manualshive.com logo in svg

Asante IntraCore 3624, User Manual

Share
Download
Asante IntraCore 3624 User Manual Download Page 51

 

Command Purpose 

access-list name acl1 set …… 

Set the criteria statement of an access list named ‘acl_name’  

access-list name acl1 action …… 

Specify the action to take if criteria of the access list is 
matched 

 

In the following example, an access list will be created to block traffic sent from MAC address 00-00-94-12-34-56. 

Switch(Config)# access-list name acl_mac add priority 1 

Switch(Config)# access-list name acl_mac set mac-mode macsa 00-00-94-12-34-56 ff-ff-

ff-ff-ff-ff 

Switch(Config)# access-list name acl_mac action deny 

Switch(Config)#  

 

In the next example, a standard access list will be created to deny all traffic from 192.168.123.254 , and allow all 
other traffic to be forwarded. 

Switch(Config)# access-list name acl_ip add priority 1 

Switch(Config)# access-list name acl_ip set ip-mode srcip 192.168.123.254 

255.255.255.255 

Switch(Config)# access-list name acl_ip action deny 

Switch(Config)# 

 

In the following example, an access list will be created to deny Telnet traffic. 

Switch(Config)# access-list name acl_tcp_src add priority 1 

Switch(Config)# access-list name acl_tcp_src set ip-mode l4port src-port from 23 to 23 

Switch(Config)# access-list name acl_tcp_dst add priority 2 

Switch(Config)# access-list name acl_tcp set ip-mode l4port dst-port from 23 to 23  

Switch(Config)# access-list name acl_tcp_src action deny 

Switch(Config)# access-list name acl_tcp_dst action deny 

Switch(Config)# 

51 

Asante IntraCore IC3624/48

 

User’s Manual

 

 

Summary of Contents for IntraCore 3624

Page 1: ...IntraCore 3624 48 24 48 Port 10 100 2 4 Gigabit Ethernet Switch User s Manual ...

Page 2: ...twork product design or design concept may be copied or reproduced in whole or in part by any means without the express written consent of Asante Asante and IntraCore are registered trademarks and the Asante logo AsanteCare Auto Uplink and IntraCare are trademarks of Asante All other brand names or product names are trademarks or registered trademarks of their respective holders All features and s...

Page 3: ...Recommended Installation Tools 15 2 1 3 Power Requirements 15 2 1 4 Environmental Requirements 15 2 1 5 Cooling and Airflow 15 2 2 Installing into an Equipment Rack 15 2 2 1 Equipment Rack Guidelines 16 2 3 SFP Mini GBIC Ports 16 2 4 Connecting Power 17 2 5 Connecting to the Network 17 2 5 1 10 100 1000BaseT Ports Cabling Procedures 17 2 5 2 Gigabit Ethernet Ports Cabling Procedures 18 Chapter 3 I...

Page 4: ... 5 Managing the System and Configuration Files 34 5 1 Managing the System 34 5 1 1 Setting the System Clock 34 5 1 2 Specify the Hostname 35 5 1 5 Test Connections with Ping Tests 35 5 1 3 Enable the System Log 35 5 1 4 Displaying the Operating Configuration 35 5 2 Managing Configuration Files 36 5 2 1 Configuring from the Terminal 36 5 2 2 Copying Configuration Files to a Network Server 36 5 2 3 ...

Page 5: ...List 52 Chapter 7 VLAN Configuration 53 7 1 Creating or Modifying a VLAN 53 VLANS can be configured using the following commands 54 7 2 VLAN Port Membership 54 7 2 1 configuring vlan ports 54 7 2 2 Trunk IEEE 802 1q 55 Chapter 8 Scheduling algorithm 57 8 1 Scheduling algorithm 57 8 1 1 Configuring Weighted Round Robin 57 8 1 2 Monitoring Weighted Round Robin 58 8 2 Priority Queuing 58 8 2 1 Priori...

Page 6: ...ting 66 Chapter 10 CLI Commands 109 Appendix A Basic Troubleshooting 138 Appendix B Specifications 138 Appendix C FCC Compliance and Warranty Statements 141 C 1 FCC Compliance Statement 141 C 2 Important Safety Instructions 141 C 3 IntraCore Warranty Statement 142 Index 143 6 Asante IntraCore IC3624 48 User s Manual ...

Page 7: ...egregating them into separate broadcast domains with IEEE 802 1Q compliant VLANs and provide multimedia applications with multicast switching and CoS services The system can operate as a stand alone network or be used in combination with other IntraCore switches in the backbone 1 1 Features The IntraCore IC3624 48 Ethernet switch is a 24 port 48 port Layer 2 multi media multi protocol Ethernet and...

Page 8: ...from Normal Exec Level RADIUS Authentication TACACS Authentication 802 1x Port Authentication HTTPS Port Security IP Filtering Username admin Password Asante Username admin Password Asante Disabled Disabled Disabled Disabled Disabled Disabled Web Management HTTP Server HTTP Port Number HTTP Secure Server HTTP Secure Port Number Enabled 80 Disabled 443 SNMP Community Strings Traps public read only ...

Page 9: ... Limits Disabled Port Trucking LACP all ports Disabled Broadcast Storm Protection Status Broadcast Limit Rate Enabled all ports 500 packets per second Spanning Tree Protocol Status Disabled Address Table Aging Time 300 seconds Virtual LANs Default VLAN PVID Acceptable Frame Type Ingress Filtering Switchport Mode egress mode 1 1 All Disabled untagged frames Traffic Prioritization Ingress Port Prior...

Page 10: ... ARP 192 168 0 1 255 255 255 0 0 0 0 0 Client Disabled Enabled Multicast Filtering IGMP Snooping Disabled System Log Remote logging Memory log Flash log Disabled Enabled Enabled SNTP Clock Synchronization Disabled 10 Asante IntraCore IC3624 48 User s Manual ...

Page 11: ...wing section describes the front and back panels of the IntraCore IC3624 48 Series switches The front panel of the IntraCore IC3624 48 contains the following power and port LEDs 24 10 100BaseT ports and 2 4 dual function Gigabit ports that support either 1000BaseT or mini GBIC Gigabit Ethernet ports The console port may be front or back depending on model For information on LEDs refer to the follo...

Page 12: ...3648 Front Panel Ethernet ports Mini GBIC ports 3648 Rear Panel 12 Asante IntraCore IC3624 48 User s Manual ...

Page 13: ...Management and Configuration The switch is managed using Command Line Interface CLI in order to access several different command modes Entering a question mark at each command mode s prompt provides a list of commands 1 5 1 Console Interface Support for local out of band management is delivered through a terminal or modem attached to the EIA TIA 232 interface You can access the switch by connectin...

Page 14: ... to protect the switch from damage Note This information is a guideline and may not include every possible hazard Use caution when installing this switch Only trained and qualified personnel should be allowed to install or replace this equipment Always use caution when lifting heavy equipment Keep the switch clean Keep tools and components off the floor and away from foot traffic Avoid wearing rin...

Page 15: ... 60 Hz 2 1 4 Environmental Requirements Install the switch in a clean dry dust free area with adequate air circulation to maintain the following environmental limits Operating Temperature 0 to 40 C 32 to 104 F Relative Humidity 5 to 95 non condensing Avoid direct sunlight heat sources or areas with high levels of electromagnetic interference Failure to observe these limits may cause damage to the ...

Page 16: ... C Be sure that no obstructions such as other equipment or cables block airflow to or from the vents of the switch Clearance In addition to providing clearance for ventilation ensure that adequate clearance for servicing the switch from the front exists 2 3 SFP Mini GBIC Ports The GBIC Interface is the industry standard for Gigabit Ethernet Interfaces The Gigabit SFP module inserts into the Mini G...

Page 17: ... the switch is connected to the network it can be configured for management capabilities see the following chapters for information on configuration 2 5 1 10 100 1000BaseT Ports Cabling Procedures The 10 100 1000 ports on the switch allow for the connection of 10BaseT 100BaseTX or 1000BaseT network devices The ports are compatible with IEEE 802 3 and 802 3u standards Important The switch must be l...

Page 18: ...e White 5 1 White Blue 6 3 Green White 7 4 White Brown 8 4 Brown White 2 5 2 Gigabit Ethernet Ports Cabling Procedures Cabling requirements for the optional hardware modules depend on the type of module installed Use the following guidelines to determine the particular cabling requirements of the module s 1000BaseSX GBIC Cables with SC type fiber connectors 62 5µ multi mode fiber MMF media up to 2...

Page 19: ...ir UTP cable up to 100 m 328 1 When attaching a workstation to the switch a standard straight through CAT5 cable may be used even when the workstation is attached via a patch panel No crossover cable is needed with the MDX MDI ports The switch should be kept off the network until proper IP settings have been set 19 Asante IntraCore IC3624 48 User s Manual ...

Page 20: ...8 Attach a straight through serial cable between the RS232 console port and a COM port on the PC 9 Set up a HyperTerminal or equivalent terminal program in the following manner a Open the HyperTerminal program and from its file menu right click on Properties b Under the Connect To tab choose the appropriate COM port such as COM1 or COM2 c d b c Under the Settings tab choose Select Terminal keys fo...

Page 21: ...Now that terminal is set up correctly power on the switch The boot sequence will display in the terminal After connecting to the console you will be asked for a password The initial default password for access using either the console or telnet is Asante case sensitive Refer to the following section for setting passwords on the terminal lines 21 Asante IntraCore IC3624 48 User s Manual ...

Page 22: ...ned to them By default each switchport belongs to VLAN 1 Use the following instructions to configure an IP address to the switch Follow the steps below to change the switch s IP address 1 Connect to the console and Enter at the Username prompt the username and password as described above 2 The screen displays the user mode prompt COMMAND 3 Type enable Enter username and password The new prompt is ...

Page 23: ...fig Switch save Important To retain configuration changes after a system reload you must save changes made in running configuration From the privileged level configurations can be saved using the save command The switch is ready for configuration Refer to the following chapters for management and configuration information 23 Asante IntraCore IC3624 48 User s Manual ...

Page 24: ... system prompt provides a list of commands available for each command mode Document Conventions Command descriptions use the following conventions Vertical bars separate alternative mutually exclusive elements Braces indicate a required choice Boldface indicates commands and keywords that are entered literally as shown Italics indicate arguments for which you supply values Access Each Command Mode...

Page 25: ...view all the commands that start with that letter with no space between the letter and the question mark Please note that there is no help on the arguments after a command is typed Use logout to logout from the switch 4 2 Privileged Top Privileged EXEC Mode Because many of the privileged commands set the system configuration parameters privileged access can be password protected to prevent unautho...

Page 26: ...agnostic clear Command to clear switch configuration or statistics configuration Enter into global configuration mode copy Upload file from switch to host or download file to switch from host exit Exit current shell help Displays Help information logout Exit current shell ping Proceed ping destination host reload Reboot System save Save configuration show Show configured data telnet Telnet the oth...

Page 27: ...n commands To exit global configuration command mode and return to privileged EXEC mode use one of the following commands Command Purpose exit Exits global configuration mode and returns to privileged EXEC mode To list the commands available in global configuration mode enter a question mark at the prompt as shown in the following example Enter a question mark after a specific command to see all t...

Page 28: ...ce mode green eth Configure Green Ethernet enable or disable Switch Config From global configuration mode you can access three additional configuration modes Use the interface command to access its configuration modes 4 3 1 Interface Configuration Mode Many features are enabled on a per interface basis Interface configuration commands modify the operation of an interface such as an Ethernet or ser...

Page 29: ...trol Configure storm control on a port rmon counter Configure RMON counter capability on a port set Configure an IGMP router port spanning tree Configure port spanning tree vlan Configure VLAN properties on a port interface Change to another interface Switch Interface 1 To exit interface configuration mode and return to global configuration mode enter the exit command To exit configuration mode an...

Page 30: ...because it reminds you which keywords or arguments are applicable based on the command keywords and arguments you already have entered Example of Context Sensitive Help The following example illustrates how the context sensitive help feature creates an access list from the configuration mode Enter the letters co at the system prompt followed by a question mark Do not leave a space between the last...

Page 31: ...y contents delete Remove the ACL entry enable Enable the ACL entry disable Disable the ACL entry set Set ACL entry contents Switch Config access list name acl_1 4 5 Using CLI Command History The CLI user interface provides a history or record of commands that you have entered This feature is particularly useful for recalling long or complex commands or entries including access lists To recall comm...

Page 32: ...ing Entries Scrolling Down a Line or a Screen Redisplaying the Current Command Line Transposing Mistyped Characters Controlling Capitalization 4 6 1 Moving Around on the Command Line Use the following keystrokes to move the cursor around on the command line in order to make corrections or changes Keystrokes Purpose Press the left arrow Move the cursor back one character Press the right arrow Move ...

Page 33: ...ed so that you may modify the command if necessary You may also enter a question mark to obtain a list of commands that begin with that set of characters Do not leave a space between the last letter entered and the question mark For example two commands in privileged mode start with co To see what they are type co at the privileged EXEC prompt Switch co configuration copy Switch co 4 6 3 Deleting ...

Page 34: ...k The IntraCore 3624 48has a battery backed system clock that is accurate even after a system restart To manually set the system clock complete the following commands in privileged configuration mode Use a space and a question mark to display the clock set options Save after configuring the clock by typing save at the switch prompt Switch Config sntp daylight Enable or disable the daylight saving ...

Page 35: ...ther device on the network from the switch Command Purpose ping address Send an ICMP echo message to a designated host for testing connectivity 5 1 3 Enable the System Log The IntraCore 3624 48 sends syslog messages to manager servers Syslog messages are collected by a standard UNIX or NT type syslog daemon Syslog enables the administrator to centrally log and analyze configuration events and syst...

Page 36: ...bing the commands you have entered Precede a comment with an exclamation point 5 2 2 Copying Configuration Files to a Network Server You can copy configuration files from the switch to a file server using TFTP You might wish to back up a current configuration file to a server before changing its contents thereby allowing you to later restore the original configuration file from the server Importan...

Page 37: ..._config command loads the configuration files into the switch as if you were typing the commands in at the command line The switch does not erase the existing running configuration before adding the commands unless a command in the copied configuration file replaces a command in the existing configuration file For example if the copied configuration file contains a different IP address in a partic...

Page 38: ... image from the server in case of system image file corruption To save the system image file of the switch to a TFTP server use one of the following commands in EXEC mode Command Purpose copy system_image tftp 192 168 0 254 file ttt sysimg_file Copy the system image the file sysimg_file to TFTP server 192 168 0 254 5 3 2 Replacing System image from a Network Server You can replace the system image...

Page 39: ...ng the SNMP manager to a specific event on the network Such events include improper user authentication restarts link status up or down closing of a TCP connection or loss of connection to a neighboring switch An SNMP manager can request a value from an agent or store or change a value in that agent To configure support for SNMP on the switch perform the following tasks Create an SNMP user group C...

Page 40: ...ex bridge on the network communicate with each other using special packets of data called Bridge Protocol Data Units BPDUs The information exchanged in the BPDUs allows the bridges on the network to do the following Elect a single bridge to be the root bridge Calculate the shortest path from each bridge to the root bridge Select a designated bridge on each segment which lies closest to the root an...

Page 41: ...o or more ports have the same path cost the STP selects the path with the highest priority the lowest numerical value By changing the priority of a port it can be more or less likely to become the root port The default value is 128 and the value range is 0 255 Port Path Cost Port path cost is the spanning tree parameter that assigns a cost factor to each port The lower the assigned port path cost ...

Page 42: ...edge port will be in the RSTP initialization state and will send out the RSTP BPDUs with the operating status of edge port set to TRUE If the edge port starts receiving the BPDUs it will change the operating edge state to FALSE and start the spanning tree calculations It is recommended to assign any ports that are to be left as a leaf of the LAN with no connection to any bridge as edge ports Root ...

Page 43: ...nd Purpose spanning tree port force p2plink enable ports 1 2 Set link type of port 1 2 to point to point By default the link type is determined from the duplex mode of the interface a full duplex port is considered to have a point to point connection a half duplex port is considered to have a shared connection To return the switch to its default setting use the following configuration command Comm...

Page 44: ...h cost are determined by the operating port speed For ports operating in 1000Mb speed the path cost is 20000 For ports operating in 100Mb speed the path cost is 200000 For ports operating in 10Mb speed the path cost is 2000000 To return the switch to its default setting use the following configuration command Command Purpose spanning tree port cost 0 ports 1 2 Set path cost of ports 1 2 to default...

Page 45: ...For port priority the range is 0 240 in increments of 16 the default is 128 The lower the number the higher the priority 45 Asante IntraCore IC3624 48 User s Manual ...

Page 46: ...It was possible that IP addresses would run out and routing tables would be overwhelmed Thus the Classless Inter Domain Routing CIDR addressing scheme was created CIDR replaces the older process of assigning IP addresses with general prefixes of 8 16 or 24 bits CIDR uses prefixes of 13 to 27 bits A CIDR address includes the standard 32 bit IP address and adds information on how many bits are used ...

Page 47: ... to local addresses as MAC addresses because the Media Access Control MAC sub layer within the data link layer processes addresses for the layer To communicate with a device on Ethernet you first must determine the 48 bit MAC or local data link address of that device The process of determining the local data link address from an IP address is called address resolution The IntraCore 3624 48 softwar...

Page 48: ... IGMP query timeout and the maximum query response time 6 2 1 IGMP Overview The Internet Group Management Protocol IGMP manages the multicast groups on a LAN IP hosts use IGMP to report their group membership to directly connected multicast switches Switches executing a multicast protocol maintain forwarding tables to forward multicast datagram s Switches use the IGMP to learn whether members of a...

Page 49: ...uerier Modifying the IGMP Host Query Message Interval Multicast switches elect a designated switch for the LAN subnet The designated switch is the one with the highest IP address The switch is responsible for sending IGMP host query messages to all hosts on the LAN By default the designated switch sends IGMP host query messages every 60 seconds in order to keep the IGMP overhead on hosts and netwo...

Page 50: ...y lower value than those with higher priority values The last match determines whether the software accepts or rejects the address In case of multiple matches the match in IP mode takes precedence over that in MAC mode Because the switch goes through the whole set of access lists to find matches the priority of the ACL is critical Important By default if no conditions match the switch allows the a...

Page 51: ...fic from 192 168 123 254 and allow all other traffic to be forwarded Switch Config access list name acl_ip add priority 1 Switch Config access list name acl_ip set ip mode srcip 192 168 123 254 255 255 255 255 Switch Config access list name acl_ip action deny Switch Config In the following example an access list will be created to deny Telnet traffic Switch Config access list name acl_tcp_src add ...

Page 52: ...ity 1 Switch Config access list name acl_tcp_dst_smtp set ip mode l4port dst port from 25 to 25 Switch Config access list name acl_tcp_dst_smtp set portlist 7 Switch Config access list name acl_tcp_dst_smtp action permit Switch Config access list name acl_deny_all add priority 2 Switch Config access list name acl_deny_all set ip mode l4port dst port from 25 to 25 Switch Config access list name acl...

Page 53: ...gging The following shows the commands available to configure VLAN s Switch Config vlan add Create a new VLAN delete Remove a existed VLAN port Configure 802 1Q port parameters for VLANs lag Configure lag to a special VLAN Switch Config interface 4 Switch Interface 4 vlan participation Join or leave a VLAN protected Configure port protected property dropnq Configure port drop no 8021q frame ingres...

Page 54: ...uments Use the following commands beginning in configuration mode to assign an IEEE 802 1q trunk port To create 3 vlans 2 3 4 with vlan 2 untagged port members 1 2 3 4 vlan 3 untagged port members 6 7 8 9 and vlan 4 untagged port members 11 12 13 14 enter the following commands beginning in configuration mode Note that exclude is used so ports belong to various vlans exclusively Note that exclude ...

Page 55: ...NUMBER Enter the interface number to access the interface configuration mode Vlan participation This command designates the interface to be a member of a vlan Use the no form of this command to reset to the default of static access mode Continue with the example in previous section the commands below are used to make port 20 an IEEE 802 1q trunk port Switch Config interface 20 Switch Interface 20 ...

Page 56: ... the untagged frames are classified to the trunk port s native VLAN the VLAN whose VID matches the port s PVID The trunk port also sends out the frames as untagged for the native VLAN and tagged for other VLANs 56 Asante IntraCore IC3624 48 User s Manual ...

Page 57: ...ling algorithm There are 2 methods to schedule a packet to be transmitted from the switch strict priority and weighed round robin In strict priority the packet with the highest priority will be sent first the lower priority packets will be sent only when all higher priority packets have been sent Therefore a low priority packet will not be sent if higher priority packets are present all the time I...

Page 58: ...es 0 7 and 4 internal queues Each packet can be assigned a priority based on which port it comes in 802 1P header or IP precedence DSCP in IP header if the packet is an IP packet The OQS configurations determine how priority is assigned based on packet characteristics to cause the switch to place traffic into the four queues 8 2 1 Priority Mapping Each outgoing packets is assigned to one of the 4 ...

Page 59: ...ed to the packet by the switch 8 2 4 IP Based QOS The priority of an IP packet can be assigned based on the IP Precedence or DSCP value To set IP Precedence QOS use the following command in EXEC mode Command Purpose Switch config qos qos advanced ip precedence Enable IP precedence QOS Switch config qos ip precedence Set mapping between IP precedence value and the internal queues To set DSCP QOS us...

Page 60: ... traffic shaping for outbound traffic on an interface use the following command in interface configuration mode Command Purpose Switch config interface 5 Go to interface 5 Switch interface 5 rate limit egress Set the rate limit of interface 5 8 4 Rate Limiting The rate limit command allows you to control the amount of traffic coming in on a port To set rate limit on an interface 5 use the followin...

Page 61: ...implement them refer to the chapters specific to that function At your web browser enter the IP address for the switch to launch the GUI Depending on settings you may receive a certificate error message Ignore this and continue The defaults are IP Address 192 168 0 1 Username admin Password Asante capital A Enter the username and password then click the OK button 61 Asante IntraCore IC3624 48 User...

Page 62: ...o configure the switch From this panel you can access the following screens System Port Management VLAN Management Spanning Tree Multicast Security QoS SNMP LLDP Admin Statistics Help Logout The following example shows the main Configuration Menu 62 Asante IntraCore IC3624 48 User s Manual ...

