Home » ZyXEL Manuals » Networking » ZyXEL ES-2024A » Manual Viewer

ZyXEL ES-2024A User Guide - Page 247

SSH Implementation on the Switch, Introduction to HTTPS

Get ZyXEL ES-2024A PDF manuals and user guides

View all ZyXEL ES-2024A manuals

Add to My Manuals
Save this manual to your list of manuals

Page 247 highlights

Chapter 29 Access Control 3 Authentication and Data Transmission After the identification is verified and data encryption activated, a secure tunnel is established between the client and the server. The client then sends its authentication information (user name and password) to the server to log in to the server. 29.6 SSH Implementation on the Switch Your Switch supports SSH version 2 using RSA authentication and three encryption methods (DES, 3DES and Blowfish). The SSH server is implemented on the Switch for remote management and file transfer on port 22. Only one SSH connection is allowed at a time. 29.6.1 Requirements for Using SSH You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the Switch over SSH. 29.7 Introduction to HTTPS HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application-level protocol that enables secure transactions of data by ensuring confidentiality (an unauthorized party cannot read the transferred data), authentication (one party can identify the other party) and data integrity (you know if data has been changed). It relies upon certificates, public keys, and private keys. HTTPS on the Switch is used so that you may securely access the Switch using the web configurator. When a computer requests an HTTPS (secure) connection, the Switch sends its certificate to the computer. The user decides if he wants to trust the certificate. If the user decides to trust the certificate, the certificate is used in building the HTTPS connection. Please refer to the following figure. 1 HTTPS connection requests from an SSL-aware web browser go to port 443 (by default) on the Switch's WS (web server). ES-2024 Series User's Guide 247

Section	Page
ES-2024 Series	1
About This User's Guide	3
Customer Support	4
Document Conventions	5
Safety Warnings	7
Contents Overview	9
Table of Contents	11
Introduction	21
Getting to Know Your Switch	23
1.1 Introduction	23
1.1.1 Backbone Application	23
1.1.2 Bridging Example	24
1.1.3 High Performance Switching Example	25
1.1.4 IEEE 802.1Q VLAN Application Examples	25
1.2 Ways to Manage the Switch	26
1.3 Good Habits for Managing the Switch	26
Hardware Installation and Connection	29
2.1 Freestanding Installation	29
2.2 Mounting the Switch on a Rack	30
2.2.1 Rack-mounted Installation Requirements	30
2.2.2 Attaching the Mounting Brackets to the Switch	30
2.2.3 Mounting the Switch on a Rack	31
Hardware Overview	33
3.1 Front Panel Connection	33
3.1.1 Console Port	34
3.1.2 Ethernet Ports	34
3.1.3 Mini-GBIC Slots	35
3.2 Rear Panel	37
3.2.1 Power Connector	37
3.3 LEDs	37
Basic Configuration	39
The Web Configurator	41
4.1 Introduction	41
4.2 System Login	41
4.3 The Status Screen	42
4.3.1 Change Your Password	48
4.4 Saving Your Configuration	48
4.5 Switch Lockout	48
4.6 Resetting the Switch	49
4.6.1 Reload the Configuration File	49
4.7 Logging Out of the Web Configurator	50
4.8 Help	51
Initial Setup Example	53
5.1 Overview	53
5.1.1 Creating a VLAN	53
5.1.2 Setting Port VID	55
5.1.3 Configuring Switch Management IP Address	56
Tutorials	59
6.1 How to Use DHCP Relay on the Switch	59
6.1.1 DHCP Relay Tutorial Introduction	59
6.1.2 Creating a VLAN	60
6.1.3 Configuring DHCP Relay	62
6.1.4 Troubleshooting	63
System Status and Port Statistics	65
7.1 Overview	65
7.2 Port Status Summary	65
7.2.1 Status: Port Details	67
Basic Setting	71
8.1 Overview	71
8.2 System Information	72
8.3 General Setup	74
8.4 Introduction to VLANs	76
8.5 Switch Setup Screen	77
8.6 IP Setup	78
8.6.1 IP Interfaces	79
8.7 Port Setup	81
8.8 PoE Status	83
8.8.1 PoE Setup	85
Advanced Setup	89
VLAN	91
9.1 Introduction to IEEE 802.1Q Tagged VLANs	91
9.1.1 Forwarding Tagged and Untagged Frames	91
9.2 Automatic VLAN Registration	92
9.2.1 GARP	92
9.2.2 GVRP	92
9.3 Port VLAN Trunking	93
9.4 Select the VLAN Type	94
9.5 Static VLAN	94
9.5.1 Static VLAN Status	95
9.5.2 Static VLAN Details	96
9.5.3 Configure a Static VLAN	96
9.5.4 Configure VLAN Port Settings	98
9.6 Port-based VLAN Setup	99
9.6.1 Configure a Port-based VLAN	101
Static MAC Forwarding	105
10.1 Overview	105
10.2 Configuring Static MAC Forwarding	105
Static Multicast Forwarding	109
11.1 Static Multicast Forwarding Overview	109
11.2 Configuring Static Multicast Forwarding	110
Filtering	113
12.1 Configure a Filtering Rule	113
Spanning Tree Protocol	115
13.1 STP/RSTP Overview	115
13.1.1 STP Terminology	115
13.1.2 How STP Works	116
13.1.3 STP Port States	117
13.1.4 Multiple STP	117
13.2 Spanning Tree Configuration Screen	120
13.3 Configure Rapid Spanning Tree Protocol	121
13.4 Rapid Spanning Tree Protocol Status	123
13.5 Configure Multiple Spanning Tree Protocol	125
13.6 Multiple Spanning Tree Protocol Status	128
Bandwidth Control	131
14.1 Bandwidth Control Setup	131
Broadcast Storm Control	133
15.1 Broadcast Storm Control Setup	133
Mirroring	135
16.1 Port Mirroring Setup	135
Link Aggregation	137
17.1 Link Aggregation Overview	137
17.2 Dynamic Link Aggregation	137
17.2.1 Link Aggregation ID	138
17.3 Link Aggregation Status	139
17.4 Link Aggregation Setting	140
17.5 Link Aggregation Control Protocol	141
17.6 Static Trunking Example	142
Port Authentication	145
18.1 Port Authentication Overview	145
18.1.1 IEEE 802.1x Authentication	145
18.2 Port Authentication Configuration	146
18.2.1 Activate IEEE 802.1x Security	147
Port Security	149
19.1 Port Security Overview	149
19.2 Port Security Setup	150
19.3 Port Security Example	151
Queuing Method	153
20.1 Queuing Method Overview	153
20.1.1 Strictly Priority Queuing	153
