Nortel Passport 8600 Series Commissioning Download Page 25

Page: 25 / 136

Secure and nonsecure protocols

Figure 4
Setup utility example three

Secure and nonsecure protocols

The following table describes the secure and nonsecure protocols the
Nortel Ethernet Routing Switch 8600 supports.

Nortel Ethernet Routing Switch 8600

Commissioning

NN46205-319

01.01

Standard

30 May 2008

Summary of Contents for Passport 8600 Series

Page 1: ...Nortel Ethernet Routing Switch 8600 Commissioning Release 5 0 Document Revision 01 01 www nortel com NN46205 319 323883 A Rev 01 ...

Page 2: ...nformation in this document is believed to be accurate and reliable except as otherwise expressly agreed to in writing NORTEL PROVIDES THIS DOCUMENT AS IS WITHOUT WARRANTY OR CONDITION OF ANY KIND EITHER EXPRESS OR IMPLIED The information and or products described in this document are subject to change without notice Nortel the Nortel logo and the Globemark are trademarks of Nortel Networks All ot...

Page 3: ...Static IP entry for the OOB network management interface 27 Web management 29 Device Manager 29 Commissioning 31 Commissioning tasks 31 Initial steps using Device Manager 33 Initial commissioning procedures 33 Editing system information 34 Configuring the date and time 37 Changing passwords 38 Initial steps using the CLI 41 Initial commissioning procedures 41 Job aid Roadmap of initial CLI command...

Page 4: ...ion configuration using Device Manager 95 Remote connection configuration procedures 95 Assigning an IP address to the management port 97 Assigning static routes to the management interface 97 Configuring SNMP settings for Device Manager access 99 Enabling the Web management interface 101 Remote connection configuration using the CLI 103 Remote connection configuration procedures 103 Job aid Roadm...

Page 5: ...t logon 120 Commissioning verification 123 Pinging an IP device 123 Using Telnet to log on to the device 124 Accessing the switch through the Web interface 124 Common procedures using Device Manager 127 Saving the configuration 127 Common procedures using the CLI 129 Saving the configuration 129 Common procedures using the NNCLI 131 Saving the configuration 131 Nortel Ethernet Routing Switch 8600 ...

Page 7: ...pies Nortel Networks grants you a license to use the Software only in the country where you acquired the Software You obtain no rights other than those granted to you under this License Agreement You are responsible for the selection of the Software and for the installation of use of and results obtained from the Software 1 Licensed Use of Software Nortel Networks grants Customer a nonexclusive li...

Page 8: ...MPLIED INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OF NON INFRINGEMENT Nortel Networks is not obligated to provide support of any kind for the Software Some jurisdictions do not allow exclusion of implied warranties and in such event the above exclusions may not apply 3 Limitation of Remedies IN NO EVENT SHALL NORTEL ...

Page 9: ...orks or certify its destruction 3 Customer is responsible for payment of any taxes including personal property taxes resulting from Customer s use of the Software Customer agrees to comply with all applicable laws including all applicable export and import laws and regulations 4 Neither party may bring an action regardless of form more than two years after the cause of the action arose 5 The terms...

Page 11: ...ng the NNCLI page 69 Remote connection configuration using the NNCLI page 113 Common procedures using the NNCLI page 131 Other changes See the following sections for information about changes that are not feature related Document changes page 11 Document changes Much of the content in this document is previously released as Getting Started 313189 F All document titles in the Nortel Ethernet Routin...

Page 12: ...release This document is restructured to align with Nortel Customer Documentation Standards NCDS Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 13: ...NNCLI page 69 Remote connection configuration using Device Manager page 95 Remote connection configuration using the CLI page 103 Remote connection configuration using the NNCLI page 113 Commissioning verification page 123 Common procedures using Device Manager page 127 Common procedures using the CLI page 129 Common procedures using the NNCLI page 131 Nortel Ethernet Routing Switch 8600 Commissio...

Page 15: ... 8600 Security NN46205 601 Navigation System connections page 15 System logon page 19 Setup utility page 21 Secure and nonsecure protocols page 25 Password encryption page 26 Management port page 26 Web management page 29 Device Manager page 29 System connections Connect to the Switch Fabric Central Processor Unit SF CPU serial ports using one of the following connections Terminal connection page ...

Page 16: ...ort on your computer or terminal Most computers or terminals use a male DB 25 connector You can find a null modem cable with the chassis You must shield the cable connected to the console port to comply with emissions regulations and requirements Modem connection You can access the switch through a modem connection to the Nortel Ethernet Routing Switch 8600 8691SF CPU or 8692SF CPU modules Nortel ...

Page 17: ...rol lines to indicate the input buffer is full To connect a modem to a Nortel Ethernet Routing Switch 8600 you can configure the modem port first using another type of connection to the command line interface CLI or Nortel Command Line Interface NNCLI PPP modem connection You can establish a PPP Point to Point Protocol link over serial asynchronous lines PC clients use this link to connect remotel...

Page 18: ...ser is client server password IP address The following list explains each option client the name of the user This value is the logon name of the authorized user This value should be the name or ID of the user similar to a Windows or UNIX logon server the name of the remote device which is often the dial in server Use an asterisk to indicate any server name is acceptable password the password for t...

Page 19: ...read only community access ro ro Layer 1 read write View most switch configuration and status information and change physical port settings l1 l1 Layer 2 read write View and change configuration and status information for Layer 2 bridging and switching functions l2 l2 Layer 3 read write 8600 switches only View and change configuration and status information for Layer 2 and Layer 3 routing function...

Page 20: ...case characters two numbers and two special characters Default passwords and community strings If the switch boots in hsecure mode as a default factory setting and you have not configured a password the default passwords are changed to respect this rule The following table describes the default passwords Table 3 Default setting passwords User ID Default password rwa rwarwarrwar rw rwrwrwrwrw ro ro...

Page 21: ...ual router interface For example V1 has the network address 192 168 168 0 24 This change is valid for all IP subnets not only for 24 as mentioned in the example Source addresses 192 168 168 0 and 192 168 168 255 are discarded You can filter addresses only if you enable the hsecure mode Setup utility To optimize the function of the Nortel Ethernet Routing Switch 8600 you can obtain a list of hardwa...

Page 22: ...6205 605 The setup utility prompts you through the configuration process by asking a series of questions Answer each question or accept the default by pressing Enter Each question shows the default in brackets and the acceptable parameter options in parenthesis After you run the setup utility reboot the switch The following figures show sample output from the setup utility This example uses the de...

Page 24: ...24 Commissioning fundamentals Figure 3 Setup utility example two Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 25: ...ree Secure and nonsecure protocols The following table describes the secure and nonsecure protocols the Nortel Ethernet Routing Switch 8600 supports Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 26: ... switch for the first time with the software Release 3 7 6 or higher image the switch resets the password to default values and generates a log which indicates the changes For security reasons Nortel recommends that you configure the passwords to values other than the factory defaults Management port You must assign an IP address to the management port before you can use it for out of band OOB man...

Page 27: ...generate a warning message If you use Device Manager you can configure the standby IP to a different subnet than the master IP and you do not receive a warning message Static IP entry for the OOB network management interface The following figure shows the OOB network management port default IP assignment Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyr...

Page 28: ...Commissioning fundamentals Figure 5 OOB network management port default IP flowchart Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 29: ...onitoring features as the Device Manager software For information about configuration requirements and instructions to install the help files to enable the Web server using Device Manager and to access the Web interface see Nortel Ethernet Routing Switch 8600 User Interface Fundamentals NN46205 308 Device Manager Device Manager is an SNMP based graphical user interface GUI tool designed to manage ...

Page 31: ...600 online and set up appropriate access for remote users Commissioning tasks The following work flow shows the sequence of tasks you perform to commission the Nortel Ethernet Routing Switch 8600 To link to a task go to Commissioning navigation page 32 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 32: ... steps using the NNCLI page 69 Remote connection configuration using Device Manager page 95 Remote connection configuration using the CLI page 103 Remote connection configuration using the NNCLI page 113 Commissioning verification page 123 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 33: ... a remote connection to the switch You must power up the switch Initial commissioning procedures The following task flow shows the sequence of procedures you perform for the initial commissioning steps To link to a procedure click the procedure title in Initial commissioning navigation page 34 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 N...

Page 34: ...and time page 37 Changing passwords page 38 Editing system information You can edit system information such as the contact person the name of the device and the location Procedure steps Step Action 1 On the Device Manager menu bar choose Edit Chassis Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 35: ...res the physical location of this device VirtualIpAddr Configures the virtual IP address that is advertised by the primary SF CPU and stored in the switch configuration file and not the boot configuration file VirtualNetMask Configures the net mask of the virtual management IP address VirtualIpv6Address Configures the virtual IPv6 address that is advertised by the primary SF CPU and stored in the ...

Page 36: ...e DefaultBootConfigFileName Displays the default boot configuration file directory name ConfigFileName Specifies the name of a new configuration file ActionGroup1 Can be one of the following actions resetCounters resets all statistic counters checkSwInFlash checks the software in flash saveRuntimeConfigToSlave saves the current run time configuration to the standby SF CPU saveToNVRAM saves the cur...

Page 37: ... on tests cpuSwitchOver switch control from one SF CPU to another resetConsole reinitializes the hardware UART drivers Use only if the console or modem connection is hung resetModem reinitializes the UART drivers on the modem port Use only if the console or modem connection is hung Result Displays a message after you click Apply Configuring the date and time Use the User Set Time tab to configure ...

Page 38: ...level or change the logon or password for the different access levels of the switch After you receive the Nortel Ethernet Routing Switch 8600 use default passwords to initially access the CLI If you use Simple Network Management Protocol version 3 SNMPv3 you can change passwords that are in encrypted format Procedure steps Step Action 1 From the Device Manager menu bar choose Security Control Path...

Page 39: ...vates the read write Layer 2 access level RWL2UserName Specifies the user name for the Layer 2 read write CLI account RWL2Password Specifies the password for the Layer 2 read write CLI account RWL1Enable Activates the read write Layer 1 access level RWL1UserName Specifies the user name for the Layer 1 read write CLI account RWL1Password Specifies the password for the Layer 1 read write CLI account...

Page 40: ...et or Rlogin session before automatic timeout and disconnect 30 65535 seconds NumAccessViolations Indicates the number of CLI access violations detected by the system This field is a read only field Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 41: ...remote connection to the switch You must power up the switch Initial commissioning procedures The following task flow shows the sequence of procedures you perform for the initial commissioning steps To link to a procedure click the procedure title in Initial commissioning navigation page 43 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nort...

Page 42: ...42 Initial steps using the CLI Figure 8 Initial commissioning procedures Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 43: ...setting passwords page 68 Job aid Roadmap of initial CLI commands The following table lists the commands and the parameters you use to complete the procedures in this section Table 6 Job aid Roadmap of initial CLI commands Command Parameter config bootconfig master cpu slot 8databits true false baud rate enable true false mode ascii slip ppp mtu bytes my ip ipaddr peer ip ipaddr pppfile file resta...

Page 44: ...ays default lockout time secs info l1 username password l2 username password l3 username password l4admin username l4oper username lockout time HostAddress secs min passwd len integer oper username password history number ro username password rw username password rwa username password slboper username slbadmin username config cli password ssladmin username config setdate MMddyyyyhhmmss Nortel Ethe...

Page 45: ...le disable mtu bytes multicast resource reservation value name prompt portlock on off sendAuthenticationTrap true false smlt on single cp enable disable timer value topology on off udp checksum enable disable udpsrc by vip enable disable vlan bysrcmac enable disable config sys set wsm direct mode enable disable install name prompt reset passwd name prompt show bootconfig master Connecting a termin...

Page 46: ... with the chassis You must shield the cable connected to the console port to comply with emissions regulations and requirements Procedure steps Step Action 1 Configure the terminal protocol as follows 9600 baud 8 data bits 1 stop bit No parity 2 Connect the RS 232 cable to the console port 3 Connect the other end of the RS 232 cable to the terminal or computer serial port 4 Turn on the terminal 5 ...

Page 47: ...yourself with these protocols 2 Configure port parameters based on the modem requirements by using the following commands baud rate 8databits true false mode ascii slip ppp For information about the configuration requirements of your modem see the documentation shipped with the modem 3 If you configure the port mode to slip use the following commands to configure other SLIP parameters slip compres...

Page 48: ...t mode ascii slip ppp Configures the communication mode for the serial port The default is American Standard Code for Information Interchange ASCII If you are configuring the modem port you can configure the port to use the SLIP or the PPP communication mode mtu bytes Configures the size of the maximum transmission unit for a PPP link 0 2048 The default is zero my ip ipaddr Configures the IP addre...

Page 49: ...ou must specify a PPP filename For more information about this file see Procedure job aid PPP file page 49 The PPP file name is a string value of no more than 64 characters Identify the file in the format a b c d peer pcmcia flash file ATTENTION Do not specify a PPP filename with more than 64 characters restart Shuts down and initializes the port slip compression true false Enables or disables Tra...

Page 50: ...u specify debug Activates the PPP daemon debug mode default_route Adds a default route to the system routing table after successful Internet Protocol Control Protocol IPCP negotiation Use the peer as the gateway After the PPP connection ends the system removes this entry driver_debug Activates PPP driver debug mode escape_chars value Configures the characters to escape on transmission to the value...

Page 51: ...of transmissions for LCP configuration requests to the value you specify lcp_max_failure value Configures the maximum number of LCP configuration NAKs to the value you specify lcp_max_terminate value Configures the maximum number of transmissions for LCP termination requests to the value you specify lcp_restart value Configures the timeout in seconds for the LCP negotiation to the value you specif...

Page 52: ...col field compression no_vj Disables Van Jacobson VJ compression VJ compression reduces the regular 40 byte TCP IP header to 3 or 8 bytes no_vjccomp Disables VJ connection ID compression pap_file file Obtains PAP secrets from the specified file You require this option if either peer requires PAP authentication If your users must use the same IP address the PAP and CHAP secret files must specify th...

Page 53: ...e name Configures the remote name for authentication to the specified name require_chap Requires CHAP authentication with peer require_pap Requires PAP authentication with peer silent_mode Configures silent mode PPP does not transmit LCP packets to initiate a connection until it receives a valid LCP packet from the peer vj_max_slots value Configures the maximum number of VJ compression header slot...

Page 54: ... Procedure job aid setup utility prompts The following table lists the questions prompted by the setup utility and provides a description for each Table 9 Job aid Setup utility prompt descriptions Prompt Description and action Please provide primary config file path flash config cfg Description Indicates the name of the primary configuration file Action Press Enter to accept the default flash conf...

Page 55: ...mber of the primary central processing unit CPU The slot can be 5 or 6 Action Press Enter to accept the default 5 or specify 6 Primary CPU mgmt port autonegotiation n y n Description Specifies if you want the primary CPU to use autonegotiation Action Enter n to accept the default or enter y to indicate that you want the primary CPU management port to use autonegotiation speed 10 100 10 Description...

Page 56: ...he E modules Action Enter y if you want the chassis to run in 128 K M mode Accept the default n if you want it to run in 32 K mode only Do you want to enable enhanced operation mode support n y n Description Specifies if you want to enable enhanced operation mode Enhanced operation mode increases the maximum number of VLANs when you use MultiLink Trunking MLT 1980 and Split MLT SMLT 989 This mode ...

Page 57: ...r the VLAN optimization mode Action Specify y to enable VLAN optimization mode support Accept the default n to not enable VLAN optimization mode support Do you want to enable r mode support n y n Description Specifies if you want to enable support for the R mode support Action Specify y to enable R mode support Accept the default n to not enable R mode support Do you want to enable FTP n y n Descr...

Page 58: ...erver service Accept the default n to not enable Web server service IP Address for mgmt port in first CPU Slot 192 168 168 16 8 255 255 2 55 0 Description Indicates the IP address for the management port in the CPU slot you specify Action Type the IP address of the management port in the first CPU slot IP Address for mgmt port in second CPU Slot 192 168 168 169 255 255 255 0 Description Indicates ...

Page 59: ...pe the IP address of the third network management route static route from the network management port to a device in the network Fourth net mgmt route 0 0 0 0 0 0 0 0 Description Specifies the IP address of the fourth network management route Action Type an IP address of the fourth network management route static route from the network management port to a device in the network IP address of the d...

Page 60: ...ology IP from the available CLIP id is the circless IP interface id in the range of 1 to 256 clock sync time minutes Configures the RTC to system clock synchronization time minutes is the RTC to System clock synchronization time in minutes in the range of 15 to 3600 contact contact Alters the system contact contact is the system contact The string length is in the range of 0 to 255 ecn compatibili...

Page 61: ...value in the range of 1522 to 9600 multicast resource reservatio n value Reserves MGIDs for IPMC use value is the number of MGIDs reserved for IPMC use in the range from 64 to 4083 name prompt Changes the system name prompt is the box or root level prompt The string length ranges from 0 to 255 portlock on off Turns portlock on off sendAuthenticationTrap true false Sets authentication trap to true ...

Page 62: ...nd Variable Value dst end Mm n d hhmm MMddhhmm Configures the ending date of DST You can specify the time in one of two ways Mm n d hhmm specifies an hour on the nth occurrence of a weekday in a month For example M10 5 0 0200 means the fifth occurrence of Sunday in the tenth month October at 2 00 a m MMddhhmm specifies a month day hour and minute For example 10310200 means October 31 at 2 00 a m d...

Page 63: ...m info Displays time zone information name tz Configures an abbreviated name for the local time zone name tz is the name For example PST is Pacific Standard Time offset from utc minutes Configures the time zone offset in minutes to subtract from Universal Coordinated Time UTC where positive numbers mean west of Greenwich and negative numbers mean east of Greenwich Configuring the date Configure th...

Page 64: ... Save the configuration to the boot cfg and pcmboot cfg files 4 Reboot the switch End Variable definitions Use the data in the following table to use the config bootconfig master command Variable Value cpu slot Specifies the slot number for the primary SF CPU This variable can be 5 or 6 The default primary is slot 5 Changing passwords Configure new passwords for each access level or change the log...

Page 65: ... Variable Value access level access level enable disable Permits or blocks this access level access level is an integer from 2 8 enable disable enables or disables the chosen level aging days Configures the time limit for passwords daysis the age out time as an integer from 1 365 default lockout time secs Changes the default lockout time after three invalid attempts secs is the lockout time in sec...

Page 66: ...4 administrator logon to connect to the Web Switching Module WSM For more information about the WSM see Nortel Ethernet Routing Switch 8600 Web Switching Module Fundamentals NN46205 314 l4oper username Configures the Layer 4 operator logon to connect to the WSM For more information about the WSM see Nortel Ethernet Routing Switch 8600 Web Switching Module Fundamentals NN46205 314 lockout time Host...

Page 67: ...password Changes the read only logon or password username is the logon name password is the password associated with the logon name rw username password Changes the read write logon or password username is the logon name password is the password associated with the logon name rwa username password Changes the read write all logon or password username is the logon name password is the password asso...

Page 68: ...admin username Configures the ssladmin logon to connect to and configure the secure sockets layer SSL Acceleration Module SAM Resetting passwords Reset passwords to restore them to the factory default values Procedure steps Action From the boot monitor CLI reset passwords by using the following command reset passwd Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May...

Page 69: ...emote connection to the switch You must power up the switch Initial commissioning procedures The following task flow shows the sequence of procedures you perform for the initial commissioning steps To link to a procedure click on the procedure title in Initial commissioning navigation page 71 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 No...

Page 70: ...70 Initial steps using the NNCLI Figure 9 Initial commissioning procedures Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 71: ...ging passwords page 92 Job aid Roadmap of initial NNCLI commands The following table lists the commands and the parameters you use to complete the procedures in this section The last two columns indicate which commands support the no and default forms of the command Table 10 Job aid Roadmap of initial NNCLI commands Command Parameter Privileged EXEC mode clock set MMddyyyyhhmmss install show boot ...

Page 72: ...tname dst offset minutes dst start Mm n d hhmm MMddhhmm name tz boot config tz offset from utc minutes cli password word access level access level word aging time day 1 365 default lockout time 60 65000 lockout word time time min passwd len 10 20 password password history 3 32 snmp server contact word agent conformance enable authentication trap enable min secure semi secure very secure Nortel Eth...

Page 73: ...eletypewriter TTY compatible terminal or a portable computer with a serial port and terminal emulation software an Underwriters Laboratories UL listed straight through or null modem RS 232 cable with a female DB 9 connector for the console port on the switch The other end of the cable must use a connector appropriate to the serial port on your computer or terminal Most computers or terminals use a...

Page 74: ... terminal connection to the NNCLI Prerequisites You need a DTE to DCE cable straight or transmit cable to connect the Nortel Ethernet Routing Switch 8600 to the modem You must configure your client dial up settings to establish the connection to the modem You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Configure port parameters based on the modem require...

Page 75: ... modem port 6 Save the boot configuration 7 Optionally shutdown and reinitialize the port by using the following command boot config sio modem restart 8 Reboot the switch End Variable definitions Use the data in the following table to use the boot config sio command Variable Value 8databits Specifies either 8 enabled or 7 disabled data bits for each byte for software to interpret The default is di...

Page 76: ...ess on the point to point link The default is 0 0 0 0 The switch assigns this value to any PC that connects through the modem port with configured TCP IP properties to obtain an IP address automatically If the client uses a static IP address the Nortel Ethernet Routing Switch 8600 accepts this address If you use Password Authentication Protocol PAP authentication you must ensure that the client us...

Page 77: ...a pound sign The following table lists the recognized options Table 11 Job aid PPP file options Option Description asyncmap value Configures the desired async map to the value you specify chap_file file Obtains Challenge Handshake Authentication Protocol CHAP secrets from the specified file You require this option if either peer requires CHAP authentication If your users must use the same IP addre...

Page 78: ...uration requests to the value you specify ipcp_max_failure value Configures the maximum number of IPCP configuration negative acknowledgements NAK to the value you specify ipcp_max_terminate value Configures the maximum number of transmissions for IPCP termination requests to the value you specify ipcp_restart value Configures the timeout in seconds for IPCP negotiation to the value you specify lc...

Page 79: ...nit MRU size for negotiation to the value you specify mtu value Configures the maximum transmission unit MTU size for negotiation to the value you specify netmask value Configures the netmask value for negotiation to the value you specify no_acc Disables address control compression no_all Does not request or allow options no_asyncmap Disables async map negotiation no_chap Disallows CHAP authentica...

Page 80: ...P authentication with the peer to the specified password pap_restart value Configures the timeout in seconds for PAP negotiation to the value you specify pap_user_name name Configures the user name for PAP authentication with the peer to the specified name passive_mode Configures passive mode PPP waits for the peer to connect after an initial connection attempt proxy_arp Adds an entry to the Addre...

Page 81: ...le passive_mode lcp_echo_interval 30 lcp_echo_failure 10 require_chap require_pap no_vj ipcp_accept_remote login chap_file my_chap pap_file my_pap Configuring the switch with the setup utility Configure the switch with the setup utility to monitor system requirements and obtain the maximum system performance Prerequisites You must log on to the Privileged EXEC mode in the NNCLI Procedure steps Ste...

Page 82: ...To specify the path to the file is optional Please provide primary image file path flash p80a4100 img Description Indicates the name of the primary image file Action Press Enter to accept the default p80a4100 img or type a different file name for the primary image file To specify the path to the file is optional If your run time image resides on your PCMCIA card you must specify the path as PCMCIA...

Page 83: ...ion Enter y to save the boot and run time configuration files on the backup CPU Accept the default n to save boot and run time configuration files on the primary CPU Do you want to enable m mode support n y n Description Specifies if you want the chassis to run in 128 K mode To run in 128 K mode the CPU module must be an 8691 or higher and the switch must use at least one 8600 module 128 K module ...

Page 84: ...o enable CPU high availability HA mode Use CPU HA mode to recover switches with two CPUs quickly from a failure of one of the CPUs In HA mode hot standby you synchronize and configure the two CPUs in the same mode so they are compatible Action Specify y to enable CPU high availability HA mode Accept the default n to not enable CPU HA mode Do you want to enable vlan optimization mode support n y n ...

Page 85: ... the switch by Trivial FTP TFTP Action Enter y to enable TFTP Accept the default n to not enable TFTP Do you want to enable WEB server service n y n Description Specifies if you want to enable Web server service Use the Web server service to monitor statistics for the switch with your Web browser Action Enter y to enable Web server service Accept the default n to not enable Web server service IP A...

Page 86: ...0 0 0 0 0 0 0 0 Description Specifies the IP address of the second network management route Action Type the IP address of the second network management route static route from the network management port to a device in the network Third net mgmt route 0 0 0 0 0 0 0 0 Description Specifies the IP address of the third network management route Action Type the IP address of the third network managemen...

Page 87: ...ant to save your changes Configuring system identification Configure system identification to specify the system name contact person and location of the switch Prerequisites You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Change the system name by using the following command sys name word 2 Configure the system contact by using the following command snmp...

Page 88: ...table host Specifies hosts to receive SNMP notifications location word Identifies the physical location of the node To include blank spaces in the location use quotation marks around the text Use the no operator to remove this configuration To configure this option to the default value use the default operator with the command The default is a Nortel address log Specifies the SNMP log feature name...

Page 89: ...ouver BC End Configuring the time zone Configure the time zone to specify the time zone for your location and configure settings for Daylight Saving Time DST Prerequisites You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Configure the time zone by using the following command boot config tz 2 Save the changed configuration to the boot cfg and pcmboot cfg f...

Page 90: ... Pacific Daylight Time To configure this option to the default value use the default operator with the command dst offset minutes Configures the daylight saving adjustment in minutes The default is 60 minutes To configure this option to the default value use the default operator with the command dst start Mm n d hhmm MMd dhhmm Configures the starting date of DST Mm n d hhmm specifies an hour on th...

Page 91: ...the calendar time in the form of month day year hour minute and second Prerequisites You must log on to the Privileged EXEC mode in the NNCLI Procedure steps Action Configure the date by using the following command clock set MMddyyyyhhmmss Specifying the primary SF CPU Specify the primary SF CPU to determine which SF CPU you use as the master after the switch performs a full power cycle only When ...

Page 92: ...ging passwords Configure new passwords for each access level or change the logon or password for the different access levels of the switch After you receive the Nortel Ethernet Routing Switch 8600 use default passwords to initially access the NNCLI If you use Simple Network Management Protocol version 3 SNMPv3 you can change encrypted passwords Prerequisites You must use an account with read write...

Page 93: ...ccess level The available access level values are l4admin l4oper layer1 word layer2 layer3 word oper read only word read write word read write all word slbadmin slboper ssladmin word represents the new password with 0 20 characters For information about the Web Switching Module WSM see Nortel Ethernet Routing Switch 8600 Web Switching Module Fundamentals NN46205 314 aging time day 1 365 Configures...

Page 94: ...e is the lockout out time in seconds in the 60 65000 range The default is 60 seconds min passwd len 10 20 Configures the minimum length for passwords in high secure mode To configure this option to the default value use the default operator with the command password history 3 32 Specifies the number of previous passwords the switch stores You cannot reuse a password that is stored in the password ...

Page 95: ...e connection configuration procedures The following task flow shows the sequence of procedures you perform to permit remote connections to the Nortel Ethernet Routing Switch 8600 To link to a procedure click on the procedure title in Remote connection configuration navigation page 96 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Netw...

Page 96: ...ation Assigning an IP address to the management port page 97 Assigning static routes to the management interface page 97 Configuring SNMP settings for Device Manager access page 99 Enabling the Web management interface page 101 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 97: ...4 In the Mask box type the subnet mask 5 Click Apply 6 Click Close 7 From the Device Manager toolbar select Edit Chassis The Chassis dialog box appears with the System tab displayed 8 In the VirtualIPAddr box enter the IP address you want to configure as the virtual address 9 In the VirtualNetMask box enter the subnet mask 10 Click Apply End Assigning static routes to the management interface Assi...

Page 98: ...eating Layer 3 static routes 13 Click Insert The new route appears in the Static Routes tab End Variable definitions Use the data in the following table to configure the Insert Static Routes dialog box Variable Value OwnerVrfId Configures the owner VRF ID of the static route Dest Configures the destination IP address of this route An entry with a value of 0 0 0 0 is the default route Multiple rout...

Page 99: ...s active only if you configure the switch with a local route to the network If you do not select this variable this box indicates the static route is active if you configure the switch with a local route or dynamic route Configuring SNMP settings for Device Manager access Use this procedure to configure important communication parameters such as the polling interval timeout and retry count You can...

Page 100: ...r polls the switch according to the settings you select prior to the Enable box Retry Count If Device Manager cannot transmit polling information at start up the number of times Device Manager retransmits polling information Timeout Length of the retry for each polling waiting period If you access the device through a slow link you can increase the timeout interval and change the retransmission st...

Page 101: ...cess to the switch using a Web browser Procedure steps Step Action 1 From the Device Manager menu bar select Edit Chassis The Chassis dialog box appears with the System tab displayed 2 Click System Flags 3 Select the EnableWebServer box 4 Click Apply 5 Click Close 6 From the Device Manager menu bar select Security Control Path General 7 Click Web 8 Complete the ROUserName and ROPassword fields to ...

Page 103: ... configuration procedures The following task flow shows the sequence of procedures you perform to permit remote connections to the Nortel Ethernet Routing Switch 8600 To link to a procedure click the procedure title in Remote connection configuration navigation page 104 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 104: ...on procedures Remote connection configuration navigation Job aid Roadmap of remote connection CLI commands page 105 Assigning an IP address to the management port page 106 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 105: ...Job aid Roadmap of remote connection CLI commands Command Parameter ftpd true false rlogind true false sshd true false telnetd true false config bootconfig flags tftpd true false ftp debug true false info password value tftp debug true false tftp hash true false tftp rexmit seconds tftp timeout seconds config bootconfig host user value config bootconfig net mgmt ip ipaddr mask cpu slot value confi...

Page 106: ...nt modules ATTENTION The virtual IP address feature is not supported in a switch with mixed Nortel Ethernet Routing Switch 8600 8190SM modules and 8691SF CPU modules Procedure steps Step Action 1 Assign an IP address to the management port by using the following command config bootconfig net mgmt ip ipaddr mask cpu slot value 2 Assign an IP address to a virtual management port by using the followi...

Page 107: ...u can specify up to four static routes for the management interface For more information about static routes see Nortel Ethernet Routing Switch 8600 Configuration IP Routing NN46205 523 Procedure steps Step Action 1 Specify a gateway address route by using the following command config bootconfig net mgmt route add netaddr mask gateway 2 Save the changes to the boot cfg and config cfg files End Var...

Page 108: ...itionally this route does not appear in the routing table of the Nortel Ethernet Routing Switch 8600 If you configure a 13 x x x network for output using the I O modules the switch can experience connectivity issues Enabling remote access services Enable the remote access service to provide multiple methods of remote access Prerequisites When you enable an rlogin flag you must configure an access ...

Page 109: ...t interface Start the Web management interface to provide management access to the switch using a Web browser For details about configuring the Web management interface see Nortel Ethernet Routing Switch User Interface Fundamentals NN46205 308 Procedure steps Step Action 1 Enable the Web server by using the following command config web server enable 2 Configure the access password by using the fol...

Page 110: ... mechanism you need to change the password to a valid value Procedure steps Step Action 1 Define conditions for the remote host logon by using the following command config bootconfig host 2 Save the changed configuration to the boot cfg and pcmboot cfg files 3 Reboot the switch End Variable definitions Use the data in the following table to use the config bootconfig host command Variable Value ftp...

Page 111: ... debug true false Enables or disables debug mode on TFTP TFTPD If you enable debug mode debug messages appear on the management console screen The default is false tftp hash true false Enables or disables the TFTP hash bucket display The default is false tftp rexmit seconds Configures the TFTP retransmission timeout The default value is 2 seconds seconds is the number of seconds 1 2147483647 tftp ...

Page 113: ...figuration procedures The following task flow shows the sequence of procedures you perform to permit remote connections to the Nortel Ethernet Routing Switch 8600 To link to a procedure click the procedure title in Remote connection configuration navigation page 114 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 114: ...on procedures Remote connection configuration navigation Job aid Roadmap of remote connection NNCLI commands page 115 Assigning an IP address to the management port page 116 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 115: ...on The last two columns indicate which commands support the no and default forms of the command Table 15 Job aid Roadmap of remote connection NNCLI commands Command Parameter Global Configuration mode ftpd rlogind sshd telnetd boot config flags tftpd ftp debug password value tftp debug tftp hash tftp rexmit seconds tftp timeout seconds boot config host user value boot config net mgmt ip ipaddr mas...

Page 116: ...ent ports on the switch management modules ATTENTION The virtual IP address feature is not supported in a switch with mixed Nortel Ethernet Routing Switch 8600 8190SM modules and 8691SF CPU modules Prerequisites You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Assign an IP address to the management port by using the following command boot config net mgmt ...

Page 117: ...NTION You cannot assign an address of 0 0 0 0 0 Assigning static routes to the management interface Assign a static route to specify a gateway address route for the management interface You can specify up to four static routes for the management interface For more information about static routes see Nortel Ethernet Routing Switch 8600 Configuration OSPF and RIP NN46205 522 Prerequisites You must l...

Page 118: ...resents the gateway used to point to the target subnet ATTENTION The config net mgmt route command uses the natural mask of the target subnet Therefore in the preceding example what you implement is the command config net mgmt route 13 0 0 0 10 125 2 1 Additionally this route does not appear in the routing table of the Nortel Ethernet Routing Switch 8600 If you configure a 13 x x x network for out...

Page 119: ...mote access service types to enable ftpd rlogind sshd telnetd tftpd Use the no operator to remove this configuration To configure this option to the default value use the default operator with the command Enabling the Web management interface Enable the Web management interface to provide management access to the switch using a Web browser Prerequisites You must log on to the Global Configuration ...

Page 120: ...s web server password Configuring the remote host logon Configure the remote host logon to modify parameters for FTP and TFTP access Use the default parameters for TFTP transfers If you want to use FTP as the transfer mechanism you must change the password to a valid value Prerequisites You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Define conditions fo...

Page 121: ...hen all copying to and from the network uses FTP instead of TFTP If the user name or password is incorrect copying over the network fails tftp debug Enables or disables debug mode on TFTP TFTPD If you enable debug mode debug messages display on the management console screen The default is disabled Use the no operator to remove this configuration To configure this option to the default value use th...

Page 122: ...To configure this option to the default value use the default operator with the command user value Configures the remote user logon value is the user logon name up to 16 characters To configure this option to the default value use the default operator with the command Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 123: ...the target device If the device receives the packet it sends a ping reply After the switch receives the reply a message appears indicating you can reach the specified IP address If the switch does not receive a reply the message indicates the address is not responding Procedure steps Action Ping an IP network connection by using the following command ping HostName ipv4address ipv6address scopeid v...

Page 124: ... the virtual router and forwarder VRF name from 1 16 characters Using Telnet to log on to the device Use Telnet to log on to the device and remotely manage the switch Procedure steps Step Action 1 From a PC or terminal start a Telnet session by using the following command telnet ipv4 or ipv6 address 2 Enter the logon and password when prompted End Accessing the switch through the Web interface Mon...

Page 125: ... address field The Web logon page appears 3 In the User Name and Password boxes type ro 4 Click Log On The System page appears This page provides general information about the switch and its configuration parameters End Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ...

Page 127: ...ave the changes to both the master and the standby management modules Save the configuration to a file to retain the configuration settings Procedure steps Step Action 1 From the main Device Manager window select Actions Save Boot Config to save the boot configuration 2 From the main Device Manager window select Actions Save Runtime Config to save the current configuration End Nortel Ethernet Rout...

Page 129: ...file to retain the configuration settings Procedure steps Action Save to configuration by using the following command save savetype file value verbose standby value backup value mode cli nncli Variable definitions Use the data in the following table to use the save command Variable Value backup value Saves the specified file name and identifies the file as a backup file value uses one of the follo...

Page 130: ... to save Possible values for this parameter are config bootconfig log trace clilog snmplog standby value Saves the specified file name to the standby SF CPU in the following format for value filename pcmcia file flash file file is a string of 1 99 characters verbose Saves the default and current configuration If you omit this parameter the command saves only parameters you change Nortel Ethernet R...

Page 131: ...guration settings Prerequisites You must log on to the Privileged EXEC mode in the NNCLI Procedure steps Step Action 1 Save to boot configuration by using the following command save bootconfig file word verbose standby word backup word mode cli nncli 2 Save the running configuration by using the following command save config file word verbose standby word backup word mode cli nncli End Variable de...

Page 132: ... peer file pcmcia file flash file file is a string of 1 99 characters mode cli nncli Saves the boot configuration in CLI or NNCLI format standby word Saves the specified file name to the standby SF CPU in the following format for word filename pcmcia file flash file file is a string of 1 99 characters verbose Saves the default and current configuration If you omit this parameter the command saves ...

Page 133: ...90 dst offset option 44 63 72 90 dst start option 44 63 72 90 F file transfers FTP 111 121 FTP transfers 111 121 ftp debug option 105 110 115 121 H hard reset 37 hash bucket window TFTP 111 121 host commands boot monitor CLI 110 120 host password option 105 111 115 121 I identification parameters system 60 IP address assigning 97 106 116 L logon names default 19 M Management port 116 master SF CPU...

Page 134: ...ntrol 37 sio mode option 48 76 slip compression option 49 77 slip rx compression option 49 77 soft reset 37 software version 35 system identification 60 System tab 34 T TCP IP header compression 49 77 terminal protocol configuring 46 74 terminal connecting 45 73 TFTP hash bucket display 111 121 TFTP retransmission timeout 111 121 tftp debug option 105 111 115 121 tftp hash command 105 111 115 121 ...

Page 135: ......

Page 136: ...o to www nortel com documentfeedback www nortel com LEGAL NOTICE While the information in this document is believed to be accurate and reliable except as otherwise expressly agreed to in writing NORTEL PROVIDES THIS DOCUMENT AS IS WITHOUT WARRANTY OR CONDITION OF ANY KIND EITHER EXPRESS OR IMPLIED The information and or products described in this document are subject to change without notice Norte...

Search results

Summary of Contents for Passport 8600 Series

Reviews:

Brands by name

Popular brands

Nortel Passport 8600 Series, Commissioning

Search results

Summary of Contents for Passport 8600 Series

Reviews:

Brands by name

Popular brands