Access Control List Command | Planet Technology WGSW-24040R specification

User’s Manual of WGSW-24040 / WGSW-24040R

SGSW-24040 / SGSW-24040R

6.9 Access Control List Command

ACL Configuration

Description:

Show ACL Configuration.

Syntax:

ACL Configuration [<port_list>]

Parameters:

<port_list>: Port list or 'all', default: All ports

Default Setting:

300

Example:

Set age time in 100 seconds

SWITCH/>dot1x agetime 100

ACL Action

Description:

Set or show the ACL port default action.

Syntax:

ACL Action [<port_list>] [permitdeny] [<rate_limiter>] [<port_copy>] [<logging>] [<shutdown>]

Parameters:

<port_list> : Port list or 'all', default: All ports

permit	: Permit forwarding (default)
deny	: Deny forwarding
<rate_limiter>: Rate limiter number (1-15) or 'disable'
<port_copy> : Port number for copy of frames or 'disable'
<logging>	: System logging of frames: loglog_disable
<shutdown>	: Shut down ingress port: shutshut_disable

Default Setting:

Action: Permit

272

Image 272

Planet Technology WGSW-24040R, SGSW-24040R user manual Access Control List Command, ACL Configuration, ACL Action

Contents

User’s Manual Trademarks DisclaimerFCC Warning CE Mark Warning Weee Warning Table of Conetnts 5.1 105 118132 140 159 181185 187 208 212 244 229237 265 251257 272 277282 287 290 293295 297 Packet Contents Product Description High Performance How to Use This Manual Product Features High-performance 5GbE Stacking interface ¾ Layer 2 Features¾ Physical Port 24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45 ¾ Multicast ¾ Security¾ Management ¾ Stacking Product Specification Hardware Specification Traffic classification based, Strict priority and WRR Switch Front Panel Hardware DescriptionGigabit TP interface Gigabit SFP slots Reset button About 1~3 secondStack ID Master LED LED Indications Off To indicate that the SFP port is link down 1000Base-SX/LX SFP interfaces Shared Port-21~Port-24Speed 1000Mbps Switch Rear Panel 5Rear panel of WGSW-24040 Cascade UP AC Power ReceptacleStack ports DC Power Connector 9SGSW-24040 / SGSW-24040R Stack Ports Install the Switch Desktop Installation Supply power to the Managed Switch Rack Mounting Installing the SFP transceiver 13Plug-in the SFP transceiver „ Remove the transceiver module „ Approved Planet SFP Transceivers„ Connect the fiber cable Page Connecting DC Power Supply WGSW-24040R / SGSW-24040R Power switch in the OFF position and the DC power is OFF Stack Installation SGSW-24040 / SGSW-24040R Connecting Stacking cable Management Stacking Stack ID Master LED 21Separated Stack connection Requirements This chapter covers the following topics Method Advantages Disadvantages Management Access OverviewAdministration Console Direct Access „ 115200 bps „ 8 data bits „ No parity „ 1 stop bit 4Web main screen of Managed Switch Web Management Virtual Terminal Protocols SNMP-Based Network ManagementProtocols Snmp Protocol Management Architecture WEB Configuration About Web-based Management „ Logging on the switch Http//192.168.0.100Page Main WEB Panel DisplayState RJ-45 Ports SFP Ports Stack Ports 5WGSW/SGSW Managed Switch Main Funcrions Menu Main Menu IP Configuration System System Information Page IP Configuration User Authentication Old PasswordNew Password Password Sntp Configuration WEB Firmware Upgrade Click System Web Firmware Upgrade Tftp Firmware Upgrade Upgrade buttonClick System -TFTP Firmware Upgrade Tftp Server IP 8TFTP Firmware upgrade pop-up message Configuration Save „ Configuration Download Configuration Upload „ Configuration UploadPage Factory Default System Reboot „ Example 1 Save Current Configuration setting 18Set Start-up screenshot „ Example 2 Downloading System Software from a Server 19Download system software screenshot „ Example 3 Downloading Configuration Settings from a Server „ Example 4 Saving or Restoring Configuration Settings Snmp System Configuration Simple Network Management ProtocolSnmp Overview Snmp Operations Mode VersionRead Community Write Community Snmp System Information Configuration Snmp Trap ConfigurationSystem Contact System Name Trap Mode Trap VersionTrap Community Trap Destination SNMPv3 Configuration SNMPv3 Accesses ConfigurationDelete Group Name SNMPv3 Communities Configuration Security ModelSecurity Level Read View Name SNMPv3 Groups Configuration Security Name SNMPv3 Users Configuration AuthenticationUser Name Protocol SNMPv3 Views Configuration Privacy PasswordPrivacy Protocol View Name OID Subtree „ Example Add a new SNMPv3 userView Type „ Example Add a new SNMPv3 Group 9SNMPv3 Users-NEW page screenshot 11SNMPv3 Groups-NEW page screenshot Port Configuration Port Management Power Control PortLink Flow Control Port Statistics Overview 2Port Statistics Overview page screenshot Detailed Port Statistics Receive Error Counters Receive Total and Transmit TotalReceive and Transmit Size Counters Receive and Transmit Queue Counters Tx Drops Port Mirroring ConfigurationTransmit Error Counters Mirror Port Configuration Port to mirror to „ Sgsw Stackable Switch 6Port Mirror Configuration page screenshot Link Aggregation 1Link AggregationPage Static Aggregation Configuration Static Aggregation Group ConfigurationHash Code Contributors Destination MAC Port Members LocalityGroup ID Lacp Configuration Lacp EnabledKey Role Lacp System Status Lacp Port Status Lacp Partner Port Lacp statistics Lacp TransmittedLacp Received Discarded Vlan Vlan Overview Ieee 802.1Q Vlan Ieee 802.1Q Standard 802.1Q Vlan Tags Port Vlan ID Vlan Classification ObjectDescription Vlan Mode Vlan Basic InformationSupported VLANs VLANs Vlan Learning Vlan Port Configuration Understand nomenclature of the Switch This is the logical port number for this row Pvid In-Q Mode Link TypeEther type Port Vlan ID Vlan ID Vlan Membership Configuration„ Adding Static Members to VLANs Vlan Index Private Vlan Configuration Overview„ Promiscuous ports „ Isolated ports Promiscuous Pvlan Port TypeIsolated Rapid Spanning Tree Protocol Bridge Protocol Data Units Port transitions from one state to another as follows Creating a Stable STP TopologySTP Port States Configurable Except by setting prioritySTP Parameters STP Operation Levels Below Maximum Age Timer Forward Delay TimerVariable Description Default Value Port Priority Default Spanning-Tree Configuration Feature Default Value Illustration of STP 110 Rstp System Configuration Forward DelaySystem Priority Max Age Rstp Bridge Status Path Cost Rstp Port ConfigurationRstp Enabled Point2Point PriorityEdge Port Type Link Type Ieee 802.1w-2001 Ethernet Rstp Port Status Rstp Port Statistics RstpSTP TCN QoS Terminology Quality of ServiceUnderstand QOS QoS Control List Configuration QCL #QCE Type Frame.The following QCE types are supported Traffic Class QoS Control Entry ConfigurationType Value Port QoS Configuration Default Class Queuing ModeQueue Weighted User Priority Application Rules QCL Configuration WizardSet up Policy Rules Includes the folling fileds Object Description QCL IDFrames that hit this QCE are set to match this specific QCL Port in a QCL member, click the radio button Games Set up Typical Network Application RulesAudio and Video Select the QCL ID to which these QCEs apply User DefinitionButtons Set up ToS Precedence Mapping Set up Vlan Tag Priority Mapping QoS Statistics Bandwidth Control Storm Control Configuration Frame TypeStatus Rate About the Internet Group Management Protocol Igmp Snooping MulticastIgmp Snooping 133 0x12 Igmp Versions 10x17 Idle Member „ Igmp Querier Igmp Snooping Configuration Flooding enabledEnabled Igmp Querier Igmp Snooping Fast Leave Igmp Port Related ConfigurationRouter Port Vlan ID of the entry Igmp Snooping StatusObject Description Multicast Address Table Overview of MAC-Based Authentication Ieee 802.1X Network Access ControlOverview of 802.1X Port-Based Authentication Understanding Ieee 802.1X Port-Based Authentication „ Device Roles „ Authentication Initiation and Message Exchange 10-2EAP message exchange „ Ports in Authorized and Unauthorized States Radius Secret 10.2 802.1X System ConfigurationRadius IP Reauthentication EnabledEAP Timeout Period 10.3 802.1X and MAC-Based Authentication Port Configuration Port State Max Clients Restart 10.4 802.1X Port Status StateLast Source Last ID 10.5 802.1X and MAC-Based Authentication Statistics 10-6802.1X Statistics Port 1 page screenshot Eapol Counters Direction Name Ieee Name Description Radius Counters Direction Name Ieee Name Description Port-basedMAC-based Port- and MAC-based „ Last Supplicant/Client Info MAC-based Windows Platform Radius Server Configuration 155 10.7 802.1X Client Configuration „ Configure Sample EAP-MD5 Authentication 157 158 Ingress Port Access Control ListsAccess Control List Configuration Action Rate LimiterPort Copy Logging ACE Configuration Switch „ MAC Parameters „ Vlan ParametersSmac Filter Dmac Filter „ ARP Parameters ARP/ Rarp „ IP Parameters IP/Ethernet LengthEthernet IP Protocol Filter IP TTL „ Icmp Parameters „ TCP/UDP Parameters TCP FIN TCP SYNTCP PSH TCP ACK EtherType Filter ACL Configuration wizard„ Ethernet Type Parameters Policy 5 for guest ports Internet access only 11-3Set up Policy Rules page screenshot Set up Port Policies Policy ID Common Servers Instant MessagingMSN Messenger Google Talk Yahoo Messenger Ethernet Type Snmp Traps NetBIOS Ping Request Ping ReplyOthers 173 Source IP Address Set up Source MAC and Source IP BindingBinding Enabled Set up DoS Attack Detection Rules UDP DoS Fraggle Death Icmp DoS Smurf Switch n Port nPolicy n Deny ACL Rate Limiter Configuration Rate Limiter ID16K 32K 64K 128K 512K ACL Ports Configuration 180 MAC Address Table Configuration Aging ConfigurationRange 10-10000000 seconds Default 300 seconds Address Table Static MAC Table Configuration MAC Address Table Status Dynamic MAC TableNavigating the MAC Table MAC Table Columns 184 Disable MAC Table LearningAuto Secure 186 Lldp Link Layer Discovery Protocol Tx Interval Lldp Configuration„ Lldp Parameters „ 4.14.2.2 Lldp Port Configuration Tx DelayTx Hold Tx Reinit Port Descr Sys NameSys Descr Sys Capa Lldp Neighbor Lldp Statistics „ Global Counters Local Counters Cable Status Cable DiagnosticsNetwork Diagnastics Ping Size PingDestination IP Address Stacking SGSW-24040 / SGSW-24040R „ Ring topology „ Chain topology same as a disconnected ring 197 Switch IDs „ Assigning and Swapping Switch IDs„ Removing a Switch From the Stack „ Replacing a Switch Stack Redundancy „ General Switch ID Assignment RulesMaster Election Shortest Path Forwarding Utilize all stack links in the ring Stack Configuration Master Switch Stack Information„ Stack Topology „ Stack List „ Master Forwarding Table Stack Port State Ovewview 16-10Port State Overview page screenshot „ Identify the Master Switch Stack Example 206 207 Accessing the CLI Logon to the Console Configure IP address „ Configure IP address Switch/ ip setup 192.168.1.100 255.255.255.0 Subnet Mask Gateway Telnet login System Command Command GroupsSystem Configuration Syntax Example System RebootSystem Restore Default System Prompt Default SettingSystem Name System Password System Sntp System Timezone System Firmware Load 217 Parameters IP ConfigurationSyntax IP Setup IP Ping 220 Port State Port Management CommandPort Configuration Port Mode Port Flow Control Port Maximum Frame Port Power Port Excessive Port Statistics Port VeriPHY Port Numbers Mirror SID Mirror ConfigurationMirror Port Mirror Mode Link Aggregation Command Aggregation ConfigurationAggregation Add Parameters portlist Port list Aggregation Delete Aggregation Lookup Aggregation Mode Lacp Configuration Lacp Mode Lacp Key Lacp Role Lacp Status Lacp Statistics 236 Vlan Mode Vlan Configuration CommandVlan Configuration Tagged Allow tagged frames only Vlan Frame TypeAll Vlan Ingress Filter Vlan Link Type Man Set out layer Vlan tag ether type MAN Vlan Q-in-Q ModeVlan Ethernet Type Vlan Add Vlan Delete Vlan Lookup Pvlan Configuration Pvlan Isolate Rstp SysPrio Spanning Tree Protocol CommandRstp Configuration Rstp Delay Rstp Age Rstp Version Rstp ModeNormal Rstp Default Setting Rstp Cost Rstp Priority Rstp Edge Rstp P2P Rstp Status Rstp Statistics Rstp mCheck Igmp Mode Multicast Configuration CommandIgmp Configuration Igmp State Igmp Querier Igmp Fast Leave Igmp Router Igmp Status Igmp FloodingIgmp Groups 256 Quality of Service Command QoS ConfigurationQoS Default QoS Classes QoS Tag Priority QoS QCL Port Qclid QCL ID Default Setting QoS QCL AddParameters Qclid Qceid QoS QCL Delete QoS QCL Lookup QoS Rate Limiter QoS ModeQoS Weight QoS Shaper QoS Unicast QoS Multicast QoS Broadcast Dotx1 Mode 802.1x Port Access Control CommandDot1x Configuration Dot1x Status Dot1x Server Dot1x Authenticate Dot1x Secret Dot1x Re-authentication Dot1x Period Dot1x Timeout Dot1x Statistics Parameters Portlist Dot1x ClientsDot1x Agetime Dot1x Holdtime ACL Action Access Control List CommandACL Configuration ACL Policy ACL Rate ACL Add ACL Delete ACL Lookup Mac Add MAC Address Table CommandMAC Configuration MAC Delete MAC Lookup MAC Age Time MAC Learning MAC Dump MAC Statistics MAC Flash Lldp Mode Lldp CommandLldp Configuration Lldp Optional TLV Lldp Interval Lldp Delay Lldp Hold Lldp Reinit Lldp Information Lldp Statistics Stack Master Reelect Stack Management CommandStack List Stack SID Delect Stack SelectStack SID Swap Stack SID Asign Store-and-Forward LearningForwarding & Filtering Auto-Negotiation If attached device is 100Base-TX port will set to 292 Link LED is not lit Solution Performance is bad SolutionWhy the Switch doesnt connect to the network Solution Switch does not power up Solution Stacking not functioning Solution „ While IP Address be changed or forgotten admin password 10/100Mbps, 10/100Base-TX Switchs RJ-45 Pin AssignmentsRJ-45 Connector pin assignment Contact = Brown Straight Cable= Brown Straight Cable ACE ACLAggregation ARP DES DhcpDNS DoS Dscp Ethernet TypeFTP Http Icmp IeeeIgmp Imap MAC Table IpmcLldp NetBIOS MD5Mirroring NFS Ping PolicerPOP3 Private Vlan QCL QoSRarp Samba SHA SmtpSnmp Sntp TCP TelnetTftp ToS UDP 308