Riverstone-networks WICT1-12 Manuel d'utilisateur Page 556
- Page / 718
- Table des matières
- DEPANNAGE
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
25-10 Riverstone Networks RS Switch Router User Guide Release 8.0
Layer-2 Security Filters Security Configuration
Example 1: Address Filters
Source filter: The consultant is not allowed to access any file servers. The consultant is only allowed to interact with
the engineers on the same Ethernet segment – port et.1.1. All traffic coming from the consultant’s MAC address will
be dropped.
Destination filter: No one from the engineering group (port et.1.1) should be allowed to access the finance server. All
traffic destined to the finance server's MAC will be dropped.
Flow filter: Only the consultant is restricted access to one of the finance file servers. Note that port et.1.1 should be
operating in flow-bridging mode for this filter to work.
Static Entries Example
Source static entry: The consultant is only allowed to access the engineering file servers on port et.1.2.
Destination static entry: Restrict "login multicasts" originating from the engineering segment (port et.1.1) from
reaching the finance servers.
filters add address-filter name consultant source-mac 001122:334455 vlan 1
in-port-list et.1.1
filters add address-filter name finance dest-mac AABBCC:DDEEFF vlan 1 in-port-list
et.1.1
filters add address-filter name consult-to-finance source-mac 001122:334455 dest-mac
AABBCC:DDEEFF vlan 1 in-port-list et.1.1
filters add static-entry name consultant source-mac 001122:334455 vlan 1 in-port-list
et.1.1 out-port-list et.1.2 restriction allow
filters add static-entry name login-mcasts dest-mac 010000:334455 vlan 1 in-port-list
et.1.1 out-port-list et.1.3 restriction disallow
- RS Switch Router 1
- User Guide 1
- COPYRIGHT NOTICES 2
- RIVERSTONE NETWORKS, INC 8
- AGREEMENT 8
- TABLE OF CONTENTS 13
- LIST OF FIGURES 27
- LIST OF TABLES 31
- 1 INTRODUCTION 33
- 1.2 DOCUMENT CONVENTIONS 34
- 2 MAINTAINING CONFIGURATION 35
- 3 CLI AND RS BASICS 43
- 3.6 SETTING CLI PARAMETERS 49
- 3.7 NAMING RS PORTS 50
- 3.7.1 Port Type 51
- 3.7.2 Slot Number 51
- 3.7.3 Port Number 51
- 3.7.4 Channel Number 53
- 1000BASE-SXG8M-GSXB1-02 54
- CONTROL MODULES 57
- 4.2.2 Removing the Line Card 58
- Online Offline 60
- PC slot 1 60
- G8M-CM2-128 CONTROL MODULE 60
- PC slot 0 60
- (RS 8600 ONLY) 61
- Switching Fabric 62
- RS 38000 ONLY) 63
- 4.7 HOT SWAPPING A WIC 64
- ADDRESS-BASED) 65
- 5.3 VLAN OVERVIEW 66
- 5.3.1 RS VLAN Support 67
- 5.3.2 Configuration Examples 68
- AND 802.1Q SUPPORT) 69
- 70
- 5.6 CONFIGURING SPANNING TREE 71
- Setting the Bridge Priority 72
- Setting a Port Priority 73
- Assigning Port Costs 73
- Defining the Maximum Age 74
- 5.6.3 STP Dampening 75
- 5.7.2 Adding Ports to a VLAN 76
- 5.10 MONITORING BRIDGING 78
- 5.11 GARP/GVRP 79
- 5.11.3 Configuration Example 81
- Multiple Customer VLANs 84
- 6 SMARTTRUNK CONFIGURATION 101
- 6.1.1 Creating a SmartTRUNK 102
- Timesaver 103
- CONTROL PROTOCOL (LACP) 105
- 6.4.1 SLR Water-marks 109
- 6.4.2 Polling intervals 109
- Using Low Water-Mark Events 112
- Redistribution of IP Flows 112
- 7 CMTS CONFIGURATION GUIDE 113
- DOCSIS CMTSG8M-CMTSA-4X1 114
- US 1 US 2 US 3 US 4 IF DS 114
- 7.3.1 Headend Certification 115
- 7.3.2 IF-RF-Upconverter 115
- 7.3.3 Diplex Filters 115
- RS-8000 with 116
- DOCSIS CMTS 116
- DOWNSTREAM 117
- RECEIVER 119
- ! Configure the RS 124
- ! Configure the VLANs 124
- ! MOONLINK 124
- Client-VLAN Bindings 130
- 7.8 ANTI-SPOOFING 132
- 7.8.2 Anti-IP-spoofing 133
- Static Anti-IP Spoofing 134
- 8 ATM CONFIGURATION GUIDE 135
- 8.1 CONFIGURING ATM PORTS 136
- Cell Scrambling 137
- Cell Mapping 137
- VPI Bit Allocation 137
- 8.3 TRAFFIC SHAPING 140
- 8.4 TRAFFIC MANAGEMENT 142
- Relative Latency 143
- 8.5 BRIDGING ATM TRAFFIC 149
- 8.6 ROUTING ATM TRAFFIC 152
- 8.6.1 Peer Address Mapping 155
- ATM Cloud 156
- 8.7 CONFIGURING PPP (OC-12) 157
- DSL Modem 158
- 9 PACKET-OVER-SONET 161
- CONFIGURATION GUIDE 161
- SWITCHING 163
- 9.5 MONITORING POS PORTS 166
- 9.6 EXAMPLE CONFIGURATIONS 166
- 10 DHCP CONFIGURATION GUIDE 171
- 10.6 SECONDARY SUBNETS AND 176
- DIRECTLY-CONNECTED CLIENTS 176
- 11 IP ROUTING CONFIGURATION 179
- PARAMETERS 180
- 11.2.4 Unnumbered Interfaces 181
- 11.3 CONFIGURING JUMBO FRAMES 182
- at port et.3.1: 183
- 20:13a09f exit-port et.3.1 183
- RESOLUTION PROTOCOL (RARP) 184
- 11.5.3 Monitoring RARP 185
- 11.8 CONFIGURING IP HELPER 186
- 11.13 HARDWARE ROUTING TABLE 189
- 11.15 FORWARDING MODE 190
- Defining a Profile 191
- Applying a Profile 191
- Enabling a Port 191
- Access Control Lists (ACLs) 192
- Rate Limiting 192
- Quality of Service (QoS) 192
- L4 Bridging 192
- 11.18 CONFIGURATION EXAMPLES 196
- 12 VRRP CONFIGURATION GUIDE 197
- Configuration of Router R1 198
- Configuration for Router R2 199
- 10.0.0.1/16 201
- 10.0.0.2/16 201
- 10.0.0.3/16 201
- Configuration of Router R2 203
- Configuration of Router R3 204
- 12.2 ADDITIONAL CONFIGURATION 205
- 12.3 MONITORING VRRP 206
- 12.3.1 ip-redundancy trace 207
- 12.3.2 ip-redundancy show 207
- 12.4 VRRP CONFIGURATION NOTES 209
- 13 RIP CONFIGURATION GUIDE 211
- 13.3 MONITORING RIP 214
- 13.4 CONFIGURATION EXAMPLE 215
- 14 OSPF CONFIGURATION GUIDE 217
- 14.1 OSPF MULTIPATH 218
- 14.2 CONFIGURING OSPF 218
- 14.3 SETTING THE ROUTER ID 218
- 14.4 ENABLING OSPF 219
- 14.5 CONFIGURING OSPF AREAS 219
- 14.5.2 Configuring Stub Areas 220
- 14.8 CREATING VIRTUAL LINKS 224
- Setting Route Preference 227
- 14.10 MONITORING OSPF 228
- command: 229
- Figure 14-1 Exporting to OSPF 234
- 15 IS-IS CONFIGURATION GUIDE 235
- 15.3 ENABLING IS-IS ON THE RS 236
- 15.4.3 Setting the System ID 237
- Authentication Within an Area 238
- SNP Authentication 239
- Network Topology Overview 242
- IS-IS Area 1 243
- Area 49.da02 244
- IS-IS Area 2 244
- IS-IS Area 3 245
- IS-IS Area 4 246
- R1 Configuration 247
- R2 Configuration 248
- R3 Configuration 249
- R4 Configuration 250
- R5 Configuration 251
- R6 Configuration 252
- R7 Configuration 253
- R8 Configuration 253
- R9 Configuration 254
- C10 Configuration 255
- C10 Configuration (continued) 256
- R11 Configuration 257
- 16 BGP CONFIGURATION GUIDE 259
- 16.2 BASIC BGP TASKS 260
- 16.2.4 Adding a BGP Peer 262
- 16.2.5 Starting BGP 262
- BGP Confederation 265
- 16.2.10 Using Route Maps 267
- Enabling BGP Accounting 269
- IBGP Routing Group Example 275
- ; 279
- AS-64902 281
- AS-64901 281
- AS-64900 AS-64899 281
- Notes on Using Communities 286
