Home » ZyXEL Manuals » Networking » ZyXEL ES-3148 » Manual Viewer

ZyXEL ES-3148 User Guide - Page 195

Attributes Used for Authentication, Attributes Used by the IEEE 802.1x Authentication

Get ZyXEL ES-3148 PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 195 highlights

Chapter 23 Authentication & Accounting 23.3.1 Attributes Used for Authentication The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. 23.3.1.1 Attributes Used for Authenticating Privilege Access User-Name - the format of the User-Name attribute is $enab#$, where # is the privilege level (1~14) User-Password NAS-Identifier NAS-IP-Address 23.3.1.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 23.3.1.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type - This value is set to Ethernet(15) on the Switch. Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator 23.3.2 Attributes Used for Accounting The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. 23.3.2.1 Attributes Used for Accounting System Events NAS-IP-Address NAS-Identifier Acct-Status-Type Acct-Session-ID - The format of Acct-Session-Id is date+time+8-digit sequential number, for example, 2007041917210300000001. (date: 2007/04/19, time: 17:21:03, serial number: 00000001) Acct-Delay-Time ES-3148 User's Guide 195

Section	Page
User’s Guide	1
About This User's Guide	3
Document Conventions	4
Safety Warnings	6
Contents Overview	9
Table of Contents	11
List of Figures	21
List of Tables	27
Introduction	31
Introducing the Switch	33
1.1 Overview	33
1.1.1 Backbone Application	33
1.1.2 Bridging Example	34
1.1.3 High-performance Switched Example	34
1.1.4 IEEE 802.1Q VLAN Application Examples	35
1.2 Ways to Manage the Switch	36
1.3 Good Habits for Managing the Switch	36
Hardware	37
Hardware Installation and Connection	39
2.1 Freestanding Installation	39
2.2 Mounting the Switch on a Rack	40
2.2.1 Rack-mounted Installation Requirements	40
2.2.2 Attaching the Mounting Brackets to the Switch	40
2.2.3 Mounting the Switch on a Rack	41
Hardware Overview	43
3.1 Panel Connections	43
3.1.1 Ethernet Ports	43
3.1.2 Mini-GBIC Slots	44
3.2 Rear Panel	45
3.2.1 Console Port	46
3.2.2 External Backup Power Supply Connector	46
3.2.3 Power Connector	47
3.3 LEDs	47
Web Configurator	49
The Web Configurator	51
4.1 Introduction	51
4.2 System Login	51
4.3 The Status Screen	52
4.3.1 Change Your Password	58
4.4 Saving Your Configuration	58
4.5 Switch Lockout	59
4.6 Resetting the Switch	59
4.6.1 Reload the Configuration File	59
4.7 Logging Out of the Web Configurator	60
4.8 Help	61
Initial Setup Example	63
5.1 Overview	63
5.1.1 Creating a VLAN	63
5.1.2 Setting Port VID	64
5.2 Configuring Switch Management IP Address	65
System Status and Port Statistics	67
6.1 Overview	67
6.2 Port Status Summary	67
6.2.1 Status: Port Details	68
Basic Setting	73
7.1 Overview	73
7.2 System Information	73
7.3 General Setup	75
7.4 Introduction to VLANs	77
7.5 Switch Setup Screen	77
7.6 IP Setup	79
7.6.1 IP Interfaces	79
7.7 Port Setup	82
VLAN	85
8.1 Introduction to IEEE 802.1Q Tagged VLANs	85
8.1.1 Forwarding Tagged and Untagged Frames	85
8.2 Automatic VLAN Registration	86
8.2.1 GARP	86
8.2.2 GVRP	86
8.3 Port VLAN Trunking	87
8.4 Select the VLAN Type	87
8.5 Static VLAN	87
8.5.1 Static VLAN Status	88
8.5.2 Static VLAN Details	88
8.5.3 Configure a Static VLAN	89
8.5.4 Configure VLAN Port Settings	90
8.6 Subnet Based VLANs	92
8.7 Configuring Subnet Based VLAN	93
8.8 Protocol Based VLANs	94
8.9 Configuring Protocol Based VLAN	95
8.10 Create an IP-based VLAN Example	97
8.11 Port-based VLAN Setup	98
8.11.1 Configure a Port-based VLAN	98
Static MAC Forward Setup	103
9.1 Overview	103
9.2 Configuring Static MAC Forwarding	103
Filtering	105
10.1 Configure a Filtering Rule	105
Spanning Tree Protocol	107
11.1 STP/RSTP Overview	107
11.1.1 STP Terminology	107
11.1.2 How STP Works	108
11.1.3 STP Port States	109
11.1.4 Multiple RSTP	109
11.1.5 Multiple STP	110
11.2 Spanning Tree Protocol Status Screen	112
11.3 Spanning Tree Configuration	113
11.4 Configure Rapid Spanning Tree Protocol	114
11.5 Rapid Spanning Tree Protocol Status	115
11.6 Configure Multiple Rapid Spanning Tree Protocol	117
11.7 Multiple Rapid Spanning Tree Protocol Status	118
11.8 Configure Multiple Spanning Tree Protocol	120
11.9 Multiple Spanning Tree Protocol Status	122
Bandwidth Control	125
12.1 Bandwidth Control Overview	125
12.1.1 CIR and PIR	125
12.2 Bandwidth Control Setup	125
Broadcast Storm Control	127
13.1 Broadcast Storm Control Setup	127
Mirroring	129
14.1 Port Mirroring Setup	129
Link Aggregation	131
15.1 Link Aggregation Overview	131
15.2 Dynamic Link Aggregation	131
15.2.1 Link Aggregation ID	132
15.3 Link Aggregation Status	132
15.4 Link Aggregation Setting	133
15.5 Link Aggregation Control Protocol	134
15.6 Static Trunking Example	136
Port Authentication	139
16.1 Port Authentication Overview	139
16.1.1 IEEE 802.1x Authentication	139
16.1.2 MAC Authentication	140
16.2 Port Authentication Configuration	141
16.2.1 Activate IEEE 802.1x Security	141
16.2.2 Activate MAC Authentication	142
Port Security	145
17.1 About Port Security	145
17.2 Port Security Setup	145
Classifier	149
18.1 About the Classifier and QoS	149
18.2 Configuring the Classifier	149
18.3 Viewing and Editing Classifier Configuration	152
18.4 Classifier Example	153
Policy Rule	155
19.1 Policy Rules Overview	155
19.1.1 DiffServ	155
19.1.2 DSCP and Per-Hop Behavior	155
19.2 Configuring Policy Rules	156
19.3 Viewing and Editing Policy Configuration	158
19.4 Policy Example	159
Queuing Method	161
20.1 Queuing Method Overview	161
20.1.1 Strictly Priority	161
20.1.2 Weighted Fair Queuing	161
20.1.3 Weighted Round Robin Scheduling (WRR)	162
20.2 Configuring Queuing	162
VLAN Stacking	165
21.1 VLAN Stacking Overview	165
21.1.1 VLAN Stacking Example	165
21.2 VLAN Stacking Port Roles	166
21.3 VLAN Tag Format	167
21.3.1 Frame Format	167
21.4 Configuring VLAN Stacking	168
Multicast	171
22.1 Multicast Overview	171
22.1.1 IP Multicast Addresses	171
22.1.2 IGMP Filtering	171
22.1.3 IGMP Snooping	171
22.1.4 IGMP Snooping and VLANs	172
22.2 Multicast Status	172
22.3 Multicast Setting	172
22.4 IGMP Snooping VLAN	174
22.5 IGMP Filtering Profile	176
22.6 MVR Overview	177
22.6.1 Types of MVR Ports	177
22.6.2 MVR Modes	178
22.6.3 How MVR Works	178
22.7 General MVR Configuration	178
22.8 MVR Group Configuration	180
22.8.1 MVR Configuration Example	181
Authentication & Accounting	185
23.1 Authentication, Authorization and Accounting	185
23.1.1 Local User Accounts	185
23.1.2 RADIUS and TACACS+	186
23.2 Authentication and Accounting Screens	186
23.2.1 RADIUS Server Setup	186
23.2.2 TACACS+ Server Setup	188
23.2.3 Authentication and Accounting Setup	190
23.2.4 Vendor Specific Attribute	193
23.3 Supported RADIUS Attributes	194
23.3.1 Attributes Used for Authentication	195
23.3.2 Attributes Used for Accounting	195
IP Source Guard	199
24.1 IP Source Guard Overview	199
24.1.1 DHCP Snooping Overview	199
24.1.2 ARP Inspection Overview	201
24.2 IP Source Guard	203
24.3 IP Source Guard Static Binding	203
24.4 DHCP Snooping	205
24.5 DHCP Snooping Configure	208
24.5.1 DHCP Snooping Port Configure	209
24.5.2 DHCP Snooping VLAN Configure	211
24.6 ARP Inspection Status	212
24.6.1 ARP Inspection VLAN Status	212
24.6.2 ARP Inspection Log Status	213
24.7 ARP Inspection Configure	215
24.7.1 ARP Inspection Port Configure	216
24.7.2 ARP Inspection VLAN Configure	217
Loop Guard	219
25.1 Loop Guard Overview	219
25.2 Loop Guard Setup	221
Static Routing	223
26.1 Configuring Static Routing	223
Differentiated Services	225
27.1 DiffServ Overview	225
27.1.1 DSCP and Per-Hop Behavior	225
27.1.2 DiffServ Network Example	226
27.2 Two Rate Three Color Marker Traffic Policing	226
27.2.1 TRTCM - Color-blind Mode	227
27.2.2 TRTCM - Color-aware Mode	227
27.3 Activating DiffServ	228
27.3.1 Configuring 2-Rate 3 Color Marker Settings	228
27.4 DSCP-to-IEEE 802.1p Priority Settings	230
27.4.1 Configuring DSCP Settings	230
DHCP	233
28.1 DHCP Overview	233
28.1.1 DHCP Modes	233
28.1.2 DHCP Configuration Options	233
28.2 DHCP Status	233
28.3 DHCP Relay	234
28.3.1 DHCP Relay Agent Information	234
28.3.2 Configuring DHCP Global Relay	235
28.3.3 Global DHCP Relay Configuration Example	236
28.4 Configuring DHCP VLAN Settings	236
28.4.1 Example: DHCP Relay for Two VLANs	238
Maintenance	239
29.1 The Maintenance Screen	239
29.2 Load Factory Default	240
29.3 Save Configuration	240
29.4 Reboot System	241
29.5 Firmware Upgrade	241
29.6 Restore a Configuration File	242
29.7 Backup a Configuration File	242
29.8 FTP Command Line	243
29.8.1 Filename Conventions	243
29.8.2 FTP Command Line Procedure	243
29.8.3 GUI-based FTP Clients	244
29.8.4 FTP Restrictions	244
Access Control	245
30.1 Access Control Overview	245
30.2 The Access Control Main Screen	245
30.3 About SNMP	246
30.3.1 SNMP v3 and Security	247
30.3.2 Supported MIBs	247
30.3.3 SNMP Traps	247
30.3.4 Configuring SNMP	250
30.3.5 Configuring SNMP Trap Group	252
30.3.6 Setting Up Login Accounts	253
30.4 SSH Overview	255
30.5 How SSH works	255
30.6 SSH Implementation on the Switch	256
30.6.1 Requirements for Using SSH	256
30.7 Introduction to HTTPS	256
30.8 HTTPS Example	257
30.8.1 Internet Explorer Warning Messages	257
30.8.2 Netscape Navigator Warning Messages	258
30.8.3 The Main Screen	258
30.9 Service Port Access Control	259
30.10 Remote Management	260
Diagnostic	263
31.1 Diagnostic	263
Syslog	265
32.1 Syslog Overview	265
32.2 Syslog Setup	265
32.3 Syslog Server Setup	266
Cluster Management	269
33.1 Clustering Management Status Overview	269
33.2 Cluster Management Status	270
33.2.1 Cluster Member Switch Management	271
33.3 Clustering Management Configuration	272
MAC Table	275
34.1 MAC Table Overview	275
34.2 Viewing the MAC Table	276
ARP Table	277
35.1 ARP Table Overview	277
35.1.1 How ARP Works	277
35.2 Viewing the ARP Table	277
Configure Clone	279
36.1 Configure Clone	279
Troubleshooting and Specifications	281
Troubleshooting	283
37.1 Power, Hardware Connections, and LEDs	283
37.2 Switch Access and Login	284
Product Specifications	287
38.1 General Switch Specifications	287
38.2 Cable Pin Assignments	291
Appendices and Index	293
Setting up Your Computer’s IP Address	295
Pop-up Windows, JavaScripts and Java Permissions	317
IP Addresses and Subnetting	325
Common Services	335
Importing Certificates	339
Legal Information	345
Customer Support	349