manualshive.com logo in svg

Fujitsu XG2000 Series, User Manual, Page: 55 / 315

Share
Download
Fujitsu XG2000 Series User Manual Download Page 55

XG2000 series User's Guide 

55/315 

 

All Rights Reserved, Copyright (C) PFU LIMITED 2009 

4.11 RADIUS/ authentication   

RADIUS (Remote Authentication Dial In User Service) or TACACS (Terminal Access Controller Access Control System) is 
used to manage authentication, authorization, accounting remotely. XG2000 supports RADIUS/ authentication using 
PAP (User Password) for login authentication. An administrator can unify the authentications of various devices, which support 
RADIUS/ clients functions through a RADIUS/ server. 
 

4.11.1 RADIUS Attributes   

It displays RADIUS attributes. 

Attribute 

Value of attribute 

Content 

User-Name 

1 

The username to authenticate 

User-Password 

2 

Password to authenticate 

NAS-IP-ADDRESS 

4 

IP address of the device (management LAN) 

Service Type 

6 

AuthenticateOnly(8) 

NAS-Identifier 

32 

Hostname of the device 

 

4.11.2  Attributes   

It displays  attributes. 

Category 

Content 

action TAC_PLUS_AUTHEN_LOGIN 

(0x01) 

priv_lvl 

TAC_PLUS_PRIV_LVL_MIN  (0x00) 

authen_type TAC_PLUS_AUTHEN_TYPE_PAP 

(0x02) 

service TAC_PLUS_AUTHEN_SVC_LOGIN 

(0x01) 

user_len 

Size of user field 

rem_addr_len 0 
data_len 

Size of data field 

user 

Username to authenticate 

data 

Password of the user to authenticate 

 

Summary of Contents for XG2000 Series

Page 1: ...P3N1 E202 01ENZ0 XG2000 series User s Guide ...

Page 2: ...ghput and low latency performance This guide describes the XG2000 series XG2000 XG2000R XG2000C XG2000CR functions installation procedures configuration operations and maintenance procedures and should be read and understood before you start using your XG2000 series March 2009 Linux is a registered trademark or trademark of Linus Torvalds in the United States and or other countries All Rights Rese...

Page 3: ...Chapter 4 Functions and Procedures for Setting Functions Describes how to use the console screen Chapter 5 Command References Describes how to use the commands Chapter 6 Managing the Device Describes the management of the device Chapter 7 Troubleshooting Describes how to solve problems in the device Appendix A Event Logs Describes the contents of messages reported by the device and actions to be t...

Page 4: ...ion 22 3 1 Workflow for Initial Setup of the Device 23 3 1 1 Setting Up the Serial Interface 23 3 1 2 Configure Management LAN Interface 24 3 1 3 Telnet Connection via the Management LAN Interface Optional 24 3 1 4 SSH Connection via the Management LAN Interface Optional 25 3 1 5 SNMP Configuration Optional 25 Chapter 4 Switch Functions and their Configuration 26 4 1 Basic Switch Functions 27 4 1 ...

Page 5: ...ration Commands 60 5 2 1 show remote host 60 5 2 2 management lan ip 61 5 2 3 management lan dns server 62 5 2 4 management lan domain 63 5 2 5 hostname 64 5 2 6 remote host 65 5 3 Serial Telnet SSH Configuration Commands 67 5 3 1 terminal pager 67 5 3 2 line 67 5 3 3 baud rate 68 5 3 4 terminal timeout 68 5 3 5 telnet server 69 5 3 6 ssh server 69 5 3 7 ssh auto key generation 69 5 3 8 show ssh h...

Page 6: ...idge 121 5 7 3 show bridge mac address table 122 5 7 4 bridge forward mode 123 5 7 5 bridge jumbo frame 124 5 7 6 bridge learn mode 125 5 7 7 bridge mac address table 126 5 7 8 bridge mac address table filter 128 5 7 9 bridge aging time 129 5 8 Link Aggregation Configuration Commands 130 5 8 1 show link aggregation 130 5 8 2 link aggregation 134 5 8 3 lacp system priority 136 5 8 4 lacp port prior...

Page 7: ...2 qos default priority 181 5 13 3 qos map priority 181 5 13 4 bridge diffserv tos 182 5 13 5 qos egress scheduling 183 5 13 6 qos bandwidth 184 5 14 Port Mirroring Setup Commands 185 5 14 1 show mirror 185 5 14 2 mirror 186 5 15 IGMP Snooping Setup Commands 187 5 15 1 show ip snooping 187 5 15 2 ip snooping protocol 189 5 15 3 ip snooping vlan 190 5 15 4 ip snooping vlan max group 191 5 15 5 ip sn...

Page 8: ...mands 250 5 20 1 clear log 250 5 20 2 show log 251 5 20 3 log send 252 5 20 4 save maintenance 253 5 20 5 show maintenance 253 5 20 6 tftp put maintenance 254 5 20 7 scp put maintenance 256 5 20 8 clear maintenance 258 5 20 9 update system 259 5 20 10 boot system 263 Chapter 6 Managing the Device 264 6 1 Verifying the Device Operations 265 6 1 1 Verifying Hardware Status 265 6 1 2 Verifying System...

Page 9: ...m Network Protocol Control 3000 3299 288 A 2 5 clim Basic CLI Control 3300 3999 292 A 2 6 xgsh CLI Command History 4000 4499 293 A 2 7 rstp Rapid Spanning Tree Control 4500 4999 293 A 2 8 lacp LACP Control 5000 5499 294 A 2 9 sys Maintenance Support Function 7400 7499 294 A 2 10 update Firmware Update 7500 7999 295 A 2 11 snmp SNMP Control 8500 8599 298 A 2 12 ntp NTP Control 8600 8699 299 A 3 Mes...

Page 10: ...XG2000 series User s Guide 10 315 All Rights Reserved Copyright C PFU LIMITED 2009 Chapter 1 Features and Functions This chapter describes the features and functions of the device ...

Page 11: ...ase bandwidth and redundancy Up to 10 ports for each link Also supports IEE802 3ad LACP Scalability Uplink Filter Filtering multicast broadcast and unlearned unicast frames from leaf nodes to uplink Possible to configure fat tree using several XG series Redundancy IEEE802 1D STP IEEE802 1w RSTP Possible to make a redundant and loop free network using Rapid Spanning Tree Protocol upward compatible ...

Page 12: ...XG2000 series User s Guide 12 315 All Rights Reserved Copyright C PFU LIMITED 2009 Chapter 2 Using the CLI This chapter describes how to use the command line interface CLI to operate the device ...

Page 13: ...is added The baud rate can be changed to one of 9600 19200 38400 and 57600 bps using the baud rate command z Remote connection via management LAN port Connect a terminal using a telnet or SSH The following tables list the factory defaults Management LAN Interface initial settings Item Setting value IP address 192 168 0 2 Subnet mask 255 255 255 0 Telnet server initial settings Item Setting value U...

Page 14: ... in the operator EXEC mode The prompt changes to xg Global configuration mode Prompt xg config To switch to the global configuration mode enter the configure terminal command in the administrator EXEC mode This mode allows the user to define the environment settings for the device that are to be saved in a configuration file The prompt changes to xg config Interface edit mode Prompt xg config if x...

Page 15: ...terminal command to switch to global configuration mode Use the interface command to switch to interface edit mode Use the exit command to return to global configuration mode Use the exit command to return to administrator EXEC mode Copy the current configuration file in memory to the startup config in the nonvolatile memory User is logged out and session is disconnected z Multiple users can use t...

Page 16: ...d save the startup config and running config files To upload the configuration information to the remote server run the show command Syntax upload the file on a TFTP server xg show running config tftp HOST REMOTE FILE or xg show startup config tftp HOST REMOTE FILE Syntax upload the file on a SSH server xg show running config scp USERNAME HOST REMOTE FILE or xg show startup config scp USERNAME HOS...

Page 17: ...eset functions configure Enter configuration mode copy Copy from one file to another date Manage the system date and time delete Delete files on current system dir List files on current system The rest is omitted xg _ z Word help Entering a question mark in the middle of a command name will list the possible command options required to complete the command The prompt will show the letters previous...

Page 18: ...mand is incorrectly entered The configure terminal command is used as an example below Error Message Explanation xg co t Ambiguous command co t Insufficient characters were entered for the CLI to recognize the command Re enter the correct command string xg configure Incomplete command All of the options or values required by this command were not entered Enter all necessary options and values xg c...

Page 19: ...ey combinations or command completion displays using the Tab key do not work correctly the correct VT100 VT200 or xterm terminal emulation type may not be selected 2 2 7 Command History Command history is a function that records command lines previously entered so they can be reused It is useful for repeatedly entering the same command line or for entering a similar command z To display the previo...

Page 20: ...olatile memory show FILE NAME show FILE NAME z FILE NAME Specifies the file name in volatile memory that the output of the command is piped or redirected tftp or scp redirects the output of the show command to a file on a remote server Syntax Redirect the output of a show command to a file on a TFTP server show tftp HOST REMOTE FILE Syntax Redirect the output of a show command to a file on a SSH s...

Page 21: ...device can register up to 10 public keys of SSH servers z Execute clear ssh rhost key command to delete a registered public key 2 2 12 Using the monitor Command The monitor command provides additional key commands to perform screen navigation The following table shows the keys used to perform screen related operations Displayed item Meaning ESC exit Press the Esc key to close the monitor screen F ...

Page 22: ...l Rights Reserved Copyright C PFU LIMITED 2009 Chapter 3 Installation This chapter describes the installation procedures for the device Refer to Using the CLI for details on using the CLI Refer to Command Reference for details on commands ...

Page 23: ...tial setting of the SSH connection via the management LAN interface is disabled 7 SNMP Configuration Optional Initially the SNMP agent configuration is not set Set the SNMP configuration as needed 8 This is the end of the preparation procedure Proceed with configuring the switch 3 1 1 Setting Up the Serial Interface Connect the device and terminal with an RS232C cable The initial setting of baud r...

Page 24: ... gateway of the management LAN interface xg config management lan dns server A B C D Optional Set up DNS servers Up to 4 DNS servers can be set up Priority is assigned to DNS servers in the order they are defined To change their order delete them using the no command before doing so xg config management lan domain DOMAIN NAME Optional Set the name of the network domain xg config remote host A B C ...

Page 25: ...d Task xg configure terminal Switch to global configuration mode xg config ssh server Enable SSH connection xg config terminal timeout vty 0 60 Optional If the SSH session timeout period in minutes expires the SSH connection is terminated xg config exit Exit to administrator EXEC mode The SSH server function supported by this device uses Open SSH free software that is published based on BSD licenc...

Page 26: ...PFU LIMITED 2009 Chapter 4 Switch Functions and their Configuration This chapter describes the functions of the device and how to configure them Refer to Operating Environment for the CLI for details on using the CLI Refer to Command Reference for details on commands ...

Page 27: ...AC addresses common to all VLANs Different VLANs with identical MAC addresses are treated as identical entries IVL Independent VLAN Learning The device learns MAC addresses separately for each VLAN Identical MAC addresses with different VLANs are treated as separate entries To change the MAC address table management modes carry out the following procedures in the management EXEC mode Command Task ...

Page 28: ...ess multiple ports can be specified xg config exit Exit to administrator EXEC mode 4 1 3 Jumbo Frame Support The device can transmit jumbo frames of up to 16KB 16128 bytes To configure jumbo frame support carry out the following procedure in the administrator EXEC mode Command Task xg configure terminal Switch to global configuration mode xg config bridge jumbo frame 9216 12288 15360 16128 xg conf...

Page 29: ...ce receives Restrict mode Filters violating frames only forwarding permitted frames Shutdown mode Filters all frames upon reception of a violating frame and the port goes link down Once a security violation is detected an error log is recorded No further detection of a violating frame will cause an error log to be recorded until security violations are reset by clear violation To configure port se...

Page 30: ... configure port mirroring carry out the following procedure in the administrator EXEC mode Command Task xg configure terminal Switch to global configuration mode xg config mirror monitored port 1 20 rx mirroring port 1 20 tx mirroring port 1 20 Configure the port to be monitored and its mirror port to be mirrored xg config exit Exit to administrator EXEC mode xg show mirror View the status of port...

Page 31: ...h communicates the link fault status to the other port by sending a remote fault RF signal as prescribed in IEEE802 3ae LFS Link Fault Signaling When the link status of the monitored port is restored to normal the other port is also restored to normal thereby restoring the network link To configure Link pass through carry out the following procedure in the administrator EXEC mode Command Task xg c...

Page 32: ...e logical link an aggregation group network traffic data sent and received will be balanced across the physical ports thereby providing increased bandwidth z Redundancy Multiplexing ports allows uninterrupted network operations should one of the multiple links fail Since the link status of the logical aggregation groups remains unchanged there are no fluctuations in network traffic the effect of a...

Page 33: ...y none for static configuration xg config interface agg port 1 10 To change the setting of the aggregation group created switch to the interface edit mode for the aggregation group and specify the interface agg port requiring change The prompt changes to config agg xg config agg port vlan id vlan 2 Optional Change the setting of the aggregation group as required In this example default VLAN ID is ...

Page 34: ...rator EXEC mode Command Task xg configure terminal Switch to global configuration mode xg config link aggregation agg port 1 10 protocol none lacp load balance dst mac src mac dst src mac port 1 20 1 20 Specify a distribution method in the load balance parameter of the link aggregation command xg config exit Exit to administrator EXEC mode 4 4 3 The Number of Ports That Require Linkup It is possib...

Page 35: ...r port are z link pass through Settings for these ports are cleared z The information registered in MAC address table All addresses related to ports configured are cleared z spanning tree port path cost Port path cost will be re adjusted to match the new configuration When changing the port settings for aggregation groups that have already been created the aggregation group changes to a linkdown s...

Page 36: ...ip consists of one or more downlink ports and one or more uplink ports For example in a fat tree network an uplink domain is configured such that ports connected to switches are designated as uplink ports and leaf nodes as downlink ports The uplink domain will then block multicast broadcast and flooding unicast frames to other uplink domains configured within the switch and only distribute traffic...

Page 37: ...9 When specifying multiple uplink ports within an uplink domain frame distribution among the uplink ports is performed equally from port to port and not by type of frame Frame distribution changes automatically when a fail over or fail back occurs thereby providing uplink redundancy ...

