background image

Additional Features

Overview of Additional Features

5-6

SpectraComm ES Ethernet Switch 

076R204-000

Installation and Operation Manual

Issue 2

Ethernet Security

Assuming that password-protected hosts and network equipment are present in the customer's 
network, SCES can provide the additional security needed to enhance network protection. When 
configured for ethernet security, the protected ports will detect access attempts by an illegal user, 
or by a hacker attempting to cable into the port. 

Each SC-ES port is configured independently for the desired ethernet protection options:
SCES ports configured for normal mode will have no additional security; ports configured for Port-
based security will be disabled if ever disconnected; ports configured for MAC-based security will 
be disabled or filtered if an illegal address is detected. Port- and Mac-based security modes and 
options described in the paragraphs below.

For help in setting ethernet security parameters, type:

configure security ?

To show the status of ethernet security, type:

show security

Figure 5-4

Help and Status Displays for Security (Shown SC-ES 9-Port Switch)

Содержание SpectraComm ES

Страница 1: ...6SHFWUD RPP 6 Ethernet Switch Installation Operation Manual 076R204 000 Issue 2 June 2003...

Страница 2: ...ir respective companies or organizations Documentation Revision History GDC P N 076R204 000 Related Publications REV is the hardware revision 000 001 etc VREF is the most current software version V400...

Страница 3: ...t 1 4 SC ES Interfaces Connectivity 1 4 Port Statistics 1 5 Shelf Enclosure Options 1 6 SC ES Applications 1 7 Simple Network Application 1 7 Large Network Applications 1 8 Technical Specifications 1...

Страница 4: ...sion 4 2 Command Line Web Screen 4 3 Chapter 5 Additional Features Overview of Additional Features 5 1 Network Time 5 1 TACACS Authentication Protocol 5 2 Monitoring Features 5 5 Ethernet Security 5 6...

Страница 5: ...0271 Toll Free 1 800 523 1737 Manual Organization This manual is divided into the following chapters When using the digital version of this manual click on any link shown in blue text to jump to that...

Страница 6: ...he network interface Never install telephone wiring during an electrical storm Antistatic Precautions This product may contain static sensitive devices that are easily damaged by electrostatic dischar...

Страница 7: ...ause harmful interference and 2 This device must accept any interference received including interference that may cause undesired operation Electromagnetic Compatibility This Class A digital apparatus...

Страница 8: ...s Factory Direct Support Repair GDC provides regular and warranty repair services through Factory Direct Support Repair at its U S headquarters in Naugatuck Connecticut This customer support organizat...

Страница 9: ...s that enhance the security of the network This manual describes the SpectraComm Ethernet Switches the SC ES 9 Port card and the SC ES 18 Port card Both cards operate in the same manner except where n...

Страница 10: ...connected to the SC ES s 10 100Base T LAN ports providing the functionality that is usually associated only with high end fully managed switches In the SC ES 9 Port card there are eight Front Panel po...

Страница 11: ...ddresses and builds connections between network elements Front panel LED indicator for each ethernet port indicates link synchronization traffic forwarding and speed Secure management access to SC ES...

Страница 12: ...ent software applications which use HPOV APIs Application Programmer Interfaces to integrate with HP OpenView Windows and other network management applications This release of the SC ES supports TEAM...

Страница 13: ...ong RX Alignment Errors Counts errored packets between 64 and 1522 non integer number of bytes RX FCS Errors Counts packets with a bad Frame Check Sequence RX Good Octets Counts total good packets rec...

Страница 14: ...ny shelf enclosure system refer to its manual as listed in the cover section of this manual Figure 1 1 Shelf Enclosure Configurations GPS 11E POWER SUPPLY POWER ON FAIL POWER ON OFF 0 GPS 11E POWER SU...

Страница 15: ...d providing faster response times Using ethernet switch technology SC ES supports cabling distances of up to 100 meters by eliminating the propagation delays normally found with hubs repeaters Simple...

Страница 16: ...kewise SC IP ports can be used to cascade routers together Figure 1 3 SC ES 18 Port Switch in a Large Network Note For clarity one SC ES card and two SC IP cards are shown in Figure 1 3 s Central Offi...

Страница 17: ...er to the appropriate SpectraComm Shelf Manual Fusing Refer to the appropriate SpectraComm Shelf Manual 9 Port Power Dissipation 6 Watts maximum 18 Port Power Dissipation 9 Watts maximum Environment N...

Страница 18: ...ompliant with GR 63 Core Section 4 3 for Category A and Category B Containers Safety UL 1950 Issue 3 NEBS Level III Compliant with GR 1089 Core GR 63 Core GR 78 Core EMI FCC Part 15 Class A Telco FCC...

Страница 19: ...ard making power connections performing pre operational checks and making system connections If this is your first installation of the SC ES be sure to read the previous sections of this manual to und...

Страница 20: ...inch standard with mounting hardware one power supply and one power supply blank front panel one Zone 1 connector panels one 16 slot DB25 Zone 3 connector panel Note For more information on the Spectr...

Страница 21: ...xport Shelf 220 240 Vac GPS 11E Power Supply Z1 S 16DRJ45 8 Slot Dual RJ45 2 Z3 S 16DB25 16 Slot DB25 Blank Panel Power Supply 010M056 001 010B151 001 035P034 002 010C342 001 010C339 001 010D727 001 M...

Страница 22: ...ES is now ready for cable connections and configuration to suit your network requirements Shelf and Card Connections The following paragraphs describe cables connectors and pinouts for each Front Pan...

Страница 23: ...13 J10 J9 J8 J7 J6 J5 J2 J1 J4 J3 J51 J50 SHELF ADDRESS JUMPER A D CONNECTOR DETAILS PORT NOT USED B A REAR PORT 9 B D B A SC ES 9 PORT SHELF CONNECTIONS PIN 1 SC ES 9 PORT FRONT PANEL PIN 1 CRAFT POR...

Страница 24: ...1 PIN 8 PIN 1 J32 J48 J31 J47 J30 J46 J29 J45 J28 J44 J27 J43 J26 J42 J25 J41 J24 J40 J23 J39 J22 J38 J21 J37 J20 J36 J19 J35 J18 J34 J17 J33 J52 J14 J12 J11 J16 J15 J13 J10 J9 J8 J7 J6 J5 J2 J1 J4 J...

Страница 25: ...turned off and the MDIX option is set to No Force When SC ES is set to Auto MDI MDIX the actual Tx and Rx pinouts depend on the result of Auto MDI MDIX negotiation Craft Port Interface D in Figure 2 1...

Страница 26: ...Installation Connections Shelf and Card Connections 2 8 SpectraComm Ethernet Switch 076R204 000 Installation and Operation Manual Issue 2...

Страница 27: ...mmand help by using the character in the CLI command string Type at the command prompt to view a description of IP and Utility commands shown below If you are in User mode some commands shown below wi...

Страница 28: ...en the port receives flow control frames it sets the flow control pause time for transmissions of frames Returns to normal when the instigating condition subsides Auto MDIX Configures each port as ena...

Страница 29: ...s V1 8 2 Use at any time on the command line to get help SC ES Note For online help screens describing all CLI options press Note that the CLI options for configuring the SC ES are only available when...

Страница 30: ...IN mode the prompt string ends in Commands in ADMIN mode allow SUPERVISOR access plus the ability to set up and modify user accounts for usernames and passwords ADMIN mode also allows authentication f...

Страница 31: ...xt sensitive online help 1 Configure the HTTP Service to enable access by typing services http enable 2 Configure the SNMP Service to enable access by typing services snmp enable 3 If desired enable t...

Страница 32: ...s half port n or all 11 Configure each enabled port for MDI MDIX by typing configure ports mdix auto port n or all Note Auto MDIX requires that Auto Negotiation be enabled Refer to Table 3 2 to unders...

Страница 33: ...al or TACACS A procedure for configuring the Login banner is provided after the figure For help in setting up the Login banner type configure banner To show current banner if any type show banner Figu...

Страница 34: ...To view your new login banner type show banner 8 To modify an existing login banner one line at a time type configure banner modify your revised text string esc char where is the line number you inte...

Страница 35: ...nt Requirements 1 Minimum browser requirements are as follows Netscape Communicator Versions 4 5 through 5 x are supported Internet Explorer 5 0 or higher Cookies must be enabled Note At the terminal...

Страница 36: ...access privileges as assigned by an Administrator A valid password can be up to 20 alphanumeric characters If three consecutive invalid passwords are entered a temporary lock out will occur Access Mo...

Страница 37: ...make a Telnet or terminal connection in ADMIN mode to access execute those commands Table 4 1 Command Line Web Screen Field Description clear Displays a selectable list of sub commands that will clea...

Страница 38: ...The Web Interface Introduction to SC ES Web Management 4 4 SpectraComm Ethernet Switch 076R204 000 Installation and Operation Manual Issue 2...

Страница 39: ...SC ES will receive and use Greenwich Mean Time GMT to timestamp the SNMP traps System Messages and Alarms when they are generated When neither SNTP nor TP is configured the SC ES will use a relative...

Страница 40: ...and the TACACS server When TACACS is enabled the TACACS server becomes the central point for managing network wide usernames and passwords This is especially useful when provisioning SC ES devices in...

Страница 41: ...then press Enter 3 Configure TACACS client on the SC ES by typing the following CLI commands Actual values shown are SC ES defaults Per server key and per server timeout entries are optional configure...

Страница 42: ...uthentication configuration values or enable and configure TACACS authentication ADMIN access is required In the event of an incorrectly configured key or missing ADMIN or SUPERVISOR entries at the TA...

Страница 43: ...ive Systerm Up Time default or with GMT if so configured refer to Monitoring Features in this chapter To show the last 100 logged events type show log sysmsg To clear the log type clear log sysmsg Fig...

Страница 44: ...empting to cable into the port Each SC ES port is configured independently for the desired ethernet protection options SCES ports configured for normal mode will have no additional security ports conf...

Страница 45: ...inute timeout Permanent Option The port will be disabled permanently until manually re enabled by an authorized administrator If a power cycle occurs after a port disable the port will come up disable...

Страница 46: ...option causes SC ES to block the workstations with illegal addresses from receiving data The Timed or Permanent options cause SC ES to disable the port with an illegal MAC address thereby blocking at...

Страница 47: ...alysis problem solving and security monitoring Figure 5 6 Figure 5 7 and Figure 5 8 show typical installations of SCES with port mirroring in use and with some ports configured for Ingress some for Eg...

Страница 48: ...should be down sampled before it is copied to the capture port Figure 5 6 Example Ingress Mirroring Egress Mirroring Figure 5 7 demonstrates Egress Mirroring with an Analyzer or Probe device at the c...

Страница 49: ...ss mirroring port7 for egress mirroring and port8 for both ingress and egress mirroring Situation A Port1 port7 port8 and the capture port are all set for 100Mbps full duplex mode The user should set...

Страница 50: ...y typing configure mirroring ingress port n 5 Configure the port s that will copy only egress traffic to the capture port by typing configure mirroring egress port n 6 Configure the port s that will c...

Страница 51: ...trap success in the event of network outages Once the network is restored and IP connectivity is verified the queued trap is sent Each SNMP trap is time stamped with a relative System Up Time default...

Страница 52: ...Additional Features Overview of Additional Features 5 14 SpectraComm ES Ethernet Switch 076R204 000 Installation and Operation Manual Issue 2...

Страница 53: ...pervisor cannot be used as username logins They are only used to enable the supervisor admin mode The only default username login is defined as gdc with the password gdc This username may be deleted o...

Страница 54: ...sirable prior to downloading a batch file configuration To accomplish this type default all at the command prompt or add the default all command uncommented at the start of your configuration batch fi...

Страница 55: ...line the screen displays all the commands available along with a one line description of each command Demo_unit _______________________SpectraComm ES Commands___________________________ clear Reset f...

Страница 56: ...ent parameters ports Configure port parameters prompt Configure custom prompt requires 1 parameter s snmp Configure SNMP Server parameters switch Configure ethernet switch parameters When you type con...

Страница 57: ...and Use the CTRL C character to abort a command at any time and return to the main prompt Command Short Cuts You only have to type the minimum number of characters needed to identify a command or subc...

Страница 58: ...atch file since batch script files use the configure command You must be in ADMIN mode if the batch script file contains user accounts configuration The downloaded batch script file will reside in the...

Страница 59: ...100 compatible terminal to the CTRL port to check the IP Address and mask in the SC ES and ensure the values is correct 2 Perform ping to determine whether the SC ES is communicating on the network WE...

Страница 60: ...Application Guidelines Troubleshooting Communications Problems A 8 SpectraComm Ethernet Switch 076R204 000 Installation and Operation Manual Issue 2...

Страница 61: ......

Страница 62: ......

Отзывы: