Ericsson ECN330, User Manual

Page: 30 / 1226

Management Features Overview
24
1553-KDU 137 365 Uen D 2006-06-16
over LANs (EAPOL) to request user credentials from the 802.1X client, and then
uses the EAP between the ECN330-switch and the authentication server to
verify the client’s right to access the network through an authentication server
(RADIUS server).
Other authentication options include HTTPS for secure management access
using the web, SSH for secure management access over a Telnet-equivalent
connection, SNMP Version 3, IP address filtering for SNMP/web/Telnet
management access, and MAC address filtering for port access.
Access Control Lists (ACL) – ACLs provide packet filtering for IP frames
(based on address, protocol, TCP/UDP port number or TCP control code) or any
frames (based on MAC address or Ethernet type). ACLs can by used to improve
performance by blocking unnecessary network traffic or to implement security
controls by restricting access to specific network resources or protocols.
DHCP Server and DHCP Relay – A DHCP server is provided to assign IP
addresses to host devices. Since DHCP uses a broadcast mechanism, a DHCP
server and its client must physically reside on the same subnet. Since it is not
practical to have a DHCP server on every subnet, DHCP Relay is also supported
to allow dynamic configuration of local clients from a DHCP server located in a
different network.
Port Configuration – The speed, duplex mode, and flow control can be
manually configured for use on specific ports, or auto-negotiation can be used
to detect the connection settings used by the attached device. Use the full-
duplex mode on ports whenever possible to double the throughput of switch
connections. Flow control should also be enabled to control network traffic
during periods of congestion and prevent the loss of packets when port buffer
thresholds are exceeded. The ECN330-switch supports flow control based on
the IEEE 802.3-2002 standard.
Rate Limiting – This feature controls the maximum rate for traffic transmitted or
received on an interface. Rate limiting is configured on interfaces at the edge of
a network to limit traffic into or out of the network. Traffic that falls within the rate
limit is transmitted, while packets that exceed the acceptable amount of traffic
are dropped.
Port Mirroring – The ECN330-switch can unobtrusively mirror traffic from any
port to a monitor port. A protocol analyzer or RMON probe can be connected to
this port to perform traffic analysis and verify connection integrity.