Asante 35160 - Manuals

7 • Supports multiple user names and Secure Shell (SSH) • Port Mirroring/monitoring on Ingress only • Local and Global port management 1.2 SwitchCore CXE2010 The IC35160 utilizes a state-of-the-art packet processor on its system board, which provides 16 Gigabit Ethernet ports. The SwitchCore CXE2010...

9 1.5 Front and Back Panel Descriptions Refer to the following sections for detailed descriptions of the front and back panels of the IntraCore 35160 series switches. 1.5.1 IC35160-T The front panel of the IC35160-T contains the following: power and port LEDs; 12 10/100/1000BaseT ports; 4 dual-funct...

11 Chapter 2. Hardware Installation and Setup The following guidelines will help the user to easily install the switch, and to ensure that it has the proper power supply and environment. 2.1 Installation Overview Follow these steps to install the IntraCore switch: 1. Open the box and check the conte...

12 2.1.3 Power Requirements The electrical outlet should be located near the switch and be easily accessible. It must also be properly grounded. Make sure the power source adheres to the following guidelines: • Power: Auto Switching 110/240 VAC • Frequency range: 50/60 Hz • Maximum Input AC Current:...

14 2.3.2 Removing a GBIC Caution : GBIC 1000T modules run hot under normal operating conditions. When it has been removed from the system, place it on a heat-resistant surface and allow the module to cool before handling. Note : Unnecessary removals/insertions of a GBIC module will lead to premature...

15 2.6 Connecting to the Network The switch may be connected to an Ethernet network with the unit powered on or off. Use the following procedure to make the network connections: 1. Connect the network devices to the switch, following the cable guidelines outlined below. 2. After the unit is connecte...

16 2.6.2 Gigabit Ethernet Ports Cabling Procedures Cabling requirements for the optional hardware modules depend on the type of module installed. Use the following guidelines to determine the particular cabling requirements of the module(s): • 1000BaseSX GBIC: Cables with SC-type fiber connectors; 6...

18 2.8 Changing the Password The default password (which is Asante , and is case-sensitive) may allow immediate access to ANYONE on the network. To protect the switch from unauthorized changes to the configuration, change the administrator’s password. It can only be changed through the console or te...

20 Chapter 3. Configuration This chapter describes the log in procedure and configuration of the switch via the console or telnet interfaces. For information on configuring the switch via the web browser, see Chapter 5 Web-Based Management . Note : The screens shown are from the IC35160-T. The IC351...

21 3.1 General Information The General Information Screen displays the current system information of the switch, such as its name, IP address, and boot information. The information displayed is read-only. To view General Information, type g from the Main Menu. A screen similar to that below appears....

22 To access the Configuration Menu when you are logged in as root or readwrite , type c from the Main Menu. The Configuration Menu appears, as shown below (from a telnet session): IntraCore 35160-T Configuration Menu Power Unit Status = OK <Cmd> <Description> a Administration Configurat...

23 4. Press Enter . The system administration information changes take effect. 5. Type q to quit and return to the Configuration Menu. 3.4 System IP Configuration The System IP Configuration Menu displays, and allows the user to change, the information needed to access the switch over the network vi...

25 3.5.1 Enabling or Disabling a Port The enabling or disabling of a port is a manual operation that can be used to isolate a network device that might be causing problems on the network, or to prevent unauthorized use of a port or station. To enable or disable a port, use the following procedure: 1...

26 3.6.1 Enabling or Disabling 802.3x Flow Control Use the following procedure to control traffic and avoid congestion, such as during a shortage of buffer resources for the port. Flow control is accomplished by means of standard PAUSE control frames for each port, independent of all others. Before ...

27 The new maximum packet length is shown on the Advanced Port Configuration Menu. 3.6.5 Global Port Configuration The Global Port Configuration Menu allows the user to simultaneously change the configuration information for all ports. To change the port configuration for all ports, use the followin...

28 Type d in the Configuration Menu. The Unicast Forwarding Database Configuration Menu appears, as shown below. IntraCore 35160-T Unicast Forwarding Database Configuration Menu Age-out Time: 300 sec. MAC Address Count: 5 IP Address Count: 2 <Cmd> <Description> a Display All Forwarding D...

29 3.7.2 Searching for a MAC Address The Unicast Forwarding Database can be searched by MAC address or by IP address. To search for a specific MAC or IP address, use the following procedure: 1. Access the Unicast Forwarding Database Configuration Menu by typing d in the Configuration Menu. 2. Type m...

30 3.10 Protocol Configuration To access the Protocol Configuration Menu, enter the letter r from the Configuration Menu. Use the listed command letters to configure Simple Network Management Protocol (SNMP) and Spanning Tree Protocol (STP). IntraCore 35160-T Protocol Configuration Menu <Cmd> ...

31 Settings Description SNMP Read Community The string that defines access rights for reading SNMP data objects. The default is public . SNMP Write Community The string that defines access rights for writing SNMP data objects. The default is private . Trap Authentication The status of the SNMP agent...

32 Deleting a Trap Receiver Use the following procedure to delete a trap receiver that has been previously designated: 1. Open the SNMP Configuration Menu by typing n in the Configuration Menu. 2. Type d to Delete a Trap Receiver . A prompt for the entry of the trap receiver appears. 3. Enter the nu...

33 Enabling and Disabling STP The switch is shipped with Spanning Tree enabled on all ports by default. To enable or disable STP on the switch, use the following procedure: 1. Open the Spanning Tree Configuration Menu by typing s in the Protocol Configuration Menu. 2. Type t to toggle STP to enabled...

34 3.11 Trunk Group Configuration The IC35160 supports link aggregation (port trunking). This feature is used to combine two or more links (ports) in order to increase the overall bandwidth of the link, thereby sharing or balancing the data load. Link aggregation creates better redundancy and fault ...

35 3.12 QoS Priority Queue Management Quality of Service (QoS) Priority Queue is a feature that allows the switch to prioritize packets, thereby ensuring that high-priority traffic is handled before low-priority traffic when there is congestion on the network. This can improve network performance an...

36 To assign a Priority Group to an interface, type p in the QoS Priority Queue Management Menu to access the Priority Group Configuration Menu. Only one list can be assigned per interface. Type g to set the Priority Group, or type the corresponding command letter to select another task. IntraCore 3...

37 3.13 User Interface Configuration To access the User Interface Configuration Menu, enter the letter u from the Configuration Menu. Use the listed command letters to configure user interfaces (SSH, Telnet, and HTTP server), UI timeout, passwords, add/delete access hosts, and access control. IntraC...

38 The new SSH/Telnet UI Time Out is reflected in the User Interface Configuration Menu. After configuring the desired time-outs, type q to return to the previous menu. 3.13.3 Change Password Use this option to change the password that the user must enter when they log in. Important! The factory def...

39 3.13.6 Enabling or Disabling the Web Server The current HTTP Server Status is shown in the User Interface Configuration. Important! For security, the web server is disabled by default. It cannot be enabled if SSH is currently enabled. One or the other must be left disabled. To toggle the status o...

40 3.14.1 Port Mirroring Port Mirroring allows the user to configure the switch to copy all traffic associated with one port (the Monitor Port) to a Mirror Port on the switch. The user can connect the Mirror Port to a network analyzer or RMON probe for packet analysis. The user can configure the Mon...

42 Scheduling a System Reset The user can schedule the switch to automatically perform a reset from one second up to 24 hours (86,400 seconds) in advance. To schedule a reset, use the following procedure: 1. Open the System Reset Menu by typing r in the System Utility Menu. 2. Type s to schedule a r...

43 3. Type n to display the next page of System Log information, or type q to quit. Clearing the System Log Use the following procedure to clear all entries from the current System Log: 1. Open the System Log Menu by typing l in the System Utility Menu. 2. Type c to clear the current System Log. New...

44 3.14.6 TFTP File Transfers The software image file must be downloaded from a server on the network that is running a TFTP server application. IntraCore 35160-T TFTP File Downloading Menu Bank 1 Image Version/Date: 1.20B/Jun 17 2003 20:41:25 (Running) Bank 2 Image Version/Date: 1.10 /May 20 2003 1...

46 Chapter 4. Advanced Management This chapter deals with the advanced management of the switch, via the console mode or telnet connection. See Chapter 5 Web-Based Management for information on managing the switch through the web browser. The following sections describe the these advanced topics for...

47 4.2 Security Management To access the Security Management Menu, type t in the Configuration Menu. Use the listed command letters to configure port security, duplicate IP detection and trap, and station movement trap, or to display the duplicated IP list and reset all security parameters to factor...

48 1. From the Configuration Menu, type t to access the Security Management Menu. 2. Type l to display the duplicated IP list. A screen appears, similar to the following screen. +---------------+-----------------+--+-----------------+--+ | IP Address | Owner MAC | P| Spoofer MAC | P| +--------------...

49 Configuring Port New Node Detection Trap The port new node detection trap security measure (also called “port security trap”) ensures that when any new device is connected to the secured port, an alert will be sent to the designated trap receiver. The new device is detected when it is connected t...

53 Setting Timers To set the timing parameters, type t in the 802.1X Configuration Menu. After changing any of the parameters listed below, the change will be noted in the top of the menu screen. IntraCore 35160-T 802.1X Constant Configuration Menu Quiet-period <0..65535,default=60> : 60 Tx-pe...

54 Setting RADIUS Parameters To enter the802.1X RADIUS Configuration Menu, type r in the 802.1X Configuration Menu. Use the command letters to configure the corresponding values for the RADIUS server on your network. IntraCore 35160-T 802.1X RADIUS Configuration Menu Radius Server IP : 192.168.0.1 S...

55 4.3 VLAN Management A virtual LAN, or VLAN, is a logical grouping that allows stations to communicate as if they were physically connected to a single LAN, independent of the actual physical configuration of a network. The IntraCore 35160 supports port-based VLANs, in compliance with the IEEE 802...

57 Removing a VLAN To remove the VLAN, from the VLAN Group Static Configuration Menu, type r . Enabling and Disabling Management Access The IntraCore 35160 supports configurable management access for VLANs. By default, management access is enabled, and all devices connected to the switch in a VLAN c...

59 untagged frames received by the port are dropped and the source address of the untagged frames is not learned. Incoming tagged frames are forwarded to the VLAN whose VID is included in the tag header of the frame. See “Enabling and Disabling Port Ingress Filtering” in this chapter for more inform...

60 4.3.6 Displaying a VLAN Port Summary To view a unit port VLAN summary, type v in the Configuration Menu to access the VLAN Management Menu, then type a to access the Port VLAN Attribute Summary. A screen similar to the one following will appear. To view the summary for other units, type a command...

61 IGMP Communication on a LAN (between the end stations and the routers) is managed by the Internet Group Management Protocol (IGMP). For complete information about IGMP, see RFC 1112, “Host Extensions...” and RFC 2236, “Internet Group Management Protocol, Version 2” <ftp://ftp.isi.edu/in-notes/...

62 Advanced IGMP Configuration To enable or disable transmitting query packets, set the query interval, or to enable or disable IGMP Proxy Report Forward, type v in the IP Multicast Traffic Management Menu. IntraCore 35160-T IP Multicast Advanced Configuration Menu VID: [01] IGMP Query : [Disabled] ...

63 4.4.2 IP Multicast Forwarding Database Configuration The Multicast Forwarding Database lists addresses of multicast groups, and assigns them to specific VLANs. It also lists the ports within a VLAN that can receive traffic from the multicast address. To access the Multicast FDB Configuration Menu...

65 The Web Browser Management Overview page contains a sidebar with 9 management option buttons, and a view of the IntraCore front panel that displays real-time switch operating information, as well as contact information for Asanté Technologies, Inc. Note : The browser pages shown in this chapter a...

67 5.4 Span Tree (Spanning Tree) Button This button opens the Spanning Tree Protocol (STP) Configuration page, which shows the STP Configuration of the switch, as shown below. STP configuration is explained in Chapter 4 Advanced Management . Click the STP Port Configuration button to display the STP...

68 5.5 SNMP Button This button displays the SNMP (Simple Network Management Protocol) page, as shown below. See SNMP Configuration in Chapter 3 for an explanation of SNMP settings. 5.6 Addr (Address) Table Button The Addr Table button opens the MAC and IP Address Table page, which displays two table...

69 To see the MAC and IP addresses, the activity status, and the VLAN ID for the devices connected to a particular port, click the port’s number in the top table. Use the Search boxes to search for either an IP or MAC address on the switch. 5.7 VLAN Button This button opens the VLAN Groups page, as ...

70 5.7.2 Port Configuration To configure the VLAN ports, click on the VLAN Ports link at the top of the VLAN Groups page. Click on the port number to go to the VLAN Port configuration page, as shown on the following screen. Here, the user can set the port type, assign a port VLAN ID, add or delete V...

71 Port Ingress Filtering From the drop-down menu, select Disabled or Enabled . See Chapter 4 Advanced Management for more information. Tag/Untag Port Egress Type Click Tag Port Egress Type to set the port to send tagged frames for any given VLAN. Click Untag Port Egress Type to set the port to send...

72 To access the configuration pages for individual ports, click on the respective port number in the left-hand column. Select the Security Level from the drop-down menu (None, 1-New node trap, 2-Intruder lock port, and 3-Intruder lock MAC).

73 Chapter 6. SNMP Management The IntraCore 35160 switch can be managed using a Simple Network Management Protocol (SNMP) compatible management station running platforms such as HP OpenView or MG Soft’s MIB Browser. 6.1 SNMP Management Operations A network management application is concerned with pe...

74 6.3 Community Name and Security SNMP v.1 was not designed to be a secure protocol. There is no true password, although the string known as a community string does serve some of the same purposes. SNMP-aware devices, such as this switch, often ship with well-known community strings. For this reaso...

76 Chapter 7. Switching Concepts A bridge is a hardware device used to connect multiple networks into one big network. However, when a bridge receives a broadcast from one interface, it will forward the frame to all interfaces and flood the wire, easily overwhelming the network. The traditional solu...

77 7.1.3 Port VLAN ID To allow untagged packets to participate in a VLAN, a Port VLAN ID (PVID) must be assigned in the relevant port(s). Each port on the switch has a default PVID of 1 (the default VLAN) and will receive both tagged and untagged frames. The manager may configure the PVID of any des...

78 Forward Delay After a recalculation of the spanning tree, the Forward Delay parameter regulates the delay before each port begins transmitting traffic. If a port begins forwarding traffic too soon (before a new root bridge has been selected), the network can be adversely affected. The default val...

80 Appendix A. Troubleshooting In the unlikely event the switch does not operate properly, follow the troubleshooting tips below. If more help is needed, contact Asanté’s technical support at [email protected] . Problem Possible Solutions The Power LED is not lit. The Emergency Power LED is not lit...

81 Appendix B. Features and Specifications The sections below list the features and product specifications for the IntraCore 35160 Series Gigabit Ethernet switches. B.1 Features The following is a summary of the management features of the 35160 Series switches: Graphical User Interface: HTML browser...

82 Environmental Range Operating Temperature: 32º to 104º F (0º to 40º C) Relative Humidity: 10% to 90% non-condensing Power: Auto-switching, 110-240 VAC, 50/60 Hz; grounded IEC cord Redundant DC Power: 12VDC Auto-switching from main 110/240 VAC for emergency backup Standards Compliance IEEE: IEEE 8...

83 Appendix C. FCC Compliance and Warranty Statements FCC Compliance Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interferenc...

84 and used. If Asanté receives notice of such defects during the warranty period, Asanté will replace software media that does not execute its programming instructions due to such defects. 3. Asanté does not warrant that the operation of Asanté products will be uninterrupted or error free. If Asant...

85 Appendix D. Console Port Pin Outs The console port is used to connect with a terminal using a serial modem RS-232C cable (available from Radio Shack’s website, www.radioshack.com , catalog # 26-117). The setting is 9600-N81. The table below lists the pin outs. Pin Number Signal Name 1 CD Carrier ...

86 Appendix E. Online Warranty Registration Before calling Asanté Technical Support, please register the switch online at www.asante.com/support/registration.html . By doing so, you’ll be entitled to special offers, up-to-date information, and important product bulletins. You may also register the s...

87 Appendix F. BootP Configuration The switch is shipped with BootP support. If the network contains a BootP server configured with available, valid IP addresses, BootP allows the switch to be configured automatically with an IP address when it is connected to the network and is powered on. Importan...

88 Loading Software Remotely To set the switch to download its software over the network from a remote server, use the following procedure: 1. Open the Local Bootstrap Configuration Menu by typing b in System Utility Menu. 2. Open the Remote Bootstrap Configuration Menu by typing r in the Local Boot...