background image

Configuring Security

6-7

Ring Security Configuration

duplication exist between the lists, the duplicate entries 
will be removed from the Disallowed List. There will not 
be any alert if this occurs.

Selecting this button closes the Security Config window. 
Any sets you have made in the window before closing 
will have taken effect.

Configuring Security

Before configuring security, be sure that your network meets the requirements 
and conditions specified in your TRMMIM’s hardware Installation and User’s 
Guide

.

Your TRMMIM must also be properly configured to send traps to the appropriate 
network management station; this will ensure that traps generated by ring 
security arrive at the appropriate destination. Refer to the SPMA Tools Guide for 
information on using the Trap Table tool.

Building the Allowed List Automatically

When security is set to Warn mode, any station which inserts onto the ring is 
automatically added to the Allowed List. You can use this feature to build the 
Allowed List automatically, as follows:

1.

Click to select the Enable Security-Warn option. The TRMMIM will enable 
ring security and automatically generate the Allowed List, adding to it each 
station which is currently inserted on the ring. If your network management 
station address is entered into the TRMMIM’s trap table, you will receive a trap 
informing you of each device which is added to the list.

2.

The Allowed Station List display will update to show you new entries.

Adding New Stations to the Allowed or Disallowed Stations List

To add an individual station to the Allowed or Disallowed Stations List:

1.

Click on 

. The Station Addition window (

Figure 6-3

) will appear.

NOTE

All entries to the Allowed and Disallowed Lists are verified for proper MAC format and 
list duplication. Should you add an entry which already exists in the Allowed or 
Disallowed List to the other list, the address will be removed from the original list and 
added to the new one. 

Summary of Contents for SPECTRUM TRMMIM

Page 1: ...Portable Management Application for the TRMMIM User s Guide The Complete Networking Solution ...

Page 2: ......

Page 3: ...nties to the effect that the Licensed Software is virus free Copyright 1996 by Cabletron Systems Inc All rights reserved Printed in the United States of America Order Number 9031130 E6 October 1996 Cabletron Systems Inc 35 Industrial Way P O Box 5005 Rochester NH 03867 0505 SPECTRUM MiniMMAC FNB Multi Media Access Center and DNI are registered trademarks and Portable Management Application IRM IRM...

Page 4: ...inoperative 3 Reproduced for safekeeping archives or backup purposes 4 Modified adapted or combined with other computer software provided that the modified combined or adapted portions of the derivative software incorporating restricted computer software are made subject to the same restricted rights 5 Disclosed to and reproduced for use by support service contractors in accordance with subparagra...

Page 5: ...g Front Panel Info 2 13 Checking Module Status 2 14 Checking Port Status 2 16 Checking Station Status 2 17 Configuring Station Name Location or Priority 2 20 Checking Ring Port Status 2 20 Checking Statistics 2 22 Managing the Hub 2 24 Managing the Hub at the Device Level 2 24 Find MAC Address 2 24 Setting the Polling Intervals 2 25 Managing the Hub at the Module Level 2 28 Controlling Token Ring ...

Page 6: ...3 20 Viewing Beacon History 3 21 Beacon Configuration 3 23 Using the Find Options 3 25 Searching for a Station s Nearest Active Upstream or Downstream Neighbor 3 26 Searching by Station Name MAC Address Board Port or Drop 3 26 Searching for the Active Monitor Ring Management Station or Last Beaconing Station 3 27 Finding the Active Monitor on the Network 3 27 Finding the Management Station on the ...

Page 7: ...the Security Configuration Window 6 2 Configuring Security 6 7 Building the Allowed List Automatically 6 7 Adding New Stations to the Allowed or Disallowed Stations List 6 7 Deleting Stations from the Allowed or Disallowed Lists 6 8 Moving a Station Between the Allowed and Disallowed Stations List 6 9 Clearing All Entries in the Allowed or Disallowed List 6 9 Changing the Ring Security Mode 6 10 A...

Page 8: ...Contents vi ...

Page 9: ... of a number of different applications each of which provides a portion of the overall management functionality Each of these applications can be accessed from the icon menu if you are using a management platform from the Hub View which is a graphical display of the TRMMIM managed hub and from the command line if you are running in stand alone mode The TRMMIM User s Guide describes how to use many...

Page 10: ...ation set station drops or station names view summary information about station configuration and ring performance view ring history information and launch other SPMA Token Ring applications Chapter 4 Alarm Configuration describes how to set thresholds and enable or disable alarms at the ring and station levels Chapter 5 Statistics describes how to use the statistics windows to view ring and stati...

Page 11: ...atility presents two documentation problems first there is no standard terminology and second the appearance of the windows will differ based on the graphical interface in use For the sake of consistency the following conventions will be followed throughout this and other SPMA guides Screen Displays SPMA runs under a variety of different operating systems and graphical user interfaces To maintain ...

