manualshive.com logo in svg

3Com 3CRDSF9PWR-US - OfficeConnect Managed Fast Ethernet PoE..., Руководство пользователя

Поделиться
Скачать
3Com 3CRDSF9PWR-US - OfficeConnect Managed Fast Ethernet PoE... Скачать руководство пользователя страница 53

4

M

ANAGING

 D

EVICE

 S

ECURITY

The Management Security section provides information for configuring 
system access, defining RADIUS authentication, port-based 
authentication, and access control lists.

This section includes the following topics:

■

Configuring System Access

■

Defining RADIUS Clients

■

Defining Port-Based Authentication (802.1X)

■

Defining Local Database Authentication

■

Encrypting Connection to the Web Interface (HTTPS)

■

Using the Secure Shell Protocol (SSH)

■

Defining Access Control Lists

■

Using Broadcast Storm Control

Содержание 3CRDSF9PWR-US - OfficeConnect Managed Fast Ethernet PoE...

Страница 1: ...3Com OfficeConnect Managed PoE Switch User Guide 3CRDSF9PWR www 3Com com Part Number 10016863 Rev BB Published August 2009...

Страница 2: ...t to remove or deface any portion of any legend provided on any licensed program or documentation contained in or delivered to you in conjunction with this User Guide Unless otherwise indicated 3Com r...

Страница 3: ...used in your network It covers summaries of hardware and software features Using the 3Com Web Interface Provides information for using the Web interface including adding editing and deleting device co...

Страница 4: ...c and Rapid Spanning Tree Configuring SNMP Provides information for configuring the Simple Network Management Protocol SNMP which provides a method for managing network devices Configuring Quality of...

Страница 5: ...ventions Table 1 lists conventions that are used throughout this guide Related Documentation In addition to this guide other documentation available for the 3Com OfficeConnect Managed Fast Ethernet Po...

Страница 6: ...6 ABOUT THIS GUIDE...

Страница 7: ...for Management 21 Methods of Managing a Switch 21 Web Interface Management 22 Command Line Interface Management 22 SNMP Management 23 Switch Setup Overview 23 IP Configuration 25 Using the Command Li...

Страница 8: ...he Configuration 44 Resetting the Device 45 Restoring Factory Defaults 47 Logging Off the Device 48 3 VIEWING BASIC SETTINGS Viewing Device Settings 50 Configuring the Polling Interval 51 Viewing Colo...

Страница 9: ...ACLs 83 Configuring MAC Based ACLs 84 Removing MAC Based ACLs 86 Viewing IP Based ACLs 88 Defining IP Based ACLs 90 Removing IP Based ACLs 93 Viewing ACL Binding 95 Configuring ACL Binding 96 Removin...

Страница 10: ...difying VLAN Settings 136 Modifying Port VLAN Settings 138 Removing VLANs 139 9 CONFIGURING IP AND MAC ADDRESS INFORMATION Defining IP Addressing 142 Configuring ARP Settings 143 Viewing ARP Settings...

Страница 11: ...to CoS Mapping 175 Configuring DSCP to CoS Mapping 176 Configuring Trust Settings 177 Viewing Bandwidth Settings 178 Defining Bandwidth Settings 180 Configuring Voice VLAN 182 Viewing Voice VLAN 183 D...

Страница 12: ...fining Cable Diagnostics 221 Pinging Another Device 223 A 3COM NETWORK MANAGEMENT 3Com Network Supervisor 225 3Com Network Director 226 3Com Network Access Manager 226 3Com Enterprise Management Suite...

Страница 13: ...GLOSSARY 243 F OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS Register Your Product to Gain Service Benefits 249 TTroubleshoot Online 249 Purchase Extended Warranty and Professional Services 250 Access Soft...

Страница 14: ......

Страница 15: ...topics About the OfficeConnect Managed Fast Ethernet PoE Switch Front Panel Detail LED Status Indicators System Specifications Installing the Switch Setting Up for Management Methods of Managing a Sw...

Страница 16: ...st Ethernet access ports One Gigabit Ethernet uplink port Port security Link aggregation control protocol LACP Up to 256 VLANs Access control lists ACLs Port access control through IEEE 802 1X or loca...

Страница 17: ...queues per port Power over Ethernet and Power over Ethernet Plus Supported on ports 1 8 Fast Ethernet Ports Auto negotiating 10 100BASE TX ports Gigabit Ethernet Ports Auto negotiating 10 100 1000BASE...

Страница 18: ...flashes quickly when the port is sending or receiving data Yellow The port works at the rate of 10 Mbps the LED flashes quickly when the port is sending or receiving data OFF The port is not connected...

Страница 19: ...owser http www 3com com Table 3 System specifications of the OfficeConnect Managed Fast Ethernet PoE switch Specification OfficeConnect Managed Fast Ethernet PoE Switch Physical dimensions W D H 440 2...

Страница 20: ...sarbeiten verrichten lesen Sie die 3Com Switch Family Safety and Regulatory Information ADVERTENCIA Informacion de seguridad Antes de instalar o extraer cualquier componente del switch o de realizar t...

Страница 21: ...Methods of Managing a Switch Switch Setup Overview Using the Command Line Interface CLI Manually set the IP Address using the Console Port Viewing IP Information using the Console Port Setting Up Web...

Страница 22: ...efer to Setting Up Web Interface Management on page 30 Command Line Interface Management Each switch has a command line interface CLI that allows you to manage the switch from a workstation either loc...

Страница 23: ...twork Refer to Setting Up SNMP Management V1 or V2 on page 32 Switch Setup Overview This section gives an overview of what you need to do to get your switch set up and ready for management when it is...

Страница 24: ...ant to manually configure the IP information Connect to the console port and use the Command Line Interface See page 26 How do you want to manage your switch See page 21 SNMP See page 32 Command Line...

Страница 25: ...age Most DHCP servers allow static IP addresses to be configured so that you know what IP address will be allocated to the switch Refer to the documentation that accompanies your DHCP server You shoul...

