manualshive.com logo in svg

Avaya Cajun P580, Руководство пользователя, Страница: 126 / 770

Поделиться
Скачать
Avaya Cajun P580 Скачать руководство пользователя страница 126

4-18

User Guide for the Avaya P580 and P882 Multiservice Switches, v6.0

Chapter 4

RADIUS Client Support

Overview

Purpose of 
RADIUS

In a network with many Avaya switches, tracking all of the user accounts on 
each of the switches can be difficult. You can centralize the user accounts by 
using a Remote Authentication Dial-In User Service (RADIUS) server.

RADIUS is a service that authenticates users when they attempt to log in to 
a Network Access Device (NAD) such as an Avaya switch. RADIUS 
typically runs on a Windows or Linux server; however, it can run on other 
platforms as well depending on the vendor. 

RADIUS is a client/server architecture where each device that uses the 
RADIUS server is a RADIUS client. The client sends Access Request 
messages to the RADIUS server. These messages include the user’s login 
name, the password encrypted, and optional parameters depending on 
configuration. 

* Important:  The RADIUS Client and Server 

must be configured 

with the exact same parameters.

Once the RADIUS server receives the access request message, it searches 
its database for the user account. If it finds an account, the password is 
correct, and the optional parameters match, an Access Accepted message is 
returned to the RADIUS client indicating that the user account exists, the 
password was correct, and the user has a certain access type (for example: 
Administrative or Read-Only). If not found, the password is incorrect, or the 
optional parameters do not match, then an Access Rejected message is sent.

* Note:  Due to an interoperability issue, the P580 and P882 RADIUS 

client does accept Access Accept messages from Windows 
2000 RADIUS servers. To resolve this issue, obtain Windows 
2000 service pack 3 or later. After installing the latest service 
pack, set the Generate-Class-Attribute field to FALSE.

This interoperability issue occurs because Microsoft RADIUS 
server includes a Class attribute in Access Accept messages 
that the P580 and P882 RADIUS client does not support. With 
service pack 3, you can disable generation of a class attribute. 
For more information on this issue, see 

http://support.microsoft.com/default.aspx?scid=kb;EN-
US;Q297317

.

Содержание Cajun P580

Страница 1: ...User Guide for the Avaya P580 and P882 Multiservice Switches Software Version 6 0 Doc No 650 100 700 Issue 1 September 2003...

Страница 2: ...the right in its sole discretion and without notice to make substitutions and modifications in the products and practices described in this document P550R is a registered trademark of Avaya Inc Micros...

Страница 3: ...ter 1 Introduction 1 1 Overview 1 1 Switch Descriptions 1 1 Hardware Components 1 2 Overview 1 2 Avaya P580 Multiservice Switch Chassis 1 3 Avaya P882 Multiservice Switch Chassis 1 5 The Power System...

Страница 4: ...nt 2 18 Modifying a User Account 2 20 Changing Your Password 2 22 Disabling a User Account 2 23 Deleting a User Account 2 24 Changing the Console Serial Port Settings 2 24 Configuring the Serial Conso...

Страница 5: ...g the Public SSH Key 4 6 Configuring SSH Server 4 7 Displaying SSH Connections 4 8 Using the SSH Client 4 8 HTTPS Using SSLv3 or TLSv1 4 9 Overview 4 9 Supported Cipher Suites 4 10 Viewing Cipher Suit...

Страница 6: ...r 5 15 Creating or Modifying a User 5 15 Adding a User to a Group 5 16 Removing a User from a Group 5 16 Viewing Configured Users 5 16 Deleting a User 5 17 Changing a User Password 5 17 Configuring SN...

Страница 7: ...tion 7 10 Configuring Spanning Tree Bridges 7 11 Viewing Bridge Port Information 7 14 Configuring a Bridge Port 7 17 Configuring Spanning Tree Settings for Switch Ports 7 21 Chapter 8 Configuring Port...

Страница 8: ...s of Configuring VLANs and Hash Table Size 9 6 AFT Default Settings 9 7 Address Forwarding Table Auto Sizing Auto Increment and Threshold 9 7 Total Entries Address Memory Age and Super Age Timers 9 9...

Страница 9: ...ng Short Lived IP Protocol Filters 12 19 Creating IP Static Routes 12 19 Creating a Static Route to a Null Interface 12 21 Overview 12 21 Procedure 12 23 Creating IP Static ARP Entries 12 24 Creating...

Страница 10: ...RP Virtual Router 12 77 Displaying VRRP Statistics 12 81 VRRP Configuration Considerations 12 83 Configuring IRDP 12 86 Enabling IRDP on an Interface 12 86 Configuring LDAP 12 89 Configuring LDAP Sett...

Страница 11: ...15 7 Enabling OSPF on an IP Interface 15 8 Modifying OSPF Interfaces 15 8 OSPF Passive Interface 15 11 Creating OSPF Virtual Links 15 12 Deleting OSPF Virtual Links 15 14 Modifying OSPF Virtual Links...

Страница 12: ...RIP Interfaces 17 1 Creating and Modifying IPX RIP Filters 17 3 Viewing RIP Interface Statistics 17 8 Chapter 18 Configuring the IPX SAP Protocol 18 1 Overview 18 1 Configuring IPX SAP Interfaces 18...

Страница 13: ...nt Multicasting 20 5 Displaying Router Ports 20 8 Configuring Static Router Ports 20 9 Searching for Intelligent Multicast Sessions 20 10 Deleting an Intelligent Multicast Session 20 13 Deleting a Mul...

Страница 14: ...e Utilization 21 20 Chapter 22 Monitoring and Configuring the Forwarding Cache 22 1 Overview 22 1 Configuring the Forwarding Cache 22 2 Monitoring the Forwarding Cache Statistics 22 4 Displaying Frame...

Страница 15: ...a Priority to a DSCP 25 20 Displaying the DiffServ Table 25 21 Displaying the QoS Settings for a Physical Port 25 21 Setting Up an ACL Rule 25 22 Setting Up a Default ACL Rule 25 29 Displaying ACL Ru...

Страница 16: ...Ns Statically Bound to Hunt Group Ports A 10 Appendix B Boot Mode B 1 Accessing BOOT Mode B 1 Accessing BOOT Mode During Power Up B 1 Accessing BOOT Mode with Corrupted Operational Images B 1 Password...

Страница 17: ...ded in to the following chapters Chapter 1 Introduction Provides an overview of hardware and software used on the P580 and P882 Chapter 2 Setting Up the Switch Explains how to initially configure the...

Страница 18: ...tion and procedures for creating access rules enabling an access list logging ACL activity and optimizing switch performance when an access list is enabled Chapter 14 Configuring RIP Routing Explains...

Страница 19: ...agement features to optimize traffic throughput through the switch fabric Chapter 25 80 Series QoS Provides information about Quality of Service QoS and explains how to configure QoS on the switch App...

Страница 20: ...op the installation System Output Text displayed by the system If you attempt to find the physical location of port 30 the system displays Unit 2 Port 2 Save the running configuration to the startup c...

Страница 21: ...The procedures in this guide provide detailed steps for the Web Agent A series of CLI commands are also available that accomplish the same actions These commands are listed after the Web Agent proced...

Страница 22: ...ferences Advanced Proxies and verify that the Direct Connection to the Internet button is selected When launching the online help wait until the help window has completely loaded before resizing the w...

Страница 23: ...arting the HTTP Web Server To run the HTTP help server 1 Open your system s Wind32 NT Start Menu 2 Select the DocsCD program group 3 Select the document server from that program group The Avaya docume...

Страница 24: ...o a Windows95 or NT host on your network 2 Transfer the entire help subdirectory located in C DocsCD to the root directory of your Web server 3 Launch your web browser and connect to your switch 4 Ent...

Страница 25: ...e Switches Software Version 5 3 describes how to install and set up the family of Avaya Multiservice switches Command Reference Guide for the Avaya P580 and P882 Multiservice Switches Software Version...

Страница 26: ...xxvi User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Preface...

Страница 27: ...kbone applications These switches are the centerpiece for Avaya data voice and multimedia LANs The P580 switching capacity ranges from 46Gbps in Fabric mode 1 to 55Gbps in Fabric mode 2 The P882 switc...

Страница 28: ...es 2 platform is an evolution of the 50 series also called series 1 architecture It offers a 20 increase in switching fabric performance or 2 11 Gigabits per second per fabric port This allows greater...

Страница 29: ...ies modules provides support for Up to 120 10 100BASE TX ports RJ 45 connector autosensing Up to 288 10 100BASE TX ports Telco connector autosensing Up to 60 100BASE FX ports Up to 24 gigabit speed Et...

Страница 30: ...slot one for the supervisor module 1 76 Gbps in and out on each fabric port in 50 series mode and 2 11 Gbps in and out on each fabric port in Fabric mode 2 45 76 Gbps backplane capacity in Fabric mode...

Страница 31: ...s the redundant supervisor must be installed in slot 2 Ports With 50 Series modules the P882 Chassis supports Up to 300 10 100BASE TX ports RJ 45 connector autosensing Up to 720 10 100BASE TX ports Te...

Страница 32: ...backplane capacity in Fabric mode 2 Under subscribed switching fabric in most configurations Single copy replication Input frames destined for multiple output switch ports pass through the crossbar on...

Страница 33: ...r Allocation The switch uses dynamic power allocation when the amount of available power changes For example one power supply is turned on and you add another power supply or two power supplies are tu...

Страница 34: ...itch management The supervisor module is part of the path that some packets take through the system Figure 1 2 illustrates a conceptual diagram of the supervisor module s functions Figure 1 2 Layer 3...

Страница 35: ...orted 64 v5 00 01 6 0 or later Does not boot Unsupported 64 v6 00 00 Earlier than 6 0 Boots Unsupported 64 v6 00 00 6 0 or later Boots but displays the following error message WARNING The current vers...

Страница 36: ...million packets per second of minimum sized Ethernet frames Note All layer 3 modules interoperate with layer 2 modules The ATM Uplink module provides LAN Emulation LANE connectivity over an ATM netwo...

Страница 37: ...with RJ 21 Telco connectors layer 2 support 10 100 HDX FDX 100M M5510R 100FX 10 Port 100BASE FX module with SC connectors layer 2 and layer 3 support 1300 nM HDX FDX multimode fiber 2 Km M5512R 100TX...

Страница 38: ...er M5502R 1000LX F 2 Port Full Duplex 1000BASE LX module layer 2 and layer 3 support 1310 nM optics 5Km singlemode fiber M5502R 1000SLX F 2 port 1000BASE SLX module layer 2 and layer 3 support 1310nM...

Страница 39: ...es up to 10km 1000BASE ELX 1550 nM for singlemode fiber for distances up to 80km Note If you use the 1000BASE SX GBIC with single mode fiber you must use mode conditioning patch cords with a maximum d...

Страница 40: ...NE V2 Client with LANE 1 compatibility supports 128 interfaces M8004R 1000T 4 Port 1000BASE T module with RJ 45 connectors layer 2 and layer 3 support 100M M8008R 1000T 8 Port 1000BASE T module with R...

Страница 41: ...etwork Interface non transit Link Failover Spanning Tree Load sharing Note All ATM protocols are ATM Forum standard See Avaya P550R P580 P880 P882 Multiservice Switch ATM Uplink Module User Guide for...

Страница 42: ...es For information on HTTPS see Chapter 4 Security RADIUS Client Support RADIUS is a service that authenticates users when they attempt to log in to a Network Access Device NAD such as an Avaya switch...

Страница 43: ...ipes to transport traffic through the highest traffic areas of your network You can create hunt groups that interoperate with other vendors equipment for example Cisco s Etherchannel and Sun s Quad Ad...

Страница 44: ...to provide fast fail over for hosts if the default gateway fails For information on VRRP see Chapter 12 Configuring IP Routing N 1 power Power supplies share the power supply load If one fails the re...

Страница 45: ...forward the packet with a specific priority 0 7 forward the traffic with an unchanged priority or filter packets drop For information on access lists see Chapter 13 Configuring Access Lists IP Multic...

Страница 46: ...For more information on 50 series buffers and queues see Chapter 24 Managing Buffers and Queues on 50 Series Modules 80 Series QoS Quality of Service QoS is a set of tools that make it possible for y...

Страница 47: ...aces Ports become members of VLANs by being assigned or by rules Multiple VLANs can share a single trunk port In contrast multiple physical ports can be associated with a single VLAN In all cases traf...

Страница 48: ...dule and forwarding tables address caches of media modules based on those frames This process creates three distinct results All known learned layer 3 traffic that requires routing is routed directly...

Страница 49: ...on referred to as the FORE path or Fast Out of Bands Routing Engine since the routing is accomplished in the hardware of either supervisor module Figure 1 3 shows how traffic is routed in a switch Fig...

Страница 50: ...1 24 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 1...

Страница 51: ...net Managing Configuration Files Note The last step in each procedure tells you to Click APPLY to save the setup or changes that you made This step saves the setup or any changes to the running config...

Страница 52: ...r active or standby to another chassis you must initialize NVRAM on the module nvram initialize CLI command If you do not initialize NVRAM before moving a supervisor module to another chassis and assi...

Страница 53: ...line interface prompt displays You must now change the command mode to the Global Configuration mode so that you can use the setup command 6 Perform the following steps to change the command mode to...

Страница 54: ...e brief series of questions that follows will help you to configure this switch After completing this process you will be able to manage the switch using the switch based HTTP server the Element Manag...

Страница 55: ...Table 2 2 for an explanation of the pinouts for the 10Base t crossover patch cable Using Telnet to Manage the Switch You can manage the Avaya Multiservice switch several ways In addition to managing...

Страница 56: ...3 to 9998 on switch 192 168 0 126 enter telnet 192 168 0 126 9998 to start a Telnet session For information on how to change the TCP port for Telnet requests see Changing the TCP Ports for HTTP and Te...

Страница 57: ...ph Viewing Active Telnet Sessions To view active Telnet sessions on the switch enter the show sessions command as shown in the example below A list of active telnet sessions is displayed Welcome to th...

Страница 58: ...an HTTPS connection to manage the switch see HTTPS Using SSLv3 or TLSv1 in Chapter 4 Security Although this manual provides detailed procedures for using the Web Agent to configure the switch the CLI...

Страница 59: ...ge the TCP port from 80 to 9999 on switch 192 168 0 126 enter http 192 168 0 126 9999 to open the Web Agent For information about how to change the TCP port for HTTP requests see Changing the TCP Port...

Страница 60: ...e To optimize security change the root password for the system as soon as possible Figure 2 3 General Information Web Page Logging Out of the Web Agent To exit the Web Agent securely you must log out...

Страница 61: ...2 Click Logout The Logout Web page is displayed in the content pane See Figure 2 4 Figure 2 4 Logout Web Page 3 Click YES to log out 4 Close all other open Web browser windows Configuring Custom Acces...

Страница 62: ...to his or her user account The switch supports a maximum of 30 custom access types This section contains procedures for the following tasks Creating a Custom Access Type Modifying a Custom Access Type...

Страница 63: ...ible Features list select the permission that you want to assign the custom access type Read Write allows users to view and modify settings for the feature Read Only allows users only to view settings...

Страница 64: ...tent pane See Figure 2 5 2 In the Type Name field select the custom access type that you want to modify 3 Click Modify The Modify Custom Access Type Web page is displayed in the content pane See Figur...

Страница 65: ...a custom access type you must specify read only read write or no permission when you use the set custom access type command to modify a custom access type Deleting a Custom Access Type Web Agent Proc...

Страница 66: ...command configure no custom access type cat name Configuring User Accounts This section contains procedures for the following tasks Configuring User Account Security Creating a User Account Modifying...

Страница 67: ...is field are 3 to 99 login attempts 4 In the Timeout Limit secs field enter the number of seconds that you want a user account disabled when the limit for login attempts is exceeded Once the timeout l...

Страница 68: ...BOOT APP1 and APP2 images to the switch Update the software on a module Access the Load MIB Note To log in to the ATM Uplink module a user must Have read write access to the Modules and Ports Managem...

Страница 69: ...Do not use a combination of the following special characters for the password or 6 In the Re enter Password field reenter the password that you entered in the Password field 7 In the Expiration Period...

Страница 70: ...erfaces from which the user can manage the switch The options are Local CLI User can manage the switch from the serial console on the supervisor module Remote CLI User can manage the switch by means o...

Страница 71: ...or the password or b In the Re enter New Password field reenter the password that you entered in the New Password field 6 To change the number of weeks for which the user account is valid change the s...

Страница 72: ...all local cli remote cli web To modify the expiration period or expiration warning for a user account configure username name exp period exp period exp warning exp warning To modify the status of a us...

Страница 73: ...lowing CLI command password passwd Disabling a User Account For security reasons you may want to disable certain user accounts such as the manuf and diag accounts Web Agent Procedure To disable a user...

Страница 74: ...displayed in the content pane See Figure 2 13 Figure 2 13 Delete User Account Web Page 5 Click YES to delete the user account CLI Command To delete a user account use the following CLI command configu...

Страница 75: ...configure the serial port as a TTY console using either the Web Agent or the CLI Web Agent Procedure To configure the console serial port as a TTY Console using the Web Agent 1 Select Console Configur...

Страница 76: ...r changes or CANCEL to clear your selection CLI Command To configure the console serial port as a TTY Console use the following CLI command configure set console type tty ppp Table 2 4 Console Port Co...

Страница 77: ...a modem to your switch with the specified serial cable and connectors and configure the serial port in PPP mode the switch will convert the normal Distributed Computing Environment DCE interface to a...

Страница 78: ...yed as the Console Type Figure 2 17 Note If you select PPP the PPP Console Port Configuration Web page opens Figure 2 17 PPP Console Configuration Web Page 3 Select a baud rate from the Baud Rate fiel...

Страница 79: ...ion 6 Click APPLY to save your changes or CANCEL to clear your selection Note If you click Apply the changes are saved in the Running config only The Startup config has not changed Therefore these and...

Страница 80: ...word prompt The switch CLI prompt displays Enter the PPP configuration commands necessary to start PPP See Command Reference Guide for the Avaya P580 and P882 Multiservice Switches Software Version 6...

Страница 81: ...ow The Modem Properties window re opens 12 Select the Options tab The Options window opens 13 Select Bring up terminal window after dialing from the Connection Control field Select OK The Modem Proper...

Страница 82: ...PC 3 Double click the PPP modem you previously created The Connect To window opens 4 Enter your password and select Connect A Pre Dial Terminal Screen opens When the modem has successfully connected a...

Страница 83: ...ols the change takes effect immediately and all connections through the previous port number are disconnected Any changes that you make to these TCP port numbers are retained if you reset the switch o...

