Hirschmann MACH 4000 User Manual

Protection from unauthorized access
Basic - L3P
Release 4.0 11/07
6.6 Access Control Lists (ACL).
23
6.6.5 Configuring MAC ACLs
Example: MAC ACL
Filtering AppleTalk and IPX from the entire network.
enable Switch to the Priviledged EXEC mode.
configure Switch to the Configuration mode.
mac access-list extended
ipx-apple
deny any any ipx
deny any any appletalk
permit any any
Create the extended ACL "ipx-apple".
Add the rule "deny IPX" to the list.
Add the rule "deny AppleTalk" to the list.
Add the rule "permit all other data" to the list.
exit Switch to the Configuration mode.
mac access-group ipx-apple
in
Attach the ACL "ipx-apple" to all interfaces.
exit Switch to the Priviledged EXEC mode.
show mac access-lists Display the ACLs.
MAC ACL Name Rules Direction Interface(s)
------------------------------- ----- --------- ------------------
ipx-apple 3 inbound 1/1,1/2,1/3,1/4,2/
1,2/2,2/3,2/4,3/1,3/2
show access-lists interface
1/1 in
Display the ACLs of interface 1.1.
ACL Type ACL ID Sequence Number
-------- ------------------------------- ---------------
MAC ipx-apple 1

Hirschmann MACH 4000 Specifications

General

Model	MACH4000
Operating Temperature	-40°C to +70°C
Managed	Yes
Switching Technology	Store-and-forward
Management	Web-based, CLI, SNMP
Ports	Up to 24
Port Type and Speed	10/100/1000 Mbps Ethernet, Gigabit Ethernet
Speed	10/100/1000 Mbps
VLAN Support	Yes
Redundancy	HSR, PRP

Summary

Access to the User Interfaces

1.1 System Monitor

1.2 Command Line Interface

Use the CLI for detailed configuration and advanced switch management.

1.3 Web-based Interface

Configure the switch graphically via a web browser interface.

Entering the IP Parameters

2.2 Entering IP parameters via CLI

Configure IP settings using the Command Line Interface.

2.3 Entering the IP Parameters via HiDiscovery

2.4 Loading the system configuration from the ACA

2.5 System configuration via BOOTP

2.6 System configuration via DHCP

Automate IP parameter assignment using DHCP.

2.7 System configuration via DHCP Option 82

2.8 System configuration via the Web-based interface

Set IP parameters through the graphical web interface.

2.9 Faulty device replacement

Solutions for replacing a faulty switch with a new one.

Loading/saving settings

3.1 Loading settings

Methods for loading configuration data into the switch.

3.2 Saving settings

Methods for saving current configuration data.

Loading software updates

4.1 Loading the software from the ACA

4.2 Loading the software from the tftp server

Configuring the ports

Switching the port on and off

Configuring Power over ETHERNET

Protection from unauthorized access

6.1 Password for SNMP access

6.2 Telnet/Web/SSH access

Manage and secure remote access protocols like Telnet, Web, and SSH.

6.4 Port access control

Implement MAC or IP-based security policies on switch ports.

6.5 Port authentication according to 802.1X

Secure network access using IEEE 802.1X port authentication.

6.6 Access Control Lists (ACL).

Filter traffic based on IP or MAC addresses using Access Control Lists.

Network load control

8.1 Direct packet distribution

8.2 Multicast application

8.3 Rate Limiter

Control traffic rates on ports to prevent congestion.

8.4 QoS/Priority

Prioritize traffic types to ensure quality for critical applications.

8.5 Flow control

8.6 VLANs

Segment the network into virtual LANs for better organization.

Operation diagnosis

9.1 Sending traps

9.2 Monitoring the device status

Check the overall operational status and health of the switch.

9.5 Event counter at port level

9.6 Displaying the SFP status

9.7 TP cable diagnosis

9.8 Topology discovery

9.9 Detecting IP address conflicts

Detect and resolve IP address conflicts on the network.

9.11 Monitoring port traffic (port mirroring)

Setting up configuration environment

A.1 Setting up DHCP/BOOTP server

A.2 Setting up DHCP Server Option 82

A.3 tftp server for software updates

A.4 Preparing access via SSH

Set up SSH access using key pairs for secure remote management.