Security Menu | Fujitsu BX600 manual

Security Menu

Web-Based Management Interface

99	Intelligent Blade Panel Module

Image 100

Fujitsu BX600 manual Security Menu

Contents

Primergy BX600 Blade Server Systems Primergy BX600 Blade Server Systems Comments… Suggestions… Corrections… Page Contents Intelligent Blade Panel Module Intelligent Blade Panel Module Intelligent Blade Panel Module Important Notes Information About Boards Compliance Statements Industry Canada Class a LVD Taiwan Bsmi Class a Australia AS/NZS 3548 1995 Class a Introduction Features of the IBP Module Layer 2 Features Igmp Snooping Vlan Transparency Supported FeaturesSelf-Learning MAC Addresses Automatic Aging for MAC Addresses Service Vlan & Service LAN Support Port Backup SupportUplink Set Support Port Group Support BootP and Dhcp Clients IBP Module Management FeaturesSave Configuration as file Various Files of Management Operation Snmp Alarms and Trap Logs Configuration File Download and UploadCommand Line Interface Provision Security Feature Port Based AuthenticationLocked Port Support Radius Client Description of Hardware System LED Internal Ports Page Primergy GbE Switch Blade 30/12 Internal Ports List Primergy BX620 Features and Benefits Status of LEDsPort LEDs Connectivity Performance Management Notational Conventions Target Group Technical Data DimensionsElectrical data National and international standards Environmental conditions Network Planning Introduction to IBP Connecting to 1000BASE-T Devices Making Network Connections Cable Testing for Existing Category 5 Cable 1000BASE-T Cable Requirements Adjusting Existing Category 5 Cabling for 1000BASE-T 1000BASE-T Pin Assignments Overview Package ContentsUnpacking the IBP Module Connecting the IBP Module Mount the IBP Module Select 2 Console Redirection Switch Blade Start up and Configuration the IBP Module Port Default Settings Configuring the Terminal Under Properties, select VT100 for Emulation mode Booting Device Boot Image Download Erasing the Device ConfigurationSoftware Download Operation Code CLI Software Download Through Tftp Server System Image Download Tftp Enter y. The device reboots Overview Configurable Data Non-Configurable DataCommand Buttons Main Menu Groups Administration View Uplink Set Information Managing Port Groups Configuring Port Group Configuration Command Buttons Viewing Port Group Information Selection Criteria Viewing Vlan Port Group Information Groups Administration Configurable Data Viewing Service LAN Information Groups Administration Configurable Data Viewing Service Vlan Information Groups Administration Managing Port Backup Configuring Port Backup Configuration Viewing Port Backup Status Groups Administration Panel Settings Menu Panel Settings Menu Viewing Panel Description Page Configurable Data Configuring Inband Administration Terminal interface via the EIA-232 port Panel Settings Menu Configuring Telnet Session Page Configurable Data Panel Settings Menu Configuring Serial Port Page Configurable Data Selection Criteria Panel Settings Menu Defining Dhcp Client Configuring Dhcp Restart Configuring Dhcp Client-identifier Defining Snmp Configuring Snmp Community Configuration Configuring Snmp Trap Receiver Configuration Viewing Snmp supported MIBs Panel Settings Menu Panel Settings Menu Viewing Sntp Global Status Non-Configurable Data Configuring Sntp Server Configuration Configurable Data Viewing Sntp Server Status Non-Configurable Data Unknown IPV4 Panel Settings Menu Configurable Data Panel Settings Menu Refresh Refresh the configuration value again Reset All Configuration to Defaults Page Command Buttons Managing System Utilities Panel Reset Command ButtonsReset the Passwords to Defaults Page Command Buttons Configurable Data Uploading Specific Files from Panel Removing Specific File Copying Running Configuration to Panel Defining Ping Function Submit This will initiate the ping Security Menu Viewing Radius Statistics Page Non-Configurable Data Viewing Radius Server Statistics Page Selection Criteria Security Menu Security Menu Resetting All Radius Statistics Page Command Buttons Configurable Data Security Menu Non-Configurable Data Security Menu Extended Configuration Menu Viewing Buffered Log Configuring Command Logger Page Configurable Data Configuring Console Log Viewing Event Log Configuring Hosts configuration Page Configurable Data Configuring syslog configuration Page Configurable Data Extended Configuration Menu Viewing Login Session Page Non-Configurable Data 107 Intelligent Blade Panel Module 108 Intelligent Blade Panel Module 109 Intelligent Blade Panel Module 110 Intelligent Blade Panel Module 111 112 Intelligent Blade Panel Module 113 Intelligent Blade Panel Module Extended Configuration Menu Extended Configuration Menu Viewing Each Port Summary Statistics Page Selection Criteria 117 Intelligent Blade Panel Module 118 Intelligent Blade Panel Module 119 Intelligent Blade Panel Module 120 Intelligent Blade Panel Module Viewing Access Control Summary Page Non-Configurable Data 122 Intelligent Blade Panel Module 123 Intelligent Blade Panel Module Defining Access Control User Login Page Selection Criteria Defining Each Port Access Privileges Page Selection Criteria Extended Configuration Menu Managing IP Filter IP Filter Configuration 128 Intelligent Blade Panel Module Defining User Login 130 Intelligent Blade Panel Module CLI Command Format CommandExample Ip address ipaddr netmask vlan-id Example Clear port-group Parameters 2CLI Mode-based TopologyValues Conventions Network Address Syntax Address Type Format Range IPAddrMacAddr Annotations System Information and Statistics commands Show running-config Show eventlog Show running-config all scriptname Show sysinfo System Information Show systemShow hardware Show version Show loginsession Interface Show interface status 4Device Configuration CommandsShow interface status slot/port all Show interface slot/port Show interfaceShow interface counters 142 Intelligent Blade Panel Module Show interface counters detailed slot/port switchport Total Packets Received with MAC Errors Total Packets Received Without ErrorsTotal Packets Transmitted Octets Total Packets Transmitted Successfully Total Transmit ErrorsTotal Transmited Packets Discards 146 Intelligent Blade Panel Module Show interface switch Show interface IBP Interface Interface range Speed-duplex Speed-duplex 10 100 full-duplex half-duplexSpeed-duplex all 10 100 full-duplex half-duplex Full duplex Full duplex half duplex Half duplex Negotiate no negotiate NegotiateNegotiate all no negotiate all Capabilities Storm-control flowcontrol DescriptionStorm-control flowcontrol no storm-control flowcontrol Syntax Show mac-addr-table macaddr all Show mac-address-table igmpsnooping Show mac-address-table multicast Show mac-address-table multicast macaddr vlanid all Show mac-address-table stats Default Setting Show mac-address-table agetime Default SettingShow mac-address-table stats Show mac-address-table agetime Igmp Snooping Show Commands Show igmp snooping Mac-address-table aging-time Configuration Commands Igmpsnooping Igmpsnooping uplinkSetName no igmpsnooping uplinkSetNamePort Channel Lacp Lacp uplinkSetName no lacp uplinkSetName Uplink Sets Show Commands Show lacp Uplink-set uplinkSetName no uplink-set uplinkSetName Configuration Commands Uplink-setPort Group Configuration Commands Port-group Port-group portGroupName no port-group portGroupName Port Backup Show Commands Configuration Commands Port-backup Port-backup uplinkSetName no port-backup uplinkSetNameDefault Setting Command Mode Port-backup no port-backup Link State Show Commands Configuration Commands Linkstate Linkstate uplinkSetName no linkstate uplinkSetName Vlan Port Groups Show CommandsShow vlan-group vlanGroupName Configuration Commands Vlan-group Vlan-group vlanGroupName no vlan-group vlanGroupName 167 Intelligent Blade Panel Module Service LAN Show Commands Configuration Commands Svc-lan Svc-lan svcLanName no svc-lan svcLanName Service Vlan Show Commands Configuration Commands Svc-vlan Svc-vlan svcVlanName no svc-vlan svcVlanName Network Commands Show ip interface Management CommandsShow ip redirects 1.4 mtu Show ip filterMtu 1518-9216 no mtu Command Usage Ip default-gatewayIp default-gateway gateway no ip default-gateway Ip address Ip address protocol Ip address protocol bootp dhcp vlanID noneIp address mgmt-vlan Ip filter Ip filter no ip filter Serial Interface Commands Show line console Ip filter ipaddr no ip filter ipaddr Line console Baudrate Password-threshold Exec-timeoutPassword-threshold 0-120 no password-threshold Silent-time Telnet Session CommandsTelnet host port debug line echo Show line vty Line vty Exec-timeout 1-160 no exec-timeout Maxsessions 0-5 no maxsessions MaxsessionsSessions Sessions no sessions Telnet sessionsTelnet sessions no telnet sessions Telnet maxsessions Telnet exec-timeout 1-160 no telnet exec-timeout Telnet exec-timeoutTelnet maxsessions 0-5 no maxsessions Snmp Server Commands Show snmp Show telnet Show trapflags Snmp-server sysname Snmp-server sysname nameSnmp-server location Syntax Snmp-server location loc Snmp-server community Snmp-server contactSnmp-server community name no snmp-server community name 190 Intelligent Blade Panel Module Snmp-server community ro rw name Snmp-server host Snmp-server enable trapsSnmp-server host ipaddr name no snmp-server host name No This command disables Multiple User trap Snmp Trap Commands Show snmptrap Snmp trap link-status no snmp trap link-status Snmp trap link-statusSnmp trap link-status all no snmp trap link-status all Snmptrap name ipaddr no snmptrap name ipaddr Snmptrap name ipaddrSnmptrap ipaddr Snmptrap mode Snmptrap mode name ipaddr no snmptrap mode name ipaddrHttp commands Show ip http Snmptrap ipaddr name ipaddr ipaddrnew Ip javamode Ip javamode no ip javamode Ip http port Ip http port 1-65535 no ip http portIp http server Ip http server no ip http server Ip http secure-port Ip http secure-port portid no ip http secure-portIp http secure-server Ip http secure-server no ip http secure-server Secure Shell SSH Commands Show ip ssh Ip http secure-protocol Ip ssh no ip ssh Ip sshIp ssh protocol Ip ssh maxsessions Ip ssh timeoutIp ssh maxsessions 0-5 no ip ssh maxsessions Dhcp Client Commands Ip dhcp restart Ip ssh timeout 1-160 no ip ssh timeoutIp dhcp client-identifier System Burned In MAC Address Lock Commands Lockmessage messagestring defaultLock lockidentifier Exclusive no lock lockidentifierALL Lockmessage Lockreset Show lock Show Commands Show logging System Log Management CommandsShow logging buffered Show logging traplogs Show logging traplogShow logging hosts Display Message Index used for deleting Configuration Commands Logging bufferedLogging buffered no logging buffered Logging console Logging buffered wrap no logging buffered wrapLogging console severitylevel 0-7 no logging console Logging host Logging host hostaddress port severitylevel Logging syslog Logging host reconfigure hostindex hostaddressLogging syslog no logging syslog Logging syslog port portid no logging syslog port Clear logging buffered Script Management Commands Script applyScript apply scriptname Script delete Script show Script listScript show scriptname Show Commands Show users User Account Management CommandsConfiguration Commands Username Username username password nopassword no username username Username snmpv3 authentication Username snmpv3 encryption Show Commands Show users authentication Security CommandsShow authentication Show authentication users Show dot1x Show dot1x detail Show dot1x statistics Show dot1x statistics slot/port Show dot1x summary slot/port