Untrusted ARP Inspection Example | ZyXEL Communications MES-2110

	Chapter 23 Command Line Interface
Table 83 Interface Mode Commands
COMMAND	DESCRIPTION
vlan-stacking SPVID <1-4094>	Sets the service provider VLAN ID of the current
	port(s).

vlan-stacking priority <0-7>	Sets the priority (0-7) of the current port(s) in
	VLAN stacking.

23.10.1 Untrusted ARP Inspection Example

This example assigns port 1 to 8 as untrusted for ARP inspection, and displays whether the device’s ports have a trusted or untrusted status. Generally if you want to enable ARP inspection on the device you also have to enable DHCP snooping first to build a binding table.

MES-2110(config)# dhcp snooping enable

MES-2110(config)# dhcp snooping vlan-mode all

MES-2110(config)# arp inspection enable

MES-2110(config)# arp inspection vlan-mode all

MES-2110(config)# interface port-channel 1,2,3,4,5,6,7,8

MES-2110(config-interface)# no arp-inspection-trust

MES-2110# show arp inspection config

ARP Inspection is enabled

ARP Inspection MAC-Filter-Aging-Time : 5(min)

ARP Inspection VLAN Mode : All VLAN

ARP Inspection VLAN :

Port ARP-Inspection

--------------------------

01	untrust
02	untrust
03	untrust
04	untrust
05	untrust
06	untrust
07	untrust
08	untrust

09trust

10trust

23.10.2Outgoing Traffic Bandwidth Limit Example

This example sets the outgoing traffic bandwidth limit to 1 Mbps for port 2.

MES-2110# configure terminal

MES-2110(config)# interface port-channel 2

MES-2110(config-interface)# bandwidth-limit egress medium 1

MES-2110(config-interface)# bandwidth-limit egress

MES-2110 User’s Guide

203

Image 203

ZyXEL Communications MES-2110 manual Untrusted ARP Inspection Example, Outgoing Traffic Bandwidth Limit Example, 203

Contents

MES-2110 Page Intended Audience About This Users Guide Customer Support Syntax Conventions Document Conventions Telephone Router MES-2110 Computer ServerDslam Firewall Safety Warnings Safety Warnings MES-2110 User’s Guide Contents Overview Contents Overview MES-2110 User’s Guide Table of Contents Chapter System Details 10.1 Igmp 137 Chapter Command Line Interface 179 Index 229 Table of Contents MES-2110 User’s Guide Backbone Application IntroductionOverview Backbone Application Bridging Example Ieee 802.1Q Vlan Application Examples High Performance Switching Example Metro Ethernet Shared Server Using Vlan Example Metro Ethernet Ways to Manage the MES-2110 Good Habits for Managing the MES-2110 Desktop Installation Procedure Hardware Installation and ConnectionInstallation Scenarios Mounting the MES-2110 on a Rack Rack-mounted Installation Requirements Attaching the Mounting Brackets Attaching the Mounting Brackets to the MES-2110 Mounting the MES-2110 on a Rack Mounting the MES-2110 on a Rack Front Panel Hardware Overview Label Description Console PortGigabit Ethernet Ports Front Panel Connections Mini-GBIC Slots Default Ethernet Negotiation Settings Transceiver Installation Removing the Fiber Optic Cables Power Connections Overview DC Power Connection AC Power Connection LED Color Statu Description Powering on the MES-2110LEDs LED Descriptions Mbps Ethernet network Green Blinking Igmp Snooping Tutorials Set Igmp Query Mode to Auto Radius Configuration Tutorials Tutorials Based802.1q before proceeding MVR ConfigurationSetting Value MVR Tutorial Values Open the Configuration Igmp Menu MVR screen Tutorials Vlan ID Priority For Pri-Overide, select Enable Untrusted ARP Inspection Set Action to Enable and Dhcp Snooping Vlan Mode to All-VLAN Outgoing Traffic Bandwidth Frame Tagging Example Frame Tagging To configure frame tagging Tutorials MES-2110 User’s Guide Introduction Web ConfiguratorSystem Login Web Configurator Login Main Screen Web Configurator Main Screen Navigation Panel Sub-links Overview System Details Configuration Mgmt Config System Restart Menu Sntp Web Configurator Screen Sub-links DetailsSystem Details Configuration Mgmt Config Restart Menu Snmp Dhcp Navigation Panel LinksLink Description ARP Made on the MES-2110 and restart the MES-2110 Saving Your ConfigurationSet Up the Administrative Password Reload the Configuration File Switch LockoutResetting the MES-2110 Resetting the MES-2110 Via the Console Port System Information Screen System Details Board Information Screen Undo Click this to restore your last saved settings Apply Dhcp Configuration ScreenAddress, subnet mask and a default gateway IP address IP address from a Dhcp server if Dhcp client is enabled System Details Dhcp Config Apply Port Configuration Screen Configuration Auto Truncated in some Web Configurator screens Manage the MES-2110 via that port Duplex This indicates the port’s duplex mode Half or FullDisabled Port Status Screen This shows whether auto-negotiation is On or Off Rmon Status Screen RX+TX Configuration Rmon Status Loop Detection Switch in Loop State Loop detection Probe Frame Loop Detection Screen Down this port Snmp traps when it shuts down a port via the loop detectionFeature Enabled, the MES-2110 sends probe frames from this port to Loop Detection MES-2110 User’s Guide Frame Size Jumbo Frame Configuration ScreenJumbo Frame Jumbo Frame MES-2110 User’s Guide 802.1x Ieee 802.1x Authentication Guest Vlan Ieee 802.1x Authentication Process 10.2 802.1x Global Configuration Screen Port Number 1812 Server 10.3 802.1x Radius Server Configuration ScreenMES-2110. The key is not sent over the network Server UDP Before configuring it on each port 10.4 802.1x Port Configuration Screen Guest Vlan Reauthenticat Clients for port access 10.5 802.1x Radius Server Configuration Screen Radius vs. TACACS+ Technical ReferenceRadius and TACACS+ Supported Radius Attributes Attributes Used for Authenticating Privilege Access Attributes Used for Authentication Radius Attributes Exec Events via Telnet/SSH Attribute Start INTERIM-UPDATE StopAttributes Used for Accounting Radius Attributes Exec Events via Console Radius Attributes-Exec Events via Attributes Used for Accounting Ieee 802.1x Events 802.1x MES-2110 User’s Guide Link Recommended Allowed Speed Value Range BridgeSTP Terminology STP Path Costs Path 16Mbps 40 to Cost 100Mbps 10 to 1Gbps 10Gbps How STP Works Port Description State Bridge Configuration ScreenSTP Port States STP Port States Tunnel port receives Bridge Protocol Data Units Bpdu Rstp System Configuration ScreenAre done configuring You select Rstp 802.1W in the Ring Protocol field List box Same priority, the switch with the lowest MAC address willDetermines Hello Time, Max Age and Forwarding Delay Root Bridge Information Network. The allowed range is 6 to 40 seconds Allowed range is 4 to 30 secondsAs a general rule Selected from among the MES-2110 ports attached to Cost 1~65535 Enter the port’s path cost Spanning Tree Port Configuration255 and the default value is P2P CFI Vlan ID Introduction to Ieee 802.1Q Tagged VLANsTpid User Priority Vlan Forwarding Tagged and Untagged FramesIeee 802.1Q Vlan Terminology Vlan Term Description Parameter Vlan Type Use this to set the MES-2110 to Port-Based or Tag Vlan Type ScreenPort-Based Vlan Screen Connected to this port Port-Based Vlan ConfigurationThen you cannot access the web configurator from a computer 100 101 Tag-Based Vlan ScreensVlan Stacking Vlan Stacking Example 102 Vlan Stacking Port Roles Type Priority Vlan Tag Format103 Vlan Tag Format 802.1Q Frame Frame Format104 Single and Double Tagged 802.11Q Frame Format SP Tpid Vlan Stacking Configuration Screen105 Spvid 106 Pvid Tag-Based Port Information Screen107 Select whether you want to Add or Modify a Vlan ID Tag-Based Port Configuration ScreenEnter the Vlan ID from 1-4094 that you want to configure 108 109 Management Vlan Screen Management Vlan This is the current management Vlan Unless your current access belongs to the new Vlan110 111 Bandwidth Control SetupBandwidth Control 112 113 Broadcast Storm Control SetupBroadcast Storm Control Storm Control Status Storm Control Configuration114 115 Port Mirroring SetupPort Mirroring Select the monitor port number from the list Volatile memory when you are done configuring116 117 Link AggregationDynamic Link Aggregation Link Aggregation ID Link Aggregation ID Local SwitchLink Aggregation ID Peer Switch Static Trunking Example 119 Link Aggregation Setting Lacp Link Aggregation Control Protocol120 MAC Lacp Link Status121 122 123 IP Multicast AddressesIgmp Snooping 124 Igmp ConfigurationIgmp Snooping and VLANs Igmp Vlan 125 126 Igmp Vlan Query Mode 127 Igmp StatusMVR Overview How MVR Works 128 Types of MVR PortsMVR Modes 129 General MVR Configuration Select Dynamic to send Igmp reports to all MVR source ports Disable to turn this feature off130 131 MVR Group Configuration MVR Group Status Group Configuration132 Drop-down list box 133 MVR Configuration Example 134 135 MVR Group Configuration Example 136 Relay Agent Information Dhcp Relay ConfigurationDhcp Relay Agent Information 137 To a Dhcp server Dhcp Relay Configuration138 Bytes This is the Vlan that the port belongs to Option82 Information 139 140 141 IP Source Guard 142 Dhcp Snooping Overview 143 Dhcp Snooping Configuration Dhcp requests will not succeed 144 145 Mode VLANs or specific VLANs to Dhcp servers Dhcp SnoopingDhcp Binding Table Ddhhmm 146 147 Configuring ARP InspectionARP Inspection Screen Addresses permanently 148 149 150 151 MAC 152 MAC Table Status Screen 153 Undo Click this to load your last saved settings ApplyMES-2110 or static manually configured Lock MAC Address Learning Screen To activate MAC address learning on the port MAC Filter Configuration Screen154 Port This is the port number Lock 155 Aged out. MAC address aging out time can be set in the MAC MAC Limit Configuration ScreenAddresses may access port 2 at any one time. a sixth device 156 157 QoS Base Configuration ScreenQoS 158 Configuring the Base Configuration Screen 159 160 802.1p Priority Table Number This is the Ieee 802.1p priority level Priority Tag Priority TableIP Dscp Priority Table 161 162 Configuration QoS Menu IP Dscp Priority 163 Priority Override Configuration Screen 164 165 Mgmt Config and System Restart MenuSerial Port Configuration Screen 166 Snmp Configuration Screens IP Trap Manager Screen Snmp CommandsCommand Description Snmp Communities Screen Traps to Sntp Screen168 169 170 Alarms and Logs Syslog 171 172 User Configuration ScreenCharacters using characters found on a standard keyboard User Password PHY RX/TX Cable Test Screen173 Test Host DoS Protection174 Fields below Port Abnormal Traffic Detection Screen175 176 Upgrading the Firmware 177 Managing the Configuration File 178 Restarting the System Logging Command Line InterfaceSetting Default Value Console Port Management 180 Using Shortcuts and Getting HelpCommand / Keys Description Saving Changes Logging Out Command ModesExit Command Basic Commands 182 Basic Commands 183 Privileged Command ModePrivileged Commands 184 Permanently save any changes you Make while using the MES-2110Command line interface 185 Ancillary Trigger Description Configuration ModeConfiguration Mode Commands 186 187 188 189 190 Address over Telnet 191 192 193 Igmp Snooping Example 194 Radius Configuration Example 195 MVR ModeMVR-Configuration Mode Commands This command to work 196 MVR Command Example 197 Vlan ModeVlan Mode Commands 198 Interface ModeVlan ID Priority Example 199 Interface Mode Commands 200 201 Second tag to pass through it 202Port, the port must allow frames Bytes 1522 bytes + 4 bytes for 203 Sets the service provider Vlan ID of the current PortsUntrusted ARP Inspection Example Outgoing Traffic Bandwidth Limit Example 204 Frame Tagging Examples 205 206 207 TroubleshootingPower, Hardware Connections, and LEDs 208 MES-2110 Access and Login Advanced Suggestions 209 Pop-up Windows, JavaScript and Java Permissions 210 211 MES-2110 Configuration and Console 212 My changes in the Web Configurator keep getting overwritten 213 214 215 Product SpecificationsHardware Specifications Specification Description 216 Firmware SpecificationsFeature Description 217 Standard Description 218Standards Supported 219 Installing a FuseRemoving a Fuse 220 221 Common Services Name Protocol Ports Description Commonly Used Services222 223 224 225 CopyrightCertifications FCC Warning CE Mark Warning 226 227 ZyXEL Limited Warranty 228 229 Index 230 TACACS+ MVR 127 configurationPassword 58 path cost 89, 93 port authentication 231 232 Weighted round robin scheduling