HP PROCURVE 2910AL, Руководство по обеспечению безопасности доступа

Страница: 213 / 594

Configuring RADIUS Server Support for Switch Services
RADIUS Server Configuration for Per-Port CoS (802.1p Priority) and Rate-Limiting
Syntax: show port-access authenticator [ port-list ]
show rate-limit all
show qos port-priority
These commands display the CoS and Rate-Limiting settings
specified by the RADIUS server used to grant authentication
for a given client on a given port. When the authenticated
client session closes, the switch resets these fields to the values
to which they are configured in the switch’s running-config
file.
show port-access authenticator [ port-list ]
displays, for 802.1X
authentication, the status of RADIUS-imposed overrides of
the switch’s per-port CoS and Rate-Limiting configuration.
show rate-limit all
displays, for all port-access authentication
methods (802.1X, Web-Auth, and MAC-Auth), the status of
RADIUS-imposed overrides of the switch’s per-port Rate-
Limiting configuration.
show qos port-priority
displays, for all port-access authentica­
tion methods (802.1X, Web-Auth, and MAC-Auth), the status
of RADIUS-imposed overrides of the switch’s per-port CoS
(802.1p) priority for inbound packets.
ProCurve (config)# show rate-limit all
Port 2 has a rate limit of 500 Kbps with no
RADIUS override.
Inbound Rate Limit Maximum %
Port 3 has a 50 percent rate limit, which is
50% of the port’s available bandwidth.
Port | Limit Mode Radius Override
The 80 in the Radius Override field indicates
----- + -------- --------- ---------------
that there is an active client session in which
the RADIUS server used to authenticate the
1 | Disabled Disabled No-override
most recent client has imposed an inbound
2 | 500 kbps 80 bandwidth limit of 80%.
3 | 50 % No-override
4 | Disabled Disabled No-override
Disabled indicates that there is no default
rate-limit configured for the port. No­
6 | Disabled Disabled No-override
override indicates that there is currently no
RADIUS-imposed rate-limit on the
5 | Disabled Disabled No-override
7 | Disabled Disabled No-override
associated ports.
Figure 6-1. Example of Displaying Inbound Rate-Limiting Imposed by a RADIUS Session
6-7