Allowed Protocols Introduction | Avaya P3343T-ML instruction

Allowed Protocols

Chapter 8 User Authentication

Allowed Protocols

Allowed Protocols Introduction

With the Allowed Protocols feature, the network manager can determine the IP protocols enabled on the switch. This feature can be used to block access to the switch using specific IP protocols. Each protocol can be independently enabled or disabled on the switch.

Enabling and disabling the Recovery Password protocol can only be done using a direct console connection via the Console port.

Allowed Protocols CLI Commands

The following Allowed Protocols commands are available.

In order to...	Use the following command...


Enable Telnet on the switch	ip telnet enable

Disable Telnet on the switch	no ip telnet

Enable HTTP on the switch	ip http enable

Disable HTTP on the switch	no ip http

Enable the switch agent to accept	ip icmp redirect
ICMP redirect packets sent to it

Enable the switch agent to ignore	no icmp redirect
ICMP redirect packets sent to it

Enable SNMP on the switch	snmp-server

Disable SNMP on the switch	no snmp-server

Enable SNMPv1 switch access	snmp-server community

Disable SNMPv1 switch access	no snmp-server community

Enable SSH on the switch	ip ssh enable

Disable SSH on the switch	no ip ssh

Enable Recovery Password on the	terminal recovery password enable
switch

Disable Recovery Password on the	no terminal recovery password
switch

Avaya P334T-ML User’s Guide

55

Image 71

Avaya P3343T-ML manual Allowed Protocols Introduction, Allowed Protocols CLI Commands

Contents

AVAYA P334T-ML STACKABLE SWITCHSOFTWARE VERSION Installation and Configuration Guide Document no avaya.com Overview ContentsSection Installation Configuring the Terminal Serial Port Parameters Configuration Ingress VLAN Security Port Mirroring Constraints Troubleshooting and Maintenance Chapter 15 Updating the Software FCC Notice Before you Install the P330-MLSafety Information Preface Notes, Cautions, and Warnings Warranty Avaya Support Avaya P334T-ML User’s Guide SECTION 1 OVERVIEW Page Introduction Avaya P334T-ML FeaturesAvaya P334T-ML Overview Chapter Device Manager Embedded Web Layer 3 Features P330-MLCommand Line Interface CLI Network Management and Monitoring SMON Avaya Integrated ManagerPort Mirroring Fans, Power Supply, and BUPS-ML Monitoring IETF - Layer Standards and CompatibilityAvaya P330 Standards Supported IEEE IETF - Network Monitoring Physical SpecificationsP334T-ML Switch Power Requirements EMC Emissions SafetySafety - AC Version Safety - DC Version Basic MTBF Stacking Sub-moduleInterfaces Approved SFF/SFP GBIC Transceivers Safety Information To Remove the SFF/SFP GBIC transceiver InstallationSpecifications To Install the SFF/SFP GBIC transceiver Agency Approval Gigabit Fiber Optic Cabling Console Pin Assignments Avaya P334T-ML User’s Guide SECTION 2 INSTALLATION Page Site Preparation InstallationRequired Tools Power Requirements - DC Table 4.2 Power Requirements - AC Rack Mounting Optional To connect stacked switches Installing the X330STK-ML Stacking Sub-Module OptionalConnecting Stacked Switches 5 Power up the added modules X330LC X330RCX330SC Prerequisites Connecting Cables to Network EquipmentMaking Connections to Network Equipment Page Powering On - Avaya P330 Switch DC Powering Up the Avaya P330Powering On - Avaya P330 Module AC Post-Installation Avaya P334T-ML Front Panel Avaya P334T-ML Front and Rear Panels LED Name P334T-ML LEDs Chapter 6 Avaya P334T-ML Front and Rear Panels Avaya P334T-ML LED Descriptions Continued Figure 6.4 P334T-ML AC version Back Panel with Stacking Sub-module Avaya P334T-ML Back PanelBUPS-ML connector cover plate removed Table 6.2 Avaya P334T-ML - - Select buttons Figure 6.6 BUPS-ML Input Connector Sticker BUPS-ML Input Connector Establishing a Serial Connection Establishing Switch AccessConfiguring the Terminal Serial Port Parameters Connecting a Terminal to the Avaya P330 Serial port The mode can be either switch, router, wan, atm, mgp P330 SessionsAssigning P330’s IP Stack Address session router Establishing an SSH Connection Establishing a Telnet Connection Overview Connecting a Modem to the Console Portset interface ppp enable Establishing a Modem PPP Connection with the P330 Entering the Supervisor Level Security Levels Entering the CLI Introduction to SNMP User AuthenticationSNMP Support control the P330 Users Groups Views SNMP Commands In order to In order to Introduction to SSH SSH Protocol Support Figure 8.1 SSH Session Establishment Process SSH Commands SCP Protocol Support Introduction to RADIUS RADIUS Authentication request sent to RADIUS Server User attempts login Local User account authenticated in switch? NoUser name and password authenticated? No Authentication Reject sent to switch Radius Commands Introduction to Telnet Telnet CommandsTelnet Client Support Introduction Recovery PasswordRecovery Password Commands Allowed Managers Introduction Allowed Managers CLI CommandsAllowed Managers Allowed Protocols Introduction Allowed Protocols CLI CommandsAllowed Protocols no ip telnet-client ip telnet-client enable SECTION 3 CONFIGURATION Page Avaya P330 Default Settings P330 Default SettingsConfiguring the Switch Function Ports 51 1 Ensure that the other side is also set to Autonegotiation EnabledPorts Avaya P334T-ML User’s Guide Basic Switch Configuration Switch Configuration Operating parameters System Parameter ConfigurationIdentifying the system Network Time Acquiring Protocols Parameter Configuration Uploading and Downloading Device Configurations and Images Layer 2 Configuration File In order to Layer 3 Configuration File In order to System Logging Introduction System Logging Applications Sinks Syslog Servers Syslog Configuration CLI Commands In order to Monitoring CPU Utilization Avaya P334T-ML User’s Guide Overview Avaya P330 Layer 2 Features Gigabit Ethernet Configuring Ethernet ParametersEthernet Fast Ethernet Gigabit Ethernet ports MMMMMMSSSSSS MM-MM-MM-SS-SS-SS Ethernet Configuration CLI Commands CAM size - 8K addresses Ethernet Implementation in the Avaya P334T-MLSpeed - 10/100 ports 1-48 1G ports 51 Priority queuing - 10/100 ports 4 queues 1G ports 2 queues VLAN Overview VLAN Configuration Multi VLAN Binding VLAN Tagging Figure 11.3 illustrates these binding modes in P330 Ingress VLAN Security VLAN CLI CommandsAutomatic VLAN Learning VLAN Implementation in the Avaya P334T-ML PBNAC Implementation in the P330 Family Port Based Network Access Control PBNACHow “Port Based” Authentication Works Configuring the P330 for PBNAC PBNAC CLI Commands In order to Spanning Tree per Port Spanning Tree ProtocolSpanning Tree Protocol Rapid Spanning Tree Protocol RSTP Spanning Tree Implementation in the P330 Family Spanning Tree Protocol CLI Commands status Set the port point-to-point adminset port point-to-point admin admin and operational RSTP status MAC Security Implementation in P330 MAC Security MAC Security CLI Commands MAC Aging Configuring the P330 for MAC AgingMAC Aging CLI Commands LAG Overview LAG CLI Commands LAG Implementation in the Avaya P330 Family of Products Port Redundancy Operation Port Redundancy Intermodule Port Redundancy Port Redundancy CLI Commands redundancy entry defined for the display the intermoduleshow intermodule port redundancy IP Multicast Filtering IP Multicast Implementation in the Avaya P334T-ML IP Multicast CLI Commands RMON Overview RMON CLI CommandsRMON In order to SMON Overview SMON Port Mirroring Constraints Port Mirroring ConfigurationPort Mirroring CLI commands Port Mirroring Overview About Multilayer Policy Multilayer Policy Multilayer Policy Implementation in the P334T-ML Configuring the P334T-ML for Multilayer Policy Multilayer Policy CLI Commands In order to Weighted Queuing CLI Commands Weighted QueuingImplementation of Weighted Queuing in the P330-ML Port Classification Port Classification CLI Commands Implementation of Stack Health in the P330 Family Stack RedundancyStack Health set stack health Stack Health CLI CommandsInitiate the stack health testing procedure Avaya P334T-ML User’s Guide What is Routing? Avaya P330 Layer 3 Features Figure 12.1 Routing Multinetting Multiple Subnets per VLAN Routing ConfigurationForwarding IP Configuration CLI Commands IP Configuration set vlan Vlan-id name Vlan-name replacing Vlan-id by the Assigning Initial Router Parameters Routerconfigure# interface interface-name# ip vlan vland-id Routerconfigure# interface interface-nameThe Routerconfigure-ifinterface-name# prompt appears Routerconfigure-ifinterface-name# ip address ip- address netmask 2 Enter the Certificate Key and Certificate Type 3 Click Next Obtaining a Routing License KeyTo obtain a License Key that enables routing features 1 Go to http//license-lsg.avaya.com and click “request new license” 6 View number of licenses left 4 Enter contact information once per certificate 5 Click Next Activating a Routing License Key set license module license featureNameLicense Key CLI Commands Avaya P334T-ML User’s Guide RIP Overview RIP Routing Interchange Protocol Configuration Table 12.1 DIfferences Between RIP and RIP2 RIP CLI CommandsRIP2 In order to OSPF Overview OSPF Open Shortest Path First Configuration OSPF CLI Commands Static Routing Overview Static Routing ConfigurationStatic Routing Configuration CLI Commands Route Preferences Route Redistribution Route Redistribution Commands ARP Overview ARP Address Resolution Protocol Table Configuration The ARP Table ARP CLI Commands BOOTP/DHCP Overview BOOTP/DHCP Dynamic Host Configuration Protocol Relay Configuration BOOTP/DHCP CLI Commands NetBIOS Re-broadcast Configuration CLI Commands NetBIOS Re-broadcast ConfigurationNetBIOS Overview VRRP Overview VRRP Virtual Router Redundancy Protocol Configuration VRRP Configuration Example Case #2 VRRP CLI Commands In order to SRRP Overview SRRP ConfigurationSRRP Configuration Example SRRP CLI Commands Policy Configuration CLI Commands Policy ConfigurationPolicy Configuration Overview In order to Figure 12.4 Avaya P330 Policy Policy Configuration Example P330-1super# ip access-list 100 3 deny tcp host 192.168.5.33 any eq P330-1super# ip access-list 100 1 fwd6 tcp 149.49.0.0 0.0.255.255 anyP330-1super# ip access-list 100 2 fwd3 tcp any host IP Fragmentation/Reassembly CLI Commands IP Fragmentation and ReassemblyIP Fragmentation and Reassembly Overview SECTION 4 TROUBLESHOOTING AND MAINTENANCE Page Troubleshooting the Installation Troubleshooting the Installation Chapter 13 Troubleshooting the Installation Replacing the Stacking Sub-module Maintenance Maintenance Downloading Software Updating the SoftwareSoftware Download Obtain Software Online Download New Version without Overwriting Existing Version