.2.13 mls qos dscp-mutation 13.1.2.2.14 queue bandwidth 13.1.2.2.15 queue mode 13.1.2.2.16 wrr-queue cos-map 13.1.2.2.17 mls qos map Page 13.1.3 QoS Example Page 13.1.4 QoS Troubleshooting Help 13.1.4.1 QoS Debug and Monitor Commands 13.1.4.1.1 show mls-qos 13.1.4.1.2 show mls qos aggregate-policer 13.1.4.1.3 show mls qos interface Page 13.1.4.1.4 show mls qos maps 13.1.4.1.5 show class-map 13.1.4.1.6 show policy-map 13.1.4.2 QoS Troubleshooting Help 13.1.5 Web Management 13.1.5.1 Enable QoS 13.1.5.2 Class-map Configuration 13.1.5.2.1 Add/Remove Class-map 13.1.5.2.2 Class-map Configuration 13.1.5.3 Policy-map Configuration 13.1.5.3.1 Add/Remove Policy-map 13.1.5.3.2 Policy-map Priority Configuration 13.1.5.3.3 Policy-map Bandwidth Configuration 13.1.5.3.4 Add/Remove Aggregate Policer 13.1.5.3.5 Apply Aggregate Policer 13.1.5.4 Apply QoS to Port 13.1.5.4.1 Port Trust Mode Configuration 13.1.5.4.2 Port Default Cos Configuration 13.1.5.4.3 Apply Policy-map to Port 13.1.5.4.4 Apply DSCP Mutation Mapping 13.1.5.5 Egress-Queue Configuration 13.1.5.5.1 Egress-queue WRR Weight Configuration 13.1.5.5.2 Egress-queue Work Mode Configuration 13.1.5.5.3 Mapping CoS Values to Egress Queue 13.1.5.6 QoS Mapping Configuration 13.1.5.6.1 CoS-to-DSCP Mapping 13.1.5.6.2 DSCP-to-CoS Mapping 13.1.5.6.3 DSCP Mutation Mapping 13.1.5.6.4 IP-Precedence-to-DSCP Mapping 13.1.5.6.5 DSCP Mark Down Mapping 13.2 PBR 13.2.1 PBR Introduction 13.2.2 PBR Configuration 13.2.2.1 PBR Configuration Step 13.2.2.2 PBR Command 13.2.2.2.1 mls qos 13.2.2.2.2 class-map 13.2.2.2.3 match 13.2.2.2.4 policy-map 13.2.2.2.5 class 13.2.2.2.6 set 13.2.2.2.7 service-policy 13.2.3 PBR Example Page Chapter 14 Layer 3 Forward Configuration 14.1 Layer 3 Interface 14.1.1 Introduction to Layer3 Interface 14.1.2 Layer3 interface configuration 14.1.2.1 Layer3 Interface Configuration Task Sequence 14.1.2.2 Layer3 Interface Configuration Commands 14.1.2.2.1 interface vlan 14.2 IP Forwarding 14.2.1 Introduction to IP Forwarding 14.2.2 IP Route Aggregation Configuration 14.2.2.1 IP Route Aggregation Configuration Task 14.2.2.2 IP Route Aggregation Configuration Command 14.2.2.2.1 ip fib optimize 14.2.3 IP Forwarding Troubleshooting Help 14.2.3.1 Monitor and Debug Commands 14.2.3.1.1 show ip traffic Page 14.2.3.1.2 debug ip packet 14.3 ARP 14.3.1 Introduction to ARP 14.3.2 ARP configuration 14.3.2.1 ARP Configuration Task Sequence 14.3.2.2 ARP Forwarding Configuration Commands 14.3.2.2.1 Arp 14.3.2.2.2 ip proxy-arp 14.3.3 ARP Forwarding Troubleshooting Help 14.3.3.1 Monitor and Debug Commands 14.3.3.1.1 show arp 14.3.3.1.2 clear arp-cache 14.3.3.1.3 debug arp 14.3.3.2 ARP Troubleshooting Help Chapter 15 Routing Protocol Configuration 15.1 Route Table 15.2 Stati c Rout e 15.2.1 Introduction to Static Route 15.2.2 Introduction to Default Route 15.2.3 Static Route Configuration 15.2.3.1 Static Route Configuration Task Sequence 15.2.3.2 Static Route Configuration Commands 15.2.3.2.1 ip route 15.2.3.2.2 show ip route 15.2.4 Configuration Scenario 15.2.5 Troubleshooting Help 15.2.5.1 Monitor and Debug Commands 15.3 RIP 15.3.1 Introduction to RIP Page 15.3.2 RIP Configuration 15.3.2.1 RIP Configuration Task Sequence Page Page Page 15.3.2.2 RIP Configuration Commands 15.3.2.2.1 auto-summary 15.3.2.2.2 default-metric 15.3.2.2.3 ip rip authentication key 15.3.2.2.4 ip rip authentication mode 15.3.2.2.5 ip rip metricin 15.3.2.2.6 ip rip metricout 15.3.2.2.7 ip rip receive version none 15.3.2.2.8 ip rip send version none 15.3.2.2.9 ip rip receive version 15.3.2.2.10 ip rip send version 15.3.2.2.11 ip rip work 15.3.2.2.12 ip split-horizon 15.3.2.2.13 redistribute 15.3.2.2.14 rip broadcast 15.3.2.2.15 rip checkzero 15.3.2.2.16 rip preference 15.3.2.2.17 router rip 15.3.2.2.18 timer basic 15.3.2.2.19 version 15.3.2.2.20 show ip protocols 15.3.2.2.21 show ip rip 15.3.2.2.22 debug ip rip packet 15.3.2.2.23 debug ip rip recv 15.3.2.2.24 debug ip rip send 15.3.3 Typical RIP Scenario Page 15.3.4 RIP Troubleshooting Help 15.3.4.1 Monitor and Debug Commands Page 15.3.4.2 RIP Troubleshooting Help 15.4 OSPF 15.4.1 Introduction to OSPF Page Page 15.4.2 OSPF Configuration 15.4.2.1 Configuration Task Sequence Page Page Page 15.4.2.2 OSPF Configuration Commands 15.4.2.2.1 default redistribute cost 15.4.2.2.2 default redistribute interval 15.4.2.2.3 default redistribute limit 15.4.2.2.4 default redistribute tag 15.4.2.2.5 default redistribute type 15.4.2.2.6 ip ospf authentication 15.4.2.2.7 ip ospf cost 15.4.2.2.8 ip ospf dead-interval 15.4.2.2.9 ospf enable area 15.4.2.2.10 ip ospf hello-interval 15.4.2.2.11 ip ospf passive-interface 15.4.2.2.12 ip ospf priority 15.4.2.2.13 ip ospf retransmit-interval 15.4.2.2.14 ip ospf transmit-delay 15.4.2.2.15 network 15.4.2.2.16 preference 15.4.2.2.17 redistribute ospfase 15.4.2.2.18 router id 15.4.2.2.19 router ospf 15.4.2.2.20 stub cost 15.4.2.2.21 virtuallink neighborid 15.4.2.2.22 show ip ospf 15.4.2.2.23 show ip ospf ase 15.4.2.2.24 show ip ospf cumulative 15.4.2.2.25 show ip ospf database Page 15.4.2.2.26 show ip ospf interface 15.4.2.2.27 show ip ospf neighbor 15.4.2.2.28 show ip ospf routing 15.4.2.2.29 show ip ospf virtual-links 15.4.2.2.30 show ip protocols 15.4.2.2.31 debug ip ospf event 15.4.2.2.32 debug ip ospf lsa 15.4.2.2.33 debug ip ospf packet 15.4.2.2.34 debug ip ospf spf 15.4.3 Typical OSPF Scenario SWI T Page Page Page Page Page Page 15.4.4 OSPF Troubleshooting Help 15.4.4.1 Monitor and Debugging Commands Page Page Page Page Page Page Page 15.4.4.2 OSPF Troubleshooting Help 15.5 Web Management 15.5.1 Static route 15.5.1.1 Static route configuration 15.5.2 RIP 15.5.2.1 Enable RIP 15.5.2.2 Port receive/transmit RIP packet configuration 15.5.2.3 Configuring import routes generated by other routing protocols to RIP 15.5.2.4 Port metric in/out configuration 15.5.2.5 RIP port configuration 15.5.2.6 Global RIP mode configuration 15.5.2.7 RIP timer configuration 15.5.3 OSPF 15.5.3.1 Enable OSPF 15.5.3.1.1 Enable/disable OSPF 15.5.3.1.2 OSFP Router-ID configuration 15.5.3.1.3 OSPF network range configuration 15.5.3.1.4 Configure OSPF area for port 15.5.3.2 OSPF transmitting parameters configuration 15.5.3.2.1 OSPF authentication parameter configuration 15.5.3.2.2 OSPF passive interface configuration 15.5.3.2.3 Sending packet cost for port configuration 15.5.3.3 OSPF Imported route parameter configuration 15.5.3.3.1 Imported route parameter configuration 15.5.3.3.2 Import external routing information configuration 15.5.3.4 Other OSFP parameter configuration 15.5.3.4.1 OSPF priority configuration 15.5.3.4.2 OSPF STUB area and default route cost configuration 15.5.3.4.3 OSPF virtual link configuration 15.5.3.4.4 Port DR priority configuration 15.5.3.5 OSPF debug 15.5.3.5.1 Show ip route Page Chapter 16 Multicast Protocol Configuration 16.1 Multicast Protocol Overview 16.1.1 Introduction to Multicast 16.1.2 Multicast Address 16.1.3 IP Multicast Packets Forwarding 16.1.4 Application of Multicast 16.2 Common Multicast Configurations 16.2.1 Common Multicast Configuration Commands 16.2.1.1 show ip mroute 16.3 PIM-DM 16.3.1 Introduction to PIM-DM 16.3.2 PIM-DM Configuration 16.3.2.1 PIM-DM Configuration Task Sequence 16.3.2.2 PIM-DM Configuration Commands 16.3.2.3 ip pim dense-mode 16.3.2.4 ip pim hello-interval 16.3.3 Typical PIM-DM Scenario 16.3.4 PIM-DM Troubleshooting Help 16.3.4.1 Monitor and Debug Commands 16.3.4.1.1 show ip pim mroute dm 16.3.4.1.2 show ip pim neighbor 16.3.4.1.3 show ip pim interface 16.3.4.1.4 debug ip pim 16.3.4.2 PIM-DM Troubleshooting Help 16.4 PIM-SM 16.4.1 Introduction to PIM-SM 16.4.2 PIM-SM Configuration 16.4.2.1 PIM-SM Configuration Task Sequence Page 16.4.2.2 PIM-SM Configuration Commands 16.4.2.2.1 ip pim sparse-mode 16.4.2.2.2 ip pim bsr-border 16.4.2.2.3 ip pim hello-interval 16.4.2.2.4 ip pim bsr-candidate 16.4.2.2.5 ip pim rp-candidate 16.4.3 Typical PIM-SM Scenario Page 16.4.4 PIM-SM Troubleshooting Help 16.4.4.1 Monitor and Debug Commands 16.4.4.1.1 show ip pim bsr-router 16.4.4.1.2 show ip pim interface 16.4.4.1.3 show ip pim mroute sm 16.4.4.1.4 show ip pim neighbor 16.4.4.1.5 show ip pim rp 16.4.4.1.6 debug ip pim 16.4.4.1.7 debug ip pim bsr 16.4.4.2 PIM-SM Troubleshooting Help 16.5 DVMRP 16.5.1 Introduction to DVMRP 16.5.2 DVMRP configuration 16.5.2.1 Configuration Task Sequence Page 16.5.2.2 DVMRP Configuration Commands 16.5.2.2.1 ip dvmrp cisco-compatible 16.5.2.2.2 ip dvmrp 16.5.2.2.3 ip dvmrp graft-interval 16.5.2.2.4 ip dvmrp metric 16.5.2.2.5 ip dvmrp nbr-timeout 16.5.2.2.6 ip dvmrp probe-interval 16.5.2.2.7 ip dvmrp report-interval 16.5.2.2.8 ip dvmrp route-timeout 16.5.2.2.9 ip dvmrp tunnel 16.5.3 Typical DVMRP Scenario 16.5.4 DVMRP Troubleshooting Help 16.5.4.1 Monitor and Debug Commands 16.5.4.1.1 show ip dvmrp mroute 16.5.4.1.2 show ip dvmrp neighbor 16.5.4.1.3 show ip dvmrp route 16.5.4.1.4 show ip dvmrp tunnel 16.5.4.1.5 debug ip dvmrp detail 16.5.4.1.6 debug ip dvmrp pruning 16.5.4.2 DVMRP Troubleshooting Help 16.6 IGMP 16.6.1 Introduction to IGMP 16.6.2 IGMP configuration 16.6.2.1 Configuration Task Sequence Page 16.6.2.2 IGMP Configuration Commands 16.6.2.2.1 ip igmp access-group 16.6.2.2.2 ip igmp join-group 16.6.2.2.3 ip igmp query-interval 16.6.2.2.4 ip igmp query-max-response-time 16.6.2.2.5 ip igmp query-timeout 16.6.2.2.6 ip igmp static-group 16.6.2.2.7 ip igmp version 16.6.3 Typical IGMP Scenario 16.6.4 IGMP Troubleshooting Help 16.6.4.1 Monitor and Debug Commands 16.6.4.1.1 show ip igmp groups 16.6.4.1.2 show ip igmp interface 16.6.4.1.3 debug ip igmp event 16.6.4.1.4 debug ip igmp packet 16.6.4.2 IGMP Troubleshooting Help 16.7 web Management 16.7.1 Multicast common configuration 16.7.2 PIM-DM configuration 16.7.3 PIM-SM configuration Page 16.7.4 DVMRP configuration Page 16.7.5 IGMP configuration 16.7.6 Multicast inspect and debug Page Chapter 17 VRRP Configuration 17.1 Introduction to VRRP 17.2 VRRP Configuration 17.2.1 VRRP Configuration Task Sequence 17.2.2 VRRP Configuration Commands 17.2.2.1 router vrrp 17.2.2.2 virtual-ip 17.2.2.3 interface 17.2.2.4 enable 17.2.2.5 disable 17.2.2.6 vrrp authentication mode 17.2.2.7 vrrp authentication string 17.2.2.8 preempt 17.2.2.9 priority 17.2.2.10 advertisement-interval 17.2.2.11 circuit-failover 17.2.3 Typical VRRP Application 17.2.4 VRRP Troubleshooting Help 17.2.4.1 Monitor and Debug Commands 17.2.4.1.1 show vrrp 17.2.4.1.2 debug vrrp 17.2.4.2 VRRP Troubleshooting Help Chapter 18 Cluster Network Management 18.1 Introduction to cluster network management Page Page 18.2.2 Cluster Configuration Commands 18.2.2.1 cluster run 18.2.2.2 cluster register timer 18.2.2.3 cluster ip-pool 18.2.2.4 cluster commander 18.2.2.5 cluster member 18.2.2.6 cluster auto-add 18.2.2.7 rcommand member 18.2.2.8 rcommand commander 18.2.2.9 cluster reset member 18.2.2.10 cluster update member 18.2.2.11 cluster holdtime 18.2.2.12 cluster heartbeat 18.2.2.13 clear cluster candidate-table