Juniper Networks EX2500 Manuel d'utilisateur Page 24
- Page / 102
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
EX2500 Ethernet Switch Configuration Guide
10 Securing Access to the Switch
SNMPv3 Trap Host Configuration
To configure a user for SNMPv3 traps, you can choose to send the traps with both
privacy and authentication, with authentication only, or without privacy or
authentication.
This is configured in the access table with the following commands:
ex2500(config)# snmp-server access <1-32> level
ex2500(config)# snmp-server target-parameters <1-16>
Configure the user in the user table accordingly.
It is not necessary to configure the community table for SNMPv3 traps because the
community string is not used by SNMPv3.
The following example shows how to configure a SNMPv3 user v3trap with
authentication only:
ex2500(config)# snmp-server user 11 name v3trap
ex2500(config)# snmp-server user 11 authentication-protocol md5
authentication-password
Changing authentication password; validation required:
Enter current admin password: <admin. password>
Enter new authentication password: <auth. password>
Re-enter new authentication password: <auth. password>
New authentication password accepted.
ex2500(config)# snmp-server access 11 notify-view iso
ex2500(config)# snmp-server access 11 level authnopriv
ex2500(config)# snmp-server group 11 user-name v3trap
ex2500(config)# snmp-server group 11 tag v3trap
ex2500(config)# snmp-server notify 11 name v3trap
ex2500(config)# snmp-server notify 11 tag v3trap
ex2500(config)# snmp-server target-address 11 name v3trap address 47.81.25.66
ex2500(config)# snmp-server target-address 11 taglist v3trap
ex2500(config)# snmp-server target-address 11 parameters-name v3param
ex2500(config)# snmp-server target-parameters 11 name v3param
ex2500(config)# snmp-server target-parameters 11 user-name v3trap
ex2500(config)# snmp-server target-parameters 11 level authNoPriv
Securing Access to the Switch
Secure switch management is needed for environments that perform significant
management functions across the Internet. Common functions for secured
management are described in the following sections:
RADIUS Authentication and Authorization on page 11
TACACS+ Authentication on page 14
End User Access Control on page 18
- Configuration Guide 1
- Table of Contents 3
- Part 2 Appendixes 6
- Part 3 Indexes 6
- List of Figures 7
- List of Tables 10
- About This Guide 11
- Documentation Conventions 12
- Documentation Feedback 13
- Requesting Technical Support 13
- Opening a Case with JTAC 14
- Accessing the Switch 17
- Using Telnet 19
- Using SNMP 21
- SNMPv1, SNMPv2 21
- Default Configuration 22
- User Configuration 22
- Configuring SNMP Trap Hosts 23
- Securing Access to the Switch 24
- Switch User Accounts 27
- TACACS+ Authentication 28
- Secure Shell 31
- End User Access Control 32
- User Access Control 33
- Listing Current Users 34
- Chapter 2 35
- VLAN Numbers 36
- PVID Numbers 36
- VLAN Tagging 37
- 24 VLAN Tagging 38
- VLAN Tagging 25 39
- Chapter 2: VLANs 39
- VLAN Configuration Rules 40
- Component Description 41
- Private VLANs 43
- Private VLAN Ports 43
- Spanning Tree Protocol 45
- Bridge Priority 46
- Port Priority 47
- Port Path Cost 47
- Creating a VLAN 48
- Rules for VLAN Tagged Ports 48
- Rapid Spanning Tree Protocol 49
- Port State Changes 49
- Port Type and Link Type 50
- RSTP Configuration Guidelines 50
- RSTP Configuration Example 50
- Per VLAN Rapid Spanning Tree 51
- Configuring PVRST 52
- MSTP Region 53
- Common Internal Spanning Tree 53
- MSTP Configuration Guidelines 53
- Fast Uplink Convergence 55
- Configuration Guidelines 56
- Ports and Trunking 57
- Built-In Fault Tolerance 58
- TRUNK 3: PORTS 2, 9, AND 16 59
- TRUNK 1: PORTS 1, 11, AND 18 59
- Chapter 4: Ports and Trunking 61
- Actor Switch Partner Switch 1 62
- LACP Configuration Guidelines 63
- Configuring LACP 63
- (3 seconds), instead 64
- Quality of Service 65
- Permit/Deny 66
- MAC Extended ACLs 67
- IP Standard ACLs 67
- IP Extended ACLs 68
- Understanding ACL Priority 69
- Assigning ACLs to a Port 70
- Viewing ACL Statistics 70
- ACL Configuration Examples 70
- Using ACL Filters 57 71
- Chapter 5: Quality of Service 71
- Using ACL Filters 72
- Using Storm Control Filters 73
- Broadcast Storms 73
- Configuring Storm Control 73
- Per Hop Behavior 75
- QoS Levels 76
- DSCP Mapping 76
- Priority 77
- VLAN Identifier (VID) 77
- Queuing and Scheduling 78
- Remote Monitoring 79
- RMON Group 1—Statistics 80
- RMON Group 2—History 81
- History MIB Object ID 81
- Configuring RMON History 81
- RMON Group 3—Alarms 82
- Alarm MIB Objects 82
- Configuring RMON Alarms 82
- RMON Group 9—Events 83
- 70 RMON Group 9—Events 84
- Chapter 7 85
- FastLeave 86
- IGMPv3 Snooping 87
- Static Multicast Router 88
- Detection 89
- Failure Detection Pair 90
- UFD Configuration Guidelines 90
- UFD Configuration Example 91
- Monitoring UFD 91
- 78 Monitoring UFD 92
- Appendixes 93
- 80 Appendixes 94
- Appendix A 95
- Configuring Port Mirroring 96
- Index on page 85 97
- 84 Indexes 98
- Index 85 99
- 86 Index 100
- Index 87 101
- 88 Index 102
Produits connexes et manuels pour Mise en réseau Juniper Networks EX2500
(84 pages)
(116 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.030 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels