Contents

• Preface

• Description

• Preface

• Part 1 Filter

  • 1 Filter

    • 1.1 Description

      • 1.1.1 Filter Overview

      • 1.1.2 Flow detection

      • 1.1.3 Flow detection mode

      • 1.1.4 Flow detection conditions

      • 1.1.5 Access list

      • 1.1.6 Implicit discard

      • 1.1.7 Notes on using filters

    • 1.2 Command Guide

      • 1.2.1 Command list

      • 1.2.2 Flow detection mode setting

      • 1.2.3 Settings for forwarding and discarding in MAC headers

      • 1.2.4 Settings for forwarding and discarding in IP and TCP/UDP headers

      • 1.2.5 Configuring Multiple Interface Filters

• PART 2: QoS

  • 2 Outline of QoS Control

    • 2.1 QoS control architecture

    • 2.2 Description of Common Processing

      • 2.2.1 User Priority Mapping

    • 2.3 Command guide for QoS control

      • 2.3.1 Command list

  • 3 Flow Control

    • 3.1 Description of flow detection

      • 3.1.1 Flow detection mode

      • 3.1.2 Flow detection conditions

      • 3.1.3 QoS flow list

      • 3.1.4 Notes on using flow detection

    • 3.2 Flow Detection Command Guide

      • 3.2.1 Flow detection mode setting

      • 3.2.2 Specifying QoS Control for Multiple Interfaces

      • 3.2.3 QoS control setting by TCP/UDP port number

    • 3.3 Description of bandwidth monitoring

      • 3.3.1 Bandwidth monitoring

      • 3.3.2 Statistical information that can be collected when bandwidth monitoring is used

      • 3.3.3 Notes on using bandwidth monitoring

    • 3.4 Command Guide for Bandwidth Monitor

      • 3.4.1 Configuring Maximum Bandwidth Control

      • 3.4.2 Setting the queuing priority when the minimum bandwidth monitoring is violated

      • 3.4.3 Setting of DSCP rewrite when minimum bandwidth monitoring is violated

      • 3.4.4 Configuring a combination of maximum bandwidth control and minimum bandwidth monitoring

    • 3.5 Marker Description

      • 3.5.1 Rewrite user priority

      • 3.5.2 DSCP rewriting

    • 3.6 Marker Command Guide

      • 3.6.1 User priority rewrite setting

      • 3.6.2 Setting of DSCP rewrite

    • 3.7 Description of priority determination

      • 3.7.1 Frame subject to priority determination

      • 3.7.2 CoS and queuing priorities

      • 3.7.3 CoS Mapping Function

      • 3.7.4 Precautions when using priority determination

    • 3.8 Command guide for determining priority

      • 3.8.1 CoS setting

  • 4 Transmit Control

    • 4.1 Description of shaper

      • 4.1.1 Legacy shaper overview

      • 4.1.2 Send queue length

      • 4.1.3 Scheduling

      • 4.1.4 Port bandwidth control

      • 4.1.5 Notes on using shaper

    • 4.2 Shaper command guide

      • 4.2.1 Scheduling settings

      • 4.2.2 Configuring Port Bandwidth Control

    • 4.3 Description of disposal control

      • 4.3.1 Disposal control

    • 4.4 Command guide for discard control

      • 4.4.1 Setting the queuing priority

• PART 3: Layer 2 authentication

  • 5 Layer 2 authentication

    • 5.1 Overview

      • 5.1.1 Layer 2 authentication type

      • 5.1.2 Authentication method

      • 5.1.3 MAC VLAN Dynamic VLAN Configuration and Layer 2 Authentication

      • 5.1.4 Ports subject to Layer 2 authentication

    • 5.2 Coexistence of Layer 2 authentication and other functions

      • 5.2.1 Coexistence of Layer 2 authentication and other functions

      • 5.2.2 Coexistence in the same port

      • 5.2.3 Priority of authentication when Layer 2 authentication is used together

    • 5.3 Functionality common to Layer 2 authentication

      • 5.3.1 Permit communication of pre-authentication terminal

      • 5.3.2 Limiting the number of authentications

      • 5.3.3 Forced authentication

      • 5.3.4 Deactivating Authentication When Moving an Authenticated Terminal to a Port-to-Port or to an Unauthenticated Port

      • 5.3.5 Dead interval function of RADIUS servers communication

      • 5.3.6 Operation when dot1q is set to MAC

      • 5.3.7 Suppressing deauthorization at link-down

    • 5.4 Notes on using Layer 2 authentication

      • 5.4.1 Precautions When Setting and Changing the Status of the Switch

      • 5.4.2 Notes on using RADIUS servers

    • 5.5 Command guide common to Layer 2 authentication

      • 5.5.1 List of configuration commands

      • 5.5.2 Parameter setting of Layer 2 authentication common configuration command

  • 6 IEEE 802.1 X Description

    • 6.1 IEEE 802.1 X Overview

      • 6.1.1 Support function

    • 6.2 Overview of Extensions

      • 6.2.1 Authentication mode

      • 6.2.2 Terminal detection operation switching option

      • 6.2.3 Terminal request reauthentication suppression function

      • 6.2.4 RADIUS server-access function

      • 6.2.5 EAPOL forwarding function

      • 6.2.6 Deauthorization method

      • 6.2.7 Limiting the number of authentications

      • 6.2.8 Move authenticated terminals between ports

      • 6.2.9 Communication restrictions on authenticated terminals

    • 6.3 IEEE 802.1 X important reminder for use

  • 7 IEEE802.1X configuration and operation

    • 7.1 Command Guide

      • 7.1.1 Command list

      • 7.1.2 Setting to enable IEEE802.1X

      • 7.1.3 Setting Fixed VLAN Mode

      • 7.1.4 Configuring Dynamic VLAN

      • 7.1.5 Configuring Authentication Mode Options

      • 7.1.6 Settings related to authentication processing

      • 7.1.7 RADIUS server-related settings

      • 7.1.8 Changing IEEE802.1X Authentication Status

  • 8 Description of Web authentication

    • 8.1 Overview

    • 8.2 Sample system configuration

      • 8.2.1 Fixed VLAN

      • 8.2.2 Dynamic VLAN

      • 8.2.3 Configuration using IP addressing

    • 8.3 Authentication function

      • 8.3.1 Permit communication of pre-authentication terminal

      • 8.3.2 Logging In to an Authentication Network

      • 8.3.3 Forced authentication

      • 8.3.4 Logging Out of the Authentication Network

      • 8.3.5 Limiting the number of authentications

      • 8.3.6 Move authenticated terminals between ports

      • 8.3.7 Account function

    • 8.4 Authentication procedure

    • 8.5 Preparing Embedded Web Authentication DB and RADIUS Servers

      • 8.5.1 Preparing the Embedded Web Authentication DB

      • 8.5.2 Preparing RADIUS Servers

    • 8.6 Authentication error messages

    • 8.7 Web authentication window change function

    • 8.8 Notes on Using Web authentication

    • 8.9 Operation of SSL certificates

      • 8.9.1 Logging in and out using HTTPS

      • 8.9.2 Support Specifications

      • 8.9.3 Operation flow

  • 9 Setting up and operating Web authentication

    • 9.1 Command Guide

      • 9.1.1 Command list

      • 9.1.2 Setting Fixed VLAN Mode

      • 9.1.3 Configuring Dynamic VLAN

      • 9.1.4 Web Authentication Parameter Settings

      • 9.1.5 How to Configure Authentication Exceptions

      • 9.1.6 Creating an Embedded Web Authentication DB

      • 9.1.7 Backing Up internal Web authentication DB

      • 9.1.8 Registering Web certification display

      • 9.1.9 Deleting the Registered Web Authentication Display

      • 9.1.10 Returning RADIUS server access by dead interval function to the first RADIUS server

    • 9.2 Web Certification Window Creation Guide

      • 9.2.1 Login Window (login.html)

      • 9.2.2 Logout window (logout.html)

      • 9.2.3 Authentication error message file (webauth.msg)

      • 9.2.4 Web certification-specific tags

      • 9.2.5 Other screen samples

    • 9.3 Preparing SSL Certificate

      • 9.3.1 Environment for creating server certificates and keys

      • 9.3.2 Creating Server Certificates and Keys

      • 9.3.3 Registering Server Certificates and Keys

      • 9.3.4 Deleting Server Certificates and Keys

  • 10 Description of MAC Certification

    • 10.1 Overview

    • 10.2 Sample system configuration

      • 10.2.1 Fixed VLAN

      • 10.2.2 Dynamic VLAN

      • 10.2.3 Operation when dot1q is set to MAC

    • 10.3 Authentication function

      • 10.3.1 Operation after authentication failure

      • 10.3.2 Forced authentication

      • 10.3.3 Deauthorization method

      • 10.3.4 Limiting the number of authentications

      • 10.3.5 Move authenticated terminals between ports

      • 10.3.6 Account function

    • 10.4 Preparing Embedded MAC Authentication DB and RADIUS Servers

      • 10.4.1 Preparing the Embedded MAC Authentication DB

      • 10.4.2 Preparing RADIUS Servers

    • 10.5 Notes on Using MAC-based authentication

  • 11 Setting up and operating MAC-based authentication

    • 11.1 Command Guide

      • 11.1.1 Command list

      • 11.1.2 Setting Fixed VLAN Mode

      • 11.1.3 Configuring Dynamic VLAN

      • 11.1.4 MAC-based authentication Parameter Settings

      • 11.1.5 How to Configure Authentication Exceptions

      • 11.1.6 Creating an Embedded MAC Authentication DB

      • 11.1.7 Backing Up internal MAC-based authentication DB

      • 11.1.8 Returning RADIUS server access by dead interval function to the first RADIUS server

  • 12 Multi-step authentication

    • 12.1 Description

      • 12.1.1 Overview

      • 12.1.2 Support function

      • 12.1.3 Authentication operation

      • 12.1.4 Handling when forced authentication is enabled

      • 12.1.5 Managing and deactivating authenticated terminals

      • 12.1.6 Move authenticated terminals between ports

      • 12.1.7 Viewing Authentication Status and Account Logs

      • 12.1.8 Notes on using multi-step authentication

    • 12.2 Command Guide

      • 12.2.1 Command list

      • 12.2.2 Setting Fixed VLAN Mode

      • 12.2.3 Dynamic VLAN setting

• PART 4: Security

  • 13 DHCP snooping

    • 13.1 Description

      • 13.1.1 Overview

      • 13.1.2 Monitoring DHCP Packets

      • 13.1.3 Rate-limiting DHCP packets

      • 13.1.4 Terminal filter

      • 13.1.5 Dynamic ARP checking

      • 13.1.6 Rate-limiting ARP packets

      • 13.1.7 Notes on using DHCP snooping

    • 13.2 Command Guide

      • 13.2.1 Command list

      • 13.2.2 Basic Settings

      • 13.2.3 Rate-limiting DHCP packets

      • 13.2.4 Terminal filter

      • 13.2.5 Dynamic ARP checking

      • 13.2.6 Rate-limiting ARP packets

      • 13.2.7 When a terminal with a fixed IP is connected

      • 13.2.8 When a DHCP relay is connected under the Switch

      • 13.2.9 When a DHCP relay that assigns Option82 to the Switch is connected

      • 13.2.10 Outputting to syslog Servers

• PART 5: High Reliability with Redundant Configuration

  • 14 GSRP aware

    • 14.1 Description

      • 14.1.1 Introduction to GSRP

      • 14.1.2 Operation of GSRP switching

      • 14.1.3 Notes on using GSRP aware

    • 14.2 Command Guide

      • 14.2.1 Command list

  • 15 Uplink redundant

    • 15.1 Description

      • 15.1.1 Overview

      • 15.1.2 Support Specifications

      • 15.1.3 Overview of Uplink and Redundant Operation

      • 15.1.4 Toggle-back operation

      • 15.1.5 Automatic switch-back function

      • 15.1.6 Auxiliary function for communication restoration

      • 15.1.7 Flash control frame transmission/reception function

      • 15.1.8 MAC address update function

      • 15.1.9 Port reset function

      • 15.1.10 Fixed Active Port Function at Switch Startup

      • 15.1.11 Notes on using uplink redundant

    • 15.2 Command Guide

      • 15.2.1 Command list

      • 15.2.2 Configuring Uplink Redundant

      • 15.2.3 Manually Changing the Active Port

      • 15.2.4 Configuring the port reset function

• PART 6: Network Monitoring Functions

  • 16 L2 Loop Detection

    • 16.1 Description

      • 16.1.1 Overview

      • 16.1.2 Operating specifications

      • 16.1.3 Applications

      • 16.1.4 Precautions when using L2 loop detection

    • 16.2 Command Guide

      • 16.2.1 Command list

      • 16.2.2 Configuring L2 Loop Detection

  • 17 Storm Control

    • 17.1 Description

      • 17.1.1 Storm Control Overview

      • 17.1.2 Notes on using storm control

    • 17.2 Command Guide

      • 17.2.1 Command list

      • 17.2.2 Configuring Storm Control

• PART 7: Managing Networks

  • 18 Port mirroring

    • 18.1 Description

      • 18.1.1 Port Mirroring Overview

      • 18.1.2 Operation Specifications for Port Mirroring

      • 18.1.3 802.1Q Tag assignment function

      • 18.1.4 Notes on using port mirroring

    • 18.2 Command Guide

      • 18.2.1 List of configuration commands

      • 18.2.2 Port mirroring settings

      • 18.2.3 Setting the 802.1Q tag assignment function

  • 19 Policy-Based Mirroring

    • 19.1 Description

      • 19.1.1 Overview

      • 19.1.2 Policy-Based Mirroring Behavior Specifications

      • 19.1.3 Notes on using policy-based mirroring

    • 19.2 Command Guide

      • 19.2.1 Command list

      • 19.2.2 Configuring Policy-Based Mirroring

  • 20 sFlow statistics (flow statistics) function

    • 20.1 Description

      • 20.1.1 Introduction to sFlow Stats

      • 20.1.2 sFlow Statistical Agent Feature

      • 20.1.3 sFlow packet-format

      • 20.1.4 sFlow statistical operation of the Switch

      • 20.1.5 Notes on Using sFlow Statistics

    • 20.2 Command Guide

      • 20.2.1 Command list

      • 20.2.2 Basic Settings for sFlow Statistics

      • 20.2.3 Sample setting of sFlow statistical configuration parameter

      • 20.2.4 How to adjust the sample rate of sFlow statistic

  • 21 IEEE802.3ah/UDLD

    • 21.1 Description

      • 21.1.1 Overview

      • 21.1.2 Support Specifications

      • 21.1.3 IEEE 802.3 ah/UDLD important reminder for use

    • 21.2 Command Guide

      • 21.2.1 Command list

      • 21.2.2 IEEE 802.3 ah/UDLD Setting

  • 22 CFM

    • 22.1 Description

      • 22.1.1 Overview

      • 22.1.2 Components of CFM

      • 22.1.3 Design of the domain

      • 22.1.4 Continuity Check

      • 22.1.5 Loopback

      • 22.1.6 Linktrace

      • 22.1.7 Common operation specifications

      • 22.1.8 Databases Used by CFM

      • 22.1.9 Notes on using CFM

    • 22.2 Command Guide

      • 22.2.1 Command list

      • 22.2.2 Configuring CFM (multi-domain)

      • 22.2.3 CFM settings (same domain/multiple MA)

  • 23 LLDP

    • 23.1 Description

      • 23.1.1 Overview

      • 23.1.2 Support Specifications

      • 23.1.3 Notes on using LLDP

    • 23.2 Command Guide

      • 23.2.1 Command list

      • 23.2.2 Configuring LLDP

• Appendix

  • Appendix A Compliance standards

    • AppendixA.1 Diff-serv

    • AppendixA.2 IEEE 802.1 X

    • A.3 Web certification

    • A.4 MAC certification

    • AppendixA.5 DHCP snooping

    • AppendixA.6 sFlow

    • AppendixA.7 IEEE 802.3 ah/UDLD

    • AppendixA.8 CFM

    • AppendixA.9 LLDP

• Index