Cisco 2955T 12 - Catalyst Switch Spezifikationen Seite 500
- Seite / 608
- Inhaltsverzeichnis
- FEHLERBEHEBUNG
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
26-26
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-07
Chapter 26 Configuring Network Security with ACLs
Examples for Compiling ACLs
In this example of a numbered ACL, the Winter and Smith workstations are not allowed to browse the
web:
Switch(config)# access-list 100 remark Do not allow Winter to browse the web
Switch(config)# access-list 100 deny host 171.69.3.85 any eq www
Switch(config)# access-list 100 remark Do not allow Smith to browse the web
Switch(config)# access-list 100 deny host 171.69.3.13 any eq www
In this example of a named ACL, the Jones subnet is not allowed access:
Switch(config)# ip access-list standard prevention
Switch(config-std-nacl)# remark Do not allow Jones subnet through
Switch(config-std-nacl)# deny 171.69.0.0 0.0.255.255
In this example of a named ACL, the Jones subnet is not allowed to use outbound Telnet:
Switch(config)# ip access-list extended telnetting
Switch(config-ext-nacl)# remark Do not allow Jones subnet to telnet out
Switch(config-ext-nacl)# deny tcp 171.69.0.0 0.0.255.255 any eq telnet
- Software Configuration Guide 1
- CONTENTS 3
- 7 Clustering Switches 7-1 7
- Contents 10
- 78-11380-07 10
- 12 Configuring STP 12-1 11
- 15 Configuring VLANs 15-1 13
- 16 Configuring VTP 16-1 15
- 20 Configuring UDLD 20-1 17
- 21 Configuring CDP 21-1 17
- 23 Configuring RMON 23-1 18
- 25 Configuring SNMP 25-1 19
- 27 Configuring QoS 27-1 20
- 29 Troubleshooting 29-1 22
- A Supported MIBs A-1 22
- Audience 23
- Conventions 24
- Related Publications 25
- Obtaining Documentation 26
- Ordering Documentation 27
- Documentation Feedback 27
- Cisco.com 28
- Technical Assistance Center 28
- Cisco TAC Escalation Center 29
- Overview 31
- Chapter 1 Overview 32
- Features 32
- Management Options 37
- Large Campus Configuration 44
- IOS Command Modes 49
- • Change terminal 50
- • Perform basic tests 50
- • Display system 50
- Getting Help 51
- Abbreviating Commands 52
- Understanding CLI Messages 53
- Using Command History 53
- Using Editing Features 54
- Accessing the CLI 57
- Port Status Monitoring Alarms 61
- Triggering Alarm Options 62
- Setting the Power Mode 63
- Configuring Alarm Profiles 68
- Enabling SNMP Traps 70
- Getting Started with CMS 71
- Front Panel View 73
- Cluster Tree 75
- Front-Panel Images 75
- Figure 4-6 Port Icons 76
- Redundant Power System LED 77
- Port Modes and LEDs 78
- VLAN Membership Modes 79
- Topology View 80
- Topology Icons and Labels 82
- Device and Link Labels 82
- Colors in the Topology View 83
- Menus and Toolbar 84
- Front Panel View Popup Menus 90
- Topology View Popup Menus 91
- Device Popup Menus 92
- Interaction Modes 94
- Expert Mode 95
- Tool Tips 95
- Online Help 95
- CMS Window Components 96
- Host Name List 97
- Tabs, Lists, and Tables 98
- Filter Editor 98
- Accessing CMS 99
- Access Modes in CMS 100
- Saving Your Configuration 101
- Restoring Your Configuration 102
- CMS Preferences 102
- Where to Go Next 103
- Assigning Switch Information 106
- Default Switch Information 107
- DHCP Client Request Process 108
- Configuring the DHCP Server 109
- Configuring the TFTP Server 109
- Configuring the DNS 110
- Configuring the Relay Device 110
- Obtaining Configuration Files 111
- Example Configuration 112
- Configuring IE2100 CNS Agents 117
- CNS Configuration Service 118
- CNS Event Service 119
- DeviceID 120
- Host Name and DeviceID 120
- Initial Configuration 121
- Synchronized Configuration 122
- Enabling the CNS Event Agent 124
- Displaying CNS Configuration 129
- Clustering Switches 131
- Understanding Switch Clusters 132
- Planning a Switch Cluster 135
- Discovery through CDP Hops 136
- Release 12.1(9)EA1) 137
- Virtual IP Addresses 143
- IP Addresses 146
- Host Names 147
- Passwords 147
- SNMP Community Strings 147
- TACACS+ and RADIUS 148
- Management VLAN 149
- LRE Profiles 149
- Creating a Switch Cluster 150
- Adding Member Switches 151
- 2900-LRE-24-1 152
- Verifying a Switch Cluster 156
- Command switch 158
- Trap 1, Trap 2, Trap 3 158
- Member 1 Member 2 Member 3 158
- SNMP Manager 158
- Administering the Switch 159
- • User show commands 160
- Configuring NTP 161
- Default NTP Configuration 162
- Configuring NTP Associations 163
- Setting the System Clock 169
- Configuring the Time Zone 170
- Configuring a System Name 173
- Configuring a System Prompt 174
- Understanding DNS 174
- Default DNS Configuration 175
- Setting Up DNS 175
- Creating a Banner 176
- Configuring a Login Banner 178
- Building the Address Table 179
- MAC Addresses and VLANs 179
- Managing the ARP Table 185
- Understanding TACACS+ 195
- TACACS+ Operation 197
- Configuring TACACS+ 197
- Default TACACS+ Configuration 198
- Starting TACACS+ Accounting 202
- Understanding RADIUS 203
- RADIUS Operation 204
- Configuring RADIUS 205
- Defining AAA Server Groups 210
- Starting RADIUS Accounting 213
- Authorization 216
- Understanding SSH 218
- Configuring SSH 218
- Device Roles 220
- Figure 10-2 Message Exchange 221
- Voice VLAN Ports 223
- Supported Topologies 225
- Default 802.1X Configuration 226
- Changing the Quiet Period 231
- Enabling Multiple Hosts 233
- Understanding Interface Types 235
- Access Ports 236
- Trunk Ports 236
- EtherChannel Port Groups 237
- Port-Based VLANs 237
- Using the Interface Command 238
- Configuring Switch Interfaces 243
- Configuration Guidelines 245
- Configuring STP 253
- STP Overview 254
- Bridge Protocol Data Units 254
- Election of the Root Switch 255
- Spanning-Tree Timers 257
- Blocking State 259
- Listening State 259
- Learning State 259
- STP and IEEE 802.1Q Trunks 260
- Default STP Configuration 262
- STP Configuration Guidelines 263
- Disabling STP 263
- Configuring the Root Switch 264
- Configuring the Port Priority 267
- Configuring the Path Cost 268
- Configuring the Hello Time 270
- Configuring RSTP and MSTP 275
- Understanding RSTP 276
- Rapid Convergence 277
- Synchronization of Port Roles 278
- Table 13-2 RSTP BPDU Flags 279
- Topology Changes 280
- Understanding MSTP 281
- IST, CIST, and CST 282
- Hop Count 284
- Boundary Ports 284
- Understanding Port Fast 300
- Understanding BPDU Guard 301
- Understanding BPDU Filtering 301
- Understanding UplinkFast 302
- How CSUF Works 304
- Limitations 306
- Connecting the Stack Ports 306
- Understanding BackboneFast 308
- Understanding Root Guard 310
- Understanding Loop Guard 311
- Enabling Port Fast 312
- Enabling BPDU Guard 313
- Enabling BPDU Filtering 314
- Enabling BackboneFast 317
- Enabling EtherChannel Guard 317
- Enabling Root Guard 318
- Enabling Loop Guard 318
- Configuring VLANs 321
- Supported VLANs 322
- VLAN Port Membership Modes 323
- Token Ring VLANs 325
- Saving VLAN Configuration 327
- Deleting a VLAN 330
- Default VLAN Configuration 332
- Displaying VLANs 334
- Configuring VLAN Trunks 335
- Configuring a Trunk Port 338
- Load Sharing Using STP 341
- Configuring VMPS 345
- Dynamic Port VLAN Membership 346
- Default VMPS Configuration 348
- VMPS Configuration Guidelines 348
- Configuring the VMPS Client 349
- Reconfirming VLAN Memberships 350
- Monitoring the VMPS 351
- VMPS Configuration Example 352
- Configuring VTP 355
- The VTP Domain 356
- VTP Modes 357
- VTP Advertisements 357
- VTP Version 2 358
- VTP Pruning 358
- Understanding VTP 359
- VTP Configuration Options 361
- VTP Configuration Guidelines 362
- Configuring a VTP Server 363
- Configuring a VTP Client 365
- Enabling VTP Version 2 367
- Enabling VTP Pruning 368
- Monitoring VTP 369
- Configuring Voice VLAN 371
- Displaying Voice VLAN 376
- Understanding IGMP Snooping 377
- Joining a Multicast Group 378
- Leaving a Multicast Group 380
- Immediate-Leave Processing 380
- Configuring IGMP Snooping 381
- Setting the Snooping Method 382
- Configuring MVR 391
- Configuring MVR Interfaces 393
- Displaying MVR Information 395
- Configuring IGMP Filtering 396
- Configuring IGMP Profiles 397
- Applying IGMP Profiles 398
- Configuring Storm Control 401
- Enabling Storm Control 402
- Configuring Protected Ports 403
- Configuring Port Security 404
- Security Violations 405
- Configuring UDLD 413
- Understanding UDLD 414
- Enabling UDLD Globally 416
- Enabling UDLD on an Interface 416
- Displaying UDLD Status 418
- Configuring CDP 419
- Disabling and Enabling CDP 421
- Configuring SPAN and RSPAN 425
- Understanding SPAN and RSPAN 426
- SPAN Session 427
- Traffic Types 427
- Source Port 428
- Destination Port 428
- Reflector Port 428
- SPAN Traffic 429
- SPAN and RSPAN Session Limits 430
- Configuring SPAN 431
- Configuring RSPAN 436
- Creating an RSPAN Session 437
- EXEC command 440
- Configuring RMON 441
- Default RMON Configuration 443
- Displaying RMON Status 446
- System Log Message Format 448
- Synchronizing Log Messages 452
- Configuring SNMP 459
- SNMP Versions 460
- SNMP Manager Functions 461
- SNMP Agent Functions 462
- Default SNMP Configuration 464
- SNMP Configuration Guidelines 464
- Disabling the SNMP Agent 465
- Configuring Community Strings 465
- SNMP Examples 473
- Displaying SNMP Status 474
- Network Security with ACLs 475
- Understanding ACLs 476
- Configuring ACLs 480
- Unsupported Features 481
- ACL Numbers 482
- Layer 3 Parameters: 484
- Layer 4 Parameters 484
- Applying Time Ranges to ACLs 489
- Creating MAC Access Groups 493
- Displaying ACL Information 495
- Displaying ACLs 496
- Examples for Compiling ACLs 497
- Numbered ACL Examples 499
- Extended ACL Examples 499
- Named ACL Example 499
- Configuring QoS 501
- Understanding QoS 502
- Basic QoS Model 504
- Classification 505
- Policing and Marking 507
- Mapping Tables 508
- Queueing and Scheduling 508
- Configuring Auto-QoS 509
- Enabling Auto-QoS for VoIP 512
- • show mls qos 513
- • show mls qos map cos-dscp 513
- • show wrr-queue bandwidth 513
- • show wrr-queue cos-map 513
- Configuring Standard QoS 515
- Configuring Trusted Boundary 520
- Enabling Pass-Through Mode 522
- Configuring a QoS Policy 523
- Configuring CoS Maps 531
- Configuring the Egress Queues 534
- Configuring WRR Priority 535
- Configuring EtherChannels 541
- Understanding EtherChannels 542
- PAgP and LACP Modes 543
- Exchanging PAgP Packets 544
- Exchanging LACP Packets 545
- Configuring Hot Standby Ports 553
- Troubleshooting 557
- Using Ping 567
- Using Layer 2 Traceroute 568
- Usage Guidelines 569
- Using Debug Commands 570
- Using the crashinfo File 573
- Supported MIBs 575
- MIB List 576
- Numerics 579
Verwandte Produkte und Handbücher für Software Cisco 2955T 12 - Catalyst Switch
Software Cisco Aironet 1200 Series Spezifikationen
(364 Seiten)
(364 Seiten)
Software Cisco ROUTER-SDM-CD Betriebsanweisung
(20 Seiten)
(20 Seiten)
Software Cisco HWIC Installationsanleitung
(82 Seiten)
(82 Seiten)
Software Cisco Aironet 700 Series Spezifikationen
(402 Seiten)
(402 Seiten)
Software Cisco ROUTER-SDM-CD Betriebsanweisung
(74 Seiten)
(74 Seiten)
Software Cisco IAD2431-1T1E1 Bedienungsanleitung
(12 Seiten)
(12 Seiten)
Software Cisco LightStream 1010 Spezifikationen
(89 Seiten)
(89 Seiten)
Software Cisco 3130 Spezifikationen
(107 Seiten)
(107 Seiten)
Software Cisco WS-CBS3120X-S Spezifikationen
(100 Seiten)
(100 Seiten)
Software Cisco ROUTER-SDM-CD Betriebsanweisung
(40 Seiten)
(40 Seiten)
© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.047 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern