Cabletron Systems 9032578-02 - page 178

Chapter 10: Security Configuration Guide

178 SmartSwitch Router User Reference Manual

Show ACLs on all IPX interfaces. acl show interface all-ipx

Show static entry filters. acl show service

Contents

Main Page Notice FCC Notice Page DECLARATION OF CONFORMITY ADDENDUM Page Contents Chapter 1: SmartSwitch Router Product Overview.............................. 17 Chapter 2: Bridging Configuration Guide............................................. 33 Chapter 3: IP Routing Configuration Guide .......................................... 45 Chapter 4: RIP Configuration Guide ...................................................... 53 Chapter 5: OSPF Configuration Guide................................................... 59 Chapter 6: BGP Configuration Guide..................................................... 71 Chapter 7: Routing Policy Configuration Guide.................................. 107 Chapter 8: Multicast Routing Configuration Guide ........................... 143 Chapter 9: IPX Routing Configuration Guide...................................... 151 Chapter 10: Security Configuration Guide .......................................... 161 Chapter 11: QoS Configuration Guide ................................................ 179 Chapter 12: Performance Monitoring Guide ...................................... 185 Chapter 14: VRRP Configuration Guide............................................... 195 Page Preface How to Use This Manual Related Documentation Page Page Supported Media (Encapsulation Type) Supported Routing Protocols Configuring the Cabletron SmartSwitch Router Understanding the Command Line Interface Basic Line Editing Commands Access Modes User Mode Enable Mode List the Enable commands. ? Configure Mode Boot PROM Mode Disabling a Function or Feature Loading System Images and Configuration Files Boot and System Image Configuration Files Loading System Image Software Loading Boot PROM Software Activate the Configuration Commands in the Scratchpad Copy the Configuration to the Startup Configuration File Managing the SSR Set SSR Name Set SSR Date and Time Configure NTP Configure the SSR CLI Configure SNMP Services Monitoring Configuration Page Page Bridging Modes (Flow-Based and Address-Based) VLAN Overview Page SSR VLAN Support Page Configuring SSR Bridging Functions Configure Address-based or Flow-based Bridging Configuring Spanning Tree Adjust Spanning-Tree Parameters Page Configuring a Port or Protocol based VLAN Configuring VLAN Trunk Ports Configure Bridging for Non-IP/IPX Protocols Configure Layer-2 Filters Monitor Bridging Creating an IP or IPX VLAN Chapter 3 IP Routing Configuration IP Routing Overview IP Routing Protocols Configuring IP Interfaces and Parameters Configure IP Addresses to Ports Configure IP Interfaces for a VLAN Specify Ethernet Encapsulation Method Configure Address Resolution Protocol Configure DNS Parameters Configure IP Services (ICMP) Configure IP Helper Configure Direct Broadcast Monitor IP Parameters Assigning IP/IPX Interfaces Page Chapter 4 RIP Configuration RIP Overview Configure RIP Enabling and Disabling RIP Configuring RIP Interfaces Configure RIP Parameters Configure RIP Route Preference Configure RIP Route Default-Metric Monitoring RIP SmartSwitch Router User Reference Manual 57 Chapter 4: RIP Configuration Guide Configuration Example Show detailed information of response packets sent by the router. rip trace response send Show detailed information of request packets sent by the router. rip trace send request Page Page OSPF Multipath Configure OSPF Enable OSPF Configure OSPF Interface Parameters Configure an OSPF Area Configure OSPF Area Parameters Create Virtual Links Configure Autonomous System External (ASE) Link Advertisements Configure OSPF over Non-Broadcast Multiple Access Monitoring OSPF OSPF Configuration Examples Page Page Page Page Chapter 6 BGP Configuration BGP Overview The SSR BGP Implementation Basic BGP Tasks Setting the Autonomous System Number Setting the Router ID Configuring a BGP Peer Group Page Adding a BGP Peer Starting BGP Using AS-Path Regular Expressions Page Using the AS Path Prepend Feature BGP Configuration Examples BGP Peering Session Example Page The CLI configuration for router SSR1 is as follows: IBGP Configuration Example Page The following lines in the Cisco router configure OSPF: The following lines in the SSR6 set up peering with the Cisco router using the Routing group type. Page Page The gated.conf file for router SSR2 is as follows: EBGP Multihop Configuration Example Page The gated.conf file for router SSR2 is as follows: The CLI configuration for router SSR3 is as follows: Community Attribute Example Figure 5. Sample BGP Configuration (Specific Community) Page In Figure 6, router SSR11 has the following configuration: Page In Figure 6, router SSR10 has the following configuration: In Figure 6, router SSR14 has the following configuration: Page Local_Pref Attribute Example Figure 7. Sample BGP Configuration (Local_Pref Attribute) Multi-Exit Discriminator Attribute Example Page EBGP Aggregation Example Route Reflection Example Page Page Page Page Page Preference Import Policies Export Policies Specifying a Route Filter Aggregates and Generates Page Authentication Configure Simple Routing Policies Redistributing Static Routes Redistributing Directly Attached Networks Redistributing RIP into RIP Redistributing RIP into OSPF Redistributing OSPF to RIP Redistributing Aggregate Routes Simple Route Redistribution Examples Page Page Configure Advanced Routing Policies Export Policies Page Creating an Export Destination Creating an Export Source Import Policies Creating an Import Source Creating a Route Filter Creating an Aggregate Route Page Creating an Aggregate Destination Creating an Aggregate Source Examples of Import Policies Page Page Page Page Page Page Examples of Export Policies Page Page Page Page Page Page Page Page Page Page DVMRP Overview Configure IGMP Configuring IGMP on an IP Interface Configure IGMP Query Interval Configure IGMP Response Wait Time Configure Per-Interface Control of IGMP Membership Configure DVMRP Starting and Stopping DVMRP Configure DVMRP on an Interface Configure DVMRP Parameters Configure the DVMRP Routing Metric Configure DVMRP TTL & Scope Configure a DVMRP Tunnel Monitor IGMP & DVMRP Chapter 8: Multicast Routing Configuration Guide 150 SmartSwitch Router User Reference Manual Show all interfaces running multicast protocols (IGMP, DVMRP). multicast show interfaces Show al l multicast routes. Chapter 9 IPX Routing Configuration IPX Routing Overview RIP (Routing Information Protocol) SAP (Service Advertising Protocol) Configuring IPX RIP & SAP IPX RIP IPX SAP Creating IPX Interfaces IPX Addresses Configuring IPX Interfaces and Parameters Configure IPX Addresses to Ports Configure IPX Interfaces for a VLAN Specify IPX Encapsulation Method Configure IPX Routing Enable IPX RIP Enable SAP Configure Static Routes Configure Static SAP Table Entries Control Access to IPX Networks Page Monitor an IPX Network Adds a SAP access list Adds a GNS access list Page Page Configuring SSR Access Security Configure RADIUS Configure TACACS Configure TACACS Plus Configure Passwords Layer-2 Security Filters Configuring Layer-2 Address Filters Configuring Layer-2 Port-to-Address Lock Filters Configuring Layer-2 Static Entry Filters Configuring Layer-2 Secure Port Filters Monitor Layer-2 Security Filters Layer-2 Filter Examples Page Layer-3 Access Control Lists (ACLs) Layer-3 & Layer-4 Traffic Filters (Access Control List) Anatomy of an ACL Rule Ordering of ACL Rules Implicit Deny Rule Applying ACLs to Interfaces Applying ACLs to Services ACL Logging Maintaining ACLs Offline Using TFTP or RCP Maintaining ACLs Using the ACL Editor Configure ACL Monitoring Access Control Lists Page Chapter 11 QoS Configuration QoS & Layer-2/Layer-3/Layer-4 Flow Overview Layer-2, Layer-3 & Layer-4 Flow Specification Precedence for Layer-3 Flows SSR Queuing Policies Configure Layer-2 QoS Configuring Layer-3 & Layer-4 QoS Configuring IP QoS Policies Configuring IPX QoS Policies Configuring SSR Queueing Policy Allocating Bandwidth for a Weighted-Fair Queuing Policy Monitoring QoS Chapter 12 Performance Monitoring Guide Performance Monitoring Overview Page Configuring the SSR for Port Mirroring Page Page Deactivating the Line Card Removing the Line Card Hot Swapping One Type of Line Card With Another Hot Swapping a Secondary Control Module Deactivating the Control Module Removing the Control Module Installing the Control Module Hot Swapping a Switching Fabric Module (SSR 8600 only) Page Page Basic VRRP Configuration Symmetrical Configuration Page Multi-Backup Configuration Page Page Page Additional Configuration Page Monitoring VRRP ip-redundancy trace ip-redundancy show VRRP Configuration Notes