Dell 5524 Guide de l'utilisateur Page 127
- Page / 728
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
Dell PowerConnect 55xx Systems User Guide 127
Dot1x Authentication
This section describes Dot1x authentication.
It contains the following topics:
• Port-Based Authentication Overview
•Dot1x Overview
• Port-Based Authentication Global
• Port-Based Authentication Interface Settings
• Monitoring Users
• Host Authentication
• Port Authentication Users
Port-Based Authentication Overview
Port-based authentication enables authenticating system users on a per-port
basis via an external server. Only authenticated and approved system users
can transmit and receive data. Ports are authenticated via the RADIUS server
using the Extensible Authentication Protocol (EAP). Port Authentication
includes:
•
Authenticators
— Specifies the device port that is authenticated before
permitting system access.
•
Supplicants
— Specifies the host connected to the authenticated port hat
is requesting to access the system services.
•
Authentication Server
— Specifies the external server, for example, a
RADIUS server, which performs authentication on behalf of the
authenticator, and indicates whether the supplicant is authorized to access
system services.
Port-based authentication creates two access states:
•
Controlled Access
— Permits communication between the supplicant and
the system, if the supplicant is authorized.
•
Uncontrolled Access
— Permits uncontrolled communication, regardless
of the port authorization state.
- System User Guide 1
- Notes, Cautions, and Warnings 2
- Table of Contents 3
- 4 Contents 4
- 6 Contents 6
- 8 Contents 8
- 10 Contents 10
- 12 Contents 12
- CLI Reference Guide 13
- Features 14
- IP Version 6 (IPv6) Support 15
- Stack Support 15
- Power over Ethernet 15
- Green Ethernet 16
- Back Pressure Support 16
- Virtual Cable Testing (VCT) 17
- Auto-Negotiation 17
- MDI/MDIX Support 17
- Static MAC Entries 18
- Self-Learning MAC Addresses 18
- MAC Multicast Support 18
- Layer 2 Features 19
- IGMP Snooping 19
- Port Mirroring 19
- Broadcast Storm Control 19
- VLAN Supported Features 20
- Guest VLAN 21
- Private VLAN 21
- Multicast TV VLAN 21
- Spanning Tree Protocol (STP) 21
- Fast Link 22
- STP BPDU Guard 22
- Link Aggregation 23
- Quality of Service Features 23
- Device Management Features 24
- SNMP Versions 1, 2, and 3 25
- Web-Based Management 25
- Flow Monitoring (sflow) 25
- 802.1ab (LLDP-MED) 27
- Security Features 28
- Port Profile (CLI Macro) 30
- Protected Ports 31
- Identifying a Switch via LED 32
- Hardware Description 33
- Device Models 34
- Device Structure 34
- Front Panel 35
- Buttons and LEDs 36
- Back Panel 37
- LED Definitions 38
- Port LEDs 40
- Power Supplies 42
- Stacking Overview 43
- Stack Overview 44
- Stacking Units 45
- HDMI Ports 46
- Stack Members and Unit IDs 47
- Adding a Unit to the Stack 48
- Assigning Unit IDs 48
- Replacing Stacking Members 51
- Rebooting the Stack 52
- Configuring the Switch 54
- Configuration Work Flow 55
- Console Port 56
- Booting the Switch 57
- Configuring the Stack 58
- Advanced Switch Configuration 63
- Using the CLI 64
- Direct Connection 67
- Telnet Connection 67
- Retrieving an IP Address 68
- Broadcast 69
- Configuration 71
- Configuring Login Banners 74
- Startup Menu Procedures 76
- Erase FLASH File - Option[2] 77
- [5] and press <Enter> 78
- Software Download 79
- Boot Image Download 81
- Using Dell OpenManage 83
- Administrator 83
- Starting the Application 84
- Understanding the Interface 84
- Device Representation 85
- Port Representation 85
- • gi—Giga port 86
- • te —Ten Giga port 86
- •x — Unit ID 86
- •z — Port number 86
- Information Buttons 87
- Device Management Icons 87
- Configuration file 88
- Field Definitions 89
- Common GUI Features 89
- Italic Font 90
- Bold Italic Font 90
- Network Security 92
- Port Security 93
- ACL Overview 98
- MAC-Based ACLs 99
- MAC-based ACLs 100
- MAC-Based ACEs 101
- IPv4-Based ACLs 104
- P-based 105
- IPv6-Based ACLs 112
- Pv6-based ACLs 113
- ACL Binding 118
- Bindings 119
- Time Range 122
- Absolute Time Range 123
- Time Range Recurrence 124
- Dot1x Authentication 127
- Dot1x Overview 128
- Monitoring Users 141
- 142
- Host Authentication 144
- Port Authentication Users 147
- General Switch Information 151
- System Health 154
- Time Synchronization 162
- [minutes offset] 169
- SNTP Server Types 171
- Stratums 172
- Authentication 173
- Figure 9-5. Global Settings 174
- [mSec] [mSec] 183
- [mSec] [mSec] 183
- SNTP server 186
- System Log Overview 188
- Global Parameters 189
- RAM Log 193
- Log File (in Flash) 195
- Login History 196
- Figure 9-13. Login History 197
- Remote Log Server 199
- IP Addressing 202
- IPv4 Interface Parameters 203
- DHCP IPv4 Interface 207
- IPv4 Static Routing 210
- PC 1.1.1.1 214
- PC 2.1.1.1 214
- VLAN 100 214
- VLAN 150 214
- Global IPv6 216
- IPv6 Default Gateway 219
- ISATAP Tunnel 222
- IPv6 Neighbors 228
- IPv6 Routes Table 232
- CLI Command Description 233
- Domain Name System 235
- Default Domain Names 238
- Host Name Mapping 240
- Figure 9-27. ARP: Summary 242
- UDP Relay 245
- Diagnostics 248
- Integrated Cable Test 249
- Management Security 254
- Profile Rules 259
- Authentication Profiles 262
- Select Authentication 265
- Active Users 268
- Local User Database 270
- Line Passwords 272
- Enable Password 274
- TACACS+ 275
- Figure 9-39. TACACS+: Summary 276
- Password Management 279
- Figure 9-41. RADIUS: Summary 285
- retries 288
- key-string 288
- DHCP Server 290
- DHCP Server Properties 291
- Network Pool 294
- Excluded Addresses 299
- Static Hosts 301
- Address Binding 305
- SNMP Overview 307
- SNMP Access Rights 308
- SNMP Global Settings 309
- SNMP Views 312
- SNMP Access Control (Groups) 315
- SNMP Communities 320
- Figure 9-51. SNMP Community 321
- SNMP Notification Filters 323
- SNMP Notification Recipients 326
- File Management 330
- File Download 331
- File Upload 331
- Setup File Contents 332
- Setup File Format 333
- Figure 9-55. File Download 345
- To download files using TFTP 347
- Figure 9-57. File Upload 350
- Figure 9-58. File Upload 351
- Active Images 354
- Copy Files 355
- Figure 9-60. Copy Files 356
- File System 359
- Stack Management 361
- Figure 9-62. Stack Unit ID 362
- Versions 364
- Figure 9-64. Reset 366
- Table 9-71. Reset CLI Command 366
- Workflow 370
- Figure 9-68. sFlow Statistics 376
- Overview 379
- Flow Control 380
- Back Pressure 380
- Port Default Settings 380
- Jumbo Frames 382
- Green Ethernet Configuration 384
- Protected Port Configuration 389
- Port Profile 391
- Sample CLI Scripts 395
- Port Configuration 397
- LAG Configuration 403
- Storm Control 408
- Mirroring 414
- Address Tables 416
- Static Addresses 418
- Dynamic Addresses 421
- GARP Overview 425
- GARP Timers 426
- Spanning Tree 428
- Global Settings 431
- STP Port Settings 436
- STP LAG Settings 441
- Rapid Spanning Tree 444
- Multiple Spanning Tree 448
- MSTP Overview 449
- MSTP Properties 449
- VLAN to MSTP Instance 452
- MSTP Instance Settings 454
- MSTP Interface Settings 456
- Virtual LAN Overview 460
- Frame Flow 461
- Special-case VLANs 461
- QinQ Tagging 462
- Port Modes 462
- Acceptable Frame Type 464
- VLAN Membership 465
- Port Settings 468
- LAGs Settings 474
- Protocol Groups 477
- Defining Protocol Groups 478
- Protocol groups 480
- Protocol Port 481
- GVRP Parameters 483
- Voice VLAN 491
- Properties 492
- Port Setting 495
- Figure 14-11. OUI: Summary 498
- Voice VLAN OUIs CLI Commands 499
- Link Aggregation Overview 501
- LACP Parameters 503
- LAG Membership 506
- Multicast 508
- Multicast Support Overview 509
- Bridge Multicast Groups 513
- Port Control Definition 514
- Bridge Multicast Forward All 517
- Figure 16-4. IGMP Snooping 520
- vlan-id 523
- vlan-id] 523
- Unregistered Multicast 525
- Multicast TV VLAN Membership 528
- Multicast TV VLAN Mapping 529
- LLDP Overview 532
- LLDP Properties 533
- LLDP Port Settings 537
- MED Network Policy 540
- LLDP MED Port Settings 543
- Neighbors Information 548
- Dynamic ARP Inspection 551
- Dynamic ARP 552
- Inspection List 552
- Global Settings pages 554
- Dynamic ARP Inspection List 555
- VLAN Settings 559
- VLAN Settings pages 560
- Trusted Interfaces 561
- Trusted Interface pages 562
- DHCP Snooping 563
- Snooping Binding Database 573
- Figure 19-4. Binding Database 574
- DHCP Relay 577
- Option 82 579
- Interface Settings 582
- Optimizing iSCSI Overview 585
- Limitations 586
- Figure 20-3. iSCSI Sessions 593
- [detailed] 594
- Displays iSCSI sessions 594
- Configuring iSCSI Using CLI 595
- Statistics/RMON 596
- Table Views 597
- Denied ACEs Counters 598
- Utilization Summary 600
- Counter Summary 602
- Interface Statistics 604
- Etherlike Statistics 606
- GVRP Statistics 609
- EAP Statistics 612
- RMON Components 615
- Statistics 616
- History Control 619
- History Table 621
- Events Control 624
- Events Log 627
- Figure 21-13. Alarms: Summary 629
- Figure 21-14. Ports 633
- Figure 21-15. LAGs 635
- CPU Utilization 638
- Quality of Service 640
- QoS Features and Components 641
- QoS Mode 643
- QoS Properties 645
- Traffic Limitation Methods 646
- Figure 22-3. Queue 648
- Mapping to Queue 649
- Figure 22-4. CoS to Queue 651
- Figure 22-5. DSCP to Queue 653
- Bandwidth 654
- TCP Congestion Avoidance 657
- QoS Basic Mode 659
- DSCP Rewrite 662
- Figure 22-9. DSCP Rewrite 663
- QoS Advanced Mode 668
- DSCP Mapping 670
- Policy Class Maps 671
- Aggregate Policy 671
- Class Mapping 672
- QoS Policers 675
- Policy Binding 686
- QoS Statistics 688
- Policer Statistics 689
- Aggregated Policer 691
- Queues Statistics 692
- Glossary 695
- Bootstrap Protocol 697
- Bridge Protocol Data Unit 697
- Configuration Data Base 697
- Class of Service (CoS) 698
- Command Line Interface 698
- Central Processing Unit 698
- DiffServe Code Point (DSCP) 698
- Embedded Web Server 699
- Fast Forward Table 699
- First In First Out 700
- Head of Line 700
- HyperText Transport Protocol 701
- Integrated Circuit 701
- Media Access Control Address 703
- Data Link Control 703
- Message Digest 5 704
- Media Dependent Interface 704
- Management Information Base 704
- Network Management System 704
- Object Identifier 705
- Protocol Data Unit 705
- Packet Internet Groper 705
- Protocol VLAN Edge 705
- Remote Monitoring 706
- Rapid Spanning Tree Protocol 706
- System on a Chip 707
- Secure Shell 707
- Terminal Emulation Protocol 708
- User Data Protocol 708
- Virtual Local Area Networks 709
- Wide Area Networks 709
- Numerics 710
- XG Ports 35 723
- Revision History 727
Produits connexes et manuels pour Commutateurs de réseau Dell 5524
(728 pages)© 2020, manymanuals.fr. Tous droits réservés | 1.333 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels