Innovx )DVW6ZLWFK#57 Installation & Operation Manual Download Page 58 | Manualshive

Page: 58 / 116

Innovx )DVW6ZLWFK#57 Installation & Operation Manual Download Page 58

Using the Web Interface

Administrator Web Page

3-36

Innovx FastSwitch 24

200R205-000

Installation and Operation Manual

Issue 4

802.1x

802.1x makes use of the physical access characteristics of IEEE 802 LAN infrastructures in order
to provide a means of authenticating and authorizing devices attached to a LAN port that has point-
to-point connection characteristics, and to prevent access to that port in case the authentication and
authorization process fails. Before configuring 802.1x feature, it has to be enabled at the Switch
Settings web page, shown below.

802.1x Configuration

802.1x parameters such as Radius Server IP, Server Port, Shared Key and NAS Identifier can be
configured with this page.

To configure 802.1x, the following authentication server information has to be provided:

•

Radius Server IP: IP address of the authentication server.

•

Server Port: The UDP port number used by the authentication server for authentication
purposes.

•

Accounting Port: The UDP port number used by the authentication server to retrieve accounting
information.

•

Shared Key: A key shared between this switch and authentication server.

•

NAS Identifier: A string used to identify this switch.

«
...
56
57
58
59
60
...
»

Summary of Contents for )DVW6ZLWFK#57

Page 1: ... The Best Connections in the Business DVW6ZLWFK 57 Gigabit Ethernet Switch Installation Operation Manual 200R205 000 Issue 4 June 2006 ...

Page 2: ...echnical Publications 6 Rubber Avenue Naugatuck Connecticut USA 06770 Telephone 1 203 729 0271 Trademarks All brand or product names are trademarks or registered trademarks of their respective companies or organizations Documentation Revision History GDC P N 200R205 000 Related Publications REV is the hardware revision 000 001 etc VREF is the most current software version V400 is Version 4 0 0 In ...

Page 3: ...ns 1 3 Port Statistics 1 4 Factory Default Settings 1 4 Technical Specifications 1 5 Chapter 2 Installation Connections Overview 2 1 Unpacking Instructions 2 1 Front Rear Panel Features 2 2 Installing Uplink Components 2 3 Getting Started 2 4 Chapter 3 Using the Web Interface Web Browser Interface Overview 3 1 Accessing the WBI 3 1 Port Status Web Page 3 2 Port Statistics Web Page 3 4 Administrato...

Page 4: ...guration 3 40 Default Configuration 3 41 Reboot 3 41 Chapter 4 Command Line Interface Command Line Interface Overview 4 1 Setting up the Management Station 4 1 Basic CLI Commands 4 1 Control Keys 4 2 CLI Syntax Conventions 4 2 Logging In to the Switch 4 3 Serial Port Setup 4 4 Inactivity Timeout 4 5 Stacking Configuration 4 5 Port Configuration 4 7 Display Port Configuration 4 7 Port Configuration...

Page 5: ...stics 4 35 Management Commands 4 35 SNMP 4 37 SNMP System Setup 4 37 SNMP Community 4 38 SNMP Trap Manager 4 39 SNMPv3 Configuration 4 39 SNMP Trap Setup 4 42 Remote Monitoring 4 43 System Utilities 4 44 Management VLAN 4 44 SNTP Configuration 4 44 Syslog Configuration 4 45 Ping Command 4 45 TFTP Backup or Upload Configuration 4 45 TFTP restore or download configuration 4 46 Update Firmware 4 46 D...

Page 6: ...iv Innovx FastSwitch 24 200R205 000 Installation and Operation Manual Issue 4 Table of Contents ...

Page 7: ...t information on this and other General DataComm products General DataComm Inc 6 Rubber Avenue Naugatuck Connecticut 06770 U S A Tel 1 203 729 0271 Toll Free 1 800 523 1737 Manual Organization This manual is divided into the following chapters When using the digital version of this manual click on any link shown in blue text to jump to that section Chapter 1 Introduction Specifications describes t...

Page 8: ...twork interface Never install telephone wiring during an electrical storm Antistatic Precautions This product may contain static sensitive devices that are easily damaged by electrostatic discharge ESD ESD occurs when a person whose body has built up static electricity touches a computer component ESD can cause computer components to fail Take proper handling grounding and precautionary ESD measur...

Page 9: ...the following conditions 1 This device may NOT cause harmful interference and 2 This device must accept any interference received including interference that may cause undesired operation Electromagnetic Compatibility This Class A digital apparatus complies with Canadian ICES 003 La Compatibilité d Eléctro magnetique Cet appareil numerique de la classe A est conforme a la norme NMB 003 du Canada ...

Page 10: ...ctory Direct Support Repair GDC provides regular and warranty repair services through Factory Direct Support Repair at its U S headquarters in Naugatuck Connecticut This customer support organization repairs and refurbishes GDC products backed by the same engineering documentation and support staff used to build and test the original product Every product received for repair at Factory Direct Supp...

Page 11: ...ne device that can be deployed as a replacement to legacy hubs or in new installations where Fast Ethernet switching is desired The FastSwitch 24 provides efficient front panel access to twenty four 10 100 Mbps Fast Ethernet ports The front panel also includes status LEDs for all the ports including uplink ports The robust features of the FS 24 help remove server bottlenecks extend the network siz...

Page 12: ...rvice ports and Ethernet Line ports Serial port and Ethernet Service ports provide out of band interfaces CLI dedicated to switch management Ethernet Line ports provide in band interfaces CLI WEB and SNMP for the user s network and for switch management Each interface is described below Console Line Interface Console Line Interface CLI commands allow the user to configure the Spanning Tree Protoco...

Page 13: ... 9 or 18 Port devices provide scalable ethernet connectivity to the LAN attached equipment at remote sites Figure 1 2 Scalable Ethernet Connectivity Link Act 12 Speed A 1 Link Act 24 Speed B 13 Fault BS Alert Power Link Act 12 Speed A 1 Link Act 24 Speed B 13 Fault BS Alert Power T1 E1 DSL Interface IP NETWORK A BRANCH OFFICE 1 Ethernet Segments Ports 1 thru 9 Office Alarm Ports 1 8 IP NETWORK A I...

Page 14: ...ting the Reset function from any management interface will restore the device to this configuration Definitions for default acronyms are listed in Appendix A Application Guidelines User Account admin Password l2sw Telnet Enabled System IP Address 0 0 0 0 Subnet Mask 0 0 0 0 Default Gateway IP Address 0 0 0 0 Network Configuration Protocol None Web Mode Enabled Web Java Mode Disabled Broadcast Stor...

Page 15: ...erature 40 to 70 degrees C 40 to 158 degrees F Operating Temperature 0 to 40 degrees C 32 to 104 degrees F Humidity 5 to 90 non condensing Management CLI Console Line Inerface at the serial craft port or via Telnet SNMP SNMP v1 SNMP v2 SNMP v3 HTTP Interface Web based CLI via embedded web server requires web browser with JAVA 1 1 supported TFTP and XModem Used to download firmware upgrade to the d...

Page 16: ...Introduction Specifications Technical Specifications 1 6 Innovx FastSwitch 24 200R205 000 Installation and Operation Manual Issue 4 ...

Page 17: ...network installation Remove each component from the box and perform a thorough inspection If any component appears damaged contact the shipper immediately All damaged components must be retained until an inspection by the shipper has been completed If necessary to re package and return the unit use the original box and packing material t Note For cable part numbers the XXX designation refers to ca...

Page 18: ...he health of the FS 24 device by identifying the port status the data transmission or receive activity and the link speed 10 100 1000Mbps Table 2 3 decribes front and rear panel connectors Figure 2 1 Front and Rear Panel Views INNOVX FastSwitch 24 FRONT PANEL ETHERNET PORTS 1 24 B A UPLINK PORTS 1 2 PIN 1 REAR PANEL CRAFT PORT C FRONT PANEL STATUS LEDs E 8 7 6 5 4 3 2 1 PIN 8 PIN 1 PIN 1 B A E Lin...

Page 19: ...LinkDown RX TX Activity 10 100 Mbps Port Lower LED 100Mbps GREEN 10 Mbps Basic FastSwitch 24 Port Device with 1 port TX 10 100 1000 Mbps Port Upper LED LinkUp LinkDown RX TX Activity 10 100 1000 Mbps Port Lower LED 1000Mbps AMBER 10 100 Mbps Basic FastSwitch 24 Port Device with 1 port SFP SX or LX 1000 Mbps Fiber Port Upper LED LinkUp LinkDown RX TX Activity 1000 Mbps Fiber Port Lower LED 1000Mbps...

Page 20: ... range and assignment of port numbers varies by the slot type The assignment of port numbers by slot number is shown in the table below Note In this document some alternative notations are also used to refer to the port numbers PORT Refers to physical ports For example PORT8 is equivalent to 0 8 and PORT25 and 26 refer to 1 1 and 1 2 respectively TRUNK Refers to logical trunk ports For example TRU...

Page 21: ...le 2 5 Command Line Syntax Conventions Command Description Command Name and parameters Commands displayed in Courier fonts must be typed exactly as shown Following the syntax of a command an example usage of the command is shown Output of the command is shown either in Italics or as a terminal capture parameter The angle brackets indicates that the parameter is required for executing the command p...

Page 22: ...Installation Connections Overview 2 6 Innovx FastSwitch 24 200R205 000 Installation and Operation Manual Issue 4 ...

Page 23: ...192 168 1 2 User Name admin Password l2sw Assuming that the IP address assigned to the service port or in band port of the FS 24 is set to 192 168 1 1 you can use browser to connect to the switch by typing the URL Accessing the WBI A successful connection to the FS 24 via the WBI will display the login screen shown below to the left Enter a valid user name and password The FS 24 Welcome screen app...

Page 24: ...on with the corresponding partner of a port State Port state information is displayed under two columns Config and Actual Configured and actual port state information are displayed as On or Off Link Status Link status information is displayed as Up or Down If the link is established between with peering port the link status information is displayed as Up Otherwise it is displayed as Down Auto Nego...

Page 25: ...plays the rate control setting of the Ingress and Egress side of each port as On or Off Ingress displays the port effective ingress rate of user setting Egress display the port effective egress rate of user setting Priority Displays the port static priority status as High or Low or Disable Port Security Displays the security status of a port as On Enabled or Off Disabled Front Panel Display By cli...

Page 26: ...atistics Web Page The Port Statistics web page displays information such as interface state link status transmission and reception statistics for each port A typical Statistics dsiplay is shown below Click the Reset button to clear the port statistics Port Statistics Definitions TxGoodPkt TxBadPkt RxGoodPkt RxBadPkt TxAbort Collision DropPkt ...

Page 27: ...ing Configuration page 2 Use the Admin Mode pulldown list to select Enable and click on Apply 3 Configure the number of switches that participate in the stacking configuration by entering a decimal number between 2 and 8 then click on Apply Default value is 8 Stacking maximum units configuration should match with the number of units currently connected via stack up link ports and stack down link p...

Page 28: ...ory assigned parameters of the switch as listed below Description Displays name of device MAC Address Displays unique hardware address assigned by manufacturer default Firmware Version Displays switch s firmware version ASIC Version Displays switch s Hardware version PCBA version Displays board number Serial number Displays serial number assigned by manufacturer Module Information This window disp...

Page 29: ...nd This setting limits the low priority packets queuing time in the switch If the low priority packet queued up in switch exceed Max Delay Time it will be dropped The valid range is 1to 255 ms Note The Max Bridge Transit Delay Bound Control must be enabled before Low Queue Delay Bound is enabled Broadcast Storm Filter To configure broadcast storm control enable it and set the upper threshold for i...

Page 30: ...tting determines High Priority Levels 0 to 7 priority level can map to high or low queue Miscellaneous Configuration The Miscellaneous Config page shown below allows the following additional settings Collisions Retry Forever Enable Disable collisions retry forever Hash Algorithm CRC hash Direct map hash algorithm Typical users are instructed not to change this setting IFG Compensation Enable disab...

Page 31: ... communicate with Serial Port Various parameters such as Baudrate Parity Check Flow control etc are displayed in this page shown below A Windows hyper terminal program can be used to connect to the switch Be sure that the baudrate and stop bit settings on the Windows hyper terminal match the settings for the console port Baudrate 19200 Data bits 8 Parity none Stop bits 1 Flow control none ...

Page 32: ...th to a device on the network by combining two or more lower speed ports Note LACP operation requires full duplex mode For more detailed information refer to IEEE 802 3ad Aggregator Settings The Aggregator Setting tab at the Trunking web page shown below is used to create a link aggregation across two or more ports To create a link aggregation group with two or more ports the following parameters ...

Page 33: ...st be as same as the work ports 1 Select the ports to join the trunking group by selecting the ports from the ports list A maximum of four ports can be aggregated at the same time 2 If LACP is enabled you can configure LACP Active Passive status in each port on State Activity page 3 To complete the LACP configuration click the Apply button Trunking Configuration The Aggregator Information tab at t...

Page 34: ...Using the Web Interface Administrator Web Page 3 12 Innovx FastSwitch 24 200R205 000 Installation and Operation Manual Issue 4 Scenario 3 LACP is Enabled with active links ...

Page 35: ...protocol packets through this port Passive no select In this state the switch does not automatically send LACP protocol packets through this port and responds only if it receives LACP protocol packets from the peer device A link having either two active LACP ports or one active port can perform dynamic LACP trunking Switches attached to a link that has two passive LACP ports will not perform dynam...

Page 36: ... support IGMP and other multicast protocols The IGMP Snooping tab of the Forwarding and Filtering web page enables disables IGMP snooping When enabled ports will detect IGMP queries and report packets and manage IP multicast traffic through the switch IGMP has three types of messages described below Query This message is sent from the querier IGMP router or switch asking for a response from each h...

Page 37: ...or Web Page 200R205 000 Innovx FastSwitch 24 3 15 Issue 4 Installation and Operation Manual Dynamic MAC Address The Dynamic MAC Address page displays the Dynamic MAC addresses dynamically learned from network and available on the switch ...

Page 38: ...cted or powered off device becomes active on the network again A typical Static MAC Address window is shown below To add a Static MAC Address perform the following procedure 1 From the main menu click Administrator Filter Database Static MAC Address 2 In the MAC address box enter the MAC address to and from which the port should permanently forward traffic regardless of the device network activity...

Page 39: ...s page user can filter all traffic transmitted from or to that MAC address This type of filtering would enable the network administrator to restore network traffic flow while troubleshooting the problem To add MAC filtering perform the following procedure 1 In the MAC Address box enter the MAC address that needs to be filtered 2 If tag based 802 1Q VLANs are set up on the switch in the VLAN ID box...

Page 40: ...nt of connecting a group of network devices to a separate Layer 2 switch even though all the network devices are still plugged into the same switch physically The FS 24 supports port based 802 1Q tagged based and protocol based VLAN In the default configuration VLAN support is disabled Note If VLAN mode is changed you have to reboot the switch to put the change in effect Port based VLAN In Port ba...

Page 41: ...PX and AppleTalk s EtherTalk Port VID and Ingress Filtering Port VID PVID Port VLAN ID PVID defines the VLAN ID that will be assigned to untagged frames received from a given port For example if port 10 s PVID is 100 all untagged packets received on port 10 will belong to VLAN 100 The default PVID setting for all ports is VID 1 This feature is useful for accommodating devices that user wants to pa...

Page 42: ...ure Port based VLAN Figure 3 2 Port based VLAN To create a port based VLAN use the following procedure 1 Click Add to create a new VLAN group 2 Enter the VLAN name group ID and select the members for the new VLAN 3 Click Apply button 4 If there are many groups that span over the limit of one page user can click the NextPage to view other VLAN groups Note If the trunk groups exist user can see it e...

Page 43: ...1Q based VLAN To configure a tag based VLAN use the following procedure 1 Create a VLAN and add tagged member ports to it 2 From the main menu click VLAN Configuration then click 802 1Q VLAN Operation Mode 3 Click Add button 4 Type a name for the new VLAN 5 Type a VID between 2 4094 The default value is 1 6 Select protocol VLAN The default value is None 7 From the Available ports box select ports ...

Page 44: ...llowing page appears Figure 3 4 Create VLAN 2 Type a name for the new VLAN 3 Type a VID between 2 4094 The default value is 1 4 If you are configuring Protocol VLAN choose the protocol type Otherwise set protocol type to None 5 From the Available ports box select ports to add to the switch and click Add If the trunk groups exist and if trunks ports must be configured as part of a VLAN click on the...

Page 45: ...t belongs to that VLAN The two ingress filtering rules are Ingress Filtering Rule 1 Forward only packets with VID matching this port s configured VID Ingress Filtering Rule 2 Drop untagged frames Special Considerations PVIDs cannot be assigned arbitrarily Instead all the PVIDs must take on values within the same PVID set The following list shows the relationship between the PVID sets and value of ...

Page 46: ... networks where time sensitive and mission critical traffic flows through the switch Rapid Spanning Tree Protocol RSTP specified by IEEE802 1w addresses this specific problem and allows network to converge typically within a couple of seconds whenever a topology change occurs in the network RSTP specification also defines backward compatibility rules when a port is connected to a legacy 802 1D bri...

Page 47: ... of spanning tree instances maintained within each switch Each switch running MSTP is a member of one or more MST Regions Each MST Region can support more than one MST instances MST regions are identified by MST configuration which consists of a configuration name configuration revision number and a VLAN mapping table which maps each VLAN 0 4096 onto an MST instance Two switches are said to belong...

Page 48: ...for the switch Priority 0 65535 Priority value is used to identify the root bridge The bridge with the lowest value has the highest priority and is selected as the root Enter a number 1 through 65535 Max Age 6 40 Max Age value is the number of seconds a bridge waits without receiving Spanning Tree Protocol configuration messages before attempting a reconfiguration Enter a number 6 through 40 Hello...

Page 49: ...ded that the STP adminmode be disabled and then re enabled Click on the STP State checkbox to disable enable STP 2 Click on the Port Configuration tab to configure port level parameters shown below Enable disable RSTP on a per port basis Configure the Edge ports on the switch along with type of link attached to the Edge port Point to point Shared or Auto mode Note that in Auto mode the Link Type i...

Page 50: ...configured by Admin and Value used by protocol Edge Port TRUE or FALSE Link Type Point to point Shared Auto Note Two values are displayed under Path Cost Edge Port and Link Type They represented administrative value and operational value used by the protocol machine MSTP Configuration 1 At the Spanning Tree page System Configuration tab set the Force Version value to 802 1s to configure the switch...

Page 51: ...I are deleted the MSTI itself will be deleted after reassigning the VLANs to the IST 4 The VLANs have to be created before assigning them to a MSTI VLAN assignment details for each MSTI can be displayed by clicking on the Report button displayed under the MST Instance List title The list of MST instances created by the user along with list of VLANs assigned to each MST Instance is shown below 5 In...

Page 52: ...eb page is shown below Table 3 2 Port Sniffer Parameter Description Roving Analysis State Sets sniffer mode to one of the following options Rx Tx Both or Disable Analysis Port The selected sniffer port can be used to see all monitor port traffic User can connect sniffer port to an external LAN analyzer Monitored Port The ports selected by the user for monitoring All monitored port traffic will be ...

Page 53: ...d agent to retrieve information from a large SNMP table Both SNMPv1 and V2 supports only community string based administrative control SNMPv3 provides secure access to devices by authenticating and encrypting the messages exchanged between manager and agent While operating in SNMPv3 mode the FS 24 can be configured to operate based one of the following security models NoAuthNoPriv Security is enfo...

Page 54: ... the default setting as shown below Unless changed from the default the switch automatically configures a unique default Engine ID for each switch as follows Octet 1 4 80 00 1A 73 Octet 5 10 Base MAC address of the switch Fill in the system options data then click Apply to update the changes SNMP Community Strings At the SNMP Community Strings page shown below user defined community strings serve ...

Page 55: ...trap managmer information in the switch Note The FS 24 supports SNMPv1 SNMPv2c and SNMPv3 in a multi lingual mode that is when configured to operate in SNMPv3 mode the switch will respond to requests from SNMPv1 or SNMPv2c managers SNMP v3 Configuration 1 Under the Views tab create the necessary MIB views by entering a View Name a string of up to 16 ASCII printable characters an OID representing a...

Page 56: ...Priv Note The same group can be configured with different combination of views and access privileges This would allow users belonging to the same group to have different access privileges 3 At the Users tab create usernames and associate the user with a previously defined group by configuring the following parameters To remove an existing user select the user from the list of Current Users on the ...

Page 57: ...gured the FS 24 will be busy for a while computing the message digest and encrypting the password string To get the Authentication and Privacy Password for the default users contact technical support Security Manager User Name is displayed on this page Use this page to change web management user name and password To change password use the following procedure 1 User Name Type the new user name 2 P...

Page 58: ...2 1x feature it has to be enabled at the Switch Settings web page shown below 802 1x Configuration 802 1x parameters such as Radius Server IP Server Port Shared Key and NAS Identifier can be configured with this page To configure 802 1x the following authentication server information has to be provided Radius Server IP IP address of the authentication server Server Port The UDP port number used by...

Page 59: ...ization state Fu Force the specific port to operate in unauthorized state Access to the network through this port will be blocked Fa Force the specific port to be in authorized state and allow users attached to this port to access the network without forcing the user to go thru authentication procedure Au The state of the specific port is determined by the outcome of the authentication No 802 1x b...

Page 60: ... Supplicant Timeout Defines the timeout value to be used in the exchanges between the supplicant and authentication server Default value is 30 seconds Server Timeout Defines the timeout value to be used in the exchanges between the authenticator and authentication server Default value is 30 seconds ReAuthMax Defines the number of re authentication attempts that are permitted before the specific po...

Page 61: ... image into flash Figure 3 6 TFTP Download Preparing for TFTP The following steps are required before using TFTP to update firmware in the FS 24 and remote boot the switch system 1 Install TFTP server and start the TFTP server 2 Copy firmware update version image bin to TFTP server s directory 3 Ping the FS 24 from the host where TFTP server is installed and make sure the network connectivity betw...

Page 62: ... This page is used for Restore operations User can restore the switch s configuration database from a TFTP server to the switch Before starting the restore operation ensure that the configuration database file is located in the TFTP server and that the TFTP server is reachable from the switch Backup Running Configuration This page is used for backing up storing running configuration database of th...

Page 63: ... Operation Manual Default Configuration To reset the switch and restore the switch configuration to factory settings use the following web page and click on the reset button Reboot To reboot the switch without restoring to default factory configuration use the following web page and click on the reboot button ...

Page 64: ...Using the Web Interface Reboot 3 42 Innovx FastSwitch 24 200R205 000 Installation and Operation Manual Issue 4 ...

Page 65: ...er at the command line interface Setting up the Management Station To make a Telnet CLI connection to the switch configure the IP address subnet mask and default gateway using a terminal program at the console port or using DHCP to assign an IP address Note The user must specify the user name and password to login The default user name is admin and the default password is l2sw Basic CLI Commands D...

Page 66: ... history buffer Ctrl N Go to next line in history buffer Ctrl Z Return to root command prompt TAB Command line completion end Return to root command prompt exit Go to parent command prompt help command List choices CLI Syntax Conventions Table 4 1 CLI Syntax Command Description Command Name and parameters Commands displayed in Courier fonts must be typed exactly as shown Following the syntax of a ...

Page 67: ... is used for in band management use the following command to configure that port If DHCP is used type the following commands LS2W config network protocol none dhcp LS2W config network protocol dhcp If static IP address is used type the following commands LS2W config network protocol none dhcp LS2W config network protocol none LS2W config network parms ipaddr netmask gateway LS2W config network par...

Page 68: ...the following terminal settings required for serial communication Baud Rate 19200 Data Bits 8 Parity none Stop Bits 1 Flow Control none 2 Set the Inactivity Timeout A FS 24 session will be terminated after 5 minutes default value of inactivity The session will never expire if the timeout value is set to 0 minutes The inactivity time can be configured using following command LS2W config serial time...

Page 69: ...ing master unit and slave units that are to participate in the stack must be informed that the unit should participate in the stack e g by manual configuration by automatic discovery using dedicated stacking ports or by combination of manual configuration in the master unit and control protocol among stacked units Stacked switches can be managed as if it were a single integrated switch Stacking co...

Page 70: ...ing parameters and a list of stacked units with associated information about units in the stack Figure 4 3 Displays Stack 4 To manage slave units login to slave unit via Telnet using the unit ID L2SW telnet unitid 2 8 L2SW telnet 2 The slave unit prompt will reflect the name of the unit you are currently working with right now Note that only one unit can be managed at a given time 5 To return back...

Page 71: ...s the administrative mode for the port Depending on the state of the port one of the following values will be displayed Yes Admin mode enable No Admin mode disable The fourth column displays the Physical Mode which is either Manual or Auto In Auto mode Speed is set by auto negotiation process The fifth column indicates Physical Status Indicates the port speed and duplex mode Note that the values d...

Page 72: ... is disabled it will not forward any traffic However it will retain all the configured values associated with that port To enable disable the administrative mode of a port use the following command LS2W config port adminmode slot port all enable disable LS2W config port adminmode 0 1 enable Auto Negotiation Mode Use the following command to set the port in auto negotiation forced speed LS2W config...

Page 73: ...ngress in or egress out traffic on any port or all the ports use the following command The bandwidth ratelimit on any port has valid range from 0 1000 The unit is 100K where 0 means rate control is disabled LS2W config port ratelimit in out slot port all ratelimit LS2W config port ratelimit in 0 1 1000 LS2W config port ratelimit out 0 1 1000 Static Priority To configure static priority on any port...

Page 74: ...e is physically connected to the switch or not This saves the switch from having to re learn a device s MAC address when the device is disconnected or powered off and reconnected or powered on again macaddr Destination MAC address to add to the address table Packets with this destination Address received in the specified VLAN is forwarded to the specified port slot port interface to which the rece...

Page 75: ...productive entry of repetitive network transactions Conceptually a VLAN allows the network administrator to structure separate or partition the network For example these structures in existing LANs are subnets in IP networks or broadcast domains in bridged networks When multiple LAN segments are bridged together the bridged segments still see all broadcast and multicast traffic on each LAN that is...

Page 76: ...lanid name L2SW config vlan create 10 Yellow 3 To add or delete a port to a new VLAN use the following command This command can be used for both port based VLAN and Protocol based VLAN L2SW config vlan addport vlanid slot port L2SW config vlan addport 10 0 1 L2SW config vlan delport vlanid slot port L2SW config vlan delport 10 0 1 4 To remove VLAN use the following command L2SW config vlan delete ...

Page 77: ... in VLAN but don t support tagging For each port the switch allows users to set one PVID the range is 1 4094 default PVID is 1 The PVID must be same as VLAN ID that the port belongs to VLAN group or the untagged traffic will be dropped The following command is for PVID configuration L2SW config vlan port pvid 1 4094 slot port all L2SW config vlan port pvid 10 0 1 Note PVIDs cannot be assigned arbi...

Page 78: ...nnot be assigned arbitrarily Instead all the PVIDs must take on values within the same PVID set The following list shows the relationship between the PVID sets and value of PVID PVID Set 0 PVID range 0 255 PVID Set 1 PVID range 256 511 PVID Set 2 PVID range 512 767 PVID Set 3 PVID range 768 1023 PVID Set 4 PVID range 1024 1279 PVID Set 5 PVID range 1280 1535 PVID Set 6 PVID range 1536 1791 PVID Se...

Page 79: ...a summarized form use the following command This displays VLAN mode VLAN id VLAN name VLAN type and Protocol L2SW show vlan summary 2 To display detailed information for the selected VLAN use the following command This displays VLAN id VLAN Name VLAN Type Protocol type slot port current and configured details for physical port and tagging details L2SW show vlan detailed vlanid L2SW show vlan detai...

Page 80: ...ion Manual Issue 4 3 The following command displays VLAN port The table below shows slot Port PVID Ingress Filter action details for non member and untagged packets In this example the switch is configure to drop non member packets and forward untagged packets L2SW show vlan port Figure 4 8 Show VLAN Port ...

Page 81: ...ernate paths for bridged traffic when a failure is encountered STP enables user to implement parallel paths for network traffic and ensure the following Redundant paths are disabled when the main paths are operational Redundant paths are enabled if the main traffic paths fail Rapid Spanning Tree Protocol RSTP specified by IEEE802 1w is an improved version of Spanning Tree Protocol and specifically...

Page 82: ... spanning tree receives from the root switch If a switch does not receive a BPDU message from the root switch within this interval it re computes the spanning tree topology The range for bridges maximum age is 6 to 40 seconds The default value is 20 seconds L2SW config spanningtree switch maxage interval L2SW config spanningtree switch maxage 10 5 To configure the forwarding delay of the switch us...

Page 83: ...on Manual 7 To display STP settings in summary or detailed form use the following command In detailed form information such as the number of topology change count Root Path Cost and Root Port Identifier are displayed L2SW show spanningtree switch summary detailed Figure 4 10 STP Displays Summary and Detail Screens ...

Page 84: ...n such as switch priority forwarddelay etc are exactly same as STP protocol parameter configuration except that with RSTP users configure a port to be an Edge port and set the link type to be Point to point shared or Auto as described in the procedure below 1 Enable RSTP protocol by setting the forced version parameter to 802 1w as illustrated below L2SW config spanningtree switch forceversion 802...

Page 85: ...e L2SW config spanningtree port edgeport 0 1 true 3 Configure link type associated with a port with the following command L2SW config spanningtree port linktype slot port all point to point shared auto L2SW config spanningtree port linktype 0 1 point to point 4 Display the Edge port configuration and link type with the following command L2SW show spanningtree port detailed slot port L2SW show span...

Page 86: ...ningtree switch configuration name REGION 1 3 Configure a MST Configuration Revision number from 0 to 65535 by the following command L2SW config spanningtree switch configuration revision 0 65535 L2SW config spanningtree switch configuration revision 1 4 Configure a MST Instance ID with a number from 1 to 8 as follows L2SW config spanningtree mst create mstid L2SW config spanningtree mst create 1 ...

Page 87: ...ollowing command L2SW config spanningtree mst priority mstid 0 61440 L2SW config spanningtree mst priority 1 10 Note The FS 24 supports priority assignment on a per MST Instance basis Port level priority assignment on a MST Instance basis is not currently supported 8 To display MST switch configuration and statistics in summary or detailed form use the following commands The configuration digest v...

Page 88: ...he following command L2SW show spanningtree mst detailed 1 8 L2SW show spanningtree mst detailed 1 Figure 4 14 MST Instance Details To view port specific information related to a port associated with a MST instance use the following command The example screen below displays the port information for the port 0 1 associated with MST instance 1 L2SW show spanningtree mst port detailed 1 8 slot port L...

Page 89: ... LACP Note Note that all members of a trunk port should be configured to operate at the same speed 2 To remove the configured trunk use the following command L2SW config trunk delete trunkid L2SW config trunk delete 2 1 3 Add ports to the existing trunk group L2SW config trunk addport trunkid port list L2SW config trunk addport 2 1 0 4 4 To delete one or more ports from trunk group L2SW config tru...

Page 90: ...o 20 trunk group 2 1 is static and 2 2 is LACP mode Port 0 2 and 0 3 are members of trunk group 2 1 while 0 4 and 0 5 are in trunk group 2 2 To display trunk summary for specified trunk group use following the command L2SW show trunk summary To display trunk details use following command This displays static trunk group Group Key System Priority and Member Ports L2SW show trunk detailed trunkid L2...

Page 91: ...on mirrored ports Both To monitor traffic on mirrored ports in both directions 2 Configure the port used as Sniffer port and see all monitored port traffic It is the port connected to Sniffer L2SW config mirroring sniffer slot port L2SW config mirroring sniffer 0 1 3 To configure the port to be monitored All monitored port traffic will be copied to sniffer port Maximum of 25 monitored ports can be...

Page 92: ... s total bandwidth used by broadcast traffic When broadcast traffic for a port rises above the threshold broadcast storm control becomes active The valid threshold value are 5 10 15 20 25 and 0 Value of 0 means storm control is disabled Following commands are used to configure display the broadcast storm filter L2SW config stormcontrol level threshold L2SW config stormcontrol level 15 To display s...

Page 93: ...he administrative mode of IGMP snooping is disabled L2SW config igmpsnooping adminmode enable disable L2SW config igmpsnooping adminmode enable 2 The IGMP snooping query mode can be active passive or auto The active query mode is to enable query mode for group members The passive query mode is for passive snooping on IGMP Query Report In auto mode switch performs Query function if there is no othe...

Page 94: ...e Before configuring the 802 1x feature it has to be enabled in Switch Settings 802 1x Feature Configuration 1 To configure the switch for 802 1x to communicate with RADIUS server use the following command L2SW config radius addr serverip L2SW config radius addr 10 0 0 2 2 To configure shared secret password between L2SW and the RADIUS server use the following command It is used to authenticate al...

Page 95: ... enable b Four types of port control are ForceAuthorized Fa Disable 802 1x and put the port to authorized state without any authentication exchange required This is the default port control setting ForceUnauthorized Fu causes the port to unconditionally remain in the unauthorized state ignoring all attempts by client to authenticate Auto Enable 802 1x and causes the port to being in unauthorized s...

Page 96: ...riority over applications that do not operate in real time There are three different modes of priority and they are FCFS First Come First Served SP Strict Priority WRR Weighed round robin Priority Feature Configuration 1 To configure priority mode and user level priority use the following set of commands L2SW config dot1p mode fcfs sp wrr L2SW config dot1p mode sp 2 To create a user priority to qu...

Page 97: ...iority value is a decimal number between 0 and 1 Value of 0 is low and 1 is high priority queue While the WRR weight has valid range from 0 to 7 The default value is 1 L2SW config dot1p wrr queue_priority 0 1 weight 1 7 L2SW config dot1p wrr 1 3 Note Only 802 1p WRR mode weights can be modified 4 To display 802 1p mode and user priority to queue priority mappings use following command L2SW show do...

Page 98: ...ority packets queuing time in switch If the low priority packet stays in switch and exceeds the configured maximum delay time it will be dropped Valid range for Low Queue Delay is from 0 to 255ms with the default value set to 0 The Low Queue Delay mode is disabled when set to 0 L2SW config switchconfig lowqueuedelay delay 0 255 L2SW config switchconfig lowqueueelay 25 Collision Retry To enable or ...

Page 99: ...s port slot port alll L2SW clear statistics port all Management Commands User Login Account The FS 24 only supports one user account for administration The default user name is admin and the deafult password is l2sw Username is up to eight alphanumeric characters The username is not case sensitive Password is up to eight alphanumeric characters The password is not case sensitive L2SW config user p...

Page 100: ...on the connection to the switch is lost L2SW config network protocol none dhcp L2SW config network protocol none L2SW config network params ipaddr netmask gateway L2SW config network params 172 30 40 202 255 255 255 0 172 30 40 2 L2SW save config L2SW reset system Are you sure you would like to reset the system y n y Note In order for the statically configured IP address to take effect the switch ...

Page 101: ...rts SNMP V1 V2C and V3 The SNMP Management station an SNMP manager can use SNMPv1 SNMPv2 or SNMPv3 protocol to retrieve information from the switch SNMP System Setup Users can define a system name location and contact person for the switch using following commands Name Enter a name to be used for the switch L2SW config snmp sysname name L2SW config snmp sysname L2SW Location Enter the location of ...

Page 102: ...play MIB object information and to set MIB objects L2SW config snmp community mode ro rw L2SW config snmp community mode rw 1 To add community name use the following command SNMP community name can be up to 16 characters L2SW config snmp community add name L2SW config snmp community add gdc 2 To delete community name use the following command SNMP community name can be up to 16 characters L2SW con...

Page 103: ...on FS 24 supports SNMP v1 SNMP v2c and SNMP v3 in multi lingual mode Based on the SNMP version type supported by the manager the switch will automatically adapt itself to respond to the manager s request There is no need to explicitly configure the SNMP version However there are parameters that are specific to SNMP v3 The following subsections describe the commands used to configure the parameters...

Page 104: ...restricted 5 Subtrees with the following root OIDs 1 3 6 1 2 1 1 1 3 6 1 2 1 11 1 3 1 6 3 10 2 1 1 3 1 6 3 11 2 1 1 3 1 6 3 15 1 1 Note Some SNMPv3 managers allow users to configure a context name along with the Views FS 24 currently doesn t support contexts to be associated with the Views Therefore the Context name should be configured as blank on the SNMP manager side 5 To display all views crea...

Page 105: ...up by using the following command The parameters associated with the creation of a new user are User name text string of up to 16 characters Group Name name of the group to which the new user is assigned to Auth Password text string of up to 16 characters Priv Password text string of up to 16 characters Authentication Password and Privacy Password are optional parameters These parameters are not r...

Page 106: ...y for a while computing the message digest and encrypting the password string when Authentication and Privacy Passwords are configured SNMP Trap Setup A trap manager is a management station that receives traps alarms and event notifications and the system alerts generated by the switch If no trap manager is defined switch will not issue any trap Create a trap manager by entering the IP address of ...

Page 107: ...ormation can be retrieved from the switch only via SNMP interface by the SNMP Management station an SNMP manager The following RMON groups are supported by the FS 24 switch Event Group Event group controls the generation notification of events from the FS 24 switch It consists of eventTable and logTable Each entry in eventTable describes the parameters of the event that can be triggered Event is a...

Page 108: ...the management VLAN from non default VLAN to default VLAN use the following command L2SW config mgmtvlan 1 To display the management VLAN information use the following command L2SW show mgmtvlan SNTP Configuration Simple Network Timing Protocol SNTP is used to synchronize the system clock with a SNTP server located either on the local network or on the internet By synchronizing the system clock wi...

Page 109: ...hosts which sends out 3 requests and display the response received as illustrated below L2SW ping ipaddress L2SW ping 172 30 40 7 Send count 3 Received count 3 from 172 30 40 7 L2SW TFTP Backup or Upload Configuration TFTP Trivial File Transfer Protocol is used to transfer software images into the switch and it is also used to download and upload configuration databases To upload a copy of current...

Page 110: ...ver into system flash use the following command Before starting the image download operation make sure that the executable image file is located in the TFTP server and that the TFTP server is reachable from the switch In the example shown below the TFTP server IP address is 172 30 10 8 and image filename is f10_201 img L2SW copy tftp code ipaddr filename L2SW copy tftp code 172 30 10 8 f10_201 img...

Page 111: ...4 Port Gigabit Eithernet Switch GVRP Generic VLAN Registration Protocol HTML Hyper Text Markup Language HTTP Hyper Text Transfer Protocol Hz Hertz ICMP Internet Control Message Protocol IETF Internet Engineering Task Force IGMP Internet Group Management Protocol IP Internet Protocol kbps kilobits per second kHz kilohertz L2 OSI Layer 2 LACP Link Access Control Protocol LAG Link Aggregation LAN Loc...

Page 112: ...ID Port VLAN ID RAM Random Access Memory RARP Reverse Address Resolution Protocol RFC Request For Comment TCP IP Standard Document RMON Remote Monitoring RO Read Only RW Read Write RX Receive SNMP Simple Network Management Protocol STP Spanning Tree Protocol TCP Transmission Control Protocol TFTP Trivial File transfer Protocol TCP IP TX Transmit UDP User Datagram Protocol VLAN Virtual LAN WBI Web ...

Page 113: ... high performance gigabit optical interface uplink module that supports auto negotiation gigabit speed over CAT 5 copper cable It features hot swappable 10 100 1000 Mbps operation and Autonegotiation for speed duplex clock mode flow control and MDI MDIX The 1000 Base TX feature is ready to install and connect to the network Table A 1 FastSwitch 24 1000 Base TX Feature Card Specifications Item Desc...

Page 114: ...P modules The single hot swappable port allows easy field upgrades to different connection requirements Table A 2 FastSwitch 24 SFP Feature Card Specifications Item Description Supported SFP plug in modules 1000 Base MMF SX module 1000 Base SMF LX module Standards SFP Multi source Agreement Compliance FCC Part 15 CE Mark UL Power Consumption 0 5 W maximum not including plugin modules Dimensions 64...

Page 115: ......

Page 116: ...The Best Connections in the Business ...

Reviews:

No comments