Authorized IP configuration, Configuring authorized IP | HP V1910

Authorized IP configuration

Overview

The authorized IP function is to associate the HTTP or Telnet service with an ACL to filter the requests of clients. Only the clients that pass the ACL filtering can access the device.

Configuring authorized IP

Select Security  Authorized IP from the navigation tree, and then click the Setup tab to enter the authorized IP configuration page, as shown in a.

a.Authorized IP configuration page

2.Authorized IP configuration items

	Item		Description
		IPv4 ACL	Associate the Telnet service with an IPv4 ACL.
		IPv4 ACL	You can configure the IPv4 ACL to be selected by selecting QoS  ACL IPv4.
	Telnet

		IPv6 ACL( Not	Associate the Telnet service with an IPv6 ACL.
		IPv6 ACL( Not	Associate the Telnet service with an IPv6 ACL.
		Supported )	You can configure the IPv6 ACL to be selected by selecting QoS  ACL IPv6.

	Web	IPv4 ACL	Associate the HTTP service with an IPv4 ACL.
	(HTTP)	IPv4 ACL	You can configure the IPv4 ACL to be selected by selecting QoS  ACL IPv4.
	(HTTP)

406

Image 418

HP V1910 Authorized IP configuration, Configuring authorized IP, IPv4 ACL Associate the Telnet service with an IPv4 ACL

Contents

HP V1910 Switch Series Part number Document version Warranty Contents Page Page STP177 Page Page Page Page Page Page Overview Web-based network management operating environment Configuration through the web interfaceDefault login information Logging in to the web interface Login page of the web interface Example Introduction to the web interface Web-based configuration interfaceLogging out of the web interface Navigation tree Body area Title area Description of Web-based NM functions Web user levelIntroduction to the web-based NM functions Function menu Description User level Used at the next startup from the host of the current Rmon VCTSnmp MAC VlanMstp Lldp LacpTheir partner ports Igmp ARP AAA PKI RadiusCRL Class Display Introduction to the common items on the web pagesButtons and icons Commonly used buttons and icons Sorting function Content display by pagesSearch function Advanced search Configuration guidelines Sort display based on MAC address in the ascending order Getting started with the CLI Configuration at the CLISetting up the configuration environment Console cable Setting terminal parameters Network diagram for configuration environment setup Connection description of the HyperTerminal Set the serial port used by the HyperTerminal connection Select File  Properties in the HyperTerminal window Set the serial port parametersHyperTerminal window Logging in to the CLI Set terminal emulation in Switch Properties dialog boxPress Enter. The Password prompt display Enter your username at the Username prompt Ipsetup CLI commandsInitialize Password Password# Modify the login password of user admin Ping Quit Reboot Summary Upgrade # Display summary information of the device Configuration procedure Network requirements # Reboot the switch Entering the configuration wizard homepage Configuration wizardBasic service setup Configuring system parameters Configuring management IP address Configure how the Vlan interface obtains an IPv4 address Admin StatusConfigure IPv4 Select a Vlan interface ItemDescription Finishing configuration wizardConfiguration finishes Manual Important Network diagram for stack management Configuring stack managementStack management configuration task list Stack management configuration task list Configuring global parameters of a stack Setup Configuration items of global parameters Displaying topology summary of a stack Configuring stack portsReturn to Stack management configuration task list Topology summary Fields of topology summary Logging into a member switch from the master switch Stack configuration exampleDisplaying device summary of a stack Stack Configure global parameters for the stack on Switch a Configure a stack port on Switch a Configure stack ports on Switch B Configure a stack port on Switch C Configuration guidelines Displaying system information SummaryDisplaying device summary System information System resource state Displaying device informationBasic system information Recent system operation logs Device information Configuring system name Device basic information configurationConfiguring device basic information Configuring idle timeout period Idle timeout Set the idle timeout period for logged-in users Configuring system time System time configurationSystem time configuration Network diagram for configuring system time System time configuration exampleSystem time configuration items NTP Configure Device a Configure Device a as the NTP server of Switch B Configuration guidelines Configuration task list Log management configurationConfiguring log management Setting syslog related parameters Return to Log management configuration task list Displaying syslog Severity level Description Value Display syslog Syslog display itemsSystem logs severity level See Set loghost Loghost configuration item Setting loghostIP address of the loghost Restore configuration Configuration managementBack up configuration Backup configuration Configuration restore Save configurationSave configuration confirmation Initialize Initialize confirmation dialog box Extension .bin Device maintenanceSoftware upgrade Filename Specifies the type of the startup configuration file Device rebootDevice reboot Already exists, overwrite Electronic label Diagnostic informationDiagnostic information Electronic label Diagnostic information file is created Displaying file list File management configurationFile management File management Uploading a file Downloading a fileRemoving a file Setting operation parameters for a port Port management configurationConfiguring a port Setup tab Port configuration items Pvid MDI Constrain Percentage or by PPS as followsInput a percentage in the box below Multicast Suppression Input a number in the box below Viewing the operation parameters of a port Network diagram for port rate configuration Port management configuration exampleDetails tab Configure the rate of GigabitEthernet 1/0/4 Batch configure port rate Display the rate settings of ports Implementing port mirroring Port mirroring configurationIntroduction to port mirroring Local port mirroring Local port mirroring configuration task list Configuring local port mirroringConfiguring local port mirroring Creating a mirroring group Configuring ports for a mirroring group Return to Local port mirroring configuration task list Mirroring ports of a port mirroring group Configuration examples Local port mirroring configuration example Create a local mirroring group Configure the mirroring ports Configuration progress dialog box Configure the monitor port Managing users Add a user Local user configuration itemsUser management Adding a local user Setting the super password Super password Switch to the management level Switching to the management levelSuper password configuration items Input are not consistent when you apply the configuration Loopback test configuration Loopback operation Loopback test result Testing cable status Test the status of the cable connected to an Ethernet port Status and length of the cable Description on the cable test resultFailure Monitoring port traffic statistics Flow interval configurationSetting the traffic statistics generating interval Viewing port traffic statistics Port traffic statistics Storm constrain configuration Configuring storm constrain Configuring storm constrain Storm Constrain tab Upper threshold Upper threshold. Available options include∙ None-Performs no action Thresholds for at least a type of traffic Crossed after that After that Rmon configuration Working mechanism Ethernet statistics group Alarm groupRmon groups History group Rising and falling alarm events Configuring RmonConfiguring the Rmon statistics function Event group Rmon history group configuration task list Configuring the Rmon alarm functionRmon statistics group configuration task list TaskRemarks Displaying Rmon running status Configuring a statistics entryRmon alarm configuration task list Display Rmon running status Return to Rmon statistics group configuration task list Configuring a history entry100 Buckets Granted Configuring an event entryReturn to Rmon history group configuration task list 101 None of them is selected, the system will take no action Configuring an alarm entryReturn to Rmon alarm configuration task list 102 Statics Item Log-and-trap Displaying Rmon statistics information104 Rmon statistics information Fields of Rmon statistics Displaying Rmon history sampling information Return to Display Rmon running status Number of the entry in the system buffer CRCAlignErrorsCorresponding to the MIB node etherHistoryCRCAlignErrors Node etherHistoryOctets Displaying Rmon event logs Rmon configuration exampleNetwork diagram for Rmon Log Return to Display Rmon running status 109 Display Rmon statistics 110 Display the index of a event entry Configure an event group111 Configure an alarm group 112 Configuring energy saving on a port Energy saving configurationPoE Disabled Disable PoE on the port 113 ItemDescription Relationship between an NMS, agent and MIB Snmp configurationSnmp mechanism MIB tree Perform the tasks in 1 to configure SNMPv1 or SNMPv2c Snmp configurationConfiguring SNMPv1 or SNMPv2c SNMPv1 or SNMPv2c configuration task list SNMPv3 configuration task list Configuring SNMPv3Perform the tasks in 1 to configure SNMPv3 Configuring Snmp trap Configure the local engine ID Set up Configuration items for enabling SnmpSpecify to enable or disable Snmp Local Engine ID View Configuring an Snmp viewCreating an Snmp view Create an Snmp view Identify a MIB subtree Configuration items for creating an Snmp viewAdding rules to an Snmp view Set the subtree mask Add rules to an Snmp view Configuring an Snmp communityConfigure an Snmp community Create an Snmp Community 121 Return to SNMPv1 or SNMPv2c configuration task list Configuring an Snmp groupConfiguration items for configuring an Snmp community Snmp group Objects on the device Configuring an Snmp userReturn to SNMPv3 configuration task list Agent Description Configuring Snmp trap function Destination IP Address Set the destination IP addressAddress in the text box according to the IP address type Network diagram for Snmp configuration Snmp configuration exampleNMS Enable Snmp 128 129 Create an Snmp group 130 Add target hosts of Snmp traps Enable the agent to send Snmp traps131 Configuration verification 132 Interface statistics Displaying interface statistics Field Description Introduction to Vlan Vlan configurationVlan diagram Vlan fundamentals Position and format of Vlan tag Vlan typesTraditional Ethernet frame format 136 Port link type Tag removed or intact depending on your configuration 137Introduction to port-based Vlan Frame Vlan configuration task list approach Configuring a VlanCreating VLANs Selecting VLANs Create tab Configuration items of creating VLANsReturn to Vlan configuration task list approach 139 Modifying a Vlan Select Vlan tab Configuration items of selecting VLANs140 Aggregate interfaces from this list Modify Vlan tab Configuration items of modifying a VlanAssigned to this Vlan 141 Select the ports to be modified Modify Port tab Configuration items of modifying portsModifying ports Untagged Vlan configuration example Network diagram for Vlan configuration 144 Create Vlan 2, Vlan 6 through Vlan 50, and Vlan 145 Set a Vlan range 146 147 148 Perform the tasks in 1 to configure a Vlan interface Vlan interface configurationConfiguring Vlan interfaces Vlan interface configuration task list Bootp Create tab Configuration items of creating a Vlan interfaceReturn to Vlan interface configuration task list Modifying a Vlan interface Modify tab Configuration items of modifying a Vlan interface Select the Vlan interface to be configured Is up if one or more Ethernet ports in the Vlan are up Selected Vlan interface152 OUI addresses Voice Vlan configurationDefault OUI addresses of different vendors Voice Vlan assignment modes Co-relation 154 Security mode and normal mode of voice VLANs Configuring the voice VlanVoice Vlan mode Packet type Packet processing mode Configuring voice Vlan on a port Configuring voice Vlan globallyAdding OUI addresses to the OUI list Configure voice Vlan Global voice Vlan configuration items Configuring voice Vlan globallyConfiguring voice Vlan on a port Timer expires, the port is removed from the voice Vlan Voice Vlan function on the port Set the voice Vlan assignment mode of a portBe configured as the voice Vlan Set the voice Vlan ID Adding OUI addresses to the OUI list 159 Voice Vlan configuration examples 160 Create Vlan 161 Configure GigabitEthernet 1/0/1 as a hybrid port 162 Configure the voice Vlan function globally 163 Current OUI list of the device Verify the configurationAdd OUI addresses to the OUI list 164 Current voice Vlan information 165 166 167 Assign GigabitEthernet 1/0/1 to Vlan 2 as an untagged member 168 Configure voice Vlan on GigabitEthernet 1/0/1 169 170 171 MAC address configuration 172 MAC address table of the device Configuring MAC addressesConfiguring a MAC address entry 173 Create a MAC address entry MAC tabClick Add in the bottom to enter the page as shown in b 174 Set the ID of the Vlan to which the MAC address belongs Setting the aging time of MAC address entriesConfiguration items of creating a MAC address entry Port Set the port to which the MAC address belongs Create a static MAC address entry MAC address configuration example176 Basic concepts in STP Mstp configurationSTP protocol packets Root bridge Path cost How STP worksDesignated bridge and designated port Description of designated bridges and designated ports Calculation process of the STP algorithm Selection of the optimum configuration BpduStep Actions Step Description Selection of the root port and designated ports180 Device Port name Bpdu of port Network diagram for the STP algorithmInitial state of each device ∙ Comparison process and result on each device Bpdu BP2 with the configuration Bpdu of BP2. If the calculated0, 1, BP2 before the configuration Bpdu is updated CP2 1, 0, 1, BP2 Blocked port CP2 0, 0, 0, AP2 Root port CP2 0, 5, 1, BP2 Configuration Bpdu forwarding mechanism in STPFinal calculated spanning tree 183 STP timers 184 Mstp basic concepts Mstp featuresSTP and Rstp limitations 185 Basic concepts in Mstp MST regionVLAN-to-MSTI mapping table 186 Boundary port Regional rootCommon root bridge Port roles Port roles Port states188 Cist calculation How Mstp worksImplementation of Mstp on devices Msti calculation Perform the tasks described in 1 to configure Mstp Configuring MstpConfiguring an MST region Mstp configuration task list Click Modify to enter the page shown in b Return to Mstp configuration task listMST region Vlan ID Configuring Mstp globally Number of devices on the path composed of the most devices Set the STP working mode∙ STP-Each port on a device sends out STP BPDUs Bridge Diameter Configuring Mstp on a port STP Configuration may cause a temporary loop Set the type of protection to be enabled on the portManually configure path cost for ports Recommends you to use the default value Protection types Displaying Mstp information of a portProtection type Description Learning Port Summary tabForwarding Discarding Whether or not the port is an edge port Network diagram for Mstp configuration Mstp configuration example199 ∙ Click Modify to enter the page shown in c Configure an MST regionRegion tab 200 Configure Mstp globally on Switch a 201 202 When configuring MSTP, follow these guidelines Configure Mstp globally on Switch D203 Page Aggregate interface Link aggregation and Lacp configurationBasic concepts Aggregation group Class-two configurations Class-two configurationsStatic aggregation mode Link aggregation modes Dynamic aggregation mode 207 Configuring a static aggregation group Configuring link aggregation and LacpLoad sharing mode of an aggregation group Configuring a dynamic aggregation group Displaying information of LACP-enabled ports Dynamic aggregation group configuration task listSetting Lacp priority Creating a link aggregation group Assign an ID to the link aggregation group to be created 210 Setting Lacp priority Displaying information of an aggregate interface Also on LACP-disabled ports Displaying information of LACP-enabled portsLacp priority configuration items System Priority Set the Lacp priority of the local system Fields in the LACP-enabled port summary table Display information about LACP-enabled portsField/button Description Describes the fields in the Partner Port Details table Link aggregation and Lacp configuration exampleFields in the Partner Port Details table ∙ Set the link aggregation interface ID to Network diagram for static link aggregation configurationCreate static link aggregation group 215 Create dynamic link aggregation group 216 217 LLDPDUs Lldp configurationBackground Lldpdu Lldpdu encapsulation format TLVsSNAP-encapsulated Lldpdu format FCS Ieee 802.1 organizationally specific TLVs Basic Lldp TLVsType Description Remarks Ieee 802.1 organizationally specific TLVs Ieee 802.3 organizationally specific TLVs LLDP-MED TLVsIeee 802.3 organizationally specific TLVs LLDP-MED TLVs How Lldp works Compatibility of Lldp with CDP Perform the tasks in 1 to configure Lldp Configuring LldpLldp configuration task list Lldp configuration task list Task Remarks Enabling Lldp on ports224 Port Setup tab Return to Lldp configuration task list Configuring Lldp settings on ports225 For modifying Lldp settings on a port 226 Is Ethernet CDP operating mode on the port to TxRx ∙ Disable-Neither sends nor receives CDPDUsCDP Operating Mode Enable Lldp polling and set the polling interval Configuring global Lldp setup DOT3 TLV MAC/PHY Global Setup tab Global Lldp setup configuration items Displaying Lldp information for a port Interface alias Port ID typePort component Chassis component Type of PSE power source advertised by the local deviceChassis ID type 233 III endpoint devices are used directly by end users Link aggregation groupEndpoint devices 234 Unknown Displaying global Lldp information 236 Global Summary tab Global Lldp information Neighbor Summary tab Return to Lldp configuration task list Lldp configuration examplesBasic Lldp configuration example Displaying Lldp information received from Lldp neighbors Network diagram for basic Lldp configuration 239 Port Setup tab 240 For setting Lldp on multiple ports 241 Global Setup tab 242 For configuring Lldp on the selected port 243 CDP-compatible Lldp configuration example 244 For creating VLANs Network diagram for CDP-compatible Lldp configuration245 For configuring ports 246 For configuring the voice Vlan function on ports 247 248 For modifying Lldp settings on ports 249 250 Igmp snooping related ports Igmp snooping configurationPrinciple of Igmp snooping Multicast forwarding before and after Igmp snooping runs Igmp snooping related ports When receiving a general queryWork mechanism of Igmp snooping 252 When receiving a leave group message When receiving a membership report253 Igmp snooping querier Configuring Igmp snooping254 Basic Igmp snooping configurations Enabling Igmp snooping globally Igmp snooping configuration items Configuring Igmp snooping in a VlanReturn to Configuration task list Configuring Igmp snooping port functions Advanced configuration Display Igmp snooping multicast entry information Configuration items for advanced Igmp snooping featuresGroup Limit ID of the Vlan to which the entry belongs Igmp snooping configuration example259 Network diagram for Igmp snooping configuration 260 261 Add a port to the Vlan 262 Configure Igmp snooping in the Vlan Enable Igmp snooping globally263 Igmp snooping multicast entry information displaying Configure Igmp snooping on GigabitEthernet 1/0/3264 Details about an Igmp snooping multicast entry 265 Static route Routing configurationRouting table 266 Displaying the IPv4 active route table Configuring IPv4 routingDefault route Address will be forwarded out the interface Creating an IPv4 static route Preferences enables route backupSpecify the mask of the destination IP address Network diagram for IPv4 static route configuration Static route configuration exampleConfiguration outlines Select the output interface Configure a default route 270 Configure a static route 271 272 Precautions 273 Dhcp address allocation Dhcp overviewIntroduction to Dhcp Allocation mechanisms Dynamic IP address allocation process Dynamic IP address allocation processIP address lease extension 275 Dhcp message format Dhcp message format276 Introduction to Dhcp options Dhcp optionsDhcp options overview Introduction to Option Sub-option 2 in normal padding format Protocols and standardsSub-option 1 in normal padding format 278 Application environment Dhcp relay agent configurationIntroduction to Dhcp relay agent Fundamentals Dhcp relay agent configuration task list Dhcp relay agent work process Configuring and displaying clients IP-to-MAC bindings Dhcp relay agent configuration281 Creating a Dhcp server group Return to Dhcp relay agent configuration task listCreate a server group Enabling the Dhcp relay agent on an interface Dhcp server group configuration items283 Configuring and displaying clients IP-to-MAC bindings 284 Network diagram for Dhcp relay agent configuration Dhcp relay agent configuration example285 Enable Dhcp 286 287 Functions of Dhcp snooping Dhcp snooping configurationDhcp snooping overview Recording IP-to-MAC mappings of Dhcp clients Configure trusted and untrusted ports Configuring a trusted port connected to a Dhcp serverConfiguring trusted ports in a cascaded network Configure trusted ports in a cascaded network Describes roles of the ports shown in a Dhcp snooping configuration task listDhcp snooping support for Option Roles of ports Functions on an interface Configuring Dhcp snoopingEnabling Dhcp snooping Displaying clients IP-to-MAC Return to Dhcp snooping configuration task list Dhcp snooping configuration292 Include Configuring Dhcp snooping functions on an interfaceDisplaying clients IP-to-MAC bindings Option 82 padded in normal format This field displays the Vlan to which the device belongs Dhcp snooping configuration example294 Network diagram for Dhcp snooping configuration 295 Enable Dhcp snooping 296 Configure Dhcp snooping functions on GigabitEthernet 1/0/2 Configure Dhcp snooping functions on GigabitEthernet 1/0/1297 Configure Dhcp snooping functions on GigabitEthernet 1/0/3 298 Service management configuration Configuring service management Service management Service management configuration items Https Trace route Diagnostic toolsTrace route diagram 302 Ping operation Diagnostic tool operationsPing configuration 303 Ping operation result Trace route configurationTrace route operation 304 Trace route operation result 305 ARP function ARP managementARP overview ARP message format ARP table ARP address resolution processARP operation 307 Displaying ARP entries ARP Table configurationManaging ARP entries Dynamic ARP entry Static ARP entry configuration items Static ARP configuration exampleDescribes the static ARP entry configuration items Creating a static ARP entry Network diagram for configuring static ARP entries 310 Add GigabitEthernet 1/0/1 to Vlan ∙ After the configuration process is complete, click Close311 Create VLAN-interface 312 Introduction to gratuitous ARP Configuring gratuitous ARPGratuitous ARP Create a static ARP entry Learning function Enabled by defaultPackets Period Introduction to ARP detection ARP attack defense configurationARP detection Man-in-the-middle attack Man-in-the-middle attack ARP detection mechanism316 Configuring ARP detection 317 ItemDescription Configuration, see Creating a static binding entry Creating a static binding entry Architecture Controlled/uncontrolled port and port authorization status802.1X fundamentals Architecture EAP packet format 802.1X-related protocolsPacket formats Authorized/unauthorized state of a controlled port Eapol frame format Eapol frame formatEAP packet format Types of Eapol packets EAP over Radius Initiating 802.1X authenticationAccess device as the initiator 802.1X client as the initiator EAP relay 802.1X authentication proceduresComparison of EAP relay and EAP termination EAP termination Packet exchange method Benefits Limitations 802.1X authentication procedure in EAP relay modeEAP relay EAP termination Works with any Radius server that 326 EAP termination 802.1X authentication procedure in EAP termination mode327 Using 802.1X authentication with other features 802.1X configurationAccess control methods HP implementation Guest Vlan ConfiguringConfiguration prerequisites ACL assignment 802.1X configuration task list 802.1X configuration task listConfiguring 802.1X globally 802.1X configuration Basic 802.1X configuration items Specify whether to enable the quiet timer Authentication MethodAuthentication procedures Authentication on the user Configuring 802.1X on a port Return to 802.1X configuration task list Port to access the network without authentication Select the port authorization state forPort Authorization Access requests from users on the port Configuring an 802.1X guest Vlan 802.1X configuration exampleConfiguring an 802.1X guest Vlan Network diagram for 802.1X configuration 335 Global 802.1X configuration 336 Radius authentication server configuration 337 Radius parameter configuration 338 ∙ Select the domain name test Configure the AAA authentication method for the ISP domainCreate an ISP domain 339 Configure the AAA authorization method for the ISP domain 340 Network diagram for ACL assignment ACL assignment configuration exampleConfigure the AAA accounting method for the ISP domain 341 342 343 344 345 Create ACL 346 ACL rule configuration 347 348 802.1X configuration of GigabitEthernet 1/0/1 349 Ping operation summary 350 Introduction to AAA AAA configurationNetwork diagram for AAA 351 Domain-based user management Configuring AAAConfiguring an ISP domain Determine the ISP domain of a user by the username Configuring an ISP domain Domain Setup Configuring authentication methods for the ISP domain ISP domain configuration items Authorization method configuration Configuring authorization methods for the ISP domain355 Configuring accounting methods for the ISP domain Authorization method configuration items Real-time accounting updates for the users Method Used Not Set -Uses the default accounting methods AAA configuration exampleNetwork diagram for AAA configuration example ∙ None -Performs no accounting Configure a local user 359 Configure the ISP domain to use local authentication Configure ISP domain test360 Configure the ISP domain to use local authorization 361 Configure the ISP domain to use local accounting 362 Introduction to Radius Radius configurationSecurity and authentication mechanisms Client/server model Basic message exchange process of Radius Basic message exchange process of Radius Main values of the Code field Radius packet formatRadius packet format Code Packet type Description Radius attributes Attribute Extended Radius attributes Segment of a Radius packet containing an extended attribute Configuring RadiusRadius configuration task list TaskDescription Configuring Radius Configuring Radius serversRadius server configuration Parameters Configuring Radius parameters Return to Radius configuration task list Radius parameter configuration Radius parameters NAS-IP Attempts cannot exceed Timeout Retransmission TimesSet the maximum number of transmission attempts Is an integer Number of users Real-time accounting interval in minutes Radius configuration exampleNetwork diagram for Radius server configuration Can be Configure the Radius authentication server Configure Radius parameters Create an ISP domain Configuration progress dialog box Configuration guidelines Users Configuring usersConfiguring a local user Local user Username Specify a name for the local user Password Local user configuration Local user configuration itemsUser cannot pass authentication and therefore cannot log Vlan ACL Configuring a user groupUser group list User group configuration 381 User group after the users pass authentication User group configuration itemsSpecify the user profile for the user group PKI terms PKI configurationPKI overview Architecture of PKI PKI repository Applications of PKIEntity PKI architecture Secure email Configuring PKIOperation of PKI Web security Domain Creating a PKI entityCreating a PKI Generating an RSA Requesting a Certificate Automatically Creating a PKI entity PKI entity list PKI entity configuration388 PKI domain list PKI entity configuration itemsCreating a PKI domain Fqdn PKI domain configuration PKI domain configuration items Select the local PKI entity Ldap IP CRL URL Destroying the RSA key pair Generating an RSA key pairKey Length Type the length of the RSA keys Retrieving a certificate Get File From PC Specify the path of the file on the device 394 Requesting a local certificate 395 Retrieving and displaying a CRL CRL PKI configuration example Configuring a PKI entity to request a certificate from a CA PKI entity list Configure a PKI entity 398 PKI domain list Configure a PKI domain 399 Certificate list Generate an RSA key pair 400 Certificate list Certificate list Retrieve the CA certificate401 Request a local certificate 402 Configure a port isolation group Port isolation group configurationConfiguring a port isolation group 403 Networking diagram for port isolation group configuration Port isolation group configuration examplePort isolation group configuration items 404 Configure isolated ports for an isolation group 405 IPv4 ACL Associate the Telnet service with an IPv4 ACL Authorized IP configurationConfiguring authorized IP Web IPv4 ACL Associate the Http service with an IPv4 ACL Network diagram for authorized IP Authorized IP configuration exampleAuthorized IP configuration example Create an ACL Configure an ACL rule to permit Host B 408 Configure authorized IP 409 Introduction to IPv4 ACL ACL configurationACL overview IPv4 ACL classification Fragments filtering with IPv4 ACLs IPv4 ACL category Depth-first match procedureEffective period of an ACL Depth-first match for IPv4 ACLs Configuring an IPv4 ACL Configuring an ACLBenefits of using the step ACL step Time range configuration items Configuring a time rangeDescribes the configuration items for creating a time range For creating a time range IPv4 ACL configuration items Configuring a rule for a basic IPv4 ACLReturn to IPv4 ACL configuration task list Creating an IPv4 ACL Configuration items for a basic IPv4 ACL rule For configuring an basic IPv4 ACL415 Configuring a rule for an advanced IPv4 ACL 416 For configuring an advanced IPv4 ACL 417 Configuration items for an advanced IPv4 ACL rule Dscp Configuring a rule for an Ethernet frame header ACLTOS For configuring a rule for an Ethernet frame header ACL Source Mask ∙ Lsap Type-Indicates the frame encapsulation format Encapsulation by configuring the following items421 Introduction to QoS QoS configurationNetworks without QoS guarantee QoS requirements of new applications Traffic congestion causes ImpactsCountermeasures 423 Traffic classification End-to-end QoSEnd-to-end QoS model Description on IP Precedence Packet precedencesDS field and ToS bytes IP Precedence decimal IP Precedence binary Description An Ethernet frame with an 802.1Q tag header Description on Dscp valuesDscp value decimal Dscp value binary Description 426 802.1Q tag header Queue schedulingSP queuing Description on 802.1p precedence WRR queuing Schematic diagram for SP queuingSchematic diagram for WRR queuing 428 Evaluate traffic with the token bucket Line rateTraffic evaluation and token bucket 429 How line rate works What is priority mappingPriority mapping Line rate implementation Priority mapping process Default CoS to DSCP/CoS to Queue mapping tableIntroduction to priority mapping tables Input CoS value Local precedence Queue Configuring a QoS policy QoS configurationConfiguration task lists Default Dscp to CoS/DSCP to Queue mapping table Configuring the priority mapping tables Configuring queue schedulingConfiguring line rate Perform the task in 1 to configure queue scheduling Configuring priority trust mode Creating a class For configuring match criteria Configuring match criteriaReturn to QoS policy configuration task list Shows the configuration items of configuring match criteria Does not overwrite the previous one Service VlanDefine a match criterion to match Dscp values Values are automatically arranged in ascending order Creating a traffic behavior Describes the configuration items of creating a behaviorConfiguration items of creating a behavior For creating a traffic behavior Traffic directing on the chassis front panel Port setup page for a traffic behavior438 For setting a traffic behavior Configuring other actions for a traffic behavior439 Configuration items of creating a policy Configuring classifier-behavior associations for the policyDescribes the configuration items of creating a policy Creating a policy Behavior Name For setting a policyApplying a policy to a port 441 For configuring queue scheduling Configuring queue scheduling on a portConfiguration items of applying a policy to a port For applying a policy to a port Return to Queue scheduling configuration task list Configuring line rate on a portWRR Configuration items of configuring line rate on a port Configuring priority mapping tablesFor configuring line rate on a port Return to Line rate configuration task list For configuring priority mapping tables Configuring priority trust mode on a portConfiguration items of configuring priority mapping tables Describes the port priority configuration items For configuring port priority For modifying port priorityPort priority configuration items Return toPriority trust mode configuration task list 447 Network diagram for ACL/QoS configuration ACL/QoS configuration examplesACL/QoS configuration example 448 Define a time range covering 800 to 1800 every day 449 Create an advanced IPv4 ACL 450 Define an ACL rule for traffic to the FTP server 451 Create a class 452 Define match criteria 453 454 Configure actions for the behavior 455 Create a policy Configure classifier-behavior associations for the policy456 457 PoE overview PoE configurationPoE power Advantages Configuring PoE ports Configuring PoEProtocol specification Protocol specification related to PoE is Ieee 802.3af Port setup PoE port configuration items PSE setup Configuring non-standard PD detection461 PoE summary with GigabitEthernet 1/0/1 selected PoE configuration exampleDisplaying information about PSE and PoE ports 462 Network diagram for PoE 463 Configure the PoE port supplying power to AP 464 Contacting HP Command conventionsSupport and other resources Related information Conventions GUI conventions Subscription serviceSymbols Network topology icons Index 467Page Page