background image

Figure 71. 20/40-Port 10Base-T DIP Switches

The DIP switches let you perform the following:

Use DIP switch positions 1 through 4 to assign all the ports on the module to
one of the backplane segments or an isolated-1 segment. Note that when
using DIP switches, all the ports will be assigned to the same segment, so
you cannot do per-port switching when using DIP switches for configuring the
8260 modules.

Table 20 shows the meaning of the settings for DIP switches 1 thru 4:

By default, these modules are shipped from the factory with the DIP switches
set for Ethernet_1.

Use DIP switch position 5 to choose if the module is going to use the
Non-Volatile RAM (ON position) or DIP switch settings (OFF position) for its
configuration. Note that if there is a management module installed in the
8260, this DIP switch determines which configuration (NVRAM or DIP switch

Table 20. 20/40-Port 10Base-T M o d u l e DIP Switch Settings

Network Selection

Switch 1

Switch 2

Switch 3

Switch 4

Ethernet_1

OFF

ON

ON

ON

Ethernet_2

ON

OFF

ON

ON

Ethernet_3

OFF

OFF

ON

ON

Ethernet_4

ON

ON

OFF

ON

Ethernet_5

OFF

ON

OFF

ON

Ethernet_6

ON

OFF

OFF

ON

Ethernet_7

OFF

OFF

OFF

ON

Ethernet_8

ON

ON

ON

OFF

Isolated_1

ON

ON

ON

ON

110

8260 Multiprotocol Intelligent Switching Hub 

Summary of Contents for Nways 8260

Page 1: ...International Technical Support Organization 8260 Multiprotocol Intelligent Switching Hub May 1995 GG24 4370 00 ...

Page 2: ......

Page 3: ...International Technical Support Organization 8260 Multiprotocol Intelligent Switching Hub May 1995 GG24 4370 00 IBML ...

Page 4: ...ck appears facing Chapter 1 If the form has been removed comments may be addressed to IBM Corporation International Technical Support Organization Dept 545 Building 657 P O Box 12195 Research Triangle Park NC 27709 2195 When you send information to IBM you grant IBM a non exclusive right to use or distribute the information in any way it believes appropriate without incurring any obligation to you...

Page 5: ...as well as how to install configure and manage the 8260 Ethernet and token ring media modules This document was written for customers systems engineers network professionals and technical support personnel Some knowledge of local area networks token ring and Ethernet architecture is assumed 327 pages Copyright IBM Corp 1995 iii ...

Page 6: ...iv 8260 Multiprotocol Intelligent Switching Hub ...

Page 7: ...gments on the Backplane 19 2 4 FDDI Segments on the Backplane 22 2 5 Network Allocations on the 8260 Backplane 23 2 5 1 Management Buses 26 Chapter 3 8260 Fault Tolerant Controller Module 29 3 1 8260 Fault Tolerant Controller Module Overview 29 3 1 1 The Controller Module Front Panel 30 3 1 2 Controller Module Fault Tolerance 32 3 1 3 Installing and Configuring the Fault Tolerant Controller Module...

Page 8: ...apter 6 8260 Intelligent Cooling Subsystem 91 6 1 Intelligent Cooling Subsystem 91 Chapter 7 8260 Ethernet Modules 97 7 1 Ethernet LAN Overview 97 7 1 1 CSMA CD 97 7 1 2 Frame Size 98 7 1 3 Data Integrity 98 7 1 4 Ethernet Addressing Mode 98 7 2 8260 Ethernet 24 Port 10Base T Module 99 7 3 10Base T Module Usage 104 7 4 Configuring the 10Base T Module 104 7 5 8260 Ethernet 20 40 Port 10Base T Modul...

Page 9: ... 5 Trunk Unwrapping on the Module Switching Modules 170 Chapter 9 8260 Token Ring Modules 173 9 1 Introduction 173 9 2 Configuring Token Ring Network Parameters 173 9 3 8260 18 Port Active Per Port Switching Module 174 9 3 1 Configuring the 18 Port Active Per Port Switching Module 177 9 4 8260 18 Port Active Module Switching Module 180 9 4 1 Configuring the 18 Port Active Module Switching Module 1...

Page 10: ...et Phase IV Routing Support 246 11 5 Configuring Multiprotocol Interconnect Module 246 11 6 Local Management System LMS 247 11 7 SNMP Support 250 11 8 Configuring the Interconnect Module Using LMS 251 11 8 1 Configuring System Wide Parameters 252 11 8 2 Configuring Port Parameters 255 11 8 3 Port Configuration Summary 261 11 8 4 Configuring for Bridging Support 261 11 8 5 Filtering for Bridging Fu...

Page 11: ...1 26 Output from Show ARP_Cache Command with Canonical Setting 52 27 Output from Show ARP_Cache Command with Non Canonical Setting 52 28 Output from Show Device Command 54 29 Output from Show IP Command 55 30 Output from Show Community Command 57 31 EC DMM Front Panel 59 32 Jumpering for the EC DMM DB 9 Ports 60 33 24 Port Ethernet Module with E MAC 62 34 EC DMM Slots and Subslots 63 35 EC DMM Dis...

Page 12: ...truder Table 127 80 Differential Manchester Coding 132 81 Self Shorting Relays on the ShuntBus 135 82 8260 Backplane Signalling for 4 Mbps Operation 136 83 8260 Backplane Signalling for 16 Mbps Operation 137 84 Components of Dual Phase Lock Loop 139 85 DPLL Implementation on Active Ports 140 86 Components of DPLL Implemented on JADC 141 87 Token Ring Per Port Switching 144 88 Static Switch Display...

Page 13: ...RMON TR_MAC_LAYER 228 130 Show Counter RMON TR_MAC_LAYER 229 131 Show Counter RMON TR_SOURCE_ROUTING 230 132 Show Module Command for T MAC 232 133 Displaying the Status of Surrogate Features 234 134 Displaying the Status of REM Options 235 135 Displaying the Status of CRS Options 235 136 Displaying the Status of CRS Stations Options 236 137 Front View of the Multiprotocol Interconnect Modules 241 ...

Page 14: ...73 LMS OSPF Area Address Range Panel 295 174 LMS OSPF Interface Metric Table 296 175 LMS OSPF Virtual Interface Table Panel 297 176 LMS OSPF Neighbors Panel 298 177 LMS OSPF RIP Filter Table Panel 299 178 LMS Configuration Panel 300 179 LMS OSPF Default RIP Convert Table Panel 301 180 LMS OSPF Static Filter Table Panel 302 181 LMS Configuration Panel 303 182 LMS OSPF Default Static Convert Table P...

Page 15: ...nces for Ethernet 10Base FB Module 114 23 10 Port 10Base FB Module LED Descriptions 115 24 10 Port 10Base FB Module DIP Switch Settings 117 25 8260 Ethernet Modules Summary 120 26 Lobe Distances Using 8260 Active TR Modules 143 27 Lobe Distances Using 8260 Passive TR Modules 143 28 18 Port Active Per Port Switching Module LED Descriptions 176 29 18 Port Active Per Port Switching Module 177 30 20 P...

Page 16: ...xiv 8260 Multiprotocol Intelligent Switching Hub ...

Page 17: ... can send license inquiries in writing to the IBM Director of Licensing IBM Corporation 500 Columbus Avenue Thornwood NY 10594 USA The information contained in this document has not been submitted to any formal IBM test and is distributed AS IS The information about non IBM VENDOR products in this manual has been supplied by the vendor and IBM assumes no responsibility for its accuracy or complete...

Page 18: ...orporation under license UNIX is a registered trademark in the United States and other countries licensed exclusively through X Open Company Limited AIX AIX 6000 IBM NetView RS 6000 DECnet DEC VT100 and DEC VT220 Digital Equipment Corporation Chipcom ONline ONcore Chipcom Corporation Novell NetWare and IPX Novell Corporation Retix Retix Corporation xvi 8260 Multiprotocol Intelligent Switching Hub ...

Page 19: ... Management architecture Chapter 5 8260 Intelligent Power Management Subsystem This chapter describes the 8260 Intelligent Power Management Subsystem Chapter 6 8260 Intelligent Cooling Subsystem This chapter describes the 8260 Intelligent Cooling Subsystem Chapter 7 8260 Ethernet Modules This chapter provides detailed description and configuration information about the 8260 Ethernet modules Chapte...

Page 20: ...e SA33 0326 International Technical Support Organization Publications IBM 8250 Intelligent Hub and IBM Hub Management Program 6000 GG24 4033 A complete list of International Technical Support Organization publications with a brief description of each may be found in International Technical Support Organization Bibliography of Redbooks GG24 3070 To get listings of ITSO technical bulletins redbooks ...

Page 21: ...onal Technical Support Organization Raleigh Center Thanks to the following people for the invaluable advice and guidance provided in the production of this document Shawn Walsh International Technical Support Organization Raleigh Center Haissam Alaiwan 8260 Product Planner La Gaude Theodore A Makranczy IBM Education and Training USA James J Haefele IBM Education and Training USA Benton R Hobgood I...

Page 22: ...xx 8260 Multiprotocol Intelligent Switching Hub ...

Page 23: ...ibility to design networks addressing the individual needs of your organization Media and management modules can be installed or removed from the 8260 while the hub is operational This allows you to modify the configuration of the network with minimal disruption to the users The 8260 provides the room to install up to two controller modules The second controller module will be used to provide back...

Page 24: ...se T module 8260 Ethernet 20 port 10Base T module 8260 Ethernet 40 port 10Base T module 8260 Ethernet 10 port 10Base FB module 8260 Multiprotocol Interconnect module 8260 Ethernet Security daughter card Token ring modules 18 port active per port switching module 18 port active module switching module 20 port passive module switching module Dual fiber repeater module Jitter Attenuator daughter card...

Page 25: ...lligent switching hub with both 8250 and 8260 modules installed 1 2 1 1 8260 Backplane The 8260 Model 017 has two standard backplane buses which are used to provide you with the ability to configure token ring Ethernet and or FDDI network segments These two backplane buses are Enhanced TriChannel Allows you to configure the following Three Ethernet segments or Up to 7 token ring segments or Up to ...

Page 26: ...nts Other modules are module switching modules which means that all the ports on the module must be connected to the same network segment The per port switching capability is available for both Ethernet and token ring Since the 8260 modules are taller than the 8250 modules when you install one or more 8250 modules in the 8260 multiprotocol intelligent switching hub you must use the 8250 Adapter Ki...

Page 27: ...r This adapter will be installed on the left boundary of the area occupied by the 8250 modules The top portion of this adapter provides a filler plate while the bottom portion will provide you with the room to install an 8250 module Dual slot Top Filler This adapter provides the filler plate for two slots of the 8260 providing you with the room to install two single slot or one dual slot 8250 modu...

Page 28: ...ler module failing and the standby Controller module taking over the network will be disrupted 1 2 1 4 The Intelligent Power Subsystem The power subsystem provides an easy access power bay which can support up to four load sharing high capacity managed power supplies The 8260 Model 017 arrives with one power supply as standard and you may optionally install three additional power supplies Features...

Page 29: ...ability to house Ethernet MAC daughter cards The DMM along with the fault tolerant Controller module manages and controls the 8260 hub and its modules However to perform certain management functions such as network traffic monitoring there is a need for a daughter card to assist DMM There are two types of daughter cards Ethernet Media Access E MAC daughter card Token ring Media Access T MAC daught...

Page 30: ...f Model 017s and Model 010s without an overhead for managing accessories and spare parts Note In the remainder of this book the various components of the IBM 8260 are explained assuming an 8260 Model 017 1 3 8260 Modules and Daughter Cards This section will give an overview of currently available 8260 modules and daughter cards and a brief description of them Details of individual modules the nece...

Page 31: ...ng and or routing functions Both models provide up to 6 logical ports for attachment to Ethernet segments on the backplane and the two slot module provides the capability to install two I O cards which allow you to connect it to external token ring and Ethernet networks 1 3 1 6 Ethernet Security Card This is a daughter card that can be installed on any 8260 Ethernet media module and provides you w...

Page 32: ...e basis to any of the 10 token ring networks on the backplane This module allows you to use either UTP or STP cabling Unlike the active module it does not provide simultaneous support for both UTP and STP cabling 1 3 2 5 8260 Jitter Attenuator Daughter Card The 8260 Jitter Attenuator daughter card allows you to filter excessive amounts of jitter that may have accumulated in other equipment before ...

Page 33: ...er and cooling subsystems 1 3 3 3 Ethernet Media Access Daughter Card E MAC The E MAC daughter card allows you to gather statistics for the network to which it is attached It can be physically mounted to either an 8260 Ethernet media module or the 8260 EC DMM 1 3 3 4 8260 Token Ring Media Access Daughter Card T MAC The T MAC daughter card allows you to gather statistics for the network to which it...

Page 34: ...12 8260 Multiprotocol Intelligent Switching Hub ...

Page 35: ...tween the Controller module and the media modules as well as signals between the Management module and the media modules More information about these non data traffic signals are provided in 2 5 1 Management Buses on page 26 On the Enhanced TriChannel the pins used for passing the network traffic are not permanently allocated to a specific type of network Instead a pin may be configured to be used...

Page 36: ...s This allows you to have a mixture of token ring and FDDI segments as well as two Ethernet segments on the ShuntBus The rules governing the maximum number of FDDI and token ring segments allowed in a mixed token ring and FDDI environment are discussed in 2 5 Network Allocations on the 8260 Backplane on page 23 The following is the permitted maximum number of LAN segments on the ShuntBus 2 Etherne...

Page 37: ... up an Ethernet segment while ethernet_path_4 thru 8 use 4 pins each The Ethernet segments on the Enhanced TriChannel use the same pins on the backplane as are used by the token ring and or FDDI segments Therefore simultaneous configuration of other types of networks such as FDDI and or token ring on your hub s Enhanced TriChannel will impact the number of Ethernet networks available for use Howev...

Page 38: ...currently configured to be used by any network type To connect and use the Ethernet segments on the backplane Enhanced TriChannel or ShuntBus various techniques are used by the various 8250 and 8260 Ethernet modules These techniques can be categorized into one of the three following methods Method 1 This method uses 14 pins on the backplane to set up an Ethernet segment In this method each module ...

Page 39: ... segment In this method each module will send its slot id and port id in serial over a single pin on the backplane This information allows the management module to collect statistics about the modules and ports For collision detection the modules using this method rely on an analog collision detection as described in 2 2 2 Analog Collision Detection on page 19 This method is used by the 8260 modul...

Page 40: ...le will use the port id and slot id see below signals to find out which port and module is sending the data on the Data in NRZ Format pin hence it is able to collect and report per port statistics Note Since four pins are used to transmit the port ID in parallel the per port statistics cannot be reported for all the ports of the 24 port modules On a 24 port module you can collect statistics about ...

Page 41: ...rate a level on the backplane Each time a module starts transmitting the voltage on the backplane drops If more than one module is transmitting at the same time the drop at the voltage level is used to detect such a condition 2 2 3 Statistics Collection The slot id in conjunction with the port id and the user data is used by the Management module to collect statistical information about the ethern...

Page 42: ...TR_PATH_8250_6 in use TR_PATH_8250_7 TR_8250_1 TR_PATH_8250_8 available TR_PATH_8250_9 TR_8250_1 TR_PATH_8250_10 available TR_PATH_8250_11 in use TR_PATH_8250_12 in use TR_PATH_8250_13 TR_8250_1 TR_PATH_8250_14 available TR_PATH_8250_15 available 8260 Figure 6 Token Ring Backplane Path Display The number of token ring paths used by a single token ring network on the Enhanced TriChannel equals the ...

Page 43: ... and the signal is routed onto the module Therefore any installed token ring module on the ShuntBus has access to any of the 10 token ring segments on the backplane This design allows the implementation of per port switching for the token ring modules so that individual ports on a module can be assigned to different rings on the backplane This concept is shown in Figure 7 Details of the per port s...

Page 44: ... However as there are no 8260 FDDI modules available yet if you are planning to have FDDI segments on the 8260 you must use the 8250 FDDI modules to set up FDDI segments on the Enhanced TriChannel only Each FDDI module which is assigned to one of the four FDDI networks on the Enhanced TriChannel uses one of the resources called FDDI path There are 8 FDDI paths on the Enhanced TriChannel and are re...

Page 45: ...I paths on the ShuntBus Instead there are 4 FDDI networks each using 14 pins The FDDI segments on the ShuntBus use the same pins as the token ring segments 2 5 Network Allocations on the 8260 Backplane As we now have so many options of switching modules and ports between networks it is perhaps a good time to clarify the rules regarding those allocations 8250 Ethernet ports or modules can be connec...

Page 46: ...tworks as FDDI9 thru 12 This is to provide a distinction between the segments on the Enhanced TriChannel and the ShuntBus for our discussion in this book However when you use the management module commands to assign the token ring modules to the token ring segments on the backplane you will refer to the Enhanced TriChannel segments as token_ring_1 thru 7 and to the ShuntBus segments as token_ring_...

Page 47: ...ure 11 on page 26 is a summary of how the Enhanced TriChannel and the ShuntBus are used to accommodate the various types of networks Note that in this diagram for the sake of avoiding a crowded picture the token ring and FDDI segments on the Enhanced TriChannel are not shown In designing your network if possible it is recommended that you use the Enhanced TriChannel as well as the two dedicated Et...

Page 48: ...ial Control Interface SCI 2 5 1 1 The Management LAN MLAN The MLAN is a dedicated 10 Mbps Ethernet bus which connects the DMM Distributed Management Module and all the Media Access Control daughter cards E MAC or T MAC The MAC daughter cards connect to their respective networks T MAC to token ring and E MAC to Ethernet and provide statistics about those networks to the DMM via the MLAN Also the IP...

Page 49: ...whether that segment is using parallel or serial addressing This is because the EC DMM provides parallel to serial address translation Also note that E MAC is always able to collect full statistics about 8260 modules irrespective of which type of module EC DMM or 8260 media modules the E MAC is installed on and which networks the 8260 modules are attached to 2 5 1 2 The Serial Control Interface SC...

Page 50: ...28 8260 Multiprotocol Intelligent Switching Hub ...

Page 51: ...ub to an acceptable limit Inventory and intelligent power management Each 8260 module has a serial EEPROM which is used for power management and inventory purposes The EEPROM is programmed at manufacturing and includes information about how much power the module requires its serial number model number the vendor ID and its hardware revision level Upon insertion into the hub the 8260 modules will s...

Page 52: ...e LED test buttons the controller module has 10 LEDs covering the 4 power supplies 3 fans active or standby mode and temperature on the front panel which indicate the state of the system environment The names and locations of the buttons and LEDs are shown in Figure 13 The following table describes the meaning of the LEDs 30 8260 Multiprotocol Intelligent Switching Hub ...

Page 53: ...etwork to which that port is assigned for every port assigned to a backplane network For example the number of times an 8250 module port status LED can blink ranges from 1 to 7 for token ring networks from 1 to 3 for Ethernet networks and from 1 to 4 for FDDI networks The port status LED display will last approximately 25 seconds For every port which is not assigned to a backplane network the port...

Page 54: ...8250 media modules do not have onboard memory to store configuration information Therefore following a reboot due to the failure of the active controller module they will be configured by the DIP switch settings on the module in an unmanaged hub or via the configuration stored in the management module in a managed hub If two controller modules are installed in a hub that is already powered up the ...

Page 55: ...dapter installed When an 8250 xMM is the active management module the standby controller module is invisible to the xMM However as soon as the standby controller module becomes the active controller module it is then automatically seen by xMM to be in slot 17 When there is no DMM installed on the 8260 and an 8250 xMM is used as the master management module one of the following levels of the xMM is...

Page 56: ...34 8260 Multiprotocol Intelligent Switching Hub ...

Page 57: ...stand alone card because it does not have any mounting facility for the daughter cards EC DMM This module allows you to mount up to six Ethernet Medium Access Carrier E MAC daughter cards on it At the time of writing there is no carrier DMM available for mounting token ring MAC T MAC daughter cards In terms of management functions DMM and EC DMM are identical The only difference between these two ...

Page 58: ...rchitecture that consolidates media management into a single card while distributing network monitoring across a series of protocol dependent daughter cards The DMM is a generic protocol independent module that can be used for both in band and out of band management As mentioned above when used for in band management DMM requires a daughter card The flexibility and reduction in cost is achieved by...

Page 59: ...r collecting an extensive range of statistics based on RMON Out of band and in band downloading The DMM provides both in band and out of band download features for downloading new software to DMM media modules and daughter cards Trivial File Transfer Protocol TFTP is used for in band downloads Out of band downloads allow you to download software using the Xmodem protocol from a local or modem atta...

Page 60: ...splay a detailed topological ring map including address to port mapping about the token ring segments on the network 4 1 1 IP Addressing for DMM Because of the centralized approach to management used in the 8260 there is a need for a new approach for assigning IP addresses to DMM when compared to the 8250 This is because you may use a single DMM to communicate with IP stations attached to multiple...

Page 61: ...has no facility for carrying daughter cards The DMM has 1 module status LED a 4 character display with a display control toggle button and 2 serial port connectors as shown in Figure 15 Figure 15 DMM Front Panel 4 2 1 Unpacking and Installing the DMM Chapter 4 8260 Distributed Management Architecture 39 ...

Page 62: ... RS 423 For the factory default which is RS 232 the jumper will be between pins 2 and 3 the bottom 2 pins of JP8 To select RS 423 mode the jumper on JP8 should be changed to pins 1 and 2 the upper pins For RS 423 the jumper MUST be installed on JP9 For RS 232 remove the jumper from JP9 Figure 16 Jumpering for the DMM DB 9 Ports Holding the DMM by the faceplate slide it into the slot in the 8260 Li...

Page 63: ...y Definition Diag The DMM is running diagnostics Rdy The DMM is the active master management module Stby The DMM is in standby mode Dnld New microcode is being downloaded Vers Microcode level of the DMM LED Displays when the controller LED test button is pressed 4 2 3 Console and Auxiliary Ports There are two DB 9 ports on the faceplate of the DMM The upper port is called the console port and is u...

Page 64: ...ct a modem for remote dial in The following requirements must be met 1 The modem must be 100 Hayes compatible 2 Any of the following baud rates may be used 300 1200 2400 9600 19 200 or 38 400 3 The modem must be placed in Dumb Auto Answer mode This can be done by entering the commands listed in Table 8 from a terminal directly attached to the modem If you issue the Set Terminal Hangup Enable comma...

Page 65: ...ATOR SET LOGIN SUPERUSER SET LOGIN PASSWORD SET LOGIN ACCESS Configure DMM terminal settings SET TERMINAL CONSOLE SET TERMINAL AUXILIARY SET TERMINAL PROMPT SET TERMINAL TIMEOUT Hub configuration SET CLOCK Device configuration SET DEVICE NAME SET DEVICE LOCATION SET DEVICE CONATCT SET DEVICE DIAGNOSTICS SET DEVICE MAC_ADDR_ORDER SET DEVICE RESET_MASTERSHIP SET DEVICE DIP_CONFIGURATION SET DEVICE T...

Page 66: ...nd all the installed modules and daughter cards Additionally this user can obtain statistics about the various components of the network Administrator This type of user can perform all the user functions Additionally this user can modify the configuration of the hub and all the installed modules and daughter cards Superuser This type of user can perform all the functions of the administrator Addit...

Page 67: ...ter current session password for user system Enter Login Name shabani Enter Login Password new password Verify re enter password new password Login successfully entered Login account will not be activated until it is saved 8260A Figure 19 Defining New DMM Superuser Defining the other user types is identical to defining superuser except that in the set command you must specify user or administrator...

Page 68: ... 20 There can be up to a maximum of 10 users any combination defined in a DMM However at any point in time there can be only one user with write access administrator or superuser logged in to a DMM Therefore if you try to log in to DMM as an administrator or superuser when there is already an administrator or a superuser logged in to that DMM you will be given a user access However a superuser who...

Page 69: ...for the password enter force Your login request will be rejected and you will be prompted to enter the user ID again This time enter force as the user ID When prompted for the password enter force Immediately press the reset button on the DMM Note that the above procedure will result in the following Restores the system password to nulls Resets DEVICE and TERMINAL settings to factory default All t...

Page 70: ... 2 Parity This parameter allows you to set the parity setting used by DMM for communication with your terminal For example the following command allows you to change parity for DMM to even 8260 set terminal console parity even Note The parity setting specified in this command must match the settings of your terminal otherwise after issuing this command the communication between the terminal and DM...

Page 71: ... using SNMP Terminal_type This command allows you to set the terminal type which will be used by DMM for establishing Telnet sessions An example of this command is as follows 8260 set terminal console terminal_type vt100 The terminal type set by this command is sent by DMM to the remote device when you establish a Telnet session from DMM to the remote device This enables the remote device to send ...

Page 72: ...fied in the above command is in minutes You can display the current settings for console and auxiliary port using the following command 8260 show terminal An example of the output displayed by this command is shown in Figure 22 Terminal Session Parameters Prompt 8260A Timeout time 0 Console Port Parameters Baud 9600 Data bits 8 Parity NONE Stop bits 2 Hangup ENABLED Mode COMMAND LINE Terminal VT10...

Page 73: ...me Command for DMM Device location This command allows you to describe the location of the 8260 in which this DMM is installed An example of this command is as follows 8260A set device location Enter one line of text ITSO LAB Building 657 Raleigh Location changed 8260A Figure 24 Set Device Location Command for DMM Note that you can enter up to 78 alphanumeric characters to specify the location of ...

Page 74: ... 6c 5 9 67 46 238 08 00 5a 13 55 93 8260A Figure 26 Output from Show ARP_Cache Command with Canonical Setting In this example 9 67 46 46 is an Ethernet attached station whereas 9 67 46 237 and 9 67 46 238 are both token ring attached stations As can be seen all the addresses are shown in canonical format You may use the following command to set the non canonical format to be used by DMM 8260A set ...

Page 75: ... is installed the requested configuration is submitted for approval If the DMM has a saved configuration for module slot it overrides the requested configuration If the DMM does not have a saved configuration for the module slot it checks the requested configuration for validity If valid the requested configuration is used If not valid or DIP switches are used the module is isolated and ports are ...

Page 76: ...ABLED Diagnostics DISABLED Reset Mastership ENABLED Trap Receive ENABLED MAC Address Order NONCANONICAL 8260A Figure 28 Output from Show Device Command 4 2 4 5 Configuring DMM IP Parameters As mentioned earlier in this chapter DMM will use the IP stack provided by T MAC and E MAC to communicate with the other IP stations For DMM to use the IP stack of E MAC and T MAC you must first perform the fol...

Page 77: ... 2 8260A Figure 29 Output from Show IP Command In this example our DMM is assigned three IP addresses 9 67 46 1 for slip connection through the console auxiliary port 9 67 46 46 for connection through Ethernet_1 9 67 46 238 for connection through token_ring_10 You can clear any of the IP entries assigned to DMM using the following command 8260A clear ip index Where index is the number of the netwo...

Page 78: ... one of the following attributes assigned to it Read only Allows the specified SNMP manager to read SNMP variables via the GET command Read write Allows the specified SNMP manager to read and write SNMP variables via the GET and SET commands Trap Enables DMM to send traps to the specified SNMP manager Read trap Allows the specified SNMP manager to read SNMP variables and receive traps All Allows t...

Page 79: ...uthentication traps using the following command 8260A set alert authentication enable Change Any configuration change made in the hub results in DMM sending an alert You can enable DMM to send change traps using the following command 8260A set alert change enable Hello When DMM is activated it sends one Hello trap every minute 255 times until a valid SNMP message is received You can enable DMM to ...

Page 80: ...FILTER for each port can be set using the following example 8260A set port 2 1 alter_filter enable disable 4 3 The EC DMM Ethernet Carrier Distributed Management Module The EC DMM is a single slot management module that has the mounting ability to carry up to 6 Ethernet MAC daughter cards The EC DMM has 1 module status LED a 4 character display with a display control toggle switch 24 Ethernet netw...

Page 81: ...32 on page 60 These jumpers allow you to set the auxiliary DB 9 connector to RS 232 or RS 423 For the factory default which is RS 232 the jumper will be between pins 2 and 3 the bottom 2 pins of JP8 To select RS 423 mode the jumper on JP8 should be changed to pins 1 and 2 the upper pins For RS 423 the jumper must be installed on JP9 For RS 232 remove the jumper from JP9 Chapter 4 8260 Distributed ...

Page 82: ...splay control button is pressed the character display cycles through each of the networks By using the network display LEDs on the EC DMM and the 8260 media modules it is possible to see which modules and which ports are assigned to a network For example we have an 8260 24 port port switching module in slot 2 with ports 1 3 5 and 7 assigned to Ethernet_1 and a similar module in slot 4 with ports 1...

Page 83: ...essed 4 4 MAC Daughter Cards To be able to monitor the network traffic activity on the backplane segments as well as to be able to communicate with other stations using IP DMM requires the services provided by MAC daughter cards These daughter cards connect to the networks listen to the traffic flow and pass traffic information back to the DMM They also provide the DMM with the interface to the ne...

Page 84: ... of the possibility of installing MAC daughter cards on the 8260 modules the 8260 modules are identified by slot and subslot identifiers Note that the slot and subslot identifiers are used in DMM commands to refer to the media modules management modules or daughter cards The following is a summary of how to identify the slot and subslot for each media module management module and daughter card 1 E...

Page 85: ...d in the EC DMM they will be considered to be in subslots 2 thru 7 of the slot on which EC DMM is installed Figure 34 shows how the slot and subslot IDs are used on an EC DMM Figure 34 EC DMM Slots and Subslots For example in our 8260 we had an EC DMM installed in slot 1 This module had an E MAC installed on the first position DB1 as shown in Figure 34 If we display this module the result would be...

Page 86: ...an application such as RMonitor for AIX Note that the communication between DMM and the E MAC installed on the 8260 media modules is via MLAN For more information about MLAN please refer to 2 5 1 1 The Management LAN MLAN on page 26 The E MAC supports collection of a subset of the RMON statistics For information about RMON and the E MAC support it please refer to Chapter 10 8260 RMON Support on pa...

Page 87: ...kes over the role of the active E MAC on the segments it assumes all the IP parameters assigned to the segment You may use this option when you have two E MACs attached to the same segment and want one of them to act as a backup for the active E MAC 3 Assign the E MAC to the desired segment using the following example 8260A set module 2 2 network ethernet_1 If you try to assign an E MAC with enabl...

Page 88: ...on an 8260 token ring media module This is because at this stage there is no token carrier DMM The T MAC performs the same functions for token ring as the E MAC does for Ethernet It gathers network and port statistics and transmits them to the DMM via the MLAN Each token ring media module has the housing to install one T MAC In addition to providing DMM with the interface to the backplane segments...

Page 89: ... the token claiming process the T MAC will not contend to become an active monitor If the T MAC is the first station which detects the absence of an active monitor it will contend to become the active monitor regardless of the setting of the monitor contention parameter 5 Use the following example command to set an appropriate mode for the network interface on the T MAC 8260A set module 6 2 interf...

Page 90: ... Interface cards cannot be on the same network Command aborted 8260A Figure 39 Assigning T MAC to a Segment with an Active T MAC 7 If you are planning to use RMON support provided by T MAC you may perform the additional steps described in 10 6 6 Collecting and Displaying RMON Groups Using T MAC on page 230 You can use the following example to obtain information about the T MAC and how it s configu...

Page 91: ... e3 f1 f7 c3 f1 40 Early Token Release DISABLED Internal Wrap DISABLED External Wrap DISABLED Interface Number 5 8260A Figure 40 Output from T MAC Display Note that this example shows that although we have assigned a locally administered MAC address to T MAC it is still using the burned in MAC address This display also shows the IP address subnet mask and default gateway for T MAC which is that of...

Page 92: ...M for each network 4 5 2 Managing 8260 with 8250 xMM The following is a summary of the capabilities of an 8250 xMM when acting as the master management module in an 8260 which is populated with both 8260 and 8250 modules 1 Each 8250 xMM requires its own payload slot 2 The 8250 xMM can be used to configure and manage the 8250 media modules installed in the 8260 3 The 8250 xMM does not recognize and...

Page 93: ...st log in to the 8260 hub with the system user ID commands in the first layer will be available Commands may have various parameters or options associated with them For example in Figure 41 all commands in the second layer are the available options associated with the set command Default_gateway ip_address and subnet_mask are the possible options associated with the ip option and the set command i...

Page 94: ...72 8260 Multiprotocol Intelligent Switching Hub ...

Page 95: ...nagement Module and the Controller module you can perform the following functions Assign power class priority to each 8260 module Display the power class assigned to each installed module Power up and power down individual slots housing 8260 modules using DMM commands Display the number and status of power supplies installed in the 8260 Display the available power budget in your 8260 Operate the 8...

Page 96: ...ontroller module will power down a number of 8260 media modules with the lowest power class to bring down the level of power consumption to the level of available power supplied by the remaining operational power supply components When several modules have the same power class the 8260 media modules will be powered down from slot 17 to slot 1 Note Modules with power class 10 will not be powered do...

Page 97: ... regardless of the availability of the power In this respect the 8250 modules operate in a manner similar to the 8260 modules which are assigned power class 10 If you try to assign a power class to an 8250 module the command will be aborted An example of this is shown in Figure 43 8260 set power slot 10 Module in slot 10 is not supported Figure 43 Set Power Class Command for 8250 Modules Figure 44...

Page 98: ...modules Power class is also used by the Controller module to power down media modules in the case of overheating conditions that may be caused by fan failures This is discussed in Chapter 6 8260 Intelligent Cooling Subsystem on page 91 5 3 Configuring 8260 Power Supplies The 8260 power management subsystem allows you to install up to a maximum of four power supplies in an individual 8260 The power...

Page 99: ...mation Probe Location Temperature 1 FAN_1 27 Degrees Celsius 2 FAN_2 29 Degrees Celsius 3 FAN_3 27 Degrees Celsius Fan Information Fan Status 1 OKAY 2 OKAY 3 OKAY 8260 Figure 46 Output from Show Hub Command You can use the following management command to determine the amount of power installed and the amount of power budget available in your hub SHOW POWER BUDGET An example of the output from this...

Page 100: ...ower is not enough to supply all the installed modules the Controller module will power down 8260 modules according to their power class as described in 5 2 Power Class on page 74 This is an attempt to bring the power consumption under the new reduced power budget and also to ensure that the modules with the highest power class will be able to operate normally using the available power supply Ther...

Page 101: ... mode to fault tolerant In the fault tolerant mode one power supply s worth of power is kept in reserve The reserved power is not available to any currently installed or yet to be installed modules It will only be made available to be used by the modules if at least one power supply fails or until you switch the hub from the fault tolerant mode to non fault tolerant mode In other words in the faul...

Page 102: ...00 W Totals N A 293 40 W 520 30 W 779 15 W Figure 49 Load Sharing Power Supplies If a power supply should fail the power mode will be changed to non fault tolerant and the system will supply the reserved power to the installed modules so that network operations can continue without interruption Upon the recovery of the failed power supply for example by replacing the failed power supply when the 8...

Page 103: ...n Manufacturer s ID Date of manufacturing the module Module s power requirements 3 The 8260 module sends its VPD to the Controller module 4 Controller sends this VPD to DMM This will allow you to display the Vital Product Data information about all the modules installed in your 8260 using the following DMM command SHOW INVENTORY An example of the output from this command is shown in Figure 50 on p...

Page 104: ...A N A N A N A 13 01 T01MS MGT N A N A N A N A 14 01 E12MSS TELCO N A N A N A N A 15 01 EE06PS RTR N A N A N A N A 18 01 8000 RCTL A 1002380 ibm 940302 19 01 8000 RCTL A 1002421 ibm 940301 8260 Figure 50 Output from Show Inventory Command Note The power class of the newly installed module will not play any role in this process For example the Controller module will not power down a currently instal...

Page 105: ...ailable in the hub The process of applying power to a newly installed 8260 module in an 8260 not managed by DMM is shown in Figure 51 Figure 52 Installing 8260 Modules in an 8260 Not Managed by DMM 5 4 3 Installing 8250 Module in a Hub Managed by DMM When a new 8250 module is inserted in the hub and the hub is managed by a DMM the following process will take place 1 Full power is applied to the mo...

Page 106: ...250 module results in a power deficit that is the total power required by the currently installed modules exceeds the available power supply the Controller module cannot prevent the power from being used by the newly installed module Therefore if you do not check the available power budget in your hub before installing an 8250 module you may have a situation where the total power consumed by the m...

Page 107: ...er to a newly installed 8250 module in an 8260 not managed by DMM is shown in Figure 54 Figure 54 Installing 8250 Modules in an 8260 Not Managed by DMM 5 5 Controlling Power to the 8260 Modules You can use the following DMM command to enable disable power to selected slots in your 8260 SET POWER SLOT slot MODE enable disable Note that this command is only applicable if an 8260 module is installed ...

Page 108: ...ng scenarios which were used to simulate a situation where a power failure occurs We had three installed power supplies in the hub used for testing these scenarios A Power Supply Failure Scenario 1 In this scenario the hub was operating in fault tolerant mode In order to simulate a power failure we turned off one of the power supplies We then received a message informing us that the system environ...

Page 109: ...er mode In this scenario after taking one power supply down we still had enough power to support all the installed modules therefore the hub remained in fault tolerant mode 8260 show power mode Power Management Information Hub Power Modes Fault Tolerant Mode FAULT_TOLERANT Fault Tolerant Status FAULT_TOLERANT Overheat Power Down Mode DISABLE Figure 57 Using the SHOW POWER MODE Command A Power Fail...

Page 110: ...ally Recovered Upon the recovery of the failed power supply the power mode will be changed automatically to the fault tolerant mode Message received from this device on 15 49 Mon 23 May 94 Enterprise Specific trap Environment Change Message Information Power Supply Status 3 ACTIVE 8260 Message received from this device on 15 49 Mon 23 May 94 Enterprise Specific trap Environment Change Message Info...

Page 111: ...the shipping carton and set the ON OFF switch to OFF Then remove a blank power supply faceplate in the slot which you will install the power supply Slide the power supply into the selected power supply slot until it is flush with the front of the hub Tighten the 2 spring loaded screws securely Connect the power cord Turn on the power supply switch Verify power supply operation by checking the acti...

Page 112: ...90 8260 Multiprotocol Intelligent Switching Hub ...

Page 113: ...rent components The fans and sensors The DMM Distributed Management Module The Controller module The SCI Serial Control Interface All of these components work together to make up the intelligent cooling subsystem Each 8260 has three fan units that can be installed or removed while the 8260 hub is operating These fan units are accessible from the back of the 8260 as shown in Figure 60 Figure 60 826...

Page 114: ...using the following DMM command SHOW HUB An example of the output from this command is shown in Figure 61 Hub Information Hub Type 58G5801 Backplane Information Backplane Type Revision Load Sharing Power Distribution Board 0 Enhanced TriChannel Backplane 0 Ring Backplane 0 Power Supply Information Power Supply Status Model Number 1 OKAY 6000PS 2 OKAY 6000PS 3 OKAY 6000PS 4 REMOVED Temperature Info...

Page 115: ...ODE An example of the output from this command is shown in Figure 62 8260 show power mode Power Management Information Hub Power Modes Fault Tolerant Mode NON_FAULT_TOLERANT Fault Tolerant Status NON_FAULT_TOLERANT Overheat Power Down Mode ENABLE 8260 Figure 62 Output from Show Power Mode Command The following section describes the mechanics of the intelligent cooling subsystem Each of the 8260 mo...

Page 116: ...260 modules in the affected zone are powered down When the overheat condition is resolved the modules are powered back up Modules with the highest priority are powered up first The 8250 modules and the 8260 modules with power class 10 cannot be powered down by the Controller module If the Overheat_Auto_Power_Down is disabled the Controller module will not take any action If the over temperature co...

Page 117: ...Figure 64 Flow Chart for an Overheat Condition Chapter 6 8260 Intelligent Cooling Subsystem 95 ...

Page 118: ...96 8260 Multiprotocol Intelligent Switching Hub ...

Page 119: ...ion in this book applies equally to both Ethernet V2 and 802 3 LANs the term Ethernet 802 3 will be used throughout this book However where there are differences they will be indicated by using the appropriate terminology The Ethernet architecture uses Carrier Sense Multiple Access with Collision Detection CSMA CD as the protocol to control the Ethernet bus operation As the name implies CSMA CD pe...

Page 120: ... runt and oversized packet refers to a packet whose frame size exceeds 1518 octets 7 1 3 Data Integrity To ensure integrity of the data being transmitted each data frame is appended with Frame Check Sequence FCS information The FCS information is computed by the transmitting station using a cyclic redundancy algorithm executed against the contents of the data frame to be sent The same algorithm is...

Page 121: ... be connected to one of the eight segments on the backplane Also the module provides eight isolated segments to which the individual ports on the module can be attached These isolated segments can be used to set up segments consisting of the users attached to that module without using any backplane resource Note The 8260 Ethernet 24 Port 10Base T Module supports up to 6 segments simultaneously Thi...

Page 122: ...ill resolve the problem by reversing the polarity Support for non 10Base T compliant devices This module allows you to disable link integrity which allows connection to some equipment that does not conform to the 10Base T standard When designing Ethernet segments consisting of the 8260 Ethernet 24 Port 10Base T Module you must use the following Equivalent Distances for this module Table 15 Equival...

Page 123: ...you with LED Indicators on the front panel that allow you to monitor the status of the module and the individual ports Table 16 describes the meaning of these LEDs Table 16 Page 1 of 2 24 Port 10Base T Module LED Descriptions LED Name Color State Description Module Status Green On Module powered up OK Off No Power Blinking Module failed self diagnostics Chapter 7 8260 Ethernet Modules 101 ...

Page 124: ...ss DIP_Configuration is enabled for DMM For more information please refer to 4 2 4 4 Configuring DMM Device on page 50 Table 16 Page 2 of 2 24 Port 10Base T Module LED Descriptions LED Name Color State Description Activity Yellow On Constant activity on the port Off No packets received on the port Blinking Normal activity on the port Status Green On Port enabled and link OK Off Port disabled 1 Bli...

Page 125: ... position 5 to choose if the module is going to use the Non Volatile RAM ON position or DIP switch settings OFF position for its configuration Note that if there is a management module installed in the 8260 this DIP switch determines which configuration NVRAM or DIP switch setting will be sent to the management module The actions taken by the management module upon receipt of this information are ...

Page 126: ...the 8 Ethernet segments on the backplane or one of the 8 isolated segments on the module Note that the ports can be connected to a maximum of six backplane and or isolated segments simultaneously The port assignment can be done via onboard dip switches or the following management module command SET PORT slot port NETWORK network Note When using DIP switches on the 8260 Ethernet 24 Port 10Base T Mo...

Page 127: ...ou can use the following management module command SET PORT slot port AUTO_POLARITY enable disable Enable disable link integrity To connect older equipment that does not fully comply with the 10Base T standard to this module you may have use the following management module command to disable the link integrity SET PORT slot port LINK_INTEGRITY enable disable Enable disable port alert You may use t...

Page 128: ...ng STP cabling The 24 40 port 10Base T modules provide the following features Per port switching Each port can be connected to one of the eight segments on the backplane Also the module provides eight isolated segments to which the individual ports on the module can be attached These isolated segments can be used to set up segments consisting of the users attached to that module without using any ...

Page 129: ...tion to some equipment that does not conform to the 10Base T standard When designing Ethernet segment consisting of the 20 40 port 10Base T modules you must use the following Equivalent Distances for this module Figure 69 on page 108 shows the front view of the 20 40 port 10BASE T modules As can be seen these modules provide you with LED Indicators on the front panel that allow you to monitor the ...

Page 130: ...0Base T Module LED Descriptions LED Name Color State Description Module Status Green On Module powered up OK Off No Power Blinking Module failed self diagnostics Activity Yellow On Constant activity on the port Off No packets received on the port Blinking Normal activity on the port 108 8260 Multiprotocol Intelligent Switching Hub ...

Page 131: ...e is installed in your 8260 the setting of these DIP switches will be ignored For more information please refer to 4 2 4 4 Configuring DMM Device on page 50 Table 19 Page 2 of 2 20 40 Port 10Base T Module LED Descriptions LED Name Color State Description Status Green On Port enabled and link OK Off Port disabled 1 Blink Link failure on the port 2 Blinks Port partitioned Figure 70 20 40 Port 10Base...

Page 132: ... factory with the DIP switches set for Ethernet_1 Use DIP switch position 5 to choose if the module is going to use the Non Volatile RAM ON position or DIP switch settings OFF position for its configuration Note that if there is a management module installed in the 8260 this DIP switch determines which configuration NVRAM or DIP switch Table 20 20 40 Port 10Base T Module DIP Switch Settings Networ...

Page 133: ...ommand to enable disable a port SET PORT slot port MODE enable disable Enable disable auto polarity This feature enables the 20 40 port 10BASE T modules to automatically switch the polarity of the twisted pair cabling in case the polarity of the cabling has been erroneously reversed during the cable assembly To enable auto polarity detection and reversal on each port you can use the following mana...

Page 134: ...he sending of port up and down alerts from the individual ports on this module SET PORT slot port ALERT_FILTER enable disable This command may be used to allow you to monitor the status of the crucial ports on your network while the alerts from the other ports are disabled Enable Disable remote Diagnostics The Remote Diagnostics feature allows this module to detect certain unusual failure conditio...

Page 135: ...his module should use either the IBM 10Base FB Transceivers or any transceiver which fully complies with the 802 3 10Base FB standard The 8260 Ethernet 10 Port 10Base FB Module provides the following features Per port switching Each port can be connected to one of the eight segments on the backplane Also the module provides four isolated segments to which the individual ports on the module can be ...

Page 136: ...se T port on an 8260 Ethernet 24 Port 10Base T Module to be a redundant port for a 10Base FB port on the 8260 Ethernet 10 Port 10Base FB Module When designing an Ethernet segment consisting of the 8260 Ethernet 10 Port 10Base FB Module you must use the following Equivalent Distances for this module Table 22 Equivalent Distances for Ethernet 10Base FB Module 8260 Module Equivalent Distance meters 2...

Page 137: ... you with LED indicators on the front panel that allow you to monitor the status of the module and the individual ports Table 23 describes the meaning of these LEDs Table 23 Page 1 of 2 10 Port 10Base FB Module LED Descriptions LED Name Color State Description Module Status Green On Module powered up OK Off No Power Blinking Module failed self diagnostics Chapter 7 8260 Ethernet Modules 115 ...

Page 138: ...P switches will be ignored Table 23 Page 2 of 2 10 Port 10Base FB Module LED Descriptions LED Name Color State Description Activity Yellow On Constant activity on the port Off No packets received on the port Blinking Normal activity on the port Status Green On Port enabled and link OK Off Port disabled 1 Blink Link failure on the port 2 Blinks Jabber 3 Blinks Port partitioned 4 Blinks Remote fault...

Page 139: ... segment so in effect you cannot do per port switching Table 17 on page 103 shows the meaning of settings for DIP switches 1 thru 4 Table 24 10 Port 10Base FB Module DIP Switch Settings Network Selection Switch 1 Switch 2 Switch 3 Switch 4 Ethernet_1 ON ON ON ON Ethernet_2 OFF ON ON ON Ethernet_3 ON OFF ON ON Ethernet_4 OFF OFF ON ON Ethernet_5 ON ON OFF ON Ethernet_6 OFF ON OFF ON Ethernet_7 ON O...

Page 140: ...ribed in 4 2 4 4 Configuring DMM Device on page 50 By default the DIP switch 5 is set to NVRAM 7 8 10Base FB Module Usage Figure 75 provides an example of the usage of the 8260 Ethernet 10 Port 10Base FB Module Figure 75 10 Port 10Base FB Module Usage 7 9 Configuring the 10Base FB Module To configure the 8260 Ethernet 10 Port 10Base FB Module you must do the following Select a network for each por...

Page 141: ...a 10Base T port can be defined to be a redundant port for a 10Base FB port Also port redundancy is allowed between the 8250 and the 8260 ports You can use the following management module command to set port redundancy SET PORT slot port MODE REDUNDANT slot port When configuring port redundancy the redundancy should be enabled for one end of the link only This is shown in Figure 76 Figure 76 Config...

Page 142: ...dule 24 Port 10Base T 10 Port 10Base FB 20 Port 10Base T 40 Port 10Base T Feature Code 1024 1110 1210 1610 1020 1040 Daughter Cards Supported 1 1 2 2 I O Modules N A N A N A N A Number of Ports 24 10 20 40 Type of Ports Telco ST FC SMA RJ 45 RJ 45 Switching Supported Port Port Port Port Number of Slots Used 1 1 1 2 Number Backplane Networks Accessible 8 8 8 8 Number of Isolated Networks Accessible...

Page 143: ... address table The contents of this table can be created and or modified using manual and or auto learning procedures as described in 7 11 2 Configuring the Security Module on page 124 Each entry in the network security address table contains the 8260 slot and port number as well as the MAC address of the station authorized to transmit data on that port You may define as many authorized users as y...

Page 144: ...sdropping protection The following sections describe the theory of operation for each security feature 7 11 1 1 Intrusion Protection When performing intrusion protection on a port the E SEC card will check the source address of the packet and its port ID against the network security address table entries If a match is found the transmitting station is an authorized user If no match is found the tr...

Page 145: ...n from the time that the source address of the frame is seen by the E SEC card it takes 35 bit times to start jamming or passing the packets This means that the transmitting station will be able to send 35 bits of the packet from the end of source address to the stations before the jamming process can stop an unauthorized station This 35 bits includes 16 bits of type length field and 19 bits of us...

Page 146: ...twork ethernet_3 ETHERNET_3 Network Security Configuration Securing Module Slot 07 02 Version v1 00 E SEC Ethernet Private Line Card Operational Mode DISABLED Administrative Mode DISABLED Auto learning ENABLED Eavesdrop Protection DISABLED Intruder Detection Intruder Actions Source Address Checking DISABLED Intruder Jamming DISABLED Source Port Checking DISABLED Intruder Reporting DISABLED Intrude...

Page 147: ...curity Port Table Display for Module 1 E24PS 6 8 Port AutoLearn FailSafe Group_A Group_B Intruder_Check Jamming 02 16 ENABLED DISABLED 0 0 DISABLED ENABLED 8260A set security network ethernet_3 mode enable ETHERNET_3 Administrative Mode set to ENABLED 8260A show security address_table all Entry Port Group_Code MAC_Address 1 2 8 08 00 5a 61 58 cf 2 2 15 10 00 5a d4 b0 8c 3 2 12 10 00 5a 82 59 32 4 ...

Page 148: ...ddress checking for the network using the following example 8260A set security network ethernet_3 source_address_checking enable This option enables the security card to check the source address in the packets against the contents of the network security address table b Enable source port checking for the network using the following example 8260A set security network ethernet_3 source_port_checkin...

Page 149: ...Therefore the contents of the intruder table will be lost after a reset of DMM b Jam intruder packets by issuing the following commands in the intruder table To enable intruder jamming you must issue the following command 8260A set security network ethernet_3 intruder_jamming enable Note This option will jam any packets sent by the intruders But the intruder will still be allowed to attempt to sen...

Page 150: ...and port jamming is enabled You can use the following example to enable the failsafe feature for each port 8260A set security port 2 15 failsafe enable 128 8260 Multiprotocol Intelligent Switching Hub ...

Page 151: ...antly circulates around the ring and is available for any station To transmit data a station has to capture a token and modify it to indicate that it is transmitting data The data transmission unit is called a frame The frame is sent sequentially from one station to the next physically active station known as the downstream neighbor on the ring Each station upon receiving that frame would check to...

Page 152: ...n transmits a Standby Monitor Present SMP MAC frame to all the stations on the ring The next downstream station ignores the Active Monitor Present MAC frame because the A and C bit are set to B 1 but it copies the Standby Monitor Present MAC frame issued by its NAUN It then sets the A and C bits to B 1 and also copies its NAUN from the source address of this MAC frame This station will in turn tra...

Page 153: ... classified into the following categories Hard error Hard errors are permanent faults that stop all normal traffic on the ring They are usually first detected at the receive side of the next active downstream station from the fault That ring station will immediately transmit a Beacon MAC frame to alert every station It continues to transmit Beacon MAC frames at a specified time interval until its ...

Page 154: ...ented as a voltage opposite direction of the 1 bit Depending on the bit stream that is being transmitted with NRZ it is possible that the line may spend on average more time in one voltage level than the other In other words the signal would be electrically unbalanced Since the physical wire has capacitance the unbalanced signal causes the wire to develop a constant DC voltage across the transmiss...

Page 155: ...ocks with the other stations on the ring The source timing for all the stations is provided by one of the stations on the ring which is called the active monitor Note In any operating ring one of the stations is elected as the active monitor and the other stations act as standby monitors prepared to take over if the active monitor fails The process of electing an active monitor is called token cla...

Page 156: ...riate time to review the signalling used on the 8260 backplane for the token ring segments 8 2 8260 Backplane Signalling for TR Segments The ShuntBus on the 8260 backplane consists of the circuitry to accommodate 10 token ring segments The circuitry for each token ring segment on the backplane forms a physical ring on the backplane with a self shorting connector at each slot location Connection fr...

Page 157: ...ane ring the relay connects the input signals from the backplane to receive signals on the lobe and the output signals from the backplane to the transmit signals on the lobe Each token ring interface on the ShuntBus connector uses three shunt pairs to form one token ring network on the backplane The three shunt pairs carry a clock and two data signals When a token ring module is inserted into the ...

Page 158: ...ation using the same encoding technique as the 4 Mbps operation would result in a clock frequency of 32 MHz allowing little margin for timing or skew Therefore a different encoding scheme is used to reduce the baud rate and thus enhance the integrity of the signal on the 8260 backplane For 16 Mbps operation one of the data signal shunt pairs Data_A carries the first half bit of the Differential Ma...

Page 159: ...gnalling on the 8260 backplane each 8260 media module must convert the analog signal it has received from the attached stations and convert it to a digital signal and then present the data and clock to the backplane This is done within both the active and passive modules In the opposite direction the modules must receive the data and clock from the backplane and convert them to an analog signal be...

Page 160: ...ck The larger the bandwidth the better the PLL can track the fast changing incoming signals but higher bandwidths also mean more of the jitter is passed to the output so just increasing the bandwidth does not result in more stations on a ring What is needed is a PLL that behaves like a wideband PLL but the clock output should behave like that from a PLL with a narrow bandwidth That is what is impl...

Page 161: ...ount of jitter which enters the backplane has been minimized This is the case with the passive modules as well as the active modules However active modules such as the 18 port active per port switching module 18 port active module switching module and the dual fiber repeater module implement one DPLL at every port while the passive modules such as the 20 port passive module implements just one DPL...

Page 162: ...port Instead a Jitter Attenuation Daughter Card JADC is required which implements an enhanced DPLL function which can receive and eliminate a greater amount of accumulated jitter Note Ports 17 and 18 on the 18 port active modules can be set up as either RI RO or lobe ports using the jumpers provided on the module When these ports are configured as RI RO ports and your 8260 is connected via these p...

Page 163: ...y be accumulated by up to 20 stations that may attach to the passive module or a high number of stations attached to the non 8260 hubs The size of the buffer used in the Jitter Attenuator Daughter Card is 64 bits as opposed to the 8 bit buffer which is used in the DPLLs implemented on the active modules Figure 86 shows the components of the DPLL implemented on the 8260 Jitter Attenuator Daughter C...

Page 164: ...g or regenerative element between ports This is done by a relay on each port Data from attached workstations is passed from one port to the next without any re timing and regeneration Note that if a port is disabled or not used the relay on that port will be wrapped to prevent the station on that port from entering the ring This will result in the signal flowing to the active ports on each module ...

Page 165: ...s a comparison the maximum lobe length supported by the 8260 passive modules is shown in Table 27 3 The signal received from each lobe is converted to a digital form before entering the module The digital signal on the active modules makes it easy to manipulate the flow of data on a per port basis allowing IBM to offer active per port switching modules Table 26 Lobe Distances Using 8260 Active TR ...

Page 166: ...stations operating at different speeds Also the multiple rings on a single active module can be a mixture of the 10 backplane segments on the ShuntBus token_ring_1 thru token_ring_10 and the 11 isolated segments isolated_1 thru isolated_11 which exist on each active module The isolated segments on the active modules can be used to set up token ring segments between two or more stations on that mod...

Page 167: ...against switching an open adapter from one ring to another To understand the reasons for the static switch let s review the functions which are performed by each station when it first attaches to a token ring The following is a summary of these functions 1 Lobe test The station sends a series of Lobe Test MAC frames on the lobe to make sure that the lobe is not faulty 2 Insert into the ring The st...

Page 168: ...fore conceivable that if the administrator is not careful an open adapter can be moved to another ring which contains an adapter with the same address This will result in having two stations on the same ring which can produce unpredictable results To prevent a station from being able to be switched from one network to another the static switch can be set to enabled In that case you can only switch...

Page 169: ... the SNA host via the 3745 attached to ring FFF As the path between station A and the host involves a source routing bridge bridge 1 the Routing Information field used in the frames between station A and the host contains ring 1 bridge 1 and ring FFF Now if in the middle of your SNA session you switch station A to ring 2 the actual path between station A and the host will change while station A an...

Page 170: ...n the physical placement of the stations on the module the station on port 1 is upstream of the station on port 2 etc If the ring consists of more than one module the ordering of the stations on the ring also depends on the physical placement of the modules in the concentrator the module in slot 1 is upstream of the module in slot 2 etc In the active per port switching modules the same principle a...

Page 171: ... the following DMM command SET NETWORK TOKEN_RING token_ring_n RING_SPEED 4mbps 16mbps SET NETWORK TOKEN_RING isolated_n slot RING_SPEED 4mbps 16mbps Once you set the ring speed any port attached to that ring will assume the speed of the ring You do not set the ring speed for each port 8 8 2 Speed Detection on Passive Modules Passive modules implement a software based method to detect incorrect ri...

Page 172: ... The counter for this threshold is reset every time a port successfully inserts into the ring Note that the process of speed detection on the passive modules prevents the existing stations from accessing the ring for the duration of the speed detection process Therefore the use of this process is provided as a configuration option on the passive modules Users can enable or disable the speed detect...

Page 173: ...esulting in the signal being restored to the ring and the normal operation of the ring being resumed If the test is successful the beaconing station re enters the ring and continues to send the Beacon MAC frames If the ring does not recover after both the beaconing stations and its NAUN have been tested the error cannot be repaired by the attaching stations and some other function must intervene t...

Page 174: ...SET TRUNK slot RING_IN EXTERNAL_BEACON_RECOVERY exists non_exists The effects of issuing this command for a trunk are discussed later in this section When beaconing is detected the TRMM waits for up to 3 seconds to verify beaconing is still active The TRMM will then attempt to use the last current logical map of the concentrator to determine the cause of the beaconing Depending on the reaction of ...

Page 175: ...est for condition where beaconing was fixed temporarily externally 15 Isolate modules one at a time until beaconing is detected to be gone If beaconing goes away put module back on network and disable ports on that module until beaconing goes away When beaconing ends the correct port has been found 16 Isolate the TRMM if all else fails When external trunks are disabled and the disabling fixes the ...

Page 176: ...ement Module Advanced MGT v3 10 A pSOS SNMP Name 8250 Location ITSO LAB Raleigh For assistance contact Mohammad Shabani X2339 Boot EPROM Version v3 00 A Size 256 KBytes Flash EPROM Version v3 10 A Size 1024 KBytes DRAM Size 2048 KByte Serial Number 1088813 Restarts 6 Service Date 94 09 06 Interface IP Address Subnet Mask Primary Gateway Secondary Gat 1 009 067 046 235 FF FF FF F0 009 067 046 238 0...

Page 177: ...red for that module and the URA is located between the backplane and the first port of the module while DRA is located between the backplane and the last port of that module This is shown in Figure 93 Figure 93 Recovery ASIC in Module Switching Module In the case of per port switching modules as the ports on the module can be attached to multiple backplane segments the Recovery ASIC is not connect...

Page 178: ...1 00 TOKEN_RING_10 Port s are down T20MS Token Ring Passive Module Switching Twisted Pair Boot Version v1 00 Ring Speed Dip Setting 16 MBPS Dip Network Setting TOKEN_RING_1 Non Volatile DIP Setting ENABLED Recovery Asic Primary Address 08 00 8f d0 38 43 Recovery Asic Secondary Address 08 00 8f d0 38 83 Beacon Threshold 255 Speed Detect Threshold 15 8260 Figure 95 Display Output for 20 Port Passive...

Page 179: ...ry ASIC enters this mode when it sees a Beacon Type 2 3 or 4 MAC frame Note A Beacon Type 1 MAC frame is used for management purposes Beacon MAC frames from a normal ring station are type 2 3 or 4 depending upon the fault 3 Manual mode This mode is used for ring reconfiguration with 8250 repeaters and using proprietary 8250 trunk unwrapping Before describing the procedure used by the Recovery ASIC...

Page 180: ...rames issued by DRA will first go onto the backplane and then through all the other token ring modules and lobes that make up the beaconing ring If the Beacon frames reach the Upstream Recovery ASIC URA on this module two conclusions can be made 1 The rest of the ring is complete and operating normally and 2 The fault must be somewhere in this module or the stations attached to this module or on t...

Page 181: ...ation B and station C The Recovery ASIC will then deactivate all the ports on module 1 and then check station B and station C individually and when it finds that station B is the source of problem it deactivates the port attaching station B permanently and then reactivates all the other ports and inserts the module back into the backplane Figure 97 Beacon Recovery on the Module Switching Modules 8...

Page 182: ...cess All the stations attached to the ring will take part in the neighbor notification enabling each station to learn its NAUN Note Although the URA and DRA have a MAC address they do not participate in the neighbor notification process In other words they do not issue AMP or SMP MAC frames and do not copy them either One of the functions of the Recovery ASIC is to monitor for AMP and SMP MAC fram...

Page 183: ... of the output for this command for a module switching module with two active ports is shown in Figure 98 8260 show ring_map token_ring logical token_ring_1 Token Ring Logical Map for Network TOKEN_RING_1 MAC Address Slot Port 02 00 00 c0 cc 1c 05 01 1 08 00 8f 40 01 a6 05 01 3 8260 Figure 98 Address to Port Map Display for a Module Switching Module When a new station on the module inserts into th...

Page 184: ...AC addresses the new MAC address has been inserted In this example they would be station B and station D If these two MAC addresses are on two different ports which is the case in this example it concludes that the new MAC address must be on the port associated with one of those two MAC addresses The Recovery ASIC then wraps all the ports on the module and the backplane and tests each of the two s...

Page 185: ...nto the ring Therefore a port connecting a fan out device with no active station will be in no phantom status and will have no entry in the address to port map table Note To allow the token ring passive modules to perform address to port mapping when splitters and fan out devices are used you must issue the following command SET NETWORK TOKEN_RING token_ring_n MISMATCH_RESOLUTION enable 8 10 1 2 S...

Page 186: ...cess looking for AMP SMP MAC frames as shown in Figure 102 Figure 102 Address to Port Mapping on Per Port Switching Modules Ring Monitor ignores all the AMP SMP MAC frames that have A C bit set to B 1 but as soon it sees an AMP SMP with the A C bit set to B 0 this frame is issued by the station immediately upstream of this Ring Monitor it moves to the downstream side of its associated port and tra...

Page 187: ...ith the A C bit set to B 1 plus the source address of the AMP SMP MAC frame with the A C bit set to B 0 show addresses of the stations attached to this port via the fan out device and are used by the Ring Monitor to build the address to port map for this port Note A fan out device may support more than 8 stations which will result in the Ring Monitor seeing as many AMP SMP frames as the number of ...

Page 188: ...ts associated port when it sees an AMP SMP MAC frame with the A C bit set to B 0 and begins trapping the AMP SMP MAC frames that it sees Since the station attached to this port does not have a MAC address does not participate in the neighbor notification and does not copy any AMP SMP MAC frame the Ring Monitor will not see any AMP SMP MAC frame with the A C bit set to B 1 and will remain on the do...

Page 189: ...the primary ring through a Trunk Coupling Unit TCU and operate exactly as specified in the IEEE 802 5 standard Dual ring stations on the other hand are connected to both the primary ring and secondary ring through two TCUs Dual ring reconfiguration employs wrapback to provide for recovery from all forms of signal loss failures and from trunk line failures not covered by the IEEE 802 5 standard The...

Page 190: ...rocess it is determined that the fault domain is between RI and RO the following process takes place 1 DRA is inserted on the primary path and URA is inserted on the backup path between RI and RO ports 2 Faulty trunk is located and wrapped using dual ring recovery methods 3 URA and DRA are de inserted 4 DMM and Merge Manager see 8 12 3 Merge Manager on page 170 are notified of the action taken Thi...

Page 191: ...g process takes place 1 DRA and URA are inserted on the primary path 2 RI RO trunk is treated like a single lobe port If wrapping the trunk pair fixes the fault trunks are left wrapped 3 URA and DRA are de inserted 4 DMM and Merge Manager see 8 12 3 Merge Manager on page 170 are notified of the action taken This is shown in Figure 107 Figure 107 Trunk Wrapping in Active Per Port Switching Module C...

Page 192: ...nt passes one of these tests the trunk is deemed to be recovered and is unwrapped If it fails the test retry will be attempted at intervals described below 8 12 4 Trunk Unwrapping on the Per Port Switching Modules For trunks attached to the 18 port active per port switching module and the 10 port dual fiber repeater module merging unwrapping is attempted After 5 seconds After 30 seconds Every 5 mi...

Page 193: ...s allows the URA to be on a segment isolated with the trunk under the test Obviously this is disruptive to the stations on the module so it is not desirable to try this every 5 minutes Note URA cannot transmit Downstream Converter Presence because the Recovery ASIC MAC cannot transmit on token Also if LNM is on the ring it does not get a MAIN RING PATH WRAPPED TO BACKUP alert Chapter 8 8260 Token ...

Page 194: ...172 8260 Multiprotocol Intelligent Switching Hub ...

Page 195: ... routers to connect the 8260 token ring segments consisting of 8260 modules to the token ring segments consisting of 8250 modules For information about 8250 Ethernet modules please refer to IBM 8250 Intelligent Hub and IBM HUB Management Program 6000 GG24 4033 9 2 Configuring Token Ring Network Parameters Before discussing the individual 8260 token ring modules and how to configure them this secti...

Page 196: ... of backplane and isolated segments Note When you use a backplane or isolated segment the equivalent isolated or backplane segment is not available For example if one or more ports are assigned to token_ring_1 segment no port can be assigned to isolated_1 segment Simultaneous UTP and STP cabling is supported on the module Also UTP and STP attached stations can be connected to the same segment Port...

Page 197: ...enuator daughter card Figure 108 Front View of 18 Port Active Per Port Switching Module Figure 108 shows the front view of the 18 port active per port switching module As can be seen this module provides LED Indicators on the front panel that allow you to monitor the status of the module and the individual ports Table 28 on page 176 describes the meaning of these LEDs Chapter 9 8260 Token Ring Mod...

Page 198: ...Table 28 18 Port Active Per Port Switching Module LED Descriptions LED Name Color State Description Module Status Green On Module powered up OK Off No Power Blinking Module failed self diagnostics RI RO Green On Trunk enabled and operating Off Trunk disabled Blinking Trunk enabled but not operating normally JA Green On JADC card installed and operating normally Off JADC card not installed Blinking...

Page 199: ...ons taken by the management module upon receipt of this information are described in 4 2 4 4 Configuring DMM Device on page 50 By default DIP switch 5 is set to NVRAM Use DIP switch position 8 to set the ring speed to 4 Mbps ON or 16 Mbps OFF The module is shipped from the factory with the speed set to 16 Mbps Table 29 18 Port Active Per Port Switching Module Network Selection Switch 1 Switch 2 Sw...

Page 200: ...s exceeded the port or trunk remains wrapped until the user disables and re enables the port While wrapped the port status is BCN THRES EXCEEDED Note The bcn_threshold is reset whenever a port on the module successfully inserts into the ring or the module is reset 3 Enable disable static switch for each port If you want the user of a port to power down the station drop the phantom signal before th...

Page 201: ... used when the trunk is connected to an 8250 or 8228 ONline This is used when the trunk is connected to a Chipcom ONline switching hub 8230 This is used when the trunk is connected to an 8230 All of the current 8260 trunk compatibility modes can be summarized as two different modes a 8250 8230 ONline In this mode the trunks open when enabled as long as a signal can be passed through the trunk conn...

Page 202: ...18 Port Active Module Switching Module Configuration of this module is identical to the configuration of the 18 port active per port switching module with the exception that you must assign the module to a backplane segment or an isolated network using the following command SET MODULE slot subslot NETWORK network 9 5 8260 20 Port Passive Module Switching Module This is a single slot module that su...

Page 203: ... an 8228 cannot be used as the fan out device with this module Support for connection of MAC less stations such as token ring tracing tools Software based speed detection so that only the stations with the correct ring speed settings can attach to the network Note that the speed detection implemented on the passive module may be enabled or disabled by the user Support for 4 or 16 Mbps token ring n...

Page 204: ...ront panel that allow you to monitor the status of the module and the individual ports Table 30 describes the meaning of these LEDs Table 30 Page 1 of 2 20 Port Passive Module LED Descriptions LED Name Color State Description Module Status Green On Module powered up OK Off No Power Blinking Module failed self diagnostics 182 8260 Multiprotocol Intelligent Switching Hub ...

Page 205: ... no phantom Figure 112 20 Port Passive Module Module Side View The DIP switch settings for this module are identical to the 18 port active per port switching module described in 9 3 1 Configuring the 18 Port Active Per Port Switching Module on page 177 with the following exception Use DIP switch position 6 to enable OFF or disable ON the speed detection on the passive module For more information a...

Page 206: ...ansition is detected on the port or the port is disabled and then re enabled by the administrator For more information about speed detection please refer to 8 8 2 Speed Detection on Passive Modules on page 149 3 Set speed threshold for the module You can set the number of times that a phantom transition allows a wrapped port due to the beacon conditions to unwrap To do so you can use the following...

Page 207: ...imum of 11 backplane or isolated segments When you use a backplane or isolated segment the equivalent isolated or backplane segment is not available For example if one or more ports are assigned to token_ring_1 segment no port can be assigned to isolated_1 segment Simultaneous UTP and STP cabling is supported on the lobe ports attached to the same or different segments Support for beacon recovery ...

Page 208: ... panel that allow you to monitor the status of the module and the individual ports Table 28 on page 176 describes the meaning of these LEDs Table 31 Page 1 of 2 Dual Fiber Repeater Module LED Descriptions LED Name Color State Description Module Status Green On Module powered up OK Off No Power Blinking Module failed self diagnostics 186 8260 Multiprotocol Intelligent Switching Hub ...

Page 209: ...e 2 of 2 Dual Fiber Repeater Module LED Descriptions LED Name Color State Description RI RO Green On Trunk enabled and operating Off Trunk disabled Blinking Trunk enabled but not operating normally JA1 and JA2 Green On JADC card installed and operating normally Off JADC card not installed Blinking JADC card failed diagnostics Port Status Green On Port enabled and operating normally on the ring Off...

Page 210: ...e information about static_switch please refer to 8 6 2 Static Switch on the Per Port Switching Modules on page 145 Note Trunk ports can be switched between different segments at any time 3 Assign ports to network segments Use the following command to assign each port on the module to one of the backplane segments or isolated segments on the module SET PORT slot port NETWORK network 4 Assign RI RO...

Page 211: ...mand SET TRUNK slot RING_IN n MODE enable disable or SET TRUNK slot RING_OUT n MODE enable disable 7 Enable disable ports Each port can be enabled disabled using the following command SET PORT slot port mode enable disable Chapter 9 8260 Token Ring Modules 189 ...

Page 212: ...190 8260 Multiprotocol Intelligent Switching Hub ...

Page 213: ...es called RMON probes or RMON agents monitor and collect traffic statistics on the network segment to which they are attached RMON provides a view of the data link layer of the 802 3 Ethernet and 802 5 token ring networks The data link layer as shown in Figure 115 is just above the physical layer in the OSI stack and provides reliable delivery of data across the underlying physical network Figure ...

Page 214: ...1 Network Probes The implementation of RMON requires network probes to be installed on each managed LAN segment throughout the enterprise network as depicted in Figure 116 on page 193 These network probes are devices whose resources are dedicated to managing the LAN segments they are attached to Resources required by these network probes are very much dependent on the number of devices in the segm...

Page 215: ...ition the RMON manager can request the information to be transferred on demand Each agent can be configured by the RMON manager to monitor and collect LAN statistics at specified time intervals for the desired duration and to forward the information gathered at a specified frequency Alarms can be configured on the agents to generate events that inform the manager of a certain threshold incident Th...

Page 216: ...ted and stored Historical information captures trends related events and information that can allow one to witness the occurrence of the problem By playing back the historical information collected a detailed diagnosis can be performed to ascertain the cause of a problem 10 2 3 Problem Detection and Reporting The RMON agent is fully responsible for problem detection and reporting on the segment th...

Page 217: ... considered the basic documentation for RMON products 10 4 Managing the Ethernet LAN Environment The RMON MIB for Ethernet contains specific statistics for managing the Ethernet LAN environment A proper understanding of Ethernet LAN architecture is required to fully appreciate what each statistic means and how it is calculated 7 1 Ethernet LAN Overview on page 97 provides a brief description of th...

Page 218: ... packets of particular interest to be filtered and isolated These packets can then be directed into capture buffers or used to trigger events It is useful for monitoring traffic flow and setting alarm conditions Packet Capture The Packet Capture group allows packets to be captured upon a filter match and stored for later retrieval It can be used to view the history of packet activity in the event ...

Page 219: ...ly degrade the performance of a network Multicast Packets The number of packets received that were directed to a multicast address Multicast packets are more commonly found in DECnet environments where they are used for communicating with end nodes and routers This does not include packets directed to broadcast addresses CRC Align Error The number of corrupted packets received that had a length of...

Page 220: ... set up a session to collect statistical data via the Statistics MIB from several probes every 10 seconds for real time monitoring The History MIB can be configured to gather statistics from the same sources at intervals of 30 seconds for an ongoing portrait and at 30 minute intervals for later study You are encouraged to set up two history control entries per monitored interface upon initializati...

Page 221: ...1 3 Alarm Group The Alarm group is used to track extraordinary activities or events It permits the operator to set the RMON alarms to specific thresholds and when traffic exceeds or drops below those thresholds an event is activated Thresholds can be defined as a rising threshold or a falling threshold A rising threshold is used to monitor the value of a tracked variable when it rises above a part...

Page 222: ...tation For instance you can specify viewing the top 5 senders top 10 broadcast hosts top 3 multicast hosts etc The Host Top N group can be particularly useful in isolating hosts that are a source of problems in the network 10 4 1 6 Matrix Group The Matrix group consists of tables that store statistics for a particular conversation between two addresses New entries are appended as the monitoring de...

Page 223: ...s alarms as well as from traffic flowing through preset channels The events in turn can trigger some other actions such as creating a log entry or initiating an SNMP trap or turning a channel on or off The Events group maintains the following two tables An Event table that contains events that can be generated when certain conditions are met A Log table to log generated events 10 5 Managing the To...

Page 224: ...t can download configuration information as well as remove any station on a monitored ring Source Routing This group collects utilization statistics derived from source routing information present in token ring packets in a source route bridging environment 10 5 1 1 Statistics Group The Statistics group provides a real time view of the token ring segment activity as measured by the network probe a...

Page 225: ...tion MAC Packet The number of MAC packets received This excludes packets that were not good frames Ring Purge Event A ring purge event refers to one of the following occurrences Completion of the token claiming process Detection of a token error such as a lost frame or token a circulating frame or a circulating priority token The probe will count the number of times the ring enters the ring purge ...

Page 226: ... of Claim Token MAC frames detected by the probe NAUN Change Any ring station upon detecting a change in the address of its nearest active upstream neighbor NAUN during the neighbor notification process will send a NAUN Change MAC frame to the configuration report server This address change indicates that either a ring station has attached to the ring or a station has removed itself from the ring ...

Page 227: ...g station but in one or more stations sending excessive number of frames to the congested adapter This statistic is found in the total number of Congestion errors reported in the Soft Error Report MAC frame Frame Copied Error The Frame Copied Soft error counter is incremented each time a destination station sees a frame addressed to it and the Address Recognized and Frame Copied bits set on Under ...

Page 228: ...d by the active monitor to all ring stations to Inform standby monitors of the active monitor s presence Indicate that the ring is functioning correctly Initiate a neighbor notification NAUN The Token Ring Promiscuous Statistics Group This group gathers current utilization statistics from non MAC packets on a particular token ring interface The statistics like data packets data octets broadcast pa...

Page 229: ...functional address This does not include packets directed to the broadcast addresses Packet Size Statistics The probe keeps individual counters for counting the number of frames detected with the following frame lengths 18 63 octets 64 127 octets 128 255 octets 256 511 octets 512 1023 octets 1024 2047 octets 2048 4095 octets 4096 8191 octets 8192 18000 octets Greater than 18000 octets This informa...

Page 230: ... of buckets to be used is defined by the operator The intervals over which the data is sampled for each bucket can be set to any number of seconds from one to 3600 one hour Note It is important to configure the appropriate time interval for sampling the statistical data as no indication will be given when the statistical counters overflow their maximum value For instance on a heavily loaded token ...

Page 231: ...us token ring statistics based on user defined frequency and duration This group contains a total of 15 different counters for collecting and storing the following statistics Drop Events Data Octets Data Packets Broadcast Packets Multicast Packets Good non MAC frames with lengths between 18 63 octets 64 127 octets 128 255 octets 256 511 octets 512 1023 octets 1024 2047 octets 2048 4095 octets 4096...

Page 232: ... by the station Total Burst errors reported by the station Total Burst errors reported by the station s NAUN Total Address Copied errors reported by the station s NAUN Total Abort errors reported by the station Total Lost Frame errors reported by the station Total Congestion errors reported by the station Total Frame Copied errors reported by the station Total Frequency errors reported by the stat...

Page 233: ...nother ring In Octets Contains the count of octets in good frames sent into this ring from another ring Out Frames Contains the count of frames sent from this ring to another ring Out Octets Contains the count of octets in good frames sent from this ring to another ring Through Frames Contains the count of frames sent from another ring through this ring to another ring Through Octets Contains the ...

Page 234: ... frames and whose source or destination address were on this ring Seven Hop Frames Contains the total number of frames received whose route had seven hops were not all routes broadcast frames and whose source or destination address were on this ring Eight Hop Frames Contains the total number of frames received whose route had eight hops were not all routes broadcast frames and whose source or dest...

Page 235: ...me of this display the SLIP interface was not active Note that the MAC addresses shown are those of the T MAC and E MACs and the admin stat is as configured by SET MODULE INTERFACE command for the T MAC or E MAC The admin stat should be UP for the DMM to be able to use that interface to monitor the corresponding network As shown in Figure 117 each E MAC or T MAC has an interface index assigned to ...

Page 236: ...on information Removes station from ring Reports topology changes Ring Error Monitor REM Monitors collects analyses errors Assists in fault isolation DOT_5 group support Support for RFC 1231 IEEE 802 5 Token Ring MIB Support for MIB II interface statistics The following sections describe how you can monitor the token ring and Ethernet segments on the 8260 using the monitoring capabilities offered ...

Page 237: ...e output displayed for this command is shown in Figure 118 8260A show counter ethernet ethernet_1 Ethernet Statistics for ETHERNET_1 FCS Errors 0 SQE Test Errors 0 Alignment Errors 0 Carrier Sense Errors 0 Frame Too Longs 0 Deferred Transmissions 0 Late Collisions 0 Excessive Collisions 0 Single Collision Frames 0 Multiple Collision Frames 0 Internal MAC Receive Errors 0 Internal MAC Transmit Erro...

Page 238: ...d Discards 0 Transmitted Errors 0 8260A Figure 119 Show Counter Interface for Ethernet Segment 3 Display statistics about the traffic from an individual port module You can display the network statistics for an individual port or module using the following command SHOW COUNTER REPEATER network MODULE slot or SHOW COUNTER REPEATER network PORT slot port Note These counters are not related to RMON A...

Page 239: ...Figure 120 Show Counter Repeater for Ethernet Segment Note With the current release of the DMM code we could not display this information about the 8250 Ethernet modules regardless of where the E MAC was installed 4 Display RMON host statistics You can display the RMON Host group for stations attached to a segment using the following command SHOW COUNTER RMON HOSTS network all mac_address An examp...

Page 240: ...e above statistics you must have enabled RMON Host group collection using the following command SET RMON HOST INTERFACE index Where index is the index number associated with the E MAC attached to the network to be monitored This index number can be displayed using the SHOW INTERFACE command Note If the E MAC is mounted on EC DMM you will be able to collect the above statistics about stations attac...

Page 241: ...tion on the E MAC allows you to add and delete control table entries as discussed in the next step for the following RMON groups Statistics Host Matrix History Host Top N Events Alarms 4 To be able to collect the information about each RMON group you must add the DMM interface to the RMON control table of that group You can do this for each RMON group using the following commands Host group SET RM...

Page 242: ...DMM to collect RMON Host group for Ethernet_1 we added interface 3 to the RMON Host control table using the following command 8260 set rmon host ethernet interface 3 Note When you enable the probe function of the DMM it creates default control entries for Collecting statistics on the MAC interface Monitoring host information Monitoring matrix information Generating two history reports one every 30...

Page 243: ...ppropriate RMON control table the RMON information for that group will be collected on the network to which this interface is attached You can display the contents of the RMON information for the desired group using the following command SHOW RMON rmon group DATA control_index data_index In the above command the control_index is the index for the RMON group that you want to display the information...

Page 244: ... Broadcast 0 Output Packets Multicast 0 More End of Host Table Figure 123 RMON Host Statistics Display 10 6 5 SHOW COUNTER Command for Token Ring Networks This command allows you to display the following information about the segments to which the DMM has an interface via a T MAC 1 Display error statistics for a token ring segment You can display the error statistics DOT5 for token ring segments u...

Page 245: ...gles 3 8260A 8260A Figure 124 Show Counter for Token_Ring Segments In the above example the top portion of the display will always show the correct information regardless of the settings of the monitoring parameters for the T MAC But to get the correct counter values shown in the bottom part of the display you must enable DOT5 Group for the T MAC using the following command SET MODULE slot subalot...

Page 246: ...t Packets 64 Transmitted Non Unicast Packets 0 Transmitted Discards 0 Transmitted Errors 0 8260A Figure 125 Show Counter Interface for Token Ring Segment 3 Display RMON host statistics You can display the RMON host statistics for stations attached to a token ring segment using the following command SHOW COUNTER RMON HOSTS network all mac_address An example of the output displayed for this command ...

Page 247: ...ackets 0 More 8260A Figure 126 Show Counter RMON Hosts for Token_Ring Segments Note that in the above display 10 00 f1 0b 58 00 is the MAC address of the T MAC In order to be able to collect the above statistics you must have enabled RMON host statistics collection using the following command for T MAC SET MODULE slot subslot RMON_HOST_STATS enable 4 Display RMON Ring_Station statistics You can di...

Page 248: ...State Normal operation Last Beacon Sender 00 00 00 00 00 00 Last Beacon NAUN 00 00 00 00 00 00 Active Monitor 40 00 00 03 33 38 Order Changes 2 8260A Figure 127 Show Counter RMON Ring_station Using ring Option An example of the output from the above command with the all option is shown in Figure 128 on page 227 226 8260 Multiprotocol Intelligent Switching Hub ...

Page 249: ...0 Station Status Active Last Enter Time 1483083 Last Exit Time 0 Last NAUN 40 00 00 03 33 38 Duplicate Addresses 0 In Line Errors 0 Out Line Errors 0 Internal Errors 0 In Burst Errors 0 Out Burst Errors 0 AC Errors 0 Abort Errors 0 Lost Frame Errors 0 Congestion Errors 0 Frame Copied Errors 0 Frequency Errors 0 Token Errors 0 In Beacon Errors 0 Out Beacon Errors 0 Insertions 1 8260A Figure 128 Sho...

Page 250: ... Errors 0 Internal Errors 0 Congestion Errors 0 Frame Copied Errors 0 Frequency Errors 0 Lost Frame Errors 0 Token Errors 0 8260A Figure 129 Show Counter RMON TR_MAC_LAYER In order to be able to collect the above statistics you must have enabled RMON mac_layer_stats collection using the following command for T MAC SET MODULE slot subslot RMON_MAC_LAYER_STATS enable 6 Display RMON TR_PROMISCUOUS st...

Page 251: ...8000 Octets 0 18000 Octets 0 8260A 8260A Figure 130 Show Counter RMON TR_MAC_LAYER In order to be able to collect the above statistics you must have enabled RMON promiscuous_stats collection using the following command for T MAC SET MODULE slot subslot PROMISCUOUS_STATS enable 7 Display RMON TR_SOURCE_ROUTING statistics You can display the RMON tr_source_routing statistics for stations attached to...

Page 252: ...lot subslot SR_ROUTING_STATS enable 10 6 6 Collecting and Displaying RMON Groups Using T MAC DMM and T MAC allow you to collect information about the following RMON groups for token ring segments Host group MAC Layer Statistics group Promiscuous Statistics group Ring Station group Ring Station Order Ring Station Configuration group Ring Station Configuration group Source Routing group To be able t...

Page 253: ...HOST_STATS enable MAC Layer Statistics group SET MODULE slot subslot RMON_MAC_LAYER_STATS enable Promiscuous Statistics group SET MODULE slot subslot RMON_PROMISCUOUS_STATS enable Ring Station Statistics group SET MODULE slot subslot RMON_RING_STATION_STATS enable Source Routing Statistics group SET MODULE slot subslot RMON_SRC_ROUTING_STATS enable For example to enable our DMM to collect RMON Hos...

Page 254: ...y Token Release DISABLED Internal Wrap DISABLED External Wrap DISABLED Interface Number 6 8260A Figure 132 Show Module Command for T MAC As can be seen at the time of display all the RMON groups are enabled on the T MAC 6 Once the T MAC is enabled to collect the appropriate RMON group you can display the collected information using the following command SHOW COUNTER RMON rmon group network This co...

Page 255: ...ate feature on the T MAC results in the Ring Error Monitor REM and Configuration Report Server CRS functions of the T MAC to be activated To enable the surrogate features you must do the following 1 Enable the surrogate function You can use either of the following commands to enable the surrogate function SET MODULE slot subslot SURROGATE_GROUP enable or SET TR_SURROGATE slot subslot SURR_STATUS S...

Page 256: ...re enabled you may enable the individual surrogate options within the surrogate groups using the following commands SET TR_SURROGATE slot subslot REM_STATUS options SET TR_SURROGATE slot subslot CRS_STATUS options SET TR_SURROGATE slot subslot CRS_STATIONS options For details of the permitted options please refer to the DMM Command Guide SA33 0275 You can display the status of individual options w...

Page 257: ...ror Data DISABLED Auto Burst Error Data DISABLED Auto AC Error Data DISABLED Auto Abort Xmitted Error Data DISABLED Auto Lost Frames Error Data DISABLED Auto Receiver Congestion Data DISABLED Auto Frame Copied Data DISABLED Auto Frequency Error Data DISABLED Auto Token Error Data DISABLED Ring State Normal Reset Reset Complete 8260A Figure 134 Displaying the Status of REM Options Status of CRS opt...

Page 258: ...00 5a 89 c5 dc NAUN Address 10 00 f1 0b 58 00 Functional Address 00 00 00 01 Group Address 00 00 00 00 Microcode Level 000000c3f2f4f5f5f040 Microcode Status 000011700200 Product Id 0110f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0 Function Class Mask 7b7f Max Token Priority 0003 Physical Location 00000000 8260A Figure 136 Displaying the Status of CRS Stations Options 10 7 2 Displaying the Information Collected...

Page 259: ...he following command SHOW COUNTER TOKEN_RING token_ring_n 10 9 Summary of T MAC Monitoring Functions The following table provides a summary of the monitoring functions supported by T MAC 2 0 The following table indicates more details on what data each T MAC function uses Table 34 Functions Supported by T MAC V2 0 Function RMON CRS REM DOT5 Collects information and forwards the information upon req...

Page 260: ... T MAC V2 0 Function RMON CRS REM DOT5 Reports Beaconing conditions resolution X Reports REM MAC frames X Provides ring station configuration information X X Reports NAUN and Active Monitor changes X Upon request forces station off ring X X Provides local ring traffic stats X Provides local ring stations stats X Provides bridged remote station stats X Provides source routing statistics X Provides ...

Page 261: ... Token ring 4 16 I O card Ethernet 10Base T I O card Ethernet 10Base 2 I O card Ethernet 10Base 5 I O card Note that the I O cards for the two slot module only provide attachment capability to the external networks For example installation of the token ring I O card does not provide the ability to connect the module to the token ring segments on the backplane The one slot module can perform the fo...

Page 262: ... of band Using a local or modem attached PC to the RS 232 port on the module 2 Inband Using an IP network The management facilities of the Interconnect module allow you to Configure the module for bridging and or routing functions Monitor traffic counters Monitor diagnostics information Monitor address table information for routing and bridging functions The Multiprotocol Interconnect module consi...

Page 263: ... Figure 137 Front View of the Multiprotocol Interconnect Modules There are a number of activity and status LED displays on the front panel of the Multiprotocol Interconnect module which are used to show the information provided in Table 36 on page 242 Chapter 11 8260 Multiprotocol Interconnect Module 241 ...

Page 264: ...pically every 8260 module board contains an inventory EEPROM which the controller module reads to determine the total power requirements of a slot motherboard plus any connected daughter cards In the case of the Multiprotocol Interconnect module the I O cards that connect to the module do not support the inventory management scheme This is because these I O cards are not populated with EEPROMs as ...

Page 265: ...r each voltage type as shown in Table 38 3 Put DMM in Maintenance mode using the following DMM command MAINTAIN 4 While in Maintenance mode enter the following command SET POWER MODULE slot subslot POWER_REQUIREMENT 5 You will be prompted to enter the following Enter 5V power requirements in units of 1 Watt Enter 5V power requirements in units of 25 Watt Enter 12V power requirements in units of 5 ...

Page 266: ...n performing transparent bridging functions it dynamically learns the addresses of all the nodes on the subnetworks To do so the module looks at the source address of each packet and creates a database containing these addresses You can also configure the filtering database with permanent entries to build a customized bridging environment When a packet is received by the module its destination is ...

Page 267: ...very 30 seconds Triggered updates are sent Split horizon with poison reverse is always used Host level routing is supported with future WAN I O cards RIP can be enabled disabled on a per logical port basis RIP can be enabled disabled globally Path cost can be configured on each logical port Routing table entries are aged out to ensure validity of routes Can pass or block datagrams according to use...

Page 268: ...ents the DECnet routing layer and provides network management and security including the following Supports configurable circuit cost Supports designated router priority Supports designated router priority Can pass or block datagrams according to user defined security access list DECnet routing is not addressed any further in this book 11 5 Configuring Multiprotocol Interconnect Module Both one sl...

Page 269: ... session In this type of session you can view the configuration parameters and statistics related to the Multiprotocol Interconnect module Up to a maximum of four users can access LMS One of these can be through the local or modem connected console and the others will be via Telnet sessions Only one user can have write access at a time which allows that user to modify the configuration of the modu...

Page 270: ...ite permission On or Off an will appear on the left of the screen title when you have write permission The Multiprotocol Interconnect module is shipped from the factory with no password This can be changed by using Change Password from the System Parameters Screen as discussed in 11 8 1 Configuring System Wide Parameters on page 252 Note There can be only one user with write access at any one time...

Page 271: ...phs deal with a couple of the commands which may require explanation Jump table provides you with a shortcut facility to view the screen you desire without having to traverse through the menu tree To use the Jump table you need to know the name of the screen you want to view Figure 140 on page 250 shows the contents of the Jump table To use the Jump table move the cursor to highlight the name of t...

Page 272: ...Convert OSPF St Def Conv Status Screens Exit Return to the previous screen Figure 140 LMS Jump Table Close Connection This option will only be displayed if you have accessed the Multiprotocol Interconnect module using Telnet In that case this option allows you to close the connection when required 11 7 SNMP Support The Multiprotocol Interconnect module provides an SNMP agent which can be used to m...

Page 273: ...icalPortUp logicalPortDown fpUp fpDown hardwareFail temperatureOverheat powerSupplyFail 11 8 Configuring the Interconnect Module Using LMS To configure the Multiprotocol Interconnect module you must have a write session and must select configuration from the initial LMS menu The panel shown in Figure 141 on page 252 will be displayed Using this panel you can configure the following features System...

Page 274: ... the following Name Up to 64 characters used to uniquely identify the Multiprotocol Interconnect module Location Up to 64 characters used to identify the location of the Multiprotocol Interconnect module Contact Up to 64 characters used to identify the person responsible for the Multiprotocol Interconnect module Station Time Allows you to set the date and time for the Interconnect module Next Rese...

Page 275: ...to enter the password twice Exit Allows you to return to the previous Configuration Menu screen An example of the System Parameters panel is shown in Figure 142 Config System Parameters Module BladeRunner System Time 14 29 5 Jan 95 Name BladeRunner Location ITSO Lab Raleigh Contact Mohammad Shabani X2339 Station Time 14 29 5 Jan 95 Next Reset warmStart Reset Module Change Password Exit Return to t...

Page 276: ...nel 3 Download Parameters You can download new software into the Multiprotocol Interconnect module using one of the following two ways Using BOOTP TFTP over the network Using a PC attached to the Multiprotocol Interconnect module s RS 232 port Download Parameters panel shown in Figure 144 on page 255 allows you to specify the download method to be used and also allows you to start the operation Us...

Page 277: ...rconnect module s serial port select Start Serial Download Config Download Parameters Module BladeRunner System Time 15 26 5 Jan 95 TFTP Server 9 67 46 45 TFTP Status idle TFTP Filename bld op Start Serial Download Start BootP Download Exit Figure 144 LMS Download Parameters Panel 11 8 2 Configuring Port Parameters To configure the ports on the Multiprotocol Interconnect module you must select Por...

Page 278: ...ports only therefore we will not cover it in the remainder of this book Logical Port Parameters This option allows you to configure logical ports for the Multiprotocol Interconnect module LAN logical ports are created automatically one per physical port and take the number of the physical port on which they reside When using a Multiprotocol Interconnect module with LAN only attachments you do not ...

Page 279: ...olated 3 Backplane csmaLan 5 PHYSICAL PORT Isolated 3 Backplane csmaLan 6 PHYSICAL PORT Isolated 3 Backplane csmaLan Prev Page Next Page Exit Return to the previous screen Figure 146 LMS Physical Port List for Ethernet Connections Note that the above panel also shows the list of backplane Ethernet connections for ports 1 thru 6 As can be seen from this panel port 1 was assigned to Ethernet_1 segme...

Page 280: ...igure 148 on page 259 will be displayed which allows you To configure a name for the physical port To configure a new protocol for the port This option is only available for the WAN ports To change the configuration of the protocol on the port This option is only available for the token ring and WAN ports It is not applicable to Ethernet ports Note This pop up menu is the same as that displayed wh...

Page 281: ...e available Open tells the adapter to enter the ring Close tells the adapter to remove itself from the ring Reset causes an immediate reset of the token ring port Noop has no effect it simply indicates that an open operation has not been requested Ring Speed This parameter allows you the set the speed at which the token ring port will operate Act Mon Par This parameter allows you to specify if the...

Page 282: ...arameter and identifies the physical port to which this entry applies In the case of LAN logical ports they will be created automatically and will be attached to a physical port with the same port ID For example logical port 1 will be attached to physical port 1 etc Channel This parameter does not apply to LAN ports Logical Port Name This parameter can be used to configure a unique name for the se...

Page 283: ...frames Whether or not the adapter should contend to become an active monitor 3 Using the Logical Port Parameters panel assign a name to each logical port 11 8 4 Configuring for Bridging Support To configure the Multiprotocol Interconnect module for bridging you must select the Bridge Menu from the Configuration Menu This panel allows you to display and modify the configuration parameters relevant ...

Page 284: ...sabled Exit Return to the previous screen Figure 151 LMS Bridging System Parameters This panel allows you to display and modify the system wide bridging parameters for the Multiprotocol Interconnect module To be able to perform transparent bridging only the following options must be specified Bridging Facility must be enabled Note that this parameter which is enabled by default enables the bridgin...

Page 285: ...sion Disabled Search Port Prev Port Next Port Exit Return to the previous screen Figure 152 Transparent Bridging Port Parameters Panel This panel allows you to configure the transparent bridging parameters for each port Note that the information on the screen applies to the port identified on the top left corner of the panel You can select the desired port by using Search Port Prev Port and Next P...

Page 286: ...ort on which the packet was received Source Address Filtering If enabled the Multiprotocol Interconnect module will search the filtering database for the source address of each received packet If the address in not a fixed entry manually entered by the user in the filtering database then the packet is discarded Note that when security mode and source address filtering are both enabled the bridged ...

Page 287: ...tted by the Multiprotocol Interconnect module should this module become the root bridge STP Domain Address This parameter specifies the address to which the Hello BPDUs will be sent This parameter must be the same for all the bridges to have a single spanning tree within the network Default for this entry is 0180C2000000 Bridge Forward Delay Time Specifies the length of time in seconds the bridge ...

Page 288: ...og Port 1 LOGICAL PORT Time 17 16 5 Jan 95 STP Facility Enabled Manual Port Path Cost 32768 Port Priority 80 Path Cost Mode normal Search Port Prev Port Next Port Exit Return to the previous screen Figure 154 LMS STP Port Parameters Panel This panel allows you to specify the spanning tree parameters for the specified port Note that the port number that these parameters apply to is displayed on the...

Page 289: ... described in 11 8 5 Filtering for Bridging Functions on page 270 11 8 4 2 Configuring for Source Route Transparent Bridging Configuring for source route transparent bridging is similar to the configuration for transparent bridging with the following differences 1 Configure the Bridging Systems Parameters as described in 11 8 4 1 Configuring for Transparent Bridging on page 262 with the following ...

Page 290: ...ws you to specify the segment number of the LAN to which this port is attached If you select disabled for this parameter source route transparent bridging will be disabled on this port Largest Frame This parameter specifies the maximum size of the INFO field that this port can send and receive The valid range is 516 1500 2052 and 4472 Port STE SpanMode This parameter specifies the action to be tak...

Page 291: ...iprotocol Interconnect module cannot perform translational bridging for that port To configure for translational bridging you must first configure the Multiprotocol Interconnect module for transparent bridging as described in 11 8 4 1 Configuring for Transparent Bridging on page 262 Then you must perform the following additional steps 1 Select Conversion System Parameter A panel as shown in Figure...

Page 292: ...orts Custom filtering for any bridging port regardless of the bridging type configured for that port These filtering options allow you to forward or discard frames based on one or more filters strung together If the frame matches the specified filtering criteria it may be either discarded or forwarded with a specified priority The following sections describe the details of various filtering option...

Page 293: ...frames to this MAC address The value of the scope can be a specific port number or all All learned entries have a scope of all Disposition This field specifies the action to be taken when a frame with a destination address matching this MAC address is received The values for disposition can be a port number to which the frame will be forwarded or flood which means forwarding to all the bridge port...

Page 294: ...e and make all the entries either permanent if there is space in FLASH or static Once the database is frozen no new entries may be learned and no entries may be added deleted or forgotten The Multiprotocol Interconnect module will add addresses to the filtering database under the following conditions 1 Bridging is enabled for the module 2 Source Address Learning is enabled for the receiving port 3...

Page 295: ...ridging Ports Each port of the Multiprotocol Interconnect module which is configured for bridging TB or SRT can operate in one of the following two modes 1 Normal Mode In this mode the port can perform the following functions Can learn new addresses if Source Address Learning is enabled for that port Can forward filter frames Can communicate with network management software Will participate in spa...

Page 296: ...is present it must be permanent or static and address disposition is the receiving port then the packet will be forwarded other filters permitting Otherwise the packet is discarded This ensures that only the frames from predefined MAC addresses and on predefined networks will be able to communicate through the bridge Also source address filtering combined with security mode allows you to forward o...

Page 297: ...00000000 10 mac 0 00000000 equal 00000000 11 mac 0 00000000 equal 00000000 12 mac 0 00000000 equal 00000000 Modify Entry Prev Page Next Page Exit Return to the previous screen Figure 158 LMS Custom Filter Test Table Panel This table may have up to 64 entries You may define the following parameters for each entry ID Number This number is used to refer to this test from the other filtering tables Te...

Page 298: ...lter Test Table entry is shown in Table 39 This example enables the Multiprotocol Interconnect module to test the contents of two bytes starting at offset 12 from the beginning of the MAC address against the value X 5DC 1500 decimal In Ethernet frames this is called the length or type field In Ethernet V2 frames this field always contains a value higher than 1500 whereas 802 3 frames always contai...

Page 299: ...o configure a new entry in the table you must select Modify Entry and type the entry s Statement ID Once you have entered the information for the entry you must select Set Entry and press Enter to confirm or select Cancel to abandon the operation The following parameters can be specified for each entry in the Custom Filter Statement Table ID Number This is the number assigned to the selected test ...

Page 300: ...you want to apply the specified test The Custom Filtering option is specified on the Transparent Bridging Port Parameters and Source Routing Bridging Port Parameters panels Table 40 Custom Filter Statement Table ID Test Name Action on Success Action on Failure 1 802 3 Forward Discard 11 8 7 Configuring for Routing Functions To configure the Multiprotocol Interconnect module for routing you must se...

Page 301: ...Interconnect module s ports as described in 11 8 2 Configuring Port Parameters on page 255 3 Select IP from the Protocols Menu A panel as shown in Figure 161 will be displayed Config IP Menu Module BladeRunner Time 15 22 9 Jan 95 IP System Parameters IP Port Parameters IP Port Address Table IP Net To Media Table IP Forwarding Table IP Security Access List IP Security Table BootHelper Parameters IP...

Page 302: ...t to use a single port on this module to route the traffic from these bridged networks You must take the following into consideration when assigning IP addresses to the ports Only one port per subnetwork is allowed The same IP address may not be assigned to more than one port IP broadcast address may not be assigned to a port If port does not have an IP address IP routing cannot be enabled on that...

Page 303: ...rt participating in IP routing should also be enabled in order for those ports to perform IP routing RIP This parameter controls whether RIP is enabled or disabled throughout the module Router ID This parameter is used on WAN interfaces that have no assigned IP address You may configure any one of the IP addresses assigned to the interfaces on the module as the Router ID IP Security This parameter...

Page 304: ...ransmission rate Redirect This parameter specifies if the module generates ICMP redirect messages These messages are sent when the Multiprotocol Interconnect module recognizes that the sender of the IP packet is not using the optimal route to the destination These messages are sent to the source of the frame informing it of the faster route The Multiprotocol Interconnect module processes received ...

Page 305: ...e module and port level Disposition This parameter is valid if the IP routing is disabled at the port level but enabled at the module level It specifies if the IP traffic received at the port level is bridged or discarded RIP This parameter controls whether RIP is enabled or disabled for this port IP Mtu This parameter specifies the maximum size of the IP packets that may be transmitted on this po...

Page 306: ...lect IP Forwarding Table from the IP menu An example of the IP forwarding table is shown in Figure 165 Config IP Forwarding Table Module BladeRunner System Page 1 Time 16 08 9 Jan 95 Destination Next Hop Mask Type Port Protocol Metric1 9 67 46 0 0 0 0 0 255 255 255 240 local 1 local 1 9 67 46 16 0 0 0 0 255 255 255 240 local 2 local 1 9 67 46 32 0 0 0 0 255 255 255 240 local 1 local 1 9 67 46 224 ...

Page 307: ...ting whether the route has been statically configured or learned by one of the routing protocols including ICMP Metric This field indicates the cost of the route to its destination A value of 16 means unreachable Note that in the example given above the last entry is a static route added to the table whereas the other three entries are automatically learned by the Multiprotocol Interconnect module...

Page 308: ... the MAC address of the station that this entry applies to Type This field is a read only field and indicates that the address mapping has been learned through ARP dynamic or configured by the user static To add a static entry to the ARP table select Add Entry from this panel A pop up menu will be displayed which allows you to enter the IP address and the corresponding MAC address Once you have sp...

Page 309: ...abled all the BOOTP datagrams are discarded by the Multiprotocol Interconnect module If enabled they will be forwarded to the address specified by Forward Address parameter Forward Address This is either the IP address of the BOOTP server if the BOOTP server is directly connected to the module or the IP address of the next Boothelper router in the path to the BOOTP server Hop Count This parameter ...

Page 310: ... RIP Convert Table OSPF RIP Default Convert Table OSPF Static Filter Table OSPF Static Convert Table OSPF Static Default Convert Table Exit Enter the OSPF system parameters screen Figure 168 LMS OSPF Menu Panel This menu panel allows you to access all the panels related to viewing and configuring OSPF parameters for the Multiprotocol Interconnect module The following steps should be taken to confi...

Page 311: ...address that uniquely identifies this router It can be any valid IP address assigned to an interface on this module The router ID will determine the designated router on a broadcast link if the priority values of the routers being considered are equal The higher the router ID the greater its priority TOS Support This parameter specifies if the Type Of Service TOS routing is enabled on this module ...

Page 312: ...taken when a static route does not match any entry in the static route filter table If this parameter is set to import a static route that does not have a match in the static route filter table is imported using the default hop to metric conversion table Otherwise it is not imported 2 Define the interfaces that are enabled for OSPF To do so you must select OSPF Interface Table from the OSPF Menu A...

Page 313: ...PointToPoint Point to Point links AdminStat This parameter enables disables OSPF on this port Note that OSPF should also be enabled at the module level for the port to use OSPF When disabled the interface is external to OSPF Priority This parameter specifies the priority of this interface In a multi access network this parameter is used for designated router selection A value of 0 indicates that t...

Page 314: ...parameter ReTransInt See above for the description of this parameter RtsDeadInt See above for the description of this parameter HelloInt See above for the description of this parameter Events This parameter specifies the number of times that this interface has changed state or an error has occurred IfState This field displays the state of this interface The possible states are down waiting pontToP...

Page 315: ... simple password chosen only those routers sharing the correct password will be able to communicate with each other If you choose simple password when you configure the interface you will be prompted for the area password Import AS Extern LSA This parameter specifies if importing AS external link state advertisements is supported by this area If this area does not import AS external link state adv...

Page 316: ...esulting panel is shown in Figure 172 Config OSPF Area Default Metric TablModule BladeRunner System Page 1 Time 17 41 11 Jan 95 Area ID TOS Metric Add Entry Prev Page Next Page Exit Return to the previous screen Figure 172 LMS OSPF Area Default Metric Table This table allows you to specify the following parameters for each entry Area ID This is the 32 bit integer identifying the Stub Area TOS This...

Page 317: ...e subnet mask you provide specifies the subnets to be grouped in this area range Just one link summary advertisement will be generated for all subnets in this range rather than one link summary for each of the subnets included in that network Range Mask This parameter specifies the subnet mask that pertains to the network or subnetwork specified in the Range Net parameter For example if we specify...

Page 318: ...the port number of this interface TOS This parameter specifies the Type Of Service metric being referenced Metric This parameter specifies the metric of using this Type Of Service on this interface 7 If an area is not directly connected to the backbone area a virtual link will need to be configured from that area s border router to a border router that connects to the backbone area This is necessa...

Page 319: ...akes to transmit a link state update packet over this interface RetransiInt This parameter specifies the length of time in seconds between link state advertisement retransmissions for adjacencies belonging to this interface This value is also used when retransmitting database descriptions and link state request packets HelloInt This parameter specifies the length of time in seconds between Hello p...

Page 320: ...ifies the logical port number of this interface If this interface has been assigned an IP address this parameter will have a value of 0 If the interface has not been assigned an IP address a serial WAN port could be an example the value of this parameter will be equal to the logical port number Options This field is read only It is a bit mask corresponding to the neighbor s options parameter Bit 0...

Page 321: ...el This panel allows you to enter the following parameters for each filter table entry IP Address This parameter specifies the destination IP address found by RIP to which this filter should be applied IP Mask This parameter specifies the mask associated with the IP address Action This parameter specifies whether to import a route in case of a match 10 You may define a conversion table that contai...

Page 322: ...he following parameters for each entry IP Address This parameter specifies the destination IP address found by RIP IP Mask This parameter specifies the destination IP address mask Hop Count This parameter specifies hop count measured in RIP Metric This parameter specifies the metric in OSPF converted from RIP 11 If you have not defined the conversion information for an imported RIP entry the RIP D...

Page 323: ...Convert Table Panel The following parameters can be viewed modified for each entry Hop Count This parameter specifies hop count measured in RIP Metric This parameter specifies the metric in OSPF converted from RIP 12 You may define a filter for importing static routes by OSPF by selecting OSPF Static Route Filter Table from the OSPF Menu An example of the resulting panel is shown in Figure 180 on ...

Page 324: ...ask This parameter specifies the mask associated with the IP address TOS This parameter specifies the Type Of Service for this route Action This parameter specifies whether to import a route in case of a match 13 You may define a conversion table that contains information for converting static route s hop count to an OSPF s metric for each configured pair of destination IP address and its mask To ...

Page 325: ...the Type Of Service for this route Hop Count This parameter specifies hop count for this static route Metric This parameter specifies the metric in OSPF converted from static route 14 If you have not defined the conversion information for an imported static route the Static Default Conversion Table will be used This table is set with a number of default entries when the Multiprotocol Interconnect ...

Page 326: ... Security IP security feature of the Multiprotocol Interconnect module allows you to define filters which are used to determine which IP packets are forwarded and which ones are discarded when the Multiprotocol Interconnect module is performing IP routing functions The IP security feature is comprised of up to 31 different Security Tables and a Security Access List Each security table can contain ...

Page 327: ...add an entry to this table select Add Entry A pop up menu will allow you to specify the following parameters ID This parameter is a unique numeric identification number for each Security Table entry Protocol This parameter allows you to select this entry s protocol field The valid values are IP ICMP UDP or TCP Action This field indicates the action to be taken on a frame that matches the criteria ...

Page 328: ... should be subjected to the specified tests This parameter can have a false or true value False means that the IP datagram with options is not subjected to security tests This parameter has no affect on IP datagrams with no options Operand This field specifies the number of the TCP or UDP destination port to be compared with the incoming packet according to the value configured for operator Note W...

Page 329: ...the security table Transmit Check This parameter determines whether IP datagrams to be transmitted on the interface are checked to see if they match the entries in the security table Action on No Match This parameter specifies whether to allow an IP datagram that does not match the criteria defined in the corresponding Security table to be forwarded to its destination pass or to be discarded block...

Page 330: ...router To do so you must perform the following steps 1 Configure the system wide parameters for the Multiprotocol Interconnect module as described in 11 8 1 Configuring System Wide Parameters on page 252 2 Configure the port parameters for the Multiprotocol Interconnect module s ports as described in 11 8 2 Configuring Port Parameters on page 255 3 Select IPX from the Protocols Menu A panel as sho...

Page 331: ...you to enable IPX routing at the module level Note that you must also enable IPX routing at each port which is to participate in IPX routing IPX Security This parameter enables disables IPX security features of the Multiprotocol Interconnect module The IPX security is similar to the IP security discussed in 11 8 9 IP Security on page 304 Internet Bcast Handling This parameter specifies if the broa...

Page 332: ...ress of the selected port On LAN ports that support IEEE 802 3 addressing the host number is the IEEE 802 3 MAC address of the physical port On WAN ports and LAN ports that do not support IEEE 802 3 addressing the port takes the lowest IEEE 802 3 MAC address in the Multiprotocol Interconnect module Disposition This parameter specifies if the IPX traffic received by this port is to be bridged or di...

Page 333: ...t Note that the IPX Security parameter must be set to enabled before these lists can be used A value of 0 for this parameter indicates that this list is inactive 6 You may use IPX security to set the filtering criteria for the Multiprotocol Interconnect module when performing IPX routing functions The IPX security feature is comprised of up to 31 different Security tables and a security access lis...

Page 334: ...Routing Port Statistics Provides statistical information about the frames sent and received on each port by the Multiprotocol Interconnect module using source route transparent bridging STP System Statistics Displays system wide spanning tree protocol statistics STP Port Statistics Screen Displays the spanning tree statistics for each port IP System Statistics Displays statistical information abou...

Page 335: ...ystem Statistics Displays statistical information about the DECnet IV packets sent and received by the Multiprotocol Interconnect module DECnet IV Port Statistics Displays statistical information about the DECnet IV packets sent and received on each port by the Multiprotocol Interconnect module IPX System Statistics Displays statistical information about the IPX packets sent and received by the Mu...

Page 336: ...314 8260 Multiprotocol Intelligent Switching Hub ...

Page 337: ...t 12 ports Security TELCO One 11 0 0 0 0 Transceiver 3803ET Ethernet 3 ports AUI male One 9 0 0 0 0 Repeater 3804ER Ethernet 2 ports AUI female One 6 0 0 0 0 Fiber 3805EF 07EF Ethernet 4 ports One 8 0 0 0 0 Fiber 3808EF 10EF 6774 7391 7394 Ethernet 4 ports Port switch One 10 0 0 0 0 Fiber 6775 7392 7395 Ethernet 4 ports One 8 0 0 0 0 Fiber 3811EF 13EF 6773 7390 7393 Ethernet 2 ports Port switch On...

Page 338: ...3 Token Ring Mgmt Module equipped to provide basic function One 17 0 5 0 5 0 0 TRMM Advanced 3884 Token Ring Mgmt Module equipped to provide advanced function One 17 0 5 0 5 0 0 A 3 Power Requirements for 8250 FDDI Modules Table 43 Power Requirements for 8250 FDDI Modules Module Feature Code Type Description of Slots Used Power Consumption watts by voltage type 5 1 2 12 5 2 Fiber 3825EF 7388 FDDI ...

Page 339: ...r Consumption watts by voltage type 5 1 2 12 5 2 Ethernet Bridge 3828EB Ethernet 2 ports Two 20 7 5 25 0 0 Token Ring Bridge 3883TB Token Ring 2 ports SR bridge One 14 0 0 0 0 Token Ring Bridge 3958 Token Ring 2 ports SR SRT bridge One 14 0 0 0 0 Ethernet Intercon 6768 6767 Ethernet 6 ports Two 31 12 0 0 0 Appendix A Power Requirements for 8250 8260 Modules 317 ...

Page 340: ...318 8260 Multiprotocol Intelligent Switching Hub ...

Page 341: ...ing station 167 primary ring 167 secondary ring 167 single ring station 167 topology 167 802 5C Dual Ring Wrapback continued Trunck Coupling Unit TCU 167 wrapback 167 8250 adapter kit dual slot top filler 5 left boundary adapter 5 right boundary adapter 5 single slot top filler 5 8260 backplane Enhanced TriChannel 13 Network Allocations 23 ShuntBus 3 13 8260 backplane architecture 11 8260 Model 01...

Page 342: ... 54 Configuring DMM SNMP Parameters 56 Configuring for transparent bridging 262 Configuring Power Supplies fault tolerant mode 79 non fault tolerant mode 78 Set Power Mode 79 80 Show Hub 76 Show Inventory 81 Show Power Budget 77 Show Power Mode 79 Configuring Security Module building security address table 124 enable auto learining 124 network assignment 124 Set Module Network 124 Set Security Por...

Page 343: ...eway 54 IP address 54 subnet mask 54 DMM Terminal Settings baud rate 47 Command line parser 48 data_bits 48 DMM Terminal Settings continued hangup 49 mode 48 parity 48 Serial Line Interface SLIP 48 stop_bits 48 terminal type 49 DMM users Administrator 44 Superuser 44 User 44 DPLL bandwidth 138 components 138 narrowband 138 re clocking 138 wideband 138 Dual Phase Lock Loop 9DPLL0 138 Dual Fiber Rep...

Page 344: ...dersized packet 197 Ethernet 10 Base FB module 9 Ethernet 10 Port 10Base FB Module 112 backplane segments 113 configuration 118 120 connectors 113 DIP switches 116 E MAC support 113 equivalent distances 114 fiber optic cabling 113 front view 114 isolated segments 113 LED descriptions 115 meaning of DIP switches 117 per port switching 113 port redundancy 114 Security card support 113 side view 116 ...

Page 345: ...er module 27 Fault Tolerant Controller Module 10 FDDI pins on the Enhanced TriChannel 22 clock in 22 clock out 22 FDDI pins on the Enhanced TriChannel continued data in 22 data out 22 symbol parity in 22 symbol parity out 22 FDDI segments on the backplane 22 on the Enhanced TriChannel 22 on the ShuntBus 22 I IBM 8260 8250 Adapter Kit 4 adapter kit 1 ATM modules 2 cable tray 1 controller module 1 E...

Page 346: ...Convert Table menu 303 OSPF Static Filter Table menu 301 OSPF System Parameters menu 288 OSPF Virtual Interface Table menu 296 Local Management System LMS continued Physical Port List menu 257 Physical Port Protocol Parameters menu 258 Ports menu 255 Protocol menu 278 read session 247 Shortcut commands 248 Source Routing Port Parameters menu 267 STP Port Parameters menu 266 STP System Parameters m...

Page 347: ...rant 85 86 hub reset 85 no DMM 86 power management Considerations continued overload situation 86 power budget 85 power failure 85 Power Management Scenarios 86 87 88 A power supply failure scenario 1 86 A power supply failure scenario 2 87 two power supplies failure scenario 3 88 power supply installation 89 power supply failure 80 Promiscuous Definition 202 History 202 209 Statistics 202 206 R R...

Page 348: ...bucket 208 Burst Error 204 Claim Token Event 204 Claim Token Packet 204 Congestion Error 205 Drop Event 203 Frame Copied Error 205 Frequency Error 206 History Group 208 Internal Error 204 Line Error 204 Lost Frame Error 205 MAC Octet 203 MAC Packet 203 MAC Layer History Group 208 NAUN Change 204 Promiscuous History Group 209 Promiscuous Statistics Group 202 206 Ring Poll Event 206 Ring Purge Packe...

Page 349: ...figuration Report Server 214 Ring Error Monitor 214 TR 18 Port Active Module Switching Module 9 TR 18 Port Active PPS Switch Module 9 TR 20 Port Passive Module Switching Module 10 TR Backplane Signalling analog signalling 137 digital signalling 137 relays 134 self shorting connectors 134 shunt pairs 135 TR Dual Fiber Repeater Module 10 Two slot Multiprotocol Interconnect Module functions 239 V Vit...

Page 350: ......

Page 351: ...cy of the information Relevance of the information Completeness of the information Value of illustrations ____ ____ ____ ____ ____ Grammar punctuation spelling Ease of reading and understanding Ease of finding information Level of technical detail Print quality ____ ____ ____ ____ ____ Please answer the following questions a If you are an employee of IBM or its subsidiaries Do you provide billable...

Page 352: ... Tape NO POSTAGE NECESSARY IF MAILED IN THE UNITED STATES BUSINESS REPLY MAIL FIRST CLASS MAIL PERMIT NO 40 ARMONK NEW YORK POSTAGE WILL BE PAID BY ADDRESSEE IBM International Technical Support Organization Department 545 Building 657 P O BOX 12195 RESEARCH TRIANGLE PARK NC USA 27709 2195 Fold and Tape Please do not staple Fold and Tape GG24 4370 00 ...

Page 353: ......

Page 354: ...IBML Printed in U S A GG24 4370 00 ...

Reviews: