Manuals / Planet Technology / Computer Equipment / Switch

Planet Technology WGSW-24040R SNMPv3 Communities Configuration, Security Model, Security Level

Models: SGSW-24040R WGSW-24040R

1 308

Download 308 pages 62.4 Kb

Page 70

			User’s Manual of WGSW-24040 / WGSW-24040R
			SGSW-24040 / SGSW-24040R

		to 126.

•	Security Model	Indicates the security model that this entry should belong to. Possible security
		models are:
		• any: Accepted any security model (v1v2cusm).
		•	v1: Reserved for SNMPv1.
		•	v2c: Reserved for SNMPv2c.
		• usm: User-based Security Model (USM)

•	Security Level	Indicates the security model that this entry should belong to. Possible security
		models are:
		• NoAuth, NoPriv: None authentication and none privacy.
		• Auth, NoPriv: Authentication and none privacy.
		• Auth, Priv: Authentication and privacy.

•	Read View Name	The name of the MIB view defining the MIB objects for which this request may
		request the current values. The allowed string length is 1 to 32, and the allowed
		content is the ASCII characters from 33 to 126.

•	Write View Name	The name of the MIB view defining the MIB objects for which this request may
		potentially SET new values. The allowed string length is 1 to 32, and the allowed
		content is the ASCII characters from 33 to 126.

4.3.5.2 SNMPv3 Communities Configuration

Configure SNMPv3 communities table on this page. The entry index key is Community.

The SNMPv3 Communities Configuration screen in Figure 4-3-5appears.

Figure 4-3-5SNMPv3 Communities Configuration page screenshot

The page includes the following fields:

ObjectDescription

• Delete	Check to delete the entry. It will be deleted during the next save.

70

Image 70

Planet Technology WGSW-24040R user manual SNMPv3 Communities Configuration, Security Model, Security Level, Read View Name

Contents

User’s Manual FCC Warning CE Mark Warning TrademarksDisclaimer Weee WarningTable of Conetnts 5.1 132 105118 140185 159181 187208 212237 229244 257 251265 282 272277 287295 290293 297Packet Contents Product DescriptionHigh Performance How to Use This Manual ¾ Physical Port Product FeaturesHigh-performance 5GbE Stacking interface ¾ Layer 2 Features 24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45¾ Management ¾ Multicast¾ Security ¾ StackingProduct Specification Hardware SpecificationTraffic classification based, Strict priority and WRR Gigabit TP interface Switch Front PanelHardware Description Gigabit SFP slotsStack ID Reset buttonAbout 1~3 second Master LEDLED Indications Speed 1000Mbps 1000Base-SX/LX SFP interfaces Shared Port-21~Port-24Off To indicate that the SFP port is link down Switch Rear Panel 5Rear panel of WGSW-24040Stack ports AC Power ReceptacleCascade UP DC Power Connector 9SGSW-24040 / SGSW-24040R Stack PortsInstall the Switch Desktop InstallationSupply power to the Managed Switch Rack MountingInstalling the SFP transceiver 13Plug-in the SFP transceiver„ Connect the fiber cable „ Approved Planet SFP Transceivers„ Remove the transceiver module Page Connecting DC Power Supply WGSW-24040R / SGSW-24040R Power switch in the OFF position and the DC power is OFFStack Installation SGSW-24040 / SGSW-24040RConnecting Stacking cable Management StackingStack ID Master LED 21Separated Stack connection Requirements This chapter covers the following topicsAdministration Console Management Access OverviewMethod Advantages Disadvantages Direct Access „ 115200 bps „ 8 data bits „ No parity „ 1 stop bit4Web main screen of Managed Switch Web ManagementProtocols SNMP-Based Network ManagementVirtual Terminal Protocols Snmp Protocol Management ArchitectureWEB Configuration About Web-based Management„ Logging on the switch Http//192.168.0.100Page State Main WEBPanel Display RJ-45 Ports SFP Ports Stack Ports5WGSW/SGSW Managed Switch Main Funcrions Menu Main MenuIP Configuration SystemSystem Information Page IP Configuration New Password User AuthenticationOld Password PasswordSntp Configuration WEB Firmware Upgrade Click System Web Firmware UpgradeClick System -TFTP Firmware Upgrade Tftp Firmware UpgradeUpgrade button Tftp Server IP8TFTP Firmware upgrade pop-up message Configuration Save „ Configuration DownloadConfiguration Upload „ Configuration UploadPage Factory Default System Reboot „ Example 1 Save Current Configuration setting 18Set Start-up screenshot„ Example 2 Downloading System Software from a Server 19Download system software screenshot„ Example 3 Downloading Configuration Settings from a Server „ Example 4 Saving or Restoring Configuration Settings Snmp Overview Snmp System ConfigurationSimple Network Management Protocol Snmp OperationsRead Community ModeVersion Write CommunitySystem Contact Snmp System Information ConfigurationSnmp Trap Configuration System NameTrap Community Trap ModeTrap Version Trap DestinationDelete SNMPv3 ConfigurationSNMPv3 Accesses Configuration Group NameSecurity Level SNMPv3 Communities ConfigurationSecurity Model Read View NameSNMPv3 Groups Configuration Security NameUser Name SNMPv3 Users ConfigurationAuthentication ProtocolPrivacy Protocol SNMPv3 Views ConfigurationPrivacy Password View NameView Type „ Example Add a new SNMPv3 userOID Subtree „ Example Add a new SNMPv3 Group 9SNMPv3 Users-NEW page screenshot11SNMPv3 Groups-NEW page screenshot Port Configuration Port ManagementLink Power ControlPort Flow ControlPort Statistics Overview 2Port Statistics Overview page screenshotDetailed Port Statistics Receive and Transmit Size Counters Receive Error CountersReceive Total and Transmit Total Receive and Transmit Queue CountersTransmit Error Counters Port Mirroring ConfigurationTx Drops Mirror Port Configuration Port to mirror to„ Sgsw Stackable Switch 6Port Mirror Configuration page screenshotLink Aggregation 1Link AggregationPage Hash Code Contributors Static Aggregation ConfigurationStatic Aggregation Group Configuration Destination MACGroup ID LocalityPort Members Key Lacp ConfigurationLacp Enabled RoleLacp System Status Lacp Port StatusLacp Partner PortLacp Received Lacp statisticsLacp Transmitted DiscardedVlan Vlan OverviewIeee 802.1Q Vlan Ieee 802.1Q Standard802.1Q Vlan Tags Port Vlan ID Vlan Classification Supported VLANs ObjectDescription Vlan ModeVlan Basic Information VLANs Vlan LearningVlan Port Configuration Understand nomenclature of the SwitchThis is the logical port number for this row PvidEther type In-Q ModeLink Type Port Vlan ID„ Adding Static Members to VLANs Vlan Index Vlan Membership ConfigurationVlan ID „ Promiscuous ports Private Vlan ConfigurationOverview „ Isolated portsIsolated Pvlan Port TypePromiscuous Rapid Spanning Tree Protocol Bridge Protocol Data UnitsSTP Port States Creating a Stable STP TopologyPort transitions from one state to another as follows STP Parameters STP Operation Levels ConfigurableExcept by setting priority BelowVariable Description Default Value Port Priority Maximum Age TimerForward Delay Timer Default Spanning-Tree Configuration Feature Default ValueIllustration of STP 110 System Priority Rstp System ConfigurationForward Delay Max AgeRstp Bridge Status Rstp Enabled Rstp Port ConfigurationPath Cost Edge PriorityPoint2Point Port Type Link Type Ieee 802.1w-2001 Ethernet Rstp Port Status STP Rstp Port StatisticsRstp TCNUnderstand QOS Quality of ServiceQoS Terminology QCE Type QoS Control List ConfigurationQCL # Frame.The following QCE types are supportedType Value QoS Control Entry ConfigurationTraffic Class Port QoS Configuration Queue Weighted Default ClassQueuing Mode User PrioritySet up Policy Rules QCL Configuration WizardApplication Rules Frames that hit this QCE are set to match this specific QCL Includes the folling fileds Object DescriptionQCL ID Port in a QCL member, click the radio buttonAudio and Video Set up Typical Network Application RulesGames Buttons User DefinitionSelect the QCL ID to which these QCEs apply Set up ToS Precedence Mapping Set up Vlan Tag Priority Mapping QoS Statistics Bandwidth Control Status Storm Control ConfigurationFrame Type RateIgmp Snooping MulticastAbout the Internet Group Management Protocol Igmp Snooping 133 0x17 Igmp Versions 10x12 Idle Member „ Igmp QuerierEnabled Igmp Querier Igmp Snooping ConfigurationFlooding enabled Igmp SnoopingRouter Port Igmp Port Related ConfigurationFast Leave Object Description Igmp Snooping StatusVlan ID of the entry Multicast Address Table Overview of 802.1X Port-Based Authentication Ieee 802.1X Network Access ControlOverview of MAC-Based Authentication Understanding Ieee 802.1X Port-Based Authentication „ Device Roles„ Authentication Initiation and Message Exchange 10-2EAP message exchange „ Ports in Authorized and Unauthorized StatesRadius IP 10.2 802.1X System ConfigurationRadius Secret EAP Timeout ReauthenticationEnabled Period10.3 802.1X and MAC-Based Authentication Port Configuration Port State Max ClientsRestart Last Source 10.4 802.1X Port StatusState Last ID10.5 802.1X and MAC-Based Authentication Statistics 10-6802.1X Statistics Port 1 page screenshotEapol Counters Direction Name Ieee Name DescriptionMAC-based Radius Counters Direction Name Ieee NameDescription Port-based Port- and MAC-based„ Last Supplicant/Client Info MAC-basedWindows Platform Radius Server Configuration 155 10.7 802.1X Client Configuration „ Configure Sample EAP-MD5 Authentication157 158 Access Control List Configuration Access Control ListsIngress Port Port Copy ActionRate Limiter LoggingACE Configuration SwitchSmac Filter „ MAC Parameters„ Vlan Parameters Dmac Filter„ ARP Parameters ARP/ RarpEthernet „ IP ParametersIP/Ethernet Length IP Protocol FilterIP TTL „ Icmp Parameters „ TCP/UDP ParametersTCP PSH TCP FINTCP SYN TCP ACK„ Ethernet Type Parameters ACL Configuration wizardEtherType Filter Policy 5 for guest ports Internet access only 11-3Set up Policy Rules page screenshotSet up Port Policies Policy IDMSN Messenger Google Talk Yahoo Messenger Common ServersInstant Messaging Ethernet TypeOthers NetBIOS Ping Request Ping ReplySnmp Traps 173 Binding Enabled Set up Source MAC and Source IP BindingSource IP Address Set up DoS Attack Detection Rules UDP DoS FraggleDeath Icmp DoS SmurfPolicy n Switch nPort n Deny16K 32K 64K 128K ACL Rate Limiter ConfigurationRate Limiter ID 512KACL Ports Configuration 180 Range 10-10000000 seconds Default 300 seconds MAC Address Table ConfigurationAging Configuration Address TableStatic MAC Table Configuration Navigating the MAC Table MAC Address Table StatusDynamic MAC Table MAC Table Columns184 Auto DisableMAC Table Learning Secure186 Lldp Link Layer Discovery Protocol„ Lldp Parameters Lldp ConfigurationTx Interval Tx Hold „ 4.14.2.2 Lldp Port ConfigurationTx Delay Tx ReinitSys Descr Port DescrSys Name Sys CapaLldp Neighbor Lldp Statistics „ Global CountersLocal Counters Network Diagnastics Cable DiagnosticsCable Status Destination IP Address PingPing Size Stacking SGSW-24040 / SGSW-24040R „ Ring topology „ Chain topology same as a disconnected ring197 „ Removing a Switch From the Stack Switch IDs„ Assigning and Swapping Switch IDs „ Replacing a SwitchMaster Election „ General Switch ID Assignment RulesStack Redundancy Shortest Path Forwarding Utilize all stack links in the ringStack Configuration „ Stack Topology Master SwitchStack Information „ Stack List„ Master Forwarding Table Stack Port State Ovewview 16-10Port State Overview page screenshot„ Identify the Master Switch Stack Example206 207 Accessing the CLI Logon to the ConsoleConfigure IP address „ Configure IP addressSwitch/ ip setup 192.168.1.100 255.255.255.0 Subnet Mask GatewayTelnet login System Configuration System CommandCommand Groups SyntaxSystem Restore Default System RebootExample System Name Default SettingSystem Prompt System Password System SntpSystem Timezone System Firmware Load217 Syntax IP ConfigurationParameters IP Setup IP Ping220 Port Configuration Port Management CommandPort State Port Mode Port Flow ControlPort Maximum Frame Port Power Port ExcessivePort Statistics Port VeriPHYPort Numbers Mirror Port Mirror ConfigurationMirror SID Mirror Mode Aggregation Add Link Aggregation CommandAggregation Configuration Parameters portlist Port listAggregation Delete Aggregation LookupAggregation Mode Lacp Configuration Lacp Mode Lacp KeyLacp Role Lacp StatusLacp Statistics 236 Vlan Configuration Vlan Configuration CommandVlan Mode All Vlan Frame TypeTagged Allow tagged frames only Vlan Ingress Filter Vlan Link TypeVlan Ethernet Type Vlan Q-in-Q ModeMan Set out layer Vlan tag ether type MAN Vlan Add Vlan DeleteVlan Lookup Pvlan Configuration Pvlan IsolateRstp Configuration Spanning Tree Protocol CommandRstp SysPrio Rstp Delay Rstp AgeNormal Rstp Default Setting Rstp ModeRstp Version Rstp Cost Rstp PriorityRstp Edge Rstp P2PRstp Status Rstp Statistics Rstp mCheckIgmp Configuration Multicast Configuration CommandIgmp Mode Igmp State Igmp Querier Igmp Fast LeaveIgmp Router Igmp Groups Igmp FloodingIgmp Status 256 QoS Default Quality of Service CommandQoS Configuration QoS ClassesQoS Tag Priority QoS QCL PortParameters Qclid Qclid QCL ID Default SettingQoS QCL Add QceidQoS QCL Delete QoS QCL LookupQoS Weight QoS ModeQoS Rate Limiter QoS Shaper QoS Unicast QoS MulticastQoS Broadcast Dot1x Configuration 802.1x Port Access Control CommandDotx1 Mode Dot1x Status Dot1x ServerDot1x Authenticate Dot1x SecretDot1x Re-authentication Dot1x PeriodDot1x Timeout Dot1x StatisticsDot1x Agetime Dot1x ClientsParameters Portlist Dot1x Holdtime ACL Configuration Access Control List CommandACL Action ACL Policy ACL RateACL Add ACL Delete ACL Lookup MAC Configuration MAC Address Table CommandMac Add MAC Delete MAC LookupMAC Age Time MAC LearningMAC Dump MAC StatisticsMAC Flash Lldp Configuration Lldp CommandLldp Mode Lldp Optional TLV Lldp IntervalLldp Delay Lldp HoldLldp Reinit Lldp InformationLldp Statistics Stack List Stack Management CommandStack Master Reelect Stack SID Swap Stack SelectStack SID Delect Stack SID Asign Forwarding & Filtering LearningStore-and-Forward Auto-Negotiation If attached device is 100Base-TX port will set to292 Why the Switch doesnt connect to the network Solution Link LED is not lit SolutionPerformance is bad Solution Switch does not power up SolutionStacking not functioning Solution „ While IP Address be changed or forgotten admin passwordRJ-45 Connector pin assignment Contact Switchs RJ-45 Pin Assignments10/100Mbps, 10/100Base-TX = Brown Straight Cable Straight Cable= Brown Aggregation ACEACL ARPDNS DESDhcp DoSFTP DscpEthernet Type HttpIgmp IcmpIeee ImapLldp IpmcMAC Table Mirroring NetBIOSMD5 NFSPOP3 PingPolicer Private VlanRarp QCLQoS SambaSnmp SHASmtp SntpTftp TCPTelnet ToSUDP 308