manualshive.com logo in svg

Linksys SRW2016, User Manual

Share
Download
Linksys SRW2016 User Manual Download Page 63

53

Chapter 5: Using the Web-based Utility for Configuration
Security Tab for Other Switches - ACL Mapping

WebView Switches

Security Tab for Other Switches - ACL Mapping

When an ACL is mapped to an interface, the ACL is applied to the selected interface. Use the 

ACL Mapping

 

screen to assign ACL Lists to classification methods and interfaces. 

The ACL Mapping page contains the following fields: 

Interface

. The VLAN to which the ACL is mapped.  

ACL Name

. The name of the ACL bound to the VLAN.

To modify the settings on this screen, click the 

Edit

 icon, which resembles a pencil, to open the edit screen.

To delete a mapped ACL, click the 

Remove

 icon, which appears as a red 

X

. 

Figure 5-49: Fast Ethernet Security - ACL Mapping

NOTE:

This section does not apply to the SRW2048 

Switch. If you have a SRW2048 Switch, refer to the 
sections titled Security Tab for SRW2048 Switches.

Summary of Contents for SRW2016

Page 1: ...vision of Cisco Systems Inc Model No WIRED with WebView 16 24 or 48 Port 10 100 1000 Gigabit Ethernet Switch SRW2016 SRW2024 SRW2048 SRW224G4 SRW248G4 User Guide 24 or 48 Port 10 100 Fast Ethernet Swi...

Page 2: ...ical terms that are presented like this Also each figure diagram screenshot or other image is provided with a figure number and description like this Figure numbers and descriptions can also be found...

Page 3: ...face 11 Chapter 5 Using the Web based Utility for Configuration 20 Overview 20 Accessing the Web based Utility 20 Sys Info System Information Tab System Description 21 Sys Info System Information Tab...

Page 4: ...urity Tab for SRW2048 Switches Profile Rules 47 Security Tab for Other Switches ACL 51 Security Tab for Other Switches MAC Based ACL 52 Security Tab for Other Switches ACL Mapping 53 SNTP Tab Global S...

Page 5: ...Tab on SRW2048 Switches RSTP Interface Settings 90 Spanning Tree Tab on SRW2048 Switches MSTP Properties 92 Spanning Tree Tab on SRW2048 Switches MSTP Instance Settings 93 Spanning Tree Tab on SRW2048...

Page 6: ...een 10 Figure 4 6 Switch Main Menu 11 Figure 4 7 Port Status 11 Figure 4 8 Port Configuration 12 Figure 4 9 System Configuration Menu 12 Figure 4 10 System Information Menu 13 Figure 4 11 Versions 13...

Page 7: ...face Configuration Change Settings 26 Figure 5 10 Switch Configuration VLAN 28 Figure 5 11 Switch Configuration Create VLAN 28 Figure 5 12 Switch Configuration VLAN Interface Settings 29 Figure 5 13 S...

Page 8: ...38 Security Storm Control 45 Figure 5 39 Security Authenticated Users 45 Figure 5 40 SRW2048 Switch Security ACL 46 Figure 5 41 SRW2048 Switch Security create ACL profile 46 Figure 5 42 SRW2048 Switc...

Page 9: ...Event Log 70 Figure 5 67 Logs Global Parameters 71 Figure 5 68 SNMP Global Parameters 73 Figure 5 69 SNMP Views 74 Figure 5 70 SNMP Group Profile 75 Figure 5 71 SNMP add Group Profile 76 Figure 5 72...

Page 10: ...ng Tree Global Settings 86 Figure 5 87 Spanning Tree STP Interface Settings 88 Figure 5 88 Spanning Tree RSTP Interface Settings 90 Figure 5 89 Spanning Tree MSTP Properties 92 Figure 5 90 Spanning Tr...

Page 11: ...our workstations or connect to other switches and the backbone And the mini GBIC ports allow future expansion to alternate transmission media such as fiber optic cabling The Switch features WebView mo...

Page 12: ...ter shows you how to configure the Switch using the Web based Utility Appendix A About Gigabit Ethernet and Fiber Optic Cabling This appendix gives a general description of Gigabit Ethernet and fiber...

Page 13: ...48 with an attached device It flashes to indicate that the Switch is actively sending or receiving data over that port Gigabit Orange The Gigabit LED lights up to indicate a Gigabit connection on the...

Page 14: ...sys MGBT1 MGBSX1 or MGBLH1 mini GBIC modules with the Switch The MGBSX1 and the MGBLH1 require fiber cabling with LC connectors while the MGBT1 requires a Category 5e Ethernet cable with an RJ 45 conn...

Page 15: ...ces make sure you don t exceed the maximum cabling distances which are listed in the following table A hub refers to any type of 100Mbps hub including regular hubs and stackable hubs A 10Mbps hub conn...

Page 16: ...provide a minimum clearance of two inches 50 mm Do not stack free standing Switches more than four units high Placement Options Before connecting cables to the Switch first you will physically install...

Page 17: ...ct the other end to a PC or other network device 4 Repeat steps 2 and 3 to connect additional devices 5 If you are using the mini GBIC port then connect the mini GBIC module to the mini GBIC port For...

Page 18: ...Switch If a port has an active Gigabit connection then its corresponding Gigabit LED will also light up If you will use the Switch s console interface to configure the Switch proceed to Chapter 4 Usin...

Page 19: ...ich is covered in the next chapter Configuring the HyperTerminal Application Before you use the console interface you will need to configure the HyperTerminal application on your PC 1 Click the Start...

Page 20: ...button Connecting to the Switch through a Telnet Session Open a command line editor and enter telnet 192 168 1 254 Then press the Enter key The Login screen will now appear The first time you open th...

Page 21: ...menu option and use the Esc key to return to the previous selection Menu options and any values entered or present will be highlighted The bottom of the screen lists the actions available Switch Main...

Page 22: ...Select Edit to make changes When your changes are complete press the Esc key to return to the Action menu and select Save to save your changes Help Select Help and press the Enter key if you want to v...

Page 23: ...s the Switch s boot software and hardware firmware versions General System Information The General System Information screen displays the Switch s description System Up Time System MAC Address System...

Page 24: ...ort Configuration screen the Switch s baud rate is displayed Select Edit to make changes When your changes are complete press the Esc key to return to the Action menu and select Save to save your chan...

Page 25: ...minister the user names and passwords of those accessing the Switch Security Settings The Security Settings screen enables you to configure security settings on the Switch as well as generate and disp...

Page 26: ...Name Specifies the location or city name Range 1 64 State or Province Name Specifies the state or province name Range 1 64 Country Name Specifies the country name Range 2 2 Validity Term Specifies nu...

Page 27: ...c key to return to the Action menu and select Save to save your changes HTTP The HTTP screen displays the status and port number of the HTTP Server For the 24 Port Switch there is also an HTTP Authent...

Page 28: ...ing test Select Edit to make changes When your changes are complete press the Esc key to return to the Action menu and select Save to save your changes TraceRoute The TraceRoute screen displays the IP...

Page 29: ...Settings To restore the Switch back to the factory default settings select Restore System Default Settings and press the Enter key You will be asked if you want to continue Press the y key to restore...

Page 30: ...rom the System Password screen The first screen that appears is the System Description screen This allows you to access six main tabs Sys Info System Information IP Conf Configuration Switch Conf Conf...

Page 31: ...dress This is the MAC address of the Switch Hardware Version Displayed here is the version number of the Switch s hardware Software Version Displayed here is the version number of the Switch s softwar...

Page 32: ...e for this entry Status This indicates how the entry was created Dynamic dynamically learned or Static statically configured You can add or edit a forwarding interface by clicking the icon that looks...

Page 33: ...daylight savings then select European If it should use another kind of daylight savings then select Other and complete the From and To fields Time Set Offset 1 1440 For non US and European countries...

Page 34: ...e using a static IP address then select the radio button and enter the IP settings IP Address Enter the interface IP address Mask Enter the subnet mask of the currently configured IP address Default G...

Page 35: ...ission occurs in both directions simultaneously or Half transmission occurs in only one direction at a time This mode can be configured only when auto negotiation is disabled and port speed is set to...

Page 36: ...ew screen that appears you can change the port s settings Some settings shown may not be available depending on the type of switch you have and other settings you have configured for that port Interfa...

Page 37: ...ally detect the cable type Select MDI if the port is connected to an end station Select MDIX if the port is connected to a hub or another switch Current MDI MDIX This is the current MDI MDIX status of...

Page 38: ...VLAN type Dynamic dynamically created Static created by user or Default the Switch has one default VLAN Ports LAGs This shows the port of the column you selected or all of the ports with the following...

Page 39: ...nnot be designated Ingress filtering cannot be enabled disabled on an access port Trunk The port belongs to VLANs in which all ports are tagged except for one port that can be untagged PVID VLAN ID of...

Page 40: ...This dIsplays the interface port on which GVRP is enabled GVRP State This indicates if GVRP is enabled on the interface Dynamic VLAN Creation This indicates if Dynamic VLAN creation is enabled on the...

Page 41: ...red to the LAG If you want to delete a current LAG then select the LAG s X icon To modify a LAG click the LAG s Edit icon which resembles a pencil On the new screen that appears you can modify the LAG...

Page 42: ...red Probe Port Select the port number to which port traffic is copied Mode Select the appropriate port mode configuration RxOnly receiving only TxOnly transmitting only or Both receiving and transmitt...

Page 43: ...rmation is displayed below per port Port This is the port number using LACP Port Priority This is the LACP priority value for the port LACP Timeout This is the administrative LACP timeout period Short...

Page 44: ...dicates if IGMP snooping is enabled or disabled on the VLAN Enable Auto Learn Indicates if Auto Learn is enabled or disabled on the Switch If Auto Learn is enabled the Switch automatically learns wher...

Page 45: ...s are flooded to all ports in the relevant VLAN This is disabled by default VLAN ID Identifies a VLAN and contains information about the Multicast group address Bridge Multicast Address Identifies the...

Page 46: ...to the appropriate port or VLAN VLAN ID Displays the VLAN for which Multicast parameters are displayed Ports Ports that can be added to a Multicast service The table on this screen displays the IGMP p...

Page 47: ...sensitive applications are forwarded using the quickest path or Weighted Round Robin WRR for which no single application dominates the forwarding capacity The CoS Settings screen lets you enable or d...

Page 48: ...WRR Bandwidth This is the percentage of bandwidth used by WRR This automatically changes if you change the WRR Weight for a queue Click the Submit button to save your changes QoS Tab CoS to Queue The...

Page 49: ...figures the rate to which traffic is limited The range is 70 285 000 kbps Egress Shaping Rates Determines the Committed Information Rate CIR and Committed Burst Size CBS on the interface Status Indica...

Page 50: ...emove icon which appears as a red X next to their name To create a user s password click the pen and paper icon above the Edit and Remove icons and add the information as above Security Tab 802 1x Use...

Page 51: ...on True indicates that reauthentication is automatic while False indicates that reauthentication is manual Reauthentication Period This is the number of seconds that the Switch waits before initiating...

Page 52: ...od Enter the number of seconds that the Switch waits before initiating the reauthentication process Quiet Period Enter the number of seconds the Switch remains in the quiet state after an authenticati...

Page 53: ...he RADIUS server authentication Log in indicates that the RADIUS server is used for authentication of usernames and passwords while 802 1x indicates that the RADIUS server is used for 802 1x authentic...

Page 54: ...802 1x if you want the RADIUS server used for 802 1x authentication Select All if you want the RADIUS server used for authentication of usernames and passwords as well as 802 1x authentication Default...

Page 55: ...s click the Edit icon which resembles a pencil to open the edit screen T Click the Submit button to save your changes Security Tab Authenticated Users The Authenticated Users screen shows the user por...

Page 56: ...ess Profile Name This is the name of the access profile Rule Priority 1 65535 This is the rule priority When a packet is matched to a rule user groups are granted permission or denied access Managemen...

Page 57: ...packets are matched on a first fit basis The rule priorities can be viewed in the Profile Rules Table Interface The interface type to which the rule applies This is an optional field This rule can be...

Page 58: ...rity Authentication Profiles Profile Name User defined authentication profile lists to which user defined authentication profiles are added The defaults are Network Default and Console Default Methods...

Page 59: ...users SSH provides clients with secure and encrypted remote connections to a device HTTP and Secure HTTP Authentication method used for HTTP access and Secure HTTP access respectively Possible field...

Page 60: ...acters Timeout for Reply The default time that passes before the device and the TACACS server connection times out This setting is between 1 and 30 seconds with a default of 5 seconds Configuration of...

Page 61: ...s Profile Name This is the name of the access profile Rule Priority This is the rule priority When a packet is matched to a rule user groups are granted permission or denied access Management Method T...

Page 62: ...acters long Remove ACL Checking this box and then clicking the Submit button will delete the ACL ACLs are listed in the table below with these headings Priority This displays the priority of the ACL D...

Page 63: ...nterfaces The ACL Mapping page contains the following fields Interface The VLAN to which the ACL is mapped ACL Name The name of the ACL bound to the VLAN To modify the settings on this screen click th...

Page 64: ...interval in seconds at which the SNTP server is polled for unicast information Receive Broadcast Servers Updates If enabled the Switch listens to the SNTP servers for broadcast server time information...

Page 65: ...usted Key This indicates if there is an encryption key used unicast anycast or elected broadcast to authenticate the SNTP server To add an entry click the paper and pencil icon On the new screen that...

Page 66: ...s shows how long it takes for data from the server to travel to the Switch Add icon To add an SNTP server click the paper and pencil icon Configure its settings on the screen that appears as described...

Page 67: ...between the SNTP server and Switch Click the Submit button to save your changes SNTP Tab Interface Settings The Interface Settings screen shows the SNTP settings for different interfaces Interface Th...

Page 68: ...st Packets Displayed here is the number of multicast packets received on the selected interface Broadcast Packets Displayed here is the number of broadcast packets received on the selected interface P...

Page 69: ...received on the selected interface Late Collisions Displayed here is the number of late collision frames received on the selected interface Excessive Collisions Displayed here is the number of excessi...

Page 70: ...packets received on the interface since the Switch was last refreshed This number excludes multicast packets s Multicast Packets Received This is the number of good multicast packets received on the i...

Page 71: ...This is the number of 128 to 255 byte frames received on the interface since the Switch was last refreshed Frames of 256 to 511 Bytes This is the number of 256 to 511 byte frames received on the inte...

Page 72: ...ber of Samples This is the current number of samples Owner This is the user who requested the RMON information To delete an entry click its X icon To add an entry click the paper and pencil icon On th...

Page 73: ...adcast packets receive on the interface since the Switch was last refreshed Multicast Packets This is the number of good multicast packets received on the interface since the Switch was last refreshed...

Page 74: ...his is the value of the selected MIB variable Sample Type This is the sampling method for the selected variable Delta which subtracts the last sampled value from the current value and then compares th...

Page 75: ...ast sampled value from the current value and then compares the difference to the threshold or Absolute which compares values directly with the thresholds at the end of the sampling interval Rising Thr...

Page 76: ...ent has occurred Time This is the time at which the event occurred Owner This is the user that defined the event To delete an entry click its X icon To add an entry click the paper and pencil icon On...

Page 77: ...ics Tab RMON Events Log The RMON Events Log screen displays a list of RMON events Event This is the number of the RMON Event Log entry Log No This is the log number Log Time This is the time when the...

Page 78: ...er of EAPOL Logoff frames received on the port Respond ID Frames Receive Displayed here is the number of EAP Respond ID frames received on the port Respond Frames Receive Displayed here is the number...

Page 79: ...tatistics Empty Indicates the number of empty GVRP statistics Leave Empty Device GVRP Leave Empty statistics Join In Device GVRP Join In statistics Leave In Device GVRP Leave in statistics Leave All D...

Page 80: ...ption Displayed here is the log message text Click the Clear Logs button to clear the logs on this screen Logs Tab Event Log The Event Log screen shows information about all system logs that are saved...

Page 81: ...of log entries held in RAM The minimum number is 20 and the maximum number is 400 Current Displayed here is the current maximum number of log entries After Reset Enter the maximum number of log entri...

Page 82: ...SNMPv1 and SNMPv2 PDUs In addition User Security Model USM are defined for SNMPv3 and includes Authentication Provides data integrity and data origin authentication Privacy Protects against disclosur...

Page 83: ...hexadecimal digits Each byte can be separated by a period or a colon The Engine ID must be defined before SNMPv3 is enabled For stand alone devices select a default Engine ID that is comprised of Ente...

Page 84: ...is granted via the MIB name or MIB Object ID To define SNMP views The SNMP Views screen contains the following fields View Name Displays the user defined views The view name can contain a maximum of...

Page 85: ...MPv3 SNMPv3 is defined for the group Security Level Defines the security level attached to the group Security levels apply to SNMPv3 only The possible field values are No Authentication Indicates that...

Page 86: ...el Defines the security level attached to the group Security levels apply to SNMPv3 only The possible field values are No Authentication Indicates that neither the Authentication nor the Privacy secur...

Page 87: ...SNMP Engine ID deletes the SNMPv3 User Database Local Indicates that the user is connected to a local SNMP entity Remote Indicates that the user is connected to a remote SNMP entity If the Engine ID i...

Page 88: ...xadecimal digits Each byte can be separated by a period or colon Click the Submit button to add the new member Defining SNMP Communities Access rights are managed by defining communities on the SNMPv1...

Page 89: ...the management station to the device Group Name Defines advanced SNMP communities group names Advanced Only used with SNMP v3 Contains a list of user defined groups When SNMP Advanced mode is selected...

Page 90: ...ication filters Object ID Subtree Displays the OID for which notifications are sent or blocked If a filter is attached to an OID traps or informs are generated and sent to the trap recipients Object I...

Page 91: ...are Trap Indicates traps are sent Inform Indicates informs are sent Community String Identifies the community string of the trap manager Notification Version Determines the trap type The possible fie...

Page 92: ...ased Utility Maintenance Tab File Download The File Download screen lets you download firmware or a configuration file to the Switch You cannot download both at the same time Firmware Download If you...

Page 93: ...be rebooted Click the Submit button to begin the download of the firmware or configuration file Maintenance Tab File Upload The File Upload screen lets you upload firmware or a configuration file to a...

Page 94: ...sts on copper cables The maximum cable length that can be tested is 120 meters Cables are tested when the ports are in the down state except for the Approximate Cable Length test Port This is the port...

Page 95: ...that the test could not be properly performed Cable Fault Distance This is the distance from the port at which the cable error occurred Last Update This is the last time the port was tested Approxima...

Page 96: ...or packets allocated to any VLAN Multiple STP is based on the RSTP In addition Multiple STP transmits packets assigned to different VLANs through different MST regions MST regions act as a single brid...

Page 97: ...ing STP each is assigned a priority After exchanging BPDUs the device with the lowest priority value becomes the Root Bridge The default value is 32768 The port priority value is provided in increment...

Page 98: ...is taken on traffic Possible port states are Disabled STP is currently disabled on the port The port forwards traffic while learning MAC addresses Blocking The port is currently blocked and cannot be...

Page 99: ...rerouted Priority This is the priority value of the port The priority value influences the port choice when a bridge has two ports connected in a loop The priority value is between 0 240 The priority...

Page 100: ...ink Backup ports also occur when a LAN has two or more connections connected to a shared segment Disabled Indicates the port is not participating in the Spanning Tree Mode Indicates the current Spanni...

Page 101: ...tions until explicit LCP or NCP packets close the link or until some external event occurs This is the actual switch port link type It may differ from the administrative state Point to Point Operation...

Page 102: ...idges by which frames can be transmitted The MSTP Properties screen contains the following fields Region Name This can be 1 32 characters in length and indicates user defined MSTP region name Revision...

Page 103: ...range is 0 61440 in steps of 4096 Designated Root Bridge ID Indicates the ID of the bridge which is the root of the selected instance Root Port Indicates the selected instance s root port Root Path C...

Page 104: ...tes whether the device on the other side of the link is working in RSTP or STP mode Role Indicates the port role assigned by the STP algorithm in order to provide to STP paths The possible field value...

Page 105: ...e forwarding state Remain Hops Indicates the number of hops remaining to the next destination Click the Submit button to save any of your changes on this screen Clicking the Interface Table button ope...

Page 106: ...capable of carrying terabits of data per second the signaling hardware currently on the market can handle no more than a few gigabits of data per second Fiber cables come with two main connector type...

Page 107: ...ocol all PCs follow to communicate over a network This is true for wireless networks as well Your PCs will not be able to utilize wireless networking without having TCP IP enabled Windows Help provide...

Page 108: ...ovides a way to look at and interact with all the information on the World Wide Web Buffer A shared or assigned memory area that is used to support and coordinate different computing and networking ac...

Page 109: ...computers Download To receive a file transmitted over a network DSL Digital Subscriber Line An always on broadband connection over traditional phone lines DTIM Delivery Traffic Indication Message A m...

Page 110: ...Sec Internet Protocol Security A VPN protocol used to implement secure exchange of packets at the IP layer ISM band Radio bandwidth utilized in wireless transmissions ISP Internet Service Provider A c...

Page 111: ...s an authentication server to control network access RJ 45 Registered Jack 45 An Ethernet connector that holds up to eight wires Router A networking device that connects multiple networks together RTS...

Page 112: ...n of the TCP IP FTP protocol that has no directory or password capability Throughput The amount of data moved successfully from one node to another in a given time period Topology The physical layout...

Page 113: ...T Ethernet 802 3u 100BASE TX Fast Ethernet 802 3ab 1000BASE T Gigabit Ethernet 802 3z Gigabit Ethernet 802 3x Flow Control Ports SRW2016 16 10 100 1000 RJ 45 ports and 2 shared MiniGBIC slots SRW2024...

Page 114: ...4 45 mm x 202 5 mm Unit Weight SRW2016 7 30 lbs 3 31 kg SRW2024 7 35 lbs 3 33 kg SRW2048 8 60 lbs 3 9 kg SRW248G4 8 60 lbs 3 9 kg SRW224G4 4 41 lbs 2 kg Power internal switching power Certifications F...

Page 115: ...WARRANTIES INCLUDING ANY IMPLIED WARRANTY OF NON INFRINGEMENT ARE DISCLAIMED Some jurisdictions do not allow limitations on how long an implied warranty lasts so the above limitation may not apply to...

Page 116: ...cause harmful interference to radio or television reception which is found by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following...

Page 117: ...e unit must be carried out by qualified personnel only The unit must be connected to an earthed grounded outlet to comply with international safety standards Do not connect the unit to an A C outlet p...

Page 118: ...Power Cord Set U S A and Canada The cord set must be UL approved and CSA certified The minimum specifications for the flexible cord are No 18 AWG not longer than 2 meters or 16 AWG Type SV or SJ 3 co...

Page 119: ...ation und der Ausbau des Ger ts darf nur durch Fachpersonal erfolgen Das Ger t sollte nicht an eine ungeerdete Wechselstromsteckdose angeschlossen werden Das Ger t mu an eine geerdete Steckdose angesc...

Page 120: ...aser Product and are inherently eye safe in normal operation However you should never look directly at a transmit port when it is powered on Caution Wear an anti static wrist strap or take other suita...

Page 121: ...ces Waste reduction and safe disposal of all harmful un recyclable by products Recycling of all reusable waste content Design of products to maximize recyclables at the end of the product s life span...

Page 122: ...m administrators with a working knowledge of network management You should be familiar with switching and networking concepts Zielgruppe Dieser Anleitung ist fuer Systemadministratoren mit Erfahrung i...

Page 123: ...with Linksys products Give our advice line a call at 800 546 5797 LINKSYS Or fax your request in to 949 823 3002 If you experience problems with any Linksys product you can call us at 800 326 7114 Don...

Reviews:

No comments

Brands by name

Popular brands

Load more brands