all Show dot1x summaryShow dot1x users Show radius-servers Secret Configured Yes / NoShow radius Radius Accounting Mode Enabled or disabled Show radius accounting statistics ipaddr Show radius statistics Secret Configured Yes or NoShow radius statistics ipaddr Show tacacs Show port-security Show port-security dynamic slot/port Configuration Commands Authentication login Username defaultlogin Possible method values are local, radius, reject, and tacacs Username login Username login user listname 3 Dot1x Configuration Commands 3.1 dot1x initialize 3.2 dot1x default-login 3.3 dot1x login Dot1x login user listname3.4 dot1x system-auth-control Dot1x system-auth-control no dot1x system-auth-control 3.5 dot1x user 3.6 dot1x port-control 3.7 dot1x max-req 3.8 dot1x re-authentication Dot1x re-authentication no dot1x re-authentication3.9 dot1x re-reauthenticate Dot1x max-req 1-10 no dot1x max-req 3.10 dot1x timeout Radius Configuration Commands Radius accounting mode Radius accounting mode no radius accounting mode Radius-server host Radius-sever key Radius-server retransmit Retries the maximum number of times Range 1 Radius-server timeout seconds no radius-server timeout Radius-server timeoutRadius-server msgauth Radius-server primary Tacacs Configuration CommandsTacacs no tacacs Tacacs mode Tacacs mode 1-3 master slave no tacacs modeTacacs server-ip Tacacs server-ip 1-3 ipaddr no tacacs server-ip Tacacs port Tacacs port 1-3 1-65535 no tacacs portTacacs key Tacacs key 1-3 no tacacs key Tacacs timeout Tacacs timeout 1-3 1-255 no tacacs timeoutTacacs retry Tacacs retry 1-3 1-9 no tacacs retry Port-security no port-security Default Setting Port Security Configuration Commands Port-securityPort-security max-dynamic Port-security max-static Port-security max-static 0-20 no port-security max-static Port-security mac-address Syntax Port-security mac-address move Default SettingPort-security mac-address move Show Commands Show sntp Sntp CommandsShow sntp client Configuration Commands Sntp client mode broadcast unicast no sntp client mode Sntp client modeSntp broadcast client poll-interval Sntp client port portid 6-10 no sntp client port Sntp client portSntp unicast client poll-interval Sntp unicast client poll-timeout Sntp unicast client poll-retry Sntp server Sntp clock timezone System Utilities 10.2.9Sntp clock timezone name 0-12 0-59 before-utc after-utc Clear Clear arp Clear traplog Clear eventlog Clear config Clear pass Syntax Clear mac-addr-table dynamic Default Setting Clear mac address tableClear counters Clear counters slot/port all Enable passwd Clear igmp snooping Clear dot1x statistics Clear ip filterClear dot1x statistics all slot/port Clear tacacs Clear radius statisticsCopy Privileged Exec Files download from PC to board Syntax Copy running-config startup-config filename Delete Copy clibanner url copy url clibanner no clibanner11.4 dir Dir boot-rom config opcode filename WhichbootBoot-system Display Message Column Heading Description Boot-system boot-rom config opcode filename Ping Traceroute Logging cli-command Syntax Logging cli-command Default SettingCalendar set Calendar set mm/dd/yy hhmmss Configure ReloadDisconnect Disconnect 0-10 all Promptstring Prompt string Default Setting HostnameHostname promptstring Quit Dhcp Commands Ip dhcp client-identifier text text hex hex Using Snmp Supported MIBs Standard MIBs are listed in the following table Private enterprise MIB is listed below Accessing MIB Objects RFC 2233 IF-MIB Accessing MIB ObjectsUsing Snmp 279 Intelligent Blade Panel Module Supported Traps Snmp traps supported include the following items Default Settings Overview system default settings Default settings for all the configuration commands SSLPage In-band Administration SSH DSA Key SSH RSA1 Key SSH RSA2 Key Troubleshooting and Tips Diagnosing IBP Indicators Accessing the Management Interface Symptom Action