20.1.2 Weighted Round Robin Scheduling (WRR)	153
20.2 Configuring Queuing	154
Multicast	157
21.1 Multicast Overview	157
21.1.1 IP Multicast Addresses	157
21.1.2 IGMP Filtering	157
21.1.3 IGMP Snooping	158
21.1.4 IGMP Snooping and VLANs	158
21.2 Multicast Status	158
21.3 Multicast Setting	159
21.4 IGMP Snooping VLAN	161
21.5 IGMP Filtering Profile	163
21.6 MVR Overview	164
21.6.1 Types of MVR Ports	165
21.6.2 MVR Modes	165
21.6.3 How MVR Works	165
21.7 General MVR Configuration	166
21.8 MVR Group Configuration	168
21.8.1 MVR Configuration Example	170
AAA	173
22.1 Authentication, Authorization and Accounting (AAA)	173
22.1.1 Local User Accounts	174
22.1.2 RADIUS and TACACS+	174
22.2 AAA Screens	174
22.2.1 RADIUS Server Setup	175
22.2.2 TACACS+ Server Setup	177
22.2.3 AAA Setup	179
22.2.4 Vendor Specific Attribute	182
22.3 Supported RADIUS Attributes	183
22.3.1 Attributes Used for Authentication	184
22.3.2 Attributes Used for Accounting	185
IP Source Guard	187
23.1 IP Source Guard Overview	187
23.1.1 ARP Inspection Overview	188
23.2 IP Source Guard	189
23.3 IP Source Guard Static Binding	190
23.4 ARP Inspection Status	192
23.4.1 ARP Inspection Log Status	193
23.5 ARP Inspection Configure	194
23.5.1 ARP Inspection Port Configure	197
23.5.2 ARP Inspection VLAN Configure	198
Loop Guard	201
24.1 Loop Guard Overview	201
24.2 Loop Guard Setup	203
IP Application	205
Static Route	207
25.1 Static Routing Overview	207
25.2 Configuring Static Routing	208
Differentiated Services	211
26.1 DiffServ Overview	211
26.1.1 DSCP and Per-Hop Behavior	211
26.1.2 DiffServ Network Example	212
26.2 Activating DiffServ	212
26.3 DSCP-to-IEEE 802.1p Priority Settings	214
26.3.1 Configuring DSCP Settings	214
DHCP	215
27.1 DHCP Overview	215
27.1.1 DHCP Modes	215
27.1.2 DHCP Configuration Options	215
27.2 DHCP Status	216
27.3 DHCP Relay	216
27.3.1 DHCP Relay Agent Information	216
27.3.2 Configuring DHCP Global Relay	217
27.3.3 Global DHCP Relay Configuration Example	218
27.4 Configuring DHCP VLAN Settings	219
27.4.1 Example: DHCP Relay for Two VLANs	220
Management	223
Maintenance	225
28.1 The Maintenance Screen	225
28.2 Load Factory Default	226
28.3 Save Configuration	226
28.4 Reboot System	227
28.5 Firmware Upgrade	227
28.6 Restore a Configuration File	228
28.7 Backup a Configuration File	228
28.8 FTP Command Line	229
28.8.1 Filename Conventions	229
28.8.2 FTP Command Line Procedure	230
28.8.3 GUI-based FTP Clients	231
28.8.4 FTP Restrictions	231
Access Control	233
29.1 Access Control Overview	233
29.2 The Access Control Main Screen	233
29.3 About SNMP	234
29.3.1 SNMP v3 and Security	235
29.3.2 Supported MIBs	235
29.3.3 SNMP Traps	236
29.3.4 Configuring SNMP	240
29.3.5 Configuring SNMP Trap Group	243
29.3.6 Setting Up Login Accounts	244
29.4 SSH Overview	245
29.5 How SSH works	246
29.6 SSH Implementation on the Switch	247
29.6.1 Requirements for Using SSH	247
29.7 Introduction to HTTPS	247
29.8 HTTPS Example	248
29.8.1 Internet Explorer Warning Messages	248
29.8.2 Netscape Navigator Warning Messages	249
29.8.3 The Main Screen	251
29.9 Service Port Access Control	251
29.10 Remote Management	252
Diagnostic	255
30.1 Diagnostic	255
Syslog	257
31.1 Syslog Overview	257
31.2 Syslog Setup	258
31.3 Syslog Server Setup	259
Cluster Management	261
32.1 Clustering Management Status Overview	261
32.2 Cluster Management Status	262
32.2.1 Cluster Member Switch Management	263
32.3 Clustering Management Configuration	265
MAC Table	269
33.1 MAC Table Overview	269
33.2 Viewing the MAC Table	270
ARP Table	273
34.1 ARP Table Overview	273
34.1.1 How ARP Works	273
34.2 Viewing the ARP Table	274
Configure Clone	275
35.1 Configure Clone	275
Appendices and Index	277
Product Specifications	279
IP Addresses and Subnetting	289
Legal Information	299