Juniper Networks EX2500 - Manual (Page 4)

iv „ Table of Contents
EX2500 Ethernet Switch Configuration Guide
TACACS+ Authentication........................................................................ 14
How TACACS+ Authentication Works .............................................. 15
TACACS+ Authentication Features in the EX2500 Switch ................ 15
Command Authorization and Logging ............................................... 16
Configuring TACACS+ Authentication on the Switch ........................ 17
Secure Shell ............................................................................................. 17
Configuring SSH Features on the Switch ........................................... 18
SSH Encryption of Management Messages........................................ 18
Generating RSA Host and Server Keys for SSH Access ...................... 18
SSH Integration with RADIUS and TACACS+ Authentication ............ 19
End User Access Control.......................................................................... 19
Considerations for Configuring End User Accounts ........................... 19
User Access Control .......................................................................... 20
Listing Current Users......................................................................... 20
Logging In to an End User Account ................................................... 21
Chapter 2 VLANs 23
VLAN Overview.............................................................................................. 23
VLANs and Port VLAN ID Numbers ................................................................ 24
VLAN Numbers........................................................................................ 24
PVID Numbers......................................................................................... 24
VLAN Tagging ................................................................................................ 25
VLAN Topologies and Design Considerations ................................................. 28
VLAN Configuration Rules ....................................................................... 28
Multiple VLANs Configuration Example ................................................... 29
Private VLANs ................................................................................................ 31
Private VLAN Ports .................................................................................. 31
Private VLAN Configuration Guidelines .................................................... 32
Private VLAN Configuration Example ...................................................... 32
Chapter 3 Spanning Tree Protocol 33
Spanning Tree Overview ................................................................................ 33
Bridge Protocol Data Units (BPDUs)......................................................... 34
Determining the Path for Forwarding BPDUs .................................... 34
Bridge Priority................................................................................... 34
Port Priority ...................................................................................... 35
Port Path Cost ................................................................................... 35
Spanning Tree Group Configuration Guidelines ....................................... 35
Changing the Spanning Tree Mode.................................................... 35
Assigning a VLAN to a Spanning Tree Group ..................................... 35
Creating a VLAN................................................................................ 36
Rules for VLAN Tagged Ports............................................................. 36
Adding and Removing Ports from STGs ............................................ 36
Rapid Spanning Tree Protocol ........................................................................ 37
Port State Changes .................................................................................. 37
Port Type and Link Type ......................................................................... 38
Edge Port .......................................................................................... 38
Link Type .......................................................................................... 38
RSTP Configuration Guidelines ................................................................ 38
RSTP Configuration Example................................................................... 38
Per VLAN Rapid Spanning Tree...................................................................... 39
Default Spanning Tree Configuration ....................................................... 39
Why Do We Need Multiple Spanning Trees?............................................ 39