User`s guide

ManualsBrandsEnterasys ManualsComputer equipmentVHSIM2-A6DP

Table Of Contents

Title
Notice
Contents
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- A
- B
Figures
Tables
About This Guide
- Using This Guide
- Structure of This Guide
- Related Documents
- Document Conventions
- Typographical and Keystroke Conventions
Introduction
- 1.1 Overview
  - 1.1.1 The Management Agent
  - 1.1.2 In-Band vs. Out-of-Band
- 1.2 Navigating Local Management Screens
- 1.3 Local Management Requirements
- 1.4 Local Management Screen Elements
- 1.5 Local Management Keyboard Conventions
- 1.6 Getting Help
Local Management Requirements
- 2.1 Management Terminal Setup
  - 2.1.1 Console Cable Connection
  - 2.1.2 Management Terminal Setup Parameters
- 2.2 Telnet Connections
- 2.3 Monitoring an Uninterruptible Power Supply
Accessing Local Management
- 3.1 Navigating Local Management Screens
- 3.2 Password Screen
- 3.3 Main Menu Screen
- 3.4 Module Selection Screen
  - 3.4.1 Selecting a Module
- 3.5 Module Menu Screen
- 3.6 Overview of Security Methods
- 3.7 Security Menu Screen
- 3.8 Passwords Screen
  - 3.8.1 Setting the Module Login Password
- 3.9 Radius Configuration Screen
  - 3.9.1 Setting the Last Resort Authentication
  - 3.9.2 Setting the Local and Remote Servers
- 3.10 Name Services Configuration Screen
- 3.11 System Authentication Configuration Screen
- 3.12 EAP (Port) Configuration Screen
- 3.13 EAP Statistics Menu Screen
- 3.14 MAC Port Configuration Screen
- 3.15 MAC Supplicant Configuration Screen
Chassis Menu Screens
- 4.1 Chassis Menu Screen
- 4.2 Chassis Configuration Screen
- 4.3 SNMP Configuration Menu Screen
- 4.4 SNMP Community Names Configuration Screen
  - 4.4.1 Establishing Community Names
- 4.5 SNMP Traps Configuration Screen
  - 4.5.1 Configuring the Trap Table
- 4.6 Chassis Environmental Information Screen
- 4.7 Redirect Configuration Menu Screen (Chassis)
- 4.8 Port Redirect Configuration Screen
  - 4.8.1 Changing Source and Destination Ports
- 4.9 VLAN Redirect Configuration Screen
  - 4.9.1 Changing Source VLAN and Destination Ports
Module Configuration Menu Screens
- 5.1 Module Configuration Menu Screen
- 5.2 General Configuration Screen
- 5.3 SNMP Configuration Menu Screen
- 5.4 SNMP Community Names Configuration Screen
  - 5.4.1 Establishing Community Names
- 5.5 SNMP Traps Configuration Screen
  - 5.5.1 Configuring the Trap Table
- 5.6 Access Control List Screen
  - 5.6.1 Entering IP Addresses
  - 5.6.2 Enable/Disable ACL
- 5.7 System Resources Information Screen
  - 5.7.1 Setting the Reset Peak Switch Utilization
- 5.8 FLASH Download Configuration Screen
Port Configuration Menu Screens
- 6.1 Port Configuration Menu Screen
- 6.2 Ethernet Interface Configuration Screen
- 6.3 Ethernet Port Configuration Screen
  - 6.3.1 Selecting Field Settings
  - 6.3.2 Setting the Advertised Ability
- 6.4 HSIM/VHSIM Configuration Screen
- 6.5 Redirect Configuration Menu Screen
- 6.6 Port Redirect Configuration Screen
  - 6.6.1 Changing Source and Destination Ports
- 6.7 VLAN Redirect Configuration Screen
  - 6.7.1 Changing Source VLAN and Destination Ports
- 6.8 Link Aggregation Screen (802.3ad Main Menu Screen)
- 6.9 Broadcast Suppression Configuration Screen
  - 6.9.1 Setting the Threshold
  - 6.9.2 Setting the Reset Peak
802.1 Configuration Menu Screens
- 7.1 802.1 Configuration Menu Screen
- 7.2 Spanning Tree Configuration Menu Screen
- 7.3 Spanning Tree Configuration Screen
  - 7.3.1 Configuring a VLAN Spanning Tree
- 7.4 Spanning Tree Port Configuration Screen
  - 7.4.1 Enabling/Disabling the Default Spanning Tree Ports
  - 7.4.2 Viewing Status of Spanning Tree Ports
- 7.5 PVST Port Configuration Screen
802.1Q VLAN Configuration Menu Screens
- 8.1 Summary of VLAN Local Management
  - 8.1.1 Preparing for VLAN Configuration
- 8.2 802.1Q VLAN Configuration Menu Screen
- 8.3 Static VLAN Configuration Screen
- 8.4 Static VLAN Egress Configuration Screen
  - 8.4.1 Setting Egress Types on Ports
  - 8.4.2 Displaying the Next Group of Ports
- 8.5 Current VLAN Configuration Screen
- 8.6 Current VLAN Egress Configuration Screen
- 8.7 VLAN Port Configuration Screen
  - 8.7.1 Changing the Port Mode
  - 8.7.2 Configuring the VLAN Ports
- 8.8 VLAN Classification Configuration Screen
- 8.9 Protocol Port Configuration Screen
  - 8.9.1 Assigning Ports to a VID/Classification
802.1p Configuration Menu Screens
- 9.1 802.1p Configuration Menu Screen
- 9.2 Port Priority Configuration Screen
  - 9.2.1 Setting Switch Port Priority Port-by-Port
  - 9.2.2 Setting Switch Port Priority on All Ports
- 9.3 Traffic Class Information Screen
- 9.4 Traffic Class Configuration Screen
  - 9.4.1 Assigning the Traffic Class to Port Priority
- 9.5 Transmit Queues Configuration Screen
  - 9.5.1 Setting the Current Queueing Mode
- 9.6 Priority Classification Configuration Screen
- 9.7 Protocol Port Configuration Screen
  - 9.7.1 Assigning Ports to a PID/Classification
  - 9.7.2 Example, Prioritizing Traffic According to Classification Rule
    - 9.7.2.1 Solving the Problem
- 9.8 Rate Limiting Configuration Screen
Layer 3 Extensions Menu Screens
- 10.1 Layer 3 Extensions Menu Screen
- 10.2 IGMP/VLAN Configuration Screen
  - 10.2.1 IGMP/VLAN Configuration Procedure
Module Statistics Menu Screens
- 11.1 Module Statistics Menu Screen
- 11.2 Switch Statistics Screen
- 11.3 Interface Statistics Screen
  - 11.3.1 Displaying Interface Statistics
- 11.4 RMON Statistics Screen
  - 11.4.1 Displaying RMON Statistics
- 11.5 Chassis Environmental Statistics Configuration Screen
Network Tools Screens
- 12.1 Network Tools
- 12.2 Built-in Commands
- 12.3 Example, Effects of Aging Time on Dynamic Egress
- 12.4 Example, Using Dynamic Egress to Control Traffic
- 12.5 Special Commands
VLAN Operation and Network Applications
- 13.1 Defining VLANs
- 13.2 Types of VLANs
  - 13.2.1 802.1Q VLANs
  - 13.2.2 Other VLAN Strategies
- 13.3 Benefits and Restrictions
- 13.4 VLAN Terms
- 13.5 VLAN Operation
  - 13.5.1 Description
  - 13.5.2 VLAN Components
- 13.6 Configuration Process
- 13.7 VLAN Switch Operation
  - 13.7.1 Receiving Frames from VLAN Ports
  - 13.7.2 Forwarding Decisions
    - 13.7.2.1 Broadcasts, Multicasts, and Unknown Unicasts
    - 13.7.2.2 Known Unicasts
- 13.8 VLAN Configuration
- 13.9 Summary of VLAN Local Management
  - 13.9.1 Preparing for VLAN Configuration
- 13.10 Quick VLAN Walkthrough
- 13.11 Examples
- 13.12 Example 1, Single Switch Operation
  - 13.12.1 Solving the Problem
  - 13.12.2 Frame Handling
- 13.13 Example 2, VLANs Across Multiple Switches
  - 13.13.1 Solving the Problem
  - 13.13.2 Frame Handling
- 13.14 Example 3, Filtering Traffic According to a Layer 4 Classification Rule
  - 13.14.1 Solving the Problem
- 13.15 Example 4, Securing Sensitive Information According to Subnet
  - 13.15.1 Solving the Problem
- 13.16 Example 5, Using Dynamic Egress to Control Traffic
- 13.17 Example 6, Locking a MAC Address to a Port Using Classification Rules
  - 13.17.1 Solving the Problem
Generic Attribute Registration Protocol (GARP)
- A.1 Operation
- A.2 How It Works
About IGMP
- B.1 IGMP Overview
- B.2 Supported Features and Functions
- B.3 Detecting Multicast Routers
Index
- Numerics
- A
- B
- C
- D
- E
- F
- G
- H
- I
- K
- L
- M
- N
- P
- Q
- R
- S
- T
- U
- V
- W

EAP (Port) Configuration Screen

Accessing Local Management 3-41

Authentication State

(Cont’d)

• aborting: The port enters this state from authenticating when any

event occurs that interrupts the login exchange.

• held: After any login failure, this state is entered where the port

remains for the number of seconds equal to quietPeriod (can be set

using mib).

• forceAuth: Management has set this in “Port Control”. This allows

normal, unsecured switching on this port.

• forceUnauth: Management has set this in “Port Control”.

Absolutely no frames are forwarded to or from this port.

Backend State

(Read-Only)

See the current backend state of each port.

The backend state machine controls the protocol interaction between

the authenticator (the switch) and the authentication server (typically a

radius server).

These following seven states are the possible internal states for the

authenticator. Some states are simply pass-through states causing a

small action and immediately moving to a new state. Therefore, you

may not observe all of the states in this interface.

For more detail, please see the IEEE Standard 802.1X-20001, Port

Based Network Access Control.

• request: The port has received a request from the server and is

waiting for a response from the supplicant.

• response: The port has received a response from the server and is

waiting for either another request or an accept or reject from the

server.

• success: The port has received a success from the server. Send a

success to the supplicant and move to idle.

• fail: The port has received a reject from the server. Send a fail to the

supplicant and move to idle.

• timeout: The port has timed-out during the authentication exchange.

Table 3-11 EAP Port Configuration Screen Field Descriptions (Continued)

Use this field… To…