Extreme Networks ExtremeWare XOS Guide Manual page 9

Egress Traffic Rate Limiting-Aspen 8810 Switch Only ..............................................................220
Bi-Directional Rate Shaping-BlackDiamond 10K Switch Only....................................................221
Bandwidth Settings ...........................................................................................................222
Configuring Bi-Directional Rate Shaping..............................................................................223
Chapter 13: Security ................................................................................................................... 225
Security Overview....................................................................................................................225
Network Access Security ..........................................................................................................225
MAC Address Security .............................................................................................................225
Limiting Dynamic MAC Addresses.......................................................................................226
MAC Address Lock Down ...................................................................................................227
Network Login ........................................................................................................................228
Web-Based, MAC-based, and 802.1x Authentication ............................................................228
Campus and ISP Modes .....................................................................................................230
Interoperability Requirements.............................................................................................231
Multiple Supplicant Support ..............................................................................................232
Exclusions and Limitations.................................................................................................233
Configuring Network Login .................................................................................................233
Web-Based Authentication User Login Using Campus Mode ..................................................235
Displaying Network Login Settings ......................................................................................236
Disabling Network Login ....................................................................................................236
Additional Configuration Details..........................................................................................236
MAC-Based Authentication.................................................................................................237
DHCP Server ..........................................................................................................................238
DHCP Server on the Switch ................................................................................................238
Displaying DHCP Information .............................................................................................239
Denial of Service Protection .....................................................................................................239
Configuring Denial of Service Protection ..............................................................................240
Management Access Security ...................................................................................................241
Authenticating Users Using RADIUS or TACACS+ ......................................................................241
RADIUS ...........................................................................................................................242
Configuring RADIUS ..........................................................................................................243
TACACS+ .........................................................................................................................248
Secure Shell 2 ........................................................................................................................249
Enabling SSH2 for Inbound Switch Access ..........................................................................249
Using SCP2 from an External SSH2 Client ..........................................................................250
Chapter 14: CLEARFlow ............................................................................................................... 253
Overview ................................................................................................................................253
Configuring CLEARFlow ...........................................................................................................253
Displaying CLEARFlow Configuration and Activity.................................................................254
Adding CLEARFlow Rules to ACLs ............................................................................................254
CLEARFlow Rule Types......................................................................................................255
CLEARFlow Rule Actions ...................................................................................................259
CLEARFlow Rule Examples ......................................................................................................261
Count Rule Type Example ..................................................................................................261
Delta Rule Type Example ...................................................................................................262
Ratio Rule Type Example ...................................................................................................263
Delta-Ratio Rule Type Example...........................................................................................264
ExtremeWare XOS 11.1 Concepts Guide
Contents
9