Page 2 - SALES
IntraCore IC36240 Layer 2+ Gigabit Ethernet Switch User’s Manual Asante Technologies, Inc. 2223 Oakland Road San Jose, CA 95131 USA SALES 800-662-9686 Home/Office Solutions 800-303-9121 Enterprise Solutions 408-435-8388 TECHNICAL SUPPORT 801-566-8991: Worldwide 801-566-3787: Fax www.asante.com/suppo...
Page 3 - Table of Contents
Table of Contents Table of Contents ........................................................................................................................................................... 3 Chapter 1: Introduction......................................................................................
Page 8 - Chapter 1: Introduction
Chapter 1: Introduction The IntraCore IC36240 24-port Layer 2+ Managed Gigabit Switch is a high-performance network switch used to reduce network congestion and application response times. The 24-port IntraCore IC36240 multi-protocol switch supports Layer 2+ and Gigabit Ethernet switching. The switc...
Page 11 - Management and Configuration; Asante; See Chapter 2 for more information on connecting to the switch.
1.4 Management and Configuration The switch is managed using Command Line Interface (CLI) in order to access several different command modes. Entering a question mark (?) at each command mode’s prompt provides a list of commands. 1.4.1 Console Interface Support for local, out-of-band management is d...
Page 12 - Chapter 2: Hardware Installation and Setup; Installation Overview; Chapter 1.2 Package Contents; Note
Chapter 2: Hardware Installation and Setup Use the following guidelines to easily install the switch, ensuring that it has the proper power supply and environment. 2.1 Installation Overview Follow these steps to install the IntraCore IC36240 switch: 1. Open the box and check the contents. See Chapte...
Page 13 - Installing into an Equipment Rack
2.1.2 Recommended Installation Tools You need the following additional tools and equipment to install the switch into an equipment rack: • Flat head screwdriver • Phillips head screwdriver • Antistatic mat or foam 2.1.3 Power Requirements The electrical outlet should be properly grounded, located ne...
Page 14 - Place the switch in the equipment rack.; SFP Mini GBIC Ports; To install the module, do the following:; Installing the Optional External Power Supply
5. Place the switch in the equipment rack. 6. Secure the switch by securing its mounting brackets onto the equipment rack with the appropriate screws (supplied). Important: Make sure the switch is supported until all the mounting screws for each bracket are secured to the equipment rack. Failure to ...
Page 15 - show system; Connecting Power
To verify the primary power status, use the Switch# show system command. Under System Information, you see the power unit status. System Information ------------------ System up for: 000day(s), 01hr(s), 46min(s), 54sec(s) PROM Image Version/Date: 1.00C/Nov 11 2004 17:03:04 DRAM Size: 64.0MB Flash Si...
Page 16 - Gigabit Ethernet Ports Cabling Procedures
Important: The switch must be located within 100 meters of its attached 10BaseT or 100BaseTX devices. Use the following guidelines to determine the cabling requirements for the network devices: • Connecting to Network Station: Category 5 UTP (Unshielded Twisted-Pair) straight-through cable (100 m ma...
Page 18 - Chapter 3: Initial Software Setup; Connecting to a Console; Plug power cord into the back of the switch.; Connect To; the; Settings; is for Terminal keys, NOT Windows keys
Chapter 3: Initial Software Setup Configure the switch by connecting directly to it through a console (out-of-band management), running a terminal emulation program, such as HyperTerminal or by using telnet. 3.1 Connecting to a Console To connect the switch to a console or computer, set up the syste...
Page 19 - Configuration; button from the Connect To window.; Connecting to a PC
e. Press the Configuration button from the Connect To window. e f. Set the data rate to 9600 Baud. g. Set data format to 8 data bits, 1 stop bit and no parity. h. Set flow control to NONE. f g h Now that terminal is set up correctly, power on the switch. The boot sequence will display in the termina...
Page 20 - Passwords and Privileges Commands; enable password
3.3 Passwords and Privileges Commands The switch has not default password, which allows anyone on the network access to various privilege levels. To prevent unauthorized changes to the switch’s configuration, you should set an enable password for access to switch management. Follow the example below...
Page 22 - username; name; password; Configuring an IP Address
3.4 Login Security Two methods are available on the IntraCore IC36240 to configure an authentication query process for better login security: the username command for the global configuration mode and password and login commands from the line configuration mode. 3.4.1 The username Command To establi...
Page 23 - Type; ip address; and the new address. The following screen appears:; show; over the default IP address.; Setting a Default IP Gateway Address; Restoring Factory Defaults
5. Type ip address and the new address. The following screen appears: Switch> enable Switch# configure Switch(config)# ip address 192.168.123.254/24 Switch(config)# end Switch# show ip Dhcp Client Enabled ..........: No IP Address ...................: 192.108.250.51 Subnet Mask .....................
Page 25 - enable
To list the commands available in user top mode, enter a question mark (?). Use a space and a question mark (?) after entering a command to see all the options for that particular command. Command Purpose ? Lists the user EXEC commands. show ? Lists all the options available for the given command. U...
Page 26 - command or by using the; Global Configuration Mode; configure; From privileged EXEC mode, enters global configuration mode.
In general, the top (privileged) commands allow you to change terminal settings on a temporary basis, perform basic tests, and list system information. To list the commands available in top mode, enter a question mark (?) at the prompt, as shown in the following example. Enter a question mark (?) af...
Page 27 - commands to access their respective configuration modes.
To exit global configuration command mode and return to privileged EXEC mode, use one of the following commands: Command Purpose exit end Ctrl-Z Exits global configuration mode and returns to privileged EXEC mode. To list the commands available in global configuration mode, enter a question mark (?)...
Page 28 - interface; global; interface eth1; configuration mode and return to top mode, use the; end; command or press; Switch; command followed by a space and a
4.3.1 Interface Configuration Mode Many features are enabled on a per-interface basis. Interface configuration commands modify the operation of an interface such as an Ethernet or serial port. Interface configuration commands always follow an interface global configuration command, which defines the...
Page 29 - myvlan; vlan; vlan name myvlan; exit; Advanced Features Supported within the Command Mode
In the following example, the switch shows the multiple Spanning Trees (MST) command. Switch(config)# spanning-tree mst configuration Switch(config-mst)# ? end End current mode and change to enable mode exit Exit current mode and down to previous mode help Description of the interactive help system ...
Page 30 - help; co
To get help specific to a command mode, a command, a keyword, or an argument, perform one of the following commands: Command Purpose Help Obtain a brief description of the help system in any command mode. ? List all commands available for a particular command mode. When using context-sensitive help,...
Page 31 - configure Enter configuration mode; ip; WORD This system's network name; Checking Command Syntax; In the following example, an incomplete command is entered.
Switch# configure ? configure Enter configuration mode Note that in the example below, if you enter the ip command followed by the Return Key or Enter, the system returns the prompt that the command is incomplete. Switch# ip % Command incomplete. Switch# Generally, uppercase letters represent variab...
Page 33 - conf; Tab
4.8.1 Moving Around on the Command Line Use the following keystrokes to move the cursor around on the command line in order to make corrections or changes: Keystrokes Purpose Press Ctrl-B or the left arrow. Move the cursor back one character. Press Ctrl-F or the right arrow. Move the cursor forward ...
Page 34 - Keystrokes Purpose; Press
4.8.3 Editing Command Lines That Wrap The enhanced editing feature provides a wraparound for commands that extend beyond a single line on the screen. When the cursor reaches the right margin, the command line shifts eight spaces to the left. You cannot see the first eight characters of the line, but...
Page 35 - Redisplaying the Current Command Line
When you have completed the entry, press Ctrl-A to check the complete syntax before pressing Enter to execute the command. The dollar sign ($) appears at the end of the line to indicate that the line has been scrolled to the right: Switch(config)# access-list 101 permit icmp 192.168.123.0 0.0.0.255 ...
Page 36 - Capitalize at the cursor. Press; Esc C; or
4.8.7 Transposing Mistyped Characters If you have mistyped a command entry, you can transpose the mistyped characters by using the following command: Keystrokes Purpose Press Ctrl-T . Transpose the character to the left of the cursor with the character located at the cursor. 4.8.8 Controlling Capita...
Page 37 - Chapter 5: Managing the System and Configuration Files; Managing the System; set Set the time and date; reload
Chapter 5: Managing the System and Configuration Files This chapter explains how to manage the system information, as well as how to manage the configuration files for the IntraCore IC36240. 5.1 Managing the System This section discusses the following tasks needed to manage the system information of...
Page 38 - Testing Connections with Ping Tests; address
5.1.2 Specifying the Hostname The factory-assigned default host name is Switch . To specify or modify the host name for the network, use the hostname global configuration command. Command Purpose hostname name This system’s hostname. 5.1.3 Changing the Password The switch ships with a default of no ...
Page 39 - Displaying the Operating Configuration; Managing Configuration Files
To log messages, use the following command in global configuration mode. Command Purpose logging address IP address of the host to be used as a syslog server. logging facility Facility parameters for syslog messages. logging trap Set syslog server logging level. 5.1.6 Displaying the Operating Config...
Page 40 - Copying Configuration Files to a Network Server; over the public Internet. Use TFTP only on a trusted LAN connection.
You can add comments to a configuration file describing the commands you have entered. Precede a comment with an exclamation point (!). Use the following commands to configure the software from the terminal. Command Purpose configure Enters global configuration mode and select the terminal option. S...
Page 42 - copy running-config tftp; The command can also look like this example:; copy tftp running-config; Copy a file from a TFTP server to the switch.
The following is an example of copying the running-config for use on the switch. Switch# copy running-config ? startup-config Copy to startup configuration tftp:[//A.B.C.D/filename] Copy to tftp: file system Switch# copy running-config tftp Enter TFTP Server IP Address [A.B.C.D]? Enter file name 'my...
Page 43 - Configuring SNMP
In the following example, the software is configured from the file my-config at IP address 192.168.123.59: Switch# copy tftp://192.168.123.59/my-confg running-config Download file ‘my-config’ from 192.168.123.59 to running-config? [y/n] y Accessing tftp://192.168.123.59/my-config... [OK] 487 bytes c...
Page 44 - Create or Modify Access Control for SNMP Community
5.3.3 Security Levels SNMPv3 has three levels of security. The lowest level does not provide authentication or privacy (noAuthNoPriv). This level is comparable to SNMPv1. The second level provides authentication, but no privacy (AuthNoPriv). The highest level provides authentication and security (Au...
Page 46 - Configuring Spanning Tree
5.3.5 SNMP Configuration Commands Command Purpose snmp-server Enable the SNMP agent. The first snmp-server global configuration command enables SNMP. snmp-server engineID { local engineid- string | remote host-ip-address [ udp-port port-number ] engineid-string } Set Engine ID for local or remote de...
Page 47 - Forward Time
All of the bridges (a switch is a complex bridge) on the network communicate with each other using special packets of data called Bridge Protocol Data Units (BPDUs). The information exchanged in the BPDUs allows the bridges on the network to do the following: • Elect a single bridge to be the root b...
Page 50 - shared; Configuring an Edge Port
Configuring Link Type Use the following interface mode command to configure port link-type: Switch(config)# interface eth1 Switch(config-if-eth1)# spanning-tree link-type { point-to-point | shared } By default, the link type is determined from the duplex mode of the interface: a full-duplex port is ...
Page 52 - Configuring VLAN; Refer to Chapter 7 for more information about VLAN configuration.
5.5 Configuring VLAN VLANs are used to organize any group of network nodes into separate broadcast domains. VLANs confine broadcast traffic to the originating group and eliminate broadcast storms in large networks. VLANs provide a secure and efficient network environment. VLANs are based on untagged...
Page 53 - MAC Address Table
5.6 MAC Address Table The MAC Address Table is a table of node addresses that the switch automatically builds by “learning.” It performs this task by monitoring the packets that pass through the switch, checking the source and destination addresses, and then recording the source address information ...
Page 54 - Chapter 6: Configuring IP; Assign IP Addresses to Switch; Class; Multicast group addresses
Chapter 6: Configuring IP The Internet Protocol (IP) is a packet-based protocol used to exchange data over computer networks. All other IP protocols are built on the foundation. IP is a network-layer protocol that contains addressing and control information that allows data packets to be routed. Thi...
Page 55 - Establish Address Resolution; data link; Command Purpose; show interface; in top mode or global configuration; show arp
6.2 Establish Address Resolution A device in the IP can have both a local address (which uniquely identifies the device on its local segment or LAN) and a network address (which identifies the network to which the device belongs). The local address is more properly known as a data link address becau...
Page 56 - Managing IP Multicast Traffic; members of a; Forwarding Unknown Multicast Packets; Use the following commands to configure IGMP.; Specify the IGMP Version
6.3 Managing IP Multicast Traffic Multicast traffic is a means to transmit a multimedia stream from the Internet (a video conference, for example) without requiring a TCP connection from every remote host that wants to receive the stream. Traditional IP communication allows a host to send packets to...
Page 57 - Select the IGMP version that the switch uses in a vlan.; ip igmp query-interval 200; Using Access Lists
All systems on the subnet must support the same version. The switch does not automatically detect Version 1 systems and switch to Version 1. Configure the switch for Version 2 if all devices on the subnet support IGMP version 2. To control which version of IGMP the switch uses, use the following com...
Page 60 - permit; access-list 1 permit any; any
6.4.1 Create a Standard Access List Standard access lists filter at Layer 3, and can allow or block access to networks and host addresses. The parameters for a standard access list are described below: • Access list number (1–99) : Identifies the access list to which an entry belongs. There is no li...
Page 61 - The following is sample output from the mac access-list command.; mac access-list standard 700; Destination address: Specifies the destination address to match
6.4.2 Create a MAC Access List The IntraCore IC36240 has a 16K Mac address. The parameters for a MAC access list are described below: • MAC access-list standard (700-799): Identifies the access list to which an entry belongs. There is no limit to how many entries make up a MAC access list, other tha...
Page 62 - or the left arrow keys.
In the following example, an extended access list is created to deny FTP and allow all other traffic from subnet 192.168.123.0 to be forwarded to all other networks or subnets. Note : Remember when the cursor reaches the right margin, the command line shifts 8 spaces to the left. You cannot see the ...
Page 63 - Creating an Access List with a Name; command; ip access-list standard test; At the; Applying an Access List to an Interface; access-list 101 deny any
6.4.4 Creating an Access List with a Name From the global configuration mode, you can also create access lists. Using the Switch(config)#ip command you can name your access list, rather than using a number. The new prompt reflects the named access list mode. Switch(config)# ip ? access-list Named ac...
Page 66 - Chapter 7: VLAN Configuration; Creating or Modifying a VLAN; Enter the following commands beginning in configuration mode:; interface eth16; From the interface configuration mode, use the; switchport access vlan
Chapter 7: VLAN Configuration A VLAN is a group of end stations with a common set of requirements, independent of physical location. VLANs have the same attributes as a physical LAN but allow you to group end stations even if they are not located physically on the same LAN segment. Usually VLANs are...
Page 67 - tester; show vlan
First, a VLAN is created and named tester . Switch# configure Switch(config)# vlan 2 Switch(config-vlan)# name tester Switch(config-vlan)# exit Switch(config)# exit Switch# show vlan In the output of the show vlan command, the new VLAN will be listed, but will not yet be active. Next, choose a switc...
Page 68 - VLAN Port Membership Modes; vid
7.2 VLAN Port Membership Modes Assign a switchport to a VLAN by designating a membership mode. The membership mode determines the type of traffic the port carries and the number of VLANs that belong to a specific port. The following is a list of the membership modes: • Static Access • Trunk (IEEE 80...
Page 70 - Chapter 8: Quality of Service Configuration; Weighted Fair Queuing; queue; command in interface configuration mode:; CoS Bandwidth; Monitoring Weighted Fair Queuing Lists; Displays the status of the weighted fair queuing.; Priority Queuing
Chapter 8: Quality of Service Configuration Quality of Service (QoS) is a general term referring to various methods of traffic management you can employ on your network to ensure that traffic you identify as high-priority can use a sufficient share of the available bandwidth. The IC36240 supports th...
Page 71 - To display information about the input and output queues, use the; show queuing priority; command in EXEC mode.; priority-list 2 protocol ip medium list 1; Assigning the priority list to an interface:; Traffic Shaping; Configuring Traffic Shaping for an Interface
queues; the queue with the highest priority is serviced first until it is empty, then the lower queues are serviced in sequence. 8.2.1 Defining the Priority List A priority list contains the definitions for a set of priority queues. The priority list specifies in which queue a packet will be placed....
Page 72 - Configuring Traffic Shaping for an Access List; Assigns traffic to an access list.; Enters interface configuration mode.; Monitoring the Traffic Shaping Configuration; Displays the current traffic shaping configuration.; access-list 100 permit udp any any eq 53; Assigning the traffic shape to an interface:; Configuring Rate Limit
8.4.2 Configuring Traffic Shaping for an Access List To configure traffic shaping for outbound traffic on an access list, use the following commands beginning in global configuration mode: Command Purpose access-list access-list-number Assigns traffic to an access list. interface interface-type-numb...
Page 73 - inter eth1
The following examples show setting the rate of interface Ethernet 1 to 100M, setting an associated access list and limiting the rate of the access list on the interface to 200M. Switch(config)# inter eth1 Switch(config-if-eth1)# rate-limit input 100000000 Switch(config-if-eth1)# access-list 1 permi...
Page 74 - Chapter 9: Configuring the Switch Using the GUI; Main Configuration Menu
Chapter 9: Configuring the Switch Using the GUI This chapter provides and overview of configuring the switch with the graphical user interface (GUI). For more information about the different features and how to implement them refer to the chapters specific to that function. Refer to the following ex...
Page 75 - Information Screens
• System Check Information • Save The following example shows the main screen menu bar. 9.2 Information Screens To monitor the switch use the two information screens. The following sections describe the Front Panel and the General Information screens. 9.2.1 Front Panel Information Screen Use this se...
Page 78 - Port Configuration Menu; The following example shows the Port Configuration screen.; Individual Port Configuration Screen
9.3 Port Configuration Menu From the port configuration screen, you can view current information and configure individual ports. To access the Port Configuration screen, click on Port Config in the menu bar on the left side of the screen. To configure individual ports click on the port number on the...
Page 80 - Select port number Press go
a b c d e From this screen, you can also navigate between different ports and go to different units in the network. To go to another port number change the port number at the top of the screen and press Go. Select port number Press go You can set how the system updates the statistics about the selec...
Page 81 - Spanning Tree Protocol Configuration
9.4 Spanning Tree Protocol Configuration The Spanning Tree Protocol (STP) is part of the IEEE 802.1D standard. It provides for a redundant network without the redundant traffic through closed paths. For example, in a network without spanning tree protocol, a message is broadcast through multiple pat...
Page 84 - SNMP Configuration
• Select the ports on each bridge that forward traffic, and place the redundant ports in blocking states To change the global STP status, select the desired state from the drop down menu. Use this screen to change the bridge priority, hello time maximum age, forward delay by entering the desired tim...
Page 86 - To restore the defaults press the Restore button.; Address Table Screen
1 2 3 4 5 To restore the defaults press the Restore button. 9.6 Address Table Screen Use this screen to view IP address tables. From the main screen you can view the status of each ports, the address counts of the VID, IP and MAC addresses. You can search for specific IP and MAC addresses and sort t...
Page 87 - The following example shows the Address Table screen.
The following example shows the Address Table screen. Click on the port number to filter the display and show the address table for a specific port. 87 Asante IntraCore IC36240 User’s Manual
Page 88 - The MAC address of the switch is identified as “self”.
The following screen shows the output from selecting Port 1. The Address table at the bottom of the screen filtered out all the ports except port 1. The MAC address of the switch is identified as “self”. To sort the Address Table by IP address, click the Sort by IP button. The table is now sorted nu...
Page 89 - VLAN Configuration; The
To sort the Address Table by MAC address, click the Sort by MAC button. Your table will be sorted numerically by MAC address. 9.7 VLAN Configuration VLANs are used to organize any group of network nodes into separate broadcast domains. VLANs confine broadcast traffic to the originating group and eli...
Page 92 - IGMP Configuration
The following example shows output from creating a new VLAN (4) with the name Asante and assigning it to port 7. To remove a VLAN from an associated port follow these steps: 1. Click the membership check box of the desired port to deselect the association. 2. Click on the Remove unchecked member but...
Page 95 - Apply
3. Click Apply 1 2 3 9.9 Web CLI Screen Use the Web Command Line Interface (CLI) screen to use access the CLI from an http server. This feature provides the flexibility of the CLI with the usability of the GUI. You can set the clock, ping the system and show the running configuration. To access the ...
Page 96 - System Clock Menu; From this menu enter the following:
The following example shows the main access point of the CLI from the Web interface. 9.10 System Clock Menu You can set the system clock from the System Clock Menu. After selecting the correct date and time for the system click apply. The operation resets the switch using the time you specify. This ...
Page 97 - After you set the desired date and time click apply.
After you set the desired date and time click apply. 9.11 Save Click on Save to automatically retain any configuration changes you made. 97 Asante IntraCore IC36240 User’s Manual
Page 98 - Appendix A: Basic Troubleshooting; Problem Possible; Chapter 2.6 Connecting to the Network
Appendix A: Basic Troubleshooting In the unlikely event that the switch does not operate properly, follow the troubleshooting tips below. If more help is needed, contact Asante’s technical support at www.asante.com/support . Problem Possible Solutions The Power LED is not lit. Check the power connec...
Page 99 - Appendix B: Specifications; Physical Characteristics
Appendix B: Specifications The sections below list the features and product specifications for the IntraCore IC36240 switch. Connectors: 24 RJ-45 auto-MDI/MDIX Ports 24 10/100/1000BaseT ports that have auto-negotiation for speed, duplex mode and flow control Gig Modular Ports 4 SFP slots for 1000SX ...
Page 100 - Appendix C: FCC Compliance and Warranty Statements
Security User password, SNMP access filter, port security (MAC address filter with notification), 802.1x (port-based, L2/L4 ACL, RADIUS, TACACS+ Management Male DB9 RS-232 DTE (auto baud to 115k), USB, Cisco CLI x 4 sessions, Web RMON (1, 2, 3, 9), port mirroring Firmware Upgrade TFTP, dual banks of...
Page 101 - C.1 FCC Compliance Statement; Save these instructions for later use.
Appendix C: FCC Compliance and Warranty Statements C.1 FCC Compliance Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interferen...
Page 102 - C.3 IntraCare Warranty Statement; years
C.3 IntraCare Warranty Statement Products: IntraCore IC36240 Duration: 3 years Advanced Warranty United States: Second Business Day Replacement: Other countries: See your local distributor or reseller 1. Asante Technologies warrants (to the original end-user purchaser) the covered IntraCore products...
Page 103 - Appendix D: Online Warranty Registration; Please register this product online at
Appendix D: Online Warranty Registration Please register this product online at http://www.asante.com/support/supRegistration.asp or by filling out and mailing the card below. 103 Asante IntraCore IC36240 User’s Manual
Page 104 - Index; Access List
Index Access List apply .....................................................................63 classification .........................................................58 configuring standard .............................................60 create expanded ...............................................