Enterasys-networks 1G58x-09 Manuel d'utilisateur Page 779
- Page / 808
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
Security Configuration Command Set
Configuring Denial of Service Prevention
Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 14-97
Command Defaults
None.
Example
This example shows how to apply access list 1 for all inbound packets on VLAN 1. Through the
definition of access list 1, only packets with destination 192.5.34.0 will be routed. All the packets
with other destination received on VLAN 1 are dropped:
14.3.8 Configuring Denial of Service Prevention
Purpose
To configure Denial of Service (DoS) prevention, which will protect the router from attacks and
notify administrators via Syslog.
Commands
The commands needed to configure DoS prevention are listed below and described in the associated
section as shown:
• show HostDos (Section 14.3.8.1)
• HostDos (Section 14.3.8.2)
• clear hostdos-counters (Section 14.3.8.3)
Matrix>Router(config)#access-list 1 permit 192.5.34.0 0.0.0.255
Matrix>Router(config)#interface vlan 1
Matrix>Router(config-if(Vlan 1))#ip access-group 1 in
- Matrix E1 Series 1
- (1G58x-09 and 1H582-xx) 1
- Configuration Guide 1
- PORT CONFIGURATION 10
- SNMP CONFIGURATION 11
- Contents 12
- SPANNING TREE CONFIGURATION 13
- 802.1Q VLAN CONFIGURATION 15
- IGMP CONFIGURATION 17
- IP CONFIGURATION 20
- SECURITY CONFIGURATION 23
- Ta ble s 30
- About This Guide 31
- STRUCTURE OF THIS GUIDE 32
- RELATED DOCUMENTS 33
- DOCUMENT CONVENTIONS 34
- Introduction 37
- Overview 38
- 1.2 GETTING HELP 39
- Getting Help 40
- Requirements 41
- Parameter Setting 42
- 1H582-51 43
- 2.1.4 Connecting to a Modem 44
- Connecting to a Modem 45
- Switch Setting Action 45
- Section 3.2.1.8 46
- RJ45 DB9 47
- RJ45 DB25 48
- Factory Default Settings 50
- VRRP Disabled 57
- Command Defaults Descriptions 58
- 3.1.3 CLI Command Modes 59
- 3.1.4 Using WebView 60
- • ro for Read-Only access 62
- • rw for Read-Write access 62
- User Account 64
- Telnet session 65
- Key Sequence Command 68
- 3.2.1.1 show system login 69
- 3.2.1.2 set system login 71
- 3.2.1.3 clear system login 72
- 3.2.1.4 set password 73
- 3.2.1.9 set system lockout 77
- 3.2.2.1 show system resources 79
- 3.2.2.2 show system 80
- 3.2.2.3 show time 81
- 3.2.2.4 set time 81
- 3.2.2.5 set prompt 82
- 3.2.2.6 show banner motd 83
- 3.2.2.7 set banner motd 83
- 3.2.2.8 clear banner motd 84
- 3.2.2.9 show version 85
- 3.2.2.10 set system name 86
- 3.2.2.11 set system location 87
- 3.2.2.12 set system contact 88
- 3.2.2.13 show terminal 88
- 3.2.2.14 set terminal 89
- 3.2.2.15 set system timeout 90
- 3.2.2.16 show summertime 90
- 3.2.2.17 set summertime 91
- 3.2.2.18 set summertime date 92
- 02:00 60 94
- 3.2.2.20 clear summertime 95
- 3.2.2.21 set console baud 95
- 3.2.2.22 show ip address 96
- 3.2.2.23 set ip address 97
- • SecureCRT Version 3.3.2 98
- 3.2.3.2 Downloading via TFTP 99
- Downloading a Firmware Image 100
- 3.2.4 Configuring Telnet 102
- Commands 102
- 3.2.4.1 show telnet 102
- 3.2.4.2 set telnet 103
- 3.2.5.1 dir 105
- 3.2.5.2 show config 106
- Examples 107
- 3.2.5.3 configure 108
- 3.2.5.4 summaryconfig 110
- 3.2.5.5 copy 112
- 3.2.5.6 set system bootconfig 114
- 3.2.5.7 delete 115
- 3.2.6.1 show cdp 117
- 3.2.6.2 set cdp 118
- Matrix>set cdp enable 119
- 3.2.6.3 set cdp interval 120
- 3.2.6.4 show ciscodp 120
- Output What It Displays 121
- 3.2.6.5 set ciscodp status 122
- 3.2.6.6 set ciscodp timer 122
- 3.2.6.7 set ciscodp holdtime 123
- 3.2.7.1 wait 132
- 3.2.7.2 cls (clear screen) 133
- 3.2.7.3 exit 133
- Command Mode 134
- Read-Only 134
- 3.2.8 Resetting the Device 135
- 3.2.8.1 show reset 135
- 3.2.8.2 reset 136
- 3.2.8.3 reset at 137
- 3.2.8.4 reset in 138
- 3.2.8.5 clear config 138
- • Set system 144
- • Save/copy 144
- Port Configuration 147
- Port Configuration Summary 148
- Port Assignment Scheme 148
- 4.3.1 Reviewing Port Status 153
- 4.3.1.1 show port status 153
- 4.3.1.2 show port counters 155
- 4.3.1.3 clear port counters 157
- 4.3.2.1 set port disable 158
- 4.3.2.2 set port enable 159
- 4.3.3.1 show port speed 160
- 4.3.3.2 set port speed 161
- 4.3.3.3 show port duplex 162
- 4.3.3.4 set port duplex 163
- 4.3.4.1 show port jumbo 164
- 4.3.4.2 set port jumbo 165
- 4.3.5.1 show port negotiation 167
- 4.3.5.2 set port negotiation 168
- 4.3.6.1 show port flowcontrol 174
- 4.3.6.2 set port flowcontrol 175
- • fe - Fast Ethernet 178
- • ge - Gigabit Ethernet, or 178
- (Section 4.3.6.1) 179
- 4.3.6.5 show flow agetime 180
- 4.3.6.6 set flow agetime 181
- 4.3.6.7 clear flow agetime 181
- 4.3.6.8 show port holbp 182
- 4.3.6.9 set port holbp 183
- Read-Write 184
- 4.3.7 Setting Port Traps 185
- Command 185
- 4.3.7.1 show port trap 185
- 4.3.7.2 set port trap 187
- Overview: Port Mirroring 188
- 4.3.9 Setting Port Mirroring 189
- 4.3.9.1 show port mirroring 189
- 4.3.9.2 set port mirroring 190
- 4.3.9.3 clear port mirroring 191
- Configuring Link Aggregation 192
- 3754 06 02 194
- 1 thru 8 9 thru 16 195
- 1 thru 8 195
- 4.3.11.1 show trunk 197
- 4.3.11.2 set trunkmode 200
- 4.3.11.3 set trunk 200
- 4.3.11.4 clear trunk 201
- 4.3.11.5 set trunk port 202
- 4.3.11.6 clear trunk port 202
- 4.3.11.7 set trunk algorithm 203
- 4.3.12.1 LACP Operation 205
- 4.3.12.2 LACP Terminology 206
- Term Definition 207
- 4.3.13.1 set lacp 209
- 4.3.13.2 set lacp static 210
- 4.3.13.3 clear lacp static 211
- 4.3.13.4 show port lacp 212
- 4.3.13.5 set port lacp 214
- 4.3.14.1 show port broadcast 216
- 4.3.14.2 set port broadcast 217
- SNMP Configuration 223
- 5.1.2 SNMPv3 224
- SNMP Configuration Summary 225
- 5.2 SNMP COMMAND SET 227
- 5.2.1.1 show snmp 227
- 5.2.1.2 set snmp 228
- 5.2.1.3 show snmp engineid 228
- 5.2.1.4 show snmp counters 229
- Command Type 230
- Switch command 230
- 5.2.2.1 show snmp user 237
- 5.2.2.2 set snmp user 238
- 5.2.2.3 clear snmp user 239
- 5.2.2.4 show snmp group 240
- 5.2.2.5 set snmp group 242
- 5.2.2.6 clear snmp group 243
- 5.2.2.7 show community 244
- 5.2.2.8 set community 245
- 5.2.2.9 clear community 246
- 5.2.2.10 show snmp community 246
- 5.2.2.11 set snmp community 247
- 5.2.2.12 clear snmp community 248
- 5.2.3.1 show snmp access 249
- 5.2.3.2 set snmp access 251
- SNMP Command Set 252
- 5.2.3.3 clear snmp access 253
- 5.2.4.1 show snmp view 255
- 5.2.4.2 set snmp view 257
- 5.2.4.3 clear snmp view 257
- Configuring SNMP MIB Views 258
- 5.2.5.2 set snmp targetparams 261
- 5.2.6.1 show snmp targetaddr 264
- 5.2.6.2 set snmp targetaddr 266
- 5.2.6.3 clear snmp targetaddr 268
- 5.2.7.1 show trap 270
- 5.2.7.2 set trap 271
- 5.2.7.3 clear trap 271
- 5.2.7.4 show newaddrtrap 272
- 5.2.7.5 set newaddrtrap 273
- 5.2.7.6 show snmp notify 274
- 5.2.7.7 set snmp notify 276
- 5.2.7.8 clear snmp notify 277
- About SNMP Notify Filters 278
- and associate a target 282
- Basic SNMP Trap Configuration 284
- Spanning Tree Configuration 287
- 6.1.2 Spanning Tree Features 288
- 6.2.1.1 show spantree stats 292
- 6.2.1.2 set spantree 295
- 6.2.1.3 show spantree version 296
- 6.2.1.4 set spantree version 297
- 6.2.1.7 set spantree msti 299
- 6.2.1.8 clear spantree msti 299
- 6.2.1.9 show spantree mstmap 300
- 6.2.1.10 set spantree mstmap 301
- 6.2.1.21 set spantree hello 308
- 6.2.1.22 clear spantree hello 309
- 6.2.1.23 set spantree maxage 310
- 6.2.1.39 set spantree maxhops 320
- 6.2.2.5 show spantree portpri 326
- 6.2.2.6 set spantree portpri 327
- 6.2.2.9 set spantree portcost 329
- 802.1Q VLAN Configuration 343
- 7.3.1.1 show vlan 345
- 7.3.1.2 show vlan static 348
- 7.3.1.3 show vlan portinfo 349
- 7.3.2.1 set vlan 351
- 7.3.2.2 set vlan name 352
- 7.3.2.3 clear vlan 353
- 7.3.2.4 clear vlan name 354
- 7.3.3.1 show port vlan 355
- 7.3.3.2 set port vlan 356
- 7.3.3.3 clear port vlan 357
- 7.3.4.1 set vlan forbidden 360
- 7.3.4.2 show port egress 361
- 7.3.4.3 set vlan egress 362
- 7.3.4.4 clear vlan egress 363
- Purpose 366
- Filtering 370
- 7.3.6 Setting the Host VLAN 380
- 7.3.6.1 show host vlan 380
- 7.3.6.2 set port vlan host 381
- 7.3.6.3 clear host vlan 382
- 7.3.8.1 show gvrp 386
- 7.3.8.2 show garp timer 387
- 7.3.8.3 set gvrp 389
- 7.3.8.4 set garp timer 390
- CONFIGURATION 393
- 8.3.1.1 show policy profile 394
- 8.3.1.2 set policy profile 396
- 8.3.1.3 clear policy profile 397
- Configuring Policy Profiles 399
- 8.3.2.1 show policy class 400
- 8.3.2.2 set policy classify 401
- 8.3.2.4 clear policy class 408
- 8.3.2.5 show policy maptable 409
- 8.3.2.7 set vlanauthorization 411
- 8.3.2.10 set policy maptable 413
- 8.3.3.1 show policy port 415
- 8.3.3.2 set policy port 416
- 8.3.3.3 clear policy port 417
- 9.1.1 Priority 419
- Strict Priority Queueing (SP) 420
- Weighted Round Robin (WRR) 420
- Hybrid Queueing 420
- 9.1.3 Port Classification 421
- Configuring Port Priority 422
- 9.3.1.1 show port priority 423
- 9.3.1.2 set port priority 423
- 9.3.1.3 clear port priority 424
- 9.3.2.1 show priority queue 425
- 9.3.2.2 set priority queue 427
- 9.3.3.1 show port qos 429
- 9.3.3.2 set port qos sp 430
- 9.3.3.3 set port qos wrr 431
- 9.3.3.4 set port qos hybrid 432
- Layer 3 - IP Packet 442
- 46 classification rule: 451
- 9.3.6.1 show port ratelimit 452
- 9.3.6.2 set port ratelimit 454
- 9.3.6.3 clear port ratelimit 455
- 3 through 7: 456
- IGMP Configuration 457
- 10.2.1.1 show igmp 458
- 10.2.1.2 set igmp 459
- 10.2.3 Reviewing IGMP Groups 463
- 10.2.3.1 show igmp groups 463
- 10.2.4.1 show igmp mode 465
- 10.2.4.2 set igmp mode vlan 466
- 10.2.4.4 set igmp mode 468
- 10.3 ABOUT IGMP 469
- 10.3.1 IGMP VLAN Registration 469
- About IGMP 470
- IGMP VLAN Registration 470
- MANAGEMENT 471
- 11.2.1.1 set logging 473
- 11.2.1.2 show logging all 473
- 11.2.1.3 show logging console 477
- 11.2.1.4 set logging console 478
- 11.2.1.5 show logging server 478
- 11.2.1.6 set logging server 480
- 11.2.1.7 clear logging server 481
- 11.2.1.8 show logging default 481
- 11.2.1.9 set logging default 482
- Configuring System Logging 483
- Mnemonic Application 488
- 11.2.1.15copy audit-trail 491
- 11.2.2.1 show eventlog 492
- 11.2.2.2 clear eventlog 493
- 11.2.2.3 history 494
- 11.2.2.4 repeat 494
- 11.2.2.5 show history 496
- 11.2.2.6 set history 496
- 11.2.2.7 show netstat 497
- 11.2.2.8 show rmon stats 498
- 11.2.2.9 show users 501
- 11.2.2.10disconnect 503
- 11.2.3.1 show arp 505
- 11.2.3.2 set arp 505
- 11.2.3.3 clear arp 506
- 11.2.3.4 show rad 507
- 11.2.3.5 set rad 508
- 11.2.3.6 show mac 508
- 11.2.3.7 set mac 511
- 11.2.3.8 clear mac 512
- 11.2.3.9 show mac agingtime 513
- 11.2.3.10set mac agingtime 514
- 11.2.3.11clear mac agingtime 514
- 11.2.3.12show port stopaging 515
- 11.2.3.13set port stopaging 516
- 11.2.3.14clear port stopaging 517
- 11.2.3.15set mac algorithm 517
- 11.2.3.16show dns 519
- 11.2.3.17set dns domain 519
- 11.2.3.18clear dns domain 520
- 11.2.3.19set dns server 521
- 11.2.3.20clear dns server 521
- 11.2.3.21clear dns 522
- 11.2.3.22ping 523
- 11.2.3.23traceroute 525
- 11.2.3.24set mac multicast 527
- 11.2.3.25show mac multicast 529
- 11.2.4.1 show sntp 530
- 11.2.4.2 set sntp client 531
- Matrix>set sntp broadcast 532
- 11.2.4.5 set sntp server 533
- 11.2.4.6 clear sntp server 534
- 11.2.4.7 set timezone 535
- 11.2.4.8 clear timezone 535
- Matrix>clear timezone 536
- 11.2.5.1 show nodealias 537
- 11.2.5.3 set nodealias 540
- Configuring Node Aliases 541
- 11.2.5.5 clear nodealias 542
- About CEP Phone Detection 544
- 11.2.6.1 show cep 545
- 11.2.6.2 set cep 546
- 11.2.6.3 set cep port 547
- 11.2.6.4 set cep policy 547
- 11.2.6.5 set cep detection 548
- • Both UDP and TCP 552
- 11.2.6.10set cep initialize 553
- 11.2.6.11clear cep 554
- parameters 555
- IP Configuration 557
- IP Configuration Command Set 558
- 12.2.1.1 show interface 559
- 12.2.1.2 interface 562
- 12.2.1.3 show ip interface 563
- 12.2.1.4 ip address 564
- 12.2.1.5 no shutdown 564
- 12.2.2.1 show running-config 566
- 12.2.2.2 write 567
- 12.2.2.3 no ip routing 569
- 12.2.3.1 show ip arp 570
- 12.2.3.2 arp 573
- 12.2.3.4 ip proxy-arp 574
- 12.2.3.5 ip mac-address 575
- 12.2.3.6 arp timeout 576
- 12.2.3.7 clear arp-cache 576
- 12.2.4.2 ip forward-protocol 579
- About DHCP/BOOTP Relay 581
- 12.2.4.3 ip helper-address 581
- 12.2.5.1 show ip protocols 583
- 12.2.5.2 show limits 584
- 12.2.5.3 show ip traffic 585
- Command Defaults 586
- 12.2.5.4 clear ip stats 587
- 12.2.5.5 show ip route 587
- 12.2.5.6 ip route 589
- 12.2.5.7 ip icmp 590
- 12.2.5.8 ping 591
- 12.2.5.9 traceroute 592
- 13.1.1 Configuring RIP 596
- 13.1.1.1 router rip 597
- 13.1.1.2 network 598
- 13.1.1.3 neighbor 599
- 13.1.1.4 distance 600
- 13.1.1.5 ip rip offset 601
- 13.1.1.6 timers 602
- 13.1.1.7 ip rip send version 603
- Configuring RIP 604
- About RIP Authentication 605
- 13.1.1.9 key chain 605
- 13.1.1.10key 606
- 13.1.1.11key-string 607
- 13.1.1.12accept-lifetime 608
- 13.1.1.13send-lifetime 609
- 13.1.1.16no auto-summary 613
- 13.1.1.18ip split-horizon 614
- 13.1.1.19passive-interface 615
- 13.1.1.20receive-interface 616
- 13.1.1.21distribute-list 617
- 13.1.1.22redistribute 618
- 13.1.2 Configuring OSPF 620
- Configuring OSPF 621
- 13.1.2.1 router ospf 622
- 13.1.2.2 network 623
- 13.1.2.3 router id 624
- 13.1.2.4 ip ospf cost 625
- 13.1.2.5 ip ospf priority 625
- 13.1.2.6 timers spf 626
- 13.1.2.13distance ospf 633
- 13.1.2.14area range 634
- 13.1.2.15area authentication 635
- 13.1.2.16area stub 636
- 13.1.2.17area default cost 637
- 13.1.2.18area nssa 638
- 13.1.2.19area virtual-link 639
- 13.1.2.20passive-ospf 641
- 13.1.2.21redistribute 642
- 13.1.2.22database-overflow 644
- 13.1.2.23show ip ospf 645
- Output What It Displays 651
