enterasys switch configuration guide

The hardware, firmware, or software described in this document is subject to change without notice. Resolution of incidents of 2nd level. An ABR keeps a separate copy of the link-state database for each area to which it is connected. Port advertised ability Maximum ability advertised on all ports. If you want to change the default timeout value for a specific server or all servers, you must enter the set tacacs server command using the timeout parameter. Autodidacte dans de multiples domaines informatique, je suis passionn par la scurit informatique.<br>actuellement technicien et admin systme, j'envisage long terme une rorientation (via des formations o diplme scolaire) dans le domaine de l'audit et du pentest. IP packets are not encapsulated in any further protocol headers as they transit the Autonomous System (AS). DHCP and BOOTP Relay DHCP/BOOTP relay functionality is applied with the help of UDP broadcast forwarding. . Configuring ACLs C5(su)->router(Config)#show access-lists ipv6list1 ipv6list1 IPV6 access-list 1: deny icmpv6 2001:DB08:10::1/64 any 2: permit tcp 2001:db08:20::20/64 eq snmp any assign-queue 5 3: permit ipv6 2001:FFFF:30::30/64 any C5(su)->router(Config)#interface vlan 200 C5(su)->router(Config-if(Vlan 200))#ipv6 access-group ipv6list1 in C5(su)->router(Config-if(Vlan 200))#exit Configuring MAC ACLs Procedure 24-3 describes how to configure a MAC ACL. Service ACLs Restricting Management Access to the Console Port You can restrict access to system management to the switchs serial port only. StudentFS(rw)->set policy profile 2 name student pvid-status enable pvid 10 cos-status enable cos 8 Assigning Traffic Classification Rules Forward traffic on UDP source port for IP address request (68), and UDP destination ports for protocols DHCP (67) and DNS (53). Copying One Switch's Configuration to Another Switch Using USB Zero Touch Provisioning (ZTP) Criteria for USB Zero Touch Provisioning; Configuring VLANs Procedure 9-1 Static VLAN Configuration (continued) Step Task Command(s) 4. (Not applicable for super user accounts. Table 3-1 lists some commonly used commands. Switch# Switch#conf t Switch (config)#ip default-gateway {ip address} and set passwords. If LAG members with different port speeds should tie for the lowest port priority, the LAG member with the lowest port number breaks the tie. For information on the command syntax and parameters, refer to the online help or the CLL Reference for your platform. set port vlan port-string vlan-id [modify-egress | no-modify-egress] Optionally, specify whether or not the ports should be added to the VLANs untagged egress list and removed from other untagged egress lists. Before attempting to configure a single device for VLAN operation, consider the following: What is the purpose of my VLAN design? Display the current IPsec settings. Configuring Enterasys Discovery Protocol System(rw)->set lldp port tx-tlv med-loc ge.1.1-6 LLDP Display Commands Table 13-2 lists LLDP show commands. About Security Audit Logging The secure.log file stored in the secure/logs directory cannot be deleted, edited, or renamed. Configuration Guide Firmware 6.61.xx and Higher. Configuring RIP Procedure 21-1 Basic RIP Configuration (continued) Step Task Command(s) 3. Further, if a BPDU timeout occurs on a port, its state becomes listening until a new BPDU is received. vlanvlanid (Optional)SpecifiestheinterfaceforwhichtoclearDHCPv6statistics. Policy Configuration Example Roles The example defines the following roles: guest Used as the default policy for all unauthenticated ports. System baud rate Set to 9600 baud. (See Overview on page 18-12 for more information.) Use the set sntp trustedkey command to add an authentication key to the trusted key list. In the configuration shown, these default settings have not been changed. User Account Overview The emergency access user is still subject to the system lockout interval even on the console port. (Telnet client is enabled by default.) 9. Managing Switch Configuration and Files Images: ================================================================== Filename: b5-series_06.42.03.0001 Version: 06.42.03.0001 Size: 6856704 (bytes) Date: Tue Dec 14 14:12:21 2010 CheckSum: 043637a2fb61d8303273e16050308927 Compatibility: B5G124-24, B5G124-24P2, B5G124-48, B5G124-48P2, B5K125-24 B5K125-24P2, B5K125-48, B5K125-48P2 Filename: b5-series_06.61.01.0032 (Active) (Boot) Version: 06.61.01. Table 25-9 show ipv6 ospf neighbor Output Details, Overview of Authentication and Authorization Methods. This basic configuration requires the configuration of four interfaces and associated IP addresses. This attribute contains the 42 byte authenticator response. Configuring OSPF Areas Area 2 ABR2(su)->router(Config)#router ospf 1 ABR2(su)->router(Config-router)#area 0.0.0.2 range 10.3.0.0 255.255.0.0 ABR2(su)->router(Config-router)#area 0.0.0.2 range 10.3.2.0 255.255.255.0 noadvertise Area 3 ABR3(su)->router(Config)#router ospf 1 ABR3(su)->router(Config-router)#area 0.0.0.3 range 10.1.0.0 255.255.0.0 Figure 22-3 OSPF Summarization Topology Configuring a Stub Area A stub area is a non-transit area. Quality of Service Overview Additional port groups, up to eight (0 through 7) total, may be created by changing the port group value. A stub area can be configured such that the ABR is prevented from sending type 3 summary LSAs into the stub area using the no-summary option. Any router with a priority of 0 will opt out of the DR election process. Collaboration with Enterprise/SP/Telco Client's IT architects for high level infra design and. Table 17-1 CoS Configuration Terminology Term Description CoS Setting Maps configured resources to a CoS index. Configuring IGMP Table 19-3 Layer 2 IGMP Configuration Commands Task Command Enable or disable IGMP on the system. DHCP Snooping ------set system service-acl my-sacl deny ip-source 192.168.10.10 mask 255.255.255.255 service ssh priority 1 set system service-acl my-sacl permit port ge.1.1 priority 2 set system service-acl my-sacl permit port ge.1.2 priority 3 set system service-acl my-sacl permit ip-source 10.10.22. System name Set to empty string. Configured and maintained VPN products for establish IPsec (L2L . IPv6 Routing Configuration Neighbor Discovery is the IPv6 replacement for ARP. This value should be the minimum of the default prune lifetime (randomized to prevent synchronization) and the remaining prune lifetimes of the downstream neighbors. Table 15-5 on page 15-19 defines the characteristics of each MSTI. RADIUS Management Authentication Procedure 26-2 Configuring IPsec Step Task Command(s) 1. P/N 9034174-01. . SNMP Support on Enterasys Switches Versions Supported Enterasys devices support three versions of SNMP: Version 1 (SNMPv1) This is the initial implementation of SNMP. Optionally, display the ACLs associated with a VLAN or port. Note: When configuring any string or name parameter input for any command, do not use any letters with diacritical marks (an ancillary glyph added to a letter). Configure NetFlow to Manage Your Cisco Switch (Optional) 1. Spanning Tree Basics designated port (Figure 15-6, call out 6), takes the role of backup port. Configuring PoE Procedure 7-3 PoE Configuration for G-Series Devices (continued) Step Task Command(s) 7. Thefollowingtabledescribestheoutputfields. The key is an alphanumeric string of up to 8 characters. Skilled in network testing and troubleshooting. vlanvlanid SpecifiestheVLANinterfaceforwhichtodisplaystatistics. Spanning Trees primary goal is to ensure a fully connected, loop-free topology. Enterasys Networks 9034313-07 Configuring Switches in a Stack . ipv6 route distance pref 3. You have the nonexclusive and nontransferable right to use only the one (1) copy of the Program provided in this package subject to the terms and conditions of this Agreement. Table 25-3 lists the tasks and commands. dir [filename] Display the system configuration. Because port admin keys for all LAGs and the physical ports 4 - 6 are the same, physical ports 4 - 6 satisfy rule 2. Stops any pending grafts awaiting acknowledgments. Stand Alone (SSA) Switch Hardware Installation Guide SSA-T4068-0252 SSA-T1068-0652 SSA-G1018-0652. The end stations in each building connect to a switch on the bottom floor. ThecommandsusedtoreviewandconfiguretheCDPdiscoveryprotocolarelistedbelow. Configuring Authentication Table 10-1 Default Authentication Parameters (continued) Parameter Description Default Value macauthentication Globally enables or disables MAC authentication on a device. set mac agetime time 4. Configuring IGMP Table 19-2 PIM Terms and Definitions (continued) Term Definition Rendezvous Point (RP) The root of a group-specific distribution tree whose branches extend to all nodes in the PIM domain that want to receive traffic sent to the group. A typical network may contain multiple MST regions as well as separate LAN segments running legacy STP and RSTP Spanning Tree protocols. OSPFv2 is available only on those fixed switch platforms that support advanced routing and on which an advanced feature license has been enabled. Nokia SRA -#367- and Cisco CCNP certified engineer with 5 years of experience. Optionally, disable clearing of dynamic MAC addresses on link change. Diffserv Disabled. 30 pounds of muscle before and after 30 pounds of muscle before and after Home Realizacje i porady Bez kategorii 30 pounds of muscle before and after C5(su)->router C5(su)->router>enable C5(su)->router#configure Enter configuration commands: C5(su)->router(Config)#router rip C5(su)->router(Config-router)#exit C5(su)->router(Config)#interface vlan 1 C5(su)->router(Config-if(Vlan 1))#ip address 192.168.63.1 255.255.255. LACPs ability to automatically aggregate links represents a timesaver for the network administrator who will not be required to manually configure the aggregates. Policy is applied using the port level default configuration. Configuring VRRP Router 2(su)->router(Config-router)#exit Multiple Backup VRRP Configuration Figure 23-3 shows a multi-backup sample configuration. set igmpsnooping groupmembershipinterval time Configure the IGMP query maximum response time for the system. Configure PoE parameters on ports to which PDs are attached. Create the following SNMP view group configurations. Create a VLAN and add ports to the VLAN. For information on changing these default settings, refer to Chapter 5, User Account and Password Management. enable|disable Enablesordisablesportwebauthentication. Table 19-5 Layer 2 IGMP Show Commands Task Command Display IGMP snooping information. enable|disable EnablesordisablesClassofServiceontheswitch.Defaultstateis disabled. Optionally, set the GARP join, leave, and leaveall timer values. User Authentication Overview Value: Indicates the type of tunnel. Additional Configuration Tasks current.log Deleting a Backup Image File Since the stackable and standalone switches can store only two firmware images at a time, you may have to delete a backup image, if one exists, before you can manually download a new firmware image. See Chapter 17, Configuring Quality of Service in this book for a complete discussion of QoS configuration. . Link Aggregation Configuration Example Table 11-6 LAG and Physical Port Admin Key Assignments Device LAG LAG Admin Key Physical Port Physical Port Admin Key S8 Distribution Switch 1 100 ge.1.1 100 ge.2.1 100 ge.3.1 100 ge.4.1 100 ge.1.2 200 ge.2.2 200 ge.3.2 200 ge.4.2 200 ge.1.21 100 ge.1.22 100 ge.2.23 100 ge.3.24 100 ge.1.21 200 ge.1.22 200 ge.1.23 200 ge.1.24 200 ge.2.17 300 ge.2.19 300 ge.2.22 300 ge.2. IRDP Disabled on all interfaces. The console port on the manager switch remains active for out-of-band (local) switch management, but the console port on each member switch is deactivated. Meraki MS Switches have many valuable key features. Setting the value to 0 will set the timeout to forever. ACLs on the A4 are described separately in this chapter since ACL support on the A4 is different from the support on the other Fixed Switch platforms. Neighbor Discovery Overview Figure 13-2 LLDP-MED LLDP-MED Network Connectivity Devices: Provide IEEE 802 network access to LLDP-MED endpoints (for example, L2/L3 switch) LLDP-MED Generic Endpoints (Class I): Basic participant endpoints in LLDP-MED (for example, IP communications controller) IP Network Infrastructure (IEEE 802 LAN) LLDP-MED Media Endpoints (Class ll): Supports IP media streams (for media gateways, conference bridges) LLDP-MED Communication Device Endpoints (Class III): Support IP comm. Packets sent to 172.111.1.1/16 would go to Router R2. Optionally, delete an entire ACL or a single rule or range of rules. Table 8-3 Link Flap Detection Show Commands Task Command Display whether the port is enabled for generating an SNMP trap message if its link state changes. VLAN Support on Enterasys Switches the perspective of the access layerwhere users are most commonly locatedegress is generally untagged. Port 5 looks up the destination MAC address in its FID. When tunnel mode is configured, VLAN-to-policy mapping will not occur on a stackable fixed switch or standalone fixed switch platform. If that fails, the device uses the proprietary capacitor-based detection method. RESTRICTIONS. A designated port may forward with the exchange of two BPDUs in rapid succession. Inspect both the TxQs and IRL support for the installed ports. Caution: Contains information essential to avoid damage to the equipment. Set the MultiAuth mode. Note: Priority mode and weight cannot be configured on LAGs, only on the physical ports that make up the LAG. Port Slot/Unit Parameters Used in the CLI. 14881000 for 10- Gigabit ports Use the show port broadcast command to display current threshold settings. after the rate value indicates an invalid rate value Group Resource Type Unit Rate Rate Limit Index Action type --------- ----------- ---------- ---- ---------- --------------- ------ 1. show file directory/filename Delete a file. . Configuring SNMP enterasys(su)-> set snmp notify SNMPv3TrapGen tag v3TrapTag inform How SNMP Will Process This Configuration As described in How SNMP Processes a Notification Configuration on page 12-7, if the SNMP agent on the device needs to send an inform message, it looks to see if there is a notification entry that says what to do with inform messages. Account Lockout User accounts can be locked out based on the number of failed login attempts or a period of inactivity. Specification Guide (English) Quick Setup Guide (English) User Manual (English) Installation Instruction (English) DFE (PLATINUM) WITH 60 10 100 1000BASE-T 7G4202-60 A value of 0x06 indicates that the tunneling medium pertains to 802 media (including Ethernet) Tunnel-Private-Group-ID attribute indicates the group ID for a particular tunneled session. All routers with the same VRID should be configured with the same advertisement interval. Thisexampleshowshowtodisplaythelinkflapparameterstable: Tabl e 74providesanexplanationoftheshowlinkflapparameterscommandoutput. In the event any provision of this Agreement is found to be invalid, illegal or unenforceable, the validity, legality and enforceability of any of the remaining provisions shall not in any way be affected or impaired thereby, and that provision shall be reformed, construed and enforced to the maximum extent permissible. 8 Port Configuration This chapter describes the basic port parameters and how to configure them. On ABRs connected to stub areas and NSSAs, configure the cost value for the default route sent into stub areas and NSSAs. About This Guide This guide provides basic configuration information for the Enterasys Networks Fixed Switch platforms using the Command Line Interface (CLI0, including procedures and code examples. BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. 14 Configuring Syslog This chapter describes how System Logging, or Syslog, operates on Enterasys fixed stackable and standalone switches, and how to configure Syslog. The PVID determines the VLAN to which all untagged frames received on the port will be classified. MAC Locking Response Validation When the MS-CHAP2-Success attribute is received in an access accept RADIUS response frame, it will be validated according to RFC2548 and RFC2759. VACM View-based Access Control Model, which determines remote access to SNMP managed objects, allowing subsets of management information to be organized into user views. Management Authentication Notification MIB Functionality Refer to the CLI Reference for your platform for detailed information about the commands listed below in Procedure 5-4. Enterasys Matrix N Standalone (NSA) Series Configuration Guide Firmware Version 5.41.xx P/N 9034073-08 Rev. Authentication Configuration Example In an 802.1x configuration, policy is specified in the RADIUS account configuration on the authentication server using the RADIUS Filter-ID. Security Mode Configuration Table 26-1 SNMP Commands Affected by Security Mode Settings (continued) Commands Access When Security Mode Setting Is: Normal C2 set/clear snmp targetaddr Read-Write Super User set/clear snmp notify Read-Write Super User set/clear snmp notifyfilter Read-Write Super User set/clear snmp notifyprofile Read-Write Super User Security Mode and User Authentication and Passwords The switch ensures that passwords are safeguarded during transit and while in storage using F. IPsec Configuration how to enable security audit logging. Authentication Configuration Example Authentication Configuration Example Our example covers the three supported stackable and fixed switch authentication types being used in an engineering group: end-user stations, an IP phone, a printer cluster, and public internet access. Dynamic VLAN authorization overrides the port PVID. Remote port mirroring involves configuration of the following port mirroring related parameters: 1. . Configuring ACLs Procedure 24-2 Configuring IPv6 ACLs (continued) Step Task Command(s) 3. 224.0.0. Strict priority queuing is illustrated in Figure 17-2. Ifnointerfaceisspecified,IPv6DHCPstatisticsforallinterfacesarecleared. set snmp view viewname securedviewname subtree 1 set snmp view viewname securedviewname subtree 0.0 set snmp view viewname unsecuredviewname subtree 1 set snmp view viewname unsecuredviewname subtree 0.0 6. 1 Use a DB9 male null-modem (laplink) cable. Configuring Link Aggregation This section provides details for the configuration of link aggregation on the N-Series, S-Series, stackable, and standalone switch products. IPv6 Routing Configuration the MTU value for the tunnel interfaces was reduced by 20 octets, to allow for the basic IPv4 headers added to IPv6 packets. Setup and maintained DNS, WINS and DHCP servers. Router R1 Router 1(su)->router(Config)#interface vlan 111 Router 1(su)->router(Config-if(Vlan 111))#ip address 172.111.1.1 255.255.255. Display current IPv6 management status. Refer to Procedure 26-6 on page 26-20. DHCP Configuration IP Address Pools IP address pools must be configured for both automatic and manual IP address allocation by a DHCP server. Table 16-5 Displaying Policy Configuration and Statistics Task Command(s) Display policy role information. Basic OSPF Topology Configuration Router 1(su)->router(Config-if(Vlan 1))#ip ospf areaid 0.0.0.1 Router 1(su)->router(Config-if(Vlan 1))#ip ospf enable Router 1(su)->router(Config-if(Vlan 1))#exit Router 2 CLI Input Router 2(su)->router(Config)#interface vlan 1 Router 2(su)->router(Config-if(Vlan 1))#ip ospf priority 10 Router 2(su)->router(Config-if(Vlan 1))#ip ospf areaid 0.0.0. If single port LAG is disabled, a single port LAG will not be initiated by this device. OSPF adjacencies can not be formed on a passive interface. It is designed for use where there may be many devices communicating at the same time, and any one of the devices could be the sender at any particular time. Enter router interface configuration command mode for the specified interface from global configuration command mode. Optionally, insert new or replace existing rules. 3. Ctrl+E Move cursor to end of line. Using Multicast in Your Network A new dependent downstream device appears on a pruned branch. It also makes management secure by preventing configuration through ports assigned to other VLANs. Refer to Table 4-7 on page 4-20 for default DHCP server settings. You and Enterasys agree as follows: 1. Configuring Authentication Procedure 10-1 IEEE 802.1x Configuration (continued) Step Task Command(s) 2. For detailed information about the CLI commands used in this book, refer to the CLI Reference for your Fixed Switch platform. Save Your System Configuration Settings. 3. User Authentication Overview Figure 10-1 Applying Policy to Multiple Users on a Single Port Authentication Request User 1 Switch Authentication Response Radius Server SMAC 00-00-00-11-11-11 Authentication Credentials User 1 Authentication Credentials User 2 Authentication Request Authentication Credentials User 3 Authentication Response User 2 SMAC 00-00-00-22-22-22 Port ge.1.5 Authentication Request User 3 Dynamic Admin Rule for Policy 1 SMAC = 00-00-00-11-11-11 ge.1.

13972 Francisquito Ave #27, Baldwin Park, Ca 91706, Owlbear Rodeo Multiple Maps, Articles E