Manuals / HP / Computer Equipment / Switch

HP V1910 manual Configure authorized IP, 409

Models: V1910

1 483

Download 483 pages 47.39 Kb

Page 421

Image 421

c.Configure authorized IP

409

Page 421

Image 421

HP V1910 manual Configure authorized IP, 409

Contents

Part number Document version HP V1910 Switch SeriesWarranty Contents Page Page STP177 Page Page Page Page Page Page Overview Default login information Configuration through the web interfaceWeb-based network management operating environment Logging in to the web interfaceExample Login page of the web interfaceLogging out of the web interface Web-based configuration interfaceIntroduction to the web interface Navigation tree Body area Title areaIntroduction to the web-based NM functions Web user levelDescription of Web-based NM functions Function menu Description User levelUsed at the next startup from the host of the current Rmon VCTSnmp MAC VlanMstp Their partner ports LacpLldp IgmpAAA ARPPKI RadiusCRL Class Buttons and icons Introduction to the common items on the web pagesDisplay Commonly used buttons and iconsSearch function Content display by pagesSorting function Advanced searchSort display based on MAC address in the ascending order Configuration guidelinesSetting up the configuration environment Configuration at the CLIGetting started with the CLI Console cableNetwork diagram for configuration environment setup Setting terminal parametersSet the serial port used by the HyperTerminal connection Connection description of the HyperTerminalSelect File  Properties in the HyperTerminal window Set the serial port parametersHyperTerminal window Press Enter. The Password prompt display Set terminal emulation in Switch Properties dialog boxLogging in to the CLI Enter your username at the Username promptIpsetup CLI commandsInitialize Password Password# Modify the login password of user admin Quit PingSummary Reboot# Display summary information of the device UpgradeNetwork requirements Configuration procedure# Reboot the switch Basic service setup Configuration wizardEntering the configuration wizard homepage Configuring system parametersConfiguring management IP address Configure IPv4 Admin StatusConfigure how the Vlan interface obtains an IPv4 address Select a Vlan interfaceConfiguration finishes Finishing configuration wizardItemDescription Manual ImportantStack management configuration task list Configuring stack managementNetwork diagram for stack management Stack management configuration task listConfiguring global parameters of a stack Setup Configuration items of global parameters Return to Stack management configuration task list Configuring stack portsDisplaying topology summary of a stack Topology summary Fields of topology summaryLogging into a member switch from the master switch Stack configuration exampleDisplaying device summary of a stack Stack Configure global parameters for the stack on Switch a Configure a stack port on Switch a Configure stack ports on Switch B Configure a stack port on Switch C Configuration guidelines Displaying device summary SummaryDisplaying system information System informationBasic system information Displaying device informationSystem resource state Recent system operation logsDevice information Configuring device basic information Device basic information configurationConfiguring system name Configuring idle timeout periodIdle timeout Set the idle timeout period for logged-in users Configuring system time System time configurationSystem time configuration System time configuration items System time configuration exampleNetwork diagram for configuring system time NTPConfigure Device a as the NTP server of Switch B Configure Device aConfiguration guidelines Configuring log management Log management configurationConfiguration task list Setting syslog related parametersDisplaying syslog Return to Log management configuration task listSystem logs severity level Display syslog Syslog display itemsSeverity level Description Value SeeSet loghost Loghost configuration item Setting loghostIP address of the loghost Back up configuration Configuration managementRestore configuration Backup configurationConfiguration restore Save configurationSave configuration confirmation Initialize confirmation dialog box InitializeSoftware upgrade Device maintenanceExtension .bin FilenameDevice reboot Device rebootSpecifies the type of the startup configuration file Already exists, overwriteDiagnostic information Diagnostic informationElectronic label Electronic labelDiagnostic information file is created File management File management configurationDisplaying file list File managementUploading a file Downloading a fileRemoving a file Configuring a port Port management configurationSetting operation parameters for a port Setup tabPvid Port configuration itemsMDI Input a percentage in the box below Percentage or by PPS as followsConstrain Multicast Suppression Input a number in the box belowViewing the operation parameters of a port Network diagram for port rate configuration Port management configuration exampleDetails tab Configure the rate of GigabitEthernet 1/0/4 Batch configure port rate Display the rate settings of ports Introduction to port mirroring Port mirroring configurationImplementing port mirroring Local port mirroringConfiguring local port mirroring Configuring local port mirroringLocal port mirroring configuration task list Creating a mirroring groupReturn to Local port mirroring configuration task list Configuring ports for a mirroring groupMirroring ports of a port mirroring group Local port mirroring configuration example Configuration examplesCreate a local mirroring group Configuration progress dialog box Configure the mirroring portsConfigure the monitor port User management Add a user Local user configuration itemsManaging users Adding a local userSuper password Setting the super passwordSuper password configuration items Switching to the management levelSwitch to the management level Input are not consistent when you apply the configurationLoopback operation Loopback test configurationLoopback test result Test the status of the cable connected to an Ethernet port Testing cable statusStatus and length of the cable Description on the cable test resultFailure Setting the traffic statistics generating interval Flow interval configurationMonitoring port traffic statistics Viewing port traffic statisticsPort traffic statistics Configuring storm constrain Storm constrain configurationStorm Constrain tab Configuring storm constrain∙ None-Performs no action Upper threshold. Available options includeUpper threshold Thresholds for at least a type of trafficAfter that Crossed after thatWorking mechanism Rmon configurationRmon groups Alarm groupEthernet statistics group History groupConfiguring the Rmon statistics function Configuring RmonRising and falling alarm events Event groupRmon statistics group configuration task list Configuring the Rmon alarm functionRmon history group configuration task list TaskRemarksRmon alarm configuration task list Configuring a statistics entryDisplaying Rmon running status Display Rmon running statusReturn to Rmon statistics group configuration task list Configuring a history entry100 Return to Rmon history group configuration task list Configuring an event entryBuckets Granted 101Return to Rmon alarm configuration task list Configuring an alarm entryNone of them is selected, the system will take no action 102Statics Item Log-and-trap Displaying Rmon statistics information104 Rmon statistics information Fields of Rmon statistics Return to Display Rmon running status Displaying Rmon history sampling informationCorresponding to the MIB node etherHistoryCRCAlignErrors CRCAlignErrorsNumber of the entry in the system buffer Node etherHistoryOctetsNetwork diagram for Rmon Rmon configuration exampleDisplaying Rmon event logs Log Return to Display Rmon running status109 110 Display Rmon statisticsDisplay the index of a event entry Configure an event group111 112 Configure an alarm groupConfiguring energy saving on a port Energy saving configurationPoE Disabled Disable PoE on the port 113 ItemDescription Snmp mechanism Snmp configurationRelationship between an NMS, agent and MIB MIB treeConfiguring SNMPv1 or SNMPv2c Snmp configurationPerform the tasks in 1 to configure SNMPv1 or SNMPv2c SNMPv1 or SNMPv2c configuration task listPerform the tasks in 1 to configure SNMPv3 Configuring SNMPv3SNMPv3 configuration task list Configuring Snmp trapSpecify to enable or disable Snmp Set up Configuration items for enabling SnmpConfigure the local engine ID Local Engine IDCreating an Snmp view Configuring an Snmp viewView Create an Snmp viewAdding rules to an Snmp view Configuration items for creating an Snmp viewIdentify a MIB subtree Set the subtree maskConfigure an Snmp community Create an Snmp Community Configuring an Snmp communityAdd rules to an Snmp view 121Configuration items for configuring an Snmp community Configuring an Snmp groupReturn to SNMPv1 or SNMPv2c configuration task list Snmp groupReturn to SNMPv3 configuration task list Configuring an Snmp userObjects on the device AgentDescription Configuring Snmp trap function Destination IP Address Set the destination IP addressAddress in the text box according to the IP address type Network diagram for Snmp configuration Snmp configuration exampleNMS 128 Enable Snmp129 130 Create an Snmp groupAdd target hosts of Snmp traps Enable the agent to send Snmp traps131 132 Configuration verificationDisplaying interface statistics Interface statisticsField Description Vlan diagram Vlan configurationIntroduction to Vlan Vlan fundamentalsTraditional Ethernet frame format Vlan typesPosition and format of Vlan tag 136Introduction to port-based Vlan Tag removed or intact depending on your configuration 137Port link type FrameVlan configuration task list approach Configuring a VlanCreating VLANs Return to Vlan configuration task list approach Create tab Configuration items of creating VLANsSelecting VLANs 139Modifying a Vlan Select Vlan tab Configuration items of selecting VLANs140 Assigned to this Vlan Modify Vlan tab Configuration items of modifying a VlanAggregate interfaces from this list 141Modifying ports Modify Port tab Configuration items of modifying portsSelect the ports to be modified UntaggedNetwork diagram for Vlan configuration Vlan configuration example144 145 Create Vlan 2, Vlan 6 through Vlan 50, and Vlan146 Set a Vlan range147 148 Configuring Vlan interfaces Vlan interface configurationPerform the tasks in 1 to configure a Vlan interface Vlan interface configuration task listReturn to Vlan interface configuration task list Create tab Configuration items of creating a Vlan interfaceBootp Modifying a Vlan interfaceSelect the Vlan interface to be configured Modify tab Configuration items of modifying a Vlan interfaceIs up if one or more Ethernet ports in the Vlan are up Selected Vlan interface152 Default OUI addresses of different vendors Voice Vlan configurationOUI addresses Voice Vlan assignment modes154 Co-relationSecurity mode and normal mode of voice VLANs Configuring the voice VlanVoice Vlan mode Packet type Packet processing mode Configuring voice Vlan on a port Configuring voice Vlan globallyAdding OUI addresses to the OUI list Configuring voice Vlan on a port Configuring voice Vlan globallyConfigure voice Vlan Global voice Vlan configuration items Timer expires, the port is removed from the voice VlanBe configured as the voice Vlan Set the voice Vlan assignment mode of a portVoice Vlan function on the port Set the voice Vlan ID159 Adding OUI addresses to the OUI list160 Voice Vlan configuration examples161 Create Vlan162 Configure GigabitEthernet 1/0/1 as a hybrid port163 Configure the voice Vlan function globallyAdd OUI addresses to the OUI list Verify the configurationCurrent OUI list of the device 164165 Current voice Vlan information166 167 168 Assign GigabitEthernet 1/0/1 to Vlan 2 as an untagged member169 Configure voice Vlan on GigabitEthernet 1/0/1170 171 172 MAC address configurationConfiguring a MAC address entry Configuring MAC addressesMAC address table of the device 173Click Add in the bottom to enter the page as shown in b MAC tabCreate a MAC address entry 174Configuration items of creating a MAC address entry Setting the aging time of MAC address entriesSet the ID of the Vlan to which the MAC address belongs Port Set the port to which the MAC address belongsCreate a static MAC address entry MAC address configuration example176 STP protocol packets Mstp configurationBasic concepts in STP Root bridgeDesignated bridge and designated port How STP worksPath cost Description of designated bridges and designated portsCalculation process of the STP algorithm Selection of the optimum configuration BpduStep Actions Step Description Selection of the root port and designated ports180 Initial state of each device Network diagram for the STP algorithmDevice Port name Bpdu of port ∙ Comparison process and result on each device0, 1, BP2 before the configuration Bpdu is updated BP2 with the configuration Bpdu of BP2. If the calculatedBpdu CP2 1, 0, 1, BP2Final calculated spanning tree Configuration Bpdu forwarding mechanism in STPBlocked port CP2 0, 0, 0, AP2 Root port CP2 0, 5, 1, BP2 183184 STP timersSTP and Rstp limitations Mstp featuresMstp basic concepts 185VLAN-to-MSTI mapping table MST regionBasic concepts in Mstp 186Common root bridge Regional rootBoundary port Port rolesPort roles Port states188 Implementation of Mstp on devices How Mstp worksCist calculation Msti calculationConfiguring an MST region Configuring MstpPerform the tasks described in 1 to configure Mstp Mstp configuration task listMST region Return to Mstp configuration task listClick Modify to enter the page shown in b Vlan IDConfiguring Mstp globally ∙ STP-Each port on a device sends out STP BPDUs Set the STP working modeNumber of devices on the path composed of the most devices Bridge DiameterSTP Configuring Mstp on a portManually configure path cost for ports Set the type of protection to be enabled on the portConfiguration may cause a temporary loop Recommends you to use the default valueProtection types Displaying Mstp information of a portProtection type Description Forwarding Port Summary tabLearning DiscardingWhether or not the port is an edge port Network diagram for Mstp configuration Mstp configuration example199 Region tab Configure an MST region∙ Click Modify to enter the page shown in c 200201 Configure Mstp globally on Switch a202 When configuring MSTP, follow these guidelines Configure Mstp globally on Switch D203 Page Basic concepts Link aggregation and Lacp configurationAggregate interface Aggregation groupStatic aggregation mode Class-two configurationsClass-two configurations Link aggregation modes207 Dynamic aggregation modeLoad sharing mode of an aggregation group Configuring link aggregation and LacpConfiguring a static aggregation group Configuring a dynamic aggregation groupSetting Lacp priority Dynamic aggregation group configuration task listDisplaying information of LACP-enabled ports Creating a link aggregation group210 Assign an ID to the link aggregation group to be createdDisplaying information of an aggregate interface Setting Lacp priorityLacp priority configuration items Displaying information of LACP-enabled portsAlso on LACP-disabled ports System Priority Set the Lacp priority of the local systemFields in the LACP-enabled port summary table Display information about LACP-enabled portsField/button Description Describes the fields in the Partner Port Details table Link aggregation and Lacp configuration exampleFields in the Partner Port Details table Create static link aggregation group Network diagram for static link aggregation configuration∙ Set the link aggregation interface ID to 215216 Create dynamic link aggregation group217 Background Lldp configurationLLDPDUs LldpduSNAP-encapsulated Lldpdu format TLVsLldpdu encapsulation format FCSType Description Remarks Basic Lldp TLVsIeee 802.1 organizationally specific TLVs Ieee 802.1 organizationally specific TLVsIeee 802.3 organizationally specific TLVs LLDP-MED TLVsIeee 802.3 organizationally specific TLVs LLDP-MED TLVsCompatibility of Lldp with CDP How Lldp worksLldp configuration task list Configuring LldpPerform the tasks in 1 to configure Lldp Lldp configuration task listTask Remarks Enabling Lldp on ports224 Port Setup tab Return to Lldp configuration task list Configuring Lldp settings on ports225 226 For modifying Lldp settings on a portIs Ethernet CDP Operating Mode ∙ Disable-Neither sends nor receives CDPDUsCDP operating mode on the port to TxRx Enable Lldp polling and set the polling intervalDOT3 TLV MAC/PHY Configuring global Lldp setupGlobal Setup tab Global Lldp setup configuration items Displaying Lldp information for a port Interface alias Port ID typePort component Chassis ID type Type of PSE power source advertised by the local deviceChassis component 233Endpoint devices Link aggregation groupIII endpoint devices are used directly by end users 234Unknown 236 Displaying global Lldp informationGlobal Summary tab Global Lldp information Basic Lldp configuration example Lldp configuration examplesNeighbor Summary tab Return to Lldp configuration task list Displaying Lldp information received from Lldp neighbors239 Network diagram for basic Lldp configuration240 Port Setup tab241 For setting Lldp on multiple ports242 Global Setup tab243 For configuring Lldp on the selected port244 CDP-compatible Lldp configuration exampleFor creating VLANs Network diagram for CDP-compatible Lldp configuration245 246 For configuring ports247 For configuring the voice Vlan function on ports248 249 For modifying Lldp settings on ports250 Principle of Igmp snooping Igmp snooping configurationIgmp snooping related ports Multicast forwarding before and after Igmp snooping runsWork mechanism of Igmp snooping When receiving a general queryIgmp snooping related ports 252When receiving a leave group message When receiving a membership report253 Igmp snooping querier Configuring Igmp snooping254 Enabling Igmp snooping globally Basic Igmp snooping configurationsIgmp snooping configuration items Configuring Igmp snooping in a VlanReturn to Configuration task list Advanced configuration Configuring Igmp snooping port functionsDisplay Igmp snooping multicast entry information Configuration items for advanced Igmp snooping featuresGroup Limit ID of the Vlan to which the entry belongs Igmp snooping configuration example259 260 Network diagram for Igmp snooping configuration261 262 Add a port to the VlanConfigure Igmp snooping in the Vlan Enable Igmp snooping globally263 Igmp snooping multicast entry information displaying Configure Igmp snooping on GigabitEthernet 1/0/3264 265 Details about an Igmp snooping multicast entryRouting table Routing configurationStatic route 266Default route Configuring IPv4 routingDisplaying the IPv4 active route table Address will be forwarded out the interfaceCreating an IPv4 static route Preferences enables route backupSpecify the mask of the destination IP address Configuration outlines Static route configuration exampleNetwork diagram for IPv4 static route configuration Select the output interface270 Configure a default route271 Configure a static route272 273 PrecautionsIntroduction to Dhcp Dhcp overviewDhcp address allocation Allocation mechanismsIP address lease extension Dynamic IP address allocation processDynamic IP address allocation process 275Dhcp message format Dhcp message format276 Dhcp options overview Dhcp optionsIntroduction to Dhcp options Introduction to OptionSub-option 1 in normal padding format Protocols and standardsSub-option 2 in normal padding format 278Introduction to Dhcp relay agent Dhcp relay agent configurationApplication environment FundamentalsDhcp relay agent work process Dhcp relay agent configuration task listConfiguring and displaying clients IP-to-MAC bindings Dhcp relay agent configuration281 Creating a Dhcp server group Return to Dhcp relay agent configuration task listCreate a server group Enabling the Dhcp relay agent on an interface Dhcp server group configuration items283 284 Configuring and displaying clients IP-to-MAC bindingsNetwork diagram for Dhcp relay agent configuration Dhcp relay agent configuration example285 286 Enable Dhcp287 Dhcp snooping overview Dhcp snooping configurationFunctions of Dhcp snooping Recording IP-to-MAC mappings of Dhcp clientsConfiguring trusted ports in a cascaded network Configuring a trusted port connected to a Dhcp serverConfigure trusted and untrusted ports Configure trusted ports in a cascaded networkDhcp snooping support for Option Dhcp snooping configuration task listDescribes roles of the ports shown in a Roles of portsEnabling Dhcp snooping Configuring Dhcp snoopingFunctions on an interface Displaying clients IP-to-MACReturn to Dhcp snooping configuration task list Dhcp snooping configuration292 Displaying clients IP-to-MAC bindings Configuring Dhcp snooping functions on an interfaceInclude Option 82 padded in normal formatThis field displays the Vlan to which the device belongs Dhcp snooping configuration example294 295 Network diagram for Dhcp snooping configuration296 Enable Dhcp snoopingConfigure Dhcp snooping functions on GigabitEthernet 1/0/2 Configure Dhcp snooping functions on GigabitEthernet 1/0/1297 298 Configure Dhcp snooping functions on GigabitEthernet 1/0/3Service management configuration Service management Service management configuration items Configuring service managementHttps Trace route diagram Diagnostic toolsTrace route 302Ping configuration Diagnostic tool operationsPing operation 303Trace route operation Trace route configurationPing operation result 304305 Trace route operation resultARP overview ARP managementARP function ARP message formatARP operation ARP address resolution processARP table 307Managing ARP entries ARP Table configurationDisplaying ARP entries Dynamic ARP entryDescribes the static ARP entry configuration items Static ARP configuration exampleStatic ARP entry configuration items Creating a static ARP entry310 Network diagram for configuring static ARP entriesAdd GigabitEthernet 1/0/1 to Vlan ∙ After the configuration process is complete, click Close311 312 Create VLAN-interfaceGratuitous ARP Configuring gratuitous ARPIntroduction to gratuitous ARP Create a static ARP entryPackets Enabled by defaultLearning function PeriodARP detection ARP attack defense configurationIntroduction to ARP detection Man-in-the-middle attackMan-in-the-middle attack ARP detection mechanism316 317 Configuring ARP detectionItemDescription Creating a static binding entry Configuration, see Creating a static binding entry802.1X fundamentals Controlled/uncontrolled port and port authorization statusArchitecture ArchitecturePacket formats 802.1X-related protocolsEAP packet format Authorized/unauthorized state of a controlled portEAP packet format Eapol frame formatEapol frame format Types of Eapol packetsAccess device as the initiator Initiating 802.1X authenticationEAP over Radius 802.1X client as the initiatorComparison of EAP relay and EAP termination 802.1X authentication proceduresEAP relay EAP terminationEAP relay 802.1X authentication procedure in EAP relay modePacket exchange method Benefits Limitations EAP termination Works with any Radius server that326 EAP termination 802.1X authentication procedure in EAP termination mode327 Access control methods 802.1X configurationUsing 802.1X authentication with other features HP implementationConfiguration prerequisites ConfiguringGuest Vlan ACL assignmentConfiguring 802.1X globally 802.1X configuration task list802.1X configuration task list 802.1X configuration Basic 802.1X configuration itemsAuthentication procedures Authentication MethodSpecify whether to enable the quiet timer Authentication on the userReturn to 802.1X configuration task list Configuring 802.1X on a portPort Authorization Select the port authorization state forPort to access the network without authentication Access requests from users on the portConfiguring an 802.1X guest Vlan 802.1X configuration exampleConfiguring an 802.1X guest Vlan 335 Network diagram for 802.1X configuration336 Global 802.1X configuration337 Radius authentication server configuration338 Radius parameter configurationCreate an ISP domain Configure the AAA authentication method for the ISP domain∙ Select the domain name test 339340 Configure the AAA authorization method for the ISP domainConfigure the AAA accounting method for the ISP domain ACL assignment configuration exampleNetwork diagram for ACL assignment 341342 343 344 345 346 Create ACL347 ACL rule configuration348 349 802.1X configuration of GigabitEthernet 1/0/1350 Ping operation summaryNetwork diagram for AAA AAA configurationIntroduction to AAA 351Configuring an ISP domain Configuring AAADomain-based user management Determine the ISP domain of a user by the usernameDomain Setup Configuring an ISP domainISP domain configuration items Configuring authentication methods for the ISP domainAuthorization method configuration Configuring authorization methods for the ISP domain355 Authorization method configuration items Configuring accounting methods for the ISP domainReal-time accounting updates for the users Network diagram for AAA configuration example AAA configuration exampleMethod Used Not Set -Uses the default accounting methods ∙ None -Performs no accounting359 Configure a local userConfigure the ISP domain to use local authentication Configure ISP domain test360 361 Configure the ISP domain to use local authorization362 Configure the ISP domain to use local accountingSecurity and authentication mechanisms Radius configurationIntroduction to Radius Client/server modelBasic message exchange process of Radius Basic message exchange process of RadiusRadius packet format Radius packet formatMain values of the Code field Code Packet type DescriptionAttribute Radius attributesExtended Radius attributes Radius configuration task list Configuring RadiusSegment of a Radius packet containing an extended attribute TaskDescriptionRadius server configuration Configuring Radius serversConfiguring Radius ParametersReturn to Radius configuration task list Configuring Radius parametersNAS-IP Radius parameter configuration Radius parametersSet the maximum number of transmission attempts Timeout Retransmission TimesAttempts cannot exceed Is an integerNetwork diagram for Radius server configuration Radius configuration exampleNumber of users Real-time accounting interval in minutes Can beConfigure the Radius authentication server Configure Radius parameters Create an ISP domain Configuration progress dialog box Configuration guidelines Configuring a local user Configuring usersUsers Local userUsername Specify a name for the local user Password Local user configuration Local user configuration itemsUser cannot pass authentication and therefore cannot log User group list User group configuration Configuring a user groupVlan ACL 381User group after the users pass authentication User group configuration itemsSpecify the user profile for the user group PKI overview PKI configurationPKI terms Architecture of PKIEntity Applications of PKIPKI repository PKI architectureOperation of PKI Configuring PKISecure email Web securityCreating a PKI Creating a PKI entityDomain Generating an RSARequesting a Certificate Automatically Creating a PKI entity PKI entity list PKI entity configuration388 Creating a PKI domain PKI entity configuration itemsPKI domain list FqdnSelect the local PKI entity PKI domain configuration PKI domain configuration itemsCRL URL Ldap IPDestroying the RSA key pair Generating an RSA key pairKey Length Type the length of the RSA keys Retrieving a certificate 394 Get File From PC Specify the path of the file on the device395 Requesting a local certificateCRL Retrieving and displaying a CRLConfiguring a PKI entity to request a certificate from a CA PKI configuration example398 PKI entity list Configure a PKI entity399 PKI domain list Configure a PKI domain400 Certificate list Generate an RSA key pairCertificate list Certificate list Retrieve the CA certificate401 402 Request a local certificateConfiguring a port isolation group Port isolation group configurationConfigure a port isolation group 403Port isolation group configuration items Port isolation group configuration exampleNetworking diagram for port isolation group configuration 404405 Configure isolated ports for an isolation groupConfiguring authorized IP Authorized IP configurationIPv4 ACL Associate the Telnet service with an IPv4 ACL Web IPv4 ACL Associate the Http service with an IPv4 ACLAuthorized IP configuration example Authorized IP configuration exampleNetwork diagram for authorized IP Create an ACL408 Configure an ACL rule to permit Host B409 Configure authorized IPACL overview ACL configurationIntroduction to IPv4 ACL IPv4 ACL classificationEffective period of an ACL IPv4 ACL category Depth-first match procedureFragments filtering with IPv4 ACLs Depth-first match for IPv4 ACLsBenefits of using the step Configuring an ACLConfiguring an IPv4 ACL ACL stepDescribes the configuration items for creating a time range Configuring a time rangeTime range configuration items For creating a time rangeReturn to IPv4 ACL configuration task list Configuring a rule for a basic IPv4 ACLIPv4 ACL configuration items Creating an IPv4 ACLConfiguration items for a basic IPv4 ACL rule For configuring an basic IPv4 ACL415 416 Configuring a rule for an advanced IPv4 ACL417 For configuring an advanced IPv4 ACLConfiguration items for an advanced IPv4 ACL rule Dscp Configuring a rule for an Ethernet frame header ACLTOS Source Mask For configuring a rule for an Ethernet frame header ACL∙ Lsap Type-Indicates the frame encapsulation format Encapsulation by configuring the following items421 Networks without QoS guarantee QoS configurationIntroduction to QoS QoS requirements of new applicationsCountermeasures ImpactsTraffic congestion causes 423Traffic classification End-to-end QoSEnd-to-end QoS model DS field and ToS bytes Packet precedencesDescription on IP Precedence IP Precedence decimal IP Precedence binary DescriptionDscp value decimal Dscp value binary Description Description on Dscp valuesAn Ethernet frame with an 802.1Q tag header 426SP queuing Queue scheduling802.1Q tag header Description on 802.1p precedenceSchematic diagram for WRR queuing Schematic diagram for SP queuingWRR queuing 428Traffic evaluation and token bucket Line rateEvaluate traffic with the token bucket 429Priority mapping What is priority mappingHow line rate works Line rate implementationIntroduction to priority mapping tables Default CoS to DSCP/CoS to Queue mapping tablePriority mapping process Input CoS value Local precedence QueueConfiguration task lists QoS configurationConfiguring a QoS policy Default Dscp to CoS/DSCP to Queue mapping tableConfiguring line rate Configuring queue schedulingConfiguring the priority mapping tables Perform the task in 1 to configure queue schedulingCreating a class Configuring priority trust modeReturn to QoS policy configuration task list Configuring match criteriaFor configuring match criteria Shows the configuration items of configuring match criteriaDefine a match criterion to match Dscp values Service VlanDoes not overwrite the previous one Values are automatically arranged in ascending orderConfiguration items of creating a behavior Describes the configuration items of creating a behaviorCreating a traffic behavior For creating a traffic behaviorTraffic directing on the chassis front panel Port setup page for a traffic behavior438 For setting a traffic behavior Configuring other actions for a traffic behavior439 Describes the configuration items of creating a policy Configuring classifier-behavior associations for the policyConfiguration items of creating a policy Creating a policyApplying a policy to a port For setting a policyBehavior Name 441Configuration items of applying a policy to a port Configuring queue scheduling on a portFor configuring queue scheduling For applying a policy to a portReturn to Queue scheduling configuration task list Configuring line rate on a portWRR For configuring line rate on a port Configuring priority mapping tablesConfiguration items of configuring line rate on a port Return to Line rate configuration task listFor configuring priority mapping tables Configuring priority trust mode on a portConfiguration items of configuring priority mapping tables Describes the port priority configuration items For configuring port priority For modifying port priorityPort priority configuration items 447 Return toPriority trust mode configuration task listACL/QoS configuration example ACL/QoS configuration examplesNetwork diagram for ACL/QoS configuration 448449 Define a time range covering 800 to 1800 every day450 Create an advanced IPv4 ACL451 Define an ACL rule for traffic to the FTP server452 Create a class453 Define match criteria454 455 Configure actions for the behaviorCreate a policy Configure classifier-behavior associations for the policy456 457 PoE power PoE configurationPoE overview AdvantagesProtocol specification Configuring PoEConfiguring PoE ports Protocol specification related to PoE is Ieee 802.3afPort setup PoE port configuration items PSE setup Configuring non-standard PD detection461 Displaying information about PSE and PoE ports PoE configuration examplePoE summary with GigabitEthernet 1/0/1 selected 462463 Network diagram for PoE464 Configure the PoE port supplying power to APSupport and other resources Command conventionsContacting HP Related information ConventionsSymbols Subscription serviceGUI conventions Network topology icons467 IndexPage Page