Page 38: ...ports In this example the global interface configuration mode is selected for ports 1 through 3 xg config if downlink allowed uplink domain 1 Register each port as a downlink member of the uplink domain xg config if exit Exit to global configuration mode xg config exit Exit to administrator EXEC mode xg show uplink View the state of the uplink z Multicast broadcast and unlearned unicast frames are...

Page 39: ...active path between network devices and shuts out other paths to avoid network loops An active path is selected by comparing path costs defined on each path After the comparison the lowest cost path will be selected If the selected path becomes disabled STP will activate the lowest cost path amongst the paths remaining The device supports IEEE802 1w RSTP Rapid Spanning Tree Protocol The RSTP is up...

Page 40: ... STP port states and RSTP port states are shown below Display Format STP IEEE802 1D RSTP IEEE802 1w Discard Blocking Discarding Discard Listening Discarding Learn Learning Learning Forward Forwarding Forwarding 4 6 3 Configuring Spanning Tree To configure the spanning tree protocol carry out the following procedure in the administrator EXEC mode Command Task xg configure terminal Switch to global ...

Page 41: ...figure terminal Switch to global configuration mode xg config vlan 1 4094 description VLAN_DESCRIPTION Create a VLAN to use xg config vlan statistics collection 1 4094 1 4094 Optional Configure a VLAN that collects statistics xg config interface port 1 2 3 interface port range 1 3 Switch to interface edit mode to assign a port to the desired port based VLAN In this example the global interface con...

Page 42: ...mode Command Task xg configure terminal Switch to global configuration mode xg config vlan 1 4094 description VLAN_DESCRIPTION Create a VLAN to use xg config vlan statistics collection 1 4094 1 4094 Optional Configure a VLAN that collects statistics xg config interface port 1 2 3 interface port range 1 3 Switch to interface edit mode for the desired ports to be configured as tag based VLAN members...

Page 43: ...n mode xg config vlan 1 4094 description VLAN_DESCRIPTION Create a VLAN to use xg config vlan statistics collection 1 4094 1 4094 Optional Configure a VLAN that collects statistics xg config interface port 1 Switch to interface edit mode to designate a port for multiple VLAN configuration In this example the global interface configuration mode is selected for port 1 xg config if user vlan protocol...

Page 44: ...ht C PFU LIMITED 2009 An example of multiple VLAN and the movement of frames for a VLAN member outgoing port VLAN tagged frame is shown below An example of multiple VLAN and the movement of frames for a VLAN member outgoing port VLAN untagged frame is shown below ...

Page 45: ...when the user defined VPID of the incoming and outgoing port differ and the outgoing port is a VLAN member VLAN tagged frame is shown below An example of multiple VLAN and the movement of frames when the user defined VPID of the incoming and outgoing port differ and the outgoing port is not a VLAN member VLAN untagged frame is shown below ...

Page 46: ...erent levels 0 to 3 Frames are transmitted in order of output queue priority Each priority is mapped to a specified output queue To set the default priority and output queue mapping carry out the following procedure in the administrator EXEC mode Command Task xg configure terminal Switch to global configuration mode xg config interface port 1 2 3 xg config interface port range 1 3 Switch to interf...

Page 47: ... ports by monitoring IGMP packets generated by layer 3 switches thereby preventing unnecessary flooding This function is called IGMP Snooping The device supports IGMP snooping for IGMP v1 v2 v3 z IGMP v3 does not support source IP addressing and filtering z IGMP snooping and the uplink filter function cannot be used at the same time z The XG2000 series floods IGMP Report messages When IGMP v1 v2 i...

Page 48: ...e shows the relationship between the registered IP multicast address and the multicast MAC address MAC addresses that are registered with IGMP snooping are between 0100 5E00 0000 and 0100 5E7F FFFF An IP multicast address is 32 bits The first 4 bits are always 1110 followed by 28 bits that represent the IP multicast address information Of these 28 bits the lower order 23 bits are mapped to a MAC a...

Page 49: ...nother IGMP Report message the switch removes that group member The default setting for the group member interval is 260 seconds z If an IGMP Leave message is sent from a host the multicast router sends out an IGMP Specific Query GSQ message to determine that the host has left the group If after receiving the IGMP Leave message the last member query interval expires before the device receives anot...

Page 50: ...membership information Upon reception of an IGMP General Query message the host a member of the group returns an IGMP Report message to maintain membership in the group In consideration of General Query or Report message loss caused by network congestion it is recommended that the following equation be used to determine the group member interval for the device z Group member interval query interva...

Page 51: ...by the following equation based on the send query count and the group membership interval z Query interval Group membership interval 10 send query count seconds The default setting for the Query interval is 125 seconds Upon reception of an IGMP Leave message the device sends an IGMP Specific Query GSQ message to determine that the host is interested in leaving the group If an IGMP Specific Query m...

Page 52: ... can be registered with IGMP snooping for each VLAN xg config ip snooping vlan 1 4094 fast leave Optional Set the fast leave mode used when receiving an IGMP Leave message xg config interface port range 1 20 Switch to interface edit mode to designate ports to specify the forwarding method for multicast frames All ports are selected in this example xg config if multicast forwarding forward unregsit...

Page 53: ...l 3 60 xg monitor traffic bytes current total interval 3 60 xg show statistics traffic counts xg show statistics traffic bytes View incoming and outgoing traffic statistics number of frames and number of bytes for each port xg monitor framesize traffic counts current total interval 3 60 xg show statistics framesize traffic counts View traffic statistics number of frames by frame size range for eac...

Page 54: ...EXEC mode 4 10 3 RMON Remote Monitoring RMON is a function provided to monitor communications over a network such as traffic and errors RMON used in conjunction with the SNMP agent allows the remote monitoring of traffic on a LAN segment The device supports 4 RMON groups Statistics History Alarm and Event z Statistics group Collects traffic statistics for each port z History group Records traffic ...

Page 55: ...hrough a RADIUS TACACS server 4 11 1 RADIUS Attributes It displays RADIUS attributes Attribute Value of attribute Content User Name 1 The username to authenticate User Password 2 Password to authenticate NAS IP ADDRESS 4 IP address of the device management LAN Service Type 6 AuthenticateOnly 8 NAS Identifier 32 Hostname of the device 4 11 2 TACACS Attributes It displays TACACS attributes Category ...

Page 56: ...ss admin Optional Register the same account for using RADIUS TACACS authentication on XG2000 XG2000 cannot use an unregistered account xg show radius Displays the information of RADIUS server xg show tacacs Displays the information of TACACS server xg show authentication Displays the setting status of login authentication method xg show account Lists the all accounts registered in the device z It ...

Page 57: ...XG2000 series User s Guide 57 315 All Rights Reserved Copyright C PFU LIMITED 2009 Chapter 5 Command Reference ...

Page 58: ...to configure the basic functions of the device Link Aggregation Configuration commands These are used to create delete aggregation groups Switch Port Configuration commands These are used to set the operating characteristics of each switch port Spanning Tree Protocol STP Setup commands These are used to configure STP Spanning Tree Protocol Virtual LAN VLAN Configuration commands These are used to ...

Page 59: ...n a pair of curly brackets with a vertical line in between Indicate parameters wherein at least one alternative must be chosen baudrate 9600 19200 38400 57600 Enclosed in a pair of angle brackets Indicate parameters with a condition of numerical range interface port 1 20 Parameter Explains how to specify command parameters and their meanings Command type Indicates configuration commands that retai...

Page 60: ...relationship between the remote hostname and IP address Prompt xg or xg Command syntax show remote host Command type Operation management commands Output form xg show remote host Remote Host 2008 02 05 11 37 34 IP Address Host Name 11 22 33 45 HOST005 11 22 33 46 HOST006 z IP Address Display the IP address of remote host z Host Name Display the hostname which is related to the IP address Example D...

Page 61: ... 1 126 255 255 254 128 0 0 1 191 255 255 254 and 192 0 0 1 223 255 255 254 z default gw A B C D Specifies the IP address of the default gateway Command type Configuration command Default 192 168 0 2 24 Message Invalid IP address Explanation The specified format of the IP address or specified content is incorrect Solution Specify the IP address in a correct format and execute the command again Note...

Page 62: ... address of DNS server Explanation The specified IP address is not found Solution Specify the IP address of a registered DNS server Number of DNS server is over max 3 Explanation The upper limit of the number of registrable DNS servers was surpassed Solution After deleting unnecessary DNS server information execute the command again Invalid IP address Explanation The specified format of the IP add...

Page 63: ...in name Characters usable for the name Alphabet a z A Z numerical characters 0 9 hyphen and period First character Alphabet a z A Z Last character Alphabet a z A Z numerical characters 0 9 and period Command type Configuration command Default None Note z If the default domain name is changed the new setting becomes enabled after executing copy running config startup config command and restart the ...

Page 64: ... specifying the hostname Characters usable for the name Alphabet a z A Z numerical characters 0 9 hyphen and period First character Alphabet a z A Z Last character Alphabet a z A Z numerical characters 0 9 and period Command type Configuration command Default xg Example Specify the hostname of the device to be xg2 The prompt will change to xg2 Switching to the administrator exec mode and displayin...

Page 65: ...ame Characters usable for the name Alphabet a z A Z numerical characters 0 9 hyphen and period First character Alphabet a z A Z Last character Alphabet a z A Z numerical characters 0 9 and period z no remote host A B C D Deletes the registered remote host Specify the IP address in A B C D format When IP address is omitted all registered remote hosts will be deleted Command type Configuration comma...

Page 66: ...art the device Example Register the IP address 11 22 33 45 as the hostname of HOST005 and then 11 22 33 46 as the hostname of HOST006 Using the show remote host command registration of HOST005 and HOST006 can be confirmed xg config remote host 11 22 33 45 HOST005 xg config remote host 11 22 33 46 HOST006 xg config exit xg show remote host Remote Host 2007 01 22 11 45 46 IP Address Host Name 11 22 ...

Page 67: ...rameter z pager on off Specifies enable disable of the pager on Enables the pager off Disables the pager Command type Operation management commands Default on Note z This command is effective until the terminal is disconnected 5 3 2 line Function Switches to the terminal edit mode Prompt xg config Command syntax line console Parameter z console Switches to the terminal edit mode of the serial conn...

Page 68: ...itoring time specified with this command the terminal will be logged out automatically Use the no form to return to the default setup Prompt xg config Command syntax terminal timeout console vty 0 60 no terminal timeout console vty Parameter z timeout console vty Specifies the type of the terminal console Sets the monitoring idle time for a serial connection vty Sets the monitoring idle time for a...

Page 69: ...evice concurrently Use the no form to disable SSH connections Prompt xg config Command syntax ssh server no ssh server Command type Configuration command Default None Note z The device supports password authentication z The device supports only version 2 Example Enable SSH connections to the device xg config ssh server 5 3 7 ssh auto key generation Function Regenerate authentication key when enabl...

Page 70: ...3pZCpaodDwljdmgW8iBfmtmO SUnLYcszHW dNTg7QXeoEyU MyZMzYxQH1kABB3Wl rfP0dZ7Ri4nCm fYWN6QCX8M5hHVuALz5ITmBA sWxhQUvxDxI VdpUB3ta4xgKiPOMFfVBjdr4M6Upr9 jaVG6pyWCDGtkEL4qbLUXTx1XqFsNtuLwembg ZUWTXo3cU6BXZ2B wo8mpgsvcabcN1gZiTycAs3WIj 0V8lp0hglQKsfOqIF8b9pNWEi2NqIMbDSG yz BzXNqwg6IbpCUMxdBMeij97YafJTl1 h5zJvxP2AsrannGlIdeYJxXYaWQ admin xg Example The following shows authentication key xg show ssh host ...

Page 71: ...is parameter is omitted all public keys will be deleted Command type Operation management commands Example Delete the public key for the SSH server whose IP address is 192 168 1 10 xg clear ssh rhost key 192 168 1 10 5 3 11 generate ssh host key Function Generate authentication key If it has already been made it is regenerated Prompt xg Command syntax generate ssh host key Command type Operation m...

Page 72: ... or SSH connection the screen size will be obtained automatically from the client terminal Prompt config line Command syntax terminal window 50 200 12 100 Parameter z 50 200 Specifies the number of columns horizontal of the screen It can be set in the range of 50 to 200 z 12 100 Specifies the number of lines vertical of the screen It can be set in the range of 12 to 100 Command type Configuration ...

Page 73: ...cessful authentication of the password for a given login session the user will not be prompted for the password until they exit the administrator exec mode and re enter the mode Prompt xg Command syntax enable Command type Operation management commands Example Switch from the operator exec mode to the administrator exec mode using the enable command The prompt character will change to xg xg enable...

Page 74: ... show system information 5 show history Note z If the same command is executed continuously it is treated as one command z Up to 100 history will be displayed Example Displays the history of executed commands xg show history 5 4 3 disable Function Switch from the administrator exec mode to the operator exec mode Prompt xg Command syntax disable Command type Operation management commands Example Sw...

Page 75: ...e using the configure terminal command The prompt character will change to xg config xg configure terminal xg config 5 4 5 exit Function Returns to the prior command mode level The relationship between the current command mode and the command mode status after executing the exit command is as follows Current command mode Status after exit Operator exec mode Log out Administrator exec mode Log out ...

Page 76: ... Parameter z LINE Specifies the command line for the administrator exec mode to execute Command type Operation management commands Message Can t execute this command Explanation The specified command cannot be executed with the do command Solution Execute the command in an appropriate mode without using the do command Example Set bridge aging time from the global configuration mode And then withou...

Page 77: ...ction Displays information about the user Prompt xg or xg Command syntax show account Command type Operation management commands Output form xg show account Username Information 2007 10 04 14 33 42 Username Class admin admin operator1 operator user0001 admin z Username Display the username z Class Display the class that the user can access to operator The user can access operator class only admin ...

Page 78: ...he length of the username is invalid Solution Specify the username between 2 and 16 characters First character is invalid Explanation The first character of the username is invalid Solution Specify the first character of the username to be an alphabet Invalid character is included Explanation Invalid character is included in the username Solution Specify characters usable for the username USERNAME...

Page 79: ... too short Solution Specify a password using five or more characters Bad password too long Explanation The password is too long Solution Specify a password using 16 or less characters Note z This command password command for Administrator exec mode is executable only when the user can access operator class only see account command for the details z Specify a password with a length in the range of ...

Page 80: ...guration mode is executable only when the user can access both operator and administrator class see account command for the details z Specify a password with a length in the range of 5 to 16 characters z Make a note of the changed password and retain it Refer to Section 7 1 3 Restoring Factory Defaults for recovery of lost or forgotten passwords z Login password information is not included in the ...

Page 81: ...ll be performed When n or N is entered the reboot process will be cancelled 5 4 14 system shutdown Function Stops the device system and prepares it for power off After executing this command and the STATUS LED goes out turn off the power to the device Prompt xg Command syntax system shutdown Command type Operation management commands Note z When power to the device is turned off without executing ...

Page 82: ...r to set in the range of 0 to 23 mm Specify the minutes to set in the range of 0 to 59 CC YY Specify the first two digits of the four digits of the year for CC When it is omitted 20 will be specified Specify the last two digits of the four digits of the year for YY If CC and YY are both omitted the year will not be changed ss second 0 59 Specify the seconds to set in the range of 0 to 59 Command t...

Page 83: ...t can be set in the range of 1200 to 1300 Command type Operation management commands Default 0000 Message invalid input 1 Explanation The specified parameter for the time difference is incorrect Inserted string 1 specified time difference Solution Check that no mistakes have been made in the time difference parameter Note z The setting will be valid after restarting the system z Use the show syste...

Page 84: ...n Specifies the following values for the first day of each month in Jn specification and n specification specification Month Day Jn specification Common year Leap year January 1st J1 1 1 February 1st J32 32 32 March 1st J60 60 61 April 1st J91 91 92 May 1st J121 121 122 June 1st J152 152 153 July 1st J182 182 183 August 1st J213 213 213 September 1st J244 244 245 October 1st J274 274 275 November ...

Page 85: ...ong Inserted string 1 incorrect parameter value is displayed Solution Correct the error in the parameter and execute the command again Type of start day and end day is inconsistency Explanation Different formats are specified for start date and end date parameters of Daylight Saving Time Solution Make the formats of the start date and end date of Daylight Saving Time Mm w d Jn n consistent and exe...

Page 86: ... xg ping white PING white 192 168 1 1 from 192 168 1 2 56 84 bytes of data 64 bytes from white 192 168 1 1 icmp_seq 1 ttl 64 time 0 780 ms There is a response 64 bytes from white 192 168 1 1 icmp_seq 2 ttl 64 time 0 592 ms There is a response white ping statistics Displayed after aborting the process pressing Ctrl C 5 packets transmitted 5 received 0 loss time 4041ms rtt min avg max mdev 0 549 0 6...

Page 87: ...on command Default None Note z The password will be encrypted and reflected in running config z The password will not be displayed by any means after executing the command Make a note of the set password and retain it Example Set the enable password from the global configuration mode using the enable password command Then return to the administrator exec mode and execute show running config The en...

Page 88: ...ring No need to enclose a parameter in quotes if it contains a blank space z login default Returns the banner string to its default Product name firmware identification information Command type Configuration command Default Product name XG2000 XG2000R XG2000C or XG2000CR firmware identification information The firmware identification information is the same information displayed in FirmWare 1 or F...

Page 89: ... number of hosts that can be set to an NTP server was exceeded Solution After deleting unnecessary NTP servers execute the command again Cannot find 1 Explanation The specified host cannot be found Inserted string 1 specified hostname Solution Check that the hostname is correct or the hostname is registered Hostname is too long Explanation The specified hostname is too long Solution Check that the...

Page 90: ...h Login Primary RADIUS Login Secondary none z Login Primary Displays the primary login authentication method Local Local authentication based on the account information stored in the device is used RADIUS RADIUS authentication using PAP User Password is used TACACS TACACS authentication using PAP User Password is used z Login Secondary Displays the secondary login authentication method Secondary l...

Page 91: ...thentication method Secondary login authentication is used if primary login authentication is failed local Local authentication based on the account information stored in the device is used none Secondary login authentication is disabled This parameter is valid when RADIUS TACACS is set as the primary login method When this parameter is omitted local is specified Command type Configuration command...

Page 92: ...123 Global Parameters Displays the common information for configuring RADIUS servers z Secret Key Displays a secret key which is used as a default parameter when the RADIUS server is registered without secret key z Timeout sec Displays timeout for access replay from a RADIUS server in seconds Server Information Displays the current settings of RADIUS servers z No 1 Indicates the register number of...

Page 93: ...itted Command type Configuration command Default None Message Authentication server can register up to 4 Explanation Four RADIUS servers have already been registered Solution Delete unnecessary RADIUS servers and execute the command again Secret key is too long Explanation The specified secret key is more than 32 characters Solution Specifies the secret key under 33 characters Invalid IP address E...

Page 94: ...n 33 Command type Configuration command Default None Message Secret key is too long Explanation The specified secret key is more than 32 characters Solution Specifies the secret key under 33 characters Invalid secret key Explanation An invalid character is set Solution Specifies a secret key using available characters Note z A global secret key is referred only when a RADIUS server is registered w...

Page 95: ...server timeout 1 15 no radius server timeout Parameter z timeout 1 15 Specifies timeout for access replay from a RADIUS server in seconds Command type Configuration command Default None Note z The timeout is referred only when a RADIUS server is registered It is necessary to register RADIUS servers again if the timeout is changed so that RADIUS servers use new setting Example The following example...

Page 96: ...ost sample com Secret Key poiure123 Global Parameters Displays the common information for configuring TACACS servers z Secret Key Displays a secret key which is used as a default parameter when the TACACS server is registered without secret key Server Information Displays the current settings of TACACS servers z No 1 Indicates the register number of the TACACS server Access requests to TACACS serv...

Page 97: ...thentication server can register up to 4 Explanation Four TACACS servers have already been registered Solution Delete unnecessary TACACS servers and execute the command again Secret key is too long Explanation The specified secret key is more than 32 characters Solution Specifies the secret key under 33 characters Invalid IP address Explanation The specified format of the IP address or the IP addr...

Page 98: ...n 33 Command type Configuration command Default None Message Secret key is too long Explanation The specified secret key is more than 32 characters Solution Specifies the secret key under 33 characters Invalid secret key Explanation An invalid character is set Solution Specifies a secret key using available characters Note z A global secret key is referred only when a TACACS server is registered w...

Page 99: ...t command Note z When the system is restarted without saving the information of running config into startup config the information set in running config will be lost z Be sure to upload the contents of the existing startup config file to a remote server prior to saving running config as the contents of startup config will be overwritten Example Store running config in startup config Then check the...

Page 100: ...MOTE FILE Specifies the file name to copy onto the TFTP server or SSH server Command type Operation management commands Message tftp 1 Host name lookup failure Explanation The specified hostname does not exist Inserted string 1 specified hostname Solution Check whether the specified hostname is correct tftp server says 1 Explanation An error was received from the TFTP server Inserted string 1 cont...

Page 101: ...n There was no access permission to the SSH server Inserted string 1 Specified file name Solution Check the access permission to the SSH server ssh connect to host 1 port 22 No route to host Explanation It failed to access to specified SSH server Inserted string 1 Specified IP address or host name Solution Specify the correct IP address or host name Check the setting and status of SSH server and w...

Page 102: ...r z If timeout setting of the TFTP server is too short an error may occur it depends on the functionality of the TFTP server z scp supports only password authentication and this device can register up to 10 public keys of SSH servers z Execute clear ssh rhost key command to delete a registered public key z A temporary file which form is show_ number is created when scp is specified It may remain o...

Page 103: ... 4 show startup config Function Displays the configuration information startup config stored in the nonvolatile memory of the device Prompt xg Command syntax show startup config Command type Operation management commands Example Display the content of startup config xg show startup config ...

Page 104: ... 192 0 0 1 223 255 255 254 z REMOTE FILE Specifies the file name to copy onto the TFTP server or SSH Command type Operation management commands Message tftp 1 Host name lookup failure Explanation The specified hostname does not exist Inserted string 1 specified hostname Solution Check whether the specified hostname is correct tftp server says 1 Explanation An error was received from the TFTP serve...

Page 105: ...ation There was no access permission to the SSH server Inserted string 1 Specified file name Solution Check the access permission to the SSH server ssh connect to host 1 port 22 No route to host Explanation It failed to access to specified SSH server Inserted string 1 Specified IP address or host name Solution Specify the correct IP address or host name Check the setting and status of SSH server a...

Page 106: ...TP server z If the timeout setting of the TFTP server is too short an error may occur during transfer z scp supports only password authentication and this device can register up to 10 public keys of SSH servers z Execute clear ssh rhost key command to delete a registered public key z A temporary file which form is show_ number is created when scp is specified It may remain on the device when the c...

Page 107: ...n the SSH server z USERNAME Specifies the username of the SSH server z HOST Specifies the hostname or IP address of the TFTP server or SSH server for HOST IP addresses that can be set are 1 0 0 1 126 255 255 254 128 0 0 1 191 255 255 254 and 192 0 0 1 223 255 255 254 z REMOTE FILE Specifies the file name stored on the TFTP server or SSH server Command type Operation management commands Message Not...

Page 108: ...e TFTP server Invalid IP address Explanation The specified format of the IP address or specified content is incorrect Solution Specify the IP address in a correct format and execute the command again Cannot find 1 Explanation An incorrect host name was specified Inserted string 1 Specified host name Solution Specify the correct host name or specify the IP address The length of user name is invalid...

Page 109: ...ied IP address or host name Solution Specify the correct IP address or host name Check the setting and status of SSH server and whether there is no problem in network connection to the SSH server Note z The startup config uploaded using a new version of firmware may not be downloaded with an old version of firmware z scp supports only password authentication and this device can register up to 10 p...

Page 110: ...104 bytes z Update time Displays the file update time z File size Displays the file size byte z File name Displays the file name z unused Displays the size of free memory Example Copy running config startup config and the system information to files in volatile memory then list the files in volatile memory xg show running config run_conf_20070122 xg show startup config start_conf_20070122 xg show ...

Page 111: ...onds to the file name of arbitrary strings will be deleted Command type Operation management commands Message cannot remove 1 No such file or directory Explanation The specified file does not exist Inserted string 1 specified file name Solution Check whether the specified file name is correct Example Delete a file with the file name run_conf_20070122 xg delete run_conf_20070122 Specify a generic t...

Page 112: ...in specifying file names File names must start with alphabet a z A Z Characters usable for file names are alphabet a z A Z numerical characters 0 9 underscore _ and period Command type Operation management commands Message unable to rename 1 No such file or directory Explanation The specified file does not exist Inserted string 1 specified file name Solution Check whether the specified file name i...

Page 113: ...P server cannot be overwritten Could not open requested file for reading There are no files in the TFTP server File already exists There are files in the TFTP server Unknown transfer ID Process will be aborted in time out Solution Take actions in accordance with the message received from the TFTP server tftp write No space left on device Explanation There is not enough free space to store the file...

Page 114: ... on the TFTP server host1 to the device using the file name start_conf Then check whether the file size of the file imported with the tftp command is consistent with the original using the dir ls command xg tftp get host1 start_conf_20070122 start_conf xg ls Update time File size File name 2007 01 22 19 22 41 2 604 start_conf ...

Page 115: ...scp 1 No such file or directory Explanation Specified file does not exist Inserted string 1 Specified file name Solution Specify the correct file name scp 1 Permission denied Explanation There was no access permission to the SSH server Inserted string 1 Specified file name Solution Check the access permission to the SSH server 1 No space left on device Explanation This device does not have enough ...

Page 116: ...H server Inserted string 1 Specified IP address or host name Solution Specify the correct IP address or host name Check the setting and status of SSH server and whether there is no problem in network connection to the SSH server Note z scp supports only password authentication and this device can register up to 10 public keys of SSH servers z Execute clear ssh rhost key command to delete a registe...

Page 117: ...es on the TFTP server Unknown transfer ID Process will be aborted in time out Solution Take actions in accordance with the message received from the TFTP server tftp last timeout Explanation There is no response from the TFTP server A network communication error with the management LAN occurred or the time out setting of the TFTP server may be too short Solution Check the network connection with t...

Page 118: ...c key could not be registered Solution Delete a public key by using clear ssh rhost key command then execute the command again 1 No such file or directory Explanation Specified file does not exist Inserted string 1 Specified file name Solution Specify the correct file name scp 1 No such file or directory Explanation Specified file does not exist Inserted string 1 Specified file name Solution Speci...

Page 119: ...ect to host 1 port 22 connection timed out Explanation It failed to access to specified SSH server Inserted string 1 Specified IP address or host name Solution Specify the correct IP address or host name Check the setting and status of SSH server and whether there is no problem in network connection to the SSH server Note z scp supports only password authentication and this device can register up ...

Page 120: ...addresses dynamically learned at every port port 1 20 Deletes MAC addresses dynamically learned for a specific port agg port 1 10 Deletes MAC addresses dynamically learned for a specific aggregation group Command type Operation management commands Message Aggregation port not bound to bridge Explanation The specified aggregation group was not created Solution Check whether the specified aggregatio...

Page 121: ...time the time until a dynamically learned MAC address expires is displayed z Cut through Switching The switching state is displayed Disabled The switching method is store and forward Enabled The switching method is cut through z Jumbo Frame Support The jumbo frame support state is displayed Disabled Jumbo frames are not forwarded Enabled Max Frame Size Displays the maximum size of a jumbo frame th...

Page 122: ...c Address Table Information 2007 01 22 12 12 15 Static Mac address Table Mac address Vlan id Destination port 0001 123a 4321 vlan 1 port 2 0002 123a 4321 vlan 1 port 4 0003 123a 4321 vlan 3 filter ef01 123a 4321 vlan 3 port 1 2 3 4 5 6 7 8 Dynamic Mac address Table Mac address Vlan id Destination port 0004 123a 4321 vlan 1 port 4 IGMP snooping learning group Mac address Table Mac address Vlan id D...

Page 123: ... static MAC addresses xg show bridge mac address table static include port 4 0002 123a 4321 vlan 1 port 4 0004 123a 4321 vlan 1 port 4 5 7 4 bridge forward mode Function The device supports two types of frame forwarding store and forward and cut through z Store and forward After a full frame is received an error check is performed before forwarding z Cut through After reading the first 64 bytes of...

Page 124: ...rmitted jumbo frame size to 12288 byte 15360 Sets the permitted jumbo frame size to 15360 byte 16128 Sets the permitted jumbo frame size to 16128 byte When this parameter is omitted 9216 is specified Command type Configuration command Default 9216 Note z Forwardable frame sizes The following shows the forwardable frame size when jumbo frame forwarding is disabled Frame status Forwardable frame siz...

