Tampilkan postingan dengan label Unix. Tampilkan semua postingan
Tampilkan postingan dengan label Unix. Tampilkan semua postingan

16.12.11

summit 200 sw-24-200

Configuring VLANs on the Switch

This section describes the commands associated with setting up VLANs on the switch. Configuring a
VLAN involves the following steps:
1 Create and name the VLAN.
2 Assign an IP address and mask (if applicable) to the VLAN, if needed.
NOTE
Each IP address and mask assigned to a VLAN must represent a unique IP subnet. You cannot
configure the same IP subnet on different VLANs.
3 Assign a VLANid, if any ports in this VLAN will use a tag.
4 Assign one or more ports to the VLAN.
As you add each port to the VLAN, decide if the port will use an 802.1Q tag.
VLAN Configuration Commands
Table 28 describes the commands used to configure a VLAN.
Table 28: VLAN Configuration Commands
Command Description
config vlan add port {tagged
| untagged} {nobroadcast}
Adds one or more ports to a VLAN. You can
specify tagged port(s), untagged port(s).
Specify nobroadcast to prevent the switch
from forwarding broadcast, multicast, and
unknown unicast traffic. By default, ports are
untagged.
config vlan delete port
{tagged | untagged} {nobroadcast}
Deletes one or more ports from a VLAN.
config vlan ipaddress
{}
Assigns an IP address and an optional mask to
the VLAN.
config vlan tag Assigns a numerical VLANid. The valid range
is from 2 to 4094 (1 is used by the default
VLAN).
92 Summit 200 Series Switch Installation and User Guide
Virtual LANs (VLANs)
VLAN Configuration Examples
The following Summit 200 series switch example creates a tag-based VLAN named video. It assigns the
VLANid 1000. Ports 4 through 8 are added as tagged ports to the VLAN.
create vlan video
config video tag 1000
config video add port 4-8 tagged
The following Summit 200 series switch example creates a VLAN named sales, with the VLANid 120.
The VLAN uses both tagged and untagged ports. Ports 1 through 3 are tagged, and ports 4 and 7 are
untagged. Note that when not explicitly specified, ports are added as untagged.


create vlan sales
config sales tag 120
config sales add port 1-3 tagged
config sales add port 4,7

Displaying VLAN Settings
To display VLAN settings, use the following command:
show vlan {} {detail}
The show command displays summary information about each VLAN, which includes:
• Name
• VLANid
• How the VLAN was created
• IP address
• STPD information
• QoS profile information
• Ports assigned
• Tagged/untagged status for each port
• How the ports were added to the VLAN
• Number of VLANs configured on the switch
Use the detail option to display the detailed format.


http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0CCAQFjAA&url=http%3A%2F%2Fextremenetworks.com%2Fdoc.aspx%3Fid%3D350&ei=gMzqTtfUFIWgiQfJ_oSVBw&usg=AFQjCNE5fRq9PQYS2Iro0-BBDMVhmuuq1w 

21.11.11

Vlan Ubuntu

802.1q VLAN HOWTO

Doing 802.1q trunking to an Ethernet switch is really easy. I describe two methods - a text only one for servers, and a GUI one for desktops.

The VLAN number that an interface uses always gets appended to the physical interface after a dot, so for instance an interface eth0 using VLAN number 99 would be called eth0.99. The instructions below all assume you want to connect to vlan 99 - change the number as required.

Server console method
Install the vlan package:
Code:
sudo apt-get install vlan
Load the 8021q kernel module:
Code:
sudo modprobe 8021q
Ensure that this module gets loaded after a reboot by adding to /etc/modules:
Code:
sudo  sh -c 'grep -q 8021q /etc/modules || echo 8021q >> /etc/modules'
Configure the interface by editing /etc/network/interfaces:
Code:
sudo nano /etc/network/interfaces
and adding a stanza like this:
Code:
auto eth0.99
iface eth0.99 inet static
address 192.168.99.1
netmask 255.255.255.0
Then bring the interface up:
Code:
sudo ifup eth0.99
Desktop GUI method
Install the vlan package using Synaptic: System->Administration->Synaptic Package Manager
and search for and install the package 8021q.

The next bit has to be done from the command line.
Load the 8021q kernel module:
Code:
sudo modprobe 8021q
Ensure that this module gets loaded after a reboot by adding to /etc/modules:
Code:
sudo  sh -c 'grep -q 8021q /etc/modules || echo 8021q >> /etc/modules'
Now we have to create a low-level interface that the network manager can see:
Code:
vconfig add eth0 99
Now we can find eth0.99 in the GUI System->Administration0>Network and configure it how we want.

sumber : http://ubuntuforums.org/showthread.php?t=703387

5.5.09

Operating System for Router/Firewall

This list contains Linux distributions or Unix distributions specifically designed to be used as the operating system of a machine acting as a router and/or a firewall.

BrazilFW
BrazilFW is a Router/firewall distribution based on Coyote Linux
Cflinux
Cflinux is intended to be a small, embedded linux based system, mostly usable for firewall (Linux kernel 2.4 with iptables), router (ripd, ospfd, even bgpd from quagga), 802.11a/b/g access point (hostap and madwifi drivers), IPSEC gateway (openswan), PPPoE server (with radius authentication, kernel PPPoE), PPTP access servers
CiscoASA
Cisco ASA 8.x.x is Linux distribution used in Cisco ASA Security Appliances. An article in German, describing the contents of the package
ClarkConnect
Router/firewall distribution
Collax Business Server
A Router/firewall & web-, email- and database server distribution
Collax Security Gateway
A specialized Router/firewall/IDS/IPS server distribution
Coyote Linux
Router/firewall distribution
Devil-Linux
firewall/router/server distribution running from CD
DD-WRT
Embedded firewall distribution
eBox
Router/Firewall and NAS/PDC
Eisfair
small easy to install server
Endian Firewall
Unified Threat Management distribution (Router/Firewall, Gateway Anti-Spam & Anti-Virus for Web, FTP and Email, Hotspot functionality)
EnGarde Secure Linux
A Router/firewall & web-, email- and database server distribution
Fli4l
a single floppy ISDN, DSL and Ethernet-Router
floppyfw
floppyfw is a router with the advanced firewall-capabilities in Linux that fits on one single floppy disc.
FREESCO
a free replacement for proprietary routers supporting up to 10 network cards and up to 10 modems.
Gibraltar
Router/firewall distribution.
IPCop
Router/firewall distribution
IPFire
Router/firewall/homeserver distribution with webbased paketmanager
LEAF Project
a customizable embedded Linux network appliance used as an Internet gateway, router, firewall, and wireless access point.
Ideco Gateway
Advanced Router/Firewall distro
OpenWrt
Modular embedded distribution for ARM, MIPS, PPC and x86 devices.
M0n0wall
A Router/firewall distribution based on FreeBSD.
PfSense
A free, open source customized distribution of FreeBSD tailored for use as a firewall and router.
PyramidLinux
A wireless router distribution for x86 embedded systems.
redWall
Router/firewall distribution
Sentry Firewall
A firewall, server or intrusion detection system distribution
SME Server
A Router/firewall[citation needed] & web-, file-, email- and database server distribution based on CentOS
SmoothWall
Router/firewall distribution
The Linux Router Project
Router distribution (Defunct as of 2003)
Trustix
Router/firewall distribution with SSH and GCC included if desired.(Defunct as of jan 2009)
Untangle
GPLv2 Firewall & Router that runs 12 open source applications including Spam Blocker, Virus Blocker, Web Filter, OpenVPN & More.
Vyatta
Enterprise-class routing, security and traffic management with simple-to-use interfaces designed as a network operating system that runs on Intel/AMD as well in virtual environments.
Zeroshell
Web administrable router/firewall live CD with QoS features. It is also able to act as a Wi-Fi Access Point with advanced features such as the Multiple SSID and 802.1x RADIUS Authentication. Zeroshell supports VLAN trunking (802.1q), bridging and WAN load balancing and failover features.

15.5.07

Setting Network di OpenBSD

Setting Network di OpenBSD

I. Pengecekan network card



Pada tahap installasi kan kita sudah setting network jadi sebenarnya sudah tidak di perlukan setting lagi kecuali ada yang mau di rubah.



Coba kita gunakan command ifconfig

Gateway# ifcongfig –a

lo0: flags=8009 mtu 33224

inet 127.0.0.1 netmask 0xff000000

ne3: flags=8863 mtu 1500

media: Ethernet autoselect (10baseT)

inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255

pflog0: flags=141 mtu 33224

sl0: flags=c010 mtu 296

sl1: flags=c010 mtu 296

ppp0: flags=8010 mtu 1500

ppp1: flags=8010 mtu 1500

tun0: flags=10 mtu 3000

tun1: flags=10 mtu 3000

enc0: flags=0<> mtu 1536

bridge0: flags=0<> mtu 1500

bridge1: flags=0<> mtu 1500

vlan0: flags=0<> mtu 1500

vlan1: flags=0<> mtu 1500

gre0: flags=8010 mtu 1450

gateway#



coba liat network interface yang ada ne3 sudah terpasang address dengan ip 192.168.0.1 dengan netmask 0xffffff00 = 255.255.255.0



berarti network card kita udah up sekarang test untuk memastikan apa benar benar up.

Lakukan command ping untuk local LAN anda

Contoh :

Gateway# ping 192.168.0.100

PING 192.168.0.100 (192.168.0.100): 56 data bytes

64 bytes from 192.168.0.100: icmp_seq=0 ttl=128 time=0.644 ms

64 bytes from 192.168.0.100: icmp_seq=1 ttl=128 time=0.509 ms

64 bytes from 192.168.0.100: icmp_seq=2 ttl=128 time=0.469 ms



nah berarti network sudah jalan sukses selamat anda layak di cium om obsd :P



nah kalu masih blom isa gimana ? berarti anda gagal dalam instalasi network pada saat install jadi gimana donk ?? yah udah gini aja



sekarang kamu bisa man ifconfig untuk lebih jelasnya



tapi pastikan kalu Ethernet card situ emang terpasang dengan benar kabel UTP HUP atau router dengan baik. Dan pastinya ke detect ama openbsd anda.



Cara cecknya liat lah dmesg mu

Gateway# dmesg | more

Cari yang berbau bau merek network card situ seperti ini :



ne3 at pci0 dev 9 function 0 "Realtek 8029" rev 0x00: irq 11

ne3: address 00:80:c8:c2:c4:65



berarti network interface daku ne3 . yah sutra lakukan edit manual dengan ifconfig atau dengan mengedit langsung file di /etc yaitu hostname.ne3 < forwarding="1" 1="Permit" forwarding="1" 1="Permit" forwarding="1"> 1



selesai jadi deh computer situ sebagai gateway J





III. IP alias





Pada mesin BSD anda tentu ada kala nya anda perlu lebih dari 1 ip address elo karena itu di obsd juga dapat anda lakukan yaitu dengan cara :



Anda dapat lakukan dengan ifconfig . man ifconfig untuk melakukan ini

Atau langsung dengan menedit file /etc/hostname.xxx



Cara :

Gateway# vi /etc/hostname.ne3

inet 192.168.0.1 255.255.255.0 NONE

inet alias 192.168.0.200 255.255.255.0 NONE



ifconfig :

gateway# ifconfig ne3 inet alias 192.168.0.200 netmask 255.255.255.0



setelah itu reboot mesin anda dan coba liat dengan command ifconfig –a apakah ip alias sudah terpasang di network interface ne3

zte c300 trunk mode

  gpon   profile tcont PPPOE type 4 maximum 9900000   profile tcont 100M type 4 maximum 100000   profile tcont 50M-TRUNK type 4 maximum 5000...