enterasys switch configuration guide

TACACS+ You can also configure TACACS+ to use a single TCP connection for all TACACS+ client requests to a given TACACS+ server. set multiauth mode multi 5. Terms and Definitions 9-16 Configuring VLANs. To perform a TFTP or SFTP download: 1. It can be enabled using the set security profile c2 command. For detailed information about the CLI commands used in this book, refer to the CLI Reference for your Fixed Switch platform. Table 16-5 Displaying Policy Configuration and Statistics Task Command(s) Display policy role information. Meraki MS Switches have many valuable key features. View online Configuration manual for Enterasys C2H124-24 Switch or simply click Download button to examine the Enterasys C2H124-24 guidelines offline on your desktop or laptop computer. Alternatively, you can specify only the interface to be used to contact the DHCPv6 server and the Fixed Switch device will use the DHCPV6-ALL-AGENTS multicast address (FF02::1:2) to relay DHCPv6 messages to the DHCPv6 server. show system password 3. set snmp targetaddr targetaddr ipaddr param param [udpport udpport] [mask mask] [timeout timeout] [retries retries] [taglist taglist] [volatile | nonvolatile] If not specified, udpport will be set to 162. (7) Router 2 forwards the multicast stream to Host 2. Port Slot/Unit Parameters Used in the CLI. Interface-specific parameters are configured with variations of the Spanning Tree port configuration commands. ipv6 route ipv6-prefix/prefix-length {global-next-hop-addr | interface {tunnel tunnel-id | vlan vlan-id} ll-next-hop-addr} [pref] 2. You and Enterasys agree as follows: 1. When operating in unicast mode, optionally change the number of poll retries to a unicast SNTP server. A team player who has worked on-site in 6 different countries ranging from Saudi Arabia to Cuba. Spanning Tree Basics that port will be selected as root. The sources DR registers (that is, encapsulates) and sends multicast data from the source directly to the RP via a unicast routing protocol (number 1 in figure). You can also use the show commands described in Reviewing and Enabling Spanning Tree on page 15-20 to review information related to all Spanning Tree protocol activity. Brand . The router with the highest priority is elected the DR, and the router with the next highest priority is elected the BDR. 100 VRRP preemption Specifies whether higher priority backup VRRP routers can preempt a lower priority master VRRP router and become master. Port Configuration Overview maximum number of packets which can be received per second with the set port broadcast command: Maximum packet per second values are: 148810 for Fast Ethernet ports 1488100 for 1-Gigabit ports. Table 12-2 SNMP Terms and Definitions Term Definition community A name string used to authenticate SNMPv1 and v2c users. 2. . Authentication Configuration Example Authentication Configuration Example Our example covers the three supported stackable and fixed switch authentication types being used in an engineering group: end-user stations, an IP phone, a printer cluster, and public internet access. It assumes that you have gathered the necessary TACACS+ server information, such as the servers IP address, the TCP port to use, shared secret, the authorization service name, and access level attribute-value pairs. Switch Configuration Using CLI Commands Guidelines for Rackmount Installation Attaching Brackets and Installing in Rack About SecureStack Switch Operation in a Stack 44 Recommended Procedures to Install New and Existing Stacks Installing a New Stackable System of Up to Eight Switches Adding a New Switch to an Existing Stack Important After you have established your connection to the switch, follow these steps to download the latest firmware: 1. Configuring ACLs Procedure 24-1 Configuring IPv4 Standard and Extended ACLs (continued) Step Task Command(s) 6. DHCP snooping forwards valid DHCP client messages received on non-routing VLANs. P/N 9034174-01. . set multiauth idle-timeout auth-method timeout 2. show ip mroute [unicast-source-address | multicast-group-address] [summary] Refer to the devices CLI Reference Guide, as applicable, for an example of each commands output. All routers with the same VRID should be configured with the same advertisement interval. Configured and maintained VPN products for establish IPsec (L2L . set port duplex port-string full 5. Neighbor Discovery Overview Figure 13-1 Communication between LLDP-enabled Devices Discovery MIB Port Device ge. Configuration Guide. SpanGuard helps protect against Spanning Tree Denial of Service (DoS) SpanGuard attacks as well as unintentional or unauthorized connected bridges, by intercepting received BPDUs on configured ports and locking these ports so they do not process any received packets. Ctrl+D Delete a character. DHCP and BOOTP Relay DHCP/BOOTP relay functionality is applied with the help of UDP broadcast forwarding. Configuration Guide Firmware Version 6.03.xx.xxxx. Using the Command Line Interface commands without optional parameters, the defaults section lists None. Premium Edge The S-Series Edge Switch will be rate-limited using a configured CoS that is applied to the services and phoneES policy role. Configuration Procedures 22-20 Configuring OSPFv2. Example PoE Configuration A PoE-compliant G-Series device is configured as follows: One 400W power supply is installed. set port vlan port-string vlan-id [modify-egress | no-modify-egress] Optionally, specify whether or not the ports should be added to the VLANs untagged egress list and removed from other untagged egress lists. Disable WebView and show the current state. show rmon event set rmon event properties set rmon event status clear rmon event Filter Allows packets to be matched by a filter definition. Neighbor Discovery Overview Figure 13-2 LLDP-MED LLDP-MED Network Connectivity Devices: Provide IEEE 802 network access to LLDP-MED endpoints (for example, L2/L3 switch) LLDP-MED Generic Endpoints (Class I): Basic participant endpoints in LLDP-MED (for example, IP communications controller) IP Network Infrastructure (IEEE 802 LAN) LLDP-MED Media Endpoints (Class ll): Supports IP media streams (for media gateways, conference bridges) LLDP-MED Communication Device Endpoints (Class III): Support IP comm. ThisexampleshowshowtodisplaythesystemIPaddressandsubnetmask: Thefollowingtableprovidesanexplanationofthecommandoutput. 18 Configuring Network Monitoring This chapter describes network monitoring features on the Fixed Switches and their configuration. Quality of Service Overview Preferential Queue Treatment for Packet Forwarding There are three types of preferential queue treatments for packet forwarding: strict priority, weighted fair, and hybrid. This enables you to set the IP address and system password using a single console port. When operating in unicast mode, optionally change the poll interval between SNTP unicast requests. IP Broadcast Settings the clear arp command to delete a specific entry or all entries from the switch ARP table. MSTI Multiple Spanning Tree Instance. Configuration Procedures Procedure 22-3 OSPF Area Configuration (continued) Step Task Command(s) 4. Terms and Definitions 2. Setting the Loop Protect Event Threshold and Window 15-34 Enabling or Disabling Loop Protect Event Notifications 15-35 Setting the Disputed BPDU Threshold 15-35 Monitoring Loop Protect Status and Settings 15-35 Enabling or Disabling Loop Protect By default, Loop Protect is disabled on all ports. Port priority also determines which ports will join a LAG when the number of supported ports for a LAG is exceeded. Spanning Tree Basics displayed in the following example. Refer to the CLI Reference for your platform for more information about the commands listed below. Enable or disable Telnet services, inbound, outbound, or all. 20 IP Configuration This chapter provides general IPv4 routing configuration information. RPs provide a place for receivers and senders to meet. If this state is disabled, LACP PDUs are transmitted every 1 second. Assign to queue assign the packet to a queue Note: Unlike other Fixed Switch platforms, A4 ACLs are not terminated with an implicit deny all rule. When a faculty member authenticates through the RADIUS server, the name of the faculty policy is returned in the RADIUS Access-Accept response message and that policy is applied by the switch to the faculty user. Configuring Authentication Authentication Required Authentication methods are active on the port, based on the global and per port authentication method configured. set sntp poll-retry retry 5. interface {vlan vlan-id | loopback loopbackid } 2. However, it does provide a level of authentication for a device where otherwise none would be possible. A dependent downstream device on a pruned branch restarts. If it is not, then the sending device proceeds no further. Configuring SNMP . Link Aggregation Configuration Example The output algorithm defaults to selecting the output port based upon the destination and source IP address. Router 4 is configured as an ASBR connected to a RIP autonomous system. The console port on the manager switch remains active for out-of-band (local) switch management, but the console port on each member switch is deactivated. Plan, implement IT security. For example, set logging local console enable would not execute without also specifying file enable or disable. Link Aggregation Overview Because port 6 has both a different speed and a higher priority than the port with the lowest priority in the LAG, it is not moved to the attached state. Optionally, set the GARP join, leave, and leaveall timer values. C5(rw)->set dhcp pool manual3 client-identifier 01:00:01:22:33:44:55 C5(rw)->set dhcp pool manual3 host 10.12.1.10 255.255.255.0 C5(rw)->set dhcp pool manual3 lease infinite Configuring Additional Pool Parameters Table 4-8 lists the commands that can be used to configure additional IP address pool parameters. By default, MAC authentication is globally disabled on the device. 3. How to back up the configuration of an Enterasys C2G 124-24 switch via ipv6 dhcp enable 2. Table 24-1 Output of show ipv6 dhcp interface Command. Some switches need a policy license to support this. Use this command to manually unlock a port that was locked by the SpanGuard function. . set ipsec authentication {md5 | sha1} Note: This command is not available if the security mode setting is C2. sFlow 18-16 Configuring Network Monitoring. Based on the exchanged BPDU information, the spanning tree algorithm selects one of the switches on the network as the root switch for the tree topology. Determine the correct authentication type for each device. Connect a null-modem DB9 to DB9 cable between the computer's serial port and the switch; use serial communication settings 9600, n, 8, 1. Configuring Link Aggregation Procedure 11-1 Configuring Link Aggregation (continued) Step Task Command(s) 4. Configuring OSPF Areas Example Figure 22-5 OSPF NSSA Topology Area 1 RIP Backbone Router 1 Router 2 Router 3 Router 4 Router 5 Using the topology shown in Figure 22-5, the following code examples will configure Router 2 as the ABR between Area 1 and the backbone area 0. Enterasys Core Switch/Router Commands - KimConnect.com The client queries these configured SNTP servers at a fixed poll-interval configured using the set sntp poll-interval command. 1.4 IP phone ge. How RADIUS Data Is Used The Enterasys switch bases its decision to open the port and apply a policy or close the port based on the RADIUS message, the port's default policy, and unauthenticated behavior configuration. Configuring STP and RSTP set spantree portpri port-string priority [sid sid] Valid priority values are 0240 (in increments of 16) with 0 indicating high priority. Using Multicast in Your Network unsolicited join (sent as a request without receiving an IGMP query first) In Figure 19-2, this type of exchange occurs between Router 2 and Host 2 when: (6) Host 2 sends a join message to Router 2. The switch can enforce a system-wide default for password aging (set system password aging). show ip dvmrp [route | neighbor | status] Display the IP multicast routing table. TheCLIsupportsEMACslikelineeditingcommands.Tabl e 13listssomecommonlyused commands. Configuring DVMRP Basic DVMRP Configuration By default, DVMRP is disabled globally and on each interface. Type configure from Privileged EXEC mode. Rate limiting guarantees the availability of bandwidth for other traffic by preventing the rate limited traffic from consuming more than the assigned amount of a networks resources. The trap generation will be done using the Enterasys Syslog Client MIB notification etsysSyslogSecureLogDroppedMsgNotification. routing interface A VLAN or loopback interface configured for IP routing. RSTP provides rapid connectivity following the failure of a switching device, switch port, or the addition of a switch into the network. Decides if the upstream neighbor is capable of receiving prunes. For example: A4(su)->show boot system Current system image to boot: a4-series_06.61.00.0026 Use the set boot system command to set the firmware image to be loaded at startup. C5(rw)->set linkflap portstate disable ge.1.1-12 Link Flap Detection Display Commands Table 8-3 lists link flap detection show commands. 5. Disable the default super-user account, admin set system login admin super-user disable This example creates a new super-user account named usersu and enables it. Chapter 22, Configuring OSPFv2 Configure multicast protocols IGMP, DVMRP, and PIM, and general multicast parameters. Procedure 22-2 OSPF Interface Configuration Step Task Command(s) 1. By convention, the higher the port speed, the lower the port cost. Use the disconnect command to close a console or Telnet session. Authentication Configuration Example In an 802.1x configuration, policy is specified in the RADIUS account configuration on the authentication server using the RADIUS Filter-ID. TACACS+ Basic TACACS+ Configuration Procedure 26-4 describes the basic steps to configure TACACS+ on Enterasys devices. This allows VLANs to share addressing information. DHCP Configuration The subnet of the IP address being issued should be on the same subnet as the ingress interface (that is, the subnet of the host IP address of the switch, or if routing interfaces are configured, the subnet of the routing interface). Table 8-6 show snmp access Output Details, Overview: Single, Rapid, and Multiple Spanning Tree Protocols, Tabl e 91showsadetailedexplanationofcommandoutput.