Dell™ PowerConnect™ 54xx Systems User Guide w w w. d e l l . c o m | s u p p o r t . d e l l .
Notes, Cautions and Warnings NOTE: A NOTE indicates important information that helps you make better use of computer. CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. ____________________ Information in this document is subject to change without notice. © 2007–2008 Dell Inc. All rights reserved.
Contents 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 . . . . . . . . . . . . . . . . . . . . . . 13 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 PowerConnect 54xx Series Systems Features General Features . . . . . . . . . . MAC Address Supported Features . Layer 2 Features . . . . . . . . . . VLAN Supported Features . . . . . Spanning Tree Protocol Features . . Link Aggregation . . . . . . . . . . Layer 3 Features . . . . . . .
3 Installing the PowerConnect Device . . . . . . . . . . . . . . . . 31 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Installation Precautions . Site Requirements Unpacking Package Contents. . . Unpacking the Device Mounting the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . . . . . . . . . . 50 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 50 51 51 51 . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Configuring Security Passwords Configuring an Initial Terminal Password Configuring an Initial Telnet Password . . Configuring an Initial SSH Password . . . Configuring an Initial HTTP Password . . Configuring an Initial HTTPS Password .
Configuring System Information Defining General Device Information . . . . . . . . . . . . . . . . . . . 67 . . . . . . . . . . . . . . . . . . . . . . 67 Viewing Device Information . . . . Defining System Time Settings . . . Viewing System Health Information Viewing the Versions Page . . . . . Resetting the Device . . . . . . . . Configuring SNTP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 71 77 79 80 . . . . . . . . . . . . . . . . . . . . . . .
Managing Device Security . . . . . . . . . . . . . . . . . . . . . . . . . . Defining Access Profiles . . . . . . . . Adding an Access Profile . . . . . . . . Defining Authentication Profiles . . . . Assigning Authentication Profiles . . . Managing Passwords . . . . . . . . . . Viewing Active Users . . . . . . . . . . Defining the Local User Databases . . . Defining Line Passwords . . . . . . . . Defining Enable Passwords. . . . . . . Defining TACACS+ Settings . . . . . . .
Managing Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . File Management Overview. Downloading Files . . . . . Uploading Files . . . . . . . Copying Files . . . . . . . . Managing Device Files . . . Defining Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220 221 224 227 229 . . . . . . . . . . . . . . . . . . . . . . . . . 230 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Configuring Address Tables . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing Dynamic Addresses . 298 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 301 Configuring the Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . 303 Defining STP Port Settings . . . . . Defining STP LAG Settings . . . . . Configuring Rapid Spanning Tree . . Configuring Multiple Spanning Tree Defining MSTP Interface Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Viewing RMON Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . Viewing RMON Statistics Group . . . . . Viewing RMON History Control Statistics Viewing the RMON History Table . . . . . Defining Device RMON Events . . . . . . Viewing the RMON Events Log . . . . . . Defining RMON Device Alarms . . . . . . Viewing Charts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 389 392 394 396 399 401 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 404 . . . . . .
. . . . . . . . . . . . . . . . . . . . . . . . 428 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429 Device Memory Specifications Feature Specifications . VLAN . . . . . . . . . . . . . Quality of Service . . . . . . . Layer 2 Multicast . . . . . . . Device Security . . . . . . . . Additional Switching Features Device Management . . . . . System Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429 429 429 429 430 430 430 . . . . . . . . . . . . . . . . . . . . . . . . .
Contents
Introduction CAUTION: Before proceeding, read the release notes for this product. The release notes can be downloaded from support.dell.com. This User Guide contains the information needed for installing, configuring and maintaining the PowerConnect device. PowerConnect 54xx Series Systems The PowerConnect 54xx series systems have two versions: 5424 has 24 Gigabit Ethernet ports, and 5448 has 48 Gigabit Ethernet ports.
Features This section describes the device user-configured features. For a complete list of all updated device features, refer to the latest software version Release Notes. General Features IP Version 6 (IPv6) Support The device functions as an IPv6 compliant Host, as well as an IPv4 Host (also known as dual stack). This allows device operation in a pure IPv6 network as well as in a combined IPv4/IPv6 network.
Back Pressure Support On half-duplex links, the receiving port prevents buffer overflows by occupying the link so that it is unavailable for additional traffic. For information on configuring Back Pressure for ports or LAGs, see "Defining Port Parameters" on page 278 or "Configuring Load Balancing" on page 284. iSCSI Optimization iSCSI is a communication protocol used for sending data between file servers and storage disks. The file servers are called initiators and the disks are called targets.
Static MAC Entries User defined static MAC entries are stored in the Bridging Table. For more information, see "Configuring Address Tables" on page 295. VLAN-aware MAC-based Switching Packets arriving from an unknown source address are sent to the microprocessor, where the source addresses are added to the Hardware Table. Packets addressed to or from this address are more efficiently forwarded using the Hardware Table.
VLAN Supported Features VLAN Support VLANs are collections of switching ports that comprise a single broadcast domain. Packets are classified as belonging to a VLAN based on either the VLAN tag or based on a combination of the ingress port and packet contents. Packets sharing common attributes can be grouped in the same VLAN. For more information, see "Configuring Multiple Spanning Tree" on page 317.
Spanning Tree Protocol Features Spanning Tree Protocol (STP) 802.1d Spanning tree is a standard Layer 2 switch requirement that allows bridges to automatically prevent and resolve L2 forwarding loops. Switches exchange configuration messages using specifically formatted frames and selectively enable and disable forwarding on ports. For more information, see "Configuring the Spanning Tree Protocol" on page 303. Fast Link STP can take up to 30-60 seconds to converge.
• Improved bandwidth granularity • High bandwidth server connectivity LAG is composed of ports with the same speed, set to full-duplex operation. For more information, see "Defining LAG Membership" on page 354. Link Aggregation and LACP LACP uses peer exchanges across links to determine, on an ongoing basis, the aggregation capability of various links, and continuously provides the maximum level of aggregation capability achievable between a given pair of systems.
Device Management Features SNMP Alarms and Trap Logs The system logs events with severity codes and timestamps. Events are sent as Simple Network Management Protocol (SNMP) traps to a Trap Recipient List. For more information on SNMP Alarms and Traps, see "Configuring LLDP and LLDP-MED" on page 181. SNMP Version 1 and Version 2 Simple Network Management Protocol (SNMP) over the UDP/IP protocol.
Command Line Interface Command Line Interface (CLI) syntax and semantics conform as much as possible to common industry practice. CLI is composed of mandatory and optional elements. The CLI interpreter provides command and keyword completion to assist user and shorten typing. Syslog Syslog is a protocol that allows event notifications to be sent to a set of remote servers, where they can be stored, examined and acted upon.
Port Based Authentication (802.1x) Port based authentication enables authenticating system users on a per-port basis via an external server. Only authenticated and approved system users can transmit and receive data. Ports are authenticated via the Remote Authentication Dial In User Service (RADIUS) server using the Extensible Authentication Protocol (EAP). Dynamic VLAN Assignment (DVA) allows network administrators to automatically assign users to VLANs during the RADIUS server authentication.
DHCP Snooping DHCP Snooping expands network security by providing firewall security between untrusted interfaces and DHCP servers. By enabling DHCP Snooping network administrators can differentiate between trusted interfaces connected to end-users or DHCP Servers and untrusted interfaces located beyond the network firewall. For more information, see "Configuring DHCP Snooping" on page 269.
Introduction
Hardware Description Device Port Configurations PowerConnect 54xx Series Systems Front Panel Port Description The PowerConnect 54xx series systems are configured with the following ports: • 24/48 Copper ports — RJ-45 ports designated as 10/100/1000 BaseT Gigabit Ethernet ports • 4 Fiber ports — Designated as Gigabit ports • Terminal port — RS-232 console based port The following figure illustrates the PowerConnect 54xx series systems front panel. Figure 2-1.
PowerConnect Back Panel Port Description The device back panel contains connectors for power, as illustrated in the Figure 2-2. Figure 2-2. Device Back Panel On the device back panel are two power supply connectors and an RS-232 Console port. For general use there is an AC Power Supply connector which is connectable to either 110V or 220V power supplies. The DC Power Supply connector is to connect a Redundant Power Supply (RPS) to be activated automatically in the event of an AC power supply outage.
If both RJ-45 and SFP are present, and a connector is inserted in the SFP port, the SFP port is active, unless the copper connector of the Base-T port of the same number is inserted and has a link. The system can switch from the RJ-45 to the SFP (or vice-versa) without a system reboot or reset. Physical Dimensions The device has the following physical dimensions: • Height — 44 mm (1.73 inch) • Width — 440 mm (17.32 inch) • Depth — 255 mm (10.
SFP LEDs The SFP ports each have one LED marked as LNK. Figure 2-5. SFP Port LED The SFP port LED indications are described in the following table: Table 2-2. SFP Port LED Indications LED Color Description SFP Green Static The port is currently up. Green Flashing The port is currently transmitting or receiving data. OFF The port is currently down. When the SFP port is connected, the Duplex LED on the corresponding copper Combo port is Green.
The following table describes the system LED indications. Table 2-3. System LED Indications LED Color Description Diagnostics (DIAG) Green Flashing The system is currently running a diagnostic test. Green Static The system passed the diagnostic test. Red Static The system failed the diagnostic test. Green Static The device fans are operating normally. Red Static One or more fans are not operating. Green Static The redundant power supply is currently operating.
AC Power Supply Unit The AC power supply unit converts standard 220/110V AC 50/60 Hz to 5V DC at 5A, 12V DC at 3A. The unit automatically senses the available voltage rating (110 or 220V) and no setting is required. The AC power supply unit uses a standard AC220/110V connector. LED indicator is on the front panel and indicates whether the AC unit is connected. DC Power Supply Unit An external DC power supply unit is used as a redundant power supply unit.
Installing the PowerConnect Device This section contains information about device unpacking, location, installation, and cable connections. Installation Precautions WARNING: Before performing any of the following procedures, read and follow the safety instructions located in the System Information Guide included in the Dell Documentation.
Site Requirements The device can be mounted in a standard 19-inch rack or placed on a tabletop. Before installing the device, verify that the location chosen for installation meets the site requirements. • General — Ensure that the power supply is correctly installed. • Power — The device is installed within 1.5 m (5 feet) of a grounded, easily accessible outlet 220/110 VAC, 50/60 Hz. • Clearance — There is adequate frontal clearance for operator access.
Mounting the Device Overview The power connectors for the device are positioned on the back panel. Connecting a DC Redundant Power Supply (UPS) is optional, but is recommended. The UPS DC connector is located on the back panel of the device. Mounting the System Device Rack Installation WARNING: Disconnect all cables from the unit before mounting the device in a rack or cabinet. WARNING: When mounting multiple devices into a rack, mount the devices from the bottom up.
4 Insert the unit into the 19-inch rack ensuring the rack-mounting holes on the device line up to the mounting hole on the rack. 5 Secure the unit to the rack with the rack screws (not provided). Fasten the lower pair of screws before the upper pair of screws. This ensures that the weight of the unit is evenly distributed during installation. Ensure that the ventilation holes are not obstructed.
CAUTION: When using HyperTerminal with Microsoft® Windows 2000,ensure that Windows® 2000 Service Pack 2 or later is installed. With Windows 2000 Service Pack 2, the arrow keys function properly in HyperTerminal’s VT100 emulation. Go to www.microsoft.com for information on Windows 2000 service packs. 3 Connect the female connector of the RS-232 crossover cable directly to the device Console port, and tighten the captive retaining screws. The device Console port is located on the back panel. Figure 3-2.
Connecting a Device to a Power Supply 1 Using a 5-foot (1.5 m) standard power cable with safety ground connected, connect the power cable to the AC connector located on the back panel. 2 Connect the power cable to a grounded AC outlet. Figure 3-3. Connecting to Device Power Connector Power Connect Rear View Back Panel Confirm that the device is connected and operating correctly by examining the LEDs on the front panel.
When selecting cables to connect the device ports to their networking peers, straight through cables must be used to connect the device to a station, and crossover cables must be used to connect one transmission device (switch or hub) to another. Both the straight through and crossover cables are category 5. After a port is connected, its LINK indication LED is lit. Table 3-1. Ports, Connectors and Cables Connector Port/Interface RJ-45 10/100/1000BaseT Port Cable Cat.
If the station on the other side of the link attempts to auto-negotiate with a device 10/100/1000BaseT port that is configured to full duplex, the auto-negotiation results in the station attempting to operate in half duplex. MDI/MDIX The device supports auto-detection of straight through and crossed cables on all switching 10/100/1000BaseT ports. The feature is part of the Auto-negotiation and is enabled when Auto-negotiation is enabled.
Starting and Configuring the Device After completing all external connections, connect a terminal to the device to configure the device and for other procedures. For initial configuration, the standard device configuration is performed. NOTE: Before proceeding, read the release notes for this product. The release notes can be downloaded from www.support.dell.com. Figure 4-1.
Configure the Terminal To configure the device, the terminal must be running terminal emulation software. Ensure that the terminal emulation software is set as follows: 1 Select the appropriate serial port (serial port 1 or serial port 2) to connect to the console. 2 Set the data rate to 9600 baud. 3 Set the data format to 8 data bits, 1 stop bit, and no parity. 4 Set flow control to none. 5 Under Properties, select VT100 for Emulation mode. 6 Select Terminal keys for Function, Arrow, and Ctrl keys.
3 Power on the device. 4 As the device boots, the bootup test first counts the device memory availability and then continues to boot. The following screen is an example of the displayed POST: ------ Performing the Power-On Self Test (POST) -----UART Channel Loopback Test........................PASS Testing the System SDRAM..........................PASS Boot1 Checksum Test...............................PASS Boot2 Checksum Test...............................PASS Flash Image Validation Test....................
********************************************************************* *** Running SW Ver. x.x.x.x Date 12-Jul-xxxx Time 16:51:25 *** ********************************************************************* HW version is 1 Base Mac address is: 00:15:77:12:34:56 Dram size is: 64M bytes Dram first block size is: 47104K bytes Dram first PTR is: 0x1200000 Flash size is: 16M 01-Jan-xxxx 01:01:07 %CDB-I-LOADCONFIG: Loading running configuration.
01-Jan-xxxx 01:02:01 %Box-I-SFP-PRESENT-CHNG: unit_id 1 SFP 0 status is not present. 01-Jan-xxxx 01:02:01 %Box-I-SFP-PRESENT-CHNG: unit_id 1 SFP 1 status is not present. 01-Jan-xxxx 01:02:01 %Box-I-SFP-PRESENT-CHNG: unit_id 1 SFP 2 status is not present. 01-Jan-xxxx 01:02:01 %Box-I-SFP-PRESENT-CHNG: unit_id 1 SFP 3 status is not present. After the device boots successfully, a system prompt is displayed (console>) which is used to configure the device.
The Setup Wizard configures the following fields. • SNMP Community String and SNMP Management System IP address (optional) • Username and Password • Device IP address • Default Gateway IP address The following is displayed: Welcome to Dell Easy Setup Wizard The Setup Wizard guides you through the initial switch configuration, and gets you up and running as quickly as possible. You can skip the setup wizard, and enter CLI mode to manually configure the switch.
Enter [N] to skip to Step 2. Enter [Y] to continue the Setup Wizard. The following is displayed: To setup the SNMP management account you must specify the management system IP address and the "community string" or password that the particular management system uses to access the switch. The wizard automatically assigns the highest access level [Privilege Level 15] to this account. You can use Dell Network Manager or CLI to change this setting, and to add additional management systems.
Wizard Step 3 The following is displayed: Next, an IP address is setup. The IP address is defined on the default VLAN (VLAN #1), of which all ports are members. This is the IP address you use to access the CLI, Web interface, or SNMP interface for the switch.To setup an IP address: Please enter the IP address of the device (A.B.C.D):[1.1.1.1] Please enter the IP subnet mask (A.B.C.D or nn): [255.255.255.0] Enter the IP address and IP subnet mask, for example 1.1.1.1 as the IP address and 255.255.255.
Enter [N] to skip to restart the Setup Wizard. Enter [Y] to complete the Setup Wizard. The following is displayed: Configuring SNMP management interface Configuring user account...... Configuring IP and subnet...... Thank you for using Dell Easy Setup Wizard. You will now enter CLI mode. Wizard Step 6 The CLI prompt is displayed.
• Assigning Dynamic IP Addresses (on a VLAN): console# configure console(config)# interface ethernet vlan 1 console(config-if)# ip address dhcp hostname device console(config-if)# exit console(config)# 3 To verify the IP address, enter the show ip interface command at the system prompt as shown in the following example. Console# show ip interface Gateway IP Address Activity status --------------------- ------------------ 10.7.1.
Receiving an IP Address From a BOOTP Server The standard BOOTP protocol is supported and enables the device to automatically download its IP host configuration from any standard BOOTP server in the network. In this case, the device acts as a BOOTP client. To retrieve an IP address from a BOOTP server: 1 Select and connect any port to a BOOTP server or subnet containing such a server, to retrieve the IP address.
The system is delivered with no default password configured. All passwords are user-defined. If a user-defined password is lost, a password recovery procedure can be invoked from the Startup menu. The procedure is applicable for the local terminal only and allows a one-time access to the device from the local terminal with no password entered.
console(config-line)# login authentication default console(config-line)# enable authentication default console(config-line)# password bob • When initially logging onto a device through a Telnet session, enter bob at the password prompt. • When changing a device mode to enable, enter bob.
When initially enabling an http or https session, enter admin for user name and user1 for password. NOTE: Http and Https services require level 15 access and connect directly to the configuration level access. Configuring Login Banners You can define 3 types of login banners: • Message-of-the-Day Banner: Displayed when the user is connected to the device, before the user has logged in. • Login Banner: Displayed after the Message-of-the-Day Banner, and before the user has logged in.
UART Channel Loopback Test........................PASS Testing the System SDRAM..........................PASS Boot1 Checksum Test...............................PASS Boot2 Checksum Test...............................PASS Flash Image Validation Test.......................PASS BOOT Software Version 1.0.0.20 Built 22-Jan-xxxx 15:09:28 Processor: FireFox 88E6218 ARM946E-S , 64 MByte SDRAM. I-Cache 8 KB. D-Cache 8 KB. Cache Enabled. Autoboot in 2 seconds - press RETURN or Esc. to abort and enter prom.
Software Download The software download procedure is performed when a new version must be downloaded to replace the corrupted files, update or upgrade the system software. To download software from the Startup menu: 1 From the Startup menu, press [1]. The following prompt appears: Downloading code using XMODEM 2 When using the HyperTerminal, click Transfer on the HyperTerminal Menu Bar. 3 In the Filename field, enter the file path for the file to be downloaded.
To recover a lost password for the local terminal only: 1 From the Startup menu, type 3 and press . The password is deleted. NOTE: To ensure device security, reconfigure passwords for applicable management methods. Software Download Through TFTP Server This section contains instructions for downloading device software (system and boot images) through a TFTP server. The TFTP server must be configured before beginning to download the software.
5 Enter copy tftp://{tftp address}/{file name} image to copy a new system image to the device. When the new image is downloaded, it is saved in the area allocated for the other copy of system image (image-2, as given in the example). The following is an example of the information that appears: console# copy tftp://176.215.31.3/file1.ros image Accessing file ‘file1’ on 176.215.31.3Ö Loading file1 from 176.215.31.
Boot Image Download Loading a new boot image from the TFTP server and programming it into the flash updates the boot image. The boot image is loaded when the device is powered on. A user has no control over the boot image copies. To download a boot image through the TFTP server: 1 Ensure that an IP address is configured on one of the device ports and pings can be sent to a TFTP server. 2 Ensure that the file to be downloaded is saved on the TFTP server (the rfb file).
Starting and Configuring the Device
Using Dell OpenManage Switch Administrator This section provides an introduction to the user interface. Understanding the Interface The home page contains the following views: • Tree View — Located on the left side of the home page, the tree view provides an expandable view of the features and their components. • Device View — Located on the right side of the home page, the device view provides a view of the device, an information or table area, and configuration instructions. Figure 5-1.
Table 5-1 lists the interface components with their corresponding numbers. Table 5-1. Interface Components Component Name 1 The tree view contains a list of the different device features. The branches in the tree view can be expanded to view all the components under a specific feature, or retracted to hide the feature's components. By dragging the vertical bar to the right, the tree area can be expanded to display the full name of a component.
Using the Switch Administrator Buttons This section describes the buttons found on the OpenManage Switch Administrator interface. Information Buttons Information buttons provide access to on-line support and online help, as well as information about the OpenManage Switch Administrator interfaces. Table 5-3. Information Buttons Button Description Support Opens the Dell Support page at support.dell.com. Help Online help containing information to assist in configuring and managing the device.
Starting the Application 1 Open a web browser. 2 Enter the device’s IP address (as defined in the CLI) in the address bar and press . For information about assigning an IP address to a device, see "Static IP Address and Subnet Mask." 3 When the Enter Network Password window opens, enter a user name and password. NOTE: The device is not configured with a default password, and can be configured without entering a password. For information about recovering a lost password, see “Password Recovery.
To start a Telnet session: 1 Select Start > Run. The Run window opens. 2 In the Run window, type Telnet in the Open field. 3 Click OK to begin the Telnet session. Using the CLI This section provides information for using the CLI. Command Mode Overview The CLI is divided into command modes. Each command mode has a specific command set. Entering a question mark at the console prompt displays a list of commands available for that particular command mode.
Privileged EXEC Mode Privileged access can be protected to prevent unauthorized access and ensure operating parameters. Passwords are displayed in the ***** format on the screen, and are case sensitive. To access and list the Privileged EXEC Mode commands: 1 At the prompt type enable and press . 2 When a password prompt displays, enter the password and press . The Privileged EXEC mode prompt displays as the device host name followed by #.
The following example illustrates how to access Global Configuration Mode and return back to the Privileged EXEC Mode: console# console#configure console(config)#exit console# Interface Configuration Mode Interface configuration commands modify specific IP interface settings, including bridge-group, description, etc. VLAN Database Mode The VLAN mode contains commands to create and configure a VLAN as a whole, for example, to create a VLAN and apply an IP address to the VLAN.
The following example shows how to create an access-list called "mlist", configure two management interfaces ethernet g1 and ethernet g9, and make the access-list the active list: Console (config)# management access-list mlist Console (config-macl)# permit ethernet g1 Console (config-macl)# permit ethernet g9 Console (config-macl)# exit Console (config)# management access-class mlist SSH Public Key The SSH Public Key mode contains commands to manually specify other device SSH public keys.
Configuring System Information This section provides information for defining system parameters including security features, downloading device software, and resetting the device. To open the System page, click System in the tree view. Figure 6-1. System Defining General Device Information The General page contains links to pages for configuring device parameters.
Figure 6-2. Asset 68 • System Name (0-159 Characters) — Defines the user-defined device name. • System Contact (0-159 Characters) — Specifies the name of the contact person. • System Location (0-159 Characters) — Specifies the location where the system is currently running. • MAC Address — Specifies the device MAC address. • Sys Object ID — Specifies the vendor's authoritative identification of the network management subsystem contained in the entity.
Defining System Information: 1 Open the Asset page. 2 Define the relevant fields. 3 Click Apply Changes. The system parameters are defined, and the device is updated. Initiating a Telnet Session: 1 Open the Asset page. 2 Click Telnet. A Telnet session is initiated. Configuring Device Information Using the CLI Commands The following table summarizes the equivalent CLI commands for viewing and setting fields displayed in the Asset page. Table 6-1.
The following is an example of the CLI commands: Console (config)# hostname dell Console (config)# snmp-server contact Dell_Tech_Supp Console (config)# snmp-server location New_York Console (config)# exit Console # exit Console (config)# asset-tag 1qwepot Console> clock set 13:32:00 7 Dec 2004 Console> show clock 13:32:00 (UTC+0) Dec 7 2004 No time source DELL Switch# show system System Description: Kenan 24 System Up Time (days,hour:min:sec): 0,00:04:17 System Contact: spk System Name: RS1 System
Defining System Time Settings The Time Synchronization page contains fields for defining system time parameters for both the local hardware clock, and the external SNTP clock. If the system time is kept using an external SNTP clock, and the external SNTP clock fails, the system time reverts to the local hardware clock. Daylight Savings Time can be enabled on the device.
• • • • • • • • • • • • • • • • • • • • • • • • • • Lebanon — Last weekend of March until the last weekend of October. Lithuania — Last weekend of March until the last weekend of October. Luxembourg — Last weekend of March until the last weekend of October. Macedonia — Last weekend of March until the last weekend of October. Mexico — From the first Sunday in April at 02:00 to the last Sunday in October at 02:00. Moldova — Last weekend of March until the last weekend of October.
Figure 6-3. Time Synchronization • Clock Source — The source used to set the system clock. The possible field values are: – SNTP — Specifies that the system time is set via an SNTP server. For more information, see "Configuring SNTP Settings" on page 81. – None — Specifies that the system time is not set by an external source. Local Settings • Date — Defines the system date. The field format is Day:Month:Year, for example, 04 May 2050. • Local Time — Defines the system time.
• Daylight Savings — Enables the Daylight Savings Time (DST) on the device based on the devices location. The possible field values are: USA — The device switches to DST at 2 a.m. on the second Sunday of March, and reverts to standard time at 2 a.m. on the first Sunday of November. European — The device switches to DST at 1:00 am on the last Sunday in March and reverts to standard time at 1:00 am on the last Sunday in October.
• • From — Defines the time that DST begins each year. For example, DST begins locally every second Sunday in April at 5:00 am. The possible field values are: – Day — The day of the week from which DST begins every year. The possible field range is Sunday-Saturday. – Week — The week within the month from which DST begins every year. The possible field range is 1-5. – Month — The month of the year in which DST begins every year. The possible field range is Jan.-Dec.
Defining Clock Settings Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the Time Synchronization page. Table 6-2. CLI Clock Setting CLI Commands Description clock source {sntp} Configures an external time source for the system clock. clock timezone hours-offset [minutes minutesoffset][zone acronym] Sets the time zone for display purposes.
Viewing System Health Information The System Health page shows physical device hardware information. To open the System Health page, click System→ General→ Health in the tree view. Figure 6-4. System Health • Power Supply Status — The main power supply state. The possible field values are: – — The main power supply is operating normally for the specified unit – — The main power supply is not operating normally for the specified unit.
DELL Switch# show system System Description: Ethernet Routing Switch System Up Time (days,hour:min:sec): 0,00:04:17 System Contact: spk System Name: DELL Switch System Location: R&D System MAC Address: 00:10:b5:f4:00:01 Sys Object ID: 1.3.6.1.4.1.674.10895.
Viewing the Versions Page The Versions page contains information about the hardware and software versions currently running. To open the Versions page, click System→ General→ Versions in the tree view. Figure 6-5. Versions • Software Version — The current software version running on the device. • Boot Version — The current Boot version running on the device. • Hardware Version — The current hardware versions running on the device.
Resetting the Device The Reset page enables the device to be reset from a remote location. Save all changes to the Running Configuration file before resetting the device. This prevents the current device configuration from being lost. For more information about saving Configuration files, see "Managing Files" on page 220.To open the Reset page, click System → General → Reset in the tree view. Figure 6-6. Reset Resetting the Device 1 Open the Reset page 2 Click reset. A confirmation message displays.
The following is an example of the CLI command: Console >reload This command will reset the whole system and disconnect your current session. Do you want to continue (y/n) [n] ? Configuring SNTP Settings The device supports the Simple Network Time Protocol (SNTP). SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. The device operates only as an SNTP client, and cannot provide time services to other systems.
Polling for Anycast Time Information Polling for Anycast information is used when the server IP address is unknown. The first anycast server to return a response is used to set the time value. Time levels T3 and T4 are used to determine the server time. Using Anycast time information for synchronizing switch time is preferred to using Broadcast time information. Broadcast Time Information Broadcast information is used when the server IP address is unknown.
• Receive Anycast Servers Updates — Polls the SNTP server for Anycast server time information, when enabled. If both the Receive Anycast Servers Update, and the Receive Broadcast Servers Update fields are enabled, the system time is set according the Anycast server time information. • Receive Unicast Servers Updates — Polls the SNTP server for Unicast server time information, when enabled.
Defining SNTP Authentication Methods The SNTP Authentication page enables SNTP authentication between the device and an SNTP server. The means by which the SNTP server is authenticated is also selected in the SNTP Authentication page. Click System → SNTP→ Authentication in the tree view to open the SNTP Authentication page. Figure 6-8. SNTP Authentication 84 • SNTP Authentication — Enables authenticating an SNTP session between the device and an SNTP server, when enabled.
Adding an SNTP Authentication Key 1 Open the SNTP Authentication page. 2 Click Add. The Add Authentication Key page opens: Figure 6-9. Add Authentication Key 3 Define the fields. 4 Click Apply Changes. The SNTP Authentication Key is added, and the device is updated. Displaying the Authentication Key Table 1 Open the SNTP Authentication page. 2 Click Show All. The Authentication Key Table opens: Figure 6-10.
Deleting the Authentication Key 1 Open the SNTP Authentication page. 2 Click Show All. The Authentication Key Table opens. 3 Select an Authentication Key Table entry. 4 Select the Remove check box. 5 Click Apply Changes. The entry is removed, and the device is updated. Defining SNTP Authentication Settings Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the SNTP Authentication page. Table 6-7.
Figure 6-11. SNTP Servers • SNTP Server — Enter a user-defined SNTP server IP addresses or hostname. Up to eight SNTP servers can be defined. This field can contain 1 - 158 characters. • Poll Interval — Enables polling the selected SNTP Server for system time information, when enabled. • Encryption Key ID — Specifies the Key Identification used to communicate between the SNTP server and device. The range is 1 - 4294967295. • Preference — The SNTP server providing SNTP system time information.
• Delay — The amount of time it takes to reach the SNTP server. • Remove — Removes a specific SNTP server from the SNTP Server list, when selected. When adding an SNTP Server, the following additional parameters are available: • • • Supported IP Format — Specifies the IP format supported by the SNTP server. The possible values are: – IPv6 — IP version 6 is supported. – IPv4 — IP version 4 is supported.
The following table summarizes the equivalent CLI commands for setting fields displayed in the Add SNTP Server page. Table 6-8. SNTP Server CLI Commands CLI Command Description sntp server {ipv4-address|ipv6address|hostname [poll] [key keyid] Configures the device to use SNTP to request and accept NTP traffic from a server. The following is an example of the CLI commands: console> enable console# configure Console(config)# sntp server 100.1.1.
Deleting the SNTP Server 1 Open the SNTP Servers page. 2 Click Show All. The SNTP Servers Table opens. 3 Select an SNTP Server entry. 4 Select the Remove check box. 5 Click Apply Changes. The entry is removed, and the device is updated. Defining SNTP Servers Settings Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the SNTP Servers page. Table 6-9.
Server Preference Status Last response Offset Delay [mSec] [mSec] ------- ---------- ------- -------------- ----- ------ VLAN 119 Secondary Up 19:53:21.789 PDT Feb 19 2002 7.19 119.89 IP address Last response Broadcast: Interface ----------- ----------- ------------------------ 176.1.1.8 AFE252C1.6DBDDFF2 Primary 176.1.8.179 Secondary AFE21789.643287C9 Defining SNTP Interfaces The SNTP Broadcast Interface Table contains fields for setting SNTP on different interfaces.
Adding an SNTP Interface 1 Open the SNTP Broadcast Interface Table page. 2 Click Add. The Add SNTP Interface page opens: Figure 6-14. Add SNTP Interface Page 3 Define the relevant fields. 4 Click Apply Changes. The SNTP interface is added, and the device is updated. Defining SNTP Interface Settings Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the SNTP Broadcast Interface Table. Table 6-10.
The following is an example of the CLI commands: Console# show sntp configuration Polling interval: 7200 seconds. MD5 Authentication keys: 8, 9 Authentication is required for synchronization. Trusted Keys: 8,9 Unicast Clients Polling: Enabled. Server Polling Encryption Key ----------- -------- ----------------- 176.1.1.8 Enabled 9 176.1.8.
The following table contains the Log Severity Levels: Log Severity Levels Severity Type Severity Level Description Emergency 0 The system is not functioning. Alert 1 The system needs immediate attention. Critical 2 The system is in a critical state. Error 3 A system error has occurred. Warning 4 A system warning has occurred. Notice 5 The system is functioning properly, but system notice has occurred. Informational 6 Provides device information.
• Logging — Enables device global logs for Cache, File, and Server Logs. Console logs are enabled by default. • Severity — The following are the available severity logs: – – – – – – – – Emergency — The highest warning level. If the device is down or not functioning properly, an emergency log message is saved to the specified logging location. Alert — The second highest warning level. An alert log is saved if there is a serious device malfunction, for example, all device features are down.
Table 6-11. Global Log Parameters CLI Commands (continued) CLI Command Description logging buffered level Limits syslog messages displayed from an internal buffer (RAM) based on severity. logging file level Limits syslog messages sent to the logging file based on severity. clear logging Clears logs. clear logging file Clears messages from the logging file. show syslog servers Displays the syslog servers settings.
Displaying RAM Log Table The RAM Log Table contains information about log entries kept in RAM, including the time the log was entered, the log severity, and a description of the log. To open the RAM Log Table, click System → Logs → RAM Log in the tree view. Figure 6-16. RAM Log Table • Log Index — The log number in the RAM Log Table. • Log Time — Specifies the time at which the log was entered into the RAM Log Table. • Severity — Specifies the log severity.
The following is an example of the CLI commands: console# show logging Logging is enabled. Console Logging: Level info. Console Messages: 0 Dropped. Buffer Logging: Level info. Buffer Messages: 26 Logged, 26 Displayed, 200 Max. File Logging: Level error. File Messages: 157 Logged, 26 Dropped.
Displaying the Log File Table The Log File Table contains information about log entries saved to the Log File in FLASH, including the time the log was entered, the log severity, and a description of the log message. To open the Log File Table, click System → Logs → Log File in the tree view. Figure 6-17. Log File Table • Log Index — The log number in the Log File Table. • Log Time — Specifies the time at which the log was entered in the Log File Table. • Severity — Specifies the log severity.
The following is an example of the CLI commands: Console # show logging file Logging is enabled. Console Logging: Level info. Console Messages: 0 Dropped. Buffer Logging: Level info. Buffer Messages: 62 Logged, 62 Displayed, 200 Max. File Logging: Level debug. File Messages: 11 Logged, 51 Dropped. SysLog server 12.1.1.2 Logging: warning. Messages: 14 Dropped. SysLog server 1.1.1.1 Logging: info. Messages: 0 Dropped.
Viewing the Device Login History The Login History page contains information for viewing and monitoring device utilization, including the time the user logged in and the protocol used to log on to the device. To open the Login History page, click System→ Logs→ Login History in the tree view. Figure 6-18. Login History The Login History page contains the following fields: • User Name — Contains a user-defined device user name list.
Displaying the Device Login History Using CLI Commands The following table summarizes the equivalent CLI commands for viewing and setting fields displayed in the Login History page. Table 6-14. Log File Table CLI Commands CLI Command Description show users login-history Displays password management history information. The following is an example of the CLI commands: console# show users login-history Login Time Username Protocol Location ----------- -------- -------- ---------- Jan 1.
Figure 6-19. Remote Log Server Settings • Available Servers — Contains a list of servers to which logs can be sent. • UDP Port (1-65535) — The UDP port to which the logs are sent for the selected server. The possible range is 1 - 65535. The default value is 514. • Facility — Defines a user-defined application from which system logs are sent to the remote server. Only one facility can be assigned to a single server. If a second facility level is assigned, the first facility level is overridden.
– Warning — A system warning has occurred. – Notice — The system is functioning properly, but system notice has occurred. – Informational — Provides device information. – Debug — Provides detailed information about the log. If a Debug error occurs, contact Customer Tech Support. • Delete Server — Deletes the currently selected server from the Available Servers list, when selected. • Severity to Include — Indicates the log severity level to be reported by the remote server.
Sending Logs to a Server: 1 Open the Remote Log Server Settings page. 2 Select a server from the Available Servers drop-down list. 3 Define the fields. 4 Select the log severity in the Severity to Include check boxes. 5 Click Apply Changes. The log settings are saved, and the device is updated. Defining a New Server: 1 Open the Remote Log Server Settings page. 2 Click Add. The Add a Log Server page opens: Figure 6-20.
New Log Server IP Address — Defines the IP address of the new Log Server. 3 Define the fields. 4 Click Apply Changes. The server is defined and added to the Available Servers list. Displaying the Remote Log Servers Table: 1 Open the Remote Log Server Settings page. 2 Click Show All. The Remote Log Servers Table page opens: Figure 6-21. Remote Log Servers Table Removing a Log Server from the Log Server Table Page: 1 Open the Remote Log Server Settings page. 2 Click Show All.
The following is an example of the CLI commands: console> enable console# configure console (config) # logging 10.1.1.1 severity critical Console# show logging Logging is enabled. Console Logging: Level debug. Console Messages: 5 Dropped. Buffer Logging: Level debug. Buffer Messages: 16 Logged, 16 Displayed, 200 Max. File Logging: Level error. File Messages: 0 Logged, 209 Dropped. SysLog server 31.1.1.2 Logging: error. Messages: 22 Dropped. SysLog server 5.2.2.2 Logging: info. Messages: 0 Dropped.
IPv6 Syntax The 128-bit IPv6 address format is divided into eight groups of four hexadecimal digits. Abbreviation of this format by replacing a group of zeros with "double colons" (::) is acceptable. IPv6 address representation can be further simplified by suppressing the leading zeros.
The IPv4 Default Gateway page contains the following fields: • User Defined — Displays the default gateway IP address. • Active — Displays the currently configured Default Gateway. • Remove User Defined — Removes Gateway devices from the IPv4 Default Gateway drop-down list, when selected. Selecting an IPv4 Gateway Device: 1 Open the IPv4 Default Gateway page. 2 Select an IP address in the IPv4 Default Gateway drop-down list. 3 Select the Active check box. 4 Click Apply Changes.
Figure 6-23. IPv4 Interface Parameters • IP Address — The interface IP address. • Prefix Length — The number of bits that comprise the source IP address prefix, or the network mask of the source IP address. • Interface — The interface type for which the IP address is defined. Select Port, LAG, or VLAN. • Type — Indicates whether or not the IP address was configured statically. • Remove — When selected, removes the interface from the IP Address drop-down menu.
3 Complete the fields on the page. Network Mask specifies the subnetwork mask of the source IP address. 4 Click Apply Changes. The new interface is added, and the device is updated. Modifying IP Address Parameters 1 Open the IPv6 Interface page. 2 Select an IP address in the IP Address drop-down menu. 3 Modify the required fields. 4 Click Apply Changes. The parameters are modified, and the device is updated. Deleting IP Addresses 1 Open the IPv6 Interface page. 2 Click Show All.
Defining IPv4 Interfaces Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the IPv6 Interface page. Table 6-17. IPv4 Interface Parameters CLI Commands CLI Command Description ip address ip-address {mask | prefix-length} Sets an IP address. no ip address [ip-address] Removes an IP address show ip interface [ethernet interface-number Displays the usability status of interfaces configured for IP.
Defining DHCP IPv4 Interface Parameters The DHCP IPv4 Interface page contains fields for specifying the DHCP clients on device interfaces. Click System→ IP Addressing→ DHCP IPv4 Interface in the tree view. To open the DHCP IPv4 Interface page. Figure 6-26. DHCP IPv4 Interface • Interface — The specific interface on which the DHCP client is configured. Click the option button next to Port, LAG, or VLAN and select the interface connected to the device.
Modifying a DHCP IPv4 Interface 1 Open the DHCP IPv4 Interface page. 2 Modify the fields. 3 Click Apply Changes. The entry is modified, and the device is updated. Deleting a DHCP IPv4 Interface 1 Open the DHCP IPv4 Interface page. 2 Click Show All. The DHCP IPv4 Interface Table opens. 3 Select a DHCP client entry. 4 Select the Remove check box. 5 Click Apply Changes. The selected entry is deleted, and the device is updated.
Defining IPv6 Interfaces The system supports IPv6 hosts. The IPv6 Interface page contains fields for defining IPv6 interfaces. To open the IPv6 Interface page, click System→ IP Addressing→ IPv6 Interface in the tree view. Figure 6-27. IPv6 Interface • Interface — The IPv6 interface that has been selected for configuration. • Remove — When selected, removes the IPv6 attributes of the interface.
• Autoconfiguration — Specifies whether IPv6 address assignment on an interface is done by stateless autoconfiguration. When enabled, the router solicitation ND procedure is initiated (to discover a router in order to assign an IP address to the interface based on prefixes received with RA messages). When autoconfiguration is disabled, no automatic assignment of IPv6 Global Unicast addresses is performed, and existing automatically assigned IPv6 Global Unicast addresses are removed from the interface.
• • • IPv6 Address Origin Type — Defines the type of configurable static IPv6 address for an interface. The possible values are: – Dyanmic — Indicates the IP address was received from RA. – Static — Indicates the IP address was configured by the user. – System — Indicates the IP address was generated by the system. DAD Status — Displays the Duplicate Address Detection (DAD) Status which is the process of verifying and assuring an inserted IPv6 address is unique.
Adding an IPv6 Address to the Current Interface 1 Open the IPv6 Interface page. 2 Click Add IPv6 Address. The Add IPv6 Address page opens: Figure 6-29. Add IPv6 Address 3 Complete the fields on the page. 4 Click Apply Changes. The new address is added, and the device is updated. Modifying IPv6 Interface Parameters 1 Open the IPv6 Interface page. 2 Select an interface in the Interface drop-down menu. 3 Modify the required fields. 4 Click Apply Changes.
Defining IPv6 Interfaces Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the IPv6 Interface page. Table 6-19. IPv6 Interface CLI Commands CLI Command Description ipv6 enable [no-autoconfig] Enables IPv6 processing on an interface. ipv6 address autoconfig Enables automatic configuration of IPv6 addresses using stateless autoconfiguration on an interface.
The following is an example of the CLI commands: console# show ipv6 interface vlan 1 Number of ND DAD attempts: 1 MTU size: 1500 Stateless Address Autoconfiguration state: enabled ICMP unreachable message state: enabled MLD version: 2 IP addresses Type ------------------------ ------ DAD State ----------- fe80::232:87ff:fe08:1700 linklayer Active ff02::1 linklayer N/A ff02::1:ff08:1700 linklayer N/A console(config)# ipv6 icmp error-interval ICMP errors rate limiting console(config)# ipv6 icmp er
To open the IPv6 Default Gateway page, click System→ IP Addressing→ IPv6 Default Gateway in the tree view. Figure 6-30. IPv6 Default Gateway • Default Gateway IP Address — Displays the Link Local IPv6 address of the default gateway. • Interface — Specifies the outgoing interface through which the default gateway can be reached. Interface refers to any Port/LAG/VLAN and/or Tunnel. • Type — Specifies the means by which the default gateway was configured.
• – Delay — Indicates that the default gateway is no longer known to be reachable, and traffic has recently been sent to the default gateway. Rather than probe the default gateway immediately, however, there is a delay sending probes for a short while in order to give upper-layer protocols a chance to provide reachability confirmation. – Probe — Indicates that the default gateway is no longer known to be reachable, and unicast Neighbor Solicitation probes are being sent to verify reachability.
Defining IPv6 ISATAP Tunnels The IPv6 ISATAP Tunnel Page defines the tunneling process on the device, which encapsulates IPv6 packets in IPv4 packets for delivery across an IPv4 network. The Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) is an IPv6 transition mechanism which is defined as a tunneling IPv6 interface and is meant to transmit IPv6 packets between dual-stack nodes on top of an IPv4 network.
Figure 6-32. • ISATAP Status — Specifies the status of ISATAP on the device. The possible field values are: – Enable — ISATAP is enabled on the device. – Disable — ISATAP is disabled on the device. This is the default value. • IPv4 Address — Specifies the local (source) IPv4 address of a tunnel interface. • Tunnel Router's Domain Name — Specifies a global string that represents a specific automatic tunnel router domain name. The default value is ISATAP.
Defining IPv6 ISATAP Tunnel Parameters Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the IPv6 ISATAP Tunnel page. Table 6-21. IPv6 Default Gateway CLI Commands CLI Command Description interface tunnel number Enters tunnel interface configuration mode. tunnel mode ipv6ip {isatap} Configures an IPv6 transition mechanism global support mode.
The device supports a total of up to 256 neighbors obtained either statically or dynamically. When removing an IPv6 interface, all neighbors learned statically and dynamically are removed. To open the IPv6 Neighbors page, click System→ IP Addressing→ IPv6 Neighbors in the tree view. Figure 6-33. 126 IPv6 Neighbors • Interface — Displays the interface on which IPv6 Interface is defined. Interfaces include Ports, LAGs, or VLANs. • IPv6 Address — Defines the currently configured neighbor IPv6 address.
• Remove — When selected, removes the neighbor from the list. In the IPv6 Neighbors Table, the following additional parameter appears: State — Displays the IPv6 Neighbor status. The field possible values are: • Incomplete — Indicates that an address resolution is in progress and the link-layer address of the neighbor has not yet been determined. • Reachable — Indicates that the neighbor is known to have been reachable recently (within tens of seconds ago).
Modifying Neighbor Parameters 1 Open the IPv6 Neighbors page. 2 Select an IP address in the IPv6 Address drop-down menu. 3 Modify the required fields. 4 Click Apply Changes. The parameters are modified, and the device is updated. Deleting Neighbors 1 Open the IPv6 Neighbors page. 2 Click Show All. The IPv6 Neighbors Table opens: Figure 6-35. IPv6 Neighbors Table 3 Select the Remove check box in the desired entry. Alternatively, select the desired value in the Clear Table field.
Defining IPv6 Neighbors Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the IPv6 Neighbors page. Table 6-22. IPv6 Neighbors Parameters CLI Commands CLI Command Description ipv6 neighbor ipv6_addr Configures a static entry in the IPv6 neighbor hw_addr {ethernet interface- discovery cache. number | vlan vlan-id | portchannel number } show ipv6 neighbors {static | Displays IPv6 neighbor discovery cache dynamic}[ipv6-address ipv6- information.
Figure 6-36. 130 IPv6 Routes Table • IPv6 Address — Defines the destination IPv6 address. • Prefix Length — Specifies the length of the IPv6 prefix. The Prefix field is applicable only when the IPv6 Static IP address is defined as a Global IPv6 address. The range is 5 - 128. • Interface — Displays the interface that is used to forward the packet. Interface refers to any Port, LAG or VLAN.
Viewing IPv6 Routes Table Parameters Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the IPv6 Routes Table page. Table 6-23. IPv6 Default Gateway CLI Commands CLI Command Description traceroute {ipv4-address | Discovers the routes that IPv4 packets will hostname} [size packet_size] actually take when traveling to their destination.
Configuring Domain Name Systems Domain Name System (DNS) converts user-defined domain names into IP addresses. Each time a domain name is assigned the DNS service translates the name into a numeric IP address. For example, www.ipexample.com is translated to 192.87.56.2. DNS servers maintain domain name databases and their corresponding IP addresses. The Domain Naming System (DNS) page contains fields for enabling and activating specific DNS servers.
When defining a new DNS server, the following additional parameters are available: • • • Supported IP Format — Specifies the IP format supported by the server. The possible values are: – IPv6 — IP version 6 is supported. – IPv4 — IP version 4 is supported. IPv6 Address Type — When the server supports IPv6 (see previous parameter), this specifies the type of static address supported.
Displaying the DNS Servers Table 1 Open the Domain Naming System (DNS) page. 2 Click Show All. The DNS Server Table opens: Figure 6-39. DNS Server Table Removing DNS Servers 1 Open the Domain Naming System (DNS) page. 2 Click Show All. 3 The DNS Server Table opens. 4 Select a DNS Server Table entry. 5 Select the Remove check box. 6 Click Apply Changes. The selected DNS server is deleted, and the device is updated.
The following is an example of the CLI commands: console> enable Console# configure console (config)# ip name-server 176.16.1.18 Defining Default Domains The Default Domain Name page provides information for defining default DNS domain names. To open the Default Domain Name page, click System→ IP Addressing→ Default Domain Name in the tree view. Figure 6-40. Default Domain Name • Default Domain Name (1-158 characters) — Contains a user-defined DNS domain name server.
The following is an example of the CLI commands: console> enable console# configure console (config)# ip domain-name www.dell.com Mapping Domain Host The Host Name Mapping page provides parameters for assigning static host names IP addresses. The Host Name Mapping page provides up to eight IP addresses per host. To open the Host Name Mapping page, click System → IP Addressing → Host Name Mapping. Figure 6-41. • Host Name — Contains a Host Name list.
When defining a new host name mapping, the following additional parameters are available: • • • Supported IP Format — Specifies the IP format supported by the host. The possible values are: – IPv6 — IP version 6 is supported. – IPv4 — IP version 4 is supported. IPv6 Address Type — When the host supports IPv6 (see previous parameter), this specifies the type of static address supported.
Displaying the Hosts Name Mapping Table 1 Open the Host Name Mapping page. 2 Click Show All. The Hosts Name Mapping Table opens: Figure 6-43. Hosts Name Mapping Table Removing Host Name from IP Address Mapping 1 Open the Host Name Mapping page. 2 Click Show All 3 The Host Mapping Table opens. 4 Select a Host Mapping Table entry. 5 Check the Remove checkbox. 6 Click Apply Changes. The Host Mapping Table entry is deleted, and the switch device is updated.
Table 6-26. Domain Host Name CLI Commands (continued) CLI Command Description clear host {name | *} Deletes entries from the host name-to-address cache. show hosts [name] Displays the default domain name, list of name server hosts, the static and the cached list of host names and addresses. The following is an example of the CLI commands: console# enable console# configure console (config)# ip host accounting.abc.com 176.10.23.
• Global Settings — Select this option to activate the fields for ARP global settings. • ARP Entry Age Out (1-40000000) — For all devices, the amount of time (seconds) that passes between ARP requests about an ARP table entry. After this period, the entry is deleted from the table. The range is 1 - 4000000, where zero indicates that entries are never cleared from the cache. The default value is 60000 seconds. • Clear ARP Table Entries — The type of ARP entries that are cleared on all devices.
4 Define the fields. 5 Click Apply Changes. The ARP Table entry is added, and the device is updated. Displaying the ARP Table 1 Open the ARP Settings page. 2 Click Show All. The ARP Table opens: Figure 6-46. ARP Table Page Deleting ARP Table Entry 1 Open the ARP Settings page 2 Click Show All. The ARP Table page opens. 3 Select a table entry. 4 Select the Remove check box. 5 Click Apply Changes. The selected ARP Table entry is deleted, and the device is updated.
Configuring ARP Using the CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the ARP Settings page. Table 6-27. ARP Settings CLI Commands CLI Command Description arp ip_addr hw_addr {ethernet interfaceAdds a permanent entry in the ARP cache. number | vlan vlan-id | port-channel number} arp timeout seconds Configures how long an entry remains in the ARP cache.
exception of the Approximated Cable Length test. The cable length returned is an approximation in the ranges of up to 50 meters, 50m-80m, 80m-110m, 110m-120m, or more than 120m. The deviation may be up to 20 meters. To open the Integrated Cable Test for Copper Cables page, click System→ Diagnostics→ Integrated Cable Test in the tree view. Figure 6-47. Integrated Cable Test for Copper Cables • Port — The port to which the cable is connected. • Test Result — The cable test results.
Performing a Cable Test 1 Ensure that both ends of the copper cable are connected to a device. 2 Open the Integrated Cable Test for Copper Cables page. 3 Click Test Now. The copper cable test is performed, and the results are displayed on the Integrated Cable Test for Copper Cables page. Displaying Virtual Cable Test Results Table 1 Open the Integrated Cable Test for Copper Cables page. 2 Click Show All. The Virtual Cable Test Results Table opens.
Viewing Optical Transceiver Diagnostics The Optical Transceiver Diagnostics page contains fields for performing tests on Fiber Optic cables. Optical transceiver diagnostics can be performed only when the link is present. To open the Optical Transceiver Diagnostics page, click System→ Diagnostics→ Optical Transceiver Diagnostics in the tree view. Figure 6-48. Optical Transceiver Diagnostics • Port — The port to which the fiber cable is connected.
Displaying Optical Transceiver Diagnostics Test Results Table 1 Open the Optical Transceiver Diagnostics page. 2 Click Show All. The test is run and the Virtual Cable Test Results Table opens. The Optical Transceiver Diagnostics Table contains the following columns: • Temp — Internally measured transceiver temperature. • Voltage — Internally measured supply voltage. • Current — Measured TX bias current. • Output Power — Measured TX output power in milliwatts.
The following is an example of the CLI command: console> enable Console# show fiber-ports optical-transceiver Power Port Temp Voltage Current Output Input TX LOS (C) (Volt) (mA) (mWatt) (mWatt) Fault 21 W OK OK OK OK OK OK 22 OK OK OK OK OK E OK 23 Copper Temp – Internally measured transceiver temperature. Voltage - Internally measured supply voltage. Current – Measured TX bias current. Output Power – Measured TX output power. Input Power – Measured RX received power.
Management Access Lists contain the rules that determine which users can manage the device, and by which methods. Users can also be blocked from accessing the device. The Access Profiles page contains fields for configuring Management Lists and applying them to specific interfaces. To open the Access Profiles page, click System→ Management Security→ Access Profiles in the tree view. Figure 6-49. Access Profiles • Access Profile — User-defined Access Profile lists.
Adding an Access Profile Rules act as filters for determining rule priority, the device management method, interface type, source IP address and network mask, and the device management access action. Users can be blocked or permitted management access. Rule priority sets the order of rule application in a profile. Defining Rules for an Access Profile: 1 Open the Access Profiles page. 2 Click Add an Access Profile. The Add An Access Profile page opens: Figure 6-50.
• Interface — The interface type to which the rule applies. This is an optional field. This rule can be applied to a selected port, LAG, or VLAN by selecting the check box and selecting the appropriate option button and interface. Assigning an access profile to an interface denies access via other interfaces. If an access profile is not assigned to any interface, the device can be accessed by all interfaces.
Adding Rules to Access Profile The first rule must be defined to beginning matching traffic to access profiles. 1 Open the Access Profiles page. 2 Click Add Profile to Rule. The Add An Access Profile Rule page opens: Figure 6-51. Add An Access Profile Rule 3 Complete the fields. 4 Click Apply Changes. The rule is added to the access profile, and the device is updated.
Viewing the Profile Rules Table: The order in which rules appear in the Profile Rules Table is important. Packets are matched to the first rule which meets the rule criteria. 1 Open the Access Profiles page. 2 Click Show All. The Profile Rules Table Page opens: Figure 6-52. Profile Rules Table Page Removing a Rule 1 Open the Access Profiles page. 2 Click Show All. The Profile Rules Table opens. 3 Select a rule. 4 Select the Remove check box. 5 Click Apply Changes.
Table 6-30. Access Profiles CLI Commands (continued) CLI Command Description permit ip-source {ipv4-address | ipv6-address / prefix-length} Sets port permitting conditions for the management [mask mask | prefix-length] [ethernet interface-number | access list, and the selected management method.
Defining Authentication Profiles The Authentication Profiles page contains fields for selecting the user authentication method on the device. User authentication occurs: • Locally • Via an external server User authentication can also be set to None. User authentication occurs in the order the methods are selected. For example, if both the Local and RADIUS options are selected, the user is authenticated first locally.
Authentication Profile Name — User-defined authentication profile lists to which user-defined authentication profiles are added. The defaults are Network Default and Console Default. • Optional Methods — User authentication methods. Possible options are: – – – – – – • None — No user authentication occurs. Local — User authentication occurs at the device level. The device checks the user name and password for authentication. RADIUS — User authentication occurs at the RADIUS server.
3 Configure the profile. 4 Click Apply Changes. The authentication profile is updated to the device. Displaying the Show All Authentication Profiles Page: 1 Open the Authentication Profiles page. 2 Click Show All. The Authentication Profile page opens: Figure 6-55. Authentication Profiles Deleting an Authentication Profiles: 1 Open the Authentication Profiles page. 2 Click Show All. The Authentication Profile page opens. 3 Select an authentication profile. 4 Select the Remove check box.
The following is an example of the CLI commands: Console (config)# aaa authentication login default radius local enable none Console (config)# no aaa authentication login default Assigning Authentication Profiles After Authentication Profiles are defined, the Authentication Profiles can be applied to Management Access methods. For example, console users can be authenticated by Authentication Method Lists 1, while Telnet users are authenticated by Authentication Method List 2.
• Console — Authentication profiles used to authenticate console users. • Telnet — Authentication profiles used to authenticate Telnet users. • Secure Telnet (SSH) — Authentication profiles used to authenticate Secure Shell (SSH) users. SSH provides clients with secure and encrypted remote connections to a device. • HTTP and Secure HTTP — Authentication method used for HTTP access and Secure HTTP access, respectively. Possible field values are: – None — No authentication method is used for access.
Assigning Secure HTTP Sessions an Authentication Sequence 1 Open the Select Authentication page. 2 Select an authentication sequence in the Secure HTTP field. 3 Click Apply Changes. Secure HTTP sessions are assigned an authentication sequence. Assigning Access Authentication Profiles or Sequences Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the Select Authentication page. Table 6-32.
The following is an example of the CLI commands: Console (config-line)# enable authentication default Console (config-line)# login authentication default Console (config-line)# exit Console (config)# ip http authentication radius local Console (config)# ip https authentication radius local Console (config)# exit Console# show authentication methods Login Authentication Method Lists --------------------------------Default: Radius, Local, Line Console_Login: Line, None Enable Authentication Method Lists ----
Managing Passwords Password management provides increased network security and improved password control. Passwords for SSH, Telnet, HTTP, HTTPS, and SNMP access are assigned security features, which include: • Defining minimum password lengths • Password expiration • Prevents frequent password reuse • Locks users out after failed login attempts Password aging starts immediately, when password management is enabled. Passwords expire based on the user-defined time/day definition expiration.
The Password Management page contains the following fields: • Password Minimum Length (8-64) — Indicates the minimum password length, when checked. For example, the administrator can define that all passwords must have a minimum of 10 characters. • Consecutive Passwords Before Re-use — Indicates the amount of times a password is changed, before the password can be reused. Possible field values are 1-10.
The following is an example of the CLI commands: console # show passwords configuration Minimal length: 0 History: Disabled History hold time: no limit Lockout control: disabled Enable Passwords Level Password Aging Password Expiry date Lockout ----- -------- ----------- ------- 1 - - - 15 - - - Line Passwords Line Password Aging Password Expiry date Lockout ------- -------- ----------- ------- Telnet - - - SSH - - - Console - - - console # show users accounts Username P
Viewing Active Users The Active Users page contains information about who is currently logged in to the device. Figure 6-58. 164 Active Users • Name — The user’s login name. • Protocol — The protocol being used to access the device. • Location — IP address of the computer being used to access the device.
Defining the Local User Databases The Local User Database page contains fields for defining users, passwords and access levels. To open the Local User Database page, click System→ Management Security→ Local User Database in the tree view. Figure 6-59. Local User Database The Local User Database page contains the following fields: • User Name — List of users. • Access Level — User access level. The lowest user access level is 1 and 15 is the highest user access level.
• Lockout Status — Indicates whether the user currently has access (status Usable), or whether the user is locked out due to too many failed authentication attempts since the user last logged in successfully(status Locked). • Reactivate Suspended User — Reactivate the specified user’s access rights, when selected. Access rights can be suspended after unsuccessfully attempting to login. • Remove — Removes users from the User Name list, when selected.
Displaying the Local User Table: 1 Open the Local User Database page. 2 Click Show All. The Local User Table opens: Figure 6-61. Local User Table Reactivating a Suspended User: 1 Open the Local User Database page. 2 Click Show All. The Local User Table opens. 3 Select a User Name entry. 4 Select the Reactivate Suspended User check box. 5 Click Apply Changes. The user access rights are reactivated, and the device is updated. Deleting Users: 1 Open the Local User Database page. 2 Click Show All.
Table 6-34. Local User Database CLI Commands CLI Command Description username name [password password] [level level] [encrypted] Establishes a username-based authentication system. set username name active Reactivates a suspended user’s access rights. The following is an example of the CLI commands: console(config)# username bob password lee level 15 console# set username bob active Defining Line Passwords The Line Password page contains fields for defining line passwords for management methods.
The Line Password page contains the following fields: • Line Password for Console/Telnet/Secure Telnet — The line password for accessing the device via a Console, Telnet, or Secure Telnet session. • Confirm Password for Console/Telnet/Secure Telnet — Confirms the new line password. The password appears in the ***** format. • Line Aging (1-365) for Console/Telnet/Secure Telnet — Indicates the amount of time in days that elapses before a line password is aged out, when selected.
Assigning Line Passwords Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the Line Password page. Table 6-35. Line Password CLI Commands CLI Command Description password password [encrypted] Indicates a password on a line. The following is an example of the CLI commands: console(config-line)# password dell Defining Enable Passwords The Enable Password page sets a local password to control access to Normal and Privilege levels.
• Expiry Date — Indicates the expiration date of the enable password. • Lockout Status — Specifies the number of failed authentication attempts since the user last logged in successfully, when the Enable Login Attempts checkbox is selected in the Password Management page. Specifies LOCKOUT, when the user account is locked. • Reactivate Suspended User — Reactivates the specified user’s access rights, when selected. Access rights can be suspended after unsuccessfully attempting to login.
Figure 6-64. 172 TACACS+ Settings • Host IP Address — Specifies the TACACS+ Server IP address. • Priority (0-65535) — Specifies the order in which the TACACS+ servers are used. The default is 0. • Source IP Address — The device source IP address used for the TACACS+ session between the device and the TACACS+ server. • Key String (0-128 Characters) — Defines the authentication and encryption key for TACACS+ communications between the device and the TACACS+ server.
• • Status — The connection status between the device and the TACACS+ server. The possible field values are: – Connected — There is currently a connection between the device and the TACACS+ server. – Not Connected — There is not currently a connection between the device and the TACACS+ server. Single Connection — Maintains a single open connection between the device and the TACACS+ server when selected The TACACS+ default parameters are user-defined defaults.
Displaying the TACACS+ Table 1 Open the TACACS+ Settings page. 2 Click Show All. The TACACS+ Table opens: Figure 6-66. TACACS+ Table Removing a TACACS+ Server 1 Open the TACACS+ Settings page. 2 Click Show All. The TACACS+ Table opens. 3 Select a TACACS+ Table entry. 4 Select the Remove check box. 5 Click Apply Changes. The TACACS+ server is removed, and the device is updated.
Table 6-37. TACACS+ CLI Commands (continued) CLI Command Description Specifies the authentication and encryption key for all TACACS+ communications between the device and the TACACS+ server. This key must match the encryption used on the TACACS+ daemon. (Range: 0 - 128 characters.) tacacs-server key key-string tacacs-server timeout timeout Specifies the timeout value in seconds. (Range: 1 - 30.) tacacs-server source-ip source Specifies the source IP address. (Range: Valid IP Address.
Configuring RADIUS Global Parameters Remote Authorization Dial-In User Service (RADIUS) servers provide additional security for networks. RADIUS servers provide a centralized authentication method for: • Telnet Access • Web Access • Console to Device Access To open the RADIUS Settings page, click System → Management Security → RADIUS in the tree view. Figure 6-67. 176 RADIUS Settings • IP Address — The list of Authentication Server IP addresses.
• Number of Retries (1-10) — Specifies the number of transmitted requests sent to RADIUS server before a failure occurs. The possible field values are 1 - 10. Three is the default value. • Timeout for Reply (1-30) — Specifies the amount of the time in seconds the device waits for an answer from the RADIUS server before retrying the query, or switching to the next server. The possible field values are 1 - 30. The default is 3.
Defining RADIUS Parameters: 1 Open the RADIUS Settings page. 2 Define the fields. 3 Click Apply Changes. The RADIUS setting are updated to the device. Adding a RADIUS Server: 1 Open the RADIUS Settings page. 2 Click Add. The Add RADIUS Server page opens: Figure 6-68. Add RADIUS Server Page 3 Define the fields. 4 Click Apply Changes. The new RADIUS server is added, and the device is updated.
Displaying the RADIUS Server List: 1 Open the RADIUS Settings page. 2 Click Show All. The Show all RADIUS Servers page opens: Figure 6-69. Show all RADIUS Servers Modifying the RADIUS Server Settings: 1 Open the RADIUS Settings page. 2 Click Show All. The RADIUS Servers List page opens. 3 Modify the relevant fields. 4 Click Apply Changes. The RADIUS Server settings are modified, and the device is updated. Deleting a RADIUS Server for the RADIUS Servers List: 1 Open the RADIUS Settings page.
Defining RADIUS Servers Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the RADIUS Settings page. Table 6-38. RADIUS Settings CLI Commands CLI Command Description radius-server timeout timeout Sets the default interval for which a device waits for a server host to reply. radius-server source-ip source Specifies the source IPv4 address that will be used for the IPv4 communication with RADIUS servers.
Console# show radius-servers Port IP address Auth Acct TimeOut Retransmit Deadtime Source IP Priority Usage --------- ---- ---- ------- ---------- ------- ----- ------- ----- 33.1.1.1 1812 1813 6 4 10 0.0.0.0 0 All 172.16.1.2 1645 1646 11 8 Global Global 2 All Global values -------------TimeOut: 5 Retransmit: 5 Deadtime: 10 Source IP: 0.0.0.
LLDP Media Endpoint Discovery (LLDP-MED) increases network flexibility by allowing different IP systems to co-exist on a single network LLDP: Provides detailed network topology information, including what device are located on the network, and where the devices are located. For example, what IP phone is connect to what port, what software is running on what switch, and with port is connected to what PC.
• Hold Multiplier (2-10) — Indicates the number of times that LLDP packets are held before the packets are discarded. The possible field range is 2 - 10 times. The field default is 4 times. • Reinitializing Delay (1-10) — Indicates the amount of time that passes between disabling LLDP and when reinitializing begins. The possible field range is 1 - 10 seconds. The field default is 2 seconds.
Figure 6-71. • • • 184 Port Settings Port — Contains a list of ports on which LLDP is enabled. – State — Indicates the port type on which LLDP is enabled. The possible field values are: – Tx Only — Enables transmitting LLDP packets only. – Rx Only — Enables receiving LLDP packets only. – Tx & Rx — Enables transmitting and receiving LLDP packets. This is the default value. – Disable — Indicates that LLDP is disabled on the port.
• Management IP Address — Indicates the management IP address that is advertised from the interface. • Use Default — Indicates that information included in the TLVs is per the device defaults. The possible field values are: – Checked — Enables sending the device default LLDP advertisements. – Unchecked — Indicates that the device LLDP advertisement settings are disabled, and LLDP advertisement settings are user defined. This is the default value.
Defining LLDP MED Network Policy The MED Network Policy page contains fields for configuring LLDP. To open the MED Network Policy page, click System → LLDP-MED → MED Network Policy in the tree view. Figure 6-73. MED Network Policy The MED Network Policy page contains the following fields: 186 • Network Policy Number — Displays the network policy number. • Application — Displays the application for which the network policy is defined.
• VLAN Type — Indicates the VLAN type for which the network policy is defined. The possible field values are: – Tagged — Indicates the network policy is defined for tagged VLANs. – Untagged — Indicates the network policy is defined for untagged VLANs. • User Priority — Defines the priority assigned to the network application. • DSCP Value — Defines the DSCP value assigned to the network policy. The possible field value is 1-64. Adding an MED Network Policy: 1 Open the MED Network Policy page.
Defining LLDP MED Port Settings The MED Port Settings contains parameters for assigning LLDP network policies to specific ports. To open the MED Port Settings page, click System → LLDP-MED → Port Settings in the tree view. Figure 6-76. MED Port Settings The MED Port Settings page contains the following fields: • Port — Displays the port on which LLDP-MED is enabled or disabled. • Enable LLDP-MED — Indicates if LLDP-MED is enabled on the selected port.
• Tx Optional TLVs/Available TLVs — Contains a list of available TLVs that can be advertised by the port. The possible field values are: – Network Policy — Advertises the network policy attached to the port. – Location — Advertises the port’s location. • Network Policy/Available Network Policy — Contains a list of network policies that can be assigned to a port. • Location Coordinate — Displays the device’s location map coordinates.
Displaying advertise information details: 1 Open the MED Port Settings page. 2 Click Details. The Details Advertise Information page opens: Figure 6-78.
The Details Advertise Inforsmation page contains the following fields: • Port — The port for which detailed information is played. • Auto-Negotiation Status — The auto-negotiation status of the port. The possible field values are: – Enabled — Auto-negotiation is enabled on the port. – Disabled — Auto-negotiation is disabled on the port. • Advertised Capabilities — The port capabilities advertised for the port. • MAU Type — Indicates the media attachment unit type.
Viewing the LLDP Neighbors Information The Neighbors Information page contains information received from neighboring device LLDP advertisements. To open the Neighbor Information page, click System → LLDP-MED → Neighbors Information in the tree view. Figure 6-79. Neighbors Information • Port — Displays the neighboring port number. • Device ID — Displays the neighboring device ID. • System Name — Displays the neighboring system time.
View the details of the LLDP MED information advertised by a neighbor device: 1 Open the Neighbors Information page. 2 Click the Details button next to the desired entry. The Details Neighbor Information page appears: Figure 6-80. Details Neighbors Information For information on the fields, refer to the Details Advertise Information page above.
Table 6-41. LLDP Neighbors Information CLI Commands CLI Command Description show lldp neighbors interface Displays information about neighboring devices discovered using Link Layer Discovery Protocol (LLDP) The following is an example of the CLI commands: Switch# show lldp neighbors Port Device ID Port ID Hold Time Capabilities System Name 1 0060.704C.73FE 1 117 B ts-7800-2 1 0060.704C.73FD 1 93 B ts-7800-2 2 0060.704C.73F C 9 1 B, R ts-7900-1 3 0060.704C.
Figure 6-81. Global Parameters • Local Engine ID (10 - 64 Hex Characters) — Indicates the local device engine ID. The field value is a hexadecimal string. Each byte in hexadecimal character strings is two hexadecimal digits. Each byte can be separated by a period or a colon. The Engine ID must be defined before SNMPv3 is enabled. For stand-alone devices select a default Engine ID that is comprised of Enterprise number and the default MAC address. • Use Default — Uses the device generated Engine ID.
Enabling Authentication Notifications 1 Open the SNMP Global Parameters page. 2 Select Enable in the Authentication Notifications field. 3 Click Apply Changes. Enabling SNMP Notifications Using CLI Commands The following table summarizes the equivalent CLI commands for viewing fields displayed in the SNMP Global Parameters page. Table 6-42. SNMP Notification Commands CLI Command Description snmp-server enable traps Enables the router to send Simple Network Management Protocol traps.
Version 1,2 notifications Target Address Type Community Version Udp Port Filter To name Sec Retries ------- ---- --------- ------- ---- ------ --- ------- Version 3 notifications Target Address Type Username Security Udp Level Port Filter To name Sec Retries -------- ---- --------- -------- ---- ------ --- ------- System Contact: Robert System Location: Marketing Defining SNMP View Settings SNMP Views provides access or blocks access to device features or feature aspects.
Figure 6-82. • 198 SNMPv3 View Settings View Name — Contains a list of user-defined views. The view name can contain a maximum of 30 alphanumeric characters. The possible field values are: – Default — Displays the default user-defined view. – DefaultSuper — Displays the default super user-defined view. • New Object ID Subtree — Indicates the device feature OID included or excluded in the selected SNMP view.
Adding a View 1 Open the SNMPv3 View Settings page. 2 Click Add. The Add a View page opens: Figure 6-83. Add a View 3 Define the field. 4 Click Apply Changes. The SNMP View is added, and the device is updated. Displaying the View Table 1 Open the SNMPv3 View Settings page. 2 Click Show All. The View Table page opens. Figure 6-84.
Defining SNMP Views Using CLI Commands The following table summarizes the equivalent CLI commands for defining fields displayed in the SNMPv3 View Settings page. Figure 6-85. SNMP View CLI Commands CLI Command Description snmp-server view view-name oid-tree {included | excluded} Creates or updates a view entry. show snmp views [viewname] Displays the configuration of views.
Figure 6-86. Access Control Group • Group Name — The user-defined group to whom access control rules are applied. The field range is up to 30 characters. • Security Model — Defines the SNMP version attached to the group. The possible field values are: • – SNMPv1 — SNMPv1 is defined for the group. – SNMPv2 — SNMPv2 is defined for the group. – SNMPv3 — SNMPv3 is defined for the group. – Security Level — The security level attached to the group. Security levels apply to SNMPv3 only.
Defining SNMP Groups 1 Open the Access Control Group page. 2 Click Add. The Add an Access Control Group page opens: Figure 6-87. Add an Access Control Group 3 Define the fields in the Add an Access Control Group page. 4 Click Apply Changes. The group is added, and the device is updated. Displaying the Access Table 1 Open the Access Control Group page. 2 Click Show All.
Removing SNMP Groups 1 2 3 4 5 Open the Access Control Group page. Click Show All. The Access Table opens. Select an SNMP group. Check the Remove checkbox. Click Apply Changes. The SNMP group is deleted, and the device is updated. Defining SNMP Access Control Using CLI Commands The following table summarizes the equivalent CLI commands for defining fields displayed in the Access Control Group page. Figure 6-88.
Figure 6-89. • User Name — Contains a list of user-defined user names. The field range is up to 30 alphanumeric characters. • Engine ID — Indicates either the local or remote SNMP entity, to which the user is connected. Changing or removing the local SNMP Engine ID deletes the SNMPv3 User Database. • Group Name — Contains a list of user-defined SNMP groups. SNMP groups are defined in the Access Control Group page. • Authentication Method — The authentication method used to authenticate users.
• Authentication Key (MD5-16; SHA-20 hexa chars) — Defines the HMAC-MD5-96 or HMAC-SHA-96 authentication level. The authentication and privacy keys are entered to define the authentication key. If only authentication is required, 16 bytes are defined for MD5. If both privacy and authentication are required, 32 bytes are defined for MD5. Each byte in hexadecimal character strings is two hexadecimal digits. Each byte can be separated by a period or a colon.
Displaying the User Security Model Table 1 Open the User Security Model (USM) page. 2 Click Show All. The User Security Model Table opens: Figure 6-91. User Security Model Table Deleting an User Security Model Table Entry 1 Open the SNMPv3 User Security Model (USM) page. 2 Click Show All. The User Security Model Table opens. 3 Select a User Security Model Table entry. 4 Check the Remove checkbox. 5 Click Apply Changes. The User Security Model Table entry is deleted, and the device is updated.
The following is an example of the CLI commands: console (config)# snmp-server user John user-group auth-md5 1234 console (config)# end console (config)# show snmp users Name Group Name Auth Method Remote ------- ---------- ----------- ------ John user-group md5 Defining Communities Access rights are managed by defining communities in the Community Table. When the community names are changed, access rights are also changed.
• Basic Access Mode — Defines the access rights of the community. The possible field values are: – Read Only — The management access is restricted to read-only, for all MIBs except the community table, for which there is no access. – Read Write — The management access is read-write, for all MIBs except the community table, for which there is no access. – SNMP Admin — The management access is read-write for all MIBs, including the community table.
Defining a New Community 1 Open the SNMP Community page. 2 Click Add. The Add SNMP Community page opens: Figure 6-93. Add SNMP Community 3 Select one of the following: – SNMP Management Station — Defines an SNMP community for a specific management station. (A value of 0.0.0.0 specifies all management stations.) – All — Defines an SNMP community for all management stations. 4 Define the remaining fields. 5 Click Apply Changes. The new community is saved, and the device is updated.
Displaying all Communities 1 Open the SNMP Community page. 2 Click Show All. The Community Table opens: Figure 6-94. Community Table Deleting Communities 1 Open the Community Table page. 2 Click Show All. The Community Table opens. 3 Select a community from the Community Table. 4 Select the Remove check box. 5 Click Apply Changes. The selected community entry is deleted, and the device is updated.
Table 6-44. SNMP Community CLI Commands (continued) CLI Command Description snmp-server v3-host { ipv4-address | ipv6-address | hostname} username [traps | informs] {noauth | auth | priv} [udp-port port] [filter filtername] [timeout seconds] [retries retries] Specifies the recipient of Simple Network Management Protocol Version 3 notification operation. show snmp Checks the SNMP communities status. The following is an example of the CLI commands: console(config)# snmp-server community public_1 su 1.
Defining Notification Filters The Notification Filter page permits filtering traps based on OIDs. Each OID is linked to a device feature or a feature aspect. The Notification Filter page also allows network managers to filter notifications. To open the Notification Filter page, click System → SNMP → Notification Filter in the tree view. Figure 6-95. 212 Notification Filters • Notification Filter Name — The user-defined notification filter.
Adding SNMP Filters 1 Open the Notification Filter page. 2 Click Add. The Add Filter page opens: Figure 6-96. Add Filter 3 Define the relevant fields. 4 Click Apply Changes. The new filter is added, and the device is updated. Displaying the Filter Table 1 Open the Notification Filter page. 2 Click Show All. The Filter Table opens: Figure 6-97.
Removing a Filter 1 Open the Notification Filter page. 2 Click Show All. The Filter Table opens. 3 Select a Filter Table entry. 4 Check the Remove checkbox. The filter entry is deleted, and the device is updated. Configuring Notification Filters Using CLI Commands The following table summarizes equivalent CLI commands for defining fields displayed in the Notification Filters page. Table 6-45. SNMP Notification Filter CLI Commands CLI Command Description Creates or updates an SNMP notification filter.
Figure 6-98.
• Recipient IP — Indicates the IP address to whom the traps are sent. – Notification Type — The notification sent. The possible field values are: – Traps — Traps are sent. – Informs — Informs are sent. • SNMPv1,2 — SNMP versions 1 and 2 are enabled for the selected recipient. Define the following fields for SNMPv1 and SNMPv2: • Community String (1-20 Characters) — Identifies the community string of the trap manager. – Notification Version — Determines the trap type.
• • IPv6 Address Type — When the recipient supports IPv6 (see previous parameter), this specifies the type of static address supported. The possible values are: – Link Local — A Link Local address that is non-routable and used for communication on the same network only. – Global — A globally unique IPv6 address; visible and reachable from different subnets. Link Local Interface — When the server supports an IPv6 Link Local address (see previous parameter), this specifies the the Link Local interface.
Displaying Notification Recipients Tables 1 Open Notification Recipients page. 2 Click Show All. The Notification Recipients Tables page opens: Figure 6-99. Notification Recipients Tables Deleting Notification Recipients 1 Open Notification Recipients page. 2 Click Show All. The Notification Recipients Tables page opens. 3 Select a notification recipient in either the SNMPV1,2 Notification Recipient or SNMPv3 Notification Recipient Tables. 4 Check the Remove checkbox. 5 Click Apply Changes.
Configuring SNMP Notification Recipients Using CLI Commands The following table summarizes the equivalent CLI commands for viewing fields displayed in the Notification Recipients page. Table 6-46.
Managing Files The File Management page contains fields for managing device software, the Image Files, and the Configuration Files. Files can be downloaded from a TFTP server. File Management Overview The configuration file structure consists of the following configuration files: • Startup Configuration File — Contains the commands required to reconfigure the device to the same settings as when the device is powered down or rebooted.
Downloading Files The File Download From Server page contains fields for downloading system image and Configuration files from the TFTP server or HTTP client to the device. To open the File Download From Server page, click System → File Management → File Download in the tree view. Figure 6-100.
• • • Supported IP Format — Specifies the IP format supported by the server. The possible values are: – IPv6 — IP version 6 is supported. – IPv4 — IP version 4 is supported. IPv6 Address Type — When the server supports IPv6 (see previous parameter), this specifies the type of static address supported. The possible values are: – Link Local — A Link Local address that is non-routable and used for communication on the same network only.
The possible field values are: – Running Configuration — Downloads commands into the Running Configuration file. – Startup Configuration — Downloads the Startup Configuration file, and overwrites it. – — Downloads commands into a configuration backup file. The filename is determined by the user at download. The image file overwrites the non-active image.
Uploading Files The File Upload to Server page contains fields for uploading the software from the device to the TFTP server. To open the File Upload to Server page, click System → File Management → File Upload in the tree view. Figure 6-101. • • 224 File Upload to Server Supported IP Format — Specifies the IP format supported by the server. The possible values are: – IPv6 — IP version 6 is supported. – IPv4 — IP version 4 is supported.
• Link Local Interface — When the server supports an IPv6 Link Local address (see previous parameter), this specifies the the Link Local interface. The possible values are: – VLAN1 — The IPv6 interface is configured on VLAN1. – ISATAP — The IPv6 interface is configured on ISATAP tunnel. • Firmware Upload — Indicates that the upload is for firmware. If Firmware Upload is selected, the Configuration Upload fields are grayed out.
Uploading Files 1 Open the File Upload to Server page. 2 Define the file type to upload. 3 Define the fields. 4 Click Apply Changes. The software is uploaded to the device. Uploading Files Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the File Upload to Server page. Table 6-48. File Upload CLI Commands CLI Command Description copy source-url destination-url [snmp] Copies any file from a source to a destination.
Copying Files Files can be copied and deleted from the Copy Files page. To open the Copy Files page, click System→ File Management→ Copy Files in the tree view. Figure 6-102. • • Copy Files Copy Configuration — When selected, copies the configuration to the destination file as specified. – Source — Indicates the type of file to be copied to the destination file. Select either the Running Configuration or Startup Configuration.
Restoring Company Factory Default Settings 1 Open the Copy Files page. 2 Click Restore Company Factory Defaults. 3 Click Apply Changes. The company factory default settings are restored, and the device is updated. Copying and Deleting Files Using CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the Copy Files page. Table 6-49.
Managing Device Files The Files on File System page provides information about files currently stored on the system, including file names, file sizes, files modifications, and file permissions. The files system permits managing up to five files and a total file size of 3MB. To open the Files on File System page, click System→ File Management→ File System in the tree view. Figure 6-103.
Managing Files Using CLI Commands The following table summarizes the equivalent CLI commands for managing system files. Table 6-50. Copy Files CLI Commands CLI Command Description dir Display list of files on a flash file system The following is an example of the CLI commands: console# dir Directory of flash: File Name Permission Flash Size Data Size Modified -------------- ------ ------ ------ -------------------- 3.
Configuring General Device Tuning Parameters The General Settings page provides information for defining general device parameters. To open the General Settings page, click System → Advanced Settings → General in the tree view. Figure 6-104. General Settings • Attribute — The general setting attribute. • Current — The currently configured value. • After Reset — The future (after reset) value. By entering a value in the After Reset column, memory is allocated to the field table.
Viewing RAM Log Entries Counter Using the CLI Commands The following table summarizes the equivalent CLI commands for setting fields displayed in the General Settings page. Table 6-51. General Settings CLI Commands CLI Command Description logging buffered size number Sets the number of syslog messages stored in the internal buffer (RAM). port jumbo-frame Enables jumbo frames for the device. show port jumbo-frame Displays jumbo frame information for the device.
Figure 6-105. Global Parameters • iSCSI Status — Whether iSCSI Optimization is enabled on the device. The default value is enabled. • Classification — Whether priority of iSCSI packets is determined by CoS or DSCP. Select the classification and then choose the desired value. • Remark — Whether iSCSI remarks are enabled on the device. • iSCSI Aging Time — How long the device will wait after the last received frame of an iSCSI session before deleting the session from the list.
Defining iSCSI Global Parameters Using CLI Commands The following table summarizes the equivalent CLI commands for defining fields displayed in the iSCSI Global Parameters page. Figure 6-106. iSCSI Global Parameters CLI Commands CLI Command iscsi enable no iscsi enable iscsi cos {up vpt | dscp dscp} [remark] [bandwidth flowbandwidth] [burstsize flowburstsize] Description To globally enable iSCSI awareness use the iscsi enable command in global configuration mode.
Figure 6-107. The following is an example of the CLI commands: Console# show iscsi Target: iqn.1993-11.com.disk-vendor:diskarrays.sn.45678 -------------------------------------------------------------Session 1: --------Initiator: iqn.1992-04.com.os-vendor.plan9:cdrom.12. storage:sys1.xyz Time started: 23-Jul-2002 10:04:50 Time for aging out: 10 min ISID: 11 Initiator Initiator Target Target IP address TCP port IP address IP port ---------- --------- ---------- ------- 172.16.1.3 49154 172.16.
Managing iSCSI Targets The iSCSI Targets Table contains information about iSCSI targets in the network. To open the iSCSI Targets Table, click System → iSCSI Optimization→ iSCSI Targets in the tree view. Figure 6-108. iSCSI Targets Table • TCP Port — The TCP port used by the target for iSCSI communications. • IP Address — The IP address of the target. The IP address 0.0.0.0 is any IP address. • Target Name — The name of the target. • Remove — Used to remove targets from the table.
3 Fill in the parameters. 4 Click Apply Changes. Removing Targets 1 Open the iSCSI Targets Table. 2 In the table, check the Remove checkbox next to each target to be removed. 3 Click Apply Changes. Defining iSCSI Targets Using CLI Commands The following table summarizes the equivalent CLI commands for defining fields displayed in the iSCSI Targets Table. Figure 6-110.
Monitoring iSCSI Sessions The iSCSI Sessions page contains information about iSCSI communications going through the device. To open the iSCSI Sessions page, click System → iSCSI Optimization→ iSCSI Sessions in the tree view. Figure 6-111. iSCSI Sessions For each session, the following information is shown: • Target Name — The name of the target. • Initiator Name — The name of the initiator. • ISID — The iSCSI session ID.
Defining iSCSI Sessions Using CLI Commands The following table summarizes the equivalent CLI commands for defining fields displayed in the iSCSI Sessions page. Figure 6-112. iSCSI Sessions CLI Commands CLI Command show iscsi sessions [detailed] Description To display the iSCSI sessions, use the show iscsi sessions privileged EXEC command.
Configuring System Information
Configuring Device Information This section provides all system operation and general information for configuring network security, ports, Address tables, GARP, VLANs, Spanning Tree, Port Aggregation, and Multicast Support. Configuring Network Security The device enables network security through both Access Control Lists and Locked Ports. To open the Network Security page select Switch → Network Security. Network Security Overview This section describes the network security features.
MAC Based Authentication MAC based authentication is an alternative to 802.1x that allows allows network access to devices (such as printers and IP phones) that do not have the 802.1X supplicant capability. MAC authentication uses the MAC address of the connecting device to grant or deny network access. Advanced Port Based Authentication Advanced Port Based Authentication enables multiple hosts to be attached to a single port.
Configuring Port Based Authentication The Port Based Authentication page contains fields for configuring port based authentication and for enabling Guest VLANs. To open the Port Based Authentication page, click Switch → Network Security → Port Based Authentication. Figure 7-1.
• • • – Enable — Enables port based authentication on the device. – Disable — Disables port based authentication on the device. Authentication Method — The Authentication method used. The possible field values are: – None — No authentication method is used to authenticate the port. – RADIUS — Port authentication is performed using the RADIUS server. – RADIUS, None — Port authentication is performed first using the RADIUS server.
– Authenticated ports are added to the supplicant VLAN as untagged. – Authenticated ports remain unauthenticated VLAN and Guest VLAN members. Static VLAN configuration is not applied to the port. – The following list of VLANs cannot participate in DVA: an Unauthenticated VLAN, a Dynamic VLAN that was created by GVRP, a Voice VLAN, a Default VLAN and a Guest VLAN. – Network administrators can delete the supplicant VLAN while the supplicant is logged in.
Displaying the Port Based Authentication Table 1 Display the Port Based Authentication page. 2 Click Show All. The Port Based Authentication Table opens: Figure 7-2. Port Based Authentication Table Termination Cause — The reason for which the port authentication was terminated. Copy To Checkbox — Copies port parameters from one port to the selected ports. Select All — Selects all ports in the Port Based Authentication Table.
Enabling Port Based Authentication Using the CLI Commands The following table summarizes the equivalent CLI commands for enabling the port based authentication as displayed in the Port Based Authentication page. Table 7-1. Port Authentication CLI Commands CLI Command Description aaa authentication dot1x default method1 [method2.] Specifies one or more authentication, authorization, and accounting (AAA) methods for use on interfaces running IEEE 802.1X.
The following is an example of the CLI commands: console> enable Console# show dot1x Interface Admin Mode Oper Mode Reauth Control Reauth Period Username --------- ---------- ---------- -------- ------ -------- g1 Auto Authorized Ena 3600 Bob g2 Auto Authorized Ena 3600 John g3 Auto Unauthorized Ena 3600 Clark g4 Force-auth Authorized Dis 3600 n/a Configuring Advanced Port Based Authentication The Multiple Hosts page provides information for defining advanced port based auth
• Port — The port number for which Advanced Port Based Authentication is enabled. • Host Authentication — Defines the host authentication type. The possible fields are: • – Single — Enables a single authorized host for single-session access to the system. – Multiple Host — Enables a single host to authorize multiple hosts for single-session access to the system. This setting must be enabled in order to either disable the ingress-filter, or to use port-lock security on the selected port.
Displaying the Multiple Hosts Table 1 Open the Multiple Hosts page. 2 Click Show All. The Multiple Hosts Table opens: Figure 7-4. Multiple Hosts Table Enabling Multiple Hosts Using the CLI Commands The following table summarizes the equivalent CLI commands for enabling the advanced port based authentication as displayed in the Multiple Hosts page. Table 7-2. Multiple Hosts CLI Commands CLI Command Description dot1x multiple-hosts Allows multiple hosts (clients) on an 802.
Authenticating Users The Authenticated Users page displays user port access lists. The User Access Lists are defined in the Add User Name page. To open the Authenticated Users page, click Switch → Network Security → Authenticated Users. Figure 7-5. Authenticated Users • User Name — List of users authorized via the RADIUS Server. • Port — The port number(s) used for authentication - per user name. • Session Time — The amount of time the user was logged on to the device.
Displaying the Authenticated Users Table 1 Open the Add User Name page. 2 Click Show All. The Authenticated Users Table opens: Figure 7-6. Authenticated Users Table Authenticating Users Using the CLI Commands The following table summarizes the equivalent CLI commands for authenticating users as displayed in the Add User Name page. Table 7-3. Add User Name CLI Commands CLI Command Description show dot1x users [username username] Displays 802.1X users for the device.
packet is received on a locked port, and the packet’s source MAC address is not tied to that port (either it was learned on a different port, or is unknown to the system), the protection mechanism is invoked, and can provide various options. Unauthorized packets arriving to a locked port are either: • Forwarded • Discarded with no trap • Discarded with a trap • The ingress port is disabled Locked port security also enables storing a list of MAC addresses in the configuration file.
• • • Set Port — The port is either locked or unlocked. The possible field values are: – Unlocked — Unlocks Port. This is the default value. – Locked — Locks Port. Learning Mode — The port learning mode. The possible field values are: – Classic Lock — The port will not learn new IP addresses. A computer with a different address cannot connect to the network via the port. – Limited Dynamic Lock — The port will learn a limited number of new IP addresses and then lock.
Displaying the Locked Port Table 1 Open the Port Security page. 2 Click Show All. The Port Security Table opens: Locked Ports can also be defined from the Locked Ports Table, as well as the Port Security page. Figure 7-8. Port Security Table Configuring Locked Port Security with CLI Commands The following table summarizes the equivalent CLI commands for configuring Locked Port security as displayed in the Port Security page. Table 7-4.
The following is an example of the CLI commands: Console # show ports security Port Status Action Trap Frequency Counter ----- ------- ------- ------- --------- -------- g7 Unlocked Discard Enable 100 88 g8 Unlocked Discard, Shutdown Disable g3 Unlocked - - - - ACL Overview Access Control Lists (ACL) allow network managers to define classification actions and rules for specific ingress ports.
Figure 7-9. Network Security - IP Based ACL • ACL Name — User-defined ACLs. • New ACE Priority — ACE priority that determines which ACE is matched to a packet based on a first-match basis. • Protocol — Enables creating an ACE based on a specific protocol. The possible field values are: – IP — Internet Protocol (IP). Specifies the format of packets and their addressing method. IP addresses packets and forwards the packets to the correct port. – ICMP — Internet Control Message Protocol (ICMP).
– TCP — Transmission Control Protocol (TCP). Enables two hosts to communicate and exchange data streams. TCP guarantees packet delivery, and guarantees packets are transmitted and received in the order the are sent. – EGP — Exterior Gateway Protocol (EGP). Permits exchanging routing information between two neighboring gateway hosts in an autonomous systems network. – IGP — Interior Gateway Protocol (IGP). Allows for routing information exchange between gateways in an autonomous network.
• Source Port — The TCP/UDP source port. Select Any to include all ports. • Destination Port — The TCP/UDP destination port. Select Any to include all ports. • Source IP Address — Matches the source port IP address to which packets are addressed to the ACE. Wildcard masks specify which bits are used and which bits are ignored. A wildcard of 0.0.0.0 indicates that all the bits are important. • Destination IP Address — Matches the destination port IP address to which packets are addressed to the ACE.
Adding IP based ACLs 1 Open the IP Based ACL page. 2 Click Add. The Network Security - IP Based ACL page opens: Figure 7-10. Add IP Based ACL 3 Define the relevant fields. 4 Click Apply Changes. The IP based protocol is defined, and the device is updated.
Displaying the ACEs Associated with IP based ACLs 1 Open the Network Security - IP Based ACL page. 2 Click Show All. The ACEs Associated with IP-ACL opens: Figure 7-11. ACEs Associated with IP-ACL Removing an IP based ACL 1 Open the Network Security - IP Based ACL page. 2 Click Show All. The ACEs Associated with IP-ACL Table opens. 3 Check the Remove ACL checkbox. 4 Click Apply Changes. Removing an IP based ACE 1 Open the Network Security - IP Based ACL page. 2 Click Show All.
Configuring IP Based ACLs with CLI Commands The following table summarizes the equivalent CLI commands for configuring IP Based ACLs. Table 7-5. IP Based ACL CLI Commands CLI Command Description ip access-list access-list-name To define an IPv4 access list and to place the device in IPv4 access list configuration mode, use the ipv4 access-list command in global configuration mode. To remove the access list, use the no form of this command.
Defining MAC Based Access Control Lists The Network Security - MAC Based ACL page allows a MAC- based ACL to be defined. ACEs can be added only if the ACL is not bound to an interface. To define MAC Based ACLs, click Switch → Network Security → MAC Based ACL. Figure 7-12. Network Security - MAC Based ACL • ACL Name — Displays the user-defined MAC based ACLs. • New ACE Priority — Indicates the ACE priority, which determines which ACE is matched to a packet on a first-match basis.
• Destination Address — Matches the destination MAC address to which packets are addressed to the ACE. Wildcard masks specify which bits are used and which bits are ignored. A wildcard of 0.0.0.0 indicates that all the bits are important. • VLAN ID — Matches the packet’s VLAN ID to the ACE. The possible field values are 1 to 4095. • CoS — Indicates the CoS values by which the packets are filtered. • Cos Mask — Indicates the CoS Mask by which the packets are filtered.
Adding MAC based ACLs 1 Open the MAC Based ACL page. 2 Click Add. The Network Security - MAC Based ACL page opens: Figure 7-13. Add Mac Based ACL 3 Define the relevant fields. 4 Click Apply Changes. The MAC based protocol is defined, and the device is updated.
Displaying the ACEs Associated with MAC based ACLs 1 Open the Network Security - MAC Based ACL page. 2 Click Show All. The ACEs Associated with MAC Based ACL opens: Removing a MAC based ACL 1 Open the Network Security - MAC Based ACL page. 2 Click Show All. The ACEs Associated with MAC-ACL Table opens. 3 Check the Remove ACL checkbox. 4 Click Apply Changes. Removing a MAC based ACE 1 Open the Network Security - MAC Based ACL page. 2 Click Show All. The ACEs Associated with MAC-ACL Table opens.
Configuring MAC Based ACLs with CLI Commands The following table summarizes the equivalent CLI commands for configuring MAC Based ACLs. Table 7-6. MAC Based ACL CLI Commands CLI Command Description mac access-list access-list-name To define a Layer 2 access list and to place the device in MAC access list configuration mode, use the mac access-list command in global configuration mode. To remove the access list, use the no form of this command.
3 In the Bind ACL to an Interface field, select a port or LAG. 4 Click Apply Changes. The ACL is bound to the interface. Displaying the ACL Bindings Table: 1 Open the Network Security - ACL Binding page. 2 Click Show All. The ACL Bindings Table opens: Figure 7-15. ACL Bindings Table Copying ACL Parameters Between Interfaces 1 Open the Network Security - ACL Binding page. 2 Click Show All. The ACL Bindings Table opens.
Configuring ACL Bindings with CLI Commands The following table summarizes the equivalent CLI commands for configuring ACL Bindings. Table 7-7. ACL Bindings CLI Commands CLI Command Description service-acl input acl-name To control access to an interface, use the service-acl command in interface configuration mode. To remove the access control, use the no form of this command.
Defining DHCP Snooping Global Parameters The DHCP Snooping Global Parameters page contains parameters for enabling and configuring DHCP Snooping on the device. To define DHCP global parameters, click Switch→ DHCP Snooping → Global Parameters. Figure 7-16. • • • 270 Global Parameters DHCP Snooping Status — Indicates if DHCP Snooping is enabled on the device. The possible field values are: – Enable — Enables DHCP Snooping on the device. – Disable — Disables DHCP Snooping on the device.
Configuring DHCP Snooping Global Parameters with CLI Commands The following table summarizes the equivalent CLI commands for configuring DHCP Snooping global parameters. Table 7-8. DHCP Snooping Global Parameters CLI Commands CLI Command Description ip dhcp snooping Use the ip dhcp snooping global configuration command to globally enable DHCP snooping. Use the no form of this command to return to the default setting.
The following is an example of some of the CLI commands: Console# show ip dhcp snooping DHCP snooping is enabled DHCP snooping is configured on following VLANs: 2, 7-18 DHCP snooping database: enabled Option 82 on untrusted port is allowed Verification of hwaddr field is enabled Interface Trusted ----------- ----------- g1 yes g2 yes Defining DHCP Snooping on VLANs The DHCP Snooping VLAN Settings Page allows network managers to enable DHCP Snooping on VLANs.
Defining DHCP Snooping on VLANS 1 Open the DHCP Snooping VLAN Settings page. 2 Click Add and Remove to add/remove VLAN IDs to or from the Enabled VLAN list. 3 Click Apply Changes. Configuring DHCP Snooping on VLANs with CLI Commands The following table summarizes the equivalent CLI commands for configuring DHCP Snooping on VLANs . Table 7-9.
Displaying the Trusted Interfaces Table: 1 Open the Trusted Interfaces page. 2 Click Show All. The Trusted Interfaces Table opens: Figure 7-19. Trusted Interfaces Table Copying Trusted Interfaces Settings Between Interfaces 1 Open the Trusted Interfaces page. 2 Click Show All. The Trusted Interfaces Table opens. 3 In the Unit and Copy from fields, select a Port or LAG from which you want to copy settings. 4 In the table, check the Copy to checkbox for each entry to which you want to copy the settings.
Configuring DHCP Snooping Trusted Interfaces with CLI Commands The following table summarizes the equivalent CLI commands for configuring DHCP Snooping Trusted Interfaces. Table 7-10. DHCP Snooping Trusted Interfaces CLI Commands CLI Command Description ip dhcp snooping trust Use the ip dhcp snooping trust interface configuration command to configure a port as trusted for DHCP snooping purposes. Use the no form of this command to return to the default setting.
Querying the Database 1 Open the Binding Database page. 2 Select the following categories: • MAC Address — Indicates the MAC addresses recorded in the DHCP Snooping Database. • IP Address — Indicates the IP addresses recorded in the DHCP Snooping Database. • VLAN — Indicates the VLANs recorded in the DHCP Snooping Database. • Interface — Contains a list of interfaces recorded in the DHCP Snooping Database. The possible field values are: Port and LAG.
Figure 7-21. Bind DHCP Snooping Page 3 Define the fields. 4 Click Apply Changes. Configuring DHCP Snooping Binding Database with CLI Commands The following table summarizes the equivalent CLI commands for configuring DHCP Snooping Binding Database . Table 7-11.
Configuring Ports The Ports page contains links to port functionality pages including advanced features, such as Storm Control and Port Mirroring. To open the Ports page, click Switch → Ports. Defining Port Parameters The Port Configuration page contains fields for defining port parameters. To open the Port Configuration page, click Switch → Ports → Port Configuration in the tree view. Figure 7-22. 278 Port Configuration • Port — The port number for which port parameters are defined.
• Re-Activate Suspended Port — Reactivates a port if the port has been suspended through the locked port security option. • Operational Status — The port operational status. Possible field values are: – Suspended — The port is currently active, and is currently not receiving or transmitting traffic. – Active — The port is currently active and is currently receiving and transmitting traffic. – Disable — The port is currently disabled, and is not currently receiving or transmitting traffic.
Hubs and switches are deliberately wired opposite the way end stations are wired, so that when a hub or switch is connected to an end station, a straight through Ethernet cable can be used, and the pairs are match up properly. When two hubs/switches are connected to each other, or two end stations are connected to each other, a crossover cable is used ensure that the correct pairs are connected. The possible field values are: – Auto — Used to automatically detect the cable type.
Displaying the Port Configuration Table: 1 Open the Port Configuration page. 2 Click Show All. The Ports Configuration Table opens: Figure 7-23. Ports Configuration Table Configuring Ports with CLI Commands The following table summarizes the equivalent CLI commands for configuring ports as displayed in the Ports Configuration Table page. Table 7-12.
Table 7-12. 282 Port Configuration CLI Commands (continued) CLI Command Description system flowcontrol Enables flow control on cascade ports (between the 2 CPUs). This command is relevant for 48-port devices only. mdix {on | auto} Enables automatic crossover on a given interface or Port-channel. show interfaces configuration [ethernet interface |port-channel port-channel-number] Displays the configuration for all configured interfaces.
The following is an example of the CLI commands: Console (config)# interface ethernet g5 Console (config-if)# description RD SW#3 Console (config-if)# shutdown Console (config-if)# no shutdown Console (config-if)# speed 100 Console (config-if)# duplex full Console (config-if)# negotiation Console (config-if)# back-pressure Console (config-if)# flowcontrol on Console (config-if)# mdix auto Console (config-if)# exit Console (config)# exit Console# show interfaces configuration ethernet g5 Port Type Duplex
Console# show interfaces status Port Type Duplex Speed Neg Flow Control Link State Back Mdix Pressure Mode ---- ----- ------ ------ ---- ------ ----- ------ ---- g1 1G Full 100 Auto On Up Enable On g1 100 Full 100 Off Off Down Disable Off g2 100 Full 1000 Off Off Up Disable On Ch Type Duplex Speed Neg Flow Control Back Link Pressure State --- ---- ----- --- ----- ------- ------- ------ 1 1000 Full 1000 Off Off Disable Up Configuring Load Bal
Figure 7-24. LAG Configuration The LAG Configuration page contains the following fields: • Load Balance — Indicates the load balancing type enabled on the LAG. The possible field values are: – Layer 2 — Enables load balancing based on static and dynamic MAC addresses. – Layer 3 — Enables load balancing based on source and destination IP addresses. – Layer 2-3 — Enables load balancing based on static and dynamic MAC addresses, and source and destination IP addresses. • LAG — The LAG number.
• LAG Type — The port types that comprise the LAG. • Admin Status — Enables or disables traffic forwarding through the selected LAG. • Current LAG Status — Indicates if the LAG is currently operating. • Re-Activate Suspended LAG — Reactivates a suspended LAG. • Operational Status — Operational status of the LAG. • Admin Auto Negotiation — Enables or disables Auto Negotiation on the LAG.
Displaying the LAG Configuration Table: 1 Open the LAG Configuration page. 2 Click Show All. The LAG Configuration Table opens: Figure 7-25. LAG Configuration Table Configuring LAGs with CLI Commands The following table summarizes the equivalent CLI commands for configuring LAGs as displayed in the LAG Configuration page. Table 7-13. LAG Configuration CLI Commands CLI Command Description interface port-channel port-channel-number Enters the interface configuration mode of a specific port-channel.
Table 7-13. LAG Configuration CLI Commands (continued) CLI Command Description autobaud Sets the line for automatic baud rate detection. negotiation Enables auto negotiation operation for the speed and duplex parameters of a given interface. back-pressure Enables Back Pressure on a given interface. flowcontrol {auto | on | Configures the Flow Control on a given interface.
The following is an example of the CLI commands: console(config-if)# channel-group 1 mode on console(config-if)# exit console(config)# interface range e g21-24 console(config-if)# channel-group 1 mode on console(config-if)# ex console(config)# interface ethernet g5 console(config-if)# channel-group 2 mode on console(config-if)# exit console(config)# exit console# show interfaces port-channel Channel Ports --------- --------- ch1 Inactive: g(21-24) ch2 Active: g5 ch3 ch4 ch5 ch6 ch7 ch8 console# En
Figure 7-26. Storm Control • Port — The port from which storm control is enabled. • Broadcast Control — Enables or disables forwarding broadcast packet types on the device. • Mode — Specifies the Broadcast mode currently enabled on the device. The possible field value are: • – Unknown Unicast, Multicast & Broadcast — Counts Unicast, Multicast, and Broadcast traffic. – Multicast & Broadcast — Counts Broadcast and Multicast traffic together. – Broadcast Only — Counts only Broadcast traffic.
Displaying the Storm Control Table 1 Open the Storm Control page. 2 Click Show All. The Storm Control Table opens: Figure 7-27. Storm Control Table Configuring Storm Control with CLI Commands The following table summarizes the equivalent CLI commands for configuring Storm Control as displayed on the Storm Control page. Table 7-14. Storm Control CLI Commands CLI Command Description port storm-control include-multicast Enables the device to count Multicast packets together with broadcast packets.
The following is an example of the CLI commands: console> enable console# configure Console(config)# port storm-control include-multicast Console(config)# port storm-control broadcast rate 8000 Console(config)# interface ethernet g1 Console(config-if)# port storm-control broadcast enable Console(config-if)# end Console# show ports storm-control Port Broadcast Storm control [Packets/sec] ----- ------------------------------------- g1 8000 g2 Disabled g4 Disabled Defining Port Mirroring Sessions Por
The following restrictions apply to ports configured to be source ports: • Source Ports cannot be a LAG member. • Ports cannot be configured as a destination port. • All packets are transmitted tagged from the destination port. • Monitored all RX/TX packets to the same port. To open the Port Mirroring page, click Switch→ Ports→ Port Mirroring in the tree view. Figure 7-28. Port Mirroring • Destination Port — The port number to which port traffic is copied.
5 Define the Type field. 6 Click Apply Changes. The new source port is defined, and the device is updated. Deleting a Copy Port from a Port Mirroring Session 1 Open the Port Mirroring page. 2 Select the Remove check box. 3 Click Apply Changes. The selected port mirroring session is deleted, and the device is updated.
Configuring Address Tables MAC addresses are stored in either the Static Address or the Dynamic Address databases. A packet addressed to a destination stored in one of the databases is forwarded immediately to the port. The Static and Dynamic Address Tables can be sorted by interface, VLAN, and interface type. MAC addresses are dynamically learned as packets from sources arrive at the device. Addresses are associated with ports by learning the ports from the frame’s source address.
• • Status — MAC address status. Possible values are: – Secure — Guarantees that a locked port MAC address is not deleted. – Permanent — The MAC address is permanent. – Delete on Reset — The MAC address is deleted when the device is reset. – Delete on Timeout — The MAC address is deleted when a timeout occurs. Remove — When selected, removes the MAC address from the MAC Address Table. Adding a Static MAC Address 1 Open the Static MAC Address page. 2 Click Add.
Configuring Static Address Parameters Using CLI Commands The following table summarizes the equivalent CLI commands for configuring static address parameters as displayed in the Static MAC Address page. Table 7-16. Static Address CLI Commands CLI Command Description Adds a static MAC-layer station source bridge address mac-address {ethernet interface | port-channel port-channeladdress to the bridge table.
Viewing Dynamic Addresses The Dynamic Address Table contains fields for querying information in the dynamic address table, including the interface type, MAC addresses, VLAN, and table sorting. Packets forwarded to an address stored in the address table are forwarded directly to those ports. The Dynamic Address Table also contains information about the aging time before a dynamic MAC address is erased, and includes parameters for querying and viewing the Dynamic Address list.
• Address Aging (10-630) — Specifies the amount of time the MAC Address remains in the Dynamic Address Table before it is timed out if no traffic from the source is detected. The default value is 300 seconds. • Interface — Specifies the interface for which the table is queried. There are two interface types from which to select. – Port — Specifies the port numbers for which the table is queried. – LAG — Specifies the LAG for which the table is queried.
Querying and Sorting Dynamic Addresses Using CLI Commands The following table summarizes the equivalent CLI commands for querying and sorting dynamic addresses as displayed in the Dynamic Address Table. Table 7-17. Query and Sort CLI Commands CLI Command Description bridge aging-time seconds Sets the address table aging time. show bridge address-table Displays classes of dynamically created [vlan vlan] [ethernet entries in the bridge-forwarding database.
Configuring GARP Generic Attribute Registration Protocol (GARP) is a general-purpose protocol that registers any network connectivity or membership-style information. GARP defines a set of devices interested in a given network attribute, such as VLAN or Multicast address. When configuring GARP, ensure the following: • The leave time must be greater than or equal to three times the join time. • The leave all time must be greater than the leave time.
• GARP Leave Timer (10 - 2147483640) — Time lapse, in milliseconds, that the device waits before leaving its GARP state. Leave time is activated by a Leave All Time message sent/received, and cancelled by the Join message received. Leave time must be greater than or equal to three times the join time. The possible field value is 0-2147483640. The default value is 600 msec. • GARP Leave All Timer (10 - 2147483640) — Time lapse, in milliseconds, that all devices wait before leaving the GARP state.
The following is an example of the CLI commands: console(config)# interface ethernet g1 console(config-if)# garp timer leave 900 console(config-if)# end console# show gvrp configuration ethernet g1 GVRP Feature is currently Disabled on the device.
Defining STP Global Settings The STP Global Settings page contains parameters for enabling and configuring STP operation on the device. To open the STP Global Settings page, click Switch→ Spanning Tree → Global Settings in the tree view. Figure 7-32. • • 304 STP Global Settings Spanning Tree State — Enables or disables Spanning Tree on the device.
• • BPDU Handling — Determines how BPDU packets are managed when STP is disabled on the port/ device. BPDUs are used to transmit spanning tree information. The possible field values are: – Filtering — Filters BPDU packets when spanning tree is disabled on an interface. – Flooding — Floods BPDU packets when spanning tree is disabled on an interface. This is the default value. Port Cost Default Values — Determines the Spanning Tree default path cost method.
Defining STP Global Parameters 1 Open the STP Global Settings page. 2 Select the port that needs to be enabled from the Select a Port drop-down menu. 3 Select Enable in the Spanning Tree State field. 4 Select the STP mode in the STP Operation Mode field, and define the bridge settings. 5 Click Apply Changes. STP is enabled on the device. Modifying STP Global Parameters 1 Open the STP Global Settings page. 2 Define the fields in the dialog. 3 Click Apply Changes.
The following is an example of the CLI commands: console(config)# spanning-tree console(config)# spanning-tree mode rstp console(config)# spanning-tree priority 12288 console(config)# spanning-tree hello-time 5 console(config)# spanning-tree max-age 15 console(config)# spanning-tree forward-time 25 console(config)# exit console# show spanning-tree Spanning tree enabled mode RSTP Default port cost method: short Root ID Priority 12288 Address 00:e8:00:b4:c0:00 This switch is the root Hello Time 5 sec
Defining STP Port Settings The STP Port Settings page contains fields for assigning STP properties to individual ports. To open the STP Port Settings page, click Switch→ Spanning Tree→ Port Settings in the tree view. Figure 7-33. 308 STP Port Settings • Select a Port — Port on which STP is enabled. • STP — Enables or disables STP on the port. • Fast Link — When selected, enables Fast Link mode for the port.
• • Port State — The current port STP state. If enabled, the port state determines what forwarding action is taken on traffic. Possible port states are: – Disabled — The port link is currently down. – Blocking — The port is currently blocked and cannot be used to forward traffic or learn MAC addresses. Blocking is displayed when Classic STP is enabled. – Listening — The port is currently in the listening mode. The port cannot forward traffic nor can it learn MAC addresses.
• Priority (0-240, in steps of 16) — The priority value of the port. The priority value influences the port choice when a bridge has two ports connected in a loop. The priority value is between 0-240. The priority value is provided in increments of 16. • Designated Bridge ID — The bridge priority and the MAC Address of the designated bridge. • Designated Port ID — The selected port’s priority and interface. • Designated Cost — The cost of the port participating in the STP topology.
Table 7-20. STP Port Settings CLI Commands CLI Command Description spanning-tree disable Disables spanning tree on a specific port. spanning-tree cost cost Configures the spanning tree cost contribution of a port. spanning-tree port-priority priority Configures port priority. spanning-tree portfast Enables PortFast mode. show spanning-tree [ethernet interface | Displays spanning tree configuration.
Defining STP LAG Settings The STP LAG Settings page contains fields for assigning STP aggregating port parameters. To open the STP LAG Settings page, click Switch→ Spanning Tree→ LAG Settings in the tree view. Figure 7-34. 312 STP LAG Settings • Select a LAG — The user-defined LAG. For more information, see "Defining LAG Membership" on page 354. • STP — Enables or disables STP on the LAG. • Fast Link — Enables Fast Link mode for the LAG.
• • LAG State — Current STP state of a LAG. If enabled, the LAG state determines what forwarding action is taken on traffic. If the bridge discovers a malfunctioning LAG, the LAG is placed in the Broken state. Possible LAG states are: – Disabled — The LAG link is currently down. – Blocking — The LAG is blocked and cannot be used to forward traffic or learn MAC addresses. – Listening — The LAG is in the listening mode and cannot forward traffic or learn MAC addresses.
Modifying the LAG STP Parameters 1 Open the STP LAG Settings page. 2 Select a LAG from the Select a LAG drop-down menu. 3 Modify the fields as desired. 4 Click Apply Changes. The STP LAG parameters are modified, and the device is updated. Defining STP LAG Settings Using CLI Commands The following table summarizes the equivalent CLI commands for defining STP LAG settings. Table 7-21. STP LAG Settings CLI Commands CLI Command Description spanning-tree Enables spanning tree.
RSTP has the following different port states: • Disabled • Learning • Discarding • Forwarding Rapid Spanning Tree is enabled on the STP Global Settings page. To open the Rapid Spanning Tree (RSTP) page, click Switch→ Spanning Tree→ Rapid Spanning Tree in the tree view. Figure 7-35. Rapid Spanning Tree (RSTP) • Interface — Port or LAG on which Rapid STP is enabled. • Role — The port role assigned by the STP algorithm in order to provide to STP paths.
• Mode — Displays the STP mode by which STP is enabled on the device. The possible field values are: – Classic STP — Enables Classic STP on the device. This is the default value. – Rapid STP — Enables Rapid STP on the device. • Multiple STP — Enables Multiple STP on the device. • Fast Link Operational Status — Indicates if Fast Link is enabled or disabled for the port or LAG. If Fast Link is enabled for a port, the port is automatically placed in the forwarding state.
Defining Rapid STP Parameters Using CLI Commands The following table summarizes the equivalent CLI commands for defining Rapid STP parameters as displayed in the Rapid Spanning Tree (RSTP) page. Table 7-22. RSTP Settings CLI Command CLI Command Description spanning-tree link-type {point-to-point | shared} Overrides the default link-type setting. spanning tree mode {stp | rstp} Configure the spanning tree protocol currently running.
Figure 7-36. 318 MSTP Settings • Region Name (1-32 Characters) — Indicates user-defined MSTP region name. • Revision (0-65535) — Defines unsigned 16-bit number that identifies the current MST configuration revision. The revision number is required as part of the MST configuration. The possible field range is 0-65535. • Max Hops (1-40) — Defines the total number of hops that occur in a specific region before the BPDU is discarded. Once the BPDU is discarded, the port information is aged out.
• Instance ID — Defines the MSTP instance. The field range is 0-15. • Included VLANs — Maps the selected VLANs to the selected instance. Each VLAN belongs to one instance. • Bridge Priority (0-61440, in steps of 4096) — Specifies the selected spanning tree instance device priority. The field range is 0-61440 • Designated Root Bridge ID — Indicates the ID of the bridge with the lowest path cost to the instance ID. • Root Port — Indicates the selected instance’s root port.
Defining MST Instances Using CLI Commands The following table summarizes the equivalent CLI commands for defining MST instance groups as displayed in the MSTP Settings page. Table 7-23. MSTP Instances CLI Commands CLI Command Description spanning-tree mst configuration Enters MST Configuration mode. instance instance-id {add | remove} vlan vlan-range Maps VLANs to the MST instance. name string Sets the configuration name.
Defining MSTP Interface Settings The MSTP Interface Settings page contains parameters assigning MSTP settings to specific interfaces. To open the MSTP Interface Settings page, click Switch → Spanning Tree → MSTP Interface Settings in the tree view. Figure 7-38. MSTP Interface Settings • Instance ID — Defines the VLAN group to which the interface is assigned. Possible field range is 0-15. • Interface — Assigns either ports or LAGs to the selected MSTP instance.
• Role — Indicates the port role assigned by the STP algorithm in order to provide to STP paths. The possible field values are: – Root — Provides the lowest cost path to forward packets to root device. – Designated — Indicates the port or LAG via which the designated device is attached to the LAN. – Alternate — Provides an alternate path to the root device from the root interface. – Backup — Provides a backup path to the designated port path toward the Spanning Tree leaves.
Viewing the MSTP Interface Table 1 Open the MSTP Interface Settings page. 2 Click Show All. The MSTP Interface Table page opens: Figure 7-39. MSTP Interface Table Configuring VLANs VLANs are logical subgroups of a Local Area Network (LAN) created via software rather than defining a hardware solution. VLANs combine user stations and network devices into a single domain regardless of the physical LAN segment to which they are attached. VLANs allow network traffic to flow more efficiently within subgroups.
The VLAN ID tag is assigned to a customer port in the service providers network. The designated port then provides additional services to the packets with the double-tags. This allows administrators to expand service to VLAN users. Defining VLAN Members The VLAN Membership page contains fields for defining VLAN groups. The device supports the mapping of 4094 VLAN IDs to 256 VLANs. All ports must have a defined PVID. If no other value is configured the default VLAN PVID is used.
• Status — The VLAN type. Possible values are: – Dynamic — The VLAN was dynamically created through GVRP. – Static — The VLAN is user-defined. – Default — The VLAN is the default VLAN. • Unauthorized Users — Enables or disables unauthorized users from accessing a VLAN. • Remove VLAN — When selected, removes the VLAN from the VLAN Membership Table. Adding New VLANs 1 Open the VLAN Membership page. 2 Click Add. The Create New VLAN page opens. Figure 7-41.
3 Select the Remove VLAN check box. 4 Click Apply Changes. The selected VLAN is deleted, and the device is updated. Defining VLAN Membership Groups Using CLI Commands The following table summarizes the equivalent CLI commands for defining VLAN membership groups as displayed in the VLAN Membership page. Table 7-24. VLAN Membership Group CLI Commands CLI Command Description vlan database Enters the interface configuration (VLAN) mode. vlan {vlan-range} Creates a VLAN.
The VLAN Port Membership Table displays the ports and the ports states, as well as LAGs. Ports which are LAG members are not displayed in the VLAN Port Membership Table. Assigning Ports to a VLAN Group 1 Open the VLAN Membership page. 2 Click the VLAN ID or VLAN Name option button and select a VLAN from the drop-down menu. 3 Select a port in the Port Membership Table, and assign the port a value. 4 Click Apply Changes. The port is assigned to the VLAN group, and the device is updated.
The following is an example of the CLI commands: Console (config)# vlan database Console (config-vlan)# vlan 23-25 Console (config-vlan)# exit Console (config)# interface vlan 23 Console (config-if)# name Marketing Console (config-if)# exit Console (config)# interface ethernet g8 Console (config-if)# switchport mode access Console (config-if)# switchport access vlan 23 Console (config-if)# exit Console (config)# interface ethernet g9 Console (config-if)# switchport mode trunk Console (config-if)# swithpor
The following table summarizes the equivalent CLI commands for configuring QinQ. Table 7-27.
Vlan ---100 Name ----------------------100 Forbidden VLANS: Vlan ---- Name ----------------------- Classification rules: Protocol based VLANs: Group ID -------- Vlan ID ------------------ Mac based VLANs: Group ID -------- Vlan ID ------------------ Subnet based VLANs: Group ID -------- Vlan ID ------------------ console# 330 Configuring Device Information Egress rule ----------Untagged Port Membership Type -------------------Static
Defining VLAN Ports Settings The VLAN Port Settings page contains fields for managing ports that are part of a VLAN. The port default VLAN ID (PVID) is configured on the VLAN Port Settings page. All untagged packets arriving to the device are tagged by the ports PVID. To open the VLAN Port Settings page, click Switch→ VLAN→ Port Settings in the tree view. Figure 7-42. VLAN Port Settings • Port — The port number included in the VLAN. • Port VLAN Mode — The port mode.
• Frame Type — Packet type accepted on the port. Possible values are: – Admit Tag Only — Only tagged packets are accepted on the port. – Admit All — Both tagged and untagged packets are accepted on the port. • Ingress Filtering — Enables or disables Ingress filtering on the port. Ingress filtering discards packets that are destined to VLANs of which the specific LAG is not a member. • Current Reserve VLAN — The VLAN currently designated by the system as the reserved VLAN.
Assigning Ports to VLAN Groups Using CLI Commands The following table summarizes the equivalent CLI commands for assigning ports to VLAN groups. Table 7-28. VLAN Port CLI Commands CLI Command Description switchport mode {customer |access | trunk | general} Configures a port VLAN membership mode. switchport trunk native vlan vlan-id Defines the port as a member of the specified VLAN, and the VLAN ID as the "port default VLAN ID (PVID)".
Defining VLAN LAG Settings The VLAN LAG Setting page provides parameters for managing LAGs that are part of a VLAN. VLANs can either be composed of individual ports or of LAGs. Untagged packets entering the device are tagged with the LAGs ID specified by the PVID. To open the VLAN LAG Setting page, click Switch→ VLAN→ LAG Settings in the tree view. Figure 7-44. 334 VLAN LAG Setting • LAG — The LAG number included in the VLAN. • LAG VLAN Mode — The LAG VLAN mode.
• Ingress Filtering — Enables or disables Ingress filtering by the LAG. Ingress filtering discards packets that are destined to VLANs of which the specific port is not a member. • Current Reserve VLAN — The VLAN currently designated as the reserved VLAN. • Reserve VLAN for Internal Use — The VLAN that is designated as the reserved VLAN after the device is reset. Assigning VLAN LAG Settings: 1 Open the VLAN LAG Setting page.
The following is an example of the CLI commands: console(config)# interface port-channel 1 console(config-if)# switchport mode access console(config-if)# switchport access vlan 2 console(config-if)# exit console(config)# interface port-channel 2 console(config-if)# switchport mode general console(config-if)# switchport general allowed vlan add 2-3 tagged console(config-if)# switchport general pvid 2 console(config-if)# switchport general acceptable-frame-type tagged-only console(config-if)# switchport gene
Defining VLAN Protocol Groups • The Protocol Group page provides parameters for configuring frame types to specific protocol groups. To open the Protocol Group page, click Switch→ VLAN→ Protocol Group in the tree view. Figure 7-45. Protocol Group • Frame Type — The packet type. Possible field values are Ethernet, RFC1042, and LLC Other. • Protocol Value — User-defined protocol name. • Ethernet-Based Protocol Value — The Ethernet protocol group type. The possible field values are IP, IPX and IPV6.
Assigning VLAN Protocol Group Settings 1 Open the Protocol Group page. 2 Complete the fields on the page. 3 Click Apply Changes. The VLAN protocol group parameters are defined, and the device is updated. Removing Protocols From the Protocol Group Table 1 Open the Protocol Group page. 2 Click Show All. The Protocol Group Table opens. 3 Select Remove for the protocol groups that need to be removed. 4 Click Apply Changes. The protocol is removed, and the device is updated.
Adding Protocol Ports The Protocol Port page adds interfaces to Protocol groups. To open the Protocol Port page, click Switch→ VLAN→ Protocol Port in the tree view. Figure 7-46. Protocol Port • Interface — Port or LAG number added to a protocol group. • Group ID — Protocol group ID to which the interface is added. Protocol group IDs are defined in the Protocol Group Table. • VLAN ID (1-4095) — Attaches the interface to a user-defined VLAN ID. The VLAN ID is defined on the Create a New VLAN page.
Defining Protocol Ports Using CLI Commands The following table summarizes the equivalent CLI command for defining Protocol Ports. Table 7-31. Protocol Port CLI Commands CLI Command Description switchport general map Sets a protocol-based classification rule.
Figure 7-47. GVRP Parameters • GVRP Global Status — Enables or disables GVRP on the device. GVRP is disabled by default. • Interface — The port or LAG for which GVRP is enabled. • GVRP State — Enables or disables GVRP on an interface. • Dynamic VLAN Creation — Enables or disables VLAN creation through GVRP. • GVRP Registration — The GVRP Registration status. Enabling GVRP on the Device 1 Open the GVRP Global Parameters page. 2 Select Enable in the GVRP Global Status field.
Configuring GVRP Using CLI Commands The following table summarizes the equivalent CLI commands for configuring GVRP as displayed in the GVRP Global Parameters page. Table 7-32. GVRP Global Parameters CLI Commands CLI Command Description gvrp enable (global) Enables GVRP globally. gvrp enable (interface) Enables GVRP on an interface. gvrp vlan-creation-forbid Enables or disables dynamic VLAN creation.
The following is an example of the CLI commands: console(config)# gvrp enable console(config)# interface ethernet g1 console(config-if)# gvrp enable console(config-if)# gvrp vlan-creation-forbid console(config-if)# gvrp registration-forbid console(config-if)# end console# show gvrp configuration GVRP Feature is currently Enabled on the device.
There are two operational modes for IP Phones: • IP phones are configured with VLAN-mode as enabled, ensuring that tagged packets are used for all communications. • If the IP phone’s VLAN-mode is disabled, the phone uses untagged packets. The phone uses untagged packets while retrieving the initial IP address through DHCP. The phone eventually use the Voice VLAN and start sending tagged packets.
• Class of Service — Enables adding a CoS tag to untagged packets received on the voice VLAN. The possible field values are 0-7, where zero is the lowest priority, and seven is the highest priority. • Remark CoS — Reassigns the CoS tag value to packets received on the voice VLAN. The possible field values are 0-7, where zero is the lowest priority, and seven is the highest priority. • Voice VLAN Aging Time — Indicates the amount of time after the last IP phone's OUI is aged out for a specific port.
The following is an example of some of the CLI commands: Switch# show voice vlan Aging timeout: 1440 minutes OUI table MAC Address - Prefix Description 00:E0:BB 3COM 00:03:6B Cisco 00:E0:75 Veritel 00:D0:1E Pingtel 00:01:E3 Siemens 00:60:B9 NEC/Philips 00:0F:E2 Huawei-3COM Voice VLAN VLAN ID: 8 CoS: 6 Remark: Yes 346 Interface Enabled Secure Activated ------ ------ ------ ------ g1 Yes Yes Yes g2 Yes Yes Yes g3 Yes Yes Yes g4 Yes Yes Yes g5 No No - g6 No No
Defining Voice VLAN Port Settings The Voice VLAN Port Settings Page contains fields for adding ports or LAGs to voice VLAN. To open the Voice VLAN Port Setting page, click Switch→ Voice VLAN → Port Setting in the tree view. Figure 7-49. Voice VLAN Port Setting • Interface — Indicates the specific port or and LAG to which the Voice VLAN settings are applied. • Voice VLAN Mode — Defines the Voice VLAN mode. The possible field values are: • – None — Disables the selected port/LAG on the Voice VLAN.
Configuring Port Settings 1 Open the Voice VLAN Port Settings page. 2 Select a port or LAG. 3 Modify the fields as desired. 4 Click Apply Changes. The settings are modified and the device is updated. Displaying the Port Setting Table 1 Open the Voice VLAN Port Settings page. 2 Click Show All. The Port Setting Table opens. Figure 7-50. Voice VLAN Port Setting Table The Voice VLAN Port Setting Table includes the Membership field which indicates if the Voice VLAN member is a static or dynamic member.
Defining OUIs The Voice VLAN OUI page lists the Organizationally Unique Identifiers (OUIs) associated with the Voice VLAN. The first three bytes of the MAC Address contain a manufacturer identifier. While the last three bytes contain a unique station ID. Using the OUI, network managers can add specific manufacturer’s MAC addresses to the OUI table. Once the OUIs are added, all traffic received on the Voice VLAN ports from the specific IP phone with a listed OUI, is forwarded on the voice VLAN.
• • Remove — Removes OUI from the Telephony OUI List. The possible field values are: – Checked — Removes the selected OUI. – Unchecked — Maintains the current OUIs in the Telephony OUI List. This is the default value. Restore Default OUIs — Restores OUIs to the factory defaults. Adding OUIs 1 Open the Voice VLAN OUI page. 2 Click Add. The Add OUI page opens. Figure 7-52. Voice VLAN Add OUI Page 3 Fill in the fields. 4 Click Apply Changes. The OUIs is added.
Defining Voice VLAN OUIs Using CLI Commands The following table summarizes the equivalent CLI command for defining Voice VLAN OUIs. Table 7-35. Voice VLAN OUIs CLI Commands CLI Command Description voice vlan oui-table {add mac-address-prefix To configure the voice OUI table, use the voice vlan oui-table [description text] | remove mac-address-prefix} command in global configuration mode. To return to default, use the no form of this command.
Each Aggregated Link has an Aggregated Link Port Type, including Gigabit Ethernet ports. Ports can be added to an Aggregated Link only if they are the same port type. When ports are removed from an Aggregated Links, the ports revert to the original port settings. To open the Link Aggregation page, click Switch→ Link Aggregation in the tree view. Defining LACP Parameters The LACP Parameters page contains fields for configuring LACP LAGs. Aggregate ports can be linked into link-aggregation port-groups.
Defining Link Aggregation Global Parameters 1 Open the LACP Parameters page. 2 Complete the LACP System Priority field. 3 Click Apply Changes. The parameters are defined, and the device is updated. Defining Link Aggregation Port Parameters 1 Open the LACP Parameters page. 2 Complete the fields in the Port Parameters area. 3 Click Apply Changes. The parameters are defined, and the device is updated. Displaying the LACP Parameters Table 1 Open the LACP Parameters page. 2 Click Show All.
The following is an example of the CLI commands: Console (config)# lacp system-priority 120 Console (config)# interface ethernet g1 Console (config-if)# lacp port-priority 247 Console (config-if)# lacp timeout long Console (config-if)# end Console# show lacp ethernet g1 statistics Port g1 LACP Statistics: LACP PDUs sent:2 LACP PDUs received:2 Defining LAG Membership The LAG Membership page contains fields for assigning ports to LAGs. LAGs can include up to 8 ports.
Configuring a Port to a LAG or LACP 1 Open the LAG Membership page. 2 In the LAG row (the second row), toggle the button to a specific number to aggregate or remove the port to that LAG number. 3 In the LACP row (the first row), toggle the button under the port number to assign either the LACP or the static LAG. 4 Click Apply Changes. The port is added to the LAG or LACP, and the device is updated.
The device supports: • Forwarding L2 Multicast Packets — Enabled by default, and not configurable. • The system supports Multicast filtering for 256 Multicast groups. • Filtering L2 Multicast Packets — Enables forwarding of Layer 2 packets to interfaces. If Multicast filtering is disabled, Multicast packets are flooded to all relevant ports. To open the Multicast Support page, click Switch→ Multicast Support in the tree view.
• Bridge Multicast Filtering — Enables or disables bridge Multicast filtering. Disabled is the default value. IGMP Snooping can be enabled only if Bridge Multicast Filtering is enabled. • IGMP Snooping Status — Enables or disables IGMP Snooping on the device. Disabled is the default value. Enabling Bridge Multicast Filtering on the Device 1 Open the Multicast Global Parameters page. 2 Select Enable in the Bridge Multicast Filtering field. 3 Click Apply Changes.
Adding Bridge Multicast Address Members The Bridge Multicast Group page displays the ports and LAGs attached to the Multicast service group in the Ports and LAGs tables. The Port and LAG tables also reflect the manner in which the port or LAGs joined the Multicast group. Ports can be added either to existing groups or to new Multicast service groups. The Bridge Multicast Group page permits new Multicast service groups to be created.
The following table contains the IGMP port and LAG members management settings: D The port/LAG has joined the Multicast group dynamically in the Current Row. S Attaches the port to the Multicast group as static member in the Static Row. The port/LAG has joined the Multicast group statically in the Current Row. F Forbidden. Blank The port is not attached to a Multicast group. Adding Bridge Multicast Addresses 1 Open the Bridge Multicast Group page. 2 Click Add.
Defining Ports to Receive Multicast Service 1 Open the Bridge Multicast Group page. 2 Define the VLAN ID and the Bridge Multicast Address fields. 3 Toggle a port to S to join the port to the selected Multicast group. 4 Toggle a port to F to forbid adding specific Multicast addresses to a specific port. 5 Click Apply Changes. The port is assigned to the Multicast group, and the device is updated. Assigning LAGs to Receive Multicast Service 1 Open the Bridge Multicast Group page.
The following is an example of the CLI commands: Console> enable Console# config console(config)#vlan database console(config-if)#vlan 8 console(config-if)#exit console(config)#interface range ethernet g1-9 console(config-if)# switchport mode general console(config-if)# switchport general allow vlan add 8 console(config)#interface vlan 8 console (config-if)# exit Console(config-if)# bridge multicast address 0100.5e02.
Console # show bridge multicast address-table format ip Vlan IP Address Type Ports ---- ----------- ----- ---------- 1 224-239.130|2.2.3 static g1, g2 19 224-239.130|2.2.8 static g1-8 19 224-239.130|2.2.8 dynamic g9-11 Forbidden ports for multicast addresses: Vlan IP Address Ports ---- ----------- ---------- 1 224-239.130|2.2.3 g8 19 224-239.130|2.2.
Figure 7-58. Bridge Multicast Forward All • VLAN ID — Identifies a VLAN. • Ports — Ports that can be added to a Multicast service. • LAGs — LAGs that can be added to a Multicast service. The contains the settings for managing router and port settings. Port Control Definition D Attaches the port to the Multicast router or switch as a dynamic port. S Attaches the port to the Multicast router or switch as a static port. F Forbidden.
Attaching a Port to a Multicast Router or Switch 1 Open Bridge Multicast Forward All page. 2 Define the VLAN ID field. 3 Select a port in the Ports table, and assign the port a value. 4 Click Apply Changes. The port is attached to the Multicast router or switch. Attaching a LAG to a Multicast Router or Switch 1 Open Bridge Multicast Forward All page. 2 Define the VLAN ID field. 3 Select a port in the LAGs table, and assign the LAG a value. 4 Click Apply Changes.
The following is an example of the CLI commands: console(config)#vlan database console(config-if)#vlan 8 console(config-vlan)#exit console(config)#interface range ethernet g1-9 console(config-if)# switchport mode general console(config-if)# switchport general allow vlan add 8 Console(config-if)# exit console(config)#interface vlan 8 Console(config-if)# bridge multicast address 0100.5e02.
IGMP Snooping The IGMP Snooping page contains fields for adding IGMP members. To open the IGMP Snooping page, click Switch→ Multicast Support→ IGMP Snooping in the tree view. Figure 7-59. 366 IGMP Snooping • VLAN ID — Specifies the VLAN ID. • IGMP Snooping Status — Enables or disables IGMP snooping on the VLAN. • Auto Learn — Enables or disables Auto Learn on the device. • IGMP Querier Status — Enables or disables the IGMP Querier.
Enabling IGMP Snooping on the Device 1 Open the IGMP Snooping page. 2 Select the VLAN ID for the device on which IGMP snooping needs to be enabled. 3 Select Enable in the IGMP Snooping Status field. 4 Complete the fields on the page. 5 Click Apply Changes. IGMP snooping is enabled on the device. Displaying the IGMP Snooping Table 1 Open the IGMP Snooping. 2 Click Show All. The IGMP Snooping Table opens. Figure 7-60.
Configuring IGMP Snooping with CLI Commands The following table summarizes the equivalent CLI commands for configuring IGMP Snooping on the device: Table 7-41. IGMP Snooping CLI Commands CLI Command Description ip igmp snooping Enables Internet Group Membership Protocol (IGMP) snooping. ip igmp snooping mrouter learn-pim-dvmrp Enables automatic learning of Multicast router ports in the context of a specific VLAN. ip igmp snooping host-time-out time-out Configures the host-time-out.
The following is an example of the CLI commands: Console> enable Console# config Console (config)# ip igmp snooping Console (config)# interface vlan 1 Console (config-if)# ip igmp snooping mrouter learn-pim-dvmrp Console (config-if)# ip igmp snooping host-time-out 300 Console (config-if)# ip igmp snooping mrouter-time-out 200 Console (config-if)# exit Console (config)# interface vlan 1 Console (config-if)# ip igmp snooping leave-time-out 60 Console (config-if)# exit Console (config)# exit Console # show ip
IGMP Snooping admin: Enabled Hosts and routers IGMP version: 2 IGMP snooping oper mode: Enabled IGMP snooping querier admin: Enabled IGMP snooping querier oper: Enabled IGMP snooping querier address admin: IGMP snooping querier address oper: 172.16.1.1 IGMP snooping querier version admin: 3 IGMP snooping querier version oper: 2 IGMP host timeout is 300 sec IGMP Immediate leave is disabled.
Unregistered Multicast Multicast frames are generally forwarded to all ports in the VLAN. If IGMP Snooping is enabled, the device learns about the existence of Multicast groups and monitors which ports have joined what Multicast group. Multicast groups can also be statically enabled. This enables the device to forward the Multicast frames (from a registered Multicast group) only to ports that are registered to that Multicast group.
Setting the Unregistered Multicast Status of an Interface 1 Open the Unregistered Multicast page. 2 Select the interface for which Unregistered Multicast needs to be set. 3 Select a status in the Status field. 4 Click Apply Changes. Unregistered Multicast status is set. Displaying the Unregistered Multicast Table 1 Open the Unregistered Multicast page. 2 Click Show All. The Unregistered Multicast Table opens. Figure 7-62.
Configuring Unregistered Multicast with CLI Commands The following table summarizes the equivalent CLI commands for configuring Unregistered Multicast on the device: Table 7-42. Unregistered Multicast CLI Commands CLI Command Description bridge multicast unregistered Configures the forwarding state of unregistered multicast addresses. show bridge multicast unregistered Displays the unregistered multicast filtering configuration.
Configuring Device Information
Viewing Statistics The Statistic pages contains links to device information for interface, GVRP, etherlike, RMON, and device utilization. CLI commands are not available for all the Statistics pages. Viewing Tables The Table Views page contains links for displaying statistics in a chart form. To open the page, click Statistics→ Table in the tree view. Viewing Utilization Summary The Utilization Summary page contains statistics for interface utilization.
• % Interface Utilization — Network interface utilization percentage based on the duplex mode of the interface. The range of this reading is from 0 to 200%. The maximum reading of 200% for a full duplex connection indicates that 100% of bandwidth of incoming and outgoing connections is used by the traffic travelling through the interface. The maximum reading for a half duplex connection is 100%. • % Unicast Received — Percentage of Unicast packets received on the interface.
• Transmit Non Unicast Packets — Number of transmitted non-Unicast packets from the interface. • Received Errors — The number of error packets received on the interface. • Global System LAG — Current LAG/trunk performance. Viewing Interface Statistics The Interface Statistics page contains statistics for both received and transmitted packets. The fields for both received and transmitted packets are identical.
Receive Statistics • Total Bytes (Octets) — Number of octets received on the selected interface. • Unicast Packets — Number of Unicast packets received on the selected interface. • Multicast Packets — Number of Multicast packets received on the selected interface. • Broadcast Packets — Number of Broadcast packets received on the selected interface. • Packets with Errors — Number of error packets received from the selected interface.
The following is an example of the CLI commands.
Viewing Etherlike Statistics The Etherlike Statistics page contains interface statistics. To open the Etherlike Statistics page, click Statistics/RMON→ Table Views→ Etherlike Statistics in the tree view. Figure 8-4. Etherlike Statistics 380 • Interface — Specifies whether statistics are displayed for a port or LAG. • Refresh Rate — Amount of time that passes before the interface statistics are refreshed. • Frame Check Sequence (FCS) Errors — Number of FCS errors received on the selected interface.
• Internal MAC Receive Errors — Number of internal MAC received errors on the selected interface. • Receive Pause Frames — Number of received paused frames on the selected interface. • Transmitted Paused Frames — Number of paused frames transmitted from the selected interface. Displaying Etherlike Statistics for an Interface 1 Open the Etherlike Statistics page. 2 Select an interface in the Interface field. The interface’s Etherlike statistics are displayed.
The following is an example of the CLI commands.
Viewing GVRP Statistics The GVRP Statistics page contains device statistics for GVRP. To open the page, click Statistics/RMON→ Table Views→ GVRP Statistics in the tree view. Figure 8-5. GVRP Statistics • Interface — Specifies whether statistics are displayed for a port or LAG. • Refresh Rate — Amount of time that passes before the interface statistics are refreshed. • Join Empty — Device GVRP Join Empty statistics. • Empty — Device GVRP Empty statistics.
• Invalid Protocol ID — Device GVRP Invalid Protocol ID statistics. • Invalid Attribute Type — Device GVRP Invalid Attribute ID statistics. • Invalid Attribute Value — Device GVRP Invalid Attribute Value statistics. • Invalid Attribute Length — Device GVRP Invalid Attribute Length statistics. • Invalid Events — Device GVRP Invalid Events statistics. Displaying GVRP Statistics for a Port 1 Open the GVRP Statistics page. 2 Select an interface in the Interface field.
The following is an example of the CLI commands: Console# show gvrp statistics GVRP statistics: ---------------rJE : Join Empty Received rJIn : Join In Received rEmp : Empty Received rLIn : Leave In Received rLE : Leave Empty Received rLA sJE : Join Empty Sent sJIn : Join In Sent : Leave All Received sEmp : Empty Sent sLIn : Leave In Sent sLE sLA : Leave Empty Sent : Leave All Sent Port rJE rJIn rEmp rLIn rLE rLA sJE sJIn sEmp sLIn sLE sLA ---- --- ---- ---- ---- --- --- -
Console# show gvrp error-statistics GVRP error statistics: ---------------------Legend: INVPROT : Invalid Protocol Id INVPLEN : Invalid PDU Length INVATYP : Invalid Attribute Type INVALEN : Invalid Attribute Length INVAVAL : Invalid Attribute Value INVEVENT : Invalid Event Port INVPROT INVATYP INVAVAL INVALEN INVEVENT ---- ------- ------- ------- ------- -------- g1 0 0 0 0 0 g2 0 0 0 0 0 g3 0 0 0 0 0 g4 0 0 0 0 0 g5 0 0 0 0 0 g6 0 0 0 0 0 g7 0 0
Viewing EAP Statistics The EAP Statistics page contains information about EAP packets received on a specific port. For more information about EAP, see "Port Based Authentication (802.1x)" on page 241. To open the EAP Statistics page, click Statistics/RMON > Table Views > EAP Statistics in the tree view. Figure 8-6. EAP Statistics • Port — The port which is polled for statistics. • Refresh Rate — Amount of time that passes before the interface statistics are refreshed.
• Respond Frames Receive — The number of valid EAP Response frames received on the port. • Request ID Frames Transmit — The number of EAP Requested ID frames transmitted via the port. • Request Frames Transmit — The number of EAP Request frames transmitted via the port. • Invalid Frames Receive — The number of unrecognized EAPOL frames received on this port. • Length Error Frames Receive — The number of EAPOL frames with an invalid Packet Body Length received on this port.
The following is an example of the CLI commands: Switch# show dot1x statistics ethernet g1 EapolFramesRx: 11 EapolFramesTx: 12 EapolStartFramesRx: 1 EapolLogoffFramesRx: 1 EapolRespIdFramesRx: 3 EapolRespFramesRx: 6 EapolReqIdFramesTx: 3 EapolReqFramesTx: 6 InvalidEapolFramesRx: 0 EapLengthErrorFramesRx: 0 LastEapolFrameVersion: 1 LastEapolFrameSource: 0008.3b79.8787 Viewing RMON Statistics Remote Monitoring (RMON) contains links for viewing network information from a remote location.
Figure 8-7. RMON Statistics Group 390 • Interface — Specifies the port or LAG for which statistics are displayed. • Refresh Rate — Amount of time that passes before the statistics are refreshed. • Drop Events — Number of dropped events that have occurred on the interface since the device was last refreshed. • Received Bytes (Octets) — Number of octets received on the interface since the device was last refreshed. This number includes bad packets and FCS octets, but excludes framing bits.
• Multicast Packets Received — Number of good Multicast packets received on the interface since the device was last refreshed. • CRC & Align Errors — Number of CRC and Align errors that have occurred on the interface since the device was last refreshed. • Undersize Packets — Number of undersized packets (less than 64 octets) received on the interface since the device was last refreshed.
The following is an example of the CLI commands: console> enable console> enable Console# show rmon statistics ethernet g1 Port g1 Dropped: 8 Octets: 878128 Packets: 978 Broadcast: 7 Multicast: 1 CRC Align Errors: 0 Collisions: 0 Undersize Pkts: 0 Oversize Pkts: 0 Fragments: 0 Jabbers: 0 64 Octets: 98 65 to 127 Octets: 0 128 to 255 Octets: 0 256 to 511 Octets: 0 512 to 1023 Octets: 491 1024 to 1518 Octets: 389 Viewing RMON History Control Statistics The RMON History Control page contains information about
Figure 8-8. RMON History Control • History Entry No. — Entry number for the History Control Table page. • Source Interface — Port or LAG from which the history samples were taken. • Owner (0-20 characters) — RMON station or user that requested the RMON information. • Max No. of Samples to Keep (1-50) — Number of samples to be saved. The default value is 50. • Current No. of Samples in List — The current number of samples taken.
Modifying a History Control Table Entry 1 Open the RMON History Control page. 2 Select an entry in the History Entry No. field. 3 Modify the fields as required. 4 Click Apply Changes. The table entry is modified, and the device is updated. Deleting a History Control Table Entry 1 Open the RMON History Control page. 2 Select an entry in the History Entry No. field. 3 Click Remove. 4 Click Apply Changes. The selected table entry is deleted, and the device is updated.
Figure 8-9. RMON History Table • Sample No. — The specific sample the information in the table reflects. • Drop Events — The number of dropped packets due to lack of network resources during the sampling interval. This may not represent the exact number of dropped packets, but rather the number of times dropped packets were detected. • Received Bytes (Octets) — The number of data octets, including bad packets, received on the network.
Viewing Statistics for a Specific History Entry 1 Open the RMON History Table. 2 Select an entry in the History Table No. field. The entry statistics display in the RMON History Table. Viewing RMON History Control Using the CLI Commands The following table summarizes the equivalent CLI commands for viewing RMON history. Table 8-7. RMON History Control CLI Commands CLI Command Description show rmon history index {throughput | errors | other} [period seconds] Displays RMON Ethernet statistics history.
Figure 8-10. RMON Events Control • Event Entry — The event. • Community — Community to which the event belongs. • Description — User-defined event description. • Type — Describes the event type. Possible values are: – Log — Event type is a log entry. – Trap — Event type is a trap. – Log and Trap — Event type is both a log entry and a trap. – None — There is no event. • Time — Time when the event occurred for example 29 March 2004 at 11:00am is displayed as 29/03/2004 11:00:00.
Adding an RMON Event 1 Open the RMON Events Control page. 2 Click Add. The Add an Event Entry page opens. 3 Complete the information in the dialog and click Apply Changes. The Event Table entry is added, and the device is updated. Modifying an RMON Event 1 Open the RMON Events Control page 2 Select an entry in the Event Table. 3 Modify the fields in the dialog and click Apply Changes. The Event Table entry is modified, and the device is updated.
The following is an example of the CLI commands: console> enable console# config console (config)# rmon event 1 log console (config)# exit Console# show rmon events Index Description Type Community Owner Last time sent ----- ----------- -------- --------- ------- -------------------- 1 Errors Log 2 High Broadcast Log-Trap router CLI Jan 18 2002 23:58:17 Manager Jan 18 2002 23:59:48 Viewing the RMON Events Log The RMON Events Log page contains a list of RMON events.
Defining Device Events Using the CLI Commands The following table summarizes the equivalent CLI commands for defining device events. Table 8-9. Device Event Definition CLI Commands CLI Command Description show rmon log [event] Displays the RMON logging table.
Defining RMON Device Alarms The RMON Alarms page contains fields for setting network alarms. Network alarms occur when a network problem, or event, is detected. Rising and falling thresholds generate events. To open the RMON Alarms page, click Statistics/RMON→ RMON→ Alarms in the tree view. Figure 8-12. RMON Alarms • Alarm Entry — Indicates a specific alarm. • Interface — The interface for which RMON statistics are displayed. • Counter Name — The selected MIB variable.
• Rising Threshold — The rising counter value that triggers the rising threshold alarm. The rising threshold is presented on top of the graph bars. Each monitored variable is designated a color. • Rising /Falling Event — The mechanism in which the alarms are reported — LOG, TRAP, or a combination of both. When LOG is selected, there is no saving mechanism either in the device or in the management system. However, if the device is not being reset, it remains in the device LOG table.
Modifying an Alarm Table Entry 1 Open the RMON Alarms page. 2 Select an entry in the Alarm Entry drop-down menu. 3 Modify the fields in the dialog as required. 4 Click Apply Changes. The entry is modified, and the device is updated. Displaying the Alarm Table 1 Open the RMON Alarms page. 2 Click Show All. The Alarms Table page opens. Deleting an Alarm Table Entry 1 Open the RMON Alarms page. 2 Select an entry in the Alarm Entry drop-down menu. 3 Select the Remove check box. 4 Click Apply Changes.
The following is an example of the CLI commands: console> enable console# config Console (config)# rmon alarm 1000 dell 360000 1000000 1000000 10 20 Console# show rmon alarm-table Index OID Owner ------ ------------------- -------------- 1 1.3.6.1.2.1.2.2.1.1 CLI 0.1 2 1.3.6.1.2.1.2.2.1.1 Manager 0.1 3 1.3.6.1.2.1.2.2.1.1 CLI 0.9 Viewing Charts The Chart page contains links for displaying statistics in a chart form. To open the page, click Statistics→ Charts in the tree view.
Figure 8-14. Port Statistics • Interface Statistics — Selects the type of interface statistics to open. • Etherlike Statistics — Selects the type of Etherlike statistics to open. • RMON Statistics — Selects the type of RMON statistics to open. • GVRP Statistics — Selects the GVRP statistics type to open. • Refresh Rate — Amount of time that passes before the statistics are refreshed. Displaying Port Statistics 1 Open the Port Statistics page. 2 Select the statistic type to open.
Table 8-11. Port Statistic CLI Commands (continued) CLI Command Description show gvrp statistics {ethernet interface | port-channel port-channel-number} Displays GVRP statistics. show gvrp error-statistics {ethernet interface | Displays GVRP error statistics.
Figure 8-15. LAG Statistics • Interface Statistics — Selects the type of interface statistics to open. • Etherlike Statistics — Selects the type of Etherlike statistics to open. • RMON Statistics — Selects the type of RMON statistics to open. • GVRP Statistics — Selects the type of GVRP statistics to open. • Refresh Rate — Amount of time that passes before the statistics are refreshed. Displaying LAG Statistics 1 Open the LAG Statistics page. 2 Select the statistic type to open.
Viewing LAG Statistics Using the CLI Commands The following table summarizes the equivalent CLI commands for viewing LAG statistics. Table 8-12. LAG Statistic CLI Commands CLI Command Description show interfaces counters [ethernet interface | port-channel port-channelnumber] Displays traffic seen by the physical interface. show rmon statistics {ethernet interface | port-channel port-channel-number} Displays RMON Ethernet statistics.
Viewing the CPU Utilization The CPU Utilization page contains information about the system’s CPU utilization and percentage of CPU resources consumed by each stacking member. Each stacking member is assigned a color on the graph. To open the CPU Utilization page, click Statistics/RMON→ Charts→ CPU Utilization in the tree view. Figure 8-16. CPU Utilization The CPU Utilization page contains the following information: • Refresh Rate — Amount of time that passes before the statistics are refreshed.
Viewing CPU Utilization Using CLI Commands The following table summarizes the equivalent CLI commands for viewing CPU utilization. Figure 8-17. CPU Utilization CLI Commands CLI Command Description show cpu utilization To display the CPU utilization. The following is an example of the CLI commands: Console# show cpu utilization CPU utilization service is on.
Configuring Quality of Service This section provides information for defining and configuring Quality of Service (QoS) parameters. To open the Click Quality of Service in the tree view. Quality of Service (QoS) provides the ability to implement QoS and priority queuing within a network. QoS improves network traffic flow based on policies, frame counters and context.
Packets arriving untagged are assigned a default VPT that is set on a per port basis. The assigned VPT is used to map the packet to the output queue and as the egress VPT. DSCP values can be mapped to priority queues. The following table contains the default DSCP mapping to forwarding queue values: Table 9-2.
The scheduling scheme is enabled system-wide. Queues assigned to the strict priority policy are automati-cally assigned to the highest priority queue. By default all values are set as Strict Priority. Queue weight values can be assigned in any order using WRR. WRR values can be assigned system-wide. Best effort traffic is always assigned to the first queue. WRR values must be assigned so that Queue 1 remains best effort.
Enabling Trust: 1 Open the CoS Settings page. 2 Select Trust in the Trust Mode field. 3 Click Apply Changes. Trust is enabled on the device. Enabling Trust Using the CLI Commands The following table summarizes the equivalent CLI commands for configuring fields in the CoS Settings page. Table 9-3. CoS Setting CLI Commands CLI Command Description qos trust [cos | dscp] Configures the system to basic mode and the "trust" state. no cos trust Returns to the non-trusted state.
Figure 9-2. Interface Settings • Interface — The specific port or LAG to configure: • Disable "Trust" Mode on Interface — Disables Trust Mode on the specified interface. This setting overrides the Trust Mode configured on the device globally. • Set Default CoS For Incoming Traffic To — Sets the default CoS tag value untagged packets. The CoS tag values are 0-7. The default value is 0. Assigning QoS/CoS settings for an interface: 1 Open the Interface Settings page.
Displaying the QoS Interface Settings Table: 1 Open the Interface Settings page. 2 Click Show All. The QoS Interface Settings Table page opens: Figure 9-3. QoS Interface Settings Table Assigning CoS Interfaces Using the CLI Commands The following table summarizes the equivalent CLI commands for configuring fields in the Interface Settings page. Table 9-4. CoS Interface CLI Commands CLI Command Description qos trust Enables trust state for each.
Figure 9-4. Bandwidth Settings • Interface — Indicates the port or LAG that is being displayed. • Egress Shaping Rate on Selected Port — Indicates the Egress traffic limit status for the interface. – Checked — The Egress traffic limit is enabled. – Not Checked — The Egress traffic limit is disabled. • Committed Information Rate (CIR) — Defines the Egress CIR traffic limit for the interface. • Committed Burst Size (CBS) — Defines the Egress CBS traffic limit for the interface.
Displaying the Bandwidth Settings Table: 1 Open the Bandwidth Settings page. 2 Click Show All. The Bandwidth Settings Table opens. Figure 9-5. Bandwidth Settings Table Assigning Bandwidth Settings Using the CLI Commands The following table summarizes the equivalent CLI commands for configuring fields in the Bandwidth Settings page. Table 9-5. 418 Bandwidth Settings CLI Commands CLI Command Description traffic-shape committed-rate [committed-burst] no traffic-shape Sets shaper on egress port.
Defining Queue Settings The QoS Queue Settings page contains fields for configuring the scheduling method by which the queues are maintained. To open the QoS Queue Settings page click Quality of Service→ CoS Global Parameters→ Queue Settings in the tree view. Figure 9-6. QoS Queue Settings • Queues — The Queue number. • Strict Priority — Specifies if traffic scheduling is based strictly on the queue priority. The default is enabled.
Assigning Queue Setting Using the CLI Commands The following table summarizes the equivalent CLI commands for configuring fields in the QoS Queue Settings page. Table 9-6. Queue Settings CLI Commands CLI Command Description wrr-queue bandwidth weight1 weight2 . weight_n Assigns Weighted Round Robin (WRR) weights to egress queues. show qos interface [ethernet interface-number] [queuing] Displays interface QoS data.
Console (config)# wrr-queue bandwidth 10 20 30 40 Console (config)# exit Console # exit Console> show qos interface ethernet g1 queueing Ethernet g1 wrr bandwidth weights and EF priority: qid weights Ef Priority ----- -------- ----- ---------- 1 1 Disable N/A 2 2 Disable N/A 3 8 Disable N/A 4 16 Disable N/A 5 32 Disable N/A 6 64 Disable N/A 7 128 Disable N/A 8 256 Disable N/A Cos queue map: Cos qid 0 3 1 1 2 2 3 4 4 5 5 6 6 7 7 8 Configuring Quality o
Mapping CoS Values to Queues The CoS to Queue Mapping Table page contains fields for classifying CoS settings to traffic queues. To open the CoS to Queue Mapping Table page, click Quality of Service→ CoS Global Parameters→ CoS to Queue in the tree view. Figure 9-7. CoS to Queue Mapping Table 422 • Class of Service — Specifies the CoS priority tag values, where zero is the lowest and 7 is the highest. • Queue — The traffic forwarding queue to which the CoS priority is mapped.
Mapping a CoS value to a Queue 1 Open the CoS to Queue Mapping Table page. 2 Select a CoS entry. 3 Define the queue number in the Queue field. 4 Click Apply Changes. The CoS value is mapped to a queue, and the device is updated. Assigning CoS Values to Queues Using the CLI Commands The following table summarizes the equivalent CLI commands for configuring fields in the CoS to Queue Mapping Table page. Table 9-7.
Figure 9-8. DSCP to Queue 424 • DSCP In — The values of the DSCP field within the incoming packet. • Queue — The queue to which packets with the specific DSCP value is assigned. The values are 1-8, where one is the lowest value and eight is the highest.
Mapping a DSCP value and assigning priority queue: 1 Open the DSCP to Queue page. 2 Select a value in the DSCP In column. 3 Define the Queue fields. 4 Click Apply Changes. The DSCP is overwritten, and the value is assigned a forwarding queue. Restoring default values: 1 Open the DSCP to Queue page. 2 Check the Restore Defaults checkbox. 3 Click Apply Changes. The default values are restored.
Configuring Quality of Service
Device Specifications This appendix includes the information needed for running the device. Port and Cable Specifications This section describes the port specifications. Port Specifications The following table describes the device port types, as well as, a description of the port types. Table 10-1.
Operating Conditions This section details operating conditions including operating temperatures and humidity. Table 10-2. Operating Conditions Feature Specification Operating Temperature 0 to 45 C / 32 to 113 F Operating Humidity 10% - 90% (non-condensing) Physical Device Specifications This section details operating conditions including operating temperatures and humidity. Table 10-3.
Feature Specifications VLAN • VLAN support for Tagging and Port Based as per IEEE 802.1Q • Up to 4094 VLANs Supported • Reserved VLANs for internal system use • Dynamic VLANs with GVRP support • Protocol based VLANs Quality of Service • Layer 2 Trust Mode (IEEE 802.
Additional Switching Features • Link Aggregation with support for up to 8 Aggregated Links per device and up to 8 Ports per aggregated link (IEEE 802.
Glossary This glossary contains key technical words of interest. A B C D E F G H I J L M N O P Q R S T U V W A ASIC Access Mode Application Specific Integrated Circuit. A custom chip designed for a specific application. Specifies the method by which user access is granted to the system. Asset Tag Access Profiles Specifies the user-defined device reference. Allows network managers to define profiles and rules for accessing the device.
Backup Configuration Files BPDU Contains a backup copy of the device configuration. The Backup file changes when the Running Configuration file or the Startup file is copied to the Backup file. Bridge Protocol Data Unit. Provide bridging information in a message format. BPDUs are sent across device information with in Spanning Tree configuration. BPDU packets contain information on ports, addresses, priorities, and forwarding costs.
C D CDB DHCP Client Configuration Data Base. A file containing a device’s configuration information. Class of Service An Internet host using DHCP to obtain configuration parameters, such as a network address. Class of Service (CoS). Class of Service is the 802.1p priority scheme. CoS provides a method for tagging packets with priority information. A CoS value between 0-7 is added to the Layer II header of packets, where zero is the lowest priority and seven is the highest.
Flow Control E Egress Ports Ports from which network traffic is transmitted. Enables lower speed devices to communicate with higher speed devices, that is, that the higher speed device refrains from sending packets. End System Fragment An end user device on a network. Ethernet packets smaller than 576 bits. Ethernet Frame Ethernet is standardized as per IEEE 802.3. Ethernet is the most common implemented LAN standard. Supports data transfer rates of Mpbs, where 10, 100 or 1000 Mbps is supported.
HTTP Image File HyperText Transport Protocol. Transmits HTML documents between servers and clients on the internet. System images are saved in two Flash sectors called images (Image 1 and Image 2). The active image stores the active copy; while the other image stores a second copy. I Ingress Port IC Integrated Circuit. Integrated Circuits are small electronic devices composed from semiconductor material. ICMP Internet Control Message Protocol.
iSCSI LLDP-MED iSCSI is a communication protocol used for sending data between file servers and storage disks. The file servers are called initiators and the disks are called targets. Link Layer Discovery Protocol - Media Endpoint Discovery. LLDP allows network managers to troubleshoot and enhance network management by discovering and maintaining network topologies over multi-vendor environments. MED increases network flexibility by allowing different IP systems to co-exist on a single network LLDP.
Mask ND A filter that includes or excludes certain values, for example parts of an IP address. Neighbor Discovery. For example, Unit 2 is inserted in the first minute of a ten-minute cycle, and Unit 1 is inserted in fifth minute of the same cycle, the units are considered the same age. MD5 Message Digest 5. An algorithm that produces a 128bit hash. MD5 is a variation of MD4, and increases MD4 security. MD5 verifies the integrity of the communication, authenticates the origin of the communication.
PING Query Packet Internet Groper. Verifies if a specific IP address is available. A packet is sent to another IP address and waits for a reply. Extracts information from a database and presents the information for use. R Port RA Physical ports provide connecting components that allow microprocessors to communicate with peripheral equipment. RADIUS Advertisement. RD Port Mirroring RADIUS Discovery.
Running Configuration File Spanning Tree Protocol Contains all Startup file commands, as well as all commands entered during the current session. After the device is powered down or rebooted, all commands stored in the Running Configuration file are lost. Prevents loops in network traffic. The Spanning Tree Protocol (STP) provides tree topography for any arrangement of bridges. STP provides one path between end stations on a network, eliminating loops.
T V TCP/IP VLAN Transmissions Control Protocol. Enables two hosts to communicate and exchange data streams. TCP guarantees packet delivery, and guarantees packets are transmitted and received in the order their sent. Virtual Local Area Networks. Logical subgroups with a Local Area Network (LAN) created via software rather than defining a hardware solution. W Telnet WAN Terminal Emulation Protocol. Enables system users to log in and use resources on remote networks.
Index Numerics BPDU, 318, 432 802.1d, 18 Bridge Protocol Data Unit, 432 802.
Index F HTTP, 147 L Fans, 30 HTTPS, 147 L2TP, 436 Fast Link, 18 Fast link, 308 File Transfer Protocol, 434 Filtering, 332, 335, 356 Firmware, 222 Flow Control, 38 FTP, 434 LACP, 352 I ICMP, 435 IDRP, 435 IEEE, 435 IEEE 802.1d, 435 IEEE 802.1p, 435 IEEE 802.1Q, 435 G IEEE 802.
Management Access Methods, 157 Management Information Base.
Index Storm control, 289 V STP, 18, 304, 310, 316 Ventilation System, 30 System, 67 Virtual Local Area Networks, 440 T VLAN, 324, 326, 331, 334, 362, 440 TACACS, 155 VLAN ID, 299 TCP, 19 VLAN membership, 324 Telnet, 147, 158 VLAN Port Membership Table, 326 Terminal Access Controller Access Control System, 171 TFTP, 440 Time Domain Reflectometry, 142 Transport Control Protocol, 19 Tree view, 59 Trivial File Transfer Protocol, 440 Trunk Configuration Page, 285 Trust, 414 Tunnel, ISATAP, 12
