Manuals / HP / Computer Equipment / Switch

HP V1910 manual Port management configuration example, Details tab

Models: V1910

1 483

Download 483 pages 47.39 Kb

Page 82

b.The Details tab

Port management configuration example

Network requirements

As shown in a:

∙Server A, Server B, and Server C are connected to GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 or the switch respectively. The rates of the network adapters of these servers are all 1000 Mbps.

∙The switch connects to the external network through GigabitEthernet 1/0/4 whose rate is 1000 Mbps.

∙To avoid congestion at the egress port, GigabitEthernet 1/0/4, configure the auto-negotiation rate range on GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 as 100 Mbps.

a.Network diagram for port rate configuration

70

Image 82

HP V1910 manual Port management configuration example, Details tab, Network diagram for port rate configuration

Contents

HP V1910 Switch Series Part number Document versionWarranty Contents Page Page STP177 Page Page Page Page Page Page Overview Web-based network management operating environment Configuration through the web interfaceDefault login information Logging in to the web interfaceLogin page of the web interface ExampleIntroduction to the web interface Web-based configuration interfaceLogging out of the web interface Navigation tree Body area Title areaDescription of Web-based NM functions Web user levelIntroduction to the web-based NM functions Function menu Description User levelUsed at the next startup from the host of the current Rmon VCTSnmp MAC VlanMstp Lldp LacpTheir partner ports IgmpARP AAAPKI RadiusCRL Class Display Introduction to the common items on the web pagesButtons and icons Commonly used buttons and iconsSorting function Content display by pagesSearch function Advanced searchConfiguration guidelines Sort display based on MAC address in the ascending orderGetting started with the CLI Configuration at the CLISetting up the configuration environment Console cableSetting terminal parameters Network diagram for configuration environment setupConnection description of the HyperTerminal Set the serial port used by the HyperTerminal connectionSelect File  Properties in the HyperTerminal window Set the serial port parametersHyperTerminal window Logging in to the CLI Set terminal emulation in Switch Properties dialog boxPress Enter. The Password prompt display Enter your username at the Username promptIpsetup CLI commandsInitialize Password Password# Modify the login password of user admin Ping QuitReboot SummaryUpgrade # Display summary information of the deviceConfiguration procedure Network requirements# Reboot the switch Entering the configuration wizard homepage Configuration wizardBasic service setup Configuring system parametersConfiguring management IP address Configure how the Vlan interface obtains an IPv4 address Admin StatusConfigure IPv4 Select a Vlan interfaceItemDescription Finishing configuration wizardConfiguration finishes Manual ImportantNetwork diagram for stack management Configuring stack managementStack management configuration task list Stack management configuration task listConfiguring global parameters of a stack Setup Configuration items of global parameters Displaying topology summary of a stack Configuring stack portsReturn to Stack management configuration task list Topology summary Fields of topology summaryLogging into a member switch from the master switch Stack configuration exampleDisplaying device summary of a stack Stack Configure global parameters for the stack on Switch a Configure a stack port on Switch a Configure stack ports on Switch B Configure a stack port on Switch C Configuration guidelines Displaying system information SummaryDisplaying device summary System informationSystem resource state Displaying device informationBasic system information Recent system operation logsDevice information Configuring system name Device basic information configurationConfiguring device basic information Configuring idle timeout periodIdle timeout Set the idle timeout period for logged-in users Configuring system time System time configurationSystem time configuration Network diagram for configuring system time System time configuration exampleSystem time configuration items NTPConfigure Device a Configure Device a as the NTP server of Switch BConfiguration guidelines Configuration task list Log management configurationConfiguring log management Setting syslog related parametersReturn to Log management configuration task list Displaying syslogSeverity level Description Value Display syslog Syslog display itemsSystem logs severity level SeeSet loghost Loghost configuration item Setting loghostIP address of the loghost Restore configuration Configuration managementBack up configuration Backup configurationConfiguration restore Save configurationSave configuration confirmation Initialize Initialize confirmation dialog boxExtension .bin Device maintenanceSoftware upgrade FilenameSpecifies the type of the startup configuration file Device rebootDevice reboot Already exists, overwriteElectronic label Diagnostic informationDiagnostic information Electronic labelDiagnostic information file is created Displaying file list File management configurationFile management File managementUploading a file Downloading a fileRemoving a file Setting operation parameters for a port Port management configurationConfiguring a port Setup tabPort configuration items PvidMDI Constrain Percentage or by PPS as followsInput a percentage in the box below Multicast Suppression Input a number in the box belowViewing the operation parameters of a port Network diagram for port rate configuration Port management configuration exampleDetails tab Configure the rate of GigabitEthernet 1/0/4 Batch configure port rate Display the rate settings of ports Implementing port mirroring Port mirroring configurationIntroduction to port mirroring Local port mirroringLocal port mirroring configuration task list Configuring local port mirroringConfiguring local port mirroring Creating a mirroring groupConfiguring ports for a mirroring group Return to Local port mirroring configuration task listMirroring ports of a port mirroring group Configuration examples Local port mirroring configuration exampleCreate a local mirroring group Configure the mirroring ports Configuration progress dialog boxConfigure the monitor port Managing users Add a user Local user configuration itemsUser management Adding a local userSetting the super password Super passwordSwitch to the management level Switching to the management levelSuper password configuration items Input are not consistent when you apply the configurationLoopback test configuration Loopback operationLoopback test result Testing cable status Test the status of the cable connected to an Ethernet portStatus and length of the cable Description on the cable test resultFailure Monitoring port traffic statistics Flow interval configurationSetting the traffic statistics generating interval Viewing port traffic statisticsPort traffic statistics Storm constrain configuration Configuring storm constrainConfiguring storm constrain Storm Constrain tabUpper threshold Upper threshold. Available options include∙ None-Performs no action Thresholds for at least a type of trafficCrossed after that After thatRmon configuration Working mechanismEthernet statistics group Alarm groupRmon groups History groupRising and falling alarm events Configuring RmonConfiguring the Rmon statistics function Event groupRmon history group configuration task list Configuring the Rmon alarm functionRmon statistics group configuration task list TaskRemarksDisplaying Rmon running status Configuring a statistics entryRmon alarm configuration task list Display Rmon running statusReturn to Rmon statistics group configuration task list Configuring a history entry100 Buckets Granted Configuring an event entryReturn to Rmon history group configuration task list 101None of them is selected, the system will take no action Configuring an alarm entryReturn to Rmon alarm configuration task list 102Statics Item Log-and-trap Displaying Rmon statistics information104 Rmon statistics information Fields of Rmon statistics Displaying Rmon history sampling information Return to Display Rmon running statusNumber of the entry in the system buffer CRCAlignErrorsCorresponding to the MIB node etherHistoryCRCAlignErrors Node etherHistoryOctetsDisplaying Rmon event logs Rmon configuration exampleNetwork diagram for Rmon Log Return to Display Rmon running status109 Display Rmon statistics 110Display the index of a event entry Configure an event group111 Configure an alarm group 112Configuring energy saving on a port Energy saving configurationPoE Disabled Disable PoE on the port 113 ItemDescription Relationship between an NMS, agent and MIB Snmp configurationSnmp mechanism MIB treePerform the tasks in 1 to configure SNMPv1 or SNMPv2c Snmp configurationConfiguring SNMPv1 or SNMPv2c SNMPv1 or SNMPv2c configuration task listSNMPv3 configuration task list Configuring SNMPv3Perform the tasks in 1 to configure SNMPv3 Configuring Snmp trapConfigure the local engine ID Set up Configuration items for enabling SnmpSpecify to enable or disable Snmp Local Engine IDView Configuring an Snmp viewCreating an Snmp view Create an Snmp viewIdentify a MIB subtree Configuration items for creating an Snmp viewAdding rules to an Snmp view Set the subtree maskAdd rules to an Snmp view Configuring an Snmp communityConfigure an Snmp community Create an Snmp Community 121Return to SNMPv1 or SNMPv2c configuration task list Configuring an Snmp groupConfiguration items for configuring an Snmp community Snmp groupObjects on the device Configuring an Snmp userReturn to SNMPv3 configuration task list AgentDescription Configuring Snmp trap function Destination IP Address Set the destination IP addressAddress in the text box according to the IP address type Network diagram for Snmp configuration Snmp configuration exampleNMS Enable Snmp 128129 Create an Snmp group 130Add target hosts of Snmp traps Enable the agent to send Snmp traps131 Configuration verification 132Interface statistics Displaying interface statisticsField Description Introduction to Vlan Vlan configurationVlan diagram Vlan fundamentalsPosition and format of Vlan tag Vlan typesTraditional Ethernet frame format 136Port link type Tag removed or intact depending on your configuration 137Introduction to port-based Vlan FrameVlan configuration task list approach Configuring a VlanCreating VLANs Selecting VLANs Create tab Configuration items of creating VLANsReturn to Vlan configuration task list approach 139Modifying a Vlan Select Vlan tab Configuration items of selecting VLANs140 Aggregate interfaces from this list Modify Vlan tab Configuration items of modifying a VlanAssigned to this Vlan 141Select the ports to be modified Modify Port tab Configuration items of modifying portsModifying ports UntaggedVlan configuration example Network diagram for Vlan configuration144 Create Vlan 2, Vlan 6 through Vlan 50, and Vlan 145Set a Vlan range 146147 148 Perform the tasks in 1 to configure a Vlan interface Vlan interface configurationConfiguring Vlan interfaces Vlan interface configuration task listBootp Create tab Configuration items of creating a Vlan interfaceReturn to Vlan interface configuration task list Modifying a Vlan interfaceModify tab Configuration items of modifying a Vlan interface Select the Vlan interface to be configuredIs up if one or more Ethernet ports in the Vlan are up Selected Vlan interface152 OUI addresses Voice Vlan configurationDefault OUI addresses of different vendors Voice Vlan assignment modesCo-relation 154Security mode and normal mode of voice VLANs Configuring the voice VlanVoice Vlan mode Packet type Packet processing mode Configuring voice Vlan on a port Configuring voice Vlan globallyAdding OUI addresses to the OUI list Configure voice Vlan Global voice Vlan configuration items Configuring voice Vlan globallyConfiguring voice Vlan on a port Timer expires, the port is removed from the voice VlanVoice Vlan function on the port Set the voice Vlan assignment mode of a portBe configured as the voice Vlan Set the voice Vlan IDAdding OUI addresses to the OUI list 159Voice Vlan configuration examples 160Create Vlan 161Configure GigabitEthernet 1/0/1 as a hybrid port 162Configure the voice Vlan function globally 163Current OUI list of the device Verify the configurationAdd OUI addresses to the OUI list 164Current voice Vlan information 165166 167 Assign GigabitEthernet 1/0/1 to Vlan 2 as an untagged member 168Configure voice Vlan on GigabitEthernet 1/0/1 169170 171 MAC address configuration 172MAC address table of the device Configuring MAC addressesConfiguring a MAC address entry 173Create a MAC address entry MAC tabClick Add in the bottom to enter the page as shown in b 174Set the ID of the Vlan to which the MAC address belongs Setting the aging time of MAC address entriesConfiguration items of creating a MAC address entry Port Set the port to which the MAC address belongsCreate a static MAC address entry MAC address configuration example176 Basic concepts in STP Mstp configurationSTP protocol packets Root bridgePath cost How STP worksDesignated bridge and designated port Description of designated bridges and designated portsCalculation process of the STP algorithm Selection of the optimum configuration BpduStep Actions Step Description Selection of the root port and designated ports180 Device Port name Bpdu of port Network diagram for the STP algorithmInitial state of each device ∙ Comparison process and result on each deviceBpdu BP2 with the configuration Bpdu of BP2. If the calculated0, 1, BP2 before the configuration Bpdu is updated CP2 1, 0, 1, BP2Blocked port CP2 0, 0, 0, AP2 Root port CP2 0, 5, 1, BP2 Configuration Bpdu forwarding mechanism in STPFinal calculated spanning tree 183STP timers 184Mstp basic concepts Mstp featuresSTP and Rstp limitations 185Basic concepts in Mstp MST regionVLAN-to-MSTI mapping table 186Boundary port Regional rootCommon root bridge Port rolesPort roles Port states188 Cist calculation How Mstp worksImplementation of Mstp on devices Msti calculationPerform the tasks described in 1 to configure Mstp Configuring MstpConfiguring an MST region Mstp configuration task listClick Modify to enter the page shown in b Return to Mstp configuration task listMST region Vlan IDConfiguring Mstp globally Number of devices on the path composed of the most devices Set the STP working mode∙ STP-Each port on a device sends out STP BPDUs Bridge DiameterConfiguring Mstp on a port STPConfiguration may cause a temporary loop Set the type of protection to be enabled on the portManually configure path cost for ports Recommends you to use the default valueProtection types Displaying Mstp information of a portProtection type Description Learning Port Summary tabForwarding DiscardingWhether or not the port is an edge port Network diagram for Mstp configuration Mstp configuration example199 ∙ Click Modify to enter the page shown in c Configure an MST regionRegion tab 200Configure Mstp globally on Switch a 201202 When configuring MSTP, follow these guidelines Configure Mstp globally on Switch D203 Page Aggregate interface Link aggregation and Lacp configurationBasic concepts Aggregation groupClass-two configurations Class-two configurationsStatic aggregation mode Link aggregation modesDynamic aggregation mode 207Configuring a static aggregation group Configuring link aggregation and LacpLoad sharing mode of an aggregation group Configuring a dynamic aggregation groupDisplaying information of LACP-enabled ports Dynamic aggregation group configuration task listSetting Lacp priority Creating a link aggregation groupAssign an ID to the link aggregation group to be created 210Setting Lacp priority Displaying information of an aggregate interfaceAlso on LACP-disabled ports Displaying information of LACP-enabled portsLacp priority configuration items System Priority Set the Lacp priority of the local systemFields in the LACP-enabled port summary table Display information about LACP-enabled portsField/button Description Describes the fields in the Partner Port Details table Link aggregation and Lacp configuration exampleFields in the Partner Port Details table ∙ Set the link aggregation interface ID to Network diagram for static link aggregation configurationCreate static link aggregation group 215Create dynamic link aggregation group 216217 LLDPDUs Lldp configurationBackground LldpduLldpdu encapsulation format TLVsSNAP-encapsulated Lldpdu format FCSIeee 802.1 organizationally specific TLVs Basic Lldp TLVsType Description Remarks Ieee 802.1 organizationally specific TLVsIeee 802.3 organizationally specific TLVs LLDP-MED TLVsIeee 802.3 organizationally specific TLVs LLDP-MED TLVsHow Lldp works Compatibility of Lldp with CDPPerform the tasks in 1 to configure Lldp Configuring LldpLldp configuration task list Lldp configuration task listTask Remarks Enabling Lldp on ports224 Port Setup tab Return to Lldp configuration task list Configuring Lldp settings on ports225 For modifying Lldp settings on a port 226Is Ethernet CDP operating mode on the port to TxRx ∙ Disable-Neither sends nor receives CDPDUsCDP Operating Mode Enable Lldp polling and set the polling intervalConfiguring global Lldp setup DOT3 TLV MAC/PHYGlobal Setup tab Global Lldp setup configuration items Displaying Lldp information for a port Interface alias Port ID typePort component Chassis component Type of PSE power source advertised by the local deviceChassis ID type 233III endpoint devices are used directly by end users Link aggregation groupEndpoint devices 234Unknown Displaying global Lldp information 236Global Summary tab Global Lldp information Neighbor Summary tab Return to Lldp configuration task list Lldp configuration examplesBasic Lldp configuration example Displaying Lldp information received from Lldp neighborsNetwork diagram for basic Lldp configuration 239Port Setup tab 240For setting Lldp on multiple ports 241Global Setup tab 242For configuring Lldp on the selected port 243CDP-compatible Lldp configuration example 244For creating VLANs Network diagram for CDP-compatible Lldp configuration245 For configuring ports 246For configuring the voice Vlan function on ports 247248 For modifying Lldp settings on ports 249250 Igmp snooping related ports Igmp snooping configurationPrinciple of Igmp snooping Multicast forwarding before and after Igmp snooping runsIgmp snooping related ports When receiving a general queryWork mechanism of Igmp snooping 252When receiving a leave group message When receiving a membership report253 Igmp snooping querier Configuring Igmp snooping254 Basic Igmp snooping configurations Enabling Igmp snooping globallyIgmp snooping configuration items Configuring Igmp snooping in a VlanReturn to Configuration task list Configuring Igmp snooping port functions Advanced configurationDisplay Igmp snooping multicast entry information Configuration items for advanced Igmp snooping featuresGroup Limit ID of the Vlan to which the entry belongs Igmp snooping configuration example259 Network diagram for Igmp snooping configuration 260261 Add a port to the Vlan 262Configure Igmp snooping in the Vlan Enable Igmp snooping globally263 Igmp snooping multicast entry information displaying Configure Igmp snooping on GigabitEthernet 1/0/3264 Details about an Igmp snooping multicast entry 265Static route Routing configurationRouting table 266Displaying the IPv4 active route table Configuring IPv4 routingDefault route Address will be forwarded out the interfaceCreating an IPv4 static route Preferences enables route backupSpecify the mask of the destination IP address Network diagram for IPv4 static route configuration Static route configuration exampleConfiguration outlines Select the output interfaceConfigure a default route 270Configure a static route 271272 Precautions 273Dhcp address allocation Dhcp overviewIntroduction to Dhcp Allocation mechanismsDynamic IP address allocation process Dynamic IP address allocation processIP address lease extension 275Dhcp message format Dhcp message format276 Introduction to Dhcp options Dhcp optionsDhcp options overview Introduction to OptionSub-option 2 in normal padding format Protocols and standardsSub-option 1 in normal padding format 278Application environment Dhcp relay agent configurationIntroduction to Dhcp relay agent FundamentalsDhcp relay agent configuration task list Dhcp relay agent work processConfiguring and displaying clients IP-to-MAC bindings Dhcp relay agent configuration281 Creating a Dhcp server group Return to Dhcp relay agent configuration task listCreate a server group Enabling the Dhcp relay agent on an interface Dhcp server group configuration items283 Configuring and displaying clients IP-to-MAC bindings 284Network diagram for Dhcp relay agent configuration Dhcp relay agent configuration example285 Enable Dhcp 286287 Functions of Dhcp snooping Dhcp snooping configurationDhcp snooping overview Recording IP-to-MAC mappings of Dhcp clientsConfigure trusted and untrusted ports Configuring a trusted port connected to a Dhcp serverConfiguring trusted ports in a cascaded network Configure trusted ports in a cascaded networkDescribes roles of the ports shown in a Dhcp snooping configuration task listDhcp snooping support for Option Roles of portsFunctions on an interface Configuring Dhcp snoopingEnabling Dhcp snooping Displaying clients IP-to-MACReturn to Dhcp snooping configuration task list Dhcp snooping configuration292 Include Configuring Dhcp snooping functions on an interfaceDisplaying clients IP-to-MAC bindings Option 82 padded in normal formatThis field displays the Vlan to which the device belongs Dhcp snooping configuration example294 Network diagram for Dhcp snooping configuration 295Enable Dhcp snooping 296Configure Dhcp snooping functions on GigabitEthernet 1/0/2 Configure Dhcp snooping functions on GigabitEthernet 1/0/1297 Configure Dhcp snooping functions on GigabitEthernet 1/0/3 298Service management configuration Configuring service management Service management Service management configuration itemsHttps Trace route Diagnostic toolsTrace route diagram 302Ping operation Diagnostic tool operationsPing configuration 303Ping operation result Trace route configurationTrace route operation 304Trace route operation result 305ARP function ARP managementARP overview ARP message formatARP table ARP address resolution processARP operation 307Displaying ARP entries ARP Table configurationManaging ARP entries Dynamic ARP entryStatic ARP entry configuration items Static ARP configuration exampleDescribes the static ARP entry configuration items Creating a static ARP entryNetwork diagram for configuring static ARP entries 310Add GigabitEthernet 1/0/1 to Vlan ∙ After the configuration process is complete, click Close311 Create VLAN-interface 312Introduction to gratuitous ARP Configuring gratuitous ARPGratuitous ARP Create a static ARP entryLearning function Enabled by defaultPackets PeriodIntroduction to ARP detection ARP attack defense configurationARP detection Man-in-the-middle attackMan-in-the-middle attack ARP detection mechanism316 Configuring ARP detection 317ItemDescription Configuration, see Creating a static binding entry Creating a static binding entryArchitecture Controlled/uncontrolled port and port authorization status802.1X fundamentals ArchitectureEAP packet format 802.1X-related protocolsPacket formats Authorized/unauthorized state of a controlled portEapol frame format Eapol frame formatEAP packet format Types of Eapol packetsEAP over Radius Initiating 802.1X authenticationAccess device as the initiator 802.1X client as the initiatorEAP relay 802.1X authentication proceduresComparison of EAP relay and EAP termination EAP terminationPacket exchange method Benefits Limitations 802.1X authentication procedure in EAP relay modeEAP relay EAP termination Works with any Radius server that326 EAP termination 802.1X authentication procedure in EAP termination mode327 Using 802.1X authentication with other features 802.1X configurationAccess control methods HP implementationGuest Vlan ConfiguringConfiguration prerequisites ACL assignment802.1X configuration task list 802.1X configuration task listConfiguring 802.1X globally 802.1X configuration Basic 802.1X configuration itemsSpecify whether to enable the quiet timer Authentication MethodAuthentication procedures Authentication on the userConfiguring 802.1X on a port Return to 802.1X configuration task listPort to access the network without authentication Select the port authorization state forPort Authorization Access requests from users on the portConfiguring an 802.1X guest Vlan 802.1X configuration exampleConfiguring an 802.1X guest Vlan Network diagram for 802.1X configuration 335Global 802.1X configuration 336Radius authentication server configuration 337Radius parameter configuration 338∙ Select the domain name test Configure the AAA authentication method for the ISP domainCreate an ISP domain 339Configure the AAA authorization method for the ISP domain 340Network diagram for ACL assignment ACL assignment configuration exampleConfigure the AAA accounting method for the ISP domain 341342 343 344 345 Create ACL 346ACL rule configuration 347348 802.1X configuration of GigabitEthernet 1/0/1 349Ping operation summary 350Introduction to AAA AAA configurationNetwork diagram for AAA 351Domain-based user management Configuring AAAConfiguring an ISP domain Determine the ISP domain of a user by the usernameConfiguring an ISP domain Domain SetupConfiguring authentication methods for the ISP domain ISP domain configuration itemsAuthorization method configuration Configuring authorization methods for the ISP domain355 Configuring accounting methods for the ISP domain Authorization method configuration itemsReal-time accounting updates for the users Method Used Not Set -Uses the default accounting methods AAA configuration exampleNetwork diagram for AAA configuration example ∙ None -Performs no accountingConfigure a local user 359Configure the ISP domain to use local authentication Configure ISP domain test360 Configure the ISP domain to use local authorization 361Configure the ISP domain to use local accounting 362Introduction to Radius Radius configurationSecurity and authentication mechanisms Client/server modelBasic message exchange process of Radius Basic message exchange process of RadiusMain values of the Code field Radius packet formatRadius packet format Code Packet type DescriptionRadius attributes AttributeExtended Radius attributes Segment of a Radius packet containing an extended attribute Configuring RadiusRadius configuration task list TaskDescriptionConfiguring Radius Configuring Radius serversRadius server configuration ParametersConfiguring Radius parameters Return to Radius configuration task listRadius parameter configuration Radius parameters NAS-IPAttempts cannot exceed Timeout Retransmission TimesSet the maximum number of transmission attempts Is an integerNumber of users Real-time accounting interval in minutes Radius configuration exampleNetwork diagram for Radius server configuration Can beConfigure the Radius authentication server Configure Radius parameters Create an ISP domain Configuration progress dialog box Configuration guidelines Users Configuring usersConfiguring a local user Local userUsername Specify a name for the local user Password Local user configuration Local user configuration itemsUser cannot pass authentication and therefore cannot log Vlan ACL Configuring a user groupUser group list User group configuration 381User group after the users pass authentication User group configuration itemsSpecify the user profile for the user group PKI terms PKI configurationPKI overview Architecture of PKIPKI repository Applications of PKIEntity PKI architectureSecure email Configuring PKIOperation of PKI Web securityDomain Creating a PKI entityCreating a PKI Generating an RSARequesting a Certificate Automatically Creating a PKI entity PKI entity list PKI entity configuration388 PKI domain list PKI entity configuration itemsCreating a PKI domain FqdnPKI domain configuration PKI domain configuration items Select the local PKI entityLdap IP CRL URLDestroying the RSA key pair Generating an RSA key pairKey Length Type the length of the RSA keys Retrieving a certificate Get File From PC Specify the path of the file on the device 394Requesting a local certificate 395Retrieving and displaying a CRL CRLPKI configuration example Configuring a PKI entity to request a certificate from a CAPKI entity list Configure a PKI entity 398PKI domain list Configure a PKI domain 399Certificate list Generate an RSA key pair 400Certificate list Certificate list Retrieve the CA certificate401 Request a local certificate 402Configure a port isolation group Port isolation group configurationConfiguring a port isolation group 403Networking diagram for port isolation group configuration Port isolation group configuration examplePort isolation group configuration items 404Configure isolated ports for an isolation group 405IPv4 ACL Associate the Telnet service with an IPv4 ACL Authorized IP configurationConfiguring authorized IP Web IPv4 ACL Associate the Http service with an IPv4 ACLNetwork diagram for authorized IP Authorized IP configuration exampleAuthorized IP configuration example Create an ACLConfigure an ACL rule to permit Host B 408Configure authorized IP 409Introduction to IPv4 ACL ACL configurationACL overview IPv4 ACL classificationFragments filtering with IPv4 ACLs IPv4 ACL category Depth-first match procedureEffective period of an ACL Depth-first match for IPv4 ACLsConfiguring an IPv4 ACL Configuring an ACLBenefits of using the step ACL stepTime range configuration items Configuring a time rangeDescribes the configuration items for creating a time range For creating a time rangeIPv4 ACL configuration items Configuring a rule for a basic IPv4 ACLReturn to IPv4 ACL configuration task list Creating an IPv4 ACLConfiguration items for a basic IPv4 ACL rule For configuring an basic IPv4 ACL415 Configuring a rule for an advanced IPv4 ACL 416For configuring an advanced IPv4 ACL 417Configuration items for an advanced IPv4 ACL rule Dscp Configuring a rule for an Ethernet frame header ACLTOS For configuring a rule for an Ethernet frame header ACL Source Mask∙ Lsap Type-Indicates the frame encapsulation format Encapsulation by configuring the following items421 Introduction to QoS QoS configurationNetworks without QoS guarantee QoS requirements of new applicationsTraffic congestion causes ImpactsCountermeasures 423Traffic classification End-to-end QoSEnd-to-end QoS model Description on IP Precedence Packet precedencesDS field and ToS bytes IP Precedence decimal IP Precedence binary DescriptionAn Ethernet frame with an 802.1Q tag header Description on Dscp valuesDscp value decimal Dscp value binary Description 426802.1Q tag header Queue schedulingSP queuing Description on 802.1p precedenceWRR queuing Schematic diagram for SP queuingSchematic diagram for WRR queuing 428Evaluate traffic with the token bucket Line rateTraffic evaluation and token bucket 429How line rate works What is priority mappingPriority mapping Line rate implementationPriority mapping process Default CoS to DSCP/CoS to Queue mapping tableIntroduction to priority mapping tables Input CoS value Local precedence QueueConfiguring a QoS policy QoS configurationConfiguration task lists Default Dscp to CoS/DSCP to Queue mapping tableConfiguring the priority mapping tables Configuring queue schedulingConfiguring line rate Perform the task in 1 to configure queue schedulingConfiguring priority trust mode Creating a classFor configuring match criteria Configuring match criteriaReturn to QoS policy configuration task list Shows the configuration items of configuring match criteriaDoes not overwrite the previous one Service VlanDefine a match criterion to match Dscp values Values are automatically arranged in ascending orderCreating a traffic behavior Describes the configuration items of creating a behaviorConfiguration items of creating a behavior For creating a traffic behaviorTraffic directing on the chassis front panel Port setup page for a traffic behavior438 For setting a traffic behavior Configuring other actions for a traffic behavior439 Configuration items of creating a policy Configuring classifier-behavior associations for the policyDescribes the configuration items of creating a policy Creating a policyBehavior Name For setting a policyApplying a policy to a port 441For configuring queue scheduling Configuring queue scheduling on a portConfiguration items of applying a policy to a port For applying a policy to a portReturn to Queue scheduling configuration task list Configuring line rate on a portWRR Configuration items of configuring line rate on a port Configuring priority mapping tablesFor configuring line rate on a port Return to Line rate configuration task listFor configuring priority mapping tables Configuring priority trust mode on a portConfiguration items of configuring priority mapping tables Describes the port priority configuration items For configuring port priority For modifying port priorityPort priority configuration items Return toPriority trust mode configuration task list 447Network diagram for ACL/QoS configuration ACL/QoS configuration examplesACL/QoS configuration example 448Define a time range covering 800 to 1800 every day 449Create an advanced IPv4 ACL 450Define an ACL rule for traffic to the FTP server 451Create a class 452Define match criteria 453454 Configure actions for the behavior 455Create a policy Configure classifier-behavior associations for the policy456 457 PoE overview PoE configurationPoE power AdvantagesConfiguring PoE ports Configuring PoEProtocol specification Protocol specification related to PoE is Ieee 802.3afPort setup PoE port configuration items PSE setup Configuring non-standard PD detection461 PoE summary with GigabitEthernet 1/0/1 selected PoE configuration exampleDisplaying information about PSE and PoE ports 462Network diagram for PoE 463Configure the PoE port supplying power to AP 464Contacting HP Command conventionsSupport and other resources Related information ConventionsGUI conventions Subscription serviceSymbols Network topology iconsIndex 467Page Page