- 13.1.3 Configuring DVMRP 657
- 13.1.3.1 ip dvmrp 657
- 13.1.3.2 ip dvmrp metric 658
- 13.1.3.3 show ip dvmrp route 659
- 13.1.3.4 show ip mroute 660
- 13.1.4 Configuring IRDP 662
- 13.1.4.1 ip irdp 662
- Configuring IRDP 663
- 13.1.4.4 ip irdp holdtime 665
- 13.1.4.5 ip irdp preference 666
- 13.1.4.6 ip irdp address 667
- 13.1.4.7 no ip irdp multicast 667
- 13.1.4.8 show ip irdp 668
- 13.1.5 Configuring VRRP 670
- 13.1.5.1 router vrrp 670
- 13.1.5.2 create 671
- 13.1.5.3 address 672
- 13.1.5.4 priority 673
- Configuring VRRP 674
- 13.1.5.5 advertise-interval 675
- 13.1.5.6 critical-ip 676
- 13.1.5.7 preempt 677
- 13.1.5.8 enable 678
- 13.1.5.11show ip vrrp 680
- Security Configuration 683
- 14.3.1 Configuring RADIUS 685
- 14.3.1.1 show radius 686
- 14.3.1.2 set radius 688
- • IP address 689
- 14.3.1.3 clear radius 690
- Configuring RADIUS 691
- 14.3.2.1 show dot1x 698
- 14.3.2.3 set dot1x 702
- 14.3.2.5 set dot1x port 705
- 14.3.2.7 show eapol 707
- 14.3.2.8 set eapol 711
- 14.3.4.1 show maclock 726
- 14.3.4.3 set maclock enable 730
- 14.3.4.4 set maclock disable 731
- 14.3.4.5 set maclock 732
- 14.3.4.7 set maclock static 734
- 14.3.4.8 set maclock move 735
- 14.3.4.9 clear maclock static 735
- Configuring MAC Locking 736
- 14.3.4.17set maclock trap 743
- 14.3.4.18clear maclock 744
- About PWA 745
- 14.3.5.1 show pwa 746
- 14.3.5.2 set pwa 749
- 14.3.5.3 set pwa hostname 750
- 14.3.5.4 set pwa displaylogo 750
- 14.3.5.5 set pwa refreshtime 751
- 14.3.5.6 set pwa nameservices 752
- 14.3.5.7 set pwa ipaddress 752
- 14.3.5.8 set pwa protocol 753
- 14.3.5.9 set pwa enhancedmode 754
- 14.3.5.10set pwa guestname 755
- 14.3.5.12set pwa gueststatus 756
- 14.3.5.13set pwa initialize 757
- 14.3.5.14set pwa quietperiod 757
- 14.3.5.15set pwa maxrequests 758
- 14.3.5.16set pwa portcontrol 759
- 14.3.6.1 show ssh 761
- 14.3.6.2 set ssh 762
- 14.3.6.3 ssh 763
- 14.3.6.4 set ssh ciphers 764
- 14.3.6.5 clear ssh ciphers 765
- 14.3.6.6 set ssh port 765
- 14.3.6.7 set ssh mac 766
- 14.3.6.8 clear ssh mac 767
- 14.3.6.12clear ssh keys 769
- 14.3.6.13clear ssh config 770
- 14.3.7.1 show access-lists 771
- Configuring Access Lists 773
- 14.3.7.4 ip access-group 778
- 14.3.8.1 show HostDos 780
- 14.3.8.2 HostDos 781
- About FST 784
- 14.3.9.1 show flowlimit 785
- 14.3.9.2 set flowlimit 787
- 14.3.9.3 set flowlimit limit 788
- 14.3.9.4 set flowlimit class 790
- Authentication 797
- MAC Authentication Overview 798
- Assignment 801
- Filter-ID Attribute Formats 801
- Numerics 803
- WebView 1-2, 3-12 808
Produits connexes et manuels pour Matériel Enterasys-networks 1G58x-09
(92 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.063 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels