Fortinet 548B podręczniki

FortiSwitch-548B

1

Table of Contents

3

- 4

4

- 5

5

1. Introduction

6

- 7

7

2. Product Overview

8

2.3 Front-Panel Components

10

2.4 LED Indicators

10

2.5 Rear Panel Description

10

2.6 Management Options

11

2.9 SNMP-Based Management

11

3.1 Package Contents

13

3.2 Switch Installation

14

5.1 Overview

24

5.2 How to log in

25

6.1 CLI Command Format

30

6.2 CLI Mode-based Topology

31

0.0.0.0 to 255.255.255.255

32

YY:YY:YY:YY:YY:YY

32

7. Switching Commands

33

7.1.3 show process cpu

34

7.1.6 show sysinfo

36

7.1.7 show system

36

7.1.8 show tech-support

37

7.1.9 show hardware

37

7.1.10 show version

39

7.1.11 show loginsession

40

7.1.12 show command filter

41

7.2.1 Interface

41

7.2.1.6 negotiate

50

7.2.1.7 capabilities

51

7.2.1.11 description

54

7.2.1.12 mdi

54

7.2.2.1 show mac-addr-table

55

7.2.3 VLAN Management

61

7.2.3.1 show vlan

61

7.2.3.2 show vlan id

61

7.2.3.5 show protocol group

63

7.2.3.7 vlan database

65

7.2.3.8 vlan

65

7.2.3.9 vlan name

65

7.2.3.12 vlan makestatic

67

7.2.3.13 protocol group

67

7.2.3.18 switchport tagging

72

7.2.4 Double VLAN commands

76

7.2.5.1 show bridge-ext

78

7.2.5.5 bridge-ext gvrp

81

7.2.5.6 bridge-ext gmrp

81

7.2.5.7 switchport gvrp

81

7.2.5.8 switchport gmrp

82

7.2.5.9 garp timer

83

7.2.6 IGMP Snooping

87

7.2.6.1 ip igmp snooping

87

7.2.6.8 set igmp

90

7.2.6.9 set igmp fast-leave

91

7.2.7 IGMP Snooping Querier

96

7.2.8 MLD Snooping

101

7.2.8.6 ipv6 mld snooping

105

7.2.8.7 clear mld snooping

105

7.2.8.15 set mld

108

7.2.8.16 set mld fast-leave

109

7.2.9 MLD Snooping Querier

110

7.2.10 Port Channel

115

7.2.10.1 show port-channel

115

7.2.10.2 port-channel

117

7.2.10.4 staticcapability

118

7.2.10.7 port-channel name

120

7.2.10.9 adminmode

121

7.2.10.10 lacp

122

7.2.10.12 channel-group

125

7.2.11 Storm Control

126

7.2.11.1 show storm-control

126

7.2.12 L2 Priority

133

7.2.12.1 show queue cos-map

133

7.2.12.2 queue cos-map

134

7.2.13 Port Mirror

134

7.2.14 Link State

136

7.2.14.1 show link state

136

7.2.14.2 link state

137

7.2.14.3 link state group

137

7.2.15 Port Backup

138

7.2.15.1 show port backup

138

7.2.15.2 port-backup

138

7.2.15.3 port-backup group

139

7.2.16 FIP Snooping

139

7.2.16.1 show fip-snooping

139

7.2.16.6 fip-snooping

142

7.2.16.7 fip-snooping vlan

142

7.2.17.1 show queue ets

143

7.2.17.5 queue ets

144

Disabled

148

0-16777215 >

150

7.3 Management Commands

152

7.3.1.2 show ip filter

153

7.3.1.3 mtu

154

7.3.1.4 interface vlan

154

7.3.1.5 ip address

155

7.3.1.6 ip default-gateway

155

7.3.1.7 ip address protocol

156

7.3.1.8 ip filter

156

7.3.2.1 show line console

157

7.3.2.2 line console

158

7.3.2.3 baudrate

158

7.3.2.4 exec-timeout

159

7.3.2.5 password-threshold

159

7.3.2.6 silent-time

159

7.3.2.7 terminal length

160

7.3.3.1 telnet

160

7.3.3.2 show line vty

161

7.3.3.3 line vty

162

7.3.3.4 exec-timeout

162

7.3.3.5 password-threshold

162

7.3.3.6 terminal length

163

7.3.3.7 maxsessions

163

7.3.3.8 server enable

164

7.3.3.9 sessions

164

7.3.3.10 telnet sessions

165

7.3.3.11 telnet maxsessions

165

7.3.3.13 show telnet

166

7.3.4.1 ssh

167

7.3.4.2 sshc sessions

167

7.3.4.3 sshc maxsessions

168

7.3.4.4 sshc exec-timeout

168

7.3.4.5 show sshc

168

7.3.5 SNMP Server Commands

169

7.3.5.1 show snmp

169

7.3.5.2 show trapflags

170

7.3.5.3 snmp-server sysname

171

7.3.5.5 snmp-server contact

172

7.3.6.6 snmptrap mode

181

7.3.7 HTTP commands

182

7.3.7.1 show ip http

182

7.3.7.2 ip javamode

182

7.3.7.3 ip http port

183

7.3.7.4 ip http server

183

7.3.7.5 ip http secure-port

184

7.3.8.1 show ip ssh

185

7.3.8.2 ip ssh

186

7.3.8.3 ip ssh protocol

186

7.3.8.5 ip ssh timeout

187

7.3.9.2 crypto key generate

188

7.3.10 DHCP Client Commands

189

7.3.10.1 ip dhcp restart

189

7.3.11.2 ipv6 dhcp restart

190

7.3.12 DHCP Relay Commands

191

7.3.13 sFlow Commands

192

7.3.13.1 show sflow agent

192

7.3.13.2 show sflow pollers

193

7.3.13.5 set sflow rate

195

7.3.14.1 show serviceport

198

7.3.14.3 serviceport ip

199

7.4 Spanning Tree Commands

202

7.4.2.1 spanning-tree

209

7.4.2.4 spanning-tree mode

211

7.4.2.10 spanning-tree mst

214

7.5.1 Show Commands

222

7.5.1.1 show logging

222

7.5.1.4 show logging hosts

224

7.5.2.1 logging buffered

224

7.5.2.2 logging console

225

7.5.2.3 logging monitor

226

7.5.2.4 terminal monitor

226

7.5.2.5 logging host

227

7.5.2.6 logging syslog

228

7.6.1 script apply

229

7.6.2 script delete

229

7.6.2.1 script list

230

7.6.3 script show

230

7.6.4 script validate

231

7.7.1 Show Commands

231

7.7.1.1 show users

231

7.7.2.1 username

233

7.8 Security Commands

237

7.8.1.2 show authentication

238

7.8.1.4 show dot1x

239

7.8.1.5 show dot1x detail

239

7.8.1.7 show dot1x summary

242

7.8.1.8 show dot1x users

242

7.8.1.9 show dot1x client

243

7.8.1.11 show radius

244

7.8.1.14 show tacacs

247

7.8.1.15 show port-security

248

7.8.2.3 username login

251

7.8.3.1 dot1x initialize

252

7.8.3.2 dot1x default-login

252

7.8.3.3 dot1x login

253

7.8.3.5 dot1x user

254

7.8.3.6 dot1x port-control

254

7.8.3.7 dot1x max-req

255

7.8.3.8 dot1x max-user

256

7.8.3.11 dot1x timeout

257

7.8.3.12 dot1x guest vlan

258

7.8.4.5 radius-server host

260

7.8.4.6 radius-sever key

261

7.8.5.1 tacacs host

264

7.8.5.2 tacacs key

264

7.8.5.3 tacacs timeout

266

7.8.6.1 port-security

267

7.9.1 Show Commands

269

7.9.1.1 show cdp

269

7.9.1.2 show cdp neighbors

270

7.9.1.4 show cdp traffic

271

7.9.2.1 cdp

271

7.9.2.2 cdp run

272

7.9.2.3 cdp timer

273

7.9.2.4 cdp holdtime

273

7.10.1 Show Commands

274

7.10.1.1 show sntp

274

7.10.2.2 sntp client mode

276

7.10.2.3 sntp client port

277

7.10.2.7 sntp server

278

7.11.1 Show Commands

280

7.11.1.1 show voice-vlan

280

7.11.1.2 show voice vlan

281

7.11.2.1 voice-vlan

281

7.11.2.2 voice-vlan vlan

282

7.11.2.3 voice-vlan mac

282

7.11.2.4 voice vlan

283

7.12.1 Show Commands

284

7.12.1.1 show lldp

284

7.12.1.8 show lldp med

289

7.12.2.1 lldp notification

294

7.12.2.3 lldp receive

295

7.12.2.4 lldp transmit

295

7.12.2.5 lldp transmit-mgmt

295

7.12.2.6 lldp transmit-tlv

296

7.12.2.7 lldp timers

296

7.12.2.8 lldp tx-delay

297

7.12.2.9 lldp med

298

7.12.2.12 lldp med all

299

7.13.1 Show Commands

301

7.13.1.1 show dos-control

301

7.13.2.1 dos-control sipdip

302

7.13.2.8 dos-control icmp

305

7.13.2.9 dos-control icmpv4

306

7.13.2.17 dos-control all

310

7.14.1 Show Commands

310

7.14.1.1 show vtp counters

310

7.14.1.2 show vtp password

311

7.14.1.3 show vtp status

311

7.14.1.4 show vtp trunkport

312

7.14.2.1 vtp

312

7.14.2.2 vtp domain

313

7.14.2.3 vtp mode

313

7.14.2.4 vtp version

314

7.14.2.5 vtp password

314

7.14.2.6 vtp pruning

315

7.14.2.7 vtp trunkport

315

7.15.1 Show Commands

316

7.16.1 Show Commands

318

7.16.2.1 macfilter

319

7.16.2.2 macfilter addsrc

319

7.17 System Utilities

321

7.17.1.5 clear config

322

7.17.1.6 clear pass

323

7.17.1.7 clear counters

323

7.17.1.8 clear dns

323

7.17.1.9 clear cdp

324

7.17.1.10 clear vlan

324

7.17.1.13 clear ip filter

325

7.17.1.16 clear domain-list

327

7.17.1.17 clear hosts

327

7.17.1.22 enable passwd

329

7.17.1.26 clear ipv6 dhcp

331

7.17.2 copy

331

7.17.3 delete

333

7.17.4 dir

334

7.17.5 whichboot

334

7.17.6 boot-system

335

7.17.7 ping

335

7.17.8 traceroute

337

7.17.8.1 traceroute

337

7.17.8.2 traceroute ipv6

338

7.17.9 logging cli-command

339

7.17.10 calendar set

339

7.17.11 reload

339

Default Setting

340

7.17.12 configure

340

7.17.13 disconnect

340

7.17.14 hostname

341

7.17.15 quit

341

7.17.16 cablestatus

341

7.18 DHCP Snooping Commands

342

7.18.1 Show Commands

343

7.18.2.1 ip dhcp snooping

345

7.19.1 Show Commands

351

7.19.1.1 show ip verify

351

7.19.2.1 ip verify source

352

7.19.2.2 ip verify binding

353

7.20.1 Show Commands

354

7.20.2.7 arp access-list

358

7.21.1 General Commands

361

7.21.1.1 diffserv

361

services are activated

362

7.21.2.2 no class-map

363

7.21.2.3 class-map rename

363

7.21.2.4 match any

364

7.21.2.5 match class-map

364

7.21.2.6 no match class-map

365

7.21.2.7 match cos

366

7.21.2.9 match dstip

367

7.21.2.10 match dstl4port

367

7.21.2.11 match ethertype

368

7.21.2.12 match ip dscp

368

7.21.2.14 match ip tos

369

<tosmask> of a2 (hex)

370

7.21.2.15 match protocol

370

7.21.2.17 match srcip

371

7.21.2.18 match srcl4port

372

7.21.2.19 match vlan

372

7.21.2.20 match dstip6

373

7.21.2.21 match srcip6

373

7.21.2.22 match ip6flowlbl

373

7.21.3 Policy Commands

374

7.21.3.1 assign-queue

375

7.21.3.2 drop

375

7.21.3.3 mirror

375

7.21.3.4 redirect

376

7.21.3.5 conform-color

376

7.21.3.6 mark cos

377

7.21.3.7 class

377

7.21.3.8 no class

378

7.21.3.9 mark ip-dscp

378

7.21.3.11 police-simple

379

7.21.3.12 policy-map

380

7.21.3.13 policy-map rename

380

7.21.4 Service Commands

381

7.21.4.1 service-policy

381

7.21.4.2 no service-policy

382

7.21.5 Show Commands

382

7.21.5.1 show class-map

383

7.21.5.2 show diffserv

383

service

384

service brief

385

7.22 ACL Command

389

7.22.2.4 mac access-list

393

7.22.2.5 access-list

394

7.22.2.6 no access-list

395

7.22.2.7 ip access-group

395

7.22.2.8 ip access-list

396

7.23 IPv6 ACL Command

397

7.23.2.1 ipv6 access-list

398

7.24.1 Show Commands

401

7.24.1.1 show queue cos-map

401

7.24.1.3 show queue trust

402

7.24.2.1 queue cos-map

404

7.24.2.2 queue trust

404

7.25.1 Show Commands

408

7.25.1.1 show hosts

408

7.25.1.2 show dns

408

7.25.1.3 show dns cache

409

7.25.2.1 ip hosts

409

7.25.2.2 clear hosts

410

7.25.2.3 ip domain-name

410

7.25.2.4 ip domain-list

411

7.25.2.5 ip name-server

411

7.25.2.6 ip domain-lookup

412

7.25.2.8 clear dns

412

7.25.2.9 clear dns cache

413

7.25.2.10 clear dns counter

413

8. Routing Commands

414

8.1.1.2 show ip arp brief

415

8.1.1.3 show ip arp static

415

8.1.2.1 arp

416

8.1.2.2 ip proxy-arp

416

8.1.2.3 ip local-proxy-arp

417

8.1.2.4 arp cachesize

417

8.1.2.5 arp dynamicrenew

418

8.1.2.6 arp purge

418

8.1.2.7 arp resptime

418

8.1.2.8 arp retries

419

8.1.2.9 arp timeout

419

8.2 IP Routing Commands

420

8.2.1.4 show ip route

422

8.2.1.6 show ip route entry

424

8.2.1.8 show ip route ospf

425

8.2.1.9 show ip route rip

426

8.2.2.1 routing

428

8.2.2.2 ip routing

429

8.2.2.3 ip address

429

8.2.2.4 ip route

430

8.2.2.5 ip route default

430

8.2.2.7 ip mtu

431

8.2.2.8 encapsulation

432

8.3.1 Show Commands

432

8.3.1.1 show ip ospf

432

8.3.1.2 show ip ospf abr

434

8.3.1.3 show ip ospf area

435

8.3.1.4 show ip ospf asbr

437

8.3.1.11 show ip ospf range

444

8.3.2.1 router ospf

447

8.3.2.2 enable

447

8.3.2.3 network area

448

8.3.2.4 ip ospf area

448

8.3.2.5 1583compatibility

449

8.3.2.6 area default-cost

449

8.3.2.7 area nssa

449

8.3.2.13 area range

452

8.3.2.14 area stub

452

8.3.2.16 area virtual-link

453

8.3.2.22 auto-cost

456

8.3.2.23 bandwidth

456

8.3.2.24 capability opaque

457

8.3.2.25 clear ip ospf

457

8.3.2.32 default-metric

459

8.3.2.33 distance ospf

460

8.3.2.38 ip ospf cost

462

8.3.2.41 ip ospf network

463

8.3.2.42 ip ospf priority

464

8.3.2.45 ip ospf mtu-ignore

465

8.3.2.46 router-id

465

8.3.2.47 redistribute

466

8.3.2.48 maximum-paths

466

8.3.2.50 passive-interface

467

8.3.2.51 timers spf

467

8.4.1 Show Commands

468

8.5.1 Show Commands

471

8.5.1.1 show ip rip

471

8.5.2.1 enable rip

473

8.5.2.2 ip rip

474

8.5.2.3 auto-summary

474

8.5.2.5 default-metric

475

8.5.2.6 distance rip

475

8.5.2.7 hostrouteaccept

476

8.5.2.8 split-horizon

476

8.5.2.9 distribute-list

477

8.5.2.10 redistribute

477

8.6.1 Show Commands

479

8.6.1.1 show ip irdp

479

8.6.2.1 ip irdp

480

8.6.2.2 ip irdp broadcast

481

8.6.2.3 ip irdp holdtime

481

8.6.2.6 ip irdp preference

482

8.7 VLAN Routing Commands

483

8.7.2 vlan routing

484

8.8.1 Show Commands

484

8.8.1.1 show ip vrrp

484

8.8.1.2 show ip vrrp brief

485

8.8.2.1 ip vrrp

487

8.8.2.2 ip vrrp ip

488

8.8.2.3 ip vrrp mode

488

8.8.2.5 ip vrrp preempt

489

8.8.2.6 ip vrrp priority

490

9. IP Multicast Commands

493

9.1.1.5 show ip dvmrp prune

496

9.1.1.6 show ip dvmrp route

496

9.1.2.1 ip dvmrp

497

9.1.2.2 ip dvmrp metric

498

9.2.1 Show Commands

498

9.2.1.1 show ip igmp

498

9.2.2.1 ip igmp

503

9.2.2.2 ip igmp version

503

9.2.2.7 ip igmp robustness

506

9.3 MLD Commands

507

9.3.2.5 ipv6 mld router

512

9.4 Multicast Commands

513

9.4.2.1 ip multicast

518

9.4.2.2 ip mcast boundary

518

9.5.1 Show Commands

519

9.5.1.1 show ip pimdm

519

9.5.2.1 ip pimdm

522

9.5.2.2 ip pimdm

522

9.6.1 Show Commands

523

9.6.1.1 show ip pimsm

523

9.6.1.2 show ip pimsm bsr

524

9.6.2.1 ip pimsm

527

9.6.2.5 ip pimsm rp-address

528

9.6.2.6 ip pimsm

529

9.6.2.8 ip pimsm bsr-border

530

9.7 IGMP Proxy Commands

532

9.7.2.1 ip igmp-proxy

535

9.8 MLD Proxy Commands

537

9.8.2.1 ipv6 mld-proxy

540

10. IPv6 Commands

542

10.1.2.1 interface tunnel

543

10.1.2.2 tunnel source

543

10.1.2.3 tunnel destination

544

10.1.2.4 tunnel mode ipv6ip

544

10.2.1 Show Commands

545

10.2.2.1 interface loopback

545

10.3 IPv6 Routing Commands

546

10.3.1.5 show ipv6 ndp

549

10.3.1.6 show ipv6 route

550

10.3.1.9 show ipv6 vlan

552

10.3.1.10 show ipv6 traffic

553

10.3.2.1 ipv6 forwarding

556

10.3.2.2 ipv6 hop-limit

556

10.3.2.4 ipv6 enable

557

10.3.2.5 ipv6 address

557

10.3.2.6 ipv6 gateway

558

10.3.2.7 ipv6 route

559

10.3.2.9 ipv6 mtu

560

10.3.2.18 ipv6 nd prefix

564

10.3.2.19 ipv6 unreachables

565

10.4 OSPFv3 Commands

566

10.4.1.2 show ip ospf abr

568

10.4.2.1 ipv6 ospf

579

10.4.2.2 ipv6 ospf areaid

579

10.4.2.3 ipv6 ospf cost

580

10.4.2.7 ipv6 ospf network

581

10.4.2.8 ipv6 ospf priority

582

10.4.2.11 ipv6 router ospf

583

10.4.2.13 area nssa

584

10.4.2.19 area range

587

10.4.2.20 area stub

588

10.4.2.27 auto-cost

591

10.4.2.30 distance ospf

593

10.4.2.31 enable

593

10.4.2.34 maximum-paths

595

10.4.2.36 passive-interface

595

10.4.2.37 redistribute

596

10.4.2.38 router-id

596

10.5 RIPng Commands

597

10.5.2.1 enable

598

10.5.2.2 ipv6 rip

598

10.5.2.3 ipv6 router rip

599

10.5.2.5 default-metric

599

10.5.2.6 distance rip

600

10.5.2.7 split-horizon

600

10.5.2.8 redistribute

601

10.5.2.9 ipv6 rip timer

601

10.6.1 Show Commands

602

10.6.1.1 show ipv6 pimdm

602

10.6.2.1 ipv6 pimdm

604

10.7.1 Show Commands

605

10.7.1.1 show ipv6 pimsm

605

10.7.2.1 ipv6 pimsm

608

10.7.2.7 ipv6 pimsm ssm

611

11.1 Overview

614

11.2 System Menu

615

11.2.3.6 HTTP Configuration

624

11.2.5 Viewing Logs

637

11.2.7 Defining sFlow

653

11.2.8 Defining SNMP

658

11.2.9 Viewing Statistics

662

11.2.13 Configuring SNTP

683

11.3 Switching Menu

695

11.3.4 Managing Filters

707

11.3.11 Managing Voice VLAN

722

11.3.12 Defining GARP

723

- Sets the maximum

761

11.3.22 Managing LLDP

764

11.3.23 Managing LLDP-MED

772

11.3.24 Managing VTP

778

11.3.25 Managing Link State

780

11.4 Routing Menu

784

11.4.2.1 Configuring IP

787

11.4.3 Managing OSPF

792

11.4.3.1 Configuring OSPF

792

11.4.3.2 Configuring Area

794

11.4.9 Managing VRRP

827

11.4.9.1 Configuring VRRP

827

11.4.10 Managing Tunnels

835

11.5 Security Menu

839

11.5.2 Managing RADIUS

850

11.6 IPv6 Menu

861

- 865

865

11.6.8 Managing IPv6 Routes

887

11.6.9 Managing RIPv6

890

11.7 QOS Menu

893

11.8 IPv4 Multicast Menu

926

11.9 IPv6 Multicast Menu

951

11.9.2 Managing PIM-DM

959

Modele	Rodzaj dokumentu
FortiGate 30B	Instrukcja Użytkownika Fortinet FortiGate 30B User Manual, 56 strony
FortiDB-400B	Instrukcja Użytkownika Fortinet FortiDB-400B User Manual, 2 strony
5003A	Instrukcja Użytkownika Fortinet 5003A User Manual, 26 strony
FortiGate 4000	Instrukcja Użytkownika Fortinet FortiGate 4000 User Manual, 332 strony
5003	Instrukcja Użytkownika Fortinet 5003 User Manual, 128 strony

Fortinet 548B podręczniki

Fortinet 548B Instrukcja Użytkownika (969 strony)

Spis treści

Więcej produktów i instrukcji dla Akcesoria komputerowe Fortinet

Fortinet Urządzenia