3Com 2924-PWR manual

3Com ® Baseline Switch 2924-PWR Plus User Guide 3CBLSG24PWR www.3Com.com Part Number 10016095 Rev . AA Published June 2007[...]

3Com Corporati on 350 Campus Drive Marlborough, MA 01752-3064 Copyright © 2 007, 3Com Corporatio n. All rights reserv ed . No part of this do cumen tation may be repr oduced in any form or by any means or used to make any derivative work (such as tran slation, transf ormation, or adaptation) without writt en permission fr om 3Com Corporation. 3Com[...]

A BOUT T HIS G UIDE This guide provides information about the Web user interface for the 3Com® Baseline Switch 2924-PWR Plus. The Web interface is a network management system that allows you to configu re, mo nitor , and troubleshoot your switch from a remote web br owser . The W eb interface web pages ar e easy-to-use and easy-to-navig ate. User [...]

4 A BOUT T HIS G UIDE ■ Configuring VLANs — Provides information for configuring VLANs. VLANs are logical subgroups with a Local Ar ea Network (LAN) which combine user stations and network devices into a single virtual LAN segment, regar dless of the physica l LAN segment to which they ar e attached. ■ Configuring IP and MAC Address Informati[...]

Intended Audience 5 Intended Audience This guide is intended for networ k administrators familiar with IT concepts and terminology . If release notes are shipped with your product and the information there differs from the information in this guide, follow the instru ctions in the release note s. Most user guides and r e lease notes ar e available [...]

C ONTENTS A BOUT T HIS G UIDE User Guide Overview ............................. ............. ................ ................ ....... 3 Intended Audien ce.............. ............. ................ ............. ............. ................ 5 Conventions ................ ............. ................ ............. ................ ..........[...]

2 U SING THE 3C OM W EB I NTERFACE Starting the 3Com Web Interfa ce .................... ................ ............. ............ 31 Multi-Session W eb Connections ....................... ................ ............. . 31 Accessing the 3Com Web Interfa ce ..... ............. ............. ................ . 32 Understanding the 3Com Web Interf[...]

Viewing ACL Binding .... ............. ................ ............. ................ ....... 83 Configuring ACL Binding ..................... ................ ............. ............. 84 Removing ACL Binding ........................ ............. ................ ............. 85 Enabling Broadcast Sto rm ............ ............. ...........[...]

9 C ONFIGURING IP AND MAC A DDR ESS I NFORMATION Defining IP Addr essing ..... ............. ................ ............. ................ .. 126 Configuring AR P Settings .......... ............. ................ ............. ................ ... 127 Viewing ARP Settings .......................... ............. ............. ............... 128[...]

Configuring T rus t Settings ...... ................ ................ ............. ........ 169 Viewing Bandwidth Settings ......... ............. ............. ................ ..... 170 Defining Band width Set tings ... ............. ............. ................ ........... 172 Defining V oice VLAN ........... ............. ................ ..[...]

A 3C OM N ETWORK M ANAGEMENT 3Com Netw ork Superv isor .. ................ ............. ................ ............. .......... 212 3Com Netw ork Director ..... ................ ............. ............. ................ .......... 213 3Com Netw ork Access Manager ............ ................ ............. ............. ...... 213 3Com Ente r[...]

Upgrade ............. ............. ................ ............. ................ ............. .. 233 Initialize ........ ................ ............. ................ ............. ............. ........ 234 Reboot ............ ................ ............. ............. ................ ............. ..... 235 Logout ................ ......[...]

1 G ETTING S TARTED This chapter contains introducto ry information about the 3Com ® Baseline Switch 2924-PWR Plus (hereafter called the Switch) and how they can be used in your network. It covers summaries of hardwar e and software features and also the following topics: ■ About the Swit ch 2924-PWR ■ Front Panel Detail ■ LED Status Indicat[...]

14 C HAPTER 1: G ETTING S TARTED About the Switch 2924-PWR The Switch 2924-PWR is a Gigabit Ether net switching products that delivers flexible three-speed perfo rmance (10/100/1000 ), Power over Ethernet (PoE) and advanced voice-op timized featur es such as auto-QoS and auto-voice VLAN. This makes the switch ideal for medium businesses and small e[...]

Front Panel Detail 15 Front Panel Detail Figur e 1 shows the front panel of the Switch 2924 -PWR Plus 24-Port unit Figure 1 Switch 2924-PWR Plus 24-Port—fr ont panel. Ethernet, Fast Ethernet, and Gigabit Ethernet Ports Auto-negotiating 10/100/1000BASE-T ports SFP Ethernet Ports Supports fiber Gigabit Ethe rnet long-wave (LX), and fiber Gigabit Et[...]

16 C HAPTER 1: G ETTING S TARTED LED Status Indicators The 2924-PWR SFP Plus 24-Port Ether net switch provides LED indicators on the front panel for your convenience to monitor the switch. Ta b l e 2 describes the meanings of the LEDs. Ta b l e 2 Description on the LEDs of the Switch 2924-PWR LED Label Status Description Power Power Green The switc[...]

System Specifications 17 System Specifications Ta b l e 3 contain s the system specifications of the 2924-PWR series switch. Additional specifications can be fo und in Appendix B “Device Specifications and Features” . Ta b l e 3 System specifications of the Switch 2924PWR series switch Specification Switch 2924-PWR Plus 24-Port 3CBLSG24PWR Phys[...]

18 C HAPTER 1: G ETTING S TARTED Installing the Switch This section contains information that you need to install and se t up your 3Com switch. WAR NI N G : Safety Information. Before yo u install or remove any components from the Switch o r carr y out any maintenance p rocedures, you must read the 3Com Switch Family Safety and Regulatory Informati[...]

Setting Up for Management 19 Setting Up for Management T o make full use of the features of fered by your switch, and to change and monitor the way it works, y ou have to access the management software that r esides on the switch . This is known as ma naging th e switch. Managi ng the switch can he lp you to imp ro ve the ef ficiency of the switch [...]

20 C HAPTER 1: G ETTING S TARTED Figure 2 W eb Interface Management over the Network Refer to “Setting Up Web Interface Management” o n page 27. SNMP Management Y ou can man age a switch using an y network management workstation running the Simple Network Management Protocol (SNMP) as shown in Figur e 3 . For example, you can use the 3Com Netwo[...]

Switch Setup Overview 21 Figure 4 Initial Switch Setup and Management Flow Diagram CAUTION T o protect your switch from unauthorized access, you must change the default password as soon as possib le, even if you do not intend to actively manage your sw itch. For more information on default users and changing default passwords, see “Default Users [...]

22 C HAPTER 1: G ETTING S TARTED IP Configuration The switch’ s IP configuration is dete rmined automatically using DHCP , or manually using values you assig n. Automatic IP Configuration using DHCP By default the switch tries to configure its IP Information without requesting user intervention. It tries to obt ain an IP address from a DHCP serve[...]

Using the Command Line Interface (CLI) 23 ■ Y our DHCP server does not allow you to allocate static IP addresses. (Static IP addresses ar e necessary to ensure that the switch is always allocated the same IP information.) For most installations, 3Com recommends that you configure the switch IP information manually . This ma kes management simpler[...]

24 C HAPTER 1: G ETTING S TARTED Connecting the W orkstat ion to the Switch 1 Connect the workstation to the console port using the console cable as shown in Figure 5. Figure 5 Connecting a W orkstation to the Switch using the Console Port T o connect the cable: a Attach the cable’ s RJ-45 connector to th e Console port of the switch. b Attach th[...]

Using the Command Line Interface (CLI) 25 1 Connect to the switch Console port as described in “Connecting to the Console Port” page 23 . 2 The command line interface login sequenc e begins as soon as th e switch detects a connection to its con sole port. When the process completes, the Login pr ompt disp lays. 3 At the login pr ompt, enter adm[...]

26 C HAPTER 1: G ETTING S TARTED 5 Enter Summary to view a summary of allocated IP addre sses. The following is an example of the display from the Summary command. Select menu option# summary IP Method: default IP address: 169.254.99.51 Subnet mask: 255.255.0.0 Runtime version: 00_00_38 (date 01 -Apr-2007 time 15:31:29) Bootcode version: 1.0.0.12 ([...]

Setting Up Web Interface Management 27 Setting Up Web Interface Management This section describes how you ca n set up web inter face management over the network. Prer e quisites ■ Ensure you have already set up the switch with IP information as described in “Methods of Managing a Switch” on page 19 . ■ Ensure that the switch is connected to[...]

28 C HAPTER 1: G ETTING S TARTED Web Management Over the Netwo rk T o manage a switch u sing the we b interface over an IP network: 1 Be sure that you know your switch’ s IP addr ess. See “IP Configuration” on page 22 , and “Viewing IP Infor mation using the Console Port” on page 25 . 2 Check that your management workstat ion is on th e s[...]

Default Users and Passwords 29 Default Users an d Passwords If you intend to manage the switch or to change the default passwords, you must log in with a valid user name and password. The switch has one default user name. The default user is listed in Ta b l e 5. Use the admin default user name (no password) to login and carr y out initial switch s[...]

2 U SING THE 3C OM W EB I NTERFACE This section provides an introduction to the user interface, and includes the following topics: ■ Starti ng the 3Com W eb Interface ■ Understanding the 3Com Web Interface ■ Saving th e Configura tion ■ Resetting the Device ■ Restoring Factory Defaults ■ Logging Off the Device[...]

Starting the 3Com Web Interf ace 31 Starting the 3Com Web Interface This section includes the following topics: ■ Multi-Session Web Connections ■ Accessing t he 3Com W eb Interf ace Multi-Session Web Connections The Multi-Session web connect ions fe ature enable s 10 users to be created and access the switch concurr e ntly . Access levels provi[...]

32 C HAPTER 2: U SING THE 3C OM W EB I NTERFACE Accessing the 3Com Web In t er f a ce This section contains infor mation on starting the 3Com Web interface. To access the 3Com user interface: 1 Open an Inter net browser . 2 Enter the device IP addr ess in th e addr ess bar and press Enter . The Enter Network Pa ssword Page ope ns: Figure 6 Enter Ne[...]

Understanding the 3Com Web Interface 33 Figure 7 3Com W eb Interface Home Page Understanding the 3Com Web Interface The 3Com Web Interface Home Page contains the following views: ■ Ta b V i e w — Pr ovides the device summary configuration located at the top of the home page. ■ Tr e e V i e w — Pr ovides easy navigation through the configura[...]

34 C HAPTER 2: U SING THE 3C OM W EB I NTERFACE Figure 8 W eb Interface Components The following table lists the user interface components with their corresponding numbers: This section provides the fo llowing additional information: ■ Device Representation — Provides an explanation of the user interface buttons, including both management butto[...]

Understanding the 3Com Web Interface 35 Device Representation The 3Com Web Interface Home Page contains a graphical panel repr esentation of the device that appears within the Device View T ab. T o access the Device Repr esentation: 1 Click Device Summary > Device V iew . Figure 9 Device Repr esentation 2 By selecting a specific port with your m[...]

36 C HAPTER 2: U SING THE 3C OM W EB I NTERFACE Using Screen and T able Options The 3Com Web interface contains sc reens and tables for configuring devices. This section contains the fo llowing topics: ■ Viewing Configuration Information ■ Adding Configuration Information ■ Modifying Configuration Information ■ Removing Configuratio n Infor[...]

Using Screen and Table Options 37 Adding Configuration Info rmation User -defined information can be added to specific 3Com Web Interface pages, by opening the IP Setup Page . T o configure IP Setup: 1 Click Administration > IP Setup . The IP Setup Page opens: Figure 11 IP Setup Page 2 Enter requisite information in the text field. 3 Click . The[...]

38 C HAPTER 2: U SING THE 3C OM W EB I NTERFACE Modifying Configuration Information 1 Click Administration > System Acce ss > Modify . The System Access Modify Page opens: Figure 12 System Access Modify Page 2 Modify the fields. 3 Click . The access fields ar e modified.[...]

Using Screen and Table Options 39 Removing Configuration Information 1 Click Administration > System Access > Remove . The System Access Remove Pag e opens: Figure 13 System Access Remove Page 2 Select the user account to be deleted. 3 Click . The user account is deleted, and the device is updated.[...]

40 C HAPTER 2: U SING THE 3C OM W EB I NTERFACE Saving the Configuration Configuration changes are only saved to the device once the user saves the changes to the flash memory . The Save Con figuration tab allows the latest configuration to be saved to the flash memory . T o save the device configuration: 1 Click Save Configuration . The Save Confi[...]

Resetting the Device 41 Resetting the Device The Reset Page enables resetting the device from a r emote location. T o prevent the curr ent configuration from being lost, use the Save Configuration Page to save all user -defined changes to the flash memory before r esetting the device. T o reset the device: 1 Click Administration > Reset . The Re[...]

42 C HAPTER 2: U SING THE 3C OM W EB I NTERFACE 3 Click . The device is r e set, and a prompt for a user name and password is displayed. Figure 16 User Name and Passwor d Page 4 Enter a user name and password to reconnect to the web interface.[...]

Restoring Factory Defaul ts 43 Restoring Factory Defaults The Restore option appears on the Reset Page . The Resto re option restor es device factory defaults. T o restor e the device: 1 Click Administration > Reset . The Reset Pag e opens: Figure 17 Reset Page The Reset Page contains the following fields : ■ Initialize with Current IP Address[...]

44 C HAPTER 2: U SING THE 3C OM W EB I NTERFACE Logging Off the Device T o log off the device: 1 Click . The Logout Page opens. 2 The following message appears: 3 Click . The 3Com Web Interface Home Page closes.[...]

3 V IEWING B ASIC S ETTINGS This section contains infor mati on for viewing basic settings. The 3Com Web Interface Home Page pr esents a device summary sec tion that provides the system administrator with the option to view essential information required for setting up and maintaining device settings . The Devi ce Summ ary Section contains the foll[...]

46 C HAPTER 3: V IEWING B ASIC S ETTINGS Viewing Device Settings The Device Summary Page displays parameters for viewing general device information, including the system name, location, and contact, the system MAC Addr ess, System Obje ct ID, System Up Time, and MAC addresses, and both software, boot, and hardware versions. T o view the Device Summ[...]

47 ■ System Object ID — Displays the vendor’ s authoritative identification of the network management subsystem contained in the entity . ■ MAC Address — Displays the device MAC address. ■ System Up Time — Displays the amount of time since the most recent device r eset. The system ti me is displayed in the following format: Days, Hour[...]

48 C HAPTER 3: V IEWING B ASIC S ETTINGS Viewing Color Keys Th e Color Key Page provides information regar ding the RJ45 or SFP port status on the device. The various colors key indicate the port status, speed and link of a selected port. T o view colo r keys: 1 Click Device Summary > Color Key . Th e Color Key Page opens: Figure 19 Color Key Pa[...]

4 M ANAGING D EVICE S ECURITY The Management Security section provides info rmation for configuring system access, defi ning RADIUS authentication, port-based authentica tion and defining access cont r ol lists. This section includes the following topics: ■ Configuring System Access ■ Defining RADIUS Clients ■ Defining Port-Based Aut henticat[...]

50 C HAPTER 4: M ANAGING D EVICE S ECURITY Configuring System Access Network administrators can define users, passwords, and access levels for users using the System Access Interface. The Multi-Session web featur e is enabled on device and allows 10 users to be created and access the switch concurrently . Access levels prov ide r ead or read/write [...]

Configuring System Access 51 Viewing System Access Settings The System Access Summar y Page displays the current use rs and access levels defined on the device. T o view System Access settings: 1 Click Administration > System Access > Summary . The System Access Summary Page opens: Figure 20 System Access Summary Page The System Access Summar[...]

52 C HAPTER 4: M ANAGING D EVICE S ECURITY Defining System Access The System Access Setup Page allows net work administrators to define users, passwords, and access levels for user s using the System Access Interface. Monitor users have no access to this page. T o define System Access: 1 Click Administration > System Access > Setup . The Syst[...]

Configuring System Access 53 Modifying System Access The System Access Modify Page allows network administrat ors to modify users, passwords, and access levels for user s using the System Access Interface. Monitor users have no access to this page. T o modify System Access: 1 Click Administration > Syst em Access > Modify . The System Access [...]

54 C HAPTER 4: M ANAGING D EVICE S ECURITY Removing System Access The System Access Remove Page allows network administ rators to rem ove users from the System Access Interface. Monitor users have no access to this page. To r e m o v e u s e r s : 1 Click Administration > System Acce ss > Remove . The System Access Remove Page opens: Figure 2[...]

Defining RADIUS Clients 55 Defining RADIUS Clients Remote Authorization Dial-In User Ser vice (RADIUS) servers provide additional security for networks. RA DIUS servers provide a centralized authentication method for 802.1X. The default paramete rs are user -define d, and are applied to newly defined RADIUS servers. If new defa u lt parameters are [...]

56 C HAPTER 4: M ANAGING D EVICE S ECURITY ■ Authentication Port — Defines the authentication port. The authentication port is used to verify the RADIUS server authen tication. The authentication p ort default is 1812 . ■ Number of Retries — Defines the number of tr ansmitted requests sent to the RADIUS server befo re a failur e occurs. Pos[...]

Defining Port-Based Authentication (802.1X) 57 Defining Port-Based Authentication (802.1X) Port-based authentication authen ticate s users on a per -port basis via an extern al server . Only authenticated and approved system users can transmit and receive data. Ports are au thenticated via th e RADIUS server using the Extensible Authenti cation Pro[...]

58 C HAPTER 4: M ANAGING D EVICE S ECURITY Viewing 802.1X Authentication The 802.1X Summar y Page allows the networ k administrator to view port-based authentication settings. T o view Port-based Authentication: 1 Click Security > 802.1X > Summary . The 802.1X Summar y Page opens: Figure 25 802.1X Summary Page The 802.1X Summar y Page contain[...]

Defining Port-Based Authentication (802.1X) 59 ■ Current Port Con tr ol — Displays the current port authorization state. ■ Guest VLAN — Indicates whether an unauthorized port is allowed to join the Guest VLAN. The possibl e field values ar e: ■ Enable — Enab les an unaut horized port to join the Gu est VLAN. ■ Disable — Disables an [...]

60 C HAPTER 4: M ANAGING D EVICE S ECURITY Defining 802.1X Authentication The 802.1X Setu p Page contains information for configu ring 802.1X global settings on the device an d defining specific 802.1X setting for each port individually . Monitor users have no access to this page. T o configure 802.1X Settings: 1 Click Security > 802.1X > Set[...]

Defining Port-Based Authentication (802.1X) 61 ■ Enable Guest VLAN — Provides limited network access to authorized ports. If a port is denied network a ccess via port-base d authorization, but the Guest VLAN is enabled, the port receives limited network access. For example, a network administrator can use Guest VLANs to deny network access via [...]

62 C HAPTER 4: M ANAGING D EVICE S ECURITY Defining Access Control Lists Access Control Lists (ACLs) allow network managers to define classification actions and rules fo r specific ingress ports. A network manager can configure an ACL on an ingress port so that packets are either admitted or denied en try . The use r can also specify that when pack[...]

Defining A ccess Co ntrol Li sts 63 Viewing MAC Based ACLs The MAC Based ACL Summary Page displays informatio n regar din g MAC Based ACLs configured on the device . Ports are r eactivated from the Port Administration Setup Page . T o view MAC Based ACLs: 1 Click Device > ACL > MAC Based ACL > Summary . The MAC Based ACL Summary Page opens[...]

64 C HAPTER 4: M ANAGING D EVICE S ECURITY ■ Ethertype — Provides an identifier that differ entiates between various types of protocols. ■ Action — Indicates the ACL forwarding action. In addition, the port can be shut down, a trap can be sent to the network ad ministrator , or packet is assigned rate limiting restrictions for forwarding. T[...]

Defining A ccess Co ntrol Li sts 65 ■ Selection ACL — Selects an e xisting MAC- based ACL to which rule s are to be added. ■ Create ACL — Defines a new user -def ined MAC-based Access Control List. Add Rules to ACL ■ Priority — Sets the rule priority , whic h determines which rule is matched to a packet on a first-matc h basis. The poss[...]

66 C HAPTER 4: M ANAGING D EVICE S ECURITY ■ Ethertype — Provides an identifier that differ entiates between various types of protocols. ■ Action — Specifies the ACL forwarding action. In addition, the port can be shut down, a trap can be sent to the network ad ministrator , or packet is assigned rate limiting restrictions for forwarding. T[...]

Defining A ccess Co ntrol Li sts 67 Modifying MAC Based ACLs The MAC Based ACL Modify Page allows the network administr ator to modify an existing MAC-based ACL rule. Monitor users have no access to this page. T o modify a MAC-based ACL rule: 1 Click Device > ACL > MAC Based ACL > Modify . The MAC Based ACL Modify Page opens: Figure 29 MAC[...]

68 C HAPTER 4: M ANAGING D EVICE S ECURITY For example, if the sourc e MAC address is E0:3B:4A:C 2:CA:E2 and the wildcard mask is 00:00:00:00:00:FF , th e first five bytes of the MAC are used, while the last byte is ig nored. For the source MAC addr ess E0:3B:4A:C2:CA:E2, this wildcard mask matches all MAC addr esses in the range E0:3B:4A:C2:CA:00 [...]

Defining A ccess Co ntrol Li sts 69 Removing MAC Based ACLs The MAC Based ACL Remove Page allo ws the user to r emove MAC- based ACLs or MAC-based ACL rules. Monitor users have no access to this page. Click Device > ACL > MAC Based ACL > Remove . The MAC Based ACL Remove Pag e opens: Figure 30 MAC Based ACL Remove Page The MAC Based ACL Re[...]

70 C HAPTER 4: M ANAGING D EVICE S ECURITY ■ CoS Mask — Displays t he wildcar d mask bits to be app lied to th e CoS. ■ Ethertype — Provides an identifier that differ entiates between various types of protocols. ■ Action — Indicates the ACL forwarding action. In addition, the port can be shut down, a trap can be sent to the network ad m[...]

Defining A ccess Co ntrol Li sts 71 Viewing IP Based ACLs The IP Based ACL Summar y Page displays informatio n regarding IP-based ACLs configured on the device. T o view IP-based A CLs: 1 Click Device > ACL > IP Based ACL > Summary . The IP Based ACL Summary Page opens: Figure 31 IP Based ACL Summary Page The IP Based ACL Summar y Page con[...]

72 C HAPTER 4: M ANAGING D EVICE S ECURITY ■ ICMP Code — Indicates the ICMP message code for filtering ICMP packets. ICMP packets th at are filtered by ICMP message type can also be filtered by the ICMP message code. ■ IGMP T ype — Indicates the IGMP message type filter . ■ Source Addr ess — Matches the source IP address to which packet[...]

Defining A ccess Co ntrol Li sts 73 Monitor users have no access to this page. T o configure IP-based ACLs: Click Device > ACL > IP Based ACL > Setup . The IP Based ACL Setu p Page opens: Figure 32 IP Based ACL Setup Page The IP Based ACL Setup Page contains the following fields: ■ Selection ACL — Selects an existing IP-bas ed ACL to w[...]

74 C HAPTER 4: M ANAGING D EVICE S ECURITY ■ Source Port — Defines the source port that is used for matched packets. Enable d only when TCP or UDP are selected in the Protocol list. The field value is either user defined or Any . If Any is selected the IP based ACL is applied to any source port. ■ Destination Port — Defines the destination [...]

Defining A ccess Co ntrol Li sts 75 ■ ICMP Code — If checked, enables specif ying an ICMP message code for filtering ICMP packets. ICMP pa ckets that a re filtered by ICMP message type can also be filter ed by the ICMP message code. ■ IGMP — If checked, enabl es filtering IGMP packets for an IGMP message type. The possible values are: ■ S[...]

76 C HAPTER 4: M ANAGING D EVICE S ECURITY wildcard mask m atches all IP a ddr esses in the range 149.36.184.0 to 149.36.184.255. A wildcard mask must not contain leading zeroes. For example, a wildca rd mask of 010.010.011.010 is invalid, but a wildcar d mask of 10.10.11.10 is valid. ■ Match DSCP — Matches the packet DSCP value to the ACL. Eit[...]

Defining A ccess Co ntrol Li sts 77 Modifying IP Based ACLs The IP Based ACL Modify Page allows the networ k administrator to modify IP Based ACL rules. T o modify an IP-based ACL rule: 1 Click Device > ACL > IP Based ACL > Modify . The IP Based ACL Modify Page opens: Monitor users have no access to this page. Figure 33 IP Based ACL Modify[...]

78 C HAPTER 4: M ANAGING D EVICE S ECURITY ■ Select from List — Selects a pr otocol from a list by which packets are matched to the rule. ■ Protocol ID — Adds user -defined protocols by which packets are matched to the rule. Each protocol has a specific protocol number which is unique. The po ssible field range is 0-255 . ■ Source Port ?[...]

Defining A ccess Co ntrol Li sts 79 ■ ICMP — If checked, enables filterin g ICMP packet s for an ICMP message type. The possible values are: ■ Select from List — Selects an ICMP message type fr om a list. ■ ICMP T ype — Specifies an IC MP message type. ■ Any — Does not filter for an ICMP message type. ■ ICMP Code — If checked, e[...]

80 C HAPTER 4: M ANAGING D EVICE S ECURITY ■ Match IP Pr ecedence — Matches the packet I P Pr ecedence value to the rule. Either the DSCP value or the IP Precedence value is used to match packets to the rule. ■ Action — Selects the ACL forwarding action. In addition, the por t can be shut down, a tr ap can be sent t o the network administra[...]

Defining A ccess Co ntrol Li sts 81 Figure 34 IP Based ACL Remove Page The IP Based ACL Remove Page contains the following fields: ■ ACL Name — Selects an ACL name from a list of the IP-based ACLs. ■ Remove ACL — Enables the ACL to be removed. ■ Checkbox (unnamed) — When checked, selects the rule for removal. The top checkbox is used to[...]

82 C HAPTER 4: M ANAGING D EVICE S ECURITY ■ Source Addr ess — Indicates the source IP addr ess. ■ Source Mask — Indicates the sour ce IP addr ess mask. ■ Destination Addr ess — Indicates the destination IP addr ess. ■ Destination Mask — Indicates the destinat ion IP address mask. ■ DSCP — Matches the packet DSCP valu e to the A[...]

Defining A ccess Co ntrol Li sts 83 Viewing ACL Binding The ACL Binding Summary Page displays the user -defined ACLs mapped to the interfaces. T o view ACL Binding: 1 Click Device > ACL > ACL Binding > Summary . The ACL Binding Summary Page opens: Figure 35 ACL Binding Summary Page The ACL Binding Summar y Page contains the follo wing fie [...]

84 C HAPTER 4: M ANAGING D EVICE S ECURITY Configuring ACL Binding The ACL Binding Setup Page allo ws the network administrator to b ind specific ports to MAC- or IP-based ACLs. The monitor user has no access to this page. T o define ACL Binding: 1 Click Device > ACL > ACL Binding > Setup . The ACL Binding Setup Page opens: Figure 36 ACL B[...]

Defining A ccess Co ntrol Li sts 85 Removing ACL Binding The ACL Binding Remove Page allows the network administrator t o remove user -defined ACLs from a selected interface. Monitor users have no ac cess to this p age . T o remove ACL Binding: 1 Click Device > ACL > ACL Binding > Remove . The ACL Binding Remove Page opens: Figure 37 ACL B[...]

86 C HAPTER 4: M ANAGING D EVICE S ECURITY Enabling Broadcast Storm Broadcast Storm limits the amount of Multicast and Broadcast frames accepted and for warded by the device. When Layer 2 frames are forwarded, Br oadcast and Multicast frames are flooded to all ports on the relevant VLAN. This occupies bandw idth, and loads all nodes on all ports. A[...]

Enabling Broadcast Storm 87 Monitor users have no ac cess to this p age . T o define Broadcast Storm T raffic: 1 Click Device > Broadcast Storm > Setup . The Broadcast Storm Setup Page opens: Figure 38 Br oa dcast Storm Setup Page The Broadcast Storm Setup Page contains the following fields: ■ Broadcast Storm Contr ol — Defines whether fo[...]

5 M ANAGING S YSTEM I NFORMATION This section contains infor mati on for configu ring general system information, and includes the following: ■ Viewing System Description ■ Defining System Settings ■ Saving the Device Configuration ■ Resetting the Device[...]

89 Viewing System Description The Device View Page displays parameters for config uring general device information, including the system name, location, and contact, the system MAC Addr ess, System Obje ct ID, System Up Time, and MAC addresses, and both software, boot, and har d ware versions. T o view Device Summary Information: 1 Click Device Sum[...]

90 C HAPTER 5: M ANAGING S YSTEM I NFORMATION ■ MAC Address — Displays the device MAC address. ■ System Up Time — Displays the amount of time since the most recent device r eset. The system ti me is displayed in the following format: Days, Hours, Minutes, and Seconds. For example, 41 days, 2 hours, 22 minutes and 15 seconds. ■ Software V [...]

91 Defining System Settings The following sect ion allows syst em ad ministrators to config ure advanced system settings. The section includes the following topics: ■ Configuring System Name ■ Configuring System T ime[...]

92 C HAPTER 5: M ANAGING S YSTEM I NFORMATION Configuring System Name The System Name Page allows the Network Administrator to provide a user - defined system name, location, and contact informatio n for the device. Monitor users have read-only permissions on this p age. T o configure the System Name: 1 Click Administration > System Name > Sy[...]

93 Configuring System Time The System Time Set up Page contains fields for defining system time parameters for the lo cal hardwar e cl ock. Daylight Savings T ime can be enabled on the device. Monitor users have limited permissions on this page. T o configure the System Ti me: 1 Click Administration > System Time > Setup . The System Time Set[...]

94 C HAPTER 5: M ANAGING S YSTEM I NFORMATION ■ Daylight Saving — Enables setting automatic Daylig ht Savings T ime (DST) on the device, either on a non-recurring or r ecurring basis. In the non-recurring case, DST is configured to apply to one specific period of time only , defined by specifying the begin and end times, months, days, and years[...]

95 ■ Minutes — The minute of the ho ur at wh ich DST e nds. The field range is 0-59 . ■ Month — The month of the year in which DST ends. T he field range is 1-12 . ■ Day — The day of the month at which DST ends. The field rang e is 1-31 . ■ Ye a r — The year in which DST ends. The field range is 2000 -2037 . ■ Recurring — Enable[...]

96 C HAPTER 5: M ANAGING S YSTEM I NFORMATION Saving the Device Configuration The Save Configurat ion Page allows the latest device co nfiguratio n to be saved to the flash memory . Monitor users have no access to this page. T o save the device configuration: 1 Click Save Configuration . The Save Configuration Page opens: Figure 42 Save Configurati[...]

97 Resetting the Device Th e Reset Page enables resetting the device from a r emote location. T o prevent the curr ent configuration from being lost, save the curr ent device configuration befo re re se t ti n g t he d ev i c e. Monitor users have no access to this page. T o reset the device configuration: 1 Click Administration > Reset . The Re[...]

6 C ONFIGURING P ORTS This section contains infor mation for configu ring Port Settings, and includes the following sections: ■ Viewing Port Settings ■ Defining Port Settings ■ Viewing Port Details[...]

99 Viewi ng Port Settings The Po rt Administration Summar y Page permits the network manager to view the current ports configuration. When configuring the port speed and port Duplex mode, please note the following: ■ Setting the port speed to 10/100/1000 and the Duplex mode to Half = admin speed is = 10/100/1000 ha lf and no advertisement. ■ Se[...]

100 C HAPTER 6: C ONFIGURING P ORTS T o view Port Settings: 1 Click Port > Administration > Summary . The Port Adm inistra tion Summary Page opens: Figure 44 Port Administration Summary Page The Port Admin istration Summar y Page contains the following fields: ■ Port — Indicates t he selected p ort number . ■ Port Status — Indicates w[...]

101 ■ 10M — Indicates the port is currently operating at 10 Mbps. ■ 100M — Indicates the port is currently operating at 100 Mbps. ■ 1000 M — Indicates the p ort is currently operating at 1000 Mbp s. ■ Duplex Mode — Displays the port duplex mode. This field is configurable only when auto negotiation is disabled, and the port speed is[...]

102 C HAPTER 6: C ONFIGURING P ORTS Defining Port Settings The Port Admin istration Setup Page allows network managers to configure port parameters for specific ports. Monitor users have no access to this page. T o configure Port Settings: 1 Click Port > Administration > Setup . The Port Administration Setup Page opens: Figure 45 Port Adminis[...]

103 ■ 10 — Indicates the port is currently operating at 10 Mbps. ■ 100 — Indicates the port is currently operating at 100 Mbps. ■ 1000 — Indicates the port is currently operating at 1000 Mbps. ■ Auto — Use to automatically configure the port. ■ No Change — Retains the current port speed. ■ Duplex — Specifies the port duplex [...]

104 C HAPTER 6: C ONFIGURING P ORTS Viewing Port Details Th e Port Detail Page displays the current port parameters for specific ports. Monitor users have no access to this page. T o view Port Details: 1 Click Port > Administration > Detail . The Port Detail Page opens: Figure 46 Port Detail Page The Port Detail Page contains the following fi[...]

105 ■ Speed — Displays the configured rate for the port. The port type determines what speed setting options are available. Port speeds can only be configured when auto negotiation is disabled. Th e possible field values are: ■ 10 — Indicates the port is currently operating at 10 Mbps. ■ 100 — Indicates the port is currently operating a[...]

7 A GGR EGATING P ORTS This section contains infor mation for configu ring Link Aggregation, which optimizes port usage by linking a group of ports together to fo rm a single LAG. A Link Aggregation Gro up (LAG) aggr egates ports or VLANs into a single virtual port or VLAN . Aggregating ports multiplies the bandwidth between the devices, increa ses[...]

107 Viewing Link Aggregation The Link Aggregation Summary Page displays port usage by linking a group of ports together to form a single LAG. Aggregating ports multiplies the bandwidth between the devices, incr ease s port flexibility , and provides link r edundancy . T o view Link Aggregation: 1 Click Port > Link Aggregation > Summary . The [...]

108 C HAPTER 7: A GGREGATING P ORTS Monitor users have no access to this page. T o create Link Aggr egation: 1 Click Port > Link Aggregation > Create . The Link Aggregation Create Page opens: Figure 48 Link Aggr egation Create Page The Link Aggregation Create Page includes the following fields: ■ Enter aggregation Gr oup ID — Defines the [...]

109 Summary ■ Group ID — Displays the Link Aggregated Gr oup ID. The field rang e is 1-8 . ■ Ty p e — Displays the type of link aggregation. The possible field values are Static or LACP . ■ Member Ports — Displays the ports configured to the link aggregation. 2 Define the fields. 3 Click . The link aggr egation configuration is defined,[...]

110 C HAPTER 7: A GGREGATING P ORTS Modifying Link Aggregation The Link Aggregation Mo dify Page optimizes port usage by linking a group of ports together to form a single LAG. Aggregating ports multiplies the bandwidth between the devices, incr ease s port flexibility , and provides link r edundancy . Monitor users have no access to this page. T o[...]

111 Deselected ports ■ White — Not a member of any aggregation. ■ Grey — Displays a member of an existing aggregation or VLAN. Summary ■ Group ID — Displays the Link Aggregated Gr oup ID. The field rang e is 1-8 . ■ Ty p e — Displays the link aggregation type. The possible field values are Static or LACP . ■ Member Ports — Displ[...]

112 C HAPTER 7: A GGREGATING P ORTS Removing Link Aggregation The Link Aggregation Remo ve Page allows the network manager to re move gr oup IDs conta ining membe r ports. Monitor users have no access to this page. T o remove Link Aggr egation: 1 Click Port > Link Aggregation > Remove . The Link Aggregation Remove Page opens: Figure 50 Link A[...]

113 Viewing LACP LAG ports can contain different media types if the ports are operating at the same speed. Aggr egated lin ks can be set up manually or automatically established by enabling LACP on the relevant links. Aggregate ports can be linked into link-aggr egation port-g roups. The LACP Summary Page contains fields for viewing Link Aggregatio[...]

114 C HAPTER 7: A GGREGATING P ORTS Modifying LACP LAG ports can contain differ ent media types if the ports are operating at the same speed. Aggr egated links can be set up manually or automatically established by enabling LACP on the relevant links. Aggregate ports can be linked into link-aggr egation port-g roups. The LACP Modify Page contains f[...]

115 2 Define the fields. 3 Click . The LACP Link Aggre gation is modified, and the application is updated.[...]

8 C ONFIGURING VLAN S VLANs are logical subgroups with a Local Ar ea Network (LAN) which combine user stations and network devices into a single unit, re gardless of the physical LAN segment to whic h they are attached. VLANs allow network traffic to flow mor e efficiently within subgroups. VLANs use software to r educe the amount of ti me it takes[...]

117 Viewing VLAN Details The VLAN Detail Page provides information and global parameters on VLANs configured on the system. T o view VLAN details: 1 Click Device > VLAN > VLAN Detail . The VLAN Detail Page opens: Figure 53 VLAN Detail Page The VLAN Detail Page contains th e following information: ■ Select a VLAN to Display — Selects a VLA[...]

118 C HAPTER 8: C ONFIGURING VLAN S Viewing VLAN Port Details The VLAN Port Detail Page provides information on VLAN configured ports. T o view VLAN Port details: 1 Click Device > VLAN > Port Detail . The VLAN Port Detail Page opens: Figure 54 VLAN Port Detail Page The VLAN Port Detail Page contains the following information: ■ Select Port [...]

119 Creating VLANs Th e VLAN Setup Page allo ws the network admin istrator to create or ren a m e V L AN s . The monitor use rs have no access t o this page. To c r e a t e V L A N s : 1 Click Device > VLAN > Setup . The VLAN Setup Page opens: Figure 55 VLAN Setup Page The VLAN Setup Page con tains the following fields: Cre ate ■ VLAN IDs ?[...]

120 C HAPTER 8: C ONFIGURING VLAN S Rename VLAN ■ ID — Displays the VLAN ID selected fr om the above list. ■ Name — Defines the new VLAN name. ■ Rename — Renames the user -defined VLAN name. 2 Enter the VLAN ID number(s). 3 Click . The VLAN(s) are cr ea ted, and the device is updated. To r e n a m e a V L A N : 1 Highlight a VLAN to be [...]

121 Modifying VLAN Settings The Modify VLAN Page allows the network manager to rename VLANs and change VLAN membership. The monitor use rs have no access t o this page. T o edit VLA N Settings: Click Device > VLAN > Modify VLAN . The Modify VLAN Page opens: Figure 56 Modify VLAN Page The Modify VLAN Page contains the fo llowing fie lds: ■ S[...]

122 C HAPTER 8: C ONFIGURING VLAN S ■ Not A Member — Indicates the interface is not a member of the VLAN. ■ Not available for selection — Indicates the interface is not available for selection. ■ Select port to add to this VLAN — Adds a selected port to the VLAN. ■ Select All — Allows the user to select all ports to be added to the [...]

123 Modifying Port VLAN Settings The Modify VLAN Port Page allows the network manager to modify port VLAN settings. The monitor use rs have no access t o this page. T o modify Port VLAN Settings: 1 Click Device > VLAN > Modify Port . The Mo dify VLAN Port Page opens: Figure 57 Modify VLAN Port Page The Modify VLAN Port Page contains the follo[...]

124 C HAPTER 8: C ONFIGURING VLAN S 2 Select a port. 3 Select the port’ s member ship type. 4 Enter th e VLAN ID t o be assigned to the port. 5 Click . The VLANs are configured, and the device is updated. Removing VLANs The VLAN Remove Page allows the network administrator to remove VLANs. The monitor users have no access to this page. To d e l e[...]

9 C ONFIGURING IP AND MAC A DDR ESS I NFORMATION This section contains infor mation fo r defini ng IP interfa ces, and includes the following sections: ■ Defining IP Ad dre ssing ■ Configuring ARP Settings ■ Configuring Address T ables[...]

126 C HAPTER 9: C ONFIGURING IP AND MAC A DDRESS I NFOR MATION Defining IP Addressing The IP Setup Page contains f ields for assigning an IP address. The Default Gateway is erased when the IP Address is modified and changed. Packets are forwar ded to the default gateway when sent to a remote network. The monitor user has no access to this page. T o[...]

Configuring ARP Settings 127 Configuring ARP Settings The Address Resolution Proto col (ARP) converts IP addr esses into physical addresses, and ma ps the IP address to a MAC addr ess. ARP allows a host to communicate with other hosts when only the IP address of its neighbors is known. This sect ion includes the following sections: ■ Viewing ARP [...]

128 C HAPTER 9: C ONFIGURING IP AND MAC A DDRESS I NFOR MATION Viewing ARP Settings The ARP Settings Summar y Page displays the curr ent ARP settings. T o view ARP Settings: 1 Click Administration > ARP Settings > Summary . The ARP Settings Summary Page opens: Figure 60 ARP Settings Summary Page The ARP Settin gs Summar y Page contains the fo[...]

Configuring ARP Settings 129 Defining ARP Settings The ARP Settings Se tup Page allows net work managers to def ine ARP parameters for sp ecific interfaces. The monitor use rs have no access t o this page. T o configure ARP entries: 1 Click Administration > ARP Settings > Setup . The ARP Settings Setup Page opens: Figure 61 ARP Settings Setup[...]

130 C HAPTER 9: C ONFIGURING IP AND MAC A DDRESS I NFOR MATION Removing ARP Entries The ARP Settings Remove Page provides parameters for removing ARP entries from the ARP T a ble. The monitor user has no access to this page. T o remove ARP entrie s: 1 Click Administration > ARP Settings > Remove . The ARP Settings Remove Page opens: Figure 62[...]

Configuring ARP Settings 131 ■ MAC Address — Di splays the station MAC addr ess, which is associated in the ARP table with the IP address. ■ Status — Displays the AR P table entry type. Possible fie ld values ar e: ■ Dynamic — Indicates the ARP entry is learned dynamically . ■ Static — Indicates the ARP entry is a static entry . 2 F[...]

132 C HAPTER 9: C ONFIGURING IP AND MAC A DDRESS I NFOR MATION Configuring Address T ables MAC addr esses are stor ed in either the Static Address or the Dynamic Address databases. A pack et addr essed to a destination sto red in one of the databases is forwarded immedi ately to the port. The Dyna mic Address T a ble can be sorted by inte rf ace, V[...]

Configuring Address Tables 133 Viewing Address T able Settings The Address T able Summary Page displays the current MAC address table configuration. T o view address table settings: 1 Click Monitoring > Addr ess T able > Summary . The Address T able Summary Page opens: Figure 63 Addr ess T able Summary Page The Address T able Summar y Page co[...]

134 C HAPTER 9: C ONFIGURING IP AND MAC A DDRESS I NFOR MATION ■ State — Displays the MAC address configuration method. Possible values ar e: ■ Config Static — Indicates the MAC address is statically configured. ■ Config Dynamic — Indicates the MAC address is dynamically configured. ■ Port Index — Indicates the port through which th[...]

Configuring Address Tables 135 ■ State — Filters the list of MAC addr e sses displayed according to the type of MAC address configuration. Possible values are: ■ All — Displays all MAC addre sses assigned to the port. ■ Static — Displays static MAC addr esses assigned to the port. ■ Dynamic — Displ ays dynamic M AC addr esses assign[...]

136 C HAPTER 9: C ONFIGURING IP AND MAC A DDRESS I NFOR MATION Adding MAC Addresses to the Address T able The Address T able Add Page allows the network manager to assign MAC addresses to ports with VLANs. The monitor users have no access to this page. T o add MAC addresses to the Addr ess T able: 1 Click Monitoring > Addr ess T able > Add . [...]

Configuring Address Tables 137 ■ MAC Address — Displays the current MAC addr esses listed in the MAC address table. ■ VLAN ID — Displays the VLAN ID associated with the port an d MAC address. ■ State — Displays the current MAC addr ess co nfiguration method. Possible values are: ■ Config Static — Indicates the MAC address is statica[...]

138 C HAPTER 9: C ONFIGURING IP AND MAC A DDRESS I NFOR MATION Defining Aging Time The Address T able Setup Page allows the network manager to define the Address T able Aging Time. The Aging T ime is the amount of time the MAC addr esses r emain in the Dynam ic Address table befor e they are timed out if no traffic fr om the sour ce is detected. Th[...]

Configuring Address Tables 139 Removing Address T able Ports The Port Remove Page allows the network manager to remove ports fr om the Address T able. The monitor use rs have no access t o this page. T o remove ports: 1 Click Monitoring > Addr ess T able > Port Remove . The Port Remove Page opens: Figure 67 Port Remove Page The Port Remove Pa[...]

140 C HAPTER 9: C ONFIGURING IP AND MAC A DDRESS I NFOR MATION ■ State — Displays the MAC address configuration method. Possible values ar e: ■ Config Static — Indicates the MAC address is statically configured. ■ Port Index — Indicates the port through which the addr ess was learned. ■ Aging Time — Indicates the amount of time the [...]

Configuring Address Tables 141 Removing MAC Addresses fr om the Address T able The Address T able Remove Page allows the net work manager to remove current MAC addr esses from the Address T able. The monitor use rs have no access t o this page. T o remove MAC addresses fr o m the Address T able: 1 Click Monitoring > Addr ess T able > Remove .[...]

142 C HAPTER 9: C ONFIGURING IP AND MAC A DDRESS I NFOR MATION ■ Port Index — Indicates the port through which the addr ess was learned. ■ Aging Time — Indicates the amount of time the MAC address remains in the Dynamic Address tabl e before it is timed out if no traffic fr om the source is de tected. The defau lt value is 300 seconds. ■ [...]

10 C ONFIGURING IGMP S NOOPING This section contains infor mation for configuring IGMP Snooping . When IGMP Snooping is enabled globa lly , all IGMP pack ets are forwarded to the CPU. The CPU analyzes the incoming pack ets and determines: ■ Which ports want to join which Multicast groups. ■ Which ports have Multicast routers generating IGMP que[...]

144 C HAPTER 10: C ONFI GURING IGMP S NOOPING Defining IGMP Snooping The IGMP Snooping Setup Page allows n etwork managers to define IGMP Snooping parameters for VLANs. The monitor users have read - only access to this page. T o configure IGMP Snooping: Click Device > IGMP Snooping > Setup . The IGMP Snooping Setup Page opens: Figure 69 IGMP [...]

145 ■ Enable — Enables IGMP Snooping on t he VLAN. ■ VLAN — Displays the VLAN ID. ■ Status — Displays the IGMP snooping status fo r the VLAN. The possible field values are Enable and Disable . T o enable or disable IG MP Snooping on the device: 1 Select Enable or Disable from the IGMP Snooping Status list . 2 Click . IGMP Snooping is en[...]

11 C ONFIGURING S PANNING T RE E This section contains infor mation for configu ring STP . The Spannin g T re e Protocol (STP) provides tr ee topography for any arrangemen t of bridges. STP also provides a single path between end statio ns on a network, eliminating loops. Loops occur when alternate routes exist between hosts. Loops in an extended n[...]

147 Viewing Spanning Tr e e The Spanning T ree Summar y Page displays the current Spanning T ree parameters for all ports. T o view Spanning T r ee Summary: 1 Click Device > Spanning T ree > Summary . The Spanning T ree Summary Page opens: Figure 70 Spanning T ree Summary Page The Spanning T ree Summar y Page contains the following fields: ?[...]

148 C HAPTER 11: C ONFI GURING S PANNING T REE ■ Root Guard — Indicates if the interface is acting as the r oot port of the switch. The possible field values are: ■ Enable — Indicates Root Guard is enabled on the port ■ Disable — Indicates Root Guard is disabled on the port. ■ Port State — Displays the current STP state of a port. I[...]

149 ■ Path Cost — Indicates the port contribution to the root path cost. The path cost is adjusted to a higher or lower value, and is used t o forward traffic when a path is re-r outed. ■ Priority — Indicates the priority value of the port. The priority value influences the port choice when a br idge has two ports con nected in a loop. The [...]

150 C HAPTER 11: C ONFI GURING S PANNING T REE Defining Spanning Tr e e Network administrators can assign STP setting s to specific interfaces using the Spann ing T ree Setup Page . The monitor user has no access to this page. T o configure Spanning T ree Setup: 1 Click Device > Spanning T ree > Setup . The Spanning T ree Setup Pa ge opens: F[...]

151 ■ BPDU Handling — Determines how BPDU packets are managed when STP is disabled on the port or device. B PDUs are used to transmit spanning tree information. T he possible field va lues are: ■ Filtering — Filters BPDU packets when spanning tree is disabled on an interface. This is the default value. ■ Flooding — Floods BPDU packets w[...]

152 C HAPTER 11: C ONFI GURING S PANNING T REE Designated Root ■ Bridge ID — Identifies the Bridge priority and MAC address. ■ Root Bridge ID — Identifies the Root Bridge priority and MAC address. ■ Root Port — Indicates the port n umber that offers the lowest cost path from this bridge to the Root B r idge. This field is significant wh[...]

153 Modifying Spanning Tr e e The Spanning T ree Modify Page contains information for modifying Spanning T ree parameters. Monitor users have no access to this page. T o modify Spanning T ree: 1 Click Device > Spanning T ree > Modify . The Spanning T ree Modify Page opens: Figure 72 Spanning T ree Modify Page The Spannin g T ree Mo dify Page [...]

154 C HAPTER 11: C ONFI GURING S PANNING T REE ■ Enabled — Indicates fast link is enabled on the po rt. ■ Auto — Enables the device to automatically establish a fast link. ■ Disabled — Indicates fast link is disabled on the port. ■ Root Guard — Restricts the interface fr om acting as th e root port of the switch. The possible field [...]

12 C ONFIGURING SNMP Simple Network Management Protocol (SNMP) provides a method for managing network devices. The devi ce supports the following SNMP versions: ■ SNMP version 1 ■ SNMP vers ion 2c SNMP v1 and v2c The SNMP agents maintain a list of variables , which are used to manage the device. The variables ar e define d in the Management Inf[...]

156 C HAPTER 12: C ONFI GURING SNMP Defining SNMP Communities Access ri ghts ar e managed by defining communities in the SNMP Communities Setup Page . When the community names are changed, access rights are also changed. SNMP communities are defined only for SNMP v1 and SNMP v2c. Monitor users have no access to this page. T o define SNMP communitie[...]

157 ■ Insert New Community — Enables add ing an SNMP community . SNMP Management ■ Manageme nt Station — Defines the management station IP address for which the SNMP community is to be defined. ■ Open Access (0.0.0.0) — Pr ovides SNMP access to all the stations. Community String ■ Standard — Selects pr e-defined co mmun ity strings.[...]

158 C HAPTER 12: C ONFI GURING SNMP Removing SNMP Communities The SNMP Communities Remove Page allows the system manager to remov e SNMP Communities. Monitor users have no access to this page. T o remove SNMP communities: 1 Click Administration > SNMP > Communities > Remove . The SN MP Communities Remove Page opens: Figure 74 SNMP Communit[...]

159 ■ Access Mode — Displays the access rights of the community . The possible field values are: ■ Read Only — Management access is restricted to r ead-o nly , and changes cannot be made to the community . ■ Read Write — Management access is re ad-write and changes can be made to the device configuration, but not to the community . 2 Fo[...]

160 C HAPTER 12: C ONFI GURING SNMP The SNMP T raps Setup Page contains the following fie lds: ■ Recipients IP Address — Defines the IP addr ess to which the traps are sent. ■ Community String — Defines the community string of th e trap manager . ■ T rap V ersion — Specifies the trap type. The possible field values ar e: ■ SNMP V1 —[...]

161 The SNMP T raps Remove Page contains the following fields: ■ Checkbox (unnamed) — When checked, selects an SNMP trap for removal. The top checkbox is used to select all SNMP tr aps for removal ■ Recipients IP — Displays the IP address to which the traps are sent. ■ Tr a p — Displays the trap type. The possible field values ar e: ■[...]

13 C ONFIGURING Q UALITY OF S ERVICE Quality of Service (QoS) provides the ability to implement QoS and priority queuing within a network. For exampl e, certain types of traffic that requir e minimal delay , such as V oice, Video, a nd r eal-t ime traf fic can be assigned a high priority qu eue, while other traffic can be assigned a lower priority [...]

163 Viewing CoS Settings Th e CoS Summary Page displays CoS default settings assigned to ports. T o view CoS Settings: 1 Click Device > QoS > CoS > Summary . The CoS Summar y Page opens: Figure 77 CoS Summary Page The CoS Summary Page contains the following fields: ■ Interface — Displays the interface for which the CoS default value is[...]

164 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE Defining CoS The CoS Setu p Page contains information fo r enabling QoS globally . Monitor users have no access to this page. T o configure CoS Settings: 1 Click Device > QoS > CoS Setup . The CoS Setup Page opens: Figure 78 CoS Setup Page The CoS Setup Pa ge contains the following fields: ?[...]

165 Viewing CoS to Queue The CoS to Queue Su mmar y Page contains a table that displays the CoS values mapped to traf fic queues. T o view CoS V alues to Qu eues: 1 Click Device > QoS > CoS to Queue > Summary . The CoS to Queue Summary Page opens: Figure 79 CoS to Queue Summary Page The CoS to Queue Su mmar y Page contains the following fi[...]

166 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE T o configure CoS values to queues: 1 Click Device > QoS > CoS to Queue > Setup . The CoS to Queue Setup Page opens: Figure 80 CoS to Queue Setup Page The CoS to Queu e Setup Page co ntains the following fields: ■ Restore Defaults — Restores the device factory defaults for mapping CoS[...]

167 Viewing DSCP to Queue The DSCP to Queu e Summar y Page contain s fields for mapping DSCP settings to traffic queues. For example, a packet with a DSCP tag value of 3 can be assigned to queue 4. T o view the DSCP Queue: 1 Click Device > QoS > DSCP to Queue > Summary . The DSCP to Queue Summary Page opens: Figure 81 DSCP to Queue Summary[...]

168 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE Configuring DSCP Queue The DSCP to Queue Setup Page contains fields for mapping DSCP settings to traffic queues. For example, a pack et with a DSCP tag value of 3 can be assigned to queue 1. The monitor user has no access to this page. To m a p CoS to Queues: 1 Click Device > QoS > DSCP to Q[...]

169 Configuring T rust Settings The T rust Setup Page contains information for enabling trust on the device. T o enable T rust: 1 Click Device > QoS > T rust > Setup . The T rust Setup Page op ens: Figure 83 T rust Setup Page The T rust Setup Page contains the followin g fields: ■ Tr u s t M o d e — Specifies which packet fi elds to us[...]

170 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE Viewing Bandwidth Settings The B andwidth Summar y Page displays bandwidth settin gs for a specified interface. T o view Bandwidth Settings: 1 Click Device > QoS > Band width > Summary . Th e Bandwidth Summary Page opens: Figure 84 Bandwidth Summary Page The Bandwidth Summar y Page contai[...]

171 Egr ess Shaping Rates ■ Status — Indicates the egress traffic shaping status for the interface. The possible field values are: ■ Enable — Egress traf fic shaping is enabled for the interface. ■ Disable — Egress traf fic shaping is disabl ed for the interface. This is the default. ■ CIR — Indicates the Committed Info rmation Rate[...]

172 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE Defining Bandwidth Settings The Bandwidth Setup Page allows network managers to define the bandwidth settings for a specified in terface. Interface s haping can be based on an interface. Shaping is determined by the lower specified value. The interface shap ing type is selected in the Bandwidth Se[...]

173 Egr ess Shaping Rate ■ Enable Egress Shaping Rate — Enables setting Egr ess Shaping Rates. ■ Committed Information Rate (CIR) — Defines the CIR for the interface. The field range is 64-1 ,000,000,000 kbits per second. ■ Committed Burst Size (CbS) — Defines the CbS for the interface. The field range is 4096- 16,769,020 bytes per seco[...]

174 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE Defining V oice VLAN V oice VLAN allows network administra tors to enhance V oIP service by configuring ports to carry IP voice tra ffic fr om IP phones on a specific VLAN. V oIP traffic has a preconfigu red OUI pr efix in the source MAC address. Network Administrators can configure VLANs on which[...]

Defining Voice VLAN 175 Viewing V oice VLANs The V oice VLAN Summar y Page contain s information about t he V oice VLAN currently enabled on the device, including the ports enabled and included in the V oice VLAN. T o view V oice VLAN Settings: 1 Click Device > QoS > V oIP T raffic Setting > Summary . The Vo i c e V L A N Summary Page open[...]

176 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE ■ Ports in the V oice VLAN — Displays the ports which are included in the V oice VLAN. The possible values ar e: ■ Dynamic Members — Displays dynamic ports added to the V oice VLAN in Auto mode. ■ Static Members — Displays st atic ports that w ere manually added to the V oice VLAN. Def[...]

Defining Voice VLAN 177 ■ V oice VLAN Aging Time — Defines the amo unt of time after the last IP phone's OUI is aged out for a specific port. The V oice VLAN aging time starts after the MAC Address is aged out from the Dynamic MAC Address table. The port will age out after the bridge and voice aging times. The default bridge aging time is [...]

178 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE The V oice VLAN Port Se tup Page contains the fol lowing fields: ■ V oice VLAN Port Mode — Specifies the V oice VLAN mode. The possible field values are: ■ No Changes — Maintains the current V oice VLAN port/LAG settings. This is the default value. ■ None — Indicates that the selected [...]

Defining Voice VLAN 179 Viewing V oice VLAN Port Definitions The V oice VLAN Port De tails Page displays the V oice VLAN port settings for specific ports. The V oice VLAN Port De tails Page contains the followi ng fields : ■ Select Port — Selects specific ports to display their V oice VLAN po rt definitions. The ports are color -coded as follow[...]

180 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE T o view V oice VLAN Port Detail Settings: 1 Click Device > QoS > V oIP T raffic Setting > Port Detail . The Vo i c e VLAN Port Details Page opens: Figure 89 V oice VLAN Port Details P age 2 Select a port to view its settings. The port is highlighted blue, and the V oice VLAN port setting[...]

Defining Voice VLAN 181 T o view V oice VLAN OUI Settings: 1 Click Device > QoS > V oIP T raffic Setting > OUI Summary . Th e Vo i c e VLAN OUI Summary Page opens: Figure 90 V oice VLAN OUI Summary Pa ge The V oice VLAN OUI Summar y Page contains the following fields: OUI List ■ T elephony OUI(s) — Lists the OUIs curr ently enabled on [...]

182 C HAPTER 13: C ONFI GURING Q UALITY OF S ERVICE Modifying OUI Definitions The V oice VLAN OUI Modify Page allows network administrators to add new OUIs or to remove pr eviously de fined OUIs from the V oice VLAN. The OUI is the first half (three most sign ificant bytes) of the MAC addre ss and is manufacturer specific, while the last three byte[...]

Defining Voice VLAN 183 2 Enter an OUI in the T elephony OUI field. 3 Enter an OUI description in the Description field. 4 Click to define a new OUI, or click to delete an existing OUI. The V oice VLAN table is modified, and the device is updated.[...]

14 M ANAGING S YSTEM F ILES The configuration file stru cture consists of the following configuration files: ■ Startup Configuration File — Contains the commands r equired to reconfigur e the device to the same settings as when the device is powered down or rebooted. The Startup file is cr eated by copying the configuration commands from the Ru[...]

185 This section contains infor mation for defini ng File maintenance and includes both configuration file mana gement as well as device access. This section contains the following topics: ■ Backing Up System Files ■ Restoring Files ■ Restore the Softwar e Image ■ Activating Image Files[...]

186 C HAPTER 14: M ANAGING S YST EM F ILES Backing Up System Files The Backup Page permits network managers to backup the system configuration to a TF TP or HTTP server . The monitor users have no access to this page. T o backup System files: 1 Click Administration > Backup & Restore > Backup . The Backup Page opens: Figure 92 Backup Page[...]

187 Restoring Files The Restore Page restor es files fr om the TF TP or HTTP server . The monitor use rs have no access t o this page. T o re store System files: 1 Click Administration > Backup & Restor e > Restor e . The Restore Page opens: Figure 93 Restor e Page The Restore Page contains the following fields: ■ Download via TF TP —[...]

188 C HAPTER 14: M ANAGING S YST EM F ILES Restore the Softwar e Image The Restor e Image Page permits network managers to retrieve the device software. The monitor user has no access to this page T o download the software image: 1 Click Administration > Firmwar e Upgrade > Restore Image . The Restore Image Page opens: Figure 94 Restor e Imag[...]

189 Activating Image Files The Active Image Page allows networ k manager s to select and r eset the Image files. T o upload System files: 1 Click Administration > Firmware Upgrade > Active Image . The Active Image Page opens: Figure 95 Ac tive Imag e Page The Active Image Page contains the following fields: ■ Active Image After Reset — Se[...]

15 M ANAGING P OWER OVER E THER NET D EVICES Power over Eth ernet (PoE) provides power to devices over existing LAN cabling, without updating or modifying the network infrastructu re. Power over Ether net removes the necessity of placin g network devices next to power sources. Power over Ethernet can be used with: ■ IP Phones ■ Wi reless Access[...]

191 Viewing PoE Settings The Port PoE Summar y Page displays system PoE information on the device and attached ports, monitoring th e current power usage and operational status. T o view PoE Settings: 1 Click Port > PoE > Summary . The Port PoE Summary Page opens: Figure 96 Port PoE Summary Page The Port PoE Summar y Page displays the followi[...]

192 C HAPTER 15: M ANAGING P OWER OVER E THERNET D EVICES ■ Power Used(watts) — Indicates the actual amount of powe r currently used by the device. The field value is displayed in W atts. ■ Power Free(watts) — Displays the amount of additional power currently ava ilable to the device. Th e field value is displayed in W atts. ■ Select Port[...]

193 Defining PoE Settings The Po rt PoE Setup Page allows users to co nfigure ports for PoE. T o configure Port PoE Settings: 1 Click Port > PoE > Setup . The Port PoE Setup Pa ge opens: Figure 97 Port PoE Setup Page The Port PoE Se tup Page contains the following fields: ■ Select Ports — Selects the ports to be configured. ■ PoE State [...]

194 C HAPTER 15: M ANAGING P OWER OVER E THERNET D EVICES ■ Guarantee Power Summary — Displays guaranteed and total PoE power: ■ T otal Po E Available — The total amount of PoE power that can be provided by the Switch. ■ Guarantee PoE — The maximum amount of PoE power that has been guaranteed for sele cted ports. This value is defined b[...]

16 M ANAGING S YSTEM L OGS This section provides information fo r managing system logs. The system logs enable viewing device events in real time, and r ecor ding the events for later usage. System Logs recor d and manage events and report errors and informational messages. Event me ssages have a unique format, as per the Syslog protocols r ecomme [...]

196 C HAPTER 16: M ANAGING S YST EM L OGS Viewing Logs Th e Logging Display Page co ntains all system logs in a chronological order that are saved in RAM (Cache). The monitor user has read-only access to this feature. T o view Logging: 1 Click Administration > Logging > Display . The Logging Display Page opens: Figure 98 Logging Display Page [...]

197 Configuring Logging The Logging Setup Page contains fields for defining which events are recor ded to which logs. It contains fields for enabling logs globally , and parameters for defining logs. Log messages are listed from the highest severity to the lowest severity level. The monitor use rs have no access t o this page. T o define Log Parame[...]

198 C HAPTER 16: M ANAGING S YST EM L OGS The Logging Set up Page contains th e following fields: ■ Enable Local Logging — Specifies i f device local logs for Cache and servers ar e enabled. Console logs ar e enabled by default. ■ Severity level — Specifies the mi nimum severity level for which a message will be logged. Wh en a severity lev[...]

199 ■ Enable Syslogging — Specifies if device syslogs for Cache and servers ar e enabled. ■ Severity level — Specifies the mi nimum severity level for which a message will be logged. When a severi ty level is select ed, all severity level choices above the selection are selected automatically . The possible field values are: ■ Emergency ?[...]

17 V IEWING S TATISTICS This section contains information for viewing por t statistics, and contains the following topics: ■ Viewing Port Statistics[...]

201 Viewing Port Statistics The Port Statistics Summar y Page co ntains fields for viewing information about device utilization and errors that occurred on the device. T o view RMON statistics: 1 Click Port > Statistics > Summary . The Port Statistics Summary Page opens: Figure 100 Port Statistics Summary Page The Port Statistics Summar y Pag[...]

202 C HAPTER 17: V IEWING S TATISTICS ■ Received Bytes (Octets) — Displays the number of octets r eceived on the interface since the device wa s last refr eshed. This nu mber includes bad packets and FCS octe ts, but excludes framing bits. ■ Received Packets — D isp lay s th e n um ber of p ack et s rece ive d o n th e interface, inclu ding[...]

203 ■ Frames of 128 to 255 Bytes — Displays the numb er of 128 to 255 byte frames received on the inte rface since the device was last ref re sh e d . ■ Frames of 256 to 511 Bytes — Displays the numb er of 256 to 511 byte frames received on the inte rface since the device was last ref re sh e d . ■ Frames of 512 to 1023 Bytes — Displays[...]

18 M ANAGING D EVICE D IAGNOSTICS This section contains infor mation for viewing and con figuring port and cable diagnostics, and includes the following topics: ■ Configuring Port Mirroring ■ Viewing Cable Diagnostics[...]

Configuring Port Mirroring 205 Configuring Port Mirr oring Port mirroring monitors and mirrors ne twork traffic by forwarding copies of incoming and outgoing packets from one port to a monitoring port. Port mirroring can be used as a diagnostic tool as well as a debugging feature. Port mirr oring also enables switch performance monitoring. Network [...]

206 C HAPTER 18: M ANAGING D EVICE D IAGNOSTICS Defining Port Mirroring The Port Mirroring Setup Page contains parameters for configuring port mirroring. The monitor user has limi ted access to this page. T o enable port mirroring: 1 Click Monitoring > Port Mirroring > Setup . The Port Mirroring Setup Page opens: Figure 101 Port Mirr oring Se[...]

Configuring Port Mirroring 207 ■ Select port — Selects the port for mirroring or monitoring. A port unavailable for mirroring is colored gr ey . ■ Summary — Displays the current monitor and mirror ports. The fields displayed are: ■ Monitor — Displays the monitor port. ■ Mirror In — Displays ports that are monitored on the RX. ■ Mi[...]

208 C HAPTER 18: M ANAGING D EVICE D IAGNOSTICS Removing Port Mirroring The Port Mirroring Remove Page permits the network manager to terminate port mirroring or monitoring. The monitor users have no access to this page. T o remove port mirroring: 1 Click Monitoring > Port Mirroring > Remove . The Port Mirroring Remove Page opens: Figure 102 [...]

Viewing Cable Diagnostics 209 Viewing Cable Diagnostics The Cable Diagnostics Summar y Page contains fields for viewing tests on copper cables. Cable testing provides information about wher e err ors occurred in the cable, the last time a cable test was performed, and the type of cable error which occurr ed. The tests use T ime Domain Reflectometry[...]

210 C HAPTER 18: M ANAGING D EVICE D IAGNOSTICS ■ Cable Fault Distance — Indicates the distance in meters from the port where the cable err or occurred. ■ Last Update — Indicates the last time the port was tested. Configuring Cable Diagnostics The Diagnostics Page co ntains fields for performing tests on copper cables. Cable testing pr ovid[...]

Viewing Cable Diagnostics 211 To t e s t c a b l e s : 1 Click Monitoring > Cable Diagnostics > Diagnostics . The Diagnostics Page opens: Figure 104 Diagnostics Page The Diagnostics Page contains the followin g fields: ■ Select a Port — Selects the port to be tested. ■ Te s t R e s u l t — Displays the cable test re sults. Possible va[...]

A 3C OM N ETWORK M ANAGEMENT 3Com has a range of network mana gement applications to address networks of all sizes and complexity , f rom small and medium businesses through large enterprises. The applications inclu de: ■ 3Com Network Supervisor ■ 3Com Network Director ■ 3Com Network Access Manager ■ 3Com E nterprise Management Suite ■ In[...]

3Com Network Director 213 3Com Network Director 3Com Network Director (3ND) is a stan dalone application that allows you to carry out key management and ad ministrative tasks on mids ized networks. By using 3ND you can disc over , map, and monitor all yo ur 3Com devices on the network. It si mplifies tasks such as backup and restor e for 3Com devic[...]

214 A PPENDIX A: 3C OM N ETWORK M ANAGEMENT 3Com Enterprise Management Suite 3Com Enterprise Management Su ite (EMS) deliver s comprehensive management that is flexible and sc alable enough to meet the needs of the largest enterprises and advanced networks. This solution provides particularly powerful conf iguration and change control functionaliti[...]

B D EVICE S PECIFICATIONS AND F EATUR ES Related Standards The 3Com ® Baseline Switch 2924-PWR Plus has been designed to the following standards: Envir onmental Physical Function 8802-3, IEEE 802.3 (Eth ernet), IEEE 802.3u (Fast Ethernet), IEEE 802.3ab (Gigab it Ethernet), IEEE 802.1D (Bridging) Safety UL 60950-1, EN 60950-1, CSA 22.2 No. 60950-1,[...]

216 A PPENDIX B: D EVICE S PECIFICATIONS AND F EATURES Electrical Switch Features Th is section describes the device features. The system supports the following features: Line Frequency 50/60 Hz Input Voltage 100–240 Vac (auto range) Current Rati ng 5.1 Amp (Max) Maximum Power Consumptio n 350 Watts Max Heat Dissipat ion 1194.6 BTU/h r T able 9 F[...]

Switch Features 217 Command Line Interface The Command Line Interface (CLI) is an interface using a serial connection that allows basic features to be configured, including IP address management and firmware upgradin g. The CLI is not intended as the main interface for the switch. Configuration File Management The devi ce configuration is stor ed i[...]

218 A PPENDIX B: D EVICE S PECIFICATIONS AND F EATURES LACP LACP uses peer exchan ges across links to determine, on an ongoing basis, the aggregation capability of various links, and conti nuously provides the maximum level of aggregation capability achiev able between a given pair of systems. LACP automatically determines, configures, binds and mo[...]

Switch Features 219 Power over Ethernet Provides power to devi ces over LAN connection . RADIUS Clients RADIUS is a client/server-based protocol. A RADIUS server maintains a user database, which contains per-us er authentication information, such as user name, password and accounting information. Rapid Spanning Tree Spanning Tree can take 30-60 sec[...]

220 A PPENDIX B: D EVICE S PECIFICATIONS AND F EATURES VLAN Support VLANs are collections of switching ports that comprise a single broadcast domain. Packets are classified as be longing to a VLAN based on either the VLAN tag or based on a combination of the ingress port and packet contents. Packets sharing common attri butes can be grouped in the [...]

C P IN -O UTS Null Modem Cable RJ-45 to RS-232 25-pin PC-A T Serial Cable RJ-45 to 9-pin Screen TxD RxD Ground RTS CTS DSR DCD DTR Screen RxD TxD Ground RTS DTR CTS DSR DCD Shell 3 2 5 7 8 6 1 4 1 3 2 7 4 20 5 6 8 Switch 5500 Cable connector: RJ-45 female PC/T erminal Cable connector: 25-pin male/female only required if screen always required requi[...]

222 A PPENDIX C: P IN -O UTS Modem Cable RJ-45 to RS-232 25-p in Ethernet Port RJ-45 Pin Assignments 10/100 and 1000BASE-T RJ- 45 connections. Ta b l e 10 Pin assignments Screen TxD RxD RTS CTS DSR Ground DCD DTR Screen TxD RxD RTS CTS DSR Ground DCD DTR Shell 3 2 7 8 6 5 1 4 1 2 3 4 5 6 7 8 20 Switch 5500 Cable connector: RJ-45 female RS-232 Modem[...]

Ethernet Port RJ-45 Pin Assignments 223 Ta b l e 11 Pin assignments Pin Number 10/100 1000 Ports configured as MDIX 1 Receive Data + Bidirectional Data B+ 2 Receive Data − Bidirectional Data B − 3 Transmit Data + Bidirectional Data A+ 4 Not assigned Bidirectional Data A − 5 Not assigned Bidirectional Data D+ 6 Transmit Data − Bidirectional [...]

D T RO UBLESHOOTING This section describes problems that may arise when installing the and how to resolve these issue. This section includes the following topics: ■ Problem Management — Provides information about problem management. ■ T roubleshooting Solutions — Provides a list of tr oubleshooting issues and solutions for using the device.[...]

Troubleshooting Solutions 22 5 Problems Possible Cause Solution Cannot connect to management usi ng RS-232 serial c onnection Be sure the terminal emula tor program is set to VT-100 compatible, 38400 baud rate, no parity, 8 data bits and one stop bit Use the included cable, or be sure that the pin-out complies with a stan dard null-modem cable Cann[...]

226 A PPENDIX D: T ROUBLESHOOTING No connection and the port LED is off Incorrect ethernet cable, e.g., crossed rather than straight cable, or vice versa, split pair (incorrect twisting of pairs) Fiber optical cable connection is reversed Bad cable Wrong cable type Check pinout and replace if necessary Change if necessary. Check Rx and Tx on fiber [...]

E 3C OM CLI R EFER ENCE G UIDE This section describes using the Command Line Interf ace (CLI) to manage the device. The device is managed thr o ugh the CLI from a dir ect connection to the device console port Getting Started with the Command Line Interface Using the CLI, network managers enter configuration commands and parameters to configure the [...]

228 A PPENDIX E: 3C OM CLI R EFERENCE G UIDE 3 Press Enter . The Passwor d p rompt displays: The Login information is verified, and displays the following CLI menu: If the passwor d is invalid, the fo llowing message appea rs and Login process r estarts. Automatic Logout The user se ssion is automatically terminated after 30 minutes in wh ich no de[...]

CLI Commands 229 ? The ? command disp lays a list of CLI commands on the d evice. Syntax ? Default Configuration This command has no default configurat ion. User Guidelines There ar e no user guidelines for this comma nd. Example The following displays the list presented for the ? command: Select menu option# ? initialize ipsetup logout ping reboot[...]

230 A PPENDIX E: 3C OM CLI R EFERENCE G UIDE Ping The Ping command sends ICMP echo request packets to another node on the network. Syntax ping [ I P address | URL| hostname ] Parameters ■ IP Address — IP addr ess to ping . ■ URL — URL addr ess to ping. ■ hostname — hostname to ping. (Ran ge: 1 - 158 characters) Default Configuration Thi[...]

CLI Commands 231 Summary The Summary command displays the curr ent IP configuration and software versions running on the device. It is intended for devices that support separate runtime and bootcode Images. Syntax summary Default Configuration This command has no default configurat ion. User Guidelines There ar e no user guidelines for this comma n[...]

232 A PPENDIX E: 3C OM CLI R EFERENCE G UIDE ipSetup The ipSetup command allows the user to define an IP address on the device either manually or via a DHCP server . Syntax ipSetup [ dhcp | ip-address mask [ default-gateway ip-address ]] Parameters ■ dhcp — Specifies the IP addr ess is acquired automatically fr om the Dynamic Host Configuration[...]

CLI Commands 233 Upgrade The Upgrade command starts a s ystem download an d thereby allowing a system upgrade. Syntax upgrade [ TF TP Server IP Address | Destination File Name | File T ype] Parameters ■ TF TP Ser ver IP Address — Defines the TF TP server’ s IP addr ess. ■ Source File Name — Specifies the sour ce file name. ■ File T ype [...]

234 A PPENDIX E: 3C OM CLI R EFERENCE G UIDE Initialize The Initialize command r esets the device configuration to fact ory defaults, including the IP configuration. Syntax Initialize Default Configuration This command has no default configurat ion. User Guidelines The system prompts for confirmation of the request. If no r espon se is entered with[...]

CLI Commands 235 Reboot The Reboot command simulates a powe r cycle of the device. Syntax reboot Default Configuration This command has no default configurat ion. User Guidelines There ar e no user guidelines for this comma nd. Example Select menu option: reboot Are you sure you want to reboot the system (yes,no)[no]: no Select menu option:[...]

236 A PPENDIX E: 3C OM CLI R EFERENCE G UIDE Logout The Logout command terminates the CLI session. Syntax logout Default Configuration This command has no default configurat ion. User Guidelines There ar e no user guidelines for this comma nd. Example Select menu option: logout exiting session... Username:[...]

CLI Commands 237 Password The Password command changes the user’ s passwor d. Syntax password Default Configuration This command has no default configurat ion. User Guidelines The user needs to login to the session in order to change the password. Example Select menu option: password Change password for user: username Old password: Enter new pass[...]

F G LOSSARY Access Control List (ACL) ACLs can limit network traffic and r estrict access to certain users or devices by checking each packet for certain IP or MAC (i.e., Layer 2) information. Address Resolution Protocol (ARP) ARP converts betwe en IP addresses and MAC (i.e., hardware) addresses. ARP is used to locate the MAC address corresponding [...]

239 Extensible Authentication Pr otocol over LAN (EAPOL) EAPOL is a client auth enticatio n pr otocol used by this switch to ver ify the network access rights for any de vice that is plugged into the switch. A user name and password is r equested by the switch, and then passed to an authentication serv er (e.g., RADIUS) for verification. EAPOL is i[...]

240 A PPENDIX F: G LOSSARY Internet Control Message Pr otocol (ICMP) A network layer protocol that r eport s errors in pr ocessing IP packets. ICMP is also used by routers to feed back informat ion about better routing choices. Internet Group Management Protocol (IGMP) A protocol thr ough which hosts can register with their local router for multica[...]

241 Multicast Switching A process whereby the switch filt ers incoming multicast frames for services for which no attached host has register ed, or forwards them to all ports contained within the designated multicast VLAN group. Out-of-Band Management Management of the network from a station not attached to the network. Port Authentication See IEEE[...]

242 A PPENDIX F: G LOSSARY Remote Authentication Dial-in User Service (RADIUS) RADIUS is a logon authentication protocol that uses software running on a central server to control acce ss to RADIUS-compliant devices on the network. Remote Monitoring (RMON) RMON provides comprehensive network monitoring capabilities. It eliminates the polling r equir[...]

243 IP-like services. UDP packets a re de liver ed just like IP packets – connection-less datagrams that may be discarded before r eaching their targets. UDP is useful when TCP would be too complex, too slow , or just unnecessary . Virtual LAN (V LAN) A Virtual LAN is a collection of ne twork nodes that share the same collision domain regard less[...]

G O BTAINING S UPPORT FOR Y OUR 3C OM P R ODUCTS 3Com offers pr oduct registration, ca se management, and repair services through eSupport.3com.com. Y ou must ha ve a us er name and password to access these services, which are described in this appendix. Register Y our Product to Gain Service Benefits T o take advantage of warranty and ot her servi[...]

Access Software Downloads 245 Contact your authorized 3Com rese ller or 3Com for ad ditional product and support information. See the table of acces s numbers later in this appendix. Access Software Downloads Y ou are entitled to bug fix / maintenance releases for the version of software that you ini tially purchased with your 3Com pr oduct. T o ob[...]

246 A PPENDIX G: O BTAINING S UPPOR T FOR Y OUR 3C OM P RODUCTS T o send a product dir ectly to 3Com for r epair , you must first obtain a return materials authorization numbe r (R MA). Products sent to 3Com without authorization numbers clearly marked on the outside of the package will be returned to the sender unopened, at the sender’ s expense[...]

Contact Us 247 You can also obtain support in this region usin g this URL: http ://emea.3com.com/support/email.html You can also obtain non-urgent support in this region at these ema il addresses: Technical support and general requ ests: customer_support@3com.com Return material authorization: warranty_repair@3com.com Contract requests: emea_contra[...]

R EGULATORY N OTICES FCC S TATEMENT This equipment has been tested and found to comply wi th the limits for a Class A digital devi ce, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protectio n against harmful interference when the equipment is operated in a co mmercial environment. This equipment generates, u[...]