Create an advanced IPv4 ACL, 450 | HP V1910 specification

c.Create an advanced IPv4 ACL

∙Type the ACL number 3000.

∙Click Apply.

#Define an ACL rule for traffic to the FTP server.

∙ Click Advanced Setup.

450

Image 462

HP V1910 manual Create an advanced IPv4 ACL, 450

Contents

HP V1910 Switch Series Part number Document version Warranty Contents Page Page STP177 Page Page Page Page Page Page Overview Web-based network management operating environment Configuration through the web interfaceDefault login information Logging in to the web interface Login page of the web interface Example Introduction to the web interface Web-based configuration interfaceLogging out of the web interface Navigation tree Body area Title area Description of Web-based NM functions Web user levelIntroduction to the web-based NM functions Function menu Description User level Used at the next startup from the host of the current VCT RmonSnmp Vlan MACMstp Lldp LacpTheir partner ports Igmp ARP AAA Radius PKICRL Class Display Introduction to the common items on the web pagesButtons and icons Commonly used buttons and icons Sorting function Content display by pagesSearch function Advanced search Configuration guidelines Sort display based on MAC address in the ascending order Getting started with the CLI Configuration at the CLISetting up the configuration environment Console cable Setting terminal parameters Network diagram for configuration environment setup Connection description of the HyperTerminal Set the serial port used by the HyperTerminal connection Set the serial port parameters Select File  Properties in the HyperTerminal windowHyperTerminal window Logging in to the CLI Set terminal emulation in Switch Properties dialog boxPress Enter. The Password prompt display Enter your username at the Username prompt CLI commands IpsetupInitialize Password Password# Modify the login password of user admin Ping Quit Reboot Summary Upgrade # Display summary information of the device Configuration procedure Network requirements # Reboot the switch Entering the configuration wizard homepage Configuration wizardBasic service setup Configuring system parameters Configuring management IP address Configure how the Vlan interface obtains an IPv4 address Admin StatusConfigure IPv4 Select a Vlan interface ItemDescription Finishing configuration wizardConfiguration finishes Manual Important Network diagram for stack management Configuring stack managementStack management configuration task list Stack management configuration task list Configuring global parameters of a stack Setup Configuration items of global parameters Displaying topology summary of a stack Configuring stack portsReturn to Stack management configuration task list Topology summary Fields of topology summary Stack configuration example Logging into a member switch from the master switchDisplaying device summary of a stack Stack Configure global parameters for the stack on Switch a Configure a stack port on Switch a Configure stack ports on Switch B Configure a stack port on Switch C Configuration guidelines Displaying system information SummaryDisplaying device summary System information System resource state Displaying device informationBasic system information Recent system operation logs Device information Configuring system name Device basic information configurationConfiguring device basic information Configuring idle timeout period Idle timeout Set the idle timeout period for logged-in users System time configuration Configuring system timeSystem time configuration Network diagram for configuring system time System time configuration exampleSystem time configuration items NTP Configure Device a Configure Device a as the NTP server of Switch B Configuration guidelines Configuration task list Log management configurationConfiguring log management Setting syslog related parameters Return to Log management configuration task list Displaying syslog Severity level Description Value Display syslog Syslog display itemsSystem logs severity level See Setting loghost Set loghost Loghost configuration itemIP address of the loghost Restore configuration Configuration managementBack up configuration Backup configuration Save configuration Configuration restoreSave configuration confirmation Initialize Initialize confirmation dialog box Extension .bin Device maintenanceSoftware upgrade Filename Specifies the type of the startup configuration file Device rebootDevice reboot Already exists, overwrite Electronic label Diagnostic informationDiagnostic information Electronic label Diagnostic information file is created Displaying file list File management configurationFile management File management Downloading a file Uploading a fileRemoving a file Setting operation parameters for a port Port management configurationConfiguring a port Setup tab Port configuration items Pvid MDI Constrain Percentage or by PPS as followsInput a percentage in the box below Multicast Suppression Input a number in the box below Viewing the operation parameters of a port Port management configuration example Network diagram for port rate configurationDetails tab Configure the rate of GigabitEthernet 1/0/4 Batch configure port rate Display the rate settings of ports Implementing port mirroring Port mirroring configurationIntroduction to port mirroring Local port mirroring Local port mirroring configuration task list Configuring local port mirroringConfiguring local port mirroring Creating a mirroring group Configuring ports for a mirroring group Return to Local port mirroring configuration task list Mirroring ports of a port mirroring group Configuration examples Local port mirroring configuration example Create a local mirroring group Configure the mirroring ports Configuration progress dialog box Configure the monitor port Managing users Add a user Local user configuration itemsUser management Adding a local user Setting the super password Super password Switch to the management level Switching to the management levelSuper password configuration items Input are not consistent when you apply the configuration Loopback test configuration Loopback operation Loopback test result Testing cable status Test the status of the cable connected to an Ethernet port Description on the cable test result Status and length of the cableFailure Monitoring port traffic statistics Flow interval configurationSetting the traffic statistics generating interval Viewing port traffic statistics Port traffic statistics Storm constrain configuration Configuring storm constrain Configuring storm constrain Storm Constrain tab Upper threshold Upper threshold. Available options include∙ None-Performs no action Thresholds for at least a type of traffic Crossed after that After that Rmon configuration Working mechanism Ethernet statistics group Alarm groupRmon groups History group Rising and falling alarm events Configuring RmonConfiguring the Rmon statistics function Event group Rmon history group configuration task list Configuring the Rmon alarm functionRmon statistics group configuration task list TaskRemarks Displaying Rmon running status Configuring a statistics entryRmon alarm configuration task list Display Rmon running status Configuring a history entry Return to Rmon statistics group configuration task list100 Buckets Granted Configuring an event entryReturn to Rmon history group configuration task list 101 None of them is selected, the system will take no action Configuring an alarm entryReturn to Rmon alarm configuration task list 102 Statics Item Displaying Rmon statistics information Log-and-trap104 Rmon statistics information Fields of Rmon statistics Displaying Rmon history sampling information Return to Display Rmon running status Number of the entry in the system buffer CRCAlignErrorsCorresponding to the MIB node etherHistoryCRCAlignErrors Node etherHistoryOctets Displaying Rmon event logs Rmon configuration exampleNetwork diagram for Rmon Log Return to Display Rmon running status 109 Display Rmon statistics 110 Configure an event group Display the index of a event entry111 Configure an alarm group 112 Energy saving configuration Configuring energy saving on a portPoE Disabled Disable PoE on the port 113 ItemDescription Relationship between an NMS, agent and MIB Snmp configurationSnmp mechanism MIB tree Perform the tasks in 1 to configure SNMPv1 or SNMPv2c Snmp configurationConfiguring SNMPv1 or SNMPv2c SNMPv1 or SNMPv2c configuration task list SNMPv3 configuration task list Configuring SNMPv3Perform the tasks in 1 to configure SNMPv3 Configuring Snmp trap Configure the local engine ID Set up Configuration items for enabling SnmpSpecify to enable or disable Snmp Local Engine ID View Configuring an Snmp viewCreating an Snmp view Create an Snmp view Identify a MIB subtree Configuration items for creating an Snmp viewAdding rules to an Snmp view Set the subtree mask Add rules to an Snmp view Configuring an Snmp communityConfigure an Snmp community Create an Snmp Community 121 Return to SNMPv1 or SNMPv2c configuration task list Configuring an Snmp groupConfiguration items for configuring an Snmp community Snmp group Objects on the device Configuring an Snmp userReturn to SNMPv3 configuration task list Agent Description Configuring Snmp trap function Set the destination IP address Destination IP AddressAddress in the text box according to the IP address type Snmp configuration example Network diagram for Snmp configurationNMS Enable Snmp 128 129 Create an Snmp group 130 Enable the agent to send Snmp traps Add target hosts of Snmp traps131 Configuration verification 132 Interface statistics Displaying interface statistics Field Description Introduction to Vlan Vlan configurationVlan diagram Vlan fundamentals Position and format of Vlan tag Vlan typesTraditional Ethernet frame format 136 Port link type Tag removed or intact depending on your configuration 137Introduction to port-based Vlan Frame Configuring a Vlan Vlan configuration task list approachCreating VLANs Selecting VLANs Create tab Configuration items of creating VLANsReturn to Vlan configuration task list approach 139 Select Vlan tab Configuration items of selecting VLANs Modifying a Vlan140 Aggregate interfaces from this list Modify Vlan tab Configuration items of modifying a VlanAssigned to this Vlan 141 Select the ports to be modified Modify Port tab Configuration items of modifying portsModifying ports Untagged Vlan configuration example Network diagram for Vlan configuration 144 Create Vlan 2, Vlan 6 through Vlan 50, and Vlan 145 Set a Vlan range 146 147 148 Perform the tasks in 1 to configure a Vlan interface Vlan interface configurationConfiguring Vlan interfaces Vlan interface configuration task list Bootp Create tab Configuration items of creating a Vlan interfaceReturn to Vlan interface configuration task list Modifying a Vlan interface Modify tab Configuration items of modifying a Vlan interface Select the Vlan interface to be configured Selected Vlan interface Is up if one or more Ethernet ports in the Vlan are up152 OUI addresses Voice Vlan configurationDefault OUI addresses of different vendors Voice Vlan assignment modes Co-relation 154 Configuring the voice Vlan Security mode and normal mode of voice VLANsVoice Vlan mode Packet type Packet processing mode Configuring voice Vlan globally Configuring voice Vlan on a portAdding OUI addresses to the OUI list Configure voice Vlan Global voice Vlan configuration items Configuring voice Vlan globallyConfiguring voice Vlan on a port Timer expires, the port is removed from the voice Vlan Voice Vlan function on the port Set the voice Vlan assignment mode of a portBe configured as the voice Vlan Set the voice Vlan ID Adding OUI addresses to the OUI list 159 Voice Vlan configuration examples 160 Create Vlan 161 Configure GigabitEthernet 1/0/1 as a hybrid port 162 Configure the voice Vlan function globally 163 Current OUI list of the device Verify the configurationAdd OUI addresses to the OUI list 164 Current voice Vlan information 165 166 167 Assign GigabitEthernet 1/0/1 to Vlan 2 as an untagged member 168 Configure voice Vlan on GigabitEthernet 1/0/1 169 170 171 MAC address configuration 172 MAC address table of the device Configuring MAC addressesConfiguring a MAC address entry 173 Create a MAC address entry MAC tabClick Add in the bottom to enter the page as shown in b 174 Set the ID of the Vlan to which the MAC address belongs Setting the aging time of MAC address entriesConfiguration items of creating a MAC address entry Port Set the port to which the MAC address belongs MAC address configuration example Create a static MAC address entry176 Basic concepts in STP Mstp configurationSTP protocol packets Root bridge Path cost How STP worksDesignated bridge and designated port Description of designated bridges and designated ports Selection of the optimum configuration Bpdu Calculation process of the STP algorithmStep Actions Selection of the root port and designated ports Step Description180 Device Port name Bpdu of port Network diagram for the STP algorithmInitial state of each device ∙ Comparison process and result on each device Bpdu BP2 with the configuration Bpdu of BP2. If the calculated0, 1, BP2 before the configuration Bpdu is updated CP2 1, 0, 1, BP2 Blocked port CP2 0, 0, 0, AP2 Root port CP2 0, 5, 1, BP2 Configuration Bpdu forwarding mechanism in STPFinal calculated spanning tree 183 STP timers 184 Mstp basic concepts Mstp featuresSTP and Rstp limitations 185 Basic concepts in Mstp MST regionVLAN-to-MSTI mapping table 186 Boundary port Regional rootCommon root bridge Port roles Port states Port roles188 Cist calculation How Mstp worksImplementation of Mstp on devices Msti calculation Perform the tasks described in 1 to configure Mstp Configuring MstpConfiguring an MST region Mstp configuration task list Click Modify to enter the page shown in b Return to Mstp configuration task listMST region Vlan ID Configuring Mstp globally Number of devices on the path composed of the most devices Set the STP working mode∙ STP-Each port on a device sends out STP BPDUs Bridge Diameter Configuring Mstp on a port STP Configuration may cause a temporary loop Set the type of protection to be enabled on the portManually configure path cost for ports Recommends you to use the default value Displaying Mstp information of a port Protection typesProtection type Description Learning Port Summary tabForwarding Discarding Whether or not the port is an edge port Mstp configuration example Network diagram for Mstp configuration199 ∙ Click Modify to enter the page shown in c Configure an MST regionRegion tab 200 Configure Mstp globally on Switch a 201 202 Configure Mstp globally on Switch D When configuring MSTP, follow these guidelines203 Page Aggregate interface Link aggregation and Lacp configurationBasic concepts Aggregation group Class-two configurations Class-two configurationsStatic aggregation mode Link aggregation modes Dynamic aggregation mode 207 Configuring a static aggregation group Configuring link aggregation and LacpLoad sharing mode of an aggregation group Configuring a dynamic aggregation group Displaying information of LACP-enabled ports Dynamic aggregation group configuration task listSetting Lacp priority Creating a link aggregation group Assign an ID to the link aggregation group to be created 210 Setting Lacp priority Displaying information of an aggregate interface Also on LACP-disabled ports Displaying information of LACP-enabled portsLacp priority configuration items System Priority Set the Lacp priority of the local system Display information about LACP-enabled ports Fields in the LACP-enabled port summary tableField/button Description Link aggregation and Lacp configuration example Describes the fields in the Partner Port Details tableFields in the Partner Port Details table ∙ Set the link aggregation interface ID to Network diagram for static link aggregation configurationCreate static link aggregation group 215 Create dynamic link aggregation group 216 217 LLDPDUs Lldp configurationBackground Lldpdu Lldpdu encapsulation format TLVsSNAP-encapsulated Lldpdu format FCS Ieee 802.1 organizationally specific TLVs Basic Lldp TLVsType Description Remarks Ieee 802.1 organizationally specific TLVs Ieee 802.3 organizationally specific TLVs LLDP-MED TLVsIeee 802.3 organizationally specific TLVs LLDP-MED TLVs How Lldp works Compatibility of Lldp with CDP Perform the tasks in 1 to configure Lldp Configuring LldpLldp configuration task list Lldp configuration task list Enabling Lldp on ports Task Remarks224 Configuring Lldp settings on ports Port Setup tab Return to Lldp configuration task list225 For modifying Lldp settings on a port 226 Is Ethernet CDP operating mode on the port to TxRx ∙ Disable-Neither sends nor receives CDPDUsCDP Operating Mode Enable Lldp polling and set the polling interval Configuring global Lldp setup DOT3 TLV MAC/PHY Global Setup tab Global Lldp setup configuration items Displaying Lldp information for a port Port ID type Interface aliasPort component Chassis component Type of PSE power source advertised by the local deviceChassis ID type 233 III endpoint devices are used directly by end users Link aggregation groupEndpoint devices 234 Unknown Displaying global Lldp information 236 Global Summary tab Global Lldp information Neighbor Summary tab Return to Lldp configuration task list Lldp configuration examplesBasic Lldp configuration example Displaying Lldp information received from Lldp neighbors Network diagram for basic Lldp configuration 239 Port Setup tab 240 For setting Lldp on multiple ports 241 Global Setup tab 242 For configuring Lldp on the selected port 243 CDP-compatible Lldp configuration example 244 Network diagram for CDP-compatible Lldp configuration For creating VLANs245 For configuring ports 246 For configuring the voice Vlan function on ports 247 248 For modifying Lldp settings on ports 249 250 Igmp snooping related ports Igmp snooping configurationPrinciple of Igmp snooping Multicast forwarding before and after Igmp snooping runs Igmp snooping related ports When receiving a general queryWork mechanism of Igmp snooping 252 When receiving a membership report When receiving a leave group message253 Configuring Igmp snooping Igmp snooping querier254 Basic Igmp snooping configurations Enabling Igmp snooping globally Configuring Igmp snooping in a Vlan Igmp snooping configuration itemsReturn to Configuration task list Configuring Igmp snooping port functions Advanced configuration Configuration items for advanced Igmp snooping features Display Igmp snooping multicast entry informationGroup Limit Igmp snooping configuration example ID of the Vlan to which the entry belongs259 Network diagram for Igmp snooping configuration 260 261 Add a port to the Vlan 262 Enable Igmp snooping globally Configure Igmp snooping in the Vlan263 Configure Igmp snooping on GigabitEthernet 1/0/3 Igmp snooping multicast entry information displaying264 Details about an Igmp snooping multicast entry 265 Static route Routing configurationRouting table 266 Displaying the IPv4 active route table Configuring IPv4 routingDefault route Address will be forwarded out the interface Preferences enables route backup Creating an IPv4 static routeSpecify the mask of the destination IP address Network diagram for IPv4 static route configuration Static route configuration exampleConfiguration outlines Select the output interface Configure a default route 270 Configure a static route 271 272 Precautions 273 Dhcp address allocation Dhcp overviewIntroduction to Dhcp Allocation mechanisms Dynamic IP address allocation process Dynamic IP address allocation processIP address lease extension 275 Dhcp message format Dhcp message format276 Introduction to Dhcp options Dhcp optionsDhcp options overview Introduction to Option Sub-option 2 in normal padding format Protocols and standardsSub-option 1 in normal padding format 278 Application environment Dhcp relay agent configurationIntroduction to Dhcp relay agent Fundamentals Dhcp relay agent configuration task list Dhcp relay agent work process Dhcp relay agent configuration Configuring and displaying clients IP-to-MAC bindings281 Return to Dhcp relay agent configuration task list Creating a Dhcp server groupCreate a server group Dhcp server group configuration items Enabling the Dhcp relay agent on an interface283 Configuring and displaying clients IP-to-MAC bindings 284 Dhcp relay agent configuration example Network diagram for Dhcp relay agent configuration285 Enable Dhcp 286 287 Functions of Dhcp snooping Dhcp snooping configurationDhcp snooping overview Recording IP-to-MAC mappings of Dhcp clients Configure trusted and untrusted ports Configuring a trusted port connected to a Dhcp serverConfiguring trusted ports in a cascaded network Configure trusted ports in a cascaded network Describes roles of the ports shown in a Dhcp snooping configuration task listDhcp snooping support for Option Roles of ports Functions on an interface Configuring Dhcp snoopingEnabling Dhcp snooping Displaying clients IP-to-MAC Dhcp snooping configuration Return to Dhcp snooping configuration task list292 Include Configuring Dhcp snooping functions on an interfaceDisplaying clients IP-to-MAC bindings Option 82 padded in normal format Dhcp snooping configuration example This field displays the Vlan to which the device belongs294 Network diagram for Dhcp snooping configuration 295 Enable Dhcp snooping 296 Configure Dhcp snooping functions on GigabitEthernet 1/0/1 Configure Dhcp snooping functions on GigabitEthernet 1/0/2297 Configure Dhcp snooping functions on GigabitEthernet 1/0/3 298 Service management configuration Configuring service management Service management Service management configuration items Https Trace route Diagnostic toolsTrace route diagram 302 Ping operation Diagnostic tool operationsPing configuration 303 Ping operation result Trace route configurationTrace route operation 304 Trace route operation result 305 ARP function ARP managementARP overview ARP message format ARP table ARP address resolution processARP operation 307 Displaying ARP entries ARP Table configurationManaging ARP entries Dynamic ARP entry Static ARP entry configuration items Static ARP configuration exampleDescribes the static ARP entry configuration items Creating a static ARP entry Network diagram for configuring static ARP entries 310 ∙ After the configuration process is complete, click Close Add GigabitEthernet 1/0/1 to Vlan311 Create VLAN-interface 312 Introduction to gratuitous ARP Configuring gratuitous ARPGratuitous ARP Create a static ARP entry Learning function Enabled by defaultPackets Period Introduction to ARP detection ARP attack defense configurationARP detection Man-in-the-middle attack ARP detection mechanism Man-in-the-middle attack316 Configuring ARP detection 317 ItemDescription Configuration, see Creating a static binding entry Creating a static binding entry Architecture Controlled/uncontrolled port and port authorization status802.1X fundamentals Architecture EAP packet format 802.1X-related protocolsPacket formats Authorized/unauthorized state of a controlled port Eapol frame format Eapol frame formatEAP packet format Types of Eapol packets EAP over Radius Initiating 802.1X authenticationAccess device as the initiator 802.1X client as the initiator EAP relay 802.1X authentication proceduresComparison of EAP relay and EAP termination EAP termination Packet exchange method Benefits Limitations 802.1X authentication procedure in EAP relay modeEAP relay EAP termination Works with any Radius server that 326 802.1X authentication procedure in EAP termination mode EAP termination327 Using 802.1X authentication with other features 802.1X configurationAccess control methods HP implementation Guest Vlan ConfiguringConfiguration prerequisites ACL assignment 802.1X configuration task list 802.1X configuration task listConfiguring 802.1X globally 802.1X configuration Basic 802.1X configuration items Specify whether to enable the quiet timer Authentication MethodAuthentication procedures Authentication on the user Configuring 802.1X on a port Return to 802.1X configuration task list Port to access the network without authentication Select the port authorization state forPort Authorization Access requests from users on the port 802.1X configuration example Configuring an 802.1X guest VlanConfiguring an 802.1X guest Vlan Network diagram for 802.1X configuration 335 Global 802.1X configuration 336 Radius authentication server configuration 337 Radius parameter configuration 338 ∙ Select the domain name test Configure the AAA authentication method for the ISP domainCreate an ISP domain 339 Configure the AAA authorization method for the ISP domain 340 Network diagram for ACL assignment ACL assignment configuration exampleConfigure the AAA accounting method for the ISP domain 341 342 343 344 345 Create ACL 346 ACL rule configuration 347 348 802.1X configuration of GigabitEthernet 1/0/1 349 Ping operation summary 350 Introduction to AAA AAA configurationNetwork diagram for AAA 351 Domain-based user management Configuring AAAConfiguring an ISP domain Determine the ISP domain of a user by the username Configuring an ISP domain Domain Setup Configuring authentication methods for the ISP domain ISP domain configuration items Configuring authorization methods for the ISP domain Authorization method configuration355 Configuring accounting methods for the ISP domain Authorization method configuration items Real-time accounting updates for the users Method Used Not Set -Uses the default accounting methods AAA configuration exampleNetwork diagram for AAA configuration example ∙ None -Performs no accounting Configure a local user 359 Configure ISP domain test Configure the ISP domain to use local authentication360 Configure the ISP domain to use local authorization 361 Configure the ISP domain to use local accounting 362 Introduction to Radius Radius configurationSecurity and authentication mechanisms Client/server model Basic message exchange process of Radius Basic message exchange process of Radius Main values of the Code field Radius packet formatRadius packet format Code Packet type Description Radius attributes Attribute Extended Radius attributes Segment of a Radius packet containing an extended attribute Configuring RadiusRadius configuration task list TaskDescription Configuring Radius Configuring Radius serversRadius server configuration Parameters Configuring Radius parameters Return to Radius configuration task list Radius parameter configuration Radius parameters NAS-IP Attempts cannot exceed Timeout Retransmission TimesSet the maximum number of transmission attempts Is an integer Number of users Real-time accounting interval in minutes Radius configuration exampleNetwork diagram for Radius server configuration Can be Configure the Radius authentication server Configure Radius parameters Create an ISP domain Configuration progress dialog box Configuration guidelines Users Configuring usersConfiguring a local user Local user Local user configuration Local user configuration items Username Specify a name for the local user PasswordUser cannot pass authentication and therefore cannot log Vlan ACL Configuring a user groupUser group list User group configuration 381 User group configuration items User group after the users pass authenticationSpecify the user profile for the user group PKI terms PKI configurationPKI overview Architecture of PKI PKI repository Applications of PKIEntity PKI architecture Secure email Configuring PKIOperation of PKI Web security Domain Creating a PKI entityCreating a PKI Generating an RSA Requesting a Certificate Automatically PKI entity list PKI entity configuration Creating a PKI entity388 PKI domain list PKI entity configuration itemsCreating a PKI domain Fqdn PKI domain configuration PKI domain configuration items Select the local PKI entity Ldap IP CRL URL Generating an RSA key pair Destroying the RSA key pairKey Length Type the length of the RSA keys Retrieving a certificate Get File From PC Specify the path of the file on the device 394 Requesting a local certificate 395 Retrieving and displaying a CRL CRL PKI configuration example Configuring a PKI entity to request a certificate from a CA PKI entity list Configure a PKI entity 398 PKI domain list Configure a PKI domain 399 Certificate list Generate an RSA key pair 400 Certificate list Retrieve the CA certificate Certificate list401 Request a local certificate 402 Configure a port isolation group Port isolation group configurationConfiguring a port isolation group 403 Networking diagram for port isolation group configuration Port isolation group configuration examplePort isolation group configuration items 404 Configure isolated ports for an isolation group 405 IPv4 ACL Associate the Telnet service with an IPv4 ACL Authorized IP configurationConfiguring authorized IP Web IPv4 ACL Associate the Http service with an IPv4 ACL Network diagram for authorized IP Authorized IP configuration exampleAuthorized IP configuration example Create an ACL Configure an ACL rule to permit Host B 408 Configure authorized IP 409 Introduction to IPv4 ACL ACL configurationACL overview IPv4 ACL classification Fragments filtering with IPv4 ACLs IPv4 ACL category Depth-first match procedureEffective period of an ACL Depth-first match for IPv4 ACLs Configuring an IPv4 ACL Configuring an ACLBenefits of using the step ACL step Time range configuration items Configuring a time rangeDescribes the configuration items for creating a time range For creating a time range IPv4 ACL configuration items Configuring a rule for a basic IPv4 ACLReturn to IPv4 ACL configuration task list Creating an IPv4 ACL For configuring an basic IPv4 ACL Configuration items for a basic IPv4 ACL rule415 Configuring a rule for an advanced IPv4 ACL 416 For configuring an advanced IPv4 ACL 417 Configuration items for an advanced IPv4 ACL rule Configuring a rule for an Ethernet frame header ACL DscpTOS For configuring a rule for an Ethernet frame header ACL Source Mask Encapsulation by configuring the following items ∙ Lsap Type-Indicates the frame encapsulation format421 Introduction to QoS QoS configurationNetworks without QoS guarantee QoS requirements of new applications Traffic congestion causes ImpactsCountermeasures 423 End-to-end QoS Traffic classificationEnd-to-end QoS model Description on IP Precedence Packet precedencesDS field and ToS bytes IP Precedence decimal IP Precedence binary Description An Ethernet frame with an 802.1Q tag header Description on Dscp valuesDscp value decimal Dscp value binary Description 426 802.1Q tag header Queue schedulingSP queuing Description on 802.1p precedence WRR queuing Schematic diagram for SP queuingSchematic diagram for WRR queuing 428 Evaluate traffic with the token bucket Line rateTraffic evaluation and token bucket 429 How line rate works What is priority mappingPriority mapping Line rate implementation Priority mapping process Default CoS to DSCP/CoS to Queue mapping tableIntroduction to priority mapping tables Input CoS value Local precedence Queue Configuring a QoS policy QoS configurationConfiguration task lists Default Dscp to CoS/DSCP to Queue mapping table Configuring the priority mapping tables Configuring queue schedulingConfiguring line rate Perform the task in 1 to configure queue scheduling Configuring priority trust mode Creating a class For configuring match criteria Configuring match criteriaReturn to QoS policy configuration task list Shows the configuration items of configuring match criteria Does not overwrite the previous one Service VlanDefine a match criterion to match Dscp values Values are automatically arranged in ascending order Creating a traffic behavior Describes the configuration items of creating a behaviorConfiguration items of creating a behavior For creating a traffic behavior Port setup page for a traffic behavior Traffic directing on the chassis front panel438 Configuring other actions for a traffic behavior For setting a traffic behavior439 Configuration items of creating a policy Configuring classifier-behavior associations for the policyDescribes the configuration items of creating a policy Creating a policy Behavior Name For setting a policyApplying a policy to a port 441 For configuring queue scheduling Configuring queue scheduling on a portConfiguration items of applying a policy to a port For applying a policy to a port Configuring line rate on a port Return to Queue scheduling configuration task listWRR Configuration items of configuring line rate on a port Configuring priority mapping tablesFor configuring line rate on a port Return to Line rate configuration task list Configuring priority trust mode on a port For configuring priority mapping tablesConfiguration items of configuring priority mapping tables For configuring port priority For modifying port priority Describes the port priority configuration itemsPort priority configuration items Return toPriority trust mode configuration task list 447 Network diagram for ACL/QoS configuration ACL/QoS configuration examplesACL/QoS configuration example 448 Define a time range covering 800 to 1800 every day 449 Create an advanced IPv4 ACL 450 Define an ACL rule for traffic to the FTP server 451 Create a class 452 Define match criteria 453 454 Configure actions for the behavior 455 Configure classifier-behavior associations for the policy Create a policy456 457 PoE overview PoE configurationPoE power Advantages Configuring PoE ports Configuring PoEProtocol specification Protocol specification related to PoE is Ieee 802.3af Port setup PoE port configuration items Configuring non-standard PD detection PSE setup461 PoE summary with GigabitEthernet 1/0/1 selected PoE configuration exampleDisplaying information about PSE and PoE ports 462 Network diagram for PoE 463 Configure the PoE port supplying power to AP 464 Contacting HP Command conventionsSupport and other resources Related information Conventions GUI conventions Subscription serviceSymbols Network topology icons Index 467Page Page