Enterasys-networks 1G58x-09 Manuel d'utilisateur Page 778
- Page / 808
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
Security Configuration Command Set
Configuring Access Lists
14-96 Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide
Examples
This example shows how to define access list 101 to deny ICMP transmissions from any source and
for any destination:
This example shows how to define access list 102 to deny TCP packets transmitted from IP source
10.1.2.1 with a port number of 42 to any destination:
14.3.7.4 ip access-group
Use this command to apply access restrictions on an interface when operating in router mode.
ip access-group access-list-number {in | out}
Syntax Description
Command Syntax of the “no” Form
The “no” form of this command removes the specified access list:
no ip access-group access-list-number {in | out}
Command Type
Router command.
Command Mode
Interface configuration: Matrix>Router(config-if(Vlan <vlan_id>))#
Matrix>Router(config)#access-list 101 deny ICMP any any
Matrix>Router(config)#access-list 102 deny TCP host 10.1.2.1 eq 42 any
ROUTER: This command can be executed when the device is in router mode only.
For details on how to enable router configuration modes, refer to Section 3.3.3.
access-list-number Specifies the number of the access list to be applied to the
access list. This is a decimal number from 1 to 199.
in Filters inbound packets.
out Filters outbound packets.
- Matrix E1 Series 1
- (1G58x-09 and 1H582-xx) 1
- Configuration Guide 1
- PORT CONFIGURATION 10
- SNMP CONFIGURATION 11
- Contents 12
- SPANNING TREE CONFIGURATION 13
- 802.1Q VLAN CONFIGURATION 15
- IGMP CONFIGURATION 17
- IP CONFIGURATION 20
- SECURITY CONFIGURATION 23
- Ta ble s 30
- About This Guide 31
- STRUCTURE OF THIS GUIDE 32
- RELATED DOCUMENTS 33
- DOCUMENT CONVENTIONS 34
- Introduction 37
- Overview 38
- 1.2 GETTING HELP 39
- Getting Help 40
- Requirements 41
- Parameter Setting 42
- 1H582-51 43
- 2.1.4 Connecting to a Modem 44
- Connecting to a Modem 45
- Switch Setting Action 45
- Section 3.2.1.8 46
- RJ45 DB9 47
- RJ45 DB25 48
- Factory Default Settings 50
- VRRP Disabled 57
- Command Defaults Descriptions 58
- 3.1.3 CLI Command Modes 59
- 3.1.4 Using WebView 60
- • ro for Read-Only access 62
- • rw for Read-Write access 62
- User Account 64
- Telnet session 65
- Key Sequence Command 68
- 3.2.1.1 show system login 69
- 3.2.1.2 set system login 71
- 3.2.1.3 clear system login 72
- 3.2.1.4 set password 73
- 3.2.1.9 set system lockout 77
- 3.2.2.1 show system resources 79
- 3.2.2.2 show system 80
- 3.2.2.3 show time 81
- 3.2.2.4 set time 81
- 3.2.2.5 set prompt 82
- 3.2.2.6 show banner motd 83
- 3.2.2.7 set banner motd 83
- 3.2.2.8 clear banner motd 84
- 3.2.2.9 show version 85
- 3.2.2.10 set system name 86
- 3.2.2.11 set system location 87
- 3.2.2.12 set system contact 88
- 3.2.2.13 show terminal 88
- 3.2.2.14 set terminal 89
- 3.2.2.15 set system timeout 90
- 3.2.2.16 show summertime 90
- 3.2.2.17 set summertime 91
- 3.2.2.18 set summertime date 92
- 02:00 60 94
- 3.2.2.20 clear summertime 95
- 3.2.2.21 set console baud 95
- 3.2.2.22 show ip address 96
- 3.2.2.23 set ip address 97
- • SecureCRT Version 3.3.2 98
- 3.2.3.2 Downloading via TFTP 99
- Downloading a Firmware Image 100
- 3.2.4 Configuring Telnet 102
- Commands 102
- 3.2.4.1 show telnet 102
- 3.2.4.2 set telnet 103
- 3.2.5.1 dir 105
- 3.2.5.2 show config 106
- Examples 107
- 3.2.5.3 configure 108
- 3.2.5.4 summaryconfig 110
- 3.2.5.5 copy 112
- 3.2.5.6 set system bootconfig 114
- 3.2.5.7 delete 115
- 3.2.6.1 show cdp 117
- 3.2.6.2 set cdp 118
- Matrix>set cdp enable 119
- 3.2.6.3 set cdp interval 120
- 3.2.6.4 show ciscodp 120
- Output What It Displays 121
- 3.2.6.5 set ciscodp status 122
- 3.2.6.6 set ciscodp timer 122
- 3.2.6.7 set ciscodp holdtime 123
- 3.2.7.1 wait 132
- 3.2.7.2 cls (clear screen) 133
- 3.2.7.3 exit 133
- Command Mode 134
- Read-Only 134
- 3.2.8 Resetting the Device 135
- 3.2.8.1 show reset 135
- 3.2.8.2 reset 136
- 3.2.8.3 reset at 137
- 3.2.8.4 reset in 138
- 3.2.8.5 clear config 138
- • Set system 144
- • Save/copy 144
- Port Configuration 147
- Port Configuration Summary 148
- Port Assignment Scheme 148
- 4.3.1 Reviewing Port Status 153
- 4.3.1.1 show port status 153
- 4.3.1.2 show port counters 155
- 4.3.1.3 clear port counters 157
- 4.3.2.1 set port disable 158
- 4.3.2.2 set port enable 159
- 4.3.3.1 show port speed 160
- 4.3.3.2 set port speed 161
- 4.3.3.3 show port duplex 162
- 4.3.3.4 set port duplex 163
- 4.3.4.1 show port jumbo 164
- 4.3.4.2 set port jumbo 165
- 4.3.5.1 show port negotiation 167
- 4.3.5.2 set port negotiation 168
- 4.3.6.1 show port flowcontrol 174
- 4.3.6.2 set port flowcontrol 175
- • fe - Fast Ethernet 178
- • ge - Gigabit Ethernet, or 178
- (Section 4.3.6.1) 179
- 4.3.6.5 show flow agetime 180
- 4.3.6.6 set flow agetime 181
- 4.3.6.7 clear flow agetime 181
- 4.3.6.8 show port holbp 182
- 4.3.6.9 set port holbp 183
- Read-Write 184
- 4.3.7 Setting Port Traps 185
- Command 185
- 4.3.7.1 show port trap 185
- 4.3.7.2 set port trap 187
- Overview: Port Mirroring 188
- 4.3.9 Setting Port Mirroring 189
- 4.3.9.1 show port mirroring 189
- 4.3.9.2 set port mirroring 190
- 4.3.9.3 clear port mirroring 191
- Configuring Link Aggregation 192
- 3754 06 02 194
- 1 thru 8 9 thru 16 195
- 1 thru 8 195
- 4.3.11.1 show trunk 197
- 4.3.11.2 set trunkmode 200
- 4.3.11.3 set trunk 200
- 4.3.11.4 clear trunk 201
- 4.3.11.5 set trunk port 202
- 4.3.11.6 clear trunk port 202
- 4.3.11.7 set trunk algorithm 203
