Cambium Networks cnMatrix EX2010-P handleiding

Niet gecategoriseerd

Cambium Networks

320 pagina's

PDF beschikbaar

Handleiding

/ 320

Je bekijkt pagina 154 van 320

L2 Features 154

cnMaestro support

The cnMaestro PBA MAC list file support includes the ability to configure the PBA MAC list filenames to

be downloaded to the switch (the what to download) and the download/transfer settings (the how to

download). cnMaestro does not support PBA MAC list file construction or storage. The user is responsible

for producing an appropriately formatted PBA MAC list file and for providing access to a server from

which the file can be downloaded.

Two new components are introduced by cnMaestro to support PBA MAC lists. The MAC Lists tab is

added to the PBA Policy/Action/Rule configuration table to allow the user to specify (currently up to 10)

PBA MAC list files that the switch is requested to download. The PBA Server Settings section allows the

user to specify the download settings to be used (only) by PBA to download the identified PBA MAC list

files to the switch.

Typical server settings are supported:

Transfer method (TFTP, SFTP, SCP)

Server IP address (IPv4, IPv6, DNS)

Download path (if required for the specified transfer method)

Username (required for SFTP, SCP)

Password (required for SFTP, SCP)

Through the PBA MAC Lists tab, the user configures the names of the MAC list files that the switch should

attempt to download from the user-maintained file server using the configured server download settings.

Following a cnMaestro configuration push, the PBA agent attempts to download all of the configured

MAC list files using the provided download settings/credentials.

cnMaestro PBA MAC list file data configuration

Switch Groups/Configuration/Network/Policy Based Automation > MAC List File Server Settings

Switch Groups/Configuration/Network/Policy Based Automation/MAC Lists

Switch Groups/Configuration/Network/Policy Based Automation/Rules

Dynamic ARP Inspection (Starting with version 2.1)

Managing Dynamic ARP Inspection

Feature Overview

TheDynamic ARP Inspection (DAI)feature has been added to enhance the security of your network. DAI

validates network ARP response packetsto be securely validated in the network. Without DAI, a

malicious user can attack hosts, switches, and routers connected to the Layer 2 network by poisoning the

ARP caches of systems connected to the subnet and by intercepting traffic intended for other hosts on

the subnet.

Scaling Numbers

The DAI feature can be enabled on a per-VLAN basis. It can be enabled on all the VLANs configured on

the switch. You have to consider that the CPU utilization will increase with the number of DAI-enabled

VLANs and also with the number of network ARP packets.

Limitations

/ 320

Bekijk gratis de handleiding van Cambium Networks cnMatrix EX2010-P, stel vragen en lees de antwoorden op veelvoorkomende problemen, of gebruik onze assistent om sneller informatie in de handleiding te vinden of uitleg te krijgen over specifieke functies.