Extreme Networks Summit 300-48 Guide de sécurité

Extreme Networks, Inc.

3585 Monroe Street

Santa Clara, California 95051

(888) 257-3000

http://www.extremenetworks.com

Summit 300-48 Switch

Software User Guide

Software Version 6.2a

Published: September 2003

Part number: 123007-00 Rev. 01

registered trademarks of Extreme Networks, Inc. in the United States and certain other jurisdictions. ExtremeWare Vista,

ExtremeWorks, ExtremeAssist, ExtremeAssist1, ExtremeAssist2, PartnerAssist, Extreme Standby Router Protocol, ESRP,

SmartTraps, Summit, Summit1, Summit4, Summit4/FX, Summit7i, Summit24, Summit48, Summit Virtual Chassis,

SummitLink, SummitGbX, SummitRPS and the Extreme Networks logo are trademarks of Extreme Networks, Inc.,

which may be registered or pending registration in certain jurisdictions. The Extreme Turbodrive logo is a service mark

of Extreme Networks, which may be registered or pending registration in certain jurisdictions. Specifications are subject

to change without notice.

NetWare and Novell are registered trademarks of Novell, Inc. Merit is a registered trademark of Merit Network, Inc.

Solaris is a trademark of Sun Microsystems, Inc. F5, BIG/ip, and 3DNS are registered trademarks of F5 Networks, Inc.

see/IT is a trademark of F5 Networks, Inc.

“Data Fellows”, the triangle symbol, and Data Fellows product names and symbols/logos are

trademarks of Data Fellows.

F-Secure SSH is a registered trademark of Data Fellows.

All other registered trademarks, trademarks and service marks are property of their respective owners.

Authors: Julie Laccabue, Barbara Weinstein

Editor: Amy Guzules

Production: Julie Laccabue

Special Thanks: Collin Batey, Valerie Swisher, Richard Small

Summit 300-48 Switch Software User Guide 3

Contents

Preface

Introduction 15

Conventions 15

Related Publications 16

Chapter 1 ExtremeWare Overview

Summary of Features 17

Unified Access 18

Virtual LANs (VLANs) 18

Spanning Tree Protocol 18

Quality of Service 19

Load Sharing 19

ESRP-Aware Switches 19

Software Licensing 19

Security Licensing 20

Obtaining a Security License 20

Security Features Under License Control 20

Software Factory Defaults 20

Chapter 2 Accessing the Switch

Understanding the Command Syntax 23

Syntax Helper 24

Command Shortcuts 24

Summit 300-48 Switch Numerical Ranges 24

Names 25

Symbols 25

Line-Editing Keys 25

Command History 26

Common Commands 26

4Summit 300-48 Switch Software User Guide

Contents

Configuring Management Access 28

User Account 29

Administrator Account 29

Default Accounts 29

Creating a Management Account 30

Domain Name Service Client Services 31

Checking Basic Connectivity 32

Ping 32

Traceroute 32

Chapter 3 Managing the Switch

Overview 35

Using the Console Interface 36

Using Telnet 36

Connecting to Another Host Using Telnet 36

Configuring Switch IP Parameters 36

Disconnecting a Telnet Session 38

Controlling Telnet Access 39

Using Secure Shell 2 (SSH2) 39

Enabling SSH2 for Inbound Switch Access 39

Using SNMP 40

Accessing Switch Agents 40

Supported MIBs 41

Configuring SNMP Settings 41

Displaying SNMP Settings 42

Authenticating Users 43

RADIUS Client 43

Using ExtremeWare Vista 47

Controlling Web Access 47

Setting Up Your Browser 47

Accessing ExtremeWare Vista 48

Navigating ExtremeWare Vista 48

Saving Changes 50

Filtering Information 50

Do a GET When Configuring a VLAN 51

Sending Screen Output to Extreme Networks 51

Using the Simple Network Time Protocol 51

Configuring and Using SNTP 51

SNTP Configuration Commands 54

SNTP Example 54

Chapter 4 Configuring Ports on a Switch

Summit 300-48 Switch Software User Guide 5

Contents

Port Numbering 55

Enabling and Disabling Switch Ports 55

Configuring Switch Port Speed and Duplex Setting 56

Switch Port Commands 56

Load Sharing on the Switch 57

Load-Sharing Algorithms 57

Configuring Switch Load Sharing 58

Load-Sharing Example 59

Verifying the Load-Sharing Configuration 59

Switch Port-Mirroring 59

Port-Mirroring Commands 60

Port-Mirroring Example 61

Extreme Discovery Protocol 61

EDP Commands 61

Chapter 5 Virtual LANs (VLANs)

Overview of Virtual LANs 63

Benefits 63

Types of VLANs 64

Port-Based VLANs 64

Tagged VLANs 66

VLAN Names 69

Default VLAN 69

Renaming a VLAN 70

Configuring VLANs on the Switch 70

VLAN Configuration Commands 70

VLAN Configuration Examples 71

Displaying VLAN Settings 71

Chapter 6 Wireless Networking

Overview of Wireless Networking 73

Summary of Wireless Features 74

Wireless Devices 74

Bridging 75

Managing Wireless Ports 75

Configuring RF Properties 76

Configuring Wireless Switch Properties 78

Configuring Country Codes 78

Configuring Wireless Ports 79

6Summit 300-48 Switch Software User Guide

Contents

Configuring Wireless Port Interfaces 79

Managing Wireless Clients 80

Show Commands 80

Event Logging and Reporting 81

Chapter 7 Unified Access Security

Overview of Security 83

User Access Security 84

Authentication 84

Privacy 85

Cipher Suites 85

Network Security Policies 87

Policy Design 87

Policy Examples 88

Policies and RADIUS Support 88

RADIUS Attributes 88

CLI Commands for Security on the Switch 89

Security Profile Commands 89

Example Wireless Configuration Process 91

Chapter 8 Power Over Ethernet

Overview 95

Summary of PoE Features 95

Port Power Management 96

Port Power Operator Limit 96

Power Budget Management 96

Port Power Events 97

Per-Port LEDs 98

Configuring Power Over Ethernet 98

Chapter 9 Forwarding Database (FDB)

Overview of the FDB 103

FDB Contents 103

FDB Entry Types 103

How FDB Entries Get Added 104

Associating a QoS Profile with an FDB Entry 104

Configuring FDB Entries 105

FDB Configuration Examples 106

Displaying FDB Entries 106

Summit 300-48 Switch Software User Guide 7

Contents

Chapter 10 Access Policies

Overview of Access Policies 107

Access Control Lists 107

Rate Limits 107

Using Access Control Lists 107

Access Masks 108

Access Lists 108

Rate Limits 109

How Access Control Lists Work 109

Access Mask Precedence Numbers 110

Specifying a Default Rule 110

The permit-established Keyword 111

Adding Access Mask, Access List, and Rate Limit Entries 111

Deleting Access Mask, Access List, and Rate Limit Entries 112

Verifying Access Control List Configurations 112

Access Control List Commands 112

Access Control List Examples 116

Chapter 11 Quality of Service (QoS)

Overview of Policy-Based Quality of Service 121

Applications and Types of QoS 122

Voice Applications 122

Video Applications 122

Critical Database Applications 122

Web Browsing Applications 123

File Server Applications 123

Configuring QoS for a Port or VLAN 123

Traffic Groupings 124

Access List Based Traffic Groupings 124

MAC-Based Traffic Groupings 125

Explicit Class of Service (802.1p and DiffServ) Traffic Groupings 126

Configuring DiffServ 128

Physical and Logical Groupings 130

Verifying Configuration and Performance 131

QoS Monitor 131

Displaying QoS Profile Information 132

Modifying a QoS Configuration 132

Traffic Rate-Limiting 132

Chapter 12 Status Monitoring and Statistics

Status Monitoring 133

8Summit 300-48 Switch Software User Guide

Contents

Port Statistics 135

Port Errors 136

Port Monitoring Display Keys 137

Setting the System Recovery Level 137

Logging 138

Local Logging 139

Remote Logging 139

Logging Configuration Changes 140

Logging Commands 140

RMON 142

About RMON 142

RMON Features of the Switch 142

Configuring RMON 143

Event Actions 144

Chapter 13 Spanning Tree Protocol (STP)

Overview of the Spanning Tree Protocol 145

Spanning Tree Domains 145

Defaults 146

STPD BPDU Tunneling 146

STP Configurations 146

Configuring STP on the Switch 148

STP Configuration Example 151

Displaying STP Settings 151

Disabling and Resetting STP 152

Chapter 14 IP Unicast Routing

Overview of IP Unicast Routing 153

Router Interfaces 154

Populating the Routing Table 154

Proxy ARP 156

ARP-Incapable Devices 156

Proxy ARP Between Subnets 156

Relative Route Priorities 157

Configuring IP Unicast Routing 157

Verifying the IP Unicast Routing Configuration 158

IP Commands 158

Routing Configuration Example 162

Displaying Router Settings 163

Summit 300-48 Switch Software User Guide 9

Contents

Resetting and Disabling Router Settings 163

Configuring DHCP/BOOTP Relay 164

Verifying the DHCP/BOOTP Relay Configuration 165

UDP-Forwarding 165

Configuring UDP-Forwarding 165

UDP-Forwarding Example 166

ICMP Packet Processing 166

UDP-Forwarding Commands 166

Appendix A Safety Information

Important Safety Information 169

Power 169

Power Cord 170

Connections 170

Lithium Battery 171

Appendix B Supported Standards

Appendix C Software Upgrade and Boot Options

Downloading a New Image 175

Rebooting the Switch 176

Saving Configuration Changes 176

Returning to Factory Defaults 176

Using TFTP to Upload the Configuration 177

Using TFTP to Download the Configuration 178

Downloading a Complete Configuration 178

Downloading an Incremental Configuration 178

Scheduled Incremental Configuration Download 178

Remember to Save 179

Upgrading and Accessing BootROM 179

Upgrading Bootloader 179

Accessing the Bootstrap CLI 179

Accessing the Bootloader CLI 180

Boot Option Commands 181

Appendix D Troubleshooting

LEDs 183

Using the Command-Line Interface 184

Port Configuration 185

VLANs 186

STP 187

10 Summit 300-48 Switch Software User Guide

Contents

Debug Tracing 187

TOP Command 187

Contacting Extreme Technical Support 187

Index

Index of Commands

Autres manuels pour Summit 300-48

Table des matières

Autres manuels Extreme Networks Changer

Extreme Networks

Extreme Networks Summit X450a-24tDC Manuel

Extreme Networks

Extreme Networks Summit1 Manuel

Extreme Networks

Extreme Networks ExtremeSwitching Virtual Services Platform... Manuel utilisateur

Extreme Networks

Extreme Networks Summit X150 Series Manuel

Extreme Networks

Extreme Networks SSA-G8018-0652 Manuel

Extreme Networks

Extreme Networks Summit Summit24 Manuel utilisateur

Extreme Networks

Extreme Networks BlackDiamond 8810 Manuel

Extreme Networks

Extreme Networks B-Series B5 Manuel utilisateur

Extreme Networks

Extreme Networks ExtremeSwitching CES 2000 Series Manuel

Extreme Networks

Extreme Networks Summit X670-G2-72x Manuel utilisateur

Extreme Networks

Extreme Networks X690-48t-2q-4c Manuel utilisateur

Extreme Networks

Extreme Networks Summit X460-24t Manuel utilisateur

Extreme Networks

Extreme Networks Summit Summit48si Manuel utilisateur

Extreme Networks

Extreme Networks Summit X430 Series Guide de démarrage rapide

Extreme Networks

Extreme Networks VSP 4450GSX-PWR+ Manuel utilisateur

Extreme Networks

Extreme Networks Summit X650 Series Manuel utilisateur

Extreme Networks

Extreme Networks BlackDiamond 8806 Manuel

Extreme Networks

Extreme Networks BlackDiamond 10808 Manuel

Extreme Networks

Extreme Networks Summit X650-24x Guide de référence

Extreme Networks

Extreme Networks EAS 100-24t Switch Manuel utilisateur

Extreme Networks

Extreme Networks ExtremeSwitching SLX 9030 Series Manuel

Extreme Networks

Extreme Networks Alpine 3804 Manuel utilisateur

Extreme Networks

Extreme Networks ExtremeSwitching X435 Series Manuel

Extreme Networks

Extreme Networks 200 Series Manuel utilisateur

Manuels Changer populaires d'autres marques

URC

URC Total Control MFS-8 Manuel utilisateur

Azbil

Azbil HPQ-D11 Manuel utilisateur

Sony

Sony DFS-900M Manuel utilisateur

SICK

SICK i17S Manuel utilisateur

F&F

F&F SZR-277 Manuel utilisateur

Shure

Shure UAMS/BK Manuel utilisateur

Dräger

Dräger X-zone Switch Off Manuel utilisateur

Asco

Asco Joucomatic 349 Series Manuel utilisateur

BT Mini Hub Manuel utilisateur

D-Link

D-Link DES-1226G Manuel utilisateur

Johnson Controls

Johnson Controls FS80-C Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuel utilisateur

MicroNet

MicroNet SP1200A Manuel utilisateur

Ruijie

Ruijie RG-PF2920 Series Manuel d'installation et d'exploitation

Altinex

Altinex DA1914SX Manuel utilisateur

MiLAN

MiLAN MIL-SM2401M Manuel utilisateur

RJM

RJM MASTERMIND PBC/6X Manuel utilisateur

Atlas

Atlas MMK-KVM8 Manuel utilisateur