Cisco 2955T 12 - Catalyst Switch Dokumentacja Strona 500
- Strona / 608
- Spis treści
- ROZWIĄZYWANIE PROBLEMÓW
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
26-26
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-07
Chapter 26 Configuring Network Security with ACLs
Examples for Compiling ACLs
In this example of a numbered ACL, the Winter and Smith workstations are not allowed to browse the
web:
Switch(config)# access-list 100 remark Do not allow Winter to browse the web
Switch(config)# access-list 100 deny host 171.69.3.85 any eq www
Switch(config)# access-list 100 remark Do not allow Smith to browse the web
Switch(config)# access-list 100 deny host 171.69.3.13 any eq www
In this example of a named ACL, the Jones subnet is not allowed access:
Switch(config)# ip access-list standard prevention
Switch(config-std-nacl)# remark Do not allow Jones subnet through
Switch(config-std-nacl)# deny 171.69.0.0 0.0.255.255
In this example of a named ACL, the Jones subnet is not allowed to use outbound Telnet:
Switch(config)# ip access-list extended telnetting
Switch(config-ext-nacl)# remark Do not allow Jones subnet to telnet out
Switch(config-ext-nacl)# deny tcp 171.69.0.0 0.0.255.255 any eq telnet
- Software Configuration Guide 1
- CONTENTS 3
- 7 Clustering Switches 7-1 7
- Contents 10
- 78-11380-07 10
- 12 Configuring STP 12-1 11
- 15 Configuring VLANs 15-1 13
- 16 Configuring VTP 16-1 15
- 20 Configuring UDLD 20-1 17
- 21 Configuring CDP 21-1 17
- 23 Configuring RMON 23-1 18
- 25 Configuring SNMP 25-1 19
- 27 Configuring QoS 27-1 20
- 29 Troubleshooting 29-1 22
- A Supported MIBs A-1 22
- Audience 23
- Conventions 24
- Related Publications 25
- Obtaining Documentation 26
- Ordering Documentation 27
- Documentation Feedback 27
- Cisco.com 28
- Technical Assistance Center 28
- Cisco TAC Escalation Center 29
- Overview 31
- Chapter 1 Overview 32
- Features 32
- Management Options 37
- Large Campus Configuration 44
- IOS Command Modes 49
- • Change terminal 50
- • Perform basic tests 50
- • Display system 50
- Getting Help 51
- Abbreviating Commands 52
- Understanding CLI Messages 53
- Using Command History 53
- Using Editing Features 54
- Accessing the CLI 57
- Port Status Monitoring Alarms 61
- Triggering Alarm Options 62
- Setting the Power Mode 63
- Configuring Alarm Profiles 68
- Enabling SNMP Traps 70
- Getting Started with CMS 71
- Front Panel View 73
- Cluster Tree 75
- Front-Panel Images 75
- Figure 4-6 Port Icons 76
- Redundant Power System LED 77
- Port Modes and LEDs 78
- VLAN Membership Modes 79
- Topology View 80
- Topology Icons and Labels 82
- Device and Link Labels 82
- Colors in the Topology View 83
- Menus and Toolbar 84
- Front Panel View Popup Menus 90
- Topology View Popup Menus 91
- Device Popup Menus 92
- Interaction Modes 94
- Expert Mode 95
- Tool Tips 95
- Online Help 95
- CMS Window Components 96
- Host Name List 97
- Tabs, Lists, and Tables 98
- Filter Editor 98
- Accessing CMS 99
- Access Modes in CMS 100
- Saving Your Configuration 101
- Restoring Your Configuration 102
- CMS Preferences 102
- Where to Go Next 103
- Assigning Switch Information 106
- Default Switch Information 107
- DHCP Client Request Process 108
- Configuring the DHCP Server 109
- Configuring the TFTP Server 109
- Configuring the DNS 110
- Configuring the Relay Device 110
- Obtaining Configuration Files 111
- Example Configuration 112
- Configuring IE2100 CNS Agents 117
- CNS Configuration Service 118
- CNS Event Service 119
- DeviceID 120
- Host Name and DeviceID 120
- Initial Configuration 121
- Synchronized Configuration 122
- Enabling the CNS Event Agent 124
- Displaying CNS Configuration 129
- Clustering Switches 131
- Understanding Switch Clusters 132
- Planning a Switch Cluster 135
- Discovery through CDP Hops 136
- Release 12.1(9)EA1) 137
- Virtual IP Addresses 143
- IP Addresses 146
- Host Names 147
- Passwords 147
- SNMP Community Strings 147
- TACACS+ and RADIUS 148
- Management VLAN 149
- LRE Profiles 149
- Creating a Switch Cluster 150
- Adding Member Switches 151
- 2900-LRE-24-1 152
- Verifying a Switch Cluster 156
- Command switch 158
- Trap 1, Trap 2, Trap 3 158
- Member 1 Member 2 Member 3 158
- SNMP Manager 158
- Administering the Switch 159
- • User show commands 160
- Configuring NTP 161
- Default NTP Configuration 162
- Configuring NTP Associations 163
- Setting the System Clock 169
- Configuring the Time Zone 170
- Configuring a System Name 173
- Configuring a System Prompt 174
- Understanding DNS 174
- Default DNS Configuration 175
- Setting Up DNS 175
- Creating a Banner 176
- Configuring a Login Banner 178
- Building the Address Table 179
- MAC Addresses and VLANs 179
- Managing the ARP Table 185
- Understanding TACACS+ 195
- TACACS+ Operation 197
- Configuring TACACS+ 197
- Default TACACS+ Configuration 198
- Starting TACACS+ Accounting 202
- Understanding RADIUS 203
- RADIUS Operation 204
- Configuring RADIUS 205
- Defining AAA Server Groups 210
- Starting RADIUS Accounting 213
- Authorization 216
- Understanding SSH 218
- Configuring SSH 218
- Device Roles 220
- Figure 10-2 Message Exchange 221
- Voice VLAN Ports 223
- Supported Topologies 225
- Default 802.1X Configuration 226
- Changing the Quiet Period 231
- Enabling Multiple Hosts 233
- Understanding Interface Types 235
- Access Ports 236
- Trunk Ports 236
- EtherChannel Port Groups 237
- Port-Based VLANs 237
- Using the Interface Command 238
- Configuring Switch Interfaces 243
- Configuration Guidelines 245
- Configuring STP 253
- STP Overview 254
- Bridge Protocol Data Units 254
- Election of the Root Switch 255
- Spanning-Tree Timers 257
- Blocking State 259
- Listening State 259
- Learning State 259
- STP and IEEE 802.1Q Trunks 260
- Default STP Configuration 262
- STP Configuration Guidelines 263
- Disabling STP 263
- Configuring the Root Switch 264
- Configuring the Port Priority 267
- Configuring the Path Cost 268
- Configuring the Hello Time 270
- Configuring RSTP and MSTP 275
- Understanding RSTP 276
- Rapid Convergence 277
- Synchronization of Port Roles 278
- Table 13-2 RSTP BPDU Flags 279
- Topology Changes 280
- Understanding MSTP 281
- IST, CIST, and CST 282
- Hop Count 284
- Boundary Ports 284
- Understanding Port Fast 300
- Understanding BPDU Guard 301
- Understanding BPDU Filtering 301
- Understanding UplinkFast 302
- How CSUF Works 304
- Limitations 306
- Connecting the Stack Ports 306
- Understanding BackboneFast 308
- Understanding Root Guard 310
- Understanding Loop Guard 311
- Enabling Port Fast 312
- Enabling BPDU Guard 313
- Enabling BPDU Filtering 314
- Enabling BackboneFast 317
- Enabling EtherChannel Guard 317
- Enabling Root Guard 318
- Enabling Loop Guard 318
- Configuring VLANs 321
- Supported VLANs 322
- VLAN Port Membership Modes 323
- Token Ring VLANs 325
- Saving VLAN Configuration 327
- Deleting a VLAN 330
- Default VLAN Configuration 332
- Displaying VLANs 334
- Configuring VLAN Trunks 335
- Configuring a Trunk Port 338
- Load Sharing Using STP 341
- Configuring VMPS 345
- Dynamic Port VLAN Membership 346
- Default VMPS Configuration 348
- VMPS Configuration Guidelines 348
- Configuring the VMPS Client 349
- Reconfirming VLAN Memberships 350
- Monitoring the VMPS 351
- VMPS Configuration Example 352
- Configuring VTP 355
- The VTP Domain 356
- VTP Modes 357
- VTP Advertisements 357
- VTP Version 2 358
- VTP Pruning 358
- Understanding VTP 359
- VTP Configuration Options 361
- VTP Configuration Guidelines 362
- Configuring a VTP Server 363
- Configuring a VTP Client 365
- Enabling VTP Version 2 367
- Enabling VTP Pruning 368
- Monitoring VTP 369
- Configuring Voice VLAN 371
- Displaying Voice VLAN 376
- Understanding IGMP Snooping 377
- Joining a Multicast Group 378
- Leaving a Multicast Group 380
- Immediate-Leave Processing 380
- Configuring IGMP Snooping 381
- Setting the Snooping Method 382
- Configuring MVR 391
- Configuring MVR Interfaces 393
- Displaying MVR Information 395
- Configuring IGMP Filtering 396
- Configuring IGMP Profiles 397
- Applying IGMP Profiles 398
- Configuring Storm Control 401
- Enabling Storm Control 402
- Configuring Protected Ports 403
- Configuring Port Security 404
- Security Violations 405
- Configuring UDLD 413
- Understanding UDLD 414
- Enabling UDLD Globally 416
- Enabling UDLD on an Interface 416
- Displaying UDLD Status 418
- Configuring CDP 419
- Disabling and Enabling CDP 421
- Configuring SPAN and RSPAN 425
- Understanding SPAN and RSPAN 426
- SPAN Session 427
- Traffic Types 427
- Source Port 428
- Destination Port 428
- Reflector Port 428
- SPAN Traffic 429
- SPAN and RSPAN Session Limits 430
- Configuring SPAN 431
- Configuring RSPAN 436
- Creating an RSPAN Session 437
- EXEC command 440
- Configuring RMON 441
- Default RMON Configuration 443
- Displaying RMON Status 446
- System Log Message Format 448
- Synchronizing Log Messages 452
- Configuring SNMP 459
- SNMP Versions 460
- SNMP Manager Functions 461
- SNMP Agent Functions 462
- Default SNMP Configuration 464
- SNMP Configuration Guidelines 464
- Disabling the SNMP Agent 465
- Configuring Community Strings 465
- SNMP Examples 473
- Displaying SNMP Status 474
- Network Security with ACLs 475
- Understanding ACLs 476
- Configuring ACLs 480
- Unsupported Features 481
- ACL Numbers 482
- Layer 3 Parameters: 484
- Layer 4 Parameters 484
- Applying Time Ranges to ACLs 489
- Creating MAC Access Groups 493
- Displaying ACL Information 495
- Displaying ACLs 496
- Examples for Compiling ACLs 497
- Numbered ACL Examples 499
- Extended ACL Examples 499
- Named ACL Example 499
- Configuring QoS 501
- Understanding QoS 502
- Basic QoS Model 504
- Classification 505
- Policing and Marking 507
- Mapping Tables 508
- Queueing and Scheduling 508
- Configuring Auto-QoS 509
- Enabling Auto-QoS for VoIP 512
- • show mls qos 513
- • show mls qos map cos-dscp 513
- • show wrr-queue bandwidth 513
- • show wrr-queue cos-map 513
- Configuring Standard QoS 515
- Configuring Trusted Boundary 520
- Enabling Pass-Through Mode 522
- Configuring a QoS Policy 523
- Configuring CoS Maps 531
- Configuring the Egress Queues 534
- Configuring WRR Priority 535
- Configuring EtherChannels 541
- Understanding EtherChannels 542
- PAgP and LACP Modes 543
- Exchanging PAgP Packets 544
- Exchanging LACP Packets 545
- Configuring Hot Standby Ports 553
- Troubleshooting 557
- Using Ping 567
- Using Layer 2 Traceroute 568
- Usage Guidelines 569
- Using Debug Commands 570
- Using the crashinfo File 573
- Supported MIBs 575
- MIB List 576
- Numerics 579
Powiązane produkty i podręczniki dla Oprogramowanie Cisco 2955T 12 - Catalyst Switch
Oprogramowanie Cisco HWIC Przewodnik Instalacji
(82 strony)
(82 strony)
Oprogramowanie Cisco Aironet 700 Series Dokumentacja
(402 strony)
(402 strony)
Oprogramowanie Cisco 3130 Dokumentacja
(107 strony)
(107 strony)
Oprogramowanie Cisco WS-CBS3120X-S Dokumentacja
(100 strony)
(100 strony)
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.081 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji