Home » Dell Manuals » Hubs & Switches » Dell PowerConnect 6024 » Manual Viewer

Dell PowerConnect 6024 User's Guide (.htm) - Page 223

Configuring Switch Information, Configuring Network Security, Port Based Authentication (802.1x)

View all Dell PowerConnect 6024 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 223 highlights

Configuring Switch Information This section provides all system operations and general information for configuring network security, ports, address tables, GARP, VLANs, Spanning Tree, Port Aggregation, and Multicast Support. Configuring Network Security Use the Network Security page to set network security through both access control lists and locked ports. To open the Network Security page, select Switch→Network Security. The Network Security page provides links that enable you to configure port based authentication, port security, IP based ACLs, MAC based ACLs and ACL bindings. Port Based Authentication (802.1x) Port based authentication enables authenticating system users on a per port basis via an external server. Only authenticated and approved system users can transmit and receive data. Ports are authenticated via the RADIUS server using the Extensible Authentication Protocol (EAP). The 802.1x network has three components: • Authenticators - Specifies the port that is authenticated before permitting system access. • Supplicants - Specifies host connected to the authenticated port requesting to access the system services. • Authentication Server - Specifies the external server, for example, the RADIUS server that performs the authentication on behalf of the authenticator, and indicates whether the user is authorized to access system services. Port based authentication creates two access states: • Controlled Access - Permits communication between the user and the system, if the user is authorized. • Uncontrolled Access - Permits uncontrolled communication regardless of the port state. The device currently supports Port Based Authentication via RADIUS servers. Advanced Port Based Authentication Advanced Port Based Authentication enables multiple hosts to be attached to a single port. Advanced Port Based Authentication requires only one host to be authorized for all hosts to have system access. If the port is unauthorized all attached hosts are denied access to the network. Configuring Switch Information 233

Section	Page
Introduction	13
PowerConnect 6024	13
PowerConnect 6024F	14
CLI Documentation	14
Features	14
Port Based Features	14
Virtual Cable Testing (VCT)	14
Jumbo Frames Support	14
MDI/MDIX Support	14
Hardware Watchdog Support	15
Auto Negotiation	15
Flow Control Support (IEEE 802.3X)	15
Head of Line Blocking Prevention	15
Back Pressure Support	15
MAC Address Supported Features	16
MAC Address Support	16
Self-Learning MAC Addresses	16
Automatic Aging for MAC Addresses	16
Static MAC Entries	16
VLAN-Aware MAC-based Switching	16
MAC Multicast Support	16
Layer 2 Features	16
IGMP Snooping	16
Port Mirroring	16
Broadcast Storm Control	17
VLAN Supported Features	17
VLAN Support	17
Port-Based VLANs	17
IEEE802.1V Protocol Based VLANs	17
Full 802.1Q VLAN Tagging Compliance	17
GVRP Support	17
Private VLAN Edge	18
Spanning Tree Protocol Features	18
Spanning Tree Protocol (STP) per Device	18
Fast Link	18
IEEE 802.1W Rapid Spanning Tree	18
Multiple Spanning Tree	18
Link Aggregation	19
Link Aggregation	19
Link Aggregation and LACP	19
Routing Features	19
IP Routing	19
RIP Versions 1 and 2	19
OSPF Version 2	19
Address Resolution Protocol (ARP)	20
ICMP Messages	20
IGMPv2	20
Longest Prefix Match Support	20
DVMRP	20
VRRP	20
Layer 3 Features	21
TCP	21
UDP Relay	21
BootP and DHCP Clients	21
BootP Relay	21
DHCP Relay	21
Quality of Service Features	21
Quality of Service (QoS) Support	21
Class Of Service 802.1p Support	22
Quality of Service Basic Mode	22
Quality of Service Advanced Mode	22
Device Management Features	22
SNMP Alarms and Trap Logs	22
Web Based Management	22
Configuration File Download	22
Software Download	22
Trivial File Transfer Protocol (TFTP)	23
Remote Monitoring	23
Simple Network Management Protocol (SNMP) Versions 1, 2 and 3	23
Command Line Interface	23
Syslog	23
SNTP	23
Traceroute	23
Out-of-Band Management Port Support	24
Security Features	24
Access Control Lists (ACL)	24
Port Based Authentication (802.1x)	24
Locked Port Support	24
Password Management Security	24
TACACS+	24
RADIUS Client	25
SSH	25
Hardware Description	27
Ports Description	27
PowerConnect 6024	27
PowerConnect 6024F	28
Out-of-Band Management Port	28
Console (RS-232) Port	28
Hardware Components	29
Physical Dimensions	29
Power Supplies	29
Reset Button	30
Ventilation System	30
LED Definitions	30
SFP Port LEDs	31
10/100/1000 Base-T Port LEDs	31
System LEDs	32
Cable, Port, and Pinout Information	35
Pin Connections for the 10/100/1000 Ethernet Interface	35
Pin Connections for SFP Interfaces	36
Serial Cable Connection	37
Connecting the Switch to a Terminal	38
AC Power Connection	39
Using Dell OpenManage Switch Administrator	41
Starting the Application	41
Understanding the Interface	41
Using the Switch Administrator Buttons	43
Information Buttons	43
Device Management Buttons	44
Defining Fields	44
Accessing the Switch Through the CLI	45
Console Connection	45
Telnet Connection	45
Using the CLI	46
Command Mode Overview	46
User EXEC Mode	46
Privileged EXEC Mode	46
Global Configuration Mode	47
Interface Configuration Mode	48
CLI Examples	48
Configuring the Switch	49
General Configuration Information	51
Auto-Negotiation	51
Switching Port Default Settings	51
Terminal Connection Configuration	52
Baud Rate	52
Other Configuration Requirements	53
Booting the Switch	53
Configuration Overview	56
Initial Configuration	56
Wizard Step 1	57
Wizard Step 2	58
Wizard Step 3	58
Wizard Step 4	59
Wizard Step 5	59
Wizard Step 6	59
Advanced Configuration	60
Retrieving an IP Address From a DHCP Server	60
Receiving an IP Address From a BOOTP Server	61
Security Management and Password Configuration	62
Configuring Security Passwords	62
Configuring an Initial Console Password	63
Configuring an Initial Telnet Password	63
Configuring an Initial SSH password	63
Configuring an Initial HTTP Password	64
Configuring an initial HTTPS password:	64
Software Download and Reboot	64
Software Download Through XModem	64
Software Download Through TFTP Server	65
Boot Image Download	67
Sample Configuration Process	67
Device Setup Requirements	68
Initial Connection	68
Device Default Settings	72
Enabling Remote Management	72
Setting the Management Station IP Address	75
Enabling Telnet Access	77
Enabling Web Access (HTTP Server)	79
Configuring Secure Management Access (HTTPS)	81
Startup Menu Functions	82
Download Software	83
Erase FLASH File	83
Erase FLASH Sectors	84
Password Recovery	85
Out-of-Band Management Port	85
Assigning Dynamic IP Addresses (on an Out-of-Band Port)	85
Assigning Static IP Addresses (on an Out-of-Band Port)	86
Assigning IP Default Gateway	86
Ping via Out-of-Band	86
Copy Image/Boot	86
IP Default Gateway to Out-of-Band	86
Additional Information	87
Configuring System Information	89
Opening the System Page	89
Defining General Device Information	89
Configuring Device Information	89
Defining System Information	91
Initiating a Telnet Session	91
Configuring Device Information Using the CLI Commands	91
Defining System Time Settings	92
Selecting a Clock Source	94
Defining Local Clock Settings	94
Defining Daylight Savings Time	94
Defining Clock Settings Using CLI Commands	95
The following is an example of CLI commands:	95
Configuring System Health Information	95
Viewing System Health Information Using the CLI Commands	96
The following is an example of the CLI commands:	97
Version Information	98
Displaying Device Versions Using the CLI	98
Resetting the Device	99
Resetting the Device	99
Resetting the Device Using the CLI	100
Configuring SNTP Settings	100
Defining SNTP Global Parameters	101
Defining SNTP Global Parameters Using CLI Commands	103
Defining SNTP Authentication Methods	104
Adding an SNTP Authentication Key	104
Displaying the Authentication Key Table	105
Deleting an Authentication Key	105
Defining SNTP Authentication Settings Using CLI Commands	106
Defining SNTP Servers	106
Adding an SNTP Server	108
Displaying the SNTP Servers Table	108
Modifying an SNTP Server	109
Deleting the SNTP Server	109
Defining SNTP Servers Using CLI Commands	109
Defining SNTP Interfaces	110
Enabling SNTP on an Interface	110
Defining SNTP Interface Settings Using CLI Commands	111
Configuring Out-of-Band (OOB) Management Ports	112
Configuring Out-of-Band Remote Log Servers	112
Sending Logs to an Out-of-Band Log Server	113
Defining a New Out-of-Band Log Server	113
Deleting an Out-of-Band Log Server	113
Configuring Out-of-Band Remote Server Logs Using the CLI Commands	113
Defining Out-of-Band Default Gateways	114
Selecting a Out-of-Band Gateway Device	114
Defining Out-of-Band IP Interface Parameters	115
Adding an IP Interface	116
Deleting IP Addresses	117
Defining IP Interfaces Using CLI Commands	117
Configuring Out-of-Band TACACS+ Servers	117
Defining TACACS+ Parameters	119
Adding a TACACS+ Server	119
Deleting a TACACS+ Server from the TACACS+ Servers List	119
Defining TACACS+ Servers Using CLI Commands	120
Configuring Out-of-Band RADIUS Servers	122
Defining Out-of-Band RADIUS Parameters	123
Adding an Out-of-Band RADIUS Server	123
Deleting an Out-of-Band RADIUS Server from the RADIUS Servers List	123
Defining RADIUS Servers Using CLI Commands	124
Managing Logs	125
Global Log Parameters	125
Enabling Logs	126
Enabling Global Logs Using the CLI	127
RAM Log Table	128
Removing Log Information	128
Viewing the RAM Log Table Using the CLI	129
Log File Table	129
Displaying the Log File Table Using the CLI	130
Remote Log Server	131
Sending Logs to a Server	132
Defining a New Server	133
Deleting a Log Server	133
Working with Remote Server Logs Using the CLI Commands	133
Defining IP Addressing	133
Defining IP Interfaces	134
Adding an IP Interface	135
Modifying IP Address Parameters	135
Deleting IP Addresses	135
Defining IP Interface Parameters Using CLI Commands	136
Defining DHCP IP Interface Parameters	137
Adding DHCP Clients	137
Modifying a DHCP IP Interface	138
Deleting a DHCP IP Interface	138
Defining DHCP IP Interfaces Using CLI Commands	138
Configuring Domain Name Systems	138
Adding a DNS Server	139
Displaying the DNS Servers Table	140
Removing DNS Servers	140
Configuring DNS Servers Using the CLI Commands	141
Defining Default Domains	141
Defining DNS Domain Names Using the CLI Commands	142
Mapping the Domain Host	143
Adding Host Domain Names	143
Displaying the Host Names Mapping Table	144
Removing a Host Name from IP Address Mapping	144
Mapping an IP Address to Domain Host Names Using the CLI Commands	144
Enabling ARP Proxy	146
Enabling ARP	146
Enabling ARP Proxy Using CLI Commands	147
Defining ARP Settings	147
Adding an ARP Table Entry	148
Modifying an ARP Table Entry	149
Deleting an ARP Table Entry	149
Configuring ARP Using the CLI Commands	150
Defining DHCP Relay Parameters	150
Enabling DHCP Relay	151
Adding a DHCP Relay Entry	151
Deleting a DHCP Relay Table Entry	152
Defining DHCP Relay Servers Using CLI Commands	152
Configuring UDP Relay	153
Adding a UDP Relay Entry	154
Modifying a UDP Relay Table Entry	155
Deleting a UDP Relay Table Entry	155
Configuring the UDP Relay Table Using CLI Commands	155
Running Cable Diagnostics	156
Viewing Copper Cable Diagnostics	156
Performing a Cable Test	157
Displaying Virtual Cable Test Results Table	157
Performing Copper Cable Tests Using CLI Commands	157
Viewing Optical Transceiver Diagnostics	158
Displaying Optical Transceiver Diagnostics Test Results Table	159
Performing Fiber Optic Cable Tests Using CLI Commands	160
Managing Device Security	160
Defining Access Profiles	160
Adding an Access Profile	162
Activating an Access Profile	163
Adding Rules to an Access Profile	163
Removing a Rule	163
Defining Access Profiles Using CLI Commands	164
Defining Authentication Profiles	165
Adding an Authentication Profile	166
Selecting an Authentication Method	166
Removing an Authentication Profiles Entry	166
Configuring an Authentication Profile Using CLI Commands	167
Selecting Authentication Profiles	167
Applying an Authentication Method List to Console Sessions	169
Applying an Authentication Profile to Telnet Sessions	169
Applying an Authentication Profile to Secure Telnet (SSH) Sessions	170
Assigning HTTP Sessions an Authentication Sequence	170
Assigning Secure HTTP Sessions an Authentication Sequence	170
Assigning Access Methods Authentication Profiles or Sequences	170
Managing Passwords	172
Defining Password Constraints	173
Defining Password Constraints Using CLI Commands	173
Defining the Local User Databases	174
Assigning Access Rights to a User	175
Adding a User to the Local User Database	175
Reactivating a Suspended User	175
Deleting Users From the Local User Database	175
Assigning Users Using CLI Commands	176
Defining Line Passwords	176
Defining Line Passwords	177
Assigning Line Passwords Using CLI Commands	177
Defining Enable Password	178
Defining a New Enable Password	178
Assigning Enable Passwords Using CLI Commands	179
Configuring TACACS+ Settings	179
Defining TACACS+ Parameters	181
Adding a TACACS+ Server	181
Deleting a TACACS+ Server from the TACACS+ Servers List	182
Defining TACACS+ Servers Using CLI Commands	182
Configuring RADIUS Settings	184
Adding a RADIUS Server	185
Defining RADIUS Parameters	185
Modifying the RADIUS Server settings	186
Deleting a RADIUS Server for the RADIUS Servers List	186
Defining RADIUS Servers Using CLI Commands	186
Defining SNMP Parameters	187
SNMP v1 and v2	187
SNMP v3	187
Defining SNMP Global Parameters	188
Enabling SNMP Notifications	189
Enabling Authentication Notifications	189
Enabling SNMP Notifications Using CLI Commands	189
Defining SNMP Views	191
Adding a View	191
Displaying the View Table	192
Removing SNMP Views	192
Defining SNMP Views Using CLI Commands	193
Defining SNMP Access Control	194
Defining SNMP Groups	195
Displaying the Access Table	196
Deleting a Group	196
Defining SNMP Access Control Using CLI Commands	196
Assigning SNMP User Security	197
Adding SNMPv3 Users to a Group	199
Viewing the User Security Model Table	199
Deleting a User Security Model Table Entry	200
Defining SNMP Users Using CLI Commands	200
Defining Communities	201
Defining a New Community	203
Deleting Communities	204
Configuring Communities Using CLI Commands	204
Defining SNMP Notification Filters	204
Adding SNMP Filters	205
Displaying the Filter Table	206
Removing a Filter	206
Configuring Notification Filters Using CLI Commands	207
Defining SNMP Notification Recipients	207
Adding a New Notification Recipient	209
Displaying the Notification Recipients Tables	210
Deleting Notification Recipients	211
Defining SNMP Notification Recipients Using CLI Commands	211
Managing Files	213
Management File Overview	213
Downloading Files	214
Downloading Files	215
Activating Image Files	215
Downloading Files Using CLI Commands	216
Uploading Files	216
Uploading Files	218
Uploading Files Using CLI Commands	218
Copying Files	218
Copying Files	219
Copying Files Using CLI Commands	219
Defining Advanced Settings	220
Configuring General Settings	220
Enabling Jumbo Packets	221
Viewing General Settings Using the CLI Commands	221
Configuring Switch Information	223
Configuring Network Security	223
Port Based Authentication (802.1x)	223
Advanced Port Based Authentication	223
Configuring Port Based Authentication	224
Displaying the Port Based Authentication Table	226
Copying Parameters in the Port Based Authentication Table	226
Enabling Port Based Authentication Using the CLI Commands	227
Configuring Advanced Port Based Authentication	229
Displaying the Multiple Hosts Table	230
Enabling Multiple Hosts Using the CLI Commands	230
Authenticating Users	231
Displaying the Authenticated Users Table	232
Displaying Authenticating Users Using the CLI Commands	232
Configuring Port Security	232
Defining a Locked Port	234
Copying Parameters in the Locked Port Table	234
Configuring Locked Port Security with CLI Commands	234
Defining IP based ACLs	235
Adding an IP based ACL	237
Modifying an IP based ACE	238
Adding New ACEs to an IP-Based ACL	238
Reordering ACEs in an ACL	238
Removing ACLs	238
Assigning IP based ACEs to ACLs Using the CLI Commands	239
Defining MAC based ACLs	240
Adding a MAC-Based ACL	241
Modifying a MAC based ACE	241
Adding ACEs to a MAC based ACL	242
Displaying ACL-Specific ACEs	242
Removing ACLs	242
Removing ACEs From an ACL	242
Assigning MAC based ACEs to ACLs Using the CLI Commands	242
Configuring ACL Binding	243
Assigning an ACL to an Interface	244
Removing an Entry from the ACL Bindings Table	244
Displaying the ACL Bindings Table	245
Copying Parameters in the ACL Bindings Table	245
Assigning ACL Membership Using the CLI Commands	245
Configuring Ports	246
Defining Port Configuration	246
Defining Port Parameters	248
Displaying the Port Table	249
Configuring Ports with CLI Commands	249
Defining LAG Configuration	252
Defining LAG Parameters	253
Displaying the LAG Configuration Table	254
Configuring LAGs with CLI Commands	254
Enabling Storm Control	255
Modifying Storm Control Port Parameters	256
Copying Parameters in the Storm Control Settings Table	256
Configuring Storm Control with CLI Commands	256
Defining Port Mirroring Sessions	257
Adding a Port Mirroring Session	258
Modifying a Port Mirroring Session	259
Deleting a Port Mirroring Session	259
Configuring a Port Mirroring Session Using CLI Commands	259
Configuring Address Tables	259
Defining Static Addresses	260
Adding a Static MAC Address	261
Modifying a Static Address in the Static MAC Address Table	261
Removing a Static Address from the Static Address Table	261
Configuring Static Address Parameters Using CLI Commands	261
Viewing Dynamic Addresses	262
Defining the Aging Time	263
Querying the Dynamic Address Table	263
Sorting the Dynamic Address Table	264
Current Address Table	264
Querying and Sorting Dynamic Addresses Using CLI Commands	264
Configuring GARP	265
Defining GARP Timers	265
Defining GARP Timers	266
Copying Parameters in the GARP Timers Table	266
Defining GARP Timers Using CLI Commands	266
Configuring the Spanning Tree Protocol	267
Defining STP Global Settings	267
Defining STP Global Parameters	269
Modifying STP Global Parameters:	269
Defining STP Global Parameters Using CLI Commands	269
Defining STP Port Settings	271
Enabling STP on a Port	273
Modifying STP Port Properties	273
Displaying the STP Port Table	273
Defining STP Port Settings Using CLI Commands	274
Defining STP LAG Settings	275
Modifying the LAG STP Parameters	276
Defining STP LAG Settings Using CLI Commands	276
Defining the Rapid Spanning Tree	278
Enabling RSTP	279
Displaying the Rapid Spanning Tree (RSTP) Table	279
Defining Rapid STP Parameters Using CLI Commands	279
Defining the Multiple Spanning Tree	279
Displaying the MSTP VLAN to Instance Mapping Table	281
Defining MST Instances Using CLI Commands	281
Defining MSTP Interface Settings	283
Viewing the MSTP Interface Table	284
Defining MSTP Interfaces Using CLI Commands	285
Configuring VLANs	286
Defining VLAN Membership	286
VLAN Membership Table	287
Adding New VLANs	288
Modifying VLAN Membership Groups	288
Deleting VLAN Membership Groups	288
Defining VLAN Membership Groups Using CLI Commands	288
VLAN Port Membership Table	289
Assigning Ports to a VLAN Group	289
Deleting a VLAN	289
Assigning Ports to VLAN Groups Using CLI Commands	290

Match case Limit results 1 per page

Configuring Switch Information

233

Configuring Switch Information

This section provides all system operations and general information for configuring network

security, ports, address tables, GARP, VLANs, Spanning Tree, Port Aggregation, and Multicast

Support.

Configuring Network Security

Use the

Network Security

page to set network security through both access control lists and locked

ports. To open the

Network Security

page, select

Switch

→

Network Security

The

Network Security

page

provides links that enable you to configure port based authentication,

port security, IP based ACLs, MAC based ACLs and ACL bindings.

Port Based Authentication (802.1x)

Port based authentication enables authenticating system users on a per port basis via an external

server. Only authenticated and approved system users can transmit and receive data. Ports are

authenticated via the RADIUS server using the Extensible Authentication Protocol (EAP).

The 802.1x network has three components:

•

Authenticators

— Specifies the port that is authenticated before permitting system access.

•

Supplicants

— Specifies host connected to the authenticated port requesting to access the

system services.

•

Authentication Server

— Specifies the external server, for example, the RADIUS server that

performs the authentication on behalf of the authenticator, and indicates whether the user is

authorized to access system services.

Port based authentication creates two access states:

•

Controlled Access

— Permits communication between the user and the system, if the user is

authorized.

•

Uncontrolled Access

— Permits uncontrolled communication regardless of the port state.

The device currently supports Port Based Authentication via RADIUS servers.

Advanced Port Based Authentication

Advanced Port Based Authentication enables multiple hosts to be attached to a single port.

Advanced Port Based Authentication requires only one host to be authorized for all hosts to have

system access. If the port is unauthorized all attached hosts are denied access to the network.