Extreme Networks Summit 300-48 Guide de sécurité
Extreme Networks, Inc.
3585 Monroe Street
Santa Clara, California 95051
(888) 257-3000
http://www.extremenetworks.com
Summit 300-48 Switch
Software User Guide
Software Version 6.2a
Published: May 2004
Partnumber: 123007-00 Rev.02
2
Alpine, Altitude, BlackDiamond, EPICenter, Ethernet Everywhere, Extreme Ethernet Everywhere, Extreme Networks,
Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, GlobalPx Content Director, the Go Purple
Extreme Solution Partners Logo, ServiceWatch, Summit, the Summit7i Logo, and the Color Purple, among others, are
trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and other
countries. Other names and marks may be the property of their respective owners.
© 2004 Extreme Networks, Inc. All Rights Reserved. Specifications are subject to change without notice.
Summit 300-48 Switch Software User Guide 3
Contents
Preface
Introduction 17
Conventions 17
Related Publications 18
Chapter 1 ExtremeWare Overview
Summary of Features 19
Unified Access 20
Virtual LANs (VLANs) 20
Spanning Tree Protocol 20
Quality of Service 21
Load Sharing 21
ESRP-Aware Switches 21
Software Licensing 21
Security Licensing 22
Obtaining a Security License 22
Security Features Under License Control 22
Software Factory Defaults 22
Chapter 2 Accessing the Switch
Understanding the Command Syntax 25
Syntax Helper 26
Command Shortcuts 26
Summit 300-48 Switch Numerical Ranges 26
Names 27
Symbols 27
Line-Editing Keys 27
Command History 28
Common Commands 28
4Summit 300-48 Switch Software User Guide
Contents
Configuring Management Access 30
User Account 31
Administrator Account 31
Default Accounts 31
Creating a Management Account 32
Domain Name Service Client Services 33
Checking Basic Connectivity 34
Ping 34
Traceroute 34
Chapter 3 Managing the Switch
Overview 37
Using the Console Interface 38
Using Telnet 38
Connecting to Another Host Using Telnet 38
Configuring Switch IP Parameters 38
Disconnecting a Telnet Session 40
Controlling Telnet Access 41
Using Secure Shell 2 (SSH2) 41
Enabling SSH2 for Inbound Switch Access 41
Using SNMP 42
Accessing Switch Agents 42
Supported MIBs 43
Configuring SNMP Settings 43
Displaying SNMP Settings 44
Authenticating Users 45
RADIUS Client 45
Using ExtremeWare Vista 49
Controlling Web Access 49
Setting Up Your Browser 49
Accessing ExtremeWare Vista 50
Navigating ExtremeWare Vista 50
Saving Changes 52
Filtering Information 52
Do a GET When Configuring a VLAN 53
Sending Screen Output to Extreme Networks 53
Using the Simple Network Time Protocol 53
Configuring and Using SNTP 53
SNTP Configuration Commands 56
SNTP Example 56
Show Odometer Command 56
Summit 300-48 Switch Software User Guide 5
Contents
Chapter 4 Configuring Ports on a Switch
Port Numbering 57
Enabling and Disabling Switch Ports 57
Configuring Switch Port Speed and Duplex Setting 58
Switch Port Commands 58
Load Sharing on the Switch 59
Load-Sharing Algorithms 59
Configuring Switch Load Sharing 60
Load-Sharing Example 61
Verifying the Load-Sharing Configuration 61
Switch Port-Mirroring 61
Port-Mirroring Commands 62
Port-Mirroring Example 63
Extreme Discovery Protocol 63
EDP Commands 63
Chapter 5 Virtual LANs (VLANs)
Overview of Virtual LANs 65
Benefits 65
Types of VLANs 66
Port-Based VLANs 66
Tagged VLANs 68
VLAN Names 71
Default VLAN 71
Renaming a VLAN 72
Configuring VLANs on the Switch 72
VLAN Configuration Commands 72
VLAN Configuration Examples 73
Displaying VLAN Settings 73
Chapter 6 Wireless Networking
Overview of Wireless Networking 75
Summary of Wireless Features 76
Wireless Devices 76
Altitude 300-2d Detachable Antenna 77
Bridging 77
Managing the Altitude 300 78
Wireless Show Commands 78
Configuring RF Properties 79
Configuring RF Monitoring 80
6Summit 300-48 Switch Software User Guide
Contents
AP Detection 81
Managing Wireless Clients 83
Performing Client Scanning 83
Collecting Client Information 85
Configuring Wireless Switch Properties 87
Configuring Country Codes 88
Configuring Wireless Ports 89
Configuring Wireless Interfaces 89
Force Disassociation 90
Event Logging and Reporting 91
Chapter 7 Unified Access Security
Overview of Security 93
User Access Security 94
Authentication 94
Encryption 96
Cipher Suites 96
Network Login 96
Web-Based and 802.1x Authentication 97
Campus and ISP Modes 99
Interoperability Requirements 99
Exclusions and Limitations 100
Configuring Network Login 100
Web-Based Authentication User Login Using Campus Mode 103
DHCP Server on the Switch 104
Displaying DHCP Information 104
Additional Configuration Details 104
Network Login Configuration Commands 105
Displaying Network Login Settings 106
Wireless Network Login Considerations 107
MAC RADIUS 107
Network Security Policies for Wireless Interfaces 107
Policy Design 107
Policy Examples 109
Policies and RADIUS Support 109
RADIUS Attributes 109
CLI Commands for Security on the Switch 111
Security Profile Commands 111
Secure Web Login Access 113
Creating Certificates and Private Key 114
Example Wireless Configuration Processes 115
Summit 300-48 Switch Software User Guide 7
Contents
Wireless Management Configuration Example 115
Security Configuration Examples 116
Profile Assignment Example 131
Chapter 8 Power Over Ethernet
Overview 133
Summary of PoE Features 133
Port Power Management 134
Port Power Operator Limit 134
Power Budget Management 134
Port Power Events 136
Load Sharing Power Supplies 137
Per-Port LEDs 139
Configuring Power Over Ethernet 139
Chapter 9 Forwarding Database (FDB)
Overview of the FDB 143
FDB Contents 143
FDB Entry Types 143
How FDB Entries Get Added 144
Associating a QoS Profile with an FDB Entry 144
Configuring FDB Entries 145
FDB Configuration Examples 146
Displaying FDB Entries 146
Chapter 10 Access Policies
Overview of Access Policies 147
Access Control Lists 147
Rate Limits 147
Using Access Control Lists 147
Access Masks 148
Access Lists 148
Rate Limits 149
How Access Control Lists Work 149
Access Mask Precedence Numbers 150
Specifying a Default Rule 150
The permit-established Keyword 151
Adding Access Mask, Access List, and Rate Limit Entries 151
Deleting Access Mask, Access List, and Rate Limit Entries 152
Verifying Access Control List Configurations 152
Access Control List Commands 152
Access Control List Examples 156
8Summit 300-48 Switch Software User Guide
Contents
Chapter 11 Quality of Service (QoS)
Overview of Policy-Based Quality of Service 161
Applications and Types of QoS 162
Voice Applications 162
Video Applications 162
Critical Database Applications 162
Web Browsing Applications 163
File Server Applications 163
Configuring QoS for a Port or VLAN 163
Tra ff i c G r o upi n g s 16 4
Access List Based Traffic Groupings 164
MAC-Based Traffic Groupings 165
Explicit Class of Service (802.1p and DiffServ) Traffic Groupings 166
Configuring DiffServ 168
Physical and Logical Groupings 170
Verifying Configuration and Performance 171
QoS Monitor 171
Displaying QoS Profile Information 172
Modifying a QoS Configuration 172
Traffic Rate-Limiting 172
Chapter 12 Status Monitoring and Statistics
Status Monitoring 173
Port Statistics 175
Port Errors 176
Port Monitoring Display Keys 177
Setting the System Recovery Level 177
Logging 178
Local Logging 179
Remote Logging 179
Logging Configuration Changes 180
Logging Commands 180
RMON 182
About RMON 182
RMON Features of the Switch 182
Configuring RMON 183
Event Actions 184
Chapter 13 Spanning Tree Protocol (STP)
Overview of the Spanning Tree Protocol 185
Summit 300-48 Switch Software User Guide 9
Contents
Spanning Tree Domains 185
Defaults 186
STPD BPDU Tunneling 186
STP Configurations 186
Configuring STP on the Switch 188
STP Configuration Example 191
Displaying STP Settings 191
Disabling and Resetting STP 192
Chapter 14 IP Unicast Routing
Overview of IP Unicast Routing 193
Router Interfaces 194
Populating the Routing Table 194
Proxy ARP 196
ARP-Incapable Devices 196
Proxy ARP Between Subnets 196
Relative Route Priorities 197
Configuring IP Unicast Routing 197
Verifying the IP Unicast Routing Configuration 198
IP Commands 198
Routing Configuration Example 202
Displaying Router Settings 203
Resetting and Disabling Router Settings 203
Configuring DHCP/BOOTP Relay 204
Verifying the DHCP/BOOTP Relay Configuration 205
UDP-Forwarding 205
Configuring UDP-Forwarding 205
UDP-Forwarding Example 206
ICMP Packet Processing 206
UDP-Forwarding Commands 206
Appendix A Safety Information
Important Safety Information 209
Power 209
Power Cord 210
Connections 210
Lithium Battery 211
Appendix B Supported Standards
10 Summit 300-48 Switch Software User Guide
Contents
Appendix C Software Upgrade and Boot Options
Downloading a New Image 215
Rebooting the Switch 216
Saving Configuration Changes 216
Returning to Factory Defaults 216
Using TFTP to Upload the Configuration 217
Using TFTP to Download the Configuration 218
Downloading a Complete Configuration 218
Downloading an Incremental Configuration 218
Scheduled Incremental Configuration Download 218
Remember to Save 219
Upgrading and Accessing BootROM 219
Upgrading Bootloader 219
Accessing the Bootstrap CLI 219
Accessing the Bootloader CLI 220
Boot Option Commands 221
Appendix D Troubleshooting
LEDs 223
Using the Command-Line Interface 224
Port Configuration 225
VLANs 226
STP 227
Debug Tracing 227
Debug Trace for Wireless 227
TOP Command 228
Contacting Extreme Technical Support 228
Index
Index of Commands
Autres manuels pour Summit 300-48
1
Table des matières
Autres manuels Extreme Networks Changer
Extreme Networks
Extreme Networks e" series Manuel
Extreme Networks
Extreme Networks ReachNXT 100-8t Manuel utilisateur
Extreme Networks
Extreme Networks 8720 Manuel
Extreme Networks
Extreme Networks ExtremeSwitching VSP 7400 Series Manuel
Extreme Networks
Extreme Networks BlackDiamond X8 Series Manuel utilisateur
Extreme Networks
Extreme Networks Alpine 3802 Manuel
Extreme Networks
Extreme Networks EAS 100-24t Switch Manuel utilisateur
Extreme Networks
Extreme Networks BlackDiamond 6800 Manuel utilisateur
Extreme Networks
Extreme Networks ExtremeSwitching SLX 9140 Manuel
Extreme Networks
Extreme Networks ExtremeSwitching X435 Series Manuel
Extreme Networks
Extreme Networks Summit1 Manuel utilisateur
Extreme Networks
Extreme Networks Summit Summit48si Manuel utilisateur
Extreme Networks
Extreme Networks ExtremeSwitching SLX 9150 Manuel
Extreme Networks
Extreme Networks ExtremeAccess Series Manuel
Extreme Networks
Extreme Networks ISW Series Manuel utilisateur
Extreme Networks
Extreme Networks Summit X150 Series Manuel
Extreme Networks
Extreme Networks Summit X150 Series Manuel utilisateur
Extreme Networks
Extreme Networks BlackDiamond 8806 Manuel
Extreme Networks
Extreme Networks ExtremeSwitching ISW Series Manuel utilisateur
Extreme Networks
Extreme Networks BlackDiamond 10K Series Manuel utilisateur
