ExtremeSwitching 200 Series: Administration Guide Version 1.02.04.0007
>
Configuration Examples
> Configuring Authentication Tiering
Published October 2018
prev
|
next
Print this page
Email this topic
Feedback
View PDF
Download EPUB
Preface
Conventions
Text Conventions
Terminology
Providing Feedback to Us
Getting Help
Extreme Networks Documentation
Getting Started
Connecting the Switch to the Network
Booting the Switch
Understanding the Utility Menu
Start the 200 Series Application
Load Code Update Package
Load Configuration
Select Serial Speed
Retrieve Error Log
Erase Current Configuration
Erase Permanent Storage
Select Boot Method
Activate Backup Image
Start Diagnostic Application
Reboot
Erase All Configuration Files
Understanding the User Interfaces
Using the Web Interface
Device View
Navigation Menu
Configuration and Status Fields
Table Sorting
Help Page Access
User-Defined Fields
Using SNMP
Using the Command-Line Interface
Getting Started with Stacking
Understanding Switch Stacks
Switch Stack Membership
Stack Manager Election and Re-Election
Stack Member Numbers
Stack Member Priority Values
Switch Stack Software Compatibility Recommendations
Incompatible Software and Stack Member Image Upgrades
Switch Stack Configuration Files
Switch Stack Management Connectivity
Connectivity to the Switch Stack through Console Ports
Connectivity to the Switch Stack through Telnet
General Practices
Initial Installation and Power-up of a Stack
Removing a Unit from the Stack
Adding a Unit to an Operating Stack
Replacing the Stack Member with a New Unit
Renumbering Stack Members
Moving a Manager to a Different Unit in the Stack
Removing a Manager Unit from an Operating Stack
Initiating a Warm Failover of the Manager Unit
Merging Two Operational Stacks
Preconfiguration
Configuring System Information
Viewing the Dashboard
Viewing ARP Cache
Viewing Inventory Information
Viewing MAC Addresses
Viewing System Resources
Defining General Device Information
System Description
Defining System Information
Switch Configuration
IP Address Conflict Detection
Service Port IPv4
Service Port IPv6
Service Port IPv6 Neighbors
Network Port DHCPv6 Client Statistics
Network Connectivity Configuration
Network Port IPv6 Neighbors
DHCP Client Options
System Connectivity
Telnet Session
Outbound Telnet Configuration
Serial Port Configuration
CLI Banner Configuration
HTTP Configuration
HTTPS Configuration
SSH Configuration
Management Access Control and Administration List
User Accounts
Adding a User Account
Changing User Account Information
Removing a User Account
Authentication Server Users
Logged in Sessions
User Domain Name
Task Groups
User Groups
Accounting List Configuration: Accounting List
Accounting List Configuration: Accounting Selection
Authentication List Summary
Select Authentication List
Authorization List Configuration
Line Password
Enable Password
Password Rules
Last Password Result
Denial of Service
Managing the DHCP Server
Global Configuration
DHCP Server Excluded Addresses
Pool Summary
Pool Configuration
Pool Options
Bindings Information
Server Statistics
Conflicts Information
Configuring DNS
Global Configuration
DNS Host Name IP Mapping Configuration
DNS Source Interface Configuration
Configuring Email Alerts
Email Alert Global Configuration
Email Alert Server Configuration
Email Alert Statistics
Email Alert Subject Configuration
Email Alert To Address Configuration
Configuring and Viewing ISDP Information
ISDP Global Configuration
ISDP Cache Table
ISDP Interface Configuration
ISDP Statistics
Configuring Link Dependency
Link Dependency Group Status
Configuring Link Local Protocol Filtering
LLPF Interface Configuration
Configuring sFlow
sFlow Agent Summary
sFlow Receiver Configuration
sFlow Poller Configuration
Counter Sampling
sFlow Sampler Configuration
Packet Flow Sampling
sFlow Source Interface Configuration
Configuring SNTP Settings
SNTP Global Configuration
SNTP Global Status
SNTP Server Configuration
SNTP Server Status
SNTP Source Interface Configuration
Configuring Time Ranges
Time Range Configuration
Time Range Entry Configuration
Configuring the Time Zone
Time Zone Configuration
Summer Time Configuration
Managing SNMP Traps
Trap Log
Trap Flags
Managing CPU Traffic Filters
CPU Traffic Filter Global Configuration
CPU Traffic Filter Configuration
CPU Traffic Filter Interface Configuration
CPU Traffic Filter Statistics
CPU Traffic Filter Summary
CPU Traffic Filter Trace Information
Viewing the System Firmware Status
Dual Image Status
Dual Image Configuration and Upgrade
AutoInstall
Managing Logs
Log Configuration
Buffered Log
Event Log
Hosts Log Configuration
Adding a Remote Logging Host
Deleting a Remote Logging Host
Syslog Source Interface Configuration
Persistent Log
Configuring and Searching the Forwarding Database
Switch Configuration
Configuring Power Over Ethernet (PoE) and PoE Statistics
PoE Configuration
PoE Port Configuration
PoE Port Statistics
Viewing Device Port Information
Port Summary
Port Description
Cable Test
Mirroring
Configuring a Port Mirroring Session
Configuring a Port Mirroring Source
Adding a Port Mirroring Session
Removing or Modifying a Port Mirroring Session
Mirroring Summary
Green Ethernet Status
Green Ethernet Configuration
Green Ethernet Interface Configuration
Green Ethernet Local Interface Status
Green Ethernet Remote Device Status
Green Ethernet Statistics
Green Ethernet EEE Interface History
Configuring and Viewing Device Slot Information
Slot Card Configuration
Supported Cards
Defining SNMP Parameters
SNMP v1 and v2
SNMPv3
SNMP Community Configuration
Trap Receiver v1/v2 Configuration
Trap Receiver v3 Configuration
Supported MIBs
Access Control Group
User Security Model
SNMP View Entry
Source Interface Configuration
Viewing System Statistics
Switch Detailed Statistics
Port Summary
Port Detailed Statistics
Network DHCPv6
Time Based Group Statistics
Time Based Flow Statistics
Time Based Statistics
Using System Utilities
System Reset
Ping
Ping IPv6
TraceRoute
IP Address Conflict
Transfer
Digital Signature Verification
Core Dump
Core Dump Test
Configuring Switching Information
Managing VLANs
VLAN Status
VLAN Port Configuration
VLAN Port Summary
Switchport Summary
VLAN Internal Usage
Reset VLAN Configuration
RSPAN Configuration
Configuring UDLD
UDLD Interface Configuration
Private VLAN
Private VLAN Configuration
Private VLAN Association
Private VLAN Interface
Voice VLAN Configuration
Voice VLAN Interface
Port Auto Recovery
Port Auto Recovery Configuration
Creating MAC Filters
MAC Filter Configuration
Adding MAC Filters
Modifying MAC Filters
Removing MAC Filters
Configuring Dynamic ARP Inspection
DAI Configuration
DAI VLAN Configuration
DAI Interface Configuration
DAI ARP ACL Configuration
DAI ARP ACL Rule Configuration
DAI ARP ACL Summary
DAI Statistics
GARP Configuration
GARP Switch Configuration
GARP Port Configuration
Configuring DHCP Snooping
Global DHCP Snooping Configuration
DHCP Snooping VLAN Configuration
DHCP Snooping Interface Configuration
DHCP Snooping Static Bindings
DHCP Snooping Dynamic Bindings
DHCP Snooping Persistent Configuration
DHCP Snooping Statistics
DHCP L2 Relay Global Configuration
DHCP L2 Relay Interface Configuration
DHCP L2 Relay VLAN Configuration
DHCP L2 Relay Interface Statistics
Configuring IPv6 DHCP Snooping
Global IPv6 DHCP Snooping Configuration
IPv6 DHCP Snooping VLAN Configuration
IPv6 DHCP Snooping Interface Configuration
IPv6 DHCP Snooping Static Bindings
IPv6 DHCP Snooping Dynamic Bindings
IPv6 DHCP Snooping Persistent Configuration
DHCP Snooping Statistics
Configuring IGMP Snooping
Global Configuration and Status
Interface Configuration
VLAN Status
Multicast Router Configuration
Multicast Router VLAN Status
Multicast Router VLAN Configuration
Configuring IGMP Snooping Querier
IGMP Snooping Querier Configuration
VLAN Configuration
VLAN Status
Configuring MLD Snooping
Global Configuration and Status
Interface Configuration
VLAN Status
Multicast Router Configuration
Multicast Router VLAN Status
Configuring MLD Snooping Querier
MLD Snooping Querier Configuration
VLAN Configuration
VLAN Status
Creating Port Channels
Port Channel Summary
Port Channel Configuration
Port Channel Statistics
Viewing Multicast Forwarding Database Information
MFDB Table
GMRP Table
IGMP Snooping Table
MFDB Statistics
Multicast VLAN Registration
MVR Global Configuration
MVR Group Status
MVR Interface Status
MVR Statistics
Configuring Protected Ports
Configuring Spanning Tree Protocol
Switch Configuration/Status
CST Configuration
CST Port Configuration
MST Configuration
MST Port Configuration
Spanning Tree Statistics
PVST Global
PVST VLAN
PVST Interface
PVST Statistics
Mapping 802.1p Priority
Configuring Port Security
Port Security Administration
Port Security Interface Configuration
VLAN MAC Locking
Port Security Statically Configured MAC Addresses
Port Security Dynamically Learned MAC Addresses
Managing LLDP
Global Configuration
LLDP Interface Configuration
Local Devices
Remote Devices
Statistics
LLDP-MED
LLDP-MED Global Configuration
LLDP-MED Interface Configuration
LLDP Local Device Information
LLDP-MED Remote Device Information
Loop Protection
Loop Protection Configuration
Multiple Registration Protocol Configuration
MRP Configuration
MRP Interface Configuration
MMRP Statistics
MVRP Statistics
Configuring Routing
Configuring ARP
ARP Create
ARP Table Configuration
Configuring Global IP Settings
Routing IP Configuration
Interface Summary
Routing IP Interface Configuration
Routing IP Loopback Configuration
Routing IP Statistics
Router
Route Table Summary
Configured Route Summary
Adding and Removing Static Routes
IP Route Summary
Configuring Routing Information Protocol (RIP)
Managing Device Security
Port Access Control
Global Port Access Control Configuration
Port Access Control Port Summary
Port Access Control Port Configuration
Port Details
Statistics
Client Summary
Privileges Summary
History Log Summary
RADIUS Settings
RADIUS Configuration
Named Server Status
Server Statistics
RADIUS Accounting Server Status
Accounting Statistics
RADIUS Clear Statistics
RADIUS Source Interface Configuration
TACACS+ Settings
TACACS+ Server Summary
TACACS+ Server Configuration
TACACS+ Source Interface Configuration
Authentication Manager
Authentication Manager Configuration
Authentication Tiering
Authenticated Clients
Authentication Statistics
Authentication History
Configuring IPv6
Global Configuration
Configuring Quality of Service
Configuring Access Control Lists
IP Access Control Lists
IP ACL Configuration
Access Control List Configuration
Access Control List Interface Summary
Access Control List VLAN Summary
Access Control List Control Plane Configuration
IPv6 ACL Rules
Scenarios
Access Control List Statistics
Configuring Auto VoIP
Auto VoIP Global Configuration
OUI Table Summary
OUI Based Auto VoIP
Protocol Based Auto VoIP
Configuring Class of Service
IP DSCP Mapping Configuration
Interface Configuration
Interface Queue Configuration
Configuring Diffserv
Diffserv Global Configuration and Status
Diffserv Class Summary
Diffserv Class Configuration
Diffserv Policy Summary
Diffserv Policy Configuration
DiffServ Service Summary
Diffserv Service Statistics
Diffserv Service Policy Statistics
Configuration Examples
Configuring VLANs
Using the Web Interface to Configure VLANs
Using the CLI to Configure VLANs
Using the SNMP to Configure VLANs
Configuring Multiple Spanning Tree Protocol
Using the Web UI to Configure MSTP
Using the CLI to Configure MSTP
Using SNMP to Configure MSTP
Configuring VLAN Routing
Using the CLI to Configure VLAN Routing
Using SNMP to Configure VLAN Routing
Configuring 802.1X Network Access Control
Using the CLI to configure 802.1X Port-Based Access Control
Using SNMP to configure 802.1X Port-Based Access Control
Configuring Authentication Tiering
Configuring Authentication Tiering Using the Web Interface
Configuring Authentication Tiering Using the CLI
Configuring Differentiated Services for VoIP
Using the CLI to Configure DiffServ VoIP Support
Using SNMP to Configure DiffServ VoIP Support
IGMP and MLD Snooping Switches
Query Processing
Group Registration
Group Leave
IGMP Packet Forwarding Considerations
IP Multicast Data Forwarding Considerations
Version Compatibility
Snooping Switch Restrictions
MAC Address-Based Multicast Group
IGMP Snooping in a Multicast Router
Configuring IGMP and MLD Snooping
Enabling IGMP Snooping
Configuring IGMP Snooping Parameters
Display IGMP Snooping Information
Configuring Static Multicast Forwarding Entries
Configuring Port Mirroring
Bidirectional Forwarding Detection
Configuring BFD
Configuring Authentication Tiering
Authentication Tiering can be configured in either of the following ways:
Configuring Authentication Tiering Using the Web Interface
Configuring Authentication Tiering Using the CLI
Print
this page
Email this topic
Feedback
View PDF
Download EPUB