Configuring a rule for an advanced IPv4 ACL, 416

	Item	Description
	Source Wildcard	and a wildcard mask, in dotted decimal notation.
	Source Wildcard

	Time Range	Select the time range during which the rule takes effect.
	Time Range	Available time ranges are those that have been configured.
		Available time ranges are those that have been configured.

Return to IPv4 ACL configuration task list.

Configuring a rule for an advanced IPv4 ACL

Select QoS  ACL IPv4 from the navigation tree and then select the Advanced Setup tab to enter the rule configuration page for an advanced IPv4 ACL, as shown in a.

416

Page 428

Image 428

HP V1910 manual Configuring a rule for an advanced IPv4 ACL, 416

Contents

HP V1910 Switch Series Part number Document version Warranty Contents Page Page STP177 Page Page Page Page Page Page Overview Configuration through the web interface Default login informationWeb-based network management operating environment Logging in to the web interface Login page of the web interface Example Web-based configuration interface Logging out of the web interfaceIntroduction to the web interface Navigation tree Body area Title area Web user level Introduction to the web-based NM functionsDescription of Web-based NM functions Function menu Description User level Used at the next startup from the host of the current Snmp VCTRmon Mstp VlanMAC Lacp Their partner portsLldp Igmp ARP AAA CRL RadiusPKI Class Introduction to the common items on the web pages Buttons and iconsDisplay Commonly used buttons and icons Content display by pages Search functionSorting function Advanced search Configuration guidelines Sort display based on MAC address in the ascending order Configuration at the CLI Setting up the configuration environmentGetting started with the CLI Console cable Setting terminal parameters Network diagram for configuration environment setup Connection description of the HyperTerminal Set the serial port used by the HyperTerminal connection HyperTerminal window Set the serial port parametersSelect File  Properties in the HyperTerminal window Set terminal emulation in Switch Properties dialog box Press Enter. The Password prompt displayLogging in to the CLI Enter your username at the Username prompt Initialize CLI commandsIpsetup # Modify the login password of user admin PasswordPassword Ping Quit Reboot Summary Upgrade # Display summary information of the device Configuration procedure Network requirements # Reboot the switch Configuration wizard Basic service setupEntering the configuration wizard homepage Configuring system parameters Configuring management IP address Admin Status Configure IPv4Configure how the Vlan interface obtains an IPv4 address Select a Vlan interface Finishing configuration wizard Configuration finishesItemDescription Manual Important Configuring stack management Stack management configuration task listNetwork diagram for stack management Stack management configuration task list Configuring global parameters of a stack Setup Configuration items of global parameters Configuring stack ports Return to Stack management configuration task listDisplaying topology summary of a stack Topology summary Fields of topology summary Displaying device summary of a stack Stack configuration exampleLogging into a member switch from the master switch Stack Configure global parameters for the stack on Switch a Configure a stack port on Switch a Configure stack ports on Switch B Configure a stack port on Switch C Configuration guidelines Summary Displaying device summaryDisplaying system information System information Displaying device information Basic system informationSystem resource state Recent system operation logs Device information Device basic information configuration Configuring device basic informationConfiguring system name Configuring idle timeout period Idle timeout Set the idle timeout period for logged-in users System time configuration System time configurationConfiguring system time System time configuration example System time configuration itemsNetwork diagram for configuring system time NTP Configure Device a Configure Device a as the NTP server of Switch B Configuration guidelines Log management configuration Configuring log managementConfiguration task list Setting syslog related parameters Return to Log management configuration task list Displaying syslog Display syslog Syslog display items System logs severity levelSeverity level Description Value See IP address of the loghost Setting loghostSet loghost Loghost configuration item Configuration management Back up configurationRestore configuration Backup configuration Save configuration confirmation Save configurationConfiguration restore Initialize Initialize confirmation dialog box Device maintenance Software upgradeExtension .bin Filename Device reboot Device rebootSpecifies the type of the startup configuration file Already exists, overwrite Diagnostic information Diagnostic informationElectronic label Electronic label Diagnostic information file is created File management configuration File managementDisplaying file list File management Removing a file Downloading a fileUploading a file Port management configuration Configuring a portSetting operation parameters for a port Setup tab Port configuration items Pvid MDI Percentage or by PPS as follows Input a percentage in the box belowConstrain Multicast Suppression Input a number in the box below Viewing the operation parameters of a port Details tab Port management configuration exampleNetwork diagram for port rate configuration Configure the rate of GigabitEthernet 1/0/4 Batch configure port rate Display the rate settings of ports Port mirroring configuration Introduction to port mirroringImplementing port mirroring Local port mirroring Configuring local port mirroring Configuring local port mirroringLocal port mirroring configuration task list Creating a mirroring group Configuring ports for a mirroring group Return to Local port mirroring configuration task list Mirroring ports of a port mirroring group Configuration examples Local port mirroring configuration example Create a local mirroring group Configure the mirroring ports Configuration progress dialog box Configure the monitor port Add a user Local user configuration items User managementManaging users Adding a local user Setting the super password Super password Switching to the management level Super password configuration itemsSwitch to the management level Input are not consistent when you apply the configuration Loopback test configuration Loopback operation Loopback test result Testing cable status Test the status of the cable connected to an Ethernet port Failure Description on the cable test resultStatus and length of the cable Flow interval configuration Setting the traffic statistics generating intervalMonitoring port traffic statistics Viewing port traffic statistics Port traffic statistics Storm constrain configuration Configuring storm constrain Configuring storm constrain Storm Constrain tab Upper threshold. Available options include ∙ None-Performs no actionUpper threshold Thresholds for at least a type of traffic Crossed after that After that Rmon configuration Working mechanism Alarm group Rmon groupsEthernet statistics group History group Configuring Rmon Configuring the Rmon statistics functionRising and falling alarm events Event group Configuring the Rmon alarm function Rmon statistics group configuration task listRmon history group configuration task list TaskRemarks Configuring a statistics entry Rmon alarm configuration task listDisplaying Rmon running status Display Rmon running status 100 Configuring a history entryReturn to Rmon statistics group configuration task list Configuring an event entry Return to Rmon history group configuration task listBuckets Granted 101 Configuring an alarm entry Return to Rmon alarm configuration task listNone of them is selected, the system will take no action 102 Statics Item 104 Displaying Rmon statistics informationLog-and-trap Rmon statistics information Fields of Rmon statistics Displaying Rmon history sampling information Return to Display Rmon running status CRCAlignErrors Corresponding to the MIB node etherHistoryCRCAlignErrorsNumber of the entry in the system buffer Node etherHistoryOctets Rmon configuration example Network diagram for RmonDisplaying Rmon event logs Log Return to Display Rmon running status 109 Display Rmon statistics 110 111 Configure an event groupDisplay the index of a event entry Configure an alarm group 112 PoE Disabled Disable PoE on the port 113 Energy saving configurationConfiguring energy saving on a port ItemDescription Snmp configuration Snmp mechanismRelationship between an NMS, agent and MIB MIB tree Snmp configuration Configuring SNMPv1 or SNMPv2cPerform the tasks in 1 to configure SNMPv1 or SNMPv2c SNMPv1 or SNMPv2c configuration task list Configuring SNMPv3 Perform the tasks in 1 to configure SNMPv3SNMPv3 configuration task list Configuring Snmp trap Set up Configuration items for enabling Snmp Specify to enable or disable SnmpConfigure the local engine ID Local Engine ID Configuring an Snmp view Creating an Snmp viewView Create an Snmp view Configuration items for creating an Snmp view Adding rules to an Snmp viewIdentify a MIB subtree Set the subtree mask Configuring an Snmp community Configure an Snmp community Create an Snmp CommunityAdd rules to an Snmp view 121 Configuring an Snmp group Configuration items for configuring an Snmp communityReturn to SNMPv1 or SNMPv2c configuration task list Snmp group Configuring an Snmp user Return to SNMPv3 configuration task listObjects on the device Agent Description Configuring Snmp trap function Address in the text box according to the IP address type Set the destination IP addressDestination IP Address NMS Snmp configuration exampleNetwork diagram for Snmp configuration Enable Snmp 128 129 Create an Snmp group 130 131 Enable the agent to send Snmp trapsAdd target hosts of Snmp traps Configuration verification 132 Interface statistics Displaying interface statistics Field Description Vlan configuration Vlan diagramIntroduction to Vlan Vlan fundamentals Vlan types Traditional Ethernet frame formatPosition and format of Vlan tag 136 Tag removed or intact depending on your configuration 137 Introduction to port-based VlanPort link type Frame Creating VLANs Configuring a VlanVlan configuration task list approach Create tab Configuration items of creating VLANs Return to Vlan configuration task list approachSelecting VLANs 139 140 Select Vlan tab Configuration items of selecting VLANsModifying a Vlan Modify Vlan tab Configuration items of modifying a Vlan Assigned to this VlanAggregate interfaces from this list 141 Modify Port tab Configuration items of modifying ports Modifying portsSelect the ports to be modified Untagged Vlan configuration example Network diagram for Vlan configuration 144 Create Vlan 2, Vlan 6 through Vlan 50, and Vlan 145 Set a Vlan range 146 147 148 Vlan interface configuration Configuring Vlan interfacesPerform the tasks in 1 to configure a Vlan interface Vlan interface configuration task list Create tab Configuration items of creating a Vlan interface Return to Vlan interface configuration task listBootp Modifying a Vlan interface Modify tab Configuration items of modifying a Vlan interface Select the Vlan interface to be configured 152 Selected Vlan interfaceIs up if one or more Ethernet ports in the Vlan are up Voice Vlan configuration Default OUI addresses of different vendorsOUI addresses Voice Vlan assignment modes Co-relation 154 Voice Vlan mode Packet type Packet processing mode Configuring the voice VlanSecurity mode and normal mode of voice VLANs Adding OUI addresses to the OUI list Configuring voice Vlan globallyConfiguring voice Vlan on a port Configuring voice Vlan globally Configuring voice Vlan on a portConfigure voice Vlan Global voice Vlan configuration items Timer expires, the port is removed from the voice Vlan Set the voice Vlan assignment mode of a port Be configured as the voice VlanVoice Vlan function on the port Set the voice Vlan ID Adding OUI addresses to the OUI list 159 Voice Vlan configuration examples 160 Create Vlan 161 Configure GigabitEthernet 1/0/1 as a hybrid port 162 Configure the voice Vlan function globally 163 Verify the configuration Add OUI addresses to the OUI listCurrent OUI list of the device 164 Current voice Vlan information 165 166 167 Assign GigabitEthernet 1/0/1 to Vlan 2 as an untagged member 168 Configure voice Vlan on GigabitEthernet 1/0/1 169 170 171 MAC address configuration 172 Configuring MAC addresses Configuring a MAC address entryMAC address table of the device 173 MAC tab Click Add in the bottom to enter the page as shown in bCreate a MAC address entry 174 Setting the aging time of MAC address entries Configuration items of creating a MAC address entrySet the ID of the Vlan to which the MAC address belongs Port Set the port to which the MAC address belongs 176 MAC address configuration exampleCreate a static MAC address entry Mstp configuration STP protocol packetsBasic concepts in STP Root bridge How STP works Designated bridge and designated portPath cost Description of designated bridges and designated ports Step Actions Selection of the optimum configuration BpduCalculation process of the STP algorithm 180 Selection of the root port and designated portsStep Description Network diagram for the STP algorithm Initial state of each deviceDevice Port name Bpdu of port ∙ Comparison process and result on each device BP2 with the configuration Bpdu of BP2. If the calculated 0, 1, BP2 before the configuration Bpdu is updatedBpdu CP2 1, 0, 1, BP2 Configuration Bpdu forwarding mechanism in STP Final calculated spanning treeBlocked port CP2 0, 0, 0, AP2 Root port CP2 0, 5, 1, BP2 183 STP timers 184 Mstp features STP and Rstp limitationsMstp basic concepts 185 MST region VLAN-to-MSTI mapping tableBasic concepts in Mstp 186 Regional root Common root bridgeBoundary port Port roles 188 Port statesPort roles How Mstp works Implementation of Mstp on devicesCist calculation Msti calculation Configuring Mstp Configuring an MST regionPerform the tasks described in 1 to configure Mstp Mstp configuration task list Return to Mstp configuration task list MST regionClick Modify to enter the page shown in b Vlan ID Configuring Mstp globally Set the STP working mode ∙ STP-Each port on a device sends out STP BPDUsNumber of devices on the path composed of the most devices Bridge Diameter Configuring Mstp on a port STP Set the type of protection to be enabled on the port Manually configure path cost for portsConfiguration may cause a temporary loop Recommends you to use the default value Protection type Description Displaying Mstp information of a portProtection types Port Summary tab ForwardingLearning Discarding Whether or not the port is an edge port 199 Mstp configuration exampleNetwork diagram for Mstp configuration Configure an MST region Region tab∙ Click Modify to enter the page shown in c 200 Configure Mstp globally on Switch a 201 202 203 Configure Mstp globally on Switch DWhen configuring MSTP, follow these guidelines Page Link aggregation and Lacp configuration Basic conceptsAggregate interface Aggregation group Class-two configurations Static aggregation modeClass-two configurations Link aggregation modes Dynamic aggregation mode 207 Configuring link aggregation and Lacp Load sharing mode of an aggregation groupConfiguring a static aggregation group Configuring a dynamic aggregation group Dynamic aggregation group configuration task list Setting Lacp priorityDisplaying information of LACP-enabled ports Creating a link aggregation group Assign an ID to the link aggregation group to be created 210 Setting Lacp priority Displaying information of an aggregate interface Displaying information of LACP-enabled ports Lacp priority configuration itemsAlso on LACP-disabled ports System Priority Set the Lacp priority of the local system Field/button Description Display information about LACP-enabled portsFields in the LACP-enabled port summary table Fields in the Partner Port Details table Link aggregation and Lacp configuration exampleDescribes the fields in the Partner Port Details table Network diagram for static link aggregation configuration Create static link aggregation group∙ Set the link aggregation interface ID to 215 Create dynamic link aggregation group 216 217 Lldp configuration BackgroundLLDPDUs Lldpdu TLVs SNAP-encapsulated Lldpdu formatLldpdu encapsulation format FCS Basic Lldp TLVs Type Description RemarksIeee 802.1 organizationally specific TLVs Ieee 802.1 organizationally specific TLVs LLDP-MED TLVs Ieee 802.3 organizationally specific TLVsIeee 802.3 organizationally specific TLVs LLDP-MED TLVs How Lldp works Compatibility of Lldp with CDP Configuring Lldp Lldp configuration task listPerform the tasks in 1 to configure Lldp Lldp configuration task list 224 Enabling Lldp on portsTask Remarks 225 Configuring Lldp settings on portsPort Setup tab Return to Lldp configuration task list For modifying Lldp settings on a port 226 Is Ethernet ∙ Disable-Neither sends nor receives CDPDUs CDP Operating ModeCDP operating mode on the port to TxRx Enable Lldp polling and set the polling interval Configuring global Lldp setup DOT3 TLV MAC/PHY Global Setup tab Global Lldp setup configuration items Displaying Lldp information for a port Port component Port ID typeInterface alias Type of PSE power source advertised by the local device Chassis ID typeChassis component 233 Link aggregation group Endpoint devicesIII endpoint devices are used directly by end users 234 Unknown Displaying global Lldp information 236 Global Summary tab Global Lldp information Lldp configuration examples Basic Lldp configuration exampleNeighbor Summary tab Return to Lldp configuration task list Displaying Lldp information received from Lldp neighbors Network diagram for basic Lldp configuration 239 Port Setup tab 240 For setting Lldp on multiple ports 241 Global Setup tab 242 For configuring Lldp on the selected port 243 CDP-compatible Lldp configuration example 244 245 Network diagram for CDP-compatible Lldp configurationFor creating VLANs For configuring ports 246 For configuring the voice Vlan function on ports 247 248 For modifying Lldp settings on ports 249 250 Igmp snooping configuration Principle of Igmp snoopingIgmp snooping related ports Multicast forwarding before and after Igmp snooping runs When receiving a general query Work mechanism of Igmp snoopingIgmp snooping related ports 252 253 When receiving a membership reportWhen receiving a leave group message 254 Configuring Igmp snoopingIgmp snooping querier Basic Igmp snooping configurations Enabling Igmp snooping globally Return to Configuration task list Configuring Igmp snooping in a VlanIgmp snooping configuration items Configuring Igmp snooping port functions Advanced configuration Group Limit Configuration items for advanced Igmp snooping featuresDisplay Igmp snooping multicast entry information 259 Igmp snooping configuration exampleID of the Vlan to which the entry belongs Network diagram for Igmp snooping configuration 260 261 Add a port to the Vlan 262 263 Enable Igmp snooping globallyConfigure Igmp snooping in the Vlan 264 Configure Igmp snooping on GigabitEthernet 1/0/3Igmp snooping multicast entry information displaying Details about an Igmp snooping multicast entry 265 Routing configuration Routing tableStatic route 266 Configuring IPv4 routing Default routeDisplaying the IPv4 active route table Address will be forwarded out the interface Specify the mask of the destination IP address Preferences enables route backupCreating an IPv4 static route Static route configuration example Configuration outlinesNetwork diagram for IPv4 static route configuration Select the output interface Configure a default route 270 Configure a static route 271 272 Precautions 273 Dhcp overview Introduction to DhcpDhcp address allocation Allocation mechanisms Dynamic IP address allocation process IP address lease extensionDynamic IP address allocation process 275 276 Dhcp message formatDhcp message format Dhcp options Dhcp options overviewIntroduction to Dhcp options Introduction to Option Protocols and standards Sub-option 1 in normal padding formatSub-option 2 in normal padding format 278 Dhcp relay agent configuration Introduction to Dhcp relay agentApplication environment Fundamentals Dhcp relay agent configuration task list Dhcp relay agent work process 281 Dhcp relay agent configurationConfiguring and displaying clients IP-to-MAC bindings Create a server group Return to Dhcp relay agent configuration task listCreating a Dhcp server group 283 Dhcp server group configuration itemsEnabling the Dhcp relay agent on an interface Configuring and displaying clients IP-to-MAC bindings 284 285 Dhcp relay agent configuration exampleNetwork diagram for Dhcp relay agent configuration Enable Dhcp 286 287 Dhcp snooping configuration Dhcp snooping overviewFunctions of Dhcp snooping Recording IP-to-MAC mappings of Dhcp clients Configuring a trusted port connected to a Dhcp server Configuring trusted ports in a cascaded networkConfigure trusted and untrusted ports Configure trusted ports in a cascaded network Dhcp snooping configuration task list Dhcp snooping support for OptionDescribes roles of the ports shown in a Roles of ports Configuring Dhcp snooping Enabling Dhcp snoopingFunctions on an interface Displaying clients IP-to-MAC 292 Dhcp snooping configurationReturn to Dhcp snooping configuration task list Configuring Dhcp snooping functions on an interface Displaying clients IP-to-MAC bindingsInclude Option 82 padded in normal format 294 Dhcp snooping configuration exampleThis field displays the Vlan to which the device belongs Network diagram for Dhcp snooping configuration 295 Enable Dhcp snooping 296 297 Configure Dhcp snooping functions on GigabitEthernet 1/0/1Configure Dhcp snooping functions on GigabitEthernet 1/0/2 Configure Dhcp snooping functions on GigabitEthernet 1/0/3 298 Service management configuration Configuring service management Service management Service management configuration items Https Diagnostic tools Trace route diagramTrace route 302 Diagnostic tool operations Ping configurationPing operation 303 Trace route configuration Trace route operationPing operation result 304 Trace route operation result 305 ARP management ARP overviewARP function ARP message format ARP address resolution process ARP operationARP table 307 ARP Table configuration Managing ARP entriesDisplaying ARP entries Dynamic ARP entry Static ARP configuration example Describes the static ARP entry configuration itemsStatic ARP entry configuration items Creating a static ARP entry Network diagram for configuring static ARP entries 310 311 ∙ After the configuration process is complete, click CloseAdd GigabitEthernet 1/0/1 to Vlan Create VLAN-interface 312 Configuring gratuitous ARP Gratuitous ARPIntroduction to gratuitous ARP Create a static ARP entry Enabled by default PacketsLearning function Period ARP attack defense configuration ARP detectionIntroduction to ARP detection Man-in-the-middle attack 316 ARP detection mechanismMan-in-the-middle attack Configuring ARP detection 317 ItemDescription Configuration, see Creating a static binding entry Creating a static binding entry Controlled/uncontrolled port and port authorization status 802.1X fundamentalsArchitecture Architecture 802.1X-related protocols Packet formatsEAP packet format Authorized/unauthorized state of a controlled port Eapol frame format EAP packet formatEapol frame format Types of Eapol packets Initiating 802.1X authentication Access device as the initiatorEAP over Radius 802.1X client as the initiator 802.1X authentication procedures Comparison of EAP relay and EAP terminationEAP relay EAP termination 802.1X authentication procedure in EAP relay mode EAP relayPacket exchange method Benefits Limitations EAP termination Works with any Radius server that 326 327 802.1X authentication procedure in EAP termination modeEAP termination 802.1X configuration Access control methodsUsing 802.1X authentication with other features HP implementation Configuring Configuration prerequisitesGuest Vlan ACL assignment 802.1X configuration task list Configuring 802.1X globally802.1X configuration task list 802.1X configuration Basic 802.1X configuration items Authentication Method Authentication proceduresSpecify whether to enable the quiet timer Authentication on the user Configuring 802.1X on a port Return to 802.1X configuration task list Select the port authorization state for Port AuthorizationPort to access the network without authentication Access requests from users on the port Configuring an 802.1X guest Vlan 802.1X configuration exampleConfiguring an 802.1X guest Vlan Network diagram for 802.1X configuration 335 Global 802.1X configuration 336 Radius authentication server configuration 337 Radius parameter configuration 338 Configure the AAA authentication method for the ISP domain Create an ISP domain∙ Select the domain name test 339 Configure the AAA authorization method for the ISP domain 340 ACL assignment configuration example Configure the AAA accounting method for the ISP domainNetwork diagram for ACL assignment 341 342 343 344 345 Create ACL 346 ACL rule configuration 347 348 802.1X configuration of GigabitEthernet 1/0/1 349 Ping operation summary 350 AAA configuration Network diagram for AAAIntroduction to AAA 351 Configuring AAA Configuring an ISP domainDomain-based user management Determine the ISP domain of a user by the username Configuring an ISP domain Domain Setup Configuring authentication methods for the ISP domain ISP domain configuration items 355 Configuring authorization methods for the ISP domainAuthorization method configuration Configuring accounting methods for the ISP domain Authorization method configuration items Real-time accounting updates for the users AAA configuration example Network diagram for AAA configuration exampleMethod Used Not Set -Uses the default accounting methods ∙ None -Performs no accounting Configure a local user 359 360 Configure ISP domain testConfigure the ISP domain to use local authentication Configure the ISP domain to use local authorization 361 Configure the ISP domain to use local accounting 362 Radius configuration Security and authentication mechanismsIntroduction to Radius Client/server model Basic message exchange process of Radius Basic message exchange process of Radius Radius packet format Radius packet formatMain values of the Code field Code Packet type Description Radius attributes Attribute Extended Radius attributes Configuring Radius Radius configuration task listSegment of a Radius packet containing an extended attribute TaskDescription Configuring Radius servers Radius server configurationConfiguring Radius Parameters Configuring Radius parameters Return to Radius configuration task list Radius parameter configuration Radius parameters NAS-IP Timeout Retransmission Times Set the maximum number of transmission attemptsAttempts cannot exceed Is an integer Radius configuration example Network diagram for Radius server configurationNumber of users Real-time accounting interval in minutes Can be Configure the Radius authentication server Configure Radius parameters Create an ISP domain Configuration progress dialog box Configuration guidelines Configuring users Configuring a local userUsers Local user User cannot pass authentication and therefore cannot log Local user configuration Local user configuration itemsUsername Specify a name for the local user Password Configuring a user group User group list User group configurationVlan ACL 381 Specify the user profile for the user group User group configuration itemsUser group after the users pass authentication PKI configuration PKI overviewPKI terms Architecture of PKI Applications of PKI EntityPKI repository PKI architecture Configuring PKI Operation of PKISecure email Web security Creating a PKI entity Creating a PKIDomain Generating an RSA Requesting a Certificate Automatically 388 PKI entity list PKI entity configurationCreating a PKI entity PKI entity configuration items Creating a PKI domainPKI domain list Fqdn PKI domain configuration PKI domain configuration items Select the local PKI entity Ldap IP CRL URL Key Length Type the length of the RSA keys Generating an RSA key pairDestroying the RSA key pair Retrieving a certificate Get File From PC Specify the path of the file on the device 394 Requesting a local certificate 395 Retrieving and displaying a CRL CRL PKI configuration example Configuring a PKI entity to request a certificate from a CA PKI entity list Configure a PKI entity 398 PKI domain list Configure a PKI domain 399 Certificate list Generate an RSA key pair 400 401 Certificate list Retrieve the CA certificateCertificate list Request a local certificate 402 Port isolation group configuration Configuring a port isolation groupConfigure a port isolation group 403 Port isolation group configuration example Port isolation group configuration itemsNetworking diagram for port isolation group configuration 404 Configure isolated ports for an isolation group 405 Authorized IP configuration Configuring authorized IPIPv4 ACL Associate the Telnet service with an IPv4 ACL Web IPv4 ACL Associate the Http service with an IPv4 ACL Authorized IP configuration example Authorized IP configuration exampleNetwork diagram for authorized IP Create an ACL Configure an ACL rule to permit Host B 408 Configure authorized IP 409 ACL configuration ACL overviewIntroduction to IPv4 ACL IPv4 ACL classification IPv4 ACL category Depth-first match procedure Effective period of an ACLFragments filtering with IPv4 ACLs Depth-first match for IPv4 ACLs Configuring an ACL Benefits of using the stepConfiguring an IPv4 ACL ACL step Configuring a time range Describes the configuration items for creating a time rangeTime range configuration items For creating a time range Configuring a rule for a basic IPv4 ACL Return to IPv4 ACL configuration task listIPv4 ACL configuration items Creating an IPv4 ACL 415 For configuring an basic IPv4 ACLConfiguration items for a basic IPv4 ACL rule Configuring a rule for an advanced IPv4 ACL 416 For configuring an advanced IPv4 ACL 417 Configuration items for an advanced IPv4 ACL rule TOS Configuring a rule for an Ethernet frame header ACLDscp For configuring a rule for an Ethernet frame header ACL Source Mask 421 Encapsulation by configuring the following items∙ Lsap Type-Indicates the frame encapsulation format QoS configuration Networks without QoS guaranteeIntroduction to QoS QoS requirements of new applications Impacts CountermeasuresTraffic congestion causes 423 End-to-end QoS model End-to-end QoSTraffic classification Packet precedences DS field and ToS bytesDescription on IP Precedence IP Precedence decimal IP Precedence binary Description Description on Dscp values Dscp value decimal Dscp value binary DescriptionAn Ethernet frame with an 802.1Q tag header 426 Queue scheduling SP queuing802.1Q tag header Description on 802.1p precedence Schematic diagram for SP queuing Schematic diagram for WRR queuingWRR queuing 428 Line rate Traffic evaluation and token bucketEvaluate traffic with the token bucket 429 What is priority mapping Priority mappingHow line rate works Line rate implementation Default CoS to DSCP/CoS to Queue mapping table Introduction to priority mapping tablesPriority mapping process Input CoS value Local precedence Queue QoS configuration Configuration task listsConfiguring a QoS policy Default Dscp to CoS/DSCP to Queue mapping table Configuring queue scheduling Configuring line rateConfiguring the priority mapping tables Perform the task in 1 to configure queue scheduling Configuring priority trust mode Creating a class Configuring match criteria Return to QoS policy configuration task listFor configuring match criteria Shows the configuration items of configuring match criteria Service Vlan Define a match criterion to match Dscp valuesDoes not overwrite the previous one Values are automatically arranged in ascending order Describes the configuration items of creating a behavior Configuration items of creating a behaviorCreating a traffic behavior For creating a traffic behavior 438 Port setup page for a traffic behaviorTraffic directing on the chassis front panel 439 Configuring other actions for a traffic behaviorFor setting a traffic behavior Configuring classifier-behavior associations for the policy Describes the configuration items of creating a policyConfiguration items of creating a policy Creating a policy For setting a policy Applying a policy to a portBehavior Name 441 Configuring queue scheduling on a port Configuration items of applying a policy to a portFor configuring queue scheduling For applying a policy to a port WRR Configuring line rate on a portReturn to Queue scheduling configuration task list Configuring priority mapping tables For configuring line rate on a portConfiguration items of configuring line rate on a port Return to Line rate configuration task list Configuration items of configuring priority mapping tables Configuring priority trust mode on a portFor configuring priority mapping tables Port priority configuration items For configuring port priority For modifying port priorityDescribes the port priority configuration items Return toPriority trust mode configuration task list 447 ACL/QoS configuration examples ACL/QoS configuration exampleNetwork diagram for ACL/QoS configuration 448 Define a time range covering 800 to 1800 every day 449 Create an advanced IPv4 ACL 450 Define an ACL rule for traffic to the FTP server 451 Create a class 452 Define match criteria 453 454 Configure actions for the behavior 455 456 Configure classifier-behavior associations for the policyCreate a policy 457 PoE configuration PoE powerPoE overview Advantages Configuring PoE Protocol specificationConfiguring PoE ports Protocol specification related to PoE is Ieee 802.3af Port setup PoE port configuration items 461 Configuring non-standard PD detectionPSE setup PoE configuration example Displaying information about PSE and PoE portsPoE summary with GigabitEthernet 1/0/1 selected 462 Network diagram for PoE 463 Configure the PoE port supplying power to AP 464 Command conventions Support and other resourcesContacting HP Related information Conventions Subscription service SymbolsGUI conventions Network topology icons Index 467Page Page