软件配置手册 5.4.13 添加MLD Snooping路由端口 ........................................... 5-30 5.4.14 配置MLD Snooping端口的组播VLAN ............................. 5-30 5.4.15 显示MLD Snooping学习到的组播表项 ............................ 5-31

5.5 静态组播配置....................................................................................... 5-31

5.5.1 静态组播简介 ....................................................................... 5-32 5.5.2 静态组播配置 ....................................................................... 5-32

第6章 ACL配置 ........................................................................................ 6-36

6.1 访问控制列表简介 ............................................................................... 6-36

6.1.1 访问控制列表概述 ............................................................... 6-36 6.1.2 匹配顺序的配置 ................................................................... 6-36 6.1.3 访问控制列表支持 ............................................................... 6-37

6.2 ACL配置 .............................................................................................. 6-39

6.2.1 配置任务列表 ....................................................................... 6-39 6.2.2 时间段配置 .......................................................................... 6-39 6.2.3 定义访问控制列表 ............................................................... 6-41 6.2.4 激活访问控制列表 ............................................................... 6-49

6.3 访问控制列表的监控与维护 ................................................................. 6-50

第7章 QOS配置 ......................................................................................... 7-1

7.1 QOS简介 ............................................................................................... 7-1 7.2 QOS配置 ............................................................................................... 7-6

7.2.1 QoS配置任务列表 ................................................................. 7-6 7.2.2 流量监管 ................................................................................ 7-7 7.2.3 端口限速 ................................................................................ 7-9 7.2.4 报文重定向配置 ................................................................... 7-10 7.2.5 优先级标记配置 .................................................................... 7-11 7.2.6 队列调度配置 ....................................................................... 7-12 7.2.7 设置硬件优先级队列与802.1p协议优先级的映射关系 ....... 7-13 7.2.8 设置DSCP与硬件优先级队列的映射关系 .......................... 7-14 7.2.9 流镜像配置 .......................................................................... 7-14

VII

软件配置手册 7.2.10 流量统计配置 ..................................................................... 7-15 7.2.11 报文拷贝到CPU配置 ........................................................ 7-16 7.2.12 报文重写vlan配置 ............................................................ 7-17 7.2.13 报文插入vlan配置 ............................................................ 7-18 7.2.14 入口带宽控制 ..................................................................... 7-19

7.3 QoS 的监控与维护 .............................................................................. 7-19 7.4 QACL配置实例 .................................................................................... 7-22

7.4.1 使用QACL实现用户隔离功能 ............................................ 7-22 7.4.2 使用QACL实现带宽控制 .................................................... 7-28 7.4.3 使用QACL实现deny all packet expect功能 ..................... 7-29 7.4.4 使用QACL防病毒............................................................... 7-30

7.5 端口隔离 .............................................................................................. 7-31

7.5.1 端口隔离简介 ....................................................................... 7-31 7.5.2 端口隔离配置 ....................................................................... 7-32

7.6 风暴控制 .............................................................................................. 7-32

7.6.1 风暴控制简介 ....................................................................... 7-33 7.6.2 风暴控制配置 ....................................................................... 7-33

第8章 STP功能配置 ................................................................................... 8-1

8.1 STP协议简介 ......................................................................................... 8-1 8.2 STP功能配置 ......................................................................................... 8-1

8.2.1 STP功能配置任务列表 .......................................................... 8-1 8.2.2 开启/关闭设备STP特性 ....................................................... 8-2 8.2.3 开启/关闭端口STP特性 ....................................................... 8-3 8.2.4 配置交换机的生成树协议模式 ............................................... 8-3 8.2.5 配置交换机STP优先级 ........................................................ 8-4 8.2.6 配置交换机Forward Delay特性 ........................................... 8-5 8.2.7 配置交换机Hello Time特性 .................................................. 8-5 8.2.8 配置交换机Max Age特性 ..................................................... 8-6 8.2.9 配置特定端口的路径开销 ...................................................... 8-7

VIII

软件配置手册 8.2.10 配置特定端口的STP优先级 ............................................... 8-8 8.2.11 配置特定端口强制发送rstp报文 ........................................ 8-8 8.2.12 配置特定端口的链路类型 .................................................... 8-9 8.2.13 配置特定端口的边界端口状态 ........................................... 8-10 8.2.14 配置特定端口发送BPDU的速率限制 ............................... 8-10 8.2.15 STP监控和维护 .................................................................. 8-11 8.2.16 开启/关闭端口的远端环路检测功能 ................................... 8-12

8.3 MSTP协议简介 .................................................................................... 8-12 8.4 MSTP功能配置 .................................................................................... 8-13

8.4.1 MSTP功能配置任务列表 ..................................................... 8-13 8.4.2 配置MSTP的定时器参数值 ................................................ 8-13 8.4.3 配置MSTP的配置标识符 ................................................... 8-14 8.4.4 配置MSTP网桥优先级 ....................................................... 8-15 8.4.5 配置MSTP端口的边界端口状态 ........................................ 8-16 8.4.6 配置MSTP端口的链路类型 ................................................ 8-16 8.4.7 配置MSTP端口的路径花费 ................................................ 8-17 8.4.8 配置MSTP端口优先级 ....................................................... 8-18 8.4.9 显示MSTP配置信息 ........................................................... 8-18

第9章 802.1X配置命令 .............................................................................. 9-1

9.1 802.1X协议简介 .................................................................................... 9-1 9.2 802.1X配置 ........................................................................................... 9-2

9.2.1 AAA模式配置 ......................................................................... 9-2 9.2.2 配置RADIUS服务器 ............................................................. 9-5 9.2.3 配置域 .................................................................................... 9-8 9.2.4 802.1X配置 .......................................................................... 9-10

第10章 SNTP客户端配置 ...................................................................... 10-15

10.1 SNTP协议简介 ................................................................................ 10-15 10.2 SNTP客户端配置 ............................................................................ 10-16

10.2.1 开启/关闭设备SNTP客户端功能 .................................... 10-16

IX

软件配置手册 10.2.2 SNTP客户端的工作方式配置 .......................................... 10-17 10.2.3 SNTP客户端的单播服务器配置 ....................................... 10-17 10.2.4 SNTP客户端的广播延时配置 .......................................... 10-18 10.2.5 SNTP客户端的组播TTL配置 ......................................... 10-18 10.2.6 SNTP客户端的轮询间隔配置 .......................................... 10-19 10.2.7 SNTP客户端的超时重传配置 .......................................... 10-19 10.2.8 SNTP客户端合法服务器列表配置 ................................... 10-20 10.2.9 SNTP客户端的MD5认证配置 ........................................ 10-21 10.2.10 SNTP客户端的夏令时配置 ............................................ 10-22

第11章 Syslog配置 ................................................................................... 11-1

11.1 Syslog简介 ........................................................................................ 11-1 11.2 Syslog配置 ........................................................................................ 11-2

11.2.1 开启/关闭设备Syslog功能 ................................................. 11-2 11.2.2 Syslog序列号显示配置 ....................................................... 11-3 11.2.3 Syslog时间戳类型配置 ....................................................... 11-3 11.2.4 Syslog记录语言类型配置.................................................... 11-4 11.2.5 Syslog终端输出配置 ........................................................... 11-4 11.2.6 Syslog历史缓冲区输出配置 ................................................ 11-5 11.2.7 Syslog Flash存储器输出配置 ............................................. 11-6 11.2.8 Syslog日志主机输出配置.................................................... 11-7 11.2.9 Syslog SNMP Agent输出配置 ............................................ 11-9 11.2.10 模块调试开关配置........................................................... 11-10

第12章 SSH配置...................................................................................... 12-1

12.1 SSH简介 ........................................................................................... 12-1 12.2 SSH配置 ........................................................................................... 12-1

12.2.1 开启/关闭设备SSH功能 ................................................... 12-1 12.2.2 SSH密钥配置 .................................................................... 12-2 12.2.3 其他 ................................................................................... 12-4

第13章 交换机管理和维护 ........................................................................ 13-1

X

软件配置手册 13.1 配置文件管理..................................................................................... 13-1

13.1.1 编辑配置文件 ..................................................................... 13-1 13.1.2 修改和保存当前配置 .......................................................... 13-1 13.1.3 擦除配置 ............................................................................ 13-1 13.1.4 保存网管可管理最小配置 .................................................. 13-2 13.1.5 执行已保存的配置 ............................................................. 13-2 13.1.6 显示已保存的配置 ............................................................. 13-3 13.1.7 显示当前配置 ..................................................................... 13-4 13.1.8 配置文件执行模式的切换 .................................................. 13-4

13.2 在线加载升级程序 ............................................................................. 13-5

13.2.1 通过TFTP上、下载文件 .................................................. 13-5 13.2.2 通过FTP上、下载文件 ..................................................... 13-7 13.2.3 通过Xmodem下载文件 .................................................... 13-9

13.3 设备管理 .......................................................................................... 13-10

13.3.1 MAC地址表管理 .............................................................. 13-10 13.3.2 重启交换机 ...................................................................... 13-17

13.4 系统维护 .......................................................................................... 13-17

13.4.1 show命令查看系统状态和系统信息 ................................ 13-17 13.4.2 系统基本配置及管理 ........................................................ 13-18 13.4.3 网络连接的测试命令 ........................................................ 13-20 13.4.4 回环测试命令 ................................................................... 13-21 13.4.5 VCT测试命令 .................................................................. 13-22 13.4.6 管理IP地址限制 ............................................................. 13-23 13.4.7 同时进入特权模式的Telnet用户数限制 .......................... 13-24 13.4.8 路由跟踪命令 ................................................................... 13-25 13.4.9 cpu-car命令 ..................................................................... 13-26

13.5 利用SNMP对系统监控 ................................................................... 13-26

13.5.1 SNMP协议介绍 ............................................................... 13-26 13.5.2 SNMP配置 ....................................................................... 13-27

XI