Web Management Guide-R05
Table Of Contents
- ECS4810-12M Gigabit Ethernet Switch
- How to Use This Guide
- Contents
- Figures
- Tables
- Getting Started
- Web Configuration
- Using the Web Interface
- Basic Management Tasks
- Displaying System Information
- Displaying Hardware/Software Versions
- Configuring Support for Jumbo Frames
- Displaying Bridge Extension Capabilities
- Managing System Files
- Setting the System Clock
- Configuring the Console Port
- Configuring Telnet Settings
- Displaying CPU Utilization
- Displaying Memory Utilization
- Resetting the System
- Interface Configuration
- VLAN Configuration
- Address Table Settings
- Spanning Tree Algorithm
- Congestion Control
- Class of Service
- Quality of Service
- VoIP Traffic Configuration
- Security Measures
- AAA (Authentication, Authorization and Accounting)
- Configuring User Accounts
- Web Authentication
- Network Access (MAC Address Authentication)
- Configuring HTTPS
- Configuring the Secure Shell
- Access Control Lists
- Setting a Time Range
- Showing TCAM Utilization
- Setting the ACL Name and Type
- Configuring a Standard IPv4 ACL
- Configuring an Extended IPv4 ACL
- Configuring a Standard IPv6 ACL
- Configuring an Extended IPv6 ACL
- Configuring a MAC ACL
- Configuring an ARP ACL
- Binding a Port to an Access Control List
- Configuring ACL Mirroring
- Showing ACL Hardware Counters
- ARP Inspection
- Filtering IP Addresses for Management Access
- Configuring Port Security
- Configuring 802.1X Port Authentication
- DoS Protection
- IP Source Guard
- DHCP Snooping
- Basic Administration Protocols
- Configuring Event Logging
- Link Layer Discovery Protocol
- Simple Network Management Protocol
- Configuring Global Settings for SNMP
- Setting the Local Engine ID
- Specifying a Remote Engine ID
- Setting SNMPv3 Views
- Configuring SNMPv3 Groups
- Setting Community Access Strings
- Configuring Local SNMPv3 Users
- Configuring Remote SNMPv3 Users
- Specifying Trap Managers
- Creating SNMP Notification Logs
- Showing SNMP Statistics
- Remote Monitoring
- Switch Clustering
- Ethernet Ring Protection Switching
- Connectivity Fault Management
- Configuring Global Settings for CFM
- Configuring Interfaces for CFM
- Configuring CFM Maintenance Domains
- Configuring CFM Maintenance Associations
- Configuring Maintenance End Points
- Configuring Remote Maintenance End Points
- Transmitting Link Trace Messages
- Transmitting Loop Back Messages
- Transmitting Delay-Measure Requests
- Displaying Local MEPs
- Displaying Details for Local MEPs
- Displaying Local MIPs
- Displaying Remote MEPs
- Displaying Details for Remote MEPs
- Displaying the Link Trace Cache
- Displaying Fault Notification Settings
- Displaying Continuity Check Errors
- OAM Configuration
- UDLD Configuration
- IP Configuration
- IP Services
- Multicast Filtering
- Overview
- Layer 2 IGMP (Snooping and Query for IPv4)
- Configuring IGMP Snooping and Query Parameters
- Specifying Static Interfaces for a Multicast Router
- Assigning Interfaces to Multicast Services
- Setting IGMP Snooping Status per Interface
- Filtering IGMP Query and Report Packets
- Displaying Multicast Groups Discovered by IGMP Snooping
- Displaying IGMP Snooping Statistics
- Filtering and Throttling IGMP Groups
- MLD Snooping (Snooping and Query for IPv6)
- Multicast VLAN Registration for IPv4
- Multicast VLAN Registration for IPv6
- Appendices
- Glossary
- Index
Glossary
– 654 –
DHCP Snooping
A technique used to enhance network security by snooping on DHCP server messages to
track the physical location of hosts, ensure that hosts only use the IP addresses assigned to
them, and ensure that only authorized DHCP servers are accessible.
DiffServ
Differentiated Services provides quality of service on large networks by employing a well-
defined set of building blocks from which a variety of aggregate forwarding behaviors may
be built. Each packet carries information (DS byte) used by each hop to give it a particular
forwarding treatment, or per-hop behavior, at each network node.
DiffServ
allocates
different levels of service to users on the network with mechanisms such as traffic meters,
shapers/droppers, packet markers at the boundaries of the network.
DNS
Domain Name Service. A system used for translating host names for network nodes into IP
addresses.
DSCP
Differentiated Services Code Point Service. DSCP uses a six-bit tag to provide for up to 64
different forwarding behaviors. Based on network policies, different kinds of traffic can be
marked for different kinds of forwarding. The DSCP bits are mapped to the Class of Service
categories, and then into the output queues.
EAPOL
Extensible Authentication Protocol over LAN. EAPOL is a client authentication protocol used
by this switch to verify the network access rights for any device that is plugged into the
switch. A user name and password is requested by the switch, and then passed to an
authentication server (e.g., RADIUS) for verification. EAPOL is implemented as part of the
IEEE 802.1X Port Authentication standard.
ERPS
Ethernet Ring Protection Switching can be used to increase the availability and
robustness of Ethernet rings, such as those used in Metropolitan Area Networks
(MAN). ERPS provides Layer 2 loop avoidance and fast re-convergence in Layer 2
ring topologies, supporting up to 255 nodes in the ring structure. It can also
function with IEEE 802.1ag to support link monitoring when non-participating
devices exist within the Ethernet ring.
EUI
Extended Universal Identifier is an address format used by IPv6 to identify the host portion
of the network address. The interface identifier in EUI compatible addresses is based on the
link-layer (MAC) address of an interface. Interface identifiers used in global unicast and
other IPv6 address types are 64 bits long and may be constructed in the EUI-64 format. The
modified EUI-64 format interface ID is derived from a 48-bit link-layer address by inserting
the hexadecimal number FFFE between the upper three bytes (OUI field) and the lower 3
bytes (serial number) of the link layer address. To ensure that the chosen address is from a
unique Ethernet MAC address, the 7th bit in the high-order byte is set to 1 (equivalent to
the IEEE Global/Local bit) to indicate the uniqueness of the 48-bit address.