Manuals / HP / Computer Equipment / Switch

HP V1910 Create an ISP domain, Configure the AAA authentication method for the ISP domain, 339

Models: V1910

1 483

Download 483 pages 47.39 Kb

Page 351

Image 351

g.Create an ISP domain

∙Enter test in the Domain Name textbox.

∙Select Enable to use the domain as the default domain.

∙Click Apply to finish the operation.

#Configure the AAA authentication method for the ISP domain.

∙ Select the Authentication tab.

h. Configure the AAA authentication method for the ISP domain

∙Select the domain name test.

339

Page 351

Image 351

HP V1910 Create an ISP domain, Configure the AAA authentication method for the ISP domain, ∙ Select the domain name test

Contents

Part number Document version HP V1910 Switch SeriesWarranty Contents Page Page STP177 Page Page Page Page Page Page Overview Logging in to the web interface Configuration through the web interfaceDefault login information Web-based network management operating environmentExample Login page of the web interfaceNavigation tree Body area Title area Web-based configuration interfaceLogging out of the web interface Introduction to the web interfaceFunction menu Description User level Web user levelIntroduction to the web-based NM functions Description of Web-based NM functionsUsed at the next startup from the host of the current VCT RmonSnmp Vlan MACMstp Igmp LacpTheir partner ports LldpAAA ARPRadius PKICRL Class Commonly used buttons and icons Introduction to the common items on the web pagesButtons and icons DisplayAdvanced search Content display by pagesSearch function Sorting functionSort display based on MAC address in the ascending order Configuration guidelinesConsole cable Configuration at the CLISetting up the configuration environment Getting started with the CLINetwork diagram for configuration environment setup Setting terminal parametersSet the serial port used by the HyperTerminal connection Connection description of the HyperTerminalSet the serial port parameters Select File  Properties in the HyperTerminal windowHyperTerminal window Enter your username at the Username prompt Set terminal emulation in Switch Properties dialog boxPress Enter. The Password prompt display Logging in to the CLICLI commands IpsetupInitialize Password Password# Modify the login password of user admin Quit PingSummary Reboot# Display summary information of the device UpgradeNetwork requirements Configuration procedure# Reboot the switch Configuring system parameters Configuration wizardBasic service setup Entering the configuration wizard homepageConfiguring management IP address Select a Vlan interface Admin StatusConfigure IPv4 Configure how the Vlan interface obtains an IPv4 addressManual Important Finishing configuration wizardConfiguration finishes ItemDescriptionStack management configuration task list Configuring stack managementStack management configuration task list Network diagram for stack managementConfiguring global parameters of a stack Setup Configuration items of global parameters Topology summary Fields of topology summary Configuring stack portsReturn to Stack management configuration task list Displaying topology summary of a stackStack configuration example Logging into a member switch from the master switchDisplaying device summary of a stack Stack Configure global parameters for the stack on Switch a Configure a stack port on Switch a Configure stack ports on Switch B Configure a stack port on Switch C Configuration guidelines System information SummaryDisplaying device summary Displaying system informationRecent system operation logs Displaying device informationBasic system information System resource stateDevice information Configuring idle timeout period Device basic information configurationConfiguring device basic information Configuring system nameIdle timeout Set the idle timeout period for logged-in users System time configuration Configuring system timeSystem time configuration NTP System time configuration exampleSystem time configuration items Network diagram for configuring system timeConfigure Device a as the NTP server of Switch B Configure Device aConfiguration guidelines Setting syslog related parameters Log management configurationConfiguring log management Configuration task listDisplaying syslog Return to Log management configuration task listSee Display syslog Syslog display itemsSystem logs severity level Severity level Description ValueSetting loghost Set loghost Loghost configuration itemIP address of the loghost Backup configuration Configuration managementBack up configuration Restore configurationSave configuration Configuration restoreSave configuration confirmation Initialize confirmation dialog box InitializeFilename Device maintenanceSoftware upgrade Extension .binAlready exists, overwrite Device rebootDevice reboot Specifies the type of the startup configuration fileElectronic label Diagnostic informationDiagnostic information Electronic labelDiagnostic information file is created File management File management configurationFile management Displaying file listDownloading a file Uploading a fileRemoving a file Setup tab Port management configurationConfiguring a port Setting operation parameters for a portPvid Port configuration itemsMDI Multicast Suppression Input a number in the box below Percentage or by PPS as followsInput a percentage in the box below ConstrainViewing the operation parameters of a port Port management configuration example Network diagram for port rate configurationDetails tab Configure the rate of GigabitEthernet 1/0/4 Batch configure port rate Display the rate settings of ports Local port mirroring Port mirroring configurationIntroduction to port mirroring Implementing port mirroringCreating a mirroring group Configuring local port mirroringConfiguring local port mirroring Local port mirroring configuration task listReturn to Local port mirroring configuration task list Configuring ports for a mirroring groupMirroring ports of a port mirroring group Local port mirroring configuration example Configuration examplesCreate a local mirroring group Configuration progress dialog box Configure the mirroring portsConfigure the monitor port Adding a local user Add a user Local user configuration itemsUser management Managing usersSuper password Setting the super passwordInput are not consistent when you apply the configuration Switching to the management levelSuper password configuration items Switch to the management levelLoopback operation Loopback test configurationLoopback test result Test the status of the cable connected to an Ethernet port Testing cable statusDescription on the cable test result Status and length of the cableFailure Viewing port traffic statistics Flow interval configurationSetting the traffic statistics generating interval Monitoring port traffic statisticsPort traffic statistics Configuring storm constrain Storm constrain configurationStorm Constrain tab Configuring storm constrainThresholds for at least a type of traffic Upper threshold. Available options include∙ None-Performs no action Upper thresholdAfter that Crossed after thatWorking mechanism Rmon configurationHistory group Alarm groupRmon groups Ethernet statistics groupEvent group Configuring RmonConfiguring the Rmon statistics function Rising and falling alarm eventsTaskRemarks Configuring the Rmon alarm functionRmon statistics group configuration task list Rmon history group configuration task listDisplay Rmon running status Configuring a statistics entryRmon alarm configuration task list Displaying Rmon running statusConfiguring a history entry Return to Rmon statistics group configuration task list100 101 Configuring an event entryReturn to Rmon history group configuration task list Buckets Granted102 Configuring an alarm entryReturn to Rmon alarm configuration task list None of them is selected, the system will take no actionStatics Item Displaying Rmon statistics information Log-and-trap104 Rmon statistics information Fields of Rmon statistics Return to Display Rmon running status Displaying Rmon history sampling informationNode etherHistoryOctets CRCAlignErrorsCorresponding to the MIB node etherHistoryCRCAlignErrors Number of the entry in the system bufferLog Return to Display Rmon running status Rmon configuration exampleNetwork diagram for Rmon Displaying Rmon event logs109 110 Display Rmon statisticsConfigure an event group Display the index of a event entry111 112 Configure an alarm groupEnergy saving configuration Configuring energy saving on a portPoE Disabled Disable PoE on the port 113 ItemDescription MIB tree Snmp configurationSnmp mechanism Relationship between an NMS, agent and MIBSNMPv1 or SNMPv2c configuration task list Snmp configurationConfiguring SNMPv1 or SNMPv2c Perform the tasks in 1 to configure SNMPv1 or SNMPv2cConfiguring Snmp trap Configuring SNMPv3Perform the tasks in 1 to configure SNMPv3 SNMPv3 configuration task listLocal Engine ID Set up Configuration items for enabling SnmpSpecify to enable or disable Snmp Configure the local engine IDCreate an Snmp view Configuring an Snmp viewCreating an Snmp view ViewSet the subtree mask Configuration items for creating an Snmp viewAdding rules to an Snmp view Identify a MIB subtree121 Configuring an Snmp communityConfigure an Snmp community Create an Snmp Community Add rules to an Snmp viewSnmp group Configuring an Snmp groupConfiguration items for configuring an Snmp community Return to SNMPv1 or SNMPv2c configuration task listAgent Configuring an Snmp userReturn to SNMPv3 configuration task list Objects on the deviceDescription Configuring Snmp trap function Set the destination IP address Destination IP AddressAddress in the text box according to the IP address type Snmp configuration example Network diagram for Snmp configurationNMS 128 Enable Snmp129 130 Create an Snmp groupEnable the agent to send Snmp traps Add target hosts of Snmp traps131 132 Configuration verificationDisplaying interface statistics Interface statisticsField Description Vlan fundamentals Vlan configurationVlan diagram Introduction to Vlan136 Vlan typesTraditional Ethernet frame format Position and format of Vlan tagFrame Tag removed or intact depending on your configuration 137Introduction to port-based Vlan Port link typeConfiguring a Vlan Vlan configuration task list approachCreating VLANs 139 Create tab Configuration items of creating VLANsReturn to Vlan configuration task list approach Selecting VLANsSelect Vlan tab Configuration items of selecting VLANs Modifying a Vlan140 141 Modify Vlan tab Configuration items of modifying a VlanAssigned to this Vlan Aggregate interfaces from this listUntagged Modify Port tab Configuration items of modifying portsModifying ports Select the ports to be modifiedNetwork diagram for Vlan configuration Vlan configuration example144 145 Create Vlan 2, Vlan 6 through Vlan 50, and Vlan146 Set a Vlan range147 148 Vlan interface configuration task list Vlan interface configurationConfiguring Vlan interfaces Perform the tasks in 1 to configure a Vlan interfaceModifying a Vlan interface Create tab Configuration items of creating a Vlan interfaceReturn to Vlan interface configuration task list BootpSelect the Vlan interface to be configured Modify tab Configuration items of modifying a Vlan interfaceSelected Vlan interface Is up if one or more Ethernet ports in the Vlan are up152 Voice Vlan assignment modes Voice Vlan configurationDefault OUI addresses of different vendors OUI addresses154 Co-relationConfiguring the voice Vlan Security mode and normal mode of voice VLANsVoice Vlan mode Packet type Packet processing mode Configuring voice Vlan globally Configuring voice Vlan on a portAdding OUI addresses to the OUI list Timer expires, the port is removed from the voice Vlan Configuring voice Vlan globallyConfiguring voice Vlan on a port Configure voice Vlan Global voice Vlan configuration itemsSet the voice Vlan ID Set the voice Vlan assignment mode of a portBe configured as the voice Vlan Voice Vlan function on the port159 Adding OUI addresses to the OUI list160 Voice Vlan configuration examples161 Create Vlan162 Configure GigabitEthernet 1/0/1 as a hybrid port163 Configure the voice Vlan function globally164 Verify the configurationAdd OUI addresses to the OUI list Current OUI list of the device165 Current voice Vlan information166 167 168 Assign GigabitEthernet 1/0/1 to Vlan 2 as an untagged member169 Configure voice Vlan on GigabitEthernet 1/0/1170 171 172 MAC address configuration173 Configuring MAC addressesConfiguring a MAC address entry MAC address table of the device174 MAC tabClick Add in the bottom to enter the page as shown in b Create a MAC address entryPort Set the port to which the MAC address belongs Setting the aging time of MAC address entriesConfiguration items of creating a MAC address entry Set the ID of the Vlan to which the MAC address belongsMAC address configuration example Create a static MAC address entry176 Root bridge Mstp configurationSTP protocol packets Basic concepts in STPDescription of designated bridges and designated ports How STP worksDesignated bridge and designated port Path costSelection of the optimum configuration Bpdu Calculation process of the STP algorithmStep Actions Selection of the root port and designated ports Step Description180 ∙ Comparison process and result on each device Network diagram for the STP algorithmInitial state of each device Device Port name Bpdu of portCP2 1, 0, 1, BP2 BP2 with the configuration Bpdu of BP2. If the calculated0, 1, BP2 before the configuration Bpdu is updated Bpdu183 Configuration Bpdu forwarding mechanism in STPFinal calculated spanning tree Blocked port CP2 0, 0, 0, AP2 Root port CP2 0, 5, 1, BP2184 STP timers185 Mstp featuresSTP and Rstp limitations Mstp basic concepts186 MST regionVLAN-to-MSTI mapping table Basic concepts in MstpPort roles Regional rootCommon root bridge Boundary portPort states Port roles188 Msti calculation How Mstp worksImplementation of Mstp on devices Cist calculationMstp configuration task list Configuring MstpConfiguring an MST region Perform the tasks described in 1 to configure MstpVlan ID Return to Mstp configuration task listMST region Click Modify to enter the page shown in bConfiguring Mstp globally Bridge Diameter Set the STP working mode∙ STP-Each port on a device sends out STP BPDUs Number of devices on the path composed of the most devicesSTP Configuring Mstp on a portRecommends you to use the default value Set the type of protection to be enabled on the portManually configure path cost for ports Configuration may cause a temporary loopDisplaying Mstp information of a port Protection typesProtection type Description Discarding Port Summary tabForwarding LearningWhether or not the port is an edge port Mstp configuration example Network diagram for Mstp configuration199 200 Configure an MST regionRegion tab ∙ Click Modify to enter the page shown in c201 Configure Mstp globally on Switch a202 Configure Mstp globally on Switch D When configuring MSTP, follow these guidelines203 Page Aggregation group Link aggregation and Lacp configurationBasic concepts Aggregate interfaceLink aggregation modes Class-two configurationsStatic aggregation mode Class-two configurations207 Dynamic aggregation modeConfiguring a dynamic aggregation group Configuring link aggregation and LacpLoad sharing mode of an aggregation group Configuring a static aggregation groupCreating a link aggregation group Dynamic aggregation group configuration task listSetting Lacp priority Displaying information of LACP-enabled ports210 Assign an ID to the link aggregation group to be createdDisplaying information of an aggregate interface Setting Lacp prioritySystem Priority Set the Lacp priority of the local system Displaying information of LACP-enabled portsLacp priority configuration items Also on LACP-disabled portsDisplay information about LACP-enabled ports Fields in the LACP-enabled port summary tableField/button Description Link aggregation and Lacp configuration example Describes the fields in the Partner Port Details tableFields in the Partner Port Details table 215 Network diagram for static link aggregation configurationCreate static link aggregation group ∙ Set the link aggregation interface ID to216 Create dynamic link aggregation group217 Lldpdu Lldp configurationBackground LLDPDUsFCS TLVsSNAP-encapsulated Lldpdu format Lldpdu encapsulation formatIeee 802.1 organizationally specific TLVs Basic Lldp TLVsType Description Remarks Ieee 802.1 organizationally specific TLVsLLDP-MED TLVs LLDP-MED TLVsIeee 802.3 organizationally specific TLVs Ieee 802.3 organizationally specific TLVsCompatibility of Lldp with CDP How Lldp worksLldp configuration task list Configuring LldpLldp configuration task list Perform the tasks in 1 to configure LldpEnabling Lldp on ports Task Remarks224 Configuring Lldp settings on ports Port Setup tab Return to Lldp configuration task list225 226 For modifying Lldp settings on a portIs Ethernet Enable Lldp polling and set the polling interval ∙ Disable-Neither sends nor receives CDPDUsCDP Operating Mode CDP operating mode on the port to TxRxDOT3 TLV MAC/PHY Configuring global Lldp setupGlobal Setup tab Global Lldp setup configuration items Displaying Lldp information for a port Port ID type Interface aliasPort component 233 Type of PSE power source advertised by the local deviceChassis ID type Chassis component234 Link aggregation groupEndpoint devices III endpoint devices are used directly by end usersUnknown 236 Displaying global Lldp informationGlobal Summary tab Global Lldp information Displaying Lldp information received from Lldp neighbors Lldp configuration examplesBasic Lldp configuration example Neighbor Summary tab Return to Lldp configuration task list239 Network diagram for basic Lldp configuration240 Port Setup tab241 For setting Lldp on multiple ports242 Global Setup tab243 For configuring Lldp on the selected port244 CDP-compatible Lldp configuration exampleNetwork diagram for CDP-compatible Lldp configuration For creating VLANs245 246 For configuring ports247 For configuring the voice Vlan function on ports248 249 For modifying Lldp settings on ports250 Multicast forwarding before and after Igmp snooping runs Igmp snooping configurationPrinciple of Igmp snooping Igmp snooping related ports252 When receiving a general queryWork mechanism of Igmp snooping Igmp snooping related portsWhen receiving a membership report When receiving a leave group message253 Configuring Igmp snooping Igmp snooping querier254 Enabling Igmp snooping globally Basic Igmp snooping configurationsConfiguring Igmp snooping in a Vlan Igmp snooping configuration itemsReturn to Configuration task list Advanced configuration Configuring Igmp snooping port functionsConfiguration items for advanced Igmp snooping features Display Igmp snooping multicast entry informationGroup Limit Igmp snooping configuration example ID of the Vlan to which the entry belongs259 260 Network diagram for Igmp snooping configuration261 262 Add a port to the VlanEnable Igmp snooping globally Configure Igmp snooping in the Vlan263 Configure Igmp snooping on GigabitEthernet 1/0/3 Igmp snooping multicast entry information displaying264 265 Details about an Igmp snooping multicast entry266 Routing configurationRouting table Static routeAddress will be forwarded out the interface Configuring IPv4 routingDefault route Displaying the IPv4 active route tablePreferences enables route backup Creating an IPv4 static routeSpecify the mask of the destination IP address Select the output interface Static route configuration exampleConfiguration outlines Network diagram for IPv4 static route configuration270 Configure a default route271 Configure a static route272 273 PrecautionsAllocation mechanisms Dhcp overviewIntroduction to Dhcp Dhcp address allocation275 Dynamic IP address allocation processIP address lease extension Dynamic IP address allocation processDhcp message format Dhcp message format276 Introduction to Option Dhcp optionsDhcp options overview Introduction to Dhcp options278 Protocols and standardsSub-option 1 in normal padding format Sub-option 2 in normal padding formatFundamentals Dhcp relay agent configurationIntroduction to Dhcp relay agent Application environmentDhcp relay agent work process Dhcp relay agent configuration task listDhcp relay agent configuration Configuring and displaying clients IP-to-MAC bindings281 Return to Dhcp relay agent configuration task list Creating a Dhcp server groupCreate a server group Dhcp server group configuration items Enabling the Dhcp relay agent on an interface283 284 Configuring and displaying clients IP-to-MAC bindingsDhcp relay agent configuration example Network diagram for Dhcp relay agent configuration285 286 Enable Dhcp287 Recording IP-to-MAC mappings of Dhcp clients Dhcp snooping configurationDhcp snooping overview Functions of Dhcp snoopingConfigure trusted ports in a cascaded network Configuring a trusted port connected to a Dhcp serverConfiguring trusted ports in a cascaded network Configure trusted and untrusted portsRoles of ports Dhcp snooping configuration task listDhcp snooping support for Option Describes roles of the ports shown in aDisplaying clients IP-to-MAC Configuring Dhcp snoopingEnabling Dhcp snooping Functions on an interfaceDhcp snooping configuration Return to Dhcp snooping configuration task list292 Option 82 padded in normal format Configuring Dhcp snooping functions on an interfaceDisplaying clients IP-to-MAC bindings IncludeDhcp snooping configuration example This field displays the Vlan to which the device belongs294 295 Network diagram for Dhcp snooping configuration296 Enable Dhcp snoopingConfigure Dhcp snooping functions on GigabitEthernet 1/0/1 Configure Dhcp snooping functions on GigabitEthernet 1/0/2297 298 Configure Dhcp snooping functions on GigabitEthernet 1/0/3Service management configuration Service management Service management configuration items Configuring service managementHttps 302 Diagnostic toolsTrace route diagram Trace route303 Diagnostic tool operationsPing configuration Ping operation304 Trace route configurationTrace route operation Ping operation result305 Trace route operation resultARP message format ARP managementARP overview ARP function307 ARP address resolution processARP operation ARP tableDynamic ARP entry ARP Table configurationManaging ARP entries Displaying ARP entriesCreating a static ARP entry Static ARP configuration exampleDescribes the static ARP entry configuration items Static ARP entry configuration items310 Network diagram for configuring static ARP entries∙ After the configuration process is complete, click Close Add GigabitEthernet 1/0/1 to Vlan311 312 Create VLAN-interfaceCreate a static ARP entry Configuring gratuitous ARPGratuitous ARP Introduction to gratuitous ARPPeriod Enabled by defaultPackets Learning functionMan-in-the-middle attack ARP attack defense configurationARP detection Introduction to ARP detectionARP detection mechanism Man-in-the-middle attack316 317 Configuring ARP detectionItemDescription Creating a static binding entry Configuration, see Creating a static binding entryArchitecture Controlled/uncontrolled port and port authorization status802.1X fundamentals ArchitectureAuthorized/unauthorized state of a controlled port 802.1X-related protocolsPacket formats EAP packet formatTypes of Eapol packets Eapol frame formatEAP packet format Eapol frame format802.1X client as the initiator Initiating 802.1X authenticationAccess device as the initiator EAP over RadiusEAP termination 802.1X authentication proceduresComparison of EAP relay and EAP termination EAP relayEAP termination Works with any Radius server that 802.1X authentication procedure in EAP relay modeEAP relay Packet exchange method Benefits Limitations326 802.1X authentication procedure in EAP termination mode EAP termination327 HP implementation 802.1X configurationAccess control methods Using 802.1X authentication with other featuresACL assignment ConfiguringConfiguration prerequisites Guest Vlan802.1X configuration Basic 802.1X configuration items 802.1X configuration task listConfiguring 802.1X globally 802.1X configuration task listAuthentication on the user Authentication MethodAuthentication procedures Specify whether to enable the quiet timerReturn to 802.1X configuration task list Configuring 802.1X on a portAccess requests from users on the port Select the port authorization state forPort Authorization Port to access the network without authentication802.1X configuration example Configuring an 802.1X guest VlanConfiguring an 802.1X guest Vlan 335 Network diagram for 802.1X configuration336 Global 802.1X configuration337 Radius authentication server configuration338 Radius parameter configuration339 Configure the AAA authentication method for the ISP domainCreate an ISP domain ∙ Select the domain name test340 Configure the AAA authorization method for the ISP domain341 ACL assignment configuration exampleConfigure the AAA accounting method for the ISP domain Network diagram for ACL assignment342 343 344 345 346 Create ACL347 ACL rule configuration348 349 802.1X configuration of GigabitEthernet 1/0/1350 Ping operation summary351 AAA configurationNetwork diagram for AAA Introduction to AAADetermine the ISP domain of a user by the username Configuring AAAConfiguring an ISP domain Domain-based user managementDomain Setup Configuring an ISP domainISP domain configuration items Configuring authentication methods for the ISP domainConfiguring authorization methods for the ISP domain Authorization method configuration355 Authorization method configuration items Configuring accounting methods for the ISP domainReal-time accounting updates for the users ∙ None -Performs no accounting AAA configuration exampleNetwork diagram for AAA configuration example Method Used Not Set -Uses the default accounting methods359 Configure a local userConfigure ISP domain test Configure the ISP domain to use local authentication360 361 Configure the ISP domain to use local authorization362 Configure the ISP domain to use local accountingClient/server model Radius configurationSecurity and authentication mechanisms Introduction to RadiusBasic message exchange process of Radius Basic message exchange process of RadiusCode Packet type Description Radius packet formatRadius packet format Main values of the Code fieldAttribute Radius attributesExtended Radius attributes TaskDescription Configuring RadiusRadius configuration task list Segment of a Radius packet containing an extended attributeParameters Configuring Radius serversRadius server configuration Configuring RadiusReturn to Radius configuration task list Configuring Radius parametersNAS-IP Radius parameter configuration Radius parametersIs an integer Timeout Retransmission TimesSet the maximum number of transmission attempts Attempts cannot exceedCan be Radius configuration exampleNetwork diagram for Radius server configuration Number of users Real-time accounting interval in minutesConfigure the Radius authentication server Configure Radius parameters Create an ISP domain Configuration progress dialog box Configuration guidelines Local user Configuring usersConfiguring a local user UsersLocal user configuration Local user configuration items Username Specify a name for the local user PasswordUser cannot pass authentication and therefore cannot log 381 Configuring a user groupUser group list User group configuration Vlan ACLUser group configuration items User group after the users pass authenticationSpecify the user profile for the user group Architecture of PKI PKI configurationPKI overview PKI termsPKI architecture Applications of PKIEntity PKI repositoryWeb security Configuring PKIOperation of PKI Secure emailGenerating an RSA Creating a PKI entityCreating a PKI DomainRequesting a Certificate Automatically PKI entity list PKI entity configuration Creating a PKI entity388 Fqdn PKI entity configuration itemsCreating a PKI domain PKI domain listSelect the local PKI entity PKI domain configuration PKI domain configuration itemsCRL URL Ldap IPGenerating an RSA key pair Destroying the RSA key pairKey Length Type the length of the RSA keys Retrieving a certificate 394 Get File From PC Specify the path of the file on the device395 Requesting a local certificateCRL Retrieving and displaying a CRLConfiguring a PKI entity to request a certificate from a CA PKI configuration example398 PKI entity list Configure a PKI entity399 PKI domain list Configure a PKI domain400 Certificate list Generate an RSA key pairCertificate list Retrieve the CA certificate Certificate list401 402 Request a local certificate403 Port isolation group configurationConfiguring a port isolation group Configure a port isolation group404 Port isolation group configuration examplePort isolation group configuration items Networking diagram for port isolation group configuration405 Configure isolated ports for an isolation groupWeb IPv4 ACL Associate the Http service with an IPv4 ACL Authorized IP configurationConfiguring authorized IP IPv4 ACL Associate the Telnet service with an IPv4 ACLCreate an ACL Authorized IP configuration exampleAuthorized IP configuration example Network diagram for authorized IP408 Configure an ACL rule to permit Host B409 Configure authorized IPIPv4 ACL classification ACL configurationACL overview Introduction to IPv4 ACLDepth-first match for IPv4 ACLs IPv4 ACL category Depth-first match procedureEffective period of an ACL Fragments filtering with IPv4 ACLsACL step Configuring an ACLBenefits of using the step Configuring an IPv4 ACLFor creating a time range Configuring a time rangeDescribes the configuration items for creating a time range Time range configuration itemsCreating an IPv4 ACL Configuring a rule for a basic IPv4 ACLReturn to IPv4 ACL configuration task list IPv4 ACL configuration itemsFor configuring an basic IPv4 ACL Configuration items for a basic IPv4 ACL rule415 416 Configuring a rule for an advanced IPv4 ACL417 For configuring an advanced IPv4 ACLConfiguration items for an advanced IPv4 ACL rule Configuring a rule for an Ethernet frame header ACL DscpTOS Source Mask For configuring a rule for an Ethernet frame header ACLEncapsulation by configuring the following items ∙ Lsap Type-Indicates the frame encapsulation format421 QoS requirements of new applications QoS configurationNetworks without QoS guarantee Introduction to QoS423 ImpactsCountermeasures Traffic congestion causesEnd-to-end QoS Traffic classificationEnd-to-end QoS model IP Precedence decimal IP Precedence binary Description Packet precedencesDS field and ToS bytes Description on IP Precedence426 Description on Dscp valuesDscp value decimal Dscp value binary Description An Ethernet frame with an 802.1Q tag headerDescription on 802.1p precedence Queue schedulingSP queuing 802.1Q tag header428 Schematic diagram for SP queuingSchematic diagram for WRR queuing WRR queuing429 Line rateTraffic evaluation and token bucket Evaluate traffic with the token bucketLine rate implementation What is priority mappingPriority mapping How line rate worksInput CoS value Local precedence Queue Default CoS to DSCP/CoS to Queue mapping tableIntroduction to priority mapping tables Priority mapping processDefault Dscp to CoS/DSCP to Queue mapping table QoS configurationConfiguration task lists Configuring a QoS policyPerform the task in 1 to configure queue scheduling Configuring queue schedulingConfiguring line rate Configuring the priority mapping tablesCreating a class Configuring priority trust modeShows the configuration items of configuring match criteria Configuring match criteriaReturn to QoS policy configuration task list For configuring match criteriaValues are automatically arranged in ascending order Service VlanDefine a match criterion to match Dscp values Does not overwrite the previous oneFor creating a traffic behavior Describes the configuration items of creating a behaviorConfiguration items of creating a behavior Creating a traffic behaviorPort setup page for a traffic behavior Traffic directing on the chassis front panel438 Configuring other actions for a traffic behavior For setting a traffic behavior439 Creating a policy Configuring classifier-behavior associations for the policyDescribes the configuration items of creating a policy Configuration items of creating a policy441 For setting a policyApplying a policy to a port Behavior NameFor applying a policy to a port Configuring queue scheduling on a portConfiguration items of applying a policy to a port For configuring queue schedulingConfiguring line rate on a port Return to Queue scheduling configuration task listWRR Return to Line rate configuration task list Configuring priority mapping tablesFor configuring line rate on a port Configuration items of configuring line rate on a portConfiguring priority trust mode on a port For configuring priority mapping tablesConfiguration items of configuring priority mapping tables For configuring port priority For modifying port priority Describes the port priority configuration itemsPort priority configuration items 447 Return toPriority trust mode configuration task list448 ACL/QoS configuration examplesACL/QoS configuration example Network diagram for ACL/QoS configuration449 Define a time range covering 800 to 1800 every day450 Create an advanced IPv4 ACL451 Define an ACL rule for traffic to the FTP server452 Create a class453 Define match criteria454 455 Configure actions for the behaviorConfigure classifier-behavior associations for the policy Create a policy456 457 Advantages PoE configurationPoE power PoE overviewProtocol specification related to PoE is Ieee 802.3af Configuring PoEProtocol specification Configuring PoE portsPort setup PoE port configuration items Configuring non-standard PD detection PSE setup461 462 PoE configuration exampleDisplaying information about PSE and PoE ports PoE summary with GigabitEthernet 1/0/1 selected463 Network diagram for PoE464 Configure the PoE port supplying power to APRelated information Conventions Command conventionsSupport and other resources Contacting HPNetwork topology icons Subscription serviceSymbols GUI conventions467 IndexPage Page