Enterasys Networks 2H252 - Manual

vi Contents 3.3 Device Menu Screen ....................................................................................... 3-7 3.4 Overview of Security Methods ...................................................................... 3-113.4.1 Host Access Control Authentication (HACA) ....................

Contents vii 4.3 SNMP Configuration Menu Screen ............................................................... 4-17 4.4 SNMP Community Names Configuration Screen ......................................... 4-184.4.1 Establishing Community Names ................................................... 4-20...

viii Contents 6 802.1 CONFIGURATION MENU SCREENS 6.1 802.1 Configuration Menu Screen .................................................................. 6-2 6.2 Spanning Tree Configuration Menu Screen .................................................... 6-4 6.3 Spanning Tree Configuration Screen .......

Contents ix 8 802.1p CONFIGURATION MENU SCREENS 8.1 802.1p Configuration Menu Screen ................................................................ 8-2 8.2 Port Priority Configuration Screen................................................................... 8-48.2.1 Setting Switch Port Priority Po...

x Contents 11 NETWORK TOOLS SCREENS 11.1 Network Tools ............................................................................................... 11-1 11.2 Built-in Commands ........................................................................................ 11-4 11.3 Example, Effects of Ag...

Contents xi 12.14 Example 3, Filtering Traffic According to a Layer 4 Classification Rule ...... 12-3212.14.1 Solving the Problem .................................................................... 12-32 12.15 Example 4, Securing Sensitive Information According to Subnet ............... 12-3312.15....

xii Figures Figure Page 1-1 Example of a Local Management Screen ....................................................................... 1-4 2-1 Management Terminal Connection ................................................................................. 2-2 2-2 Uninterruptible Power Supply (UPS)...

Tables xv Tables xv Table Page Tables 1-1 Event Messages .............................................................................................................. 5 1-2 Keyboard Conventions .................................................................................................... 6 2-...

About This Guide xvii About This Guide Welcome to the Enterasys Networks SmartSwitch 2200 Series (2E253, 2H252, 2H253, and 2H258) Standalone Switches Local Management User’s Guide. This manual explains how to access and use the Enterasys Networks Local Management to manage the SmartSwitch devices. L...

Structure of This Guide xviii About This Guide STRUCTURE OF THIS GUIDE The guide is organized as follows: Chapter 1 , Introduction , provides an overview of the tasks that may be accomplished using Local Management (LM), and an introduction to LM screen navigation, in-band and out-of-band network ma...

Structure of This Guide About This Guide xix Chapter 8 , 802.1p Configuration Menu Screens , describes how to use the screens to set the transmit priority of each port, display the current traffic class mapping-to-priority of each port, set ports to either transmit frames according to selected prior...

Related Documents xx About This Guide RELATED DOCUMENTS The following Enterasys Networks documents may help to set up, control, and manage the SmartSwitch device: • Ethernet Technology Guide • Cabling Guide • SmartTrunk User’s Guide • WAN Series Local Management User’s Guide Documents associated wit...

Typographical and Keystroke Conventions About This Guide xxi TYPOGRAPHICAL AND KEYSTROKE CONVENTIONS bold type Bold type can denote either a user input or a highlighted screen selection. RETURN Indicates either the ENTER or RETURN key, depending on your keyboard. ESC Indicates the keyboard Escape ke...

Introduction 1-1 1 Introduction This chapter provides an overview of the tasks that may be accomplished using Local Management (LM), and an introduction to LM screen navigation, in-band and out-of-band network management, screen elements, and LM keyboard conventions. 1.1 OVERVIEW Enterasys Networks’...

Overview 1-2 Introduction • Clear NVRAM. • Set 802.1Q VLAN memberships and port configurations. • Redirect frames according to port or VLAN and transmit them on a preselected destination port. • Create a separate Spanning Tree topology for each VLAN configured in the SmartSwitch device. • Transmit f...

Navigating Local Management Screens Introduction 1-3 1.1.2 In-Band vs. Out-of-Band Network management systems are often classified as either in-band or out-of-band. In-band network management passes data along the same medium (cables, frequencies) used by all other stations on the network. Out-of-ba...

Local Management Screen Elements 1-4 Introduction You can also access Local Management using a Telnet connection through one of the network ports of the SmartSwitch device. 1.4 LOCAL MANAGEMENT SCREEN ELEMENTS There are six types of screens used in Local Management: password, menu, statistics, confi...

Local Management Screen Elements Introduction 1-5 Event Message Field This field briefly displays messages that indicate if a Local Management procedure was executed correctly or incorrectly, that changes were saved or not saved to Non-Volatile Random Access Memory (NVRAM), or that a user did not ha...

Local Management Keyboard Conventions 1-6 Introduction Command Fields Command fields (located at the bottom of Local Management screens) are used to exit Local Management screens, save Local Management entries, or navigate to another display of the same screen. In the screens shown in this guide, th...

Getting Help Introduction 1-7 1.6 GETTING HELP For additional support related to this device or document, contact Enterasys Networks using one of the following methods: Before calling the Enterasys Networks, have the following information ready: • Your Enterasys Networks service contract number • A ...

Local Management Requirements 2-1 2 Local Management Requirements This chapter provides information concerning the following: • Management Terminal Setup ( Section 2.1 ), which describes how to attach a Local Management terminal to the Enterasys Networks host device. • Telnet Connections ( Section 2...

Management Terminal Setup 2-2 Local Management Requirements 2.1.1 Console Cable Connection Use the Console Cable Kit provided with the SmartSwitch device to attach the management terminal to the SmartSwitch device COM port as shown in Figure 2-1 . To connect the SmartSwitch device to a PC or compati...

Management Terminal Setup Local Management Requirements 2-3 2.1.2 Management Terminal Setup Parameters Table 2-1 lists the setup parameters for the local management terminal. Table 2-1 VT Terminal Setup Display Setup Menu Columns ->Controls ->Auto Wrap ->Scroll ->Text Cursor ->Cursor ...

Telnet Connections 2-4 Local Management Requirements 2.2 TELNET CONNECTIONS Once the SmartSwitch device has a valid IP address, the user can establish a Telnet session from any TCP/IP based node on the network. Telnet connections to the SmartSwitch device require the community name passwords assigne...

Monitoring an Uninterruptible Power Supply Local Management Requirements 2-5 Figure 2-2 Uninterruptible Power Supply (UPS) Connection RJ45 COM Port RJ45-to-DB9 UPS Adapter UPS Device DB9 Port UTP Cable with RJ45 Connectors 30691_03 LED MODERX-TX DPX-SPD 1 2 3 4 5 6 7 8 9 10 15 16 21 22 23 24 11 12 1...

Accessing Local Management 3-1 3 Accessing Local Management This chapter provides information about the following: • Navigating through the Local Management screen hierarchy for 802.1Q Switching ( Section 3.1 ). • Accessing the Password screen to enter a Local Management session ( Section 3.2 ). • A...

Navigating Local Management Screens 3-2 Accessing Local Management Does not apply to MATRIX E7. Figure 3-1 802.1Q Switching Mode, LM Screen Hierarchy Device Configuration Menu General ConfigurationSNMP Configuration Menu System Resources InformationFlash Download Configuration Port Configuration Men...

Navigating Local Management Screens Accessing Local Management 3-3 3.1.1 Selecting Local Management Menu Screen Items Select items on a menu screen by performing the following steps: 1. Use the arrow keys to highlight a menu item. 2. Press ENTER. The selected menu item displays on the screen. 3.1.2 ...

Password Screen 3-4 Accessing Local Management 3. Exit from Local Management by repeating steps 1 and 2 until the Device Menu screen displays. 4. To end the LM session, use the arrow keys to highlight the RETURN command at the bottom of the Device Menu screen. 5. Press ENTER. The Local Management Pa...

Password Screen Accessing Local Management 3-5 How to Access Turn on the terminal. Press ENTER (this may take up to four times, because the COM port of the switch auto-senses the baud rate of the terminal) until the Local Management Password screen displays. Figure 3-2 shows the Password screen. Scr...

Device Menu Screen Accessing Local Management 3-7 3.3 DEVICE MENU SCREEN Screen Navigation Path Password > Device Menu When to Use To access the Local Management screens of the switch. How to Access Enter a valid password in the Local Management Password screen as described in Section 3.2 , and p...

Device Menu Screen 3-8 Accessing Local Management Menu Descriptions Refer to Table 3-1 for a functional description of each menu item. Table 3-1 Device Menu Screen Menu Item Descriptions Menu Item Screen Function DEVICE CONFIGURATIONMENU Provides access to the Local Management screens that are used ...

Device Menu Screen Accessing Local Management 3-9 NETWORK TOOLS The Network Tools function resides on the switch and consists of commands that allow the user to access and manage network devices, including the ability to Telnet to other devices. Chapter 11 explains how to use the Network Tools utili...

Device Menu Screen 3-10 Accessing Local Management SECURITY (cont’d) The Radius Configuration screen enables you to configure the Radius client function on the switch to provide another restriction for access to the Local Management screens. For more information on Radius Client, refer to Section 3....

Overview of Security Methods Accessing Local Management 3-11 3.4 OVERVIEW OF SECURITY METHODS Six security methods are available to control which users are allowed access to the switch’s host to monitor and control the switch. • Login Security Password – used to access the Device Menu screen to star...

Overview of Security Methods 3-12 Accessing Local Management 3.4.1 Host Access Control Authentication (HACA) To use HACA, the embedded Radius Client on the switch must be configured to communicate with the Radius Server, and the Radius Server must be configured with the password information. The sof...

Overview of Security Methods Accessing Local Management 3-13 Only one password is allowed per access level. This enables the Radius Server to track the users accessing the switch host and how long they used the host application. All radius values, except the server IPs and shared secrets, are assign...

Overview of Security Methods 3-14 Accessing Local Management If the server returns an “access-accept” response (the user successfully authenticated), it must also return a Radius “FilterID” attribute containing an ASCII string with the following fields in the specified format: “Enterasys:version=V:m...

Overview of Security Methods Accessing Local Management 3-15 3.4.2 802.1X Port Based Network Access Control This section provides • a brief description of 802.1X Port Based Network Access Control , • definitions of common terms and abbreviations, and • an overview of the tasks that may be accomplish...

Overview of Security Methods 3-16 Accessing Local Management 3.4.2.2 802.1X Security Overview The Enterasys Networks’ SmartSwitch 2200 Series modules support the following 802.1X and EAP security and authentication features to: • Authenticate hosts that are connected to dedicated switch ports. • Aut...

Overview of Security Methods Accessing Local Management 3-17 3.4.3 MAC Authentication Overview This section discusses a method for a user to gain access to the network by validating the MAC address of their connected device. Network management statically provisions MAC addresses in a central radius ...

Overview of Security Methods 3-18 Accessing Local Management Authentication This section defines the precedence rules to determine which authentication method, 802.1X (EAP) or MAC Authentication has control over an interface. Setting the 802.1X and MAC port authentication is described in Section 3.9...

Overview of Security Methods Accessing Local Management 3-19 Table 3-3 MAC / 802.1X Precedence States 802.1X Port Control MAC Port Control Authen-ticated? Default Policy Exists? Autho-rized Policy Exists? Action Force Authorized Don’t Care Don’t Care Yes Don’t Care • Neither method performs authenti...

Overview of Security Methods Accessing Local Management 3-21 3.4.4 MAC Authentication Control This global variable can be set to enabled or disabled. If set to enabled, then a. MAC Authentication is active on those ports whose individual port-enabled variable is set to enabled. b. All session and st...

Security Menu Screen 3-22 Accessing Local Management 3.5 SECURITY MENU SCREEN Screen Navigation Path Password > Device Menu > Security When to Use To access the Passwords, Radius Configuration, Name Services Configuration, System Authentication Configuration, EAP Configuration, EAP Statistics ...

Security Menu Screen Accessing Local Management 3-23 Screen Example Figure 3-4 Security Menu Screen Menu Descriptions Refer to Table 3-4 for a functional description of each menu item. PASSWORDS RADIUS CONFIGURATIONNAME SERVICES CONFIGURATIONSYSTEM AUTHENTICATION CONFIGURATIONEAP CONFIGURATIONEAP ST...

Security Menu Screen 3-24 Accessing Local Management Table 3-4 Security Menu Screen Menu Item Descriptions Menu Item Screen Function PASSWORDS Used to set the Locally Administered Passwords (super user, read-write, and read-only) to access the device according to an access policy. For details, refer...

Passwords Screen Accessing Local Management 3-25 3.6 PASSWORDS SCREEN When to Use To provide additional security by using login passwords associated to an access policy. This screen allows the use of passwords to provide three levels of Local Management access (super-user, read-write and read-only) ...

Passwords Screen 3-26 Accessing Local Management Field Descriptions Refer to Table 3-5 for a functional description of each screen field. Table 3-5 Module Login Passwords Screen Field Descriptions Use this field… To… Password (Modifiable) Enter the password used to access the device according to an ...

Radius Configuration Screen Accessing Local Management 3-27 3.6.1 Setting the Module Login Password Setting the Module Login Password provides additional security by assigning each switch its own password and allows you to disable the function of switch S8 so that the password cannot be cleared. To ...

Radius Configuration Screen 3-28 Accessing Local Management How to Access Use the arrow keys to highlight the RADIUS CONFIGURATION menu item on the Security Menu screen and press ENTER. The Radius Configuration screen, Figure 3-6 , displays. Screen Example Figure 3-6 Radius Configuration Screen Fiel...

Radius Configuration Screen Accessing Local Management 3-29 Last Resort Action/Local (Selectable) Accept, Challenge, and Reject, which do the following: ACCEPT: Allows local access (via COM port) at the super-user level with no further attempt at authentication. CHALLENGE: Reverts to local module (l...

Radius Configuration Screen 3-30 Accessing Local Management 3.7.1 Setting the Last Resort Authentication The Radius client can be configured to use primary and secondary servers. If the primary server does not respond within the specified number of retries during the specified time-out period, the c...

Name Services Configuration Screen Accessing Local Management 3-31 3.8 NAME SERVICES CONFIGURATION SCREEN When to Use Use this screen when enabling Port-based Web authentication. This screen can also be used to configure the global Secure Harbour name and IP address. The user can Enable/Disable Name...

Name Services Configuration Screen 3-32 Accessing Local Management Field Descriptions Refer to Table 3-7 for a functional description of each screen field. Table 3-7 Name Services Configuration Screen Field Descriptions Use this field… To… Switch Name(Modifiable) Create a textual name to bind to the...

System Authentication Configuration Screen Accessing Local Management 3-33 3.9 SYSTEM AUTHENTICATION CONFIGURATION SCREEN When to Use To enable or disable an authentication type for the device, and to display the authentication type and authentication status (enabled or disabled) for all ports. How ...

System Authentication Configuration Screen 3-34 Accessing Local Management Field Descriptions Refer to Table 3-8 for a functional description of each screen field. Table 3-8 System Authentication Configuration Screen Field Descriptions Use this field… To… System Authentication (Selectable) Enable or...

EAP (Port) Configuration Screen Accessing Local Management 3-35 3.10 EAP (PORT) CONFIGURATION SCREEN When to Use To configure authentication settings for each port. How to Access Use the arrow keys to highlight the EAP CONFIGURATION menu item on the Security Menu screen and press ENTER. The EAP Port...

EAP (Port) Configuration Screen 3-36 Accessing Local Management Field Descriptions Refer to Table 3-9 for a functional description of each screen field. . Table 3-9 EAP Port Configuration Screen Field Descriptions Use this field… To… Port(Read-Only) See the port number of all ports known to the devi...

EAP (Port) Configuration Screen Accessing Local Management 3-37 Authentication State(Cont’d) • aborting: The port enters this state from authenticating when any event occurs that interrupts the login exchange. • held: After any login failure, this state is entered where the port remains for the numb...

EAP Statistics Menu Screen 3-40 Accessing Local Management 3.11 EAP STATISTICS MENU SCREEN Screen Navigation Path Password > Device Menu > Security Menu > EAP Statistics Menu When to Use To access the EAP Session Statistics, EAP Authenticator Statistics, and EAP Diagnostic Statistics screen...

EAP Statistics Menu Screen Accessing Local Management 3-41 Menu Descriptions Refer to Table 3-10 for a functional description of each menu item. Table 3-10 EAP Statistics Menu Screen Descriptions Menu Item Screen Function EAP SESSION STATISTICS Used to review and clear EAP session statistics for eac...

EAP Statistics Menu Screen 3-42 Accessing Local Management 3.11.1 EAP Session Statistics Screen When to Use To review and clear EAP session statistics for each port. How to Access Use the arrow keys to highlight the EAP SESSION STATISTICS menu item on the EAP Statistics Menu screen and press ENTER. ...

EAP Statistics Menu Screen Accessing Local Management 3-43 Table 3-11 EAP Session Statistics Screen Field Descriptions Use this field… To… SessionID(Read-Only) See the unique ASCII string identifier for a particular session. SessionOctetsRx(Read-Only) See counts of user data octets received on the p...

EAP Statistics Menu Screen 3-44 Accessing Local Management 3.11.2 EAP Authenticator Statistics Screen When to Use To review authenticator statistics for each port, including EAP frame types received and transmitted, and frame version number and source MAC address. This screen refreshes counters data...

EAP Statistics Menu Screen Accessing Local Management 3-45 Screen Example Figure 3-12 EAP Authenticator Statistics Screen Field Descriptions Refer to Table 3-12 for a functional description of each screen field. Table 3-12 EAP Authenticator Statistics Screen Field Descriptions Use this field… To… To...

EAP Statistics Menu Screen 3-46 Accessing Local Management Response Id Frames Rx(Read-Only) See counts of EAP response identification type frames received by the authenticator. Response Frames Rx(Read-Only) See counts of EAP response type frames received by the authenticator. Request Id Frames Tx(Re...

EAP Statistics Menu Screen Accessing Local Management 3-47 3.11.3 EAP Diagnostic Statistics Screen When to Use To view port counters useful for EAP troubleshooting, including logoffs and timeouts while authenticating, and to view authorization failure messages from the authentication server. The cou...

EAP Statistics Menu Screen 3-48 Accessing Local Management Field Descriptions Refer to Table 3-13 for a functional description of each screen field. Table 3-13 EAP Diagnostic Statistics Screen Field Descriptions Use this field… To… Enters Connecting(Read-Only) See counts of transitions to connecting...

MAC Port Configuration Screen 3-50 Accessing Local Management 3.12 MAC PORT CONFIGURATION SCREEN When to Use To display the authentication state of the supplicant associated with each port, enable or disable the authentication function, initialize authentication status, and force a revalidation of t...

MAC Port Configuration Screen Accessing Local Management 3-51 Screen Example Figure 3-14 MAC Port Configuration Screen Field Descriptions Refer to Table 3-7 for a functional description of each screen field. Table 3-14 MAC Port Configuration Screen Field Descriptions Use this field… To… Port #(Read-...

MAC Supplicant Configuration Screen 3-52 Accessing Local Management 3.13 MAC SUPPLICANT CONFIGURATION SCREEN When to Use To determine the active MAC Authentication supplicants on the module and perform limited configuration on these supplicants, which includes initializing the supplicant and reauthe...

MAC Supplicant Configuration Screen Accessing Local Management 3-53 Screen Example Figure 3-15 MAC Supplicant Configuration Screen Field Descriptions Refer to Table 3-15 for a functional description of each screen field. Table 3-15 MAC Supplicant Configuration Screen Field Descriptions Use this fiel...

MAC Supplicant Configuration Screen 3-54 Accessing Local Management Initialize Supplicant (Single Setting) Terminate the current session with a supplicant. When set to TRUE, the current session is terminated. It always displays a value of FALSE. Reauthenticate Sup-plicant (Single Setting) Force a re...

Device Configuration Menu Screens 4-1 4 Device Configuration Menu Screens This chapter describes the Device Configuration Menu screen and the following screens that can be selected: • General Configuration screen ( Section 4.2 ) • SNMP Configuration Menu screen ( Section 4.3 ) • SNMP Community Names...

Device Configuration Menu Screen 4-2 Device Configuration Menu Screens 4.1 DEVICE CONFIGURATION MENU SCREEN Screen Navigation Path Password > Device Menu > Device Configuration Menu When to Use To access a series of Local Management screens used to establish an Access Control List for SNMP to ...

Device Configuration Menu Screen Device Configuration Menu Screens 4-3 Menu Descriptions Refer to Table 4-1 for a functional description of each menu item. Table 4-1 Device Configuration Menu Screen Menu Item Descriptions Menu Item Screen Function GENERAL CONFIGURATION Used to monitor and configure ...

General Configuration Screen 4-4 Device Configuration Menu Screens 4.2 GENERAL CONFIGURATION SCREEN When to Use To set the system date and time, IP address and subnet mask, the default gateway, and the TFTP gateway IP address. This screen can also be used to clear the NVRAM, set the screen refresh t...

General Configuration Screen Device Configuration Menu Screens 4-5 Field Descriptions Refer to Table 4-2 for a functional description of each screen field. . Table 4-2 General Configuration Screen Field Descriptions Use this field… To… MAC Address (Read-Only) See the base physical address of the dev...

General Configuration Screen 4-6 Device Configuration Menu Screens Device Time (Modifiable) Enter a new device time. To enter a new time, refer to Section 4.2.7 . Screen Refresh Time (Modifiable) Enter a new device time. This setting determines how frequently (in seconds) information is updated on t...

General Configuration Screen Device Configuration Menu Screens 4-7 Clear NVRAM (Toggle) Reset NVRAM to the factory default settings. All user-entered parameters, such as IP address and Community Names, are then replaced with the device default configuration settings. For details, refer to Section 4....

General Configuration Screen 4-8 Device Configuration Menu Screens 4.2.1 Setting the IP Address To set the IP address, perform the following steps: 1. Use the arrow keys to highlight the IP Address field. 2. Enter the IP address into this field using Dotted Decimal Notation (DDN) format. For example...

General Configuration Screen Device Configuration Menu Screens 4-9 4.2.2 Setting the Subnet Mask If the management workstation that is to receive SNMP traps from the device is located on a separate subnet, the subnet mask for the device may need to be changed from its default value. To change the su...

General Configuration Screen 4-10 Device Configuration Menu Screens 4.2.3 Setting the Default Gateway If the SNMP management station is located on a different IP subnet than the device, a default gateway must be specified. When an SNMP Trap is generated, the device sends out an ARP request to the de...

General Configuration Screen Device Configuration Menu Screens 4-11 4.2.5 Setting the Module Name To set the module name, perform the following steps: 1. Use the arrow keys to highlight the Module Name field. 2. Enter the name of your system (maximum of 19 characters). 3. Press ENTER to set the name...

General Configuration Screen 4-12 Device Configuration Menu Screens 4.2.7 Setting the Device Time To set the device time, perform the following steps: 1. Use the arrow keys to highlight the Device Time field. 2. Enter the time in this 24-hour format: HH:MM:SS 3. Press ENTER to set the system clock t...

General Configuration Screen Device Configuration Menu Screens 4-13 If the time entered is within the 1 to 30 minutes range, the message “SAVED OK” displays at the top of the screen. If the entry is not valid, Local Management does not alter the current setting, but it does refresh the Screen Lockou...

General Configuration Screen 4-14 Device Configuration Menu Screens Figure 4-5 COM Port Warning 3. Use the arrow keys to highlight YES. Press ENTER. 4. If the port was ENABLED, the message “SAVED OK” appears, and the edits are saved. If the port was DISABLED, use the arrow keys to highlight SAVE at ...

General Configuration Screen Device Configuration Menu Screens 4-15 3. Press ENTER to accept the application. 4. Use the arrow keys to highlight the SAVE command at the bottom of the screen, then press the ENTER key. The message “SAVED OK” displays, indicating that the edits are saved. 4.2.11 Cleari...

General Configuration Screen 4-16 Device Configuration Menu Screens Figure 4-6 Clear NVRAM Warning 5. To clear the NVRAM, use the arrow keys to select YES and press ENTER. The message “CLEARING NVRAM. REBOOT IN PROGRESS...” displays. The device clears NVRAM and reboots. All user-entered parameters d...

SNMP Configuration Menu Screen Device Configuration Menu Screens 4-17 4.3 SNMP CONFIGURATION MENU SCREEN Screen Navigation Path Password > Device Menu > Device Configuration Menu > SNMP Configuration Menu When to Use To provide access to the SNMP Community Names Configuration, SNMP Traps Co...

SNMP Community Names Configuration Screen 4-18 Device Configuration Menu Screens Menu Descriptions Refer to Table 4-4 for a functional description of each menu item. 4.4 SNMP COMMUNITY NAMES CONFIGURATION SCREEN When to Use To set SNMP Management community names. Community names provide multiple lev...

SNMP Community Names Configuration Screen Device Configuration Menu Screens 4-19 Screen Example Figure 4-8 SNMP Community Names Configuration Screen Field Descriptions Refer to Table 4-5 for a functional description of each screen field. NOTE: As typical in secure network environments, the community...

SNMP Community Names Configuration Screen 4-20 Device Configuration Menu Screens 4.4.1 Establishing Community Names The password used to access Local Management at the Password Screen must have super-user access to view and edit the SNMP Community Names Configuration screen. Using a password with re...

SNMP Traps Configuration Screen Device Configuration Menu Screens 4-21 4.5 SNMP TRAPS CONFIGURATION SCREEN When to Use To assign SNMP traps to eight different IP addresses. Since the device is an SNMP compliant device, it can send messages to multiple Network Management Stations to alert users of st...

SNMP Traps Configuration Screen 4-22 Device Configuration Menu Screens 4.5.1 Configuring the Trap Table To configure the Trap table, proceed as follows: 1. Use the arrow keys to highlight the appropriate Trap Destination field. 2. Enter the IP address of the workstation that is to receive traps. IP ...

Access Control List Screen Device Configuration Menu Screens 4-23 4.6 ACCESS CONTROL LIST SCREEN When to Use To view, enable, or disable the Access Control List (ACL) and configure address filtering to provide additional security. This enables you to limiting user to the device according to their IP...

Access Control List Screen 4-24 Device Configuration Menu Screens Field Descriptions Refer to Table 4-7 for a functional description of each screen field. Table 4-7 Access Control List Screen Field Descriptions Use this field… To… Access Control Lists (Toggle) Enable or disable ACL to restrict SNMP/...

Access Control List Screen Device Configuration Menu Screens 4-25 4.6.1 Entering IP Addresses To enter a single or range of IP addresses into the ACL, proceed as follows: Entering Single Addresses 1. Use the arrow keys to highlight one of the place holders (0.0.0.0) under IP Addresses. 2. Enter the ...

Access Control List Screen 4-26 Device Configuration Menu Screens The designated devices associated with the IP addresses in the ACL will now be the only ones to have remote access to Local Management. Access to Local Management using the COM port is not affected. Entering Ranges of Addresses 1. Use...

Access Control List Screen Device Configuration Menu Screens 4-27 The designated devices associated with the range of IP addresses in the ACL will now have remote access to Local Management. Access to Local Management using the COM port is not affected. 4.6.2 Enable/Disable ACL To just enable or dis...

System Resources Information Screen 4-28 Device Configuration Menu Screens 4.7 SYSTEM RESOURCES INFORMATION SCREEN When to Use To monitor the current switch utilization and the peak switch utilization. This screen provides information concerning the processor used in the device and the amount of FLA...

System Resources Information Screen Device Configuration Menu Screens 4-29 Field Descriptions Refer to Table 4-8 for a functional description of each screen field. 4.7.1 Setting the Reset Peak Switch Utilization To set the Reset Peak Switch Utilization field to YES or NO, proceed as follows: 1. Use ...

FLASH Download Configuration Screen 4-30 Device Configuration Menu Screens 4.8 FLASH DOWNLOAD CONFIGURATION SCREEN When to Use To perform the following: • Download a new firmware image file from a TFTP server to the device, • Download a configuration file from a TFTP server to the device, or • Uploa...

FLASH Download Configuration Screen Device Configuration Menu Screens 4-31 How to Access Use the arrow keys to highlight the FLASH DOWNLOAD CONFIGURATION menu item on the Device Configuration Menu screen, and press ENTER. The Flash Download Configuration screen, Figure 4-12 , displays. Screen Exampl...

FLASH Download Configuration Screen 4-32 Device Configuration Menu Screens Field Descriptions Refer to Table 4-9 for a functional description of each screen field. Table 4-9 Flash Download Configuration Screen Field Descriptions Use this field… To… Download Method (Selectable) Select a method (RUNTI...

FLASH Download Configuration Screen Device Configuration Menu Screens 4-33 Reboot After Download (Toggle) Set the device so it will either reboot or not reboot after completing the download of an image. This field toggles between YES and NO, when the Download Method field is set to RUNTIME. If YES i...

FLASH Download Configuration Screen 4-34 Device Configuration Menu Screens 4.8.1 Image File Download Using Runtime To download a firmware image file to the device using Runtime, proceed as follows: 1. Use the arrow keys to highlight the Reboot After Download field. 2. Use the SPACE bar to select eit...

FLASH Download Configuration Screen Device Configuration Menu Screens 4-35 3. Use the arrow keys to highlight the TFTP Gateway IP Addr field. 4. Set the IP address of the TFTP gateway (this defaults to the same IP address as that set in the TFTP Gateway IP Addr field on the General Configuration scr...

Port Configuration Menu Screens 5-1 5 Port Configuration Menu Screens This chapter describes the Port Configuration Menu screen and the following screens that can be selected: • Ethernet Interface Configuration screen ( Section 5.2 ) • Ethernet Port Configuration screen ( Section 5.3 ) • HSIM/VHSIM ...

Port Configuration Menu Screen 5-2 Por t Configuration Menu Screens 5.1 PORT CONFIGURATION MENU SCREEN When to Use To select screens to perform port configuration tasks on the switch device. How to Access Use the arrow keys to highlight the PORT CONFIGURATION MENU item on the Device Configuration Me...

Port Configuration Menu Screen Por t Configuration Menu Screens 5-3 Figure 5-2 Port Configuration Menu Screen (in Agg Mode, IEEE8023ad) Menu Descriptions Refer to Table 5-1 for a functional description of each menu item. Table 5-1 Port Configuration Menu Screen Menu Item Descriptions Menu Item Scree...

Ethernet Interface Configuration Screen 5-4 Por t Configuration Menu Screens 5.2 ETHERNET INTERFACE CONFIGURATION SCREEN When to Use To display the link status and current operating mode of each Ethernet port. This screen also provides access to the Ethernet Port Configuration screen, which allows c...

Ethernet Interface Configuration Screen Por t Configuration Menu Screens 5-5 Screen Example Figure 5-3 Ethernet Interface Configuration Screen Field Descriptions Refer to Table 5-2 for a functional description of each screen field. Table 5-2 Ethernet Interface Configuration Screen Field Descriptions...

Ethernet Interface Configuration Screen 5-6 Por t Configuration Menu Screens Link (Read-Only) See whether or not there is a physical connection from the port to another device. One of the following values is displayed: Link – There is a link signal present and a valid physical connection to another ...

Ethernet Port Configuration Screen Por t Configuration Menu Screens 5-7 5.3 ETHERNET PORT CONFIGURATION SCREEN When to Use To change the operating mode of a specific Ethernet interface, such as the speed, duplex, auto-negotiation, advertised ability, and the flow control settings. Configuring option...

Ethernet Port Configuration Screen 5-8 Por t Configuration Menu Screens How to Access Use the arrow keys to highlight the desired Ethernet port from the Ethernet Interface Configuration screen and press ENTER. The Ethernet Port Configuration screen, Figure 5-4 , displays for the selected port. Scree...

Ethernet Port Configuration Screen Por t Configuration Menu Screens 5-9 Table 5-3 Ethernet Port Configuration Screen Field Descriptions Use this field… To… Interface (Read-Only) See the Interface number. Physical Port (Read-Only) See the number of the physical port on the interface. Default Speed (S...

Ethernet Port Configuration Screen Port Configuration Menu Screens 5-11 Full Duplex Flow Control(Selectable) Set the flow control feature on each port for a specific mode. The choices are as follows: Symmetric – the port operates in Symmetric mode, causing the port to interpret received PAUSE frames...

Ethernet Port Configuration Screen 5-12 Port Configuration Menu Screens 5.3.1 Selecting Field Settings All selectable or toggle fields other than Advertised Ability can be changed by following this procedure: 1. Use the arrow keys to highlight the field to be changed. 2. Use the SPACE bar or BACKSPA...

HSIM/VHSIM Configuration Screen Port Configuration Menu Screens 5-13 5.4 HSIM/VHSIM CONFIGURATION SCREEN When to Use To configure an optional HSIM or VHSIM. How to Access Use the arrow keys to highlight the HSIM/VHSIM CONFIGURATION menu item on the Port Configuration Menu screen and press ENTER. The...

Redirect Configuration Menu Screen 5-14 Port Configuration Menu Screens Screen Example Figure 5-5 Redirect Configuration Menu Screen Menu Descriptions Refer to Table 5-4 for a functional description of each menu item. Table 5-4 Redirect Configuration Menu Screen Menu Item Descriptions Menu Item Scre...

Port Redirect Configuration Screen Port Configuration Menu Screens 5-15 5.6 PORT REDIRECT CONFIGURATION SCREEN When to Use To redirect frames in the switch device from one source port to one or more destination ports or from one or more source ports to one destination port. Frames received on the so...

Port Redirect Configuration Screen 5-16 Port Configuration Menu Screens How to Access Use the arrow keys to highlight the PORT REDIRECT CONFIGURATION menu item on the Redirect Configuration Menu screen and press ENTER. The Port Redirect Configuration screen, Figure 5-6 , displays. Figure 5-6 Port Re...

Port Redirect Configuration Screen 5-18 Port Configuration Menu Screens 5.6.1 Changing Source and Destination Ports To add or delete source port and destination port entries and set the Frame Format and Redirect Errors functions, proceed as follows: 1. Use the arrow keys to highlight the Source Port...

VLAN Redirect Configuration Screen Port Configuration Menu Screens 5-19 11. Use the arrow keys to highlight SAVE at the bottom of the screen. Press ENTER. The message “SAVED OK” displays. This saves the new settings and updates the Source Port and Destination Port read-only fields. 5.7 VLAN REDIRECT...

VLAN Redirect Configuration Screen 5-20 Port Configuration Menu Screens How to Access Use the arrow keys to highlight the VLAN REDIRECT CONFIGURATION menu item on the Redirect Configuration Menu screen and press ENTER. The VLAN Redirect Configuration screen, Figure 5-7 , displays. Screen Example Fig...

VLAN Redirect Configuration Screen Port Configuration Menu Screens 5-21 Field Descriptions Refer to Table 5-6 for a functional description of each screen field. Table 5-6 VLAN Redirect Configuration Screen Field Descriptions Use this field… To… Source VLAN(Read-Only) See the VLAN ID of the VLANs tha...

VLAN Redirect Configuration Screen 5-22 Port Configuration Menu Screens 5.7.1 Changing Source VLAN and Destination Ports To add or delete source VLAN and destination port entries and set the Frame Format, proceed as follows: 1. Use the arrow keys to highlight the Source VLAN field near the bottom of...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) 5-24 Port Configuration Menu Screens Ports that are attached to an aggregator will enter a Spanning Tree state of AGGREGATING on the Spanning tree screens, just as they do when manually placed in a trunk. In this implementation, the concept of ...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) Port Configuration Menu Screens 5-25 Link Aggregation It is desirable to have a way to use multiple interswitch links simultaneously to increase interswitch bandwidth. This can be done if both sides agree on a set of ports that are being used a...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) Port Configuration Menu Screens 5-27 Menu Descriptions Refer to Table 5-7 for a functional description of each menu item. 5.8.1 802.3ad Port Screen When to Use To display a summary of all the ports that are running 802.3ad and the information c...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) Port Configuration Menu Screens 5-29 Figure 5-9 shows the four columns of information: The Port Instance; the Aggregator that the Port is attached to; the operational key of the Port, and the state of the port’s MUX state machine. Viewing and E...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) 5-30 Port Configuration Menu Screens 5.8.1.1 802.3ad Port Details Screen When to Use To view and configure all the port-related LACP parameters of any port instance shown in the 802.3ad Port screen described back in Section 5.8.1 . How to Acces...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) Port Configuration Menu Screens 5-31 Field Descriptions Refer to Table 5-9 for a functional description of each screen field. Table 5-9 802.3ad Port Details Screen Field Descriptions Use this field… To… Port Instance(Read-Only) See the port num...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) 5-32 Port Configuration Menu Screens PartnerAdminSysID (Modifiable) Set a default value to use for PartnerAdminSysID when no protocol partner is available. ActorAdminState (hex) (Modifiable) Set the administrative value for this port’s Actor_St...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) Port Configuration Menu Screens 5-33 ActorOperState (Read-Only) The current (operational) value of the port’s Actor_State. The hex value is displayed as well as the individual bit fields. The fields are as follows. bit 0 LACP_Activity, 1 indica...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) 5-34 Port Configuration Menu Screens ActorOperState (Read-Only) (Continued) bit 5 Distributing, 1 indicates that we are Distributing. “Distributing” means that a port is ready to transmit traffic. If Distributing is true a ‘D’ is displayed, oth...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) Port Configuration Menu Screens 5-35 Viewing and Editing 802.3ad Port Parameters To change a parameter, proceed as follows: 1. Use the arrow keys to highlight the parameter field to be modified and type in the new value. Press ENTER. Repeat thi...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) 5-36 Port Configuration Menu Screens 5.8.1.2 802.3ad Port Statistics Screen When to Use To view all the port-related LACP parameters about a port instance shown in the 802.3ad Port Details screen described back in Section 5.8.1.1 . How to Acces...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) Port Configuration Menu Screens 5-37 Table 5-10 802.3ad Port Statistics Screen Field Descriptions Use this field… To… Port Instance(Read-Only) See a unique number used to identify this port. This corresponds to the port numbering scheme seen in...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) 5-38 Port Configuration Menu Screens LastRxTime(delta)(Read-Only) See the amount of time since the last LACP PDU has been received on this port. ActorChurnState(Read-Only) See the state of the Actor Churn state machine for this port. Values can...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) 5-40 Port Configuration Menu Screens Viewing and Editing 802.3ad Aggregator Parameters To view or change Aggregator parameters, proceed as follows: 1. Use the arrow keys to highlight the parameter field to be modified and type in the new value....

Link Aggregation Menu Screen (802.3ad Main Menu Screen) Port Configuration Menu Screens 5-41 5.8.2.1 802.3ad Aggregator Details Screen When to Use To see the current parameter details of the Aggregator Instance selected on the 802.3ad Aggregator screen described in Section 5.8.2 . How to Access Use ...

Link Aggregation Menu Screen (802.3ad Main Menu Screen) 5-42 Port Configuration Menu Screens Table 5-12 802.3ad Aggregator Details Screen Field Descriptions Use this field… To… Aggregator Instance See the instance of the aggregator being viewed. The instance is a numerical value used to uniquely ide...

Broadcast Suppression Configuration Screen 5-44 Port Configuration Menu Screens 5.9 BROADCAST SUPPRESSION CONFIGURATION SCREEN When to Use To set the limit on received broadcast frames that are switched out to other ports. How to Access Use the arrow keys to highlight the BROADCAST SUPPRESSION CONFI...

Broadcast Suppression Configuration Screen Port Configuration Menu Screens 5-45 Screen Example Figure 5-15 Broadcast Suppression Configuration Screen Field Descriptions Refer to Table 5-14 for a functional description of each screen field. Table 5-14 Broadcast Suppression Configuration Screen Field ...

Broadcast Suppression Configuration Screen 5-46 Port Configuration Menu Screens 5.9.1 Setting the Threshold To set the Threshold, proceed as follows: 1. Use the arrow keys to highlight the Threshold field for the selected port. 2. Type in the numbers for the desired limit. Only enter values in incre...

802.1 Configuration Menu Screens 6-1 6 802.1 Configuration Menu Screens This chapter discusses the Enterasys Networks Rapid Reconvergence Spanning Tree implementation as well as the implementation of IEEE 802.3ad. The following screens are discussed: • 802.1 Configuration Menu screen ( Section 6.1 )...

802.1 Configuration Menu Screen 6-2 802.1 Configuration Menu Screens 6.1 802.1 CONFIGURATION MENU SCREEN When to Use To access the Spanning Tree Configuration Menu, 802.1Q VLAN Configuration Menu, or 802.1p Configuration Menu screen. How to Access Use the arrow keys to highlight the 802.1 CONFIGURAT...

802.1 Configuration Menu Screen 802.1 Configuration Menu Screens 6-3 Menu Descriptions Refer to Table 6-1 for a functional description of each menu item. Table 6-1 802.1 Configuration Menu Screen Menu Item Descriptions Menu Item Screen Function SPANNING TREE CONFIGURATION MENU Used to select the Spa...

Spanning Tree Configuration Menu Screen 6-4 802.1 Configuration Menu Screens 6.2 SPANNING TREE CONFIGURATION MENU SCREEN Screen Navigation Path Password > Device Menu > Device Configuration Menu > 802.1 Configuration Menu > Spanning Tree Configuration Menu When to Use To access the Spann...

Spanning Tree Configuration Screen 802.1 Configuration Menu Screens 6-5 Menu Descriptions Refer to Table 6-2 for a functional description of each menu item. 6.3 SPANNING TREE CONFIGURATION SCREEN When to Use To create a separate Spanning Tree topology for each VLAN configured in the SmartSwitch devi...

Spanning Tree Configuration Screen 6-6 802.1 Configuration Menu Screens Screen Example Figure 6-3 Spanning Tree Configuration Screen Field Descriptions Refer to Table 6-3 for a functional description of each screen field. Table 6-3 Spanning Tree Configuration Screen Use this field… To… VLAN – top of...

Spanning Tree Configuration Screen 802.1 Configuration Menu Screens 6-7 Current STP Mode(Selectable) Select the current STP mode using the SPACE bar. You can select one of the following: IEEE, PVSTP, NONE, and DEC. The default setting is IEEE. It is recommended that all switches in the network be co...

Spanning Tree Configuration Screen 6-8 802.1 Configuration Menu Screens 6.3.1 Configuring a VLAN Spanning Tree To configure a VLAN Spanning Tree, proceed as follows: 1. Use the arrow keys to highlight the Current STP Mode field near the bottom of the screen. 2. Use the SPACE bar to select one of the...

Spanning Tree Port Configuration Screen 802.1 Configuration Menu Screens 6-9 6.4 SPANNING TREE PORT CONFIGURATION SCREEN When to Use To view the switch address of the selected STP VLAN ID, its VLAN age time, the total number of ports, and the current MAC Address of a switch residing of each port. Th...

Spanning Tree Port Configuration Screen 6-10 802.1 Configuration Menu Screens Field Descriptions Refer to Table 6-4 for a functional description of each screen field. Table 6-4 Spanning Tree Port Configuration Screen Use this field… To… Port #(Read-Only) See the port numbers of each link associated ...

PVST Port Configuration Screen 802.1 Configuration Menu Screens 6-11 6.4.1 Enabling/Disabling the Default Spanning Tree Ports Ports associated with the Default STP VLAN can be enabled or disabled, as follows: 1. To enable or disable a port, use the arrow keys to highlight the Status field associated...

PVST Port Configuration Screen 6-12 802.1 Configuration Menu Screens Screen Example Figure 6-5 PVST Port Configuration Screen Field Descriptions Refer to Table 6-5 for a functional description of each screen. Table 6-5 PVST Port Configuration Screen Field Descriptions Use this field… To… Port #(Read...

PVST Port Configuration Screen 802.1 Configuration Menu Screens 6-13 Port Priority(Modifiable) View the value of the priority portion of the port ID. Port Designated Cost(Read-Only) View the path cost of the designated port of this port’s segment. Port State(Read-Only) View the current Spanning Tree...

802.1Q VLAN Configuration Menu Screens 7-1 7 802.1Q VLAN Configuration Menu Screens This chapter describes the 802.1Q VLAN Configuration Menu screen ( Section 7.2 ) and the following screens that can be selected from its menu: • Static VLAN Configuration screen ( Section 7.3 ) • Static VLAN Egress C...

Summary of VLAN Local Management 7-2 802.1Q VLAN Configuration Menu Screens 7.1 SUMMARY OF VLAN LOCAL MANAGEMENT The VLAN configuration process is an extension of normal Local Management operations. A series of Local Management screens provides access to the functions and commands necessary to add, ...

802.1Q VLAN Configuration Menu Screen 802.1Q VLAN Configuration Menu Screens 7-3 To configure the switch for VLAN operation, proceed as follows: • Access Local Management as described in Chapter 3 . • Perform all required initial setup operations. • Navigate to the 802.1Q VLAN Configuration Menu scr...

802.1Q VLAN Configuration Menu Screen 7-4 802.1Q VLAN Configuration Menu Screens How to Access Use the arrow keys to highlight the 802.1Q VLAN CONFIGURATION MENU item on the 802.1 Configuration Menu screen and press ENTER. The 802.1Q VLAN Configuration Menu screen, Figure 7-2 , displays. Screen Exam...

802.1Q VLAN Configuration Menu Screen 802.1Q VLAN Configuration Menu Screens 7-5 Menu Descriptions Refer to Table 7-1 for a functional description of each menu item. Table 7-1 802.1Q VLAN Configuration Menu Screen Menu Item Descriptions Menu Item Screen Function STATIC VLAN CONFIGURATION Used to vie...

Static VLAN Configuration Screen 7-6 802.1Q VLAN Configuration Menu Screens 7.3 STATIC VLAN CONFIGURATION SCREEN When to Use To create, modify, and/or delete one or more Static VLANs and associated VLAN names. This screen also provides access to the Static VLAN Egress Configuration screen to modify ...

Static VLAN Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-7 Screen Example Figure 7-3 Static VLAN Configuration Screen Field Descriptions Refer to Table 7-2 for a functional description of each screen field. Refer to Section 7.3.1 through Section 7.3.5 for the application of these fi...

Static VLAN Configuration Screen 7-8 802.1Q VLAN Configuration Menu Screens 7.3.1 Creating a Static VLAN To create a VLAN, proceed as follows: 1. Use the arrow keys to highlight the VLAN ID field near the bottom of the screen. 2. Enter the VLAN ID using a unique number between 2 and 4094. The VLAN I...

Static VLAN Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-9 4. Use the arrow keys to highlight the VLAN Name field. 5. Type a name of up to 32 ASCII characters in the VLAN Name field . This is an optional attribute and is not required for VLAN operation. 6. Press ENTER. 7. Use the ar...

Static VLAN Configuration Screen 7-10 802.1Q VLAN Configuration Menu Screens 7.3.4 Deleting a Static VLAN To delete a VLAN from the VLAN list, proceed as follows: 1. Use the arrow keys to highlight the line containing the VLAN ID, FDB ID, and VLAN Name information. The following message is displayed...

Static VLAN Egress Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-11 7.4 STATIC VLAN EGRESS CONFIGURATION SCREEN When to Use To set the type of egress (tag status) for each or all ports associated with a VLAN selected from the Static VLAN Configuration screen. The ports can be set usi...

Static VLAN Egress Configuration Screen 7-12 802.1Q VLAN Configuration Menu Screens Field Descriptions Refer to Table 7-3 for a functional description of each screen field. Table 7-3 Static VLAN Egress Configuration Screen Field Descriptions Use this field… To… VLAN ID (Read-Only) See the VLAN ID of...

Static VLAN Egress Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-13 7.4.1 Setting Egress Types on Ports The following procedures describe how to assign the egress type to one or more ports, or set one egress type to all ports simultaneously. Setting the Egress Type on One or More Por...

Current VLAN Configuration Screen 7-14 802.1Q VLAN Configuration Menu Screens 7.4.2 Displaying the Next Group of Ports Up to 32 ports can be displayed on the screen. If there are more than 32 ports associated with the VLAN, additional screens will contain the additional list of ports. To display the...

Current VLAN Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-15 Screen Example Figure 7-5 Current VLAN Configuration Screen Field Descriptions Refer to Table 7-4 for a functional description of each screen field. NOTE: These fields are read-only fields, however, highlighting a line usi...

Current VLAN Egress Configuration Screen 7-16 802.1Q VLAN Configuration Menu Screens 7.6 CURRENT VLAN EGRESS CONFIGURATION SCREEN When to Use To see the egress settings of all ports associated with the VLAN ID selected from the Current VLAN Configuration screen. How to Access Use the arrow keys to h...

VLAN Port Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-17 Field Descriptions Refer to Table 7-5 for a functional description of each screen field. 7.7 VLAN PORT CONFIGURATION SCREEN When to Use To see and/or make changes to the port parameters affecting • the Port VLAN Identificatio...

VLAN Port Configuration Screen 7-18 802.1Q VLAN Configuration Menu Screens Screen Example Figure 7-7 VLAN Port Configuration Screen Field Descriptions Refer to Table 7-6 for a functional description of each screen field. Table 7-6 VLAN Port Configuration Screen Field Descriptions Use this field… To…...

VLAN Port Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-19 Global GVRP State(Toggle) Enable or Disable the GVRP Status. GVRP and PVST are not interoperable. When ENABLED, GVRP is turned on for the entire switch. When DISABLED, the VLANs are not learned on a given port. Port(Read-Only...

VLAN Port Configuration Screen 7-20 802.1Q VLAN Configuration Menu Screens 7.7.1 Changing the Port Mode To change the operational mode of a port, proceed as follows. 1. Use the arrow keys to highlight the Port Mode field for the port you wish to change. 2. Use the SPACE bar or BACKSPACE key to step ...

VLAN Classification Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-21 5. Use the arrow keys to highlight the port’s Acceptable Frame Types field. 6. Press the SPACE bar to toggle the field to the correct setting: ADMIT ALL FRAMES or ADMIT TAGGED FRAMES ONLY. 7. Use the arrow keys to h...

VLAN Classification Configuration Screen 7-22 802.1Q VLAN Configuration Menu Screens How to Access Use the arrow keys to highlight the VLAN CLASSIFICATION CONFIGURATION menu item on the 802.1Q VLAN Configuration Menu screen and press ENTER. The VLAN Classification Configuration screen, Figure 7-8 , ...

VLAN Classification Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-23 Classification – top of screen (Selectable) See the classification associated with the VLAN in the VID column. This field may be selected after the screen is saved to call up the Protocol Port Configuration screen. ...

VLAN Classification Configuration Screen 7-24 802.1Q VLAN Configuration Menu Screens Table 7-8 provides a list of the Classifications that can be selected in the Classification field and the associated subclassifications. Table 7-8 Classification List Classification Subclassification and Options Cus...

VLAN Classification Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-25 IP Protocol Type IP Protocol Type: TCP- UDP- ICMP- IGMP- OSPF- CUSTOM > Protocol Type: 000 IPX COS IPX Class Of Service: 000 IPX Packet Type IPX Packet Type: - Hello or SAP- RIP- Echo Packet- Error Packet- Netwar...

VLAN Classification Configuration Screen 7-26 802.1Q VLAN Configuration Menu Screens Dest IPX Network IPX Network Num: 0x00000000 Bil IPX Network IPX Network Num: 0x00000000 Src UDP Port IP UDP Port: - FTP Data- FTP- BOOTP Server- BOOTP Client- RIP- Telnet- TFTP - HTTP- DNS- SMTP- POP3- IMAP2- IMAP3...

VLAN Classification Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-27 Src TCP Port TCP Port: - FTP Data- FTP- BOOTP Server- BOOTP Client- RIP- Telnet- TFTP - HTTP- DNS- SMTP- POP3- IMAP2- IMAP3- NETBIOS Name Serv- NETBIOS Datagram- NETBIOS Sess Serv- CUSTOM > TCP Port Number: 00000...

VLAN Classification Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-29 7.8.1 Classification Precedence Rules When there are multiple classifications assigned to a SmartSwitch device, the SmartSwitch device must determine which classification takes precedence according to the Classifica...

VLAN Classification Configuration Screen 7-30 802.1Q VLAN Configuration Menu Screens Table 7-9 Classification Precedence Classification Type Precedence Level Layer 2 Source MAC Address Best Match 1a Destination MAC Address Best Match 1b EtherType 6 SAP 6 Layer 3 IP TOS 5a IP Type 5b IPX COS 5a IPX T...

VLAN Classification Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-31 Layer 4 UDP Port Source 4a UDP Port Destination 4b TCP Source Port 4a TCP Destination Port 4b IPX Socket Source 4a IPX Socket Destination 4b UDP Source Port 4a UDP Source Port Range 4b UDP Dest Port 4c UDP Dest Port...

VLAN Classification Configuration Screen 7-32 802.1Q VLAN Configuration Menu Screens The following example shows how the precedence concept can be applied: Example A network administrator has defined the following two classifications involving VLANs: • All frames with a UDP Port Source number of 55 ...

VLAN Classification Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-33 7.8.3 Assigning a Classification to a VID To assign a Classification to a VID, proceed as follows: 1. Use the arrow keys to highlight the VID (VLAN identification) field. 2. Type in the appropriate VID. Press ENTER....

Protocol Port Configuration Screen 7-34 802.1Q VLAN Configuration Menu Screens 7.8.4 Deleting Line Items All, or one or more, line items can be deleted as follows: Deleting All Classification Rules To delete all the Classification Rules in the top half of the screen, use the arrow keys to highlight ...

Protocol Port Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-35 • Add ports to the VLAN Forwarding List of the SmartSwitch device. How to Access Use the arrow keys to highlight the line item of interest on the VLAN Classification Configuration screen and press ENTER. The Protocol Port...

Protocol Port Configuration Screen 7-36 802.1Q VLAN Configuration Menu Screens Field Descriptions Refer to Table 7-10 for a functional description of each screen field. Table 7-10 Protocol Port Configuration Screen Field Descriptions Use this field … To … Classification Rule Field(Read-Only) See the...

Protocol Port Configuration Screen 802.1Q VLAN Configuration Menu Screens 7-37 7.9.1 Assigning Ports to a VID/Classification The following procedures describe how to • assign one or more ports to a Classification Rule, • set all ports simultaneously to a Classification Rule, or • enable all selected...

Protocol Port Configuration Screen 7-38 802.1Q VLAN Configuration Menu Screens Assigning VID/Classification to Port VLAN Lists 1. Use the arrow keys to highlight the SET PORTS TO VLAN FORWARDING command field. 2. Press the SPACE bar to toggle the SET PORTS TO VLAN FORWARDING command field to YES or ...

802.1p Configuration Menu Screens 8-1 8 802.1p Configuration Menu Screens This chapter describes the 802.1p Configuration Menu screen and the following screens that may be selected from its menu: • Port Priority Configuration screen ( Section 8.2 ) • Traffic Class Information screen ( Section 8.3 ) ...

802.1p Configuration Menu Screen 8-2 802.1p Configuration Menu Screens 8.1 802.1p CONFIGURATION MENU SCREEN When to Use To select the screens used for setting port priority, priority classifications, or configuring rate limiting. How to Access Use the arrow keys to highlight the 802.1p CONFIGURATION...

802.1p Configuration Menu Screen 802.1p Configuration Menu Screens 8-3 Menu Descriptions Refer to Table 8-1 for a functional description of each menu item. Table 8-1 802.1p Configuration Menu Screen Menu Item Descriptions Menu Item Screen Function PORT PRIORITY CONFIGURATION Used to view or change t...

Port Priority Configuration Screen 8-4 802.1p Configuration Menu Screens 8.2 PORT PRIORITY CONFIGURATION SCREEN When to Use To set the priority (0 through 7) on each port. A port receiving a frame without priority information in its tag header is assigned a priority according to the priority setting...

Port Priority Configuration Screen 802.1p Configuration Menu Screens 8-5 Screen Example Figure 8-2 Port Priority Configuration Screen Field Descriptions Refer to Table 8-2 for a functional description of each screen field. RETURN 3650-011_41 SAVE EXIT Set : [ INDIVIDUAL ] PREVIOUS NEXT Port # 1 2 3 ...

Port Priority Configuration Screen 8-6 802.1p Configuration Menu Screens 8.2.1 Setting Switch Port Priority Port-by-Port To set the default port priority on a particular port, proceed as follows: 1. Use the arrow keys to highlight the Set field. 2. Press the SPACE bar to step to the INDIVIDUAL setti...

Traffic Class Information Screen 802.1p Configuration Menu Screens 8-7 8.2.2 Setting Switch Port Priority on All Ports To set the port priority on all ports simultaneously, proceed as follows: 1. Use the arrow keys to highlight the Set field. 2. Press the SPACE bar to step to the ALL PORTS setting. ...

Traffic Class Information Screen 8-8 802.1p Configuration Menu Screens How to Access Use the arrow keys to highlight the TRAFFIC CLASS INFORMATION menu item on the 802.1p Configuration Menu screen and press ENTER. The Traffic Class Information screen, Figure 8-3 , displays. Screen Example Figure 8-3...

Traffic Class Information Screen 802.1p Configuration Menu Screens 8-9 Field Descriptions Refer to Table 8-3 for a functional description of each screen field. Table 8-3 Traffic Class Information Screen Field Descriptions Use this field… To… Priority(Read-Only) View eight priority levels of a port t...

Traffic Class Configuration Screen 8-10 802.1p Configuration Menu Screens 8.4 TRAFFIC CLASS CONFIGURATION SCREEN When to Use To change the Traffic Class setting of one or more priorities on each port. The new Traffic Class settings may be applied only to the port selected or to all ports, simultaneo...

Traffic Class Configuration Screen 802.1p Configuration Menu Screens 8-11 Field Descriptions Refer to Table 8-4 for a functional description of each screen field. 8.4.1 Assigning the Traffic Class to Port Priority To map the Traffic Class to Priority and apply it to either the selected port only or ...

Transmit Queues Configuration Screen 8-12 802.1p Configuration Menu Screens 4. To save and apply the settings to only the port shown on the screen, proceed to step 5. To save the Traffic Class selections and apply them to all front panel Ethernet ports, proceed to step 6. 5. Use the arrow keys to hi...

Transmit Queues Configuration Screen 802.1p Configuration Menu Screens 8-13 How to Access Use the arrow keys to highlight the TRANSMIT QUEUES CONFIGURATION menu item on the 802.1p Configuration Menu screen and press ENTER. The Transmit Queues Configuration screen, Figure 8-5 , displays. Screen Examp...

Transmit Queues Configuration Screen 8-14 802.1p Configuration Menu Screens Field Descriptions Refer to Table 8-5 for a functional description of each screen field. Table 8-5 Transmit Queues Configuration Screen Field Descriptions Use this field … To… Current Queueing Mode (Toggle) Toggle between th...

Transmit Queues Configuration Screen 802.1p Configuration Menu Screens 8-15 8.5.1 Setting the Current Queueing Mode To set the current queueing mode for a particular port, proceed as follows: 1. Use the arrow keys to highlight the Port field. 2. Press the SPACE bar to step to the appropriate port nu...

Priority Classification Configuration Screen 8-16 802.1p Configuration Menu Screens 8.6 PRIORITY CLASSIFICATION CONFIGURATION SCREEN When to Use To perform the following functions: • Display the current Priority, Classification, and Description entries of each classification rule. • Assign prioritie...

Priority Classification Configuration Screen 802.1p Configuration Menu Screens 8-17 Screen Example Figure 8-6 Priority Classification Configuration Screen Field Descriptions Refer to Table 8-6 for a functional description of each screen field. Table 8-6 Priority Classification Configuration Screen F...

Priority Classification Configuration Screen 802.1p Configuration Menu Screens 8-19 Table 8-7 provides a list of the Classifications that can be selected in the Classification field and the associated subclassifications. Table 8-7 Classification List Classification Subclassification and Options Cust...

Priority Classification Configuration Screen 802.1p Configuration Menu Screens 8-21 Dest IP Address New IP TOS:- NO CHANGE- TOS=PID- CUSTOM> IP Address: 000.000.000.000 TOS: Value = 0x00 (Range: 0 - 255) Mask: 000.000.000.000 Bil IP Address New IP TOS:- NO CHANGE- TOS=PID- CUSTOM> IP Address: ...

Priority Classification Configuration Screen 8-22 802.1p Configuration Menu Screens Src UDP Port New IP TOS:- NO CHANGE- TOS=PID- CUSTOM> SameSameSameSameSameSameSameSameSameSameSameSameSameSameSameSame IP UDP Port: - FTP Data TOS: Value = 0x00 (Range: 0 - 255) - FTP- BOOTP Server- BOOTP Client- ...

Priority Classification Configuration Screen 802.1p Configuration Menu Screens 8-25 IP Fragments 2 New IP TOS:- NO CHANGE- TOS=PID- CUSTOM> Start: 00000 TOS: Value = 0x00 (Range: 0 - 255) End: 00000 Dest UDP Range New IP TOS:- NO CHANGE- TOS=PID- CUSTOM> Start: 00000 TOS: Value = 0x00 (Range: ...

Priority Classification Configuration Screen 8-26 802.1p Configuration Menu Screens 8.6.1 Classification Precedence Rules ¬ When there are multiple classifications assigned to a SmartSwitch device, the SmartSwitch device must determine which classification takes precedence according to the Classific...

Priority Classification Configuration Screen 802.1p Configuration Menu Screens 8-29 The following example shows how the precedence concept can be applied: Example A network administrator has defined the following two classifications involving priorities: • All frames with an IP TOS value of AA (Laye...

Priority Classification Configuration Screen 8-30 802.1p Configuration Menu Screens The IP TOS Rewrite parameters are set using the Priority Classification screen. The screen enables you to configure the new IP TOS field for any IP frame classification. A selection field is displayed for all support...

Priority Classification Configuration Screen 802.1p Configuration Menu Screens 8-31 6. Press the SPACE bar to step to the appropriate protocol. In some cases, there is only one selection and a value needs to be entered. This is indicated by bold zeros. Table 8-7 lists the possible selections associa...

Protocol Port Configuration Screen 8-32 802.1p Configuration Menu Screens 4. After the lines are marked, use the arrow keys to highlight the DEL MARKED command field. 5. Press ENTER. The marked line items are deleted and the DEL MARKED command is changed back to DEL ALL. 8.7 PROTOCOL PORT CONFIGURAT...

Protocol Port Configuration Screen 802.1p Configuration Menu Screens 8-33 Field Descriptions Refer to Table 8-9 for a functional description of each screen field. Table 8-9 Protocol Port Configuration Screen Field Descriptions Use this field… To… Classification Rule(Read-Only) See the Classification...

Protocol Port Configuration Screen 8-34 802.1p Configuration Menu Screens 8.7.1 Assigning Ports to a PID/Classification To assign one or more ports, or all ports simultaneously, to a PID/Classification (Classification Rule), proceed as follows: Assigning One or More Ports Individually 1. Use the arr...

Protocol Port Configuration Screen 802.1p Configuration Menu Screens 8-35 Example This example illustrates how to prioritize network traffic using classification rules. In this example, illustrated in Figure 8-9 , the ABC Company wants to prioritize traffic to their SAP server and Mail server, so th...

Protocol Port Configuration Screen 8-36 802.1p Configuration Menu Screens Switch 1 The following settings are done using the Priority Classification Configuration screen to assign the classification to the priority. Then the Protocol Port Configuration screen is used to assign the ports to the appro...

Rate Limiting Configuration Screen 802.1p Configuration Menu Screens 8-37 8.8 RATE LIMITING CONFIGURATION SCREEN When to Use To limit the rate of traffic entering and leaving the SmartSwitch device on a per port/priority basis. Up to three inbound rules and three outbound rules can be programmed per...

Rate Limiting Configuration Screen 8-38 802.1p Configuration Menu Screens Screen Example Figure 8-10 Rate Limiting Configuration Screen Field Descriptions Refer to Table 8-10 for a functional description of each screen field. Table 8-10 Rate Limiting Configuration Screen Field Descriptions Use this ...

Rate Limiting Configuration Screen 802.1p Configuration Menu Screens 8-39 Max Traffic Rate(Read-Only) See the maximum traffic rate set for each port entry. There can be up to four entries (two for Inbound and two for Outbound traffic) for the same port. However, there must be a different priority fo...

Rate Limiting Configuration Screen 8-40 802.1p Configuration Menu Screens Priority List– bottom of screen (Selectable) Assign one or more priorities to the port being configured. The settings available are 0, 1, 2, 3, 4, 5, 6, 7, or ALL. When the Priority List is highlighted, the SPACE bar is used t...

Rate Limiting Configuration Screen 802.1p Configuration Menu Screens 8-41 8.8.1 Configuring a Port The following describes how to configure a port using the Rate Limiting Configuration screen: 1. To enter a Port Type, proceed to step 2 . To enter a port number, proceed as follows: a. Use the arrow k...

Rate Limiting Configuration Screen 8-42 802.1p Configuration Menu Screens 2. To enter a Port Type, proceed as follows: a. Use the arrow keys to highlight the Port field (near the bottom of the screen) and press the SPACE bar. Port Number changes to Port Type and the field below it changes to [all 10...

Rate Limiting Configuration Screen 802.1p Configuration Menu Screens 8-43 11. If Inbound or Outbound rate limiting entries are to be configured on other ports on the device, repeat steps 1 through 10 to configure each port. Any combination of Inbound and Outbound entries may be configured per port w...

Rate Limiting Configuration Screen 8-44 802.1p Configuration Menu Screens 8.8.3 More About Rate Limiting Rate Limiting enables Service Providers in Multi-Dwelling-Unit (MDU) and similar environments to offer varied bandwidth to customers using low cost Ethernet connections. Another solution for the ...

Layer 3 Extensions Menu Screens 9-1 9 Layer 3 Extensions Menu Screens This chapter describes the Layer 3 Extensions Menu screen and the IGMP/VLAN Configuration screen ( Section 9.2 ). Screen Navigation Path Password > Device Menu > Device Configuration Menu > Layer 3 Extensions Menu 9.1 LAY...

Layer 3 Extensions Menu Screen 9-2 Layer 3 Extensions Menu Screens Screen Example Figure 9-1 Layer 3 Extensions Menu Screen Menu Descriptions Refer to Table 9-1 for a functional description of each menu item (at this time there is only one menu item). Table 9-1 Layer 3 Extensions Menu Screen Menu It...

IGMP/VLAN Configuration Screen Layer 3 Extensions Menu Screens 9-3 9.2 IGMP/VLAN CONFIGURATION SCREEN When to Use The IGMP/VLAN Configuration screen, Figure 9-2 , is used to enable or disable IGMP (Internet Group Management Protocol, RFC 2236) on selected VLANs, or globally on all VLANs that are ava...

IGMP/VLAN Configuration Screen 9-4 Layer 3 Extensions Menu Screens Screen Example Figure 9-2 IGMP/VLAN Configuration Screen Field Descriptions Table 9-2 describes each field of the IGMP/VLAN Configuration screen. Table 9-2 IGMP/VLAN Configuration Screen Field Descriptions Use this field… To… IGMP Ve...

IGMP/VLAN Configuration Screen Layer 3 Extensions Menu Screens 9-5 Query Interval (Modifiable) See or change the query interval time. If the switch is the querier, the value in the Query Interval field indicates how often IGMP Host-Query frames are transmitted on the VLAN selected in the VLAN ID fie...

IGMP/VLAN Configuration Screen Layer 3 Extensions Menu Screens 9-7 9.2.1 IGMP/VLAN Configuration Procedure To set up IGMP protocol for VLANs, proceed as follows: 1. Use the arrow keys to highlight the VLAN ID field, and use the SPACE bar to step through the VLAN choices to find the correct VLAN to c...

configuration of the chosen VLAN. (DELETE will remove the IGMP configuration of the VLAN.) 4. Use the arrow keys to highlight the IGMP Version field. Then use the SPACE bar to select the proper IGMP version for the VLAN shown in the VLAN ID field. 5. Use the arrow keys to highlight the remaining fie...

Device Statistics Menu Screens 10-1 10 Device Statistics Menu Screens This chapter describes how to use the Device Statistics Menu screen and the following screens that may be selected from its menu: • Switch Statistics screen ( Section 10.2 ) • Interface Statistics screen ( Section 10.3 ) • RMON St...

Device Statistics Menu Screen 10-2 Device Statistics Menu Screens How to Access Use the arrow keys to highlight the DEVICE STATISTICS menu item on the Device Menu and press ENTER. The Device Statistics Menu screen, Figure 10-1 , displays. Screen Example Figure 10-1 Device Statistics Menu Screen Menu...

Switch Statistics Screen Device Statistics Menu Screens 10-3 10.2 SWITCH STATISTICS SCREEN When to Use To obtain switch statistics about the number of frames received, transmitted, filtered, and forwarded by each switch port. How to Access Use the arrow keys to highlight the SWITCH STATISTICS menu i...

Switch Statistics Screen 10-4 Device Statistics Menu Screens Screen Example Figure 10-2 Switch Statistics Screen Field Descriptions Refer to Table 10-2 for a functional description of each screen field. Table 10-2 Switch Statistics Screen Field Descriptions Use this field… To… Port # (Read-Only) Ide...

Interface Statistics Screen Device Statistics Menu Screens 10-5 10.3 INTERFACE STATISTICS SCREEN When to Use To obtain the MIB-II statistics of all the switch interfaces with the exception of an installed HSIM or VHSIM. How to Access Use the arrow keys to highlight the INTERFACE STATISTICS menu item...

Interface Statistics Screen 10-6 Device Statistics Menu Screens Screen Example Figure 10-3 Interface Statistics Screen Field Descriptions Refer to Table 10-3 for a functional description of each screen field. Table 10-3 Interface Statistics Screen Field Descriptions Use this field… To… Interface (Re...

Interface Statistics Screen Device Statistics Menu Screens 10-7 InUnicast (Read-Only) See the total number of frames that have been received that were sent to a single address. InNonUnicast (Read-Only) See the total number of frames that have been received that were delivered to a broadcast or multi...

Interface Statistics Screen 10-8 Device Statistics Menu Screens 10.3.1 Displaying Interface Statistics To display the statistics for any interface, proceed as follows: 1. Use the arrow keys to highlight the Interface [nn] field at the bottom of the screen. 2. Press the SPACE bar to increment (or pre...

RMON Statistics Screen Device Statistics Menu Screens 10-9 10.4 RMON STATISTICS SCREEN When to Use To obtain RMON statistics for each interface, on an interface-by-interface basis. How to Access Use the arrow keys to highlight the RMON STATISTICS field on the Device Statistics Menu screen and press ...

RMON Statistics Screen 10-10 Device Statistics Menu Screens Table 10-4 RMON Statistics Screen Field Descriptions Use this field… To… RMON Index (Read-Only) See the current Ethernet interface for which statistics are being shown. The SmartSwitch device has an embedded RMON agent that gathers statisti...

RMON Statistics Screen Device Statistics Menu Screens 10-11 Oversized Pkts (Read-Only) See the number of frames received whose size exceeded 1518 data bytes, not including preamble, but have a valid CRC. Fragments (Read-Only) See the number of received frames that are not the minimum number of bytes...

RMON Statistics Screen 10-12 Device Statistics Menu Screens 10.4.1 Displaying RMON Statistics To display the statistics for any index, proceed as follows: 1. Use the arrow keys to highlight the Index [nn] field at the bottom of the screen. 2. Press the SPACE bar to increment (or press the DEL [delet...

Network Tools Screens 11-1 11 Network Tools Screens This chapter describes the Network Tools Help screen and how to use it and the Network Tools commands to access and manage network devices. An example of each command is also included. Screen Navigation Paths Password > Device Menu > Network ...

Network Tools 11-2 Network Tools Screens Screen ExampleNetwork Tools Help Screen The Network Tools functions are performed using a series of commands. Entering commands in Network Tools involves typing the command to be executed at the Network Tools prompt, adding any desired or required extensions,...

Built-in Commands 11-4 Network Tools Screens 11.2 BUILT-IN COMMANDS The built-in commands listed in this section activate functions on the LM managed device or devices being accessed through Network Tools. command Description: Briefly describes the command and its uses. Syntax: Shows the required co...

Built-in Commands 11-6 Network Tools Screens arp Description: Provides access to the ARP (Address Resolution Protocol) cache, enabling you to view cache data, delete entries, or add a static route. Super-user access is required to delete an entry or add a static route. Each ARP cache entry lists the...

Built-in Commands Network Tools Screens 11-7 arp_learn Description: Sets how the ARP cache entry will be affected under different conditions as described in the options below, and displays current ARP cache settings. Syntax: arp_learn [normal | limited | status] Options: normal – Changes the ARP cac...

Built-in Commands 11-8 Network Tools Screens cdp Description: Enables, disables or displays the status of the CDP Discovery Protocol. Syntax: cdp [enable/disable/status] Options: enable — Enables CDP discovery protocol on the device. disable — Disables CDP discovery prototol on the device. status — ...

Built-in Commands Network Tools Screens 11-9 dynamic_egress Description: Enables, disables or displays the status of the dynamic_egress control function. The command requires a corresponding VLAN Identifier (VID). The dynamic_egress control function allows or disallows VLANs to be dynamically added ...

Built-in Commands 11-10 Network Tools Screens Examples: -> dynamic_egress status 1 Dynamic Egress Disabled for VLAN ID 0x0001 -> dynamic_egress enable 1 Dynamic Egress Enabled for VLAN ID 0x0001 -> dynamic_egress disable 1 Dynamic Egress Disabled for VLAN ID 0x0001 ev Description: Enables o...

Built-in Commands Network Tools Screens 11-11 Options: ENABLE – Enables Group or events or all DISABLE – Disables Group or events or all Commands to Control Logging Functions: ev STARt [Logging] [Trapping] – begin logging events/traps ev STOp [Logging] [Trapping] – stop logging events/traps ev Clear...

Built-in Commands 11-12 Network Tools Screens gigabit_port_mode Description: Configures or displays the status of Gigabit Ethernet ports. Changing the mode will cause a reset and loss of all data in NVRAM with the exception of the IP Address and Subnet IP Address. NOTE: This field is displayed only ...

Built-in Commands Network Tools Screens 11-13 lg_frame_admin Description: Enables large frame support on a per port basis. allowing the user to determine if large frames can be forwarded out a particular port. Syntax: lg_frame_admin [ set ] [ LARGE | FRAG_IF_POSS | SMALL | AUTO ] [ PORT | ALL_BPLANE...

Built-in Commands 11-14 Network Tools Screens link_trap Description: Enables, disables, or displays the status of link traps on one or all ports. Syntax: link_trap [enable/disable/status] <PORT/all> Options: enable — Enables a link trap. disable — Disables a link trap. status — Displays link t...

Built-in Commands Network Tools Screens 11-15 Examples: -> loopback_detect enable -> loopback_detect disable -> loopback_detect state Loopback_detect is disabled. maclock Description: Configures the MAC locking feature per port. When enabled, either a static MAC is locked to the port, or th...

Built-in Commands 11-16 Network Tools Screens Syntax:(Continued) maclock set enable [ port# | all | global ] Enables MAC locking globally or on one or more ports. When enabled and configured for a specific MAC address and port string, this locks a port so that only one end station address is allowed...

Built-in Commands Network Tools Screens 11-17 Options: port# | all — Applies MAC locking parameters to a specific ports or to all ports on the device. global — Applies MAC locking parameters globally. firstarrival — Displays MAC locking information about first arrival end stations connected to the d...

Built-in Commands 11-18 Network Tools Screens Examples:(Continued) -> maclock set enable global MAC locking is globally enabled. -> maclock set disable global MAC locking is globally disabled. -> maclock set 00:a0:c9:0d:32:11 3 create MAC_locking for MAC 00:A0:C9:0D:32:11 created on Port 3....

Built-in Commands Network Tools Screens 11-19 Example: -> netstat -i Interface + Description MTU Speed Admin Oper MAC Addr #1 (ethernet - csmacd) 1514 10000000 up up 0x00 0x00 0x1d 0x07 0x50 0x0e #2 (ethernet - csmacd) 1514 10000000 up up 0x00 0x00 0x1d 0x07 0x50 0x0f #3 (ethernet - csmacd) 1514 ...

Built-in Commands 11-20 Network Tools Screens passiveStp Description: Enables, disables, or displays the status of Passive Mode Spanning Tree on the device. Passive Mode Spanning tree allows ports on leaf bridges to transition very quickly and not invoke a global network re-span through requesting r...

Built-in Commands Network Tools Screens 11-21 policy Description: Displays the policy table and configures policy-port mappings. Syntax: policy show profile <profile_index> Displays the policy table, including policy index, policy name, policy status (enable/disable), and PVID and priority ove...

Built-in Commands Network Tools Screens 11-23 radius Description: Enables, disables, and configures RADIUS authentication, which can only be used when the client has been properly configured and enabled. When the RADIUS Client is not enabled, the legacy password authentication will run as before. Fo...

Built-in Commands 11-24 Network Tools Screens Options: radius — Shows RADIUS help. radius status — Shows all RADIUS client settings. radius [enable | disable] — Enables or disables the RADIUS Client. radius prim_ip <server ip> — Shows <sets> the primary RADIUS server’s IP, in decimal-dot...

Built-in Commands Network Tools Screens 11-25 Options:(Cont’d) radius prim_secret — Sets the primary RADIUS server’s shared secret. radius sec_secret — Sets the secondary RADIUS server’s shared secret. NOTES: The secret is NOT encrypted in transit; if this command is used over TELNET then the secret...

Built-in Commands 11-26 Network Tools Screens Examples:(Cont’d) NOTE: The following shows examples of when 3, 7, and 32 characters are entered as the secret code (16 to 32 characters are recommended). -> radius sec_secret Enter Secret (max 32): *** Confirm Secret: *** # ERROR : secret minimum len...

Built-in Commands Network Tools Screens 11-27 Examples: -> rate_limit_mode status Rate Limit Mode is: High Range (100Kbps - 1 Gbps). -> rate_limit_mode low_range This will reset board : Are you *SURE* ? -> rate_limit_mode high_range This will reset board : Are you *SURE* ? reset Description...

Built-in Commands 11-28 Network Tools Screens sat_size Description: Displays the current setting or sets the size of the Source Address Table (Forwarding Database) on the device to either 8000 or 16000 entries. The default is 8000 entries. When set to 16000, 400 Layer 2/3/4 VLAN Classification and P...

Built-in Commands Network Tools Screens 11-29 Options: PROTOCOL — Specifies a protocol for which information will be displayed. TABLE — Specifies a type of table to display. fid – Show MAC addresses for the filter database identifier (fdbId). address – Show the address (mac) if it is known by the de...

Built-in Commands 11-30 Network Tools Screens soft_reset Description: Restarts the software image, which restores the user configuration settings from NVRAM. The user will be queried to confirm the reset command to ensure against unwanted resets. TIP: The Network Tools connection to the device will ...

Built-in Commands Network Tools Screens 11-31 stpForceVersion Description: Puts Spanning Tree into STP compatibility mode (0) or the default RSTP mode (2). Syntax: stpForceVersion [ 0 | 2 | status ] Options: stpForceVersion 0 – Indicates STP compatibility. Enable stpForceVersion 0 only if the user d...

Built-in Commands 11-32 Network Tools Screens stpLegacyPathCost Description: Enables or disables the use of 802.1D or 802.1t Path Cost bridging values on the device. The default is legacy 802.1D standard Path Cost values. NOTE: When connecting ports between devices, it is recommended that the device...

Built-in Commands Network Tools Screens 11-33 Examples: To set the device to use the 802.1D legacy path costs, enter: -> stpLegacyPathCost enable To set the device to use the 802.1t path costs (default setting), enter: -> stpLegacyPathCost disable To determine if the device is currently operat...

Built-in Commands 11-34 Network Tools Screens stpPort Description: Enables, disables, or displays which physical ports are enabled as Spanning Tree ports. This command does not apply to virtual interfaces such as ATM. To enable, disable, or view the status of ATM ports, use the atm_stp_state command...

Built-in Commands Network Tools Screens 11-35 Example: stpRealTimeMsgAge disable disabled suppress_topology_traps Description: Enables or disables the generation of topology traps on inter switch links. Only inter switch link ports that transition to forwarding or blocking cause the switch to issue ...

Built-in Commands 11-36 Network Tools Screens timed_soft_reset Description: Configures a soft reset in number of seconds, or displays when a soft reset will occur. The reset_nv and dont_reset_nv commands tell the timed reset if non-volatile memory should be reset or not. If reset non_volatile is cho...

Built-in Commands Network Tools Screens 11-37 Options: status — Displays the current timed reset setting. t (seconds) — Specifies the number of seconds until the device will be reset. reset_nv — Resets non-volatile memory. dont_reset_nv — Does not reset non-volatile memory. Examples: -> timed_res...

Built-in Commands 11-38 Network Tools Screens vrrpPort Description: Enables, disables, or displays the status of Virtual Router Redundancy Protocol (VRRP) on front panel Ethernet or Fast Ethernet ports. When the link on a VRRP Port goes down or up, the database is purged. Then a notification is sent...

Example, Effects of Aging Time on Dynamic Egress Network Tools Screens 11-39 11.3 EXAMPLE, EFFECTS OF AGING TIME ON DYNAMIC EGRESS This section provides an example of how aging time affects the dynamic recognition of frames from a user device on a port. In this example, assume that a rule set on Por...

Special Commands 11-40 Network Tools Screens Solving the Problem In this example, Switch 1 (S1) has already been configured with a default VLAN 0001 associated with Filter Database Identifier (FDB ID) 0001 as the Port VLAN Identifier (PVID) on all ports. The following additional steps are required t...

VLAN Operation and Network Applications 12-1 12 VLAN Operation and Network Applications This chapter provides the following information: • Definition of VLANs ( Section 12.1 ) • Types of VLANs ( Section 12.2 ) • Benefits and Restrictions ( Section 12.3 ) of VLANs • VLAN Terms ( Section 12.4 ) • VLAN...

Defining VLANs 12-2 VLAN Operation and Network Applications 12.1 DEFINING VLANs A Virtual Local Area Network is a group of devices that function as a single Local Area Network segment (broadcast domain). The devices that make up a particular VLAN may be widely separated, both by geography and locati...

Benefits and Restrictions 12-4 VLAN Operation and Network Applications 12.3 BENEFITS AND RESTRICTIONS The primary benefit of the 802.1Q VLAN technology is that it provides localization of traffic. This function also offers improvements in security and performance to stations assigned to a VLAN. Whil...

VLAN Terms VLAN Operation and Network Applications 12-5 Filtering Database Identifier (FDB ID) Addressing information that the device learns about a VLAN is stored in the filtering database assigned to that VLAN. Several VLANs can be assigned to the same FDB ID to allow those VLANs to share addressi...

VLAN Terms 12-6 VLAN Operation and Network Applications 1Q Connection (previously referred to as a 1Q Trunk) A connection between 802.1Q switches that passes only traffic with a VLAN Tag Header inserted in each frame. All VLANs in the port’s Port VLAN List are configured to transmit all frames as ta...

VLAN Operation VLAN Operation and Network Applications 12-7 12.5 VLAN OPERATION The following sections describe the operation of a VLAN switch and discusses the operations that a VLAN switch performs in response to both normal and VLAN-originated network traffic. 12.5.1 Description The 802.1Q VLAN o...

VLAN Switch Operation 12-8 VLAN Operation and Network Applications 12.6.1 Defining a VLAN A VLAN must exist and have a unique identity before any ports or rules can be assigned to it. The Administrator defines a VLAN by assigning it a unique identification number (the VLAN ID), a filter database ass...

VLAN Switch Operation VLAN Operation and Network Applications 12-9 Figure 12-2 depicts the inside of a switch with six ports, numbered one through six. The switch has been configured to associate VLAN A and B with Filtering Database Identifier (FDB ID) 2, VLAN C and D with FDB ID 3, and VLAN E with ...

VLAN Switch Operation 12-10 VLAN Operation and Network Applications 12.7.1 Receiving Frames from VLAN Ports When a switch is placed in 802.1Q Operational Mode, every frame received by the switch must belong, or be assigned, to a VLAN. Untagged Frames The switch receives a frame from Port 1 and exami...

VLAN Configuration VLAN Operation and Network Applications 12-11 12.7.2.2 Known Unicasts When a VLAN switch receives a frame with a known MAC address as its destination address, the action taken by the switch to determine how the frame is transmitted depends on the VLAN, the VLAN associated FDB ID, ...

VLAN Configuration 12-12 VLAN Operation and Network Applications 12.8.2 Switch Without VLANs When the switch is powered up, the switch uses its default settings to switch frames like an 802.1Q switch. In this default configuration, all ports are a member of the default VLAN (VLAN 1) including the vi...

VLAN Configuration VLAN Operation and Network Applications 12-13 Figure 12-4 Switch Management with VLANs To set up the switch shown in Figure 12-4 to establish a management VLAN on port 1, use the following process: 1. Use the Static VLAN Configuration screen to define a new VLAN named “Management ...

Summary of VLAN Local Management VLAN Operation and Network Applications 12-15 12.9 SUMMARY OF VLAN LOCAL MANAGEMENT The VLAN configuration process is an extension of normal Local Management operations. A series of Local Management screens provides access to the functions and commands necessary to a...

Quick VLAN Walkthrough 12-16 VLAN Operation and Network Applications 12.10 QUICK VLAN WALKTHROUGH The procedures below provide a short tutorial walkthrough that presents each of the steps necessary to configure a new Static VLAN. These steps include the following: • Assigning a VLAN ID and VLAN Name...

Quick VLAN Walkthrough VLAN Operation and Network Applications 12-17 Figure 12-6 Walkthrough Stage One, Static VLAN Configuration Screen Assigning Ports to the VLAN Egress list 1. Use the arrow keys to highlight the line in the list that has VLAN ID 2. As shown in Figure 12-6 , the Static VLAN Egres...

Quick VLAN Walkthrough 12-18 VLAN Operation and Network Applications Figure 12-7 Walkthrough Stage Two, Port 3 Egress Setting Now that Port 3 belongs to VLAN 2, we will designate one port as a trunk port for a connection to another VLAN-aware switch. This trunk port will carry tagged frames from all...

Quick VLAN Walkthrough VLAN Operation and Network Applications 12-19 Figure 12-8 Walkthrough Stage Three, Port 10 Egress Setting Configuring the Port Parameters Now that the TEST VLAN and the trunk connection are set up, we can proceed to set the port parameters for ports 3 and 10, as follows: 1. On...

Quick VLAN Walkthrough 12-20 VLAN Operation and Network Applications 7. Leave the GVRP STATUS field for Port 3 in the default setting of ENABLED. This sets Port 10 as a GVRP port to receive registrations of dynamically created VLANs. 8. Leave the PVID field for Port 10 set in the default setting of ...

Examples VLAN Operation and Network Applications 12-21 This effectively completes the configuration of a single VLAN, assigning it to a port, and configuring the switch to forward the frames received on that port to a trunk port. The trunk port in turn forwards the frames as tagged to another switch...

Example 1, Single Switch Operation 12-22 VLAN Operation and Network Applications 12.12.1 Solving the Problem To set up this switch, users will be assigned to two new VLANs, red stations to the Red VLAN, and blue stations to the Blue VLAN. The information below describes how the switch is configured ...

Example 1, Single Switch Operation VLAN Operation and Network Applications 12-23 Figure 12-11 Switch Configured for VLANs The switch will now classify each frame received as belonging to either the Red or Blue VLANs. Traffic from one VLAN will not be forwarded to the members of the other VLAN, and a...

Example 2, VLANs Across Multiple Switches 12-24 VLAN Operation and Network Applications 5. The switch adds the source MAC address and VLAN for station R2 to its Source Address Table in FDB ID 2, and checks the Source Address Table for the destination MAC address given in the frame. The switch finds ...

Example 2, VLANs Across Multiple Switches VLAN Operation and Network Applications 12-25 Figure 12-12 Example 2, VLANs Across Multiple Switches Floor 1 Floor 2 Floor 3 Floor 4 1 Bridge 1 Bridge 2 Bridge 3 Bridge 4 Redco Redco Blue Industries Red VLAN Red VLAN Red VLAN Red VLAN Blue VLAN Blue VLAN Blu...

Example 2, VLANs Across Multiple Switches 12-26 VLAN Operation and Network Applications 12.13.1 Solving the Problem To solve the problem in this example, the users are assigned to VLANs using Switch 4 and Switch 2 as shown in Figure 12-12 . Redco users are assigned to the Red VLAN and Blue Industrie...

Example 2, VLANs Across Multiple Switches VLAN Operation and Network Applications 12-27 4. Port 4 is configured as a trunk port by setting the Egress type for both VLAN ID 2, Port 4 and VLAN ID 3, Port 4 to TAGGED using the Static VLAN Egress Configuration screen. This means that these ports will on...

Example 2, VLANs Across Multiple Switches 12-28 VLAN Operation and Network Applications • Port 3 is set as follows: PVID: 2Acceptable Frame Types: ADMIT ALL FRAMESIngress Filtering: ENABLEDGVRP Status: DISABLED This causes the switch to classify all untagged frames received as belonging to the VLAN ...

Example 2, VLANs Across Multiple Switches VLAN Operation and Network Applications 12-29 12.13.2 Frame Handling The following describes how, when User A attempts to log on to the File Server on Bridge 4, the frames from User A are classified on Switch 4 and traverse the network. In this example, the ...

Example 2, VLANs Across Multiple Switches 12-30 VLAN Operation and Network Applications Figure 12-14 Transmitting to Switch 4 3. When Switch 2 receives the tagged frame on its Port 2, it checks the frame’s VLAN Tag Header and determines that the frame is classified as belonging to the Red VLAN, and ...

Example 2, VLANs Across Multiple Switches VLAN Operation and Network Applications 12-31 Figure 12-15 Transmitting to Bridge 4 4. The File Server responds with a unicast frame to User A. All switches between the File Server and User A have an entry in their respective Source Address Tables identifyin...

Example 3, Filtering Traffic According to a Layer 4 Classification Rule 12-32 VLAN Operation and Network Applications 12.14 EXAMPLE 3, FILTERING TRAFFIC ACCORDING TO A LAYER 4 CLASSIFICATION RULE This example illustrates how to filter out broadcast transmissions at Layer 4 from other parts of a netw...

Example 4, Securing Sensitive Information According to Subnet VLAN Operation and Network Applications 12-33 2. The VLAN Classification Configuration screen is used to configure the switch to detect and classify the incoming RIP broadcast frames on Port 25 to the Null VLAN. Since the Null VLAN is not...

Example 5, Using Dynamic Egress to Control Traffic 12-34 VLAN Operation and Network Applications 12.15.1 Solving the Problem In this example, Switch 1 (S1) has already been configured and is operating. To isolate the Finance Department traffic, Subnet 28 will be isolated from the Engineering Departm...

Example 5, Using Dynamic Egress to Control Traffic VLAN Operation and Network Applications 12-35 Figure 12-18 Example 5, Dynamic Egress Application Solving the Problem In this example, Switch 1 (S1) has already been configured with a default VLAN 0001 associated with FDB ID 0001 as the PVID on all p...

Example 6, Locking a MAC Address to a Port Using Classification Rules 12-36 VLAN Operation and Network Applications In this example, the AppleTalk traffic is routed only to AppleTalk users (ports 1, 2, 5, and 6), while IP traffic is allowed to be seen by IP users (ports 3, 4, and 7) and by IP/AppleT...

Example 6, Locking a MAC Address to a Port Using Classification Rules VLAN Operation and Network Applications 12-37 The objective here is to configure S1 so that when it receives a frame on Port 1 from MAC address 00.00.00.00.00.0A, the frame is classified into the Red VLAN. When S1 receives a frame...

Example 6, Locking a MAC Address to a Port Using Classification Rules 12-38 VLAN Operation and Network Applications 2. Assign Port 1 and 2 to the Red VLAN and set the ports to handle untagged frames as follows: • The Red VLAN is selected from the Static VLAN Configuration screen to display the Stati...

Example 6, Locking a MAC Address to a Port Using Classification Rules VLAN Operation and Network Applications 12-39 5. Enter the following settings on the Protocol Port Configuration screen to assign two src MAC address classification rules to Port 1 and add the classification to the Port VLAN List ...

Generic Attribute Registration Protocol (GARP) A-1 A Generic Attribute Registration Protocol (GARP) This appendix describes the switch operation when its ports are operating under the Generic Attribute Registration Protocol (GARP) application – GARP VLAN Registration Protocol (GVRP). A.1 OVERVIEW Th...

How It Works A-2 Generic Attribute Registration Protocol (GARP) A.2 HOW IT WORKS In Figure A-1 , Switch 4, port 1 is registered as being a member of VLAN Blue and then declares this fact out all its ports (2 and 3) to Switch 1 and Switch 2. These two switches register this in the Port VLAN Lists of ...

About IGMP B-1 B About IGMP This appendix provides information about the following: • IGMP Overview ( Section B.1 ) • Supported Features and Functions ( Section B.2 ) • Detecting Multicast Routers ( Section B.3 ) B.1 IGMP OVERVIEW Internet Group Management Protocol (IGMP) is a multicast protocol use...

Supported Features and Functions B-2 About IGMP B.2 SUPPORTED FEATURES AND FUNCTIONS The following lists the features and functions supported when using IGMP: • Runs only when the switch is operating in the 802.1Q mode. • Supports multiple multicast and non-multicast routers on the same VLAN. • Supp...

Detecting Multicast Routers About IGMP B-3 B.3 DETECTING MULTICAST ROUTERS The location of a router needs to be known in order to forward IGMP report frames back to the router. The router(s) send multicast routing protocol frames which get flooded throughout the network. By snooping on these protoco...

Index-1 Index Numerics 1D Connection 12-6 1D Trunk 7-20 1Q Connection 12-6 1Q Trunk 7-20 802.1 Configuration Menu screen 6-2 802.1p Configuration Menu screen 8-2 802.1Q switching mode hierarchy of 3-2 802.1Q VLAN Configuration Menu screen 7-3 802.3ad Aggregator Details screen 5-41 screen fields Admi...

Index-2 MuxReason 5-38 MuxState 5-38 PartnerChangeCount 5-38 PartnerChurnCount 5-38 PartnerChurnState 5-38 Port Instance 5-37 PsyncTransCount 5-38 RxState 5-37 UnknownR 5-37 802.3ad System screen 5-43 screen fields Number of Aggregators 5-44 Number of Ports 5-44 System Identifier 5-44 A Acceptable F...

Index-4 Examples 12-21 Extensible Authentication Protocol 3-15 F FID. See Filtering Database ID Fields command 1-6 display 1-5 event message 1-5 input 1-5 selection 1-5 types 1-5 Filtering Database 12-5 Filtering Database ID 12-5 Filtering Network Traffic According to a Layer 4 Classification Rule 1...