Страница 84: ...SH enter the port number that you want to use Valid port numbers are 22 or a port number from 9000 through 65535 The default port for SSH is port 22 5 To change the TCP port for HTTP requests in the P...

Страница 85: ...name to start a Telnet session For example if you change the TCP port from 23 to 9998 on switch 192 168 0 126 enter telnet 192 168 0 126 9998 to start a Telnet session Opening the Web Agent After cha...

Страница 86: ...ng configuration The switch does not support this activity If you need to reapply the startup configuration restart the switch Note If you initialize NVRAM nvram initialize command all switch settings...

Страница 87: ...file data from the Script Execution Log File using either the Web Agent or the CLI Web Agent Procedure To view your Script Execution Log File from the Web Agent select Script Log File from the Config...

Страница 88: ...nsion Important Do not copy the startup configuration to the running configuration The switch does not support this activity If you need to reapply the startup configuration restart the switch Web Age...

Страница 89: ...ext files and BOOT APP1 and APP2 images You can copy files to and from multiple locations For example if you modify the running configuration and you want to reinstate your startup configuration param...

Страница 90: ...ifies the path and name of the source file Source files can be ASCII files in NVRAM available for upload or files located on a TFTP server available for download Copy Destination Specifies the locatio...

Страница 91: ...our startup or running configuration another file located on the switch or a file located on a TFTP server to a file on the switch TFTP Server Copies your startup or running configuration or another f...

Страница 92: ...t files copied correctly Web Agent Procedure To view the status of a TFTP transfer using the Web Agent 1 Select File Management from the System Configuration Configuration Files group in the navigatio...

Страница 93: ...eset Note The last step in each procedure tells you to click Apply to save the setup or changes that you made This step saves the setup or any changes to the running configuration only The startup con...

Страница 94: ...location Device contact To enter general system information from the Web Agent 1 Select General Information from the System group on the Web Agent window The General Information dialog box opens Figur...

Страница 95: ...of Summer Time Hours for your location For information about setting one time summer hours see Setting One Time Summer Time Hours later in this chapter For information about setting Summer Time Hours...

Страница 96: ...of moving clocks ahead to provide greater amounts of daylight in the afternoon and to standardize time with other parts of the world In many parts of the world the Summer Time Hours algorithm is base...

Страница 97: ...mmer Time Hours Algorithm before you set the clock Setting Recurring Summer Time Hours You can set recurring summer time hours using either the Web Agent or the CLI Web Agent Procedure To set recurrin...

Страница 98: ...mple if you intend to reset the clock forward or backward by one hour keep the default value of 60 minutes 5 Set the Summer Time Hours that recur annually a Select the check box in the Recurring field...

Страница 99: ...and month that you want the Summer Time Hours begin and end Start Specifies the start of Summer Time Hours End Specifies the end of Summer Time Hours Week Select the week during which you want recurri...

Страница 100: ...hen recurring Summer Time Hours start or end The twelve months of the Gregorian calendar are provided For recurring Summer Time Hours the default Start value is April the month during which DST starts...

Страница 101: ...o reset the clock forward or backward by one hour keep the default value of 60 minutes 5 Select the check box next to the One Time field to set the date and time for Summer Time Hours on a one time ba...

Страница 102: ...ch Note You must set SNTP and Summer Time Hours before you can set the system clock See Enabling the Simple Network Time Protocol and Setting Summer Time Hours earlier in this chapter Note The system...

Страница 103: ...you set are reached Shutdown Temperature The switch shuts down if this temperature is reached Upper Warning Temperature The switch generates an alarm if this temperature is reached If the Shutdown Tem...

Страница 104: ...lot 2 Sensor column displays Note You cannot change settings for the backplane temperature sensors on the P882 If you attempt to change the settings the switch displays the following error message Set...

Страница 105: ...ature supervisor slot backplane sensor cpu sensor probe warning upper lower low limit temperature Displaying the Power System Statistics You can display the statistics for your switch s power system f...

Страница 106: ...stem Statistics You can display the statistics for your switch s cooling system from either the Web Agent or CLI Web Agent Procedure To display your switch s cooling system statistics using the Web Ag...

Страница 107: ...the Status column to ensure that all the individual components are operational 3 If a component s status is non operational power down the switch and contact a service representative to diagnose the...

Страница 108: ...ith the Supervisor Module for details 1 Select System Reset from the System group on the Web Agent window The System Reset Page dialog box opens Figure 3 11 Figure 3 11 System Reset Page Window 2 Sele...

Страница 109: ...nformation about the CLI commands that are mentioned in this chapter see Command Reference Guide for the Avaya P580 and P882 Multiservice Switches Software Version 6 0 Secure Mode Overview Important A...

Страница 110: ...lly reenabled if SNMP v3 is enabled SNMPv3 remains in its current state enabled or disabled SNMPv3 remains in its current state enabled or disabled HTTP and Telnet are automatically disabled HTTP and...

Страница 111: ...public key can be displayed and is used by remote clients to connect to the server When a client tries to connect to the server the server provides the public key to the client Depending on the config...

Страница 112: ...SSH Server Displaying SSH Connections Using the SSH Client Enabling SSH on a TCP Port Before you can enable SSH you must disable the Telnet port You can however change the SSH port without disabling...

Страница 113: ...avigation pane expand the System Administration folders 2 Click TCP Ports The TCP Ports Web page is displayed in the content pane See Figure 4 1 3 In the State field for SSH select Disable 4 Click App...

Страница 114: ...DSA 4 In the Key Length field select 768 1024 or 2048 bytes The default is 1024 bytes 5 Click Generate New Key 6 Click Apply CLI Command To generate SSH key pairs and save them on the local server us...

Страница 115: ...server Enabled or disabled TCP Port The TCP port on which SSH runs Port 22 is the default port To configure SSH 1 In the navigation pane expand the System Administration Security SSH folders 2 Click...

Страница 116: ...This functionality is available only in the CLI You cannot use the Web Agent to display all current SSH sessions Sample Output Sample output of the show ssh sessions command is as follows SessionId Us...

Страница 117: ...lished by Netscape Communications Corporation The Internet Engineering Task Force IETF defines TLS in RFC 2246 as the successor of SSL v3 SSL and TLS use certificates and public and private keys to se...

Страница 118: ...iguration Creating a Self Signed SSL Server Certificate Viewing the Server Certificate Enabling SSL HTTPS Restarting SSL HTTPS Reverting to a Backup Certificate Supported Cipher Suites The P580 and P8...

Страница 119: ...tes CLI Command To view the available cipher suites use the following CLI command show ssl ciphers Viewing the SSL Configuration Web Agent Procedure To view the SSL configuration 1 In the navigation p...

Страница 120: ...e certificate to take effect For information on how to restart SSL see Restarting SSL HTTPS later in this chapter To create your X 500 distinguished name which is unique across the internet you need t...

Страница 121: ...t Country Code Enter your country code State or Province full name Enter your state or province City Enter the name of your city Organization or Company Name Enter your organization or company name Di...

Страница 122: ...is chapter CLI Command To create a self signed certificate use the following commands To create a CSR configure ssl certreq 512 1024 To self sign the CSR configure ssl selfcert Viewing the Server Cert...

Страница 123: ...Document No 650 100 700 Issue 1 4 15 Security Figure 4 6 SSL Server Certificate Web Page CLI Command To view the SSL certificate use the following CLI command show ssl cert...

Страница 124: ...65 535 The default port for SSL HTTPS is 443 5 In the State field for SSL HTTPS select Enable SSL HTTPS is disabled by default 6 Click Apply SSL HTTPS is enabled on the specified port CLI Command To e...

Страница 125: ...verting to a Backup Certificate Overview You can revert back to a backup version of the SSL server certificate If you revert to a backup certificate the current certificate is renamed and made the bac...

Страница 126: ...e parameters Once the RADIUS server receives the access request message it searches its database for the user account If it finds an account the password is correct and the optional parameters match a...

Страница 127: ...all of the user accounts that can log into Avaya switches in a campus environment In this campus there are two teams of network administrators one team for the North campus and one for the South campu...

Страница 128: ...et the Group name is sent along with the Access Request message to the RADIUS server The RADIUS server will send an Access Accept message if the user name password and Group name match that of the use...

Страница 129: ...ogin is found and correct then the RADIUS server responds with an Access Accept message that includes the user s privileges Provided the user account has the right Management Type for example Web Agen...

Страница 130: ...granted Read Only permission using the CLI either Telnet or serial cable to the supervisor s console port define the Avaya Vendor Specific Attributes ATTRIBUTE Avaya Service Type ATTRIBUTE Avaya Mgt T...

Страница 131: ...Type Avaya Remote CLI Sample Client File The following is a sample Client file Client files hold the IP address es of the NADs and their associated Shared Secrets Client files may vary from vendor to...

Страница 132: ...4 24 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 4 Figure 4 7 RADIUS Web Page 2 Select Enable from the Enable State field pull down menu...

Страница 133: ...racters case sensitive This value is itself encrypted and will not be displayed anywhere Web Agent or CLI once set It can be changed by simply entering in a new shared secret Source IP Address Enter a...

Страница 134: ...1645 only Switch Service Type Required If enabled the switch will only honor Access Accept messages that have the correct Group name included This setting prevents the switch from incorrectly allowing...

Страница 135: ...the HMAC SHA or HMAC MD5 authentication protocol Timeliness checks of the PDU to ensure that it has not been delayed or replayed Ability to define which MIB objects and table rows that specific users...

Страница 136: ...between Version 1 Version 2 and Version 3 of the Internet Standard Network Management Framework RFC 3411 STD 62 An Architecture for Describing SNMP Management Frameworks RFC3412 STD 62 Message Proces...

Страница 137: ...The NMS stores the non localized key and generates the localized key only before sending a PDU to the switch Each time you create a new SNMP user the switch generates and stores the localized key for...

Страница 138: ...rts it in all PDUs that it sends to the switch The switch discards any PDUs that contain The incorrect number of switch reboots A 150 second or greater discrepancy in the number of seconds since the l...

Страница 139: ...DMIB and usmStats Table of snmpUsmMIB internet Includes all MIB objects including the USM and VACM MIBs The view is created for administrative SNMPv3 users and is assigned to the predefined internet g...

Страница 140: ...not assign the internet group to a community string The group requires both authentication and encryption which community strings do not support noAccess Provides only notify access to the internet v...

Страница 141: ...administrator only normalRO Provides read only access to the normal view public normalRW Provides read write access to the normal view admin Includes the MIB objects that the admin security level inc...

Страница 142: ...rts the SNMPv1 responses to SNMPv3 responses and forwards them to the originator of the initial request To identify a PDU as destined for the ATM Uplink module the NMS inserts the engine ID and contex...

Страница 143: ...nmpCommunityTable to convert the PDU to an SNMPv1 PDU and then send it to the ATM Uplink module 4 The ATM Uplink module receives and processes the PDU and sends its response to the supervisor module 5...

Страница 144: ...ers by using SNMP You must have administrator access to the switch to create the SNMPv3 administrator The administrator can however give specific user groups read write access to the USM and VACM MIBs...

Страница 145: ...ess to the USM and VACM MIBs Users assigned to those user groups can then use SNMPv3 to create or modify SNMPv3 users To prevent SNMPv1 or v2 access to the USM or VACM MIBs assign views that include t...

Страница 146: ...r Definition username User name for the SNMPv3 user The user name can range from 1 to 32 alphanumeric characters sha Authenticates the user by means of HMAC SHA md5 Authenticates the user by means of...

Страница 147: ...e the following CLI command configure snmp server group groupname noAuth auth priv read readview write writeview notify notifyview Table 5 6 provides an explanation of the command keywords and variabl...

Страница 148: ...ollowing CLI command configure no snmp server group groupname noAuth auth priv If multiple groups have the same group name you must enter the appropriate security keyword noAuth auth or priv to delete...

Страница 149: ...username User name for the SNMPv3 user The user name can range from 1 to 32 alphanumeric characters Important Do not assign a community string and SNMPv3 user the same name groupname Name of the grou...

Страница 150: ...d SNMPv3 users use the following CLI command show snmp user username auth password The authentication password for the user Text passwords can range from 8 to 64 characters Localized HMAC SHA hashed p...

Страница 151: ...or No if disabled Localized encryption key of the user if encryption is enabled For information on localized keys see Authentication and Encryption Deleting a User To delete an SNMPv3 user use the fo...

Страница 152: ...for the following tasks Creating or Modifying a Community String for the Switch Creating or Modifying a Community String for the ATM Uplink Module Viewing Configured Community Strings Setting the Trap...

Страница 153: ...do not support authentication or encryption ip addr The IP address from which the community string is valid Trap messages are sent to this IP address if you enter the notify option notify Sends trap m...

Страница 154: ...g a Community String SwitchCommunity String To delete a community string for the switch use the following CLI command configure no snmp server community community string ip address Table 5 11 provides...

Страница 155: ...show snmp command For information on this command see Viewing the SNMP Status Table 5 13 provides an explanation of the command variable SNMP To set the administrative contact for the switch use the s...

Страница 156: ...witch use the sysLocation object OID 1 3 6 1 2 1 1 6 The complete path to this object is iso 1 org 3 dod 6 internet 1 mgmt 2 mib 2 1 system 1 sysLocation 6 Disabling or Reenabling SNMP Disabling SNMP...

Страница 157: ...ing SNMP Viewing the SNMP Status To view the status of SNMP use the following CLI command configure show snmp This command displays the status of SNMP enabled or disabled and the administrative contac...

Страница 158: ...5 24 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 5...

Страница 159: ...ns how they operate and provides procedures for creating VLAN s Need for VLANs If a traditional bridge receives a frame with a broadcast multicast or unknown destination address it forwards the data t...

Страница 160: ...ports on one or more media modules on a switch or on different switches VLANs are limited broadcast domains meaning all members of a VLAN receive every broadcast packet seen by members of the same VLA...

Страница 161: ...led on a switch port by selecting a Trunk mode for that port clear IEEE 802 1Q or Cisco Multi Layer mode A trunk port can send frames in clear mode with no VLAN ID or the VLAN ID over the same trunk A...

Страница 162: ...AN There are two ways in which frames are classified to VLANs Untagged frames are classified to the VLAN associated with the port on which the frame is received Port based VLANs Tagged frames are clas...

Страница 163: ...cast traffic of other VLANs will be sent onto this link and into the switch on the other end unnecessarily increasing the control plane load on the supervisor and increasing the chance for harmful lay...

Страница 164: ...ple VLANs to a single port If you use the CLI to statically bind multiple VLANs to a single port do not attempt to use the Web Agent to statically bind additional VLANs to the port or remove existing...

Страница 165: ...discard If you enable Automatic VLAN Creation AND set VLAN Binding type to Bind to Received make sure that you set the binding type before enabling AUTOMATIC VLAN CREATION or else the port may not be...

Страница 166: ...lick CREATE The Create VLAN dialog box opens Figure 6 4 Figure 6 4 Create VLAN Dialog Box 3 Enter a name for the VLAN in the Name field 4 In the ID field enter an unused VLAN ID value between 2 to 409...

Страница 167: ...der to support the maximum number of VLANs VLAN ID numbers should be chosen from the range of 1 to 1000 Initial Hash Table Size For every VLAN created a hash table is allocated of the initial size The...

Страница 168: ...guration dialog box opens Figure 6 3 2 Click on the Name of the VLAN whose members you want to view The VLAN Switch Ports dialog box opens Figure 6 5 Figure 6 5 VLAN Switch Ports Dialog Box 3 See Tabl...

Страница 169: ...witch port is assigned to VLAN using automatic VLAN binding i e if the binding for a switch port is set to Bind to Received The VLAN may be deleted but if the port VLAN binding is Bind to Received the...

Страница 170: ...s all ports in the hunt group to the new VLAN Using Hunt Groups to Aggregate Bandwidth Overview Hunt groups allow you to aggregate multiple switch ports to act as one switch port effectively combining...

Страница 171: ...e speed same media type connections in a group The group is not restricted to a single module in a switch Quicker recovery from link failure If a port in the group fails the remaining ports carry the...

Страница 172: ...visor module always has Forwarding Engines numbered one and two For a 7 slot P580 switch numbers one and two for the Supervisor module and up to eight per media module slot for a maximum total of 50 F...

Страница 173: ...is is different for the 50 series modules The twelve port layer 3 50 series media module all twelve ports are associated with one Forwarding Engine for layer 3 traffic and one Forwarding Engine for la...

Страница 174: ...nship Table 6 3 Module Forwarding Engines and Fabric Ports Module Type Total Number of forwarding engines Number of Fabric Ports Description 80 series M8000R Supervisor 2 1 FORE port CPU 80 series 24...

Страница 175: ...ort Gigabit Fiber layer 2 2 2 1 forwarding engine to 1 fabric port 50 series 2 port Gigabit Fiber layer 3 4 2 1 forwarding engine to 1 fabric port 50 series 4 port Gigabit Fiber layer 2 4 2 2 forwardi...

Страница 176: ...3 ports but not a mix Can have a mix of 80 series and 50 series as long as they are the same bandwidth and all layer 2 or all layer 3 but not a mix A hunt group cannot be distributed between more than...

Страница 177: ...The Hunt Group Configuration Web page is displayed in the content pane See Figure 6 9 Figure 6 9 Hunt Group Configuration Web Page 3 Click CREATE The Create Hunt Group Web page is displayed in the con...

Страница 178: ...o restore previous settings CLI Commands Use the following CLI commands to configure a hunt group To create a hunt group configure set huntgroup huntgroup name load sharing enable disable To enable or...

Страница 179: ...No 650 100 700 Issue 1 6 21 Using VLANs Hunt Groups and VTP Snooping Figure 6 11 Module Information Window 2 Select a port number from the Ports column The Physical Port Configuration window opens Fig...

Страница 180: ...otiation should be disabled on the ports to further ensure against speed mismatch If this is a new hunt group disable all of the ports you are adding to the hunt group If you are adding ports to an ex...

Страница 181: ...1 6 23 Using VLANs Hunt Groups and VTP Snooping Figure 6 13 Switch Ports Window 3 Select the name of the port you want to configure from the Name column The Switch Port Configuration window for that...

Страница 182: ...and P882 Multiservice Switches v6 0 Chapter 6 Figure 6 14 Switch Port Configuration Window 4 Select the hunt group assignment from the Hunt Group pull down menu 5 Click APPLY to save your changes or C...

Страница 183: ...to restore previous settings Note If thousands of addresses have been learned on a port and a link in the hunt group goes down the switch over of traffic between ports may take several seconds Note If...

Страница 184: ...to a hunt group using the CLI enter the following command from Configure mode configure set port huntgroup mod num mod swport range mod num mod swport range huntgroup name Removing Ports from Hunt Gro...

Страница 185: ...e setting Valid Trunk Mode options that work with VTP Snooping are Cisco Inter Switch Link Multi layer and IEEE 802 1Q VLAN additions deletions and name changes made on the network s Cisco VTP server...

Страница 186: ...t Procedure To configure VTP snooping using the Web Agent 1 Select Configuration from the Modules Ports folder on the Web Agent window The Module Information window opens see Figure 6 11 2 Select the...

Страница 187: ...ame associated with the Cisco VTP Domain The default is Null not set Changing this parameter automatically clears the learned VTP information the remaining parameters in this table Note The domain nam...

Страница 188: ...nfigure set vtp snooping enable Updater Identity Displays the IP address of the Cisco switch that initiated the VTP configuration update Update Timestamp Displays the date and time that the Cisco swit...

Страница 189: ...th through the network and then blocks any redundant paths STP first identifies a root switch and then identifies the most efficient path from the root switch to each switch in the network Any redunda...

Страница 190: ...her to detect and break loops in the network Interoperability is achieved by the ability of RSTP to detect the presence of bridges running STP and to operate in common spanning tree mode When an RSTP...

Страница 191: ...bridge does not have a root port Designated ports provide the lowest cost path from a network segment to the root bridge Each network segment has one designated switch on which one port is designated...

Страница 192: ...All ports with STP configured belong to the same spanning tree domain and rules are as defined in IEEE802 1D BPDUs are as defined by 802 1D and are sent out Clear on each link regardless of whether or...

Страница 193: ...e Domains The only other constraint is to limit the number of outgoing BPDUs It is required that the number of outgoing BPDUs be less than 500 second on all multiservice switches This means that if yo...

Страница 194: ...ains and the legacy domain the proprietary BPDU is seen returning to the Multilayer domain through the legacy domain and the loop is blocked The Dual Layer Spanning Tree method is preferred when inter...

Страница 195: ...global spanning tree options on the switch 1 In the navigation pane expand the L2 Switching folder 2 Click Spanning Tree The Spanning Tree Information Web page is displayed in the content pane See Fig...

Страница 196: ...her point Note When the Spanning Tree mode is set to IEEE 802 1D bridge protocol data units BPDUs are sent out ports in Clear non tagged format even if the port has a tagged format 3Com IEEE 802 1Q or...

Страница 197: ...with In the Dual Layer Spanning Tree model the switch terminates all 802 1D Spanning Tree Domains The switch does not forward 802 1D BPDUs or participate in any 802 1D Spanning Tree Domains It only p...

Страница 198: ...bal Spanning Tree Information Field Definition Configuration Type of Spanning Tree that the switch is running Options are IEEE 802 1D Per VLAN Dual Layer and Disable Protocol Version Version of Spanni...

Страница 199: ...displayed in the content pane See Figure 7 2 3 In the Bridge field click the bridge that you want to configure The Spanning Tree Bridge Configuration Web page is displayed See Figure 7 3 Figure 7 3 Sp...

Страница 200: ...ting is 20 seconds Bridge Hello Time The time between generation of BPDUs by the root bridge The valid range for this field is 1 to 10 seconds The default setting is 2 seconds Bridge Forward Delay The...

Страница 201: ...priority priority value 802 1D vlan vlan id name vlan name Path Cost Default The type of default path costs that ports in this bridge will use Options are common spanning tree uses the 16 bit default...

Страница 202: ...anning tree 802 1D vlan vlan id name vlan name To view the current configuration and status of the bridge show spantree all 802 1D vlan vlan id name vlan name Viewing Bridge Port Information Web Agent...

Страница 203: ...ng Tree Bridge Port Information Web Page Table 7 4 Spanning Tree Bridge Port Information Field Explanation Bridge Port Bridge port number Port Physical port number of the bridge port Name Name that is...

Страница 204: ...g Tree to forward traffic and is forwarding traffic currently Designated Root Root bridge for this spanning tree Designated Cost The path cost to the designated root of the segment that is connected t...

Страница 205: ...the Bridge Ports field click the bridge for which you want to configure a port The Spanning Tree Per Module Bridge Port Information Web page is displayed in the content pane 4 In the Bridge Ports fiel...

Страница 206: ...chosen as the primary path in the spanning tree when there are two or more paths of equal cost The valid range for this field is 0 to 240 in increments of 16 The default setting is 128 Administrative...

Страница 207: ...oup For example if a hunt group comprises four 1 GB ports and the operational path cost for one port is 20 000 the operational path cost for the hunt group is 5 000 20 000 4 If Administrative Path Cos...

Страница 208: ...t port spantree force protocol migration mod swport range mod swport range 802 1D vlan vlan id name vlan name Force BPDU Migration Clicking SEND RSTP BPDU in this field forces the bridge port to send...

Страница 209: ...ane expand the Modules Ports folder 2 Click Configuration The Module Information Web page is displayed in the content pane 3 In the Switch Ports field click the switch ports that you want to configure...

Страница 210: ...7 22 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 7 Figure 7 6 Switch Port Configuration Web Page...

Страница 211: ...port as connected to a point to point link ForceFalse Defines the port as connected to a shared LAN segment Auto Automatically detects whether the port is connected to a shared link or a point to poi...

Страница 212: ...settings for a switch port To enable or disable Spanning Tree on a port configure set port spanning tree mode mod num mod swport range mod num mod swport range disable enable To specify whether a port...

Страница 213: ...covery For more information about the CLI commands that are mentioned in this chapter see Command Reference Guide for the Avaya P580 and P882 Multiservice Switches Software Version 6 0 Two Categories...

Страница 214: ...If a non autonegotiating device running FD is connected to a negotiating device the negotiating device runs at HD and the link does not operate properly Note A Gigabit Ethernet device negotiates at HD...

Страница 215: ...00Base T4 3 100Base TX 4 10Base T full duplex 5 10Base T half duplex Note T4 100 Mbps with 8B 6T coding scheme Once the greatest common denominator of settings is determined each device equipped with...

Страница 216: ...the remote switch of the fault The remote switch then shuts down the remote port If the receive signal is restored on the local port the local port sends a message to the remote switch which then turn...

Страница 217: ...ically disabled If the switch is operating in Fabric mode 1 80 series Gigabit modules support remote fault detection on only one port If you enable remote fault detection on more than one port a loss...

Страница 218: ...Respond Only option With 10 100 links you can use the Enable with Aggressive Backoff option to enable Active Backpressure creation of a collision on a link Active Backpressure only applies to HD links...

Страница 219: ...ed frames received on the port are classified Note that a port has exactly one Port VLAN Changing this to a new VLAN removes the port from the old VLAN Setting the VLAN Binding attribute in the Switch...

Страница 220: ...ll be sent with no tagging Static 802 1Q Multi layer Ingress Untagged frames are classified to the VLAN associated with the port on which the frame is received Tagged frames are classified to the VLAN...

Страница 221: ...h unknown VLAN IDs For Multi layer if a tagged frame is received but the VLAN for that tagged frame does not exists on the switch that frame will be dropped Forwarding All broadcast frames from all VL...

Страница 222: ...looding domain of the selected VLAN This is an alternative to using Bind to Received 802 1Q Multi layer Ingress Untagged frames are classified to the VLAN associated with the port on which the frame i...

Страница 223: ...lso referred to as overlapping VLANs it is NOT recommended on clear non trunked ports due to the impact it has on the network The impact is that destination unknown unicast packets are flooded on the...

Страница 224: ...s if Known Mode is set to enable on the port which stops the flooding of destination unknown unicast packets If you had many clients servers on separate VLANs and they tried to communicate over multip...

Страница 225: ...navigation pane expand the Modules Ports folder 2 Select Configuration The Module Information Web page is displayed in the content pane Figure 8 2 Figure 8 2 Module Information Web Page 3 In the Ports...

Страница 226: ...t Module 4 In the Enable column select the checkbox to enable the port 5 Click APPLY to save your settings or CANCEL to restore previous settings 6 In the Name column select the port name 7 The Detail...

Страница 227: ...the port 10 In the Flow Control Mode field select one of the following options Enable Sets the port to both send and receive pause signals This setting prevents buffer overflows on both local and rem...

Страница 228: ...tch generates only log messages for the port It does not generate alarm messages SNMP traps This setting prevents the network management station trap receiver from being overwhelmed by port status mes...

Страница 229: ...Sets the port to both send and receive pause signals This setting prevents buffer overflows on both local and remote port Disable Sets the port to neither send or receive pause signals Use this settin...

Страница 230: ...ort from the Ports column for the Gigabit module that you want to configure The Physical Port Configuration dialog box for that module opens Figure 8 5 Figure 8 5 Physical Port Configuration Dialog Bo...

Страница 231: ...able Sets the port to both send and receive pause signals This setting prevents buffer overflows on both local and remote port Disable Sets the port to neither send or receive pause signals Use this s...

Страница 232: ...sical Port dialog box parameters Table 8 4 Detailed Physical Port Dialog Box Parameters Parameter Definition Name A user definable name for this port possibly a drop connection name or the name of the...

Страница 233: ...overflows on the local port but not on the remote port Enable Receive Only Sets the port to only receive and respond to pause signals from the remote port This setting prevents buffer overflows on the...

Страница 234: ...link at startup Configuring Physical Ports on Fast Ethernet Ports You can configure ports on a Fast Ethernet module using either the Web Agent or CLI commands Web Agent Procedure To configure ports o...

Страница 235: ...heckbox is checked in the Enable column To change the enable remove the check in the checkbox 5 If you change the enable checkbox Click APPLY to save your settings or CANCEL to restore previous settin...

Страница 236: ...sired or use the default name 8 Select one of the following from the Category field pull down menu User Port if this is an end station port Service Port if this is a trunk port 9 Select a speed 10 Mb...

Страница 237: ...e field pull down menu to enable Auto Negotiation Note This feature is only available for 10 100 TX modules Auto Negotiation works best when the port or device on the other end of the connection is al...

Страница 238: ...ffer being overwhelmed 16 Select the percentage of a port s traffic that can be unknown unicast and broadcast packets from the Flood Rate Limit Rate field pull down menu Note Set this value lower if t...

Страница 239: ...led this setting is ignored Duplex Mode Select the port duplex mode half or full duplex If auto negotiation is enabled this setting is ignored Flow Control Mode Determines if flow control is used on t...

Страница 240: ...by placing a threshold on the percentage of port traffic that can be flooded packets unknown unicasts and multicasts You can also optionally include known multicast packets in this percentage to furth...

Страница 241: ...ation The All Ports Configuration dialog box opens 4 See Configuring Physical Ports on 10 Gigabit Ports Configuring Physical Ports on Gigabit Ports and Configuring Physical Ports on Fast Ethernet Port...

Страница 242: ...d remove the port from the hunt group simultaneously the switch assigns all ports in the hunt group to the new VLAN Web Agent Procedure To configure switch port parameters using the Web Agent 1 In the...

Страница 243: ...figuring Ports Figure 8 9 Switch Port Configuration Dialog Box 4 Enter information in the Web page fields as appropriate See Table 8 6 for an explanation of each field 5 Click APPLY to save your chang...

Страница 244: ...Tags Select Ignore if you do not want to use received Frame VLAN tags Use is the default Note If you select ignore the received frames are bound to the port s default VLAN VLAN Binding Select the port...

Страница 245: ...articipate in the same hunt group must have the same bandwidth Thus 10 Gigabit ports can participate only in a hunt group that consists of other 10 Gigabit ports Spanning Tree Mode Select Disable to r...

Страница 246: ...ent is connected to exactly one other bridge normally with a direct cable between them Only point to point links and edge ports can rapidly transition to forwarding state If you set this field to Auto...

Страница 247: ...e software to v6 0 switch ports for which fast start was enabled have Admin Edge Port set to edge port For more information on Rapid Spanning Tree see Chapter 7 Configuring Rapid Spanning Tree Oper Ed...

Страница 248: ...n feature does not create entries in 3Com Mapping Tables When a VLAN is created automatically the VLAN name and VLAN ID are derived from the received tagged frame The VLAN name will be created as auto...

Страница 249: ...on the switch the packet is forwarded on to the VLAN assigned to the port default VLAN for that port To prevent unintended forwarding of unknown VLAN traffic to the port s default VLAN configure the...

Страница 250: ...a VLAN is created manually When a VLAN is created automatically the software assigns the VLAN to the port it is received on if that port is set to Bind to All and Bind to Received Additionally softwar...

Страница 251: ...that have unknown destination addresses set the Known Mode field to Enable for all ports on the same VLAN as the port for which you are enabling MAC address lock 5 Set the Intrusion Trap field to Ena...

Страница 252: ...trusion trap timer to other than the default setting set port intrusion trap timer mod swport range intrusion trap timer value Using the All Module Ports Configuration Window The All Ports Configurati...

Страница 253: ...Switch Ports Configuration All Ports dialog box 4 Select the check box next to the field you want to configure 5 Select an option for the specific field from that fields pull down menu 6 Select Restor...

Страница 254: ...for more information about the switch ports Next Previous Module Displays the next or previous module s switch port parameters Table 8 10 Switch Port Parameters Parameter Definition Links Opens associ...

Страница 255: ...e on different types of modules For example the primary port can be 10 100 Ethernet and the secondary port can be Gigabit Ethernet Redundancy for ATM ports is not supported If the primary port fails t...

Страница 256: ...is not unique to the pair it is assumed that the existing pair is being modified After creating a redundancy pair enable port redundancy globally for all configured pairs See Disabling or Enabling Por...

Страница 257: ...port secondary port huntgroup secondary huntgroup name Deleting a Port Redundancy Pair Web Agent Procedure You can delete a port redundancy pair from the Port Redundancy Configuration web page To dele...

Страница 258: ...Port Redundancy The Port Redundancy Configuration web page appears Figure 8 12 Port Redundancy Configuration Web Page 3 In the Configuration field select one of the following from the pull down menu E...

Страница 259: ...al Port Configuration Web page The type of GBIC that is connected to each port is displayed in the Connector field on this Web page To open the Physical Port Configuration Web page 1 Expand the Module...

Страница 260: ...en you or the Network Error Detection and Recovery NEDR feature disable the port However the LED remains solid green If NEDR shuts down a port the switch will forward traffic through a redundant port...

Страница 261: ...eshold NEDR logs the event in the event log or disables the port If you set the feature to notify NEDR does not log another event until the rate of CRC errors drops below the falling threshold and the...

Страница 262: ...and show port network error detection mod port range If the port is not listed as enabled for NEDR reenable NEDR on the same port or ports again Table 8 11 Keywords Arguments and Options Keywords Argu...

Страница 263: ...a redundant protocol is configured off Disables NEDR on the port or ports that you specify The default setting is notify rising threshold value The rising threshold The number of CRC errors that trig...

Страница 264: ...th If you do not enable a protocol that supports redundancy on the port and provide an alternate path you may lose traffic if the port shuts down If you replace a module that has a port which has been...

Страница 265: ...guration but they still will be subjected to take on the hunt group setting until they are removed from the hunt group To globally enable IEDR for all ports in hunt groups 1 Enter Global Configuration...

Страница 266: ...internal error config Viewing IEDR Settings for Hunt Groups To view the global IEDR setting for hunt groups 1 Enter Global Configuration mode The CLI displays the configure prompt 2 Enter the followi...

Страница 267: ...config enabled on port 3 2 Internal error config enabled on port 4 1 Internal error config enabled on port 4 2 Internal error config enabled on port 4 3 Internal error config enabled on port 4 4 Slot...

Страница 268: ...4 Slot 6 has 10 100 ethernet ports that are unsupported and will not be set Internal error config disabled on port 7 1 Internal error config disabled on port 7 2 Internal error config disabled on port...

Страница 269: ...y for the size of the Hash tables the size of the Address Forwarding Tables and the number of VLANs This information is detailed in the following pages in this chapter New address Learning When a MAC...

Страница 270: ...eps track of the memory locations where the learned AFT entries MAC addresses are stored These memory locations are referred to as buckets An individual bucket can range in size from 1 to 128 AFT entr...

Страница 271: ...her 20K of memory used for the 18 000 MAC entries Hash Table guidelines for creating VLANs Maximum Number of VLANs In order to support the maximum number of VLANs VLAN ID numbers should be chosen from...

Страница 272: ...each VLAN number in the range of 1 to 1000 to an index that is the same as the VLAN number In this situation there will never be any collisions See the Maximum Number of VLANs Supported section for va...

Страница 273: ...en 1 to 1000 Table 9 2 is an example of the size of the hash table created per the number of VLANs created using the guidelines Table 9 1 Number of Supported VLANs Version of Code Fabric Mode 1 Fabric...

Страница 274: ...each VLAN should be 256 or less 45 VLANs times 256 11 520 or 12K This leaves 48K for AFT entries 60K 12K 48K Example 2 VLANs have the different Hash Table Sizes Configuring the Avaya Multiservice swit...

Страница 275: ...e ID does not directly correlate to the VLAN ID Initial Hash Table Size 1024 the default setting for the Initial Hash table size Auto Increment HT Size Default setting is True Enable to automatically...

Страница 276: ...1 for enabling or disabling Auto Increment HT size Trigger Multiplier The first condition is the Trigger Multiplier which sets a minimum threshold for the number of learned entries a VLAN must have b...

Страница 277: ...Total Entries Display how many address entries are contained in the table Address Memory Displays how much address memory is currently being used the amount of memory still available and the largest...

Страница 278: ...re set aft super agetime age time value Instance Table Information The Instance Table Information is a summary of a AFT instance or Hash Table settings and utilization per VLAN See Figure 9 2 Instance...

Страница 279: ...Box See Table 9 3 for a definition of the Address Table Instance dialog box parameters Table 9 3 Address Table Instance Parameters Parameter Definition VLAN Association Name of the VLAN this Hash tabl...

Страница 280: ...Note The number of addresses for a given hash table is 4 1 for example if you have a hash table of 16 bytes the VLAN can hold 64 addresses in its table instance To achieve optimal Bucket Utilization H...

Страница 281: ...eshold percentage in the Threshold Util field if you just want to cause the table reconfiguration to occur at a different level of usage efficiency The default value of 40 is recommended for most appl...

Страница 282: ...1 Select Address Search from the Address Forwarding Table group on the Web Agent window The Address Entry Search dialog box opens Figure 9 4 Figure 9 4 Address Entry Search Dialog Box Note DISPLAY AL...

Страница 283: ...he Search Value column 4 To search using a Port Select the Port check box in the Search By column Select a search variable from the Port field pull down menu The options are Forward Filter and CPU Ent...

Страница 284: ...es of entries in the Address Forwarding Table can be modified The port priority and persistence can be changed for learned and management entries 7 To change an entry in the Address Forwarding Table s...

Страница 285: ...Port Port associated with this MAC address table entry Valid An entry is valid until it ages out at which time it becomes invalid Aging out occurs when a frame with the entry s MAC address is not rece...

Страница 286: ...or a source address or destination address To correct this set Persistence to Permanent Status The status of the address entry Options include Learned Management Self AFT Self Entries 01 80 C2 00 00 0...

Страница 287: ...the AFT manually using the Web Agent or the CLI Web Agent Procedure To add an AFT address manually using the Web Agent 1 In the navigation pane expand the L2 Switching Address Forwarding Table folders...

Страница 288: ...main in the AFT indefinitely 6 In the Priority field select a priority level for packets that are forwarded to this MAC address Options are None Normal and High High priority addresses move to the fro...

Страница 289: ...C address Priorities range from 0 to 7 Port Uses the priority of the physical port Cisco ISL tag or 802 1p tag Note This field applies only to 80 series modules 9 Click APPLY to save your changes or C...

Страница 290: ...the suboptions as appropriate in the DHCP Option Circuit Info and DHCP Option 82 Agent Info fields CLI Commands To use the CLI to change the status of option 82 enter Global Configuration mode and use...

Страница 291: ...pervisor is installed loaded with the same software version as the Active supervisor and synchronized it is ready to act as a redundant or standby supervisor If the Active supervisor does fail the red...

Страница 292: ...Using Hunt Groups to Aggregate Bandwidth in Chapter 6 Using VLANs Hunt Groups and VTP Snooping for more details Redundant Power Supplies Only two power supplies are required to support a fully loaded...

Страница 293: ...rward data properly The redundant components are available as separate options Redundant Switch Controllers and Elements Controllers and Elements are located at the rear of the switches When the redun...

Страница 294: ...ox window If the Primary controller fails the redundant controller takes over switch controller operation When an element fails diagnostics run automatically to test the hardware Information about a f...

Страница 295: ...itch controller with the new switch controller This ensures that the switch checks the status of the new switch controller 3 Insert the previously Primary switch controller into the Redundant Controll...

Страница 296: ...re field pull down menu on the Switch Fabric Status dialog box Figure 10 3 3 Click APPLY The Switch Fabric Status should now show the redundant controller and element Available Figure 10 4 4 Save the...

Страница 297: ...ble the redundant hardware by using the CLI enter the following command from Enable Configure mode configure set fabric configure redundant hardware enable Replacing the Primary Controller If a Primar...

Страница 298: ...s over the operation of the failed Primary controller To replace the failed Primary controller 1 Disable redundant hardware 2 Copy the running config to the startup config 3 Synchronize if you have re...

Страница 299: ...py the running config to the startup config 3 Synchronize if you have redundant supervisor modules 4 Power off the switch power supplies To avoid bodily harm and equipment damage you must power off th...

Страница 300: ...figure an alternate Ethernet Console IP address for both Configure an alternate IP address for both slot 1 and 2 CPU s by using the Web Agent or the CLI Note Do not Login to a Standby Supervisor modul...

Страница 301: ...his is the default gateway that the standby Ethernet console IP interface uses It does not have to match the Active CPU s default gateway The default value is 0 0 0 0 4 The Switch MAC Prefix field dis...

Страница 302: ...eb Agent or CLI to perform the synchronization Note If the Active Supervisor module and the Standby redundant Supervisor module are synchronized while the active supervisor module is being heavily use...

Страница 303: ...Module Redundancy Statistics The active supervisor periodically sends a health report message to the standby redundant supervisor If the standby supervisor is enabled it responds with a health report...

Страница 304: ...supervisor module is inserted into slot 1 the slot 2 supervisor module remains active and sends health reports to the standby supervisor in slot 1 If the slot 2 supervisor is removed reset or fails o...

Страница 305: ...e startup configuration file to the standby supervisor Note The P580 and P882 Supervisor modules must be in the same Fabric mode to synchronize To synchronize the active and standby supervisor modules...

Страница 306: ...ion Status Displays the functional status of the CPU modules Power Up Reset Image Displays the image the CPU will use upon startup or reset APP1 Version Displays the version of the image in applicatio...

Страница 307: ...y In earlier versions of software you had to manually reset the standby supervisor if these settings changed Important If you are updating the boot code you must manually reset the standby supervisor...

Страница 308: ...10 18 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 10...

Страница 309: ...domains The root name servers handle the domains such as COM EDU GOV etc The master name server Located in the middle of the DNS database tree It contains pointers to the individual name servers for e...

Страница 310: ...to the server If recursion is disabled and the server cannot answer the query the server will responds with a Referral answer The client will then use that information to query another DNS server This...

Страница 311: ...need only update the DNS database Many vendors provide DNS servers Consult the DNS Server vendor s documentation for information on configuring the DNS server Virtually every IP protocol stack include...

Страница 312: ...vaya com domain you need only type the host name without the suffix Avaya configure ping hostA instead of Avaya Configure ping hostA avaya com Order of Operations for DNS on the Avaya Multiservice Swi...

Страница 313: ...the DNS query has expired This implies that the query could not be answered at the present time Server Failure indicates that the DNS server is unable to answer due to a failure on the DNS server its...

Страница 314: ...Switches v6 0 Chapter 11 Web Agent Procedure To configure a DNS client by using the Web Agent 1 Select DNS from System Administration group on the Web Agent window The DNS Configuration dialog box op...

Страница 315: ...4 Enter the domain name suffix for each DNS server in the Domain Name Suffix fields fields 1 6 5 Click APPLY to save your changes or CANCEL to restore previous settings CLI Commands The following comm...

Страница 316: ...Avaya configure ip name server 20 20 20 20 Added name server 20 20 20 20 to the name server list Avaya configure ip name server 30 30 30 30 Added name server 30 30 30 30 to the name server list Avaya...

Страница 317: ...cast it implements IGMP and DVMRP The following information and procedures provided in this chapter pertain to layer 3 module configurations only Routing Function Requirements for IP Routing Routing C...

Страница 318: ...logically independent from and sits on top of the Layer 2 VLANs The function of the Inter VLAN router is to route traffic between VLANs subnets The router has an interface or virtual port for each VLA...

Страница 319: ...ith 80 series modules Supervisor and Media modules you must configure your switch with a minimum of version 5 0 and above Minimum Configuration Requirements Your switch must be configured as follows t...

Страница 320: ...mask for each VLAN and associated subnet 5 Globally enable IP Forwarding Routing 6 Enable the routing protocol on an interface 7 Specify how the router will communicate with other routers by configur...

Страница 321: ...2 5 Configuring IP Routing Figure 12 2 IP Interfaces Dialog Box 2 To modify an IP interface first click on Select to select the specific interface modify the parameter s and then click on APPLY or CAN...

Страница 322: ...lect the interface enter the new value of the ARP Timeout period and change the Admin State parameter to UP then click on APPLY 3 To delete an IP interface first click on Select to select the specific...

Страница 323: ...Document No 650 100 700 Issue 1 12 7 Configuring IP Routing Figure 12 3 Add IP Interface Web Screen...

Страница 324: ...routing only or routing and management for the serial interface or the Ethernet Console configure both for management only Ethernet Console Creates an IP interface and assigns the IP address to the Su...

Страница 325: ...Mgmt Default Enables you to manage the switch from the Command Line Interface CLI or the Web Agent and configure IP routing for the switch Mgmt Only Enables you to manage the switch however IP routing...

Страница 326: ...for the interface Options include None Default DVMRP IGMP Note By Default multicast forwarding is disabled To enable multicast forwarding go to the IP Global Configuration page Proxy ARP Enable or dis...

Страница 327: ...u can enable IP Unicast Forwarding Routing Globally using either the Web Agent or the CLI Web Agent Procedure To enable IP routing using the Web Agent 1 Select Global Configuration from the Routing IP...

Страница 328: ...12 12 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 12 Figure 12 4 IP Global Configuration Dialog Box...

Страница 329: ...be enabled on the desired IP interface enabled by default BOOTP DHCP Option 82 Agent Info Enable This sub option 82 identifies the IP address and if available the system name of the switch The Defaul...

Страница 330: ...ce settings can cause the switch to stop all routing Local Routes Enter a preference value for local routes Note Local Routes must always have the higher preference High Preference Static Routes Enter...

Страница 331: ...computing resources on network 192 168 10 x to communicate with computing resources on network 192 168 60 x without having to go through a router To create a multinetted network you must assign multi...

Страница 332: ...will be the relay Configuring Short Lived IP Protocol Filters Overview This feature helps conserve the forwarding engine resources of the switch Depending on the configuration of your network the forw...

Страница 333: ...ets of the protocol For information about the slow path see Routing Overview in Chapter 1 Introduction By default a filter is enabled for DNS and NTP packets To route the packets of other short lived...

Страница 334: ...route packets of the protocol For information about the FIRE and FORE paths see Routing Overview in Chapter 1 Introduction CLI Command To disable the filter for a short lived IP protocol enter Global...

Страница 335: ...or example ip short lived tcp 112 ip short lived udp 53 ip short lived udp 123 Creating IP Static Routes You can create IP static routes using either the Web Agent or the CLI Important Do not create a...

Страница 336: ...for your IP static route Mask Enter an IP subnet mask for your IP static route Next Hop Address Enter an IP address for the gateway associated with the IP static route The default setting is null 0 wh...

Страница 337: ...re configured on the switch configure show ip route static Creating a Static Route to a Null Interface Overview A null interface is a virtual interface that discards IP packets and is used to prevent...

Страница 338: ...t have a destination of 10 10 3 32 to Router 1 2 Because VLAN 103 is down Router 1 sends the packets to the Border Router 3 The Border Router then sends the traffic back to Router 1 via the route 10 1...

Страница 339: ...in the content pane See Figure 12 6 4 In the Network Address field enter the IP address of the network for which you are creating a null interface 5 In the Mask field enter the subnet mask for the net...

Страница 340: ...Agent Procedure To create a static ARP entry in your switch s ARP cache using the Web Agent 1 Select Static ARP from the Routing IP Configuration group on the Web Agent window The IP Static ARP Entri...

Страница 341: ...Agent between a BOOTP DHCP server and the requesting client You can create a BOOTP DHCP Server entry using either the Web Agent or the CLI Note BootP DHCP must first be enabled in the IP Global Config...

Страница 342: ...ure 12 11 Add BOOTP DHCP Server Entry Dialog Box 3 Enter the BOOTP DHCP server IP address in the IP Address field 4 Click CREATE to save your changes or CANCEL to restore previous settings Note It is...

Страница 343: ...set the entry to redistribute either all routes or specific routes If you want to redistribute only specific routes you must set up an access list to either permit or deny specific routes for redistr...

Страница 344: ...Agent Procedure To create an IP redistribute list entry 1 In the navigation pane expand the Routing IP Configuration folders 2 Click IP Redistribute List The IP Redistribute List Entries Web page is...

Страница 345: ...whose routes you want to redistribute Options are RIP OSPF static and local 7 In the Destination Protocol field select the protocol to which you want the routes redistributed Options are Rip and OSPF...

Страница 346: ...To view IP redistribute list entries use the following CLI command show ip redistribute Modifying an IP Redistribute List Entry Note Modifying an IP redistribute list entry that has OSPF for its desti...

Страница 347: ...re information see Creating an IP Redistribute List Entry earlier in this chapter Deleting an IP Redistribute Entry Note Deleting an IP redistribute list entry that has OSPF for its destination protoc...

Страница 348: ...tch to forward multicast traffic from the local multicast server to group members on directly attached subnetworks If a multicast packet is forwarded to multiple interfaces on one VLAN only one Forwar...

Страница 349: ...ted After selecting the specific IGMP version for an interface you can manually configure the Version 1 0 querier The selection of the querier for Version 2 0 is dynamic but can be overridden Globally...

Страница 350: ...for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 12 Figure 12 15 IP Global Configuration Dialog Box 2 Select Enable from the IP Multicast Forwarding field pull down menu to enable IP mu...

Страница 351: ...Y to save your changes or CANCEL to restore previous settings CLI Command To globally enable IGMP using the CLI enter the following command from Configure mode configure set router igmp Modifying IGMP...

Страница 352: ...mask associated with this interface Note This parameter is not configurable from the IGMP configuration dialog box IGMP Version Select the IGMP Version 1 0 or 2 0 to be associated with the IGMP inter...

Страница 353: ...Response Interval in sec Enter a time in seconds to wait for a response from a host after a query is sent If no response is received within this time the host is removed from the group table The valid...

Страница 354: ...ber of DVMRP neighbor to neighbor probe messages The loss of these messages may cause multicast routing to become unstable Configuring the DVMRP Global Configuration Web Agent Procedure To configure D...

Страница 355: ...Select Disable to globally disable DVMRP The default value is Enable Neighbor Router Probe Interval Enter probe interval in seconds for the switch to probe the network for available neighbor routers...

Страница 356: ...erval in seconds that elapses between delivery of DVMRP routing table updates The valid range for this field is 30 to 90 seconds The default setting is 60 seconds Route Replace Time Enter the amount o...

Страница 357: ...ticast protocol on an interface to DVMRP before you can configure DVMRP See Displaying Existing IP Interfaces earlier in this chapter and enable a multicast protocol for this interface 2 See Table 12...

Страница 358: ...with the protocol set to IPIP IP in IP Tunnel Endpoint Address Displays the Tunnel endpoint IP address of a router You can modify this setting to represent the end router IP address to which you want...

Страница 359: ...Displaying the IP Routing Table Statistics Searching the IP ARP Cache Displaying Global IP Routing Statistics You can monitor switch performance using either the Web Agent or the CLI Web Agent Procedu...

Страница 360: ...w the definition of each statistic Table 12 11 IP Routing Global Statistics Statistic Defines the IP In Receives Total number of input datagrams received from interfaces including those received in er...

Страница 361: ...Routed via this entity and the Source Route option processing was successful Note This is routed by the supervisor in the software IP In Unknown Protocols Number of input datagrams discarded due to er...

Страница 362: ...to be reassembled IP Reassembly OKs Number of IP datagrams successfully reassembled IP Reassembly Failures Number of failures detected by the IP re assembly algorithm timeout errors Note that this is...

Страница 363: ...ICMP Timestamp Reply messages received ICMP In Address Mask Requests Number of ICMP Address Mask Request messages received ICMP In Address Mask Replies Number of ICMP Address Mask Reply messages rece...

Страница 364: ...rts Total number of received UDP datagrams for which there was no application at the destination port UDP In Errors Number of received UDP datagrams that could not be delivered for reasons other than...

Страница 365: ...P Relay Agent BOOTP DHCP In Responses Total number of BOOTP DHCP response datagrams received by the BOOTP DHCP Relay Agent BOOTP DHCP In Discards Number of BOOTP DHCP requests discarded Incremented wh...

Страница 366: ...Table 12 12 to determine your search parameters 4 Select SEARCH If routes are available they are displayed in the IP Routing Table dialog box Figure 12 22 Table 12 12 IP Route Table Search Parameters...

Страница 367: ...you must delete the local IP interface associated with that entry Displaying the IP Routing Table Statistics To display the IP Routing Table Statistics 1 Select Route Table Statistics from the Routin...

Страница 368: ...outing IP Display group on the Web Agent window The ARP Cache Entry Search dialog box opens Figure 12 24 Table 12 13 IP Routing Table Statistics Dialog Box Parameters Parameter Definition Current Numb...

Страница 369: ...RP Cache Search dialog box parameters 4 Click SEARCH to start the search If matching entries are found they are displayed in IP ARP Cache dialog box IP Multicast Statistics You can view IP Multicast s...

Страница 370: ...ache Note It is possible to use access rules to filter and prioritize multicast traffic Displaying IGMP Global Statistics Web Agent Procedure IGMP global statistics provides membership reports members...

Страница 371: ...12 15 IGMP Global Statistics Dialog Box Parameters Parameter Defines the Group Membership Reports Received Number of reports received in response to a group membership query Hosts respond to a Query b...

Страница 372: ...tics IP Address IP address associated with the interface IP Address Mask Subnet mask associated with each listed interface State Current state of the interface For example if the interface is enabled...

Страница 373: ...ted querier on this interface Applicable only if IGMP V2 is used Group Join Requests Received Number of new groups on this interface Group Leave Requests Received Number of leave requests received on...

Страница 374: ...ntries Click Flush Table to clear the entire table Click REFRESH to receive the most up to date information on the entries in the table 3 See Table 12 17 for an definition of the IGMP Group Membership...

Страница 375: ...ulticast Forwarding Cache dialog box opens Figure 12 28 Local Multicast Forwarding Cache Dialog Box 2 To modify the Local Multicast Forwarding Cache select an entry and Click Delete Entry to delete on...

Страница 376: ...Parameters Defines the Destination Group Address Destination group address of the multicast transmission Source SubNetwork Subnet on which the IGMP interface s exist Source Address Mask Subnet mask a...

Страница 377: ...hange probes and routing updates so they each have a picture of their neighbors capabilities and the DVMRP network topology Report Messages Received Route Report messages received on this switch Prune...

Страница 378: ...robe messages transmitted to the network Report Messages Transmitted Report messages transmitted on this switch Prune Messages Transmitted Prune messages transmitted upstream on this switch This indic...

Страница 379: ...status indications include UP The interface is active DOWN The interface is inactive Type Type of interface configured Possible values include Broadcast All traffic is forwarded through the routers T...

Страница 380: ...group on the Web Agent window The DVMRP Interface Statistics dialog box opens Figure 12 30 Figure 12 31 DVMRP Neighbor Routes Dialog Box 2 Select the number in the Neighbor DVMRP Router s column if i...

Страница 381: ...window The DVMRP Routing Table Statistics dialog box opens Figure 12 32 Table 12 21 DVMRP Neighbor Routers Parameter Displays Neighbor Network Address The neighbor router s IP address Found on Interf...

Страница 382: ...p on the Web Agent window The DVMRP Route Table dialog box opens Figure 12 33 Figure 12 33 DVMRP Route Table Dialog Box 2 To modify your DVMRP Route table do one of the following To delete one or more...

Страница 383: ...st to source network Expiration Period in sec Time in seconds remaining before the source network is removed from the DVMRP routing table Upstream Router s IP address of the DVMRP router that is the u...

Страница 384: ...opens 3 See Table 12 24 for an explanation of the DVMRP Upstream Router s dialog box parameters Displaying the DVMRP Designated Forwarder s Table Web Agent Procedure To view the DVMRP Designated Forwa...

Страница 385: ...Route Table dialog box opens see Figure 12 33 2 Select the number from the Downstream Dependent Router s column for the appropriate source network The Downstream Dependent Router s dialog box opens Ta...

Страница 386: ...ing Cache from the Routing DVMRP group on the Web Agent window The Multicast Forwarding Cache dialog box opens Figure 12 35 Table 12 26 DVMRP Downstream Dependent Router s Dialog Box Parameter Paramet...

Страница 387: ...ding Cache dialog box parameters Table 12 27 Multicast Forwarding Cache Dialog Box Parameters Parameter Defines the Select Selection of the multicast forwarding cache Destination Group Address Destina...

Страница 388: ...eam Prune Information dialog box Next Pruned Downstream Interface to Timeout Next interface that is currently pruned which will be grafted back Downstream Interface s Number of downstream interfaces A...

Страница 389: ...ted in IP unicast packets with the protocol set to IPIP IP in IP Non Encapsulated Tunnel All multicast data traffic on this interface is IPIP encapsulated but the protocol messages are simple unicast...

Страница 390: ...unnel All multicast data traffic on this interface is IPIP encapsulated but the protocol messages are simple unicast Interface is Pruned Status of whether the interface has been pruned Prune Expiratio...

Страница 391: ...l router The Backup router monitors the availability of the Master router and will assume Mastership in the event that the Master router fails The VRRP protocol is described in detail in RFC 2338 Glob...

Страница 392: ...ettings CLI Command To globally enable VRRP from the CLI enter the following command in Configure mode configure router vrrp Enabling VRRP on an Interface VRRP can be enabled on an interface using the...

Страница 393: ...e from the VRRP field pull down menu for the interface you selected 4 Click APPLY to save your changes or CANCEL to restore previous settings CLI Command To enable an VRRP on an interface using the CL...

Страница 394: ...Avaya P580 and P882 Multiservice Switches v6 0 Chapter 12 Figure 12 38 VRRP Virtual Routers Dialog Box 2 Select CREATE The Add VRRP Virtual Router dialog box opens Figure 12 39 Figure 12 39 Add VRRP V...

Страница 395: ...VR ID can be used for multiple virtual routers as long as the associated IP Interfaces are on different VLAN s each VR ID number can be used once per VLAN The default value is 1 The range is 1 255 dec...

Страница 396: ...ld described below The default value is None Authorization Key Enter the Authentication Key in this field If the Authentication Type was set to None then a password will not be used in the VRRP electi...

Страница 397: ...using the drop down menu Enabling Address Owner Override allows the VIP to reply to ICMP requests if the router is not the IP Address owner of the virtual router s IP Address the VIP and IP Address a...

Страница 398: ...atistics Dialog Box Fields Parameter Definition Interface Displays the IP Interface name that the virtual router is associated with VR ID Displays the virtual router identification number IP Address D...

Страница 399: ...ing IP Interface or that the associated IP Interface is Down Backup Indicates that the virtual router is in the Backup state A virtual router in this state monitors the availability of the Master rout...

Страница 400: ...rities are automatically assigned Backup routers can use the default Priority settings and correct Master Backup election will be achieved Another IP Address does not have to be reserved for the virtu...

Страница 401: ...mary state to become Backup Selecting an Advertisement Interval In most cases leaving the Advertisement Interval to its default value of 1 is adequate Usually this is also desired because it will allo...

Страница 402: ...of their neighbor routers by listening for the advertisements When a host attached to a link starts up it may multicast a router solicitation to ask for immediate advertisements rather than waiting fo...

Страница 403: ...able IRDP on the selected interface The default value is Disable Preferences Enter the preference of the address as a default router address relative to other router addresses on the same subnet The m...

Страница 404: ...36 11 Select Enable the IP Multicast Forwarding field pull down menu 12 Click APPLY to save your changes or CANCEL to restore previous settings Min Advertisement Interval sec Enter the minimum time i...

Страница 405: ...illed if a primary server fails The LDAP client sends a search for access control lists to the primary server if the client finds the primary server The primary server retrieves the access lists from...

Страница 406: ...number of the primary LDAP server for the access control list domain The port number is used in conjunction with the primary server IP address There are no special overload values The default port is...

Страница 407: ...Server Port Enter the backup LDAP server port number for the access control list domain The port number is used in conjunction with the secondary server IP address There are no special overload value...

Страница 408: ...Web Agent window The LDAP Statistics dialog box opens Figure 12 43 Figure 12 43 LDAP Statistics Dialog Box 2 Click Refresh to dynamically update LDAP Statistics parameters 3 See Table 12 35 for an exp...

Страница 409: ...ic route in the Next Hop Address field Producer Signal The sequence number that when modified triggers the LDAP client to download the latest policy from the LDAP server Typically Avaya Policy Manager...

Страница 410: ...ent window The IP Interfaces dialog box opens Figure 12 37 4 Select CREATE The Add IP Interface dialog box opens Figure 12 3 5 Select Serial Console from the VLAN field pull down menu This indicates t...

Страница 411: ...ess Control Rules are used to describe how to forward route packets as opposed to where to forward them The how can be to forward the packet with a specific priority 0 7 forward the traffic with an un...

Страница 412: ...score _ character ACL Names are entered when you create a rule By using the same ACL Name for multiple rules you are effectively creating a list of rules The Access List Index determines the order of...

Страница 413: ...permit all at the end of every list Therefore if no match is found the packet is forwarded with the priority un changed What are Wildcards Wildcards are a template that govern which part of an IP add...

Страница 414: ...de networks as well as interfaces to Inside networks The Outside networks need access to a web server and should be denied access to any other resource within the Inside network Hosts on the Inside ne...

Страница 415: ...rest of the Inside networks And Rule 4 blocks the web server from getting to the rest of the networks Outside Rule 5 gives the hosts on the Inside network access to any network Rule 6 blocks any othe...

Страница 416: ...separate sections The switch supports a maximum total of 512 access control rules regardless of the number of access lists For example you could create the following three ACLs ACL A with 100 rules AC...

Страница 417: ...vaya Multiservice switch supports ACL names up to 32 characters Alpha Numeric Spaces are allowed in the names but are not recommended Instead of spaces use the underscore _ character See Naming Conven...

Страница 418: ...g box opens Figure 13 3 Access Type Select the method of handling incoming datagrams based on the IP access type from the following pull down menu options Deny Filter Allows you to filter out drop pac...

Страница 419: ...Document No 650 100 700 Issue 1 13 9 Configuring Access Lists Figure 13 3 IP Extended Access Rule Creation Dialog Box...

Страница 420: ...ased on the specified configuration Permit Fwd pri8 high to pri1 low Allows you to prioritize traffic based on the specified configuration Permit Fwd with no change in priority Allows you to forward t...

Страница 421: ...ation port see http www iana org assignments port numbers TCP UDP Destination Port Specify a range of destination ports that pass data between two hosts or switches using the Transmission Control Prot...

Страница 422: ...tting to 30 000 Greater than 30 000 the switch does not change the setting Automatically sets hash mode for IP unicast traffic to SA DA This setting improves the performance of the switch when an ACL...

Страница 423: ...s List dialog box displays Figure 13 1 2 Select Create Extended The IP Extended Access Rule Creation dialog box displays Figure 13 3 3 Enter a number between 100 and 199 or Alphanumeric for extended A...

Страница 424: ...r traffic to either a specific address or to an entire subnet In this example all traffic between the two subnets is filtered This example also assumes that the network is a Class C sub network 255 25...

Страница 425: ...specify the destination IP address of the network node and use a subnet wildcard of 0 0 0 0 To deny filter all traffic you must specify a destination address of 0 0 0 0 and a wildcard of 255 255 255...

Страница 426: ...rvisor ethernet or console port For more information about the slow path and FIRE and FORE paths see Routing Overview in Chapter 1 Introduction This section includes procedures for the following tasks...

Страница 427: ...ACL matches in the event log Figure 13 5 Sample ACL matches in the event log Setting a Logging Interval Web Agent Procedure To set the interval for ACL logging 1 In the navigation pane expand the Rou...

Страница 428: ...to optimize performance Terminology The following terms are used extensively in this section 5 tuple The five elements that fully describe the criteria of the ACL rule Source IP Mask Destination IP Ma...

Страница 429: ...of the packet for a high rate of L3FE re use In the most complex case such as an ACL that specifies the entire 5 tuple the granularity of identification will cause a very low rate of re use FORE Fast...

Страница 430: ...ance Enable Routing at the Module Design Safe Efficient ACLs Identify the Ports Configuring Hash Mode Managing F chip Memory Recognize Performance Issues When the ACL is the root of a performance prob...

Страница 431: ...eed this information to match Flows against the F chip statistics to locate the problem area The next step and this will be repeated as needed is to note the usage statistics with and without the ACL...

Страница 432: ...yer 3 forwarding cache The default setting is 120 seconds You can set this timer to a value from 120 to 360 seconds The Age interval timer starts when a new forwarding entry is added to the layer 3 fo...

Страница 433: ...istributed licensed routing function When a module is licensed the on board F Chips FIRE provide the fast path processing When a module is unlicensed the fast path is handled by the single F Chip FORE...

Страница 434: ...r of micro Flows to be created Minimize Rules The number of rules has a direct impact on the CPU effort to match rules to Flows This is especially true when there is a high frequency of packets that a...

Страница 435: ...her other slots are empty or full F Chips numbers are associated with their respective Fabric ports To locate the Fabric port and F Chip for Physical Port you need to know the media type and slot For...

Страница 436: ...CL is enabled This setting can cause a noticeable increase in the total flows identified and result in an increased usage of F chip memory See Managing F chip Memory in this case Important Changing th...

Страница 437: ...entified than in the DA only mode The F chip memory can accommodate approximately 70 000 total entries for routed L3 flows This number comprises IP Unicast IP Multicast and IPX entries for that F chip...

Страница 438: ...Procedure To use the Web Agent to manually double the IP Unicast maximum to 30 000 entries 1 In the navigation pane expand the Routing L3 Forwarding Cache and then click Cache Configuration The Layer...

Страница 439: ...Neighbors Viewing RIP Statistics Key Chains NBMA IP Interfaces For more information about the CLI commands that are mentioned in this chapter see Command Reference Guide for the Avaya P580 and P882 M...

Страница 440: ...o Global RIP Enable or disable the RIP protocol The default is Enable Note You must disable the IP Interface before Disabling or Enabling RIP Update Timer Enter the value in seconds that represents th...

Страница 441: ...r the CLI Web Agent Procedure To modify RIP interfaces using the CLI from the Web Agent 1 Select Interfaces from the Routing IP RIP group on the Web Agent window The RIP Interfaces dialog box opens Fi...

Страница 442: ...rsion Specify the version of RIP you want to use to send packets across this interface Selections include V1 V2 V1 V2 V1 is the default setting Receive Version Specify the version of RIP you want to u...

Страница 443: ...the default setting Auth Type Specify the type of authentication available for use on a given RIP interface Authentication types include None No authentication required Simple Uses a clear text passw...

Страница 444: ...ghbor using either the Web Agent or the CLI Web Agent Procedure To create a trusted RIP neighbor using the Web Agent 1 Select Trusted Neighbors from the Routing IP RIP group on the Web Agent window Th...

Страница 445: ...at the key is valid This key must be identical on each device that will participate in an exchange of information In the case of RIP version 2 only routers can use MD5 encryption to ensure that only r...

Страница 446: ...realistic number would be 18000 seconds 5 Hours For this time interval the RIP V2 interface would exchange routes with other RIP V2 routers in the same subnet Once expired the RIP V2 interface would...

Страница 447: ...number of the Key Valid range 1 to 255 Key Name 16 character alpha numeric key This is the actual key used by MD5 encryption This setting must be identical to the Key on other RIP V2 routers on the sa...

Страница 448: ...Example To create a Key Chain called AvayaChain with Key ID 123 Key Name MD5 Key AvayaKey123 that begins on March 10 2002 at 5 30 a m and lasts indefinitely enter the commands in the following order k...

Страница 449: ...l the entries Click REFRESH to receive the most up to date information on the entries 3 Use Table 14 4 to interpret the RIP statistics Table 14 4 RIP Statistical Parameters Parameter Defines the Inter...

Страница 450: ...upport for this functionality was added to enable route exchange over nonbridged connections routed PVCs For more information about NBMA see NBMA IP Interfaces in Chapter 15 Configuring the OSPF Routi...

Страница 451: ...ts to build their own network routing tables These packets that describe the local links are short and cause less traffic congestion than Routing Information Protocol RIP which broadcasts large routin...

Страница 452: ...ne router networks in their areas and advertise them onto the backbone Autonomous System Backbone Router ASBR router that has directly connected interfaces in non OSPF networks These networks are then...

Страница 453: ...your router ID and whether or not you want the switch to be the Autonomous System AS border router You can globally configure OSPF using either the Web Agent or the CLI Web Agent Procedure To globall...

Страница 454: ...nformation on route redistribution filters see Configuring Route Redistribution in Chapter 12 Configuring IP Routing SPF Hold Time Specify the minimum number of seconds between SPF shortest path first...

Страница 455: ...can create OSPF areas using either the Web Agent or the CLI Web Agent Procedure To create OSPF areas using the Web Agent 1 Select Areas from the Routing IP OSPF group on the Web Agent window The OSPF...

Страница 456: ...ter network 10 10 10 1 0 0 0 255 area 2 2 2 2 If you enter the IP network mask 255 255 255 0 instead of the wildcard mask 0 0 0 255 all OSPF interfaces that have 1 for the last octet of their IP addre...

Страница 457: ...e an OSPF area use the following command Note Before deleting an OSPF area assign any interfaces that are associated with the area to a different area or delete the interfaces configure router ospf no...

Страница 458: ...You must bring the IP interface Down to successfully enable OSPF on the IP interface If you do not you will get an error message and OSPF will not be enabled 2 Select the down arrow from the OSPF fiel...

Страница 459: ...or the interface that you want to modify 9 Modify the OSPF interface as necessary See Table 15 3 for an explanation of each field on this Web page 10 Click Apply 11 Reenable the interface a In the nav...

Страница 460: ...database description and link state request packets The value range is 1 3600 The default is 5 Hello Interval Enter the time seconds between the Hello packets that the router sends on the interface T...

Страница 461: ...255 area 2 2 2 2 If you enter the IP network mask 255 255 255 0 instead of the wildcard mask 0 0 0 255 all OSPF interfaces that have 1 for the last octet of their IP address will be added to area 2 2...

Страница 462: ...igure router ospf passive interface interface name ip addr To set the state of an OSPF interface that is configured as a passive interface to normal configure router ospf no passive interface interfac...

Страница 463: ...ay Estimated number of seconds it takes to transmit a link state update packet over this virtual link The value range is 1 3600 The default is 1 Retransmit Interval Number of seconds between link stat...

Страница 464: ...og box opens Figure 15 5 2 Select the virtual link that you want to remove 3 Click DELETE The virtual link is removed Dead Interval Time in seconds that a router s Hello packets have not been seen bef...

Страница 465: ...tual Links dialog box parameters 4 Click APPLY to save your changes or CANCEL to restore previous settings CLI Command To modify an OSPF virtual link use the following command configure router ospf ar...

Страница 466: ...log Box 2 Select CREATE The Add OSPF Summary dialog box opens Figure 15 8 Figure 15 8 Add OSPF Summary Dialog Box 3 See Table 15 5 for details about the Add OSPF Summary dialog box parameters Table 15...

Страница 467: ...to remove 3 Click DELETE The OSPF summary you selected is removed CLI Command To delete an OSPF summary use the following command configure router ospf no area area id range ip address mask Modifying...

Страница 468: ...ospf area area id range ip address mask Monitoring Switch Performance Using OSPF Statistics You can monitor switch performance using the following OSPF statistics OSPF Links OSPF Neighbors OSPF Link...

Страница 469: ...ntegrated Routing supports OSPFv2 External LSA Count Number of external LS type 5 link state advertisements LSAs in the link state database Originate LSA Count Number of LSAs originated by this router...

Страница 470: ...point for Link State Advertisements SPF Runs Number of times that the intra area route table has been calculated using this area s link state database Border Rtrs Total number of area border routers r...

Страница 471: ...neighbors You can display OSPF neighbors using either the Web Agent or the CLI Web Agent Procedure To display the OSPF neighbors using the Web Agent 1 Select Neighbors from the Routing IP OSPF group o...

Страница 472: ...to decide which router is the master and to decide upon the initial Database Description sequence number Neighbor conversations in this state or greater are called adjacencies Exchange Router is desc...

Страница 473: ...up on the Web Agent window The Link State Database Search dialog box opens Figure 15 12 Note You can select more than one item in the Search By column to help narrow your search results T Option Speci...

Страница 474: ...Area ID click the Area ID checkbox and specify the IP address of the Area ID that you want to find in the database and click SEARCH Type click the Type checkbox and from the Type pull down menu selec...

Страница 475: ...e only flooded within a particular area Network Links These packets are generated by Designated Routers and describe the set of routers attached to a particular network Summary Network These summaries...

Страница 476: ...cribe inter area routes to various networks They can also be used for aggregating routes Summary AS Border This describes links to Autonomous System Border Routers and are generated by Area Border Rou...

Страница 477: ...ition Area Displays the 32 bit identifier of the area from which the LSA was received Type Displays the link state type Types include Router Links Network Links Summary Network Summary AS Border AS Ex...

Страница 478: ...n of OSPF over NBMA is almost identical to operation of OSPF over broadcast LANs Flooding uses the designated router and both subnets are represented identically within the OSPF link state database by...

Страница 479: ...ace Note RIP or OSPF must be enabled to set up NBMA neighbors Note See Creating and Assigning IP Interfaces to the VLAN in Chapter 12 Configuring IP Routing for option settings 1 Open the Routing IP C...

Страница 480: ...ce interface name The following prompt displays configure if interface name 3 Enter the following command at the prompt ip address ip addr mask 4 Enter the following command at the prompt type nbma Se...

Страница 481: ...web agent or the CLI Web Agent Procedure To remove the NBMA neighbors using the web agent TBD CLI Command To remove the NBMA neighbors using the CLI enter the following command at the configure router...

Страница 482: ...I Commands for RIP To set up an NBMA neighbor on RIP you must first create a RIP interface 1 After you create a RIP interface enter the following command at the prompt router rip The configure router...

Страница 483: ...ce Switches Software Version 6 0 IPX Overview The IPX protocol is connectionless and performs datagram delivery and routing in Novell NetWare networks Each IPX address consists of Network Number A 32...

Страница 484: ...s Table 16 1 IPX Datagram Structure Fields Field Definition Checksum Provides integrity checking Note Checksum is normally not enabled in IPX networks and is usually set to 0xFFFF Packet Length Length...

Страница 485: ...modules Packet Type Indicates the type of service required or offered by the packet Types include Sequenced Packet Exchange SPX packet NetWare Core Protocol NCP packet NetBIOS propagated packet Desti...

Страница 486: ...lobal Configuration Dialog Box 2 Configure IPX Routing Global Configuration dialog box parameters to make your switch an IPX router See Table 16 2 for an explanation of the dialog box parameters Table...

Страница 487: ...rom Routing IPX Configuration group on the Web Agent window The IPX Interfaces dialog box opens Figure 16 5 SAP Select Disable to prevent IPX SAP from routing globally This affects all IPX interfaces...

Страница 488: ...rface Click on CREATE Note Only the create button is shown if no IPX Interfaces are configured 3 The Add IPX interface Dialog Box opens Figure 16 4 Figure 16 4 ADD IPX Interface Dialog Box 4 See Table...

Страница 489: ...5 IPX Interfaces Dialog Box Note Due to its length the IPX Interfaces dialog box is split into two views 6 To view or modify IPX Interfaces select IPX Interfaces from Routing IPX Configuration group o...

Страница 490: ...g VLANs in Chapter 6 Using VLANs Hunt Groups and VTP Snooping Network Number Enter the number of the IPX network you want to assign to the IPX interface This number is a hexadecimal 32 bit 8 character...

Страница 491: ...x RIP Select Disable to prevent IPX RIP from routing globally This affects all IPX interfaces set up to use the IPX RIP routing protocol The default value is Enable SAP Select Disable to prevent IPX S...

Страница 492: ...rameters Parameter Allows you to Network Enter the IPX network number that you want to assign to the IPX static route Next Hop Node Enter the MAC address for the next destination to which the packet i...

Страница 493: ...ing command in Interface mode config if if name ipx route network address range options Deleting IPX Static Routes You can delete an IPX static route using either the Web Agent or the CLI Web Agent Pr...

Страница 494: ...atic Route configuration 4 Click APPLY to save your changes or CANCEL to restore previous settings CLI Command To modify an IPX static route using the CLI enter the following command Interface mode co...

Страница 495: ...the Add IPX Static Service dialog box parameters Table 16 5 IPX Static Service Dialog Box Parameters Parameter Allows you to Service Name Enter the IPX Static Service name For example FS_ENG01 Use SL...

Страница 496: ...rver 9 Remote Bridge Server 24 Advertising Print Server 47 Network Enter the IPX Static Service network number in Hex Node Enter the IPX Static Service node address in hex The format of the node value...

Страница 497: ...window The IPX Static Services dialog box opens see Figure 16 9 2 Select the checkbox for the IPX Static Service that you want to remove 3 Click DELETE to remove the IPX static service or CANCEL to k...

Страница 498: ...your switch Displaying IPX Global Statistics Searching the IPX Route Table Displaying the IPX Route Table Displaying IPX Route Table Statistics Searching the IPX Service Table Displaying the IPX Serv...

Страница 499: ...Dialogue Box Parameters Parameter Allows you to IPX In Receives View the total number of IPX packets received including errors IPX In Delivers View the total number of IPX packets delivered locally Th...

Страница 500: ...l to 16 IPX In Checksum Errors View the number of IPX packets received with bad checksums IPX Out Requests View the number of IPX packets supplied locally for transmission This does not include any pa...

Страница 501: ...found they are displayed in the IPX Route Table dialog box If no routes are available a message is displayed in the IPX Route Table dialog box Table 16 7 IPX Route Table Search Parameters Parameter Al...

Страница 502: ...te Table Statistics dialog box opens see Figure 16 14 Table 16 8 IPX Route Table Parameters Parameter Defines the Select Parameter selected Network Network number in hex of the IPX network Interface I...

Страница 503: ...le 1 Select Service Table Search from the Routing IPX Display Web Agent window The IPX Service Table Search dialog box opens see Figure 16 15 Table 16 9 IPX Route Table Statistics Statistic Definition...

Страница 504: ...om the Search By column and specify Static as your search value 3 See Table 16 10 to determine the search parameters Table 16 10 IPX Service Table Search Parameters Parameter Allows you to Source Sear...

Страница 505: ...Service Name Search the IPX Service Table using a service name you specify Note that you can specify a single asterisk to indicate a wildcard character that will match all characters entered before th...

Страница 506: ...rver 9 Remote Bridge Server 24 Advertising Print Server 47 Network Network number of the IPX service Node Node address of the service Socket Number associated with a running process on the end node fo...

Страница 507: ...ble 16 12 to review each statistic Table 16 12 IPX Service Table Statistics Dialog Box Statistic Defines the Current Number of Services The current number of IPX services Peak Number of Services The p...

Страница 508: ...16 26 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 16...

Страница 509: ...more information about the CLI commands that are mentioned in this chapter see Command Reference Guide for the Avaya P580 and P882 Multiservice Switches Software Version 6 0 Configuring IPX RIP Inter...

Страница 510: ...he maximum allowed by the MTU of the RIP interface If disabled RIP packets are limited to 50 network entries The default is Disabled Periodic Update Interval sec Specify the length of time for the per...

Страница 511: ...ng IPX RIP Filters You can create and modify IPX RIP filters from either the Web Agent or the CLI Web Agent Procedure To create and modify IPX RIP filters using the Web Agent 1 Select Filters from the...

Страница 512: ...e This box only appears with the IPX RIP Filters Dialog Box Interface Select the interface to which this filter will be applied to RIP packets sent and or received on the interface Precedence Specify...

Страница 513: ...pply the filter only to RIP packets sent outbound direction on the interface Enable allows you to filter and suppress traffic and is the default Select Disable to disable the filtering and suppression...

Страница 514: ...Open the Direction pull down menu and select Outbound f Open the Filter Suppress pull down menu and select Enable g Enter 0 in the Ticks and Hops fields 3 Click Apply to save your changes or CANCEL t...

Страница 515: ...nter ffffffff in the End Network field e Select Outbound from the Direction pull down menu f Select Enable from the Filter Suppress pull down menu g Enter 0 in the Ticks and Hops fields 3 Click APPLY...

Страница 516: ...istics using the CLI enter the following command from Interface mode config if interface name show ipx interface intf name Table 17 3 IPX RIP Interface Statistical Parameters Parameter Definition Inte...

Страница 517: ...preting IPX SAP Interface Statistics For more information about the CLI commands that are mentioned in this chapter see Command Reference Guide for the Avaya P580 and P882 Multiservice Switches Softwa...

Страница 518: ...date packets to be sent out over an interface with no interpacket transmission delay Enable If you want to send the IPX SAP periodic update packets to be sent out over an interface with an interpacket...

Страница 519: ...le To allow SAP updates to be immediately transmitted to the network in response to changes in the network topology default Get Nearest Server Reply Select one of the following from the pull down menu...

Страница 520: ...name filters using the Web Agent 1 Select Name Filters from the Routing IPX SAP group on the Web Agent window The IPX SAP Name Filters dialog box opens Figure 18 2 Only the CREATE button is displayed...

Страница 521: ...a service name For example FS_ENG001 A single asterisk may be present as the last character which will match all remaining characters of a service name Type Enter the service type that identifies the...

Страница 522: ...presents a wildcard that applies to all server names d Enter 7 in the Type field e Select Outbound from the Direction pull down menu Filter Suppress Select to enable or disable whether the services ma...

Страница 523: ...CLI enter the following command from Configure mode configure ipx sap name filter precedence filter name service type outbound inbound both filter allow filter hops Creating IPX SAP Network Filters Yo...

Страница 524: ...ote This field is displayed in the IPX SAP Net Filter dialog box not in the Add IPX SAP Net Filter dialog box Interface Select the interface to which this filter will be applied to SAP packets sent an...

Страница 525: ...ckets sent on the interface Both Applies the filter to SAP packets both sent and received on the interface Default value is outbound Filter Suppress Disable whether the services matching Net and Type...

Страница 526: ...ters dialog box opens Figure 18 4 2 Select CREATE The Add IPX SAP Net Filter dialog box opens Figure 18 5 3 Configure the following parameters a Select an interface name from the Interface pull down m...

Страница 527: ...from the Direction pull down menu f Select Enable from the Filter Suppress pull down menu g Enter 0 in the Hops field Entering 0 ensures that there is no override in the transmission of data on the ne...

Страница 528: ...e Network Number The network number of the IPX network associated with the interface Triggered Updates Sent The number of triggered updates sent from the SAP interface Non triggered Updates Sent The n...

Страница 529: ...700 Issue 1 18 13 Configuring the IPX SAP Protocol CLI Command To interpret IPX SAP interface statistics using the CLI enter the following command from Interface mode config if interface name show ipx...

Страница 530: ...18 14 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 18...

Страница 531: ...Switches Software Version 6 0 Implementation This section introduces AppleTalk routing explains how it operates and explains why you would want to configure it on the Avaya P580 or P882 Multiservice s...

Страница 532: ...to the network for a certain period of time Name Binding Protocol NBP This protocol translates alphanumeric entity names to AppleTalk addresses NBP maintains a table of node addresses and entities wit...

Страница 533: ...the naming mechanism that AppleTalk uses users do not have to understand how AppleTalk works AppleTalk supports a peer to peer network thus dedicated servers or centralized network are not required A...

Страница 534: ...om the Routing AppleTalk Configuration group on the Web Agent window The AppleTalk Routing Global Configuration dialog box opens Figure 19 1 Note AppleTalk Routing is disabled by default Figure 19 1 A...

Страница 535: ...om the Routing AppleTalk Configuration group on the Web Agent window The AppleTalk Interfaces dialog box opens Figure 19 2 Figure 19 2 AppleTalk Interfaces Dialog Box 3 Select CREATE The Add AppleTalk...

Страница 536: ...e The Network Range Start value must be less than or equal to the Network Range End value Network Range End Enter the ending network number The network number specifies the range of AppleTalk network...

Страница 537: ...id Editing AppleTalk Interfaces You can edit AppleTalk interfaces using either the Web Agent or the CLI Web Agent Procedure To edit an AppleTalk interface using the Web Agent Note You must enable Appl...

Страница 538: ...or Cancel to remove the new zone 5 Select Interfaces from the Routing AppleTalk Configuration group on the Web Agent window The AppleTalk Interfaces dialog box re opens Figure 19 6 6 Select the new zo...

Страница 539: ...ant to update in the Select column 18 Click APPLY to save your changes or CANCEL to restore previous settings Note You may select and change multiple interfaces simultaneously with one APPLY operation...

Страница 540: ...zone name config if interface name no appletalk vlan vlan id Creating an AppleTalk Static Route You can create an AppleTalk static route using the Web Agent or the CLI Web Agent Procedure To create a...

Страница 541: ...bers for extended networks Each number in the range must be an integer between 1 and 65279 Note Network Range Start must be less than or equal to Network Range End Network Range End Enter the ending n...

Страница 542: ...zone name Editing AppleTalk Static Routes You can edit AppleTalk Static routes using either the Web Agent or the CLI Web Agent Procedure To edit an AppleTalk static route using the Web Agent 1 Select...

Страница 543: ...you need to delete then click the DELETE button 4 Navigate back the AppleTalk Static Route dialog box by selecting Static Route from the Routing AppleTalk Configuration group on the Web Agent window T...

Страница 544: ...an AppleTalk static route using either the Web Agent or the CLI Web Agent Procedure To delete an AppleTalk static route using the Web Agent 1 Select Static Route from the Routing AppleTalk Configurat...

Страница 545: ...ou can display NBP names to users and use addresses internally to locate entities When you register your entity s name and address pair NBP validates its uniqueness An NBP Filter prevents hosts on one...

Страница 546: ...NBP filter using the CLI enter the following command from Interface mode config if interface name appletalk access list access list number permit deny nbp string Table 19 3 AppleTalk NBP Filter Parame...

Страница 547: ...box parameters 3 Click CREATE to add a new filter The Add AppleTalk NBP Filter dialog box opens See Creating an AppleTalk Name Binding Protocol NBP Filter earlier in this chapter for more information...

Страница 548: ...Figure 19 15 2 Select Edit If The Add Delete Interface to NBP Filter dialog box opens see Figure 19 16 Figure 19 16 Add Delete Interface to NBP Filter Dialog Box 3 Select the interface to be added fro...

Страница 549: ...You can create an AppleTalk Zone Filter using either the Web Agent or the CLI Web Agent Procedure To create an AppleTalk zone filter using the Web Agent 1 Select Zone Filter from the Routing AppleTal...

Страница 550: ...guration group on the Web Agent window The AppleTalk Zone Filter dialog box opens Figure 19 18 2 Click the checkbox in the Select column next to the AppleTalk zone filter that you want to be edit 3 Se...

Страница 551: ...e appletalk access list access list number permit deny zone string Adding or Deleting Interfaces to a Zone Filter You can add or delete interfaces to a zone filter using either the Web Agent or the CL...

Страница 552: ...es v6 0 Chapter 19 Click the checkbox in the Select column for the interface that you want to be remove 4 Click Add to add this zone filter to the selected interface DELETE to remove this zone filter...

Страница 553: ...alk Statistics This section includes Viewing AppleTalk Global Statistics Viewing the AppleTalk Interface Statistics Table CLI Command Viewing AppleTalk Route Table Statistics Viewing the AppleTalk ARP...

Страница 554: ...about the AppleTalk Global Statistics dialog box parameters Table 19 5 AppleTalk Global Statistical Dialog Box Parameters Parameter Number of Echo Req Tx Echo requests transmitted Echo Reply Rx Echo...

Страница 555: ...eceived that had a short PDU in error TTL Expired Packets dropped because they timed out Checksum Error Packets which had checksum in error AARP Req Rx AppleTalk ARP requests received AARP Reply Rx Ap...

Страница 556: ...istics table using the Web Agent 1 Select Interface Statistics from the Routing AppleTalk Display group on the Web Agent window The AppleTalk Interface Statistics Table opens Figure 19 21 Figure 19 21...

Страница 557: ...route table and delete or flush entries from the table using the Web Agent 1 Select Route Table from the Routing AppleTalk Display group on the Web Agent window The AppleTalk Route Table opens Figure...

Страница 558: ...ge Displays the network range Metric Displays the AppleTalk metric for the network range State Displays the state of the entry The options include Good Suspect Going Bad Bad Owner Displays the AppleTa...

Страница 559: ...LI Web Agent Procedure To view AppleTalk route table statistics using the Web Agent 1 Select Route Table Statistics from the Routing AppleTalk Display group on the Web Agent window The AppleTalk Route...

Страница 560: ...ppleTalk ARP Cache Table opens see Figure 19 24 Figure 19 24 AppleTalk ARP Cache Table 2 See Table 19 9 for a definition of the AppleTalk ARP Cache Table parameters Table 19 9 AppleTalk ARP Cache Tabl...

Страница 561: ...all Viewing the AppleTalk Zone Table You can view the AppleTalk Zone table using either the Web Agent or the CLI Web Agent Procedure To view the AppleTalk zone table using the Web Agent 1 Select Zone...

Страница 562: ...lk Zone Table Statistics using either the Web Agent or the CLI Web Agent Procedure To view AppleTalk zone table statistics using the Web Agent 1 Select Zone Table Statistics from the Routing AppleTalk...

Страница 563: ...group on the Web Agent window The AppleTalk Zone Table opens Figure 19 25 2 See Table 19 12 for an explanation of the AppleTalk NBP Table parameters Table 19 11 AppleTalk Zone Table Statistical Parame...

Страница 564: ...ser Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 19 CLI Command To view the AppleTalk NBP table using the CLI enter the following command from User mode show appletalk nbp cr n...

Страница 565: ...ging the LGMP Client Managing CGMP Snooping For more information about the CLI commands that are mentioned in this chapter see Command Reference Guide for the Avaya P580 and P882 Multiservice Switches...

Страница 566: ...g All of the dynamic mechanisms are based on the assumption that the client host is running IGMP and is requesting membership in the IP multicast session Note If there is no multicast session created...

Страница 567: ...also enables IGMP The Administration Process Management and Pruning At the core of all Intelligent Multicast functionality the Administration Process is manipulated by manual configuration and dynami...

Страница 568: ...ssemination Process provides a method to dynamically configure multicast sessions on switches with VLANs that do not have IP interfaces See Figure 20 1 Figure 20 1 LGMP and CGMP Snooping Switch 1 will...

Страница 569: ...Deleting an Intelligent Multicast Session Deleting a Multicast Session Client Port Creating a Static Multicast Session Deleting Static Multicast Sessions Creating Static Client Ports Deleting Static C...

Страница 570: ...hes v6 0 Chapter 20 Figure 20 2 Intelligent Multicasting Global Configuration Dialog Box Note In order to route multicast traffic IP multicast forwarding must be enabled on the switch See Enabling IP...

Страница 571: ...ue is Enable Time Enter the time in seconds after which quiet learned router ports can be pruned The valid range in seconds is 10 to 172800 48 hours The default value is 120 seconds Automatic Session...

Страница 572: ...ter Ports You can display router ports using either the Web Agent or the CLI Web Agent Procedure To display router ports using the Web Agent 1 Select Global Configuration from the L2 Switching Intelli...

Страница 573: ...l Configuration from the L2 Switching Intelligent Multicast group on the Web Agent window The Intelligent Multicast Global Configuration dialog box opens Figure 20 2 Note You must enable intelligent m...

Страница 574: ...and VTP Snooping in Chapter 6 5 Click CREATE to save your changes CLI Command To configure a static router port using the CLI enter the following command from Configure mode configure set intelligent...

Страница 575: ...arameter Search Value IP Subnet IP Address enter the IP address on which you want to perform a search IP Address Mask Enter the associated IP Address mask MAC Address Enter the MAC address on which yo...

Страница 576: ...nation of the Multicast Sessions dialog box parameters Table 20 4 Multicast Sessions Dialog Box Parameters Parameter Definition Select Select the multicast session Session ID Displays the multicast se...

Страница 577: ...o begin the search for the multicast session The Multicast Sessions dialog box opens with the search results Figure 20 5 3 Select the checkbox next to the multicast session that you want to delete and...

Страница 578: ...t SEARCH to begin the search for the multicast session The Multicast sessions Dialog Box opens with the search results Figure 20 5 3 Select the client port number from the Client Ports column The Mult...

Страница 579: ...a Static Multicast Session You can create a static multicast session using either the Web Agent or the CLI Web Agent Procedure To create a new static multicast session using the Web Agent 1 Select St...

Страница 580: ...ettings Table 20 6 Static Multicast Session Configuration Dialog Box Parameters Parameter Definition IP Address Enter the IP address of the new static multicast session The range must be between 224 0...

Страница 581: ...tic multicast session using the Web Agent 1 Select Static Sessions from L2 Intelligent Multicast group on the Web Agent window The Static Multicast Sessions dialog box opens Figure 20 9 2 See Table 20...

Страница 582: ...ons on VLANs that the port is bound to or on sessions created for All VLANs Web Agent Procedure To create a static client port using the Web Agent 1 Select Static Sessions from L2 Intelligent Multicas...

Страница 583: ...be deleted from either the Web or the CLI Web Agent Procedure To delete static client ports using the Web Agent 1 Select Static Sessions from L2 Intelligent Multicast group on the Web Agent window Th...

Страница 584: ...ooping You can enable IGMP snooping using either the Web Agent or the CLI Web Agent Procedure To enable IGMP Snooping using the Web Agent 1 Select IGMP Snooping from the L2 Intelligent Multicast group...

Страница 585: ...2 See Table 20 8 for an explanation of the IGMP Snooping dialog box parameters 3 Click CLEAR to clear the statistics REFRESH to refresh the contents of the table Table 20 8 IGMP Snooping Dialog Box P...

Страница 586: ...iewing the LGMP Server Statistics Viewing the LGMP Server Statistics per VLAN Configuring the LGMP Server You can configure the LGMP server using either the Web Agent or the CLI Web Agent Procedure To...

Страница 587: ...Managing Intelligent Multicasting Figure 20 12 LGMP Server Configuration Dialog Box 2 See Table 20 9 to configure the LGMP Server Configuration dialog box parameters 3 Click APPLY to save your change...

Страница 588: ...wer the number the more likely it will win the election The valid range is 0 to 255 The default value is 128 Router Report Time The time interval in seconds between router reports sent by the LGMP ser...

Страница 589: ...e Transmission Statistics Report Displays the number of LGMP report messages transmitted Leave Displays the number of LGMP leave messages transmitted End Session Displays the number of LGMP end sessio...

Страница 590: ...the LGMP server display per VLAN using the Web Agent 1 Select LGMP Server from the L2 Intelligent Multicast group on the Web Agent window The LGMP Server Select the number from the LGMP Servers column...

Страница 591: ...ort Displays the number of LGMP report messages transmitted per VLAN Leave Displays the number of LGMP leave messages transmitted per VLAN End Session Displays the number of LGMP end session messages...

Страница 592: ...atest information CLI Command To view the LGMP server statistics per VLAN using the CLI enter the following command from Configure mode configure show lgmp server statistics VLAN options Managing the...

Страница 593: ...uration Dialog Box Table 20 11 LGMP Client Configuration Dialog Box Parameters Parameter Definition Enable State Select to enable or disable LGMP client The default value is Disabled LGMP Clients Disp...

Страница 594: ...P leave messages received End Session Displays the number of LGMP end session messages received Router Report Displays the number of LGMP router report messages received Router Leave Displays the numb...

Страница 595: ...nt Configuration dialog box opens Figure 20 14 2 See Table 20 11 for an explanation of the LGMP Client Configuration dialog box parameters 3 Click CLEAR to clear the statistics or REFRESH to refresh t...

Страница 596: ...f the LGMP Client Display per VLAN dialog box parameters 4 Click CLEAR to reset selected row information CLEAR ALL to reset all statistics REFRESH to view the latest information Table 20 12 LGMP Clien...

Страница 597: ...r of LGMP end session messages received per VLAN Router Report Displays the number of LGMP router report messages received per VLAN Router Leave Displays the number of LGMP router leaves messages rece...

Страница 598: ...e CGMP Snooping using either the web agent or the CLI Web Agent Procedure To enable CGMP snooping using the Web Agent 1 Select CGMP Snooping from the L2 Intelligent Multicast group on the Web Agent wi...

Страница 599: ...ed Displays the number of CGMP leave messages received Unknown Messages Received Displays the number of unknown CGMP messages received Intelligent Multicast Session Statistics New Sessions Created Dis...

Страница 600: ...oping using the Web Agent 1 Select CGMP Snooping from the L2 Intelligent Multicast group on the Web Agent window The CGMP Snooping dialog box opens Figure 20 16 2 View the CGMP Snooping dialog box fie...

Страница 601: ...more information about the CLI commands that are mentioned in this chapter see Command Reference Guide for the Avaya P580 and P882 Multiservice Switches Software Version 6 0 Interpreting Front Panel...

Страница 602: ...t Procedure To view the Active Alarm Table using the Web Agent 1 Select Active Alarms from the Events group on the Web Agent window The Active Alarm Table opens Figure 21 1 Port Solid green Port enabl...

Страница 603: ...can set the size of the table Because these events are stored in switch memory the list is cleared each time the switch reboots Shutdown Log stores the same information as the event Log but generally...

Страница 604: ...re To configure event notification 1 In the navigation pane expand the Events folder and then click General Events The General Event Management Web page is displayed in the content pane See Figure 21...

Страница 605: ...21 2 Event Classes Class Determines whether the switch sends a notification for Start Starts of the system System System events Configuration Each configuration change for example enabling and disabli...

Страница 606: ...thorized SNMP activity Redundant CPU Changes in status of a redundant CPU Notification is sent if The status changes from standby to active or vice versa The active supervisor loses or establishes con...

Страница 607: ...log ssl_ssh To forward events to syslog servers configure set syslog facility start system config temp resource fan service_port user_port power bridge_stat switch_fabric ospf rip ldap appletalk auth_...

Страница 608: ...n the content pane See Figure 21 3 Figure 21 3 Protocol Event Management Web Page 2 Enable the categories of protocol events for which you want to generate notifications See Table 21 3 for an explanat...

Страница 609: ...n the content pane See Figure 21 2 2 In the Max Log Entries field for the event log select the number of entries that you want the event log to store The default setting is 512 entries 3 In the Max Lo...

Страница 610: ...r the Web Agent or the CLI Web Agent Procedure To view the event log or shutdown log using the Web Agent 1 In the navigation pane expand the Events folder and then click either Event Log or Shutdown L...

Страница 611: ...event log or shutdown log is displayed Figure 21 5 Event Log Web page Table 21 4 Event Log Fields Entry Definition Log ID Displays the number of this event in the log FIFO First In First Out Event ID...

Страница 612: ...on pane expand the Events folder and then click Event Log The Event Log Search Web page is displayed in the content pane See Figure 21 4 2 Click CLEAR EVENT LOG CLI Command To clear the event log use...

Страница 613: ...you set the severity to Warning error messages of severities Warning Error Alert and Emergency are logged Table 21 5 Event Statistics Window Parameters Parameter Definition Event Log wraps Displays t...

Страница 614: ...remote syslog servers For information on SNTP see Enabling the Simple Network Time Protocol in Chapter 3 Configuring System Information You can also set the event types also called facilities for whic...

Страница 615: ...rs 5 In the Severity field select a severity level See Table 21 6 for more information about each severity level The default setting for this field is error The switch logs error messages of the sever...

Страница 616: ...hat the 80 series forwarding engines route This statistic includes packets routed by the forwarding engines on 80 series media modules FIRE and on the supervisor module FORE For more information about...

Страница 617: ...iguration mode and use the following command set utilization threshold event cpu forwarding engine The default setting for event logging of utilization is disabled If you enable event logging of utili...

Страница 618: ...pacity of the supervisor module to forward slow path traffic When 100 utilization is reached the performance of the switch may degrade FIRE Sets the high threshold for utilization of the forwarding en...

Страница 619: ...ing is disabled Forwarding Engine monitoring is disabled CPU threshold level is 95 percent Forwarding Engines FIRE threshold level is 95 percent FORE threshold level is 95 percent CPU threshold event...

Страница 620: ...isplay the statistics for forwarding engine utilization use the following command show utilization results forwarding engine chip fabport chip index You can enter this command from user mode Note For...

Страница 621: ...ine Total Packet Rate 28843 PPS Routing Component IPU Packet Rate 28835 PPS Routing Component IPM Packet Rate 0 PPS Routing Component IPX Packet Rate 0 PPS Statistic History sorted from most recent to...

Страница 622: ...21 22 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 21...

Страница 623: ...he volume of traffic that the 10 Gigabit module can process and its internal architecture the module can cause the number of entries in the Layer 3 forwarding cache to reach the default maximum of 130...

Страница 624: ...system entries as necessary You may need to adjust the setting initially to accommodate peaks in network demand Configuring the Forwarding Cache You can configure the forwarding cache using the Web A...

Страница 625: ...cast and IPX protocols The options are DA only Forwarding entries input to the forwarding table are limited to using protocol destination address only SA DA Forwarding entries input to the forwarding...

Страница 626: ...isplaying Frame Forwarding Statistics Displaying and Searching the L3 Forwarding Cache for an Entry Displaying Frame Forwarding Statistics The frame forwarding statistics indicate the performance of e...

Страница 627: ...ess cache entries L3 Slow Path Frames Number of frames received on a fabric port that were not successfully matched against existing forwarding entries in the layer 3 L3 address cache Subsequently the...

Страница 628: ...all options by not selecting any options and clicking on the search button Note Layer 3 Active Forwarding Cache entry Search is available with the Web Agent only no CLI version To search the L3 addre...

Страница 629: ...P address or IPX network number Protocol By protocol identifier By default this field is 0 for IP Destination Port Within the routing cache that match the specified destination port IPU IPM IPX Source...

Страница 630: ...he specific routing cache configure show ip unicast cache configure show ip multicast cache configure show ipx cache Displaying the Forwarding Cache You can display the Forwarding cache information us...

Страница 631: ...the following Select the entry and click Flush Entry to delete one or more entries Click Flush Table to clear the entire table Note Flushing the table will disrupt traffic flow and clear all Forwardin...

Страница 632: ...this number reaches the Maximum Entries setting for the protocol you may want to enable a short lived protocol filter to conserve the forwarding engine resources For information on how to enable a sho...

Страница 633: ...ds that are mentioned in this chapter see Command Reference Guide for the Avaya P580 and P882 Multiservice Switches Software Version 6 0 Viewing Network Statistics You can view a variety of statistics...

Страница 634: ...Counters to get a fresh view of the statistics being gathered This resets all of the counters to zero so that you can track the counters from a specific point forward 3 Select a module from the Module...

Страница 635: ...track the counters from a particular point forward 5 Select a port from the Name column to view statistics for that specific port The Ethernet Interface Statistics Web page opens Figure 23 3 Figure 23...

Страница 636: ...e interface A sharp increase could indicate a need to reconfigure the network However octets are a better indication of bandwidth utilization Broadcasts Broadcast packets are a normal part of network...

Страница 637: ...rs represent transit and receive bit errors The Ethernet standard allows 1 in 108 bit error rate but you should expect performance to be less than 1 in 1012 packets Rates in excess of one error per on...

Страница 638: ...rence on network cabling A Transceiver attached to the Repeater is generating Signal Quality Errors SQE Possible actions respectively Inspect cable runs to see if they are too close to noisy devices a...

Страница 639: ...d on the network Collisions increase as network use of shared segments increases Therefore if the collision rate increases without an increase of network use it might indicate a problem Guidelines for...

Страница 640: ...mirroring works with 50 series modules Fabric mode 2 port mirroring works with 80 series modules Note If you use port mirroring the Frame Tags field on the Switch Port Configuration Web page for the...

Страница 641: ...er Definition Configure Source Select the configuration source port Provides a link to the Port Mirroring Configuration Web page Source Port Displays the port under investigation Mirror Port Displays...

Страница 642: ...ct a particular source port associated with the selected fabric port You can also select all ports Note To mirror inbound traffic only select a source port and a mirror port not a piggyback port Mirro...

Страница 643: ...do not support piggyback ports Fabric mode 1 port mirroring works with 50 series modules Fabric mode 2 port mirroring works with 80 series modules If you set up a piggyback port multicast traffic that...

Страница 644: ...set up port mirroring on a port that is administratively disabled and you configure the disabled port as a source or mirror port note the following Traffic sent to a disabled source port will be lost...

Страница 645: ...kets are dropped at random if packets are dropped from either the source or the mirror traffic or both there is no guarantee that the mirror traffic will match the source traffic Note Fabric mode 2 po...

Страница 646: ...rough 2 on channel 1 and port 2 on channel 2 simultaneously 8 port gigabit modules 1 4 5 8 Any single port You can mirror any four single ports simultaneously one port per channel However you cannot m...

Страница 647: ...to monitor only traffic with a specific source MAC address or destination MAC address Note Do not set the source MAC address in the Destination Filter field Setting a Source MAC address in the Destin...

Страница 648: ...Type column In the Max Packets per Second column enter the maximum number of packets per second that you want the mirror port to receive Disable or Always in the Sampler Type column Go to step 8 Tabl...

Страница 649: ...eld Sampler Type Specifies how often you want the mirror port to receive traffic samples Options are Disable Always Periodic Max Packets per Second The maximum number of packets per second that you wa...

Страница 650: ...or Web Agent Procedure To remove a port mirror on a switch in Fabric mode 2 by using the Web Agent 1 Expand the Modules Ports folder 2 Click Port Mirroring The Port Mirroring Information page opens 3...

Страница 651: ...CLI Command To view information about a Fabric mode 2 port mirror use the following CLI command configure show port mirror Fabric_mode2 This command displays the source ports mirror port direction be...

Страница 652: ...23 20 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 23...

Страница 653: ...hold 256K bytes Architecturally they can support up to 1 MB each Each buffer is divided into two queues one for High priority Traffic and one for Normal priority Traffic The factory default is for the...

Страница 654: ...frames destined for a particular buffer will be dropped This should only occur in a case where the output port is very congested However there is an optional mode in which normal priority frames are n...

Страница 655: ...Figure 24 1 Module Information Dialog Box 2 Select the module whose buffers you want to manage from the Select column 3 Select the Module number for that module from the Buffer Management column The B...

Страница 656: ...bric port opens Figure 24 3 Table 24 1 Buffer Management Dialog Box Parameters Parameter Definition Fabric Port Buffers Displays the port s fabric port buffers and allows you to open the Buffer Detail...

Страница 657: ...e 24 2 Buffer Detail Configuration Dialog Box Parameters Parameter Definition Memory Displays the amount of physical memory associated with this buffer Age Timer Displays the amount of time a packet r...

Страница 658: ...rity Service Ratio Allows you to set how many times the high priority queue is serviced for each time the low priority queue is serviced The ideal value changes from queue to queue but the goal is to...

Страница 659: ...t Fast Ethernet buffers Physical Port ports have additional buffers on both the input and output ports 8 Click APPLY to save your changes or CANCEL to restore previous settings CLI Command To manage b...

Страница 660: ...24 8 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 24...

Страница 661: ...receives the priority it requires while also ensuring that the switch services other low priority data The QoS features are supported only on 80 series modules Fifty series modules do not support the...

Страница 662: ...mplement QoS you must have a thorough knowledge of the traffic patterns in the network You need this information to Classify traffic and assign it the required priority and bandwidth Identify the area...

Страница 663: ...or destination MAC address The DiffServ code point The IP protocol assigned by means of an ACL rule The source or destination IP address assigned by means of an ACL rule The source or destination TCP...

Страница 664: ...ores packets in the queue that matches their priority 4 The switch forwards the VoIP traffic in queue 5 as long as its bit rate does not exceed 5 Mbps If the bit rate of the queue exceeds 5 Mbps the s...

Страница 665: ...ss of the VoIP flow VoIP traffic cannot tolerate latency or frame loss so it needs a high priority to ensure its timely delivery Note Priority 5 serves as an example only Actual implementations may va...

Страница 666: ...ess port NOTE If policing is enabled the switch forwards traffic that falls within the maximum bit rate and drops traffic that exceeds the maximum bit rate Frame is stored in 1 of 8 egress priority qu...

Страница 667: ...his new DSCP IP protocol assigned by means of an ACL rule Destination IP address assigned by means of an ACL rule Source IP address assigned by means of an ACL rule Layer 4 characteristics Destination...

Страница 668: ...e to the 8 level priority system that 80 series modules use Classifying Traffic by Layer 2 Characteristics In addition to Cisco ISL tag 802 1p tag and physical port priority the switch can classify tr...

Страница 669: ...ociated with the ACL replaces the current priority of the frame For information on how to set a rule in an ACL see Setting Up an ACL Rule later in this chapter Using a Default ACL Rule By default the...

Страница 670: ...appropriate DSCP The switch then uses the DSCP to classify packets You can alternately set the switch to replace the DSCP in a packet with a different DSCP The switch then uses the new DSCP to classif...

Страница 671: ...s the number of ingress and egress queues that are available on each module Table 25 2 Precedence of Priorities Layer Precedence of Priority Priority Used for Classification Layer 3 High ACL rule prio...

Страница 672: ...8 sets of 8 queues 24 port 10 100 modules 1 set of 8 queues for ports 1 12 1 set of 8 queues for ports 13 24 Total 2 sets of 8 queues 1 set of 8 queues per port Total 24 sets of 8 queues 48 port 10 1...

Страница 673: ...the chassis are set with the same priority priority The priority that you want to assign to the port or port range Enter a number between 0 and 7 The highest priority is 7 Each physical port has a def...

Страница 674: ...m the switch ignores tag priorities on all ports of the module mod swport range The slot number of a module and either a port number or a range of port numbers having the format Px Py For example To s...

Страница 675: ...nore tag priority 3 on Set ports 1 through 5 on the module in slot 3 to not ignore the 802 1p tag priority set port ignore tag priority 3 1 5 off Set ports 1 through 5 on the module in slot 3 and port...

Страница 676: ...estination MAC address in the AFT to determine the priority of the frame entry priority The priority that you want to assign to the destination MAC address Enter a number between 0 and 7 da priority m...

Страница 677: ...ith VLAN 50 Forward frames that have a source or destination MAC address of 00 00 00 00 00 55 Assign a priority of 7 to packets that have a destination MAC address of 00 00 00 00 00 55 set aft entry 0...

Страница 678: ...rt range all ports on off Table 25 10 Keywords Arguments and Options Keyword Argument or Option Definition mod num The slot number of a module If you specify mod num all ports on the module are set to...

Страница 679: ...rt mask diffserv mod num mod swport range mod num mod swport range all ports on off Table 25 11 Keywords Arguments and Options Keyword Argument or Option Definition mod num The slot number of a module...

Страница 680: ...to DSCPs 15 through 63 enter set diffserv priority 7 dscp 15 63 on off Indicates whether the switch masks the three least significant bits of the DSCP Enter on to mask the bits Enter off to not mask...

Страница 681: ...ag priority and if the port is set to use the DSCP for bridged IP traffic The syntax of the command is show port mod num mod swport range mod num mod swport range Table 25 13 Keywords Arguments and Op...

Страница 682: ...addr Extended ACL configure access list access list name access list index permit use priority priority use diffserv mask remark diffserv dscp mask use l2 deny fwd1 fwd2 fwd3 fwd4 fwd5 fwd6 fwd7 fwd8...

Страница 683: ...ignores the ACL rule priority and DiffServ priority deny Blocks the packet fwd1 fwd2 fwd3 fwd4 fwd5 fwd6 fwd7 fwd8 The priority that you want to set The number following the fwd specifies the priority...

Страница 684: ...e l2 the switch ignores the ACL rule priority and DiffServ priority deny Blocks the packet fwd1 fwd2 fwd3 fwd4 fwd5 fwd6 fwd7 fwd8 The priority that you want to set The number following the fwd specif...

Страница 685: ...he destination IP address of the subnet that you want to assign a priority to dest wildcard The inverse of a network mask Enter a 32 bit number in four part dotted decimal format Place ones in the bit...

Страница 686: ...source IP address in the 10 10 80 subnet Mask the three least significant bits of the DSCP access list MyAccessList1 6 permit remark diffserv 5 mask 10 10 80 0 0 0 0 255 Use the layer 2 priority of t...

Страница 687: ...rt that is greater than 24 Destination IP address in the 6 6 subnet Destination port of 23 access list MyAccessList2 3 permit use priority 2 tcp 1 1 0 0 0 0 255 255 gt 24 6 6 0 0 0 0 255 255 eq 23 Rep...

Страница 688: ...0 0 0 255 6 6 6 0 0 0 0 255 lt 2 established Use the DSCP to classify all UDP traffic that has a Source IP address of 7 7 7 7 Destination IP address of 8 8 8 8 Destination port between 33 and 44 Mask...

Страница 689: ...of 512 for the default ACL rule For more information about how default ACL rules work see Classifying Traffic by Layer 3 or Layer 4 Characteristics earlier in this chapter Examples Table 25 17 Default...

Страница 690: ...d This threshold sets the size of bursts that is guaranteed transfer The switch uses queue 0 to forward protocol packets ARP VRRP OSPF and so on to the supervisor module If you enable policing on queu...

Страница 691: ...n Definition mod num The slot number of a module If you specify mod num policing is enabled for all ports on the module in the slot that you specify mod swport range The slot number of a module and ei...

Страница 692: ...ble the queue Or 220 Kbps to 1 5 Gbps For Fabric mode 2 enter 0 to disable the queue Or 270 Kbps to 1 5 Gbps normal burst This threshold sets the maximum size of burst that is guaranteed transfer The...

Страница 693: ...Argument or Option Definition mod num The slot number of a module If you specify mod num the switch displays the policing settings for all ports on the module in the slot that you specify mod swport...

Страница 694: ...ng feature WFQ How WFQ Works WFQ is the default queue servicing algorithm When a port is set to use the WFQ algorithm each queue Is assigned a weight increment This value never changes Maintains an ac...

Страница 695: ...es is increased by their weight increment Now queue 6 has an accumulated weight of 192 and queue 7 has an accumulated weight of 128 5 The switch services queue 6 because it has the higher accumulated...

Страница 696: ...ort or mirror port are dropped the mirror traffic may not match the source traffic CBWFQ The class based weighted fair queueing CBWFQ algorithm is a combination of the CBQ and WFQ algorithms CBWFQ mak...

Страница 697: ...e maximum size burst that is serviced by WFQ once the normal burst has been exceeded Bursts that are smaller than this size are serviced by WFQ Bursts that are larger than this size are dropped If you...

Страница 698: ...m The slot number of a module If you specify mod num all ports on the module are set to use WFQ mod swport range The slot number of a module and either a port number or a range of port numbers having...

Страница 699: ...t queue service 5 1 12 strict priority Table 25 22 Keywords Arguments and Options Keyword Argument or Option Definition mod num The slot number of a module If you specify mod num all ports on the modu...

Страница 700: ...he module are set to use CBQ mod swport range The slot number of a module and either a port number or a range of port numbers having the format Px Py For example To specify port 1 on the module in slo...

Страница 701: ...use CBQ mod swport range The slot number of a module and either a port number or a range of port numbers having the format Px Py For example To specify port 1 on the module in slot 3 enter 3 1 To spec...

Страница 702: ...r If you do not enter a multiple of four the switch rounds down the number that you enter to a multiple of four For example if you enter a normal burst size of 43 byes the switch converts the setting...

Страница 703: ...this size are serviced by WFQ Bursts that are larger than this size are dropped If you set this threshold to the same value as normal burst the maximum burst capability is disabled The maximum burst...

Страница 704: ...ice 3 1 Table 25 25 Keywords Arguments and Options Keyword Argument or Option Definition mod num The slot number of a module If you specify mod num the switch displays queue service settings for all p...

Страница 705: ...ess ports And Table 25 29 lists the statistics that are displayed for egress queues For information on how to display the QoS Statistics see Displaying QoS Statistics later in this chapter Queue Stati...

Страница 706: ...Frames Enqueued Above Threshold The total number of frames that were added to the queue when the number of frames in the queue exceeded the Threshold Full This number is cumulative since the last res...

Страница 707: ...is cumulative since the last reset of the statistics The total number of frames that were forwarded from the queue The total number of frames that were removed from the queue and Bytes Dequeued The t...

Страница 708: ...cs Frames Dropped Parity Error The number of frames that the port range dropped because they had a parity error This number is cumulative since the last reset of the statistics Frames Dropped Flood Ra...

Страница 709: ...cumulative since the last reset of the statistics Frames Dropped Parity Error The number of frames that the port dropped because they had a parity error This number is cumulative since the last reset...

Страница 710: ...ocation buffers The number of buffers that are allocated to a specific queue These buffers are dedicated to the queue and cannot be used by another queue Reserved Allocation bytes The number of bytes...

Страница 711: ...pecify mod swport range The slot number of a module and either a port number or a range of port numbers having the format Px Py For example To specify port 1 on the module in slot 3 enter 3 1 To speci...

Страница 712: ...mber of a module and either a port number or a range of port numbers having the format Px Py For example To specify port 1 on the module in slot 3 enter 3 1 To specify ports 1 through 5 on the module...

Страница 713: ...of packet buffers that are allocated to the egress queues on all ports on the module that you specify mod swport range The slot number of a module and either a port number or a range of port numbers h...

Страница 714: ...25 54 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0 Chapter 25...

Страница 715: ...witch from v6 0 application software to an earlier version of software you must initialize NVRAM nvram initialize command If you do not initialize NVRAM before downgrading the application software the...

Страница 716: ...counter any problem with the new downloaded software When upgrading the switch to v6 0 application software you must download v6 0 to the APP2 memory location If you download v6 0 to APP1 and store an...

Страница 717: ...se the following command show flash This command displays information about the application software that is currently stored in APP1 and APP2 Backing Up the Previous Configuration Before you upgrade...

Страница 718: ...page 3 In the Save Running Config to Startup Config field select Save 4 In the Copy Source field select Startup Config Note The Source File name may be left unspecified 5 In the Copy Destination field...

Страница 719: ...application software you must download v6 0 to the APP2 memory location If you download v6 0 to APP1 and store an earlier version software in APP2 the 6 0 software is corrupted Once v6 0 software is...

Страница 720: ...rget Section field select the memory location to which you want to download the new application software 6 In the Perform Update Now field select Update 7 In the Get Status of Most Recent Update field...

Страница 721: ...rtup use the following CLI command configure boot system flash app1 app2 cardapp1 cardapp2 Synchronizing the Active and Standby Supervisor Modules If the switch has a redundant supervisor module you m...

Страница 722: ...ules after upgrading the active supervisor to v6 0 from an earlier version of software you must manually reset the standby supervisor Resetting the Active Supervisor After setting the switch to load t...

Страница 723: ...upervisor The previous procedure Resetting the Active Supervisor forces the Active Supervisor to Standby mode and the Standby Supervisor to the Active Supervisor mode To recover back to the original s...

Страница 724: ...Bound to Hunt Group Ports If the switch has multiple VLANs statically bound to hunt group ports and you want to upgrade from application software earlier than v5 3 you must 1 Download the application...

Страница 725: ...nnect a console to the supervisor Module See Chapter 2 Initial Configuration of the Installation Guide for the Avaya P550R P580 P880 and P882 Multiservice Switches Software Version 5 3 3 Press and Hol...

Страница 726: ...s Restore default passwords ip IP Configuration manuf Get Set MAC address nvram Initializes NV RAM diags run upon reboot peek Read from memory ping Ping host tries delay poke Write to memory reset Res...

Страница 727: ...Ensure the ethernet console port is connected to the network for a TFTP transfer 2 Enter the following command to assign an IP address to the ethernet console port Boot ip address ip address ip mask 3...

Страница 728: ...Appendix B B 4 User Guide for the Avaya P580 and P882 Multiservice Switches v6 0...

Страница 729: ...ce switches MIBs are categorized as follows AppleTalk Application Software Management ATM Uplink Bridging DVMRP General Private MIBs IGMP IP IPX Monitoring SNMP AppleTalk Standard MIB rfc1243 mib Appl...

Страница 730: ...ing Tree Protocol DVMRP Private MIB cjndvmrp mib DVMRP MIB General Private MIBs avayagen mib Avaya top level MIB definitions aveisprod mib Product OIDs for the Avaya EIS division cjnroot mib Avaya P58...

Страница 731: ...l Private MIBs l3fwd mib Layer 3 switching group added to Prominet txt cjnipifmgmt mib IP Interface Management MIB cjnipv4 mib IP version 4 mib extensions cjnipv4serv mib IP version 4 services MIB cjn...

Страница 732: ...ort Copy Definitions genutil mib Avaya generic utilization MIB which includes CPU utilization and memory utilization cjnutil mib Avaya specific utilization mib which includes forwarding engine utiliza...

Страница 733: ...les VCCI Notice Class A Computing Device This equipment is in the Class A category information equipment to be used in commercial and or industrial areas and conforms to the standards set by the Volun...

Страница 734: ...ultiservice Switches v6 0 Avertissement Cet appareil est un appareil de Classe A Dans un environnement r sidentiel cet appareil peut provoquer des brouillages radio lectriques Dans ce cas il peut tre...

Страница 735: ...cess list rules IP interface 13 5 access lists IP interface 13 1 access rule index IP access list parameters 13 7 13 10 access type IP access list parameters 13 8 13 10 Accessing BOOT Mode B 1 active...

Страница 736: ...s 24 5 aged entries forwarding cache FE parameters 22 10 ageout persistence entry 9 18 aggregating bandwidth 6 12 aging Layer 3 cache configuration 22 3 aging interval multiplier IPX SAP interface par...

Страница 737: ...pleTalk NBP table parameters index 19 33 interface 19 33 name 19 33 type 19 33 zone 19 33 AppleTalk overview 19 1 AppleTalk protocols supported 19 2 AppleTalk route table viewing 19 27 AppleTalk route...

Страница 738: ...15 4 automatic client pruning automatic client pruning 20 7 automatic router pruning automatic router pruning 20 7 automatic session pruning automatic session pruning 20 7 automatic VLAN creation 6 4...

Страница 739: ...tegory 10 100 port parameter 8 27 gigabit port parameters 8 16 8 20 CGMP packet reception statistics CGMP snooping parameters 20 35 CGMP snooper configuring viewing configuring CGMP snooper 20 34 20 3...

Страница 740: ...guring the address table super age timer 9 9 Configuring the Age Timer and Super Age Timer Us ing the Web Agent 9 10 Configuring the IP Interface for the PPP Console 12 94 configuring the LGMP server...

Страница 741: ...utes AppleTalk route table statistics 19 29 DVMRP routing statistical parameters 12 66 IP routing table statistical parameters 12 52 current number of zones AppleTalk zone table statistics 19 33 curre...

Страница 742: ...aying global IP routing statistics 12 43 12 52 displaying IGMP global statistics 12 54 displaying IGMP local multicast forwarding cache 12 59 displaying IPX RIP interface statistics 10 1 displaying La...

Страница 743: ...2 63 neighbor DVMRP routers 12 64 network address 12 63 next probe message in sec 12 63 state 12 63 type 12 63 unrecognized packets received 12 63 DVMRP interface statistics examining 12 62 DVMRP mult...

Страница 744: ...e LGMP Server 20 22 enabling the rate limit mode Fast Ethernet module 8 26 enabling VRRP 12 75 encapsulation type AppleTalk interface parameters 19 6 end one time summer time hours configuration 3 9 s...

Страница 745: ...Ethernet module configuring pace priority mode 8 26 rate limit rate 8 26 Fast Ethernet Modules 1 11 fault protocol event log settings 21 8 files copying 2 40 startup txt 2 36 filter suppress IPX RIP...

Страница 746: ...e ports 8 13 8 17 8 18 8 22 8 28 gigabit module configuring flow control mode 8 15 8 19 8 25 port name 8 14 8 18 8 23 ports 8 14 8 18 8 23 service port 8 15 8 19 8 24 user port 8 15 8 19 8 24 gigabit...

Страница 747: ...n parameters 8 33 switch port parameter 8 42 hunt group members viewing details 6 25 hunt groups 1 17 aggregate bandwidth 6 12 before configuring 6 12 I ICMP in address mask reply IP routing global st...

Страница 748: ...t groups 12 57 query messages received 12 57 query messages transmitted 12 57 robustness variable 12 56 state 12 56 this router is group membership querier 12 56 unknown messages received 12 57 IGMP i...

Страница 749: ...ce is pruned DVMRP downstream link parameters 12 74 upstream prune information 12 73 interface metric DVMRP interface parameters 12 42 interface scope DVMRP interface parameters 12 42 interface type D...

Страница 750: ...uting 12 13 IP source routing 12 13 limit proxy ARP to same network 12 13 local routes 12 14 low preference static routes 12 14 maximum number of ARP cache entries 12 14 maximum number of routes 12 13...

Страница 751: ...46 IP fragmentation OKs 12 46 IP in address errors 12 45 IP in delivers 12 45 IP in discards 12 45 IP in header errors 12 44 IP in receives 12 44 IP in unknown protocols 12 45 IP multicast forward dat...

Страница 752: ...ies 16 18 IPX out ping requests 16 18 IPX out requests 16 18 maximum number of services 16 5 IPX in checksum errors IPX global parameters 16 18 IPX in delivery IPX global parameters 16 17 IPX in disca...

Страница 753: ...dates 18 3 use interpacket gap 18 2 use max packet size 18 2 IPX SAP interface statistical parameters bad packets received 17 8 18 12 GNS requests received 18 12 GNS responses sent 18 12 interface 17...

Страница 754: ...2 5 L3 total T2 frame forwarding statistical parameters 22 5 LAN router configuration 12 4 last change LDAP statistics 12 92 Layer 2 event log 21 3 redundant switch matrix and controller module 1 18 s...

Страница 755: ...transmission statistics LGMP server display per VLAN parameters 20 27 LGMP server 20 25 LGMP server configuration 20 22 20 25 20 26 20 28 LGMP server configuration parameters enable state 20 24 intel...

Страница 756: ...bal configuration parameters 12 14 maximum number of paths OSPF global configuration parameters 15 4 maximum number of routes DVMRP parameters 12 40 IP global configuration parameters 12 13 maximum nu...

Страница 757: ...lter parameters 18 5 IPX service table parameter 16 23 spanning tree bridge port parameters 7 15 switch port parameter 8 42 NBP filter adding interfaces 19 18 19 19 19 23 deleting interfaces 19 18 19...

Страница 758: ...rameter 16 14 node address IPX interface 16 8 non tagged access mode definition 1 10 non triggered updates sent IPX SAP interface statistical parameters 17 8 18 12 RIP statistical parameters 14 9 14 1...

Страница 759: ...D 15 26 checksum 15 26 detail link 15 26 LS ID 15 26 router ID 15 26 sequence 15 26 type 15 26 OSPF link state database search parameters area ID 15 25 router ID 15 25 type 15 25 OSPF neighbors parame...

Страница 760: ...ing statistical parameters 22 5 percent slow path frame forwarding statistical parameters 22 5 performing a system reset 3 16 periodic update interval IPX SAP interface parameters 18 2 permanent inval...

Страница 761: ...er management table parameters 24 6 probe message received DVMRP global statistical parameters 12 61 probe messages transmitted DVMRP global statistical parameters 12 62 process leave packets IGMP int...

Страница 762: ...t A 8 resource event class parameters 21 5 retransmit interval OSPF interface parameters 15 10 OSPF virtual link parameters 15 13 retry number RADIUS configuration parameters 4 26 retry time RADIUS co...

Страница 763: ...router 12 70 router supports prune function DVMRP downstream dependent router 12 70 routing hardware requirements 12 3 16 3 Layer 2 overview 1 22 Layer 3 learned overview 1 22 Layer 3 not learned over...

Страница 764: ...rameter 9 12 SNMP Administration 2 25 2 28 SNTP enabling 3 3 3 4 socket IPX service table parameter 16 24 IPX static service parameter 16 14 source IP routing table search parameters 12 50 IPX route t...

Страница 765: ...r display per VLAN parameters 20 27 OSPF link parameters 15 21 OSPF neighbors parameters 15 22 RIP statistical parameters 14 11 spanning tree bridge port parameters 7 16 VRRP statistical parameters 12...

Страница 766: ...erforming 3 16 T TblInst address forwarding table parameters 9 17 TCP established IP access list parameters 13 11 TCP UDP destination port IP access list parameters 13 11 TCP UDP source port IP access...

Страница 767: ...table parameter 16 24 IPX static service parameter 16 14 LSA detail 15 27 multicast session parameters 20 12 OSPF link parameters 15 21 OSPF link state database parameter 15 26 OSPF link state databa...

Страница 768: ...64 viewing DVMRP upstream routers 12 68 viewing Ethernet statistics 23 1 23 7 viewing event and shutdown logs 21 10 21 12 viewing event statistics 21 7 21 10 21 12 viewing IGMP interface statistics 1...

Страница 769: ...r owner override 12 81 advertisement timer 12 80 auth key 12 80 interface 12 79 IP address 12 79 priority 12 79 VR ID 12 79 VRRP overview configuring 12 75 VRRP router creating 12 77 VRRP statistical...

Страница 770: ...istics 19 25 Zip Reply Rx AppleTalk global statistics 19 26 Zip Reply Tx AppleTalk global statistics 19 26 zone AppleTalk interface parameters 19 6 AppleTalk NBP table parameters 19 33 AppleTalk stati...

Отзывы:

Нет отзывов