Enterasys SecureStack A2 A2H124-48P Specifikace Strana 521
- Strana / 634
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
Security Configuration Command Set
Configuring VLAN Authorization (RFC 3580)
SecureStack A2 Configuration Guide 10-59
10.3.5 Configuring VLAN Authorization (RFC 3580)
Purpose
Please see section 3-31 of RFC 3580 for details on configuring a RADIUS server to return the
desired tunnel attributes. From RFC 3580, “... it may be desirable to allow a port to be placed into
a particular Virtual LAN (VLAN), defined in [IEEE8021Q], based on the result of the
authentication.”
The RADIUS server typically indicates the desired VLAN by including tunnel attributes within the
Access-Accept. However, the IEEE 802.1X Authenticator may also provide a hint as to the VLAN
to be assigned to the Supplicant by including Tunnel attributes within the Access-Request.
For use in VLAN assignment, the following tunnel attributes are used:
• Tunnel-Type=VLAN (13)
• Tunnel-Medium-Type=802
• Tunnel-Private-Group-ID=VLANID
Commands
The commands used to configure RADIUS tunnel attributes are listed below and described in the
associated sections as shown.
• set vlanauthorization (Section 10.3.5.1)
• set vlanauthorization egress (Section 10.3.5.2)
• clear vlanauthorization (Section 10.3.5.3)
• show vlanauthorization (Section 10.3.5.4)
- SecureStack A2 1
- Enterasys Networks, Inc 4
- Firmware License Agreement 4
- Contents 7
- PORT CONFIGURATION 10
- SNMP CONFIGURATION 12
- SPANNING TREE CONFIGURATION 13
- 802.1Q VLAN CONFIGURATION 14
- ....................... 7-3 15
- IGMP CONFIGURATION 17
- SECURITY CONFIGURATION 17
- CONFIGURING RMON 20
- About This Guide 25
- STRUCTURE OF THIS GUIDE 26
- RELATED DOCUMENTS 27
- Convention Description 28
- Introduction 29
- 1.2 DEVICE MANAGEMENT METHODS 30
- 1.3 GETTING HELP 31
- Getting Help 32
- Does not apply to MATRIX E7 34
- Factory Default Settings 35
- 2.1.3 CLI Command Modes 37
- • show ssl (Section 2.1.4.3) 38
- • set ssl (Section 2.1.4.4) 38
- 2.1.4.1 show webview 39
- 2.1.4.2 set webview 40
- 2.1.4.3 show ssl 41
- 2.1.4.4 set ssl 42
- • ro for Read-Only access 44
- • rw for Read-Write access 44
- User Account 45
- Getting Help with CLI Syntax 47
- --More-- to indicate 48
- Basic Line Editing Commands 50
- Important 52
- 2.1.10.2 show switch 58
- 2.1.10.5 set switch 62
- 2.1.10.6 set switch copy-fw 63
- 2.1.10.9 set switch member 66
- 2.1.10.10 clear switch member 67
- 2.1.11.1 show system login 69
- 2.1.11.2 set system login 71
- 2.1.11.3 clear system login 72
- 2.1.11.4 set password 73
- 2.1.11.8 show system lockout 77
- 2.1.11.9 set system lockout 78
- 2.1.12.1 show ip address 81
- 2.1.12.2 show ip protocol 82
- 2.1.12.3 set ip address 83
- 2.1.12.4 clear ip address 84
- 2.1.12.5 show system 85
- 2.1.12.6 show system hardware 87
- 2.1.12.9 show time 91
- 2.1.12.10 set time 92
- 2.1.12.11 show summertime 93
- 2.1.12.12 set summertime 94
- 2.1.12.13 set summertime date 95
- 02:00 60 96
- 2.1.12.15 clear summertime 97
- 2.1.12.16 set prompt 98
- 2.1.12.17 show banner motd 99
- 2.1.12.18 set banner motd 100
- 2.1.12.19 clear banner motd 101
- 2.1.12.20 show version 102
- • Bp: BootPROM version 103
- 2.1.12.21 set system name 104
- 2.1.12.22 set system location 105
- 2.1.12.23 set system contact 106
- 2.1.12.24 set width 107
- 2.1.12.25 set length 108
- 2.1.12.26 show logout 109
- 2.1.12.27 set logout 110
- 2.1.12.28 show console 111
- 2.1.12.29 set console baud 112
- 2.1.13.1 show inlinepower 114
- 2.1.13.3 set inlinepower trap 116
- 2.1.13.5 set port inlinepower 118
- • Tera Term Pro Version 2.3 119
- Password 120
- 2.1.14.3 show boot system 123
- 2.1.14.4 set boot system 124
- • telnet (Section 2.1.15.3) 125
- 2.1.15.1 show telnet 126
- 2.1.15.2 set telnet 127
- 2.1.15.3 telnet 128
- 2.1.16.2 set snmp persistmode 132
- 2.1.16.3 save config 133
- 2.1.16.4 dir 134
- 2.1.16.5 show config 135
- 2.1.16.6 configure 137
- 2.1.16.7 copy 138
- 2.1.16.8 delete 139
- 2.1.16.9 show tftp settings 140
- 2.1.16.10 set tftp timeout 141
- 2.1.16.11 clear tftp timeout 142
- 2.1.16.12 set tftp retry 143
- 2.1.16.13 clear tftp retry 144
- 2.1.17 Configuring CDP 145
- 2.1.17.1 show cdp 146
- Configuring CDP 147
- 2.1.17.2 set cdp state 148
- 2.1.17.3 set cdp auth 149
- 2.1.17.5 set cdp hold-time 151
- 2.1.17.6 clear cdp 152
- • cls (Section 2.1.18.1) 153
- • exit (Section 2.1.18.2) 153
- 2.1.18.1 cls (clear screen) 154
- 2.1.18.2 exit 155
- 2.1.19 Resetting the Switch 156
- 2.1.19.1 reset 157
- 2.1.19.2 clear config 158
- Port Configuration 159
- A2H124-24FX Switch Ports 160
- A2H254-16 Switch Ports 160
- Examples 161
- 3.3.1 Reviewing Port Status 163
- Commands 163
- 3.3.1.1 show port 164
- 3.3.1.2 show port status 165
- Reviewing Port Status 166
- 3.3.1.3 show port counters 167
- 3.3.2.1 set port disable 171
- 3.3.2.2 set port enable 172
- 3.3.2.3 show port alias 173
- 3.3.2.4 set port alias 174
- 3.3.3.1 show port speed 176
- 3.3.3.2 set port speed 177
- 3.3.3.3 show port duplex 178
- 3.3.3.4 set port duplex 179
- 3.3.4.1 show port jumbo 181
- 3.3.4.2 set port jumbo 182
- 3.3.4.3 clear port jumbo 183
- 3.3.5.1 show port negotiation 185
- 3.3.5.2 set port negotiation 186
- 3.3.5.3 show port advertise 187
- 3.3.5.4 set port advertise 188
- 3.3.5.5 clear port advertise 189
- Setting Auto-Negotiation 190
- 3.3.6 Setting Flow Control 191
- 3.3.6.1 show flowcontrol 192
- 3.3.6.2 set flowcontrol 193
- 3.3.7 Setting Port Traps 194
- 3.3.7.1 show port trap 195
- 3.3.7.2 set port trap 196
- 3.3.8.1 show port broadcast 198
- 3.3.8.2 set port broadcast 199
- 3.3.8.3 clear port broadcast 200
- 3.4 PORT MIRRORING 201
- 3.4.1 Mirroring Features 201
- 3.4.2 Setting Port Mirroring 201
- 3.4.2.1 show port mirroring 202
- 3.4.2.2 set port mirroring 203
- 3.4.2.3 clear port mirroring 204
- 3.5.1 LACP Operation 205
- 3.5.2 LACP Terminology 206
- 3.5.4.1 show lacp 210
- Configuring Link Aggregation 211
- 3.5.4.2 set lacp 212
- 3.5.4.3 set lacp asyspri 213
- 3.5.4.4 set lacp aadminkey 214
- 3.5.4.5 clear lacp 215
- 3.5.4.6 set lacp static 216
- 3.5.4.7 clear lacp static 217
- 3.5.4.10 show port lacp 220
- 3.5.4.11 set port lacp 222
- (Section 3.5.4.3) 223
- 3.5.4.12 clear port lacp 225
- Configuring Protected Ports 227
- Protected Port Operation 227
- 3.6.2.1 set port protected 228
- 3.6.2.2 show port protected 229
- 3.6.2.3 clear port protected 230
- Protected Port Command Set 231
- Group ID Group Name 232
- 232
- 1 group1 232
- SNMP Configuration 235
- 4.1.2 SNMPv3 236
- SNMP Configuration Summary 237
- 4.3.1.1 show snmp engineid 240
- 4.3.1.2 show snmp counters 241
- Reviewing SNMP Statistics 242
- 4.3.2.1 show snmp user 246
- 4.3.2.2 set snmp user 248
- 4.3.2.3 clear snmp user 249
- 4.3.2.4 show snmp group 250
- 4.3.2.5 set snmp group 252
- 4.3.2.6 clear snmp group 253
- 4.3.2.7 show snmp community 254
- 4.3.2.8 set snmp community 255
- 4.3.2.9 clear snmp community 256
- 4.3.3.1 show snmp access 258
- 4.3.3.2 set snmp access 261
- 4.3.3.3 clear snmp access 263
- 4.3.4.1 show snmp view 265
- Configuring SNMP MIB Views 266
- 4.3.4.2 show snmp context 267
- 4.3.4.3 set snmp view 268
- 4.3.4.4 clear snmp view 269
- 4.3.5.2 set snmp targetparams 273
- 4.3.6.1 show snmp targetaddr 277
- 4.3.6.2 set snmp targetaddr 279
- TrapSink 280
- 4.3.6.3 clear snmp targetaddr 281
- 4.3.7.1 show snmp notify 283
- 4.3.7.2 set snmp notify 285
- 4.3.7.3 clear snmp notify 286
- About SNMP Notify Filters 287
- 4.3.7.5 set snmp notifyfilter 289
- and associate a target 292
- Spanning Tree Configuration 297
- 5.1.2 Spanning Tree Features 298
- 5.2.1.1 show spantree stats 302
- 5.2.1.2 set spantree 305
- 5.2.1.3 show spantree version 306
- 5.2.1.4 set spantree version 307
- BPDU forwarding is disabled 309
- 5.2.1.12 set spantree msti 315
- 5.2.1.13 clear spantree msti 316
- 5.2.1.14 show spantree mstmap 317
- 5.2.1.15 set spantree mstmap 318
- 5.2.1.23 set spantree hello 326
- 5.2.1.24 clear spantree hello 327
- 5.2.1.25 set spantree maxage 328
- Spanguard is disabled 339
- Spanguard timeout: 300 342
- Port fe.1.1 is Unlocked 345
- 5.2.2.4 show spantree portpri 354
- 5.2.2.5 set spantree portpri 355
- 802.1Q VLAN Configuration 363
- • show vlan (Section 6.3.1.1) 365
- 6.3.1.1 show vlan 366
- Reviewing Existing VLANs 367
- 6.3.2.1 set vlan 369
- 6.3.2.2 set vlan name 370
- 6.3.2.3 clear vlan 371
- 6.3.2.4 clear vlan name 372
- 6.3.3.1 show port vlan 374
- 6.3.3.2 set port vlan 375
- 6.3.3.3 clear port vlan 376
- 6.3.3.6 show port discard 379
- 6.3.3.7 set port discard 380
- 6.3.3.8 clear port discard 381
- 6.3.4.1 show port egress 383
- 6.3.4.2 set vlan forbidden 384
- 6.3.4.3 set vlan egress 385
- 6.3.4.4 clear vlan egress 387
- 6.3.5 Setting the Host VLAN 390
- 6.3.5.1 show host vlan 391
- 6.3.5.2 set host vlan 392
- 6.3.5.3 clear host vlan 393
- Purpose 395
- 6.3.7.1 show gvrp 398
- 6.3.7.2 show garp timer 399
- Section 6.3.7.5 400
- 6.3.7.3 set gvrp 401
- 6.3.7.4 clear gvrp 402
- 6.3.7.5 set garp timer 403
- CONFIGURATION 405
- 7.3.2.1 show diffserv info 408
- 7.3.2.2 show diffserv class 409
- 7.3.2.3 set class create 410
- keyword http tcp 415
- 7.3.3.1 show diffserv policy 418
- add admin system 421
- 7.3.4.3 set diffserv service 428
- Configuration 429
- COMMAND SET 430
- 8.3.1.1 show port priority 431
- 8.3.1.2 set port priority 432
- 8.3.1.3 clear port priority 433
- 8.3.3.1 show port txq 439
- 8.3.3.2 set port txq 440
- 8.3.3.3 clear port txq 442
- 8.3.4.1 show port ratelimit 445
- 8.3.4.2 set port ratelimit 447
- This example shows how to: 448
- 125 KBps: 448
- 8.3.4.3 clear port ratelimit 449
- IGMP Configuration 451
- IGMP Configuration Summary 452
- Enabling / Disabling IGMP 452
- 9.4.1.1 show igmpsnooping 453
- 9.4.2 Configuring IGMP 456
- Configuring IGMP 457
- 9.4.2.5 clear igmpsnooping 461
- Security Configuration 463
- 10.3.1 Configuring RADIUS 465
- 10.3.1.1 show radius 466
- Configuring RADIUS 467
- 10.3.1.2 set radius 468
- 10.3.1.3 clear radius 471
- • IP address 473
- 10.3.2.1 show dot1x 477
- 10.3.2.3 set dot1x 482
- Command Defaults 484
- 10.3.2.6 show eapol 487
- 10.3.2.7 set eapol 490
- 10.3.2.8 clear eapol 491
- About Multiple Authentication 511
- 10.3.4.1 show multiauth 512
- 10.3.4.2 set multiauth mode 513
- 10.3.4.3 clear multiauth mode 514
- 10.3.4.6 show multiauth port 517
- 10.3.4.7 set multiauth port 518
- 10.3.4.8 clear multiauth port 519
- 10.3.6.1 show maclock 528
- Configuring MAC Locking 529
- 10.3.6.3 set maclock enable 532
- 10.3.6.4 set maclock disable 533
- 10.3.6.5 set maclock 534
- 10.3.6.6 clear maclock 535
- 10.3.6.7 set maclock static 536
- 10.3.6.8 clear maclock static 537
- 10.3.6.11 set maclock move 540
- 10.3.6.12 set maclock trap 541
- 10.3.7.1 show ssh status 543
- 10.3.7.2 set ssh 544
- 10.3.7.3 set ssh hostkey 545
- 11.2.1.1 show logging server 549
- 11.2.1.2 set logging server 550
- Configuring System Logging 551
- 11.2.1.3 clear logging server 552
- 11.2.1.4 show logging default 553
- 11.2.1.5 set logging default 554
- 11.2.1.7 show logging local 556
- 11.2.1.8 set logging local 557
- 11.2.1.9 clear logging local 558
- 11.2.1.10 show logging buffer 559
- 11.2.2.1 history 561
- 11.2.2.2 show history 562
- 11.2.2.3 set history 563
- 11.2.2.4 ping 564
- 11.2.2.5 show users 565
- 11.2.2.6 disconnect 566
- 11.2.3.1 show arp 568
- 11.2.3.2 clear arp 569
- 11.2.3.3 show mac 570
- • learned 571
- 11.2.3.4 show mac agetime 572
- 11.2.4.1 show sntp 574
- 11.2.4.2 set sntp client 576
- 11.2.4.3 clear sntp client 577
- 11.2.4.4 set sntp server 578
- 11.2.4.5 clear sntp server 579
- 11.2.4.8 set sntp poll-retry 582
- Configuring Node Aliases 587
- 11.2.5.2 set nodealias 588
- Configuring RMON 591
- 12.2 RMON COMMAND SET 593
- 12.2.1.1 show rmon stats 594
- Output What It Displays 595
- 12.2.1.2 set rmon stats 597
- 12.2.1.3 clear rmon stats 598
- 12.2.2 History Group Commands 599
- 12.2.2.1 show rmon history 600
- 12.2.2.2 set rmon history 602
- 12.2.2.3 clear rmon history 603
- 12.2.3 Alarm Group Commands 604
- 12.2.3.1 show rmon alarm 605
- RMON Command Set 607
- Alarm Group Commands 607
- 12.2.3.4 clear rmon alarm 610
- 12.2.4 Event Group Commands 611
- 12.2.4.1 show rmon event 612
- Event Group Commands 614
- 12.2.4.4 clear rmon event 616
- 12.2.5 Filter Group Commands 617
- 12.2.5.1 show rmon channel 618
- 12.2.5.2 set rmon channel 619
- Filter Group Commands 620
- "capture all" 620
- 12.2.5.3 clear rmon channel 621
- 12.2.5.4 show rmon filter 622
- 12.2.5.5 set rmon filter 623
- 12.2.5.6 clear rmon filter 625
- Packet Capture Commands 626
- 12.2.6.1 show rmon capture 627
- 12.2.6.2 set rmon capture 628
- Command Mode 629
- Read-Write 629
- 12.2.6.3 clear rmon capture 630
- Numerics 631
Související produkty a manuály pro Síťové přepínače Enterasys SecureStack A2 A2H124-48P
(82 stránky)
(7 stránky)© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.086 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce