ACL/QoS configuration examples, 448 | HP V1910 manual

ACL/QoS configuration examples

ACL/QoS configuration example

Network requirements

As shown in b, in the network, the FTP server at IP address 10.1.1.1/24 is connected to the Switch, and the clients access the FTP server through GigabitEthernet 1/0/1 of the Switch.

Configure an ACL and a QoS policy as follows to prevent the hosts from accessing the FTP server from 8:00 to 18:00 every day:

Table 152 Create an ACL to prohibit the hosts from accessing the FTP server from 8:00 to 18:00 every day. Table 153 Configure a QoS policy to drop the packets matching the ACL.

Table 154 Apply the QoS policy in the inbound direction of GigabitEthernet 1/0/1.

b.Network diagram for ACL/QoS configuration

Configuration procedure

Table 155 Configure the time range

#Define a time range covering the time range from 8:00 to 18:00 every day. ∙ Select QoS  Time Range from the navigation tree and click Create.

448

Image 460

HP V1910 manual ACL/QoS configuration examples, Network diagram for ACL/QoS configuration, 448

Contents

HP V1910 Switch Series Part number Document version Warranty Contents Page Page STP177 Page Page Page Page Page Page Overview Configuration through the web interface Default login informationWeb-based network management operating environment Logging in to the web interface Login page of the web interface Example Web-based configuration interface Logging out of the web interfaceIntroduction to the web interface Navigation tree Body area Title area Web user level Introduction to the web-based NM functionsDescription of Web-based NM functions Function menu Description User level Used at the next startup from the host of the current Rmon VCTSnmp MAC VlanMstp Lacp Their partner portsLldp Igmp ARP AAA PKI RadiusCRL Class Introduction to the common items on the web pages Buttons and iconsDisplay Commonly used buttons and icons Content display by pages Search functionSorting function Advanced search Configuration guidelines Sort display based on MAC address in the ascending order Configuration at the CLI Setting up the configuration environmentGetting started with the CLI Console cable Setting terminal parameters Network diagram for configuration environment setup Connection description of the HyperTerminal Set the serial port used by the HyperTerminal connection Select File  Properties in the HyperTerminal window Set the serial port parametersHyperTerminal window Set terminal emulation in Switch Properties dialog box Press Enter. The Password prompt displayLogging in to the CLI Enter your username at the Username prompt Ipsetup CLI commandsInitialize Password Password# Modify the login password of user admin Ping Quit Reboot Summary Upgrade # Display summary information of the device Configuration procedure Network requirements # Reboot the switch Configuration wizard Basic service setupEntering the configuration wizard homepage Configuring system parameters Configuring management IP address Admin Status Configure IPv4Configure how the Vlan interface obtains an IPv4 address Select a Vlan interface Finishing configuration wizard Configuration finishesItemDescription Manual Important Configuring stack management Stack management configuration task listNetwork diagram for stack management Stack management configuration task list Configuring global parameters of a stack Setup Configuration items of global parameters Configuring stack ports Return to Stack management configuration task listDisplaying topology summary of a stack Topology summary Fields of topology summary Logging into a member switch from the master switch Stack configuration exampleDisplaying device summary of a stack Stack Configure global parameters for the stack on Switch a Configure a stack port on Switch a Configure stack ports on Switch B Configure a stack port on Switch C Configuration guidelines Summary Displaying device summaryDisplaying system information System information Displaying device information Basic system informationSystem resource state Recent system operation logs Device information Device basic information configuration Configuring device basic informationConfiguring system name Configuring idle timeout period Idle timeout Set the idle timeout period for logged-in users Configuring system time System time configurationSystem time configuration System time configuration example System time configuration itemsNetwork diagram for configuring system time NTP Configure Device a Configure Device a as the NTP server of Switch B Configuration guidelines Log management configuration Configuring log managementConfiguration task list Setting syslog related parameters Return to Log management configuration task list Displaying syslog Display syslog Syslog display items System logs severity levelSeverity level Description Value See Set loghost Loghost configuration item Setting loghostIP address of the loghost Configuration management Back up configurationRestore configuration Backup configuration Configuration restore Save configurationSave configuration confirmation Initialize Initialize confirmation dialog box Device maintenance Software upgradeExtension .bin Filename Device reboot Device rebootSpecifies the type of the startup configuration file Already exists, overwrite Diagnostic information Diagnostic informationElectronic label Electronic label Diagnostic information file is created File management configuration File managementDisplaying file list File management Uploading a file Downloading a fileRemoving a file Port management configuration Configuring a portSetting operation parameters for a port Setup tab Port configuration items Pvid MDI Percentage or by PPS as follows Input a percentage in the box belowConstrain Multicast Suppression Input a number in the box below Viewing the operation parameters of a port Network diagram for port rate configuration Port management configuration exampleDetails tab Configure the rate of GigabitEthernet 1/0/4 Batch configure port rate Display the rate settings of ports Port mirroring configuration Introduction to port mirroringImplementing port mirroring Local port mirroring Configuring local port mirroring Configuring local port mirroringLocal port mirroring configuration task list Creating a mirroring group Configuring ports for a mirroring group Return to Local port mirroring configuration task list Mirroring ports of a port mirroring group Configuration examples Local port mirroring configuration example Create a local mirroring group Configure the mirroring ports Configuration progress dialog box Configure the monitor port Add a user Local user configuration items User managementManaging users Adding a local user Setting the super password Super password Switching to the management level Super password configuration itemsSwitch to the management level Input are not consistent when you apply the configuration Loopback test configuration Loopback operation Loopback test result Testing cable status Test the status of the cable connected to an Ethernet port Status and length of the cable Description on the cable test resultFailure Flow interval configuration Setting the traffic statistics generating intervalMonitoring port traffic statistics Viewing port traffic statistics Port traffic statistics Storm constrain configuration Configuring storm constrain Configuring storm constrain Storm Constrain tab Upper threshold. Available options include ∙ None-Performs no actionUpper threshold Thresholds for at least a type of traffic Crossed after that After that Rmon configuration Working mechanism Alarm group Rmon groupsEthernet statistics group History group Configuring Rmon Configuring the Rmon statistics functionRising and falling alarm events Event group Configuring the Rmon alarm function Rmon statistics group configuration task listRmon history group configuration task list TaskRemarks Configuring a statistics entry Rmon alarm configuration task listDisplaying Rmon running status Display Rmon running status Return to Rmon statistics group configuration task list Configuring a history entry100 Configuring an event entry Return to Rmon history group configuration task listBuckets Granted 101 Configuring an alarm entry Return to Rmon alarm configuration task listNone of them is selected, the system will take no action 102 Statics Item Log-and-trap Displaying Rmon statistics information104 Rmon statistics information Fields of Rmon statistics Displaying Rmon history sampling information Return to Display Rmon running status CRCAlignErrors Corresponding to the MIB node etherHistoryCRCAlignErrorsNumber of the entry in the system buffer Node etherHistoryOctets Rmon configuration example Network diagram for RmonDisplaying Rmon event logs Log Return to Display Rmon running status 109 Display Rmon statistics 110 Display the index of a event entry Configure an event group111 Configure an alarm group 112 Configuring energy saving on a port Energy saving configurationPoE Disabled Disable PoE on the port 113 ItemDescription Snmp configuration Snmp mechanismRelationship between an NMS, agent and MIB MIB tree Snmp configuration Configuring SNMPv1 or SNMPv2cPerform the tasks in 1 to configure SNMPv1 or SNMPv2c SNMPv1 or SNMPv2c configuration task list Configuring SNMPv3 Perform the tasks in 1 to configure SNMPv3SNMPv3 configuration task list Configuring Snmp trap Set up Configuration items for enabling Snmp Specify to enable or disable SnmpConfigure the local engine ID Local Engine ID Configuring an Snmp view Creating an Snmp viewView Create an Snmp view Configuration items for creating an Snmp view Adding rules to an Snmp viewIdentify a MIB subtree Set the subtree mask Configuring an Snmp community Configure an Snmp community Create an Snmp CommunityAdd rules to an Snmp view 121 Configuring an Snmp group Configuration items for configuring an Snmp communityReturn to SNMPv1 or SNMPv2c configuration task list Snmp group Configuring an Snmp user Return to SNMPv3 configuration task listObjects on the device Agent Description Configuring Snmp trap function Destination IP Address Set the destination IP addressAddress in the text box according to the IP address type Network diagram for Snmp configuration Snmp configuration exampleNMS Enable Snmp 128 129 Create an Snmp group 130 Add target hosts of Snmp traps Enable the agent to send Snmp traps131 Configuration verification 132 Interface statistics Displaying interface statistics Field Description Vlan configuration Vlan diagramIntroduction to Vlan Vlan fundamentals Vlan types Traditional Ethernet frame formatPosition and format of Vlan tag 136 Tag removed or intact depending on your configuration 137 Introduction to port-based VlanPort link type Frame Vlan configuration task list approach Configuring a VlanCreating VLANs Create tab Configuration items of creating VLANs Return to Vlan configuration task list approachSelecting VLANs 139 Modifying a Vlan Select Vlan tab Configuration items of selecting VLANs140 Modify Vlan tab Configuration items of modifying a Vlan Assigned to this VlanAggregate interfaces from this list 141 Modify Port tab Configuration items of modifying ports Modifying portsSelect the ports to be modified Untagged Vlan configuration example Network diagram for Vlan configuration 144 Create Vlan 2, Vlan 6 through Vlan 50, and Vlan 145 Set a Vlan range 146 147 148 Vlan interface configuration Configuring Vlan interfacesPerform the tasks in 1 to configure a Vlan interface Vlan interface configuration task list Create tab Configuration items of creating a Vlan interface Return to Vlan interface configuration task listBootp Modifying a Vlan interface Modify tab Configuration items of modifying a Vlan interface Select the Vlan interface to be configured Is up if one or more Ethernet ports in the Vlan are up Selected Vlan interface152 Voice Vlan configuration Default OUI addresses of different vendorsOUI addresses Voice Vlan assignment modes Co-relation 154 Security mode and normal mode of voice VLANs Configuring the voice VlanVoice Vlan mode Packet type Packet processing mode Configuring voice Vlan on a port Configuring voice Vlan globallyAdding OUI addresses to the OUI list Configuring voice Vlan globally Configuring voice Vlan on a portConfigure voice Vlan Global voice Vlan configuration items Timer expires, the port is removed from the voice Vlan Set the voice Vlan assignment mode of a port Be configured as the voice VlanVoice Vlan function on the port Set the voice Vlan ID Adding OUI addresses to the OUI list 159 Voice Vlan configuration examples 160 Create Vlan 161 Configure GigabitEthernet 1/0/1 as a hybrid port 162 Configure the voice Vlan function globally 163 Verify the configuration Add OUI addresses to the OUI listCurrent OUI list of the device 164 Current voice Vlan information 165 166 167 Assign GigabitEthernet 1/0/1 to Vlan 2 as an untagged member 168 Configure voice Vlan on GigabitEthernet 1/0/1 169 170 171 MAC address configuration 172 Configuring MAC addresses Configuring a MAC address entryMAC address table of the device 173 MAC tab Click Add in the bottom to enter the page as shown in bCreate a MAC address entry 174 Setting the aging time of MAC address entries Configuration items of creating a MAC address entrySet the ID of the Vlan to which the MAC address belongs Port Set the port to which the MAC address belongs Create a static MAC address entry MAC address configuration example176 Mstp configuration STP protocol packetsBasic concepts in STP Root bridge How STP works Designated bridge and designated portPath cost Description of designated bridges and designated ports Calculation process of the STP algorithm Selection of the optimum configuration BpduStep Actions Step Description Selection of the root port and designated ports180 Network diagram for the STP algorithm Initial state of each deviceDevice Port name Bpdu of port ∙ Comparison process and result on each device BP2 with the configuration Bpdu of BP2. If the calculated 0, 1, BP2 before the configuration Bpdu is updatedBpdu CP2 1, 0, 1, BP2 Configuration Bpdu forwarding mechanism in STP Final calculated spanning treeBlocked port CP2 0, 0, 0, AP2 Root port CP2 0, 5, 1, BP2 183 STP timers 184 Mstp features STP and Rstp limitationsMstp basic concepts 185 MST region VLAN-to-MSTI mapping tableBasic concepts in Mstp 186 Regional root Common root bridgeBoundary port Port roles Port roles Port states188 How Mstp works Implementation of Mstp on devicesCist calculation Msti calculation Configuring Mstp Configuring an MST regionPerform the tasks described in 1 to configure Mstp Mstp configuration task list Return to Mstp configuration task list MST regionClick Modify to enter the page shown in b Vlan ID Configuring Mstp globally Set the STP working mode ∙ STP-Each port on a device sends out STP BPDUsNumber of devices on the path composed of the most devices Bridge Diameter Configuring Mstp on a port STP Set the type of protection to be enabled on the port Manually configure path cost for portsConfiguration may cause a temporary loop Recommends you to use the default value Protection types Displaying Mstp information of a portProtection type Description Port Summary tab ForwardingLearning Discarding Whether or not the port is an edge port Network diagram for Mstp configuration Mstp configuration example199 Configure an MST region Region tab∙ Click Modify to enter the page shown in c 200 Configure Mstp globally on Switch a 201 202 When configuring MSTP, follow these guidelines Configure Mstp globally on Switch D203 Page Link aggregation and Lacp configuration Basic conceptsAggregate interface Aggregation group Class-two configurations Static aggregation modeClass-two configurations Link aggregation modes Dynamic aggregation mode 207 Configuring link aggregation and Lacp Load sharing mode of an aggregation groupConfiguring a static aggregation group Configuring a dynamic aggregation group Dynamic aggregation group configuration task list Setting Lacp priorityDisplaying information of LACP-enabled ports Creating a link aggregation group Assign an ID to the link aggregation group to be created 210 Setting Lacp priority Displaying information of an aggregate interface Displaying information of LACP-enabled ports Lacp priority configuration itemsAlso on LACP-disabled ports System Priority Set the Lacp priority of the local system Fields in the LACP-enabled port summary table Display information about LACP-enabled portsField/button Description Describes the fields in the Partner Port Details table Link aggregation and Lacp configuration exampleFields in the Partner Port Details table Network diagram for static link aggregation configuration Create static link aggregation group∙ Set the link aggregation interface ID to 215 Create dynamic link aggregation group 216 217 Lldp configuration BackgroundLLDPDUs Lldpdu TLVs SNAP-encapsulated Lldpdu formatLldpdu encapsulation format FCS Basic Lldp TLVs Type Description RemarksIeee 802.1 organizationally specific TLVs Ieee 802.1 organizationally specific TLVs LLDP-MED TLVs Ieee 802.3 organizationally specific TLVsIeee 802.3 organizationally specific TLVs LLDP-MED TLVs How Lldp works Compatibility of Lldp with CDP Configuring Lldp Lldp configuration task listPerform the tasks in 1 to configure Lldp Lldp configuration task list Task Remarks Enabling Lldp on ports224 Port Setup tab Return to Lldp configuration task list Configuring Lldp settings on ports225 For modifying Lldp settings on a port 226 Is Ethernet ∙ Disable-Neither sends nor receives CDPDUs CDP Operating ModeCDP operating mode on the port to TxRx Enable Lldp polling and set the polling interval Configuring global Lldp setup DOT3 TLV MAC/PHY Global Setup tab Global Lldp setup configuration items Displaying Lldp information for a port Interface alias Port ID typePort component Type of PSE power source advertised by the local device Chassis ID typeChassis component 233 Link aggregation group Endpoint devicesIII endpoint devices are used directly by end users 234 Unknown Displaying global Lldp information 236 Global Summary tab Global Lldp information Lldp configuration examples Basic Lldp configuration exampleNeighbor Summary tab Return to Lldp configuration task list Displaying Lldp information received from Lldp neighbors Network diagram for basic Lldp configuration 239 Port Setup tab 240 For setting Lldp on multiple ports 241 Global Setup tab 242 For configuring Lldp on the selected port 243 CDP-compatible Lldp configuration example 244 For creating VLANs Network diagram for CDP-compatible Lldp configuration245 For configuring ports 246 For configuring the voice Vlan function on ports 247 248 For modifying Lldp settings on ports 249 250 Igmp snooping configuration Principle of Igmp snoopingIgmp snooping related ports Multicast forwarding before and after Igmp snooping runs When receiving a general query Work mechanism of Igmp snoopingIgmp snooping related ports 252 When receiving a leave group message When receiving a membership report253 Igmp snooping querier Configuring Igmp snooping254 Basic Igmp snooping configurations Enabling Igmp snooping globally Igmp snooping configuration items Configuring Igmp snooping in a VlanReturn to Configuration task list Configuring Igmp snooping port functions Advanced configuration Display Igmp snooping multicast entry information Configuration items for advanced Igmp snooping featuresGroup Limit ID of the Vlan to which the entry belongs Igmp snooping configuration example259 Network diagram for Igmp snooping configuration 260 261 Add a port to the Vlan 262 Configure Igmp snooping in the Vlan Enable Igmp snooping globally263 Igmp snooping multicast entry information displaying Configure Igmp snooping on GigabitEthernet 1/0/3264 Details about an Igmp snooping multicast entry 265 Routing configuration Routing tableStatic route 266 Configuring IPv4 routing Default routeDisplaying the IPv4 active route table Address will be forwarded out the interface Creating an IPv4 static route Preferences enables route backupSpecify the mask of the destination IP address Static route configuration example Configuration outlinesNetwork diagram for IPv4 static route configuration Select the output interface Configure a default route 270 Configure a static route 271 272 Precautions 273 Dhcp overview Introduction to DhcpDhcp address allocation Allocation mechanisms Dynamic IP address allocation process IP address lease extensionDynamic IP address allocation process 275 Dhcp message format Dhcp message format276 Dhcp options Dhcp options overviewIntroduction to Dhcp options Introduction to Option Protocols and standards Sub-option 1 in normal padding formatSub-option 2 in normal padding format 278 Dhcp relay agent configuration Introduction to Dhcp relay agentApplication environment Fundamentals Dhcp relay agent configuration task list Dhcp relay agent work process Configuring and displaying clients IP-to-MAC bindings Dhcp relay agent configuration281 Creating a Dhcp server group Return to Dhcp relay agent configuration task listCreate a server group Enabling the Dhcp relay agent on an interface Dhcp server group configuration items283 Configuring and displaying clients IP-to-MAC bindings 284 Network diagram for Dhcp relay agent configuration Dhcp relay agent configuration example285 Enable Dhcp 286 287 Dhcp snooping configuration Dhcp snooping overviewFunctions of Dhcp snooping Recording IP-to-MAC mappings of Dhcp clients Configuring a trusted port connected to a Dhcp server Configuring trusted ports in a cascaded networkConfigure trusted and untrusted ports Configure trusted ports in a cascaded network Dhcp snooping configuration task list Dhcp snooping support for OptionDescribes roles of the ports shown in a Roles of ports Configuring Dhcp snooping Enabling Dhcp snoopingFunctions on an interface Displaying clients IP-to-MAC Return to Dhcp snooping configuration task list Dhcp snooping configuration292 Configuring Dhcp snooping functions on an interface Displaying clients IP-to-MAC bindingsInclude Option 82 padded in normal format This field displays the Vlan to which the device belongs Dhcp snooping configuration example294 Network diagram for Dhcp snooping configuration 295 Enable Dhcp snooping 296 Configure Dhcp snooping functions on GigabitEthernet 1/0/2 Configure Dhcp snooping functions on GigabitEthernet 1/0/1297 Configure Dhcp snooping functions on GigabitEthernet 1/0/3 298 Service management configuration Configuring service management Service management Service management configuration items Https Diagnostic tools Trace route diagramTrace route 302 Diagnostic tool operations Ping configurationPing operation 303 Trace route configuration Trace route operationPing operation result 304 Trace route operation result 305 ARP management ARP overviewARP function ARP message format ARP address resolution process ARP operationARP table 307 ARP Table configuration Managing ARP entriesDisplaying ARP entries Dynamic ARP entry Static ARP configuration example Describes the static ARP entry configuration itemsStatic ARP entry configuration items Creating a static ARP entry Network diagram for configuring static ARP entries 310 Add GigabitEthernet 1/0/1 to Vlan ∙ After the configuration process is complete, click Close311 Create VLAN-interface 312 Configuring gratuitous ARP Gratuitous ARPIntroduction to gratuitous ARP Create a static ARP entry Enabled by default PacketsLearning function Period ARP attack defense configuration ARP detectionIntroduction to ARP detection Man-in-the-middle attack Man-in-the-middle attack ARP detection mechanism316 Configuring ARP detection 317 ItemDescription Configuration, see Creating a static binding entry Creating a static binding entry Controlled/uncontrolled port and port authorization status 802.1X fundamentalsArchitecture Architecture 802.1X-related protocols Packet formatsEAP packet format Authorized/unauthorized state of a controlled port Eapol frame format EAP packet formatEapol frame format Types of Eapol packets Initiating 802.1X authentication Access device as the initiatorEAP over Radius 802.1X client as the initiator 802.1X authentication procedures Comparison of EAP relay and EAP terminationEAP relay EAP termination 802.1X authentication procedure in EAP relay mode EAP relayPacket exchange method Benefits Limitations EAP termination Works with any Radius server that 326 EAP termination 802.1X authentication procedure in EAP termination mode327 802.1X configuration Access control methodsUsing 802.1X authentication with other features HP implementation Configuring Configuration prerequisitesGuest Vlan ACL assignment 802.1X configuration task list Configuring 802.1X globally802.1X configuration task list 802.1X configuration Basic 802.1X configuration items Authentication Method Authentication proceduresSpecify whether to enable the quiet timer Authentication on the user Configuring 802.1X on a port Return to 802.1X configuration task list Select the port authorization state for Port AuthorizationPort to access the network without authentication Access requests from users on the port Configuring an 802.1X guest Vlan 802.1X configuration exampleConfiguring an 802.1X guest Vlan Network diagram for 802.1X configuration 335 Global 802.1X configuration 336 Radius authentication server configuration 337 Radius parameter configuration 338 Configure the AAA authentication method for the ISP domain Create an ISP domain∙ Select the domain name test 339 Configure the AAA authorization method for the ISP domain 340 ACL assignment configuration example Configure the AAA accounting method for the ISP domainNetwork diagram for ACL assignment 341 342 343 344 345 Create ACL 346 ACL rule configuration 347 348 802.1X configuration of GigabitEthernet 1/0/1 349 Ping operation summary 350 AAA configuration Network diagram for AAAIntroduction to AAA 351 Configuring AAA Configuring an ISP domainDomain-based user management Determine the ISP domain of a user by the username Configuring an ISP domain Domain Setup Configuring authentication methods for the ISP domain ISP domain configuration items Authorization method configuration Configuring authorization methods for the ISP domain355 Configuring accounting methods for the ISP domain Authorization method configuration items Real-time accounting updates for the users AAA configuration example Network diagram for AAA configuration exampleMethod Used Not Set -Uses the default accounting methods ∙ None -Performs no accounting Configure a local user 359 Configure the ISP domain to use local authentication Configure ISP domain test360 Configure the ISP domain to use local authorization 361 Configure the ISP domain to use local accounting 362 Radius configuration Security and authentication mechanismsIntroduction to Radius Client/server model Basic message exchange process of Radius Basic message exchange process of Radius Radius packet format Radius packet formatMain values of the Code field Code Packet type Description Radius attributes Attribute Extended Radius attributes Configuring Radius Radius configuration task listSegment of a Radius packet containing an extended attribute TaskDescription Configuring Radius servers Radius server configurationConfiguring Radius Parameters Configuring Radius parameters Return to Radius configuration task list Radius parameter configuration Radius parameters NAS-IP Timeout Retransmission Times Set the maximum number of transmission attemptsAttempts cannot exceed Is an integer Radius configuration example Network diagram for Radius server configurationNumber of users Real-time accounting interval in minutes Can be Configure the Radius authentication server Configure Radius parameters Create an ISP domain Configuration progress dialog box Configuration guidelines Configuring users Configuring a local userUsers Local user Username Specify a name for the local user Password Local user configuration Local user configuration itemsUser cannot pass authentication and therefore cannot log Configuring a user group User group list User group configurationVlan ACL 381 User group after the users pass authentication User group configuration itemsSpecify the user profile for the user group PKI configuration PKI overviewPKI terms Architecture of PKI Applications of PKI EntityPKI repository PKI architecture Configuring PKI Operation of PKISecure email Web security Creating a PKI entity Creating a PKIDomain Generating an RSA Requesting a Certificate Automatically Creating a PKI entity PKI entity list PKI entity configuration388 PKI entity configuration items Creating a PKI domainPKI domain list Fqdn PKI domain configuration PKI domain configuration items Select the local PKI entity Ldap IP CRL URL Destroying the RSA key pair Generating an RSA key pairKey Length Type the length of the RSA keys Retrieving a certificate Get File From PC Specify the path of the file on the device 394 Requesting a local certificate 395 Retrieving and displaying a CRL CRL PKI configuration example Configuring a PKI entity to request a certificate from a CA PKI entity list Configure a PKI entity 398 PKI domain list Configure a PKI domain 399 Certificate list Generate an RSA key pair 400 Certificate list Certificate list Retrieve the CA certificate401 Request a local certificate 402 Port isolation group configuration Configuring a port isolation groupConfigure a port isolation group 403 Port isolation group configuration example Port isolation group configuration itemsNetworking diagram for port isolation group configuration 404 Configure isolated ports for an isolation group 405 Authorized IP configuration Configuring authorized IPIPv4 ACL Associate the Telnet service with an IPv4 ACL Web IPv4 ACL Associate the Http service with an IPv4 ACL Authorized IP configuration example Authorized IP configuration exampleNetwork diagram for authorized IP Create an ACL Configure an ACL rule to permit Host B 408 Configure authorized IP 409 ACL configuration ACL overviewIntroduction to IPv4 ACL IPv4 ACL classification IPv4 ACL category Depth-first match procedure Effective period of an ACLFragments filtering with IPv4 ACLs Depth-first match for IPv4 ACLs Configuring an ACL Benefits of using the stepConfiguring an IPv4 ACL ACL step Configuring a time range Describes the configuration items for creating a time rangeTime range configuration items For creating a time range Configuring a rule for a basic IPv4 ACL Return to IPv4 ACL configuration task listIPv4 ACL configuration items Creating an IPv4 ACL Configuration items for a basic IPv4 ACL rule For configuring an basic IPv4 ACL415 Configuring a rule for an advanced IPv4 ACL 416 For configuring an advanced IPv4 ACL 417 Configuration items for an advanced IPv4 ACL rule Dscp Configuring a rule for an Ethernet frame header ACLTOS For configuring a rule for an Ethernet frame header ACL Source Mask ∙ Lsap Type-Indicates the frame encapsulation format Encapsulation by configuring the following items421 QoS configuration Networks without QoS guaranteeIntroduction to QoS QoS requirements of new applications Impacts CountermeasuresTraffic congestion causes 423 Traffic classification End-to-end QoSEnd-to-end QoS model Packet precedences DS field and ToS bytesDescription on IP Precedence IP Precedence decimal IP Precedence binary Description Description on Dscp values Dscp value decimal Dscp value binary DescriptionAn Ethernet frame with an 802.1Q tag header 426 Queue scheduling SP queuing802.1Q tag header Description on 802.1p precedence Schematic diagram for SP queuing Schematic diagram for WRR queuingWRR queuing 428 Line rate Traffic evaluation and token bucketEvaluate traffic with the token bucket 429 What is priority mapping Priority mappingHow line rate works Line rate implementation Default CoS to DSCP/CoS to Queue mapping table Introduction to priority mapping tablesPriority mapping process Input CoS value Local precedence Queue QoS configuration Configuration task listsConfiguring a QoS policy Default Dscp to CoS/DSCP to Queue mapping table Configuring queue scheduling Configuring line rateConfiguring the priority mapping tables Perform the task in 1 to configure queue scheduling Configuring priority trust mode Creating a class Configuring match criteria Return to QoS policy configuration task listFor configuring match criteria Shows the configuration items of configuring match criteria Service Vlan Define a match criterion to match Dscp valuesDoes not overwrite the previous one Values are automatically arranged in ascending order Describes the configuration items of creating a behavior Configuration items of creating a behaviorCreating a traffic behavior For creating a traffic behavior Traffic directing on the chassis front panel Port setup page for a traffic behavior438 For setting a traffic behavior Configuring other actions for a traffic behavior439 Configuring classifier-behavior associations for the policy Describes the configuration items of creating a policyConfiguration items of creating a policy Creating a policy For setting a policy Applying a policy to a portBehavior Name 441 Configuring queue scheduling on a port Configuration items of applying a policy to a portFor configuring queue scheduling For applying a policy to a port Return to Queue scheduling configuration task list Configuring line rate on a portWRR Configuring priority mapping tables For configuring line rate on a portConfiguration items of configuring line rate on a port Return to Line rate configuration task list For configuring priority mapping tables Configuring priority trust mode on a portConfiguration items of configuring priority mapping tables Describes the port priority configuration items For configuring port priority For modifying port priorityPort priority configuration items Return toPriority trust mode configuration task list 447 ACL/QoS configuration examples ACL/QoS configuration exampleNetwork diagram for ACL/QoS configuration 448 Define a time range covering 800 to 1800 every day 449 Create an advanced IPv4 ACL 450 Define an ACL rule for traffic to the FTP server 451 Create a class 452 Define match criteria 453 454 Configure actions for the behavior 455 Create a policy Configure classifier-behavior associations for the policy456 457 PoE configuration PoE powerPoE overview Advantages Configuring PoE Protocol specificationConfiguring PoE ports Protocol specification related to PoE is Ieee 802.3af Port setup PoE port configuration items PSE setup Configuring non-standard PD detection461 PoE configuration example Displaying information about PSE and PoE portsPoE summary with GigabitEthernet 1/0/1 selected 462 Network diagram for PoE 463 Configure the PoE port supplying power to AP 464 Command conventions Support and other resourcesContacting HP Related information Conventions Subscription service SymbolsGUI conventions Network topology icons Index 467Page Page