User Manual
Table Of Contents
- M4100 Series Managed Switch
- Contents
- 1. Get Started
- 2. Configure System Information
- System Configuration
- Configure Initial Management VLAN Settings
- Define System Information
- View the Switch Status
- Manage Loopback Interfaces
- View the IPv6 Network Neighbor Table
- Configure an IPv4 Management VLAN
- View or Set the System Time
- Configure DNS
- Configure the DHCP Server
- Configure the DHCP Pool
- Configure UDP Relay Global Settings
- Configure the Basic PoE Settings
- Configure Advanced PoE Settings
- View All MIBs Supported by the Switch
- Configure SNMP v3 Settings for a User
- LLDP Overview
- Configure LLDP Global Settings
- Configure an LLDP Interface
- View LLDP Statistics
- View LLDP Local Device Information
- View LLDP Remote Device Information
- View LLDP Remote Device Inventory
- Configure LLDP-MED Global Settings
- Configure the LLDP-MED Interface
- View LLDP-MED Local Device Information
- View LLDP-MED Remote Device Information
- View LLDP-MED Remote Device Inventory
- ISDP Settings Overview
- Configure Timers
- 3. Configure Switching Information
- VLAN Overview
- Configure a Basic VLAN
- Configure an Internal VLAN
- Add a VLAN
- Reset VLAN Configuration
- Configure Internal VLAN Settings
- Configure VLAN Trunking
- Configure VLAN Membership
- View VLAN Status
- Configure Port PVID
- Configure a MAC-Based VLAN Group
- Configure a Protocol-Based VLAN Group
- Configure Protocol-Based VLAN Group Membership
- Configure an IP Subnet–Based VLAN
- Configure Port DVLAN
- Configure a Voice VLAN
- Configure GARP Switch Settings
- Configure GARP Port Settings
- Auto-VoIP Overview
- Spanning Tree Protocol Overview
- Configure Multicast
- IGMP Snooping Overview
- Configure MLD Snooping
- Configure MVR
- Manage MAC Addresses
- Configure Port Settings
- Link Aggregation Group Overview
- VLAN Overview
- 4. Routing
- 5. Configure Quality of Service
- QoS Overview
- Class of Service
- Differentiated Services
- DiffServ Wizard Overview
- Use the DiffServ Wizard
- Configure DiffServ
- Configure the Global Diffserv Mode
- Configure a DiffServ Class
- Configure the Class Match Criteria
- Configure a DiffServ IPv6 Class
- Configure the DiffServ Class Match Criteria
- Configure DiffServ Policy
- Configure DiffServ Policy Attributes
- Configure DiffServ Policy Settings on an Interface
- View Service Statistics
- 6. Manage Device Security
- Management Security Settings
- Configure RADIUS Settings
- TACACS
- Set Up a Login Authentication List
- Configure Management Access
- Manage Certificates
- Manage Telnet
- Port Authentication Overview
- Traffic Control
- Configure a Private Group
- Private VLAN Overview
- Storm Control Overview
- Control DHCP Snooping Settings
- Configure an IP Source Guard Interface
- Configure Dynamic ARP Inspection
- Access Control List Overview
- Use the ACL Wizard
- Create a MAC ACL
- Configure MAC Rules
- Configure ACL MAC Binding
- View or Delete MAC Bindings
- Configure an IP ACL
- Configure Rules for an IP ACL
- Configure IP Extended Rules
- Configure an IPv6 ACL
- Configure IPv6 Rules
- Configure ACL Interface Bindings
- View or Delete IP ACL Bindings
- View or Delete VLAN ACL Bindings
- 7. Monitoring the System
- 8. Maintenance
- A. Default Settings
- B. Configuration Examples
Configuration Examples
442
M4100 Series Managed Switch
You can configure additional settings to control access to the network through the ports.
See
Port Security Interface Configuration on page 287 for information about the settings.
4. Click the APPLY button.
5. From the 802.1X Configuration screen, set the Port Based Authentication State and Guest
VLAN Mode to Enable, and then click the APPLY button.
Ssee Port Security Configuration on page 286.
This example uses the default values for the port authentication settings, but there are
several additional settings that you can configure. For example, the EAPOL Flood Mode
field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on
the device.
6. From the RADIUS Server Configuration screen, configure a RADIUS server with the
following settings:
• Server Address: 192.168.10.23
• Secret Configured: Yes
• Secret: secret123
• Active: Primary
For more information, see RADIUS on page 245.
7. Click the ADD button.
8. From the Authentication List screen, configure the default List to use RADIUS as the first
authentication method.
Ssee Set Up a Login Authentication List on page 275.
This example enables 802.1X-based port security on managed switch and prompts the hosts
connected on ports g5–g8 for an 802.1X-based authentication. The switch passes the
authentication information to the configured RADIUS server.
MSTP
Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge
loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning
Tree Protocol (MSTP) supports multiple instances of Spanning Tree to efficiently channel
VLAN traffic over different interfaces. Each instance of the Spanning Tree behaves in the
manner specified in IEEE 802.1w, Rapid Spanning Tree, with slight modifications in the
working but not the end effect (chief among the effects is the rapid transitioning of the port to
the forwarding state).
The difference between the RSTP and the traditional STP (IEEE 802.1D) is the ability to
configure and recognize full duplex connectivity and ports that are connected to end stations,
resulting in rapid transitioning of the port to the rorwarding state and the suppression of
topology change notification. These features are represented by the parameters pointtopoint
and edgeport. MSTP is compatible to both RSTP and STP. It behaves appropriately to STP
and RSTP bridges.