Cabletron Systems SEHI-32/34 - Manual

1-1 Chapter 1 Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 How to use the SEHI User’s Guide; manual conventions; contacting Cabletron Technical Support; SEHI firmware versions supported by SPMA The SEHI-22/24 and SEHI-32/34 are intelligent repeating hubs that provide front panel ports for ...

Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 1-2 Using the SEHI User’s Guide applications can be accessed from the icon menu (if you are using a management platform) and from the command line (if you are running in stand-alone mode); in addition, several applications can also be accessed f...

Conventions 1-3 Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 What’s NOT in the SEHI User’s Guide . . . The following standard SPMA tools are available through the SEHI module and are explained in the SPECTRUM Portable Management Application Tools Guide : • Charts, Graphs and Meters • MAC A...

Conventions 1-5 Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 Figure 1-2. The History Window Using the Mouse The UNIX mouse has three buttons. Procedures within the SPMA document set refer to these buttons as follows: Figure 1-3. Mouse Buttons If you’re using a two-button mouse, don’t worry...

Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 1-6 Getting Help Whenever possible, we will instruct you on which mouse button to employ; however, menu buttons within SPMA applications will operate according to the convention employed by the active windowing system. By convention, menu button...

SEHI Firmware 1-7 Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 For additional information about Cabletron Systems products, visit our World Wide Web site: http://www.cabletron.com/ SEHI Firmware SPMA for the SEHI has been tested against firmware versions 1.10.04 and 1.05.03; if you have an...

2-1 Chapter 2 Using the SEHI Hub View Navigating through the Hub View, monitoring hub performance; managing the hub The heart of the SPECTRUM Portable Management Application (SPMA) for the SEHI is the Hub View, a graphical interface that gives you access to many of the functions that provide control...

Using the SEHI Hub View 2-2 Using the Hub View Navigating Through the Hub View Within the Hub View ( Figure 2-1 ), you can click mouse buttons in different areas of the window to access various menus and initiate certain management tasks. The following sections describe the information displayed in ...

Using the Hub View 2-5 Using the SEHI Hub View If you need to call Cabletron’s Technical Support about a problem with the Hub View application, you’ll need the information provided in the Info window ( Figure 2-3 ): Figure 2-3. Hub Information Window Clicking mouse button 1 on the Quit button closes...

Using the SEHI Hub View 2-6 Using the Hub View Figure 2-4. Mousing Around a Ports Display Hub View Port Color Codes The Port Status boxes in the Hub View are color coded to indicate the port’s connection status. The colors are consistent for all Port Display Forms except Admin Status; the exceptions...

Monitoring Hub Performance 2-7 Using the SEHI Hub View • Blue indicates that the port has been disabled through management. • Yellow indicates that the port is enabled but does not currently have a valid connection. This usually indicates that the device at the other end of the segment is turned off...

Using the SEHI Hub View 2-8 Monitoring Hub Performance • Device, Module, and Port status descriptions. • Device, Module, and Port statistics, which provide a complete breakdown of packet activity. • Device, Module, and Port-level pie charts, graphs and meters, for a graphic representation of the typ...

Monitoring Hub Performance 2-9 Using the SEHI Hub View For error type descriptions, see Checking Statistics , page 2-15 . Frame Sizes Displays a percentage for each active port that represents what portion of that port’s traffic is of a specific size, measured in bytes. You can display any one of th...

Using the SEHI Hub View 2-10 Monitoring Hub Performance • Active Ports displays either YES or NO for any active (green) port, indicating whether or not that port has seen any traffic at all since the device was last initialized or the counters were last reset; this port display form can tell you whe...

Monitoring Hub Performance 2-11 Using the SEHI Hub View Date and Time Displays the current date and time from the SEHI’s internal clock. Although the fields are static in the window, the front panel display is a real-time presentation. To change the name, location, contact, date, or time: 1. Highlig...

Using the SEHI Hub View 2-12 Monitoring Hub Performance 2. Press Enter or Return on the keyboard to save your changes. Active Users Displays the number of active source addresses communicating through this module. Module Type The type of module you are viewing (SEH- or SEHI-22, 24, 32, or 34). Check...

Monitoring Hub Performance 2-13 Using the SEHI Hub View Checking Port Status You can open a Port Status window ( Figure 2-9 ) for any port in the SEHI- controlled HUBStack. To open the Port Status window: 1. Click mouse button 1 in the Port Index box. or 1. Click mouse button 3 in the Port Index or ...

Using the SEHI Hub View 2-14 Monitoring Hub Performance • Inactive — The device at the other end of the cable is turned off, there is a break in the cable, or there is no device or cable connected. • Not Supported — The selected port does not support the Link feature, so the SEHI cannot determine li...

Monitoring Hub Performance 2-15 Using the SEHI Hub View • Multi-Mode Fiber: ST EPIM • Single-Mode Fiber: ST EPIM Topology Type Indicates how the port is being used. The available types are: • Station —The port is receiving packets from no devices, a single device, or two devices. Note that a port in...

Using the SEHI Hub View 2-16 Monitoring Hub Performance To view device statistics at the Device, Module, or Port levels: 1. Display the Device, Module, or Port menu by clicking mouse button 3 in the appropriate area (refer to Figure 2-5 , page 2-7 ). 2. Drag down to Statistics and then right to eith...

Using the SEHI Hub View 2-18 Monitoring Hub Performance 802.3 specifications, or a node on the net is transmitting without first listening for carrier sense (and beginning its illegal transmission more than 51.2 µ s after the first station began transmitting). Note that in both cases, the occurrence...

Monitoring Hub Performance 2-19 Using the SEHI Hub View counted as CRC errors had only CRC errors — they were of legal size (not runts or giants) and had no truncated bytes. You also know that any packet less than 64 bytes long has been counted as a runt, even if it also had alignment and/or CRC pro...

Using the SEHI Hub View 2-20 Managing the Hub Figure 2-11. The Port Source Address List To view a port’s Source Address List: 1. Display the Port menu by clicking mouse button 3 in the appropriate Port Status box. 2. Drag down to Source Address List and release. The Source Address List window displa...

Managing the Hub 2-21 Using the SEHI Hub View Figure 2-12. SEHI Polling Intervals Setting the Polling Intervals To set the polling intervals used by SPMA and the SEHI: 1. Click on the Device button to display the Device menu. 2. Drag down to Polling Intervals, and release. The SEHI Polling Intervals...

Using the SEHI Hub View 2-22 Managing the Hub Device General Status This polling interval controls how often the Hub View Front Panel Information — such as Uptime, Device Name, and so forth — and some port status information is updated. Device Configuration This polling interval controls how often a...

3-1 Chapter 3 Link/Seg Traps What are Link and Segmentation traps; enabling and disabling these traps at the device, module, and port levels Among the traps which Cabletron devices are designed to generate are traps which indicate when a repeater port gains or loses a link signal, when the repeater ...

Link/Seg Traps 3-2 What is a Link Trap? What is a Link Trap? Some Cabletron Ethernet repeater ports — including RJ45 twisted pair and fiber optic ports — generate a link signal to monitor the status of their connection with the device at the other end of the cable segment. If the cable is removed or...

Link/Seg Traps 3-4 Enabling and Disabling Link/Seg Traps Configuring Link/Seg Traps for the Repeater To enable or disable Link and Segmentation traps for all ports on a repeater: 1. In the Repeater Link/Seg Traps window, click mouse button 1 on the repeater interface for which you would like to conf...

Enabling and Disabling Link/Seg Traps 3-5 Link/Seg Traps Figure 3-3. The Module Traps Window 3. In the Module Traps window, click mouse button 1 to select the module for which you wish to configure link and segmentation traps. If the Set Trap Status For field displays Selected Modules (the default s...

4-1 Chapter 4 Repeater Redundancy This chapter describes how to configure and enable redundant circuits. Setting Network Circuit Redundancy The redundancy application gives you the ability to define redundant circuits for your SEHI to ensure that critical network connections remain operational. Each...

Repeater Redundancy 4-2 Setting Network Circuit Redundancy spmarun r4red <IP address> <community name> The main Repeater Redundancy window, Figure 4-1 , will appear. Figure 4-1. The Repeater Redundancy Window Configuring a Redundant Circuit To establish or edit a redundant circuit: 1. In...

Monitoring Redundancy 4-5 Repeater Redundancy different port to be Primary or Active, the original Primary or Active port automatically resets to Backup/Inactive. 6. Once you have configured all the ports that compose the redundant circuit, enable the circuit by clicking . To clear the settings in o...

Repeater Redundancy 4-6 Monitoring Redundancy 1. In the All Circuits box, type in a new value in the Poll Interval field and click . Poll Interval is the time in seconds between retries (if the first attempt is unsuccessful). To set the Test Time: 1. In the All Circuits box, type a new test time in ...

5-1 Chapter 5 Source Addressing Displaying the Source Address list; setting the Ageing Time; selecting the Hash Type; effects of Source Address Locking; configuring Source Address traps; finding a Source Address. Displaying the Source Address List The Source Address List, or Table (SAT), contains th...

Displaying the Source Address List 5-3 Source Addressing Figure 5-2. The Source Address List Window The Source Address List window displays addresses of all devices that have transmitted packets through the SEHI within a time period less than the SAT’s defined ageing time (addresses that have not tr...

Source Addressing 5-4 Setting the Hash Type Setting the Ageing Time The source address list Ageing Time determines the minimum amount of time an inactive source address will remain in the Source Address Table before it is purged. The source address timer runs continuously beginning at the time the d...

Source Addressing 5-6 Locking Source Addresses In addition to activating the security measures as configured via the Security application, locking source addresses has the following effects: • On devices running older versions of firmware, unlinked ports will be disabled immediately after locking ha...

Configuring Source Address Traps 5-7 Source Addressing • A port’s topology status (station or trunk) remains fixed while locking is in effect, even if the number of detected addresses changes. • Any ports disabled due to a violation (or because they were unlinked when locking was enabled) must be ma...

Source Addressing 5-8 Configuring Source Address Traps • PortTypeChanged traps are issued when a port’s topology status changes from station to trunk, or vice versa. The interesting information includes the board and port index, and the port’s new topology status. • A lockStatusChanged trap is gener...

Source Addressing 5-10 Configuring Source Address Traps Figure 5-3. The Module Source Address Traps Window To enable or disable port-level traps: 1. In the Port Source Address Traps window ( Figure 5-4 , page 5-11 ), click mouse button 1 to select the port or ports for which you wish to enable or di...

Finding a Source Address 5-11 Source Addressing Figure 5-4. The Port Source Address Traps Window 2. Click on the appropriate selection in the Trap Status field to enable or disable traps for the selected port(s), as desired. 3. Click on to save your changes. Finding a Source Address You can use the ...

6-1 Chapter 6 Security Launching the Security application; LANVIEW SECURE defined; configuring security; enabling security and traps at the repeater, hub, and port levels; security on non-LANVIEW SECURE Hubs The Security application allows you to configure and manage the LANVIEW SECURE feature incor...

Security 6-2 What is LANVIEWsecure? from the command line (stand-alone mode): 1. From the appropriate directory, type spmarun r4sec <IP address> <SU community name> The Repeater Security window, Figure 6-1 , will appear. Figure 6-1. The Repeater Security Window The Repeater Security wind...

What is LANVIEWsecure? 6-3 Security secure port, and can be configured to secure both station and trunk ports; eavesdropper protection scrambles the data portion of any packet transmitted via a secure port to all but the destination port, and can be extended to broadcast and multicast packets as wel...

Security 6-4 What is LANVIEWsecure? Configurable violation response Before LANVIEW S ECURE , any locked port which experienced a violation was shut down automatically; now, you can choose to allow ports to remain enabled even after an unsecured address has attempted to access a locked port. If you c...

What is LANVIEWsecure? 6-5 Security Forced non-secure status With the original version of LANVIEW SECURE , all ports except those which had been forced to trunk status could be locked, and would be locked automatically if locking were enabled at the repeater or hub level. With the enhanced version o...

Security 6-6 Configuring Security intruder will be to issue a trap after the first violation; all packets, regardless of source address, will be allowed to pass. Forced non-secure status With the enhanced version of LANVIEW SECURE , even ports on non- LANVIEW SECURE Hubs can be forced to an unsecura...

Configuring Security 6-7 Security Figure 6-2. Channel A Port Security Window The top portion of the window contains a list box which displays each port communicating on the selected channel, designated by hub and port number. Each port’s current Lock Status, violation response, Security Level, and T...

Configuring Security 6-9 Security Figure 6-3. The Addresses Window 3. On the left side of the window, the Learned Addresses list box will display all source addresses detected by the selected port during the last ageing interval (see Chapter 4, Source Address, for more information on the ageing inte...

Security 6-10 Configuring Security Figure 6-4. Add MAC Address Window d. Enter the desired MAC address in an xx:xx:xx:xx:xx:xx format, then click on . A confirmation window will appear; if you click on Yes to secure the address, it will appear in the Secure Addresses list box. 4. To secure addresses...

Configuring Security 6-11 Security 4. Click to select the Reset Learned Addresses option. A confirmation window will appear; click on to reset addresses, or on to cancel. The port’s address table will be cleared of all Learned and Secure addresses, and the learning process will restart. Tips for Suc...

Enabling Security and Traps 6-13 Security Repeater-level Security and Traps Locking ports at the repeater, or channel, level applies all applicable security (as configured via the Port Security window) to every port on the channel. To enable or disable security and traps for all ports on a repeater:...

Security 6-14 Enabling Security and Traps Figure 6-5. Channel A Security Window 3. In the Security Mode field, click mouse button 1 on the appropriate selection to apply Full or Continuous lock status to all ports on the selected repeater channel, or to Unlock all ports on the channel. (Note that if...

Enabling Security and Traps 6-15 Security displayed in the list box; a repeater whose ports have different Security Mode or Trap settings will display a status of “Mismatch.” Figure 6-6. Channel A Module Security Window 3. Use the Set Security For field or the mouse to select the hub or hubs for whi...

Security 6-16 Enabling Security and Traps 1. In the Repeater Security window, click to selected the desired repeater interface, or channel, in the scroll list. 2. Click ; the Channel A Port Security window, Figure 6-7 , will appear. Figure 6-7. Channel A Port Security Window 3. Use the Set Security ...

A-1 Appendix A SEHI MIB Structure SEHI management information base configuration IETF MIB Support In addition to its proprietary features, the SEHI-22/24 and SEHI-32/34 currently support the following IETF MIB: • RFC 1213 MIB for Network Management of TCP/IP-based Internets: MIB-II SEHI MIB Structur...

SEHI MIB Structure A-2 SEHI MIB Structure community names; the Chassis MGR community names are the same as those assigned via Local Management. SEHI LIM The SEHI LIM, or Local Management, component contains the objects that provide out-of-band management via the Console port on the SEHI’s front pane...

Index-1 Index A active port 4-4Active Users 2-12, 2-14, 2-20Add Circuit Address 4-4Admin Status 2-9Admin/Link Status 2-9Ageing Time 5-3, 5-4Ageing Timer 2-20Alignment Errors 2-17Avg Packet Size 2-16 B Broadcast Packets 2-16 C Change Name/Retries 4-3Charts and Meters 1-3Chassis MGR A-1Circuit Name 4-...