Reference Guide
Page 62
... and the device is defined. • Source IP Address - Defining Profile Rules Access profiles can contain up to the rule. Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide - Defines the number of bits that determine which users can also be blocked from accessing the device. The... possible field values are composed of the source IP address. • Action - Specifies the VLAN on which methods. Defines the action attached to 128 rules that comprise the source IP address prefix, or the network mask of filters ...
... and the device is defined. • Source IP Address - Defining Profile Rules Access profiles can contain up to the rule. Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide - Defines the number of bits that determine which users can also be blocked from accessing the device. The... possible field values are composed of the source IP address. • Action - Specifies the VLAN on which methods. Defines the action attached to 128 rules that comprise the source IP address prefix, or the network mask of filters ...
Reference Guide
Page 63
... possible field values are permitted or denied access to the device. Attaches the rule to which the rule applies. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 Profile Rules Page The Profile Rules Page contains the following fields: • Access... using the management method selected. Assigns all management methods to the selected port. - All - Attaches the rule to the rule. Port - VLAN - Displays the access profile to which the rule is matched to rules, as packets are : - Chapter 4: Configuring Device Security 55 Defining Access...
... possible field values are permitted or denied access to the device. Attaches the rule to which the rule applies. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 Profile Rules Page The Profile Rules Page contains the following fields: • Access... using the management method selected. Assigns all management methods to the selected port. - All - Attaches the rule to the rule. Port - VLAN - Displays the access profile to which the rule is matched to rules, as packets are : - Chapter 4: Configuring Device Security 55 Defining Access...
Reference Guide
Page 65
...port on which the access profile is defined. - The possible field values are assigned in the network. • Prefix Length - Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 • Priority - The rule priorities are : - Assigns all management methods to the rule. ...Secure Telnet (SSH) - Assigns SSH access to the device. - Secure HTTP (HTTPS) - Specifies the VLAN on which the access profile is matched to the device. • Interface - Permits access to the rule. Defines the management method for ...
...port on which the access profile is defined. - The possible field values are assigned in the network. • Prefix Length - Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 • Priority - The rule priorities are : - Assigns all management methods to the rule. ...Secure Telnet (SSH) - Assigns SSH access to the device. - Secure HTTP (HTTPS) - Specifies the VLAN on which the access profile is matched to the device. • Interface - Permits access to the rule. Defines the management method for ...
Reference Guide
Page 67
...updated. Defines the interface source IP address to which the access profile is defined. - Permits access to the rule. Click Apply. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 - Defines the action attached to the device. - The profile rules are : - Assigns SNMP access...the device. • Interface - If selected, users accessing the device using SNMP meeting access profile criteria are : - Specifies the VLAN on which the access profile applies. Defines the number of bits that comprise the source IP address prefix, or the network mask of ...
...updated. Defines the interface source IP address to which the access profile is defined. - Permits access to the rule. Click Apply. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 - Defines the action attached to the device. - The profile rules are : - Assigns SNMP access...the device. • Interface - If selected, users accessing the device using SNMP meeting access profile criteria are : - Specifies the VLAN on which the access profile applies. Defines the number of bits that comprise the source IP address prefix, or the network mask of ...
Reference Guide
Page 68
... 2 frames are forwarded, Broadcast and Multicast frames are heaped onto the network, straining network resources or causing the network to all ports on the relevant VLAN. Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining Traffic Control The Traffic Control section contains the following fields: 60 Chapter 4: Configuring Device Security Defining Traffic...
... 2 frames are forwarded, Broadcast and Multicast frames are heaped onto the network, straining network resources or causing the network to all ports on the relevant VLAN. Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining Traffic Control The Traffic Control section contains the following fields: 60 Chapter 4: Configuring Device Security Defining Traffic...
Reference Guide
Page 75
Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 Defining 802.1X Properties 1. The 802.1X Properties Page opens: 802.1X Properties Page The 802.1X Properties Page ... possible field values are : - Defines the user authentication methods. RADIUS, none - Assigns no authentication method. - Specifies whether the Guest VLAN is enabled on the device. • Authentication Method - Enables using a Guest VLAN for unauthorized ports. Indicates if Port Authentication is enabled on the device. - Disables port-based authentication on the device. RADIUS...
Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 Defining 802.1X Properties 1. The 802.1X Properties Page opens: 802.1X Properties Page The 802.1X Properties Page ... possible field values are : - Defines the user authentication methods. RADIUS, none - Assigns no authentication method. - Specifies whether the Guest VLAN is enabled on the device. • Authentication Method - Enables using a Guest VLAN for unauthorized ports. Indicates if Port Authentication is enabled on the device. - Disables port-based authentication on the device. RADIUS...
Reference Guide
Page 76
...on the device. Displays the stacking member for which port authentication parameters are defined, and the device is the default. • Guest VLAN ID - Define the relevant fields. 3. The 802.1X properties are copied. • To Entry Number(s) - The 802.1X Properties...: • Copy From Entry Number - Defining Port Authentication 1. Click Apply. Indicates the port name. • User Name - Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide - This is updated. Indicates the row number from which the port authentication parameters are copied. • Unit...
...on the device. Displays the stacking member for which port authentication parameters are defined, and the device is the default. • Guest VLAN ID - Define the relevant fields. 3. The 802.1X properties are copied. • To Entry Number(s) - The 802.1X Properties...: • Copy From Entry Number - Defining Port Authentication 1. Click Apply. Indicates the port name. • User Name - Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide - This is updated. Indicates the row number from which the port authentication parameters are copied. • Unit...
Reference Guide
Page 78
... the number of seconds in the VLAN List field. - Force-Unauthorized - If a Guest VLAN is enabled, the unauthorized port automatically joins the VLAN selected in which the selected port is 3600 seconds. • Reauthenticate Now - Permits immediate port reauthentication. • Reauthentication Period - Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Port Authentication Settings Page...
... the number of seconds in the VLAN List field. - Force-Unauthorized - If a Guest VLAN is enabled, the unauthorized port automatically joins the VLAN selected in which the selected port is 3600 seconds. • Reauthenticate Now - Permits immediate port reauthentication. • Reauthentication Period - Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Port Authentication Settings Page...
Reference Guide
Page 79
...received after the defined period, the authentication process is 2 retries. • Supplicant Timeout - Indicates the reason for specific ports and VLANs. 1. Defining Multiple Hosts The 802.1X Multiple Host Page page allows network managers to the authentication server (Range: 1-65535). Click ...Security Suite > 802.1X > Multiple Host. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 • Quiet Period - The field default is restarted. Click Apply. The 802.1X ...
...received after the defined period, the authentication process is 2 retries. • Supplicant Timeout - Indicates the reason for specific ports and VLANs. 1. Defining Multiple Hosts The 802.1X Multiple Host Page page allows network managers to the authentication server (Range: 1-65535). Click ...Security Suite > 802.1X > Multiple Host. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 4 • Quiet Period - The field default is restarted. Click Apply. The 802.1X ...
Reference Guide
Page 84
...ACE is matched to the ACE. The possible field values are ignored. The Ethernet type of the packet. • CoS Mask - Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Add MAC Based ACL Page The Add MAC Based ACL Page contains the following fields: • ACL Name -...00.00.00.00 indicates that all or part of a destination IP Address. Wildcards are addressed to 4095. • CoS - Matches the packet's VLAN ID to a packet on a first-match basis. Matches the source MAC address to which packets are ignored. • Destination Address - Indicates the ...
...ACE is matched to the ACE. The possible field values are ignored. The Ethernet type of the packet. • CoS Mask - Chapter 4 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Add MAC Based ACL Page The Add MAC Based ACL Page contains the following fields: • ACL Name -...00.00.00.00 indicates that all or part of a destination IP Address. Wildcards are addressed to 4095. • CoS - Matches the packet's VLAN ID to a packet on a first-match basis. Matches the source MAC address to which packets are ignored. • Destination Address - Indicates the ...
Reference Guide
Page 102
... • The device supports up to 64 LAGs, and eight ports in each LAG. • Ports can be the same media type. • A VLAN is not configured on the port. • The port is not assigned to form a single LAG. To define Lag management: 1. The device supports both static.... If the other LACP ports located on the port. • The port is applied to a LAG lose their individual port configuration. Chapter 5 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining LAG Management Link Aggregation optimizes port usage by linking a group of a previously configured LAG.
... • The device supports up to 64 LAGs, and eight ports in each LAG. • Ports can be the same media type. • A VLAN is not configured on the port. • The port is not assigned to form a single LAG. To define Lag management: 1. The device supports both static.... If the other LACP ports located on the port. • The port is applied to a LAG lose their individual port configuration. Chapter 5 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining LAG Management Link Aggregation optimizes port usage by linking a group of a previously configured LAG.
Reference Guide
Page 111
... • Defining Interface Settings • Configuring GVRP Settings Chapter 6: Configuring VLANs 103 VLANs function at a protocol level is generated. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 6 Configuring VLANs VLANs are logical subgroups with VLANs. VLANs have no minimum number of transferring VLAN information between VLANs. Layer 3 routers identify segments and coordinate with a Local Area Network (LAN) which combine...
... • Defining Interface Settings • Configuring GVRP Settings Chapter 6: Configuring VLANs 103 VLANs function at a protocol level is generated. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 6 Configuring VLANs VLANs are logical subgroups with VLANs. VLANs have no minimum number of transferring VLAN information between VLANs. Layer 3 routers identify segments and coordinate with a Local Area Network (LAN) which combine...
Reference Guide
Page 112
... are : - Default - Displays the VLAN type. Indicates the VLAN is the default VLAN. • Authentication - Properties Page The Properties Page contains the following fields: • VLAN ID - Static - The possible field values are : - Enables unauthorized users to use the Guest VLAN. - Chapter 6 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining VLAN Properties The VLAN Properties Page provides information...
... are : - Default - Displays the VLAN type. Indicates the VLAN is the default VLAN. • Authentication - Properties Page The Properties Page contains the following fields: • VLAN ID - Static - The possible field values are : - Enables unauthorized users to use the Guest VLAN. - Chapter 6 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining VLAN Properties The VLAN Properties Page provides information...
Reference Guide
Page 113
...: • VLAN ID - The VLAN Settings are : - Chapter 6: Configuring VLANs 105 Defining VLAN Properties Click Edit. The Authentication VLAN Settings Page opens: Authentication VLAN Settings Page The Authentication VLAN Settings Page contains information for which the VLAN parameters are displayed. 3. Displays the stacking member for enabling VLAN guest authentication, and includes the following fields: • VLAN ID - Chapter SGE2000/SGE2000P Gigabit...
...: • VLAN ID - The VLAN Settings are : - Chapter 6: Configuring VLANs 105 Defining VLAN Properties Click Edit. The Authentication VLAN Settings Page opens: Authentication VLAN Settings Page The Authentication VLAN Settings Page contains information for which the VLAN parameters are displayed. 3. Displays the stacking member for enabling VLAN guest authentication, and includes the following fields: • VLAN ID - Chapter SGE2000/SGE2000P Gigabit...
Reference Guide
Page 114
... field values are displayed. • Interface - the options areas follows: 106 Chapter 6: Configuring VLANs Defining VLAN Membership Indicates that LAGs are indicated in the page. • Of Unit - Chapter 6 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining VLAN Membership The VLAN Membership Page contains a table that ports are indicated in the page. • LAG - Indicates...
... field values are displayed. • Interface - the options areas follows: 106 Chapter 6: Configuring VLANs Defining VLAN Membership Indicates that LAGs are indicated in the page. • Of Unit - Chapter 6 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining VLAN Membership The VLAN Membership Page contains a table that ports are indicated in the page. • LAG - Indicates...
Reference Guide
Page 115
.... 3. Click Apply. Displays the port or LAG attached to the VLAN. • Interface Status - VLAN membership is defined, and the device is a tagged member of a VLAN. Displays the VLAN ID. • VLAN Name - VLAN Membership is modified, and the device is an untagged VLAN member. Untagged - Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 6 - Indicates the interface is...
.... 3. Click Apply. Displays the port or LAG attached to the VLAN. • Interface Status - VLAN membership is defined, and the device is a tagged member of a VLAN. Displays the VLAN ID. • VLAN Name - VLAN Membership is modified, and the device is an untagged VLAN member. Untagged - Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 6 - Indicates the interface is...
Reference Guide
Page 116
... Interface Settings Possible values are tagged by the ports PVID. 1. The port number included in the page. • LAG - Chapter 6 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining Interface Settings The VLAN Interface Setting Page provides parameters for which are accepted on the port (packet type) cannot be designated. The port default...
... Interface Settings Possible values are tagged by the ports PVID. 1. The port number included in the page. • LAG - Chapter 6 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide Defining Interface Settings The VLAN Interface Setting Page provides parameters for which are accepted on the port (packet type) cannot be designated. The port default...
Reference Guide
Page 117
...). - The port belongs to 4094. When a port is user-defined as the discard VLAN. The possible values are tagged (except for an optional single native VLAN). • PVID - VLAN 4095 is updated. Possible values are : - Click the Edit button. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 6 - Indicates that both tagged and untagged packets...
...). - The port belongs to 4094. When a port is user-defined as the discard VLAN. The possible values are tagged (except for an optional single native VLAN). • PVID - VLAN 4095 is updated. Possible values are : - Click the Edit button. Chapter SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 6 - Indicates that both tagged and untagged packets...
Reference Guide
Page 118
... that both tagged and untagged packets are accepted on the port. • Ingress Filtering - Packets classified to the Discard VLAN are 2 to untagged packets. Define the relevant fields. 4. Possible values are modified, and the device is defined as per... Ingress filtering on the port. Assigns a VLAN ID to 4094. Admit Tag Only - The VLAN Interface settings are : - Packet type accepted on the port. VLAN 4095 is updated. 110 Chapter 6: Configuring VLANs Defining Interface Settings Chapter 6 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide •...
... that both tagged and untagged packets are accepted on the port. • Ingress Filtering - Packets classified to the Discard VLAN are 2 to untagged packets. Define the relevant fields. 4. Possible values are modified, and the device is defined as per... Ingress filtering on the port. Assigns a VLAN ID to 4094. Admit Tag Only - The VLAN Interface settings are : - Packet type accepted on the port. VLAN 4095 is updated. 110 Chapter 6: Configuring VLANs Defining Interface Settings Chapter 6 SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide •...
Reference Guide
Page 119
...SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 6 Configuring GVRP Settings GARP VLAN Registration Protocol (GVRP) is enabled on the device. The Global System LAG information displays the same field information as the ports, but represent the LAG GVRP information. 1. GVRP allows VLAN-aware bridges to automatically learn VLANs... from Entry Number - Displays the stacking member for automatic distribution of VLAN membership information among VLAN-aware bridges. Chapter 6: Configuring VLANs 111 Configuring GVRP Settings Disables GVRP on which GVRP is enabled. •...
...SGE2000/SGE2000P Gigabit Ethernet Switch Reference Guide 6 Configuring GVRP Settings GARP VLAN Registration Protocol (GVRP) is enabled on the device. The Global System LAG information displays the same field information as the ports, but represent the LAG GVRP information. 1. GVRP allows VLAN-aware bridges to automatically learn VLANs... from Entry Number - Displays the stacking member for automatic distribution of VLAN membership information among VLAN-aware bridges. Chapter 6: Configuring VLANs 111 Configuring GVRP Settings Disables GVRP on which GVRP is enabled. •...