H3C H3C S5600 Series, Руководство по эксплуатации

Страница: 911 / 1278

Operation Manual – Cluster
H3C S5600 Series Ethernet Switches
Chapter 1 Cluster
1-17
Task Remarks
Enabling NDP globally and on specific ports Required
Enabling NTDP globally and on a specific port Required
Enabling the cluster function Required
Accessing the shared FTP/TFTP server from a member
device
Optional
Note:
To reduce the risk of being attacked by malicious users against opened socket and
enhance switch security, the S5600 series Ethernet switches provide the following
functions, so that a cluster socket is opened only when it is needed:
z
Opening UDP port 40000 (used for cluster) only when the cluster function is
implemented,
z
Closing UDP port 40000 at the same time when the cluster function is closed.
On member devices, the preceding functions are implemented as follows:
z
When you execute the add-member command on the management device to add a
candidate device to a cluster, the candidate device changes to a member device
and its UDP port 40000 is opened at the same time.
z
When you execute the auto-build command on the management device to have
the system automatically add candidate devices to a cluster, the candidate devices
change to member devices and their UDP port 40000 is opened at the same time.
z
When you execute the administrator-address command on a device, the device's
UDP port 40000 is opened at the same time.
z
When you execute the delete-member command on the management device to
remove a member device from a cluster, the member device's UDP port 40000 is
closed at the same time.
z
When you execute the undo build command on the management device to remove
a cluster, UDP port 40000 of all the member devices in the cluster is closed at the
same time.
z
When you execute the undo administrator-address command on a member
device, UDP port 40000 of the member device is closed at the same time.
II. Enabling NDP globally and on specific ports
Follow these steps to enable NDP globally and on specific ports:
To do… Use the command… Remarks
Enter system view system-view —
Enable NDP globally ndp enable Required