Page 125: ... VLAN Use the no form to return to the default setup Prompt xg config Command syntax bridge learn mode ivl svl no bridge learn mode Parameter z learn mode ivl svl Specifies the MAC address table learning mode ivl Specifies IVL Independent Vlan Learning svl Specifies SVL Shared Vlan Learning Command type Configuration command Default svl Note z When changing from SVL to IVL MAC addresses registered...

Page 126: ...port subsequent assignments of the MAC address to additional ports will be appended to the address table z A broadcast address FFFF FFFF FFFF can be registered to multiple ports However the entry will be replaced with subsequent commands registering non broadcast addresses to the ports previously assigned z The following reserved multicast addresses prescribed in IEEE802 1D cannot be registered In...

Page 127: ... then execute the command again MAC address is reserved by IEEE802 1D s Explanation MAC addresses reserved under the IEEE802 1D cannot be specified Inserted string 1 MAC address Solution Review the specified MAC address Can t remove mac address from static forwarding table Explanation The specified MAC address cannot be deleted Solution Review the specified VLAN or MAC address Note z The maximum n...

Page 128: ...ress is incorrect Broadcast addresses cannot be registered Inserted string 1 specified MAC address Solution After edit the specified format of the MAC address execute the command again Can t set vlan in case of shared vlan learning Explanation When bridge learn mode is SVL a VLAN cannot be specified Solution Omit the specified vlan and parameter then execute the command again Vlan id is not found ...

Page 129: ...ble static Mac Address Table Information 2005 06 23 07 18 06 Static Mac address Table Mac address Type Vlan id Destination port 0001 123a 4321 static vlan 1 port 2 0002 123a 4321 static vlan 1 port 4 0003 123a 4321 static vlan 3 filter ef01 123a 4321 static vlan 3 port 1 2 3 4 5 6 7 8 xg show bridge mac address table static include filter 0003 123a 4321 static vlan 3 filter 5 7 9 bridge aging time...

Page 130: ...tion IP Source IP Destination port Source port Distribution parameter 0 3 The minimum number of ports 1 port 1 Port Status Active Inactive port 2 Port Status Active Inactive agg port 2 Link aggregation group common information Link aggregation information related to the switch in general will be displayed z System Priority The system priority used by LACP is displayed z System ID The identificatio...

Page 131: ...and the transmitted frame MAC address Vlan This is a distribution method based on the VLAN membership of a frame IP Hash This is a distribution method based on the following frame information Destination IP Frames are distributed based on destination IP address Source IP Frames are distributed based on source IP address Destination port Frames are distributed based on destination TCP UDP port Sour...

Page 132: ...eive State Invalid Initialize Port Disabled LACP Disabled Expired Defaulted Current Periodic Tx State No Periodic Fast Periodic Slow Periodic Actor System Key 1 Partner System Priority 32768 Partner System ID 0080 17c2 05e2 Partner Key 2 Partner Port Priority 32768 Partner Port Number 11 Partner Synchro State Sync No Sync agg port 2 Link aggregation common information Link aggregation information ...

Page 133: ... will not be sent Fast Periodic LACP control frames are sent at short intervals Slow Periodic LACP control frames are sent at long intervals z Partner System Priority LACP system priority will be displayed This system priority is from the device which is connected by a port z Partner System ID LACP system ID will be displayed This system priority is from the device which is connected by a port z P...

Page 134: ...m the device Also since the active mode can receive LACP packets a connection between two LACP active mode enabled switches is possible passive The device will be in the passive mode of the LACP protocol The switch responds to LACP packets but will not start negotiation This parameter can be specified only when lacp is specified as the protocol parameter When this parameter is omitted active is as...

Page 135: ...ber Solution Review the specified aggregation group number and execute the command again protocol is not LACP Explanation Although the protocol specified was not lacp lacp mode was specified Solution When the protocol is not lacp do not specify lacp mode The maximum number of member ports is 10 Explanation The number of specified ports was more than 10 Solution Set the number of ports to 10 or les...

Page 136: ...f an aggregation group if the port is monitored by rx mirroring port or tx mirroring port Example Set up a static link aggregation group with ports 1 and 2 as aggregation group number 1 Then move to the interface edit mode of the aggregation group and assign a VLAN ID of 2 xg config link aggregation agg port 1 protocol none port 1 2 xg config interface agg port 1 xg config agg port vlan id vlan 2 ...

Page 137: ...e parameter s used by the link aggregation IP hash frame distribution function Use the no form to return to the default setup Prompt xg config Command syntax link aggregation load balance ip hash selection src ip dst ip src port dst port no link aggregation load balance ip hash selection Parameter z ip hash selection src ip dst ip src port dst port Specifies the IP hash parameter used for frame di...

Page 138: ...unction Ports Membership 1 Uplink Active port 1 10 11 Uplink Inactive port 2 Downlink port 5 6 agg port 2 3 2 Uplink Active port 3 4 Uplink Inactive None Downlink port 5 agg port 2 z Domain The domain ID of the uplink group is displayed z Port Function The port state belonging to the uplink domain is displayed Display Meaning Uplink Active Defined Uplink port and link status is good Uplink Inactiv...

Page 139: ...tring 1 port number Solution After releasing the ports from the aggregation group execute the command again port 1 is included another uplink domain Explanation This uplink port is already a member of another uplink domain Inserted string 1 port number Solution After releasing the uplink domain that includes the specified port execute the command again port 1 is already downlink port in same uplin...

Page 140: ...of configuring port 3 and 4 as uplink ports of domain 3 and then displaying the uplink domain information by using show command xg config uplink domain 3 port 3 4 xg show uplink Uplink Domain Information 2006 03 17 14 35 25 Domain Port Function Ports Membership 3 Uplink Active port 3 4 Uplink Inactive None Downlink None ...

Page 141: ...This port is a member of another uplink domain Inserted string 1 port number Solution After releasing the port from the other uplink domain execute the command again Note z The member of an uplink domain is not allowed to be the member of the corresponding downlink z Aggregation groups can be assigned as a member of downlink z If adding ports that are members of an aggregation group all port membe...

Page 142: ...arding Forward all Forward unregistered mac Filter unregistered mac Port Security Shutdown Restrict Disabled Storm Control Enabled Disabled Default Qos Priority 0 7 Qos Egress Scheduling Strict DRR DRR Strict Qos Bandwidth Output Priority 0 0 10000 Output Priority 1 0 10000 Output Priority 2 0 10000 Output Priority 3 0 10000 Ingress Bandwidth 40 10000 total 400 100000 Vlan Information Port Default...

Page 143: ...E flow control is enabled Tx Only Tx PAUSE flow control is enabled Rx and TX Rx and Tx PAUSE flow control is enabled z Address Learning Enabled Dynamic MAC address learning is enabled Disabled Dynamic MAC address learning is disabled z Multicast Forwarding Forward all All multicast frames will be forwarded flooded Forward unregistered mac Multicast addresses yet to be registered in the static MAC ...

Page 144: ...an member The state of ingress filtering by VLAN ID is displayed Disabled The ingress filtering by VLAN ID is disabled Enabled The ingress filtering by VLAN ID is enabled Discards frames with VLAN ID that are not members when received z Ingress Filter tagged frame The state of ingress filtering of a tagged frame is displayed Disabled The ingress filtering of a tagged frame is disabled Enabled The ...

Page 145: ...on Port Description Information 2007 05 10 17 50 54 agg port 1 Description agg_name1 agg port 2 Description agg_name2 port 1 Description port_nam1 port 2 Description port_name2 port 3 Description port_name3 port 1 The number of the switch port for the following information is displayed In the case of an aggregation group the aggregation group number such as agg port 1 is displayed z Description Po...

Page 146: ...n a violation due to port security loop back alert and broadcast storm control is detected an error log entry for the violation is output only once and the target port will be set to a violation state Violations can be checked with the Link Status Detail displayed by the show interface command By using this command the violation state of the port will be cleared If a violation state occurs execute...

Page 147: ...ion groups cannot be specified Command type Configuration command Message duplicate port number 1 Explanation The specified port number was duplicated Inserted string 1 specified switch port number Solution Specify a switch unique port numbers Note z When multiple ports are collectively configured their settings are individually displayed when using such commands as copy running config startup con...

Page 148: ...ing ASCII characters The description can be up to 64 alphanumeric characters in length No need to enclose a parameter in quotes if it contains a blank space Command type Configuration command Default None Message Port description length is max over Explanation The port description length exceeded 64 characters Solution Specify a port description consisting of up to 64 alphanumeric characters Note ...

Page 149: ...nfig agg Command syntax flowcontrol disable only receive only send send receive no flowcontrol Parameter z disable Disalbe PAUSE flow control z only receive Enables Rx PAUSE flow control z only send Enables Tx PAUSE flow control z send receive Enables Tx and Rx PAUSE flow control Command type Configuration command Default only receive Example Enable Tx and Rx PAUSE flow control xg config if flowco...

Page 150: ...state After eliminating the cause of the condition clear the violation state with the clear violation command Example Enable broadcast storm control for Port 3 of the switch xg config interface port 3 xg config if storm control 5 10 9 suppress address learning Function Disables the dynamic learning of the MAC address table for switch ports Use the no form to enable learning Prompt xg config if or ...

Page 151: ...o shutdown 5 10 11 shutdown Global configuration mode Function Shuts down the ports from the global configuration mode so that they cannot be used Use the no form to enable the ports again Prompt xg config Command syntax shutdown port 1 20 1 20 no shutdown port 1 20 1 20 Parameter z port 1 20 1 20 Specifies the port number to shut down or enable When specifying multiple ports list them separated w...

Page 152: ...on command Default None Note z When a security violation is detected the port is set to a in violation state The Link Status Detail of the show interface command will display PSL After eliminating the cause of the violation clear the violation state with the clear violation command to return the port to usable state z When port security is enabled throughput decreases by about 10 since the forward...

Page 153: ... specified aggregation group numbers monitored port and domino port cannot specify a port belonging to an aggregation port port d Explanation Ports within a link aggregation group cannot be specified as monitored and domino ports Inserted string 1 port number specified to monitored port or domino port Solution Review the ports specified as monitored and domino ports Cannot set same port number in ...

Page 154: ...miting value for the aggregation group will be the specified ingress rate limiting value multiplied by the number of ports Command type Configuration command Default 10000 Message The set value is not step of 40 Explanation The specified ingress rate limiting value is not an integer divisible by 40 Solution Specify the ingress rate limiting value with an integer divisible by 40 Note z For the spec...

Page 155: ... frames Forward all All multicast frames will be forwarded flooded Forward unregistered mac Multicast addresses yet to be registered in the static MAC address table and multicast addresses registered will be forwarded flooded Multicast addresses registered as non member ports will be filtered Filter unregistered mac Only Multicast addresses registered as member ports in the static MAC address tabl...

Page 156: ...h ID 8000 0080 17C2 0511 Root Path Cost 0 Root Port port1 Switch Priority 32768 Switch ID 8001 0080 17C2 0512 Max Age 20 sec Hello Time 2 sec Forward Time 15 sec Topology Changes 0 Last Topology Change 2007 01 22 12 12 15 portfast errdisable enabled disabled timeout portfast errdisable 300 sec timeout interval Ports Information for Spanning Tree Port State Mode Cost Pri PortID Flags Designated Swi...

Page 157: ...seconds for BPDU s are displayed z Hello Time The transmit interval seconds for BPDU s are displayed z Forward Time The time a port requires to switch states z Topology Changes The number of times the topology changed is displayed z Last Topology Change The latest date and time the topology change occurred is displayed z portfast errdisable timeout The state of errdisable timeout function is displ...

Page 158: ...ine configured in the device p A point to point link s A shared line In the device Point to point p is always used Third flag Oper link type Indicates the link type in operation p A point to point link s A shared link Fourth flag Proposal state Indicates a Spanning Tree was proposed by an adjacent switch p Building a Spanning Tree was proposed None Building a Spanning Tree request was accepted by ...

Page 159: ...meter Designated Path Cost 0 Designated Port ID 0 Designated Priority 128 Designated Root ID 0000 0000 0000 0000 Designated Switch ID 0000 0000 0000 0000 Max Age 20 sec Message Age 0 sec Message Age Timer 0 sec Hello Time 2 sec Hello Timer 0 sec Forward Time 15 sec Forward Timer 0 sec Received STP Protocol None Port 2 Switch Information for Spanning Tree General Spanning Tree Protocol information ...

Page 160: ...he remaining 12 digits representing the MAC address of the root switch are displayed as a hexadecimal number z Designated Switch ID The switch identifier of the destination switch is displayed The first four digits representing the priority of the designated switch are displayed as a hexadecimal number If the Designated Root ID and the Designated Switch ID are the same the destination switch is th...

Page 161: ...Configuration command Default None Message port 1 is membership of uplink domain 2 Explanation The specified port already belongs to an uplink domain Inserted string 1 specified port number Inserted string 2 uplink domain number Solution Specify a port not belonging to an uplink domain or remove the port from an uplink domain Note z STP cannot be used on uplink ports STP port fast however is allow...

Page 162: ...fault state Prompt xg config Command syntax spanning tree priority 0 61440 no spanning tree priority Parameter z priority 0 61440 Sets the switch priority value It must be an integer divisible by 4096 Values can be set in the range of 0 to 61440 Command type Configuration command Default 32768 Message Priority is not step of 4096 Explanation The priority is not a multiple of 4096 Solution Specify ...

Page 163: ...t hello time Explanation An unsettable value was specified The settable range of hello time differs depending on the values of forward time and max age Solution Set a value which satisfies the conditions specified in this Section s Notes Note z If the hello time is short topology changes can be detected more quickly but STP traffic and STP processing overhead will increase z The settable range of ...

Page 164: ... receive BPDUs within this period the topology of the Spanning Tree will be recalculated Values can be set in the range of 6 to 40 seconds Command type Configuration command Default 20 seconds Message Can t set max age Explanation An unsettable value was specified The settable range of max age differs depending on the values of hello time and forward time Solution Set a value which satisfies the c...

Page 165: ...in the range of 4 to 30 seconds Command type Configuration command Default 15 seconds Message Can t set forward time Explanation An unsettable value was specified The settable range of forward time differs depending on the values of hello time and max age Solution Set a value which satisfies the conditions in this Section s Notes Note z The settable range of forward delay time differs depending on...

Page 166: ...mple Set the priority of port2 to 160 xg config interface port 2 xg config if spanning tree port priority 160 5 11 8 spanning tree port path cost Function Sets a path cost for each port Use the no form to return to the default setup Prompt xg config if or xg config agg Command syntax spanning tree port path cost 1 200000000 no spanning tree port path cost Parameter z port path cost 1 200000000 Set...

Page 167: ... path cost default 16bit 32bit 16bit IEEE802 1D 16bits will be used for the path cost The default path cost is 2 32bit IEEE802 1D 32bits will be used for the path cost The default path cost is 2000 Command type Configuration command Default 32bit Message The Setting becomes an availableness by doing REBOOT Explanation The settings changed will become valid when the system is restarted Solution To ...

Page 168: ...bles the portfast function Command type Configuration command Default None Message port 1 is membership of uplink domain 2 Explanation The specified port already belongs to an uplink domain Inserted string 1 specified port number Inserted string 2 uplink domain number Solution Specify a port not belonging to an uplink domain or remove the port from its uplink domain Note z Use this function only f...

Page 169: ...ning tree portfast bpdu guard 5 11 12 spanning tree portfast errdisable timeout Function Starts the timer that automatically releases a port from a shutdown state This function is only valid for ports in wherein the portfast function and the BPDU guard function is enabled This command is also used to specify a timer value Use the no form to return to the default setup Prompt xg config Command synt...

Page 170: ...o the default setup Prompt xg config if or xg config agg Command syntax spanning tree portfast bpdu filter no spanning tree portfast bpdu filter Parameter z portfast bpdu filter Enables the BPDU filter for the port specified Command type Configuration command Default None Note z This function is only valid for portfast enabled ports Example Enable BPDU filtering for port 2 xg config interface port...

Page 171: ...hip 1 default TAG agg port 1 2 3 4 5 6 port 1 2 3 4 5 6 7 8 9 10 UNTAG port 11 12 13 14 15 16 17 18 19 20 2 VLAN002 TAG port 1 2 3 3 VLAN003 UNTAG port 1 2 3 4 VLAN004 None Output form parameter is specified xg show vlan 2 Vlan Information 2007 01 22 14 35 25 VID 2 Vlan Description VLAN0002 Tag Ports Membership TAG port 1 2 3 z VID Displays the VLAN ID VID z Vlan Description Displays the descripti...

Page 172: ...th exceeded 256 characters Solution Specify a VLAN description consisting of up to 256 alphanumeric characters Can t add vlan Max entry over Explanation No more VLANs can be created The maximum VLAN entries 128 entries allowed are registered on the system Solution Delete unnecessary VLANs and reissue the command Can t delete vlan same pvid entry Explanation The VLAN cannot be deleted because the s...

Page 173: ...uration command Message duplicate vlan number 1 Explanation The specified VID was duplicated Inserted string 1 duplicated VID Solution Specify a unique VID Can t set vlan id Over max entry number 8 Explanation The maximum number of VID was exceeded Solution Specify no more than 8 VIDs and execute the command again VLAN 1 not configured Explanation The specified VLAN is not created Inserted string ...

Page 174: ...olution Assign the specified port not to be a member of an aggregation group cannot found agg port interface 1 Explanation The specified aggregation group is not found Inserted string 1 Aggregation group number Solution Check whether the specified aggregation group number is correct duplicate port number 1 Explanation The specified port number was duplicated Inserted string 1 specified switch port...

Page 175: ...configured 2 Explanation The specified VLAN was not created Inserted string 1 VID Inserted string 2 Port number Solution Create the VLAN first then reissue the command Note When this command is issued the port is registered as a member of the specified VLAN having no tag The frame having no tag is sent during egressing To change the rule during egressing to transfer tagged frames issue vlan member...

Page 176: ... the default VLAN Message VLAN 1 not configured 2 Explanation The specified VLAN was not created Inserted string 1 VID Inserted string 2 Port number Solution Create a VLAN first then reissue the command Can t remove vlan from port Same pvid entry 1 Explanation The specified VID cannot be deleted because it is identical to the default PVID Inserted string 1 Port number Solution Change the default P...

Page 177: ... vlan protocol id 0x05DD 0xFFFF Specify the VPID or TPID using a hexadecimal integer beginning with 0x It can be an integer in the range of 0x05DD to 0xFFFF Command type Configuration command Default 0x8100 Example Enter the interface edit mode for ports 1 to 3 and set the VPID or TPID to 0x2000 xg config interface port range 1 3 xg config if user vlan protocol id 0x2000 5 12 8 ingress filter no v...

Page 178: ...gged frames xg config interface port range 1 3 xg config if ingress filter tagged frame 5 12 10 ingress filter untagged frame Function Specifies that designated port VLAN untagged frames will be discarded Use the no form to disable frame discarding Prompt xg config if or xg config agg Command syntax ingress filter untagged frame no ingress filter untagged frame Parameter z untagged frame Discards ...

Page 179: ...th a space Up to 32 VLANs can be specified Command type Configuration command Default None Message Can t set vlan id Over max entry number 1 Explanation No more VLANs can be specified for collection The maximum allowed VLANs 32 have been specified Inserted string 1 Limit value Solution Delete VLANs whose information is no longer required then reissue the command Note z If a VID of an uncreated VLA...

Page 180: ... queue information for each priority There are four levels of output queues levels 0 to 3 A higher value has the higher output priority If this parameter is omitted all QoS information is displayed Command type Operation management command Output form xg show qos QoS Information 2007 01 22 12 12 15 Priority Output Queue Mapping Qos Priority 0 1 2 3 4 5 6 7 Output Priority 1 0 0 1 2 2 3 3 QoS Prior...

Page 181: ...g config interface port 1 3 xg config if qos default priority 1 5 13 3 qos map priority Function The system has four priority levels of output queues for frame transmission processing This command maps the frame priorities to the output queue levels Use the no form to reset the entire mapping information to the default setup Prompt xg config Command syntax qos map priority 0 7 output priority 0 3 ...

Page 182: ...lt priority are ignored Use the no form to disable DiffServ code control Prompt xg config Command syntax bridge diffserv tos ipv4 ipv6 no bridge diffserv tos Parameter z diffserv tos ipv4 ipv6 Enables Quality of Service using the DiffServ code point ipv4 Enables IPv4 Quality of Service ipv6 Enables IPv6 Quality of Service Command type Configuration command Default None Example Enable Quality of Se...

Page 183: ...based on strict priority scheduling Higher priority frames always precede those of lower priority drr Frames are forwarded based on deficit round robin DRR algorithm Minimum bandwidth for each output queue can be specified by qos bandwidth command drr strict Frames are forwarded based on the combination of strict priority scheduling and DRR algorithm Strict priority scheduling is used for output q...

Page 184: ...equal Message The set value is not step of 100 Explanation The specified the band width value is not an integer divisible by 100 Solution Sets a band width value with an integer divisible by 100 The total value exceeded 10000 Explanation The sum of the bandwidth values of each output queue is exceeds 10Gbps Solution Changes the bandwidth values so the total does not exceed 10Gbps Note z Residual b...

Page 185: ... type Operation management command Output form xg show mirror Mirror Information 2007 01 22 12 12 15 Monitored Port Rx Mirroring Port Port 1 Port 2 Monitored Port Tx Mirroring Port Port 1 Port 3 z Monitored Port Displays the port number of the monitored switch z Rx Mirroring Port Displays the destination port number for mirroring of frames received at the monitored port z Tx Mirroring Port Display...

Page 186: ...ntical port numbers for the monitored port rx mirroring port or tx mirroring port have been specified Solution Specify different port numbers by reviewing the monitored port rx mirroring port and tx mirroring port values then reissue the command Mirroring port 1 is a member of aggregation group Explanation The command was not executed since the port specified by rx mirroring port or tx mirroring p...

Page 187: ...registered multicast group information for the IGMP snooping configuration If vlan is omitted all of the VLANs configuration information is displayed Command type Operation management command Output form xg show ip snooping IGMP Snooping Information 2007 01 22 22 17 04 Global IGMP snooping Enabled Disabled vlan 1 IGMP snooping Enabled Disabled Registered group number 0 Current 32 Maximum Multicast...

Page 188: ...requency of query messages by the IGMP query function is displayed z IGMP snooping querier The operation state of IGMP query function is displayed Enabled The IGMP query function is enabled Disabled The IGMP query function is disabled z General Query interval The transmission interval in seconds of query messages sent by the IGMP query function is displayed z Querier IP address Source IP address o...

Page 189: ... Vlan Multicast Group Ver Member ports 1 225 0 0 1 2 port 1 5 2 225 0 0 2 2 port 1 5 5 15 2 ip snooping protocol Function Enables global IGMP snooping Use the no form to disable the snooping Prompt xg config Command syntax ip snooping protocol igmp no ip snooping protocol igmp Parameter z protocol igmp Enables global IGMP snooping for the device Command type Configuration command Default None Mess...

Page 190: ...ssage Global IGMP snooping is not enabled Explanation Global IGMP snooping on the device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then reissue the ip snooping vlan command Vlan id is not found vid 1 Explanation The specified VLAN was not created Inserted string 1 VID of the specified VLAN Solution Create a VLAN using the vlan command first then ...

Page 191: ... specified VLAN Solution Create a VLAN using the vlan command first then reissue the ip snooping vlan command IGMP snooping vlan 1 is not enabled Explanation IGMP snooping for the specified VLAN is disabled Inserted string 1 VID of the specified VID Solution Enable the IGMP snooping for the VLAN using the ip snooping vlan command first then reissue the ip snooping vlan max group command More than ...

Page 192: ...he device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then reissue the ip snooping vlan command Vlan id is not found vid 1 Explanation The specified VLAN was not created Inserted string 1 Specified VID Solution Create a VLAN using the vlan command first then reissue the ip snooping vlan command IGMP snooping vlan 1 is not enabled Explanation IGMP s...

Page 193: ...N to change z group member interval 60 600 Specifies the valid time period in seconds for the registered IP multicast group It is recommended group member interval be set by considering the message transmission interval of the multicast router connected to the system This interval is called the query interval and its default is 125 seconds in RFC The recommended value is as follows Group member in...

Page 194: ...one Message Global IGMP snooping is not enabled Explanation Global IGMP snooping on the device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then reissue the ip snooping vlan fast leave command Vlan id is not found vid 1 Explanation The specified VLAN was not created Inserted string 1 Specified VID Solution Create a VLAN using the vlan command first ...

Page 195: ...it Command type Configuration command Default 2 seconds Message Global IGMP snooping is not enabled Explanation Global IGMP snooping on the device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then reissue the ip snooping vlan last member query interval command Vlan id is not found vid 1 Explanation The specified VLAN was not created Inserted string ...

Page 196: ...snooping on the device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then reissue the ip snooping vlan send query count command Vlan id is not found vid 1 Explanation The specified VLAN was not created Inserted string 1 Specified VID Solution Create a VLAN using the vlan command first then reissue the ip snooping vlan send query count command IGMP sn...

Page 197: ...ddress can be 0 0 0 0 or within the range of 1 0 0 1 to 126 255 255 254 128 0 0 1 to 191 255 255 254 or 192 0 0 1 to 223 255 255 254 Command type Configuration command Default None Message Global IGMP snooping is not enabled Explanation Global IGMP snooping is disabled on the system Solution Enable global IGMP snooping using the ip snooping protocol command first then reissue the ip snooping vlan ...

Page 198: ...Ns other than the default VLAN Message Global IGMP snooping is not enabled Explanation Global IGMP snooping on the device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then execute the command again More than 128 total max group per system Explanation The registered number of multicast addresses allowed on the entire system exceeded the limit 128 add...

Page 199: ...stem Explanation The registered number of multicast addresses allowed on the entire system exceeded the limit 128 addresses Solution Reduce the maximum number of VLANs using a command such as ip snooping vlan max group or disable the IGMP snooping function for other VLANs IGMP snooping vlan 1 is not enabled Explanation IGMP snooping is not valid on specified VLAN ID Inserted string 1 Specified VID...

Page 200: ...ration command Default None Message Global IGMP snooping is not enabled Explanation Global IGMP snooping on the device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then execute the command again IGMP snooping vlan 1 is not enabled Explanation IGMP snooping of the specified VLAN is disabled Inserted string 1 Specified VID Solution Enable IGMP snoopin...

Page 201: ...t xg config vlan Command syntax ip snooping group member interval 60 600 no ip snooping group member interval Parameter z group member interval 60 600 Specifies the valid time period in seconds for the registered IP multicast group It is recommended group member interval be set by considering the message transmission interval of the multicast router connected to the system This interval is called ...

Page 202: ... leave Enables the Fast Leave mode Command type Configuration command Default None Message Global IGMP snooping is not enabled Explanation Global IGMP snooping on the device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then execute the command again IGMP snooping vlan 1 is not enabled Explanation IGMP snooping of the specified VLAN is disabled Inser...

Page 203: ... member interval 1 9 Specifies the monitoring time in seconds to check for member exit Command type Configuration command Default 2 seconds Message Global IGMP snooping is not enabled Explanation Global IGMP snooping on the device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then execute the command again IGMP snooping vlan 1 is not enabled Explanat...

Page 204: ...ation command Default 2 Message Global IGMP snooping is not enabled Explanation Global IGMP snooping on the device is disabled Solution Enable global IGMP snooping using the ip snooping protocol command first then execute the command again IGMP snooping vlan 1 is not enabled Explanation IGMP snooping of the specified VLAN is disabled Inserted string 1 Specified VID Solution Enable IGMP snooping on...

Page 205: ... the source IP address of Query messages to be sent by the IGMP querier The IP address can be 0 0 0 0 or within the range of 1 0 0 1 to 126 255 255 254 128 0 0 1 to 191 255 255 254 or 192 0 0 1 to 223 255 255 254 Command type Configuration command Default None Message Global IGMP snooping is not enabled Explanation Global IGMP snooping is disabled on the system Solution Enable global IGMP snooping...

Page 206: ...nformation does not include preambles framing bytes Set the terminal screen size to 50 columns by 12 lines or more when issuing the monitor command If the terminal screen size is too small the following message is displayed terminal line is too small or terminal width is too short The number of statistics display lines vary depending upon the counter used If the line length exceeds the limit the f...

Page 207: ... 999999K 1234567890T 1234567890T 7 Down 0 0 0 0 8 Down 0 0 0 0 ESC exit F refresh U page up D page down L page left R page right continues Traffic Statistics Current Frame Bytes 2007 01 22 12 12 15 Port Description port_name1 port_name2 port_name3 port_name4 port_name5 port_name6 port_name7 ESC exit F refresh U page up D page down L page left R page right z Port Displays port numbers Statistics fo...

Page 208: ...M port_name3 4 Up Learn 1234567890T 1234567890T port_name4 5 Up Forward 1234567890 1234567890 port_name5 6 Up Forward 1234567890 1234567890 port_name6 7 Down 1234567890 1234567890 port_name7 8 Down 1234567890 1234567890 ESC exit F refresh U page up D page down L page left R page right z Port Same as the display description for the current option z Link State STP State Same as the display descripti...

Page 209: ...99 1234567890T 256T 256T ESC exit F refresh U page up D page down L page left R page right continues Traffic Statistics Current Frame Counts 2007 01 22 12 12 15 Rx Mcast Port Description Counts 1234567890K port_name1 0 port_name2 1234567890K port_name3 256M port_name4 256G port_name5 256T ESC exit F refresh U page up D page down L page left R page right z Port Displays the port numbers Statistics ...

Page 210: ...rward 1234567890K 1234567890K 1234567890K 1234567890K 7 Down 1234567890K 1234567890K 1234567890K 1234567890K 8 Down 1234567890K 1234567890K 1234567890K 1234567890K ESC exit F refresh U page up D page down L page left R page right continues Traffic Statistics Total Frame Counts 2007 01 22 12 12 15 Port Description port_name1 port_name2 port_name3 port_name4 port_name5 port_name6 port_name7 ESC exit...

Page 211: ...rward 1234567890G 25690G 25690G 25690G 25690G 6 Up Forward 1234567890T 25690T 25690T 25690T 25690T 7 Down 0 0 0 0 0 8 Down 0 0 0 0 0 ESC exit F refresh U page up D page down L page left R page right continues Framesize Traffic Statistics Current Frame Counts 2007 01 22 12 12 15 FrameSize Port Description 1024 1518 1234567890K port_name1 0 port_name2 1234567890K port_name3 25690 port_name4 25690G p...

Page 212: ... FrameSize FrameSize FrameSize Framesize STP State 0 64 65 127 128 255 256 511 512 1023 1 Up Discard 1234567890K 1234567890K 1234567890K 1234567890K 1234567890K 2 Down 0 0 0 0 0 3 Up Discard 1234567890K 1234567890K 1234567890K 1234567890K 1234567890K 4 Up Learn 1234567890M 25690M 25690M 25690M 25690M 5 Up Forward 1234567890G 25690G 25690G 25690G 25690G 6 Up Forward 1234567890T 25690T 25690T 25690T...

Page 213: ...34567890K 1234567890 1234567890 1234567890 1234567890 1234567890 2 0 0 0 0 0 0 0 3 1234567890K 1234567890K 1234567890K 1234567890K 1234567890K 1234567890K 1234567890K 4 1234567890M 256890M 256890M 256890M 256890M 256890M 256890M 5 1234567890G 256890G 256890G 256890G 256890G 256890G 256890G 6 1234567890T 256890T 256890T 256890T 256890T 256890T 256890T 7 0 0 0 0 0 0 0 8 0 0 0 0 0 0 0 ESC exit F refr...

Page 214: ...M 256890M 256890M 256890M 256890M 256890M 256890M 5 1234567890G 256890G 256890G 256890G 256890G 256890G 256890G 6 1234567890T 256890T 256890T 256890T 256890T 256890T 256890T 7 0 0 0 0 0 0 0 8 0 0 0 0 0 0 0 ESC exit F refresh U page up D page down L page left R page right continues Qos Priority Traffic Statistics Total Frame Bytes 2007 01 22 12 12 15 Priority 7 Port Description Bytes 1234567890 por...

Page 215: ... 1 1234567890K 1234567890K 1234567890 1234567890 1234567890 1234567890 1234567890 2 0 0 0 0 0 0 0 3 1234567890K 1234567890K 1234567890K 1234567890K 1234567890K 1234567890K 1234567890K 4 1234567890M 256890M 256890M 256890M 256890M 256890M 256890M 5 1234567890G 256890G 256890G 256890G 256890G 256890G 256890G 6 1234567890T 256890T 256890T 256890T 256890T 256890T 256890T 7 0 0 0 0 0 0 0 8 0 0 0 0 0 0 ...

Page 216: ...90M 256890M 256890M 256890M 256890M 256890M 256890M 5 1234567890G 256890G 256890G 256890G 256890G 256890G 256890G 6 1234567890T 256890T 256890T 256890T 256890T 256890T 256890T 7 0 0 0 0 0 0 0 8 0 0 0 0 0 0 0 ESC exit F refresh U page up D page down L page left R page right continues Qos Priority Traffic Statistics Total Frame Counts 2007 01 22 12 12 15 Priority 7 Port Description Counts 1234567890...

Page 217: ...ESC exit F refresh U page up D page down L page left R page right z VID Displays the VID of the VLAN set for statistics collection Statistics of each VLAN are displayed on one line Specify the VLAN to collect its statistics using the vlan statistics collection command z Rx Frame Bytes Displays the accumulated byte count of frames received at the specified VLAN after the startup of this command usi...

Page 218: ... 0 ESC exit F refresh U page up D page down L page left R page right z VID Displays the VID of the VLAN set for statistics collection Statistics for each VLAN are displayed on one line Specify the VLAN to collect its statistics using the vlan statistics collection command z Rx Frame Counts Displays the accumulated number of frames received at the specified VLAN after the startup of this command us...

Page 219: ...Forward Rx Tx 1234567890T 25690T 25690T 25690T 7 Down Rx 0 0 0 0 8 Down Rx 0 0 0 0 ESC exit F refresh U page up D page down L page left R page right continues Dataflow Statistics Current Counts 2007 01 22 12 12 15 Full Drop VLAN Drop Port Description Counts Counts 1234567890 1234567890 port_name1 0 0 port_name2 1234567890K 1234567890K port_name3 25690M 25690M port_name4 25690G 25690G port_name5 25...

Page 220: ...displayed Output form if total is specified xg monitor dataflow total Dataflow Statistics Total Counts 2007 01 22 12 12 15 Port Link State Flow Ctl Forward Flood Rx Pause Tx Pause STP State Mode Counts Counts Counts Counts 1 Up Discard Rx Tx 1234567890 1234567890 1234567890 1234567890 2 Down Rx 0 0 0 0 3 Up Discard Rx Tx 1234567890K 1234567890K 1234567890K 1234567890K 4 Up Learn Rx Tx 1234567890M ...

Page 221: ...2 34 34 56 78 90 6 123 12 34 34 56 78 90 7 123 12 34 34 56 78 90 8 123 12 34 34 56 78 90 ESC exit F refresh U page up D page down L page left R page right continues Error Statistics Current Counts 2007 01 22 12 12 15 Port Description port_name1 port_name2 port_name3 port_name4 port_name5 port_name6 port_name7 ESC exit F refresh U page up D page down L page left R page right z Port Displays the por...

Page 222: ...ts 2007 01 22 12 12 15 Port Rx Rx Tx Rx Tx Rx Tx Rx Tx Rx Total CRC Over Under Fragment Jabber Align Lost 1 1234567890 1234567890 1234567890 1234567890 1234567890 1234567890 1234567890 2 123 12 34 34 56 78 90 3 123 12 34 34 56 78 90 4 123 12 34 34 56 78 90 5 123 12 34 34 56 78 90 6 123 12 34 34 56 78 90 7 123 12 34 34 56 78 90 8 123 12 34 34 56 78 90 ESC exit F refresh U page up D page down L page...

Page 223: ...cs for each port z Port Displays the port numbers z Link State STP State Displays the port state in the Link State or STP State format The Link State may indicate one of the following link states Down The port link is down Up The port link is up The STP State displays the current port status based on the STP Spanning Tree Protocol Note that the STP State is not displayed if the Link State is down ...

Page 224: ... port state in the Link State or STP State format The Link State may indicate one of the following link states Down The port link is down Up The port link is up The STP State displays the current port status based on the STP Spanning Tree Protocol Note that the STP State is not displayed if the Link State is down For port status details see Spanning Tree Protocol Port States z Tx Frame Counts Disp...

Page 225: ...displays the current port status based on the STP Spanning Tree Protocol Note that the STP State is not displayed if the Link State is down For port status details see Spanning Tree Protocol Port States z FrameSize 0 64 Displays the accumulated number of 64 byte frames sent or received at each port after the system startup z FrameSize 65 127 Displays the accumulated number of 65 to 127 byte frames...

Page 226: ... Total Frame Bytes 2007 01 22 19 46 24 No 1 Port 1 Priority 0 Bytes 26560 Priority 1 Bytes 145366784370 Priority 2 Bytes 234554675423423 Priority 3 Bytes 34346331246523 Priority 4 Bytes 1234114235453466 Priority 5 Bytes 0 Priority 6 Bytes 0 Priority 7 Bytes 0 Port Description port_name1 No 2 z No Displays statistics for each port z Port Displays the port numbers z Priority 0 Bytes to Priority 7 By...

Page 227: ... 01 22 19 49 53 No 1 Port 1 Priority 0 Counts 12345678901234567890 Priority 1 Counts 2354235234 Priority 2 Counts 235434250 Priority 3 Counts 12314657 Priority 4 Counts 235477689352374 Priority 5 Counts 246364564564546 Priority 6 Counts 1234453456 Priority 7 Counts 1436434623 Port Description port_name1 No 2 z No Displays statistics for each port z Port Displays the port numbers z Priority 0 Count...

Page 228: ...7 01 22 19 55 34 No 1 VID 40 Rx Frame Byte 0 Rx NonUcast Byte 0 No 2 z No Displays statistics for each VLAN z VID Displays the VID of the VLAN set for statistics collection Specify the VLAN for statistics collection using the vlan statistics collection command z Rx Frame Bytes Displays the accumulated byte count of frames received at the specified VLAN after the startup of this command using a 10 ...

Page 229: ... Frame Counts 2007 01 22 19 58 31 No 1 VID 40 Rx Frame Counts 0 Rx NonUcast Counts 0 No 2 z No Displays statistics for each VLAN z VID Displays the VID of the VLAN set for statistics collection Specify the VLAN for statistics collection using the vlan statistics collection command z Rx Frame Counts Displays the accumulated count of frames received at the specified VLAN after the system startup usi...

Page 230: ...Link State is down For port status details see Spanning Tree Protocol Port States z Flow Ctl Mode Displays the flow control setup for each port Rx Tx Both transmission and reception of pause frames are enabled Rx Only the reception of pause frames is enabled z Forward Counts Displays the accumulated number of frames forwarded normally among the unicast frames received at each port after the system...

Page 231: ...ding the VLAN tag after the system startup z Rx Tx Under Displays the accumulated number of transmission frames whose size is less than 64 bytes after the system startup z Rx Tx Fragment Displays the accumulated number of FCS Frame Check Sequence error frames whose size is less than 64 bytes sent or received after the system startup z Rx Tx Jabber Displays the accumulated number of FCS Frame Check...

Page 232: ...c counts z VLAN traffic statistics vlan traffic bytes and vlan traffic counts z Data flow statistics dataflow z Error traffic statistics error Prompt xg Command syntax clear statistics Command type Operation management command Note z If this command is issued during execution of the monitor command in current mode the monitor command may temporarily display incorrect statistics If this occurs reis...

Page 233: ...rsion v1 v2c SNMP Manager Information Displays the current settings of the SNMP manager z No 1 Indicates the number of the SNMP manager displayed A maximum of four may be defined z Host Displays the host name or the IP address of the SNMP manager z Community Displays the community name of the SNMP manager SNMP Trap Manager Information Displays the destination SNMP trap being set from the system z ...

Page 234: ...o 255 alphanumeric characters No need to enclose a parameter in quotes if it contains a blank space Command type Configuration command Default None Message SYSTEM LOCATION is too long Explanation The location name specified by SYSTEM LOCATION exceeded the length limit Solution Reduce the length of system location name and reissue the command SYSTEM LOCATION cannot be used Explanation An illegal ch...

Page 235: ...aracters No need to enclose a parameter in quotes if it contains a blank space Command type Configuration command Default None Message SYSTEM CONTACT is too long Explanation The contact name specified by SYSTEM CONTACT exceeded the length limit Solution Reduce the length of the system contact name and reissue the command SYSTEM CONTACT cannot be used Explanation An illegal character was used in th...

Page 236: ...o long Explanation The specified host name exceeded the length limit Solution Reduce the host name length then reissue the command COMMUNITY NAME is too long Explanation The specified community name exceeded the length limit Solution Reduce the community name length then reissue the command COMMUNITY NAME cannot be used Explanation An illegal character was used in the community name Solution Revie...

Page 237: ...ved An incorrect host name was specified Inserted string 1 Specified host name Solution Review the host name then reissue the command by specifying the correct hostname or IP address Hostname is too long Explanation The specified host name exceeded the length limit Solution Reduce the host name length then reissue the command COMMUNITY NAME is too long Explanation The specified community name exce...

Page 238: ...story Information Displays the current RMON history settings z History 1 Indicates an index number that identifies the history group historyControlTable z Port Displays the port number for the collected RMON history group information z Buckets Indicates the stored data unit count for the RMON history group z Interval Indicates an interval in seconds for collecting the RMON history group data z Own...

Page 239: ... Event does not occur if the value is 0 z Owner Displays the owner name of the RMON alarm group Event Information Displays the contents of the RMON event z Event 1 Indicates an index number that identifies the RMON event entry z Event Type log Displays the status of the RMON log entry creation when a RMON event occurred Enabled A RMON log entry was created Disabled No RMON log entry was created Tr...

Page 240: ...ne Message RMON collection history can register up to 40 Explanation The RMON history group data entry registration limit was exceeded Solution Delete unnecessary RMON history groups then reissue the command RMON collection history 1 is not set Explanation An attempt was made to delete a non existing RMON history group Inserted string 1 Index number Solution Review the specified index then reissue...

Page 241: ...r limit or the rising threshold The EVENT NUM specifies an index for the event to be executed if the rising threshold is exceeded If EVENT NUM is omitted event will not occur z falling threshold VALUE EVENT NUM The VALUE specifies the threshold lower limit or the falling threshold The EVENT NUM specifies an index for the event to be executed if the falling threshold is exceeded If EVENT NUM is omi...

Page 242: ...ion It fails to set RMON because the command was executed while the SNMP manager was accessing Solution While the SNMP is not accessing execute the no command and set RMON again Example Set RMON alarms xg config rmon alarm 10 1 3 6 1 2 1 16 1 1 1 7 1 interval 60 absolute rising threshold 15 1 falling threshold 0 1 owner admin ...

Page 243: ...The RMON event group data entry registration limit was exceeded Solution Delete unnecessary RMON events then reissue the command RMON event 1 is not set Explanation An attempt to delete a non existing RMON event group occurred Inserted string 1 Specified index Solution Review the specified index then reissue the command OWNERNAME is too long Explanation The ownername length limit was exceeded Solu...

Page 244: ... SNMP manager was accessing Solution While the SNMP is not accessing execute the no command and set RMON again Note An RMON event entry must be created using the rmon event command for log creation or SNMP trap notification to occur Example Set RMON events xg config rmon event 1 log trap public description event test1 owner admin xg config rmon event 2 log description event test2 owner admin ...

Page 245: ...R NAME L good port 5 VENDER NAME S good port 6 VENDER NAME L good port 7 VENDER NAME S good port 8 VENDER NAME L good port 9 VENDER NAME S good port 10 VENDER NAME L good port 11 VENDER NAME S good port 12 VENDER NAME L good port 13 VENDER NAME S good port 14 VENDER NAME L good port 15 VENDER NAME S good port 16 VENDER NAME L good port 17 VENDER NAME S good port 18 VENDER NAME L good port 19 VENDE...

Page 246: ...ys the fan operational status Rear Fan 0 Displays the operational status of rear fan 0 Rear Fan 1 Displays the operational status of rear fan 1 PWR 0 Fan Displays the operational status of the fan mounted in power supply 0 PWR 1 Fan Displays the operational status of the fan mounted in power supply 1 z XFP Displays the XFP status for each port port xx yy zz Displays the XFP status of port xx The v...

Page 247: ...ystem Name hostname Displays the system name host name of the device z System Location Displays the installation location of the device z System Contact Displays the contact information of the device z Default Banner Displays the default banner string displayed during user login z Startup Time Displays the date and time when the system was started up z Startup config Modified Displays the date and...

Page 248: ...Once the system is restarted the new settings appear as the Summer time setting z RS232C Baud Rate Displays the serial RS 232C baud rate z Management LAN Information Displays the current status of the management LAN interface MAC Address Displays the MAC address IP Address Mask Displays the IP address and the subnet mask bit length Default Gateway Displays the IP address of the default gateway DNS...

Page 249: ...ounted port 11 unmounted port 12 unmounted port 13 unmounted port 14 unmounted port 15 unmounted port 16 unmounted port 17 unmounted port 18 unmounted port 19 unmounted port 29 unmounted Output form parameter is specified xg show optical module sensor dbm Optical Module Monitoring Data 2008 06 23 12 16 19 Tx power Rx power Temperature dBm dBm degree C port 1 2 837 2 261 27 0 port 2 2 683 3 224 35 ...

Page 250: ...ssages that report on the system status of the device warning Initializes the WARNING log The WARNING log stores warning WARNING messages that report on the system status of the device error Initializes the ERROR log The ERROR log stores error ERROR messages that report on the system status of the device critical Initializes the CRITICAL log The CRITICAL log stores critical CRITICAL messages that ...

Page 251: ...INFO P4001 cmd exec 3388 show log info Month Hours Min Sec Function name Severity Message text Day The device s MessageID Host name z Month Displays the month when the event occurred z Day Displays the day when the event occurred z Hours Min Sec Displays the time hours minutes and seconds when the event occurred z Host name of the device Displays the host name of the XG2000 series z Function name ...

Page 252: ...nformation can be received by specifying syslogd r z info warning error critical Specifies the type of system logs to be transferred info Transfers the CRITICAL ERROR WARNING and INFO messages warning Transfers the CRITICAL ERROR and WARNING messages error Transfers the CRITICAL and ERROR messages critical Transfers the CRITICAL level messages z udp tcp Selects a protocol for transmission of syste...

Page 253: ...aintenance Command type Operation management command Output form if current is specified xg show maintenance Maintenance Information 2007 01 22 20 58 17 NO Type Occurred Time 1 system dump 2007 01 22 18 21 23 2 system dump dump switch 2007 01 22 19 57 58 3 system dump machine check 2007 01 22 19 58 14 z NO Displays the maintenance information number The oldest maintenance information is displayed ...

Page 254: ... on the TFTP server Not allowed to overwrite existing files The file in the TFTP server cannot be overwritten Could not open requested file for reading There are no files in the TFTP server File already exists The specified file already exists on the TFTP server Unknown transfer ID The process is interrupted due to the timeout Solution Take actions by following the message instructions sent from t...

Page 255: ...ormation to the host1 TFTP server by naming it as the mainte_collected date and time file Compare the file size of the maintenance information displayed on the screen to the size of the file stored on the TFTP server xg save maintenance xg show maintenance Maintenance Information 2007 01 22 20 58 17 NO Type Occurred Time 1 system dump 2007 01 22 18 21 23 2 system dump dump switch 2007 01 22 20 57 ...

Page 256: ...pecify the username 16 or less characters lost connection Explanation It failed to access to specified SSH server Solution Specify the correct host name IP address or username No more remote host public key can be registered Explanation Specified remote host public key could not be registered Solution Delete a public key by using clear ssh rhost key command then execute the command again 1 No such...

Page 257: ... status of SSH server and whether there is no problem in network connection to the SSH server 1 invalid user name Explanation Specified username is invalid Inserted string 1 Specified username Solution Specify the correct username Note z scp supports only password authentication and this device can register up to 10 public keys of SSH servers z Execute clear ssh rhost key command to delete a regis...

Page 258: ... memory on the device Prompt xg Command syntax clear maintenance Command type Operation management command Note z Issue the clear maintenance command only after checking for a successful file transfer to the remote server using the tftp put maintenance or scp put maintenance command Example Clear the maintenance information from non volatile memory xg clear maintenance ...

Page 259: ...k the file name for an error Reading the file failed Explanation The specified file could not be read Solution Check that the file is read enabled Checksum error 1 in the file Explanation A data error was detected in the specified file Inserted string 1 Firmware configuration module Solution Check the file for an error in its contents If the file contents are OK an error may have occurred during f...

Page 260: ...en requested file for reading The file does not exist on the TFTP server File already exists There are files in the TFTP server Unknown transfer ID Process will be aborted in time out Solution Take actions by following the message instructions sent from the TFTP server tftp write No space left on device Explanation The non volatile memory on the device has insufficient work area A portion of the f...

Page 261: ...work connection to the SSH server ssh connect to host 1 port 22 Network is unreachable Explanation It failed to access to specified SSH server Inserted string 1 Specified IP address or host name Solution Specify the correct IP address or host name Check the setting and status of SSH server and whether there is no problem in network connection to the SSH server ssh connect to host 1 port 22 Connect...

Page 262: ...ost1 firm_upd_file Update the firmware directly from the SSH server xg update system scp foo ssh host1 firm_upd_file host1 s password After the firmware was updated successfully check the firmware version E L and make sure that the system firmware was set to new using the show system information command Also check the Next Startup Firmware value This firmware image will be booted during the next s...

Page 263: ...ve completed successfully The firmware partition is unusable Solution Update the firmware again If the error recurs contact the sales representative 1 in SRAM is invalid Explanation An inconsistency in non volatile SRAM memory data was detected Inserted string 1 Abnormal memory contents Solution Restart the system using the reset command Then retry the firmware update If the error recurs contact t...

Page 264: ...XG2000 series User s Guide 264 315 All Rights Reserved Copyright C PFU LIMITED 2009 Chapter 6 Managing the Device This chapter describes the management of the device ...

Page 265: ...tion 2007 01 25 12 16 19 Temperature Internal good Power Supply PWR 0 AC good PWR 1 AC good Voltage Voltage good Fan Rear Fan 0 good normal speed Rear Fan 1 good normal speed PWR 0 Fan good PWR 1 Fan good XFP port 1 VENDER NAME S good port 2 VENDER NAME L good port 3 VENDER NAME S good port 4 VENDER NAME L good port 5 VENDER NAME S good port 6 VENDER NAME L good port 7 VENDER NAME S good port 8 VE...

Page 266: ...th the power supply unit 0 installed check that the unit is properly installed z Off Line Power is not reaching the power supply unit 0 Check the AC inputs z Alarm Detected A power supply error was detected Replace the unit PWR 1 status of power supply unit 1 Displays the status of power supply unit 1 The messages and actions to take are the same as those described for power supply unit 0 Voltage ...

Page 267: ...orking properly PWR 1 Fan fan installed in power supply unit 1 Status of the fan installed in power supply unit 1 The messages are the same as those described for PWR 0 fan XFP Displays the vender name PHY type and status for each XFP The vender name is read from the XFP device while the PHY type is based of XFP MSA4 5 port xx status of port xx The number of ports are depend on the device z Good T...

Page 268: ...e 2007 01 21 22 08 12 Firmware 2 E10L11 Z01 2007 02 22 19 27 12 Updated Time 2007 02 23 10 57 53 Current Firmware 2 Next Startup Firmware 2 Boot Loader E10L10 Z01 Timezone gmt 0900 Next Boot gmt 800 Summer Time none Next Boot M4 1 0 0200 M10 5 0 0200 0100 RS232C Baud Rate 9600 Management LAN Information MAC Address 0080 17c2 0500 IP Address Mask 192 168 41 22 24 Default Gateway 192 168 41 1 DNS Se...

Page 269: ...cessary z Message ID Message ID is displayed in a form that begins with an S or P S A message that receives SNMP trap notification P A message that does not receive SNMP trap notification Message number Displays a unique number used to identify a message within the device Verify the meaning of the message and actions to take based on the message number z Message text Displays message text 6 1 3 2 ...

Page 270: ...3 show remote host Aug22 10 08 02 xg xgsh XG INFO P4002 cmd result 893 success Aug22 10 08 34 xg ntp XG INFO P8602 time server 192 168 41 1 offset 0 000543 sec Aug22 10 08 34 xg xgsh XG INFO P4002 cmd result 893 success Aug22 10 10 34 xg ntp XG INFO P8602 time server 192 168 41 1 offset 0 000660 sec Aug22 10 45 32 xg xgsh XG INFO P4001 cmd exec 592 exit Aug22 10 45 32 xg xgsh XG INFO P4002 cmd res...

Page 271: ...ation startup config file to the SSH server host2 as filename start_conf xg show startup config scp foo host12 start_conf host2 s password 3 Check that the size of configuration file uploaded to a remote server is the same as that of the source configuration file 6 2 3 Downloading a Configuration File This section describes the procedure for downloading the configuration file from a remote server ...

Page 272: ... the TFTP server host1 xg update system tftp host1 XF10100 In the following example the firmware is updated using the firmware file XF10100 stored on the SSH server host2 xg update system scp foo host2 XF10100 remote host2 s password 3 Upon successful completion of the firmware update verify the version number of the updated firmware E L changed using the show system information command During the...

Page 273: ...rmware Information Firmware 1 E10L10 Z01 2007 01 21 18 42 52 Updated Time 2007 01 21 22 08 12 Firmware 2 E10L11 Z01 2007 02 22 19 27 12 Updated Time 2007 02 23 10 57 53 Current Firmware 2 Next Startup Firmware 2 Boot Loader E10L10 Z01 3 Using the boot system command change the Next Startup Firmware image Using the show system information command again check that the Next Startup Firmware changed x...

Page 274: ...occurred If an unrecoverable error including a system or subsystem failure occurred in the device the system automatically saves maintenance information and restarts the system operations If a system failure occurred a system dump file and a process dump file are generated z System logs and SNMP traps After the system restarts a system log entry is generated to indicate that a system subsystem fai...

Page 275: ...tem dump Dump switch 2007 01 22 18 21 23 The maintenance information that was saved by the dump switch is represented by system dump Dump switch under the Type column z Extracting maintenance information Using the tftp put maintenance or scp put maintenance command forward the maintenance information to a remote server z Contact the sales representative 6 4 3 Procedure for Extracting Maintenance I...

Page 276: ...XG2000 series User s Guide 276 315 All Rights Reserved Copyright C PFU LIMITED 2009 Chapter 7 Troubleshooting This chapter describes how to solve problems that might be encountered when using the device ...

Page 277: ... be selected by following the procedure described in Selecting Firmware If the system fails to start up select the alternate firmware for reboot by executing the following sequence immediately after turning on the device z Connect the device to an active serial terminal z Turn on the device z Hold down the key and the following message will appear on the serial terminal screen Preparing to boot z ...

Page 278: ...rompt enter the following command XG_LOADER clear setup When Step 2 is executed following Step 1 all settings in the device are re initialized The system then restarts Entering the clear setup command displays the following message Are you sure to continue y n Explanation If the response is y or Y the device s all settings are reset to the factory defaults and the system restarts To cancel the pro...

Page 279: ...XG2000 series User s Guide 279 315 All Rights Reserved Copyright C PFU LIMITED 2009 APPENDICES ...

Page 280: ...ribed in Format of Log Message Message numbers each starting with an S are events that received SNMP trap notifications Message numbers each starting with a P are events that did not receive SNMP trap notifications The following table lists the abbreviated function names and message numbers Abbreviated function name Message number range Description env 0 999 Health monitoring kernel 1000 1999 Basi...

Page 281: ...tected Explanation A power supply error was detected z Inserted string 1 Power supply unit number Solution Replace the power supply unit S0104 WARNING PWR 1 is Off Line Explanation AC power is not reaching one of the power supply units z Inserted string 1 Power supply unit number Solution Check the AC cable and plugs P0105 INFO PWR 1 is On Line Explanation Power was restored to the power supply un...

Page 282: ...d string 1 The port number of the installed XFP P0114 INFO port 1 Plug Out Explanation An XFP was removed z Inserted string 1 The port number of the XFP removed P0120 INFO Fan Speed was changed into high speed Explanation The fan speed changed from normal to high speed P0121 INFO Fan Speed was changed into normal speed Explanation The fan speed changed from high to normal speed S0122 ERROR port 1 ...

Page 283: ...D Severity Message Explanation Solution S1000 CRITICAL Abnormal reset occurred WatchDog Reset code 1 Explanation The fault monitor control detected an error and rebooted the device z Inserted string 1 Additional information that indicates the cause of the reset Solution Obtain maintenance information using the tftp put maintenance or scp put maintenance command after restarting the system then not...

Page 284: ...ailure occurred on the switch chip communication port The port was disabled z Inserted string 1 Port number Solution Note the message contents and contact the sales representative S2105 ERROR Tag Memory MBE detected 1 Explanation An uncorrectable error was detected in the switch chip z Inserted string 1 Port number Solution Note the message contents and contact the sales representative S2106 ERROR...

Page 285: ...etected 1 Explanation An uncorrectable error was detected in the VLAN management table It is automatically corrected by hardware z Inserted string 1 Supplementary code for the error Solution If the same message reappears after restarting the switch note the message contents and contact the sales representative S2204 WARNING Too Many VLAN Table MBE Errors Reset Switch LSI Explanation An uncorrectab...

Page 286: ...ative S2212 WARNING Output Queue SBE detected 1 Explanation A correctable error was detected in the switch chip It is automatically corrected by hardware z Inserted string 1 Supplementary code for the error Solution Note the message contents and contact the sales representative S2213 WARNING Too Many Output Queue SBE Errors LOG Disabled Explanation A correctable error was repeatedly detected in th...

Page 287: ... event is disabled Solution Note the message contents and contact the sales representative S2221 WARNING MAC Table SBE detected 1 Explanation A correctable error was detected in the switch chip It is automatically corrected by hardware z Inserted string 1 Supplementary code for the error Solution If the same message reappears after restarting the switch note the message contents and contact the sa...

Page 288: ... status changed to link up S3004 WARNING 1 detected storm drop Explanation A broadcast storm was detected z Inserted string 1 Information on the port that dropped broadcast frames Solution A loop topology may exist on the network Review the network configuration S3005 WARNING 1 detected port security violation Explanation A violating packet was detected by Port Security enabled z Inserted string 1...

Page 289: ...onfigured as a member of a link aggregation group z Inserted string 1 Information on the removed port link status information was sent z Inserted string 2 Information on the monitored port that was removed P3200 INFO Learned an IGMP multicast router automatically vlan 1 agg port 2 Explanation IGMP snooping learned a multicast router z Inserted string 1 VLAN ID z Inserted string 2 Learned aggregati...

Page 290: ...n be registered using the relevant VLAN z Inserted string 2 VLAN ID Solution Increase the maximum number of groups using the ip snooping vlan max group command P3211 INFO IGMP snooping has added multicast group address group 1 vlan 2 agg port 3 Explanation IGMP snooping added a multicast group MAC address z Inserted string 1 Registered IP group address z Inserted string 2 Registered VLAN ID z Inse...

Page 291: ...r assigned to the deleted multicast router P3218 INFO IGMP snooping has deleted multicast group address of mrouter group 1 vlan 2 port 3 Explanation IGMP snooping deleted a multicast group MAC address from a multicast router port z Inserted string 1 Deleted IP group address z Inserted string 2 Deleted VLAN ID z Inserted string 3 Port number assigned to the deleted multicast router P3219 WARNING Ca...

Page 292: ...uccessfully completed P3305 INFO Line has connected line ID 1 Explanation The telnet or SSH terminal was connected z Inserted string 1 Terminal ID P3306 INFO startup config end none Explanation The startup config file was not found P3307 INFO startup config end error Explanation Startup config file processing failed P3308 INFO cmd result startup skip Explanation Since the attempt to execute the pr...

Page 293: ...g down 1 Explanation A BPDU was received on a Port Fast enabled port z Inserted string 1 Name of the port that received the BPDU Solution Review the port connection P4504 WARNING Invalid Forward delay time relationship 2 1 1 2 Explanation The setting of STP Forward Delay is invalid z Inserted string 1 Attempted Forward Delay value change z Inserted string 2 The current Max Age value Solution Check...

Page 294: ...e link aggregation A 2 9 sys Maintenance Support Function 7400 7499 Message ID Severity Message Explanation Solution P7400 INFO Dump configuration succeeded Explanation The maintenance support function was successfully initialized S7410 WARNING Could not save a system dump file Explanation An error occurred while storing the system dump file Solution Note the message contents and contact the sales...

Page 295: ...ing the tftp put maintenance or scp put maintenance command then take note of the message content before contacting the sales representative A 2 10 update Firmware Update 7500 7999 Message ID Severity Message Explanation Solution S7500 INFO init firmup New firmware 1 is running Explanation New updated firmware was initialized z Inserted string 1 Firmware version information S7501 INFO init firmup ...

Page 296: ...on information z Inserted string 2 Boot loader version information S7620 ERROR firm update failed reading file error Explanation An error occurred while updating firmware failed to read the specified file Solution Check whether the specified file is readable S7621 CRITICAL firm update failed reading FlashROM error boot loader Explanation An error occurred while updating firmware Solution Reattempt...

Page 297: ...update failed SRAM access error Explanation An error occurred while updating firmware Solution Reattempt the update process If the message is repeatedly displayed note the message contents and contact the sales representative S7630 CRITICAL firm update failed SRAM data error invalid firmware update information Explanation An error occurred while updating firmware Solution Reattempting the update p...

Page 298: ...ng threshold delta z Inserted string 4 Value of MIB object to be monitored z Inserted string 5 Upper threshold of MIB object to be monitored S8502 INFO RMON alarm by falling threshold index 1 OID 2 sample 3 value 4 falling threshold 5 Explanation The current sampled value was less than the lower threshold defined by the rmon alarm command and a SNMP trap for the corresponding RMON event was genera...

Page 299: ...ed to correct the time z Inserted string 1 Host name or IP address of the NTP server that corrected the time z Inserted string 2 Corrected time difference in seconds P8603 WARNING Cannot find host 1 Explanation Failed to find an IP address from the host name specified with the ntp server host command z Inserted string 1 Host name specified with the ntp server host command Solution Review the host ...

Page 300: ...ds the Priority value at the beginning of the log message then inserts the Device type between the Host name and the Function type before forwarding the message to the specified syslog server The Priority value is used to identify the severity and facility of a log message It is added according to the following rules z Priority must have three four or five characters It starts with an angle bracke...

Page 301: ...ps that are specific to the device report the following information OID becomes 1 3 6 1 4 1 211 1 127 61 108 in case of XG2000C 1 3 6 1 4 1 211 1 127 61 109 in case of XG2000CR and 1 3 6 1 4 1 211 1 127 61 110 in case of XG2000R Field OID Object name Trap OID 1 3 6 1 4 1 211 1 127 61 107 2 0 message number xg2000 1 3 6 1 4 1 211 1 127 61 107 2 10 1 xg2000TrapLevel Variable list 1 3 6 1 4 1 211 1 1...

Page 302: ...entifier SYNTAX 1 ifNumber interface 1 INTEGER32 2 ifTable interface 2 NOT ACCESSIBLE 3 ifEntry ifTable 1 NOT ACCESSIBLE 4 ifIndex ifEntry 1 InterfaceIndex 5 ifDescr ifEntry 2 DisplayString 6 ifType ifEntry 3 IANAifType 7 ifMtu ifEntry 4 INTEGER32 8 ifSpeed ifEntry 5 Gauge32 9 ifPhysAddress ifEntry 6 PhysAddress 10 ifAdminStatus ifEntry 7 INTEGER 11 ifOperStatus ifEntry 8 INTEGER 12 ifLastChange i...

Page 303: ...t3StatsEntry 10 Counter32 13 dot3StatsCarrierSenseErrors dot3StatsEntry 11 Counter32 14 dot3StatsFrameTooLongs dot3StatsEntry 13 Counter32 15 dot3StatsInternalMacReceiveErrors dot3StatsEntry 16 Counter32 16 dot3StatsEtherChipSet dot3StatsEntry 17 OBJECT IDENTIFIER 17 dot3StatsSymbolErrors dot3StatsEntry 18 Counter32 18 dot3StatsDuplexStatus dot3StatsEntry 19 INTEGER 19 dot3ControlTable dot3 9 NOT ...

Page 304: ...p 22 Counter32 22 snmpOutGenErrs snmp 24 Counter32 23 snmpOutGetRequests snmp 25 Counter32 24 snmpOutGetNexts snmp 26 Counter32 25 snmpOutSetRequests snmp 27 Counter32 26 snmpOutGetSolutions snmp 28 Counter32 27 snmpOutTraps snmp 29 Counter32 28 snmpEnableAuthenTraps snmp 30 INTEGER 29 snmpSilentDrops snmp 31 Counter32 30 snmpProxyDrops snmp 32 Counter32 z RMON MIB statistics group RFC2819 iso 1 o...

Page 305: ...Object identifier SYNTAX 1 historyControlTable history 1 NOT ACCESSIBLE 2 historyControlEntry historyControlTable 1 NOT ACCESSIBLE 3 historyControlIndex historyControlEntry 1 Integer32 4 historyControlDataSource historyControlEntry 2 OBJECT IDENTIFIER 5 historyControlBucketsRequested historyControlEntry 3 Integer32 6 historyControlBucketsGranted historyControlEntry 4 Integer32 7 historyControlInte...

Page 306: ...Entry 5 Integer32 8 alarmStartupAlarm alarmEntry 6 INTEGER 9 alarmRisingThreshold alarmEntry 7 Integer32 10 alarmFallingThreshold alarmEntry 8 Integer32 11 alarmRisingEventIndex alarmEntry 9 Integer32 12 alarmFallingEventIndex alarmEntry 10 Integer32 13 alarmOwner alarmEntry 11 OwnerString 14 alarmStatus alarmEntry 12 EntryStatus z RMON MIB event group RFC2819 iso 1 org 3 dod 6 internet 1 mgmt 2 m...

Page 307: ...tp dot1dBridge 2 NOT ACCESSIBLE 13 dot1dStpProtocolSpecification dot1dStp 1 INTEGER 14 dot1dStpPriority dot1dStp 2 INTEGER 15 dot1dStpTimeSinceTopologyChange dot1dStp 3 TimeTicks 16 dot1dStpTopChanges dot1dStp 4 Counter 17 dot1dStpDesignatedRoot dot1dStp 5 BridgeID 18 dot1dStpRootCost dot1dStp 6 INTEGER 19 dot1dStpRootPort dot1dStp 7 INTEGER 20 dot1dStpMaxAge dot1dStp 8 Timeout 21 dot1dStpHelloTim...

Page 308: ... dot1dTpHCPortOutFrames dot1dTpHCPortEntry 2 Counter64 53 dot1dTpHCPortInDiscards dot1dTpHCPortEntry 3 Counter64 54 dot1dTpPortOverflowTable dot1dTp 6 NOT ACCESSIBLE 55 dot1dTpPortOverflowEntry dot1dTpPortOverflowTable 1 NOT ACCESSIBLE 56 dot1dTpPortInOverflowFrames dot1dTpPortOverflowEntry 1 Counter32 57 dot1dTpPortOutOverflowFrames dot1dTpPortOverflowEntry 2 Counter32 58 dot1dTpPortInOverflowDis...

Page 309: ...ot1qVlan 2 NOT ACCESSIBLE 11 dot1qVlanCurrentEntry dot1qVlanCurrentTable 1 NOT ACCESSIBLE 12 dot1qVlanTimeMark dot1qVlanCurrentEntry 1 TimeFilter 13 dot1qVlanIndex dot1qVlanCurrentEntry 2 VlanIndex 14 dot1qVlanFdbId dot1qVlanCurrentEntry 3 Unsigned32 15 dot1qVlanCurrentEgressPorts dot1qVlanCurrentEntry 4 PortList 16 dot1qVlanCurrentUntaggedPorts dot1qVlanCurrentEntry 5 PortList 17 dot1qVlanStatus ...

Page 310: ...4 ifName ifXEntry 1 DisplayString 5 ifInMulticastPkts ifXEntry 2 Counter32 6 ifInBroadcastPkts ifXEntry 3 Counter32 7 ifOutMulticastPkts ifXEntry 4 Counter32 8 ifOutBroadcastPkts ifXEntry 5 Counter32 9 ifHCInOctets ifXEntry 6 Counter64 10 ifHCInUcastPkt ifXEntry 7 Counter64 11 ifHCInMulticastPkts ifXEntry 8 Counter64 12 ifHCInBroadcastPkts ifXEntry 9 Counter64 13 ifHCOutOctets ifXEntry 10 Counter6...

Page 311: ...gree Celsius 3 xg2000LoadAverage xg2000Monitor 3 Integer32 Indicates the CPU usage in 4 xg2000Event xg2000 2 NOT ACCESSIBLE Object identifier of trap information specific to the device 5 xg2000Traps xg2000Event 0 NOT ACCESSIBLE Object identifier of trap information specific to the device 6 xg2000 xg2000Traps X NOT ACCESSIBLE Object identifier of message information trap xg2000 differs from one eve...

Page 312: ...111 description 148 DiffServ 46 dir 110 disable 74 do 76 downlink allowed uplink domain 141 Downloading a Configuration File 271 Dynamic MAC address learning 27 E egress 174 enable 73 enable password 87 Event Logs 280 exit 75 Extraction of Maintenance Information 274 F Features 11 Filtering show Command Output 20 Flow Control 28 flowcontrol 149 Format of Log Message 269 Frame Distribution Methods ...

Page 313: ... RADIUS TACACS authentication 55 radius server host 93 radius server key 94 radius server timeout 95 Redirecting show Command Output 20 Registering Group Members 48 remote host 65 Removing Group Members 49 rename 112 reset 81 Resetting startup config to Factory Defaults 277 Restoring Factory Defaults 277 278 Reviewing Fault Logs 269 Reviewing Log Messages 268 RMON 54 rmon alarm 241 rmon collection...

Page 314: ...trol 29 storm control 150 STP 39 suppress address learning 150 SVL 27 Switch Basic Configuration commands 120 Switch Port Configuration Commands 142 Switching Mode 27 System Basic Operation Commands 73 System Maintenance Commands 250 System Operation Display Commands 245 system shutdown 81 T TACACS Attridutes 55 tacacs server host 97 tacacs server key 98 Tag Based VLAN 42 Telnet Connection via the...

Page 315: ... PFU LIMITED z The contents of this manual may be updated without notice z PFU assumes no liability for damages to third party copyrights or other rights arising from the use of any information in this manual z Contents of this manual are not to be reproduced without permission from PFU ...

Reviews:

No comments