SMC Networks TigerSwitch C, 4-109

A

UTHENTICATION

C

OMMANDS

4-109

dot1x system-auth-control

This command enables 802.1X port authentication globally on the switch.

Use the no form to restore the default.

Syntax

[no] system-auth-control

Default Setting

Disabled

dot1x max-req Sets the maximum number of times that

the switch retransmits an EAP request/

identity packet to the client before it

times out the authentication session

IC 4-110

dot1x port-control Sets dot1x mode for a port interface IC 4-111

dot1x

operation-mode

Allows single or multiple hosts on an

dot1x port

IC 4-112

dot1x re-authenticate Forces re-authentication on specific ports PE 4-113

dot1x

re-authentication

Enables re-authentication for all ports IC 4-113

dot1x timeout

quiet-period

Sets the time that a switch port waits after

the Max Request Count has been

exceeded before attempting to acquire a

new client

IC 4-114

dot1x timeout

re-authperiod

Sets the time period after which a

connected client must be

re-authenticated

IC 4-114

dot1x timeout

tx-period

Sets the time period during an

authentication session that the switch

waits before re-transmitting an EAP

packet

IC 4-115

show dot1x Shows all dot1x related information PE 4-115

Table 4-32 802.1X Port Authentication (Continued)

Command Function Mode Page

Contents

Main TigerSwitch 10/100 24-Port 10/100Mbps Stackable Managed Switch Management Guide Management Guide Page Page Page L W IMITED ARRANTY W IMITED ARRANTY ii iii ONTENTS 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 2 Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1 3 Configuring the Switch . . . . . . . . . . . . . . . . . . . . . . . . 3-1 iv v vi 4 Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . 4-1 vii viii ix x xi xii xiii xiv A Software Specifications . . . . . . . . . . . . . . . . . . . . . . . . .A-1 B Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 Page Page T xvii ABLES xviii Page F xx IGURES xxi xxii 1-1 NTRODUCTION Key Features 1-2 Description of Software Features F S 1-3 1-4 F S 1-5 1-6 D 1-7 System Defaults 1-8 D 1-9 Page NITIAL 2-1 ONFIGURATION Connecting to the Switch Configuration Options C 2-2 Required Connections S 2-3 C 2-4 Remote Connections O 2-5 Stack Operations Selecting the Stack Master Recovering from Stack Failure or Topology Change C 2-6 Basic Configuration Console Connection C 2-7 Setting Passwords C 2-8 Setting an IP Address Manual Configuration C 2-9 Dynamic Configuration C 2-10 Enabling SNMP Management Access C 2-11 Community Strings C 2-12 Trap Receivers Saving Configuration Settings S Managing System Files Page ONFIGURING THE 3-1 WITCH Using the Web Interface Page Navigating the Web Browser Interface S 3-4 Configuration Options Panel Display Main Menu Table 3-2 Main Menu S 3-6 M 3-7 S 3-8 M 3-9 S 3-10 C 3-11 Basic Configuration Displaying System Information Page C 3-13 Displaying Switch Hardware/Software Versions Page C 3-15 Displaying Bridge Extension Capabilities Page C 3-17 Setting the Switchs IP Address S 3-18 Manual Configuration C 3-19 Using DHCP/BOOTP S 3-20 C 3-21 Managing Firmware Page Page S 3-24 Saving or Restoring Configuration Settings C 3-25 Page C 3-27 S 3-28 Console Port Settings C 3-29 S 3-30 Telnet Settings C 3-31 S 3-32 C 3-33 Configuring Event Logging System Log Configuration S 3-34 C 3-35 Remote Log Configuration Page C 3-37 Page C 3-39 Sending Simple Mail Transfer Protocol Alerts Page C 3-41 Resetting the System S 3-42 Setting the System Clock Configuring SNTP C 3-43 S 3-44 Setting the Time Zone N Simple Network Management Protocol Setting Community Access Strings S 3-46 Specifying Trap Managers and Trap Types Page S 3-48 User Authentication Configuring User Accounts A 3-49 S 3-50 Configuring Local/Remote Logon Authentication A 3-51 S 3-52 Page S 3-54 CLI Specify all the required parameters to enable logon authentication. Configuring HTTPS A 3-55 S 3-56 Replacing the Default Secure-site Certificate A 3-57 Configuring the Secure Shell S 3-58 A 3-59 S 3-60 Generating the Host Key Pair A 3-61 S 3-62 Configuring the SSH Server Page S 3-64 Configuring Port Security A 3-65 S 3-66 Configuring 802.1X Port Authentication A 3-67 Page A 3-69 Configuring 802.1X Global Settings S 3-70 Configuring Port Settings for 802.1X A 3-71 S 3-72 A 3-73 Displaying 802.1X Statistics This switch can display statistics for dot1x protocol exchanges for any port. Table 3-5 802.1X Statistics S 3-74 A 3-75 Filtering Addresses for Management Access Page C L 3-77 Access Control Lists Configuring Access Control Lists S 3-78 Setting the ACL Name and Type Page Page C L 3-81 Configuring an Extended IP ACL S 3-82 C L 3-83 S 3-84 Configuring a MAC ACL Page Page Page Port Configuration C 3-89 Field Attributes (CLI) Basic Information: Configuration: S 3-90 Current Status: C 3-91 Configuring Interface Connections S 3-92 C 3-93 Creating Trunk Groups S 3-94 C } 3-95 Statically Configuring a Trunk Page C } ORT ONFIGURATION 3-97 Enabling LACP on Selected Ports S 3-98 C 3-99 Configuring LACP Parameters Dynamically Creating a Port Channel S 3-100 Page S 3-102 C 3-103 Displaying LACP Port Counters You can display statistics for LACP protocol messages. Figure 3-45 LACP - Port Counters Information S 3-104 CLI The following example displays LACP counters. Displaying LACP Settings and Status for the Local Side C 3-105 Table 3-7 LACP Internal Configuration Information (Continued) S 3-106 C 3-107 Displaying LACP Settings and Status for the Remote Side Table 3-8 LACP Neighbor Configuration Information S 3-108 C 3-109 Setting Broadcast Storm Thresholds Page C 3-111 Configuring Port Mirroring S 3-112 C 3-113 Configuring Rate Limits Rate Limit Granularity S 3-114 Rate Limit Configuration C 3-115 Showing Port Statistics S 3-116 Table 3-9 Port Statistics C 3-117 S 3-118 C 3-119 Page C ORT ONFIGURATION 3-121 CLI This example shows statistics for port 13. Address Table Settings Page S 3-124 Spanning Tree Algorithm Configuration S 3-126 x x T C A 3-127 Displaying Global Settings S 3-128 Page S CLI 3-130 This command displays global STA settings, followed by settings for each port . T C A 3-131 Configuring Global Settings S 3-132 Page Page T C A 3-135 Displaying Interface Settings x T x C A 3-137 S 3-138 T C A 3-139 Configuring Interface Settings S 3-140 T C A 3-141 VLAN Configuration 3-143 Assigning Ports to VLANs S 3-144 3-145 S 3-146 Forwarding Tagged/Untagged Frames 3-147 Enabling or Disabling GVRP (Global Setting) Displaying Basic VLAN Information S 3-148 Displaying Current VLANs Command Attributes (Web) 3-149 Command Attributes (CLI) S 3-150 Creating VLANs 3-151 S 3-152 Adding Static Members to VLANs (VLAN Index) 3-153 S 3-154 Adding Static Members to VLANs (Port Index) 3-155 S 3-156 Configuring VLAN Behavior for Interfaces 3-157 S 3-158 3-159 Private VLANs S 3-160 Displaying Current Private VLANs 3-161 Configuring Private VLANs S 3-162 3-163 Associating VLANs S 3-164 Displaying Private VLAN Interface Information 3-165 Configuring Private VLAN Interfaces S 3-166 3-167 S 3-168 Class of Service Configuration Layer 2 Queue Settings Setting the Default Priority for Interfaces C S 3-169 S 3-170 Mapping CoS Values to Egress Queues C S 3-171 S 3-172 Selecting the Queue Mode Page S 3-174 Layer 3/4 Priority Settings Mapping Layer 3/4 Priorities to CoS Values C S 3-175 Selecting IP Precedence/DSCP Priority Page C S 3-177 Mapping DSCP Priority S 3-178 C S 3-179 Mapping IP Port Priority Page C S 3-181 Mapping CoS Values to ACLs Page F 3-183 Multicast Filtering S 3-184 Layer 2 IGMP (Snooping and Query) Configuring IGMP Snooping and Query Parameters F 3-185 S 3-186 F 3-187 Displaying Interfaces Attached to a Multicast Router S 3-188 Specifying Static Interfaces for a Multicast Router F 3-189 Displaying Port Members of Multicast Services Page F 3-191 Assigning Ports to Multicast Services Page 4-1 4 I INE L OMMAND L I 4-2 Telnet Connection Page Entering Commands Page L I 4-6 Showing Commands Page L I 4-8 Understanding Command Modes Exec Commands C 4-9 Configuration Commands L I 4-10 C 4-11 Command Line Processing L I Command Groups The system commands can be broken down into the functional groups shown below Table 4-4 Command Groups G 4-13 Table 4-4 Command Groups (Continued) L I Line Commands Table 4-5 Line Commands C 4-15 line L I 4-16 login C 4-17 password L I 4-18 timeout login response C 4-19 exec-timeout L I 4-20 password-thresh C 4-21 silent-time L I 4-22 databits C 4-23 parity speed L I 4-24 stopbits C 4-25 disconnect show line Page C 4-27 General Commands enable L I 4-28 disable C 4-29 configure show history L I 4-30 reload C 4-31 end exit Page M C Device Designation Commands 4-33 System Management Commands Table 4-7 System Management Commands Table 4-8 Device Designation Commands L I 4-34 prompt hostname Page L I 4-36 username M C 4-37 enable password L I IP Filter Commands 4-38 M C 4-39 management L I 4-40 show management M C Web Server Commands 4-41 Table 4-12 Web Server Commands L I 4-42 ip http port ip http server M C 4-43 ip http secure-server L I 4-44 ip http secure-port M C 4-45 Telnet Server Commands ip telnet port L I 4-46 ip telnet server M C 4-47 Secure Shell Commands L I 4-48 M C 4-49 L I 4-50 ip ssh server M C 4-51 ip ssh timeout L I 4-52 ip ssh authentication-retries ip ssh server-key size M C 4-53 delete public-key ip ssh crypto host-key generate L I 4-54 ip ssh crypto zeroize M C 4-55 ip ssh save host-key L I 4-56 show ip ssh show ssh M C 4-57 show public-key Table 4-16 show ssh - display description (Continued) L I 4-58 M C 4-59 Event Logging Commands logging on L I 4-60 logging history M C 4-61 logging host L I 4-62 logging facility M C 4-63 logging trap L I 4-64 clear logging show logging M C 4-65 L I 4-66 show log M C 4-67 L I 4-68 SMTP Alert Commands logging sendmail host M C 4-69 logging sendmail level L I 4-70 logging sendmail source-email logging sendmail destination-email M C 4-71 logging sendmail show logging sendmail L I 4-72 Time Commands Table 4-22 Time Commands M C 4-73 sntp client L I 4-74 sntp server M C 4-75 sntp poll show sntp L I 4-76 clock timezone M C 4-77 calendar set L I System Status Commands 4-78 show calendar M C 4-79 light unit show startup-config Page M C ANAGEMENT YSTEM 4-81 L I 4-82 show running-config M C ANAGEMENT YSTEM 4-83 Page M C 4-85 show users L I 4-86 show version M C 4-87 Frame Size Commands jumbo frame Flash/File Commands C 4-89 copy L I 4-90 C LASH ILE 4-91 The following example shows how to copy the running configuration to a startup file. L I 4-92 delete dir C 4-93 L I 4-94 whichboot boot system Authentication Commands L I 4-96 Authentication Sequence authentication login C 4-97 authentication enable L I 4-98 C 4-99 RADIUS Client radius-server host L I 4-100 radius-server port C 4-101 radius-server key radius-server retransmit L I 4-102 radius-server timeout show radius-server C 4-103 TACACS+ Client L I 4-104 tacacs-server host tacacs-server port C 4-105 tacacs-server key show tacacs-server L I 4-106 Port Security Commands C 4-107 port security L I 4-108 802.1X Port Authentication C 4-109 dot1x system-auth-control [no] system-auth-control Disabled L I 4-110 dot1x default dot1x max-req C 4-111 dot1x port-control L I 4-112 dot1x operation-mode C 4-113 dot1x re-authenticate dot1x re-authentication L I 4-114 dot1x timeout quiet-period dot1x timeout re-authperiod C 4-115 dot1x timeout tx-period show dot1x L I 4-116 C 4-117 L I 4-118 C L Access Control List Commands L I IP ACLs 4-120 C L 4-121 access-list ip L I 4-122 permit, deny (Standard ACL) C L 4-123 permit, deny (Extended ACL) L I 4-124 C L 4-125 L I 4-126 show ip access-list ip access-group C L 4-127 show ip access-group L I 4-128 map access-list ip Page L I 4-130 MAC ACLs access-list mac C L 4-131 permit, deny (MAC ACL) L I 4-132 C L 4-133 show mac access-list mac access-group L I 4-134 show mac access-group map access-list mac C L 4-135 show map access-list mac L I 4-136 ACL Information show access-list C IST L ONTROL CCESS SNMP Commands snmp-server community 4-139 snmp-server contact Page 4-141 snmp-server host L I 4-142 snmp-server enable traps 4-143 show snmp L I 4-144 C 4-145 Interface Commands Table 4-40 Interface Commands L I 4-146 interface description 4-147 speed-duplex L I 4-148 negotiation 4-149 capabilities L I 4-150 flowcontrol 4-151 shutdown L I 4-152 switchport broadcast packet-rate 4-153 clear counters Page 4-155 show interfaces counters L I 4-156 4-157 show interfaces switchport L I 4-158 Table 4-41 Interfaces Switchport Statistics P Mirror Port Commands port monitor L I 4-160 show port monitor R Rate Limit Commands L I 4-162 rate-limit rate-limit granularity R C L 4-163 show rate-limit Link Aggregation Commands A C 4-165 L I 4-166 channel-group Page L I 4-168 lacp system-priority A C 4-169 L I 4-170 lacp admin-key (Ethernet Interface) A C 4-171 lacp admin-key (Port Channel) L I 4-172 lacp port-priority A C 4-173 show lacp L I 4-174 Table 4-45 show lacp counters - display description A C 4-175 Table 4-46 show lacp internal - display description L I 4-176 Table 4-46 show lacp internal - display description (Continued) A C 4-177 Table 4-47 show lacp neighbors - display description L Address Table Commands Table 4-48 show lacp sysid - display description Table 4-49 Address Table Commands T C 4-179 mac-address-table static Page T C 4-181 show mac-address-table L I 4-182 mac-address-table aging-time show mac-address-table aging-time Spanning Tree Commands Table 4-50 Spanning Tree Commands L I 4-184 spanning-tree T C 4-185 spanning-tree mode L I 4-186 spanning-tree forward-time T C 4-187 spanning-tree hello-time spanning-tree max-age L I 4-188 spanning-tree priority T C 4-189 spanning-tree pathcost method Page T C 4-191 spanning-tree port-priority L I 4-192 spanning-tree edge-port T C 4-193 spanning-tree portfast L I 4-194 spanning-tree link-type T C 4-195 spanning-tree protocol-migration L I 4-196 show spanning-tree T C REE PANNING 4-197 VLAN Commands Editing VLAN Groups vlan database 4-199 vlan L I 4-200 4-201 Configuring VLAN Interfaces interface vlan L I 4-202 switchport mode 4-203 switchport acceptable-frame-types L I 4-204 switchport ingress-filtering 4-205 switchport native vlan L I 4-206 switchport allowed vlan 4-207 switchport forbidden vlan L I 4-208 Displaying VLAN Information show vlan 4-209 Configuring Private VLANs L I 4-210 private-vlan 4-211 private vlan association Page 4-213 switchport mode private-vlan L I 4-214 switchport private-vlan host-association switchport private-vlan mapping 4-215 show vlan private-vlan L I 4-216 GVRP and Bridge Extension Commands Table 4-56 GVRP and Bridge Extension Commands GVRP C E B 4-217 L I 4-218 switchport gvrp GVRP C E B 4-219 L I 4-220 GVRP C E B 4-221 Priority Commands Table 4-57 Priority Commands Table 4-58 Priority Commands (Layer 2) C 4-223 queue mode L I 4-224 switchport priority default C 4-225 queue bandwidth L I 4-226 queue cos-map C 4-227 show queue mode show queue bandwidth L I 4-228 show queue cos-map C 4-229 Priority Commands (Layer 3 and 4) map ip port (Global Configuration) Table 4-60 Priority Commands (Layer 3 and 4) L I 4-230 map ip port (Interface Configuration) C 4-231 map ip precedence (Global Configuration) L I 4-232 map ip precedence (Interface Configuration) C 4-233 map ip dscp (Global Configuration) map ip dscp (Interface Configuration) L I 4-234 C 4-235 show map ip port L I 4-236 show map ip precedence C 4-237 show map ip dscp L I Multicast Filtering Commands Table 4-63 Multicast Filtering Commands Table 4-64 IGMP Snooping Commands F C 4-239 ip igmp snooping ip igmp snooping vlan static L I 4-240 ip igmp snooping version F C 4-241 show ip igmp snooping show mac-address-table multicast L I IGMP Query Commands (Layer 2) 4-242 F C 4-243 ip igmp snooping querier ip igmp snooping query-count L I 4-244 ip igmp snooping query-interval F C 4-245 ip igmp snooping query-max-response-time L I 4-246 ip igmp snooping router-port-expire-time F C 4-247 Static Multicast Routing Commands ip igmp snooping vlan mrouter L I 4-248 show ip igmp snooping mrouter C IP Interface Commands ip address L I 4-250 C 4-251 ip dhcp restart Page C 4-253 show ip redirects ping L I 4-254 PPENDIX OFTWARE A-1 PECIFICATIONS Software Features Management Features S A-3 Standards S A-4 Management Information Bases PPENDIX B-1 B T Problems Accessing the Management Interface ROUBLESHOOTING B-2 S L B-3 Using System Logs Page G Glossary-1 LOSSARY Glossary-2 Glossary-3 Glossary-4 Glossary-5 Glossary-6 Glossary-7 Glossary-8 NDEX Numerics A B C G H I J L Q R S T U V W