Cisco LRE CPE Especificaciones Pagina 518
- Pagina / 648
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
25-26
Catalyst 2950 Desktop Switch Software Configuration Guide
78-14982-01
Chapter 25 Configuring Network Security with ACLs
Examples for Compiling ACLs
In this example of a numbered ACL, the Winter and Smith workstations are not allowed to browse the
web:
Switch(config)# access-list 100 remark Do not allow Winter to browse the web
Switch(config)# access-list 100 deny host 171.69.3.85 any eq www
Switch(config)# access-list 100 remark Do not allow Smith to browse the web
Switch(config)# access-list 100 deny host 171.69.3.13 any eq www
In this example of a named ACL, the Jones subnet is not allowed access:
Switch(config)# ip access-list standard prevention
Switch(config-std-nacl)# remark Do not allow Jones subnet through
Switch(config-std-nacl)# deny 171.69.0.0 0.0.255.255
In this example of a named ACL, the Jones subnet is not allowed to use outbound Telnet:
Switch(config)# ip access-list extended telnetting
Switch(config-ext-nacl)# remark Do not allow Jones subnet to telnet out
Switch(config-ext-nacl)# deny tcp 171.69.0.0 0.0.255.255 any eq telnet
- Configuration Guide 1
- CONTENTS 3
- 6 Clustering Switches 6-1 6
- 10 Configuring LRE 10-1 10
- 11 Configuring STP 11-1 11
- Contents 12
- 14 Configuring VLANs 14-1 14
- 15 Configuring VTP 15-1 15
- 19 Configuring UDLD 19-1 17
- 20 Configuring CDP 20-1 17
- 22 Configuring RMON 22-1 18
- 24 Configuring SNMP 24-1 19
- 26 Configuring QoS 26-1 20
- 28 Troubleshooting 28-1 21
- A Supported MIBs A-1 22
- Audience 25
- Organization 26
- Conventions 28
- Related Publications 29
- Obtaining Documentation 29
- Documentation CD-ROM 30
- Ordering Documentation 30
- Documentation Feedback 30
- Cisco.com 31
- Technical Assistance Center 31
- Cisco TAC Escalation Center 32
- Overview 33
- LRE Switch-Specific Support 34
- Performance 35
- Manageability 35
- Redundancy 36
- VLAN Support 37
- Security 37
- Monitoring 38
- Management Options 39
- Chapter 1 Overview 40
- Large Campus Configuration 46
- Hotel Network Configuration 48
- IOS Command Modes 55
- • Change terminal 56
- • Perform basic tests 56
- • Display system 56
- Getting Help 57
- Abbreviating Commands 59
- Understanding CLI Messages 59
- Using Command History 60
- Using Editing Features 61
- Accessing the CLI 64
- Getting Started with CMS 67
- Features 68
- Front Panel view of 69
- Topology view of 69
- Front Panel View 70
- Cluster Tree 72
- Front-Panel Images 73
- Redundant Power System LED 74
- Port Modes and LEDs 74
- VLAN Membership Modes 75
- Topology View 76
- Topology Icons 78
- Device and Link Labels 79
- Colors in the Topology View 80
- Menus and Toolbar 81
- Table 3-11 Menu Bar 83
- Administration 83
- Table 3-12 Toolbar Buttons 86
- Front Panel View Popup Menus 87
- Topology View Popup Menus 88
- Device Popup Menus 89
- Interaction Modes 91
- Tool Tips 92
- Online Help 92
- CMS Window Components 94
- Tabs, Lists, and Tables 95
- Icons Used in Windows 95
- Accessing CMS 96
- Verifying Your Changes 98
- Saving Your Configuration 99
- Restoring Your Configuration 99
- CMS Preferences 99
- Where to Go Next 100
- 78-14982-01 101
- Assigning Switch Information 102
- Default Switch Information 103
- DHCP Client Request Process 104
- Configuring the DHCP Server 105
- Configuring the TFTP Server 105
- Configuring the DNS 106
- Configuring the Relay Device 106
- Obtaining Configuration Files 107
- Example Configuration 108
- Configuring IE2100 CNS Agents 113
- CNS Configuration Service 114
- CNS Event Service 115
- DeviceID 116
- Host Name and DeviceID 116
- Initial Configuration 117
- Synchronized Configuration 118
- Enabling the CNS Event Agent 120
- Displaying CNS Configuration 125
- Clustering Switches 127
- Understanding Switch Clusters 128
- Planning a Switch Cluster 131
- Discovery through CDP Hops 132
- Virtual IP Addresses 139
- IP Addresses 141
- Host Names 142
- Passwords 142
- SNMP Community Strings 142
- TACACS+ and RADIUS 143
- Access Modes in CMS 143
- Management VLAN 144
- LRE Profiles 144
- Creating a Switch Cluster 145
- Adding Member Switches 146
- 2900-LRE-24-1 147
- Verifying a Switch Cluster 150
- Command switch 152
- Trap 1, Trap 2, Trap 3 152
- Member 1 Member 2 Member 3 152
- SNMP Manager 152
- Administering the Switch 153
- Disabling Password Recovery 157
- Understanding TACACS+ 162
- TACACS+ Operation 164
- Configuring TACACS+ 164
- Default TACACS+ Configuration 165
- Starting TACACS+ Accounting 169
- Understanding RADIUS 170
- RADIUS Operation 171
- Configuring RADIUS 172
- Defining AAA Server Groups 177
- Starting RADIUS Accounting 180
- Authorization 184
- Understanding SSH 185
- Configuring SSH 185
- Configuring NTP 188
- Default NTP Configuration 189
- Configuring NTP Associations 190
- Setting the System Clock 196
- Configuring the Time Zone 197
- Configuring a System Name 200
- Configuring a System Prompt 201
- Understanding DNS 201
- Default DNS Configuration 202
- Setting Up DNS 202
- Creating a Banner 203
- Configuring a Login Banner 205
- Building the Address Table 206
- MAC Addresses and VLANs 207
- Managing the ARP Table 213
- Switch Software Releases 213
- Device Roles 216
- Figure 8-2 Message Exchange 217
- Supported Topologies 219
- Default 802.1X Configuration 220
- Changing the Quiet Period 225
- Enabling Multiple Hosts 227
- Understanding Interface Types 229
- Access Ports 230
- Trunk Ports 230
- Port-Based VLANs 231
- EtherChannel Port Groups 231
- Connecting Interfaces 231
- Using the Interface Command 232
- Configuring Switch Interfaces 237
- SFP Configuration 238
- Configuration Guidelines 240
- Configuring LRE 249
- LRE Links and LRE Profiles 250
- Table 10-1 LRE Profiles 251
- LRE Sequences 252
- Configuring LRE Ports 253
- CPE Ethernet Link Guidelines 255
- Precedence 259
- Profile Locking 259
- LRE Link Persistence 262
- LRE Link Monitor 262
- Upgrading LRE Switch Firmware 263
- Performing an LRE Upgrade 264
- LRE Upgrade Behavior Details 266
- Configuring STP 269
- STP Overview 270
- Bridge Protocol Data Units 270
- Election of the Root Switch 271
- Spanning-Tree Timers 272
- Blocking State 275
- Listening State 275
- Learning State 275
- Forwarding State 275
- STP and IEEE 802.1Q Trunks 276
- Default STP Configuration 278
- STP Configuration Guidelines 278
- Disabling STP 280
- Configuring the Root Switch 280
- Configuring the Port Priority 283
- Configuring the Path Cost 284
- Configuring the Hello Time 287
- Configuring RSTP and MSTP 291
- Understanding RSTP 292
- Rapid Convergence 293
- Synchronization of Port Roles 294
- Table 12-2 RSTP BPDU Flags 295
- Topology Changes 296
- Understanding MSTP 297
- IST, CIST, and CST 298
- Hop Count 300
- Boundary Ports 300
- Understanding Port Fast 316
- Understanding BPDU Guard 317
- Understanding BPDU Filtering 317
- Understanding UplinkFast 318
- How CSUF Works 320
- Limitations 322
- Connecting the Stack Ports 322
- Understanding BackboneFast 324
- Blocked port 325
- Understanding Root Guard 326
- Understanding Loop Guard 327
- Enabling Port Fast 328
- Enabling BPDU Guard 329
- Enabling BPDU Filtering 330
- Enabling BackboneFast 333
- Enabling Root Guard 333
- Enabling Loop Guard 334
- Configuring VLANs 337
- Supported VLANs 338
- VLAN Port Membership Modes 339
- Token Ring VLANs 341
- Saving VLAN Configuration 343
- Deleting a VLAN 346
- Default VLAN Configuration 348
- Displaying VLANs 350
- Configuring VLAN Trunks 351
- Configuring a Trunk Port 354
- Load Sharing Using STP 357
- Configuring VMPS 360
- Understanding VMPS 361
- Default VMPS Configuration 363
- VMPS Configuration Guidelines 364
- Configuring the VMPS Client 364
- Reconfirming VLAN Memberships 366
- Changing the Retry Count 366
- Monitoring the VMPS 367
- VMPS Configuration Example 368
- Configuring VTP 369
- The VTP Domain 370
- VTP Modes 371
- VTP Advertisements 371
- VTP Version 2 372
- VTP Pruning 372
- Understanding VTP 373
- VTP Configuration Options 375
- VTP Configuration Guidelines 376
- Configuring a VTP Server 377
- Configuring a VTP Client 379
- Enabling VTP Version 2 381
- Enabling VTP Pruning 382
- Monitoring VTP 384
- Configuring Voice VLAN 385
- Displaying Voice VLAN 390
- Understanding IGMP Snooping 391
- Joining a Multicast Group 392
- Leaving a Multicast Group 394
- Immediate-Leave Processing 394
- Configuring IGMP Snooping 395
- Setting the Snooping Method 396
- Configuring MVR 405
- Configuring MVR Interfaces 407
- Displaying MVR Information 409
- Configuring IGMP Filtering 410
- Configuring IGMP Profiles 411
- Applying IGMP Profiles 412
- Configuring Storm Control 415
- Enabling Storm Control 416
- Configuring Protected Ports 417
- Configuring Port Security 418
- Understanding Port Security 419
- Security Violations 420
- Configuring UDLD 427
- Understanding UDLD 428
- Enabling UDLD Globally 430
- Enabling UDLD on an Interface 430
- Displaying UDLD Status 432
- Configuring CDP 433
- Disabling and Enabling CDP 435
- Configuring SPAN and RSPAN 439
- Understanding SPAN and RSPAN 440
- SPAN Session 441
- Traffic Types 441
- Source Port 442
- Destination Port 443
- Reflector Port 443
- VLAN-Based SPAN 444
- SPAN Traffic 444
- Configuring SPAN 446
- Specifying VLANs to Monitor 450
- Specifying VLANs to Filter 451
- Configuring RSPAN 452
- Creating an RSPAN Session 453
- EXEC command 458
- Configuring RMON 459
- Default RMON Configuration 461
- Displaying RMON Status 464
- System Log Message Format 466
- Synchronizing Log Messages 470
- Configuring SNMP 477
- SNMP Versions 478
- SNMP Manager Functions 479
- SNMP Agent Functions 479
- Default SNMP Configuration 482
- SNMP Configuration Guidelines 482
- Disabling the SNMP Agent 483
- Configuring Community Strings 483
- SNMP Examples 490
- Displaying SNMP Status 491
- Network Security with ACLs 493
- Understanding ACLs 494
- Configuring ACLs 498
- Unsupported Features 499
- ACL Numbers 500
- Layer 3 Parameters: 502
- Layer 4 Parameters 502
- Applying Time Ranges to ACLs 507
- Creating MAC Access Groups 511
- Displaying ACL Information 513
- Displaying ACLs 514
- Examples for Compiling ACLs 515
- Numbered ACL Examples 517
- Extended ACL Examples 517
- Named ACL Example 517
- Configuring QoS 519
- Understanding QoS 520
- Basic QoS Model 521
- Classification 522
- Policing and Marking 524
- Mapping Tables 525
- Queueing and Scheduling 525
- Port Priority 526
- Port Scheduling 526
- CoS and WRR 526
- Configuring Trusted Boundary 531
- Enabling Pass-Through Mode 533
- Configuring a QoS Policy 534
- Configuring CoS Maps 542
- Configuring CoS and WRR 545
- Displaying QoS Information 546
- QoS Configuration Examples 547
- Configuring EtherChannels 551
- Understanding EtherChannels 552
- PAgP Modes 554
- Troubleshooting 563
- Transmit 564
- LRE Statistics 565
- Using Recovery Procedures 568
- Using Debug Commands 576
- Using the crashinfo File 577
- Supported MIBs 579
- Files, and Software Images 583
- Copying Files 587
- Deleting Files 587
- Creating a tar File 588
- Extracting a tar File 589
- Working with Software Images 602
- Numerics 617
Relacionado con productos y manuales para Software Cisco LRE CPE
(636 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.053 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales