Enterasys Networks VH-8G - Manuals

9033640 Management Overview 1 1. MANAGEMENT OVERVIEW Configuration Options For advanced management capability, the Enterasys Networks’ Vertical Horizon VH-8G provides a menu-driven system configuration program. This program can be accessed by a direct connection to the serial port on the switch’s re...

2 Management Overview VH-8G In-Band Connections Prior to accessing the switch via a network connection, you must first configure it with a valid IP address, subnet mask, and default gateway using an out-of-band connection or the BootP protocol. Telnet Connection Prior to accessing the switch via an ...

9033640 VH-8G User Interface 3 2. VH-8G USER INTERFACE Overview Access is gained to the console menus by directly connecting a terminal to the console port with a null-modem cable connection, or using Telnet to access the switch over the network. These menus allow you to reconfigure the switch, as w...

4 VH-8G User Interface VH-8G User Access Once a direct connection to the console port or a Telnet connection is established, the login screen for the on-board configuration program appears. You may need to press Enter a few times to display the screen. The default user names are “admin” and “guest,”...

9033640 VH-8G User Interface 5 Factory Defaults Table 2-1 lists the default settings for switch configuration parameters. Each parameter can be changed via the console menus or Telnet. Table 2-1. Factory Default Settings Parameter Default Value Multicast Filtering GMRP Disabled IGMP Multicast Filter...

6 VH-8G User Interface VH-8G Virtual LANs Acceptable VLAN Frame Type All Configurable PVID Tagging Yes GVRP Disabled Untagged VLAN Group Assignment 1 VLAN Ingress Filtering False VLAN Learning SVL Parameter Default Value

9033640 VH-8G User Interface 7 Main Menu The Main Menu is the first screen seen after successfully logging into the system. Figure 2-2 shows the Main Menu and the accompanying table describes the Main Menu. Figure 2-2. Main Menu Vertical Horizon Local Management -- VH-8G Main Menu System Information...

8 VH-8G User Interface VH-8G Device Control Menu Port Configuration Enables any port, enables/disables flow control, and sets communication mode to auto-negotiation, full duplex or half duplex. Port Information Displays operational status, including link state, flow control method, and duplex mode. ...

9033640 VH-8G User Interface 9 System Information Menu Use the System Information Menu to display a basic description of the switch, including contact information, and hardware/firmware versions. Figure 2-3. System Information Menu IP Multicast Registration Table Displays all the multicast groups ac...

10 VH-8G User Interface VH-8G Displaying System Information Use the System Information screen to display descriptive information about the switch, or for quick system identification as shown in the following figure and table. Figure 2-4. System Information Vertical Horizon Local Management -- VH-8G ...

9033640 VH-8G User Interface 11 Displaying Switch Version Use the Switch Information screen to display hardware/firmware version numbers for the switch, as well as the power status of the system. Figure 2-5. Switch Information Vertical Horizon Local Management -- VH-8G Switch Information Main Board ...

12 VH-8G User Interface VH-8G Management Setup Menu After initially logging onto the system, adjust the communication parameters for your console to ensure a reliable connection (Serial Port Configuration). Specify the IP addresses for the switch (Network Configuration / IP Configuration), and then ...

9033640 VH-8G User Interface 13 Changing the Network Configuration Use the Network Configuration menu to set the bootup option, configure the switch’s Internet Protocol (IP) parameters, enable the on-board Web server, or to set the number of concurrent Telnet sessions allowed. The screen shown below...

14 VH-8G User Interface VH-8G IP Configuration Use the IP Configuration screen to set the bootup option, or configure the switch’s IP parameters. The screen shown below is described in the following table. Figure 2-8. IP Configuration Vertical Horizon Local Management -- VH-8G Network Configuration:...

9033640 VH-8G User Interface 15 IP Connectivity Test (Ping) Use the IP Connectivity Test to see if another site on the Internet can be reached. The screen shown below is described in the following table. Figure 2-9. IP Connectivity Test Vertical Horizon Local Management -- VH-8G Network Configuratio...

16 VH-8G User Interface VH-8G HTTP Configuration Use the HTTP Configuration screen to enable/disable the on-board Web server, and to specify the TCP port that will provide HTTP service. The screen shown below is described in the following table. Figure 2-10. HTTP Configuration Vertical Horizon Local...

9033640 VH-8G User Interface 17 Configuring the Serial Port You can access the on-board configuration program by attaching a VT100 compatible device to the switch’s serial port. (For more information on connecting to this port, see “Required Connections” on page 1.) The communication parameters for ...

18 VH-8G User Interface VH-8G Assigning SNMP Parameters Use the SNMP Configuration screen to display and modify parameters for the Simple Network Management Protocol (SNMP). The switch includes an SNMP agent which monitors the status of its hardware, as well as the traffic passing through its ports....

9033640 VH-8G User Interface 19 Configuring Community Names The following figure and table describe how to configure the community strings authorized for management access. Up to 5 community names may be entered. Figure 2-13. SNMP Communities Vertical Horizon Local Management -- VH-8G SNMP Configura...

20 VH-8G User Interface VH-8G Configuring IP Trap Managers The following figure and table describe how to specify management stations that will receive authentication failure messages or other trap messages from the switch. Up to 5 trap managers may be entered. Figure 2-14. IP Trap Managers Vertical...

9033640 VH-8G User Interface 21 Console Login Configuration Use the Management Setup: Console Login Configuration to restrict management access based on specified user names and passwords, or to set the invalid password threshold and timeout. There are only two user types defined, ADMIN (Administrat...

22 VH-8G User Interface VH-8G Downloading System Software Using TFTP Protocol to Download Over the Network Use the TFTP Download menu to load software updates into the switch. The download file should be an VH-8G file from Enterasys; otherwise the switch will not accept it. The success of the downlo...

9033640 VH-8G User Interface 23 Saving the System Configuration Use the Configuration Save & Restore menu to save the switch configuration settings to a file on a TFTP server. The file can be later downloaded to the switch to restore the switch’s settings. The success of the operation depends on...

24 VH-8G User Interface VH-8G Configuring Management Access Use the Management Configuration menu to define which VLAN has management access to the switch. Parameters shown on this screen are indicated in the following figure and table. Figure 2-18. Management Configuration Vertical Horizon Local Ma...

9033640 VH-8G User Interface 25 Configuring the Switch The Device Control menu is used to control a broad range of functions, including port configuration, Spanning Tree support for redundant switches, port mirroring, multicast filtering, and Virtual LANs. Each of the setup screens provided by these...

26 VH-8G User Interface VH-8G 802.1Q VLAN Base Information Displays basic VLAN information, such as VLAN version number and maximum VLANs supported. 802.1Q VLAN Current Table Information Displays VLAN groups and port members. 802.1Q VLAN Static Table Configuration Configures VLAN groups via static a...

9033640 VH-8G User Interface 27 Configuring Port Parameters Use the Port Configuration menus to set or display communication parameters for any port on the switch. Figure 2-20. Port Configuration Vertical Horizon Local Management -- VH-8G Port Configuration : Port 1 - 8 Flow Control on all ports : [...

Viewing the Current Port Configuration The Port Information screen displays the port type, status, link state, and flow control in use, as well as the communication speed and duplex mode. To change any of the port settings, use the Port Configuration menu. . Figure 2-21. Port Information Vertical Ho...

9033640 VH-8G User Interface 29 Using the Spanning Tree Algorithm The Spanning Tree Algorithm can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices (that is, an STA-compliant s...

30 VH-8G User Interface VH-8G Parameter Default Description Spanning Tree Protocol Enabled Enable this parameter to participate in an STA compliant network. Priority 32,768 Device priority is used in selecting the root device, root port, and designated port. The device with the highest priority beco...

9033640 VH-8G User Interface 31 Configuring STA for Ports The following figure and table describe STA configuration for ports. Figure 2-24. Spanning Tree Port Configuration Vertical Horizon Local Management -- VH-8G Fast forwarding mode of all ports : [Enable] [Disable] Spanning Tree Port Configurat...

32 VH-8G User Interface VH-8G Viewing the Current Spanning Tree Configuration The Spanning Tree Information screen displays a summary of the STA information for the overall bridge or for a specific port. To make any changes to the parameters for the Spanning Tree, use the Spanning Tree Configuration...

9033640 VH-8G User Interface 33 Displaying the Current Bridge STA The parameters shown in the following figure and table describe the current Bridge STA Information. Figure 2-26. Bridge STA Information Vertical Horizon Local Management -- VH-8G Spanning Tree Information : Bridge STA Information Prio...

34 VH-8G User Interface VH-8G Displaying the Current STA for Ports The parameters shown in the following figure and table are for port STA Information. Figure 2-27. Spanning Tree Port Information Vertical Horizon Local Management -- VH-8G Spanning Tree Port Information : Port 1 - 8 Port Type Status ...

9033640 VH-8G User Interface 35 The rules defining port status are: • A port on a network segment with no other STA-compliant bridging device is always forwarding. • If two ports of a switch are connected to the same segment and there is no other STA device attached to this segment, the port with th...

36 VH-8G User Interface VH-8G Using a Mirror Port for Analysis You can mirror traffic from any source port to a target port for real-time analysis. You can then attach a logic analyzer or RMON probe to the target port and study the traffic crossing the source port in a completely unobtrusive manner....

9033640 VH-8G User Interface 37 Configuring Port Trunks Port trunks can be used to increase the bandwidth of a network connection or to ensure fault recovery. You can configure up to four trunk connections (combining 2~4 ports into a fat pipe) between any two VH-8G switches. However, before making a...

38 VH-8G User Interface VH-8G You can use the Port Trunking Configuration screen set up port trunks as shown below: Figure 2-29. Port Trunking Configuration Vertical Horizon Local Management -- VH-8G Port Trunking Configuration Trunk ID Status Member List 1 2 3 4 ------------- ------------- --------...

9033640 VH-8G User Interface 39 IGMP Multicast Filtering Multicasting is used to support real-time applications such as video conferencing or streaming audio. A multicast server does not have to establish a separate connection with each client. It merely broadcasts its service to the network, and an...

40 VH-8G User Interface VH-8G Configuring IGMP This protocol allows a host to inform its local switch/router that it wants to receive transmissions addressed to a specific multicast group. You can use the IGMP Configuration screen to configure multicast filtering shown below: Figure 2-30. IGMP Confi...

9033640 VH-8G User Interface 41 Configuring Broadcast Storm Control Use the Broadcast Storm Control Configuration screen to enable broadcast storm control for any port on the switch, as shown below: Figure 2-31. Broadcast Storm Control Configuration Vertical Horizon Local Management -- VH-8G Broadca...

42 VH-8G User Interface VH-8G Configuring Bridge MIB Extensions The Bridge MIB includes extensions for managed devices that support Traffic Classes, Multicast Filtering and Virtual LANs. To configure these extensions, use the Extended Bridge Configuration screen as shown below: Figure 2-32. Extended...

9033640 VH-8G User Interface 43 Bridge Settings Traffic Class* Multiple traffic classes are supported by this switch as indicated under Bridge Capabilities. However, you can disable this function by setting this parameter to False. VLAN Learning As default this switch uses Shared VLAN Learning (SVL)...

44 VH-8G User Interface VH-8G Configuring Traffic Classes IEEE 802.1p defines up to 8 separate traffic classes. This switch supports Quality of Service (QoS) by using two priority queues, with weighted fair queuing for each port. You can use the 802.1P Configuration menu to configure the default pri...

9033640 VH-8G User Interface 45 Port Priority Configuration The default priority for all ingress ports is zero. Therefore, any inbound frames that do not have priority tags will be placed in the low priority output queue. Default priority is only used to determine the output queue for the current po...

46 VH-8G User Interface VH-8G 802.1P Port Traffic Class Information This switch provides two priority levels with weighted fair queuing for port egress. This means that any frames with a default or user priority from 0~3 are sent to the low priority queue “0” while those from 4~7 are sent to the hig...

9033640 VH-8G User Interface 47 Configuring Virtual LANs You can use the VLAN configuration menu to assign any port on the switch to any of up to 256 LAN groups. In conventional networks with routers, broadcast traffic is split up into separate domains. Switches do not inherently support broadcast d...

48 VH-8G User Interface VH-8G 802.1Q VLAN Current Table Information This screen shows the current port members of each VLAN and whether or not the port supports VLAN tagging. Ports assigned to a large VLAN group that crosses several switches should use VLAN tagging. However, if you just want to crea...

9033640 VH-8G User Interface 49 802.1Q VLAN Static Table Configuration Use this screen to create a new VLAN or modify the settings for an existing VLAN. You can add/delete port members for a VLAN, or prevent a port from being automatically added to a VLAN via the GVRP protocol. (Also, note that all ...

9033640 VH-8G User Interface 51 Port Assignment VLAN Configuration Use this screen to configure port-specific settings for IEEE 802.1Q VLAN features. Figure 2-40. Port Assignment VLAN Configuration Vertical Horizon Local Management -- VH-8G Port Assignment VLAN Configuration Port PVID 802.1Q Trunk I...

52 VH-8G User Interface VH-8G Multicast Router Port Information You can use the Multicast Router Port Information screen to display the ports on this switch attached to a neighboring multicast router/switch for each VLAN ID. Figure 2-41. Multicast Router Port Information Vertical Horizon Local Manag...

9033640 VH-8G User Interface 53 Static Multicast Router Port Configuration You can use the Static Multicast Router Port Configuration screen to assign ports that are attached to a neighboring multicast router/switch. Figure 2-42. Static Multicast Router Port Configuration Vertical Horizon Local Mana...

54 VH-8G User Interface VH-8G IGMP Member Port Configuration You can use the IGMP Member Port Configuration screen to assign ports that are attached to hosts who want to receive a specific multicast service. Figure 2-43. IGMP Member Port Configuration Vertical Horizon Local Management -- VH-8G IGMP ...

9033640 VH-8G User Interface 55 Port Security Configuration Use the Port Security Configuration screen to enable and configure port security for the switch. Port security allows you to configure each port with a list of MAC addresses of devices that are authorized to access the network through that ...

56 VH-8G User Interface VH-8G Monitoring the Switch The Network Monitor Menu provides access to port statistics, RMON statistics, IP multicast addresses, and the static (unicast) address table. Each of the screens provided by these menus is described in the following sections. Figure 2-45. Network M...

9033640 VH-8G User Interface 57 Displaying Port Statistics Port Statistics display key statistics from the Ethernet-like MIB for each port. Error statistics on the traffic passing through each port are displayed. This information can be used to identify potential problems with the switch (such as a ...

58 VH-8G User Interface VH-8G Displaying RMON Statistics Use the RMON Statistics screen to display key statistics for each port from RMON group 1. (RMON groups 2, 3 and 9 can only be accessed using SNMP management software.) The following screen displays the overall statistics on traffic passing thr...

60 VH-8G User Interface VH-8G Displaying the Unicast Address Table The Address Table contains the MAC addresses and VLAN identifier associated with each port (that is, the source port associated with the address and VLAN), sorted by MAC address or VLAN ID. You can search for a specific address, clea...

9033640 VH-8G User Interface 61 Displaying the IP Multicast Registration Table Use the IP Multicast Registration Table to display all the multicast groups active on this switch, including multicast IP addresses and the corresponding VLAN ID. Figure 2-49. IP Multicast Registration Table Vertical Hori...

62 VH-8G User Interface VH-8G Configuring Static Unicast Addresses Use the Static Unicast Address Table Configuration screen to manually configure host MAC addresses in the unicast table. You can use this screen to associate a MAC address with a specific VLAN ID and switch port as shown below. Figur...

9033640 VH-8G User Interface 63 Resetting the System Select the System Restart Menu under the Main Menu to reset the switch. The reset screen includes options as shown in the following figure and table. Figure 2-51. System Restart Menu Logging Off the System Use the Exit command under the Main Menu ...

9033640 Configuring & Monitoring the Switch 65 3. CONFIGURING & MONITORING THE SWITCH Common Tasks The switch console menus allow you to modify default switch settings and configure the switch for network management. They also allow you to monitor switch performance and status. See Section 2...

66 Configuring & Monitoring the Switch VH-8G Setting Password Protection The VH-8G switch is factory-configured with administrator access rights to the console menus set to READ/WRITE. This setting allows anyone to use the console menus to modify any operational parameter. To protect the configu...

9033640 Configuring & Monitoring the Switch 67 Assigning an IP Address To assign an IP address to the switch, do the following: 1. Select Management Setup Menu from the Main menu. 2. Select Network Configuration and then IP Configuration. 3. Highlight the IP address field and enter the IP addres...

68 Configuring & Monitoring the Switch VH-8G Setting SNMP Management Access Access to the VH-8G switch through SNMP is controlled by community names. The community names set for the switch must match those used by the SNMP management station for successful communication to occur. Access for comm...

9033640 Configuring & Monitoring the Switch 69 Configuring Port Mirroring You can mirror the traffic being switched on any port for the purposes of network traffic analysis and connection assurance. When Port Mirroring is enabled, one port becomes a monitor port for any other port on the switch....

70 Configuring & Monitoring the Switch VH-8G Downloading Via the Serial Port A serial download is the easiest method to upgrade the VH-8G switch software, requiring the least amount of equipment and configuration. To download switch software via the serial port, do the following: 1. With the con...

9033640 Configuring & Monitoring the Switch 71 Downloading Via TFTP To perform a TFTP download, you must first configure the VH-8G switch. This consists of programming the switch with an IP address, if this has not already been done, and entering the IP address of the TFTP server and the name of...

72 Configuring & Monitoring the Switch VH-8G Configuring Spanning Tree Parameters The VH-8G switch supports the IEEE 802.1D Spanning Tree Protocol. This protocol allows redundant connections to be created between LAN segments for purposes of fault tolerance. Two or more physical paths between di...

9033640 Configuring & Monitoring the Switch 73 Configuring VLANs A virtual LAN (VLAN) is a group of devices on one or more LANs that are configured such that they can communicate as if they were attached to the same wire. Because VLANs are based on logical instead of physical connections, they a...

74 Configuring & Monitoring the Switch VH-8G Configuring Port Operation You can configure switch ports for operational parameters such as auto-negotiation, duplex mode, and flow control. The 1000Base-SX fiber ports always operate at 1000Mbps speed. Therefore, this parameter is not configurable. ...

9033640 Configuring & Monitoring the Switch 75 Configuring the Unicast Address Table The Unicast Address Table allows you to designate forwarding treatment through the switch for specific MAC addresses, allowing you to maintain the efficiency and security of your network. You can search for a sp...

76 Configuring & Monitoring the Switch VH-8G Setting a Default Gateway The default Gateway parameter defines the IP address of a router or other network device to which IP packets are to be sent if destined for a subnet outside of that which the switch is operating. To set a default gateway, do ...

9033640 SNMP Management 79 4. SNMP MANAGEMENT The SNMP Protocol SNMP (Simple Network Management Protocol) is a communication protocol designed specifically for the purpose of managing devices or other elements on a network. Network equipment commonly managed with SNMP includes hubs, switches, router...

80 SNMP Management VH-8G There are three main operations defined in SNMP: • GET operations read information from the managed device, such as those used to obtain status or statistical data. • SET operations change a functional parameter on the device, such as those used to configure Port Speed or to...

82 SNMP Management VH-8G IEEE 802.1Q (Q-MIB) This MIB includes the set of managed objects as defined in the IEEE 802.1Q VLAN standard. This MIB provides management for the VLAN aspects of the switch. Enterasys Proprietary MIB Extensions Areas of VH-8G switch functionality not covered by the standard...

9033640 Spanning Tree Concepts 83 APPENDIX A. SPANNING TREE CONCEPTS General The IEEE 802.1D Spanning Tree Protocol resolves the problems of physical loops in a network by establishing one primary path between any two switches in a network. Any duplicate paths are barred from use and become standby ...

84 Spanning Tree Concepts VH-8G Spanning Tree Protocol in a Network Figure A-1 illustrates the use of an VH-8G switch to establish an effective Spanning Tree configuration. Switches A, B and C are connected together in a redundant topology (more than one path between two points). If the connection b...

9033640 Spanning Tree Concepts 85 Spanning Tree Protocol Parameters Several configuration parameters control the operation of the Spanning Tree Protocol. Table A-1 describes the parameters and lists the VH-8G switch default settings for each parameter. Table A-1. Spanning Tree Protocol Defaults For ...

86 Spanning Tree Concepts VH-8G Spanning Tree Protocol Operation When the Spanning Tree Protocol is enabled for the first time or when there is a change in the network topology, such as a failure or the addition or removal of a component, the Spanning Tree Protocol automatically sets up the active t...

9033640 Virtual LANs (VLANs) 89 APPENDIX B. VIRTUAL LANS (VLANS) VLANs and Frame Tagging The VH-8G switch supports IEEE 802.1Q-compliant virtual LANs (VLANs). This capability provides a highly efficient architecture for establishing VLANs within a network and for controlling broadcast/ multicast tra...

VH-8G VLAN Configuration VLAN operation on the VH-8G is enabled by default. Therefore, all frames are transferred internally through the switch with a VLAN tag. This tag may already be on the frame entering the switch, or added to the frame by the switch. VLAN information already existing on frames ...

9033640 Virtual LANs (VLANs) 91 Forwarding Tagged/Untagged Frames Ports can be assigned to multiple tagged or untagged VLANs. Each port on the switch is therefore capable of passing tagged or untagged frames. To forward a frame from a VLAN-aware device to a VLAN-unaware device, the switch first deci...

92 Virtual LANs (VLANs) VH-8G Forwarding Traffic with Unknown VLAN Tags This switch only supports 256 VLANs with VLAN IDs ranging from 1 to 2048, but the IEEE 802.1Q VLAN standard allows for VLAN IDs from 1 to 4094. Therefore, if this switch is attached to endstations that issue VLAN registration re...

9033640 Class of Service 93 APPENDIX C. CLASS OF SERVICE Class of Service support on the VH-8G switch allows you to assign mission-critical data a higher priority through the switch by delaying less critical traffic during periods of congestion. Higher priority traffic through the switch is serviced...

9033640 IP Multicast Filtering 95 APPENDIX D. IP MULTICAST FILTERING IGMP Snooping and IP Multicast Filtering The Internet Group Management Protocol (IGMP) runs between hosts and their immediately neighboring multicast router/switch. The protocol’s mechanisms allow a host to inform its local router ...

9033640 Index 1 INDEX A address table unicast, 60 aging time, configuring, 75Auto-negotiation, configuring, 74 B BootP, configuring, 76bridge MIB extensions, 42 C Class of Service, configuring, 45, 73community names, SNMP, 68console lock-out, 66console login configuration, 21console port configurati...