Page 63: ... first system screen up a name and location for the switch can be added A system contact can also be entered You can also view the Hardware Version Boot Version Firmware Version Build Date and the MAC Address Save the settings when done by clicking the Save Settings button 63 Asante IntraCore IC3624 48 User s Manual ...

Page 64: ...gn IP addresses to network interfaces Doing so enables the interfaces and allows communication with hosts on those interfaces using IP Associated with this task are decisions about subnetting and masking the IP addresses An IP address is a location to and from which IP datagrams can be sent IP addresses were traditionally divided into three classes The Class A Internet address format allocated the...

Page 65: ...dcast When multiple networks are connected to the Internet the traditional classified addressing scheme could cause you to run out of IP addresses The usual way of assigning IP addresses uses the prefixes of 8 16 or 24 bits Using prefixes of 13 to 27 bits an address includes the standard 32 bit IP address and adds information on how many bits are used for the network prefix In the IP address 206 2...

Page 66: ...m Time Setting Use the Time Setting page to set the time zone or local time for the switch Daylight savings can also be enabled Click the Save Settings button when done 66 Asante IntraCore IC3624 48 User s Manual ...

Page 67: ...9 2 4 System Green Ethernet Green Ethernet is a power saving technology that allows the switch to save power when Ethernet is not being actively used 67 Asante IntraCore IC3624 48 User s Manual ...

Page 68: ...t Management section displays assorted settings for each port Port Management Port Config Specific Port Settings can be made on a per port basis When a port number is clicked the subscreen appears 68 Asante IntraCore IC3624 48 User s Manual ...

Page 69: ...re displayed on this screen The system LACP Priority can be set here By clicking on a port number a subscreen for each port is available Port Management LACP Property Port Settings for each port can be entered 69 Asante IntraCore IC3624 48 User s Manual ...

Page 70: ... screen below can be used to add ports to the group 9 4 VLAN Management VLANs are used to organize any group of network nodes into separate broadcast domains VLANs confine broadcast traffic to the originating group and eliminate broadcast storms in large networks VLANs provide a secure and efficient network environment 70 Asante IntraCore IC3624 48 User s Manual ...

Page 71: ... same VLAN Traffic between VLANs is assigned LAN port VLAN membership is assigned manually on an port by port basis VLANs can be defined as either Layer 2 or Layer 3 and a VLAN cannot switch between the two layers Before you create a VLAN you must decide how they will be created and a naming convention to ensure duplicate VLAN names are not used Up to 4094 Virtual LANs VLANs are supported on the I...

Page 72: ...NT VLAN SETTINGS With a vlan selected ports can be marked as tagged or untagged Lover on the screen LAG groups can also be tagged or untagged Click Save Settings when done 72 Asante IntraCore IC3624 48 User s Manual ...

Page 73: ...PVID in required to force the port to respond to a particular VLAN Becoming a member of a VLAN is only the start The port PVID must be changed to cause it to respond only to the desired VLAN Various filters can be set on this screen Ingress filter Non 802 1Q filter and port protection can all be set here 73 Asante IntraCore IC3624 48 User s Manual ...

Page 74: ... 100 Mbps port is the result of the equation Path cost 1000 LAN speed in Mbps Therefore for 10 Mbps ports the default port path cost is 100 For 100 Mbps ports it is 10 To allow for faster networks the port path cost for a 1000 Mbps port is set by the standard at 4 The default values for path cost is determined by the operating port speed For ports operating in 1000Mb speed the path cost is 20000 F...

Page 75: ...quation Path cost 1000 LAN speed in Mbps Therefore for 10 Mbps ports the default port path cost is 100 For 100 Mbps ports it is 10 To allow for faster networks the port path cost for a 1000 Mbps port is set by the standard at 4 The default values for path cost is determined by the operating port speed For ports operating in 1000Mb speed the path cost is 20000 For ports operating in 100Mb speed the...

Page 76: ...MSTP Multiple Spanning Tree Protocol can be enabled on this page Individual Port properties can be manipulated at this screen 76 Asante IntraCore IC3624 48 User s Manual ...

Page 77: ...MST Instance parameters can be modified on the following two screens 77 Asante IntraCore IC3624 48 User s Manual ...

Page 78: ...9 6 Multicast Static multicast settings can be set Port by port participation can be controlled 78 Asante IntraCore IC3624 48 User s Manual ...

Page 79: ...h is responsible for sending IGMP host query messages to all hosts on the LAN By default the designated switch sends IGMP host query messages every 60 seconds in order to keep the IGMP overhead on hosts and networks very low IGMP snooping allows multicasts to be pruned to only the ports whose users have requested the multicast IGMP Querier should be enabled on one device on you local network That ...

Page 80: ...ty Port Security Each port can be listed individually or a table can be displayed using the Show Table button Access control lists can be established using this screen 80 Asante IntraCore IC3624 48 User s Manual ...

Page 81: ...802 1X can be enabled on a per port basis Radius server can be identified at this screen A secret key can be created and the port can be altered 81 Asante IntraCore IC3624 48 User s Manual ...

Page 82: ...TACAS and Storm Control are available on the next screens 82 Asante IntraCore IC3624 48 User s Manual ...

Page 83: ...st can be used to enter a list of IP addresses to limit the availability of switch Management Auto DoS provides protection from a variety of denial of service type of threats 83 Asante IntraCore IC3624 48 User s Manual ...

Page 84: ...9 8 QoS Quality of service settings allow various protocols to be selected to protect functions that require real time performance and limit other traffic 84 Asante IntraCore IC3624 48 User s Manual ...

Page 85: ...ted on this page There are eight queues available numbering 0 7 Click on the Mode selector to choose DSCP Then settings will be available to assign DHCP codes to the eignt queues 85 Asante IntraCore IC3624 48 User s Manual ...

Page 86: ...802 1P priory is supported to four queues Each priority level can be assigned to one of the four queues 86 Asante IntraCore IC3624 48 User s Manual ...

Page 87: ...Port based QoS allows the priority for each port to be manually set Click the Update button when done to save changes 87 Asante IntraCore IC3624 48 User s Manual ...

Page 88: ...Rate Control allows traffic shaping for each port An ingress rate limit can also be set 88 Asante IntraCore IC3624 48 User s Manual ...

Page 89: ...Us The IntraCore IC3624 48 supports SNMPv1 v2 and v3 The SNMPv3 protocol has improved the authentication access control and security methods Use the following screens to set the read write access and to enable or disable the trap authentication for this switch The default SNMP read community access is public the default SNMP write community access is private the default trap authentication is disa...

Page 90: ...SNMP Continued 90 Asante IntraCore IC3624 48 User s Manual ...

Page 91: ...9 10 LLDP 91 Asante IntraCore IC3624 48 User s Manual ...

Page 92: ...92 Asante IntraCore IC3624 48 User s Manual ...

Page 93: ... screen that can be used to change the password Remember to click Save Settings when done L2 Table makes available MAC addresses and lists the port they are associated with Aging time can also be specified 93 Asante IntraCore IC3624 48 User s Manual ...

Page 94: ...ddresses can be added using this screen Dynamic ARP is the screen that allows aging time and trusted ports to be set on a per port basis Click Save Setting when done 94 Asante IntraCore IC3624 48 User s Manual ...

Page 95: ...y checking the ingress mirror or egress mirror for the port Next select the port to mirror the information to Admin Timeout allows the timeout in seconds to be set before the management session is terminated do to no activity 95 Asante IntraCore IC3624 48 User s Manual ...

Page 96: ...ADMIN Continued assorted administration functions are controlled using the next several screens 96 Asante IntraCore IC3624 48 User s Manual ...

Page 97: ...97 Asante IntraCore IC3624 48 User s Manual ...

Page 98: ...98 Asante IntraCore IC3624 48 User s Manual ...

Page 99: ...99 Asante IntraCore IC3624 48 User s Manual ...

Page 100: ...Cable diagnostic a cable test that can be run for each port 100 Asante IntraCore IC3624 48 User s Manual ...

Page 101: ...DHCP Relay DCP Option 82 these screens control the relay of DHCP information from a server VLANS can also be specified to receive DHCP information 101 Asante IntraCore IC3624 48 User s Manual ...

Page 102: ...9 12 Statistics RMON information and settings are controlled using the next screens General counters and timers are also displayed 102 Asante IntraCore IC3624 48 User s Manual ...

Page 103: ...103 Asante IntraCore IC3624 48 User s Manual ...

Page 104: ...104 Asante IntraCore IC3624 48 User s Manual ...

Page 105: ...105 Asante IntraCore IC3624 48 User s Manual ...

Page 106: ...9 13 Help General help is available for many screens 106 Asante IntraCore IC3624 48 User s Manual ...

Page 107: ...9 14 Logout Use this screen to logout and close the session 107 Asante IntraCore IC3624 48 User s Manual ...

Page 108: ...108 Asante IntraCore IC3624 48 User s Manual ...

Page 109: ...his level is Command Prompt Switch Global Config Mode This mode permits the operator to make modifications to the running configuration General setup commands are grouped in this mode From the Global Configuration mode the operator can enter the Interface Configuration mode The command prompt at this level is Command Prompt Switch Config From the Global Config mode the operator may enter the follo...

Page 110: ... Mode Privileged Mode e g Switch cable diag port 1 10 3 2 clear 10 3 2 1 clear arl This command is used to clear ARL table entries Format clear arl Mode Privileged Mode 1 clear arl dynamic This command is used to Clear dynamic arl table entries Format clear arl dynamic Mode Privileged Mode 2 clear arl static This command is used to clear static arl table entries Format clear arl static mac mac add...

Page 111: ...m switch to host or download file to switch from host 10 3 4 1 copy nvram_config This command is used to backup switch configuration Format copy nvram_config tftp A B C D file filename Mode Privileged Mode e g Switch copy nvram_config tftp 192 168 1 100 file switch_configuration 10 3 4 2 copy system_image This command is used to backup switch runtime image Format copy system_image tftp A B C D fil...

Page 112: ...e 3 show qos advanced This command display qos advanced mode information show qos advanced mode This command display mode of qos Format show qos advanced mode Mode Privileged Mode show qos advanced dscp This command display qos dscp mapping Format show qos advanced dscp Mode Privileged Mode show qos advanced ip precedence This command display qos ip precedence mapping Format show qos advanced ip p...

Page 113: ... used to display port RX and TX Format show interface history port ID Mode Privileged Mode 2 show interface statistics This command is used to display port summary statistics Format show interface statistics port ID Mode Privileged Mode 10 3 11 5 show lag This command is used to display link aggregation groups information 1 show lag lag index This command is used to specify an switch lag Format sh...

Page 114: ...tch interface Format show port port index port ID Mode Privileged Mode show port all This command is used to display all switch interface Format show port all Mode Privileged Mode 10 3 11 11 show port security This command is used to display port security settings 1 show port security port This command is used to specify an switch interface Format show port security port port ID 20 Mode Privileged...

Page 115: ...ce 21 Format show spanning tree interface port port ID Mode Privileged Mode show spanning tree interface all This command display all switch interface Format show spanning tree interface all Mode Privileged Mode 2 show spanning tree mst This command display MST information show spanning tree mst detailed This command display a MST instance information Format show spanning tree mst detailed 0 4094 ...

Page 116: ...is command is used to display the value of trap flags that apply to the switch Format show trapflags Mode Privileged Mode 10 3 11 21 show vlan This command is used to display vlan configuration 1 show vlan member This command display vlan configuration Format show vlan member 1 4094 Mode Privileged Mode 2 show vlan number This command display how many vlan has been created Format show vlan number ...

Page 117: ... vlan This command is used to configure vlan 10 4 2 1 vlan add This command is used to create a new vlan vlan add number This command enter a vlan ID Format vlan add number vlan ID Mode Global Config vlan add range This command enter a range of vlan ID Format vlan add range from vlan ID to vlan ID Mode Global Config 10 4 2 2 vlan delete This command remove a existed vlan Format vlan delete vlan ID...

Page 118: ... Config vlan port ports protected This command is used to configure protected ports Format vlan port ports protected enable disable Mode Global Config vlan port ports pvid This command is used to configure port vid Format vlan port ports pvid vlan ID Mode Global Config 10 4 2 5 vlan lag This command is used to configure lag to a special vlan 1 vlan lag vlan vlan id exclude 25 This command is used ...

Page 119: ...al This command is used to specify advertised interval in seconds Format lldp adv interval 5 32768 Mode Global Config 10 4 6 4 lldp fast startcnt This command is used to specify advertised interval in seconds Format lldp fast startcnt 1 10 Mode Global Config 10 4 6 5 lldp hold This command is used to specify hold value Format lldp hold 2 10 Mode Global Config 10 4 6 6 lldp notify interval This com...

Page 120: ... logging target console enable disable Mode Global Config 4 log logging target server This command is used to specify console log notify level Format log logging target server name WORD enable disable Mode Global Config 10 4 8 radius server This command is used to configure radius server Format radius server ip IP addr Mode Global Config 10 4 9 static address This command is used to specify static...

Page 121: ...tch config monitor des 1 probetype ingress src 2 8 3 monitor des port ID probetype egress This command configures port monitor probetype as egress traffic Format monitor des port ID probetype egress src port list Mode Global Config e g Switch config monitor des 1 probetype egress src 2 8 10 4 12 dot1x commands 10 4 12 1 dot1x enable This command enables global 802 1x function Format dot1x enable M...

Page 122: ...p relay vlan vlan ID add Mode Global Config network dhcp relay vlan vlan ID remove This command enters a vlan which will be disable dhcp relay option82 Format network dhcp relay vlan vlan ID remove Mode Global Config 10 4 13 5 network sysinfo Configure switch system information Network sysinfo sysname This command configures system name Format network sysinfo sysname WORD Mode Global Config networ...

Page 123: ...0 4 14 5 port all rate limit Configure rate limit value on all ports 1 port all rate limit egress This command specifies egress rate limit Format port all Rate Limit egress value Mode Global Config 31 2 port all rate limit ingress This command specifies ingress rate limit Format port all rate limit ingress value Mode Global Config 10 4 14 6 port all rmon counter This command configures rmon counte...

Page 124: ...Format qos qos advanced none Mode Global Config 32 10 4 15 2 qos cos This command configures 802 1p priority queue mapping Format Qos cos priority 0 7 queue 1 4 Mode Global Config 10 4 15 3 qos dscp This command specifies dscp value to queue mapping Format Qos dscp 0 63 queue 1 4 Mode Global Config 10 4 15 4 qos port based This command configures port based priority mapping Format qos port based p...

Page 125: ...gmp query resinterval 0 200 Mode Global Config 7 set igmp robustness This command specifies robustness variable Format set igmp robustness 1 20 Mode Global Config 8 set igmp router port This command specifies igmp router port Format set igmp router port ports port list Mode Global Config e g Switch config set igmp router port ports 1 10 10 4 16 2 set igmp querier This command configures igmp queri...

Page 126: ...ity add community name group group name mgmt ip ip addr Mode Global Config 2 snmp community delete This command deletes a community Format snmp community delete community name Mode Global Config 10 4 17 5 snmp trapstation 1 snmp trapstation add Create a snmp trap station snmp trapstation add ip addr community community name type bootup Send trap when system reboot Format snmp trapstation add ip ad...

Page 127: ...e Global Config 10 4 18 3 sntp server 1 sntp server enable This command enables sntp server Format sntp server enable Mode Global Config 2 sntp server ipaddr This command sets sntp server IP address Format sntp server ipaddr IP addr Mode Global Config 3 sntp server polling This command sets sntp server polling time interval Format sntp serve polling 0 9 Mode Global Config 10 4 18 4 sntp timezone T...

Page 128: ...ps 1 40 Mode Global Config 10 4 110 6 spanning tree port 1 spanning tree port all This command specifies RSTP capability for all ports Format spanning tree port all enable disable Mode Global Config 2 spanning tree port cost This command configures RSTP port path cost Format spanning tree port cost 0 200000000 Mode Global Config 3 spanning tree port priority 37 This command configures RSTP port pr...

Page 129: ...ce Format Spanning Tree mst vlan MST ID vlan list delete Mode Global Config 38 3 spanning tree mst bridgepri This command configures bridge priority for a MST instance Format spanning tree mst bridgepri MST ID priority Mode Global Config 4 spanning tree mst cost This command configures port path cost in a MST instance Format spanning tree mst cost MST ID path cost ports port list Mode Global Confi...

Page 130: ...ITCH 10 4 23 1 access list name WORD add This command creates a new access list Format access list name WORD add priority 1 65535 Mode Global Config 10 4 23 2 access list name WORD action 1 access list name WORD action deny This command denies an ACL entry Format access list name WORD action deny Mode Global Config 2 access list name WORD action permit This command permits an ACL entry and queue 1...

Page 131: ...the ACL entry Format access list name WORD deletes Mode Global Config 10 4 23 5 access list name WORD enable disable This command enables disables the ACL entry Format access list name WORD enable disable Mode Global Config 10 4 23 6 access list name WORD set 1 access list name WORD set priority This command specifies ACL entry priority Format access list name WORD set priority 0 65535 Mode Global...

Page 132: ... Mode Global Config 10 4 24 arp Commands Note This commands only support on GG24 GIGABIT PORTS WITH 2 SHARED MINI GBIC SLOTS G44 GIGABIT PORTS WITH 4 SHARED MINI GBIC SLOTS L2 MANAGEMENT SWITCH 10 4 24 1 arp dynamic 1 arp dynamic enables and disables This command enables and disables dynamic arp functions Format arp dynamic enable disable Mode Global Config 2 arp dynamic aging time This command se...

Page 133: ...ack prevention Format dos ports smurf enable disable Mode Global Config 43 2 dos ports ping flooding This command enables and disables ping flooding type attack prevention Format dos ports ping flooding enable disable Mode Global Config 3 dos ports SYNACK flooding This command enables and disables SYNACK flooding type attack prevention Set rate is 64 kbps or 128kbps for port lists 1 3 5 7 10 11 Fo...

Page 134: ...0 5 6 2 configure notifications Enable disable notification form the agent Format lldp notification enable disable Mode Interface Config 10 5 6 3 Configure med notifications Configure wether or not MED notifications from the agent are enabled Enable disable med notification form the agent Format lldp med notification enable disable Mode Interface Config e g Switch Interface 1 lldp med notification...

Page 135: ...at port security lock mode none static Mode Interface Config port security lock mode dynamic This command enable limited dynamic lock mode and specify maximin learning entries for limited dynamic lock mode the max entries value 0 25 Format port security lock mode dynamic max entries 24 Mode Interface Config 10 5 12 qos command This command specifies port based qos Format qos port based status enab...

Page 136: ...5 16 set igmp router port command This command specifies igmp router port Format set igmp router port ebable disable Mode Interface Config 10 5 17 spanning tree command 10 5 17 1 spanning tree cost This command configure RSTP port path cost path cost value 0 200000000 Format spanning tree cost pathcost Mode Interface Config 10 5 17 2 spanning tree edge This command configure edge property Format s...

Page 137: ...g 10 5 18 VLAN command 10 5 18 1 vlan participation This command join or leave a vlan 1 vlan participation exclude This command leave a vlan Format vlan participation exclude vlan id Mode Interface Config 2 vlan participation This command join a vlan with untagged tagged mode Format vlan participation untagged tagged vlan id Mode Interface Config 10 5 18 2 vlan protected This command configurespor...

Page 138: ...er 2 6 Connecting to the Network for more information The GBIC Link LED is not lit Check the GBIC connector Make sure the cables are inserted correctly with the Transmit Tx connector on one side of the link connected to the Receive Rx connector on the other side of the link Cannot establish communication to another device switch router workstation etc Make sure the Link LED for the port in use is ...

Page 139: ...ric non blocking with on board frame buyers Management Specifications IEEE 802 1x Standard Port Access Control IEEE 802 1D Spanning Tree Protocol IEEE 802 1 W Rapid Spanning Tree Protocol IEEE 802 1 S Multiple Spanning Tree Protocol IEEE 802 1Q Tag VLAN Up to 64 Port based QoS options High Normal Port Trunking Manual as per IEEE802 3ad Link Aggregation Port Mirroring System Log RFC 1157 SNMP v1 v2...

Page 140: ...age temperature 20 to 70 C 4 to 158 F Relative Humidity 10 to 90 non condensing Storage humidity 95 maximum non condensing System Requirements Category 5 6 Network cable Single Mode Multimode fiber Window IE browser Netscape Mozzila MacOS Safari Modules Asante SFP1000SX Asante SFP1000LX Asante SFP1000LZ Security 802 11x RADIUS Authentication Management Access Control List Package Content 48 port 4...

Page 141: ...t should never be placed near or over a radiator or heat register This product should not be placed in a built in installation unless proper ventilation is provided 8 This product should be operated from the type of power source indicated on the marking label If you are not sure of the type of power available consult your dealer or local power company 9 This product is equipped with a three wire g...

Page 142: ...imited to cables brackets and fasteners included with the covered product nor to any discontinued product i e product purchased more than thirty days after Asante has removed such product from its price list or discontinued shipments of such product This warranty is exclusive and is limited to the original end user purchaser only Proof of purchase is required This warranty shall not apply to secon...

Page 143: ...uing 58 Quality of Service 57 rate limit 60 SNMP Configuration GUI 89 traffic shaping interface 60 VLAN 71 weighted fair queuing 57 Connecting console 13 20 network 17 PC 22 power 17 Console baud rate 21 interface 13 Default IP address 64 password 13 port priority 45 SNMP trap authentication 89 SNMP write community 89 spanning tree 74 75 Description 11 front panel 11 Features 7 GUI front panel scr...

Page 144: ...onfiguring 58 examples 59 monitoring 59 Quality of Service configuration 57 priority queuing 58 traffic shaping 60 weighted fair queuing 57 Rapid Spanning Tree edge port 43 link type 43 port path cost 44 port priority 44 Rate Limit configuring 60 examples 60 Requirements airflow 15 environment 15 power 15 tools 15 Safety guidelines 14 Security SNMPv3 89 SNMP traps 89 Spanning Tree default 45 Traff...

Page 145: ...145 Asante IntraCore IC3624 48 User s Manual bandwidth 57 configuration 57 monitoring 57 58 59 60 ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands