Cisco 2970 - Catalyst Switch Specifikace Strana 489
- Strana / 674
- Tabulka s obsahem
- ŘEŠENÍ PROBLÉMŮ
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
26-25
Catalyst 2970 Switch Software Configuration Guide
78-15462-03
Chapter 26 Configuring Network Security with ACLs
Configuring VLAN Maps
Switch(config)# vlan access-map drop-ip-default 10
Switch(config-access-map)# match ip address 101
Switch(config-access-map)# action forward
Switch(config-access-map)# exit
Switch(config)# vlan access-map drop-ip-default 20
Switch(config-access-map)# match ip address igmp-match
Switch(config-access-map)# action drop
Switch(config-access-map)# exit
Switch(config)# vlan access-map drop-ip-default 30
Switch(config-access-map)# match ip address tcp-match
Switch(config-access-map)# action forward
Example 3
In this example, the VLAN map has a default action of drop for MAC packets and a default action of
forward for IP packets. Used with MAC extended access lists good-hosts and good-protocols, the map
will have the following results:
• Forward MAC packets from hosts 0000.0c00.0111 and 0000.0c00.0211
• Forward MAC packets with decnet-iv or vines-ip protocols
• Drop all other non-IP packets
• Forward all IP packets
Switch(config)# mac access-list extended good-hosts
Switch(config-ext-macl)# permit host 000.0c00.0111 any
Switch(config-ext-macl)# permit host 000.0c00.0211 any
Switch(config-ext-nacl)# exit
Switch(config)# mac access-list extended good-protocols
Switch(config-ext-macl)# permit any any decnet-ip
Switch(config-ext-macl)# permit any any vines-ip
Switch(config-ext-nacl)# exit
Switch(config)# vlan access-map drop-mac-default 10
Switch(config-access-map)# match mac address good-hosts
Switch(config-access-map)# action forward
Switch(config-access-map)# exit
Switch(config)# vlan access-map drop-mac-default 20
Switch(config-access-map)# match mac address good-protocols
Switch(config-access-map)# action forward
Example 4
In this example, the VLAN map has a default action of drop for all packets (IP and non-IP). Used with
access lists tcp-match and good-hosts from Examples 2 and 3, the map will have the following results:
• Forward all TCP packets
• Forward MAC packets from hosts 0000.0c00.0111 and 0000.0c00.0211
• Drop all other IP packets
• Drop all other MAC packets
Switch(config)# vlan access-map drop-all-default 10
Switch(config-access-map)# match ip address tcp-match
Switch(config-access-map)# action forward
Switch(config-access-map)# exit
Switch(config)# vlan access-map drop-all-default 20
Switch(config-access-map)# match mac address good-hosts
Switch(config-access-map)# action forward
- Catalyst 2970 Switch 1
- Software Configuration Guide 1
- CONTENTS 3
- 5 Clustering Switches 5-1 5
- 11 Configuring VLANs 11-1 10
- Contents 11
- 12 Configuring VTP 12-1 12
- 14 Configuring STP 14-1 13
- 15 Configuring MSTP 15-1 13
- 20 Configuring CDP 20-1 17
- 21 Configuring UDLD 21-1 17
- 23 Configuring RMON 23-1 18
- 25 Configuring SNMP 25-1 19
- 27 Configuring QoS 27-1 20
- 29 Troubleshooting 29-1 22
- A Supported MIBs A-1 23
- Audience 27
- Conventions 28
- Related Publications 29
- Obtaining Documentation 29
- Ordering Documentation 30
- Documentation Feedback 30
- Cisco TAC Website 30
- Opening a TAC Case 31
- TAC Case Priority Definitions 31
- Overview 33
- Chapter 1 Overview 34
- Features 34
- Performance Features 35
- Management Options 35
- Manageability Features 36
- Availability Features 36
- VLAN Features 37
- Security Features 37
- QoS and CoS Features 38
- Monitoring Features 39
- Port parameters 40
- DHCP snooping 41
- IGMP snooping 41
- Port-based Traffic 41
- Catalyst 2970 44
- Catalyst 3750 44
- Figure 1-2 Server Aggregation 45
- Where to Go Next 47
- Understanding Command Modes 49
- • Change terminal 50
- • Perform basic tests 50
- • Display system 50
- Understanding the Help System 51
- Using Command History 53
- Using Editing Features 54
- Accessing the CLI 58
- Getting Started with CMS 61
- Front Panel View 62
- Topology View 62
- Table 3-1 Toolbar Buttons 63
- Online Help 64
- Configuration Modes 65
- Privilege Levels 66
- Configuring CMS 67
- Browser Plug-In Requirements 68
- Cross-Platform Considerations 69
- HTTP Access to CMS 69
- Displaying CMS 70
- Figure 3-5 CMS Startup Report 72
- Assigning Switch Information 78
- Default Switch Information 79
- DHCP Client Request Process 80
- Configuring the DHCP Server 81
- Configuring the TFTP Server 82
- Configuring the DNS 82
- Configuring the Relay Device 82
- Obtaining Configuration Files 83
- Example Configuration 84
- EXEC command: 87
- Default Boot Configuration 88
- Booting Manually 89
- • reload in [hh:]mm [text] 93
- Clustering Switches 95
- Understanding Switch Clusters 96
- Discovery Through CDP Hops 99
- 78-15462-03 100
- Planning a Switch Cluster 100
- Virtual IP Addresses 105
- IP Addresses 107
- Host Names 107
- SNMP Community Strings 108
- TACACS+ and RADIUS 108
- Passwords 108
- Creating a Switch Cluster 109
- Enter up to 31 characters 110
- C3750-24TS 110
- 3750G-24T 111
- • CC—Cluster command switch 113
- Verifying a Switch Cluster 114
- Command switch 116
- Trap 1, Trap 2, Trap 3 116
- Member 1 Member 2 Member 3 116
- SNMP Manager 116
- Administering the Switch 117
- • Network Time Protocol 118
- • Manual configuration 118
- • User show commands 118
- Configuring NTP 120
- Configuring NTP Associations 122
- Setting the System Clock 128
- Configuring the Time Zone 129
- Configuring a System Name 132
- Configuring a System Prompt 133
- Understanding DNS 133
- Default DNS Configuration 134
- Setting Up DNS 134
- Creating a Banner 135
- Configuring a Login Banner 137
- Building the Address Table 138
- MAC Addresses and VLANs 139
- Managing the ARP Table 145
- Disabling Password Recovery 151
- Understanding TACACS+ 156
- TACACS+ Operation 158
- Configuring TACACS+ 159
- Starting TACACS+ Accounting 163
- Understanding RADIUS 164
- RADIUS Operation 165
- Configuring RADIUS 166
- Defining AAA Server Groups 171
- Starting RADIUS Accounting 174
- Understanding Kerberos 178
- Kerberos Operation 180
- Obtaining a TGT from a KDC 181
- Authorization 182
- Understanding SSH 184
- Configuring SSH 185
- Configuring the SSH Server 186
- Device Roles 190
- Figure 8-2 Message Exchange 192
- Supported Topologies 193
- Using 802.1X with Guest VLAN 196
- Default 802.1X Configuration 198
- Changing the Quiet Period 203
- Configuring the Host Mode 205
- Configuring a Guest VLAN 206
- Understanding Interface Types 209
- Port-Based VLANs 210
- Switch Ports 210
- Trunk Ports 211
- EtherChannel Port Groups 212
- Connecting Interfaces 212
- Configuration Guidelines 218
- Configuring the System MTU 222
- Monitoring Interface Status 224
- Configuring SmartPort Macros 227
- Configuring Smart-Port Macros 228
- Displaying SmartPort Macros 230
- Configuring VLANs 231
- Understanding VLANs 232
- Supported VLANs 233
- VLAN Port Membership Modes 233
- Token Ring VLANs 235
- Saving VLAN Configuration 237
- Deleting a VLAN 240
- Default VLAN Configuration 242
- Displaying VLANs 244
- Configuring VLAN Trunks 245
- Encapsulation Types 246
- Configuring a Trunk Port 249
- Configuring VMPS 256
- VMPS Configuration Guidelines 257
- Configuring the VMPS Client 258
- Reconfirming VLAN Memberships 259
- Monitoring the VMPS 260
- VMPS Configuration Example 261
- Configuring VTP 263
- The VTP Domain 264
- VTP Modes 265
- VTP Advertisements 265
- VTP Version 2 266
- VTP Pruning 266
- Understanding VTP 267
- VTP Configuration Guidelines 269
- VTP Version 270
- Configuration Requirements 270
- Configuring a VTP Server 271
- Configuring a VTP Client 272
- Enabling VTP Version 2 274
- Enabling VTP Pruning 275
- Monitoring VTP 277
- Configuring Voice VLAN 279
- Cisco IP Phone Voice Traffic 280
- Cisco IP Phone Data Traffic 280
- Displaying Voice VLAN 284
- Configuring STP 285
- STP Overview 286
- Blocking State 289
- Listening State 290
- Learning State 290
- Forwarding State 290
- Disabled State 291
- STP and IEEE 802.1Q Trunks 294
- Disabling Spanning Tree 298
- Configuring the Root Switch 298
- Configuring Port Priority 301
- Configuring Path Cost 302
- Configuring the Hello Time 304
- Configuring MSTP 307
- Understanding MSTP 308
- IST, CIST, and CST 309
- Hop Count 311
- Boundary Ports 311
- Understanding RSTP 312
- Rapid Convergence 313
- Synchronization of Port Roles 314
- Table 15-2 RSTP BPDU Flags 315
- Topology Changes 316
- Configuring MSTP Features 317
- Default MSTP Configuration 318
- MSTP Configuration Guidelines 318
- Understanding Port Fast 332
- Understanding BPDU Guard 333
- Understanding BPDU Filtering 333
- Understanding UplinkFast 334
- Understanding BackboneFast 335
- Understanding Root Guard 337
- Understanding Loop Guard 338
- Enabling Port Fast 340
- Enabling BPDU Guard 341
- Enabling BPDU Filtering 342
- Enabling BackboneFast 343
- Enabling Root Guard 344
- Enabling Loop Guard 345
- Configuring DHCP Features 347
- Option-82 Data Insertion 348
- Displaying DHCP Information 351
- Understanding IGMP Snooping 354
- IGMP Versions 355
- Joining a Multicast Group 355
- Leaving a Multicast Group 357
- Configuring IGMP Snooping 358
- Setting the Snooping Method 360
- Configuring MVR 367
- Default MVR Configuration 368
- Configuring MVR Interfaces 370
- Displaying MVR Information 371
- Configuring IGMP Profiles 373
- Applying IGMP Profiles 374
- Configuring Storm Control 379
- Understanding Storm Control 380
- Enabling Storm Control 381
- Configuring Protected Ports 383
- Configuring Port Blocking 384
- Configuring Port Security 385
- Security Violations 386
- Configuring CDP 395
- Disabling and Enabling CDP 397
- Configuring UDLD 401
- Understanding UDLD 402
- Enabling UDLD Globally 405
- Enabling UDLD on an Interface 405
- Displaying UDLD Status 406
- Configuring SPAN and RSPAN 407
- Local SPAN 408
- Remote SPAN 408
- SPAN Sessions 409
- Monitored Traffic 410
- Source Ports 411
- Source VLANs 412
- VLAN Filtering 412
- Destination Port 413
- RSPAN VLAN 414
- Configuring Local SPAN 416
- Creating a Local SPAN Session 417
- Specifying VLANs to Filter 421
- Configuring RSPAN 422
- RSPAN sessions 429
- Configuring RMON 431
- Default RMON Configuration 433
- Displaying RMON Status 436
- System Log Message Format 438
- Disabling Message Logging 440
- Synchronizing Log Messages 441
- Configuring SNMP 449
- SNMP Versions 450
- SNMP Manager Functions 451
- SNMP Agent Functions 452
- SNMP Notifications 453
- Default SNMP Configuration 455
- SNMP Configuration Guidelines 455
- Disabling the SNMP Agent 456
- Configuring Community Strings 456
- SNMP Examples 463
- Displaying SNMP Status 464
- Understanding ACLs 465
- Supported ACLs 466
- VLAN Maps 467
- (VLAN 10) 468
- Catalyst 2970 switch 468
- Configuring IP ACLs 469
- Access List Numbers 470
- Using Time Ranges with ACLs 477
- Including Comments in ACLs 479
- IP ACL Configuration Examples 481
- Numbered ACLs 482
- Extended ACLs 482
- Named ACLs 482
- Commented IP ACL Entries 483
- Configuring VLAN Maps 486
- Creating a VLAN Map 487
- Example 1 488
- Example 2 488
- Example 3 489
- Example 4 489
- Applying a VLAN Map to a VLAN 490
- Displaying ACL Configuration 493
- Configuring QoS 495
- Understanding QoS 496
- Basic QoS Model 497
- Classification 498
- Policing and Marking 502
- Mapping Tables 504
- Weighted Tail Drop 505
- SRR Shaping and Sharing 506
- WTD Thresholds 508
- Priority Queueing 508
- Buffer and Memory Allocation 510
- Packet Modification 511
- Configuring Auto-QoS 512
- Enabling Auto-QoS for VoIP 517
- Configuring Standard QoS 520
- Enabling QoS Globally 524
- Configuring a QoS Policy 530
- Configuring DSCP Maps 541
- Configuring EtherChannels 561
- EtherChannel Overview 562
- Port-Channel Interfaces 563
- Port Aggregation Protocol 563
- PAgP Modes 564
- Understanding EtherChannels 565
- LACP Modes 566
- Troubleshooting 579
- Protocol 580
- Using Ping 591
- Using Layer 2 Traceroute 592
- Displaying the Physical Path 593
- Using IP Traceroute 594
- Using Debug Commands 595
- Using the crashinfo File 599
- Supported MIBs 601
- MIB List 602
- APPENDIX 605
- Copying Files 608
- Deleting Files 609
- Creating a tar File 610
- Extracting a tar File 611
- Working with Software Images 624
- Unsupported Commands in 639
- Cisco IOS Release 12.1(19)EA1 639
- IGMP Snooping Commands 640
- Interface Commands 640
- Spanning Tree 641
- Miscellaneous 642
- Numerics 643
© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.034 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce