Enterasys N Standalone (NSA) Series Specifikace

April 15, 2011 Page 1 of 36Configuring User AuthenticationThischapterprovidesthefollowinginformationaboutconfiguringandmonitoringuserauthen

Authentication OverviewApril 15, 2011 Page 10 of 36RFC 3580EnterasysswitchessupporttheRFC3580RADIUStunnelattributefordynamicVLANassignment

Understanding MulticastApril 16, 2009 Page 4 of 32IGMP Support on Enterasys DevicesEnterasysdevicesimplementIGMPversion2(RFC2236),whichinclud

Understanding MulticastApril 16, 2009 Page 5 of 32EachrouterperformsanIGMPforwardingchecktoseeifthereareanyhoststhatwanttojointhemu

Understanding MulticastApril 16, 2009 Page 6 of 32KeyfeaturesofDVMRParethefollowing:•usesthewell‐knownmulticastIPaddress224.0.0.4•usesIGM

Understanding MulticastApril 16, 2009 Page 7 of 32Route TableEachDVMRP‐enableddevicebuildsaDVMRProutetabletomaintainroutestoallnetworksi

Understanding MulticastApril 16, 2009 Page 8 of 32Asshowninthefollowingexample,theMroutetabledisplaystheincominginterfaceIPaddress,the

Understanding MulticastApril 16, 2009 Page 9 of 324. Determinesifthereisactivesourceinformationforthesourcenetwork,multicastgroup(S,G)pa

Understanding MulticastApril 16, 2009 Page 10 of 324. Ifthesenderwasadownstreamdependentneighborfromwhichaprunehadpreviouslybeenreceive

Understanding MulticastApril 16, 2009 Page 11 of 32PIM,ashared‐treetechnology,designatesarouterastherendezvouspoint(RP),whichistheroot

Understanding MulticastApril 16, 2009 Page 12 of 327. Aprunemessage(register‐stop)issentfromtheRPtothesource’sDR(number7infigure).Onc

Understanding MulticastApril 16, 2009 Page 13 of 32•Register‐Stop—ThesemessagesareusedbytheRPtotellthesource’sDRtostopregisteringtraf

Authentication OverviewApril 15, 2011 Page 11 of 36• Value:Indicatesthetypeoftunnel.Avalueof0x0D(decimal13)indicatesthatthe tunnelingp

Understanding MulticastApril 16, 2009 Page 14 of 32Rendezvous Point (RP) The root of a group-specific distribution tree whose branches extend to all n

Configuring MulticastApril 16, 2009 Page 15 of 32Configuring MulticastThissectionprovidesthef ollowinginformationaboutconfiguringmulticaston

Configuring MulticastApril 16, 2009 Page 16 of 32Table 3liststheLayer2IGMPconfigurationcommandsforSecureStack,D‐Series,G‐Series,andI‐Seri

Configuring MulticastApril 16, 2009 Page 17 of 32Table 4liststheLayer3IGMPconfigurationcommandsforSecureStackC2andC3devicesandG‐Series

Configuring MulticastApril 16, 2009 Page 18 of 32Basic IGMP ConfigurationsProcedure 1describesthebasicstepstoconfigureIGMPonEnterasysMatrix

Configuring MulticastApril 16, 2009 Page 19 of 32Example IGMP Configuration: Enterasys Matrix N-Seriesmatrix->set igmp enable 2, 3matrix->set ig

Configuring MulticastApril 16, 2009 Page 20 of 32Table 6listsLayer3IGMPshowcommandsforEnterasysMatrixN‐Seriesdevices.Table 7listsLayer2

Configuring MulticastApril 16, 2009 Page 21 of 32Table 10liststheDVMRPconfigurationcommandsfor SecureStackC2andC3devicesandG‐Seriesdevic

Configuring MulticastApril 16, 2009 Page 22 of 32SecureStack C2 and C3 and G-SeriesProcedure 5describesthebasicstepstoconfigureDVMRPonSecureS

Configuring MulticastApril 16, 2009 Page 23 of 32Router R2 ConfigurationFortheVLAN1interface,whichprovidesconnectiontotheRouterR1,anIPad

Authentication OverviewApril 15, 2011 Page 12 of 36•AproblemwithmovinganendsystemtoanewVLANisthattheendsystemmustbeissuedanIPaddr

Configuring MulticastApril 16, 2009 Page 24 of 32Configuring PIMPIM-SM Configuration CommandsTable 13liststhePIM‐SMsetcommandsforEnterasysMatr

Configuring MulticastApril 16, 2009 Page 25 of 32Basic PIM-SM ConfigurationsBydefault,PIM‐SMisdisabledgloballyonEnterasysMatrixN‐Series,Secu

Configuring MulticastApril 16, 2009 Page 26 of 32Procedure 7describesthebasicstepstoconfigurePIM‐SMonaSecureStackC2andC3devicesandG‐Se

Configuring MulticastApril 16, 2009 Page 27 of 32Example ConfigurationFigure 6illustratesthePIM‐SMconfigurationoffourEnterasysMatrixN‐Series

Configuring MulticastApril 16, 2009 Page 28 of 32R1>Router(config)#interface vlan 3R1>Router(config-if(Vlan 3))#ip address 172.1.2.1 255.255.255

Configuring MulticastApril 16, 2009 Page 29 of 32Router R3 ConfigurationOnthisrouter,PIM‐SMisenabledonallinterfaces.VLAN10isconfiguredas

Configuring MulticastApril 16, 2009 Page 30 of 32R4>Router(config)#interface vlan 7R4>Router(config-if(Vlan 7))#ip address 172.4.4.4 255.255.255

Refertothedevice’sCLIReferenceGuideorConfigurationGuide ,asapplicable,foradescriptionoftheoutputofeachcommand.Display the PIM-SM s

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

September 08, 2010 Page 1 of 18Configuring Network Address Translation (NAT)Thisdocumentprovidesthe followinginformationaboutconfiguringNetwor

Authentication OverviewApril 15, 2011 Page 13 of 36authorizationisenabledgloballyandontheauthenticatinguser’sport,theVLANspecifiedbythe

Why Would I Use NAT in My Network?September 08, 2010 Page 2 of 18Why Would I Use NAT in My Network?EnterasyssupportforNATprovidesapracticalsolu

NAT OverviewSeptember 08, 2010 Page 3 of 18NAT OverviewThissectionprovidesanoverviewofNATconfiguration.NAT ConfigurationAtraditionalNATconf

NAT OverviewSeptember 08, 2010 Page 4 of 18WhenServer1respondstoClient1,itspacketarrivesattheNATrouterwithClient1’stranslatedaddressof

NAT OverviewSeptember 08, 2010 Page 5 of 18Figure 2 Basic NAPT Static Inside Address TranslationDynamic Inside Address TranslationsDynamicaddressbi

NAT OverviewSeptember 08, 2010 Page 6 of 18Figure 3 Basic NAT Dynamic Inside Address TranslationClient2 Walkthrough:ApacketarrivesattheNATroute

NAT OverviewSeptember 08, 2010 Page 7 of 18Client1 Walkthrough:ApacketarrivesattheNATrouterfromClient1withasourceaddressof10.1.1.1:125,

NAT OverviewSeptember 08, 2010 Page 8 of 18DNS, FTP and ICMP SupportNATworkswithDNSbyhavingtheDNSApplicationLayerGateway(ALG)translatean

Configuring NATSeptember 08, 2010 Page 9 of 18NAT BindingANATflowhastwodevicesassociatedwithitthatareincommunicationwitheachother:the

Configuring NATSeptember 08, 2010 Page 10 of 18Table 2listsNATresourcelimits.Overload Specifies that NAPT translation should take place for this

Configuring NATSeptember 08, 2010 Page 11 of 18Configuring Traditional NAT Static Inside Address TranslationProcedure 1describeshowtoconfiguretra

Configuring AuthenticationApril 15, 2011 Page 14 of 36Configuring AuthenticationThissectionprovidesdetailsfortheconfigurationofauthentication

NAT Configuration ExamplesSeptember 08, 2010 Page 12 of 18Displaying NAT StatisticsTable 4describeshowtodisplayNATstatistics.NAT Configuration

NAT Configuration ExamplesSeptember 08, 2010 Page 13 of 18NAT Static Configuration ExampleThisexamplestepsyouthroughaNATstaticconfigurat ionf

NAT Configuration ExamplesSeptember 08, 2010 Page 14 of 18System(su-config-intf-vlan.0.10)->exitSystem(rw-config)->EnableNAToutsideinterface:

NAT Configuration ExamplesSeptember 08, 2010 Page 15 of 18Figure 6 NAT Dynamic Configuration ExampleServer1200.1.1.50200.1.1.50:80NATROUTERDA: 200.1.

NAT Configuration ExamplesSeptember 08, 2010 Page 16 of 18ToconfigureClient3andClient4for dynamicNAPTtranslationontheNATrouter,wedefine

Terms and DefinitionsSeptember 08, 2010 Page 17 of 18Define the NAT Pools for Global AddressesDefinetheNATPoolfortheNATclients:System(rw-config

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

October 15, 2008 Page 1 of 14Configuring Neighbor DiscoveryThisdocumentprovidesinformationaboutconfiguringandmonitoringneighbordiscoveryonE

How Do I Implement Neighbor Discovery?October 15, 2008 Page 2 of 14How Do I Implement Neighbor Discovery?LLDP,EnterasysDiscoveryProtocol,andCisco

Understanding Neighbor DiscoveryOctober 15, 2008 Page 3 of 14Figure 1 Communication between LLDP-enabled DevicesLLDP-MEDTheLLDP‐MediaEndpointDisco

Configuring AuthenticationApril 15, 2011 Page 15 of 36pwa Globally enables or disables PWA authentication.Disabled.pwa enhancemode Allows a user on an

Understanding Neighbor DiscoveryOctober 15, 2008 Page 4 of 14TherearetwoprimaryLLDP‐MEDdevicetypes(asshowninFigure 2 onpage5):•Networkco

Understanding Neighbor DiscoveryOctober 15, 2008 Page 5 of 14Figure 2 LLDP-MEDIP NetworkInfrastructure(IEEE 802 LAN)LLDP-MED Communication Device End

Understanding Neighbor DiscoveryOctober 15, 2008 Page 6 of 14LLDPDU FramesAsshowninFig ure 3,eachLLDPDUframecontainsthefollowingmandatory T

Configuring LLDPOctober 15, 2008 Page 7 of 14–VLANName—AllowsabridgetoadvertisethetextualnameofanyVLANwithwhichitisconfigured.–Proto

Configuring LLDPOctober 15, 2008 Page 8 of 14Set the time-to-live value used in LLDP frames sent by this device. The time-to-live for LLDPDU data is c

Configuring LLDPOctober 15, 2008 Page 9 of 14Refertothedevice’sCLIReferenceGuideorConfigurationGuide,asapplicable,formoreinformationabo

Configuring LLDPOctober 15, 2008 Page 10 of 14Basic LLDP ConfigurationsProcedure 1describesthebasicstepstoconfigureLLDPonEnterasysMatrixN‐S

Configuring LLDPOctober 15, 2008 Page 11 of 14Example LLDP Configuration: Time to LiveThisexamplesetsthetransmitintervalto20secondsandtheho

Configuring Enterasys Discovery ProtocolOctober 15, 2008 Page 12 of 14Configuring Enterasys Discovery ProtocolEnterasys Discovery Protocol Configurati

Configuring Cisco Discovery ProtocolOctober 15, 2008 Page 13 of 14Configuring Cisco Discovery ProtocolCisco Discovery Protocol Configuration CommandsT

Configuring AuthenticationApril 15, 2011 Page 16 of 36Configuring IEEE 802.1xConfiguringIEEE802.1xonanauthenticatorswitchportconsistsof:•Sett

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

May 18, 2011 Page 1 of 21Configuring NetFlowThisdocumentdescribestheNetFlowfeatureanditsconfigurationonEnterasys®N‐Series,S‐Series,K‐Seri

How Can I Implement NetFlow?May 18, 2011 Page 2 of 21rescheduledforlowusagetimeblocks,ormaybeanillegitimateusageofthenetworkthatcanbe

How Can I Implement NetFlow?May 18, 2011 Page 3 of 21Figure 1 NetFlow Network Profile ExampleTocompleteaNetFlownetworkprofile,enableNetFlowon

Understanding FlowsMay 18, 2011 Page 4 of 212. Chooseuptofourcollectorsandamanagementapplication,suchasEnterasysSIEMorNetSightRelease4

Understanding FlowsMay 18, 2011 Page 5 of 21Figure 2providesagraphicdepictionofhowthesetimersinteract.Flows1and3showasinglelonglasti

Configuring NetFlow on the Enterasys S-Series, N-Series, and K-Series ModulesMay 18, 2011 Page 6 of 21• Examiningflowsbypriority•Characterizingtra

Configuring NetFlow on the Enterasys S-Series, N-Series, and K-Series ModulesMay 18, 2011 Page 7 of 21Configuring the Active Flow Export TimerTheacti

Configuring NetFlow on the Enterasys S-Series, N-Series, and K-Series ModulesMay 18, 2011 Page 8 of 21WhentransmittingNetFlowVersion5reports,the

Configuring NetFlow on the Enterasys S-Series, N-Series, and K-Series ModulesMay 18, 2011 Page 9 of 21Thedefaultbehaviorisforthetemplatetobes

Configuring AuthenticationApril 15, 2011 Page 17 of 36Configuring MAC-based AuthenticationConfiguringMAC‐basedauthenticationonaswitchconsistsof

Configuring NetFlow on the Enterasys S-Series, N-Series, and K-Series ModulesMay 18, 2011 Page 10 of 21Ifthevlanoptionisenabled,VLANsassociated

Configuring NetFlow on the X-Series RouterMay 18, 2011 Page 11 of 21Default NetFlow Settings for S-Series, N-Series, and K-Series SystemsTable 1provi

Configuring NetFlow on the X-Series RouterMay 18, 2011 Page 12 of 21TheX‐SeriesroutercurrentlysupportsdataexportVersion1andVersion5.CLIco

Configuring NetFlow on the X-Series RouterMay 18, 2011 Page 13 of 21Whenyouexecutetheclearnetflowallcommand,allNetFlowsettingsarereturned

Terms and DefinitionsMay 18, 2011 Page 14 of 21Terms and DefinitionsTable 3liststermsanddefinitionsusedinthisNetFlowconfigurationdiscussion.

NetFlow Version 9 TemplatesMay 18, 2011 Page 15 of 21NetFlow Version 9 TemplatesTheNetFlowVersion9implementationsupports15IPv4(templates256t

NetFlow Version 9 TemplatesMay 18, 2011 Page 16 of 21datarecordfieldsdefinedintheNetFlowstandard.Thecontentsofthesedatarecordfieldsare

NetFlow Version 9 TemplatesMay 18, 2011 Page 17 of 21specificdatarecordsareonlysupportedbyIPv4templates.IPv6specificdatarecordsareonlys

NetFlow Version 9 TemplatesMay 18, 2011 Page 18 of 21Table 9providesadescriptionofeachIPv4andIPv6NetFlowVersion9templatepertemplateID.D

264 Switch and IPv4 route ID template containing IPv4 base data record entries, along with the route next hop.265 Switch, IPv4 route ID, and MAC ID te

Configuring AuthenticationApril 15, 2011 Page 18 of 36Configuring Port Web Authentication (PWA)ConfiguringPWAontheswitchconsistsof:•Settingthe

NetFlow Version 9 TemplatesMay 18, 2011 Page 20 of 21281 Switch, IPv6 route ID, and MAC ID template containing IPv6 base data record entries, along wi

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

June 3, 2011 Page 1 of 14Configuring Power over Ethernet ManagementThisdocumentprovidesinformationaboutconfiguringandmonitoringPoweroverEthe

How Do I Implement PoE?June 3, 2011 Page 2 of 14How Do I Implement PoE?YoucanconfigurePoEonyourPoE‐compliantEnterasysdevicethroughtheCLI‐ba

How Do I Implement PoE?June 3, 2011 Page 3 of 14• Automaticmode,inwhichavailablepowerisdistributedevenlytoPoE‐capablemodulesbasedonPoEp

Configuring PoEJune 3, 2011 Page 4 of 14Configuring PoETable 2liststhePoEsettingsthatyoucanconfigurethroughthe CLIoneachPoE‐compliantEn

Configuring PoEJune 3, 2011 Page 5 of 14Stackable A2, A4, B2, B3, C2, C3 and Standalone D-Series DevicesRefertothedevice’sConfigurationGuideorC

Configuring PoEJune 3, 2011 Page 6 of 14Stackable B5 and C5 DevicesProcedure 2 PoE Configuration for Stackable B5 and C5 DevicesStep Task Command(s)1.

Configuring PoEJune 3, 2011 Page 7 of 14Refertothedevice’sConfigurationGuideorCLIReferenceGuideformoreinformationabouteachcommand.G-Ser

Configuring PoEJune 3, 2011 Page 8 of 144. (Optional) Specify the method the Enterasys device uses to detect connected PDs.• auto (default) — The Ente

Configuring AuthenticationApril 15, 2011 Page 19 of 36Whenenhancedmodeisenabled,PWAwilluseaguestpasswordandguestusernametograntnetwor

Configuring PoEJune 3, 2011 Page 9 of 147. (Optional) Configure the allocation mode for system power available for PoE.• auto (default) — Available po

Configuring PoEJune 3, 2011 Page 10 of 14Refertothedevice’sCLIReferenceGuideformoreinformationabouteachcommand.Modular N-Series, S-Series,

Configuring PoEJune 3, 2011 Page 11 of 144. (Optional) Set the PoE usage threshold on a module. Valid values are 1–99 percent. set inlinepower thresho

Configuring PoEJune 3, 2011 Page 12 of 14Refertothedevice’sConfigurationGuideformoreinformationabouteachcommand.Example PoE ConfigurationA

Configuring PoEJune 3, 2011 Page 13 of 14PoE Display CommandsTable 3listsPoEshowcommandsforEnterasysdevices.Refertothedevice’sCLIReferenc

Configuring PoEJune 3, 2011 Page 14 of 14Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedint

May 18, 2009 Page 1 of 32Configuring PolicyThisdocumentdescribestheEnterasys®policyfeatureanditsconfigurationonEnterasysMatrix®N‐Series,

How Can I Implement Policy?May 18, 2009 Page 2 of 32Securitycanbeenhancedbyallowingonlyintendedusersanddevicesaccesstonetworkprotocolsa

Policy OverviewMay 18, 2009 Page 3 of 32Standard and Enhanced Policy on Enterasys PlatformsTherearetwosetsofpolicycapabilitiessupported,depend

Policy OverviewMay 18, 2009 Page 4 of 32networkaccess andresourceusagealignwiththesecurityrequirements,networkcapabilities,andlegitimate

Why Would I Use It in My Network?April 15, 2011 Page 2 of 36• ConvergenceEndPoint(CEP)•RADIUSSnoopingEnterasysswitchproductssupporttheconfigu

Configuring AuthenticationApril 15, 2011 Page 20 of 36Procedure 5describesthestepstoconfigureCEP.Setting MultiAuth Idle and Session Timeout for

Policy OverviewMay 18, 2009 Page 5 of 32Assigning a Class of Service to this RoleHowapacketistreatedasittransitsthelinkcanbeconfiguredin

Policy OverviewMay 18, 2009 Page 6 of 32UsethesetpolicymaptablecommandspecifyingasingleVLANIDorrangeofIDsandthepolicyprofile‐indext

Policy OverviewMay 18, 2009 Page 7 of 32•Appliesboththefilter‐IDandtheVLANtunnelattributesifallattributesexistIfallattributesexist,the

Policy OverviewMay 18, 2009 Page 8 of 32Policyrulesarebasedontrafficclassifications.Table 1onpage 8providesthesupportedpolicyruletraffi

Policy OverviewMay 18, 2009 Page 9 of 32Adatavalueisassociatedwithmosttrafficclassificationstoidentifythespecificnetworkelementforthat

Policy OverviewMay 18, 2009 Page 10 of 32storagedoespersistafteraresetofthedevice.Usethestorage‐typeoptiontospecifythedesiredstorage

Policy OverviewMay 18, 2009 Page 11 of 32SIP(ip),DIP(ip),Protocol,TOS/DSCP,Fragmentationindication,DestinationPORT,andSourcePort.Usetheset

Policy OverviewMay 18, 2009 Page 12 of 32Standard and Enhanced Policy ConsiderationsThissectionitemizesadditionalpolicyconsiderationsfortheSec

Policy OverviewMay 18, 2009 Page 13 of 32Table 4providesacross‐referenceofstandard()andenhanced(X)policycapabilitytotrafficclassificatio

Policy OverviewMay 18, 2009 Page 14 of 32Time-To-Live (TTL) XXXXXXXXXIP Type of Service XXX XXXIP Protocol XXX XXXEther II Packet Type XX XXXLLC DSAP/

Configuring AuthenticationApril 15, 2011 Page 21 of 36Procedure 6describessettingtheMultiAuthidleandsessiontimeoutforCEP.Configuring MultiA

Configuring PolicyMay 18, 2009 Page 15 of 32Configuring PolicyThissectionpresentsconfigurationproceduresandtablesincludingcommanddescription

Configuring PolicyMay 18, 2009 Page 16 of 32• append - (Optional) Appends any egress, forbidden, or untagged specified VLANs to the existing list. If

Configuring PolicyMay 18, 2009 Page 17 of 32Procedure 2describeshowtoconfigureclassificationrulesasanadministrativeprofileortoassignpoli

Configuring PolicyMay 18, 2009 Page 18 of 32• trap - (Optional) An enhanced policy that enables or disables sending SNMP trap messages on first rule u

Configuring PolicyMay 18, 2009 Page 19 of 32Table 5describeshowtodisplaypolicyinformationandstatistics.5. Optionally, for enhanced policy cap

Configuring PolicyMay 18, 2009 Page 20 of 32In switch command mode, display a count of the number of times the device has dropped syslog or trap rule

Policy Configuration ExampleMay 18, 2009 Page 21 of 32Policy Configuration ExampleThissectionpresentsacollege‐basedpolicyconfigurationexample.

Policy Configuration ExampleMay 18, 2009 Page 22 of 32RolesTheexampledefinesthefollowingroles:• guest‐Usedasthedefaultpolicyforallunaut

Policy Configuration ExampleMay 18, 2009 Page 23 of 32Basic EdgeProtocolsnotappropriatetotheedgeshouldbeblocked.Forthisexamplewewillbloc

Policy Configuration ExampleMay 18, 2009 Page 24 of 32Forthisconfigurationexample,CoSrelatedconfigurationwillbespecifiedasafinalCoS.For

Configuring AuthenticationApril 15, 2011 Page 22 of 36switchdevices).Youmaychangetheprecedenceforoneormoremethodsbysettingtheauthentica

Policy Configuration ExampleMay 18, 2009 Page 25 of 32ARPforwardingisrequiredonetherport0x806.Enterasys(rw)->set policy rule 1 ether 0x806 m

Policy Configuration ExampleMay 18, 2009 Page 26 of 32Studentsshouldonlybeallowedaccesstotheservicesserver(subnet10.10.50.0/24)andshould

Policy Configuration ExampleMay 18, 2009 Page 27 of 32Configuring Policy for the Edge Faculty SecureStack C3Configuring the Policy RoleThefacultyrol

Policy Configuration ExampleMay 18, 2009 Page 28 of 32•AnameofphoneN3•AdefaultportVLANof0•AdefaultCoSof4BecauseVLANscanbeappliedtoN3

Policy Configuration ExampleMay 18, 2009 Page 29 of 32Configuring Policy for the Edge Services N-Series N3Configuring the Policy RoleTheservicesrole

Policy Configuration ExampleMay 18, 2009 Page 30 of 32Enable Enhanced Policy Capabilities on the Services N3 PlatformTheservicesN3platformsupports

Terms and DefinitionsMay 18, 2009 Page 31 of 32Terms and DefinitionsTable 6liststermsanddefinitionsusedinthispolicyconfigurationdiscussion.T

Revision HistoryEnterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditsweb

May 04, 2011 Page 1 of 15Configuring Port MirroringThisdocumentprovidesthe followinginformationaboutconfiguringandmonitoringportmirroringo

Why Would I Use Port Mirroring in My Network?May 04, 2011 Page 2 of 15•Many‐to‐manyDependingonyournetwork,portsthatyoucanconfiguretoparticip

Configuring AuthenticationApril 15, 2011 Page 23 of 36Procedure 9describessettingtheMultiAuthauthenticationportandmaximumuserproperties.Set

How Do I Implement Port Mirroring?May 04, 2011 Page 3 of 15Figure 2 Using Port Mirroring to Monitor All Incoming Traffic to a Backbone SwitchThemany

Overview of Port Mirroring Configurations on Enterasys SwitchesMay 04, 2011 Page 4 of 15Overview of Port Mirroring Configurations on Enterasys Switche

Overview of Port Mirroring Configurations on Enterasys SwitchesMay 04, 2011 Page 5 of 15RefertotheLinkAggregationsectionofyourdevice’sConfigu

Configuring Port MirrorsMay 04, 2011 Page 6 of 15VLAN MirrorsCreatingaVLANandsettingamirrorfortheVLANallowsyoutomonitoralltraffictoyo

Configuring Port MirrorsMay 04, 2011 Page 7 of 15Thereisnorestrictiononthenumberofsourceportsthatcanbeincludedinamirrortoadestinati

Configuring Port MirrorsMay 04, 2011 Page 8 of 15displaytheVTAPport.Tocreatetheportmirrorusethesetportmirroringcreatecommandspecifying

Configuring Port MirrorsMay 04, 2011 Page 9 of 15• ClearingPortMirroring(page10)Reviewing Port Mirroring Usethiscommandtodisplaythestatusof

Configuring Port MirrorsMay 04, 2011 Page 10 of 15Clearing Port MirroringUsethiscommandtoclearaportmirroringconfiguration:clear port mirroring

Example: Configuring and Monitoring Port MirroringMay 04, 2011 Page 11 of 15Usethiscommandtoclearaportmirroringconfiguration:clear port mirror

Example: Configuring and Monitoring Port MirroringMay 04, 2011 Page 12 of 15TheAddDevicescreendisplays.5. ModelthePlatinumDFEbyenteringitsI

Configuring AuthenticationApril 15, 2011 Page 24 of 36Setting MultiAuth Authentication TrapsTraps canbeenabledatthesystemandmodulelevelswhen

Example: Configuring and Monitoring Port MirroringMay 04, 2011 Page 13 of 1510. Repeatstep9forport5(fe.1.5showninFigure 3).RMONEthernetstat

Example: Configuring an IDS MirrorMay 04, 2011 Page 14 of 15Example: Configuring an IDS MirrorAsstatedintheoverviewaboutIDSMirrorsonpage5,N

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

May 09, 2011 Page 1 of 38Configuring Quality of Service (QoS)ThischapterprovidesthefollowinginformationaboutconfiguringandmonitoringQuality

Why Would I Use It in My Network?May 09, 2011 Page 2 of 38TheS‐SeriesFlex‐Edgefeature,supportedonlyonS‐Seriesswitches,providestheuniquecap

Quality of Service OverviewMay 09, 2011 Page 3 of 38Class of Service (CoS)YouimplementQoSfeaturesinaClassofService(CoS).Therearefourhardw

Quality of Service OverviewMay 09, 2011 Page 4 of 38CoS SettingsUsetheCoSsettingsconfigurationwhenmappingthepriorityoftheingressingpacket

Quality of Service OverviewMay 09, 2011 Page 5 of 38Figure 1 Assigning and Marking Traffic with a PriorityTheICMPprotocol,usedforerrormessaging

Quality of Service OverviewMay 09, 2011 Page 6 of 38resourcereferenceconfiguredinCoSsettings,andtheactualTxQorrateli mitingportresource

Quality of Service OverviewMay 09, 2011 Page 7 of 38Port ResourcesUsetheCoSportresourceconfigurationlayertoassociateactualratelimitervalue

Configuring AuthenticationApril 15, 2011 Page 25 of 36Configuring VLAN AuthorizationVLANauthorizationallowsforthedynamicassignmentofuserstot

Quality of Service OverviewMay 09, 2011 Page 8 of 38TxQ SchedulingTxQscanbeconfiguredforTxQscheduling,alsoreferredtoasweightedfairqueuing

Quality of Service OverviewMay 09, 2011 Page 9 of 38Figure 2 Strict Priority Queuing Packet BehaviorLow Latency QueuingALowLatencyQueue(LLQ)isa

Quality of Service OverviewMay 09, 2011 Page 10 of 38accesstoitspercentageoftimeslicessolongastherearepacketsinthequeue.Thenqueue2h

Quality of Service OverviewMay 09, 2011 Page 11 of 38Figure 4 Hybrid Queuing Packet BehaviorRate LimitingRatelimitingisusedtocontroltherateof

Quality of Service OverviewMay 09, 2011 Page 12 of 38Figure 5 Rate Limiting Clipping BehaviorFlood ControlCoS‐basedfloodcontrol,isaformofrate

CoS Hardware Resource ConfigurationMay 09, 2011 Page 13 of 38Figure 6 Rate Shaping Smoothing BehaviorRateshapingretainsexcesspacketsinaqueuea

CoS Hardware Resource ConfigurationMay 09, 2011 Page 14 of 38•Namestheportgroup• Assignsportstotheportgroup• Configuresnon‐LLQqueuesforwei

CoS Hardware Resource ConfigurationMay 09, 2011 Page 15 of 38CoS Settings Configuration LayerThefinalstepistoassigntheCoSindexestotheTxQre

CoS Hardware Resource ConfigurationMay 09, 2011 Page 16 of 381.0 4 txq 41.0 5 txq 51.0 6 txq 61.0

CoS Hardware Resource ConfigurationMay 09, 2011 Page 17 of 38TheremainderofthissectiondetailsaTxQrateshapingconfigurationthat:• Configures

Configuring AuthenticationApril 15, 2011 Page 26 of 36IftheauthenticationserverreturnsaninvalidpolicyorVLANtoaswitchforanauthenticating

CoS Hardware Resource ConfigurationMay 09, 2011 Page 18 of 383 3 * 6 * * * Disabled4 4

CoS Hardware Resource ConfigurationMay 09, 2011 Page 19 of 382.0 3 txq perc none tail-drop2.0 4 txq perc none

CoS Hardware Resource ConfigurationMay 09, 2011 Page 20 of 38•MapstheIRLreferencetotheCoSsetting(802.1priority)•EnablesCoS•Providesrelated

CoS Hardware Resource ConfigurationMay 09, 2011 Page 21 of 384 4 * 8 * * * Disabled5 5

CoS Hardware Resource ConfigurationMay 09, 2011 Page 22 of 38Usetheshowcosport‐resourceirlcommandtodisplaythedatarateandunitoftherate

CoS Hardware Resource ConfigurationMay 09, 2011 Page 23 of 38----------------------------------------------------------------------System(su)->ORL

CoS Hardware Resource ConfigurationMay 09, 2011 Page 24 of 38ORL Configuration Example Show Command OutputUsetheshowcossettingscommandtodisplay

CoS Hardware Resource ConfigurationMay 09, 2011 Page 25 of 38Usetheshowcosport‐resourceorlcommandtodisplaytheratelimiterunitandratefor

CoS Hardware Resource ConfigurationMay 09, 2011 Page 26 of 38CoS Reference LayerTheCoSreferencelayerisnotapplicabletofloodcontrol.CoS Setting

CoS Hardware Resource ConfigurationMay 09, 2011 Page 27 of 38Usetheshowcosport‐configflood‐ctrlcommandtodisplaytheportgroupnameandassign

Configuring AuthenticationApril 15, 2011 Page 27 of 36Procedure 14describesauthenticationserverconfiguration.Configuring RADIUS AccountingTherea

Feature Differences by PlatformMay 09, 2011 Page 28 of 38ge.1.1 29 irl not-violated 0ge.1.1 30 irl not-violat

ORLs•AllS‐Seriesmodulessupport4outboundratelimiters•EnterasysN‐Series,StackableSwitches,D‐Series,G‐Series,andI‐Seriesdevicesdonotsup

The QoS CLI Command FlowMay 09, 2011 Page 30 of 387. Configure a CoS inbound rate limiting index entry, by mapping a port group with a rate-limit valu

QoS Policy-Based Configuration ExampleMay 09, 2011 Page 31 of 38QoS Policy-Based Configuration ExampleInourexample,anorganization’snetworkadmini

QoS Policy-Based Configuration ExampleMay 09, 2011 Page 32 of 38Figure 7 QoS Configuration ExampleAcoreprofilefortherouterandanedgeprofilef

QoS Policy-Based Configuration ExampleMay 09, 2011 Page 33 of 38UsingNetSightPolicyManager,configurethepolicyrolesandrelatedservicesasfoll

Create a Policy Service•NametheserviceVoIPEdgeService.•ApplytheservicetotheVoIPEdgePolicyRole.Create a Rate-limiterCreatearate‐limitasf

QoS Policy-Based Configuration ExampleMay 09, 2011 Page 35 of 38•ToS:B8•SpecifyIRLindex1toassociatethisCoStotheratelimitCreate a Traffic C

Terms and DefinitionsMay 09, 2011 Page 36 of 38s-series(rw)->set policy rule admin-profile vlantag 12 mask 12 port-string ge.1.10-13 admin-pid 1s-s

Terms and DefinitionsMay 09, 2011 Page 37 of 38Rate Shaping The rescheduling of bursty traffic while in the queue based upon packet buffering such tha

Configuring AuthenticationApril 15, 2011 Page 28 of 36Procedure 15describesRADIUSaccountingconfiguration.Procedure 15 RADIUS Accounting Configura

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

June 03, 2011 Page 1 of 12Configuring RADIUS-SnoopingThischapterprovidesthefollowinginformationaboutconfiguringandmonitoringRADIUS‐Snooping

Why Would I Use RADIUS-Snooping in My Network?June 03, 2011 Page 2 of 12Why Would I Use RADIUS-Snooping in My Network?RADIUS‐SnoopingallowstheEnter

RADIUS-Snooping OverviewJune 03, 2011 Page 3 of 12RADIUS-Snooping ConfigurationMultiAuth ConfigurationMultiAuthmust beenablediftheRADIUS‐Snoopin

RADIUS-Snooping OverviewJune 03, 2011 Page 4 of 12table.Bydefault,theRADIUS‐Snoopingflowtableisempty.Entriesareaddedtotheflowtablebase

RADIUS-Snooping OverviewJune 03, 2011 Page 5 of 12Figure 1 RADIUS-Snooping OverviewFigure 1onpage 5illustratestheRADIUSrequestframeandRADIUS

Configuring RADIUS-SnoopingJune 03, 2011 Page 6 of 12Configuring RADIUS-SnoopingThissectionprovidesdetailsfortheconfigurationofRADIUS‐Snooping

Configuring RADIUS-SnoopingJune 03, 2011 Page 7 of 12Managing RADIUS-SnoopingTable 2describeshowtomanageRADIUS‐Snoopingonthedistribution‐tier

RADIUS-Snooping Configuration ExampleJune 03, 2011 Page 8 of 12RADIUS-Snooping Configuration ExampleOurRADIUS‐Snoopingconfiguration examplewillco

RADIUS-Snooping Configuration ExampleJune 03, 2011 Page 9 of 12WefirstsettheglobalMultiAuthmodetomultionthedistribution‐tierswitch.Wethe

Authentication Configuration ExampleApril 15, 2011 Page 29 of 36Authentication Configuration ExampleOurexamplecoversthefoursupportedmodularswit

Terms and DefinitionsJune 03, 2011 Page 10 of 12ThiscompletestheRADIUS‐Snoopingconfigurationexample.Terms and DefinitionsTable 4liststermsand

Revision HistoryEnterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditsweb

Terms and DefinitionsJune 03, 2011 Page 12 of 12

March 28, 2011 Page 1 of 27Configuring SNMPThischapterprovidesthefollowinginformationaboutconfiguringandmonitoringSNMPonEnterasys®N‐Serie

How Do I Implement SNMP?March 28, 2011 Page 2 of 27•AcommonmanagementplatformsupportedbymanynetworkdevicesHow Do I Implement SNMP?Youcanimpl

SNMP OverviewMarch 28, 2011 Page 3 of 27informationforaspecificvariable.Theagent,uponreceivingaGetorGetNextmessage,willissueaGetRes

SNMP Support on Enterasys DevicesMarch 28, 2011 Page 4 of 27Community Name StringsEarlierSNMPversions(v1andv2c)relyoncommunitynamestringsfo

SNMP Support on Enterasys DevicesMarch 28, 2011 Page 5 of 27control,SNMPv3alsoprovidesahigherdegreeofreliabilityfornotifyingmanagementstat

SNMP Support on Enterasys DevicesMarch 28, 2011 Page 6 of 27engine ID A value used by both the SNMPv3 sender and receiver to propagate inform notifica

SNMP Support on Enterasys DevicesMarch 28, 2011 Page 7 of 27Security Models and LevelsAnSNMPsecuritymodelisanauthenticationstrategythatisset

Authentication OverviewApril 15, 2011 Page 3 of 36IEEE 802.1x Using EAPTheIEEE802.1xport‐basedaccesscontrolstandardallowsyoutoauthenticatea

Authentication Configuration ExampleApril 15, 2011 Page 30 of 36Figure 5 Stackable Fixed Switch Authentication Configuration Example OverviewOurconf

Configuring SNMPMarch 28, 2011 Page 8 of 27Configuring SNMPThissectionprovidesthef ollowinginformationaboutconfiguringSNMPonEnterasysdevice

Configuring SNMPMarch 28, 2011 Page 9 of 271. Determinesifthe“keys”fortrap“doors”doexist.ThekeythatSNMPislookingforisthenotification

Configuring SNMPMarch 28, 2011 Page 10 of 27Configuring SNMPv1/SNMPv2cCreating a New ConfigurationProcedure 1showshowtocreateanewSNMPv1orSNMP

Configuring SNMPMarch 28, 2011 Page 11 of 27enterasys(su)->set snmp access groupRW security-model v1 read RW write RW notify RWenter

Configuring SNMPMarch 28, 2011 Page 12 of 27•“ConfiguringtheOptionalMaskParameter”onpage16•“ConfiguringSecureSNMPCommunityNames”onpage18

Configuring SNMPMarch 28, 2011 Page 13 of 27ThefollowingexampleisanEnterasysN‐SeriesdeviceconfigurationusingthestepsinProcedure 2.Itsho

Configuring SNMPMarch 28, 2011 Page 14 of 27enterasys(su)-> set snmp targetaddr Enterasys_Networks 172.29.10.1 param enterasysn tag

Configuring SNMPMarch 28, 2011 Page 15 of 27Trap EngineIDTousetrapsinsteadofinformnotifications,youwouldchangetheprecedingconfigurationas

Configuring SNMPMarch 28, 2011 Page 16 of 27enterasys(su)->clear snmp view All 1enterasys(su)->clear snmp view All 0.0enterasys(su)->set snmp

Configuring SNMPMarch 28, 2011 Page 17 of 27 etherStatsPkts1024to1518Octets=1.3.6.1.2.1.16.1.1.1.19.<port> etherStatsOwner=1.3.6.

Authentication Configuration ExampleApril 15, 2011 Page 31 of 365. ConfiguringtheprinterclusterMACauthenticationforthemodularswitchconfigura

Configuring SNMPMarch 28, 2011 Page 18 of 27 View Name = All Subtree OID = 1.3.6.1.2.1.1.1.0.244 Subtree mask = ff:df View Type =

Configuring SNMPMarch 28, 2011 Page 19 of 27Enterasysrecommendsthatyou“secure”allSNMPcommunitynames.Youdothisbycreatingaconfigurationt

Configuring SNMPMarch 28, 2011 Page 20 of 27ExampleThefollowingexampleshowsanN‐Series deviceconfigurationusingthestepsinProcedure 4.entera

Reviewing SNMP SettingsMarch 28, 2011 Page 21 of 27Reviewing SNMP SettingsUsethefollowingshowcommandsdescribedinthissectiontoreviewSNMPset

Reviewing SNMP SettingsMarch 28, 2011 Page 22 of 27CountersUsethiscommandtodisplaySNMPtrafficcountervalues:show snmp countersExampleenterasys(

Reviewing SNMP SettingsMarch 28, 2011 Page 23 of 27EngineidUsethiscommandtodisplaySNMPengineproperties:show snmp engineid Exampleenterasys(su)-

Reviewing SNMP SettingsMarch 28, 2011 Page 24 of 27Target Parameter ProfilesUsethiscommandtodisplayingSNMPtargetparameterprofiles:show snmp ta

Reviewing SNMP SettingsMarch 28, 2011 Page 25 of 27Status xxxxx = active Notify FilterUsethiscommandtodisplaySNMPnotifyfilterinformation,i

Reviewing SNMP SettingsMarch 28, 2011 Page 26 of 27ViewsUsethiscommandtodisplaySNMPviews:show snmp view viewname Exampleenterasys(su)->show s

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

Authentication Configuration ExampleApril 15, 2011 Page 32 of 36Configuring the Engineering Group 802.1x End-User StationsTherearethreeaspectstoc

March 14, 2011 Page 1 of 29Configuring Spanning TreesThisdocumentprovidesthe followinginformationaboutconfiguringandmonitoringSp anningTree

How Do I Implement Spanning Trees?March 14, 2011 Page 2 of 29wouldcontinuetocirculateendlesslybetweenbothswitchingdevices.WithoutSpanningTr

STP OverviewMarch 14, 2011 Page 3 of 29• IEEE802.1s(MultipleSpanningTreeProtocol)• IEEE802.1t(Updateto802.1D)Asdescribedpreviously,STPres

Functions and Features Supported on Enterasys DevicesMarch 14, 2011 Page 4 of 29MSTPcanautomaticallydetecttheversionofSpanningTreebeingused

Functions and Features Supported on Enterasys DevicesMarch 14, 2011 Page 5 of 29•FurtherprotectingyournetworkfromloopformationwithLoopProtect

Understanding How Spanning Tree OperatesMarch 14, 2011 Page 6 of 29Understanding How Spanning Tree OperatesThissectionprovidesyouwithamoredetai

Understanding How Spanning Tree OperatesMarch 14, 2011 Page 7 of 29Rootportsanddesignatedportsareleftintheforwardingstate.Redundantportsa

Understanding How Spanning Tree OperatesMarch 14, 2011 Page 8 of 29MSTPisthedefaultSpanningTreemodeonallEnterasysswitchdevices.Thefollowin

Understanding How Spanning Tree OperatesMarch 14, 2011 Page 9 of 29•FormatSelector–Oneoctetinlengthandisalways0.Itcannotbeadministrative

Understanding How Spanning Tree OperatesMarch 14, 2011 Page 10 of 29switchingdevice2istherootforMSTI2,andswitchingdevice5istheCISTregi

Authentication Configuration ExampleApril 15, 2011 Page 33 of 36ThefollowingCLIinput:•EnablesCEPgloballyontheswitch.•SetsCEPpolicytoaprev

Configuring STP and RSTPMarch 14, 2011 Page 11 of 29Figure 6 Example of Multiple Regions and MSTIsConfiguring STP and RSTPThissectionprovidesinfor

Configuring STP and RSTPMarch 14, 2011 Page 12 of 29SinceMSTPmodeisfullycompatibleand interoperablewithlegacySTPandRSTPbridges,inmostn

Configuring STP and RSTPMarch 14, 2011 Page 13 of 29configuredwithvariationsoftheSpanningTreeportconfigurationcommands.Defaultsettingsare

Configuring STP and RSTPMarch 14, 2011 Page 14 of 29Setting a Port PriorityYoucansetaSpanningTreeportpriority,avaluetobeusedtobreakati

Configuring STP and RSTPMarch 14, 2011 Page 15 of 29Adjusting the Bridge Hello TimeHellotimeistheintervalatwhichthebridgeorindividualports

Configuring STP and RSTPMarch 14, 2011 Page 16 of 29SpanningTreetopology.Byadjustingthisvalue,youcanconfiguresupportforamaximumdiameter

Configuring STP and RSTPMarch 14, 2011 Page 17 of 29Defining Point-to-Point LinksBydefault,theadministrativepoint‐to‐pointstatusissettoautoo

Configuring MSTPMarch 14, 2011 Page 18 of 29show spantree operedge [port port-string]Astatusof“true”or“Edge‐Port”indicatestheportisoperating

Configuring MSTPMarch 14, 2011 Page 19 of 29Figure 7 MSTP Simple Network ConfigurationProcedure 1showshowtoconfigureSwitches1and2forMSTP.Ad

Understanding and Configuring SpanGuardMarch 14, 2011 Page 20 of 29Understanding and Configuring SpanGuardThissectionprovidesinformationaboutthe

Terms and DefinitionsApril 15, 2011 Page 34 of 36•SetuptheRADIUSuseraccountforthepublicstationontheauthenticationserver.•EnablePWAglobal

Understanding and Configuring SpanGuardMarch 14, 2011 Page 21 of 29•thetimeoutexpires,•theportismanuallyunlocked,•theportisnolongeradminist

Understanding and Configuring Loop ProtectMarch 14, 2011 Page 22 of 29Monitoring SpanGuard Status and SettingsUsethecommandsinTable 7toreviewSp

Understanding and Configuring Loop ProtectMarch 14, 2011 Page 23 of 29Port Modes and Event TriggersPortsworkintwoLoopProtectoperationalmodes.I

Understanding and Configuring Loop ProtectMarch 14, 2011 Page 24 of 29Figure 8 Basic Loop Protect ScenarioFigure 9showsthat,withoutLoopProtect,

Understanding and Configuring Loop ProtectMarch 14, 2011 Page 25 of 29Configuring Loop ProtectThissectionprovidesinformationaboutLoopProtectcon

Understanding and Configuring Loop ProtectMarch 14, 2011 Page 26 of 29TheLoopProtectwindowisatimervalue,inseconds,thatdefinesaperiodduri

Terms and DefinitionsMarch 14, 2011 Page 27 of 29ExampleThefollowingexampleshowsaswitchingdevicewithLoopProtectenabledonportlag.0.2,SID

Terms and DefinitionsMarch 14, 2011 Page 28 of 29FID Filter Identifier. Each VLAN is associated to a FID. VLANs are mapped to SIDs using their FID ass

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

March 15, 2011 Page 1 of 13Configuring SyslogThisdocumentprovidesthe followinginformationaboutconfiguringandmonitoringSyslogonEnterasys®N

Terms and DefinitionsApril 15, 2011 Page 35 of 36IEEE 802.1x An IEEE standard for port-based Network Access Control that provides authentication to de

How Do I Implement Syslog?March 15, 2011 Page 2 of 13acrossmultipleplatforms,youcanuseittointegratelogdatafrommanydifferenttypesofsyst

Syslog Components and Their UseMarch 15, 2011 Page 3 of 13todisplaymessagesatavarietyofdifferentseveritylevelsaboutapplication‐relatederro

Syslog Components and Their UseMarch 15, 2011 Page 4 of 13Basic Syslog ScenarioFigure 1showsabasicscenarioofhowSyslogcomponentsoperateonan

Syslog Components and Their UseMarch 15, 2011 Page 5 of 13Figure 1 Basic Syslog ScenarioDefaultapplicationsettingsintheexam pleinFigure 1have

Interpreting MessagesMarch 15, 2011 Page 6 of 13Interpreting MessagesEverysystemmessagegeneratedbytheEnterasysswitchplatformsfollowsthesa m

Configuring SyslogMarch 15, 2011 Page 7 of 13Syslog Command PrecedenceTable 3listsbasicSyslogcommandsandtheirorderofprecedenceonEnterayssw

Configuring SyslogMarch 15, 2011 Page 8 of 13ExampleThissampleoutputfromtheshowloggingservercommandshowsthattwoservershavebeenaddedto

Configuring SyslogMarch 15, 2011 Page 9 of 13ExamplesThisexampleshowshowtoconfiguretheswitchtoforwardmessagesfromfacilitycategorylocal6

Configuring SyslogMarch 15, 2011 Page 10 of 134(errors) 5(warnings) 6(notifications)7(information) 8(debugging)Modifying Severity Levels an

Configuring SyslogMarch 15, 2011 Page 11 of 13Displaying to the Current CLI SessionTodisplayloggingtothecurrentCLIconsolesessiononanN‐Serie

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

Configuring SyslogMarch 15, 2011 Page 12 of 13Procedure 2 Adjusting Settings for an ApplicationStep Task Command(s)1. Configure Syslog server 2 and ac

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

December 2, 2010 Page 1 of 7Configuring TACACS+ThisdocumentprovidesinformationaboutconfiguringandmonitoringTACACS+(TerminalAccessController

How Do I Implement TACACS+?December 2, 2010 Page 2 of 7How Do I Implement TACACS+?YoucanconfiguretheTACACS+clientonyourEnterasysdeviceincon

Configuring TACACS+December 2, 2010 Page 3 of 7Configuring TACACS+Default SettingsTable 1liststheTACACS+parameters(asdisplayedthroughtheshow

Configuring TACACS+December 2, 2010 Page 4 of 7Basic TACACS+ ConfigurationProcedure 1describesthebasicstepstoconfigureTACACS+onEnterasysdevi

Configuring TACACS+December 2, 2010 Page 5 of 7Refertothedevice’sCLIReferenceorConfigurationGuide,asappropriate,formoreinformationabout

TACACS+ Display CommandsTable 2listsTACACS+showcommands.Refertothedevice’sCLIReferenceorConfigurationGuide,asappropriate,formoreinfo

Configuring TACACS+December 2, 2010 Page 7 of 7Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontaine

April 16, 2009 Page 1 of 14Configuring Transparent Web Cache Balancing(TWCB)Thisdocumentprovidesthe followinginformationaboutconfiguringTransp

December 02, 2010 Page 1 of 5Flex-EdgeThisdocumentdescribestheFlex‐EdgecapabilityontheEnterasysS‐Series®platform.What is Flex-EdgeFlex‐Edge

How Can I Implement TWCB?April 16, 2009 Page 2 of 14whomwebcachingisnotde siredtoahostredirectionlist,denyingtheseusersaccesstoTWCBfu

TWCB OverviewApril 16, 2009 Page 3 of 14Figure 1 TWCB Configuration OverviewTheN‐Seriesrouterdoesnotactasacacheforwebobjects;rather,itr

TWCB OverviewApril 16, 2009 Page 4 of 14The Server FarmTheserverfarmconsistsofalogicalgroupingofcache‐servers.Eachserverfarmbelongstoa

TWCB OverviewApril 16, 2009 Page 5 of 14Thepredictorround‐robinfeatureallowsforthecreationofupto10userlists.Membersofapredictorround

TWCB OverviewApril 16, 2009 Page 6 of 14•Placetheweb‐cacheinservice.Atleastonecacheservermustbeinservicebeforeyoucanplaceaweb‐cache

Configuring TWCBApril 16, 2009 Page 7 of 14Configuring TWCBThissectionprovidesdetailsfortheconfigurationofTWCBontheN‐Seriesproducts.Table

Configuring TWCBApril 16, 2009 Page 8 of 14Configuring the Server FarmProcedure 1describeshowtoconfigureaTWCBserverfarm.Configuring the Cache

Configuring TWCBApril 16, 2009 Page 9 of 14Configuring the Web-CacheProcedure 3describeshowtoconfigureaTWCBweb‐cache.Configuring the Outbound

TWCB Configuration ExampleApril 16, 2009 Page 10 of 14Displaying TWCB StatisticsProcedure 6describeshowtodisplayTWCBstatistics.TWCB Configuratio

TWCB Configuration ExampleApril 16, 2009 Page 11 of 14Figure 3 TWCB Configuration Example OverviewConfigure the s1Server Server FarmCreatetheserver

Flex-Edge OverviewDecember 02, 2010 Page 2 of 5Flex-Edge OverviewAllS‐SeriesswitchessupporttheFlex‐Edgefeature,whichprovidesauniquemechanis

TWCB Configuration ExampleApril 16, 2009 Page 12 of 14Matrix>Router(config-twcb-cache)#exitMatrix>Router(config-twcb-wcsfarm)#Configurecachese

TWCB Configuration ExampleApril 16, 2009 Page 13 of 14Configuretheoutboundinterfacethatconnectswiththeinternet:Matrix>Router(config)#interf

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

March 15, 2011 Page 1 of 20Configuring VLANsThisdocumentprovidesthe followinginformationaboutconfiguringandmonitoring802.1QVLANsonEnteras

Why Would I Use VLANs in My Network?March 15, 2011 Page 2 of 20Theprimarybenefitof802.1QVLANtechnologyisthatitallowsyoutolocali zeandse

How Do I Implement VLANs?March 15, 2011 Page 3 of 20How Do I Implement VLANs?Bydefault,allEnterasysswitchesrunin802.1QVLANoperationalmode.A

Understanding How VLANs OperateMarch 15, 2011 Page 4 of 20Learning Modes and Filtering DatabasesAddressinginformationtheswitchlearnsaboutaVLAN

Understanding How VLANs OperateMarch 15, 2011 Page 5 of 20Ingress PrecedenceVLANassignmentforreceived(ingress)framesisdeterminedbythefollowi

VLAN Support on Enterasys SwitchesMarch 15, 2011 Page 6 of 20Figure 2 Inside the SwitchAssumeaunicastuntaggedframeisreceivedonPort3inthee

VLAN Support on Enterasys SwitchesMarch 15, 2011 Page 7 of 20•From2through4093forstackableandstandaloneswitchesThisrangeisbasedonthefoll

Terms and DefinitionsDecember 02, 2010 Page 3 of 5Priorityqueueing,fromhighprioritytolowpriority,isgiventothefollowingfourtrafficcatego

VLAN Support on Enterasys SwitchesMarch 15, 2011 Page 8 of 20Asdescribedabove,PVIDdeterminestheVLANtowhichalluntaggedframesreceivedonass

Configuring VLANsMarch 15, 2011 Page 9 of 20Figure 3 Example of VLAN Propagation Using GVRPAdministrativelyconfiguringaVLANonan802.1Qswitchcr

Configuring VLANsMarch 15, 2011 Page 10 of 20Platform Specific Differences Enterasys X-Series Platform ConfigurationTheconfigurationofVLANsonthe

Configuring VLANsMarch 15, 2011 Page 11 of 20Default SettingsTable 1listsVLANparametersandtheirdefaultvalues.Table 1 Default VLAN ParametersPa

Configuring VLANsMarch 15, 2011 Page 12 of 20Configuring Static VLANsProcedure 1describeshowtocreateandconfigureastaticVLAN.Unspecifiedpara

Configuring VLANsMarch 15, 2011 Page 13 of 206. (cont)•If forbidden is not specified, tagged and untagged egress settings will be cleared from the des

Configuring VLANsMarch 15, 2011 Page 14 of 20Example ConfigurationThefollowingshowsanexampleS‐SeriesdeviceconfigurationusingthestepsinProc

Configuring VLANsMarch 15, 2011 Page 15 of 20Procedure 2providesanexampleofhowtocreateasecuremanagementVLAN.Thisexample,whichsetsthen

Configuring VLANsMarch 15, 2011 Page 16 of 20Configuring Protocol-Based VLAN ClassificationProtocol‐basedVLANscanbeconfiguredusingthepolicycla

Configuring VLANsMarch 15, 2011 Page 17 of 20Example ConfigurationThefollowingshowsanexampleN‐SeriesdeviceconfigurationusingthestepsinProc

Authentication OverviewApril 15, 2011 Page 4 of 36switchcancontainanyFilter‐IDattributeconfiguredontheauthenticationserver,allowingpolicy

Terms and DefinitionsDecember 02, 2010 Page 4 of 5Flex-Edge An S-Series platform capability to classify and prioritize traffic as it enters the switch

Terms and DefinitionsMarch 15, 2011 Page 18 of 20Terms and DefinitionsTable 3liststermsanddefinitionsusedinVLANconfiguration.(Applies to N-Ser

Terms and DefinitionsMarch 15, 2011 Page 19 of 20Generic Attribute Registration Protocol (GARP)GARP is a protocol used to propagate state information

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

Revision HistoryEnterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditsweb

December 02, 2010 Page 1 of 23Configuring Link AggregationThisdocumentdescribesthelinkaggregationfeatureanditsconfigurationonEnterasysMatr

Why Would I Use Link Aggregation in My NetworkDecember 02, 2010 Page 2 of 23Why Would I Use Link Aggregation in My NetworkTheconceptofgroupingmult

Link Aggregation OverviewDecember 02, 2010 Page 3 of 23Link Aggregation OverviewThissectionprovidesanoverviewoflinkaggregationconfiguration.LA

Link Aggregation OverviewDecember 02, 2010 Page 4 of 23Figure 1displaysaLAGformationexamplecontainingthreedeviceswithfive100Mbpsportsand

Link Aggregation OverviewDecember 02, 2010 Page 5 of 23•Becauseports1and2forboththeactorandpartneroperateinparallelwitheachother,rule

Link Aggregation OverviewDecember 02, 2010 Page 6 of 23Thisistruebecauseport4hasthelowestpriorityofthethreeportscurrentlyintheLAG,an

Link Aggregation OverviewDecember 02, 2010 Page 7 of 23ShouldanaggregatableportbeavailablewithallLAGresourcesdepletedforthissystem,thep

Link Aggregation OverviewDecember 02, 2010 Page 8 of 23Flow RegenerationFlowregenerationdetermineshowflowswillbehavewhenanewportjoinsalin

Authentication OverviewApril 15, 2011 Page 5 of 36Multi-User AuthenticationMulti‐userauthenticationprovidesfortheper‐userorper‐deviceprovision

Link Aggregation OverviewDecember 02, 2010 Page 9 of 23• DestinationIPaddressandSourceIPaddress(dip‐sip).Thisisthemostfinelytunedcriteri

Configuring Link AggregationDecember 02, 2010 Page 10 of 23Configuring Link AggregationThissectionprovidesdetailsfortheconfigurationoflinkagg

Configuring Link AggregationDecember 02, 2010 Page 11 of 23Table 5describeshowtomanagelinkaggregation.5. Optionally, modify the LAG port parame

Link Aggregation Configuration ExampleDecember 02, 2010 Page 12 of 23Table 6describeshowtodisplaylinkaggregationinformationandstatistics.Lin

Link Aggregation Configuration ExampleDecember 02, 2010 Page 13 of 23•LAG3providesanaggregateoffour1GbportsbetweentheC3stackableswitchesa

Link Aggregation Configuration ExampleDecember 02, 2010 Page 14 of 23Figure 3 Example 1 Multiple Device ConfigurationBothphysicalportandLAGadmin

Link Aggregation Configuration ExampleDecember 02, 2010 Page 15 of 23WhichdevicedeterminesportselectionfortheLAGisanoptionalconsideration.

Link Aggregation Configuration ExampleDecember 02, 2010 Page 16 of 23GiventhattheintentoftheexampleistohavethreeLAGsof4portseach,there

Link Aggregation Configuration ExampleDecember 02, 2010 Page 17 of 23NextwewanttochangethesystempriorityfortheS3sothatitwillbeincharg

Link Aggregation Configuration ExampleDecember 02, 2010 Page 18 of 23chassis.ThefirstLAGconsistsoftwo1Gbports.ThesecondLAGconsistsofeig

Authentication OverviewApril 15, 2011 Page 6 of 36Figure 1 Applying Policy to Multiple Users on a Single PortMultiAuth AuthenticationAuthenticationm

Link Aggregation Configuration ExampleDecember 02, 2010 Page 19 of 23Figure 4 Example 2 ConfigurationN3 Edge SwitchS3 Upstream SwitchLAG1End-UsersKEY

Link Aggregation Configuration ExampleDecember 02, 2010 Page 20 of 23Configuring the N3 Edge SwitchForthisexample,wewantLAGstoformwhereverthe

Terms and DefinitionsDecember 02, 2010 Page 21 of 23S3(rw)->set port lacp port ge.1.3 aadminkey 100 enableS3(rw)->set port lacp port ge.1.4 aadm

Terms and DefinitionsDecember 02, 2010 Page 22 of 23Admin Key Value assigned to aggregator ports and physical ports that are candidates for joining a

Revision HistoryEnterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditsweb

January 29, 2009 Page 1 of 4Configuring Link Flap DetectionThisdocumentprovidesinformationaboutconfiguringthelinkflapdetectionfeatureonEnt

Configuring Link Flap DetectionJanuary 29, 2009 Page 2 of 4Configuring Link Flap DetectionBasic Link Flap Detection ConfigurationProcedure 1describes

Configuring Link Flap DetectionJanuary 29, 2009 Page 3 of 4Example Link Flap Detection ConfigurationPoEdevices(forexample,VoIPphonesorwireless

Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncontainedinthisdocumentanditswebsitewithoutpri

September 8, 2010 Page 1 of 28Configuring Load SharingNetwork Address Translation (LSNAT)Thisdocumentprovidesthe followinginformationaboutconfi

Authentication OverviewApril 15, 2011 Page 7 of 36Figure 2 Authenticating Multiple Users With Different Methods on a Single PortInFigure 3,fullMul

Why Would I Use LSNAT in My Network?September 8, 2010 Page 2 of 28oftheserverfarmassociatedwiththeVIPaddress.Thepacketisthenforwardedto

How Can I Implement LSNAT?September 8, 2010 Page 3 of 28ServerandTCP/UDPportverificationcanensurethattheportsusedbyLSNATareoperational.

LSNAT OverviewSeptember 8, 2010 Page 4 of 28LSNAT OverviewThissectionprovidesanoverviewoftheLSNATcomponents.TheLSNATconfigurationismadeu

LSNAT OverviewSeptember 8, 2010 Page 5 of 28Figure 2 LSNAT Packet FlowThe Server FarmTheserverfarmisalogicalentitymadeupofmultiplerealser

LSNAT OverviewSeptember 8, 2010 Page 6 of 28configuredwiththedefaultweight,eachrealserveristreatedequallyasdescribedinthesimpleroundr

LSNAT OverviewSeptember 8, 2010 Page 7 of 28PingRealserverfailuredetectioncanbeconfiguredforpingonly.Inthiscase,therealserverispinged

LSNAT OverviewSeptember 8, 2010 Page 8 of 28Youcansearchforareplystringof“200OK”.Thiswouldresultinasuccessfulverificationoftheservi

LSNAT OverviewSeptember 8, 2010 Page 9 of 28addressthatreturnstrafficbackthroughtheLSNATrouter.SincetheclientIPaddressesareusuallyunkn

Configuring LSNATSeptember 8, 2010 Page 10 of 28Managing Connections and StatisticsTherearethreeaspectstomanagingconnections:•ClearingallLSNAT

Configuring LSNATSeptember 8, 2010 Page 11 of 28Table 2listsLSNATresourcelimits.LSNAT Configuration ConsiderationsThefollowingconsiderationsmu

Authentication OverviewApril 15, 2011 Page 8 of 36Figure 3 Selecting Authentication Method When Multiple Methods are ValidatedRemote Authentication D

Configuring LSNATSeptember 8, 2010 Page 12 of 28•WhendifferentVIPsaccessthesamerealserverindifferentserverfarms,thepersistencelevelmust

Configuring LSNATSeptember 8, 2010 Page 13 of 28Configuring an LSNAT Virtual ServerProcedure 3describeshowtoconfigureanLSNATvirtualserver.3.

Configuring LSNATSeptember 8, 2010 Page 14 of 284. In SLB virtual server configuration command mode, configure the virtual server IP address (VIP) or

Configuring LSNATSeptember 8, 2010 Page 15 of 28Configuring Global SettingsTable 3describeshowtoconfigureLSNATglobalsettings.Displaying LSNAT

LSNAT Configuration ExampleSeptember 8, 2010 Page 16 of 28LSNAT Configuration ExampleThissectionprovidesanenterpriseLSNATconfigurationexamplet

LSNAT Configuration ExampleSeptember 8, 2010 Page 17 of 28Enterprise Internal HTTP Server FarmTheenterpriseinternalHTTPserverfarm,realserveran

LSNAT Configuration ExampleSeptember 8, 2010 Page 18 of 28Figure 3 LSNAT Configuration Example

LSNAT Configuration ExampleSeptember 8, 2010 Page 19 of 28Configuring the myproductHTTP Server Farm and Real ServersConfigurethemyproductHTTPserver

LSNAT Configuration ExampleSeptember 8, 2010 Page 20 of 28System(rw-config-slb-real)->faildetect acv-command “HEAD / HTTP/1.1\\r\\nHost: www.myprod

LSNAT Configuration ExampleSeptember 8, 2010 Page 21 of 28myproductFTP Server Farm and Real Server CLI InputSystem(rw-config)->ip slb serverfarm my

Authentication OverviewApril 15, 2011 Page 9 of 36Requiredauthenticationcredentialsdependupontheauthenticationmethodbeingused.For802.1xand

LSNAT Configuration ExampleSeptember 8, 2010 Page 22 of 28• Configuringafaildetectcommandstring,replystring,andreadtillindexvalueforeach

LSNAT Configuration ExampleSeptember 8, 2010 Page 23 of 28Configuring the myinternalFTP Server Farm Real ServersConfigurethemyinternalFTPserverfar

LSNAT Configuration ExampleSeptember 8, 2010 Page 24 of 28Configuring the myinternalSMTP Server Farm and Real ServersConfigurethemyinternalSMTPserv

Terms and DefinitionsSeptember 8, 2010 Page 25 of 28ThiscompletestheLSNATconfigurationexample.Terms and DefinitionsTable 5liststermsanddefini

Terms and DefinitionsSeptember 8, 2010 Page 26 of 28Enterasys Networksreservestherighttomakechangesinspecificationsandotherinformati oncon

Terms and DefinitionsSeptember 8, 2010 Page 28 of 28

April 16, 2009 Page 1 of 32Configuring MulticastThisdocumentprovidesinformationaboutconfiguringandmonitoringmulticas tonEnterasysMatrix®N‐

How Do I Implement Multicast?April 16, 2009 Page 2 of 32How Do I Implement Multicast?YoucanimplementtheIGMP,DVMRP,andPIMmulticastprotocolson

Understanding MulticastApril 16, 2009 Page 3 of 32IGMPusesthreekeycomponentstocontrolmulticastmembership:• Source—AserverthatsendsanIP