Home » Dell Manuals » Hubs & Switches » Dell PowerConnect J-8216 » Manual Viewer

Dell PowerConnect J-8216 Software Guide for JUNOS version 10.3 - Page 2674

Configuring IP Source Guard with 802.1X Authentication, DHCP Snooping, and Dynamic ARP Inspection

View all Dell PowerConnect J-8216 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 2674 highlights

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS configured with dhcp-trusted so that a DHCP server can be connected to that interface to provide dynamic IP addresses. IP source guard obtains information about IP-address/MAC-address/VLAN bindings from the DHCP snooping database. It causes the switch to validate incoming IP packets against the entries in that database. The topology for this example includes a J-EX4200-24P switch, a connection to a DHCP server, and a connection to a RADIUS server for user authentication. NOTE: The 802.1X user authentication applied in this example is for single supplicants. Single-secure supplicant mode and multiple supplicant mode do not work with IP source guard. For more information about 802.1X authentication, see "Understanding Authentication on J-EX Series Switches" on page 2248. In the first example configuration, two clients (network devices) are connected to an access switch. You configure IP source guard and 802.1X user authentication, in combination with two access port security features: DHCP snooping and dynamic ARP inspection (DAI). This setup is designed to protect the switch from IP attacks such as "ping of death" attacks, DHCP starvation, and ARP spoofing. In the second example configuration, the switch is configured for 802.1X user authentication. If the client fails authentication, the switch redirects the client to a guest VLAN that allows this client to access a set of restricted network features. You configure IP source guard on the guest VLAN to mitigate effects of source IP spoofing. NOTE: Control-plane rate limiting is achieved by restricting CPU control-plane protection. It can be used in conjunction with storm control (see "Understanding Storm Control on J-EX Series Switches" on page 2511) to limit data-plane activity. TIP: You can set the ip-source-guard flag in the traceoptions statement for debugging purposes. Configuring IP Source Guard with 802.1X Authentication, DHCP Snooping, and Dynamic ARP Inspection CLI Quick Configuration To quickly configure IP source guard with 802.1X authentication and with other access port security features, copy the following commands and paste them into the switch terminal window: [edit] set ethernet-switching-options secure-access-port interface ge-0/0/24 dhcp-trusted set ethernet-switching-options secure-access-port vlan data examine-dhcp set ethernet-switching-options secure-access-port vlan data arp-inspection set ethernet-switching-options secure-access-port vlan data ip-source-guard 2602

Section	Page
Table of Contents	7
About This Guide	69
How to Use This Guide	69
Downloading Software	70
Documentation Conventions	70
Repair and Warranty	71
Requesting Technical Support	71
Part 1: Junos OS for J-EX Series Switches Product Overview	73
Chapter 1: Software Overview	75
J-EX Series Switch Software Features Overview	75
Layer 3 Protocols Supported on J-EX Series Switches	85
Layer 3 Protocols Not Supported on J-EX Series Switches	86
Security Features for J-EX Series Switches Overview	88
High Availability Features for J-EX Series Switches Overview	90
VRRP	90
Graceful Protocol Restart	91
Redundant Routing Engines	91
Graceful Routing Engine Switchover	92
Virtual Chassis Software Upgrade and Failover Features	92
Link Aggregation	92
Understanding Software Infrastructure and Processes	94
Routing Engine and Packet Forwarding Engine	94
Junos OS Processes	95
Chapter 2: Supported Hardware	97
J-EX4200 Switches Hardware Overview	97
J-EX4200 Switches	97
Uplink Modules	98
Power over Ethernet (PoE) Ports	98
J-EX4200 Switch Models	98
J-EX8208 Switch Hardware Overview	99
Software	99
Chassis Physical Specifications	99
Routing Engines and Switch Fabric	100
Line Cards	101
Cooling System	101
Power Supplies	101
J-EX8216 Switch Hardware Overview	102
Software	102
Chassis Physical Specifications, LCD Panel, and Midplane	102
Routing Engines and Switch Fabric	104
Line Cards	105
Cooling System	105
Power Supplies	106
Part 2: Complete Software Configuration Statement Hierarchy	107
Chapter 3: Complete Software Configuration Statement Hierarchy	109
[edit access] Configuration Statement Hierarchy	109
[edit chassis] Configuration Statement Hierarchy	110
[edit class-of-service] Configuration Statement Hierarchy	110
[edit ethernet-switching-options] Configuration Statement Hierarchy	112
[edit firewall] Configuration Statement Hierarchy	114
[edit forwarding-options] Configuration Statement Hierarchy	115
[edit interfaces] Configuration Statement Hierarchy	116
[edit poe] Configuration Statement Hierarchy	120
[edit protocols] Configuration Statement Hierarchy	120
[edit routing-instances] Configuration Hierarchy	127
[edit snmp] Configuration Statement Hierarchy	127
[edit virtual-chassis] Configuration Statement Hierarchy	127
[edit vlans] Configuration Statement Hierarchy	128
Part 3: Software Installation	131
Chapter 4: Software Installation Overview	133
Installation Overview	133
Understanding Software Installation on J-EX Series Switches	133
Overview of the Software Installation Process	133
Software Package Security	134
Installing Software on a Virtual Chassis	134
Installing Software on J-EX8200 Switches with Redundant Routing Engines	134
Installing Software Using Automatic Software Download	135
Troubleshooting Software Installation	135
Junos OS Package Names	135
Understanding System Snapshot on J-EX Series Switches	136
Licenses Overview	137
Understanding Software Licenses for the J-EX Series Switch	137
Features Requiring a License	137
License Warning Messages	138
License Key Components for the J-EX Series Switch	138
Chapter 5: Installing Junos OS	141
Downloading Software Packages	141
Installing Software on a J-EX Series Switch with a Single Routing Engine (CLI Procedure)	142
Installing Software on a J-EX8200 Switch with Redundant Routing Engines (CLI Procedure)	143
Preparing the Switch for the Software Installation	144
Installing Software on the Backup Routing Engine	145
Installing Software on the Default Master Routing Engine	146
Returning Routing Control to the Default Master Routing Engine (Optional)	147
Installing Software on J-EX Series Switches (J-Web Procedure)	147
Installing Software Upgrades from a Server	148
Installing Software Upgrades by Uploading Files	149
Rebooting or Halting the J-EX Series Switch (J-Web Procedure)	149
Chapter 6: Booting the Switch, Upgrading Software, and Managing Licenses	151
Booting the Switch	151
Booting a J-EX Series Switch Using a Software Package Stored on a USB Flash Drive	151
Creating a Snapshot and Using It to Boot a J-EX Series Switch	152
Creating a Snapshot on a USB Flash Drive and Using It to Boot the Switch	152
Creating a Snapshot on an Internal Flash Drive and Using it to Boot the Switch	153
Upgrading Software	154
Upgrading Software Using Automatic Software Download on J-EX Series Switches	154
Managing Licenses	155
Managing Licenses for the J-EX Series Switch (CLI Procedure)	155
Adding New Licenses	155
Deleting Licenses	156
Saving License Keys	156
Managing Licenses for the J-EX Series Switch (J-Web Procedure)	156
Adding New Licenses	157
Deleting Licenses	157
Displaying License Keys	158
Downloading Licenses	158
Chapter 7: Verifying Software Installation	159
Routine Monitoring	159
Verifying That Automatic Software Download Is Working Correctly	159
Verifying That a System Snapshot Was Created on a J-EX Series Switch	160
Monitoring Licenses	160
Monitoring Licenses for the J-EX Series Switch	160
Displaying Installed Licenses and License Usage Details	161
Displaying Installed License Keys	162
Chapter 8: Troubleshooting Software Installation	163
Troubleshooting Software Installation	163
Recovering from a Failed Software Upgrade on a J-EX Series Switch	163
Rebooting from the Inactive Partition	164
Chapter 9: Configuration Statements for Software Installation	167
[edit chassis] Configuration Statement Hierarchy	167
auto-image-upgrade	168
Chapter 10: Operational Mode Commands for Software Installation	169
request system license add	170
request system license delete	171
request system license save	172
request system reboot	173
request system reboot	176
request system snapshot	178
request system software add	180
request system software delete	183
request system software rollback	185
request system software validate	187
show system autoinstallation status	189
show system boot-messages	190
show system license	191
show system snapshot	194
Part 4: User Interfaces	197
Chapter 11: User Interfaces Overview	199
User Interfaces—Overview	199
CLI User Interface Overview	199
CLI Overview	199
CLI Help and Command Completion	199
CLI Command Modes	200
J-Web User Interface for J-EX Series Switches Overview	201
Understanding J-Web Configuration Tools	203
Understanding J-Web User Interface Sessions	205
Chapter 12: Using the Configuration Tools	207
Using the CLI Terminal	207
Starting the J-Web Interface	208
Chapter 13: Operational Mode Commands for User Interfaces	209
set cli complete-on-space	210
set cli directory	211
set cli idle-timeout	212
set cli prompt	213
set cli restart-on-upgrade	214
set cli screen-length	215
set cli screen-width	216
set cli terminal	217
set cli timestamp	218
show cli	219
show cli authorization	221
show cli directory	224
show cli history	225
start shell	226
Part 5: Junos OS for J-EX Series Switches System Setup	227
Chapter 14: System Setup Overview	229
Junos OS—Overview	229
J-EX Series Switch Software Features Overview	229
Understanding Software Infrastructure and Processes	230
Routing Engine and Packet Forwarding Engine	230
Junos OS Processes	230
Chapter 15: Initial Configuration	233
Connecting and Configuring a J-EX Series Switch (CLI Procedure)	233
Connecting and Configuring a J-EX Series Switch (J-Web Procedure)	235
Configuring the LCD Panel on J-EX Series Switches (CLI Procedure)	238
Disabling or Enabling Menus and Menu Options on the LCD Panel	238
Configuring a Custom Display Message	239
Configuring Date and Time for the J-EX Series Switch (J-Web Procedure)	239
Configuring System Identity for a J-EX Series Switch (J-Web Procedure)	240
Chapter 16: Configuration Statements for System Setup	243
arp	243
authentication-key	244
auxiliary	245
boot-server (NTP)	245
broadcast	246
broadcast-client	247
console (Physical Port)	248
default-address-selection	249
domain-name (Router)	249
gre-path-mtu-discovery	250
host-name	250
icmpv4-rate-limit	251
icmpv6-rate-limit	252
inet6-backup-router	253
internet-options	254
ipip-path-mtu-discovery	255
ipv6-duplicate-addr-detection-transmits	255
ipv6-path-mtu-discovery	256
ipv6-path-mtu-discovery-timeout	256
ipv6-reject-zero-hop-limit	257
lcd-menu	258
location	259
menu-item	260
multicast-client	261
no-multicast-echo	262
no-ping-record-route	262
no-ping-time-stamp	263
no-redirects	263
no-tcp-rfc1323	264
no-tcp-rfc1323-paws	264
ntp	265
path-mtu-discovery	265
peer	266
ports	267
processes	268
server (NTP)	269
tcp-drop-synfin-set	269
traceoptions (SBC Configuration Process)	270
trusted-key	272
Chapter 17: Operational Mode Commands for System Setup	273
clear chassis display message	274
clear system reboot	276
configure	278
op	279
request chassis pic	281
request chassis routing-engine master	282
request system halt	284
request system logout	287
request system power-off	288
request system reboot	290
request system reboot	293
request system scripts convert	295
request system scripts refresh-from commit	296
request system scripts refresh-from event	297
request system scripts refresh-from op	298
request system storage cleanup	299
restart	301
set chassis display message	305
set date	307
show chassis firmware	308
show chassis lcd	310
show configuration	316
show host	319
show ntp associations	320
show ntp status	322
show system firmware	323
show system reboot	324
show system snapshot	326
show system software	328
show system storage	330
show system switchover	332
show system uptime	334
show system users	336
show system virtual-memory	338
show task replication	367
show version	368
Part 6: Junos OS for J-EX Series Switches Power Management	371
Chapter 18: Power Management Overview	373
Junos OS—Overview	373
J-EX Series Switch Software Features Overview	373
Power Management	374
Understanding Power Management on J-EX Series Switches	374
Power Priority of Line Cards	375
Power Supply Redundancy	376
Chapter 19: Initial Configuration	379
Configuring Power Supply Redundancy (CLI Procedure)	379
Configuring the Power Priority of Line Cards (CLI Procedure)	380
Chapter 20: Verifying Power Management	381
Verifying Power Configuration and Use	381
Chapter 21: Configuration Statements for Power Management	383
fpc	384
n-plus-n	385
power-budget-priority	385
psu	386
redundancy	386
Chapter 22: Operational Mode Commands for Power Management	387
show chassis power-budget-statistics	388
Part 7: Junos OS for J-EX Series Switches Configuration Management	391
Chapter 23: Configuration Management Overview	393
Configuration Files—Overview	393
Understanding Configuration Files for J-EX Series Switches	393
Configuration Files Terms	394
Understanding Automatic Refreshing of Scripts on J-EX Series Switches	395
Understanding Autoinstallation of Configuration Files on J-EX Series Switches	395
Typical Uses for Autoinstallation	395
Autoinstallation Configuration Files and IP Addresses	396
Typical Autoinstallation Process on a New Switch	396
J-EX Series Switches Default Configuration	397
J-EX4200 Default Configuration	397
J-EX8200 Switch Default Configuration	401
Chapter 24: Managing Junos OS Configuration	403
Using the Configuration Tools in J-Web	403
Using the CLI Viewer in the J-Web Interface to View Configuration Text	403
Using the CLI Editor in the J-Web Interface to Edit Configuration Text	403
Using the Point and Click CLI Tool in the J-Web Interface to Edit Configuration Text	404
Using the Commit Options to Commit Configuration Changes (J-Web Procedure)	406
Managing Junos OS Configuration	407
Uploading a Configuration File (CLI Procedure)	408
Uploading a Configuration File (J-Web Procedure)	409
Managing Configuration Files Through the Configuration History (J-Web Procedure)	410
Displaying Configuration History	410
Displaying Users Editing the Configuration	411
Comparing Configuration Files with the J-Web Interface	411
Downloading a Configuration File with the J-Web Interface	412
Loading a Previous Configuration File with the J-Web Interface	412
Loading a Previous Configuration File (CLI Procedure)	412
Reverting to the Default Factory Configuration for the J-EX Series Switch	413
Reverting to the Default Factory Configuration by Using the LCD Panel	414
Reverting to the Default Factory Configuration by Using the Load Factory Default Command	414
Reverting to the Rescue Configuration for the J-EX Series Switch	415
Setting or Deleting the Rescue Configuration (CLI Procedure)	416
Setting or Deleting the Rescue Configuration (J-Web Procedure)	417
Configuring Autoinstallation of Configuration Files (CLI Procedure)	417
Chapter 25: Verifying Configuration	421
Verifying Autoinstallation Status on a J-EX Series Switch	421
Chapter 26: Configuration Statements for Configuration Management	423
archival	423
archive-sites (Configuration File)	424
autoinstallation	425
commit synchronize	426
configuration	427
configuration-servers	428
interfaces	429
transfer-interval (Configuration)	430
transfer-on-commit	430
Chapter 27: Operational Mode Commands for Configuration Management	431
clear log	432
clear system commit	433
file archive	434
file checksum md5	436
file checksum sha1	437
file checksum sha-256	438
file compare	439
file copy	442
file delete	443
file list	444
file rename	445
file show	447
request system configuration rescue delete	448
request system configuration rescue save	449
request system scripts refresh-from commit	450
request system scripts refresh-from event	451
request system scripts refresh-from op	452
show system commit	453
show system configuration archival	455
show system configuration rescue	456
show system rollback	457
test configuration	459
Part 8: User and Access Management on J-EX Series Switches	461
Chapter 28: User and Access Management on J-EX Series Switches Overview	463
J-EX Series Switch Software Features Overview	463
Understanding Software Infrastructure and Processes	464
Routing Engine and Packet Forwarding Engine	464
Junos OS Processes	464
Chapter 29: User Access Management Configuration	467
Configuring Management Access for the J-EX Series Switch (J-Web Procedure)	467
Generating SSL Certificates to Be Used for Secure Web Access	470
Configuring MS-CHAPv2 to Provide Password-Change Support (CLI Procedure)	471
Chapter 30: Monitoring Users	473
Managing Users (J-Web Procedure)	473
Chapter 31: Troubleshooting User Access Management	477
Troubleshooting Loss of the Root Password	477
Chapter 32: Configuration Statements for User and Access Management	481
allow-commands	481
allow-configuration	482
announcement	482
authentication (Login)	483
authentication-order	484
change-type	485
class (Assigning a Class to an Individual User)	485
class (Defining Login Classes)	486
deny-commands	487
deny-configuration	488
format	489
full-name	489
idle-timeout	490
login	491
login-alarms	492
login-tip	492
maximum-length	493
message	493
minimum-changes	494
minimum-length	495
password (Login)	495
permissions	496
radius-options	496
retry-options	497
root-authentication	498
root-login	499
tacplus-options	500
tacplus-server	501
traceoptions (Address-Assignment Pool)	502
uid	503
user (Access)	504
Chapter 33: Operational Mode Commands for User and Access Management	505
request message	506
show subscribers	507
Part 9: Junos OS for J-EX Series Switches System Services	515
Chapter 34: System Services Overview	517
DHCP Overview	517
DHCP Services for J-EX Series Switches Overview	517
DHCP/BOOTP Relay for J-EX Series Switches Overview	518
Chapter 35: System Services Configuration	519
Configuring DHCP Services (J-Web Procedure)	519
Configuring a DHCP SIP Server (CLI Procedure)	522
Chapter 36: Monitoring System Services	523
Monitoring DHCP Services	523
Chapter 37: Configuration Statements for System Services	527
boot-file	527
boot-server (DHCP)	528
bootp	529
ca-name	530
cache-size	530
cache-timeout-negative	531
certificates	532
certification-authority	533
client-identifier	533
connection-limit	534
crl (Encryption Interface)	535
default-lease-time	535
description	536
dhcp	537
domain	538
domain-name (DHCP)	538
domain-search	539
encoding	539
enrollment-retry	540
enrollment-url	540
file	541
ftp	541
helpers	542
http	544
https	545
interface (BOOTP)	546
interface (DNS and TFTP Packet Forwarding or Relay Agent)	547
ldap-url	547
load-key-file	548
local	549
local-certificate	550
maximum-certificates	550
maximum-hop-count	551
maximum-lease-time	551
minimum-wait-time	552
name-server	552
no-listen	553
outbound-ssh	554
path-length	556
pool	557
port (HTTP/HTTPS)	558
port (SRC Server)	558
protocol-version	559
rate-limit	559
server (DHCP and BOOTP Relay Agent)	560
server (DNS and TFTP Service)	561
server-identifier	562
servers	563
service-deployment	563
services	564
session	566
sip-server	567
source-address (SRC Software)	567
source-address-giaddr	568
ssh	568
static-binding	569
telnet	570
tftp	570
traceoptions	571
traceoptions (DHCP Server)	573
traceoptions (DNS and TFTP Packet Forwarding)	576
web-management	578
wins-server	579
Chapter 38: Operational Mode Commands for System Services	581
clear system services dhcp binding	582
clear system services dhcp conflict	583
clear system services dhcp statistics	584
request ipsec switch	585
request security certificate (signed)	586
request security key-pair	587
request security certificate (unsigned)	588
show system services dhcp binding	589
show system services dhcp conflict	591
show system services dhcp global	592
show system services dhcp pool	594
show system services dhcp statistics	596
show system services service-deployment	598
ssh	599
telnet	601
Part 10: Junos OS for J-EX Series Switches System Monitoring	603
Chapter 39: System Monitoring Overview	605
Understanding Alarm Types and Severity Levels on J-EX Series Switches	605
Dashboard for J-EX Series Switches	606
System Information Panel	607
Health Status Panel	607
Capacity Utilization Panel	608
Alarms Panel	608
Chassis Viewer	609
Chapter 40: Administering and Monitoring System Functions	613
Monitoring System Log Messages	613
Checking Active Alarms with the J-Web Interface	616
Monitoring Chassis Alarms for a J-EX8200 Switch	617
Monitoring Switch Control Traffic	620

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1,000
1,001
1,002
1,003
1,004
1,005
1,006
1,007
1,008
1,009
1,010
1,011
1,012
1,013
1,014
1,015
1,016
1,017
1,018
1,019
1,020
1,021
1,022
1,023
1,024
1,025
1,026
1,027
1,028
1,029
1,030
1,031
1,032
1,033
1,034
1,035
1,036
1,037
1,038
1,039
1,040
1,041
1,042
1,043
1,044
1,045
1,046
1,047
1,048
1,049
1,050
1,051
1,052
1,053
1,054
1,055
1,056
1,057
1,058
1,059
1,060
1,061
1,062
1,063
1,064
1,065
1,066
1,067
1,068
1,069
1,070
1,071
1,072
1,073
1,074
1,075
1,076
1,077
1,078
1,079
1,080
1,081
1,082
1,083
1,084
1,085
1,086
1,087
1,088
1,089
1,090
1,091
1,092
1,093
1,094
1,095
1,096
1,097
1,098
1,099
1,100
1,101
1,102
1,103
1,104
1,105
1,106
1,107
1,108
1,109
1,110
1,111
1,112
1,113
1,114
1,115
1,116
1,117
1,118
1,119
1,120
1,121
1,122
1,123
1,124
1,125
1,126
1,127
1,128
1,129
1,130
1,131
1,132
1,133
1,134
1,135
1,136
1,137
1,138
1,139
1,140
1,141
1,142
1,143
1,144
1,145
1,146
1,147
1,148
1,149
1,150
1,151
1,152
1,153
1,154
1,155
1,156
1,157
1,158
1,159
1,160
1,161
1,162
1,163
1,164
1,165
1,166
1,167
1,168
1,169
1,170
1,171
1,172
1,173
1,174
1,175
1,176
1,177
1,178
1,179
1,180
1,181
1,182
1,183
1,184
1,185
1,186
1,187
1,188
1,189
1,190
1,191
1,192
1,193
1,194
1,195
1,196
1,197
1,198
1,199
1,200
1,201
1,202
1,203
1,204
1,205
1,206
1,207
1,208
1,209
1,210
1,211
1,212
1,213
1,214
1,215
1,216
1,217
1,218
1,219
1,220
1,221
1,222
1,223
1,224
1,225
1,226
1,227
1,228
1,229
1,230
1,231
1,232
1,233
1,234
1,235
1,236
1,237
1,238
1,239
1,240
1,241
1,242
1,243
1,244
1,245
1,246
1,247
1,248
1,249
1,250
1,251
1,252
1,253
1,254
1,255
1,256
1,257
1,258
1,259
1,260
1,261
1,262
1,263
1,264
1,265
1,266
1,267
1,268
1,269
1,270
1,271
1,272
1,273
1,274
1,275
1,276
1,277
1,278
1,279
1,280
1,281
1,282
1,283
1,284
1,285
1,286
1,287
1,288
1,289
1,290
1,291
1,292
1,293
1,294
1,295
1,296
1,297
1,298
1,299
1,300
1,301
1,302
1,303
1,304
1,305
1,306
1,307
1,308
1,309
1,310
1,311
1,312
1,313
1,314
1,315
1,316
1,317
1,318
1,319
1,320
1,321
1,322
1,323
1,324
1,325
1,326
1,327
1,328
1,329
1,330
1,331
1,332
1,333
1,334
1,335
1,336
1,337
1,338
1,339
1,340
1,341
1,342
1,343
1,344
1,345
1,346
1,347
1,348
1,349
1,350
1,351
1,352
1,353
1,354
1,355
1,356
1,357
1,358
1,359
1,360
1,361
1,362
1,363
1,364
1,365
1,366
1,367
1,368
1,369
1,370
1,371
1,372
1,373
1,374
1,375
1,376
1,377
1,378
1,379
1,380
1,381
1,382
1,383
1,384
1,385
1,386
1,387
1,388
1,389
1,390
1,391
1,392
1,393
1,394
1,395
1,396
1,397
1,398
1,399
1,400
1,401
1,402
1,403
1,404
1,405
1,406
1,407
1,408
1,409
1,410
1,411
1,412
1,413
1,414
1,415
1,416
1,417
1,418
1,419
1,420
1,421
1,422
1,423
1,424
1,425
1,426
1,427
1,428
1,429
1,430
1,431
1,432
1,433
1,434
1,435
1,436
1,437
1,438
1,439
1,440
1,441
1,442
1,443
1,444
1,445
1,446
1,447
1,448
1,449
1,450
1,451
1,452
1,453
1,454
1,455
1,456
1,457
1,458
1,459
1,460
1,461
1,462
1,463
1,464
1,465
1,466
1,467
1,468
1,469
1,470
1,471
1,472
1,473
1,474
1,475
1,476
1,477
1,478
1,479
1,480
1,481
1,482
1,483
1,484
1,485
1,486
1,487
1,488
1,489
1,490
1,491
1,492
1,493
1,494
1,495
1,496
1,497
1,498
1,499
1,500
1,501
1,502
1,503
1,504
1,505
1,506
1,507
1,508
1,509
1,510
1,511
1,512
1,513
1,514
1,515
1,516
1,517
1,518
1,519
1,520
1,521
1,522
1,523
1,524
1,525
1,526
1,527
1,528
1,529
1,530
1,531
1,532
1,533
1,534
1,535
1,536
1,537
1,538
1,539
1,540
1,541
1,542
1,543
1,544
1,545
1,546
1,547
1,548
1,549
1,550
1,551
1,552
1,553
1,554
1,555
1,556
1,557
1,558
1,559
1,560
1,561
1,562
1,563
1,564
1,565
1,566
1,567
1,568
1,569
1,570
1,571
1,572
1,573
1,574
1,575
1,576
1,577
1,578
1,579
1,580
1,581
1,582
1,583
1,584
1,585
1,586
1,587
1,588
1,589
1,590
1,591
1,592
1,593
1,594
1,595
1,596
1,597
1,598
1,599
1,600
1,601
1,602
1,603
1,604
1,605
1,606
1,607
1,608
1,609
1,610
1,611
1,612
1,613
1,614
1,615
1,616
1,617
1,618
1,619
1,620
1,621
1,622
1,623
1,624
1,625
1,626
1,627
1,628
1,629
1,630
1,631
1,632
1,633
1,634
1,635
1,636
1,637
1,638
1,639
1,640
1,641
1,642
1,643
1,644
1,645
1,646
1,647
1,648
1,649
1,650
1,651
1,652
1,653
1,654
1,655
1,656
1,657
1,658
1,659
1,660
1,661
1,662
1,663
1,664
1,665
1,666
1,667
1,668
1,669
1,670
1,671
1,672
1,673
1,674
1,675
1,676
1,677
1,678
1,679
1,680
1,681
1,682
1,683
1,684
1,685
1,686
1,687
1,688
1,689
1,690
1,691
1,692
1,693
1,694
1,695
1,696
1,697
1,698
1,699
1,700
1,701
1,702
1,703
1,704
1,705
1,706
1,707
1,708
1,709
1,710
1,711
1,712
1,713
1,714
1,715
1,716
1,717
1,718
1,719
1,720
1,721
1,722
1,723
1,724
1,725
1,726
1,727
1,728
1,729
1,730
1,731
1,732
1,733
1,734
1,735
1,736
1,737
1,738
1,739
1,740
1,741
1,742
1,743
1,744
1,745
1,746
1,747
1,748
1,749
1,750
1,751
1,752
1,753
1,754
1,755
1,756
1,757
1,758
1,759
1,760
1,761
1,762
1,763
1,764
1,765
1,766
1,767
1,768
1,769
1,770
1,771
1,772
1,773
1,774
1,775
1,776
1,777
1,778
1,779
1,780
1,781
1,782
1,783
1,784
1,785
1,786
1,787
1,788
1,789
1,790
1,791
1,792
1,793
1,794
1,795
1,796
1,797
1,798
1,799
1,800
1,801
1,802
1,803
1,804
1,805
1,806
1,807
1,808
1,809
1,810
1,811
1,812
1,813
1,814
1,815
1,816
1,817
1,818
1,819
1,820
1,821
1,822
1,823
1,824
1,825
1,826
1,827
1,828
1,829
1,830
1,831
1,832
1,833
1,834
1,835
1,836
1,837
1,838
1,839
1,840
1,841
1,842
1,843
1,844
1,845
1,846
1,847
1,848
1,849
1,850
1,851
1,852
1,853
1,854
1,855
1,856
1,857
1,858
1,859
1,860
1,861
1,862
1,863
1,864
1,865
1,866
1,867
1,868
1,869
1,870
1,871
1,872
1,873
1,874
1,875
1,876
1,877
1,878
1,879
1,880
1,881
1,882
1,883
1,884
1,885
1,886
1,887
1,888
1,889
1,890
1,891
1,892
1,893
1,894
1,895
1,896
1,897
1,898
1,899
1,900
1,901
1,902
1,903
1,904
1,905
1,906
1,907
1,908
1,909
1,910
1,911
1,912
1,913
1,914
1,915
1,916
1,917
1,918
1,919
1,920
1,921
1,922
1,923
1,924
1,925
1,926
1,927
1,928
1,929
1,930
1,931
1,932
1,933
1,934
1,935
1,936
1,937
1,938
1,939
1,940
1,941
1,942
1,943
1,944
1,945
1,946
1,947
1,948
1,949
1,950
1,951
1,952
1,953
1,954
1,955
1,956
1,957
1,958
1,959
1,960
1,961
1,962
1,963
1,964
1,965
1,966
1,967
1,968
1,969
1,970
1,971
1,972
1,973
1,974
1,975
1,976
1,977
1,978
1,979
1,980
1,981
1,982
1,983
1,984
1,985
1,986
1,987
1,988
1,989
1,990
1,991
1,992
1,993
1,994
1,995
1,996
1,997
1,998
1,999
2,000
2,001
2,002
2,003
2,004
2,005
2,006
2,007
2,008
2,009
2,010
2,011
2,012
2,013
2,014
2,015
2,016
2,017
2,018
2,019
2,020
2,021
2,022
2,023
2,024
2,025
2,026
2,027
2,028
2,029
2,030
2,031
2,032
2,033
2,034
2,035
2,036
2,037
2,038
2,039
2,040
2,041
2,042
2,043
2,044
2,045
2,046
2,047
2,048
2,049
2,050
2,051
2,052
2,053
2,054
2,055
2,056
2,057
2,058
2,059
2,060
2,061
2,062
2,063
2,064
2,065
2,066
2,067
2,068
2,069
2,070
2,071
2,072
2,073
2,074
2,075
2,076
2,077
2,078
2,079
2,080
2,081
2,082
2,083
2,084
2,085
2,086
2,087
2,088
2,089
2,090
2,091
2,092
2,093
2,094
2,095
2,096
2,097
2,098
2,099
2,100
2,101
2,102
2,103
2,104
2,105
2,106
2,107
2,108
2,109
2,110
2,111
2,112
2,113
2,114
2,115
2,116
2,117
2,118
2,119
2,120
2,121
2,122
2,123
2,124
2,125
2,126
2,127
2,128
2,129
2,130
2,131
2,132
2,133
2,134
2,135
2,136
2,137
2,138
2,139
2,140
2,141
2,142
2,143
2,144
2,145
2,146
2,147
2,148
2,149
2,150
2,151
2,152
2,153
2,154
2,155
2,156
2,157
2,158
2,159
2,160
2,161
2,162
2,163
2,164
2,165
2,166
2,167
2,168
2,169
2,170
2,171
2,172
2,173
2,174
2,175
2,176
2,177
2,178
2,179
2,180
2,181
2,182
2,183
2,184
2,185
2,186
2,187
2,188
2,189
2,190
2,191
2,192
2,193
2,194
2,195
2,196
2,197
2,198
2,199
2,200
2,201
2,202
2,203
2,204
2,205
2,206
2,207
2,208
2,209
2,210
2,211
2,212
2,213
2,214
2,215
2,216
2,217
2,218
2,219
2,220
2,221
2,222
2,223
2,224
2,225
2,226
2,227
2,228
2,229
2,230
2,231
2,232
2,233
2,234
2,235
2,236
2,237
2,238
2,239
2,240
2,241
2,242
2,243
2,244
2,245
2,246
2,247
2,248
2,249
2,250
2,251
2,252
2,253
2,254
2,255
2,256
2,257
2,258
2,259
2,260
2,261
2,262
2,263
2,264
2,265
2,266
2,267
2,268
2,269
2,270
2,271
2,272
2,273
2,274
2,275
2,276
2,277
2,278
2,279
2,280
2,281
2,282
2,283
2,284
2,285
2,286
2,287
2,288
2,289
2,290
2,291
2,292
2,293
2,294
2,295
2,296
2,297
2,298
2,299
2,300
2,301
2,302
2,303
2,304
2,305
2,306
2,307
2,308
2,309
2,310
2,311
2,312
2,313
2,314
2,315
2,316
2,317
2,318
2,319
2,320
2,321
2,322
2,323
2,324
2,325
2,326
2,327
2,328
2,329
2,330
2,331
2,332
2,333
2,334
2,335
2,336
2,337
2,338
2,339
2,340
2,341
2,342
2,343
2,344
2,345
2,346
2,347
2,348
2,349
2,350
2,351
2,352
2,353
2,354
2,355
2,356
2,357
2,358
2,359
2,360
2,361
2,362
2,363
2,364
2,365
2,366
2,367
2,368
2,369
2,370
2,371
2,372
2,373
2,374
2,375
2,376
2,377
2,378
2,379
2,380
2,381
2,382
2,383
2,384
2,385
2,386
2,387
2,388
2,389
2,390
2,391
2,392
2,393
2,394
2,395
2,396
2,397
2,398
2,399
2,400
2,401
2,402
2,403
2,404
2,405
2,406
2,407
2,408
2,409
2,410
2,411
2,412
2,413
2,414
2,415
2,416
2,417
2,418
2,419
2,420
2,421
2,422
2,423
2,424
2,425
2,426
2,427
2,428
2,429
2,430
2,431
2,432
2,433
2,434
2,435
2,436
2,437
2,438
2,439
2,440
2,441
2,442
2,443
2,444
2,445
2,446
2,447
2,448
2,449
2,450
2,451
2,452
2,453
2,454
2,455
2,456
2,457
2,458
2,459
2,460
2,461
2,462
2,463
2,464
2,465
2,466
2,467
2,468
2,469
2,470
2,471
2,472
2,473
2,474
2,475
2,476
2,477
2,478
2,479
2,480
2,481
2,482
2,483
2,484
2,485
2,486
2,487
2,488
2,489
2,490
2,491
2,492
2,493
2,494
2,495
2,496
2,497
2,498
2,499
2,500
2,501
2,502
2,503
2,504
2,505
2,506
2,507
2,508
2,509
2,510
2,511
2,512
2,513
2,514
2,515
2,516
2,517
2,518
2,519
2,520
2,521
2,522
2,523
2,524
2,525
2,526
2,527
2,528
2,529
2,530
2,531
2,532
2,533
2,534
2,535
2,536
2,537
2,538
2,539
2,540
2,541
2,542
2,543
2,544
2,545
2,546
2,547
2,548
2,549
2,550
2,551
2,552
2,553
2,554
2,555
2,556
2,557
2,558
2,559
2,560
2,561
2,562
2,563
2,564
2,565
2,566
2,567
2,568
2,569
2,570
2,571
2,572
2,573
2,574
2,575
2,576
2,577
2,578
2,579
2,580
2,581
2,582
2,583
2,584
2,585
2,586
2,587
2,588
2,589
2,590
2,591
2,592
2,593
2,594
2,595
2,596
2,597
2,598
2,599
2,600
2,601
2,602
2,603
2,604
2,605
2,606
2,607
2,608
2,609
2,610
2,611
2,612
2,613
2,614
2,615
2,616
2,617
2,618
2,619
2,620
2,621
2,622
2,623
2,624
2,625
2,626
2,627
2,628
2,629
2,630
2,631
2,632
2,633
2,634
2,635
2,636
2,637
2,638
2,639
2,640
2,641
2,642
2,643
2,644
2,645
2,646
2,647
2,648
2,649
2,650
2,651
2,652
2,653
2,654
2,655
2,656
2,657
2,658
2,659
2,660
2,661
2,662
2,663
2,664
2,665
2,666
2,667
2,668
2,669
2,670
2,671
2,672
2,673
2,674
2,675
2,676
2,677
2,678
2,679
2,680
2,681
2,682
2,683
2,684
2,685
2,686
2,687
2,688
2,689
2,690
2,691
2,692
2,693
2,694
2,695
2,696
2,697
2,698
2,699
2,700
2,701
2,702
2,703
2,704
2,705
2,706
2,707
2,708
2,709
2,710
2,711
2,712
2,713
2,714
2,715
2,716
2,717
2,718
2,719
2,720
2,721
2,722
2,723
2,724
2,725
2,726
2,727
2,728
2,729
2,730
2,731
2,732
2,733
2,734
2,735
2,736
2,737
2,738
2,739
2,740
2,741
2,742
2,743
2,744
2,745
2,746
2,747
2,748
2,749
2,750
2,751
2,752
2,753
2,754
2,755
2,756
2,757
2,758
2,759
2,760
2,761
2,762
2,763
2,764
2,765
2,766
2,767
2,768
2,769
2,770
2,771
2,772
2,773
2,774
2,775
2,776
2,777
2,778
2,779
2,780
2,781
2,782
2,783
2,784
2,785
2,786
2,787
2,788
2,789
2,790
2,791
2,792
2,793
2,794
2,795
2,796
2,797
2,798
2,799
2,800
2,801
2,802
2,803
2,804
2,805
2,806
2,807
2,808
2,809
2,810
2,811
2,812
2,813
2,814
2,815
2,816
2,817
2,818
2,819
2,820
2,821
2,822
2,823
2,824
2,825
2,826
2,827
2,828
2,829
2,830
2,831
2,832
2,833
2,834
2,835
2,836
2,837
2,838
2,839
2,840
2,841
2,842
2,843
2,844
2,845
2,846
2,847
2,848
2,849
2,850
2,851
2,852
2,853
2,854
2,855
2,856
2,857
2,858
2,859
2,860
2,861
2,862
2,863
2,864
2,865
2,866
2,867
2,868
2,869
2,870
2,871
2,872
2,873
2,874
2,875
2,876
2,877
2,878
2,879
2,880
2,881
2,882
2,883
2,884
2,885
2,886
2,887
2,888
2,889
2,890
2,891
2,892
2,893
2,894
2,895
2,896
2,897
2,898
2,899
2,900
2,901
2,902
2,903
2,904
2,905
2,906
2,907
2,908
2,909
2,910
2,911
2,912
2,913
2,914
2,915
2,916
2,917
2,918
2,919
2,920
2,921
2,922
2,923
2,924
2,925
2,926
2,927
2,928
2,929
2,930
2,931
2,932
2,933
2,934
2,935
2,936
2,937
2,938
2,939
2,940
2,941
2,942
2,943
2,944
2,945
2,946
2,947
2,948
2,949
2,950
2,951
2,952
2,953
2,954
2,955
2,956
2,957
2,958
2,959
2,960
2,961
2,962
2,963
2,964
2,965
2,966
2,967
2,968
2,969
2,970
2,971
2,972
2,973
2,974
2,975
2,976
2,977
2,978
2,979
2,980
2,981
2,982
2,983
2,984
2,985
2,986
2,987
2,988
2,989
2,990
2,991
2,992
2,993
2,994
2,995
2,996
2,997
2,998
2,999
3,000
3,001
3,002
3,003
3,004
3,005
3,006
3,007
3,008
3,009
3,010
3,011
3,012
3,013
3,014
3,015
3,016
3,017
3,018
3,019
3,020
3,021
3,022
3,023
3,024
3,025
3,026
3,027
3,028
3,029
3,030
3,031
3,032
3,033
3,034
3,035
3,036
3,037
3,038
3,039
3,040
3,041
3,042
3,043
3,044
3,045
3,046
3,047
3,048
3,049
3,050
3,051
3,052
3,053
3,054
3,055
3,056
3,057
3,058
3,059
3,060
3,061
3,062
3,063
3,064
3,065
3,066
3,067
3,068
3,069
3,070
3,071
3,072
3,073
3,074
3,075
3,076
3,077
3,078
3,079
3,080
3,081
3,082
3,083
3,084
3,085
3,086
3,087
3,088
3,089
3,090
3,091
3,092
3,093
3,094
3,095
3,096
3,097
3,098
3,099
3,100
3,101
3,102
3,103
3,104
3,105
3,106
3,107
3,108
3,109
3,110
3,111
3,112
3,113
3,114
3,115
3,116
3,117
3,118
3,119
3,120
3,121
3,122
3,123
3,124
3,125
3,126
3,127
3,128
3,129
3,130
3,131
3,132
3,133
3,134
3,135
3,136
3,137
3,138
3,139
3,140
3,141
3,142
3,143
3,144
3,145
3,146
3,147
3,148
3,149
3,150
3,151
3,152
3,153
3,154
3,155
3,156
3,157
3,158
3,159
3,160
3,161
3,162
3,163
3,164
3,165
3,166
3,167
3,168
3,169
3,170
3,171
3,172
3,173
3,174
3,175
3,176
3,177
3,178
3,179
3,180
3,181
3,182
3,183
3,184
3,185
3,186
3,187
3,188
3,189
3,190
3,191
3,192
3,193
3,194
3,195
3,196
3,197
3,198
3,199
3,200
3,201
3,202
3,203
3,204
3,205
3,206
3,207
3,208
3,209
3,210
3,211
3,212
3,213
3,214
3,215
3,216
3,217
3,218
3,219
3,220
3,221
3,222
3,223
3,224
3,225
3,226
3,227
3,228
3,229
3,230
3,231
3,232
3,233
3,234
3,235
3,236
3,237
3,238
3,239
3,240
3,241
3,242
3,243
3,244
3,245
3,246
3,247
3,248
3,249
3,250
3,251
3,252
3,253
3,254
3,255
3,256
3,257
3,258
3,259
3,260
3,261
3,262
3,263
3,264
3,265
3,266
3,267
3,268
3,269
3,270
3,271
3,272
3,273
3,274
3,275
3,276
3,277
3,278
3,279
3,280
3,281
3,282
3,283
3,284
3,285
3,286
3,287
3,288
3,289
3,290
3,291
3,292
3,293
3,294
3,295
3,296
3,297
3,298
3,299
3,300
3,301
3,302
3,303
3,304
3,305
3,306
3,307
3,308
3,309
3,310
3,311
3,312
3,313
3,314
3,315
3,316
3,317
3,318
3,319
3,320
3,321
3,322
3,323
3,324
3,325
3,326
3,327
3,328
3,329
3,330
3,331
3,332
3,333
3,334
3,335
3,336
3,337
3,338
3,339
3,340
3,341
3,342
3,343
3,344
3,345
3,346
3,347
3,348
3,349
3,350
3,351
3,352
3,353
3,354
3,355
3,356
3,357
3,358
3,359
3,360
3,361
3,362
3,363
3,364
3,365
3,366
3,367
3,368
3,369
3,370
3,371
3,372
3,373
3,374
3,375
3,376
3,377
3,378
3,379
3,380
3,381
3,382
3,383
3,384
3,385
3,386
3,387
3,388
3,389
3,390
3,391
3,392
3,393
3,394
3,395
3,396
3,397
3,398
3,399
3,400
3,401
3,402
3,403
3,404
3,405
3,406
3,407
3,408
3,409
3,410
3,411
3,412
3,413
3,414
3,415
3,416
3,417
3,418
3,419
3,420
3,421
3,422
3,423
3,424
3,425
3,426
3,427
3,428
3,429
3,430
3,431
3,432
3,433
3,434
3,435
3,436
3,437
3,438
3,439
3,440
3,441
3,442
3,443
3,444
3,445
3,446
3,447
3,448
3,449
3,450
3,451
3,452
3,453
3,454
3,455
3,456
3,457
3,458
3,459
3,460
3,461
3,462
3,463
3,464
3,465
3,466
3,467
3,468
3,469
3,470
3,471
3,472
3,473
3,474
3,475
3,476
3,477
3,478
3,479
3,480
3,481
3,482
3,483
3,484
3,485
3,486
3,487
3,488
3,489
3,490
3,491
3,492
3,493
3,494
3,495
3,496
3,497
3,498
3,499
3,500
3,501
3,502
3,503
3,504
3,505
3,506
3,507
3,508
3,509
3,510
3,511
3,512
3,513
3,514
3,515
3,516
3,517
3,518
3,519
3,520
3,521
3,522
3,523
3,524
3,525
3,526
3,527
3,528
3,529
3,530
3,531
3,532
3,533
3,534
3,535
3,536
3,537
3,538
3,539
3,540
3,541
3,542
3,543
3,544
3,545
3,546
3,547
3,548
3,549
3,550
3,551
3,552
3,553
3,554
3,555
3,556
3,557
3,558
3,559
3,560
3,561
3,562
3,563
3,564
3,565
3,566
3,567
3,568
3,569
3,570
3,571
3,572
3,573
3,574
3,575
3,576
3,577
3,578
3,579
3,580
3,581
3,582
3,583
3,584
3,585
3,586
3,587
3,588
3,589
3,590
3,591
3,592
3,593
3,594
3,595
3,596
3,597
3,598
3,599
3,600
3,601
3,602
3,603
3,604
3,605
3,606
3,607
3,608
3,609
3,610
3,611
3,612
3,613
3,614
3,615
3,616
3,617
3,618
3,619
3,620
3,621
3,622
3,623
3,624
3,625
3,626
3,627
3,628
3,629
3,630
3,631
3,632
3,633
3,634
3,635
3,636
3,637
3,638
3,639
3,640
3,641
3,642
3,643
3,644
3,645
3,646
3,647
3,648
3,649
3,650
3,651
3,652
3,653
3,654
3,655
3,656
3,657
3,658
3,659
3,660

Match case Limit results 1 per page

configured with

dhcp-trusted

so that a DHCP server can be connected to that interface

to provide dynamic IP addresses.

IP source guard obtains information about IP-address/MAC-address/VLAN bindings

from the DHCP snooping database. It causes the switch to validate incoming IP packets

against the entries in that database.

The topology for this example includes a J-EX4200-24P switch, a connection to a DHCP

server, and a connection to a RADIUS server for user authentication.

NOTE:

The 802.1X user authentication applied in this example is for single

supplicants. Single-secure supplicant mode and multiple supplicant mode

do not work with IP source guard. For more information about 802.1X

authentication, see “Understanding Authentication on J-EX Series Switches”

on page 2248.

In the first example configuration, two clients (network devices) are connected to an

access switch. You configure IP source guard and 802.1X user authentication, in

combination with two access port security features: DHCP snooping and dynamic ARP

inspection (DAI). This setup is designed to protect the switch from IP attacks such as

“ping of death” attacks, DHCP starvation, and ARP spoofing.

In the second example configuration, the switch is configured for 802.1X user

authentication. If the client fails authentication, the switch redirects the client to a guest

VLAN that allows this client to access a set of restricted network features. You configure

IP source guard on the guest VLAN to mitigate effects of source IP spoofing.

NOTE:

Control-plane rate limiting is achieved by restricting CPU control-plane

protection. It can be used in conjunction with storm control (see

“Understanding Storm Control on J-EX Series Switches” on page 2511) to limit

data-plane activity.

TIP:

You can set the

ip-source-guard

flag in the

traceoptions

statement for

debugging purposes.

Configuring IP Source Guard with 802.1X Authentication, DHCP Snooping, and Dynamic ARP

Inspection

CLI Quick

Configuration

To quickly configure IP source guard with 802.1X authentication and with other access

port security features, copy the following commands and paste them into the switch

terminal window:

[edit]

set ethernet-switching-options secure-access-port interface ge-0/0/24 dhcp-trusted

set ethernet-switching-options secure-access-port vlan data examine-dhcp

set ethernet-switching-options secure-access-port vlan data arp-inspection

set ethernet-switching-options secure-access-port vlan data ip-source-guard

2602

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS