Enterasys-networks Enterasys D2 D2G124-12P Instrukcja Użytkownika Strona 426
- Strona / 496
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
Overview of Security Methods
15-2 Security Configuration
ports.FordetailsonusingCLIcommandstoconfigure802.1X,referto“Configuring802.1X
Authentication”onpage 15 ‐9.
•MACAuthentication–providesamechanismforadministratorstosecurelyauthenticate
sourceMACaddressesandgrantappropriateaccesstoenduserdevicescommunicatingwith
D‐Seriesports.Fordetails,referto“Configuring
MACAuthentication”onpage 15‐19.
•MultipleAuthenticationMethods–allowsuserstoauthenticateusingmultiplemethodsof
authenticationonthesameport.Fordetails,referto“ConfiguringMultipleAuthentication
Methods”onpage 15‐30.
•RFC3580TunnelAttributesprovideamechanismtocontainan802.1XauthenticatedorMAC
authenticateduserto
aVLANregardlessofthePVID.Referto“ConfiguringVLAN
Authorization(RFC3580)”onpage 15‐41.
•MACLocking–locksaporttooneormoreMACaddresses,preventingtheuseof
unauthorizeddevicesandMACspoofingontheportFordetails,referto“ConfiguringMAC
Locking”onpage 15
‐46.
•PortWebAuthentication(PWA)–passesalllogininform ationfromtheendstationtoa
RADIUSserverforauthenticationbeforeallowingausertoaccessthenetwork.PWAisan
alternativeto802.1XandMACauthentication.Fordetails,referto“ConfiguringPortWeb
Authentication(PWA)”onpage 15‐57.
•SecureShell(SSH)–providessecureTelnet.Fordetails,referto“ConfiguringSecureShell
(SSH)”onpage 15‐68.
RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment
IfyouconfigureanauthenticationmethodthatrequirescommunicationwithaRADIUSserver,
youcanusetheRADIUSFilter‐IDattributetodynamicallyassignapolicyprofileand/or
managementleveltoauthenticatingusersand/ordevices.
TheRADIUSFilter‐IDattributeissimplyastringthatisformattedintheRADIUSAccess‐
Accept
packetsentbackfromtheRADIUSservertotheswitchduringtheauthenticationprocess.
EachusercanbeconfiguredintheRADIUSserverdatabasewithaRADIUSFilter‐IDattribute
thatspecifiesthenameofthepolicyprofileand/ormanagementleveltheusershouldbeassigned
uponsuccessfulauthentication.During
theauthenticationprocess,whentheRADIUSserver
returnsaRADIUSAccess‐AcceptmessagethatincludesaFilter‐IDmatchingapolicyprofilename
configuredontheswitch,theswitchthendynamicallyappliesthepolicyprofiletothephysical
porttheuser/deviceisauthenticatingon.
Filter-ID Attribute Formats
EnterasysNetworkssupportstwoFilter‐IDformats—“decorated”and“undecorated.”The
decoratedformathasthreeforms:
•Tospecifythepolicyprofiletoassigntotheauthenticatinguser(networkaccess
authentication):
Enterasys:version=1:policy=string
wherestringspecifiesthepolicyprofilename.Policyprofilenamesarecase‐sensitive.
Note: To configure EAP pass-through, which allows client authentication packets to be forwarded
through the switch to an upstream device, 802.1X authentication must be globally disabled with the
set dot1x command.
- Enterasys 1
- D-Series 1
- Contents 7
- Chapter 4: Port Configuration 9
- Chapter 5: SNMP Configuration 11
- About This Guide 25
- Related Documents 26
- Getting Help 27
- Introduction 29
- Factory Default Settings 30
- D-Series CLI Reference 1-3 31
- 1-4 Introduction 32
- Starting a CLI Session 33
- Logging In 34
- CLI Command Modes 35
- Performing Keyword Lookups 35
- Displaying Scrolling Screens 36
- Basic Line Editing Commands 37
- 1-10 Introduction 38
- Basic Configuration 39
- 2-4 Basic Configuration 42
- D-Series CLI Reference 2-5 43
- 2-6 Basic Configuration 44
- D-Series CLI Reference 2-7 45
- D-Series CLI Reference 2-9 47
- D2(rw)->clear ip address 48
- D2(su)->show ip protocol 49
- D-Series CLI Reference 2-13 51
- D-Series CLI Reference 2-15 53
- D2(su)->show time 54
- THU SEP 05 09:21:57 2002 54
- D2(su)->set time 7:50:00 54
- D-Series CLI Reference 2-17 55
- 2-18 Basic Configuration 56
- 02:00 60 57
- D2(su)->clear summertime 57
- 2-20 Basic Configuration 58
- D-Series CLI Reference 2-21 59
- 2-22 Basic Configuration 60
- D-Series CLI Reference 2-23 61
- 2-24 Basic Configuration 62
- D2(su)->set width 50 63
- D2(su)->set length 50 63
- D2(su)->set logout 10 64
- Activating Licensed Features 65
- D-Series CLI Reference 2-29 67
- 2-32 Basic Configuration 70
- Downloading a Firmware Image 71
- 2-34 Basic Configuration 72
- D-Series CLI Reference 2-35 73
- Reverting to a Previous Image 74
- 2-38 Basic Configuration 76
- D-Series CLI Reference 2-41 79
- 2-42 Basic Configuration 80
- 2-44 Basic Configuration 82
- D-Series CLI Reference 2-45 83
- 2-46 Basic Configuration 84
- D-Series CLI Reference 2-47 85
- D2(rw)->set tftp retry 3 86
- Clearing and Closing the CLI 87
- Resetting the Switch 88
- Using and Configuring WebView 89
- D2(rw)->show ssl 91
- SSL status: Enabled 91
- Switchcommand,read‐write 92
- Configuring CDP 93
- D-Series CLI Reference 3-3 95
- D2(su)->clear cdp state 97
- Parameters 100
- Defaults 100
- D-Series CLI Reference 3-9 101
- Port Configuration 105
- Examples 106
- Reviewing Port Status 107
- Port ge.3.14 enabled 108
- D2(su)->show port ge.3.14 108
- Commands 111
- 4-8 Port Configuration 112
- Setting Speed and Duplex Mode 113
- 4-10 Port Configuration 114
- D-Series CLI Reference 4-11 115
- D-Series CLI Reference 4-13 117
- D-Series CLI Reference 4-15 119
- 4-16 Port Configuration 120
- 121
- Setting Flow Control 122
- 4-20 Port Configuration 124
- D-Series CLI Reference 4-21 125
- 4-24 Port Configuration 128
- D-Series CLI Reference 4-25 129
- 4-26 Port Configuration 130
- D-Series CLI Reference 4-27 131
- D-Series CLI Reference 4-29 133
- 4-30 Port Configuration 134
- Port Mirroring 135
- 4-32 Port Configuration 136
- D-Series CLI Reference 4-33 137
- LACP Operation 138
- LACP Terminology 138
- D-Series Usage Considerations 139
- D-Series CLI Reference 4-37 141
- 4-38 Port Configuration 142
- D-Series CLI Reference 4-39 143
- 4-40 Port Configuration 144
- D-Series CLI Reference 4-41 145
- 4-42 Port Configuration 146
- forportge.1.12: 147
- Configuring Protected Ports 151
- 4-48 Port Configuration 152
- D-Series CLI Reference 4-49 153
- 4-50 Port Configuration 154
- SNMP Configuration 155
- SNMP Configuration Summary 156
- 5-2 SNMP Configuration 156
- Reviewing SNMP Statistics 157
- 5-6 SNMP Configuration 160
- D-Series CLI Reference 5-7 161
- 5-10 SNMP Configuration 164
- 5-12 SNMP Configuration 166
- D-Series CLI Reference 5-13 167
- 5-14 SNMP Configuration 168
- 5-18 SNMP Configuration 172
- Configuring SNMP MIB Views 173
- D-Series CLI Reference 5-21 175
- 5-24 SNMP Configuration 178
- About SNMP Notify Filters 182
- D-Series CLI Reference 5-29 183
- 5-30 SNMP Configuration 184
- 5-32 SNMP Configuration 186
- D-Series CLI Reference 5-33 187
- 5-34 SNMP Configuration 188
- D-Series CLI Reference 5-35 189
- 5-36 SNMP Configuration 190
- D-Series CLI Reference 5-37 191
- 5-38 SNMP Configuration 192
- Spanning Tree Configuration 193
- Spanning Tree Features 194
- Loop Protect 194
- D-Series CLI Reference 6-3 195
- D-Series CLI Reference 6-7 199
- Force Version is mstp 200
- BPDU forwarding is disabled 201
- D-Series CLI Reference 6-11 203
- D-Series CLI Reference 6-13 205
- D-Series CLI Reference 6-15 207
- D-Series CLI Reference 6-17 209
- D-Series CLI Reference 6-19 211
- D-Series CLI Reference 6-21 213
- D-Series CLI Reference 6-23 215
- Spanguard is disabled 217
- Spanguard timeout: 300 218
- D-Series CLI Reference 6-27 219
- D-Series CLI Reference 6-29 221
- Legacy Path Cost is disabled 222
- D-Series CLI Reference 6-33 225
- D-Series CLI Reference 6-35 227
- D-Series CLI Reference 6-37 229
- D-Series CLI Reference 6-41 233
- D-Series CLI Reference 6-43 235
- D-Series CLI Reference 6-45 237
- D-Series CLI Reference 6-47 239
- D-Series CLI Reference 6-49 241
- Switchcommand,read‐only 243
- 802.1Q VLAN Configuration 245
- Viewing VLANs 246
- D2(su)->set vlan create 3 249
- D2(su)->clear vlan 9 250
- D2(su)->clear vlan name 9 250
- 7-8 802.1Q VLAN Configuration 252
- D-Series CLI Reference 7-9 253
- D-Series CLI Reference 7-11 255
- D-Series CLI Reference 7-13 257
- D-Series CLI Reference 7-15 259
- Setting the Host VLAN 261
- D2(su)->set host vlan 7 262
- D2(su)->clear host vlan 262
- Overview 263
- How It Works 263
- Purpose 264
- D-Series CLI Reference 7-21 265
- D-Series CLI Reference 7-23 267
- D-Series CLI Reference 8-1 269
- D-Series CLI Reference 8-5 273
- D-Series CLI Reference 8-11 279
- D-Series CLI Reference 8-13 281
- D-Series CLI Reference 8-17 285
- Configuring Policy Profiles 287
- D-Series CLI Reference 9-3 289
- D-Series CLI Reference 9-9 295
- D-Series CLI Reference 9-13 299
- D-Series CLI Reference 9-15 301
- D-Series CLI Reference 9-17 303
- D-Series CLI Reference 9-19 305
- D-Series CLI Reference 9-21 307
- D-Series CLI Reference 9-23 309
- [type {drop}]} 311
- D-Series CLI Reference 9-27 313
- D-Series CLI Reference 9-29 315
- D-Series CLI Reference 9-31 317
- D-Series CLI Reference 10-1 319
- Configuring Port Priority 320
- D-Series CLI Reference 10-3 321
- D-Series CLI Reference 10-5 323
- D-Series CLI Reference 10-7 325
- IGMP Configuration 329
- Configuring IGMP at Layer 2 330
- D-Series CLI Reference 11-3 331
- 11-4 IGMP Configuration 332
- D-Series CLI Reference 11-5 333
- 11-6 IGMP Configuration 334
- D-Series CLI Reference 11-7 335
- 11-8 IGMP Configuration 336
- 11-10 IGMP Configuration 338
- Configuring System Logging 339
- D-Series CLI Reference 12-5 343
- Table 12-38 344
- D-Series CLI Reference 12-9 347
- D-Series CLI Reference 12-13 351
- [-d] [-n] [-v] host 355
- D2(su)->show mac agetime 358
- Aging time: 300 seconds 358
- D2(su)->clear mac agetime 359
- D-Series CLI Reference 12-23 361
- D2(su)->clear sntp client 365
- D-Series CLI Reference 12-29 367
- Configuring Node Aliases 369
- D-Series CLI Reference 12-33 371
- RMON Configuration 373
- 13-2 RMON Configuration 374
- Statistics Group Commands 375
- 13-4 RMON Configuration 376
- History Group Commands 377
- 13-6 RMON Configuration 378
- Alarm Group Commands 379
- D-Series CLI Reference 13-11 383
- Event Group Commands 384
- 13-14 RMON Configuration 386
- Filter Group Commands 387
- 13-16 RMON Configuration 388
- "capture all" 389
- 13-18 RMON Configuration 390
- D-Series CLI Reference 13-19 391
- Packet Capture Commands 392
- Example 393
- 13-22 RMON Configuration 394
- DHCP Server Configuration 395
- Configuring a DHCP Server 396
- D2(rw)->set dhcp enable 398
- D-Series CLI Reference 14-5 399
- D-Series CLI Reference 14-7 401
- D-Series CLI Reference 14-9 403
- Configuring IP Address Pools 404
- D-Series CLI Reference 14-13 407
- D-Series CLI Reference 14-15 409
- D-Series CLI Reference 14-17 411
- D-Series CLI Reference 14-19 413
- D-Series CLI Reference 14-21 415
- D-Series CLI Reference 14-23 417
- D-Series CLI Reference 14-25 419
- D-Series CLI Reference 14-27 421
- D-Series CLI Reference 14-29 423
- Security Configuration 425
- Filter-ID Attribute Formats 426
- Configuring RADIUS 427
- 15-6 Security Configuration 430
- D-Series CLI Reference 15-7 431
- D-Series CLI Reference 15-13 437
- D-Series CLI Reference 15-15 439
- D-Series CLI Reference 15-17 441
- D2(su)->set eapol enable 442
- 15-22 Security Configuration 446
- D-Series CLI Reference 15-23 447
- 15-24 Security Configuration 448
- D-Series CLI Reference 15-25 449
- 15-26 Security Configuration 450
- D-Series CLI Reference 15-27 451
- 15-28 Security Configuration 452
- D-Series CLI Reference 15-29 453
- D-Series CLI Reference 15-31 455
- 15-32 Security Configuration 456
- D-Series CLI Reference 15-33 457
- 15-34 Security Configuration 458
- D-Series CLI Reference 15-35 459
- 15-36 Security Configuration 460
- D-Series CLI Reference 15-37 461
- 15-38 Security Configuration 462
- D-Series CLI Reference 15-39 463
- 15-40 Security Configuration 464
- D-Series CLI Reference 15-43 467
- 15-44 Security Configuration 468
- D-Series CLI Reference 15-45 469
- Configuring MAC Locking 470
- 15-50 Security Configuration 474
- D-Series CLI Reference 15-51 475
- 15-52 Security Configuration 476
- D-Series CLI Reference 15-53 477
- 15-54 Security Configuration 478
- D-Series CLI Reference 15-55 479
- 15-56 Security Configuration 480
- About PWA 481
- 15-60 Security Configuration 484
- D2(su)->clear pwa banner 485
- 15-62 Security Configuration 486
- D-Series CLI Reference 15-63 487
- Guest Password: ********* 488
- D-Series CLI Reference 15-65 489
- 15-66 Security Configuration 490
- D-Series CLI Reference 15-67 491
- D2(su)->show ssh status 493
- SSH Server status: Disabled 493
- D2(su)->set ssh disable 493
- Dynamic policy profile 495
Powiązane produkty i podręczniki dla Akcesoria komputerowe Enterasys-networks Enterasys D2 D2G124-12P
Akcesoria komputerowe Enterasys-networks Enterasys SecureStack B2 B2G124-24 Instrukcja Użytkownika
(80 strony)
(80 strony)
(70 strony)
Akcesoria komputerowe Enterasys-networks Enterasys Vertical Horizon VH-2402S Instrukcja Użytkownika
(7 strony)
(7 strony)
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.494 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji