background image

2.3.3.27.2 Clear Port Security

This command is used to clear port security dynamic MAC addresses.

CLI Syntax: clear port-security dynamic [address MAC] | [interface IFNAME]

Example: SWITCH# clear port-security dynamic

                SWITCH# clear port-security dynamic address 0023.1313.2313

                

SWITCH# clear port-security dynamic interface gi1/0/1

2.3.3.27.3 Switchport Port-Security

This command is used to set the port security configuration and MAC addresses.

CLI Syntax: switchport port-security [mac-address MAC] | [maximum VALUE] | [violation

{protect | restrict | shutdown}] | [reup]

Example: (config)# interface gi1/0/1

                (config-if)# switchport port-security

                (config-if)# switchport port-security mac-address 0023.1313.2313

                (config-if)# switchport port-security maximum 20

                (config-if)# switchport port-security violation protect

                

(config-if)# switchport port-security reup

2.3.3.27.4 Switchport Port-Security Aging

This command is used to set the port security aging configuration.

CLI Syntax: switchport port-security aging {time TIME | type {absolute | inactivity}}

Example: (config)# interface gi1/0/1

                (config-if)# switchport port-security aging time 20

                (config-if)# switchport port-security aging type absolute

2.3.4 Miscellaneous commands

show monitor:

 Shows the environment variables, like temperature, fan speed and voltage.

show sysleds:

 Shows the three system leds: SYSTeM, RPS and FAN.

show modelname:

 Shows the model name of the switch.

show version:

 Shows the hardware, boot rom and firmware version.

ping:

 Ping the remote host.

show ip route:

 display the entries in the routing table.

 

3  sPecifications

 

Standards

• Ieee 802.1d (Spanning Tree Protocol)

• Ieee 802.1s (Multiple Spanning Tree Protocol)

• Ieee 802.1w (Rapid Spanning Tree Protocol)

• IEEE 802.1p (Traffic Prioritization)

• Ieee 802.1q (VlAN Tagging) 

• Ieee 802.3 (10Base-T ethernet)

• Ieee 802.3ab (Twisted Pair Gigabit ethernet)

• Ieee 802.3ad (link Aggregation)

• Ieee 802.3u (100Base-TX Fast ethernet)

• IEEE 802.3x (flow control, for full duplex mode)

• Ieee 802.3z (1000Base-SX/lX/lHX)

• SNMPv1/v2c/v3 (Simple Network Management Protocol)

General

• Media support:

  - 10Base-T Cat3, 4, 5 UTP/STP RJ-45

  - 100Base-TX Cat5 UTP/STP RJ-45

  - 1000Base-T Cat5e UTP/STP RJ-45

50

SPECIFICATIONS

Содержание 523868

Страница 1: ...Managed Layer 3 Access Switch user manual Model 523868 INT 523868 UM 0807 01...

Страница 2: ......

Страница 3: ...Mbps LAN switch with Auto MDI MDI X support Supports virtual server port forwarding and DMZ demilitarized zone Supports DDNS dynamic DNS Supports VPN pass through IPSec PPTP L2TP 94 Mbps WAN to LAN th...

Страница 4: ...em Overview 8 2 1 1 Configuration Using the Console Port RS 232 9 2 1 1 1 Using HyperTerminal to Set the IP Address 9 2 1 2 Configuration Using Telnet and SSH 10 2 1 3 SNMP Based Management and Settin...

Страница 5: ...Table 31 2 2 9 Filters 33 2 2 9 1 Filter Set 33 2 2 9 2 Filter Attach 34 2 2 10 Security 34 2 2 10 1 Port Access Control 34 2 2 10 2 Dial In User 35 2 2 10 3 RADIUS 35 2 2 11 Traffic Chart 36 2 2 11...

Страница 6: ...ype fiber slots and each of these RJ 45 ports is interchangeable with a corresponding SFP slot The Gigabit copper port will have the same number as its corresponding SFP slot This means that once an S...

Страница 7: ...rear of the unit adjacent to the AC power connector and the system fans The switch s power supply automatically self adjusts to the local power source and may be powered on without having any or all L...

Страница 8: ...ly supports auto sensing and auto negotiation 1 Insert one end of a Category 3 4 5 5e twisted pair cable into an available RJ 45 port on the switch and the other end into the port of the network node...

Страница 9: ...e or Netscape Navigator 4 0 or above Access the switch via a terminal emulator such as HyperTerminal attached to the console port The console port is set at the factory with the following default COM...

Страница 10: ...location NOTE With HyperTerminal the command lines are the same as for Telnet You can continue using HyperTerminal along with the instructions given in the following sections Otherwise log out by typ...

Страница 11: ...tches and other network devices Use SNMP to configure system features for proper operation to monitor performance and to detect potential problems in the switch switch group or network In short SNMP d...

Страница 12: ...staller screen will display Wait a few moments until the next screen License Agreement appears 4 After reading the License Agreement select Typical setup the recommended option vs Custom setup Click A...

Страница 13: ...eb pages that allow equipment management through the Internet The Java Runtime Environment JRE is required to run Java applet programs that are automatically downloaded from the switch during manageme...

Страница 14: ...ment Model Name The product name is listed MAC Address The switch s MAC address is listed System Name The user assigned name to identify the system editable System Contact Enter info as desired System...

Страница 15: ...DHCP Snoop Enable disable the DHCP snooping function Snooping Assign the selected port to be an untrusted or trusted port Select the corresponding port number and configure the port setting then clic...

Страница 16: ...mber regarding DHCP and VLANs Because each VLAN is a separate IP subnet you must configure your DHCP server to deliver IP addresses that are appropriate for each subnet With Windows 2000 s DHCP server...

Страница 17: ...tion as static The parameters below must be input in order to configure a static route Destination Enter the destination of the IP address Netmask Enter the subnet mask of the destination for generati...

Страница 18: ...eighbors 2 2 6 2 3 RIP Version The Managed Layer 3 Access Switch can support RIPv1 RIPv2 or both Incoming Packets Used to specify the RIP version for the interpretation of incoming RIP packets Outgoin...

Страница 19: ...d Stub A stub area is not a transit area since there is only one connection to the stub area Selecting from the pull down menu use this attribute to specify characteristics of this area no defined not...

Страница 20: ...changes and make them effective immediately click Submit Click Refresh to refresh the settings 2 2 6 4 2 DVMRP This function is used for configuring DVMRP Distance Vector Multicast Routing Protocol N...

Страница 21: ...nge is 1 255 Virtual IP This can be any IP address that belongs to the VLAN to be managed In general it can be the same as the interface IP address acting as the master router Priority This is the vir...

Страница 22: ...ng tree parameters of BPDU bridge protocol data unit transmission can be configured on this screen Hello Time This is the interval between the generation of configuration BPDUs Max Age This is a timeo...

Страница 23: ...ings Click Refresh to display current switch settings To eventually make all changes permanent in Flash memory click on Save Configuration listed at the bottom of the Configuration Menu and click Save...

Страница 24: ...group must operate in full duplex mode at the same speed All ports in the link aggregation group must be configured in auto negotiation mode or full duplex mode This configuration will make the full...

Страница 25: ...ts in the selected mirrored ports NOTE The monitor port cannot belong to any link aggregation group and cannot operate as a normal switch port It does not switch packets or do address learning Ingress...

Страница 26: ...IGMP snooping is globally enabled on the switch If global snooping is disabled you cannot enable VLAN snooping If global snooping is enabled you can enable or disable VLAN snooping Last Member Query...

Страница 27: ...switch settings To eventually make all changes permanent in Flash memory click on Save Configuration listed at the bottom of the Configuration Menu and click Save 2 2 7 8 Dynamic Addresses This scree...

Страница 28: ...port to be a tagged port or an untagged port by clicking on the port on the selection panel and choosing one of three options An untagging port will remove VLAN tags from the transmitted packets A ta...

Страница 29: ...de Enable disable GVRP on the individual 802 1Q trunk port GVRP must be configured on both sides of the trunk to work correctly Registration By default GVRP ports are in normal registration mode These...

Страница 30: ...riority to transmit packets Click Submit to commit the settings Click Refresh to display current switch settings To eventually make all changes permanent in Flash memory click on Save Configuration li...

Страница 31: ...v2c Click Submit to commit the settings Click Refresh to display current switch settings To eventually make all changes permanent in Flash memory click on Save Configuration listed at the bottom of t...

Страница 32: ...l Enter the security model the group belongs to Any is suitable for v1 v2 or v3 USM is SNMPv3 related Security Level Enter the Security Level name the group belongs Only NoAuth AuthNopriv or AuthPriv...

Страница 33: ...ule page or click Remove to remove the filter set A filter set consists of a particular type of rules with rules having the same fields for filtering packets belonging to the same type e g two rules t...

Страница 34: ...supports the 802 1x port based security feature Only authorized hosts are allowed to access the switch port Traffic from unauthenticated hosts will be blocked Authentication can be provided via a RAD...

Страница 35: ...anent in Flash memory click on Save Configuration listed at the bottom of the Configuration Menu and click Save 2 2 10 2 Dial In User This screen is used to define users in the local database of the s...

Страница 36: ...time interval at which new data is retrieved from the switch Color Assign a different color to each variable After the variables have been set click Draw to allow the browser to draw the graphic char...

Страница 37: ...terminal emulator on your PC such as HyperTerminal or command line interpreter to configure the switch Configure the terminal emulator with a baud rate of 9600 8 bit data no parity 1 stop bit and no...

Страница 38: ...2 3 3 1 User Account 2 3 3 1 1 Add User Add a new user or modify an existing user s password CLI Syntax add user user name password Example SWITCH add admin 123 2 3 3 1 2 Delete User Delete an existi...

Страница 39: ...mmand on the switch to configure CLI Syntax configure terminal Example SWITCH configure terminal 2 3 3 3 3 Enable Enter enable mode and turn on privileged mode command CLI Syntax enable Example SWITCH...

Страница 40: ...ess in interface vlan1 CLI Syntax ip address A B C D M Example config interface vlan 1 config if ip address 192 168 20 121 24 2 3 3 3 13 Reboot Use this command to reboot the system CLI Syntax reboot...

Страница 41: ...ME Example SWITCH show l2_interface gi1 0 2 2 3 3 5 IP Interface 2 3 3 5 1 Show VLAN Name String Use the show vlan user EXEC command to display the parameters for all configured VLANs or one VLAN if t...

Страница 42: ...Version 1 or Version 2 packets The default mode is Version 2 CLI Syntax version 1 2 Example config router version 1 2 3 3 6 4 Network Set the RIP enable interfaces via network Interfaces with addresse...

Страница 43: ...ctive CLI Syntax show spanning tree active Example SWITCH show spanning tree active 2 3 3 10 5 Spanning Tree Enable and Disable Enable Disable the spanning tree CLI Syntax spanning tree enable disable...

Страница 44: ...tocol LACP on the switch CLI Syntax lacp system priority 1 65535 Example config lacp system priority 20000 2 3 3 13 Mirroring 2 3 3 13 1 Mirror Mode To set the port mirror mode CLI Syntax mirror mode...

Страница 45: ...r query interval 100 2 3 3 16 Traffic Control 2 3 3 16 1 Storm Control Use the storm control configuration command on the switch to set the limit rate of the port s total bandwidth used by broadcast d...

Страница 46: ...ow mac address table Example SWITCH show mac address table 2 3 3 19 VLAN 2 3 3 19 1 Show VLAN Name String Use the show vlan user EXEC command to display the parameters for all configured VLANs or one...

Страница 47: ...vrp statistics IFNAME status CLI Syntax show gvrp statistics IFNAME Example SWITCH show gvrp statistics gi1 0 1 2 3 3 21 CoS QoS 2 3 3 21 1 Queue CoS Map Use the queue cos map configuration command on...

Страница 48: ...ntax mac access list extended WORD Example config mac access list extended mac_acl_1 2 3 3 23 3 Filter Conditions This command specifies one or more conditions denied or permitted to decide if the pac...

Страница 49: ...t setting CLI Syntax dot1x port control auto force authorized force unauthorized Example config interface gi1 0 1 config if dot1x port control force authorized 2 3 3 25 Dial In User 2 3 3 25 1 Dot1x U...

Страница 50: ...y aging time TIME type absolute inactivity Example config interface gi1 0 1 config if switchport port security aging time 20 config if switchport port security aging type absolute 2 3 4 Miscellaneous...

Страница 51: ...ess bandwidth Port Mirroring for all ports with sniffer port configuration Port Aggregation Trunking 32 groups with up to 8 member ports per trunk SNMP Management with Host Table Trap Setting and SNMP...

Страница 52: ...NOTES 52...

Страница 53: ...NOTES 53...

Страница 54: ...NOTES 54...

Страница 55: ...NOTES 55...

Страница 56: ...uct Please contact your INTELLINET NETWORK SOLUTIONS dealer with comments or questions Copyright INTELLINET NETWORK SOLUTIONS All products mentioned are trademarks or registered trademarks of their re...

Отзывы: