Edge-Core ECS2020 Series Скачать руководство пользователя страница 40 | Manualshive

Страница: 40 / 115

Edge-Core ECS2020 Series Скачать руководство пользователя страница 40

40

6

FAULT/SAFETY

6.1

ATTACK PREVENTION

6.1.1

ARP snooping

6.1.1.1

View ARP configuration

Click the "Fault/Safety" "Attack Prevention" "ARP Inspection" to check the current switches has been configured for
ARP information, this feature is turned off by default.

Figure 6-1: View Port ARP Inspection Information

6.1.1.2

ARP inspection function

In the ARP Inspection configuration, enable this function and then selected a port to configure some parameters.
Click the "Save" button to complete the configuration.

Figure 6-2: ARP Inspection Configuration

«
...
38
39
40
41
42
...
»

Содержание ECS2020 Series

Страница 1: ...Web Management www edge core com Guide ECS2020 Series 10 28 Port Gigabit Web Smart PoE Non PoE Switch Software Release v1 0 0 0...

Страница 2: ...t Gigabit Ethernet Switch with 8 10 100 1000BASE T RJ 45 802 3af at PoE Ports and 2 Gigabit SFP Ports ECS2020 28P Web smart Gigabit Ethernet Switch with 24 10 100 1000BASE T RJ 45 and 4 Gigabit SFP Po...

Страница 3: ...otocol SNMP Related Documentation This guide focuses on switch software configuration through the Web management interface For information on how to manage the switch through the CLI see the following...

Страница 4: ...OL 17 4 3 1 Configuring flow control 18 4 4 PORT AGGREGATION 19 4 4 1 Viewing port aggregation configuration 19 4 4 2 Add port aggregation 20 4 4 3 Modifying port aggregation 21 4 5 PORT MIRRORING 21...

Страница 5: ...FAULT SAFETY 40 6 1 ATTACK PREVENTION 40 6 1 1 ARP snooping 40 6 1 2 Port security 42 6 1 3 DHCP snooping 43 6 1 4 CPU Guard 46 6 2 PATH DETECTION 47 6 2 1 Path Tracert detection 47 6 2 2 Cable detect...

Страница 6: ...7 7 7 4 Activate the TRAP 88 7 7 5 Disable the TRAP 88 7 7 6 Change community 89 7 7 7 Added the SNMP TRAP service host 89 7 7 8 Delete the SNMP TRAP service host 90 7 8 RMON 90 7 8 1 View ROMN config...

Страница 7: ...ew the priority schedule 107 9 1 2 The configuration global settings of SP 107 9 1 3 The configuration global settings of DSCP 110 9 1 4 Editing the DSCP values 112 10 EEE 114 10 1 EEE 114 10 1 1 802...

Страница 8: ...10 and the default subnet mask is 255 255 255 0 Run a web browser and enter http 192 168 2 10 in the address bar Enter the default user name and password user name admin password admin and then click...

Страница 9: ...ormation Figure 2 1 Web Device Panel 2 Clicking on a specific port displays the following information Figure 2 2 View the Port Status 2 2 PORT INFORMATION The configuration of the ECS2020 10P is as fo...

Страница 10: ...rend 2 4 DEVICE CONFIGURATION Click Device Configuration to view and change the configuration of the device Figure 2 4 Device Configuration Use Device configuration to configure the following modules...

Страница 11: ...icts Figure 2 5 View the Port Statistics 3 QUICK CONFIGURATION Click on Quick Configuration to quickly configure commonly used functions such as a VLANs trunk ports port classes SNMP and basic setting...

Страница 12: ...etc When configuration is completed click Next Figure 3 2 VLAN Settings 3 3 PORT MODE Click Quick Configuration and then Port Mode to access the port settings page You can change the port setting to...

Страница 13: ...Quick Configuration and then SNMP Settings to access the SNMP Settings page You can configure SNMP settings such as enable disable SNMP and SNMP TRAP services etc When configuration is complete click...

Страница 14: ...show the current switch port configuration information 1 Port The number of the port 2 Port Description Displays the switch port description 3 Port Status The switch port status information enabled o...

Страница 15: ...Edit icon Step 2 In the Port Properties configuration page fill select the value to be configured Step 3 Click the Apply button to complete the configuration 4 2 STORM CONTROL 4 2 1 Check the storm c...

Страница 16: ...e control value setting is not a multiple of 16 the system automatically matches the closest multiple of 16 6 The control values of unknown unicast broadcast and unknown multicast can only be a single...

Страница 17: ...rm control to 1009 and then click Apply Settings Figure 4 6 Configuring Storm Control Information The configuration displays as shown below Figure 4 7 Configuration Successfully Storm Control Informat...

Страница 18: ...then click Flow Control Select On and click Apply Figure 4 9 Open Port Flow Control Function To enable port traffic control follow these steps Step 1 Select the port Step 2 Set the Flow control to On...

Страница 19: ...Flow Control Close port traffic control follow these steps Step 1 Select the button to the right of the port or directly selected port Step 2 In the Flow Control Type select off Step 3 Click Apply 4...

Страница 20: ...ach aggregate port can bind up to eight member ports port to transfer data among members of the network traffic through the shunt rules 6 Port aggregation group must ensure that the port speed duplex...

Страница 21: ...tion Procedure Step 1 In the Aggregation List Click to modify the right of the port aggregation Step 2 In the port aggregation configuration page to modify the load balancing type and click Next to Ap...

Страница 22: ...a is mirrored to the destination port Destination port mirror data sent to the destination port 1 Port aggregation port can not be used as the destination port and source port 2 Destination port and s...

Страница 23: ...ceplate is gray 4 Aggregated port mirroring can not be configured are shown in gray in the panel 5 Has been selected port mirroring port displayed in the faceplate is gray 4 5 3 To modify the port mir...

Страница 24: ...move port mirroring configuration steps are as follows Step 1 In the image you want to modify the operation of the group column click Step 2 In the panel click Cancel the source port destination port...

Страница 25: ...rroring Port Isolation view of the switch Figure 4 21 Port Isolation Configuration Information 4 6 2 Configuring port isolation Open Port Isolation function select the port on which you want to open p...

Страница 26: ...re 4 23 Enable Port Isolation Results 4 6 3 Modify the port isolation Select the port to modify click on the action bar button Modify the corresponding port isolation Figure 4 24 To Modify the Port Is...

Страница 27: ...formation In the port speed list which shows the current speed limit switch attribute configuration information Port The number of the port Input limit uplink port speed Output speed port downstream r...

Страница 28: ...ration 4 7 3 Remove the port speed limit Click the need to remove the limit on the right port icon in the configuration area of the port rate value pull bar to the far right Apply to complete the oper...

Страница 29: ...red Figure 5 1 VLAN Configuration Information In the VLAN list which shows the properties of the configuration information of the current switch VLAND 1 VLAN ID VLAN ID value is displayed 2 VLAN Name...

Страница 30: ...ep 3 Select the ports Step 4 Click the lower right corner Apply button to complete the configuration 5 1 3 Remove VLAN 5 1 3 1 Single VLAN delete To delete the selected VLAN click the X button to dele...

Страница 31: ...removed because of there are member ports The others will be removed Figure 5 4 Delete Multiple VLAN Delete multiple VLAN follow these steps Step 1 I want to delete VLAN check box setp2 Click on the...

Страница 32: ...the configuration 5 1 4 2 To remove the port from a VLAN Click on the icon you can remove the port from this VLAN Figure 5 6 To Remove the Port from the VLAN Procedure to remove the port from VLAN as...

Страница 33: ...uration of the current switch 1 The port name display port number used 2 The Native VLAN display native VLAN 3 The allowed VLAN the VLAN allows the display message can be through VLAN 4 The default po...

Страница 34: ...iguration 5 1 7 Change the port mode is hybrid Select the port you want to change the mode and click the Port Mode list you can set the port mode is hybrid Figure 5 9 Change the Port Mode is Hybrid Th...

Страница 35: ...the navigation bar VLAN Management Voice VLAN Voice VLAN Global to configure the voice VLAN Figure 5 11 View Voice VLAN Information To configure the voice VLAN global steps as follows Step 1 In the vo...

Страница 36: ...VLAN Port To configure the voice VLAN port steps as follows Step 1 Select ports to configure Step 2 In the state text box choose enable Step 3 In the mode text box choose manual Step 4 Click Apply 5 2...

Страница 37: ...x enter the description such as testOUI Step 4 Click Apply 5 2 5 Voice device address Click on the navigation bar VLAN Management Voice VLAN Voice Device Address to view the voice device Figure 5 14 V...

Страница 38: ...BOX click ON the OFF to ON Step 2 In the surveillance VLAN ID text box enter the ID such as 500 Step 3 In the surveillance VLAN COS text box choose 3 Step 4 In the aging time text box enter aging tim...

Страница 39: ...e MAC address text box enter MAC address such as 00A1 0203 0000 Step 4 In the mask text box enter the mask such as FFFF F000 000 Step 5 Click Apply 5 3 4 MAC settings and surveillance device Click on...

Страница 40: ...witches has been configured for ARP information this feature is turned off by default Figure 6 1 View Port ARP Inspection Information 6 1 1 2 ARP inspection function In the ARP Inspection configuratio...

Страница 41: ...pection Configure Success 6 1 1 3 Disable ARP inspection function In the ARP Inspection configuration table click the button from on to off to disable the ARP Inspection and then click the OK button t...

Страница 42: ...prevention Port Security configure the switch port security Figure 6 6 Port security configuration In the configuration page selected one or more ports enable the admin state and configure the port m...

Страница 43: ...the port security and click the button of Save Figure 6 8 Change Port Security Status 6 1 3 DHCP snooping 6 1 3 1 View DHCP snooping configuration Click the Fault Safety Attack Prevention DHCP Snoopin...

Страница 44: ...3 Set the port to DHCP snooping trusted port In the trusted port list select the port that needs to be disabled to prevent DHCP attacks and click the Apply button and enable option82 function Figure...

Страница 45: ...dress Click Binding List to view the list information Figure 6 12 View the IP Address that the Trusted Port Gets 6 1 3 5 Configure CID information Click the Option82 Circuit ID button configure the CI...

Страница 46: ...the ON button will prevent the DHCP attack function off Figure 6 14 Off DHCP Snooping Function 6 1 4 CPU Guard Click the Fault Safety Attack prevention CPU Guard the configuration information show the...

Страница 47: ...n Figure 6 16 Change CPU Guard Configuration 6 2 PATH DETECTION 6 2 1 Path Tracert detection Click the Fault Safety Path Detection or Tracert Detection can view the Path Detection configuration Figure...

Страница 48: ...Figure 6 18 Tracert Detection Information 6 2 2 Cable detection Click the Fault Safety Path Detection Cable Detection can view the Cable Detection configuration Figure 6 19 Cable Detection Informatio...

Страница 49: ...on only selected one port Figure 6 20 Port Cable Detection Result 6 3 PORT ERROR DISABLE Collect port disable information and can set the port auto recovery time Figure 6 21 Error Disable Automatic Re...

Страница 50: ...ick the Fault Safety DDOS Protection can view the DDOS protection configuration Figure 6 22 DDOS Protection Information Selected dos type to prevent multiple computers from sending attack packets Figu...

Страница 51: ...n view the current loop detection configuration Figure 6 24 View Loopback Detection Configuration Information 6 5 1 Enable loopback detection Enable the loopback detection and configuration some param...

Страница 52: ...nge the loopback detection status Figure 6 26 Configure Ports Parameter Click Edit button change the port status Figure 6 27 Change the Port Configure 6 6 STP Click the Fault Safety STP STP Global can...

Страница 53: ...otice 1 When the loopback detection and STP functions are mutually exclusive 2 LLDP PDU flooding enabled prevents executing mSTP enable Figure 6 29 Enable STP Change Mode and Traps 6 6 2 STP port sett...

Страница 54: ...s control list Figure 6 31 Access Control List 6 7 1 2 Increased access rules 1 INCREASE THE STANDARD IP ACCESS RULES Click New ACL Rules in the pop up dialog box select Standard IPV4 ACL Configuratio...

Страница 55: ...andard IP Access Control List 3 INCREASING EXPAND MAC ACCESS RULES Click New ACL rules select Configuration Expand MAC ACL in the pop up window in list ID 20 ACE ID 0 Rules Deny Source MAC address 008...

Страница 56: ...er the modified ACL rules page the rules are Deny click Apply Figure 6 35 To Modify the ACL Rule Configuration instructions The modified extended MAC and extended IP for the same operation 6 7 1 4 Del...

Страница 57: ...structions Delete after the success of the kneeling in port configuration table deleted together 6 7 2 Application ACL 6 7 2 1 View application ACL The configuration information and click on the Fault...

Страница 58: ...hen select the port of application click Apply to complete the configuration Figure 6 39 Add Applications ACL 6 7 2 3 Delete application ACL Click to delete the application rule on the right side canc...

Страница 59: ...6 41 View Snooping IGMP Configuration Information 6 8 1 2 Action multicast listener function Click the Fault Safety IGMP Snooping click Off button to activate the multicast monitoring function Figure...

Страница 60: ...on 6 8 1 4 Configuration multicast routing Select VLAN click Router Port Add button to configure the multicast routing in the port panel Figure 6 44 Configuration of Multicast Routing Multicast routin...

Страница 61: ...rsion configuration steps are as follows Step 1 Select the required version number Step 2 Click the Apply button to complete the configuration 6 8 2 MLD 6 8 2 1 View MLD configuration Click the Fault...

Страница 62: ...icast Listener Configuration The default multicast listener MLD did not open The default on multicast listener MLD all VLAN are open The default version of V1 MLD 6 8 2 3 Disable multicast listener fu...

Страница 63: ...panel to select multicast listener routing port Step 2 Select VLAN Step 3 Click on the Add Router Port button to complete the configuration 6 9 IEEE 802 1X IEEE 802 1X is a port based authentication p...

Страница 64: ...64 Click to Open Figure 6 51 Enable IEEE 802 1X Switch config AAA RADIUS server address 192 168 2 100 Auth Port 1812 Key 123 type all Figure 6 52 Configuration Radius...

Страница 65: ...not allow the user to authenticate The device does not provide authentication services to clients that pass through the port Single host This port can only connect to a host through authentication can...

Страница 66: ...Authentication Console ECS2020 Telnet ECS2020 SSH ECS2020 click Apply Figure 6 55 Configuration Enable Authentication Switch config Method List Name ECS2020 Method 1 RADIUS click Save Switch config En...

Страница 67: ...switch by Gi 0 2 Configure the TACACS sever 192 168 2 100 and connect with switch by Gi 0 1 Click on Fault Safety AAA TACACS Switch config AAA TACACS server address 192 168 2 100 Auth Port 49 Key qwe...

Страница 68: ...able Authentication Console ECS2020 Telnet ECS2020 SSH ECS2020 click Apply Figure 6 59 Configuration Login Authentication You can successfully open AAA TACACS function PC input right user name and pas...

Страница 69: ...ent VLAN ID the default is 1 1 In the DHCP text box choose static allocation 2 In the Management IP text box enter the IP address such as 192 168 2 10 3 In the Subnet Mask text box enter the subnet ma...

Страница 70: ...tion system time You can select NTP or SNTP enter SNTP NTP Server IP Address such as 203 117 180 36 local SNTP NTP servers or internet SNTP NTP servers in the Time Zone T text box you can choose any t...

Страница 71: ...immediately button Step 2 Click OK in the box that pops up OK button Step 3 Prompted to save the current configuration depending on your need to select OK or Cancel Step 4 After the restart the progr...

Страница 72: ...ox click OK button 7 1 4 System log Click on the navigation bar System Management System Settings System Log to enter the log management interface you can query the system log clear the log Figure 7 5...

Страница 73: ...face you can export the log information through TFTP server Figure 7 6 Log Export 7 1 6 ARP table Click on the navigation bar System Management System Settings ARP Table to enter the ARP entry interfa...

Страница 74: ...y exists is displayed 2 Port Displays the source port number of the MAC address 3 Port Type There are two types of dynamic and static 4 VLAN VLAN ID display value You can query the MAC address type ac...

Страница 75: ...ox to enter the MAC address such as 0001 7A4F 74D2 Step 3 In the VLAN ID text box to enter the VLAN ID such as 1 Step 4 Select ports in the port panel Step 5 Click on Apply to complete the configurati...

Страница 76: ...the configuration Figure 7 11 Batch MAC Binding Configuration 7 1 7 3 Remove the static MAC address type 1 Single MAC records are deleted Select the need to delete the MAC address click the X button t...

Страница 77: ...ront of the column you want to bind check box click Delete Static MAC button Figure 7 13 MAC Address Batch Deletion 3 Delete all dynamic MAC address In the MAC address list click Delete Dynamic MAC bu...

Страница 78: ...Figure 7 15 DHCP Server Info 7 2 2 Enable the DHCP server Enable the DHCP server address pool IP range and device IP must be the same network segment IP Figure 7 16 Enable DHCP Server When the host an...

Страница 79: ...file Step 2 Click the Upgrade button switch to start the upgrade new software Step 3 When the upgrade progress bar is at 100 the switch will automatically reboot completion of the upgrade is complete...

Страница 80: ...on Figure 7 19 CPU Information Web pages to the content of the system task view consistent with the results show the CPU commands command line click on the Clear button to remove the current switches...

Страница 81: ...ve the current configuration Click on the System Management Configuration Management Configuration Management click Save button the running the content of the config files saved to the startup config...

Страница 82: ...ort Figure 7 22 Imported Configuration Import the configuration steps are as follows Step 1 Select the Import Configuration Step 2 Click Choose File button to find you want to import the configuration...

Страница 83: ...gs Factory default operation steps are as follows Step 1 Click the Restore the Factory Settings button Step 2 In the pop up confirmation box click the OK button Step 3 After the completion of the rese...

Страница 84: ...84 1 Configure some functions such as IP address port speed limit port mirroring and other functions...

Страница 85: ...up the current running profile 3 On the basis of step 1 add or remove the function configuration such as port description 4 Click on the Apply Delete The configuration file is applied the system will...

Страница 86: ...guration copy 7 7 SNMP 7 7 1 Check the SNMP Click on the System Management SNMP you can view the SNMP configured information Figure 7 26 View the SNMP Configuration Information By default SNMP is not...

Страница 87: ...lows Step 1 Choose open SNMP options Step 2 Click OK button to complete the configuration 7 7 3 To disable the SNMP Click ON the System Management SNMP choose the SNMP service click ON the ON to OFF c...

Страница 88: ...on steps are as follows Step 1 Select ON option Step 2 Click OK button to complete the configuration 7 7 5 Disable the TRAP Choose the SNMP TRAP service click ON the ON to OFF click OK complete the co...

Страница 89: ...onfiguration steps are as follows Step 1 In the community name dialog box input the pub Step 2 Select RO permissions Step 3 Click on OK button complete the configuration 7 7 7 Added the SNMP TRAP serv...

Страница 90: ...mplete the configuration When an SNMP closed hide the SNMP TRAP service host list 7 7 8 Delete the SNMP TRAP service host Click on the System Management SNMP in the SNMP TRAP service host list need to...

Страница 91: ...s in the configuration The EVENT should be created first Please note the prompts in the configuration eg Rising Threshold is greater than Falling Threshold 7 8 3 Change ROMN type On the ROMN configure...

Страница 92: ...lick the Statistics List We can choose the port to view the information Figure 7 38 View the Port Configure Information 7 8 4 Delete the configured rule Select the entry you want to delete and click F...

Страница 93: ...ry List Rule 7 9 LLDP SETTINGS 7 9 1 LLDP settings Click on the System Management LLDP Settings LLDP Settings can view the LLDP settings information The default mode is Global settings and this featur...

Страница 94: ...9 3 LLDP PORT SET Configuration the LLDP Port Properties Figure 7 44 LLDP port properties 7 9 4 Neighbor info When the LLDP function is enabled the neighbor information is recorded when a neighbor dev...

Страница 95: ...bor Info 7 10 ADMINISTRATION 7 10 1 Telnet info Click on the System Management Administration Administration Settings can view the telnet settings information This feature is turned off by default Fig...

Страница 96: ...96 7 10 2 ENABLE THE TELNET Click on the button and apply To enable the telnet and the user can connect to the device via telnet Figure 7 47 Enable Telnet Figure 7 48 Telnet Login...

Страница 97: ...97 7 10 3 HTTPS Enable https function users can through https management the device Figure 7 49 Enable HTTPS Figure 7 50 HTTPS login...

Страница 98: ...98 7 10 4 SSH Enable SSH function and SSH takes a long time to open for the first time Figure 7 51 Enable SSH...

Страница 99: ...99 Figure 7 52 Use SSH2 Login...

Страница 100: ...100 Figure 7 53 Use SSH1 Login...

Страница 101: ...the PSE system configuration Click on the navigation bar PSE System Management PSE System Configuration to view the PSE system information of the current switch click Refresh button display refresh c...

Страница 102: ...ation bar PSE System Management PSE System Configuration to configure power supply mode to automatic mode Figure 8 2 Automatic Mode To configure the switch PSE System steps as follows Step 1 In the po...

Страница 103: ...gure 8 3 Static Mode To configure the switch PSE System steps as follows Step 1 In the power supply mode choose static mode Step 2 Click on Apply Settings button to complete the configuration 8 1 2 3...

Страница 104: ...Settings button to complete the configuration 8 2 POE PORT CONFIGURATION Click the PSE System Management POE Port Configuration to configure the POE port on the switch Figure 8 5 PoE Port Configuratio...

Страница 105: ...port settings follow these steps Step 1 Select port and Click icon Step 2 In the power supply enable choose disable 8 3 POE TIMER CONFIGURATION Click the PSE System Management PoE Timer Configuration...

Страница 106: ...eps are as follows Step 1 Select a port to configure Step 2 In the timer choose enable Step 3 Configure absolute time start time 2017 8 29 08 30 end time 2017 9 30 08 30 Step 4 Configure periodic time...

Страница 107: ...riority schedule Figure 9 1 Priority Schedule 9 1 2 The configuration global settings of SP 9 1 2 1 The configuration global settings of 802 1P SP Click on QoS Priority Schedule Global Settings in sch...

Страница 108: ...Global Settings in 802 1p and WRR Priority schedule steps are as follows Step 1 In scheduling mark choose 802 1p Step 2 In the Scheduling algorithm choose WRR Step 3 In queue1 text box enter the weigh...

Страница 109: ...gure 9 4 Global Settings in 802 1p and Hybrid Priority schedule steps are as follows Step 1 In scheduling mark choose 802 1p Step 2 In the Scheduling algorithm choose hybrid Step 3 In strict priority...

Страница 110: ...se DSCP Step 2 In the Scheduling algorithm choose strict priority Step 3 In from DSCP value text box choose 0 and in to DSCP value text box choose 1 and in priority text box choose low Step 4 In from...

Страница 111: ...9 6 Global Settings in DSCP and WRR Priority schedule steps are as follows Step 1 In scheduling mark choose DSCP Step 2 In the Scheduling algorithm choose WRR Step 3 In queue1 text box enter the weigh...

Страница 112: ...chedule steps are as follows Step 1 In scheduling mark choose DSCP Step 2 In the Scheduling algorithm choose hybrid Step 3 In strict priority text box choose the queue3 4 Step 4 In WRR text box choose...

Страница 113: ...113 Modify DSCP values follow these steps Step 1 Select DSCP values and Click icon Step 2 In the priority text box choose medium Step 3 Click on the save Step 4 Click OK...

Страница 114: ...EEE 802 3az EEE Settings you can view the EEE information Figure 10 1 View the 802 3az EEE Settings 10 1 2 Active the EEE Click ON the EEE EEE 802 3az EEE Settings choose the 802 3az EEE click ON the...

Страница 115: ...E022019 CS R02...

Отзывы:

Нет отзывов