Manuals / Planet Technology / Computer Equipment / Switch

Planet Technology SGSW-24040R, WGSW-24040R user manual ACL Ports Configuration, ObjectDescription

Models: SGSW-24040R WGSW-24040R

1 308

Download 308 pages 62.4 Kb

Page 179

User’s Manual of WGSW-24040 / WGSW-24040R

SGSW-24040 / SGSW-24040R

4.11.5 ACL Ports Configuration

Configure the ACL parameters (ACE) of each switch port. These parameters will affect frames received on a port unless the frame matches a specific ACE. The settings relate to the currently selected stack unit, as reflected by the page header. The ACL Ports Configuration screen in Figure 4-11-14appears.

Figure 4-11-14ACL Ports Configuration page screenshot

The page includes the following fields:

ObjectDescription

• Port	The logical port for the settings contained in the same row.

179

Image 179

Planet Technology SGSW-24040R, WGSW-24040R user manual ACL Ports Configuration, ObjectDescription

Contents

User’s Manual Weee Warning TrademarksDisclaimer FCC Warning CE Mark WarningTable of Conetnts 5.1 140 105118 132187 159181 185212 208244 229237 265 251257 287 272277 282297 290293 295Product Description Packet ContentsHigh Performance How to Use This Manual 24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45 Product FeaturesHigh-performance 5GbE Stacking interface ¾ Layer 2 Features ¾ Physical Port¾ Stacking ¾ Multicast¾ Security ¾ ManagementHardware Specification Product SpecificationTraffic classification based, Strict priority and WRR Gigabit SFP slots Switch Front PanelHardware Description Gigabit TP interfaceMaster LED Reset buttonAbout 1~3 second Stack IDLED Indications Off To indicate that the SFP port is link down 1000Base-SX/LX SFP interfaces Shared Port-21~Port-24Speed 1000Mbps 5Rear panel of WGSW-24040 Switch Rear PanelCascade UP AC Power ReceptacleStack ports 9SGSW-24040 / SGSW-24040R Stack Ports DC Power ConnectorDesktop Installation Install the SwitchRack Mounting Supply power to the Managed Switch13Plug-in the SFP transceiver Installing the SFP transceiver„ Remove the transceiver module „ Approved Planet SFP Transceivers„ Connect the fiber cable Page Power switch in the OFF position and the DC power is OFF Connecting DC Power Supply WGSW-24040R / SGSW-24040RSGSW-24040 / SGSW-24040R Stack InstallationManagement Stacking Connecting Stacking cableStack ID Master LED 21Separated Stack connection This chapter covers the following topics RequirementsMethod Advantages Disadvantages Management Access OverviewAdministration Console „ 115200 bps „ 8 data bits „ No parity „ 1 stop bit Direct AccessWeb Management 4Web main screen of Managed SwitchVirtual Terminal Protocols SNMP-Based Network ManagementProtocols Management Architecture Snmp ProtocolAbout Web-based Management WEB ConfigurationHttp//192.168.0.100 „ Logging on the switchPage RJ-45 Ports SFP Ports Stack Ports Main WEBPanel Display StateMain Menu 5WGSW/SGSW Managed Switch Main Funcrions MenuSystem IP ConfigurationSystem Information Page IP Configuration Password User AuthenticationOld Password New PasswordSntp Configuration Click System Web Firmware Upgrade WEB Firmware UpgradeTftp Server IP Tftp Firmware UpgradeUpgrade button Click System -TFTP Firmware Upgrade8TFTP Firmware upgrade pop-up message „ Configuration Download Configuration Save„ Configuration Upload Configuration UploadPage Factory Default System Reboot 18Set Start-up screenshot „ Example 1 Save Current Configuration setting19Download system software screenshot „ Example 2 Downloading System Software from a Server„ Example 3 Downloading Configuration Settings from a Server „ Example 4 Saving or Restoring Configuration Settings Snmp Operations Snmp System ConfigurationSimple Network Management Protocol Snmp OverviewWrite Community ModeVersion Read CommunitySystem Name Snmp System Information ConfigurationSnmp Trap Configuration System ContactTrap Destination Trap ModeTrap Version Trap CommunityGroup Name SNMPv3 ConfigurationSNMPv3 Accesses Configuration DeleteRead View Name SNMPv3 Communities ConfigurationSecurity Model Security LevelSecurity Name SNMPv3 Groups ConfigurationProtocol SNMPv3 Users ConfigurationAuthentication User NameView Name SNMPv3 Views ConfigurationPrivacy Password Privacy ProtocolOID Subtree „ Example Add a new SNMPv3 userView Type 9SNMPv3 Users-NEW page screenshot „ Example Add a new SNMPv3 Group11SNMPv3 Groups-NEW page screenshot Port Management Port ConfigurationFlow Control Power ControlPort Link2Port Statistics Overview page screenshot Port Statistics OverviewDetailed Port Statistics Receive and Transmit Queue Counters Receive Error CountersReceive Total and Transmit Total Receive and Transmit Size CountersTx Drops Port Mirroring ConfigurationTransmit Error Counters Port to mirror to Mirror Port Configuration6Port Mirror Configuration page screenshot „ Sgsw Stackable Switch1Link Aggregation Link AggregationPage Destination MAC Static Aggregation ConfigurationStatic Aggregation Group Configuration Hash Code ContributorsPort Members LocalityGroup ID Role Lacp ConfigurationLacp Enabled KeyLacp Port Status Lacp System StatusPartner Port LacpDiscarded Lacp statisticsLacp Transmitted Lacp ReceivedVlan Overview VlanIeee 802.1Q Standard Ieee 802.1Q Vlan802.1Q Vlan Tags Port Vlan ID Vlan Classification VLANs Vlan Learning ObjectDescription Vlan ModeVlan Basic Information Supported VLANsUnderstand nomenclature of the Switch Vlan Port ConfigurationPvid This is the logical port number for this rowPort Vlan ID In-Q ModeLink Type Ether typeVlan ID Vlan Membership Configuration„ Adding Static Members to VLANs Vlan Index „ Isolated ports Private Vlan ConfigurationOverview „ Promiscuous portsPromiscuous Pvlan Port TypeIsolated Bridge Protocol Data Units Rapid Spanning Tree ProtocolPort transitions from one state to another as follows Creating a Stable STP TopologySTP Port States Below ConfigurableExcept by setting priority STP Parameters STP Operation LevelsDefault Spanning-Tree Configuration Feature Default Value Maximum Age TimerForward Delay Timer Variable Description Default Value Port PriorityIllustration of STP 110 Max Age Rstp System ConfigurationForward Delay System PriorityRstp Bridge Status Path Cost Rstp Port ConfigurationRstp Enabled Point2Point PriorityEdge Port Type Link Type Ieee 802.1w-2001 Ethernet Rstp Port Status TCN Rstp Port StatisticsRstp STPQoS Terminology Quality of ServiceUnderstand QOS Frame.The following QCE types are supported QoS Control List ConfigurationQCL # QCE TypeTraffic Class QoS Control Entry ConfigurationType Value Port QoS Configuration User Priority Default ClassQueuing Mode Queue WeightedApplication Rules QCL Configuration WizardSet up Policy Rules Port in a QCL member, click the radio button Includes the folling fileds Object DescriptionQCL ID Frames that hit this QCE are set to match this specific QCLGames Set up Typical Network Application RulesAudio and Video Select the QCL ID to which these QCEs apply User DefinitionButtons Set up ToS Precedence Mapping Set up Vlan Tag Priority Mapping QoS Statistics Bandwidth Control Rate Storm Control ConfigurationFrame Type StatusAbout the Internet Group Management Protocol Igmp Snooping MulticastIgmp Snooping 133 0x12 Igmp Versions 10x17 „ Igmp Querier Idle MemberIgmp Snooping Igmp Snooping ConfigurationFlooding enabled Enabled Igmp QuerierFast Leave Igmp Port Related ConfigurationRouter Port Vlan ID of the entry Igmp Snooping StatusObject Description Multicast Address Table Overview of MAC-Based Authentication Ieee 802.1X Network Access ControlOverview of 802.1X Port-Based Authentication „ Device Roles Understanding Ieee 802.1X Port-Based Authentication„ Authentication Initiation and Message Exchange „ Ports in Authorized and Unauthorized States 10-2EAP message exchangeRadius Secret 10.2 802.1X System ConfigurationRadius IP Period ReauthenticationEnabled EAP Timeout10.3 802.1X and MAC-Based Authentication Port Configuration Max Clients Port StateRestart Last ID 10.4 802.1X Port StatusState Last Source10-6802.1X Statistics Port 1 page screenshot 10.5 802.1X and MAC-Based Authentication StatisticsDirection Name Ieee Name Description Eapol CountersPort- and MAC-based Radius Counters Direction Name Ieee NameDescription Port-based MAC-basedMAC-based „ Last Supplicant/Client InfoWindows Platform Radius Server Configuration 155 „ Configure Sample EAP-MD5 Authentication 10.7 802.1X Client Configuration157 158 Ingress Port Access Control ListsAccess Control List Configuration Logging ActionRate Limiter Port CopySwitch ACE ConfigurationDmac Filter „ MAC Parameters„ Vlan Parameters Smac FilterARP/ Rarp „ ARP ParametersIP Protocol Filter „ IP ParametersIP/Ethernet Length EthernetIP TTL „ TCP/UDP Parameters „ Icmp ParametersTCP ACK TCP FINTCP SYN TCP PSHEtherType Filter ACL Configuration wizard„ Ethernet Type Parameters 11-3Set up Policy Rules page screenshot Policy 5 for guest ports Internet access onlyPolicy ID Set up Port PoliciesEthernet Type Common ServersInstant Messaging MSN Messenger Google Talk Yahoo MessengerSnmp Traps NetBIOS Ping Request Ping ReplyOthers 173 Source IP Address Set up Source MAC and Source IP BindingBinding Enabled UDP DoS Fraggle Set up DoS Attack Detection RulesIcmp DoS Smurf DeathDeny Switch nPort n Policy n512K ACL Rate Limiter ConfigurationRate Limiter ID 16K 32K 64K 128KACL Ports Configuration 180 Address Table MAC Address Table ConfigurationAging Configuration Range 10-10000000 seconds Default 300 secondsStatic MAC Table Configuration MAC Table Columns MAC Address Table StatusDynamic MAC Table Navigating the MAC Table184 Secure DisableMAC Table Learning Auto186 Link Layer Discovery Protocol LldpTx Interval Lldp Configuration„ Lldp Parameters Tx Reinit „ 4.14.2.2 Lldp Port ConfigurationTx Delay Tx HoldSys Capa Port DescrSys Name Sys DescrLldp Neighbor „ Global Counters Lldp StatisticsLocal Counters Cable Status Cable DiagnosticsNetwork Diagnastics Ping Size PingDestination IP Address „ Ring topology „ Chain topology same as a disconnected ring Stacking SGSW-24040 / SGSW-24040R197 „ Replacing a Switch Switch IDs„ Assigning and Swapping Switch IDs „ Removing a Switch From the StackStack Redundancy „ General Switch ID Assignment RulesMaster Election Utilize all stack links in the ring Shortest Path ForwardingStack Configuration „ Stack List Master SwitchStack Information „ Stack Topology„ Master Forwarding Table 16-10Port State Overview page screenshot Stack Port State OvewviewStack Example „ Identify the Master Switch206 207 Logon to the Console Accessing the CLI„ Configure IP address Configure IP addressSubnet Mask Gateway Switch/ ip setup 192.168.1.100 255.255.255.0Telnet login Syntax System CommandCommand Groups System ConfigurationExample System RebootSystem Restore Default System Prompt Default SettingSystem Name System Sntp System PasswordSystem Firmware Load System Timezone217 Parameters IP ConfigurationSyntax IP Ping IP Setup220 Port State Port Management CommandPort Configuration Port Flow Control Port ModePort Maximum Frame Port Excessive Port PowerPort VeriPHY Port StatisticsPort Numbers Mirror SID Mirror ConfigurationMirror Port Mirror Mode Parameters portlist Port list Link Aggregation CommandAggregation Configuration Aggregation AddAggregation Lookup Aggregation DeleteAggregation Mode Lacp Configuration Lacp Key Lacp ModeLacp Status Lacp RoleLacp Statistics 236 Vlan Mode Vlan Configuration CommandVlan Configuration Tagged Allow tagged frames only Vlan Frame TypeAll Vlan Link Type Vlan Ingress FilterMan Set out layer Vlan tag ether type MAN Vlan Q-in-Q ModeVlan Ethernet Type Vlan Delete Vlan AddVlan Lookup Pvlan Isolate Pvlan ConfigurationRstp SysPrio Spanning Tree Protocol CommandRstp Configuration Rstp Age Rstp DelayRstp Version Rstp ModeNormal Rstp Default Setting Rstp Priority Rstp CostRstp P2P Rstp EdgeRstp Status Rstp mCheck Rstp StatisticsIgmp Mode Multicast Configuration CommandIgmp Configuration Igmp State Igmp Fast Leave Igmp QuerierIgmp Router Igmp Status Igmp FloodingIgmp Groups 256 QoS Classes Quality of Service CommandQoS Configuration QoS DefaultQoS QCL Port QoS Tag PriorityQceid Qclid QCL ID Default SettingQoS QCL Add Parameters QclidQoS QCL Lookup QoS QCL DeleteQoS Rate Limiter QoS ModeQoS Weight QoS Shaper QoS Multicast QoS UnicastQoS Broadcast Dotx1 Mode 802.1x Port Access Control CommandDot1x Configuration Dot1x Server Dot1x StatusDot1x Secret Dot1x AuthenticateDot1x Period Dot1x Re-authenticationDot1x Statistics Dot1x TimeoutParameters Portlist Dot1x ClientsDot1x Agetime Dot1x Holdtime ACL Action Access Control List CommandACL Configuration ACL Rate ACL PolicyACL Add ACL Delete ACL Lookup Mac Add MAC Address Table CommandMAC Configuration MAC Lookup MAC DeleteMAC Learning MAC Age TimeMAC Statistics MAC DumpMAC Flash Lldp Mode Lldp CommandLldp Configuration Lldp Interval Lldp Optional TLVLldp Hold Lldp DelayLldp Information Lldp ReinitLldp Statistics Stack Master Reelect Stack Management CommandStack List Stack SID Delect Stack SelectStack SID Swap Stack SID Asign Store-and-Forward LearningForwarding & Filtering If attached device is 100Base-TX port will set to Auto-Negotiation292 Switch does not power up Solution Link LED is not lit SolutionPerformance is bad Solution Why the Switch doesnt connect to the network Solution„ While IP Address be changed or forgotten admin password Stacking not functioning Solution10/100Mbps, 10/100Base-TX Switchs RJ-45 Pin AssignmentsRJ-45 Connector pin assignment Contact = Brown Straight Cable= Brown Straight Cable ARP ACEACL AggregationDoS DESDhcp DNSHttp DscpEthernet Type FTPImap IcmpIeee IgmpMAC Table IpmcLldp NFS NetBIOSMD5 MirroringPrivate Vlan PingPolicer POP3Samba QCLQoS RarpSntp SHASmtp SnmpToS TCPTelnet TftpUDP 308