- Physical Link 288
- Peering Relationship 288
- Information Flow 288
- Using the local-pref Option 289
- Using the set-pref Option 289
- 212.19.199.62/24 291
- 212.19.198.1/24 291
- 212.19.192.2/24 291
- 194.109.86.6 194.109.86.5 291
- 192.68.222.1 293
- 192.68.20.2 293
- 192.68.20.1 293
- 172.16.30.2 293
- 16.3.10 Route Map Example 300
- EBGP Accounting Example 301
- IBGP Accounting Example 303
- BGP DSCP Accounting 305
- 17 MPLS CONFIGURATION 309
- 17.1.1 Labels 310
- Label Distribution Protocols 314
- Label Advertising Mode 315
- Label Retention Mode 315
- Output Tag Table (OTT) 316
- Incoming Label Map (ILM) 317
- Context Address Memory (CAM) 317
- Table Lookups at Ingress LSRs 317
- Table Lookups at Transit LSRs 317
- Table Lookups at Egress LSRs 317
- 17.3 RSVP CONFIGURATION 321
- 17.3.2 RSVP Refresh Intervals 323
- 17.3.3 RSVP Hello Packets 324
- 17.3.4 Authentication 325
- 17.3.6 RSVP Refresh Reduction 326
- Message ID Extensions 327
- 17.4 LDP CONFIGURATION 329
- 17.4.3 Remote Peers 331
- 17.4.4 Loop Detection 331
- Ingress LSR Configuration 335
- Transit LSR Configuration 335
- PHP LSR Configuration 336
- # mpls show policy all 339
- Configuring an Explicit Path 340
- Configuring the LSP 341
- Adaptive LSP 343
- Bandwidth 343
- CoS Value 343
- Hop Limit 343
- LSP Metric 343
- Disabling CSPF 344
- Disabling TTL Decrementing 344
- Preference 344
- Connection Retries 344
- Policies 345
- ! Configure interfaces 359
- ! Configure OSPF 359
- DHCP Configuration 365
- 17.6 CONFIGURING L2 TUNNELS 368
- Egress LSR Configuration 370
- ! Create L2 static path TO-R1 372
- ! Start MPLS on this router 372
- Virtual Circuit Signaling 373
- Tunnel LSP Signaling 373
- FEC-Label Bindings 374
- ! If tunnel LSP uses RSVP: 379
- ! If tunnel LSP uses LDP: 379
- 17.7 TRAFFIC ENGINEERING 410
- ! Configure MPLS 419
- ! Enable and start RSVP 419
- ! Configure VLANs 419
- 17.7.3 IGP Shortcuts 427
- IS-IS IGP Shortcuts Example 428
- Advertising IGP Shortcuts 430
- 18.1 PREFERENCE 431
- Import-Source 432
- 18.1.2 Export Policies 433
- Export-Destination 434
- Export-Source 434
- Route-Filter 434
- Aggregate-Destination 436
- Aggregate-Source 436
- Authentication Methods 437
- protocol 448
- Figure 18-1 Exporting to RIP 449
- Figure 18-2 Exporting to OSPF 452
- 19 MULTICAST ROUTING 465
- CONFIGURATION 465
- 19.3 CONFIGURING IGMP 466
- 19.4 CONFIGURING DVMRP 468
- 19.6 CONFIGURATION EXAMPLE 471
- Setting the IP Policy Action 475
- Verifying Next-Hop Gateways 476
- 20.3 MONITORING IP POLICIES 483
- 21 NETWORK ADDRESS 487
- TRANSLATION CONFIGURATION 487
- 21.1.2 Setting NAT Rules 488
- 21.4 NAT AND DNS 489
- 21.5 NAT AND ICMP PACKETS 490
- 21.6 NAT AND FTP 490
- 21.7 MONITORING NAT 491
- 21.8 CONFIGURATION EXAMPLES 491
- Using Static NAT 492
- 21.8.2 Dynamic Configuration 493
- Using Dynamic NAT 494
- 21.8.4 Dynamic NAT with DNS 495
- Using Dynamic NAT with DNS 496
- 22 WEB HOSTING CONFIGURATION 499
- Specifying a Protocol 500
- 22.1.6 Setting Server Status 505
- 22.1.7 Load Balancing and FTP 506
- VSRP Example 507
- “OK” read-till-index 25 510
- Virtual IP Address Ranges 511
- Load Balancing with NAT 514
- 22.2 WEB CACHING 515
- Creating the Cache Group 516
- 22.2.2 Configuration Example 517
- Proxy Server Redundancy 518
- Verifying Servers 519
- 22.2.4 Monitoring Web-Caching 520
- 23 IPX ROUTING CONFIGURATION 521
- 23.5 CONFIGURING IPX ROUTING 525
- 23.7 CONFIGURATION EXAMPLES 528
- Adds a RIP access list 529
- Adds a SAP access list 529
- Adds a GNS access list 529
- 24 ACCESS CONTROL LIST 531
- 24.1.3 Implicit Deny Rule 534
- 24.2.1 Editing ACLs Offline 536
- 24.3 USING ACLS 538
- 24.3.4 Using ACLs as Profiles 540
- 24.4 ENABLING ACL LOGGING 544
- 24.5 MONITORING ACLS 545
- 25 SECURITY CONFIGURATION 547
- Monitoring RADIUS 548
- 25.1.2 Configuring TACACS 549
- 25.1.3 Configuring TACACS+ 549
- Monitoring TACACS+ 550
- 25.1.4 Configuring Passwords 551
- 25.1.5 Configuring SSH 551
- 25.2 LAYER-2 SECURITY FILTERS 552
- Example 1: Address Filters 556
- Static Entries Example 556
- Port-to-Address Lock Examples 557
- Example 2 : Secure Ports 557
- 25.4.6 Notes 561
- 26 QOS CONFIGURATION 563
- SPECIFICATION 564
- 26.3 RS QUEUING POLICIES 565
- LAYER-4 FLOWS 568
- Setting an IPX QoS Policy 569
- 26.8 TOS REWRITE 572
- 26.9 MONITORING QOS 574
- 26.10 LIMITING TRAFFIC RATE 575
- 26.10.1 Rate Limiting Modes 576
- 26.10.4 Port Rate Limiting 577
- Per-Flow Rate Limiting 580
- Flow-Aggregate Rate Limiting 580
- Aggregate Rate Limiting 581
- 27 PERFORMANCE MONITORING 583
- 28 RMON CONFIGURATION 587
- 28.1.2 RMON Groups 588
- Lite RMON Groups 589
- Standard RMON Groups 589
- 28.1.3 Control Tables 590
- 28.2 USING RMON 591
- 28.3 CONFIGURING RMON GROUPS 592
- <number> 593
- 28.4.1 RMON CLI Filters 596
- Creating RMON CLI Filters 597
- Using RMON CLI Filters 597
- 28.5 TROUBLESHOOTING RMON 598
- RS platform Maximum memory 600
- RS 32000 96 MB 600
- RS 8600 48 MB 600
- RS 8000 24 MB 600
- 29 LFAP CONFIGURATION GUIDE 601
- 30 WAN CONFIGURATION 605
- Static Addresses 606
- Mapped Addresses 607
- Dynamic Addresses 607
- Average Packet Size 608
- Nature of the Data 608
- 30.2.5 Packet Encryption 609
- 30.2.6 WAN Quality of Service 609
- Source Filtering and ACLs 610
- Weighted-Fair Queueing 610
- 30.3 FRAME RELAY OVERVIEW 611
- FOR THE RS 612
- 30.9 MONITORING PPP WAN PORTS 617
- 30.10 PPP PORT CONFIGURATION 618
- 30.13 WAN RATE SHAPING 621
- Rate Shaping by Best Effort 626
- Performing Rate Limiting 627
- Non-Rate Shaped Flows 627
- Router Connections on Subnet 630
- Router R1 Configuration File 631
- Router R2 Configuration File 631
- Router R3 Configuration File 632
- Router R4 Configuration File 632
- Router R5 Configuration File 633
- Router R6 Configuration File 633
- OVERVIEW 634
- TEST PORT 636
- T1, E1 AND T3 644
- Metropolitan Sevice Provider 645
- Hardware Requirements 648
- ISP RS 32000 Configuration 650
- RS 8600 Configuration (USA) 681
- T3 AND E3 687
- T3 refers to Channelized T3 688
- ISP RS 8000 Configuration 689
- 31 SERVICE CONFIGURATION 705
- 31.2 CREATING A SERVICE 707
- 31.3 APPLYING A SERVICE 710
- 31.4 SHOWING A SERVICE 712
- 31.4.2 Show All Command 713
- 31.5 PORT-LEVEL RATE LIMITING 714
- Customers 716
- Subnetwork 718
- 122.132.0.0/16 718
- 256 Kbps 718
Produits connexes et manuels pour Matériel Riverstone-networks WICT1-12
(77 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.053 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels