SMC Networks 6709L2, Management Manual

Page 1: ...Gbps aggregate bandwidth Spanning Tree Protocol Up to four port trunks static or dynamic Port mirroring for non intrusive analysis QoS support with two priority queues Full support for VLANs with GVRP IP multicasting with IGMP snooping Security filtering based on MAC addresses Manageable via console Web SNMP RMON Management Guide SMC6709L2 ...

Page 2: ......

Page 3: ...38 Tesla Irvine CA 92618 Phone 949 679 8000 TigerSwitch 10 100 Management Guide From SMC s Tiger line of feature rich workgroup LAN solutions May 2003 Pub ...

Page 4: ...se No license is granted by implication or otherwise under any patent or patent rights of SMC SMC reserves the right to change specifications at any time without notice Copyright 2003 by 38 Tesla Irvine CA 92618 All rights reserved Printed in Taiwan Trademarks SMC is a registered trademark and TigerSwitch is a trademark of SMC Networks Inc Other product and company names are trademarks or register...

Page 5: ... 5 Enabling SNMP Management Access 2 7 Community Strings 2 7 3 Configuring the Switch 3 1 Using the Web Interface 3 1 Navigating the Web Browser Interface 3 2 Home Page 3 2 Configuration Options 3 3 Panel Display 3 3 Main Menu 3 4 Basic System Information 3 6 Global Switch Settings 3 6 Class of Service Configuration 3 8 Console Port Settings 3 9 Port Configuration 3 10 Displaying Connection Status...

Page 6: ... Tree Protocol Configuration 3 34 Enabling STP 3 34 Configuring Global STP Settings 3 34 Displaying Information About the Root Bridge 3 36 Configuring Port STP Settings 3 36 Displaying Port Status for STP 3 38 Port Mirroring 3 39 Simple Network Management Protocol 3 40 Configuring System Information 3 40 Setting Community Access Strings 3 40 Specifying Trap Managers 3 41 User Authentication 3 42 F...

Page 7: ... 22 Configuring Queue Priorities 4 24 MAC Address Configuration Menu 4 26 Setting Static Addresses 4 26 Configuring Address Filtering 4 28 Miscellaneous Configuration Menu 4 29 Configuring Port Security 4 30 Configuring Address Aging 4 31 Configuring Broadcast Storm Control 4 32 Configuring the Transmit Delay Bound 4 33 Protocol Related Configuration Menu 4 34 Spanning Tree Protocol Menu 4 35 Enab...

Page 8: ... Getting Help on Commands 5 2 Command Groups 5 3 System Configuration advance 5 4 Port Configuration port 5 5 VLAN Configuration vlan 5 6 Supported Protocols 5 7 Filter Database Configuration fdb 5 8 Trunk Configuration trkgrp 5 9 Spanning Tree Protocol Configuration stp 5 10 Quality of Service Configuration qos 5 11 IGMP Snooping Configuration igmp 5 11 Console Configuration console 5 12 A Softwa...

Page 9: ...iption Authentication Console Telnet Web User name password SNMP Community strings Configuration Backup Restore Backup to TFTP server Port Configuration Speed duplex mode and flow control Port Mirroring One or more ports mirrored to single analysis port Static Address Up to 6K MAC addresses in the forwarding table Trunks Static trunks or dynamic Link Aggregation Control Protocol Spanning Tree Prot...

Page 10: ...waiting transmission on congested networks Spanning Tree Protocol The switch supports IEEE 802 1D Spanning Tree Protocol This protocol adds a level of fault tolerance by allowing two or more redundant connections to be created between a pair of LAN segments When there are multiple physical paths between segments the protocol will choose a single path and disable all others to ensure that only one ...

Page 11: ...up link ports per trunk Broadcast Suppression Broadcast suppression prevents broadcast traffic from overwhelming the network When enabled on a port the level of broadcast traffic passing through the port is restricted If broadcast traffic rises above a pre defined threshold it will be throttled until the level falls back beneath the threshold Flow Control Flow control reduces traffic during period...

Page 12: ...able lists some of the basic system defaults Function Parameter Default IP Settings IP Address 0 0 0 0 Subnet Mask 0 0 0 0 Default Gateway 0 0 0 0 SNMP Community Strings public read only Traps Authentication traps Link up down events Security Console Telnet Web Username admin Password admin Address Learning Enabled all ports Console Port Connection Baud Rate 9600 Data bits 8 Stop bits 1 Parity non...

Page 13: ...ddresses none Filter addresses none Multicast Filtering IGMP Snooping Disabled IGMP Query Auto negotiation Virtual LANs VLAN Status Disabled Default VLAN 1 PVID 1 Ingress Filtering Rule 1 Tag must match PVID Enabled Ingress Filtering Rule 2 Acceptable frame types All GVRP Disabled Class of Service Weighted Round Robin Weight 2 high 1 low Queues 7 4 high 3 0 low Broadcast Storm Protection Status Di...

Page 14: ...INTRODUCTION 1 6 ...

Page 15: ...t allows you to configure switch parameters monitor port connections and display statistics using a standard Web browser such as Netscape Navigator version 6 2 and higher or Microsoft IE version 5 0 and higher The switch s Web management interface can be accessed from any computer attached to the network The switch s management agent is based on SNMP Simple Network Management Protocol This SNMP ag...

Page 16: ...ic or LACP trunks Enable port mirroring Prevent broadcast storms by limiting bandwidth for broadcast traffic Display system information and statistics Required Connections The switch provides an RS 232 serial port that enables a connection to a PC or terminal for monitoring and configuring the switch A null modem console cable is provided with the switch Attach a VT100 compatible terminal or a PC ...

Page 17: ...address for this switch is unassigned by default To manually configure this address to one that matches your specific network requirements see Setting an IP Address on page 2 5 After configuring the switch s IP parameters you can access the onboard configuration program from anywhere within the attached network The onboard configuration program can be accessed using Telnet from any computer attach...

Page 18: ... Note If this is your first time to log into the CLI program you should define a new user name and password record them and put them in a safe place A user name or password can consist of up to 15 alphanumeric characters and are not case sensitive To prevent unauthorized access to the switch set the user name and password as follows 1 Open the console interface with the default user name and passw...

Page 19: ...tch You may also need to specify a default gateway that resides between this device and management stations that exist on another network segment Valid IP addresses consist of four decimal numbers 0 to 255 separated by periods Anything outside this format will not be accepted by the configuration program Note The IP address for this switch is unassigned by default Before you can assign an IP addre...

Page 20: ...ach item Press Ctrl A to return to the action bar at the bottom of the screen Select Save and press any key to continue The IP addresses shown below are merely examples 3 Navigate back to the Main Menu go to Reboot Switch menu select the Restart command and press Enter TigerSwitch 10 100 IP Configuration IP Address 10 1 0 4 Subnet Mask 255 255 255 0 Gateway 10 1 0 253 actions Edit Save Quit Select...

Page 21: ...ave occurred Community Strings Community strings are used to control management access to SNMP stations as well as to authorize SNMP stations to receive trap messages from the switch You therefore need to assign community strings to specified users or user groups and set the access level The default string is public with read only access Authorized management stations are only able to retrieve MIB...

Page 22: ...to the action bar at the bottom of the screen Select Save and press any key to continue The community string shown below is an example TigerSwitch 10 100 Add SNMP Community Community Name private Write Access Unrestricted actions Edit Save Quit Select the action menu Tab Next Item BackSpace Previous Item Space Toggle Ctrl A Action menu ...

Page 23: ...e console menu refer to Chapter 4 Console Interface Prior to accessing the switch from a Web browser be sure you have first performed the following tasks 1 Configure the switch with a valid IP address subnet mask and default gateway using an out of band serial connection See Setting an IP Address on page 2 5 2 Set a user name and password Access to the Web agent is controlled by the same user name...

Page 24: ...eters and statistics The default user name and password for the administrator is admin Home Page When your Web browser connects with the switch s Web agent the home page is displayed as shown below The interface displays the Main Menu on the left side of the screen and the selected menu on the right side The Main Menu links are used to navigate to other menus and display configuration parameters a...

Page 25: ... setting for item Check for newer versions of stored pages should be Every visit to the page 2 When using Internet Explorer 5 0 you may have to manually refresh the screen after making configuration changes by pressing the browser s refresh button Panel Display The Web agent displays an image of the switch s ports indicating whether each link is up or down Clicking on the image of a port opens the...

Page 26: ...s and global settings for STP IGMP and VLANs 3 6 Console Port Info Displays settings for the console port 3 9 Port Controls 3 10 Port Controls Configures connection settings including speed duplex mode and flow control 3 11 Port Status Displays the current connection settings 3 10 Trunking Aggregator Setting Configures static or dynamic trunks 3 17 Aggregator Information Shows trunks and associate...

Page 27: ...3 40 System Options Provides basic system description including contact information 3 40 Community Strings Configures community strings 3 40 Trap Managers Sets trap management stations 3 41 Security Manager Assigns a user name and password 3 42 TFTP Update Firmware Downloads a new code image 3 43 Configuration Backup 3 44 TFTP Restore Configuration Restores configuration settings 3 44 TFTP Backup ...

Page 28: ...n board Default config value version Default configuration version Web Click Switch Settings Basic Global Switch Settings Use the Switch Settings Advanced menu to configure address aging packet transmit delay and broadcast storm control Command Usage Aging Time The switch stores the addresses of known devices This information is used to route traffic directly between the inbound and outbound ports...

Page 29: ...ned entry is discarded if no new traffic is seen from that address Range 300 765 seconds Default 300 seconds Max bridge transmit delay bound control Limits the time packets can be queued in the switch If enabled packets queued beyond the specified time will be dropped Range OFF 1 2 4 seconds Default OFF Broadcast Storm Filter Mode The percentage of a port s total bandwidth used by broadcast traffi...

Page 30: ...ghted Round Robin Sets the preference given to packets in the high priority queue This specifies the number of high priority packets sent before one low priority packet is sent Range 1 7 Default 2 Enable Delay Bound Limits the queuing time for low priority packets Any low priority packets that exceed the delay bound will be sent Note that the Max bridge transmit delay bound control must be enabled...

Page 31: ...arameters via the Console Information page and adjust the settings for the PC or terminal connected to this port See Required Connections on page 2 2 for information on how to connect to the console port Field Attributes Baudrate The console port s baud rate Data Bits Number of data bits per character Parity Check Shows if a parity bit is set to none odd or even Stop Bits Number of the stop bits t...

Page 32: ...nder Configuring Interface Connections on page 3 11 2 The Config field shows the configured settings and the Actual field shows the current operational status Field Attributes State Shows if the port is enabled or disabled Link Status Indicates if the link is Up or Down Auto negotiation Shows if auto negotiation is enabled or disabled Speed Status Shows the port speed Duplex Status Shows the port ...

Page 33: ... manual selection of duplex mode Flow Control Allows manual selection of flow control Flow control can eliminate frame loss by blocking traffic from end stations or segments connected directly to the switch when its buffers fill When enabled back pressure is used for half duplex operation and IEEE 802 3x for full duplex operation Avoid using flow control on a port connected to a hub unless it is a...

Page 34: ...onal Link Indicates if the link is Up or Down TxGoodPkt The total number of packets transmitted out of the interface including framing characters TxBadPkt The number of outbound packets that could not be transmitted because of errors RxGoodPkt The total number of packets received on the interface including framing characters RxBadPkt The number of inbound packets that contained errors preventing t...

Page 35: ...een two devices You can create up to four trunks at a time Command Usage Besides balancing the load across each port in the trunk the other ports provide redundancy by taking over the load if a port in the trunk fails However before making any physical connections between devices use the Web interface to specify the trunk on the devices at both ends When using a port trunk take note of the followi...

Page 36: ...loop in the network be sure that you add a static trunk via the Web interface before connecting the ports and also disconnect ports before removing a static trunk via the Web interface When using static trunks you may not be able to link to switches of different types depending on the manufacturer s implementation Field Attributes Aggregator Setting page System Priority Not applicable for static t...

Page 37: ...roup ID and click the Get button to display the settings for the specified group Set LACP to Disable Use the Add and Remove buttons to assign port members and then click Apply Click Administrator Trunking Aggregator Information to display currently configured static trunks and group members ...

Page 38: ...members at one or both ends of the link are set to actively initiate a link the trunk will be activated automatically If the number of active ports i e Work Ports is less than the number of assigned port all the other ports will be placed in a standby mode Should one link in the trunk fail one of the standby ports will automatically be activated to replace it All ports on both ends of an LACP trun...

Page 39: ...f active ports can also be specified in this field i e using the text box to the right If the number of active ports is less than the number of assigned members excess ports will be placed in standby mode and only brought into service if an active link fails Web Click Administrator Trunking Aggregator Setting Set the System Priority used to select the device that initiates a link Select the group ...

Page 40: ...m Priority on the Aggregator Setting page MAC The physical address of the devices at both ends of the link Port No Active port members Other ports may be in standby mode Key Only one dynamic trunk can be activated between two devices so a key is sent to the partner device to uniquely identify each trunk A trunk can only be formed if the devices at both ends of a link use the same key A key is auto...

Page 41: ...TRUNK CONFIGURATION 3 19 Web Click Administrator Trunking Aggregator Information to display currently configured trunks and group members ...

Page 42: ...Port Lists all ports that can be configured as LACP trunk members LACP State Activity When set to Active a port can automatically initiate a trunk if an LACP partner is detected at the other end of the link Web Click Administrator Trunking State Activity Specify the ports which can actively initiate an LACP trunk and click Apply ...

Page 43: ... support real time applications such as video conferencing or streaming audio A multicast server does not have to establish a separate connection with each client It merely broadcasts its service to the network and any hosts that want to receive the multicast register with their local multicast switch router Although this approach reduces the network overhead required by a multicast server the bro...

Page 44: ...ticast traffic This is also referred to as IGMP Snooping Default Enabled IGMP Query Mode When enabled or selected as the Querier through auto negotiation the switch will serve as the local Querier which is responsible for asking hosts if they want to receive multicast traffic This is also referred to as IGMP Query Note that using the Auto option generates less protocol traffic compared to the Enab...

Page 45: ...FORWARDING AND FILTERING 3 23 Click Administrator Filtering Database IGMP Snooping ...

Page 46: ...regardless of whether the device is physically connected to the switch This saves the switch from having to re learn a device s MAC address when the disconnected or powered off device becomes active on the network again Field Attributes MAC Address Physical address of a device mapped to this interface Port Num Port associated with the device assigned a static address Vlan ID ID of configured VLAN ...

Page 47: ...ly learn the source MAC address for frames received on an interface for an initial training period and then enable port security to stop address learning Be sure you enable the learning function long enough to ensure that all valid members have been registered on the selected interface To add new members at a later time you can manually add static addresses or turn off port security to reenable th...

Page 48: ...ress and associated VLAN if tagged VLANs are enabled Field Attributes MAC Address Source MAC address Vlan ID ID of configured VLAN 1 4094 This option is only available if IEEE 802 1Q tagged VLANs are enabled page 3 29 Web Click Administrator Filtering Database MAC Filtering Enter a MAC address and associated VLAN then click Apply ...

Page 49: ... efficiency by reducing broadcast traffic and allow you to make network changes without having to update IP addresses or IP subnets VLANs provide a high level of network security since traffic must pass through a Layer 3 switch to reach a different VLAN This switch supports the following VLAN features Port based VLANs for isolating user groups or subnets Protocol based VLANs for isolating specific...

Page 50: ... designated for the same VLAN Port based VLANs can be used to manually isolate user groups or subnets However you should use IEEE 802 3 tagged VLANs with GVRP whenever possible to fully automate VLAN registration Web Click Administrator Switch Settings Advanced Set VLAN Operation Mode to Port Based then click Apply Click Administrator VLAN Configuration Click Add to create a group Enter the VLAN N...

Page 51: ... assign ports on the other VLAN aware network devices along the path that will carry this traffic to the same VLAN s either manually or dynamically using GVRP However if you want a port on this switch to participate in one or more VLANs but none of the intermediate network devices nor the host at the other end of the connection supports VLANs then you should add this port to the VLAN as an untagge...

Page 52: ...LANs and forward the message to all other ports When the message arrives at another switch that supports GVRP it will also place the receiving port in the specified VLANs and pass the message on to all other ports VLAN requirements are propagated in this way throughout the network This allows GVRP compliant devices to be automatically configured for VLAN groups based solely on endstation requests ...

Page 53: ...de to 802 1Q with or without GVRP then click Apply Click Administrator VLAN Configuration Basic Click Add to create a group Enter the VLAN Name 1 15 characters and Group ID 2 4094 Select a protocol type if you want to create a protocol based VLAN Use the Add or Remove buttons to configure port members then click Next ...

Page 54: ...rt in their member set will be discarded at the ingress port Default Enabled Ingress filtering only affects tagged frames If enabled the port will discard incoming frames tagged for VLANs which do not include this ingress port in their member set If disabled the port will accept any VLAN tagged frame if the tag matches a VLAN known to the switch Ingress filtering does not affect VLAN independent B...

Page 55: ...VLAN CONFIGURATION 3 33 Web Click Administrator VLAN Configuration Port VID Set the PVID and Ingress Filtering rules then click Apply ...

Page 56: ...ring Global STP Settings Global settings apply to the entire switch Field Attributes Priority Bridge priority is used in selecting the root device root port and designated port The device with the highest priority becomes the STA root device However if all devices have the same priority the device with the lowest MAC address will then become the root device Note that lower numeric values indicate ...

Page 57: ...fault 2 Minimum 1 Maximum The lower of 10 or Max Message Age 2 1 Forward Delay Time The maximum time in seconds the root device will wait before changing states i e listening to learning to forwarding This delay is required because every device must receive information about topology changes before it starts to forward frames In addition each port needs time to listen for conflicting information t...

Page 58: ...root device MAC Address MAC address of the root device Root Path Cost The path cost from the root port on this switch to the root device Root Port The number of the port on this switch that is closest to the root This switch communicates with the root device through this port If there is no root port then this switch has been accepted as the root device of the Spanning Tree network See the precedi...

Page 59: ...st priority the port with lowest numeric identifier will be enabled Default 128 Range 0 255 Path Cost This parameter is used by STP to determine the best path between devices Therefore lower values should be assigned to ports attached to faster media and higher values assigned to ports with slower media Path cost takes precedence over port priority Full Range 1 65535 Recommended Range Ethernet 50 ...

Page 60: ...t forward packets Listening Port will leave blocking state due to a topology change start transmitting configuration messages but will not yet forward packets Learning Port has transmitted configuration messages for an interval set by the Forward Delay parameter without receiving contradictory information Port address table is cleared and the port begins learning addresses Forwarding Port forwards...

Page 61: ...nitor port All mirror sessions must share the same destination port When mirroring port traffic the target port must be included in the same VLAN as the source port Field Attributes Roving Analysis State Enables disables port mirroring Analysis Port The port that mirrors traffic from the source port Monitor Ports The ports whose traffic will be monitored Monitor Rx Mirrors receive traffic Monitor ...

Page 62: ...thentication The options for configuring community strings and related trap functions are described in the following sections Configuring System Information Use the SNMP page to identify the system by providing a descriptive name location and contact information Field Attributes Name Name assigned to the switch system Location Specifies the system location Contact Administrator responsible for the...

Page 63: ...ects Web Click Administrator SNMP Enter a new string in the text box and select the access rights then click Add Specifying Trap Managers You can specify up to five management stations that will receive authentication failure messages and other trap messages from the switch Field Attributes IP Address IP address of trap manager Community A community string acts as a password and allows the trap ma...

Page 64: ...bed in Appendix B The default administrator name is admin with the password admin Note that the user name and password controls access to both the Web interface and the console menu Field Attributes User Name The name of the user Range 1 8 characters Password Specifies the user password Range 1 8 characters Web Click Administrator Security Manager Set a new user name if required Enter the old pass...

Page 65: ...tion File Name The file name should not contain slashes or the leading letter of the file name should not be a period and the maximum length for file names is 25 characters Valid characters A Z a z 0 9 _ Web Click TFTP Update Firmware Enter the IP address of the TFTP server enter the file name of the software to download then click Apply After downloading the image click the Update Firmware button...

Page 66: ...ame The configuration file name should not contain slashes or the leading letter of the file name should not be a period and the maximum length for file names is 15 characters Valid characters A Z a z 0 9 _ Web Click Configuration Backup Click TFTP Restore Configuration to restore the configuration settings from a TFTP server or click TFTP Backup Configuration to copy the current settings to a TFT...

Page 67: ...Reset button to restore the default configuration settings Note When restarting the system it always runs the Power On Self Test Rebooting the System Web Click Reboot Click the Reboot button to restart the switch Note When restarting the system it always runs the Power On Self Test ...

Page 68: ...CONFIGURING THE SWITCH 3 46 ...

Page 69: ...shown below If this is your first time to log into the configuration program then use the default admin for both the user name and password The administrator has read write access to all configuration parameters and statistics You should define a new administrator password record it and put it in a safe place Select Switch Static Configuration Administration Configuration Change Password and enter...

Page 70: ...ble from this program Notes 1 Options for the currently selected item are displayed in the highlighted area at the bottom of the interface screen 2 The console interface will time out and return to the login screen if no keyboard input is detected after one minute Main Menu Status and Counters Switch Static Configuration Protocol Related Configuration Reboot Switch Command Line Set Logout Timer Lo...

Page 71: ... Information IP Configuration Change Username Change Password STP SNMP GVRP LACP STP Enable Disable System Configuration Perport Configuration System Options Community Strings Trap Managers Aggregator Setting State Activity LACP Status Status and Counters Protocol Related Configuration Switch Static Configuration Reboot Switch Command Line Set Logout Timer VLAN Configure Create a VLAN Group Edit D...

Page 72: ...gures connection settings including speed duplex mode and flow control also assigns ports to trunks 4 16 Port Mirroring Configuration Sets the source and target ports for mirroring 4 18 VLAN Configuration Sets VLAN groups and ingress filtering 4 20 VLAN Configure Sets the VLAN Mode also sets port VID and ingress filters for tagged based VLANs 4 21 4 22 Create a VLAN Group Configures VLAN groups in...

Page 73: ...38 Perport Configuration Configures port specific parameters for STP 4 40 SNMP Configures SNMP management access 4 42 System Options Provides basic system description including contact information 4 43 Community Strings Configures community strings 4 44 Trap Managers Sets trap management stations 4 45 GVRP Enables disables automatic VLAN registration via GVRP 4 46 LACP Configures dynamic trunks di...

Page 74: ...nd Counters Port Status Port Counters System Information Main Menu Displays current status of all the switch ports Arrow TAB BKSPC Move Item Enter Select Item Menu Description Page Port Status Displays port connection status 4 7 Port Counters Lists Ethernet statistics 4 8 System Information Shows system model number MAC address hardware version and firmware version 4 9 ...

Page 75: ...the link is Up or Down Mode Shows the port speed and duplex mode Flow Control Indicates the type of flow control in use Console Click Status and Counters Port Status TigerSwitch 10 100 Port Status Port Type Enabled Status Mode FlowCtrl 1 10 100TX No Down 100 Full On 2 10 100TX Yes Up 100 Full Off 3 10 100TX No Down 100 Full On 4 10 100TX No Down 100 Full On 5 10 100TX No Down 100 Full On 6 10 100T...

Page 76: ...ted since the last system reboot and are shown as counts per second Statistics are refreshed every 5 seconds Field Attributes See Showing Port Statistics on page 3 12 Console Click Status and Counters Port Counters TigerSwitch 10 100 Port Counters Port TxGoodPkt TxBadPkt RxGoodPkt RxBadPkt TxAbort Collision DropPkt 1 0 0 0 0 0 0 0 2 386113 0 481088 0 0 0 0 3 0 0 0 0 0 0 0 4 0 0 0 0 0 0 0 5 0 0 0 0...

Page 77: ...is switch Firmware Version Version number of runtime code Hardware Version Hardware version of the main board Default config value version Default configuration version Console Click Status and Counters System Information TigerSwitch 10 100 Management Address Information System Description TigerSwitch 10 100 MAC Address 0050BF97A4E0 Firmware version V003 6 Hardware version A002 000 Default config ...

Page 78: ... Configures device information IP address user name and password 4 11 Port Trunk Configuration Configures connection settings including speed duplex mode and flow control also assigns ports to trunks 4 16 Port Mirroring Configuration Sets the source and target ports for mirroring 4 18 VLAN Configuration Sets VLAN groups and ingress filtering 4 20 Priority Configuration Assigns priority tagged fram...

Page 79: ...nformation IP Configuration Change Username Change Password Previous Menu Configure the device information Arrow TAB BKSPC Move Item Enter Select Item Menu Description Page Device Information Provides basic system description including contact information 4 12 IP Configuration Set IP address subnet mask and gateway 4 13 Change Username Specifies user name for management access 4 14 Change Password...

Page 80: ...ice Description Descriptive information about the system Console Click Switch Static Configuration Administration Configuration Device Information Specify the system name location and other information and save your changes Note Maximum string length is 32 alphanumeric characters TigerSwitch 10 100 Device Information Device Name TigerSwitch 10 100 Device Content 8 1FX 1G PORTS Device Location EART...

Page 81: ...uting to specific subnets Gateway Gateway used to pass trap messages from the system s agent to the management station Note that the gateway must be defined if the management station is located in a different IP segment Console Click Switch Static Configuration Administration Configuration IP Configuration Specify the IP address and other parameters Save your changes and then reboot the switch to ...

Page 82: ...assword control access to both the Web interface and the console menu Console Click Switch Static Configuration Administration Configuration Change Username Set a new user name and save it Note Maximum string length is 8 alphanumeric characters TigerSwitch 10 100 UserName Configuration UserName admin actions Edit Save Quit Select the action menu Arrow TAB BKSPC Move Item Quit Previous menuu Enter ...

Page 83: ... to both the Web interface and the console menu Console Click Switch Static Configuration Administration Configuration Change Password Enter the old password enter the new password confirm it by entering it again Press the Enter key to save it Note Maximum string length is 8 alphanumeric characters TigerSwitch 10 100 Password Configuration Old Password new password enter again password changed suc...

Page 84: ...s port speed and duplex mode Flow Control Allows automatic or manual selection of flow control Flow control can eliminate frame loss by blocking traffic from end stations or segments connected directly to the switch when its buffers fill When enabled back pressure is used for half duplex operation and IEEE 802 3x for full duplex operation Avoid using flow control on a port connected to a hub unles...

Page 85: ...oup Negotiate Config Control 1 10 100TX Yes Enabled 100 Full On 2 10 100TX Yes Enabled 100 Full On 3 10 100TX Yes Enabled 100 Full On 4 10 100TX Yes Enabled 100 Full On 5 10 100TX Yes Enabled 100 Full On 6 10 100TX Yes Enabled 100 Full On 7 10 100TX Yes Enabled 100 Full On 8 10 100TX Yes Enabled 100 Full On actions Quit Edit Save Previous Page Next Page Configure the port group status Arrow TAB BK...

Page 86: ...e to the target port and study the traffic crossing the source port in a completely unobtrusive manner Command Usage Monitor port speed should match or exceed source port speed otherwise traffic may be dropped from the monitor port All mirror sessions must share the same destination port When mirroring port traffic the target port must be included in the same VLAN as the source port ...

Page 87: ...itch Static Configuration Port Mirroring Configuration Enable monitoring specify the monitoring or analysis port the monitor ports and traffic types to mirror then save your settings TigerSwitch 10 100 Port Monitoring Configuration Monitoring enable YES Monitoring Port 5 Monitored Port Port Type Action 1 10 100TX 2 10 100TX 3 10 100TX 4 10 100TX 5 10 100TX 7 10 100TX RX Trk1 10 100TX actions Quit ...

Page 88: ...Group Edit Delete a VLAN Group Previous Menu Configure the VLAN PVID and Ingress Rule Arrow TAB BKSPC Move Item Quit Previous menu Enter Select Item Menu Description Page VLAN Configure Sets port VID and ingress filters 4 21 4 22 Create a VLAN Group Configures VLAN groups including name identifier and if limited to a specific protocol 4 21 4 22 Edit Delete a VLAN Group Modifies VLAN groups includi...

Page 89: ...Name 1 15 characters and Group ID 1 4094 Use the Space bar to select port members and save your settings TigerSwitch 10 100 VLAN Support Configuraton VLAN Mode PortBased actions Quit Edit Save Previous Page Next Page Select the Action menu Arrow TAB BKSPC Move Item Space Toggle Ctrl A Action menu Add a VLAN Group VLAN Name TPS Grp ID 2 1 4094 Port Member 1 No 2 No 3 Member 4 Member 5 Member 6 No 7...

Page 90: ...n their member set will be discarded at the ingress port Default Drop Ingress filtering only affects tagged frames If enabled the port will discard incoming frames tagged for VLANs which do not include this ingress port in their member set If disabled the port will accept any VLAN tagged frame if the tag matches a VLAN known to the switch Ingress filtering does not affect VLAN independent BPDU fra...

Page 91: ...es then save your settings TigerSwitch 10 100 VLAN Support Configuraton VLAN Mode 802 1Q IngressFilter1 IngressFilter2 Port PVID NonMember Pkt Untagged Pkt 1 1 Drop Forward 2 1 Drop Forward 3 1 Drop Forward 4 1 Drop Forward 5 1 Drop Forward 6 1 Drop Forward 7 1 Drop Forward 8 1 Drop Forward actions Quit Edit Save Previous Page Next Page Select the Action menu Arrow TAB BKSPC Move Item Space Toggle...

Page 92: ...The default priority levels are assigned according to recommendations in the IEEE 802 1p standard However you can map the priority levels to the switch s output queues in any way that benefits application traffic for your own network Range Low High Default Low Priority Tags 0 3 High Priority Tags 4 7 High Low Queue Service Ratio H L Weighted Round Robin Sets the preference given to packets in the ...

Page 93: ...t the method of servicing the priority queues and save your settings TigerSwitch 10 100 Priority Configuration Priority 0 Low Priority 1 Low Priority 2 Low Priority 3 Low Priority 4 High Priority 5 High Priority 6 High Priority 7 High High Low Queue Service Ratio H L 2 1 actions Edit Save Quit Select the action menu Arrow TAB BKSPC Move Item Quit Previous menu Enter Select Item ...

Page 94: ...only be accepted on the specified interface Static addresses remain in the switch s address table regardless of whether the device is physically connected to the switch This saves the switch from having to re learn a device s MAC address when the disconnected or powered off device becomes active on the network again TigerSwitch 10 100 MAC Address Configuration Static MAC Address Filtering MAC Addr...

Page 95: ... MAC address port number and VLAN ID then save your settings After you configure a new address it will be displayed on the Static MAC Address Configuration page as shown below TigerSwitch 10 100 Add Static MAC Address Mac Address 0030299434DE Port num 2 Vlan ID 1 actions Edit Save Quit Save successfully Press any key to return Arrow TAB BKSPC Move Item Quit Previous menuu Enter Select Itemm TigerS...

Page 96: ...Add to open the Add Filter MAC Address page Enter a MAC address and associated VLAN then save your settings After you configure a new address it will be displayed on the Filter MAC Address Configuration page as shown below TigerSwitch 10 100 Add Filter MAC Address Mac Address 00E0299434DE Vlan ID 2 actions Edit Save Quit Save successfully Press any key to return Arrow TAB BKSPC Move Item Quit Prev...

Page 97: ...ing Max bridge transmit delay bound Previous Menu Configurate the port security Arrow TAB BKSPC Move Item Enter Select Item Menu Description Page Port Security Enables and disables address learning 4 30 MAC Age Interval Sets the address aging time 4 31 Broadcast Storm Filtering Sets the threshold above which broadcast traffic will be filtered 4 32 Max bridge transmit delay bound Sets the maximum o...

Page 98: ... to stop address learning Be sure you enable the learning function long enough to ensure that all valid members have been registered on the selected interface To add new members at a later time you can manually add static addresses or turn off port security to reenable the learning function long enough for new members to be registered Learning may then be disabled again if desired for security Con...

Page 99: ...y monitoring traffic and stored in the dynamic address table You can set the aging time after which inactive entries are removed Range 300 765 seconds Default 300 seconds Console Click Switch Static Configuration Misc Configuration MAC Age Interval Specify the aging time and save your settings TigerSwitch 10 100 The Configuration of Aging Time MAC Age Interval sec 300 300 300 765 actions Edit Save...

Page 100: ...rom broadcast storms by setting a maximum threshold for broadcast traffic The percentage of a port s total bandwidth used by broadcast traffic When broadcast traffic rises above the specified threshold broadcast packets exceeding that threshold will then be dropped Range NO 5 10 15 20 25 Default NO Console Click Switch Static Configuration Misc Configuration Broadcast Storm Filtering Specify the b...

Page 101: ... for the Enable Delay Bound to function Max Delay Time Sets the maximum queuing time for low priority packets Any low priority packets that exceed the delay bound will be sent if the Enable Delay Bound is on Range 0 255 ms Default 0 ms Console Click Switch Static Configuration Misc Configuration Max bridge transmit delay bound Specify the maximum transmit delay bound for the overall delay permitte...

Page 102: ...0 Protocol Related Configuration STP SNMP GVRP LACP Previous Menu Configure the Spanning Tree Protocol Arrow TAB BKSPC Move Item Enter Select Item Menu Description Page STP Configures the Spanning Tree Protocol 4 35 SNMP Configures SNMP management access 4 42 GVRP Enables disables automatic VLAN registration via GVRP 4 46 LACP Configures dynamic trunks displays status 4 47 ...

Page 103: ...The backup links automatically take over when a primary link goes down TigerSwitch 10 100 Spanning Tree Protocol STP Enable Disable System Configuration Perport Configuration Previous Menu Enabled or disabled the Spanning Tree Protocol Arrow TAB BKSPC Move Item Enter Select Item Menu Description Page STP Enable Disable Enables disables Spanning Tree Protocol 4 36 System Configuration Configures gl...

Page 104: ... its priority and MAC address The maximum age hello time and forward delay currently used by all bridges in the spanning tree are set to those values configured on the root bridge Field Attributes Priority Bridge priority for the root device MAC Address MAC address of the root device Root Path Cost The path cost from the root port on this switch to the root device Root Port The number of the port ...

Page 105: ...sage Forward Delay Time The maximum time in seconds the root device will wait before changing states i e listening to learning to forwarding This delay is required because every device must receive information about topology changes before it starts to forward frames In addition each port needs time to listen for conflicting information that would make it return to a blocking state otherwise tempo...

Page 106: ...5535 Maximum Age The maximum time in seconds a device can wait without receiving a configuration message before attempting to reconfigure All device ports except for designated ports should receive configuration messages at regular intervals Any port that ages out STA information provided in the last configuration message becomes the designated port for the attached LAN If it is a root port a new ...

Page 107: ...temporary data loops might result Default 15 Minimum The higher of 4 or Max Message Age 2 1 Maximum 30 Console Click Protocol Related Configuration STP System Configuration Modify the required attributes and save your settings TigerSwitch 10 100 STP System Configuration Root Bridge Information Configure Spanning Tree Parameters Priority 32768 Priority 1 65535 32768 Mac Address 0000ABCD0000 Root_Pa...

Page 108: ...s a port with higher priority less likely to be blocked if the Spanning Tree Protocol is detecting network loops Where more than one port is assigned the highest priority the port with lowest numeric identifier will be enabled Default 128 Range 0 255 Path Cost This parameter is used by the STP to determine the best path between devices Therefore lower values should be assigned to ports attached to...

Page 109: ...ttings TigerSwitch 10 100 STP Port Configuration Port PortState PathCost Priority 1 Disabled 10 128 2 Forwarding 10 128 3 Disabled 10 128 4 Disabled 10 128 5 Disabled 10 128 6 Disabled 10 128 7 Disabled 10 128 8 Disabled 10 128 actions Quit Edit Save Previous Page Next Page Select the Action menu Arrow TAB BKSPC Move Item Quit Previous menu Enter Select Item ...

Page 110: ...board agent are controlled by community strings To communicate with the switch the management station must first submit a valid community string for authentication The options for configuring community strings and related trap functions are described in the following sections TigerSwitch 10 100 SNMP Configuration System Options Community Strings Trap Managers Previous Menu Configure the system inf...

Page 111: ...ecifies the system location System Contact Administrator responsible for the system Console Click Protocol Related Configuration SNMP System Options Specify the system name location and contact information for the system administrator and save your settings TigerSwitch 10 100 System Options Configuration System Name R D 5 System Contact WC 9 System Location Ted actions Edit Save Quit Select the ac...

Page 112: ...ss Authorized management stations are only able to retrieve MIB objects Unrestricted Specifies read write access Authorized management stations are able to both retrieve and modify MIB objects Console Click Protocol Related Configuration SNMP Community Strings Click Add to open the SNMP Community Configuration page Enter a new string in the text box and select the access rights then save your sett...

Page 113: ...community string acts as a password and allows the trap manager to receive trap messages via the SNMP protocol Console Click Protocol Related Configuration SNMP Trap Managers Click Add to open the Add SNMP Trap Manager page Fill in the IP address and community string for a trap manager then save your settings TigerSwitch 10 100 Add SNMP Trap Manager IP 10 1 0 19 Community Name private actions Edit...

Page 114: ...twork Use the GVRP page to enable automatic VLAN registration and to support VLANs which extend beyond the local switch Default Disabled Note GVRP will also be enabled if the VLAN Mode selection under the VLAN Configure screen is set to 802 1QwithGVRP Console Click Protocol Related Configuration GVRP Enable or disable GVRP then save your settings TigerSwitch 10 100 GVRP Configuration GVRP Disabled...

Page 115: ...orts is less than the number of assigned port all the other ports will be placed in a standby mode Should one link in the trunk fail one of the standby ports will automatically be activated to replace it All ports on both ends of an LACP trunk must be configured for full duplex either by forced mode or auto negotiation The Spanning Tree Protocol must be enabled for LACP to function properly See Sp...

Page 116: ...es the number of active ports If the number of active ports is less than the number of assigned members excess ports will be placed in standby mode and only brought into service if an active link fails Console Click Protocol Related Configuration LACP Aggregator Setting Select the required trunk group enable LACP enter the number of active ports and then save your settings TigerSwitch 10 100 LACP ...

Page 117: ...er end of the link Passive A port can only create a trunk if an LACP partner at the other end of the link sends a request to initiate the trunk Console Click Protocol Related Configuration LACP State Activity Specify the ports which can actively initiate an LACP trunk and save your settings TigerSwitch 10 100 LACP Port State Active Configuration Port State Activity 1 Passive 2 Passive 3 Passive 4 ...

Page 118: ...e set to the LACP State of Active This is the same as the System Priority on the Aggregator Setting page MAC The physical address of the devices at both ends of the link Port No Active port members Other ports may be in standby mode Key Only one dynamic trunk can be activated between two devices so a key is sent to the partner device to uniquely identify each trunk A trunk can only be formed if th...

Page 119: ...p Key 1 Port_No 4 5 actions Quit Previous Page Next Page Select the action menu Arrow TAB BKSPC Move Item Quit Previous menu Enter Select Item TigerSwitch 10 100 LACP Group Status Group Actor Partner Priority 1 32768 MAC 0050BF97A4E0 00209C23C267 Port_No Key Priority Active Port_No Key Priority 6 102 1 selected 31 4 32768 8 102 1 selected 32 4 32768 actions Quit Previous Page Next Page Select the ...

Page 120: ...r or not you want to continue 2 When rebooting the switch i e using the Restart option the system will be rebooted immediately no message is displayed 3 When restarting the system by either of the above methods it always runs the Power On Self Test TigerSwitch 10 100 Restart Configuration Default Restart Previous Menu Recovering to default Arrow TAB BKSPC Move Item Enter Select Item Menu Descripti...

Page 121: ...default is 120 seconds and the range is 5 960 seconds Note The value of the logout timer is not saved in non volatile memory This timer is reset to the factory default when you reboot the switch TigerSwitch 10 100 Logout Timer Configuration Logout s Timer 120 5 960 Sec actions Edit Save Quit Select the action menu Arrow TAB BKSPC Move Item Quit Previous menuu Enter Select Item ...

Page 122: ...CONSOLE INTERFACE 4 54 ...

Page 123: ... switch s command line interface CLI is very similar to entering commands on a UNIX system To use the CLI choose Command Line in the console s main menu and then enter any of the commands described in this chapter Entering Commands This section describes how to enter CLI commands Keywords and Arguments A CLI command is a series of keywords and arguments Keywords identify a command and arguments sp...

Page 124: ...in a group enter the help command followed by a group name as shown below You can also display help for a specific command by entering the command keyword followed by the Enter key as shown below INET help help parameters advance port vlan fdb trkgrp stp qos igmp console INET INET help advance advance command config ip X X X X config subnet X X X X config gateway X X X X enable bsf 5 10 15 20 25 d...

Page 125: ...on ping and reboot commands 5 4 Port Port connection settings and security command 5 5 VLAN VLAN configuration commands 5 6 Filter Database Static addresses address aging displays clears static or filtered entries 5 8 Trunk Static and dynamic trunks 5 9 Spanning Tree Protocol Spanning tree protocol 5 10 Quality of Service Quality of service for output queues 5 11 IGMP Snooping IGMP snooping 5 11 C...

Page 126: ... mask and gateway ping host_ip times Sends ICMP echo request packets to another node Broadcast Storm Control enable bsf 5 10 15 20 25 Sets the broadcast threshold above which packets are dropped disable bsf Disables broadcast storm control show bsf Displays the broadcast storm control setting System Information show mac Displays the switch s MAC address show version Displays the switch s firmware ...

Page 127: ...isables auto negotiation speed Sets connection to 10 100 or 1000 Mbps duplex Sets connection to half or full duplex fctl Enables or disables flow control show portstatus 1 10 Displays connection settings for the specified port s Port Statistics show statistics 1 10 Displays network statistics for the specified port s Port Security enable security 1 10 Locks address learning for the specified port ...

Page 128: ...tagged or untagged config vlan name delport portlist Deletes port s from an existing VLAN config vlan name protocol protocol id Limits an existing VLAN to the specified protocol protocol id Protocol number from 0 18 See the following table config vlan pvid 1 4094 ports portlist Sets a default VLAN ID for the specified port s delete vlan name Deletes the specified VLAN delete vlan vid 1 4094 Delete...

Page 129: ... Displays information on all configured protocol based VLANs Protocol Number Protocol Type 0 None 1 IP 2 ARP 3 Appletalk 4 Appletalk AARP 5 Novell IPX 6 Banyan VINES 7 DECnet MOP 8 DECnet DPR 9 DECnet LAT 10 DECnet LAVC 11 IBM SNA 12 X 75 Internet 13 X 25 Layer3 14 NetBIOS 15 IOS Network Layer PDU 16 Novell IPX Raw Ethernet 17 Spanning Tree Protocol BPDU 18 Null SAP VLAN Commands ...

Page 130: ...ses configured for the switch MAC Address Filtering add fdb b mac mac_addr vid number Add an address to filter from the specified VLAN delete fdb b mac mac_addr vid number Deletes an address from the filtering database for the specified VLAN clear fdb b Clears all addresses from the filtering database show fdb b Displays all addresses in the filtering database Address Aging Time config fdbage 300 ...

Page 131: ...h the lowest value i e highest priority is selected as the active LACP partner config trkgrp 1 4 workports 1 8 Sets the number of active ports for an LACP trunk enable lacpstate ports portlist Sets the specified port member s to actively initiate an LACP trunk disable lacpstate ports portlist Sets the specified port member s to respond to a partner s request to create a trunk show lacpstate Shows ...

Page 132: ...ration message config stp maxage 6 40 Sets the maximum time in seconds a device can wait without receiving a configuration message before attempting to reconfigure config stp fwdly 4 30 Sets the maximum time in seconds the root device will wait before changing states i e listening to learning to forwarding config stp priority 0 65535 Sets the bridge priority used in selecting the root device root ...

Page 133: ... traffic and the service ratio for weighted round robin fcfs First come first serve i e no priority service strict All packets in the high priority queue before any packets in the low priority queue wrr Weighted round robin high weight Number of high priority packets sent before servicing the low priority queue low weight Number of low priority packets sent before returning to service the high pri...

Page 134: ...OMMAND LINE INTERFACE 5 12 Console Configuration console The console configuration commands include the following items Console Commands show console Displays the connection settings for the console port ...

Page 135: ... VLAN Support Up to 255 groups port based or with 802 1Q VLAN tagging GVRP for automatic VLAN learning Multicast Filtering IGMP Snooping and Query Quality of Service Supports two priority queues Queuing based on First In First Out FIFO all high queues before low queues Weighted Round Robin WRR Additional Features Port Trunks static dynamic LACP Port Security Address Filtering Port Mirroring Config...

Page 136: ... 2665 Ethernet Like MIB RFC 1643 Extended Bridge MIB RFC 2674 IGMP RFC 1112 IGMPv2 RFC 2236 SNMP RFC 1157 RMON MIB RFC 1757 Entity MIB RFC 2737 SMC s private MIB RMON Support Groups 1 2 3 9 Statistics History Alarm Event Standards IEEE 802 3 Ethernet IEEE 802 3u Fast Ethernet IEEE 802 3ab Gigabit Ethernet IEEE 802 3z Gigabit Ethernet IEEE 802 1D Spanning Tree Protocol and traffic priorities IEEE 8...

Page 137: ...zation screen appears as shown below press X to download system firmware 3 Change your baud rate to the 57600 bps When using Windows HyperTerminal disconnect set the baud rate and reconnect 4 From the terminal emulation program select the file you want to download set the protocol to XModem and then start downloading Note that the download file should be an SMC6709L2 binary file from SMC otherwise...

Page 138: ...When using Windows HyperTerminal disconnect set the baud rate and reconnect 6 Then press Enter to open the Log on screen For details on managing the switch refer to the appropriate chapters in this manual Download IMAGE O K Update firmware Update firmware O K Note console baudrate of new image is 9600bps Reboot S M C User Interface c TigerSwitch 10 100 username password ...

Page 139: ...nd that the port you are using has not been disabled Check network cabling between the management station and the switch If you cannot connect using Telnet there may already be four active sessions Try connecting again at a later time Cannot access the on board configuration program via a serial port connection Be sure you have set the terminal emulator program to VT100 compatible 8 data bits 1 st...

Page 140: ...TROUBLESHOOTING C 2 ...

Page 141: ...device that does not act as a network interconnection Full Duplex Transmission method that allows the switch and attached device to transmit and receive concurrently effectively doubling the bandwidth of that link GARP VLAN Registration Protocol GVRP Defines a way for switches to exchange VLAN information in order to register necessary VLAN members on ports along the Spanning Tree so that VLANs de...

Page 142: ...nsmit packets based on the tagged priority value IEEE 802 3ac Defines frame extensions for VLAN tagging IEEE 802 3x Defines Ethernet frame start stop requests and timers used for flow control on full duplex links IGMP Snooping Listening to IGMP Query and IGMP Report packets transferred between IP Multicast Routers and IP Multicast host groups to identify IP Multicast group members IGMP Query On ea...

Page 143: ...interconnected computer and support devices Link Aggregation See Port Trunk Link Aggregation Control Protocol LACP Allows ports to automatically negotiate a trunked link with LACP configured ports on another device Management Information Base MIB An acronym for Management Information Base It is a set of database objects that contains information about a specific device Media Access Control MAC A p...

Page 144: ... polling required in standard SNMP and can set alarms on a variety of traffic conditions including specific error types Simple Network Management Protocol SNMP The application protocol in the Internet suite of protocols which offers network management services Spanning Tree Protocol STP A technology that checks your network for any loops A loop can often occur in complicated or backup linked netwo...

Page 145: ...es that share the same collision domain regardless of their physical location or connection point in the network A VLAN serves as a logical workgroup with no physical barriers and allows users to share information and resources as though located on the same LAN XModem A protocol used to transfer files between devices Data is grouped in 128 byte blocks and error corrected ...

Page 146: ...GLOSSARY Glossary 6 ...

Page 147: ... connecting 2 2 2 4 displaying port settings 3 9 logout timer 4 53 D default settings system 1 4 delay bound 3 8 4 33 downloading software 3 43 B 1 E EliteView management software 2 1 F features management A 2 switch A 1 firmware displaying version 3 6 4 9 downloading 3 43 B 1 upgrading 3 43 B 1 G GVRP 3 30 4 46 H hardware version displaying 3 6 4 9 I IEEE 802 1D 1 2 IGMP configuring 3 22 static a...

Page 148: ...ing traps 3 41 4 45 trap manager 3 41 4 45 software downloads 3 43 B 1 software version displaying 3 6 4 9 Spanning Tree Protocol 3 34 4 35 standards IEEE A 2 static addresses 3 24 4 26 statistics port 3 12 4 8 system software downloading from server 3 43 B 1 system information 3 40 4 9 T transmit delay bound 3 6 4 33 trap manager 3 41 4 45 troubleshooting C 1 trunk dynamic 3 16 4 47 static 3 14 4...

Page 149: ......

Page 150: ... 8701 France 33 0 41 38 32 32 Fax 33 0 41 38 01 58 Italy 39 02 739 12 33 Fax 39 02 739 14 17 Benelux 31 33 455 72 88 Fax 31 33 455 73 30 Central Europe 49 0 89 92861 0 Fax 49 0 89 92861 230 Switzerland 41 0 1 9409971 Fax 41 0 1 9409972 Nordic 46 0 868 70700 Fax 46 0 887 62 62 Northern Europe 44 0 118 974 8700 Fax 44 0 118 974 8701 Eastern Europe 34 93 477 4920 Fax 34 93 477 3774 Sub Saharan Africa...