Manuals / Enterasys Networks / Computer Equipment / Network Card

Enterasys Networks 2H258, 2E253, 2H253, 2H252 manual Radius

Models: 2H258 2E253 2H252 2H253

1 390

Download 390 pages 24.92 Kb

Page 315

Built-in Commands

radius

Description: Enables, disables, and configures RADIUS authentication, which can only be used when the client has been properly configured and enabled. When the RADIUS Client is not enabled, the legacy password authentication will run as before. For more about Radius Client, refer to Section 3.6.1.

Syntax: radius radius status

radius [enable disable] radius prim_ip <server ip> radius sec_ip <server ip> radius prim_ip <server ip> radius sec_ip <server ip> radius timeout <n> radius retry <n>

radius clear

radius prim_auth_port <n> radius sec_auth_port <n> radius prim_acct_port <n> radius sec_acct_port <n>

radius last_resort < [localremote] [acceptrejectchallenge] > radius prim_secret

radius sec_secret

Network Tools Screens 11-23

Image 315

Enterasys Networks 2H258, 2E253, 2H253, 2H252 manual Radius

Contents

SmartSwitch 2200 Series Page Page Enterasys NETWORKS, INC Program License Agreement Page Page Contents Device Configuration Menu Screens Port Configuration Menu Screens Configuration Menu Screens Layer 3 Extensions Menu Screens Network Tools Screens Generic Attribute Registration Protocol Garp Figures Xiii Xiv Tables Xvi Tables About This Guide Using this GuideStructure of this Guide Xix Document Conventions Related DocumentsBold type Typographical and Keystroke ConventionsPage Overview IntroductionManagement Agent In-Band vs. Out-of-Band Navigating Local Management ScreensLocal Management Requirements None Defined Local Management Screen ElementsSelection Fields Event Message FieldDisplay Fields Input FieldsLocal Management Keyboard Conventions Command FieldsYour email address Getting HelpPage Local Management Requirements Management Terminal SetupConsole Cable Connection 2H252-25R SmartSwitch device is shown in -1as an exampleVT100ID Management Terminal Setup ParametersTelnet Connections Monitoring AN Uninterruptible Power SupplyDB9 Port RJ45 COM Port Page Accessing Local Management 802.1Q Switching Mode, LM Screen Hierarchy Exiting Local Management Screens Using the Exit CommandUsing the Return Command Selecting Local Management Menu Screen ItemsWhen to Use Using the Next and Previous CommandsUsing the Clear Counters Command Password ScreenScreen Example How to AccessEnter Screen Navigation Path Device Menu ScreenMenu ConfigurationMenu Descriptions DeviceNetwork ToolsSecurity Section Cont’dOverview of Security Methods Host Access Control Authentication Haca Overview of Security Methods 14Accessing Local Management Definitions of Terms and Abbreviations 2 802.1X Port Based Network Access Control2.2 802.1X Security Overview Concurrent Operation of 802.1X and MAC MAC Authentication OverviewAuthentication Method Selection Authentication Method SequenceAuthentication MAC 20Accessing Local Management MAC Authentication Control Security Menu Screen Refer to -4for a functional description of each menu item Radius PasswordsName Services AuthenticationModule Login Passwords Screen Passwords ScreenField Descriptions SwitchRadius Configuration Screen Setting the Module Login PasswordRetries TimeoutIP Address Last Resort Action/Local SelectableLast Resort Action/Remote Toggle Radius ClientSetting the Local and Remote Servers Setting the Last Resort AuthenticationName Services Configuration Screen Name Services Configuration ScreenSecure Harbour IP Switch Name ModifiableName Services Web AuthenticationSystem Authentication Configuration Screen System Authentication Configuration ScreenPort # AuthenticationAuthenticated , or Unauthenticated SystemEAP Port Configuration Screen EAP Port Configuration ScreenPort Backend State Authentication StatePort Control Initialize Port Force ReauthMaximum Requests 10 EAP Statistics Menu Screen EAP Statistics Menu ScreenAuthenticator EAP DiagnosticEAP Session 11 EAP Session Statistics Screen EAP Session Statistics Screen When to UseSessionOctetsTx Authenticate Server or a local Authentication Server MethodSessionID SessionOctetsRxPort Number EAP Authenticator Statistics Screen When to UseClear Counters Command Session User Name12 EAP Authenticator Statistics Screen Clear Counters 13 EAP Diagnostic Statistics Screen EAP Diagnostic Statistics Screen When to UseTimeouts Enters ConnectingLogoffs Connecting AuthenticatingOther Requests To AuthenticatedAccess Challenges Backend Statistics ResponsesMAC Port Configuration Screen ClearCounters 14 MAC Port Configuration Screen Port EnableSET ALL Ports MAC Supplicant Configuration ScreenMAC Address DurationFalse Reauthenticate SupInitialize Supplicant PlicantDevice Configuration Menu Screens General Configuration Device Configuration Menu ScreenInformation GeneralSnmp Resources0.0 General Configuration ScreenAddr Default GatewaySubnet Mask Tftp Gateway IPTime Operational ModeDevice Time Screen RefreshWebView Agg ModeClear Nvram IP FragmentationConfiguration Warning Screen, IP Address Setting the IP AddressConfiguration Warning Screen, Subnet Mask Setting the Subnet MaskSetting the Tftp Gateway IP Address Setting the Default GatewaySetting the Device Date Setting the Module NameSetting the Device Time Setting the Screen Lockout TimeEntering a New Screen Refresh Time Configuring the COM Port COM Port Warning Changing the COM Port ApplicationUPS Clearing NvramClear Nvram Warning Enabling/Disabling IP FragmentationSnmp Configuration Menu Screen Snmp Configuration Menu ScreenSnmp Community Names Configuration Screen Snmp Community Names Configuration Screen Establishing Community Names Snmp Traps Configuration Screen Snmp Traps Configuration ScreenTrap Community Configuring the Trap TableEnable Traps Trap Destination10 Access Control List Screen Access Control List ScreenIP Addr Access Control ListsEntering IP Addresses Entering Single AddressesMask Entering Ranges of Addresses Enable/Disable ACL XX KB System Resources Information ScreenSetting the Reset Peak Switch Utilization Flash Download Configuration Screen 12 Flash Download Configuration Screen Flash Download Configuration Screen Field Descriptions Download File Reboot AfterDownload Download Server IPConfiguration File Download Using Tftp Image File Download Using RuntimeConfiguration File Upload Using Tftp 36Device Configuration Menu Screens Port Configuration Menu Screens Port Configuration Menu Screen in Agg Mode, Huntgroup Port Configuration Menu ScreenRedirect EthernetInterface HSIM/VHSIMEthernet Interface Configuration Screen Port Type IntfDuplex ConfigLink SpeedHDX FC Ethernet Port Configuration ScreenRefer to -3for a functional description of each screen field Physical Port Default SpeedDefault Duplex Interface10Port Configuration Menu Screens Save to ALL Full Duplex FlowControl Half Duplex FlowSetting the Advertised Ability Selecting Field SettingsHSIM/VHSIM Configuration Screen Redirect Configuration Menu ScreenConfiguration Menu Redirect Configuration Menu Screen Port Redirect Configuration Screen Destination Port Source PortStatus Redirect ErrorsFrame Format Source Port nChanging Source and Destination Ports Vlan Redirect Configuration Screen Vlan Redirect Configuration Screen Source Vlan n Source VlanChanging Source Vlan and Destination Ports Aggregation Menu Usage NotesDefinitions to Know Rapid Reconfiguration Spanning TreeLink Aggregation 802.3ad Main Menu Screen Aggregator 1 802.3ad Port Screen When to Use802.3ad Port Screen MUX Viewing and Editing 802.3ad Port ParametersAggregator OperKey10 802.3ad Port Details Screen 1.1 802.3ad Port Details Screen When to UsePort Instance ActorSystemPriorityPartnerAdminSysID ActorOperState PartnerOperState Displaying Port Statistics LagidStats 11 802.3ad Port Statistics Screen 1.2 802.3ad Port Statistics Screen When to UseLACPDUsTx LACPDUsRxIllegalRx MarkerPDUsRxActorChurnCount LastRxTimedeltaActorChurnState PartnerChurnState12 802.3ad Aggregator Screen 2 802.3ad Aggregator Screen When to UseSysPri Viewing and Editing 802.3ad Aggregator ParametersDisplaying Aggregator Details AggInst13 802.3ad Aggregator Details Screen 2.1 802.3ad Aggregator Details Screen When to UsePartner Instance14 802.3ad System Screen 3 802.3ad System Screen When to UseNumber Broadcast Suppression Configuration ScreenSystem Identifier Number of PortsTotal RX Port #Setting the Reset Peak Setting the ThresholdConfiguration Menu Screens 802.1 Configuration Menu Screen 802.1 Configuration Menu ScreenSpanning Tree 802.1Q Vlan802.1p Tree Configuration Menu Spanning Tree Configuration Menu ScreenSpanning Tree Configuration Screen AgeTime VlanOperation Current STP ModeConfigured PriorityConfiguring a Vlan Spanning Tree Spanning Tree Port Configuration Screen Spanning Tree Port Configuration ScreenSwitch Address Age TimeSTP Vlan ID Enabling/Disabling the Default Spanning Tree Ports Pvst Port Configuration ScreenViewing Status of Spanning Tree Ports Corresponding Port Designated RootPort Designated Port Designated Port Port PriorityPort Designated Cost Port StatePage Vlan Configuration Menu 802.1Q Vlan Configuration Menu ScreensSummary of Vlan Local Management Preparing for Vlan Configuration802.1Q Vlan Configuration Menu Screen 802.1Q Vlan Configuration Menu Screen Static Vlan Current VlanVlan Port Classification Static Vlan Configuration ScreenFDB ID Vlan IDDEL Marked Creating a Static VlanVlan Name ADDRenaming a Static Vlan Displaying the Current Static Vlan Port Egress ListPaging Through the Vlan List Deleting a Static VlanStatic Vlan Egress Configuration Screen Static Vlan Egress Configuration ScreenEgress Setting Egress Types on Ports Setting the Egress Type on One or More Ports IndividuallySetting the Same Egress Type on All Ports Simultaneously Displaying the Next Group of Ports Current Vlan Configuration ScreenRead-Only An example of a dynamic Vlan is a Gvrp Vlan Vlan TypeCurrent Vlan Egress Configuration Screen Current Vlan Egress Configuration ScreenVlan Port Configuration Screen Override is Policy PvidPvid Configuring the Vlan Ports Changing the Port ModeAdmit Tagged Frames only Vlan Classification Configuration ScreenVID VIDMarked ClassificationDescription DEL ALL/DEL0x0000 000 000.000.000.0000x00000000 Tftp Http DNS Smtp Src TCP Port FTP Data 00-00-00-00-00-00 Nlsp IPX WAN CustomClassification Precedence Rules Layer Classification Precedence Displaying the Current Classification Rule Assignments ExampleAssigning a Classification to a VID Deleting One or More Classification Rules Protocol Port Configuration ScreenDeleting Line Items Deleting All Classification RulesProtocol Port Configuration Screen Classification Rule FieldClassify SET Ports to Assigning Ports to a VID/ClassificationAssigning One or More Ports Individually Assigning All Ports SimultaneouslyAssigning VID/Classification to Port Vlan Lists Screen Navigation Paths 802.1p Configuration MenuPort Priority Configuration 802.1p Configuration Menu Screen When to UseQueues Port PriorityTraffic Class TransmitPort Priority Configuration Screen Port Priority Configuration Screen Setting Switch Port Priority Port-by-Port Policy OverrideSet Traffic Class Information Screen Setting Switch Port Priority on All PortsTraffic Class Information Screen Traffic Class Information Screen Field Descriptions Traffic Class Configuration Screen Traffic Class Configuration ScreenAssigning the Traffic Class to Port Priority Traffic ClassSave Transmit Queues Configuration Screen Transmit Queues Configuration Screen Q2, Q3 Weights Q0, Q1Current Queueing ModeSetting the Current Queueing Mode Priority Classification Configuration Screen PID PID18802.1p Configuration Menu Screens No Change TOS=PID Custom TCP No Change TOS=PID Custom Dest IP Address Mask New IP TOS Tftp Src TCP Port New IP TOS FTP Data IP Fragments New IP TOS IP Fragments2 Start End New IP TOS 00000 Dest TCP Port Start End New IP TOS 00000 SAP 28802.1p Configuration Menu Screens About the IP TOS Rewrite Function LayerAssigning a Classification to a PID Displaying the Current PID/Classification AssignmentsDeleting PID/Classification/Description Line Items Deleting All Line ItemsDeleting One or More Line Items Protocol Port Configuration Screen See which ports are set to the PID/Classification indicated Assigning Ports to a PID/Classification Solving the Problem Switch Rate Limiting Configuration Screen Maximum Priority ListPort Number Modifiable Port Type FeatureDirection Configuring a Port 42802.1p Configuration Menu Screens Changing One or More Line Items Changing/Deleting Port Line ItemsMore About Rate Limiting Rate Limiting Configuration Screen Page Layer 3 Extensions Menu Screen Layer 3 Extensions Menu ScreensLayer 3 Extensions Menu Screen IGMP/VLANIGMP/VLAN Configuration Screen 120 Igmp VersionLast Member Query Query IntervalQuery Response RobustnessQuerier Uptime Switch Query IPMcastMartPoolSize Querier AddressIgmp State IGMP/VLAN Configuration ProcedurePage Device Statistics Menu Screen Device Statistics Menu ScreensLists the number of frames received, transmitted, filtered, Rmon Switch Statistics ScreenFrames Rcvd Frames TxmtdFrames Fltrd Frames Frwded Interface Statistics ScreenInterface Statistics Screen InOctetsInNonUnicast InErrorsOutErrors InUnicastMTU Displaying Interface StatisticsRmon Statistics Screen Rmon Statistics ScreenOwner CRC Align ErrorsRmon Index Data SourceTotal Packets Oversized PktsFragments JabbersDisplaying Rmon Statistics 1024 1518 OctetsIndex nn Network Tools Screens Screen ExampleNetwork Tools Help Screen Refer to -1for a list of the commands Alias CommandAlias Stats ExamplesArp-a ArpSyntax Arplearn normal limited status Options Syntax Bridge ENABLE/DISABLE IFNUM/ALL OptionsArplearn BridgeSyntax Cdp enable/disable/status Options CdpDefroute Dynamicegress Syntax dynamicegress action vid Options actionVid Syntax Enable Group Disable Group Trap #ALL Commands for Listing Events Syntax gigabitportmode active redundant status Syntax igmpv3drop enable disable statusGigabitportmode Igmpv3dropLgframeadmin Loopbackdetect Syntax linktrap enable/disable/status PORT/allSyntax loopbackdetect enable disable state LinktrapSyntax maclock show port# all MaclockMaclock set trap port# all enable disable Syntax Maclock set enable port# all globalMaclock set disable port# all global Maclock set macaddress port# all create enable disableMaclock show Stations Netstat Maclock set enable globalSyntax nonbridgeifnum 0 9999 status NonbridgeifnumPing PassiveStpPolicy set port portnumberorrangeorall profileindex PolicySyntax policy show profile profileindex Policy show port portnumberorrangeorallPolicy show port Examples ContiuedRadius 11-24Network Tools Screens Radius client Character string for the shared secret code. For securitySyntax ratelimitmode status highrange default lowrange RatelimitmodeExamples Cont’d Syntax reset Options None Example -reset ResetSatsize ShowSyntax Satsize 8 16 status Options Show Appletalk interfaces Syntax stpEdgePort status SoftresetSyntax softreset Options None StpEdgePortSyntax StpForceVersion 0 2 status Options StpForceVersionValue Syntax stpLegacyPathCost enable disable statusStpLegacyPathCost RecommendedStpPointToPointMAC Syntax stpRealTimeMsgAge enable disable status StpPortStpRealTimeMsgAge Syntax Telnet IP address Port # Options Syntax Suppresstopologytraps enable disable OptionsSuppresstopologytraps TelnetSyntax timedreset status t seconds resetnv dontresetnv TimedsoftresetTimedreset Syntax timedsoftreset status t seconds resetnv dontresetnvSyntax Traceroute IP address Options TracerouteVrrpPort EXAMPLE, Effects of Aging Time on Dynamic Egress Options None Example -done Done, quit, exitVlan Operation and Network Applications Example of a Vlan Defining VLANsTypes of VLANs 12.2.1 802.1Q VLANsOther Vlan Strategies Benefits and Restrictions Vlan TermsIngress Tagged Frame Default VlanFiltering Database Identifier FDB IDGmrp QcstpGarp Garp Vlan GvrpVlan Operation Configuration ProcessCustomizing the Vlan Forwarding List Vlan Switch OperationDefining a Vlan Classifying Frames to a VlanFID Forwarding Decisions Receiving Frames from Vlan PortsUntagged Frames Tagged FramesVlan Configuration Managing the SwitchKnown Unicasts Switch with VLANs Switch Without VLANsSwitch Management with VLANs 12-14VLAN Operation and Network Applications 3069162 Assigning a Vlan ID and Vlan Name Quick Vlan WalkthroughAssigning Ports to the Vlan Egress list Walkthrough Stage One, Static Vlan Configuration ScreenWalkthrough Stage Two, Port 3 Egress Setting Walkthrough Stage Three, Port 10 Egress Setting Configuring the Port ParametersWalkthrough Stage Four, Vlan Port Configuration Examples Example 1, Single Switch OperationFor the Red Vlan Frame Handling 11 Switch Configured for VLANsExample 2, VLANs Across Multiple Switches Redco Blue Industries 12-26VLAN Operation and Network Applications Switch 12-28VLAN Operation and Network Applications Redco Blue Industries User a Blue Industries Redco 15 Transmitting to Bridge Switches 1 Finance Department Example 5, Using Dynamic Egress to Control Traffic PCs 00.00.00.00.00.0A Switch SET ALL Ports no Vlan Operation and Network Applications Page Generic Attribute Registration Protocol Garp HOW IT Works About Igmp Supported Features and Functions Detecting Multicast Routers Page Numerics IndexIndex-2 Index-3 Index-4 Index-5 Index-6 Index-7 Index-8 Index-9 Index-10 Index-11