Concept Guide
Setting the RMON Alarm........................................................................................................................................801
Conguring an RMON Event..................................................................................................................................801
Conguring RMON Collection Statistics.............................................................................................................. 802
Conguring the RMON Collection History........................................................................................................... 802
45 Rapid Spanning Tree Protocol (RSTP).....................................................................................................804
Protocol Overview.........................................................................................................................................................804
Conguring Rapid Spanning Tree................................................................................................................................ 804
Related Conguration Tasks...................................................................................................................................804
Important Points to Remember................................................................................................................................... 804
RSTP and VLT..........................................................................................................................................................805
Conguring Interfaces for Layer 2 Mode................................................................................................................... 805
Enabling Rapid Spanning Tree Protocol Globally........................................................................................................806
Adding and Removing Interfaces.................................................................................................................................808
Modifying Global Parameters.......................................................................................................................................808
Enabling SNMP Traps for Root Elections and Topology Changes..................................................................... 810
Modifying Interface Parameters................................................................................................................................... 810
Enabling SNMP Traps for Root Elections and Topology Changes........................................................................... 810
Inuencing RSTP Root Selection.................................................................................................................................. 811
Conguring an EdgePort................................................................................................................................................811
Conguring Fast Hellos for Link State Detection....................................................................................................... 812
46 Software-Dened Networking (SDN).......................................................................................................813
47 Security....................................................................................................................................................814
AAA Accounting..............................................................................................................................................................814
Conguration Task List for AAA Accounting.........................................................................................................814
AAA Authentication........................................................................................................................................................816
Conguration Task List for AAA Authentication................................................................................................... 817
Obscuring Passwords and Keys...................................................................................................................................820
AAA Authorization......................................................................................................................................................... 820
Privilege Levels Overview.......................................................................................................................................820
Conguration Task List for Privilege Levels...........................................................................................................821
RADIUS........................................................................................................................................................................... 825
RADIUS Authentication...........................................................................................................................................825
Conguration Task List for RADIUS...................................................................................................................... 826
Support for Change of Authorization and Disconnect Messages packets...................................................... 829
TACACS+........................................................................................................................................................................840
Conguration Task List for TACACS+...................................................................................................................840
TACACS+ Remote Authentication.........................................................................................................................842
Command Authorization.........................................................................................................................................843
Protection from TCP Tiny and Overlapping Fragment Attacks............................................................................... 844
Enabling SCP and SSH................................................................................................................................................. 844
Using SCP with SSH to Copy a Software Image................................................................................................ 845
Removing the RSA Host Keys and Zeroizing Storage ....................................................................................... 846
Conguring When to Re-generate an SSH Key ..................................................................................................846
26
Contents