Страница 26: ...ng the Command Line Interface CLI You can access the switch through the Console port to manually set the IP address or to view the IP address that was assigned automatically for example by a DHCP serv...

Страница 27: ...ave connected the cable The settings must be set to match the default settings for the switch which are 38 400 baud bits per second 8 data bits no parity 1 stop bit no hardware flow control Refer to t...

Страница 28: ...he IP address and mmm mmm mmm mmm is the subnet mask of the switch 6 Enter the end command to return to the Privileged Exec mode and then enter the quit command to terminate the CLI session The initia...

Страница 29: ...dress and Netmask 169 254 99 51 255 255 0 0 on VLAN 1 Address Mode DHCP Console The initial set up of your switch is now complete and the switch is ready for you to set up your chosen management metho...

Страница 30: ...isplay the web interface correctly use one of the following Web browser and platform combinations For the browser to operate the web interface correctly JavaScript and Cascading Style Sheets must be e...

Страница 31: ...nter the IP address of the switch that you wish to manage in the URL locator for example in the following format http xxx xxx xxx xxx 5 At the login and password prompts enter admin as your user name...

Страница 32: ...tch that you wish to manage in the following format telnet xxx xxx xxx xxx where xxx xxx xxx xxx is the IP address of the switch If opening a Telnet session via third party software you will need to e...

Страница 33: ...ding Software using the CLI This section describes how to upgrade software to your switch from the Command Line Interface CLI Note You can also upgrade the software using the switch Web user interface...

Страница 34: ...g a new runtime file it will automatically overwrite the previous version To set the switch to boot from the new runtime file you have downloaded enter the reload command as shown below Console config...

Страница 35: ...oduction to the user interface and includes the following topics Starting the 3Com Web Interface Understanding the 3Com Web Interface Using Screen and Table Options Saving the Configuration Resetting...

Страница 36: ...e read or read write permissions to users for configuring the switch Users and access levels are described in Configuring System Access Login information is always handled in the local database A uniq...

Страница 37: ...user interface 1 Open an Internet browser 2 Enter the device IP address in the address bar and press Enter The Enter Network Password Page opens Figure 8 Enter Network Password Page 3 Enter your user...

Страница 38: ...ing views Tree View Provides easy navigation through the configurable device features The main branches expand to display the sub features Tab View Provides the device summary information located at t...

Страница 39: ...easy navigation through the configurable device features The main branches expand to display the sub features Tab View The Tab Area enables navigation through the different device features Click the t...

Страница 40: ...Summary Device View Figure 11 Device Representation 2 By moving your mouse over a port you can view information about the port type speed duplex mode utilization and current status 3 By selecting a sp...

Страница 41: ...Configuration Information Modifying Configuration Information Removing Configuration Information Viewing Configuration Information To view configuration information 1 Click Port Administration Summar...

Страница 42: ...n can be added to specific 3Com Web Interface pages by opening the IP Setup Page To configure IP Setup 1 Click Administration IP Setup The IP Setup Page opens Figure 13 IP Setup Page 2 Enter requisite...

Страница 43: ...Figure 14 System Access Modify Page 2 Modify the fields 3 Click The access fields are modified Removing Configuration Information 1 Click Administration System Access Remove The System Access Remove...

Страница 44: ...atest configuration to be saved to the flash memory To save the device configuration 1 Click Save Configuration The Save Configuration Page opens Figure 16 Save Configuration Page A message appears Sa...

Страница 45: ...ation To prevent the current configuration from being lost use the Save Configuration Page to save all user defined changes to the flash memory before resetting the device To reset the device 1 Click...

Страница 46: ...ge is displayed indicating that the device will reboot in 15 seconds 4 Click again The device is reset and a prompt for a user name and password is displayed Figure 18 User Name and Password Page 5 En...

Страница 47: ...Administration Reset The Reset Page opens Figure 19 Reset Page The Reset Page contains the following fields Initialize keep IP Setting Resets the device with the factory default settings but maintain...

Страница 48: ...48 CHAPTER 2 USING THE 3COM WEB INTERFACE Logging Off the Device To log off the device 1 Click The Logout Page opens 2 The following message appears 3 Click The 3Com Web Interface Home Page closes...

Страница 49: ...Page presents a device summary section that provides the system administrator with the option to view essential information required for setting up and maintaining device settings The Device Summary...

Страница 50: ...he following fields Poll Now Enables polling the ports for port information including speed utilization and port status Product Description Displays the device name System Name Defines the user define...

Страница 51: ...Polling Interval Page displays the interval at which information on the Web management pages is refreshed To configure the polling interval 1 Click Device Summary Polling Interval The Polling Interva...

Страница 52: ...ich are the physical interface used for terminating twisted pair type cable SFP Displays the port status of the Small Form Factor Pluggable SFP optical transmitter modules that combine transmitter and...

Страница 53: ...hentication and access control lists This section includes the following topics Configuring System Access Defining RADIUS Clients Defining Port Based Authentication 802 1X Defining Local Database Auth...

Страница 54: ...figuring the switch Login information is managed in the local database A unique password is required of each user Two access levels exist on the 3Com Web Interface Management access level Provides the...

Страница 55: ...Access Summary Page The System Access Summary Page contains the following fields User Name Displays the user names The possible predefined field values are admin Displays the predefined administrative...

Страница 56: ...opens Figure 24 System Access Setup Page The System Access Setup Page contains the following fields User Name Defines the user name Access Level Defines the user access level The lowest user access le...

Страница 57: ...s the following fields User Name Displays the user name Access Level Specifies the user access level The lowest user access level is Monitoring and the highest is Management Management Provides users...

Страница 58: ...Page The System Access Remove Page contains the following fields Remove User s Users to be removed can be selected from the list below User Name Displays the user name Access Level Displays the user a...

Страница 59: ...s the following fields Primary Server Defines the RADIUS Primary Server authentication fields Backup Server Defines the RADIUS Backup Server authentication fields IP Address Defines the RADIUS Server...

Страница 60: ...the default key string used for authenticating and encrypting all RADIUS communications between the switch and the RADIUS server This key must match the RADIUS encryption The range is 0 48 characters...

Страница 61: ...ng system access Supplicants Specifies the host connected to the authenticated port requesting to access the system services Authentication Server Specifies the server that performs the authentication...

Страница 62: ...ation Reauthentication can be used to detect if a new device is plugged into a switch port If enabled the client will be reauthenticated after the interval specified by the Reauthentication Period Ena...

Страница 63: ...his port This is the default Authenticator Maximum Request Sets the maximum number of times the switch port will retransmit an EAP request packet to the client before it times out the authentication s...

Страница 64: ...Setup Page opens Figure 29 802 1X Setup Page The 802 1X Setup Page contains the following fields 802 1X System Setting System Authentication Specifies if Port Authentication is enabled on the device T...

Страница 65: ...ion on the port Disabled Disables periodic reauthentication on the port Maximum Request Sets the maximum number of times the switch port will retransmit an EAP request packet to the client before it t...

Страница 66: ...s and perform DNS queries All other traffic except for HTTP protocol traffic is blocked The switch intercepts HTTP protocol traffic and redirects it to a switch generated web page that facilitates use...

Страница 67: ...Local Database Setup The Local Database Setup Page opens Figure 30 Local Database Setup Page The Local Database Setup Page contains the following fields System Authentication Control Configures local...

Страница 68: ...owing fields Port Status Displays the administrative status of local database authentication for a port The possible field values are Enabled Enables local database authentication on the device Disabl...

Страница 69: ...status of local database authentication for a port The possible field values are Enabled Enables local database authentication on the device Disabled Disables local database authentication on the devi...

Страница 70: ...User Listing The Local Database User Summary Page displays user names stored in the local database To display the users stored in the Local Database 1 Click Port Local Database User Summary The Local...

Страница 71: ...e The Local Database User Setup Page contains the following fields Create a User User Name The name of a user to be authorized restricted network access through local database authentication String le...

Страница 72: ...Local Database User Modify Page The Local Database User Modify Page contains the following fields User Name The name of a user stored in the local database Password Modify Mark this box to modify the...

Страница 73: ...o this page To remove a user entry from the Local Database 1 Click Port Local Database Remove The Local Database User Remove Page opens Figure 36 Local Database User Remove Page The Local Database Use...

Страница 74: ...roperly validated certificate provides a higher level of security than the default certificate You can securely browse your switch by using the HTTPS HTTP over SSL protocol To access the Web interface...

Страница 75: ...e HTTPS settings 1 Click Security HTTPS Settings Configure The HTTPS Configure Page opens Figure 37 HTTPS Configure Page The HTTPS Configure Page contains the following fields HTTPS Status Specifies i...

Страница 76: ...PS settings are updated Displaying the Web Server Certificate The HTTPS Detail Page allows users to display detailed information about the web server certificate To view information about the digital...

Страница 77: ...tify your switch Administrators will be warned that the certificate has not been certified by a Certificate Authority CA but security will not be otherwise affected If you cannot generate an X 509 cer...

Страница 78: ...in the private key file This password is used to verify authorization for certificate use and is verified when downloading the certificate to the switch 2 Define the fields 3 Click The certificate is...

Страница 79: ...ete these steps 1 Generate a Host Key Pair No keys are generated in the switch s factory default configuration You must use the SSH Key Generate Page to create a public host key 2 Provide Host Public...

Страница 80: ...H client application To view the DSA and RSA keys 1 Click Security SSH Host Key The SSH Host Key Page opens Figure 40 SSH Host Key Page The SSH Host Key Page contains the following fields Key When an...

Страница 81: ...e Page The SSH Key Generate Page contains a prompt message to enter a seed to randomize the key generation process 2 Enter any random string preferably eight characters or more 3 Click The switch begi...

Страница 82: ...filters that can be defined as ACEs Source Port IP Address and Wildcard Mask Filters packets by the source port IP address and wildcard mask Destination Port IP Address and Wildcard Mask Filters packe...

Страница 83: ...lds ACL Name Contains a list of the MAC based ACLs Source Address Indicates the source MAC address Source Mask Indicates the source MAC address Mask Destination Address Indicates the destination MAC a...

Страница 84: ...etup Page allows the network administrator to create and define rules for MAC based ACLs Monitor users have no access to this page To configure MAC based ACLs Click Device ACL MAC Based ACL Setup The...

Страница 85: ...ches the destination MAC address to which packets are addressed Destination Mask Defines the destination MAC Address wildcard mask Wildcards are used to mask all or part of a destination MAC address W...

Страница 86: ...or MAC based ACL rules Monitor users have no access to this page Click Device ACL MAC Based ACL Remove The MAC Based ACL Remove Page opens Figure 44 MAC Based ACL Remove Page The MAC Based ACL Remove...

Страница 87: ...tocols Action Indicates the ACL forwarding action The options are as follows Permit Forwards packets which meet the ACL criteria Deny Drops packets which meet the ACL criteria To remove MAC based ACLs...

Страница 88: ...Name Contains a list of the IP Based ACLs Protocol Indicates the protocol in the rule to which the packet is matched Source Port Indicates the source port to match in packets Enabled only when TCP or...

Страница 89: ...cates the destination IP address mask Match DSCP Matches the packet DSCP value Match IP Precedence Indicates matching IP Precedence with the packet IP precedence value Action Indicates the ACL forward...

Страница 90: ...ccess control entries ACEs that are made of the filters that determine traffic classifications The total number of ACEs that can be defined in all ACLs together is 256 Monitor users have no access to...

Страница 91: ...lected the IP based ACL is applied to any destination port TCP Flags If checked enables configuration of TCP flags matched to the packet The possible fields are URG Urgent pointer field significant Th...

Страница 92: ...of 010 010 011 010 is invalid but a wildcard mask of 10 10 11 10 is valid Destination IP Address If selected enables matching the destination port IP address to which packets are addressed to the rul...

Страница 93: ...CL 2 Select the ACL from the list 3 Define the fields for the new ACL rule 4 Click The new IP based ACL rule settings are configured and the device is updated Removing IP Based ACLs The IP Based ACL R...

Страница 94: ...tination IP Address Indicates the destination IP address Destination Mask Indicates the destination IP address mask DSCP Matches the packet DSCP value to the ACL Either the DSCP value or the IP Preced...

Страница 95: ...s To view ACL Binding 1 Click Device ACL ACL Binding Summary The ACL Binding Summary Page opens Figure 48 ACL Binding Summary Page The ACL Binding Summary Page contains the following fields Interface...

Страница 96: ...ing 1 Click Device ACL ACL Binding Setup The ACL Binding Setup Page opens Figure 49 ACL Binding Setup Page The ACL Binding Setup Page contains the following fields Select Port s Selects the ports to b...

Страница 97: ...Device ACL ACL Binding Remove The ACL Binding Remove Page opens Figure 50 ACL Binding Remove Page The ACL Binding Remove Page contains the following fields Checkbox unnamed Marks the ACL for removal I...

Страница 98: ...xcessive amount of broadcast messages simultaneously transmitted across a network by a single port Forwarded message responses are heaped onto the network straining network resources or causing the ne...

Страница 99: ...To display the storm control settings 1 Click Device Broadcast Storm Summary The Broadcast Storm Summary Page opens Figure 51 Broadcast Storm Summary Page The Broadcast Storm Summary Page contains the...

Страница 100: ...de Defines the storm control mode to use on the selected interface Disabled Disables storm control on the selected port Broadcast Enables broadcast storm control on the selected port Broadcast Multica...

Страница 101: ...Using Broadcast Storm Control 101 3 Select the ports to which these settings will be applied 4 Click Broadcast Storm Control is configured and the device is updated...

Страница 102: ...102 CHAPTER 4 MANAGING DEVICE SECURITY...

Страница 103: ...NFORMATION This section contains information for configuring general system information and includes the following Viewing System Description Defining System Settings Saving the Device Configuration R...

Страница 104: ...ption Displays the device model number and name System Name Defines the user defined device name The field range is 0 160 characters System Location Defines the location where the system is currently...

Страница 105: ...lled software version number Boot Version Displays the current boot version running on the device Hardware Version Displays the current hardware version of the device Poll Now Enables polling the port...

Страница 106: ...STEM INFORMATION Defining System Settings The following section allows system administrators to configure advanced system settings The section includes the following topics Configuring the System Name...

Страница 107: ...em Name System Name The System Name Page opens Figure 54 System Name Page The System Name Page includes the following fields System Name Defines the user defined device name The field length is 0 255...

Страница 108: ...ime Setup The System Time Setup Page opens Figure 55 System Time Setup Page The System Time Setup Page contains the following fields Current Time Displays the time set for the system clock Time Zone N...

Страница 109: ...he range for this field is 16 16384 seconds and the default is 16 seconds Last Successful SNTP Connection Displays the last time the switch s clock was successfully updated by a time server Update Now...

Страница 110: ...users have no access to this page To save the device configuration 1 Click Save Configuration The Save Configuration Page opens Figure 56 Save Configuration Page The following message appears Saving...

Страница 111: ...e no access to this page To reset the device configuration 1 Click Administration Reset The Reset Page opens Figure 57 Reset Page The Reset Page contains the following fields Reboot Reboots the device...

Страница 112: ...112 CHAPTER 5 MANAGING SYSTEM INFORMATION...

Страница 113: ...6 CONFIGURING PORTS This section contains information for configuring Port Settings and includes the following sections Viewing Port Settings Defining Port Settings Viewing Port Details...

Страница 114: ...enabled or disabled Flow Control Displays the flow control status on the port Operates when the port is in full duplex mode The possible field values are Enabled Enables flow control on the port Disab...

Страница 115: ...interface supports transmission between the device and its link partner in both directions simultaneously Half The interface supports transmission between the device and the client in only one direct...

Страница 116: ...x mode it must either be enabled for both parameters Auto or set to a fixed mode 10 100 1000 Half Full The 1000BASE T standard does not support forced mode Auto negotiation should always be used to es...

Страница 117: ...operating at 10 Mbps 100 Indicates the port is currently operating at 100 Mbps 1000 Indicates the port is currently operating at 1000 Mbps Auto Use to automatically configure the port No Change Retain...

Страница 118: ...Port Detail Page contains the following fields Select a port Selects a port to display its current settings Port State Indicates the port state The possible field values are Enabled Enables the port D...

Страница 119: ...The port transmits and receives untagged frames only Hybrid The port may transmit tagged or untagged frames Trunk The port is an end point for a VLAN trunk A VLAN trunk is a direct link between two s...

Страница 120: ...120 CHAPTER 6 CONFIGURING PORTS...

Страница 121: ...ot be combined as members in a single trunk All ports in a trunk assume the configuration settings of the first member port that is the first port assigned or the lowest numbered port if more than one...

Страница 122: ...Link Aggregation Summary The Link Aggregation Summary Page opens Figure 61 Link Aggregation Summary Page The Link Aggregation Summary Page includes the following fields Group ID Displays the Link Aggr...

Страница 123: ...re 62 Link Aggregation Create Page The Link Aggregation Create Page includes the following fields Enter aggregation group ID Defines the group ID The field range is 1 4 Manual Selects the link aggrega...

Страница 124: ...ggregation Summary Group ID Displays the Link Aggregated Group ID The field range is 1 4 Member Ports Displays the ports assigned to the link aggregation Type Displays the type of link aggregation The...

Страница 125: ...nk Aggregation Modify Page includes the following fields Select Aggregation to Modify Selects the Link Aggregation Group ID to modify Select ports to add to aggregation or de select ports to remove fr...

Страница 126: ...ed Group ID The field range is 1 4 Member Ports Displays the ports configured to the link aggregation Type Displays the link aggregation type The possible field values are Manual or LACP 2 Define the...

Страница 127: ...udes the following fields Select Aggregation s to Remove Displays the Link Aggregation table Allows selecting LAG IDs to be removed Each row corresponds to a Link Aggregated Group ID The fields in the...

Страница 128: ...CP LAG To view LACP for LAGs 1 Click Port LACP Summary The LACP Summary Page opens Figure 65 LACP Summary Page The LACP Summary Page contains the following fields Port Displays the port number to whic...

Страница 129: ...fields LACP System Priority Specifies system priority value Ports must be configured with the same system priority to join the same LAG The default value is 32768 The field range is 0 65535 Select Po...

Страница 130: ...130 CHAPTER 7 AGGREGATING PORTS 3 Click The LACP Link Aggregation is modified and the application is updated...

Страница 131: ...ithin the VLAN a Layer 3 router is required to allow traffic flow between VLANs Layer 3 routers identify segments and coordinate with VLANs VLANs are Broadcast and Multicast domains Broadcast and Mult...

Страница 132: ...Page contains the following information Select a VLAN to display Selects a VLAN to be display its settings Membership type Displays the membership type for each VLAN The possible field values are Unta...

Страница 133: ...ge opens Figure 68 VLAN Port Detail Page The VLAN Port Detail Page contains the following information Select Port Selects the ports to be displayed Untagged member of VLAN s Indicates the port is an u...

Страница 134: ...e VLANs 1 Click Device VLAN Setup The VLAN Setup Page opens Figure 69 VLAN Setup Page The VLAN Setup Page contains the following fields Create VLANs ID s Defines the VLAN ID s to create Create Creates...

Страница 135: ...re 70 VLAN Rename Page The VLAN Rename Page contains the following fields ID Displays the VLAN ID Name Displays the user defined VLAN name Selected ID ID of entry selected from list of configured VLAN...

Страница 136: ...VLAN Page contains the following fields Select a VLAN to modify Selects a VLAN to modify its settings Select membership type Selects the membership type for each port on the VLAN The possible field v...

Страница 137: ...elect None Removes the ports selected To add ports to a VLAN 1 Select a VLAN to modify 2 Select the membership type for the selected ports 3 Select ports to be added to the selected VLAN 4 You may sel...

Страница 138: ...following fields Select a Port Selects a port to be modified Select membership type Displays the membership type for each port on the VLAN The possible field values are Untagged Indicates the interfac...

Страница 139: ...work administrator to remove VLANs Monitor users have no access to this page To delete VLANs 1 Click Device VLAN Remove The VLAN Remove Page opens Figure 73 VLAN Remove Page The VLAN Remove Page conta...

Страница 140: ...140 CHAPTER 8 CONFIGURING VLANS...

Страница 141: ...IGURING IP AND MAC ADDRESS INFORMATION This section contains information for defining IP interfaces and includes the following sections Defining IP Addressing Configuring ARP Settings Viewing Address...

Страница 142: ...s Figure 74 IP Setup Page The IP Setup Page contains the following fields Configuration Method Defines whether the IP address is configured statically or dynamically The possible field values are Manu...

Страница 143: ...verts IP addresses into physical addresses and maps the IP address to a MAC address ARP allows a host to communicate with other hosts when only the IP address of its neighbors is known This section in...

Страница 144: ...e ARP Settings Summary Page contains the following fields Interface Indicates the VLAN for which ARP parameters are defined IP Address Indicates the station IP address which is associated with the MAC...

Страница 145: ...station IP address which is associated with the MAC address Note that this address must be within the same IP subnet as that assigned to the switch see Defining IP Addressing on page 142 MAC Address D...

Страница 146: ...ARP Settings Remove Page The ARP Settings Remove Page contains the following fields Clear ARP Table Entries Specifies the types of ARP entries that are cleared The possible values are None Maintains t...

Страница 147: ...able entry type Possible field values are Dynamic Indicates the ARP entry is learned dynamically Static Indicates the ARP entry is a static entry 2 For each ARP entry to be removed check the box to th...

Страница 148: ...ive at the device Addresses are associated with ports by learning the ports from the frames source address Frames addressed to a destination MAC address that is not associated with any port are floode...

Страница 149: ...s Table Summary Page The Address Table Summary Page contains the following fields Port Indicates the port through which the address was learned MAC Address Displays the current MAC addresses listed in...

Страница 150: ...ry Page The Port Summary Page contains the following fields Select a port Displays the current port settings Port Indicates the port through which the address was learned MAC Address Displays MAC addr...

Страница 151: ...e an IGMP report specifying that Multicast group is accepting members This results in the creation of the Multicast filtering database If IGMP Query is enabled and this switch is elected as the querie...

Страница 152: ...ick Device IGMP Snooping Setup The IGMP Snooping and Query Setup Page opens Figure 80 IGMP Snooping and Query Setup Page The IGMP Snooping and Query Setup Page contains the following fields Global Set...

Страница 153: ...ery on the VLAN This is the default value Enabled Enables IGMP Query on the VLAN VLAN Summary VLAN Displays the VLAN ID Snooping Status Displays the IGMP snooping status for the VLAN The possible fiel...

Страница 154: ...154 CHAPTER 10 CONFIGURING IGMP SNOOPING 4 Click IGMP Snooping and IGMP Query is enabled or disabled on the VLAN and the device is updated...

Страница 155: ...se a single path and disable all others to ensure that only one route exists between any two stations on the network This prevents the creation of network loops However if the chosen path should fail...

Страница 156: ...re Enabled Indicates that STA is enabled on the port Disabled Indicates that STA is disabled on the port Path Cost Indicates the port contribution to the root path cost The path cost can be adjusted t...

Страница 157: ...the established link type The possible field values are Auto Automatically derived from the duplex mode setting Ports set to full duplex mode are considered Point to Point port links while ports set...

Страница 158: ...etup Page The Spanning Tree Setup Page contains the following fields State Defines whether STA is enabled or disabled on the device The possible field values are Disabled Disables STP and RSTP on the...

Страница 159: ...g Time Specifies the device Maximum Age Time The Maximum Age Time is the amount of time in seconds a bridge waits before sending configuration messages The default is 20 seconds Path Cost Method Speci...

Страница 160: ...re Enabled Indicates that STA is enabled on the port Disabled Indicates that STA is disabled on the port Edge Port Specifies if fast forwarding is enabled on the port If enabled the port is automatica...

Страница 161: ...the long path cost method and 1 65 535 for the short path cost method The system automatically detects the speed and duplex mode used on each port and configures the path cost according to the values...

Страница 162: ...ted in a loop The priority value is between 0 240 The priority value is determined in increments of 16 If the path cost for all ports on a switch are the same the port with the highest priority that i...

Страница 163: ...ariables which are used to manage the device The variables are defined in the Management Information Base MIB The SNMP agent defines the MIB specification format as well as the format used to access t...

Страница 164: ...et the operational status for SNMP 1 Click Administration SNMP Setup The SNMP Setup Page opens Figure 84 SNMP Setup Page The SNMP Setup Page contains the following fields SNMP Agent Status Specifies i...

Страница 165: ...are also changed SNMP communities are defined only for SNMP V1 and SNMP V2c Filters that determine whether traps are sent to specific users and the trap type sent can also be configured on the SNMP A...

Страница 166: ...re Read Only Management access is restricted to read only Authorized management stations are only able to retrieve MIB objects Read Write Management access is read write Authorized management stations...

Страница 167: ...Page contains the following fields Remove Community String Community String Displays the user defined text string which authenticates management stations to the device Access Level Displays the access...

Страница 168: ...fined text string which authenticates the management station to the device Version Displays the trap type The possible field values are v1 Indicates that SNMP Version 1 traps are sent v2c Indicates th...

Страница 169: ...be forwarded are based on packet information and packet field values such as VLAN Priority Tag VPT and DiffServ Code Point DSCP VPT Classification Information VLAN Priority Tags VPT are used to classi...

Страница 170: ...The possible field values are 0 7 Defining CoS The CoS Setup Page allows the network administrator to set the priority for incoming untagged frames The default priority applies for an untagged frame r...

Страница 171: ...is IP DSCP and then default port priority Monitor users have no access to this page To configure CoS Settings 1 Click Device QoS CoS Setup The CoS Setup Page opens Figure 88 CoS Setup Page The CoS Set...

Страница 172: ...e of time the switch services each queue before moving on to the next queue This prevents the head of line blocking that can occur with strict priority queuing Monitor users have no access to this pag...

Страница 173: ...ndations in the IEEE 802 1p standard To view CoS Values to Queues 1 Click Device QoS CoS to Queue Summary The CoS to Queue Summary Page opens Figure 90 CoS to Queue Summary Page The CoS to Queue Summa...

Страница 174: ...oS CoS to Queue Setup The CoS to Queue Setup Page opens Figure 91 CoS to Queue Setup Page The CoS to Queue Setup Page contains the following fields Restore Defaults Restores the device factory default...

Страница 175: ...E 802 1p standard and then subsequently mapped to the four traffic queues To view the DSCP to CoS mapping 1 Click Device QoS DSCP to CoS Summary The DSCP to CoS Summary Page opens Figure 92 DSCP to Co...

Страница 176: ...queues Monitor users have no access to this page To map DSCP to CoS values 1 Click Device QoS DSCP to CoS Setup The DSCP to CoS Setup Page opens Figure 93 DSCP to CoS Setup Page The DSCP to CoS Setup...

Страница 177: ...tagged For an untagged packet the default port priority is used for priority processing If the trust mode is set to CoS and the ingress packet type is IPv4 then priority processing will be based on th...

Страница 178: ...ge The Bandwidth Summary Page contains the following fields Interface Displays the interface for which rate limit and shaping parameters are defined Ingress Rate Limit Status Indicates the ingress rat...

Страница 179: ...the interface No Limit Egress traffic shaping is disabled for the interface This is the default CIR Indicates the Committed Information Rate CIR for the interface The field options include 128 1024 50...

Страница 180: ...h Setup The Bandwidth Setup Page opens Figure 96 Bandwidth Setup Page The Bandwidth Setup Page contains the following fields Ingress Rate Limit Enable Ingress Rate Limit Enables setting an Ingress Rat...

Страница 181: ...it Ethernet ports at a resolution of 64 kbits per seconds Committed Burst Size CBS Defines the CBS for the interface The field options include 64 128 512 1024 2048 and 4096 kbits Rate limiting is base...

Страница 182: ...t the quality of voice does not deteriorate if IP traffic is received unevenly The system supports one Voice VLAN There are two operational modes for IP Phones IP phones are configured with VLAN mode...

Страница 183: ...ummary Page opens Figure 97 Voice VLAN Summary Page The Voice VLAN Summary Page contains the following fields Port Displays a list of all switch ports Mode Specifies the Voice VLAN mode The possible f...

Страница 184: ...corresponding port Defining Voice VLAN The Voice VLAN Setup Page provides information for enabling and defining Voice VLAN globally on the device Monitor users have no access to this page To configure...

Страница 185: ...ice VLAN Aging Time Defines the amount of time after the last IP phone s OUI is aged out for a specific port The Voice VLAN aging time starts after the MAC Address is aged out from the Dynamic MAC Add...

Страница 186: ...ields Voice VLAN Port Mode Specifies the Voice VLAN mode The possible field values are Auto Indicates that if traffic with an IP Phone MAC Address is transmitted on the port the port joins the Voice V...

Страница 187: ...lect Port Enables selecting specific ports to which the Voice VLAN settings are applied The ports are color coded as follows Blue Indicates the port is selected and Voice VLAN settings are applied to...

Страница 188: ...rt Details Page The Voice VLAN Port Details Page contains the following fields Select Port Selects specific ports to display their Voice VLAN port definitions The ports are color coded as follows Blue...

Страница 189: ...The possible field values are None Indicates that the selected port will not be added to a Voice VLAN Manual Indicates that the selected port has been manually added to the Voice VLAN Auto Indicates...

Страница 190: ...e VLAN ports from the specific IP phone with a listed OUI is forwarded on the voice VLAN To view Voice VLAN OUI Settings 1 Click Device QoS VoIP Traffic Setting OUI Summary The Voice VLAN OUI Summary...

Страница 191: ...destination MAC prefix The packet gets higher priority when there is a match with the OUI list Using the OUI network managers can add a specific manufacturer s MAC addresses to the OUI table Once the...

Страница 192: ...in up to 32 characters Add Allows you to add a new OUI Remove Allows you to delete an existing OUI 2 Enter an OUI in the Telephony OUI field 3 Enter an OUI description in the Description field 4 Click...

Страница 193: ...mmands in the Startup file are copied to the Running Configuration File and applied to the device During the session all new commands entered are added to the commands already stored in the Running Co...

Страница 194: ...ection contains information for defining File maintenance and includes both configuration file management as well as device access This section contains the following topics Backing Up System Files Re...

Страница 195: ...kup Page contains the following fields Upload via TFTP Enables initiating an upload to a TFTP server Upload via HTTP Enables initiating an upload to an HTTP server or HTTPS server Configuration Upload...

Страница 196: ...tains the following fields Download via TFTP Enables initiating a download from a TFTP server Download via HTTP Enables initiating a download from an HTTP server or HTTPS server Configuration Download...

Страница 197: ...tore Image Page The Restore Image Page contains the following fields Download via TFTP Enables initiating a download via a TFTP server Download via HTTP Enables initiating a download via an HTTP serve...

Страница 198: ...198 CHAPTER 14 MANAGING SYSTEM FILES...

Страница 199: ...xt to power sources Power over Ethernet can be used with IP Phones Wireless Access Points IP Gateways PDAs Audio and video remote monitoring Powered Devices are devices which receive power from the de...

Страница 200: ...wing information Device Power Display State Indicates the in line power source status The possible field values are on Indicates that the power supply unit is functioning off Indicates that the power...

Страница 201: ...r mode The possible field values are Auto Power is automatically allocated to the port according to port number Lower numbered ports are assigned a higher priority for power delivery This is the defau...

Страница 202: ...t PoE state The possible values are Enabled Enables the port for PoE Disabled Disables the port for PoE PoE Mode for selected enabled ports Defines the PoE mode for the selected port The possible valu...

Страница 203: ...203 2 Define the fields 3 Click The settings are applied to the selected ports and the device is updated...

Страница 204: ...204 CHAPTER 15 MANAGING POWER OVER ETHERNET DEVICES...

Страница 205: ...ges to be filtered based on their urgency or relevancy Each message severity determines the set of event logging devices that are sent messages per each event The following table lists the log severit...

Страница 206: ...splay The Logging Display Page opens Figure 108 Logging Display Page The Logging Display Page contains the following fields and buttons Save Preview Saves the displayed Log table to a web HTML page Cl...

Страница 207: ...ing Specifies if device logging to local Cache and Flash memory is enabled Local logging is enabled by default Severity level Specifies the minimum severity level for which a message will be logged Wh...

Страница 208: ...Provides debugging messages Enable Syslogging Specifies if device logging to remote Syslogs servers is enabled Severity level Specifies the minimum severity level for which a message will be logged W...

Страница 209: ...17 VIEWING STATISTICS This section contains information for viewing port statistics and contains the following topics Viewing Port Statistics...

Страница 210: ...tics 1 Click Ports Statistics Summary The Port Statistics Summary Page opens Figure 110 Port Statistics Summary Page The Port Statistics Summary Page contains the following fields Select Port Selects...

Страница 211: ...free up buffer space Error Input For packet oriented interfaces the number of inbound packets that contained errors preventing them from being deliverable to a higher layer protocol For character orie...

Страница 212: ...rticular interface Deferred Transmissions A count of frames for which the first transmission attempt on a particular interface is delayed because the medium was busy Late Collisions The number of time...

Страница 213: ...were not addressed to a multicast or broadcast address at this sub layer Broadcast PKTS The number of packets delivered by this sub layer to a higher sub layer which were addressed to a broadcast addr...

Страница 214: ...ons on this Ethernet segment 64 Bytes Frames 65 127 Byte Frames 128 255 Byte Frames 256 511 Byte Frames 512 1023 Byte Frames 1024 1518 Byte Frames 1519 1536 Byte Frames The total number of frames incl...

Страница 215: ...E DIAGNOSTICS This section contains information for viewing and configuring port and cable diagnostics and includes the following topics Configuring Port Mirroring Configuring Cable Diagnostics Pingin...

Страница 216: ...affic by forwarding copies of incoming and outgoing packets from one or more ports to a monitoring port Port mirroring can be used as a diagnostic tool as well as a debugging feature Port mirroring al...

Страница 217: ...rt Mirroring Setup Page contains the following fields Select port type Defines the port that will be the monitor port destination port and the port that will be mirrored source port The possible value...

Страница 218: ...irror port The fields displayed are Monitor Displays the monitor port Mirror In Displays the ports monitored for ingress traffic Mirror Out Displays the ports monitored for egress traffic 2 Select a p...

Страница 219: ...k Monitoring Port Mirroring Remove The Port Mirroring Remove Page opens Figure 112 Port Mirroring Remove Page The Port Mirroring Remove Page contains the following fields Monitor Displays the monitor...

Страница 220: ...s The Cable Diagnostics Summary Page contains fields for viewing tests on copper cables Cable testing provides information about where errors occurred in the cable and the last time a cable test was p...

Страница 221: ...Last Update Indicates the last time the port was tested Defining Cable Diagnostics The Diagnostics Page contains fields for performing tests on copper cables Cable testing provides information about...

Страница 222: ...test Failed Indicates that the cable failed the test The test will fail if a cable is not connected to the port the cable is connected on only one side the cable is shorter than one meter or a short...

Страница 223: ...ing the command line interface to ping another device To send ping requests to another device 1 Click Monitoring Ping The Ping Page opens Figure 115 Ping Page The Ping Page contains the following fiel...

Страница 224: ...DIAGNOSTICS Destination unreachable The gateway for this destination indicates that the destination is unreachable Network or host unreachable The gateway found no corresponding entry in the route ta...

Страница 225: ...om Network Supervisor 3Com Network Supervisor 3NS is an easy to use management application that graphically discovers maps and monitors the network and links It maps devices and connections so you can...

Страница 226: ...Network Director can help you manage your 3Com network and to download a trial version go to www 3com com 3nd 3Com Network Access Manager 3Com Network Access Manager is installed seamlessly into Micr...

Страница 227: ...ly managed These include SNMP capable devices such as switches routers security switches the 3Com VCX IP Telephony server and wireless access points Up to 250 devices Up to 1 000 devices Up to 5 000 d...

Страница 228: ...228 APPENDIX A 3COM NETWORK MANAGEMENT...

Страница 229: ...ernet IEEE 802 3at Power over Ethernet Plus Safety UL 60950 1 EN 60950 1 CSA 22 2 No 60950 1 IEC 60950 1 EMC Emissions EN55022 Class B CISPR 22 Class B FCC Part 15 Subpart B Class B ICES 003 Class B V...

Страница 230: ...wing Advertise their abilities Acknowledge receipt and understanding of the common modes of operation that both devices share Reject the use of operational modes that are not shared by both devices Co...

Страница 231: ...agging Compliance IEEE 802 1Q defines an architecture for virtual bridged LANs the services provided in VLANs and the protocols and algorithms involved in the provision of these services An important...

Страница 232: ...rver using the Extensible Authentication Protocol EAP Port based Virtual LANs Port based VLANs classify incoming packets to VLANs based on their ingress port Port Mirroring Port mirroring monitors and...

Страница 233: ...trol Protocol TCP TCP connections are defined between 2 ports by an initial synchronization exchange TCP ports are identified by an IP address and a 16 bit port number Octets streams are divided into...

Страница 234: ...234 APPENDIX B DEVICE SPECIFICATIONS AND FEATURES...

Страница 235: ...PC Terminal Cable connector 25 pin male female only required if screen always required required for handshake Screen DTR TxD RxD CTS Ground DSR RTS DCD Screen DCD RxD TxD DTR Ground DSR RTS CTS Shell...

Страница 236: ...7 8 6 5 1 4 1 2 3 4 5 6 7 8 20 Switch 5500 Cable connector RJ 45 female RS 232 Modem Port Cable connector 25 pin male Pin Number 10 100 1000 Ports configured as MDI 1 Transmit Data Bidirectional Data...

Страница 237: ...red as MDIX 1 Receive Data Bidirectional Data B 2 Receive Data Bidirectional Data B 3 Transmit Data Bidirectional Data A 4 Not assigned Bidirectional Data A 5 Not assigned Bidirectional Data D 6 Trans...

Страница 238: ...238 APPENDIX C PIN OUTS...

Страница 239: ...s detected the exact nature of the problem must be determined This includes how the problem is detected and what are the possible causes of the problem With the problem known the effect of the problem...

Страница 240: ...rial cable Software settings Replace the serial cable Replace serial cable for a pin to pin straight flat cable Reconfigure the emulation software connection settings Response from the terminal emulat...

Страница 241: ...tored configuration information including IP address and address configuration mode user names and passwords It then resets the switch to factory default settings and restarts the system Resetting the...

Страница 242: ...pgrade Initiates a firmware download via TFTP Follow the system prompts to specify the TFTP server where your firmware can be found and then enter the source name of the firmware After the file is dow...

Страница 243: ...iority bit Differentiated Services Code Point Service DSCP DSCP uses a six bit tag to provide for up to 64 different forwarding behaviors Based on network policies different kinds of traffic can be ma...

Страница 244: ...to transmit packets based on the tagged priority value IEEE 802 1X Port Authentication controls access to the switch ports by requiring users to first enter a user ID and password for authentication I...

Страница 245: ...trol Message Protocol ICMP A network layer protocol that reports errors in processing IP packets ICMP is also used by routers to feed back information about better routing choices Internet Group Manag...

Страница 246: ...essage and converts it into a fixed string of digits also called a message digest Multicast Switching A process whereby the switch filters incoming multicast frames for services for which no attached...

Страница 247: ...with a cryptographic key and encrypt data connections between management clients and the switch Simple Network Management Protocol SNMP The application protocol in the Internet suite of protocols whic...

Страница 248: ...rdless of their physical location or connection point in the network A VLAN serves as a logical workgroup with no physical barriers and allows users to share information and resources as though locate...

Страница 249: ...gh product registration Register your product at http eSupport 3com com 3Com eSupport services are based on accounts that you create or have authorization to access First time users must apply for a u...

Страница 250: ...tware Downloads Software Updates are the bug fix maintenance releases for the version of software initially purchased with the product In order to access these Software Updates you must first register...

Страница 251: ...ublication Find a current directory of 3Com resources by region at http csoweb4 3com com contactus Country Telephone Number Country Telephone Number Asia Pacific Rim Telephone Technical Support and Re...

Страница 252: ...0800 182 1502 06800 12813 1 800 553 117 180 945 3794 800 879489 800 23625 0800 0227788 Norway Poland Portugal Russia Saudi Arabia South Africa Spain Sweden Switzerland U A E U K 800 11376 00800 4411 3...

Страница 253: ...988 2112 AT T 800 988 2112 Guatemala Guyana Haiti Honduras Jamaica Martinique Mexico Mexico Local Monserrat Nicaragua Panama Paraguay Peru Puerto Rico Rest of Latin America St Kitts Nevis St Lucia Su...

Страница 254: ...G SUPPORT FOR YOUR 3COM PRODUCTS Country Telephone Number Country Telephone Number US and Canada Telephone Technical Support and Repair All locations Network Jacks Wired 1 847 262 0070 All other 3Com...

Страница 255: ...enced radio television technician for additional suggestions The user may find the following booklet prepared by the Federal Communications Commission helpful How to Identify and Resolve Radio TV Inte...

Страница 256: ......

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды