Home » Netgear Manuals » Hubs & Switches » Netgear XCM89UP » Manual Viewer

Netgear XCM89UP Software Administration Manual Software Version 11.x - Page 221

CLI: Set Up an IP ACL with Two Rules, source IP address after the mask has been applied

Add to My Manuals
Save this manual to your list of manuals

Page 221 highlights

Managed Switches Layer 3 switch TCP packet to 192.178.88.3 rejected. Dest. IP not in range. Layer 2 switch TCP packet to 192.178.77.3 accepted. Dest. IP in range. Port 1/0/2 ACL 1 192.168.77.1 192.168.77.4 192.168.77.9 192.168.77.2 Figure 22. IP ACL with rules for TCP traffic and UDP traffic CLI: Set Up an IP ACL with Two Rules The following is an example of configuring ACL support on a 7000 Series Managed Switch. Create ACL 101. Define the first rule: The ACL will permit packets that match the specified source IP address (after the mask has been applied), that are carrying TCP traffic, and that are sent to the specified destination IP address. 1. Enter these commands: (Netgear Switch) #config (Netgear Switch) (Config)#access-list 101 permit tcp 192.168.77.0 0.0.0.255 192.178.77.0 0.0.0.255 2. Define the second rule for ACL 101 to set conditions for UDP traffic similar to those for TCP traffic. (Netgear Switch) (Config)#access-list 101 permit udp 192.168.77.0 0.0.0.255 192.178.77.0 0.0.0.255 ACLs 221 Software Administration Manual

Section	Page
M5300, M6100, and M7100 Series ProSAFE Managed Switches	1
Table of Contents	4
1 Documentation Resources	19
2 VLANs	20
VLAN Concepts	21
Create Two VLANs	22
CLI: Create Two VLANs	22
Web Interface: Create Two VLANs	22
Assign Ports to VLAN 2	23
CLI: Assign Ports to VLAN 2	23
Web Interface: Assign Ports to VLAN 2	24
Create Three VLANs	25
CLI: Create Three VLANs	25
Web Interface: Create Three VLANs	25
Assign Ports to VLAN 3	27
CLI: Assign Ports to VLAN 3	27
Web Interface: Assign Ports to VLAN 3	27
Assign VLAN 3 as the Default VLAN for Port 1/0/2	28
CLI: Assign VLAN 3 as the Default VLAN for Port 1/0/2	28
Web Interface: Assign VLAN 3 as the Default VLAN for Port 1/0/2	29
Create a MAC-Based VLAN	29
CLI: Create a MAC-Based VLAN	30
Web Interface: Assign a MAC-Based VLAN	31
Create a Protocol-Based VLAN	33
CLI: Create a Protocol-Based VLAN	33
Web Interface: Create a Protocol-Based VLAN	34
Virtual VLANs: Create an IP Subnet–Based VLAN	37
CLI: Create an IP Subnet–Based VLAN	38
Web Interface: Create an IP Subnet–Based VLAN	38
Voice VLANs	40
CLI: Configure Voice VLAN and Prioritize Voice Traffic	41
Web Interface: Configure Voice VLAN and Prioritize Voice Traffic	43
Configure GARP VLAN Registration Protocol	48
CLI: Enable GVRP	49
Web Interface: Configure GVRP on switch A	51
Web Interface: Configure GVRP on Switch B	53
Private VLANs	54
Assign Private-VLAN Types (Primary, Isolated, Community)	56
CLI: Assign Private-VLAN Type (Primary, Isolated, Community)	56
Web Interface: Assign Private-VLAN Type (Primary, Isolated, Community)	56
Configure Private-VLAN Association	58
CLI: Configure Private-VLAN Association	58
Web Interface: Configure Private-VLAN Association	58
Configure Private-VLAN Port Mode (Promiscuous, Host)	60
CLI: Configure Private-VLAN Port Mode (Promiscuous, Host)	60
Web Interface: Configure Private-VLAN Port Mode (Promiscuous, Host)	60
Configure Private-VLAN Host Ports	61
CLI: Configure Private-VLAN Host Ports	62
Web Interface: Assign Private-VLAN Port Host Ports	62
Map Private-VLAN Promiscuous Port	63
CLI: Map Private-VLAN Promiscuous Port	63
Web Interface: Map Private-VLAN Promiscuous Port	63
VLAN Access Ports and Trunk Ports	64
CLI: Configure a VLAN Trunk	66
Web Interface: Configure a VLAN Trunk	66
3 LAGs	71
Link Aggregation Concepts	72
Add Ports to LAGs	73
CLI: Add Ports to the LAGs	73
Web Interface: Add Ports to LAGs	73
4 MLAGs	75
Multichassis Link Aggregation Concepts	76
Create an MLAG	79
CLI: Create an MLAG on LAG2 and LAG3	79
Web Interface: Create an MLAG on LAG2, LAG3, and LAG4.	82
Enable Static Routing on MLAG Interfaces	85
CLI: Enable Static Routing on MLAG	85
Web Interface: Enable Routing on MLAG Interfaces	92
Enable DCPDP on MLAG Interfaces	96
CLI: Configure the DCPDP on the MLAG Interfaces	97
Web Interface: Configure the DCPDP on MLAG Interfaces	98
Troubleshoot the MLAG Configuration	100
The Creation of an MLAG Fails	100
Traffic Through an MLAG Is Not Forwarded Normally	102
A Ping to a VRRP Virtual IP Address Fails	102
The VRRP Is Not in the Master State on the Primary or Secondary Device	103
DCPDP Does Not Detect the Peer	103
5 Port Routing	104
Port Routing Concepts	105
Port Routing Configuration	105
Enable Routing for the Switch	106
CLI: Enable Routing for the Switch	106
Web Interface: Enable Routing for the Switch	107
Enable Routing for Ports on the Switch	107
CLI: Enable Routing for Ports on the Switch	108
Web Interface: Enable Routing for Ports on the Switch	108
Add a Default Route	110
CLI: Add a Default Route	110
Web Interface: Add a Default Route	111
Add a Static Route	111
CLI: Add a Static Route	112
Web Interface: Add a Static Route	112
6 VLAN Routing	114
VLAN Routing Concepts	115
Create Two VLANs	115
CLI: Create Two VLANs	116
Web Interface: Create Two VLANs	117
Set Up VLAN Routing for the VLANs and the Switch	120
CLI: Set Up VLAN Routing for the VLANs and the Switch	120
Web Interface: Set Up VLAN Routing for the VLANs and the Switch	121
7 RIP	122
Routing Information Protocol Concepts	123
Enable Routing for the Switch	124
CLI: Enable Routing for the Switch	124
Web Interface: Enable Routing for the Switch	124
Enable Routing for Ports	125
CLI: Enable Routing and Assigning IP Addresses for Ports 1/0/2 and 1/0/3	125
Web Interface: Enable Routing for the Ports	125
Enable RIP on the Switch	127
CLI: Enable RIP on the Switch	127
Web Interface: Enable RIP on the Switch	127
Enable RIP for Ports 1/0/2 and 1/0/3	128
CLI: Enable RIP for Ports 1/0/2 and 1/0/3	128
Web Interface: Enable RIP for Ports 1/0/2 and 1/0/3	128
Configure VLAN Routing with RIP Support	129
CLI: Configure VLAN Routing with RIP Support	129
Web Interface: Configure VLAN Routing with RIP Support	131
8 OSPF	134
Open Shortest Path First Concepts	135
Inter-area Router	135
CLI: Configure an Inter-area Router	136
Web Interface: Configure an Inter-area Router	138
OSPF on a Border Router	142
CLI: Configure OSPF on a Border Router	142
Web Interface: Configure OSPF on a Border Router	143
Stub Areas	148
CLI: Configure Area 1 as a Stub Area on A1	148
Web Interface: Configure Area 1 as a Stub Area on A1	150
CLI: Configure Area 1 as a Stub Area on A2	154
Web Interface: Configure Area 1 as a Stub Area on A2	155
NSSA Areas	157
CLI: Configure Area 1 as an NSSA Area	157
Web Interface: Configure Area 1 as an NSSA Area on A1	159
CLI: Configure Area 1 as an NSSA Area on A2	162
Web Interface: Configure Area 1 as an NSSA Area on A2	164
VLAN Routing OSPF	168
CLI: Configure VLAN Routing OSPF	169
Web Interface: Configure VLAN Routing OSPF	171
OSPFv3	173
CLI: Configure OSPFv3	174
Web Interface: Configure OSPFv3	176
9 BGP	179
Border Gateway Protocol Concepts	180
Example1: Configure BGP on Switches A, B, and C in the Same AS	181
Configure BGP on Switch A	182
Configure BGP on Switch B	183
Configure BGP on Switch C	184
Check the BGP Neighbor Status	184
Example 2: Create eBGP on Switches A and D	186
Configure eBGP on Switch A	186
Configure eBGP on Switch D	187
Check the eBGP Neighbor Status	187
Example 3: Create an iBGP Connection with a Loopback Interface	189
Configure iBGP on Switch D	189
Configure eBGP on Switch E	190
Check the iBGP Status	191
Example 4: Configure Reflection for iBGP	192
Configure RR on Switch A	193
Configure RR on Switch B and C	193
Example 5: Filter Routes with NLRI	193
Example 6: Filter Routes with AS_PATH	195
Example 7: Filter Routes with Route Maps	196
Example 8: Exchange IPv6 Routes over an IPv4 BGP	198
Configure IPv6 BGP on Switch A	198
Configure IPv6 BGP on Switch B	198
10 PBR	200
Policy-Based Routing Concept	201
Route-Map Statements	201
PBR Processing Logic	202
PBR Configurations	203
PBR Example	204
11 ARP	207
Proxy ARP Concepts	208
Proxy ARP Examples	208
CLI: show ip interface	209
CLI: ip proxy-arp	209
Web Interface: Configure Proxy ARP on a Port	209
12 VRRP	211
Virtual Router Redundancy Protocol Concepts	212
VRRP on a Master Router	213
CLI: Configure VRRP on a Master Router	213
Web Interface: Configure VRRP on a Master Router	214
VRRP on a Backup Router	215
CLI: Configure VRRP on a Backup Router	215
Web Interface: Configure VRRP on a Backup Router	216
13 ACLs	218
Access Control List Concepts	219
MAC ACLs	219
IP ACLs	220
ACL Configuration	220
Set Up an IP ACL with Two Rules	220
CLI: Set Up an IP ACL with Two Rules	221
Web Interface: Set Up an IP ACL with Two Rules	222
One-Way Access Using a TCP Flag in an ACL	225
CLI: Configure One-Way Access Using a TCP Flag in an ACL	225
Web Interface: Configure One-Way Access Using a TCP Flag in an ACL	229
Use ACLs to Configure Isolated VLANs on a Layer 3 Switch	240
CLI: Configure One-Way Access Using a TCP Flag in ACL Commands	241
Web Interface: Configure One-Way Access Using a TCP Flag in an ACL	243
Set up a MAC ACL with Two Rules	251
CLI: Set up a MAC ACL with Two Rules	251
Web Interface: Set up a MAC ACL with Two Rules	252
ACL Mirroring	254
CLI: Configure ACL Mirroring	255
Web Interface: Configure ACL Mirroring	257
ACL Redirect	260
CLI: Redirect a Traffic Stream	261
Web Interface: Redirect a Traffic Stream	262
Configure a Management ACL	266
Example 1: Permit Any Host to Access the Switch Through Telnet or HTTP:	266
Example 2: Permit a Specific Host to Access the Switch Through SSH Only	266
Configure IPv6 ACLs	267
CLI: Configure an IPv6 ACL	268
Web Interface: Configure an IPv6 ACL	269
14 CoS Queuing	275
CoS Queuing Concepts	276
CoS Queue Mapping	276
Trusted Ports	276
Untrusted Ports	277
CoS Queue Configuration	277
Show classofservice Trust	278
CLI: Show classofservice Trust	278
Web Interface: Show classofservice Trust	278
Set classofservice Trust Mode	278
CLI: Set classofservice Trust Mode	279
Web Interface: Set classofservice Trust Mode	279
Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode	279
CLI: Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode	280
Web Interface: Configure CoS-queue Min-bandwidth and Strict Priority Scheduler Mode	280
Set CoS Trust Mode for an Interface	281
CLI: Set CoS Trust Mode for an Interface	282
Web Interface: Set CoS Trust Mode for an Interface	282
Configure Traffic Shaping	282
CLI: Configure traffic-shape	283
Web Interface: Configure Traffic Shaping	283
15 DiffServ	284
Differentiated Services Concepts	285
DiffServ	286
CLI: Configure DiffServ	286
Web Interface: Configure DiffServ	289
DiffServ for VoIP	302
CLI: Configure DiffServ for VoIP	302
Web Interface: Diffserv for VoIP	304
Auto VoIP	309
Protocol-Based Auto VoIP	309
OUI-Based Auto VoIP	310
Example 1: Enable Protocol-Based Auto VoIP	311
Example 2: Change the Queue of Protocol-Based Auto VoIP	312
Example 3: Create an Auto VoIP VLAN	314
DiffServ for IPv6	316
CLI: Configure DiffServ for IPv6	316
Web Interface: Configure DiffServ for IPv6	317
Color Conform Policy	323
CLI: Configure a Color Conform Policy	324
Web Interface: Configure a Color Conform Policy	325
16 IGMP Snooping and Querier	331
Internet Group Management Protocol Concepts	332
IGMP Snooping	332
CLI: Enable IGMP Snooping	332
Web Interface: Enable IGMP Snooping	332
Show igmpsnooping	333
CLI: Show igmpsnooping	333
Web Interface: Show igmpsnooping	333
Show mac-address-table igmpsnooping	334
CLI for IGMPv1 and IGMPv2: Show mac-address-table igmpsnooping	334
CLI for IGMPv3: show igmpsnooping ssm entries	334
Web Interface: Show mac-address-table igmpsnooping	335
External Multicast Router	335
CLI: Configure the Switch with an External Multicast Router	335
Web Interface: Configure the Switch with an External Multicast Router	335
Multicast Router Using VLAN	337
CLI: Configure the Switch with a Multicast Router Using VLAN	337
Web Interface: Configure the Switch with a Multicast Router Using VLAN	337
IGMP Querier Concepts	338
Enable IGMP Querier	339
CLI: Enable IGMP Querier	339
Web Interface: Enable IGMP Querier	339
Show IGMP Querier Status	341
CLI: Show IGMP Querier Status	341
Web Interface: Show IGMP Querier Status	342
17 MVR	343
Multicast VLAN Registration	344
Configure MVR in Compatible Mode	345
CLI: Configure MVR in Compatible Mode	346
Web Interface: Configure MVR in Compatible Mode	348
Configure MVR in Dynamic Mode	351
CLI: Configure MVR in Dynamic Mode	351
Web Interface: Configure MVR in Dynamic Mode	354
18 Security Management	358
Port Security Concepts	359
Set the Dynamic and Static Limit on Port 1/0/1	360
CLI: Set the Dynamic and Static Limit on Port 1/0/1	360
Web Interface: Set the Dynamic and Static Limit on Port 1/0/1	360
Convert the Dynamic Address Learned from 1/0/1 to a Static Address	361
CLI: Convert the Dynamic Address Learned from 1/0/1 to the Static Address	362
Web Interface: Convert the Dynamic Address Learned from 1/0/1 to the Static Address	362
Create a Static Address	363
CLI: Create a Static Address	363
Web Interface: Create a Static Address	364
Protected Ports	364
CLI: Configure a Protected Port to Isolate Ports on the Switch	365
Web Interface: Configure a Protected Port to Isolate Ports on the Switch	367
802.1x Port Security	370
CLI: Authenticating dot1x Users by a RADIUS Server	371
Web Interface: Authenticating dot1x Users by a RADIUS Server	372
Create a Guest VLAN	377
CLI: Create a Guest VLAN	378
Web Interface: Create a Guest VLAN	379
Assign VLANs Using RADIUS	382
CLI: Assign VLANS Using RADIUS	383
Web Interface: Assign VLANS Using RADIUS	386
Dynamic ARP Inspection	389
CLI: Configure Dynamic ARP Inspection	390
Web Interface: Configure Dynamic ARP Inspection	391
Static Mapping	394
CLI: Configure Static Mapping	394
Web Interface: Configure Static Mapping	395
DHCP Snooping	396
CLI: Configure DHCP Snooping	397
Web Interface: Configure DHCP Snooping	398
Find a Rogue DHCP Server	401
CLI: Find a Rogue DHCP server	401
Web Interface: Find a Rogue DHCP server	402
Enter Static Binding into the Binding Database	404
CLI: Enter Static Binding into the Binding Database	404
Web Interface: Enter Static Binding into the Binding Database	404
Maximum Rate of DHCP Messages	405
CLI: Configure the Maximum Rate of DHCP Messages	405
Web Interface: Configure the Maximum Rate of DHCP Messages	405
IP Source Guard	406
CLI: Configure Dynamic ARP Inspection	408
Web Interface: Configure Dynamic ARP Inspection	409
Authorization	412
Command Authorization	412
CLI: Configure Command Authorization by a TACACS+ Server	413
Exec Authorization	413
CLI: Configure Exec Command Authorization by a TACACS+ Server	414
Accounting	414
CLI: Configure Telnet Command Accounting by a TACACS+ Server	415
Configure Telnet EXEC Accounting by RADIUS Server	416
Use the Authentication Manager to Set Up an Authentication Method List	417
Configure a Dot1x–MAB Authentication Method List with Dot1x–MAB Priority	418
Configure a Dot1x–MAB Authentication Method List with MAB–Dot1x Priority	419
Configure a Dot1x, MAB, and Captive Portal Authentication Method List with Default Priority	420
19 MAB	422
MAC Authentication Bypass Concepts	423
Configure MAC Authentication Bypass on a Switch	425
Configure a Network Policy Server on a Microsoft Windows Server 2008 R2 or Later Server	430
Configure an Active Directory on a Microsoft Windows Server 2008 R2 or Later Server	438
Reduce the MAB Authentication Time	439
CLI: Reduce the Authentication Time for MAB	440
Web Interface: Reduce the Authentication Time for MAB	440
20 SNTP	441
Simple Network Time Protocol Concepts	442
Show SNTP (CLI Only)	442
show sntp	443
show sntp client	443
show sntp server	444
Configure SNTP	444
CLI: Configure SNTP	444
Web Interface: Configure SNTP	446
Set the Time Zone (CLI Only)	447
Set the Named SNTP Server	447
CLI: Set the Named SNTP Server	447
Web Interface: Set the Named SNTP Server	448
21 Tools	450
Traceroute	451
CLI: Traceroute	452
Web Interface: Traceroute	453
Configuration Scripting	453
script Command	455
script list Command and script delete Command	455
script apply running-config.scr Command	455
Create a Configuration Script	456
Upload a Configuration Script	456
Pre-Login Banner	457
Create a Pre-Login Banner	457
Port Mirroring	458
CLI: Specify the Source (Mirrored) Ports and Destination (Probe)	458
Web Interface: Specify the Source (Mirrored) Ports and Destination (Probe)	459
Remote SPAN	459
CLI: Enable RSPAN on a Switch	460
Dual Image	463
CLI: Download a Backup Image and Make It Active	464
Web Interface: Download a Backup Image and Make It Active	465
Outbound Telnet	466
CLI: show network	467
CLI: show telnet	467
CLI: transport output telnet	468
Web Interface: Configure Telnet	468
CLI: Configure the Session Limit and Session Time-out	469
Web Interface: Configure the Session Time-out	469
Full Memory Dump	470
22 Syslog	472
Syslog Concepts	473
Show Logging	473
CLI: Show Logging	473
Web Interface: Show Logging	474
Show Logging Buffered	476
CLI: Show Logging Buffered	476
Web Interface: Show Logging Buffered	477
Show Logging Traplogs	477
CLI: Show Logging Traplogs	478
Web Interface: Show Logging Trap Logs	478
Show Logging Hosts	478
CLI: Show Logging Hosts	479
Web Interface: Show Logging Hosts	479
Configure Logging for a Port	479
CLI: Configure Logging for the Port	480
Web Interface: Configure Logging for the Port	480
Email Alerting	481
CLI: Send Log Messages to [email protected] Using Account [email protected]	483
23 Chassis Switch Management	484
Chassis Switch Management and Connectivity	485
Supervisor and Chassis Members	485
Supervisor	485
Chassis Members	486
Chassis Firmware	486
Code Mismatch	486
Configuration Mismatch	487
Upgrade the Firmware	487
Migrate Configuration with a Firmware Upgrade	487
Add, Remove, or Replace a Chassis Member	488
Add a Blade to an Operating Chassis	488
Remove a Blade from the Chassis	488
Replace a Chassis Member	489
Chassis Switch Configuration Files	489
Preconfigure a Switch	489
Move the Supervisor to a Different Blade	490
CLI: Move the Supervisor to a Different Blade	491
Local Browser UI: Move the Supervisor to a Different Blade	492
24 Switch Stacks	493
Switch Stack Management and Connectivity	494
Stack Master and Stack Members	494
Stack Master	495
Stack Members	496
Stack Member Numbers	496
Stack Member Priority Values	496
Install and Power-up a Stack	496
Compatible Switch Models	496
Install a Switch Stack	497
Switch Firmware and Firmware Mismatch	498
Upgrade the Firmware	498
Migrate Configuration with a Firmware Upgrade	499
Web Interface: Copy Master Firmware to a Stack Member	499
Stack Switches Using Ethernet Ports and a Stack Cable	500
CLI: Configure the Stack Ports as Ethernet Ports	500
Web Interface: Configure the Stack Ports as Ethernet Ports	502
Stack Switches Using 10G Fiber	504
CLI: Stack Switches Using 10G Fiber	504
Web Interface: Stack Switches Using 10G Fiber	506
Add, Remove, or Replace a Stack Member	507
Add Switches to an Operating Stack	507
Remove a Switch from a Stack	508
Replace a Stack Member	509
Switch Stack Configuration Files	509
Preconfigure a Switch	510
Renumber Stack Members	512
CLI: Renumber Stack Members	512
Web Interface: Renumber Stack Members	513
Move the Stack Master to a Different Unit	514
CLI: Move the Stack Master to a Different Unit	514
Web Interface: Move the Stack Master to a Different Unit	514
25 SNMP	516
Add a New Community	517
CLI: Add a New Community	517
Web Interface: Add a New Community	517
Enable SNMP Trap	518
CLI: Enable SNMP Trap	518
Web Interface: Enable SNMP Trap	518
SNMP Version 3	519
CLI: Configure SNMPv3	519
Web Interface: Configure SNMPv3	520
sFlow	521
CLI: Configure Statistical Packet-Based Sampling of Packet Flows with sFlow	522
Web Interface: Configure Statistical Packet-based Sampling with sFlow	523
Time-Based Sampling of Counters with sFlow	524
CLI: Configure Time-Based Sampling of Counters with sFlow	524
Web Interface: Configure Time-Based Sampling of Counters with sFlow	525
26 DNS	526
Domain Name System Concepts	527
Specify Two DNS Servers	527
CLI: Specify Two DNS Servers	527
Web Interface: Specify Two DNS Servers	527
Manually Add a Host Name and an IP Address	528
CLI: Manually Add a Host Name and an IP Address	529
Web Interface: Manually Add a Host Name and an IP Address	529
27 DHCP Server	530
Dynamic Host Configuration Protocol Concepts	531
Configure a DHCP Server in Dynamic Mode	531
CLI: Configure a DHCP Server in Dynamic Mode	531
Web Interface: Configure a DHCP Server in Dynamic Mode	532
Configure a DHCP Server that Assigns a Fixed IP Address	534
CLI: Configure a DHCP Server that Assigns a Fixed IP Address	534
Web Interface: Configure a DHCP Server that Assigns a Fixed IP Address	535
28 DHCPv6 Server	537
Dynamic Host Configuration Protocol Version 6 Concepts	538
CLI: Configure DHCPv6 Prefix Delegation	539
Web Interface: Configure DHCPv6 Prefix Delegation	540
Configure a Stateless DHCPv6 Server	544