Manuals / Brands / Computer Equipment / Switch / ZyXEL Communications / Computer Equipment / Switch

ZyXEL Communications ES-4124 manual 152

1 466

Download 466 pages, 11.75 Mb

Chapter 17 Port Security

152
152	ES-4124 User’s Guide

Contents

User’s Guide www.zyxel.com Page About This User's Guide Document Conventions Page Safety Warnings Page Page Contents Overview Page Table of Contents Page Page Page Page Page Page Page Page Page Page Page Page Part VII: Appendices and Index List of Figures Page Page Page Page Page List of Tables Page Page Page Page Page Getting to Know Your Switch 1.1 Introduction 1.1.2 Bridging Example 1.1.3 High Performance Switching Example 1.2 Ways to Manage the Switch 1.3Good Habits for Managing the Switch Hardware Installation and Connection 2.1 Freestanding Installation 2.2Mounting the Switch on a Rack 2.2.3Mounting the Switch on a Rack Page Hardware Overview 3.1 Panel Connections 3.1.1 Console Port 3.1.2 Ethernet Ports 3.1.3Mini-GBICSlots Page 3.2 Rear Panel 3.3 LEDs Page Page Page The Web Configurator 4.1 Introduction 4.2System Login 4.3The Status Screen Page Page Page Page 4.4 Saving Your Configuration 4.5Switch Lockout 4.6Resetting the Switch 4.7 Logging Out of the Web Configurator 4.8 Help Page Initial Setup Example 5.1 Overview 5.1.2Configuring DHCP Server Settings 5.1.3 Creating a VLAN 5.1.4Setting Port VID 5.1.5 Enabling RIP Page System Status and Port Statistics 6.1 Overview 6.2 Port Status Summary 6.2.1 Status: Port Details Page Page Page Page Basic Setting 7.1 Overview 7.2 System Information Page 7.3 General Setup Page 7.4 Introduction to VLANs 7.5Switch Setup Screen Page 7.6 IP Setup Page 7.7 Port Setup Page Page Page Page Page VLAN 8.1 Introduction to IEEE 802.1Q Tagged VLANs 8.2 Automatic VLAN Registration 8.3 Port VLAN Trunking 8.4 Select the VLAN Type 8.5 Static VLAN 8.5.1 Static VLAN Status 8.5.2 Static VLAN Details 8.5.3 Configure a Static VLAN 8.5.4 Configure VLAN Port Settings Page 8.6 Subnet Based VLANs 8.7 Configuring Subnet Based VLAN 8.8 Protocol Based VLANs 8.9 Configuring Protocol Based VLAN 8.10 Create an IP-basedVLAN Example 8.11Port-basedVLAN Setup 8.11.1 Configure a Port-basedVLAN Page Page Static MAC Forward Setup 9.1 Overview 9.2 Configuring Static MAC Forwarding Page Filtering 10.1 Configure a Filtering Rule Page Spanning Tree Protocol 11.1 STP/RSTP Overview 11.1.2 How STP Works 11.1.3 STP Port States 11.1.4 Multiple RSTP 11.1.5 Multiple STP Page 11.2 Spanning Tree Protocol Status Screen 11.3 Spanning Tree Configuration 11.4 Configure Rapid Spanning Tree Protocol Page 11.5 Rapid Spanning Tree Protocol Status 11.6 Configure Multiple Rapid Spanning Tree Protocol Page 11.7 Multiple Rapid Spanning Tree Protocol Status 11.8 Configure Multiple Spanning Tree Protocol Page Page 11.9 Multiple Spanning Tree Protocol Status Page Page Page Bandwidth Control 12.1 Bandwidth Control Overview 12.2 Bandwidth Control Setup Page Broadcast Storm Control 13.1 Broadcast Storm Control Setup Page Mirroring 14.1 Port Mirroring Setup Page Link Aggregation 15.1 Link Aggregation Overview 15.2Dynamic Link Aggregation 15.3 Link Aggregation Status 15.4Link Aggregation Setting 15.5 Link Aggregation Control Protocol Page 15.6 Static Trunking Example Page Page Port Authentication 16.1 Port Authentication Overview 16.1.2 MAC Authentication 16.2 Port Authentication Configuration 16.2.2 Activate MAC Authentication Page Page Port Security 17.1 About Port Security 17.2 Port Security Setup Page Page Page Classifier 18.1 About the Classifier and QoS 18.2Configuring the Classifier Page Page 18.3 Viewing and Editing Classifier Configuration 18.4 Classifier Example Page Policy Rule 19.1 Policy Rules Overview 19.2 Configuring Policy Rules Page 19.3 Viewing and Editing Policy Configuration 19.4 Policy Example Page Queuing Method 20.1 Queuing Method Overview 20.2 Configuring Queuing Page Page VLAN Stacking 21.1 VLAN Stacking Overview 21.2 VLAN Stacking Port Roles 21.3 VLAN Tag Format 21.4 Configuring VLAN Stacking Page Page Multicast 22.1 Multicast Overview 22.2 Multicast Status 22.3 Multicast Setting Page 22.4 IGMP Snooping VLAN Page 22.5 IGMP Filtering Profile 22.6 MVR Overview 22.7 General MVR Configuration Page 22.8 MVR Group Configuration 22.8.1 MVR Configuration Example Page Page Page Authentication & Accounting 23.1 Authentication, Authorization and Accounting 23.2 Authentication and Accounting Screens Page 23.2.2 TACACS+ Server Setup Page 23.2.3 Authentication and Accounting Setup Page Page 23.2.4 Vendor Specific Attribute 23.3 Supported RADIUS Attributes 23.3.1 Attributes Used for Authentication 23.3.2 Attributes Used for Accounting Page Page Page IP Source Guard 24.1 IP Source Guard Overview Page 24.1.2ARP Inspection Overview Page 24.2 IP Source Guard 24.3 IP Source Guard Static Binding Page 24.4 DHCP Snooping Page Page 24.5 DHCP Snooping Configure 24.5.1 DHCP Snooping Port Configure Page 24.5.2 DHCP Snooping VLAN Configure 24.6 ARP Inspection Status 24.6.2 ARP Inspection Log Status Page 24.7 ARP Inspection Configure 24.7.1 ARP Inspection Port Configure 24.7.2 ARP Inspection VLAN Configure Page Loop Guard 25.1 Loop Guard Overview Page 25.2Loop Guard Setup Page Page Page Static Route 26.1 Configuring Static Routing Page RIP 27.1 RIP Overview 27.2 Configuring RIP Page OSPF 28.1 OSPF Overview 28.1.2 How OSPF Works 28.1.3 Interfaces and Virtual Links 28.1.4 OSPF and Router Elections 28.2OSPF Status Page 28.3 OSPF Configuration Page 28.4 Configure OSPF Areas 28.5 Configuring OSPF Interfaces Page 28.6 OSPF Virtual-Links Page Page IGMP 29.1IGMP Overview 29.1.1 How IGMP Works 29.2 Port-basedIGMP 29.3 Configuring IGMP Page DVMRP 30.1 DVMRP Overview 30.2 How DVMRP Works 30.3 Configuring DVMRP 30.3.1 DVMRP Configuration Error Messages 30.4 Default DVMRP Timer Values IP Multicast 31.1 IP Multicast Overview 31.2 Configuring Multicast Page Differentiated Services 32.1 DiffServ Overview 32.2 Two Rate Three Color Marker Traffic Policing 32.2.1 TRTCM - Color-blindMode 32.2.2 TRTCM - Color-awareMode 32.3 Activating DiffServ Page 32.4 DSCP-to-IEEE802.1p Priority Settings Page Page DHCP 33.1 DHCP Overview 33.2 DHCP Status 33.3 DHCP Server Status Detail 33.4 DHCP Relay 33.4.2 Configuring DHCP Global Relay 33.4.3 Global DHCP Relay Configuration Example 33.5 Configuring DHCP VLAN Settings Page 33.5.1 Example: DHCP Relay for Two VLANs VRRP 34.1 VRRP Overview 34.2 VRRP Status 34.3 VRRP Configuration 34.3.2 VRRP Parameters 34.3.3 Configuring VRRP Parameters 34.4 VRRP Configuration Examples Page 34.4.2 Two Subnets Example Page Page Page Page Maintenance 35.1 The Maintenance Screen 35.2 Load Factory Default 35.3Save Configuration 35.4 Reboot System 35.5 Firmware Upgrade 35.6 Restore a Configuration File 35.7 Backup a Configuration File 35.8 FTP Command Line 35.8.3GUI-basedFTP Clients 35.8.4 FTP Restrictions Access Control 36.1 Access Control Overview 36.2 The Access Control Main Screen 36.3 About SNMP 36.3.1 SNMP v3 and Security 36.3.2 Supported MIBs 36.3.3SNMP Traps Page Page 36.3.4 Configuring SNMP Page 36.3.5 Configuring SNMP Trap Group 36.3.6 Setting Up Login Accounts Page 36.4 SSH Overview 36.5 How SSH works 36.6SSH Implementation on the Switch 36.7 Introduction to HTTPS 36.8HTTPS Example 36.8.2 Netscape Navigator Warning Messages 36.8.3 The Main Screen 36.9 Service Port Access Control 36.10 Remote Management Page Page Diagnostic 37.1 Diagnostic Page Syslog 38.1 Syslog Overview 38.2 Syslog Setup 38.3 Syslog Server Setup Page Page Cluster Management 39.1 Clustering Management Status Overview 39.2 Cluster Management Status 39.2.1 Cluster Member Switch Management 39.3 Clustering Management Configuration Page Page MAC Table 40.1 MAC Table Overview 40.2 Viewing the MAC Table IP Table 41.1 IP Table Overview 41.2 Viewing the IP Table ARP Table 42.1 ARP Table Overview 42.2 Viewing the ARP Table Page Routing Table 43.1 Overview 43.2 Viewing the Routing Table Status Page Configure Clone 44.1 Configure Clone Page Page Page Introducing Commands 45.1 Overview 45.2Accessing the CLI 45.3The Login Screen 45.4 Command Syntax Conventions 45.5Changing the Password 45.6 Creating a New IP Interface 45.7 Privilege Levels 45.8 Command Modes 45.9 Getting Help 45.9.1 List of Available Commands 45.10 Using Command History 45.11 Saving Your Configuration 45.12 Command Summary 45.12.2 Enable Mode Page Page Page Page Page Page Page Page Page 45.12.3 General Configuration Mode Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page 45.12.4 interface port-channelCommands Page Page Page Page 45.12.5 interface route-domainCommands Page 45.12.6 config-vlanCommands 45.13 mvr Commands Page User and Enable Mode Commands 46.1 Overview 46.2 show Commands 46.2.2 show ip 46.2.3 show logging 46.2.4show interface 46.2.5 show mac address-table 46.3 ping 46.4 traceroute 46.5 Copy Port Attributes 46.6 Configuration File Maintenance 46.6.1 Using a Different Configuration File 46.6.2Resetting to the Factory Default Configuration Mode Commands 47.1 Enabling IGMP Snooping 47.2 Configure IGMP Filter 47.3 Enabling STP 47.4 no Command Examples 47.4.2 Resetting Commands 47.4.3 Re-enablecommands 47.4.4 Other Examples of no Commands Page 47.5 Queuing Method Commands 47.6 Static Route Commands 47.7 Enabling MAC Filtering 47.8 Enabling Trunking 47.9 Enabling Port Authentication 47.9.2 Port Authentication Settings Page Interface Commands 48.1 Overview 48.2 Interface Command Examples Page 48.2.3 bpdu-control 48.2.4 broadcast-limit 48.2.5 bandwidth-limit 48.2.6 mirror 48.2.7 gvrp 48.2.8 ingress-check 48.2.9 frame-type 48.2.10 weight 48.2.11 egress set 48.2.12 qos priority 48.2.13 name 48.2.14 speed-duplex 48.2.15 test 48.3 Interface no Command Examples Page IEEE 802.1Q Tagged VLAN Commands 49.1 Configuring Tagged VLAN 49.2 Global VLAN1Q Tagged VLAN Configuration Commands 49.3 Port VLAN Commands 49.3.2 Set Acceptable Frame Type 49.3.3 Enable or Disable Port GVRP 49.3.4 Modify Static VLAN Page 49.4 Enable VLAN 49.5 Disable VLAN 49.6 Show VLAN Setting Page Page Multicast VLAN Registration Commands 50.1 Overview 50.2Create Multicast VLAN Page Routing Domain Command Examples Page Troubleshooting 52.1 Problems Starting Up the Switch 52.2 Problems Accessing the Switch 52.2.1 Pop-upWindows, JavaScripts and Java Permissions Page Page Page Page 52.3 Problems with the Password Page Page Page Page Page Page Page Page Page Introduction to IP Addresses Structure Subnet Masks Notation Subnetting Example: Four Subnets Example: Eight Subnets Subnet Planning Configuring IP Addresses Copyright Certifications ZyXEL Limited Warranty Page Page Page Page Page Page Index