- 4.3.12.1 LACP Operation 205
- 4.3.12.2 LACP Terminology 206
- Term Definition 207
- 4.3.13.1 set lacp 209
- 4.3.13.2 set lacp static 210
- 4.3.13.3 clear lacp static 211
- 4.3.13.4 show port lacp 212
- 4.3.13.5 set port lacp 214
- 4.3.14.1 show port broadcast 216
- 4.3.14.2 set port broadcast 217
- SNMP Configuration 223
- 5.1.2 SNMPv3 224
- SNMP Configuration Summary 225
- 5.2 SNMP COMMAND SET 227
- 5.2.1.1 show snmp 227
- 5.2.1.2 set snmp 228
- 5.2.1.3 show snmp engineid 228
- 5.2.1.4 show snmp counters 229
- Command Type 230
- Switch command 230
- 5.2.2.1 show snmp user 237
- 5.2.2.2 set snmp user 238
- 5.2.2.3 clear snmp user 239
- 5.2.2.4 show snmp group 240
- 5.2.2.5 set snmp group 242
- 5.2.2.6 clear snmp group 243
- 5.2.2.7 show community 244
- 5.2.2.8 set community 245
- 5.2.2.9 clear community 246
- 5.2.2.10 show snmp community 246
- 5.2.2.11 set snmp community 247
- 5.2.2.12 clear snmp community 248
- 5.2.3.1 show snmp access 249
- 5.2.3.2 set snmp access 251
- SNMP Command Set 252
- 5.2.3.3 clear snmp access 253
- 5.2.4.1 show snmp view 255
- 5.2.4.2 set snmp view 257
- 5.2.4.3 clear snmp view 257
- Configuring SNMP MIB Views 258
- 5.2.5.2 set snmp targetparams 261
- 5.2.6.1 show snmp targetaddr 264
- 5.2.6.2 set snmp targetaddr 266
- 5.2.6.3 clear snmp targetaddr 268
- 5.2.7.1 show trap 270
- 5.2.7.2 set trap 271
- 5.2.7.3 clear trap 271
- 5.2.7.4 show newaddrtrap 272
- 5.2.7.5 set newaddrtrap 273
- 5.2.7.6 show snmp notify 274
- 5.2.7.7 set snmp notify 276
- 5.2.7.8 clear snmp notify 277
- About SNMP Notify Filters 278
- and associate a target 282
- Basic SNMP Trap Configuration 284
- Spanning Tree Configuration 287
- 6.1.2 Spanning Tree Features 288
- 6.2.1.1 show spantree stats 292
- 6.2.1.2 set spantree 295
- 6.2.1.3 show spantree version 296
- 6.2.1.4 set spantree version 297
- 6.2.1.7 set spantree msti 299
- 6.2.1.8 clear spantree msti 299
- 6.2.1.9 show spantree mstmap 300
- 6.2.1.10 set spantree mstmap 301
- 6.2.1.21 set spantree hello 308
- 6.2.1.22 clear spantree hello 309
- 6.2.1.23 set spantree maxage 310
- 6.2.1.39 set spantree maxhops 320
- 6.2.2.5 show spantree portpri 326
- 6.2.2.6 set spantree portpri 327
- 6.2.2.9 set spantree portcost 329
- 802.1Q VLAN Configuration 343
- 7.3.1.1 show vlan 345
- 7.3.1.2 show vlan static 348
- 7.3.1.3 show vlan portinfo 349
- 7.3.2.1 set vlan 351
- 7.3.2.2 set vlan name 352
- 7.3.2.3 clear vlan 353
- 7.3.2.4 clear vlan name 354
- 7.3.3.1 show port vlan 355
- 7.3.3.2 set port vlan 356
- 7.3.3.3 clear port vlan 357
- 7.3.4.1 set vlan forbidden 360
- 7.3.4.2 show port egress 361
- 7.3.4.3 set vlan egress 362
- 7.3.4.4 clear vlan egress 363
- Purpose 366
- Filtering 370
- 7.3.6 Setting the Host VLAN 380
- 7.3.6.1 show host vlan 380
- 7.3.6.2 set port vlan host 381
- 7.3.6.3 clear host vlan 382
- 7.3.8.1 show gvrp 386
- 7.3.8.2 show garp timer 387
- 7.3.8.3 set gvrp 389
- 7.3.8.4 set garp timer 390
- CONFIGURATION 393
- 8.3.1.1 show policy profile 394
- 8.3.1.2 set policy profile 396
- 8.3.1.3 clear policy profile 397
- Configuring Policy Profiles 399
- 8.3.2.1 show policy class 400
- 8.3.2.2 set policy classify 401
- 8.3.2.4 clear policy class 408
- 8.3.2.5 show policy maptable 409
- 8.3.2.7 set vlanauthorization 411
- 8.3.2.10 set policy maptable 413
- 8.3.3.1 show policy port 415
- 8.3.3.2 set policy port 416
- 8.3.3.3 clear policy port 417
- 9.1.1 Priority 419
- Strict Priority Queueing (SP) 420
- Weighted Round Robin (WRR) 420
- Hybrid Queueing 420
- 9.1.3 Port Classification 421
- Configuring Port Priority 422
- 9.3.1.1 show port priority 423
- 9.3.1.2 set port priority 423
- 9.3.1.3 clear port priority 424
- 9.3.2.1 show priority queue 425
- 9.3.2.2 set priority queue 427
- 9.3.3.1 show port qos 429
- 9.3.3.2 set port qos sp 430
- 9.3.3.3 set port qos wrr 431
- 9.3.3.4 set port qos hybrid 432
- Layer 3 - IP Packet 442
- 46 classification rule: 451
- 9.3.6.1 show port ratelimit 452
- 9.3.6.2 set port ratelimit 454
- 9.3.6.3 clear port ratelimit 455
- 3 through 7: 456
- IGMP Configuration 457
- 10.2.1.1 show igmp 458
- 10.2.1.2 set igmp 459
- 10.2.3 Reviewing IGMP Groups 463
- 10.2.3.1 show igmp groups 463
- 10.2.4.1 show igmp mode 465
- 10.2.4.2 set igmp mode vlan 466
- 10.2.4.4 set igmp mode 468
- 10.3 ABOUT IGMP 469
- 10.3.1 IGMP VLAN Registration 469
- About IGMP 470
- IGMP VLAN Registration 470
- MANAGEMENT 471
- 11.2.1.1 set logging 473
- 11.2.1.2 show logging all 473
- 11.2.1.3 show logging console 477
- 11.2.1.4 set logging console 478
- 11.2.1.5 show logging server 478
- 11.2.1.6 set logging server 480
- 11.2.1.7 clear logging server 481
- 11.2.1.8 show logging default 481
- 11.2.1.9 set logging default 482
- Configuring System Logging 483
- Mnemonic Application 488
- 11.2.1.15copy audit-trail 491
- 11.2.2.1 show eventlog 492
- 11.2.2.2 clear eventlog 493
- 11.2.2.3 history 494
- 11.2.2.4 repeat 494
- 11.2.2.5 show history 496
- 11.2.2.6 set history 496
- 11.2.2.7 show netstat 497
- 11.2.2.8 show rmon stats 498
- 11.2.2.9 show users 501
- 11.2.2.10disconnect 503
- 11.2.3.1 show arp 505
- 11.2.3.2 set arp 505
- 11.2.3.3 clear arp 506
- 11.2.3.4 show rad 507
- 11.2.3.5 set rad 508
- 11.2.3.6 show mac 508
- 11.2.3.7 set mac 511
- 11.2.3.8 clear mac 512
- 11.2.3.9 show mac agingtime 513
- 11.2.3.10set mac agingtime 514
- 11.2.3.11clear mac agingtime 514
- 11.2.3.12show port stopaging 515
- 11.2.3.13set port stopaging 516
- 11.2.3.14clear port stopaging 517
- 11.2.3.15set mac algorithm 517
- 11.2.3.16show dns 519
- 11.2.3.17set dns domain 519
- 11.2.3.18clear dns domain 520
- 11.2.3.19set dns server 521
- 11.2.3.20clear dns server 521
- 11.2.3.21clear dns 522
- 11.2.3.22ping 523
- 11.2.3.23traceroute 525
- 11.2.3.24set mac multicast 527
- 11.2.3.25show mac multicast 529
- 11.2.4.1 show sntp 530
- 11.2.4.2 set sntp client 531
- Matrix>set sntp broadcast 532
- 11.2.4.5 set sntp server 533
- 11.2.4.6 clear sntp server 534
- 11.2.4.7 set timezone 535
- 11.2.4.8 clear timezone 535
- Matrix>clear timezone 536
- 11.2.5.1 show nodealias 537
- 11.2.5.3 set nodealias 540
- Configuring Node Aliases 541
- 11.2.5.5 clear nodealias 542
- About CEP Phone Detection 544
- 11.2.6.1 show cep 545
- 11.2.6.2 set cep 546
- 11.2.6.3 set cep port 547
- 11.2.6.4 set cep policy 547
- 11.2.6.5 set cep detection 548
- • Both UDP and TCP 552
- 11.2.6.10set cep initialize 553
- 11.2.6.11clear cep 554
- parameters 555
- IP Configuration 557
- IP Configuration Command Set 558
- 12.2.1.1 show interface 559
- 12.2.1.2 interface 562
- 12.2.1.3 show ip interface 563
- 12.2.1.4 ip address 564
- 12.2.1.5 no shutdown 564
- 12.2.2.1 show running-config 566
- 12.2.2.2 write 567
- 12.2.2.3 no ip routing 569
- 12.2.3.1 show ip arp 570
- 12.2.3.2 arp 573
- 12.2.3.4 ip proxy-arp 574
- 12.2.3.5 ip mac-address 575
- 12.2.3.6 arp timeout 576
- 12.2.3.7 clear arp-cache 576
- 12.2.4.2 ip forward-protocol 579
- About DHCP/BOOTP Relay 581
- 12.2.4.3 ip helper-address 581
- 12.2.5.1 show ip protocols 583
- 12.2.5.2 show limits 584
- 12.2.5.3 show ip traffic 585
- Command Defaults 586
- 12.2.5.4 clear ip stats 587
- 12.2.5.5 show ip route 587
- 12.2.5.6 ip route 589
- 12.2.5.7 ip icmp 590
- 12.2.5.8 ping 591
- 12.2.5.9 traceroute 592
- 13.1.1 Configuring RIP 596
- 13.1.1.1 router rip 597
- 13.1.1.2 network 598
- 13.1.1.3 neighbor 599
- 13.1.1.4 distance 600
- 13.1.1.5 ip rip offset 601
- 13.1.1.6 timers 602
- 13.1.1.7 ip rip send version 603
- Configuring RIP 604
- About RIP Authentication 605
- 13.1.1.9 key chain 605
- 13.1.1.10key 606
- 13.1.1.11key-string 607
- 13.1.1.12accept-lifetime 608
- 13.1.1.13send-lifetime 609
- 13.1.1.16no auto-summary 613
- 13.1.1.18ip split-horizon 614
- 13.1.1.19passive-interface 615
- 13.1.1.20receive-interface 616
- 13.1.1.21distribute-list 617
- 13.1.1.22redistribute 618
- 13.1.2 Configuring OSPF 620
- Configuring OSPF 621
- 13.1.2.1 router ospf 622
- 13.1.2.2 network 623
- 13.1.2.3 router id 624
- 13.1.2.4 ip ospf cost 625
- 13.1.2.5 ip ospf priority 625
- 13.1.2.6 timers spf 626
- 13.1.2.13distance ospf 633
- 13.1.2.14area range 634
- 13.1.2.15area authentication 635
- 13.1.2.16area stub 636
- 13.1.2.17area default cost 637
- 13.1.2.18area nssa 638
- 13.1.2.19area virtual-link 639
- 13.1.2.20passive-ospf 641
- 13.1.2.21redistribute 642
- 13.1.2.22database-overflow 644
- 13.1.2.23show ip ospf 645
- Output What It Displays 651
- 13.1.3 Configuring DVMRP 657
- 13.1.3.1 ip dvmrp 657
- 13.1.3.2 ip dvmrp metric 658
- 13.1.3.3 show ip dvmrp route 659
- 13.1.3.4 show ip mroute 660
- 13.1.4 Configuring IRDP 662
- 13.1.4.1 ip irdp 662
- Configuring IRDP 663
- 13.1.4.4 ip irdp holdtime 665
- 13.1.4.5 ip irdp preference 666
- 13.1.4.6 ip irdp address 667
- 13.1.4.7 no ip irdp multicast 667
- 13.1.4.8 show ip irdp 668
- 13.1.5 Configuring VRRP 670
- 13.1.5.1 router vrrp 670
- 13.1.5.2 create 671
- 13.1.5.3 address 672
- 13.1.5.4 priority 673
- Configuring VRRP 674
- 13.1.5.5 advertise-interval 675
- 13.1.5.6 critical-ip 676
- 13.1.5.7 preempt 677
- 13.1.5.8 enable 678
- 13.1.5.11show ip vrrp 680
- Security Configuration 683
- 14.3.1 Configuring RADIUS 685
- 14.3.1.1 show radius 686
- 14.3.1.2 set radius 688
- • IP address 689
- 14.3.1.3 clear radius 690
- Configuring RADIUS 691
- 14.3.2.1 show dot1x 698
- 14.3.2.3 set dot1x 702
- 14.3.2.5 set dot1x port 705
- 14.3.2.7 show eapol 707
- 14.3.2.8 set eapol 711
- 14.3.4.1 show maclock 726
- 14.3.4.3 set maclock enable 730
- 14.3.4.4 set maclock disable 731
- 14.3.4.5 set maclock 732
- 14.3.4.7 set maclock static 734
- 14.3.4.8 set maclock move 735
- 14.3.4.9 clear maclock static 735
- Configuring MAC Locking 736
- 14.3.4.17set maclock trap 743
- 14.3.4.18clear maclock 744
- About PWA 745
- 14.3.5.1 show pwa 746
- 14.3.5.2 set pwa 749
- 14.3.5.3 set pwa hostname 750
- 14.3.5.4 set pwa displaylogo 750
- 14.3.5.5 set pwa refreshtime 751
- 14.3.5.6 set pwa nameservices 752
- 14.3.5.7 set pwa ipaddress 752
- 14.3.5.8 set pwa protocol 753
- 14.3.5.9 set pwa enhancedmode 754
- 14.3.5.10set pwa guestname 755
- 14.3.5.12set pwa gueststatus 756
- 14.3.5.13set pwa initialize 757
- 14.3.5.14set pwa quietperiod 757
- 14.3.5.15set pwa maxrequests 758
- 14.3.5.16set pwa portcontrol 759
- 14.3.6.1 show ssh 761
- 14.3.6.2 set ssh 762
- 14.3.6.3 ssh 763
- 14.3.6.4 set ssh ciphers 764
- 14.3.6.5 clear ssh ciphers 765
- 14.3.6.6 set ssh port 765
- 14.3.6.7 set ssh mac 766
- 14.3.6.8 clear ssh mac 767
- 14.3.6.12clear ssh keys 769
- 14.3.6.13clear ssh config 770
- 14.3.7.1 show access-lists 771
- Configuring Access Lists 773
- 14.3.7.4 ip access-group 778
- 14.3.8.1 show HostDos 780
- 14.3.8.2 HostDos 781
- About FST 784
- 14.3.9.1 show flowlimit 785
- 14.3.9.2 set flowlimit 787
- 14.3.9.3 set flowlimit limit 788
- 14.3.9.4 set flowlimit class 790
- Authentication 797
- MAC Authentication Overview 798
- Assignment 801
- Filter-ID Attribute Formats 801
- Numerics 803
- WebView 1-2, 3-12 808
Produits connexes et manuels pour Matériel Enterasys-networks 1G58x-09
(92 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.128 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels