User`s guide

ManualsBrandsEnterasys ManualsComputer equipmentVHSIM2-A6DP

381

382

383

384

385

386

387

388

389

390

Table Of Contents

Title
Notice
Contents
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- A
- B
Figures
Tables
About This Guide
- Using This Guide
- Structure of This Guide
- Related Documents
- Document Conventions
- Typographical and Keystroke Conventions
Introduction
- 1.1 Overview
  - 1.1.1 The Management Agent
  - 1.1.2 In-Band vs. Out-of-Band
- 1.2 Navigating Local Management Screens
- 1.3 Local Management Requirements
- 1.4 Local Management Screen Elements
- 1.5 Local Management Keyboard Conventions
- 1.6 Getting Help
Local Management Requirements
- 2.1 Management Terminal Setup
  - 2.1.1 Console Cable Connection
  - 2.1.2 Management Terminal Setup Parameters
- 2.2 Telnet Connections
- 2.3 Monitoring an Uninterruptible Power Supply
Accessing Local Management
- 3.1 Navigating Local Management Screens
- 3.2 Password Screen
- 3.3 Main Menu Screen
- 3.4 Module Selection Screen
  - 3.4.1 Selecting a Module
- 3.5 Module Menu Screen
- 3.6 Overview of Security Methods
- 3.7 Security Menu Screen
- 3.8 Passwords Screen
  - 3.8.1 Setting the Module Login Password
- 3.9 Radius Configuration Screen
  - 3.9.1 Setting the Last Resort Authentication
  - 3.9.2 Setting the Local and Remote Servers
- 3.10 Name Services Configuration Screen
- 3.11 System Authentication Configuration Screen
- 3.12 EAP (Port) Configuration Screen
- 3.13 EAP Statistics Menu Screen
- 3.14 MAC Port Configuration Screen
- 3.15 MAC Supplicant Configuration Screen
Chassis Menu Screens
- 4.1 Chassis Menu Screen
- 4.2 Chassis Configuration Screen
- 4.3 SNMP Configuration Menu Screen
- 4.4 SNMP Community Names Configuration Screen
  - 4.4.1 Establishing Community Names
- 4.5 SNMP Traps Configuration Screen
  - 4.5.1 Configuring the Trap Table
- 4.6 Chassis Environmental Information Screen
- 4.7 Redirect Configuration Menu Screen (Chassis)
- 4.8 Port Redirect Configuration Screen
  - 4.8.1 Changing Source and Destination Ports
- 4.9 VLAN Redirect Configuration Screen
  - 4.9.1 Changing Source VLAN and Destination Ports
Module Configuration Menu Screens
- 5.1 Module Configuration Menu Screen
- 5.2 General Configuration Screen
- 5.3 SNMP Configuration Menu Screen
- 5.4 SNMP Community Names Configuration Screen
  - 5.4.1 Establishing Community Names
- 5.5 SNMP Traps Configuration Screen
  - 5.5.1 Configuring the Trap Table
- 5.6 Access Control List Screen
  - 5.6.1 Entering IP Addresses
  - 5.6.2 Enable/Disable ACL
- 5.7 System Resources Information Screen
  - 5.7.1 Setting the Reset Peak Switch Utilization
- 5.8 FLASH Download Configuration Screen
Port Configuration Menu Screens
- 6.1 Port Configuration Menu Screen
- 6.2 Ethernet Interface Configuration Screen
- 6.3 Ethernet Port Configuration Screen
  - 6.3.1 Selecting Field Settings
  - 6.3.2 Setting the Advertised Ability
- 6.4 HSIM/VHSIM Configuration Screen
- 6.5 Redirect Configuration Menu Screen
- 6.6 Port Redirect Configuration Screen
  - 6.6.1 Changing Source and Destination Ports
- 6.7 VLAN Redirect Configuration Screen
  - 6.7.1 Changing Source VLAN and Destination Ports
- 6.8 Link Aggregation Screen (802.3ad Main Menu Screen)
- 6.9 Broadcast Suppression Configuration Screen
  - 6.9.1 Setting the Threshold
  - 6.9.2 Setting the Reset Peak
802.1 Configuration Menu Screens
- 7.1 802.1 Configuration Menu Screen
- 7.2 Spanning Tree Configuration Menu Screen
- 7.3 Spanning Tree Configuration Screen
  - 7.3.1 Configuring a VLAN Spanning Tree
- 7.4 Spanning Tree Port Configuration Screen
  - 7.4.1 Enabling/Disabling the Default Spanning Tree Ports
  - 7.4.2 Viewing Status of Spanning Tree Ports
- 7.5 PVST Port Configuration Screen
802.1Q VLAN Configuration Menu Screens
- 8.1 Summary of VLAN Local Management
  - 8.1.1 Preparing for VLAN Configuration
- 8.2 802.1Q VLAN Configuration Menu Screen
- 8.3 Static VLAN Configuration Screen
- 8.4 Static VLAN Egress Configuration Screen
  - 8.4.1 Setting Egress Types on Ports
  - 8.4.2 Displaying the Next Group of Ports
- 8.5 Current VLAN Configuration Screen
- 8.6 Current VLAN Egress Configuration Screen
- 8.7 VLAN Port Configuration Screen
  - 8.7.1 Changing the Port Mode
  - 8.7.2 Configuring the VLAN Ports
- 8.8 VLAN Classification Configuration Screen
- 8.9 Protocol Port Configuration Screen
  - 8.9.1 Assigning Ports to a VID/Classification
802.1p Configuration Menu Screens
- 9.1 802.1p Configuration Menu Screen
- 9.2 Port Priority Configuration Screen
  - 9.2.1 Setting Switch Port Priority Port-by-Port
  - 9.2.2 Setting Switch Port Priority on All Ports
- 9.3 Traffic Class Information Screen
- 9.4 Traffic Class Configuration Screen
  - 9.4.1 Assigning the Traffic Class to Port Priority
- 9.5 Transmit Queues Configuration Screen
  - 9.5.1 Setting the Current Queueing Mode
- 9.6 Priority Classification Configuration Screen
- 9.7 Protocol Port Configuration Screen
  - 9.7.1 Assigning Ports to a PID/Classification
  - 9.7.2 Example, Prioritizing Traffic According to Classification Rule
    - 9.7.2.1 Solving the Problem
- 9.8 Rate Limiting Configuration Screen
Layer 3 Extensions Menu Screens
- 10.1 Layer 3 Extensions Menu Screen
- 10.2 IGMP/VLAN Configuration Screen
  - 10.2.1 IGMP/VLAN Configuration Procedure
Module Statistics Menu Screens
- 11.1 Module Statistics Menu Screen
- 11.2 Switch Statistics Screen
- 11.3 Interface Statistics Screen
  - 11.3.1 Displaying Interface Statistics
- 11.4 RMON Statistics Screen
  - 11.4.1 Displaying RMON Statistics
- 11.5 Chassis Environmental Statistics Configuration Screen
Network Tools Screens
- 12.1 Network Tools
- 12.2 Built-in Commands
- 12.3 Example, Effects of Aging Time on Dynamic Egress
- 12.4 Example, Using Dynamic Egress to Control Traffic
- 12.5 Special Commands
VLAN Operation and Network Applications
- 13.1 Defining VLANs
- 13.2 Types of VLANs
  - 13.2.1 802.1Q VLANs
  - 13.2.2 Other VLAN Strategies
- 13.3 Benefits and Restrictions
- 13.4 VLAN Terms
- 13.5 VLAN Operation
  - 13.5.1 Description
  - 13.5.2 VLAN Components
- 13.6 Configuration Process
- 13.7 VLAN Switch Operation
  - 13.7.1 Receiving Frames from VLAN Ports
  - 13.7.2 Forwarding Decisions
    - 13.7.2.1 Broadcasts, Multicasts, and Unknown Unicasts
    - 13.7.2.2 Known Unicasts
- 13.8 VLAN Configuration
- 13.9 Summary of VLAN Local Management
  - 13.9.1 Preparing for VLAN Configuration
- 13.10 Quick VLAN Walkthrough
- 13.11 Examples
- 13.12 Example 1, Single Switch Operation
  - 13.12.1 Solving the Problem
  - 13.12.2 Frame Handling
- 13.13 Example 2, VLANs Across Multiple Switches
  - 13.13.1 Solving the Problem
  - 13.13.2 Frame Handling
- 13.14 Example 3, Filtering Traffic According to a Layer 4 Classification Rule
  - 13.14.1 Solving the Problem
- 13.15 Example 4, Securing Sensitive Information According to Subnet
  - 13.15.1 Solving the Problem
- 13.16 Example 5, Using Dynamic Egress to Control Traffic
- 13.17 Example 6, Locking a MAC Address to a Port Using Classification Rules
  - 13.17.1 Solving the Problem
Generic Attribute Registration Protocol (GARP)
- A.1 Operation
- A.2 How It Works
About IGMP
- B.1 IGMP Overview
- B.2 Supported Features and Functions
- B.3 Detecting Multicast Routers
Index
- Numerics
- A
- B
- C
- D
- E
- F
- G
- H
- I
- K
- L
- M
- N
- P
- Q
- R
- S
- T
- U
- V
- W

Configuration Process

13-8 VLAN Operation and Network Applications

Switches

In order to configure a group of stations into a VLAN, the stations must be connected to

VLAN-aware switches. It is the job of the switch to classify received frames into VLAN

memberships and transmit frames, according to VLAN membership, with or without a VLAN Tag

Header.

13.6 CONFIGURATION PROCESS

Before a VLAN can operate, steps must be performed to configure the switch to establish and

configure a VLAN. Enterasys Networks VLAN-aware switches default to operate in the 802.1Q

VLAN mode. However, further configuration is necessary to establish multiple logical networks.

13.6.1 Defining a VLAN

A VLAN must exist and have a unique identity before any ports or rules can be assigned to it. The

Administrator defines a VLAN by assigning it a unique identification number (the VLAN ID), a

filter database association, and an optional name. The VLAN ID is the number that will identify

data frames originating from, and intended for, the ports that will belong to this new VLAN.

13.6.2 Classifying Frames to a VLAN

Now that a VLAN has been created, rules are defined to classify all frames in a VLAN. This is

accomplished through management by associating a VLAN ID with each port on the switch.

Optionally, frames can be classified according to layer 2/3/4 information contained in the frame.

At the same time, the Administrator configures the trunk ports that need to consider themselves

members of every VLAN. The configuration of trunk ports is very important in multiswitch VLAN

configurations where a frame’s VLAN membership needs to be maintained across several

switches.

13.6.3 Customizing the VLAN Forwarding List

Each port on a VLAN-awareswitch module has a VLAN forwarding list that contains, as a

minimum, the Port VLAN Identifier (PVID) of the VLAN configured. Additionally, the Port

VLAN Forwarding List of each port can be configured to allow any number of VLANs to be added

to its list. In the case of GMRP (dynamic VLANs), the list can have VLANs added and deleted by

the switch as directed by the protocol.

NOTE: The actual steps involved in VLAN configuration using Local Management are

presented in Section 13.8. This brief section describes the actions that must be taken in

very general terms, and is intended only to aid in the Administrator’s understanding of

VLAN switch operation.