Manuals / Planet Technology / Computer Equipment / Switch

Planet Technology SGSW-24040R 802.1x Port Access Control Command, Dot1x Configuration, Dotx1 Mode

Models: SGSW-24040R WGSW-24040R

1 308

Download 308 pages 62.4 Kb

Page 265

User’s Manual of WGSW-24040 / WGSW-24040R

SGSW-24040 / SGSW-24040R

6.8 802.1x Port Access Control Command

Dot1x Configuration

Description:

Show 802.1X configuration.

Syntax:

Dot1x Configuration [<port_list>]

Parameters:

<port_list>: Port list or 'all', default: All ports

Example:

Show IEEE802.1x status of port1

SWITCH/>dot1x configuration 1
Mode	: Disabled
RADIUS Server	: 0.0.0.0
RADIUS Secret	:
Reauthentication: Disabled
Period	: 3600
Timeout	: 30
Age Period	: 300
Hold Time	: 10

Port	Admin State	Port State	Last Source	Last ID
------	------------------	-------------------------	-----------------	-------
1	Authorized	802.1X Disabled	-	-

Dotx1 Mode

Description:

Set or show the 802.1X mode for the switch.

Syntax:

Dot1x Mode [enabledisable]

Parameters:

enable : Enable 802.1X

265

Image 265

Planet Technology SGSW-24040R, WGSW-24040R user manual 802.1x Port Access Control Command, Dot1x Configuration, Dotx1 Mode

Contents

User’s Manual Disclaimer TrademarksFCC Warning CE Mark Warning Weee WarningTable of Conetnts 5.1 118 105132 140181 159185 187212 208237 229244 257 251265 277 272282 287293 290295 297Product Description Packet ContentsHigh Performance How to Use This Manual High-performance 5GbE Stacking interface ¾ Layer 2 Features Product Features¾ Physical Port 24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45¾ Security ¾ Multicast¾ Management ¾ StackingHardware Specification Product SpecificationTraffic classification based, Strict priority and WRR Hardware Description Switch Front PanelGigabit TP interface Gigabit SFP slotsAbout 1~3 second Reset buttonStack ID Master LEDLED Indications Speed 1000Mbps 1000Base-SX/LX SFP interfaces Shared Port-21~Port-24Off To indicate that the SFP port is link down 5Rear panel of WGSW-24040 Switch Rear PanelStack ports AC Power ReceptacleCascade UP 9SGSW-24040 / SGSW-24040R Stack Ports DC Power ConnectorDesktop Installation Install the SwitchRack Mounting Supply power to the Managed Switch13Plug-in the SFP transceiver Installing the SFP transceiver„ Connect the fiber cable „ Approved Planet SFP Transceivers„ Remove the transceiver module Page Power switch in the OFF position and the DC power is OFF Connecting DC Power Supply WGSW-24040R / SGSW-24040RSGSW-24040 / SGSW-24040R Stack InstallationManagement Stacking Connecting Stacking cableStack ID Master LED 21Separated Stack connection This chapter covers the following topics RequirementsAdministration Console Management Access OverviewMethod Advantages Disadvantages „ 115200 bps „ 8 data bits „ No parity „ 1 stop bit Direct AccessWeb Management 4Web main screen of Managed SwitchProtocols SNMP-Based Network ManagementVirtual Terminal Protocols Management Architecture Snmp ProtocolAbout Web-based Management WEB ConfigurationHttp//192.168.0.100 „ Logging on the switchPage Panel Display Main WEBState RJ-45 Ports SFP Ports Stack PortsMain Menu 5WGSW/SGSW Managed Switch Main Funcrions MenuSystem IP ConfigurationSystem Information Page IP Configuration Old Password User AuthenticationNew Password PasswordSntp Configuration Click System Web Firmware Upgrade WEB Firmware UpgradeUpgrade button Tftp Firmware UpgradeClick System -TFTP Firmware Upgrade Tftp Server IP8TFTP Firmware upgrade pop-up message „ Configuration Download Configuration Save„ Configuration Upload Configuration UploadPage Factory Default System Reboot 18Set Start-up screenshot „ Example 1 Save Current Configuration setting19Download system software screenshot „ Example 2 Downloading System Software from a Server„ Example 3 Downloading Configuration Settings from a Server „ Example 4 Saving or Restoring Configuration Settings Simple Network Management Protocol Snmp System ConfigurationSnmp Overview Snmp OperationsVersion ModeRead Community Write CommunitySnmp Trap Configuration Snmp System Information ConfigurationSystem Contact System NameTrap Version Trap ModeTrap Community Trap DestinationSNMPv3 Accesses Configuration SNMPv3 ConfigurationDelete Group NameSecurity Model SNMPv3 Communities ConfigurationSecurity Level Read View NameSecurity Name SNMPv3 Groups ConfigurationAuthentication SNMPv3 Users ConfigurationUser Name ProtocolPrivacy Password SNMPv3 Views ConfigurationPrivacy Protocol View NameView Type „ Example Add a new SNMPv3 userOID Subtree 9SNMPv3 Users-NEW page screenshot „ Example Add a new SNMPv3 Group11SNMPv3 Groups-NEW page screenshot Port Management Port ConfigurationPort Power ControlLink Flow Control2Port Statistics Overview page screenshot Port Statistics OverviewDetailed Port Statistics Receive Total and Transmit Total Receive Error CountersReceive and Transmit Size Counters Receive and Transmit Queue CountersTransmit Error Counters Port Mirroring ConfigurationTx Drops Port to mirror to Mirror Port Configuration6Port Mirror Configuration page screenshot „ Sgsw Stackable Switch1Link Aggregation Link AggregationPage Static Aggregation Group Configuration Static Aggregation ConfigurationHash Code Contributors Destination MACGroup ID LocalityPort Members Lacp Enabled Lacp ConfigurationKey RoleLacp Port Status Lacp System StatusPartner Port LacpLacp Transmitted Lacp statisticsLacp Received DiscardedVlan Overview VlanIeee 802.1Q Standard Ieee 802.1Q Vlan802.1Q Vlan Tags Port Vlan ID Vlan Classification Vlan Basic Information ObjectDescription Vlan ModeSupported VLANs VLANs Vlan LearningUnderstand nomenclature of the Switch Vlan Port ConfigurationPvid This is the logical port number for this rowLink Type In-Q ModeEther type Port Vlan ID„ Adding Static Members to VLANs Vlan Index Vlan Membership ConfigurationVlan ID Overview Private Vlan Configuration„ Promiscuous ports „ Isolated portsIsolated Pvlan Port TypePromiscuous Bridge Protocol Data Units Rapid Spanning Tree ProtocolSTP Port States Creating a Stable STP TopologyPort transitions from one state to another as follows Except by setting priority ConfigurableSTP Parameters STP Operation Levels BelowForward Delay Timer Maximum Age TimerVariable Description Default Value Port Priority Default Spanning-Tree Configuration Feature Default ValueIllustration of STP 110 Forward Delay Rstp System ConfigurationSystem Priority Max AgeRstp Bridge Status Rstp Enabled Rstp Port ConfigurationPath Cost Edge PriorityPoint2Point Port Type Link Type Ieee 802.1w-2001 Ethernet Rstp Port Status Rstp Rstp Port StatisticsSTP TCNUnderstand QOS Quality of ServiceQoS Terminology QCL # QoS Control List ConfigurationQCE Type Frame.The following QCE types are supportedType Value QoS Control Entry ConfigurationTraffic Class Port QoS Configuration Queuing Mode Default ClassQueue Weighted User PrioritySet up Policy Rules QCL Configuration WizardApplication Rules QCL ID Includes the folling fileds Object DescriptionFrames that hit this QCE are set to match this specific QCL Port in a QCL member, click the radio buttonAudio and Video Set up Typical Network Application RulesGames Buttons User DefinitionSelect the QCL ID to which these QCEs apply Set up ToS Precedence Mapping Set up Vlan Tag Priority Mapping QoS Statistics Bandwidth Control Frame Type Storm Control ConfigurationStatus RateIgmp Snooping MulticastAbout the Internet Group Management Protocol Igmp Snooping 133 0x17 Igmp Versions 10x12 „ Igmp Querier Idle MemberFlooding enabled Igmp Snooping ConfigurationEnabled Igmp Querier Igmp SnoopingRouter Port Igmp Port Related ConfigurationFast Leave Object Description Igmp Snooping StatusVlan ID of the entry Multicast Address Table Overview of 802.1X Port-Based Authentication Ieee 802.1X Network Access ControlOverview of MAC-Based Authentication „ Device Roles Understanding Ieee 802.1X Port-Based Authentication„ Authentication Initiation and Message Exchange „ Ports in Authorized and Unauthorized States 10-2EAP message exchangeRadius IP 10.2 802.1X System ConfigurationRadius Secret Enabled ReauthenticationEAP Timeout Period10.3 802.1X and MAC-Based Authentication Port Configuration Max Clients Port StateRestart State 10.4 802.1X Port StatusLast Source Last ID10-6802.1X Statistics Port 1 page screenshot 10.5 802.1X and MAC-Based Authentication StatisticsDirection Name Ieee Name Description Eapol CountersDescription Port-based Radius Counters Direction Name Ieee NameMAC-based Port- and MAC-basedMAC-based „ Last Supplicant/Client InfoWindows Platform Radius Server Configuration 155 „ Configure Sample EAP-MD5 Authentication 10.7 802.1X Client Configuration157 158 Access Control List Configuration Access Control ListsIngress Port Rate Limiter ActionPort Copy LoggingSwitch ACE Configuration„ Vlan Parameters „ MAC ParametersSmac Filter Dmac FilterARP/ Rarp „ ARP ParametersIP/Ethernet Length „ IP ParametersEthernet IP Protocol FilterIP TTL „ TCP/UDP Parameters „ Icmp ParametersTCP SYN TCP FINTCP PSH TCP ACK„ Ethernet Type Parameters ACL Configuration wizardEtherType Filter 11-3Set up Policy Rules page screenshot Policy 5 for guest ports Internet access onlyPolicy ID Set up Port PoliciesInstant Messaging Common ServersMSN Messenger Google Talk Yahoo Messenger Ethernet TypeOthers NetBIOS Ping Request Ping ReplySnmp Traps 173 Binding Enabled Set up Source MAC and Source IP BindingSource IP Address UDP DoS Fraggle Set up DoS Attack Detection RulesIcmp DoS Smurf DeathPort n Switch nPolicy n DenyRate Limiter ID ACL Rate Limiter Configuration16K 32K 64K 128K 512KACL Ports Configuration 180 Aging Configuration MAC Address Table ConfigurationRange 10-10000000 seconds Default 300 seconds Address TableStatic MAC Table Configuration Dynamic MAC Table MAC Address Table StatusNavigating the MAC Table MAC Table Columns184 MAC Table Learning DisableAuto Secure186 Link Layer Discovery Protocol Lldp„ Lldp Parameters Lldp ConfigurationTx Interval Tx Delay „ 4.14.2.2 Lldp Port ConfigurationTx Hold Tx ReinitSys Name Port DescrSys Descr Sys CapaLldp Neighbor „ Global Counters Lldp StatisticsLocal Counters Network Diagnastics Cable DiagnosticsCable Status Destination IP Address PingPing Size „ Ring topology „ Chain topology same as a disconnected ring Stacking SGSW-24040 / SGSW-24040R197 „ Assigning and Swapping Switch IDs Switch IDs„ Removing a Switch From the Stack „ Replacing a SwitchMaster Election „ General Switch ID Assignment RulesStack Redundancy Utilize all stack links in the ring Shortest Path ForwardingStack Configuration Stack Information Master Switch„ Stack Topology „ Stack List„ Master Forwarding Table 16-10Port State Overview page screenshot Stack Port State OvewviewStack Example „ Identify the Master Switch206 207 Logon to the Console Accessing the CLI„ Configure IP address Configure IP addressSubnet Mask Gateway Switch/ ip setup 192.168.1.100 255.255.255.0Telnet login Command Groups System CommandSystem Configuration SyntaxSystem Restore Default System RebootExample System Name Default SettingSystem Prompt System Sntp System PasswordSystem Firmware Load System Timezone217 Syntax IP ConfigurationParameters IP Ping IP Setup220 Port Configuration Port Management CommandPort State Port Flow Control Port ModePort Maximum Frame Port Excessive Port PowerPort VeriPHY Port StatisticsPort Numbers Mirror Port Mirror ConfigurationMirror SID Mirror Mode Aggregation Configuration Link Aggregation CommandAggregation Add Parameters portlist Port listAggregation Lookup Aggregation DeleteAggregation Mode Lacp Configuration Lacp Key Lacp ModeLacp Status Lacp RoleLacp Statistics 236 Vlan Configuration Vlan Configuration CommandVlan Mode All Vlan Frame TypeTagged Allow tagged frames only Vlan Link Type Vlan Ingress FilterVlan Ethernet Type Vlan Q-in-Q ModeMan Set out layer Vlan tag ether type MAN Vlan Delete Vlan AddVlan Lookup Pvlan Isolate Pvlan ConfigurationRstp Configuration Spanning Tree Protocol CommandRstp SysPrio Rstp Age Rstp DelayNormal Rstp Default Setting Rstp ModeRstp Version Rstp Priority Rstp CostRstp P2P Rstp EdgeRstp Status Rstp mCheck Rstp StatisticsIgmp Configuration Multicast Configuration CommandIgmp Mode Igmp State Igmp Fast Leave Igmp QuerierIgmp Router Igmp Groups Igmp FloodingIgmp Status 256 QoS Configuration Quality of Service CommandQoS Default QoS ClassesQoS QCL Port QoS Tag PriorityQoS QCL Add Qclid QCL ID Default SettingParameters Qclid QceidQoS QCL Lookup QoS QCL DeleteQoS Weight QoS ModeQoS Rate Limiter QoS Shaper QoS Multicast QoS UnicastQoS Broadcast Dot1x Configuration 802.1x Port Access Control CommandDotx1 Mode Dot1x Server Dot1x StatusDot1x Secret Dot1x AuthenticateDot1x Period Dot1x Re-authenticationDot1x Statistics Dot1x TimeoutDot1x Agetime Dot1x ClientsParameters Portlist Dot1x Holdtime ACL Configuration Access Control List CommandACL Action ACL Rate ACL PolicyACL Add ACL Delete ACL Lookup MAC Configuration MAC Address Table CommandMac Add MAC Lookup MAC DeleteMAC Learning MAC Age TimeMAC Statistics MAC DumpMAC Flash Lldp Configuration Lldp CommandLldp Mode Lldp Interval Lldp Optional TLVLldp Hold Lldp DelayLldp Information Lldp ReinitLldp Statistics Stack List Stack Management CommandStack Master Reelect Stack SID Swap Stack SelectStack SID Delect Stack SID Asign Forwarding & Filtering LearningStore-and-Forward If attached device is 100Base-TX port will set to Auto-Negotiation292 Performance is bad Solution Link LED is not lit SolutionWhy the Switch doesnt connect to the network Solution Switch does not power up Solution„ While IP Address be changed or forgotten admin password Stacking not functioning SolutionRJ-45 Connector pin assignment Contact Switchs RJ-45 Pin Assignments10/100Mbps, 10/100Base-TX = Brown Straight Cable Straight Cable= Brown ACL ACEAggregation ARPDhcp DESDNS DoSEthernet Type DscpFTP HttpIeee IcmpIgmp ImapLldp IpmcMAC Table MD5 NetBIOSMirroring NFSPolicer PingPOP3 Private VlanQoS QCLRarp SambaSmtp SHASnmp SntpTelnet TCPTftp ToSUDP 308