Extreme Networks Summit 300-48 Guide de sécurité

Extreme Networks, Inc.

3585 Monroe Street

Santa Clara, California 95051

(888) 257-3000

http://www.extremenetworks.com

Summit 300-48 Switch

Software User Guide

Software Version 6.2a

Published: May 2004

Partnumber: 123007-00 Rev.02

Alpine, Altitude, BlackDiamond, EPICenter, Ethernet Everywhere, Extreme Ethernet Everywhere, Extreme Networks,

Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, GlobalPx Content Director, the Go Purple

Extreme Solution Partners Logo, ServiceWatch, Summit, the Summit7i Logo, and the Color Purple, among others, are

trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and other

countries. Other names and marks may be the property of their respective owners.

Summit 300-48 Switch Software User Guide 3

Contents

Preface

Introduction 17

Conventions 17

Related Publications 18

Chapter 1 ExtremeWare Overview

Summary of Features 19

Unified Access 20

Virtual LANs (VLANs) 20

Spanning Tree Protocol 20

Quality of Service 21

Load Sharing 21

ESRP-Aware Switches 21

Software Licensing 21

Security Licensing 22

Obtaining a Security License 22

Security Features Under License Control 22

Software Factory Defaults 22

Chapter 2 Accessing the Switch

Understanding the Command Syntax 25

Syntax Helper 26

Command Shortcuts 26

Summit 300-48 Switch Numerical Ranges 26

Names 27

Symbols 27

Line-Editing Keys 27

Command History 28

Common Commands 28

4Summit 300-48 Switch Software User Guide

Contents

Configuring Management Access 30

User Account 31

Administrator Account 31

Default Accounts 31

Creating a Management Account 32

Domain Name Service Client Services 33

Checking Basic Connectivity 34

Ping 34

Traceroute 34

Chapter 3 Managing the Switch

Overview 37

Using the Console Interface 38

Using Telnet 38

Connecting to Another Host Using Telnet 38

Configuring Switch IP Parameters 38

Disconnecting a Telnet Session 40

Controlling Telnet Access 41

Using Secure Shell 2 (SSH2) 41

Enabling SSH2 for Inbound Switch Access 41

Using SNMP 42

Accessing Switch Agents 42

Supported MIBs 43

Configuring SNMP Settings 43

Displaying SNMP Settings 44

Authenticating Users 45

RADIUS Client 45

Using ExtremeWare Vista 49

Controlling Web Access 49

Setting Up Your Browser 49

Accessing ExtremeWare Vista 50

Navigating ExtremeWare Vista 50

Saving Changes 52

Filtering Information 52

Do a GET When Configuring a VLAN 53

Sending Screen Output to Extreme Networks 53

Using the Simple Network Time Protocol 53

Configuring and Using SNTP 53

SNTP Configuration Commands 56

SNTP Example 56

Show Odometer Command 56

Summit 300-48 Switch Software User Guide 5

Contents

Chapter 4 Configuring Ports on a Switch

Port Numbering 57

Enabling and Disabling Switch Ports 57

Configuring Switch Port Speed and Duplex Setting 58

Switch Port Commands 58

Load Sharing on the Switch 59

Load-Sharing Algorithms 59

Configuring Switch Load Sharing 60

Load-Sharing Example 61

Verifying the Load-Sharing Configuration 61

Switch Port-Mirroring 61

Port-Mirroring Commands 62

Port-Mirroring Example 63

Extreme Discovery Protocol 63

EDP Commands 63

Chapter 5 Virtual LANs (VLANs)

Overview of Virtual LANs 65

Benefits 65

Types of VLANs 66

Port-Based VLANs 66

Tagged VLANs 68

VLAN Names 71

Default VLAN 71

Renaming a VLAN 72

Configuring VLANs on the Switch 72

VLAN Configuration Commands 72

VLAN Configuration Examples 73

Displaying VLAN Settings 73

Chapter 6 Wireless Networking

Overview of Wireless Networking 75

Summary of Wireless Features 76

Wireless Devices 76

Altitude 300-2d Detachable Antenna 77

Bridging 77

Managing the Altitude 300 78

Wireless Show Commands 78

Configuring RF Properties 79

Configuring RF Monitoring 80

6Summit 300-48 Switch Software User Guide

Contents

AP Detection 81

Managing Wireless Clients 83

Performing Client Scanning 83

Collecting Client Information 85

Configuring Wireless Switch Properties 87

Configuring Country Codes 88

Configuring Wireless Ports 89

Configuring Wireless Interfaces 89

Force Disassociation 90

Event Logging and Reporting 91

Chapter 7 Unified Access Security

Overview of Security 93

User Access Security 94

Authentication 94

Encryption 96

Cipher Suites 96

Network Login 96

Web-Based and 802.1x Authentication 97

Campus and ISP Modes 99

Interoperability Requirements 99

Exclusions and Limitations 100

Configuring Network Login 100

Web-Based Authentication User Login Using Campus Mode 103

DHCP Server on the Switch 104

Displaying DHCP Information 104

Additional Configuration Details 104

Network Login Configuration Commands 105

Displaying Network Login Settings 106

Wireless Network Login Considerations 107

MAC RADIUS 107

Network Security Policies for Wireless Interfaces 107

Policy Design 107

Policy Examples 109

Policies and RADIUS Support 109

RADIUS Attributes 109

CLI Commands for Security on the Switch 111

Security Profile Commands 111

Secure Web Login Access 113

Creating Certificates and Private Key 114

Example Wireless Configuration Processes 115

Summit 300-48 Switch Software User Guide 7

Contents

Wireless Management Configuration Example 115

Security Configuration Examples 116

Profile Assignment Example 131

Chapter 8 Power Over Ethernet

Overview 133

Summary of PoE Features 133

Port Power Management 134

Port Power Operator Limit 134

Power Budget Management 134

Port Power Events 136

Load Sharing Power Supplies 137

Per-Port LEDs 139

Configuring Power Over Ethernet 139

Chapter 9 Forwarding Database (FDB)

Overview of the FDB 143

FDB Contents 143

FDB Entry Types 143

How FDB Entries Get Added 144

Associating a QoS Profile with an FDB Entry 144

Configuring FDB Entries 145

FDB Configuration Examples 146

Displaying FDB Entries 146

Chapter 10 Access Policies

Overview of Access Policies 147

Access Control Lists 147

Rate Limits 147

Using Access Control Lists 147

Access Masks 148

Access Lists 148

Rate Limits 149

How Access Control Lists Work 149

Access Mask Precedence Numbers 150

Specifying a Default Rule 150

The permit-established Keyword 151

Adding Access Mask, Access List, and Rate Limit Entries 151

Deleting Access Mask, Access List, and Rate Limit Entries 152

Verifying Access Control List Configurations 152

Access Control List Commands 152

Access Control List Examples 156

8Summit 300-48 Switch Software User Guide

Contents

Chapter 11 Quality of Service (QoS)

Overview of Policy-Based Quality of Service 161

Applications and Types of QoS 162

Voice Applications 162

Video Applications 162

Critical Database Applications 162

Web Browsing Applications 163

File Server Applications 163

Configuring QoS for a Port or VLAN 163

Tra ff i c G r o upi n g s 16 4

Access List Based Traffic Groupings 164

MAC-Based Traffic Groupings 165

Explicit Class of Service (802.1p and DiffServ) Traffic Groupings 166

Configuring DiffServ 168

Physical and Logical Groupings 170

Verifying Configuration and Performance 171

QoS Monitor 171

Displaying QoS Profile Information 172

Modifying a QoS Configuration 172

Traffic Rate-Limiting 172

Chapter 12 Status Monitoring and Statistics

Status Monitoring 173

Port Statistics 175

Port Errors 176

Port Monitoring Display Keys 177

Setting the System Recovery Level 177

Logging 178

Local Logging 179

Remote Logging 179

Logging Configuration Changes 180

Logging Commands 180

RMON 182

About RMON 182

RMON Features of the Switch 182

Configuring RMON 183

Event Actions 184

Chapter 13 Spanning Tree Protocol (STP)

Overview of the Spanning Tree Protocol 185

Summit 300-48 Switch Software User Guide 9

Contents

Spanning Tree Domains 185

Defaults 186

STPD BPDU Tunneling 186

STP Configurations 186

Configuring STP on the Switch 188

STP Configuration Example 191

Displaying STP Settings 191

Disabling and Resetting STP 192

Chapter 14 IP Unicast Routing

Overview of IP Unicast Routing 193

Router Interfaces 194

Populating the Routing Table 194

Proxy ARP 196

ARP-Incapable Devices 196

Proxy ARP Between Subnets 196

Relative Route Priorities 197

Configuring IP Unicast Routing 197

Verifying the IP Unicast Routing Configuration 198

IP Commands 198

Routing Configuration Example 202

Displaying Router Settings 203

Resetting and Disabling Router Settings 203

Configuring DHCP/BOOTP Relay 204

Verifying the DHCP/BOOTP Relay Configuration 205

UDP-Forwarding 205

Configuring UDP-Forwarding 205

UDP-Forwarding Example 206

ICMP Packet Processing 206

UDP-Forwarding Commands 206

Appendix A Safety Information

Important Safety Information 209

Power 209

Power Cord 210

Connections 210

Lithium Battery 211

Appendix B Supported Standards

10 Summit 300-48 Switch Software User Guide

Contents

Appendix C Software Upgrade and Boot Options

Downloading a New Image 215

Rebooting the Switch 216

Saving Configuration Changes 216

Returning to Factory Defaults 216

Using TFTP to Upload the Configuration 217

Using TFTP to Download the Configuration 218

Downloading a Complete Configuration 218

Downloading an Incremental Configuration 218

Scheduled Incremental Configuration Download 218

Remember to Save 219

Upgrading and Accessing BootROM 219

Upgrading Bootloader 219

Accessing the Bootstrap CLI 219

Accessing the Bootloader CLI 220

Boot Option Commands 221

Appendix D Troubleshooting

LEDs 223

Using the Command-Line Interface 224

Port Configuration 225

VLANs 226

STP 227

Debug Tracing 227

Debug Trace for Wireless 227

TOP Command 228

Contacting Extreme Technical Support 228

Index

Index of Commands

Autres manuels pour Summit 300-48

Table des matières

Autres manuels Extreme Networks Changer

Extreme Networks

Extreme Networks Summit X150 Series Manuel utilisateur

Extreme Networks

Extreme Networks Summit X250e-24p Guide de référence

Extreme Networks

Extreme Networks ExtremeSwitching X435 Series Manuel

Extreme Networks

Extreme Networks Alpine 3804 Instructions d'installation

Extreme Networks

Extreme Networks BlackDiamond 8800 Series Manuel

Extreme Networks

Extreme Networks 59100 Series Manuel utilisateur

Extreme Networks

Extreme Networks ExtremeSwitching X440-G2 Series Manuel

Extreme Networks

Extreme Networks Alpine 3804 Manuel

Extreme Networks

Extreme Networks Summit WM200 Manuel utilisateur

Extreme Networks

Extreme Networks Summit X450a-24tDC Manuel

Extreme Networks

Extreme Networks ExtremeSwitching 210-12t-GE2 Manuel

Extreme Networks

Extreme Networks Summit 200-24 Manuel

Extreme Networks

Extreme Networks B-Series B5 Manuel utilisateur

Extreme Networks

Extreme Networks ExtremeAccess Series Manuel

Extreme Networks

Extreme Networks Summit X670-G2-72x Manuel utilisateur

Extreme Networks

Extreme Networks 8520 Series Manuel

Extreme Networks

Extreme Networks Summit X250e Series Manuel utilisateur

Extreme Networks

Extreme Networks Alpine 3804 Manuel utilisateur

Extreme Networks

Extreme Networks ExtremeSwitching Virtual Services Platform 4850GTS... Manuel utilisateur

Extreme Networks

Extreme Networks Summit X150 Series Manuel

Extreme Networks

Extreme Networks BlackDiamond 6800 Manuel

Extreme Networks

Extreme Networks Summit 300-24 Manuel

Extreme Networks

Extreme Networks Summit 200-24 Manuel utilisateur

Extreme Networks

Extreme Networks ISW Series Manuel utilisateur

Manuels Changer populaires d'autres marques

URC

URC Total Control MFS-8 Manuel utilisateur

Azbil

Azbil HPQ-D11 Manuel utilisateur

Sony

Sony DFS-900M Manuel utilisateur

SICK

SICK i17S Manuel utilisateur

F&F

F&F SZR-277 Manuel utilisateur

Shure

Shure UAMS/BK Manuel utilisateur

Dräger

Dräger X-zone Switch Off Manuel utilisateur

Asco

Asco Joucomatic 349 Series Manuel utilisateur

BT Mini Hub Manuel utilisateur

D-Link

D-Link DES-1226G Manuel utilisateur

Johnson Controls

Johnson Controls FS80-C Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuel utilisateur

MicroNet

MicroNet SP1200A Manuel utilisateur

Ruijie

Ruijie RG-PF2920 Series Manuel d'installation et d'exploitation

Altinex

Altinex DA1914SX Manuel utilisateur

MiLAN

MiLAN MIL-SM2401M Manuel utilisateur

RJM

RJM MASTERMIND PBC/6X Manuel utilisateur

Atlas

Atlas MMK-KVM8 Manuel utilisateur