NETGEAR 7300S - page 234

User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software

9-26 Security Commands

202-10088-01, March 2005

Contents

Main Technical Support Please register to obtain technical support Trademarks Statement of Conditions Regulatory Compliance Information Canadian Department of Communications Compliance Statement EN 55 022 Declaration of Conformance Product and Publication Details Page Contents Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Chapter 1 About This Guide Audience Why the Document was Created How to Use This Document Typographical Conventions Special Message Formats Page Page Chapter 2 Switch Management Overview Scope Switch Management Overview User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software 2-2 Switch Management Overview Table 2-1. Comparing Switch Management Methods Chapter 3 Administration Console Interface Set Up Your Switch Using Direct Console Access Page Page Page Chapter 4 Web-Based Management Interface Web Based Management Overview How to Log In to the Managed Switch Page Web-Based Management Utility Features Page Menus Main Menus Secondary Menus System-Wide Popup Menus Page Page Chapter 5 Command Line Interface Structure CLI Command Format Command Parameters Value s ipaddr macaddr areaid Conventions macaddr ipaddr Annotations Chapter 6 Quick Start up Quick Starting the Switch System Info and System Setup Quick Start up Software Version Information Quick Start up Physical Port Data User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software Quick Start up 6-3 Quick Start up User Account Management Quick Start up IP Address Table 6-3. Quick Start up User Account Management User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software 6-4 Quick Start up configuring the network parameters so that the configurations are not lost. Note: The IP address assigned to network in the above table will not be routable. If access to management CPU via the routable interface is desired, use the ip command. Table 6-4. Quick Start-up IP Address Using Switch as Layer-2 Device User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software Quick Start up Uploading from Switch to Out-of-Band PC (Only XMODEM) Table 6-5. Quick Start-up IP Address Using Switch as Layer-3 Device Table 6-6. Quick Start up Uploading from Switch to Out-of-Band PC (XMODEM) config - configuration file errorlog - error log system trace - system trace traplog - trap log xmodem:filepath/fileName Quick Start up Downloading from Out-of-Band PC to Switch (Only XMODEM) Quick Start up Downloading from TFTP Server Quick Start up Factory Defaults Table 6-7. Quick Start up Downloading from Out-of-Band PC to Switch (Only XMODEM) Table 6-8. Quick Start up Downloading from TFTP Server Page Page Chapter 7 Mode-based CLI User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software configure rip map 7-2 Mode-based CLI Mode-based Topology FIGURE 1. Mode-based CLI Passwd Correct Mode-based Command Hierarchy Page Flow of Operation (exec) #show arpp brief ^ %Invalid input detected at ^ marker. No Form of a Command Support for No Form Behavior of Command Help ("?") Page Chapter 8 Switching Commands System Information and Statistics Commands show arp switch show eventlog show hardware show interface show interface ethernet Page Page Page Page Page Page Page Page show logging show mac-addr-table show msglog show running-config show sysinfo snmp-server System Management Commands telnet transport input telnet transport output telnet session-limit session-timeout bridge aging-time mtu network javamode network mac-address network mac-type network parms network protocol telnetcon maxsessions telnetcon timeout serial baudrate serial timeout set prompt serviceport ip serviceport protocol show telnet show forwardingdb agetime show network show telnetcon show serial show serviceport SNMP Community Commands show snmpcommunity show snmptrap show trapflags snmp-server community snmp-server community ipaddr snmp-server community ipmask snmp-server community mode snmp-server community ro snmp-server community rw snmp-server enable traps snmp-server enable traps bcaststorm snmp-server enable traps linkmode snmp-server enable traps multiusers snmp-server enable traps stpmode snmptrap snmptrap ipaddr snmptrap mode snmp trap link-status snmp trap link-status all Management VLAN Command network mgmt_vlan System Configuration Commands addport auto-negotiate auto-negotiate all deleteport (Interface Config) deleteport (Global Config) macfilter macfilter adddest macfilter adddest all macfilter addsrc macfilter addsrc all monitor session monitor session mode shutdown shutdown all speed speed all storm-control broadcast storm-control flowcontrol show mac-address-table multicast show mac-address-table static show mac-address-table staticfiltering show mac-address-table stats show monitor show port show port protocol show storm-control Virtual LAN (VLAN) Commands vlan vlan acceptframe vlan ingressfilter vlan makestatic vlan name vlan participation vlan participation all vlan port acceptframe all vlan port ingressfilter all vlan port pvid all vlan port tagging all vlan protocol group vlan protocol group add protocol vlan protocol group remove protocol group protocol vlan group protocol vlan group all vlan pvid vlan tagging show vlan Page show vlan brief show vlan port System Utility Commands traceroute clear config clear counters clear igmpsnooping clear pass enable passwd clear port-channel clear traplog clear vlan logout ping reload copy Pre-login Banner copy CLI Command Logging logging cli-command Configuration Scripting configscript apply configscript delete configscript list configscript show configscript validate System Log (Syslog) logging buffered logging buffered wrap logging console logging history logging host logging host remove logging port logging syslog show logging show logging history show logging buffered show logging hosts Simple Network Time Protocol (SNTP) sntp broadcast client poll-interval sntp client mode sntp client port sntp unicast client poll-interval sntp unicast client poll-timeout sntp unicast client poll-retry sntp multicast client poll-interval sntp server show sntp show sntp client show sntp server User Account Commands disconnect show loginsession show users users name users passwd users snmpv3 accessmode users snmpv3 authentication users snmpv3 encryption DHCP Server Commands client-identifier client-name default-router dns-server hardware-address host ip dhcp excluded-address ip dhcp ping packets ip dhcp pool lease network service dhcp bootfile domain-name ip dhcp bootp automatic ip dhcp conflict logging netbios-name-server netbios-node-type next-server option show ip dhcp binding show ip dhcp global configuration show ip dhcp pool configuration show ip dhcp server statistics show ip dhcp conflict clear ip dhcp binding clear ip dhcp server statistics clear ip dhcp conflict Provisioning (IEEE 802.1p) Commands classofservice dot1pmapping show classofservice dot1pmapping vlan port priority all vlan priority GARP Commands set garp timer join set garp timer join all set garp timer leave set garp timer leave all set garp timer leaveall set garp timer leaveall all show garp GARP VLAN Registration Protocol (GVRP) Commands set gvrp adminmode set gvrp interfacemode set gvrp interfacemode all show gvrp configuration GARP Multicast Registration Protocol (GMRP) Commands set gmrp adminmode set gmrp interfacemode set gmrp interfacemode all show gmrp configuration show mac-address-table gmrp Internet Group Management Protocol (IGMP) Commands set igmp groupmembership-interval set igmp interfacemode all set igmp maxresponse set igmp mcrtrexpiretime show igmpsnooping show mac-address-table igmpsnooping IGMP Snooping per VLAN set igmp groupmembershipinterval set igmp maxresponse set igmp mcrtexpiretime set igmp fast-leave show igmpsnooping Link Aggregation (LAG)/Port-Channel (802.3AD) Commands port-channel staticcapability port lacpmode port lacpmode all port-channel port-channel adminmode all port-channel linktrap port-channel name show port-channel brief show port-channel Spanning Tree (STP) Commands spanning-tree max-hops spanning-tree spanning-tree configuration name spanning-tree configuration revision spanning-tree edgeport spanning-tree forceversion spanning-tree forward-time spanning-tree hello-time spanning-tree max-age spanning-tree mst Page spanning-tree mst instance spanning-tree mst priority spanning-tree mst vlan spanning-tree port mode spanning-tree port mode all spanning-tree spanning-tree bpdumigrationcheck show spanning-tree show spanning-tree interface show spanning-tree mst detailed show spanning-tree mst port detailed Page show spanning-tree mst port summary show spanning-tree mst summary show spanning-tree summary show spanning-tree vlan spanning-tree max-hops spanning-tree mst spanning-tree hello-time show spanning-tree show spanning-tree interface show spanning-tree mst port detailed Page Chapter 9 Security Commands Port Security port-security port-security max-dynamic port-security max-static port-security mac-address port-security mac-address move snmp-server enable traps violation show port-security show port-security dynamic show port-security static show port-security violation Port Based Network Access Control (IEEE 802.1X) Commands authentication login clear dot1x statistics clear radius statistics dot1x defaultlogin dot1x initialize dot1x login dot1x max-req dot1x port-control dot1x port-control All dot1x re-authenticate dot1x re-authentication dot1x system-auth-control dot1x timeout dot1x user show radius accounting show authentication show authentication users show dot1x Page Page show dot1x users show users authentication users defaultlogin users login Remote Authentication Dial In User Service (RADIUS) Commands radius accounting mode radius server host Page radius server key radius server msgauth radius server primary radius server retransmit radius server timeout show radius show radius statistics Secure Shell (SSH) Commands ip ssh ip ssh protocol show ip ssh Hypertext Transfer Protocol (HTTP) Commands ip http secure-port ip http secure-protocol ip http secure-server ip http server show ip http Page Chapter 10 Routing Commands Address Resolution Protocol (ARP) Commands arp ip proxy-arp arp cachesize arp dynamicrenew arp purge arp resptime arp retries arp timeout clear arp-cache show arp show arp brief IP Routing routing ip routing ip address ip route ip route default ip route distance ip forwarding ip netdirbcast ip mtu show ip brief show ip interface show ip interface brief show ip route show ip route bestroutes show ip route entry show ip route preferences show ip stats encapsulation Bootp/DHCP Relay Commands bootpdhcprelay cidoptmode bootpdhcprelay enable bootpdhcprelay maxhopcount bootpdhcprelay minwaittime bootpdhcprelay serverip show bootpdhcprelay Router Discovery Protocol Commands ip irdp ip irdp address ip irdp holdtime ip irdp maxadvertinterval ip irdp minadvertinterval ip irdp preference show ip irdp Virtual LAN Routing Commands vlan routing show ip vlan Routing Information Protocol (RIP) Commands enable (RIP) ip rip auto-summary default-information originate (RIP) default-metric (RIP) distance rip distribute-list out ip rip authentication ip rip receive version ip rip send version hostroutesaccept split-horizon redistribute show ip rip show ip rip interface brief show ip rip interface Chapter 11 Quality of Service (QoS) Commands Access Control List (ACL) Commands mac access-list extended <name> mac access-list extended rename <name> <newname> {deny|permit} <srcmac> <srcmacmask> <dstmac> <dstmacmask> mac access-group <name> {in|out} [sequence <1-4294967295>] show mac access-list <name> show mac access-lists access-list ip access-group ip access-group all show ip access-lists Differentiated Services (DiffServ) Commands diffserv Class Commands Page Page Page Page Page Page Page Page Policy Commands Page Page Page Page Page Page Page Page Page Page Service Commands Show Commands Page Page Page Page Page Page Page Page Page Class of Service (CoS) Commands classofservice dot1p-mapping classofservice ip-dscp-mapping classofservice ip-precedence-mapping classofservice trust cos-queue max-bandwidth no cos-queue max-bandwidth cos-queue min-bandwidth cos-queue random-detect cos-queue strict random-detect random-detect exponential-weighting-constant random-detect queue-parms tail-drop queue-parms traffic-shape show classofservice dot1p-mapping show classofservice ip-precedence-mapping show classofservice trust show interfaces cos-queue show interfaces random-detect show interfaces tail-drop-threshold Page Page Chapter 12 Managing Switch Stacks Understanding Switch Stacks Switch Stack Membership Page Switch Stack Cabling Stack Master Election and Re-Election Stack Member Numbers Stack Member Priority Values Switch Stack Offline Configuration Effects of Replacing a Preconfigured Switch in a Switch Stack Effects of Removing a Preconfigured Switch from a Switch Stack Switch Stack Software Compatibility Recommendations Incompatible Software and Stack Member Image Upgrades Switch Stack Configuration Files Switch Stack Management Connectivity Connectivity to the Switch Stack Through Console Ports Connectivity to the Switch Stack Through Telnet Switch Stack Configuration Scenarios Stacking Recommendations General Practices Initial installation and Power-up of a Stack Removing a Unit from the Stack Adding a Unit to an Operating Stack Replacing a Stack Member with a New Unit Renumbering Stack Members Moving a Master to a Different Unit in the Stack Removing a Master Unit from an Operating Stack Merging Two Operational Stacks Preconfiguration Upgrading Firmware Migration of Configuration With a Firmware Upgrade Code Mismatch User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-1 Appendix A IS CLI Mapping Table 12-3. IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-2 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-3 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-4 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-5 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-6 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-7 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-8 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-9 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-10 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-11 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-12 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-13 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-14 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-15 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-16 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-17 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-18 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-19 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-20 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-21 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-22 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-23 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-24 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-25 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-26 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-27 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-28 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-29 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-30 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-31 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-32 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-33 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-34 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-35 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-36 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-37 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-38 IS CLI Mapping User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software IS CLI Mapping A-39 User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software A-40 IS CLI Mapping Page Page Appendix B Cabling Guidelines Fast Ethernet Cable Guidelines Category 5 Cable Category 5 Cable Specifications Twisted Pair Cables Patch Panels and Cables Using 1000BASE-T Gigabit Ethernet over Category 5 Cable Cabling Near End Cross Talk (NEXT) Patch Cables RJ-45 Plug and RJ-45 Connectors Page Conclusion Appendix C Glossary Use the list below to find definitions for technical terms used in this manual. Numeric A B C D E F G H I Page L M Page N O P Q R S T U V W X