Page 12: ... scroll bars will appear as necessary so that you can scroll to view all the information that is available Figure 1 1 Window Conventions Some windows will also contain a button selecting this button launches a History window Figure 1 2 which lists all footer messages that have been displayed since the window was first invoked This window can help you keep track of management actions you have taken...

Page 13: ...buttons Procedures within the SPMA document set refer to these buttons as follows Figure 1 3 Mouse Buttons If you re using a two button mouse don t worry SPMA doesn t make use of mouse button 2 Just click the left button for button 1 and the right mouse button when instructed to use mouse button 3 Button 1 Button 2 Button 3 ...

Page 14: ...access to menus will operate according to SPMA convention as documented Getting Help If you need additional support related to SPMA or if you have any questions comments or suggestions related to this manual contact Cabletron Systems Technical Support Before calling please have the following information ready The product name and part number The version number of the program that you need help wit...

Page 15: ... products visit our World Wide Web site http www cabletron com TRMMIM Firmware SPMA for the TRMMIM has been tested against firmware versions 3 00 10 and 3 01 01 if you have an earlier version of firmware and experience problems running SPMA contact Cabletron Systems Technical Support for upgrade information ...

Page 16: ...Introduction to SPMA for the TRMMIM 1 8 TRMMIM Firmware ...

Page 17: ... only allows you to control boards and ports in the domain of a single management module If you have another management module installed in the chassis to the left of the monitored TRMMIM boards that are under the domain of that module i e Media Interface Modules or MIMs to its left will still display in the Hub View of the monitored TRMMIM however only boards within the domain of the monitored TR...

Page 18: ...isplay the Device Module and Port menus NOTES The spmarun script invoked first in the above command temporarily sets the environment variables SPMA needs to operate be sure to use this command any time you launch an application from the command line This script is automatically invoked when you launch an application from the icon menu or from within the Hub View If you wish to configure your Token...

Page 19: ...ation The following Front Panel information appears to the right of the module display in the Hub View Contact Status is a color code that shows the status of the connection between SPMA and the device Green indicates a valid connection Blue means that SPMAis trying to reach the device but doesn t know yet if the connection will be successful Red means that SPMA is unable to contact or has lost co...

Page 20: ... device IP Address The device s Internet Protocol IP address You can t change the TRMMIM s IP address from SPMA MAC Address The device s factory set hardware address The MAC address cannot be changed from SPMA Clicking on the Device button displays the Device menu Figure 2 2 NOTE If the TRMMIM you are modeling is installed in an MMAC 3 chassis its window titles will be truncated If you have assign...

Page 21: ...ted into the TRMMIM managed ring network The Ring Map also provides an Error Table a Ring History Information window a Management Station Configuration window and powerful sort and find capabilities Refer to the Ring Map chapter for complete information on this application Launch the Alarm Configuration application This application is described thoroughly in the Alarm Configuration chapter Launch ...

Page 22: ...n the illustrations on the following pages to access Module and Port menus and functions as well as to configure the multiplexers which connect the module to the MMAC chassis Flexible Network Bus FNB NOTE Graphing capabilities are provided by an application that is included in HP Network Node Manager and IBM NetView therefore graphs are only available when SPMA is run in conjunction with one of th...

Page 23: ...le Type Displays the type code for the module Click mouse button 1 to open the Module Status window Click mouse button 3 to display the Module menu Port Index Displays the interface index of the port on the MIM Click mouse button 3 on the port to display the Station Port menu Ring Ports Ring In Ring Out Click mouse button 1 on the status area to enable or disable the ring port Click mouse button 3...

Page 24: ...e only two status conditions and colors Green indicates that the port is enabled This does not indicate whether or not there is any cable connected to the port or whether communication has been established with the device at the other end of an attached cable Blue indicates the port has been disabled or bypassed through management Port Display Form You can change the type of information displayed ...

Page 25: ...ing errors Non isolating errors Line errors Burst errors AC errors Abort Sequence errors Internal errors Lost Frame errors Rx Congestion errors Frame Copied errors Token errors Frequency errors For error type descriptions see Checking Statistics page 2 22 Port Type Provides the following administrative information about the port Admin Link Status indicates the Administrative and Link connection st...

Page 26: ...ptic or STP Shielded Twisted Pair On a module without selectable ring ports the ring ports will display UNS Ring ports that do not have media selection will display Station ports will display Active Ports displays the following information about statistics for the port Yes if a linked green with INS Admin Link status port on the TRMMIM managed ring has recorded statistics since the statistical cou...

Page 27: ...esent for non port switching modules in the chassis For information on manipulating the FNB Status Control symbols see Controlling Token Ring FNB Multiplexer Connections on page 2 28 To change the FNB display for all boards in the Hub View 1 Click on to display the Device menu 2 Drag down to FNB Display then right to select FNB 1 2 3 or 4 Monitoring Hub Performance The information displayed in the...

Page 28: ...rol boards in the domain of a single management module If you have another management module installed in the chassis to the left of the monitored TRMMIM boards that are under the domain of that module i e Media Interface Modules or MIMs to its left will still display in the Hub View of the monitored TRMMIM however only boards within the domain of the monitored TRMMIM can be correctly controlled A...

Page 29: ...ormation you enter in the Name and Location boxes is set at the TRMMIM and appears on the Hub View front panel NOTE Graphing capabilities are provided by an application that is included in HP Network Node Manager and IBM NetView therefore graphs are only available when SPMA is run in conjunction with one of these network management platforms If you are running SPMA in a stand alone mode or in conj...

Page 30: ...d type the new values 2 Press Return on the keyboard to save each change before moving on to another field Each change will appear on the front panel as soon as Return is pressed Total Rings Indicates the number of ring networks resident on the TRMMIM controlled MMAC chassis Total Ports Indicates the number of ring and station ports currently detected on the TRMMIM controlled MMAC chassis Checking...

Page 31: ...e Indicates the index number of the module in the MMAC chassis Module numbers are counted from right to left in the chassis with 1 being the rightmost slot Speed Fault Indicates whether a ring speed fault has been detected on the selected module Possible returned values are Fault Detected or No Fault Detected Note that if your module hardware does not support this feature this field will be grayed...

Page 32: ... Port Status or Port Index box to display the Station Port menu 2 Drag down to Port Status and release The Port Status window Figure 2 8 will appear Figure 2 8 The Port Status Window Port Name This text field can help identify the attached station the information entered here is not displayed anywhere else in the Hub View Module Port Indicates the module board and port index of the selected interf...

Page 33: ...ck mouse button 1 on the Enable or Disable option as desired Insertion traps will either be activated or deactivated accordingly Checking Station Status You can open a Station Status window for any station inserted into the ring A Station Status window provides information about the station inserted into a station port interface on the MMAC hub Note that if there is no station attached to the moni...

Page 34: ...ywhere else in the Hub View Module Port Indicates the module board and port index of the selected interface MAC Address The physical hardware address of the station connected to the interface in MAC Ethernet or Canonical Token Ring format Vendor This field displays the name of the attached device s manufacturer if known as determined by the first three bytes of the MAC address Upstream Neighbor Do...

Page 35: ...pate in neighbor notification If a port in this condition is detected the TRMMIM will physically shut down the port to prevent ring problems Port Mapping is enabled by default However you may want to attach a device to the MMAC such as a ring analyzer that does not participate in the normal operation of token ring protocol In this case you will want to disable Port Mapping for the port to which th...

Page 36: ...king Ring Port Status You can check the status for any ring port on a manageable module inserted into the MMAC hub To open the Ring Port Status window 1 Click mouse button 3 in the ring Port Status box to display the Ring Port menu 2 Drag down to Status and release The Ring Port Status window Figure 2 10 will appear Figure 2 10 The Ring Port Status Window Port Name This text field can help identif...

Page 37: ...d will read noAutowrap if it supports autowrap but not a selectable media type it will return autowrap and if it has a selectable media as well as autowrap it will return selectable Media Type The media type can be one of the following STP shielded twisted pair Fiber fiber optic If the ring port supports this feature you can use this field to change the media type by selecting the STP or Fiber opt...

Page 38: ...button 3 in the appropriate area refer to Figure 2 4 on page 2 7 Refer to the Statistics chapter for information on Device level statistics 2 Drag down to Statistics and release Figure 2 11 TRMMIM Statistics Window Station Level The following fields detail statistics available at the Station level All statistics counts are read from the station at the time the window is opened and reflect statisti...

Page 39: ...1 over five half bit times AC The number of frames containing errors in the A or C bits detected by the selected station port Abort The number of times the selected station has transmitted abort sequences during transmission Internal The number of recoverable internal errors detected by the selected port indicating that its attached station is in marginal operating condition Lost Frames The number...

Page 40: ...roperly Hub management functions at the device level include finding a MAC address and setting the polling intervals to contact the device At the module level you can configure the module s FNB left and right connections set board speed and operating mode and enable all ports on the module At the station or ring port levels you can remove a station from the ring convert a station port to a ring ou...

Page 41: ...lds and status indicators are updated in your hub view window contact status icon device uptime time date device name device location IP Address MAC Address port status indicators and statistics windows You can set different polling intervals for each of the five polling groupings This enables you to reduce traffic on your network by setting a high polling interval for the information that usually...

Page 42: ...s as the default values that SPMA will use for each Token Ring Hub Module you are managing use mouse button 1 to select the Save as Defaults option Note that these default polling intervals will be applied to all intelligent Token Ring modules that you are monitoring through SPMA 6 If you wish to replace existing values with the current set of default values use mouse button 1 to select the Use De...

Page 43: ...ts option is selected These update intervals will replace your current default values To save your changes as defaults for all your Token Ring Management Modules 1 Change the Polling Intervals as necessary follow the steps in the section above 2 Select the Save as Defaults option 3 Click mouse button 1 on to save the changes you have made to the window The polling intervals you have entered will n...

Page 44: ...cted to the FNB The following diagram shows how you view the module display in the Hub View to check the FNB left and right connections as well as the FNB Bypass state of the hub modules Figure 2 14 Bypass State and FNB Connection Symbols There are two methods that you can use to control the FNB left and right connections for Token Ring MIMs you can click the mouse on the FNB symbols in the Hub Vi...

Page 45: ...rts Ring ports can be separately bypassed using the RP Bypass option in the Module FNB Configuration window See Using the Module FNB Configuration Window for details Manipulating the FNB in the Hub View To change a module s FNB left and right connections from within the Hub View 1 Click mouse button 1 on the appropriate FNB connection symbol to toggle between disabled and enabled To change a modul...

Page 46: ...he FNB left connection status for each corresponding FNB in the list Possible values for this field are Attached or Wrap Right Connect This field lists the FNB right connection status for each corresponding FNB in the list Possible values for this field are Attached or Wrap Bypass This field lists the FNB Bypass state for each corresponding FNB in the list Possible values for this field are Enable...

Page 47: ...o change a module s Ring Port Bypass state using the Module FNB Configuration window 1 Click mouse button 1 on the FNB Interface in the list The list entry will be highlighted to show that it is selected 2 Click mouse button 1 on the RP Bypass Enable or Disable option 3 Click on The desired Ring Port Bypass operation will be performed Clearing the Module FNB Configuration Window Selections Clickin...

Page 48: ...g managed Management MGT Management mode means that management takes precedence over the default hardware settings on the board If you toggle back to Auto mode the hardware default settings will be restored and any administrative actions you have taken to alter those settings will be undone To change a module s management mode 1 Click mouse button 1 on the Module Management Mode box at the bottom ...

Page 49: ...in the Port Index or Port Status box to display the Station Port menu 2 Drag down to Enable Ring Out and release to convert the station port into a ring out port The converted port will assume full functionality of a ring out port and will reflect as such in the Hub View window The port status will now display as that of a ring out port and the port menu will now assume ring port menu properties T...

Page 50: ...Remove Station option on the Station Port menu allows you to remove a station from the ring so that it can perform a loopback test When you select this option the TRMMIM sends a Remove MAC Frame to the selected station Upon receiving this frame the station will perform a loopback test to verify that its MAC adapter is functioning correctly If the station fails the loopback test it will stay off th...

Page 51: ...ur ring You can select the errors either as a sum total or select an individual soft error type The Management Station Configuration window provides information on the ring management device in its role as a station on the ring The window allows you to issue commands allow or disallow active monitor contention and establish the time interval at which error reports are sent to the ring management s...

Page 52: ...he environment variables SPMA needs to operate be sure to use this command any time you launch an application from the command line This script is automatically invoked when you launch an application from the icon menu or from within the Hub View If you wish to configure a station while in the Ring Map window be sure to use a community name with at least Read Write access If you only wish to view ...

Page 53: ...e monitored TRMMIM Networks are identified by the following two fields No The index number assigned to the ring Ring Name This network name assigned to each ring managed by the TRMMIM The default network name is Network X where X represents the index number To view a ring map 1 Click to select the ring you wish to monitor the entry will be highlighted to show it is selected 2 Click on The Ring Map...

Page 54: ...he selecting window without exiting the application The Ring Map window displays all stations on the currently selected ring counter clockwise in downstream neighbor order beginning with the monitored device You may need to re size the window or scroll through it to view each station on the selected network The current active monitor will display in green text the current ring management station w...

Page 55: ...ons are Unknown Indicates the state of the ring cannot be detected by the management station Closed Indicates that the management station is not inserted into the ring and therefore cannot determine the ring state Normal Token Indicates the ring is running with no problems and Protocols tokens are being detected by the management station Purge Indicates that the active monitor has issued a ring pu...

Page 56: ...erformance information for an individual station To open a Quick Info Popup window for a station 1 Double click mouse button 1 on the selected station s label or 1 Click mouse button 3 on the selected station s label to access the Station Menu drag down to Quick Info and release 2 The Quick Info Popup window Figure 3 3 will appear NOTE Remember in the Quick Info Popup window statistics are measure...

Page 57: ...me of the station if one has been assigned if none has been assigned this field will remain blank See Setting a Station Name page 3 8 Board and Port If the station is resident in the same hub as the TRMMIM its board and port location will display here If the station is physically remote from the monitored hub the board and port will display 0 Drop The drop location of the station if one has been a...

Page 58: ...ort Seq Internal Lost Frames Congestion Frame Copied Token Frequency See Viewing the Error Table page 3 14 for detailed definitions of these statistics Setting a Station Name Using the Ring Map window you can administratively assign a name to any station on the monitored ring network To do so 1 Click mouse button 3 on any station label in the map 2 Drag down to Set Name and release The Set Station...

Page 59: ...onfiguration window provides information related to the ring s management device in its role as a station on the ring from this window you can issue certain commands allow or disallow active monitor contention and establish the interval at which error reports are sent to the management station To open the Management Station Configuration window 1 In the Ring Map itself look for the station whose l...

Page 60: ...vice SW Reset The device will be reset through the software note that this does not reset statistical counters HW Reset A hardware reset will occur on the device which is the equivalent of physically resetting the device This reinitializes the module and all counters are reset Open Forces the management station to open on to the ring This causes the station to participate in the ring poll process ...

Page 61: ...out when attempting a ring purge after becoming the active monitor that is the management station was unable to receive its own ring purge MAC frames Beaconing The management station received a beacon MAC frame after physically inserting into the ring Duplicate MAC Another station on the ring has the same MAC address Address as the management station Parameter Requested The management station has ...

Page 62: ... station on the ring 128 Counter Overflow One of the management station s error counters has incremented from 254 to 255 256 Remove Received The management station has received a remove ring station MAC frame request and has removed itself from the ring 1024 Auto Removal Error The management station has failed the lobe wrap test resulting from the beacon auto removal process and has removed itself...

Page 63: ...length of the polling interval or units measured time in seconds For example if you measured 3200 frames over a 10 second interval the frame rate would be 320 sec Cumulative Total units measured since the cumulative option was selected For example if you measured 390 frames during the first interval since cumulative was selected 270 in the second and 500 in the third the cumulative total would be ...

Page 64: ... cumulative statistics and begin re calculating them bring up the Set Calculation Mode window click on and then on Viewing the Error Table The Error Table provides a ranking of ring stations according to the total number of errors or the total of an individual error type detected by each station Stations are listed hierarchically from greatest to least each station is identified by MAC address as ...

Page 65: ...e degradation of ring performance and the ring may have to be purged the Active Monitor must perform ring recovery operations or Active Monitor contention may have to be initiated In either of these situations the data flow will be halted while normal operations are being restored on the ring NOTE The statistics for each category are measured at the end of the specified polling interval and are di...

Page 66: ...olation between the starting and ending delimiters of data a frame check sequence error or a code violation in a token These can be caused by power surges on the ring they are counted but initiate no other recovery procedures Burst Errors The count of burst errors detected by the associated station A burst error occurs when five half bits of Manchester encoded data are received by a station withou...

Page 67: ...e during transmission These occur when a station begins to queue data onto a token and subsequently detects that the token is corrupted because it does not have an ending delimiter after its access control field The station reports the error but does not release the corrupt token back onto the network This will cause the Active Monitor to purge the ring and issue a new token A failing network adap...

Page 68: ...a frame was lost or a token or frame has recirculated the ring Note that this error can only be reported by a station that is or was previously the active monitor for the ring Frequency Errors The number of times the associated station detected that the incoming signal s frequency differed from the expected frequency by more than allowed by the IEEE 802 5 standard 6 Frequency is measured by an on ...

Page 69: ...tation does not have an administratively assigned name none will display in the label MAC Address This is the default label it displays each station s six byte MAC address in Canonical format reverse bit order Vendor MAC Address This label displays the vendor of the monitored station as determined by the first three bytes of its MAC address the remainder of the MAC address is also displayed To cha...

Page 70: ... 1 Click on at the top of the Ring Map window 2 Drag down to Set Polling Interval and release The Set Polling Interval window Figure 3 10 will appear Figure 3 10 Set Polling Interval Window 3 In the Enter Interval field type in the number of seconds you desire between polls from your management station to the monitored hub The poll interval you enter must be at least 10 seconds the default is 20 s...

Page 71: ...ow The Beacon History window contains the following information Active Monitor Changes Displays the number of times the ring s active monitor has changed since the ring was first initialized or the device was last reset Ring Purges Displays the number of times the active monitor has purged the ring This includes the purge at the end of the active monitor selection process Note that this count is n...

Page 72: ...they will be changed to streamingSignalNotClaimToken bit streaming beacons Streaming Signal This beacon is transmitted by a station when a Not Claim Token monitor contention time out occurs in its adapter while it is in monitor contention transmit mode and it did not receive any claim token MAC frames during the monitor contention period Streaming Signal This beacon is transmitted by a station whe...

Page 73: ...each module to isolate the one with the fault as evidenced by ring recovery on bypass When the module with the fault is identified the module is reinserted and that module s ports are turned off one by one until the ring recovers again The last port turned off is considered to be the failing port Once the failing port is identified all ports which were previously turned off are turned back on For ...

Page 74: ... the left will disable this feature Other allowable values are 1 to 100 5 In the Ring Port Retry Delay field click and drag the scroll bar to select the interval in seconds between ring port retries You should select a value which is a multiple of 7 values which are not divisible by 7 will be rounded down to the nearest appropriate value 6 In the Station Port Enable Retry field click and drag the ...

Page 75: ...e you can also identify the following stations of interest Active Monitor on the ring The Ring Management Station Last Beaconing Station on the ring And you can identify a selected station s NAUN Nearest Active Upstream Neighbor NADN Nearest Active Downstream Neighbor Finally to keep track of station performance you can identify stations on your network in ascending By Lowest Highest or descending...

Page 76: ...map display may shift so that the appropriate station appears in the viewing area although the upstream and downstream order will not change Searching by Station Name MAC Address Board Port or Drop To search for a station by its Drop Board Port Name or MAC Address 1 Click on and drag down to select one of the following a Drop to find a station with a certain drop number b Board Port to find a stat...

Page 77: ...r the ring network s active monitor and its ring management station as well as the last station reporting a hardware failure Finding the Active Monitor on the Network The Active Monitor is the station responsible for setting timing functions for the ring activating hardware to remove an improperly circulating frame or token purging the ring to restore it to normal condition and starting the ring p...

Page 78: ...tation when it detects a hardware failure on the network because its incoming signal has been lost Note that the station transmitting the beacon may not be the actual station experiencing a hardware failure since the fault could lie with the NIC adapter of its upstream neighbor with its own adapter or with the cabling between the two stations The Find Last Beacon feature lets you determine which s...

Page 79: ... to rank stations in highest or lowest order When Rate is the selected mode Find by Highest or Lowest detects the station with the greatest or smallest rate of frames processed or errors detected within a polling interval The following formula is used to find the station with the highest or lowest rate of frames or errors Frames or Errors measured Time in seconds For example if one station detects...

Page 80: ...parameter Accessing Other SPMA Applications The Program menu also provides access other SPMA applications that are specific to token ring devices To launch another application 1 Click on 2 Drag down to select one of the following the selected application will initialize in a new window Alarm Configuration see Chapter 4 Statistics see Chapter 5 Security see Chapter 6 Note that the new application l...

Page 81: ...you can set alarm thresholds for each individual station s count of line internal burst AC and congestion errors To access the main alarm window from the icon 1 Click on the appropriate device icon to display the Icon menu 2 Drag down to Alarm Configuration and release NOTE SPMA does not accept the trap messages that task is left to your network management system See the appropriate network manage...

Page 82: ...mand temporarily sets the environment variables SPMA needs to operate be sure to use this command any time you launch an application from the command line This script is automatically invoked when you launch an application from the icon menu or from within the Hub View If you wish to change any Alarm Configuration settings be sure to use a community name with at least Read Write access If you only...

Page 83: ...RMMIM will generate an alarm if 70 ring purges are detected on the ring as a whole within a 10 second time period NOTE Alarm conditions which occur over the span of two timebase intervals will not be detected even if the threshold is crossed within a period of time that is less than or equal to the defined timebase interval For example if you set your timebase to 10 seconds and an alarm threshold ...

Page 84: ...s the active monitor either does not see a token circulating on the ring before its TVX Timer Valid Transmission timer expires e g a Lost Frame error has occurred or sees a recirculating frame or token Each time a token error is noted the active monitor purges the ring and issues a new token Claim Token The number of times a claim token has been released by a Errors station on the ring A claim tok...

Page 85: ...hat ring level alarms will count all occurrences of the selected variable on the ring as a whole 4 Enable or Disable the selected alarm type by clicking mouse button 1 in the appropriate Status option 5 Click mouse button 1 on to save your changes If you wish to configure more than one alarm type be sure to click on before selecting another alarm type or the changes you made to the first alarm wil...

Page 86: ...variable s will be counted for comparison to the threshold values For example if the Burst Errors alarm is enabled the threshold is set at 10 and the timebase is set to 10 seconds the TRMMIM will generate an alarm if 10 burst errors are detected by the selected station s within a 10 second time period NOTE You need not close the Ring Alarms window before launching the Station Alarms window just mo...

Page 87: ...le chipset timers or counters Burst Errors A burst error occurs when five half bits of Manchester encoded data are received by a station without a phase change a signal transition from 0 to 1 or from 1 to 0 This error is normal when stations enter or leave the ring without phantom current however it can also indicate a problem with the receiver on the reporting node the transmitter on its NAUN or ...

Page 88: ...pace Although this may indicate a station which is performing poorly no ring recovery procedures are initiated Note that the count of congestion conditions reflects the number of times frames have been dropped not the number of frames dropped The Station List box lists the stations detected on the selected ring the module and port through which they are connected the name of the station if one has...

Page 89: ... the default setting you can select any stations in the list to de select any highlighted station click on it again If the selection All Stations On Module is displayed in the Set Alarms For button you can select only one station at a time alarm parameters will be set for all stations on the same module as the selected station If the selection All Stations on Ring is displayed in the Set Alarms Fo...

Page 90: ...Alarm Configuration 4 10 Setting and Viewing Station Alarms ...

Page 91: ...he appropriate Token Ring device icon to display the Icon menu 2 Drag down to Statistics and release from the Hub View 1 In the Hub View click on the Device button to display the Device menu 2 Drag down to Statistics and release NOTE Graphing capabilities are provided by an application that is included in HP Network Node Manager and IBM NetView therefore graphs are only available when SPMA is run ...

Page 92: ...List From the Ring Stn Statistics window select the network from which you would like to gather statistics and click mouse button 1 on The Ring and Station Statistics window Figure 5 2 will appear NOTES The spmarun script invoked first in the above command temporarily sets the environment variables SPMA needs to operate be sure to use this command any time you launch an application from the comman...

Page 93: ...displayed in Token Ring format Module and Port Provides the station s location in the MMAC chassis by module and port number If module and port equal 0 the station is not physically connected to the monitored device e g it is connected via a ring in or ring out port Vendor Displays the name of the station s manufacturer Stn Name Displays the name assigned to the station Upstream Addr Displays the ...

Page 94: ...list by clicking mouse button 1 on located at the bottom of the window Using the Refresh button will display the current configuration of your ring Monitoring Ring and Station Statistics Ring and Station Statistics can be viewed in pie chart graph or meter form The ring statistics will reflect the activity of the entire ring while the station statistics will reflect only the station that is highli...

Page 95: ...t one of the following menu selections General Isolating Errors or Non Isolating Errors 3 Release the mouse button while highlighting your selection A pie chart similar to the one below will be displayed NOTE Graphing capabilities are provided by an application that is included in HP Network Node Manager and IBM NetView therefore graphs are only available when SPMA is run in conjunction with one o...

Page 96: ...e Station Graph Meter Choices window as appropriate will appear 2 Choose your variables by clicking mouse button 1 on the radio button next to the variable name Variables are grouped logically You can pick up to 25 variables at one time Either a single graph will be created containing all the variables you chose or each variable will form its own separate meter See the Ring and Station Variables s...

Page 97: ... similar to those displayed in Figure 5 4 will appear To create the ring graph in Figure 5 4 the following steps were taken 1 Click mouse button 1 on 2 Select Frames Kbytes SNA XNS TCP IP Banyan IPX Netbios Lan Net Manager and Other from the Ring Graph Meter Choices window 3 Click mouse button 1 on A graph similar to the one in Figure 5 4 will appear Ring Graph Note that the graph tool will only b...

Page 98: ...station General Errors Indicates the total number of errors counted on the ring or received by the station Frames Indicates the total number of frames received by the device from the ring or station KBytes Indicates the total number of kilobytes transmitted on the ring or from the station Protocols Protocols are only available for Ring Pie Charts and Meters Use the following variables to display t...

Page 99: ...is the equivalent to an Ethernet CRC error in both cause usually electronic noise along the ring medium or other cable problems and effect These errors are counted but initiate no other recovery procedures Burst Error A burst error occurs when five half bits of Manchester encoded data are received by a station without a phase change a signal transition from 0 to 1 or from 1 to 0 this typically ind...

Page 100: ...ss control field This indicates that the token is corrupted This error will cause the Active Monitor to detect a lost token since it was not released back onto the ring and to restore the ring through the ring purge process This error is also somewhat uncommon and will often indicate a failing adapter A common cause of abort sequences is overheating by the adapter in an overloaded system Note that...

Page 101: ...rator can pass a locally assigned address to the adapter so it is possible to unintentionally administer a duplicate address while a device is on a ring This error is more commonly caused by transparent bridging on a Token Ring network Token Errors A token error is counted when the active monitor either does not see a token circulating on the ring before its TVX Timer Valid Transmission timer expi...

Page 102: ...Statistics 5 12 Ring and Station Variables ...

Page 103: ... TRMMIM all MAC addresses will be retained and ring security resumes its previous state You first build the Allowed List either by enabling ring security with the Warn security mode activated as described in Configuring Security page 6 7 which will add the MAC addresses of all stations currently detected on the ring to the Allowed List or by individually entering the MAC addresses of each station ...

Page 104: ...urity and release from the Hub View 1 Click on to display the Device menu 2 Drag down to Security and release from the command line stand alone mode 1 From the appropriate directory type spmarun e5sec IP Address community name CAUTION The Token Ring Security application is intended to be used by a knowledgeable network administrator In the hands of an inexperienced user it could severely impact yo...

Page 105: ...on 1 on The Security Config window Figure 6 2 will appear NOTES The spmarun script invoked first in the above command temporarily sets the environment variables SPMA needs to operate be sure to use this command any time you launch an application from the command line This script is automatically invoked when you launch an application from the icon menu or from within the Hub View If you wish to ch...

Page 106: ...MIM itself Note that the current Active Monitor will be indicated by an asterisk next to its MAC address The Active Monitor cannot be removed from the Allowed List Allowed Count This field shows the number of stations currently on the Allowed List The allowed range is from 1 250 stations Disallowed Station List This list box displays the station MAC address entries in the Disallowed List database ...

Page 107: ... List is detected trying to enter the ring The two Security Mode options are Warn In Warn mode new stations can enter the ring but a Station Added trap will be sent to the network management station in response This trap message is only sent once and it includes the new station s MAC address Because new stations can still be added to the Allowed List in Warn Mode you can use this mode to allow new...

Page 108: ...ected in the Disallowed List this button will be grayed out Selecting this button will delete selected address es from the Allowed or Disallowed Station Lists This button is active in all security modes however if you have Enable Security Warn mode selected the station will automatically be re added to the Allowed List Note that the Allowed List will automatically refresh when a station is re adde...

Page 109: ...tion which inserts onto the ring is automatically added to the Allowed List You can use this feature to build the Allowed List automatically as follows 1 Click to select the Enable Security Warn option The TRMMIM will enable ring security and automatically generate the Allowed List adding to it each station which is currently inserted on the ring If your network management station address is enter...

Page 110: ...llowed Lists To remove an individual station or a range of stations from the Allowed Stations List 1 Make sure that the security mode is set to Warn and Remove to be sure a station is permanently removed from the Allowed List 2 Click mouse button 1 on an individual station in the appropriate list or click and drag to select a range of stations you want to delete A station will be highlighted to sh...

Page 111: ...Disallowed List as follows a Click to move the currently selected address es from the Disallowed List to the Allowed List If no items in the Disallowed List are selected this button will be grayed out b Click to move the currently selected address es from the Allowed List to the Disallowed List If no items in the Allowed List are selected nothing will occur Clearing All Entries in the Allowed or D...

Page 112: ...s can enter the ring but a Station Added trap will be sent to the network management station in response This trap message is only sent once and it includes the new station s MAC address Because new stations can still be added to the Allowed List in Warn Mode you can use this mode to allow new users to enter the ring while in Warn mode the TRMMIM automatically adds every inserted station to the Al...

Page 113: ...ndividual network component that contains all management information specific to that particular ring The TRMMIM MIB consists of six component groups each of which is described below Note however that at any given time the MIB component list displayed by your TRMMIM may not include some of the components described below since the TRMMIM has the ability to alter the components which make up its MIB...

Page 114: ...d for remote management Protocol Stack The Protocol Stack MIB component is the IP stack for in band communication which provides the TRMMIM with its IP functionality SNMP Agent The SNMP agent MIB component contains the objects that provide the TRMMIM with its IP functionality essentially those functions which allow the device to operate over a network including functions such as ping Telnet and TF...

Page 115: ...sing the read only read write or super user community name assigned to the Chassis MGR MIB component your SPMA application is granted the appropriate level of access read only read write or super user to all of that device s MIB information even if the other MIB components have different community names as will occur of necessity with the TRMMIM s multiple Network MIB components each of which must...

Page 116: ...ons that are made for network components and use those specific community names when trying to access information stored in those components The MIB component descriptions provided above will serve as a roadmap for determining where the information you re interested in is located you can use the SPMA Community Names tool described in Chapter 3 of the SPMA Tools Guide to determine whether your vers...

Page 117: ...s List Adding Stations 6 7 Clearing 6 9 Deleting Stations 6 8 Moving a station from 6 9 Auto 2 32 Automatic Beacon Recovery Process 2 19 Automatic Beacon Recovery Process ABRP 3 23 B Bad Param 3 11 Beacon Configuration 3 23 beacon configuration 3 23 beacon events 3 21 Beacon History 3 1 3 21 beacon history 3 21 beaconing 3 5 3 11 3 22 3 28 Burst 2 23 burst error 5 9 Burst Errors 3 16 burst errors ...

Page 118: ...3 1 3 14 Errors 2 23 errors 5 8 F fault region 2 19 Fault Start Time 2 21 Find Highest Lowest windows 3 30 find MAC address 2 24 Find options 3 25 find parameters 3 26 finding nearest neighbor 3 26 firmware version 1 7 3 19 FNB Bypass State 2 7 FNB connection symbols 2 28 FNB Display 2 10 FNB Multiplexer 2 28 FNB Status 2 7 frame check sequence error 3 16 Frame Copied Errors 3 18 Frame Copied Indi...

Page 119: ... 2 7 Motif 1 3 N NADN nearest active downstream neighbor 3 26 Name 2 13 NAUN nearest active upstream neighbor 3 26 Network 1 2 31 Network One Two A 2 No Open 3 11 Non Isolating Errors 3 17 5 10 non isolating errors 4 5 Normal Token Protocols 3 5 O opening the Device Status window 2 13 opening the Hub View 2 1 opening the Module Status window 2 14 opening the ring Port Status window 2 20 opening th...

Page 120: ...al Loss 3 11 Signal Loss Error 3 22 soft errors 3 15 Speed Fault 2 15 2 17 Speed Fault Location 2 15 spmarun 3 2 6 2 Station Added 6 5 6 10 station labels 3 18 Station Name 2 18 Station Priority 2 19 Station Status Window 2 18 station level alarms 4 5 Statistics 2 22 2 27 Statistics Calculation Mode 3 13 Streaming Signal Claim Token 3 22 Streaming Signal Not Claim Token 3 22 SW Reset 3 10 T Techni...

Reviews: