ProSafe 7000 Managed NETGEAR Switch Software Administration ...

More documents

Recommendations

Info

d. Click Apply. A screen similar to the following displays. 260 | Chapter 14. Security Management ProSafe 7000 Managed Switch Release 8.0.3 Now ARP packets from the DHCP client will go through; however ARP packets from the static client are dropped, since it does have a DHCP snooping entry. It can be overcome by static configuration as described in the following section, Static Mapping on page 260. Static Mapping The example is shown as CLI commands and as a Web interface procedure. CLI: Configure Static Mapping 1. Create an ARP ACL. (Netgear Switch) (Config)# arp access-list ArpFilter 2. Configure the rule to allow the static client. (Netgear Switch) (Config-arp-access-list)# permit ip host 192.168.10.2 mac host 00:11:85:ee:54:e9 3. Configure ARP ACL used for VLAN 1. (Netgear Switch) (Config)# ip arp inspection filter ArpFilter vlan 1 4. Now the ARP packets from the static client will go through since it has an entry in the ARP. ACL ARP packets from the DHCP client is also through since it has a DHCP snooping entry. This command can include the optional static keyword. If the static keyword is given, packets that do not match a permit statement are dropped without consulting the DHCP snooping bindings. In this example, ARP packets from the DHCP client are dropped since it does not have a matching rule, though it has a DHCP snooping entry.
ProSafe 7000 Managed Switch Release 8.0.3 Web Interface: Configure Static Mapping 1. Create an ARP ACL. a. Select Security > Control > Dynamic ARP Inspection > DAI ACL Configuration. b. In the Name field, enter ArpFilter. c. Click Add. A screen similar to the following displays. 2. Configure a rule to allow the static client. a. Select Security > Control > Dynamic ARP Inspection > DAI ACL Rule Configuration. b. In the ACL Name list, select ArpFilter. c. In the Source IP Address field, enter 192.168.10.2. d. In the Source MAC Address field, enter 00:11:85:EE:54:E9. e. Click Add. A screen similar to the following displays. 3. Configure the ARP ACL used for VLAN 1. a. Select Security > Control > Dynamic ARP Inspection > DAI VLAN Configuration. b. In the ARP ACL Name field, enter ArpFilter. Chapter 14. Security Management | 261
Page 1 and 2:
350 East Plumeria Drive San Jose, C
Page 3 and 4:
Table of Contents Chapter 1 Chapter
Page 5 and 6:
ProSafe 7000 Managed Switch Release
Page 7 and 8:
Page 9 and 10:
2. VLANs Virtual LANs This chapter
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
4. Port Routing This chapter provid
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
5. VLAN Routing This chapter provid
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Page 85 and 86:
Page 87 and 88:
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
Page 97 and 98:
Page 99 and 100:
Page 101 and 102:
Page 103 and 104:
8. ARP Proxy Address Resolution Pro
Page 105 and 106:
9. VRRP Virtual Router Redundancy P
Page 107 and 108:
Page 109 and 110:
Page 111 and 112:
10. ACLs Access Control Lists Chapt
Page 113 and 114:
Page 115 and 116:
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
Page 127 and 128:
Page 129 and 130:
Page 131 and 132:
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
Page 139 and 140:
Page 141 and 142:
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Page 173 and 174:
12. DiffServ Differentiated Service
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
Page 195 and 196:
Page 197 and 198:
Page 199 and 200:
Page 201 and 202:
Page 203 and 204:
Page 205 and 206:
Page 207 and 208:
Page 209 and 210: ProSafe 7000 Managed Switch Release
Page 239: ProSafe 7000 Managed Switch Release
Page 242 and 243: c. In the Secret Configured field,
Page 244 and 245: CLI: Create a Guest VLAN 1. Enter t
Page 246 and 247: c. In the VLAN Type field, select S
Page 248 and 249: 248 | Chapter 14. Security Manageme
Page 250 and 251: 2. Enable dot1x authentication on t
Page 256 and 257: 4. View the DHCP Snooping Binding t
Page 258 and 259: d. Click Apply. A screen similar to
Page 262 and 263: c. Click Apply. A screen similar to
Page 266 and 267: 2. Check to make sure the binding d
Page 268 and 269: IP Source Guard 268 | Chapter 14. S
Page 270 and 271: . For DHCP Snooping Mode, select th
Page 272 and 273: d. Click Apply. A screen similar to
Page 274 and 275: show sntp client (Netgear Switch Ro
Page 276 and 277: 276 | Chapter 15. SNTP ProSafe 7000
Page 278 and 279: CLI: Set the Named SNTP Server 278
Page 280 and 281: 16. Tools This chapter provides the
Page 282 and 283: Web Interface: Traceroute 282 | Cha
Page 284 and 285: script apply running-config.scr (Ne
Page 286 and 287: Port Mirroring The port ,irroring f
Page 288 and 289: 288 | Chapter 16. Tools ProSafe 700
Page 290 and 291: 290 | Chapter 16. Tools ProSafe 700
Page 292 and 293: CLI: transport output telnet (Netge
Page 294 and 295: 17. Syslog This chapter provides th
Page 296 and 297: a. Select Monitoring > Logs > Comma
Page 298 and 299: Web Interface: Show Logging Buffere
Page 300 and 301: Web Interface: Show Logging Hosts 3
Page 302 and 303: 18. Switch Stacks This chapter desc
Page 304 and 305: 1. The switch that is currently the
Page 306 and 307: Install a Switch Stack 306 | Chapte
Page 308 and 309: 4. Continue with the boot of operat
Page 310 and 311:
After Switch B reboots: 310 | Chapt
Page 312 and 313:
CLI: Stack Switches Using 10G Fiber
Page 314 and 315:
314 | Chapter 18. Switch Stacks Pro
Page 316 and 317:
5. Install the new switch in the ra
Page 318 and 319:
318 | Chapter 18. Switch Stacks Pro
Page 320 and 321:
Move the Stack Master to a Differen
Page 322 and 323:
Web Interface: Add a New Community
Page 324 and 325:
CLI: Configure SNMP V3 324 | Chapte
Page 326 and 327:
326 | Chapter 19. SNMP ProSafe 7000
Page 328 and 329:
328 | Chapter 19. SNMP ProSafe 7000
Page 330 and 331:
20. DNS Domain Name System This cha
Page 332 and 333:
332 | Chapter 20. DNS ProSafe 7000
Page 334 and 335:
334 | Chapter 21. DHCP Server ProSa
Page 336 and 337:
Page 338 and 339:
Page 340 and 341:
340 | Chapter 22. Double VLANs and
Page 342 and 343:
Page 344 and 345:
Page 346 and 347:
5. Add 1/0/16 and 1/0/7 to the priv
Page 348 and 349:
e. Click Add. 5. Add port 6 and 7 t
Page 350 and 351:
23. Spanning Tree Protocol This cha
Page 352 and 353:
Configure Rapid STP (802.1w) 352 |
Page 354 and 355:
Web Interface: Configure Multiple S
Page 356 and 357:
24. Tunnel Chapter 24. Tunnel 24 Th
Page 358 and 359:
Configure 358 | Chapter 24. Tunnel
Page 360 and 361:
360 | Chapter 24. Tunnel ProSafe 70
Page 362 and 363:
362 | Chapter 24. Tunnel ProSafe 70
Page 364 and 365:
25. IPv6 Interface Configuration Th
Page 366 and 367:
366 | Chapter 25. IPv6 Interface Co
Page 368 and 369:
d. In the EUI64 field, select False
Page 370 and 371:
Page 372 and 373:
Page 374 and 375:
Switch A Switch D Port 1/0/13 Port
Page 376 and 377:
5. Enable PIM-DM on the interface.
Page 378 and 379:
2. Enable IGMP on 1/0/24. 378 | Cha
Page 380 and 381:
380 | Chapter 26. PIM ProSafe 7000
Page 382 and 383:
Page 384 and 385:
PIM-SM on Switch B: 384 | Chapter 2
Page 386 and 387:
Page 388 and 389:
PIM-SM on Switch C 388 | Chapter 26
Page 390 and 391:
Page 392 and 393:
PIM-DM on Switch D: 392 | Chapter 2
Page 394 and 395:
Page 396 and 397:
Page 398 and 399:
Page 400 and 401:
PIM-SM on Switch C 400 | Chapter 26
Page 402 and 403:
Web Interface: Configure PIM-SM PIM
Page 404 and 405:
404 | Chapter 26. PIM • In the Su
Page 406 and 407:
. For Admin Mode, select the Enable
Page 408 and 409:
Page 410 and 411:
Page 412 and 413:
PIM-SM on Switch C: 412 | Chapter 2
Page 414 and 415:
Page 416 and 417:
Page 418 and 419:
Page 420 and 421:
d. Click Apply. 420 | Chapter 26. P
Page 422 and 423:
Page 424 and 425:
27. DHCP L2 Relay and L3 Relay This
Page 426 and 427:
6. Enable DHCP L2 relay on port 1/0
Page 428 and 429:
428 | Chapter 27. DHCP L2 Relay and
Page 430 and 431:
DHCP L3 Relay 430 | Chapter 27. DHC
Page 432 and 433:
Page 434 and 435:
Page 436 and 437:
f. Click Apply to save the settings
Page 438 and 439:
28. MLD Multicast Listener Discover
Page 440 and 441:
(Netgear Switch) (Config)#ipv6 unic
Page 442 and 443:
442 | Chapter 28. MLD ProSafe 7000
Page 444 and 445:
Page 446 and 447:
Page 448 and 449:
Page 450 and 451:
Page 452 and 453:
Page 454 and 455:
Web Interface: Configure MLD Snoopi
Page 456 and 457:
. Enter the following information:
Page 458 and 459:
458 | Chapter 29. DVMRP ProSafe 700
Page 460 and 461:
(Netgear Switch) #show ip mcast mro
Page 462 and 463:
DVRMP on Switch C: 1. Create routin
Page 464 and 465:
Web Interface: Configure DVMRP DVMR
Page 466 and 467:
Page 468 and 469:
Page 470 and 471:
Page 472 and 473:
Page 474 and 475:
Page 476 and 477:
476 | Chapter 30. Captive Portal Pr
Page 478 and 479:
Page 480 and 481:
CLI: Create Users and Groups 1. Cre
Page 482 and 483:
Page 484 and 485:
Index Numerics 6to4 tunnels 356 802
Page 486:
802.1x port security 237, 238 DHCP
show all

ProSafe 7000 Managed NETGEAR Switch Software Administration ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?