Dell M6220 manuale d’uso

www .dell.com | support.dell.com Dell™ PowerConnect™ M6220/M6348/M80 24 User’ s Guide Model M6220/M6348/M8024[...]

Notes, Notic es, and Cautio ns A NOTE indicate s impor tant inf ormat ion tha t helps yo u make be tter us e of your swi tch. A NOTIC E indica tes eit her pot entia l damage t o hardwa re or lo ss of data an d tel ls you how to avoid the proble m. A CAUT ION i ndicat es a pot enti al for proper ty damag e, per sona l inju ry, or death. _______ ____[...]

1 Contents 1 Introduction Switc hing Fea tures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 V irtual L ocal Area Netwo rk Supp orted F eatures . . . . . . . . . . . . . . 21 Link Agg regatio n Feat ures . . . . . . . . . . . . . . . . . . . . . . . . . 24 MAC Addr ess Supp orted Featur es . . . . . . . . . . . . . . . . . . . . [...]

2 3 Cable and P ort Information Overv iew . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Conn ectin g the S witc h to a T er minal . . . . . . . . . . . . . . . . . . . . 48 Power Co nnection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 4 Hardware Description Overv iew . . . . . . . . . . . . . . [...]

3 Displ ay Opera tiona l Code Vita l Produ ct Data . . . . . . . . . . . . . . . 90 Updat e Boot Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 Reset the Sy stem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 Restor e Conf igura tion t o Factory D efault s . . . . . . . . . . . . . . . . . 92 Passwor d Recove ry[...]

4 ARP T abl e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140 IPv6 Ma nagem ent Feat ures . . . . . . . . . . . . . . . . . . . . . . . 141 Runn ing Cab le Dia gnosti cs . . . . . . . . . . . . . . . . . . . . . . . . . . 143 Integr ated Cable T est for Copper Cabl es . . . . . . . . . . . . . . . . . 143 Optica l T ransce ive[...]

5 Defining SNM P Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . 207 SNMP v1 and v2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207 SNMP v 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207 SNMP Global Pa rameter s . . . . . . . . . . . . . . . . . . . . . . . . 208 SNMP View Settings . . . . . . . [...]

6 7 Configuring Switching Information Overv iew . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259 Dot1x Au thenticati on . . . . . . . . . . . . . . . . . . . . . . . . . . . 260 Authe nti cated U sers . . . . . . . . . . . . . . . . . . . . . . . . . . . 265 Port Security . . . . . . . . . . . . . . . . . . . . . . . . . [...]

7 VLAN Port Sett ing s . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330 VLAN LAG Settin gs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333 Bind M AC to VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 335 Bind I P Subnet to VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . 337 Prot ocol G roup . . . . . . .[...]

8 Dynamic A RP Inspec tion . . . . . . . . . . . . . . . . . . . . . . . . . . . . 387 DAI Gl obal Con figurati on . . . . . . . . . . . . . . . . . . . . . . . . . 387 DAI Inte rface Conf iguration . . . . . . . . . . . . . . . . . . . . . . . 388 DAI V LAN Config uration . . . . . . . . . . . . . . . . . . . . . . . . . 390 DAI AC L Configura tio[...]

9 RMO N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 431 RMON Stat istic s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 432 RMON History C ontro l Stat isti cs . . . . . . . . . . . . . . . . . . . . . 434 RMON History T able . . . . . . . . . . . . . . . . . . . . . . . . . . . 436 RMON Eve nt Control . [...]

10 IP Help er . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 500 IP H elper Globa l Con fig urati on . . . . . . . . . . . . . . . . . . . . . . 501 IP Helper In terface Con figurati on . . . . . . . . . . . . . . . . . . . . 504 IP Help er Statisti cs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 506 RIP . . . . [...]

11 10 Configuring IPv6 Overv iew . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 557 Global Co nfigurat ion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 558 Interfac e Configu ration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 559 Interface Summary . . . . . . . . . . . . . . . . . . . . . . . . . [...]

12 11 Configuring Quality of Service Quality o f Service Overview . . . . . . . . . . . . . . . . . . . . . . . . . . 621 Config uring Different iated Services . . . . . . . . . . . . . . . . . . . . . . 622 DiffServ Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 622 Definin g DiffServ . . . . . . . . . . . . . . . . . . . . . .[...]

13 MLD T raffi c . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670 MLD P roxy Conf iguratio n . . . . . . . . . . . . . . . . . . . . . . . . . 671 MLD P roxy Conf iguratio n Summ ary . . . . . . . . . . . . . . . . . . . 673 Interface Membership Inf ormation . . . . . . . . . . . . . . . . . . . . 674 Interfac e Membership Inform[...]

14 13 Getting Help Online Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 730 Automate d Order -Status Servic e . . . . . . . . . . . . . . . . . . . . . 731 Supp ort Se rvice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 731 Dell En terprise T rain ing and C ertification . . . . . . . . . . . . . . . . . . . 731 [...]

Intr oducti on 15 1 Introduction This section de scribes the sw itch user -configurable f eatures. F or a li st of all featur es, see t he softwar e version r elease notes. Note: Before procee ding, r ead the r elease notes for this pr oduct . Y o u can downl oad the rele ase note s from the Del l Suppo rt websit e, support.de ll.com . The Dell™ [...]

16 Introduct ion System Features sFlow sFlow is the standard for m onitoring high-speed swit ched and routed netw orks. sFlow technology is built into network equipme nt and gives complete v isib ility into net work acti vity , enabling ef fectiv e management and control of network resources. CDP Interoperability Allows the P owerConnect switch to [...]

Intr oducti on 17 Software Download Softwar e download en ables storage of backup firmwar e images. F or information ab out downloading the software, see "Software Download an d Reboot . " T r ivial File T ra nsfer Protocol (TFTP) The P owerConnect M622 0/M6348/M80 24 switches support boot ima ge, firmwar e, and config uration upload or d[...]

18 Introduct ion Port Aggregat or The P ort Aggregator feat ur e minimi zes the administ ration required for ma naging the P owerConnect M6220/M 6348/M8024. Whe n the switch is o peratin g in simple mode, the administ rator can map interna l ports to external ports wi thout hav ing to kn ow anything a bout STP , VLANs , Link Agg regatio n or other [...]

Intr oducti on 19 Dynamic ARP Inspection Dynamic ARP Insp ection (D AI) is a security feature that r ejects invalid and mal icious ARP packets. The featur e prevents a class of man-in-t he-middle attacks, whe re an unfriendly station intercepts traffic for other stations by poisoning the ARP caches of it s unsuspecting neighbors. The miscr eant sen[...]

20 Introduct ion Port-Bas ed Features Jumb o Frames Support Jumbo frames e nable transport ing identical data in fewer frames to ensure less overhea d, lower processi ng time, and f ewer interrup ts. Auto-MDI/MDIX Support Y o ur sw itch sup ports auto-dete ction be tw een crossed and straight-throu gh cables. Media -Depende nt Interfa ce (MDI ) is [...]

Intr oducti on 21 Alter nate Stor e and Forwa rd (ASF) The Alternate Store and F orward (ASF) featur e reduces latency for lar ge packets. When ASF is enabled, the memory management unit (MMU) can forwar d a packet to the egr e ss port before it has been entirely re ceived on t he Cell Buffer P ool (CBP) memory . AFS, which is also known as cut-thr[...]

22 Introduct ion GVRP Support GARP VLAN Registration P rotocol (GVRP) provides IEEE 802.1Q-comp liant VLAN pruning and dynamic VLAN cr eation on 802.1Q trunk ports . When GVRP is enabled, the switch re gisters and propagates VLA N membership on all po rts that are part of the active spanning tree protocol top ology . F or inf orm at ion about co nf[...]

Intr oducti on 23 Spanning T ree Prot ocol Features Spanning T ree n ow supports IEEE8 02.1Q-2005 This version of the IEEE Multiple Spanning T r ee Protocol corr ects problems associated with the previous version, provides for faster transition-to-forw arding, a nd incorporates new fe atures for a po rt (rest ricted role and re stricted TCN). Span [...]

24 Introduct ion Spann ing T r ee Root Gu ard Spanning T ree Root Gua rd is used to prevent the root of a Sp anning T re e instance from changing unexpe ctedly . The priorit y of a Bridge ID can be se t to zero but another Bridge ID with a lower mac addr ess could also s et its priori ty to zero and tak e over root. Bridge Protoc ol Data Unit Guar [...]

Intr oducti on 25 Routing Fe atures VLAN Routing The P owerConnect M 6220/M8024/ M6348 softwar e supp orts VLAN routing. Y ou can also configure the softwar e to allow traffic on a VL AN to be tr eated as if the VLAN wer e a router port. Routing Information Proto col (RIP) The route configuration and route preference featur es have the following ch[...]

26 Introduct ion IP Interface Configuration IP interface config uration includes the abili ty to configure the bandwidth, Destination Unr eachable messages, and I CMP Redirect messa ges. IP Helper P rovides the ability to relay various protocols to servers on a different subnet. VRRP Route Interface T racking Extends the capability of the Virtual R[...]

Intr oducti on 27 MAC Multicast Support Multic ast serv ice is a limite d broadca st serv ice tha t allow s one-to-m any a nd many-t o-many con nections . In Layer 2 multicast services, a single frame addressed to a specific multicast address is received, and copies of the frame to b e transmitted on each relevant port are cr eated. F or inf orm at[...]

28 Introduct ion IPv6 Ro uting Fe atures IPv6 6 to 4 Auto T unnels Automatica lly formed IPv4 6 to 4 tunnels for carry ing IPv6 traffic. The automatic tunnel IPv4 destination addr ess i s derived from the 6 to 4 IPv6 address of the tunnel nexthop. There is support the functional ity of a 6 t o 4 border rout er that con nects a 6 to 4 site to a 6 to[...]

Intr oducti on 29 OSPFv3 The OSPFv3 Configuration page has been updated with the following changes: • AutoCost Reference Bandwidth field • Defau lt P assiv e Setting field • Max imum P aths increased from 2 to 4 • P assive Mode field Quality of Ser vice Featu res Vo i c e V L A N The V oice VLAN feature enables switch ports to carry voice t[...]

30 Introduct ion Multicast Fe atures IPv4 Mul ticast Fea tures Updated IPv4 Multicast Routing Support The Multicast packa ge code has been extensively re-engineered and furnished with the following: • PIM-DM advance d to RFC 3973 • PIM-SM a dvanced to RF C 4601, pim-sm-bsr-05, draft-ietf -pim-mib-v2 -03 • D VMRP advanced to dr aft-i etf -idmr[...]

Intr oducti on 31 IPv6 Mul ticast Fea tures Protocol Independent Multicast IPv6 Su pport PIM-DM and PIM-SM support I Pv6 routes . MLD/MLDv2 (RFC2710/RFC3810) MLD is used by IPv6 systems (listeners and routers) to report their IP multica st addresses memberships to any neig hborin g multic ast rout ers. The i mplem entation o f MLD v2 is b ackward c[...]

32 Introduct ion Passw ord Manag ement Sec urity P asswor d management provi des increase d network securit y and improved passwo rd control. P asswor ds for SSH, T elnet, HTTP , HTTPS, and SNMP access are as signed s ecurity features. F or more information about password ma nagement, see "P assword Management." T ACACS+ T ACACS+ provides[...]

Confi guring Dell PowerC onne ct 33 2 Using Dell™ Open Manage™ Switc h Administrator The topics covered i n this section include: • Setting the IP Addr ess of the Switch • Starting the App lication • Underst anding the In terface • Using th e Switch Adm inistrator Buttons • Definin g F ields • Accessing the Switch Through th e CLI ?[...]

34 Confi gurin g Del l PowerCo nnect Setting the IP Address of the Switch T wo methods for se tting the IP addr ess are to use DHCP or to st atically assi gn the addr ess. See the the section titled "Accessing the Switch Through the CL I" on page 41 to s tart the CLI. V erifying the Out-of- Band (OOB) I P Address Using the show ip inter f[...]

Confi guring Dell PowerC onne ct 35 Starting the Application 1. Open a w eb browser . 2. Enter the switch’s IP address (as defined in the CLI) or the out-of -band IP address in the address bar and press <Enter>. F or informat ion about ass igning a n IP addr ess to a switch, see "Configuration O verview." 3. When the Log in window[...]

36 Confi gurin g Del l PowerCo nnect Figur e 2-1. Switc h Admini strato r Compo nent s PowerC onnect M6348 2 1 4[...]

Confi guring Dell PowerC onne ct 37 Figur e 2-2. Switc h Admini strato r Compo nent s PowerC onnect M6220 2 3 1 4[...]

38 Confi gurin g Del l PowerCo nnect Figur e 2-3. Switc h Admini strato r Compo nent s PowerC onnect M8024 2 3 1 4[...]

Confi guring Dell PowerC onne ct 39 T a ble 2-1 lists t he interface components with their corresponding numbers. T abl e 2-1. Inte rface C omponents Compo nent N ame 1. The tre e view contains a list of various device featur es. The branches in the tr ee view can be expa nded to view all the co mponent s under a speci fic feature, or retracted to [...]

40 Confi gurin g Del l PowerCo nnect Using the Switch Ad ministrator Buttons Informat ion Buttons Device Man agement Buttons T able 2-2 . Informa tion Buttons Button De scription Support Open s the Dell Support page at support.dell.com Help Online h elp that contains informati on to as sist in configuri ng and man aging the sw itch. The o nline hel[...]

Confi guring Dell PowerC onne ct 41 Check Boxes Defining Fields Us er -def ined fie lds ca n co ntai n 1 – 159 characters, unless otherwise noted on t he Dell OpenManage Switch Administr ator W eb page. All characters may be used ex cept for the following: • •/ •: •* •? •< •> •| Accessing the Switch Thro ugh the CLI The swi[...]

42 Confi gurin g Del l PowerCo nnect Console Conn ection 1. T urn on the swi tch and wa it until th e startup is complete. 2. If the adm in ha s not configu red a l ogin a uthe ntica tion m etho d, the n the console > promp t displays when the switch boots up. Oth erwise, the user is pr esen ted with the User: login prompt. Note: The follo wing [...]

Confi guring Dell PowerC onne ct 43 The Interface Configuration mode configures the de vice at t he physical inte rface level. I nterface commands, which r equire subcommands, have anothe r level called the Subinterface Configuration mode. User EXEC Mode The user EXEC level prompt consists of the host name followed by the angle bracket (>). F or[...]

44 Confi gurin g Del l PowerCo nnect Global Conf iguration Mo de Global Configuration commands ap ply to system features, rather than to a specific protocol or interface. T o access Global Configuration mode: 1. At the P rivileged EXEC Mode prompt, type config ure and press <Enter>. The Global Configu ration Mode d isplays as the dev ice host[...]

Cable a nd Por t Inf orma tion 45 3 Cable an d Port Information Overv iew This sectio n describes the switch’ s physical in terface s and provides informatio n about cable connections. Stations are connected to the switch’s ports throug h the physica l inte rfac e port s on th e fron t pan el. F or each station, the appropriate mode (Half/F ull[...]

46 Cable an d Port Infor mation Ethernet Interface The switching port can connect to stations wired in standar d RJ-45 Ethernet st ation mode using straight cables. T ransmission devices connected to each othe r use crossed cables. F igure 3-1 illustrates the RJ-45 connector . Figure 3-1. RJ-45 C onnector[...]

Cable a nd Por t Inf orma tion 47 Bay 1 and Bay 2 Interfaces (M6220 and M8024) The P owerConnect M6220 supports dual 10 G slot interfaces. These interfa ces can operate at 10 Gbps when supporting op tional 10GE modules, or 12 Gbps (to p slot only) when supporting a stack ing module. F igure 3-2 illustrates the 10G slots. The Dell™ P owerConnect?[...]

48 Cable an d Port Infor mation Serial Cable Connec tion Y ou can use the suppled USB T ype A to DB9a serial cable (null-modem) to connect the switch to a terminal for initial setup and configuration (Y ou can also use a comp uter running terminal emulation softwar e.). The switch’s serial cab le is a USB type A to female DB-9 crossover cable (se[...]

Hardware Description 49 4 Hardware Description Overv iew This section contai ns information about device ch arac teristics and modular hardware configurations for the De ll™ P owerConnect™ M6220 /M6348/M8024. The to pics covered in this section include: • P owerConnect F ront P anel • Console (RS-232) P ort • Phys ical Di mensi ons • P [...]

50 Hardware Description PowerCon nect Front Panel PowerConnect M6348 Front Panel The P owerConnect M 6348 front pa nel provid es 16 10/1 0 0/1G Base- T ports. Ther e ar e also 32 inte rnal 1 gigabit ports that connect to each of the serv er blades. Figure 4- 1. Po werCo nnect M63 48 10 Gb CX4 Ports Consol e Port 10/100/ 1000Base -T Auto-sens ing Fu[...]

Hardware Description 51 PowerConnect M8024 Front Panel The P owerConnect M 8024 front pa nel supports up to eigh t 10-gigabit ports. It has two 10-gigab it bays that can su pport SFP+, CX -4, or 10GBase- T modules. The SFP+ Module supports 4 ports, the CX -4 module supports 3 ports, and the 10GBase- T module supports 2 ports. The modules can be use[...]

52 Hardware Description PowerConnect M6220 Front Panel The P owerConnect M62 20 front pane l provides four 10/ 100/1000 B ase- T RJ-45 ports. The front panel has two 10-gig abit bays that can support S tacking, CX -4 , SFP+, XFP , or 10G Base- T modules. Each module provides suppo rt for 2 ports. The stacking module ca n only be used in Bay 1; the [...]

Hardware Description 53 Console (RS -232) Port The console (RS-232) port is used on ly for management through a serial interface. This port provi des a dire ct connection to the switch and is used to acce ss the CLI from a console terminal connected to an EIA/TIA- 232 port. T o connect from the console port on the P ow erConnect M6220/M 6348/M80 24[...]

54 Hardware Description Stacking PowerConnect M6348 Stacking Y ou can stack up to 12 P owerConnect M6348, sup porting up to 576 1-GB p orts. Create a s tack by connecting adjacent units using the stacking ports on the bottom of the switch pa nel. See F igure 4-5. Note: The P owerConnect M 6348 and M6220 ca n not be stack ed together . 1. F or each [...]

Hardware Description 55 PowerConnect M6220 Stacking Y ou can stack up to 12 P owerConnect M6220 units, supp orting up to 240 1-Gb port s. Create a stack by connecting adjacent units using the stacking ports on the top of the switch panel. See F igure 4-5. 1. Install a separately purchased stacki ng module in Bay 1 of each of the swit ches in the st[...]

56 Hardware Description In Figure 4-4 and F igure 4 -5, the sta ck has six M6 22 0 switches connected thro ugh the stacking ports. The first st acking port on each switch is physically connected to the seco nd stacking port on the next switch by using a stacking cable. The first stacking po rt on switch six is connected to the second stacking port [...]

Hardware Description 57 T a ble 4-1 contains the System Status LED definitions. PowerConnect M8024 LEDs The front pan el contai ns light emit ting diodes (LED s) th at pr ovid e in fo rmat ion abou t th e sta tus o f the P owerConnect M8024 unit. Figure 4-7. Front Panel LEDs T able 4-1. PowerConn ect M6348 P ower and St atus LED Definitions LED Col[...]

58 Hardware Description T a ble 4-2 contains the System Status LED definitions. PowerConnect M6220 LEDs The front pan el contai ns light emit ting diodes (LEDs) th at indic ate the st atus of links for the bu ilt-in 1Gb po rt s and th e sy stem stat us. Figure 4-8. Front Panel LEDs T a ble 4-3 contains the System Status LED definitions. T able 4-2.[...]

Hardware Description 59 SFP+ Port LEDs T a ble 4-4 contains SFP+ port LED definiti ons for the P owerConne ct M6220 an d M8024. XFP Module Port L EDs The XFP connectors are on the XFP module wh en it is inserted in the P ow erConnect M6220. T able 4-5 contains XFP port LED definitions. 10/100/1000 Base-T Port LEDs Each 10/100 /1000 Bas e- T port ha[...]

60 Hardware Description Figure 4-9. 10/ 100/1000 Base-T P ort LEDs T able 4-6 conta ins 10/100/1 000 Base- T port LED definiti ons. 10 Gb Base-T Module LEDs Each 10 Gb Base - T Module has thr e e LEDs. T a ble 4-7 contains 1 0 Gb Base- T port LED de finition s for the P owerConnect M6 220 and M8024. T able 4-6. 1 0/100/1000 B ase-T Port Defini tion[...]

Hardware Description 61 Off No link. Act Blinki ng Gre en Activi ty . Off N o acti vity . Wron g Bay Solid Red Modul e is in the wro ng bay . Note: On the Powe rConnect M6220, the module mus t be inse rted in to Bay 2 to oper ate. Wh en the mod ule is insert ed into Bay 1, i t will not op erate and th e Wrong Bay LE D is solid red. T able 4-7 . 10 [...]

62 Hardware Description[...]

Confi guring Dell PowerC onne ct 63 5 Configuring Dell™ PowerConnect™ Overv iew This chapter de scribes the init ial switch configurat ion. T opics covered include: •S t a r t i n g t h e C L I • General Confi guration Informat ion • Booting the Sw itch • Configur ation Overview • Advan ced Configura tion • Softw are Do wnload and R[...]

64 Confi gurin g Del l PowerCo nnect Starting the CLI T o begin running the CLI, perform the following steps: Note: The follo wing ste ps are for use on the cons ole li ne only. 1. Star t the switch an d wait un til the star tup proce dure is complete . The Easy S etup Wizard welco me message now displ ays. Note: If yo u are usi ng th e auto confi [...]

Confi guring Dell PowerC onne ct 65 Figure 5-1. Installat ion and C onfiguratio n Flow C hart Connect Swit ch and Consol e Power on Choose opt ion 2 Boot me nu (Spec ial function s) Loadin g program f rom flas h to RAM Initial Confi guration: IP Address , Subnetma sk, Users Basic S ecurit y configurat ion Wizard Configura tion Process Advance d Con[...]

66 Confi gurin g Del l PowerCo nnect Genera l Configur at ion Information The P owerConnect M622 0/M6348/M80 24 switches ar e delivered w ith binary files co ntaining the swit ch operating sys tem and ASCII configuration files tha t are used to de fine the relationship of the switch to its network environment . The configur ation process consists o[...]

Confi guring Dell PowerC onne ct 67 Booting the Switch When the pow er is turned on with the local termi n al already connected, the switch goes through P ower On Self T est (POST). POST runs ev ery time the switch is initialized and checks har dw are components to dete rmin e if the sw itc h is f ully ope rati ona l bef ore co mple tely boot ing .[...]

68 Confi gurin g Del l PowerCo nnect file descriptors in use: 0 # of different files in use: 0 # of descriptors for deleted files: 0 # of obsolete descriptors: 0 current volume configuration: - volume label: NO LABEL ; (in boot sector: ) - volume Id: 0x0 - total number of sectors: 61,076 - bytes per sector: 512 - # of sectors per cluster: 4 - # of [...]

Confi guring Dell PowerC onne ct 69 Boot Menu May 25 2009 Select an option. If no selection in 10 seconds then operational code will start. 1 - Start operational code. 2 - Start Boot Menu. Select (1, 2):2 Boot Menu Version: 31 October 2007 Options available 1 - Start operational code 2 - Change baud rate 3 - Retrieve event log using XMODEM 4 - Load[...]

70 Confi gurin g Del l PowerCo nnect Target Name: vxTarget Attached IPv4 interface to motetsec unit 0 Adding 70447 symbols for standalone. CPU: Broadcom SBC8548. Processor #0. Memory Size: 0x20000000. BSP version 2.0/2. Created: May 26 2009, 13:11:31 ED&R Policy Mode: deployed WDB Comm Type: WDB_COMM_END WDB: Ready. remLib: Not initialized. rem[...]

Confi guring Dell PowerC onne ct 71 - bytes per sector: 512 - # of sectors per cluster: 4 - # of reserved sectors: 1 - FAT entry size: FAT16 - # of sectors per FAT copy: 122 - # of FAT table copies: 2 - # of hidden sectors: 8 - first cluster is in sector # 260 - Update last access date for open-read-close = FALSE - directory structure: VFAT - file [...]

72 Confi gurin g Del l PowerCo nnect <186> JAN 01 00:00:15 0.0.0.0-1 UNKN[536870176]: bootos.c(218) 1 % Event(0xaaaaaaaa) Instantiating RamCP: as rawFs, device = 0x20001 Formatting RamCP: for DOSFS Instantiating RamCP: as rawFs, device = 0x20001 Formatting...OK. (Unit 1 - Waiting to select management unit)> Applying Global configuration, p[...]

Confi guring Dell PowerC onne ct 73 Configuration Over view Befor e configuring the switch, obtai n the follow ing information from the network admi nistrator: • Is th e network set up for the a utoconfig feat ure? If the net work is setup for a utoconfig, m anual config uration of the switch i s not necessar y (skip the procedures in this sectio[...]

74 Confi gurin g Del l PowerCo nnect • Sets up the SNMP communit y string to be used by the SNMP manager at a given IP addr ess. Y ou may choose to skip this step if SN MP man agement is not us ed for this switch. If it is configured, the defa ult access level is set to the highest a vailable access for the SNM P managem ent interface. Initially [...]

Confi guring Dell PowerC onne ct 75 Figure 5-2. Set up Wizard Flow Chart Ye s Do es t he user wa nt to use setup wiz ard? No No Did the user pre viously sa ve a startup confi guration? Y es T ransfer to CLI mode Ye s Is SN MP Mana geme nt Req ui red ? Request SNMP Community String & Server IP Addr ess No Request user n ame, password Reque st IP[...]

76 Confi gurin g Del l PowerCo nnect Exam ple of an Ea sy Setu p Wiza rd Ses sion This section de scribes an Easy Setup W izard session. See the state diagram (F igure 5-2) for the general flow . The values used by the following session are examples only . Plea se request the actual values from your network adminstrator(s): • IP add ress for the [...]

Confi guring Dell PowerC onne ct 77 The system is not setup for SNMP management by default. To manage the switch using SNMP (required for Dell Network Manager) you can . Set up the initial SNMP version 2 account now. . Return later and setup other SNMP accounts. (For more information on setting up an SNMP version 1 or 3 account, see the user docume[...]

78 Confi gurin g Del l PowerCo nnect Management IP address = 192.168.2.1 255.255.255.0 Default Gateway = 0.0.0.0 Operation Mode = Normal Step 5: Do you want to select the operational mode as Simple Mode? [Y/N] n Final Step: If the information is correct, please select (Y) to save the configuration, and copy to the start-up configuration file. If th[...]

Confi guring Dell PowerC onne ct 79 Ctrl-K .... delete to end of line Ctrl-W .... delete previous word Ctrl-T .... transpose previous character Ctrl-P .... go to previous line in history buffer Ctrl-R .... rewrites or pastes the line Ctrl-N .... go to next line in history buffer Ctrl-Y .... print last deleted character Ctrl-Z .... return to root co[...]

80 Confi gurin g Del l PowerCo nnect • Inte rface T y pes — the foll owing interfa ce types are defined in the PowerConnect M6220 /M6348/M 8024 sw itches: • xg — 10 Gb Etherne t port (for example, 1/ xg2 is the 10 Gb Et hernet port 2). M6220, M6348, an d M8024CLI Re ference Guid e F or detai led information on all the CLI commands available[...]

Confi guring Dell PowerC onne ct 81 Modifying Switching Port Defa ult Settings When configuring/receiving IP addr esses through DHCP and BO OTP , the configuration received from these servers includes the IP address, and may include subnet mask and default gateway . When you first log in, the CLI enters the root of t he command hierarchy . T o go t[...]

82 Confi gurin g Del l PowerCo nnect The following is an example for changing the port description on port 1/ g1 using CLI commands: console(config)# interface ethernet 1/g1 console(config-if-1/g1)# description 100 Retri eving an IP Addres s From a DHCP Se rver When using the DHCP prot ocol to retriev e an IP address, the switch acts as a DHCP cl i[...]

Confi guring Dell PowerC onne ct 83 Securit y Management and Passwor d Configura tion System security is handled through the AAA (A uthentication, Authoriz ation, and Accounting) mechanism that manages user access rights, privileges, and management methods. AAA uses both local and remote user da tabases. Data encryption is handled through the SSH m[...]

84 Confi gurin g Del l PowerCo nnect Configuring an Initial T elnet Password T o configure an i nitial T elnet passwor d, enter the following commands: console(config)# aaa authentication login default line console(config)# aaa authentication enable default line console(config)# line telnet console(config-line)# login authentication default console[...]

Confi guring Dell PowerC onne ct 85 Softwar e Download and Reboot Softwa re Download Through TFT P Server This section contai ns instructions for downloading s witch software ( system and boot i mages) through a TFTP server . The TFTP server must be ava ilable on the netw ork before downloa ding the soft ware. The switch boots and runs whe n decomp[...]

86 Confi gurin g Del l PowerCo nnect TFTP Filename.................................. PC8024v3.1.0.x.stk Data Type...................................... Code Destination Filename........................... image Management access will be blocked for the duration of the transfer Are you sure you want to start? (y/n) y 5. Select the image for the next[...]

Confi guring Dell PowerC onne ct 87 Update Bo otcode Use the updat e bootcode command to update the bootcode on all switches. F or each switch, the bootcode is extracted from the next-active image and programmed to flash. T o update the bootcode for one switch, specify the unit in the comm and (as shown in the following example). T o show the boot [...]

88 Confi gurin g Del l PowerCo nnect 5 - Display operational code vital product data 7 - Update boot code 8 - Delete backup image 9 - Reset the system 10 - Restore configuration to factory defaults (delete config files) 11 - Activate Backup Image 12 - Password Recovery Procedure The following sections describe the Boot menu op tions. Start Oper ati[...]

Confi guring Dell PowerC onne ct 89 6 - 38400 7 - 57600 8 - 115200 0 - no change Note: The select ed baud r ate tak es effe ct immediat ely. 2. The boot process r esumes. Retriev e Event Log usin g XMODEM Use optio n 3 to retrieve the even t log and downlo ad it to your ASCII ter minal. T o retrieve the e vent log from the Boot menu: 1. On the Boot[...]

90 Confi gurin g Del l PowerCo nnect The Send F ile window di splays. 4. Enter th e file path for the file to be downloa ded. 5. Ensur e the protocol is defined as Xmodem. 6. Click Send . The softw are is download ed. Soft war e downloadi ng takes sev eral minutes. The termi nal emulat ion application, such as HyperT erminal, ma y display t he load[...]

Confi guring Dell PowerC onne ct 91 2. The boot process r esumes. Update Bo ot Code Use option 7 to update the boot code in the FLAS H memory . This option is on ly valid after loading new boo t cod e u sing Boo t M enu opt ion 4. U se r act io n is c onf irm ed w ith a Y /N qu est io n be fore exec uti ng t he command. T o download software from t[...]

92 Confi gurin g Del l PowerCo nnect Reset t he System Use o ption 9 to cl ear all FLAS H and re set the sys tem to it s default sett ing. Use r action is confirm ed with a Y/N question before e xecuting the command. T o rese t the syst em fr om the Boot menu : 1. On the Boot menu, sel ect 9 and pr ess <Enter >. The follow ing prompt display [...]

Confi guring Dell PowerC onne ct 93 Password Recov ery Procedure Use opti on 12 w hen a pass wor d is l ost. This allow s the switch to b oot on e time with out p rompti ng f or a console passwor d. Note that the enable passwor d is not prompted for in t his mode. T o re cover a lost passwor d for the local terminal only : 1. Fr o m t h e Boot me n[...]

94 Confi gurin g Del l PowerCo nnect Initi al Connectio n 1. Using the RS-232 po rt, connec t the switch to t he workst ation. 2. Set the ASCII terminal with the fol lowing s ettings an d select the ap propriate COM p ort. The sample screen uses the Hyp erT erminal. Figure 5- 3. H yperT erminal Pr operti es Window Note: 96 00 is the default baud r [...]

Confi guring Dell PowerC onne ct 95 If you do not enter the Boot men u, the system continues operation by decompressing the code into R AM. The code starts running from the R AM and the li st of available port numbe rs and their states (up or down) are disp layed. Note: The follo wing scr een is an exa mple c onfigu ration . Items su ch as addr ess[...]

96 Confi gurin g Del l PowerCo nnect Boot Menu Version: 12 May 2009 Select an option. If no selection in 10 seconds then operational code will start. 1 - Start operational code. 2 - Start Boot Menu. Select (1, 2): Operational Code Date: Tue May 26 14:12:20 2009 Uncompressing..... Target Name: vxTarget Attached IPv4 interface to motetsec unit 0 Addi[...]

Confi guring Dell PowerC onne ct 97 volume write mode: copyback (DOS_WRITE) max # of simultaneously open files: 52 file descriptors in use: 0 # of different files in use: 0 # of descriptors for deleted files: 0 # of obsolete descriptors: 0 current volume configuration: - volume label: NO LABEL ; (in boot sector: ) - volume Id: 0x0 - total number of[...]

98 Confi gurin g Del l PowerCo nnect - free space on volume: 44,380,160 bytes PCI unit 0: Dev 0xb624, Rev 0x12, Chip BCM56624_B1, Driver BCM56624_B0 SOC unit 0 attached to PCI device BCM56624_B1 Adding BCM transport pointers Configuring CPUTRANS TX Configuring CPUTRANS RX st_state(0) = 0x0 st_state(1) = 0x2 <186> JAN 01 00:00:15 0.0.0.0-1 UNK[...]

Confi guring Dell PowerC onne ct 99 Devic e Default Setti ngs T o re turn to devi ce default se ttings use delete startup-config command at the privileged mode prompt (#), and r eboot the de vice. Once device r eloads – it is set with the default settings. console> console> enable console# delete startup-config Startup file was deleted cons[...]

100 Confi gurin g Del l PowerCo nnect Burned In MAC Address.......................... 0063.4802.0011 console# 5. P ing the mana gement stat ion from the s witch to ens ure that connectiv ity has been a chieve d. W ait 30 secon ds for port to be in STP forw arding before pingin g the mana gement s tation. In t his e xample, the Mana gement s tatio n[...]

Confi guring Dell PowerC onne ct 101 console(config)# aaa authentication login default line console(config)# aaa authentication enable default line console(config)# line console console(config-line)# login authentication default console(config-line)# enable authentication default console(config-line)# password tommy123 console(config-line)# exit co[...]

102 Confi gurin g Del l PowerCo nnect Configur ing Secure Manageme nt Access (HTTPS) When managing the switch securely through the standa rd W eb browser , the SSL (Secure Sock et Lay er) security protocol is used. T o manage the switch securely through the standard W eb browser , perform the following: 1. In or der to configur e the swit ch to all[...]

Confi guring Syst em Inform ation 103 6 Configuring System Information Overv iew Use the me nus li sted on th e System page to def ine the sw itch’s relationship to its env ironment . T o display the System page , clic k System in the tree view . The System menu page contains links to the following features: • Definin g General D evice Inform a[...]

104 Confi gurin g Syst em Inform atio n Defining General De vice Inform ation The General menu page contains links to pages that allow you to configure device parameters. Use this page to access the following featur es: •A s s e t • Sys tem Health •V e r s i o n s •S y s t e m R e s o u r c e s • Time Zone Configura tion • Summer T ime [...]

Confi guring Syst em Inform ation 105 • Banner motd (message of the day) — Enter the messag e that appear s on the GUI banner (if en abled). • Banner motd acknowledg e — En able t o di splay the G UI ba nner mo td in th e GU I ban ner . • Sys Ob jec t ID — The assigned Syst em Object ID. • MAC Address — Displays the MAC add r ess of[...]

106 Confi gurin g Syst em Inform atio n System He alth Use the Health page to view ph ysical device i nformation, including information about t he switch’s power and ventil ation sources. To d i s p l a y t h e Health page, click System > Ge neral > Hea lth in the tree view . Figure 6-2. Healt h The Heal th page contains th e following fiel[...]

Confi guring Syst em Inform ation 107 V ersions Use the Ve r s i o n s p age to view information about the softwar e versions currently running. To d i s p l a y t h e Ve r s i o n s page, click System > Ge nera l > Ve r s i o n s in the tree view . Figure 6-3. Versions The Ve r s i o n s pa ge contains the following fields: • Unit No . —[...]

108 Confi gurin g Syst em Inform atio n System Re sources Use the System Resources page to vi ew in form at ion about m em ory us age and task u tiliz at ion. To d i s p l a y t h e System Resources page, c lick System > Genera l > System Resources in the tr ee view . Figure 6-4. System R esources The System Resources pa ge contains the follo[...]

Confi guring Syst em Inform ation 109 – One minute –F i v e m i n u t e s Displaying System Reso urces Using the CLI F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • Sys tem Manageme nt Commands T ime Zone Configurati on Use the Ti m e Z o n e C o n f i [...]

110 Confi gurin g Syst em Inform atio n Configuring T ime Zone Settings Using the CLI F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • Clock Commands Summer T ime Configura tion Use the Su mmer Time Config uratio n page to specify a defined summer time durat[...]

Confi guring Syst em Inform ation 111 • Start W eek — Select the starting week num ber . This field displays only when the Re curring check box is selected. • Star t Day — Select th e starting day number . This field displays on ly when the R ecurring check box is sel ecte d. • Star t Month — Select the st arting month. • Star t T ime[...]

112 Confi gurin g Syst em Inform atio n Clock Det ail Use the Clock Detail page to set the t ime and date or view infor mation abo ut the current tim e, time zone, and summer time settings. To d i s p l a y t h e Clock Detai l page, click Syst em > Ge neral > Clock Detail in the tree view . Figure 6-7. Clock Detail The Clock Detail page provi[...]

Confi guring Syst em Inform ation 113 Reset Use the Re set p age to reset th e device. To d i s p l a y t h e Res e t page , cli ck System > General > Res e t in the tree view . Figure 6-8. Reset The Re s et page contains the following fields: • Res et Unit No . — Use to select the device in the stack that needs to be reset. Resetting the[...]

114 Confi gurin g Syst em Inform atio n Configuring SNTP Settings The devi ce sup ports the Simple Netwo rk Time Protocol (SN TP). SN TP ass ures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a netw ork SNTP server . The device operates only as an SNTP client and cannot provide time s[...]

Confi guring Syst em Inform ation 115 • If mor e than one Unicast device r esponds, synchr on izat ion inform ation is preferred from the dev ice with the lo wes t str atum . • If the s ervers have t he same st ratum, synchronizat ion informa tion is accepted from the SN TP se rver that r esponde d first. MD5 (Mes sage Di gest 5) A u then ticat[...]

116 Confi gurin g Syst em Inform atio n • Recei ve Broadcast Ser vers Update — If enabled, listens to the SNTP servers for Broadcast server time information on the selected interfaces. Th e device is synchronized whenever an S NTP packet is received, even if synch ronization w as not requeste d. • Recei ve Unicast Servers Update — If enable[...]

Confi guring Syst em Inform ation 117 Figure 6-10. SN TP Authent ication The SNTP Authenti cation page contains the following fields: • SNTP Aut hentication — If ena bled, r equir es authen ticatin g an SNTP sess ion betwee n the device and an S NTP s erver . • Authent ication — T y pe of authe ntica tion. S ystem su pport s MD 5 only . •[...]

118 Confi gurin g Syst em Inform atio n Adding an SNTP A uthentication Key 1. Open the SNTP Authenti cation page. 2. Click Add . The Add A uthentication K ey page displays: Figure 6-11. A dd Auth enticati on Key 3. Define th e fields as nee ded. 4. Click Apply Cha nges . The SNTP a uthenticat ion ke y is added, and the devi ce is upda ted. Displayi[...]

Confi guring Syst em Inform ation 119 Removing an Authentication Key 1. Open the SNTP Authenti cation page. 2. Click Show All . The Authenticati on Key T able pag e dis play s. 3. Select an Au thentic ation Ke y T able entry by ch ecking its the Rem o ve che ck b ox. 4. Click Apply Cha nges . The entry is removed, and the d evice is updated. Defini[...]

120 Confi gurin g Syst em Inform atio n The SNTP Ser vers page cont ains the following fields: • SNTP S er ve r — Selects user -defined SNT P server IP ad dress from a drop-down m enu. Up to eight SNTP servers can be defined by using t he Add button. • Encryption K ey ID — Specifies user-defined key ID used to commu nicate betwe en th e SNT[...]

Confi guring Syst em Inform ation 121 Displ aying t he SNTP S erver s T able 1. Open the SNTP Ser vers page. 2. Click Show All. The SNTP Ser vers T able page displays . Figure 6-15. SNTP Servers T abl e Modify ing an SNTP Server 1. Open the SNTP Ser vers page. 2. Click Show All. The SNTP Ser vers T able opens. 3. Click Edit ne xt to the SNTP S er v[...]

122 Confi gurin g Syst em Inform atio n • Clock Commands. Managing Logs The switch may generate messages in respon se to even ts, faults, or errors occurring on t he platform as well as changes in configuration or other occurrences. These messages are stored both locally on the platform and forwarded to one or more centralized points of collectio[...]

Confi guring Syst em Inform ation 123 To d i s p l a y t h e Global Se ttings page, click System > Log s > Global Settings in the tree view . Figure 6 -16. Global Settin gs The Global Settings page contains the following fields: • Logging — Enables device glo bal logs for Cache, File, and Serv er Logs . All logs which a re printed to the [...]

124 Confi gurin g Syst em Inform atio n • Alert — The second h ighest warnin g level. An alert log is sa ved if th ere is a serious dev ice malfunction, such a s all devi ce featur es being down . • Critical — The th ird highest warnin g level. A critical lo g is sav ed if a critical d evice malfunct ion occurs, for e xample, two de vice po[...]

Confi guring Syst em Inform ation 125 RAM Log T abl e Use the RA M L o g T a b l e page to view information about specific R AM (cache) log en tries, including the time th e log was en tered, the log sever ity , and a desc riptio n of the log. To d i s p l a y t h e RAM L o g T a b le , click System > Log s > RAM L o g in th e tr ee vie w . F[...]

126 Confi gurin g Syst em Inform atio n Removing Log Info rmation Using the CLI F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • Sys log Co mmands. Log File The Lo g F il e contains informat ion about specifi c log entries, including th e time the log was en[...]

Confi guring Syst em Inform ation 127 Removing Log Information 1. Open the Log F il e T ab le page. 2. Click Clea r L o g . The log informa tion is removed from the log file tab le, and the dev ice is upda ted. Removing Log Info rmation Using the CLI F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing c[...]

128 Confi gurin g Syst em Inform atio n • UDP P ort (1 – 65535) — Sets t he UDP port from wh ich the logs a re sent. The defa ult value is 514. • Fa c i l i t y — A user -defin ed application from w hich system logs are sent to the remote server . Only one facility can be a ssigned to a sing le server . If a sec ond fac ility le vel is as[...]

Confi guring Syst em Inform ation 129 Figure 6-20. Add Remot e Log Server Sett ings 3. Complete the fields in the dialog and click Apply Chan ges . The Remote L og Serv er Settings page displays the server in the Log Se rv er l ist o nl y a fte r y ou g o b ac k to th e Remote L og Ser ver Settin gs page. V iewing/ Removing a Lo g Server 1. Open th[...]

130 Confi gurin g Syst em Inform atio n W orking wi th Remote S erver Logs Using the C LI Command s F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • Sys log Co mmands. Setting th e Operational Mode Use rs wi th a pr ivi leg e lev el o f 15 c an co nfi gure t[...]

Confi guring Syst em Inform ation 131 Figure 6 -22. Operationa l Mode C onfiguration The Operatio nal Mode Config uration page contains the following fields: • Sim ple S witc h M ode — Enable or disable Simple mo de on the switch. W hen Simple Switch Mode is disa bled, t he sw itch ope rates in th e nor mal mo de, and all app licab le featu res[...]

132 Confi gurin g Syst em Inform atio n Figure 6 -23. Operational Mode Con figuration Confirmation 4. T o confirm the mode change, sel ect Ye s . 5. Click Apply Cha nges to chan ge the mode. Chan ging the Op erating Mod e Using the CLI Comman ds F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap t[...]

Confi guring Syst em Inform ation 133 Out of Band Int erface Use the Ou t of Band Interfa ce menu page to assign the O ut of Band Int erface IP address, the Sub net Mask, the Default Gatew ay IP address, and to assign the boot pr otocol. To d i s p l a y t h e Out of Band Interfac e page, c lick System > IP Addressing > Out of Band I nterface[...]

134 Confi gurin g Syst em Inform atio n Defining Out o f Band Interfa ce Parameters Using CLI Comm ands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • IP Addre ssi ng C om man ds. Domain Name Server (DNS) The Domain Name System conve rts user -defined doma[...]

Confi guring Syst em Inform ation 135 Addin g a DNS Serv er 1. Open the Domain Name Ser ver (DN S) page . 2. Click Add . The Add DNS Server page display s: Figure 6-26. A dd DNS S erver 3. Define th e relevant fields . 4. Click Apply Cha nges . The new DNS server is defin ed, and the dev ice is up dated. Configuring DNS Servers Using the CLI Comman[...]

136 Confi gurin g Syst em Inform atio n Figure 6-27. Defaul t Domain Name The Default Domain Name page contains the following field: • Default D omain Name (0 – 255 character s) — Contains the user -defined defa ult domain n ame. When configured, the d efault do main nam e is applied to a ll unq ualified h ost nam es. Defining DNS Domain Name[...]

Confi guring Syst em Inform ation 137 Host Name Mapping Use the Host Name Map ping page to ass ign an IP addr ess to a sta tic host name. The Host Nam e Mapping page provides one IP address per host. To d i s p l a y t h e Host Name Mappin g page, click System > IP Addressing > Host Nam e Mapping. Figure 6-28. Host Name Mapping The Host Na me[...]

138 Confi gurin g Syst em Inform atio n Figure 6-29. Add Stat ic Host Name Map ping 3. Define th e relevant fields . 4. Click Apply Cha nges . The IP ad dres s is mapped to t he host na me, and the de vice is updated. Displaying the Static Host Name Mapping T able 1. Open the Host N ame Ma pping page . 2. Click Show All . The Static Host N ame Mapp[...]

Confi guring Syst em Inform ation 139 Mapping an IP Add ress to Domain Ho st Names Using th e CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • IP Addre ssi ng C om man ds. Dynamic Ho st Name Mapping Use the Dy namic Host Name Mapping page to vie[...]

140 Confi gurin g Syst em Inform atio n ARP T able Use the ARP T able page to view ARP parameters for IP interf aces. The ARP table displays the correlation between ea ch MAC address and its corr espondi ng IP address. To d i s p l a y t h e ARP T able page, click System > IP Addressing > ARP in the tree view . Figure 6-32. ARP T able The ARP[...]

Confi guring Syst em Inform ation 141 IPv6 Mana gement Featur es The P owerConnect M622 0/M6348/M80 24 switch so ftware include s several enhanceme nts to the IP v6 management feature. Y ou can assign either an IPv4 or IPv6 address to the management interface. In previous software r eleases, the mana gement port supported I Pv6 addresses, but only [...]

142 Confi gurin g Syst em Inform atio n • Change IPv6 Gateway — S elect this op tion to allow the IP v6 Gate way field to be ed ited. • IPv6 Gatew ay — En ter the IPv6 gateway address (do not include a prefix). Use an IPv6 global or link- local addr ess format . • Add IPv6 Add ress — T o a dd an IPv 6 addr ess, se lect Add s o you can s[...]

Confi guring Syst em Inform ation 143 Running Ca ble Diagnostic s Use the Diag nostics menu page to perform virtual cable te sts for copper and fiber optics cables. To d i s p l a y t h e Diagnostics page, click System > Diagnostics in the tr ee view . Use this pa ge to go to the f ollowi ng fea tur e: • Integrated Cable T est for Copper C abl[...]

144 Confi gurin g Syst em Inform atio n The Integrated Cable T es t for Copper Cables page contains the following fields: • Inte rface — The interface to which the cable is c onn ected. • T est Result — The cable test results. P ossible v alues ar e: – No Cable — There is not a cable connected to the port . – Open Cable — The cable [...]

Confi guring Syst em Inform ation 145 Figure 6- 36. I ntegr ated Ca ble T est Result s T able Perf orming Copp er C able T est s Usi ng C LI Co mmand s F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • PHY Di agnostics Comm ands. Optical T rans ceiver Diagn o[...]

146 Confi gurin g Syst em Inform atio n Figure 6-37. O ptical T ransc eiver Di agnostic s The Optical T ra nsceiver Diagnosti cs page contains the following fields: • Inte rface — T he port IP address on which the cable is tested. • Te m p e r a t u r e — The temp erature (C) at which the cable is operat ing. • Vo l t a g e — The voltag[...]

Confi guring Syst em Inform ation 147 Figure 6-38. O ptical T ransc eiver Di agnostic s T ab le The test runs and displays t he Optical T ransceiver Diagnostics T able page. Performing Fiber Optic Ca ble T ests Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Re[...]

148 Confi gurin g Syst em Inform atio n • R ADIUS Accounting Server Statistics • RADIUS Server Statistics •A u t h o r i z a t i o n N e t w o r k R A D I U S •T e l n e t S e r v e r • Denial of S ervice Access Pr ofile Use the Access P rofile p age to define a pr ofile and rules for access ing the devi ce. Y ou can limi t access to spec[...]

Confi guring Syst em Inform ation 149 Figure 6 -39. Access Profile • Access P rofile — Shows the Access P rofile. • Current Active Acce ss P rofile — Shows profile that is activated . • Set Acti ve Access P rofile — Activates th e access profile . • Rem ov e Pr o f i l e — Wh en checked, r emo ves an access profile from th e Access [...]

150 Confi gurin g Syst em Inform atio n Figure 6-40. Prof ile Rules T able Adding an Acc ess Profile 1. Open the Access P rofile pag e. 2. Click Add P rofile . The Add an Access P rofile page disp lays. Figure 6 -41. Add an Ac cess Profile 3. Enter the prof ile name in t he Access P rofile Name text bo x. 4. Complete th e fields :[...]

Confi guring Syst em Inform ation 151 Management Method — Select from the dropdown b ox. The policy is r estricted by the managem ent chosen. Interf ace — Choose the check box for th e interface if the policy sh ould have a rule based on t he interfa ce. Inter face can be a p hysical in terface, a LAG, or a VLAN. Source IP Address — Sele ct t[...]

152 Confi gurin g Syst em Inform atio n Figure 6 -42. Add An Ac cess Profile Ru le 3. Complete the fi elds in the di alog: Management Method — Select from the dropdown b ox. The policy is r estricted by the managem ent chosen. Interf ace — Choose the check box for th e interface if the policy sh ould have a rule based on t he interfa ce. Inter [...]

Confi guring Syst em Inform ation 153 Removing a Rule 1. Open the Access P rofile pag e . 2. Click Show All to displa y the Pr o f i l e Ru le s T a b l e pag e. 3. Select a rul e. 4. Check the Rem o ve chec k b ox. 5. Click Apply Cha nges . The rul e is re moved, and th e device i s updated . Defining Access Profiles Using CLI Commands F or inf or[...]

154 Confi gurin g Syst em Inform atio n Figure 6 -43. Authentication Profiles The Authenticat ion Profiles page contain s the following field s: Authentication Profile Name Displays lists to which us er -defi ned authen tication p r ofiles are added. Use the radio buttons to apply the authentication p rofile to govern e ither Log in or Enable p art[...]

Confi guring Syst em Inform ation 155 Authentication Method • Optional Methods — User auth entication met hods. P ossible option s are : – None — No user aut hentication occurs. – Loc al — User authen tication occurs at the devi ce level; the device ch ecks the use r name and passwor d for authenti cation. – RA D IU S — U ser authen[...]

156 Confi gurin g Syst em Inform atio n 3. Enter t he profil e name of 1 to 12 ch aracters i n the Pr o f i l e N a m e field. Note: The prof ile name sh ould not incl ude space s. 4. Click Apply Cha nges . A profile is created. Y ou can a ctivate an authenti cation profi le using the System > Mana gement Security > Select Authentication web [...]

Confi guring Syst em Inform ation 157 Configuring an Authentication Profile Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • AAA Commands. Select Aut henticatio n Afte r authentic ation pr ofiles ar e defi ned, you can apply them to manage[...]

158 Confi gurin g Syst em Inform atio n • Secure HT TP an d HT TP — Au thenticati on method use d for Secur e HTTP access and HTTP access, respectively . P ossible field v alues are: – None — No authenti cation method is used for acc ess. – Loc al — Authen tication occurs locall y . – RA D IU S — Au then ticatio n o ccurs at th e RA[...]

Confi guring Syst em Inform ation 159 – T ACA CS+, Local, None — Auth entication first occurs at the T ACACS+ serv er . If authentica tion cann ot be verified at the T ACACS+ serv er , th e session is a uthenticat ed locally . If the session cannot be authentica ted loca lly , the se ssion is permitte d. Applyi ng an Auth enti catio n Met hod L[...]

160 Confi gurin g Syst em Inform atio n Applying an Authentication Profile to T elnet Sessions 1. Open the Select Aut hentication pag e. 2. Select an au thentic ation profile in the Te l n e t field. 3. Click Apply Cha nges . Console sessions are assigned authentication profiles. Applying an Authentication Profile to Secure T elnet (SSH) Sessions 1[...]

Confi guring Syst em Inform ation 161 Password Manageme nt P asswor d management provi des increase d network securit y and improved passwo rd control. P asswor ds for SSH, T elnet, HTTP , HT TPS, and SNMP access ar e assigned security featur es, including: • Defin ing minimum pa sswor d lengths (t he minimum pas swor d length i s 8 when pass wor[...]

162 Confi gurin g Syst em Inform atio n • Enable P assword Aging (1 – 365) — Indicat es the amount of ti me that ela pses befor e a passwor d is age d out, when checked. The field value is from 1 to 3 65 days. The pa ssword aging feature functions only if the switch clock is synchron ized to an SN TP server . Se e the "Clock Comm ands&qu[...]

Confi guring Syst em Inform ation 163 Figure 6-48. Loca l User Data base The Loca l User Data base page contains the following fields: • User Name — List of users. • Access Level — User acce ss level. The lowe st user access level is 1 ( re a d o nl y ), and 15 (readwrit e) is the highest. T o suspend a user ’s access, set level to 0 (onl[...]

164 Confi gurin g Syst em Inform atio n Addi ng a Us er to th e Local U ser Data base 1. Open the Loc al U se r D at ab as e page. 2. Click Add to dis play the Add User page. The Add a N ew User page i s displa yed. Figure 6-49. A dd a New User 3. Complete th e fields . 4. Click Apply Cha nges . The new user is defined, and the devi ce is updated. [...]

Confi guring Syst em Inform ation 165 Removing Users From the Local User Database 1. Open the Loc al U se r D at ab as e page. 2. Click Show All to displa y the Loc al U se r T abl e pag e. 3. Select a User Name . 4. Check Rem ov e . 5. Click Apply Cha nges . The user is r emoved, and the device is updated. Assigning Users With CLI Commands F or in[...]

166 Confi gurin g Syst em Inform atio n Figure 6-51. Lin e Password The Line P assword page contains the following fields: • Line M ode — Drop-down menu specifies de vice access throu gh a Co nsole, T eln et, or Secure T eln et (SSH) session. • Line P assword (8 – 64 characters) — The line password for accessi ng the device th rough a con[...]

Confi guring Syst em Inform ation 167 Assigning Line Passwords Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • AAA Commands. Enable Pass word Use the Ena ble P assword page to s et a loc al passwo rd to contro l access to normal and privi[...]

168 Confi gurin g Syst em Inform atio n Defining Enable Passwords 1. Open the Enable P assword pag e . 2. Specify the En able password. 3. Confirm the E nable passw ord. 4. Click Apply Cha nges . The Enab le passwor d is set. Assig ning Ena ble Pa sswor ds Usin g CLI Com mand s F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this fun[...]

Confi guring Syst em Inform ation 169 Figure 6-53. T ACACS+ Setti ngs The T ACA CS+ Settings page contains the following fields: • Host Nam e / IP Ad dress — Specifies the T ACACS+ Server . • Pr i o r i t y ( 0 – 65535) — Specifies the order in which the T ACACS+ servers are used. The default is 0. • Authent ication P ort (0 – 65535) [...]

170 Confi gurin g Syst em Inform atio n – Not Connected — There is not currentl y a connection between the device a nd the T A C ACS+ ser ver . The fields in the Defa ult P ar ameters s ection of the pag e contain v alues tha t are automatica lly appl ied to new T ACACS+ servers. • Key S t ri n g ( 0 – 128 Characters) — Enter the default [...]

Confi guring Syst em Inform ation 171 The T ACAC S+ Servers T a ble opens . Figure 6-55. T ACACS+ Servers T able Removing a T ACACS+ Server from the T ACACS+ Servers List 1. Open the T ACA CS+ Settings pag e. 2. Click Show All . The T ACAC S+ Servers T a ble opens . 3. Select a T ACA CS+ Servers T able entry . 4. Select the Rem o ve che ck b ox. 5.[...]

172 Confi gurin g Syst em Inform atio n In some networks, the R A DIUS server is responsible for assigning t raffic to a particular VL AN. The R ADIUS enhancements include the Authorization Netw ork RAD IUS featur e that allows the switch to acce pt VL AN ass ignme nt by the RADIUS s erve r . The RADIU S se rver m ainta ins a user datab ase, whic h[...]

Confi guring Syst em Inform ation 173 • Named A uthentication Server Groups — The num ber of authentication server groups configured on the system. An authent ication server group contains one or mo re configur ed authentication servers that sha re the same R ADIUS server name. • Named Accounting Server Group s — The number of accou nting s[...]

174 Confi gurin g Syst em Inform atio n Figure 6-57. RADIU S Server Confi guration The RA DIUS Ser ver Configuratio n page contains the following fields: • R ADIUS Server H ost Address — Use the dr op-down menu to select the IP address of the R ADIUS server to view or configure. Click Add to display th e Add RADIUS Server page used to configu r[...]

Confi guring Syst em Inform ation 175 • Mes sage Au then ticator — Enable or disable the message a uthenticator attribute for the selected ser ver . • Secret Configured — Indicates whether the shared secret for this server has been configured. • Stat us — Indicates whether the selected R ADIUS server is currently s ervin g as the active[...]

176 Confi gurin g Syst em Inform atio n Viewing RAD IUS Se rver St atus an d Remov ing a Nam ed Ser ver 1. Open the R ADIUS Server Configuration page. 2. Click Show All . The R ADIUS Named Server Status pag e dis play s. Figure 6-59. RADIU S Server Statu s 3. T o remove a named server , select the check box in the Re m o v e column. 4. Click Apply [...]

Confi guring Syst em Inform ation 177 Figure 6-60. RADIUS Accounting Server C onfiguratio n The RADIUS Accounting Ser ver Configuratio n page contains the following fields: • RADIUS Acc ount ing Se r ver Hos t Add ress — Use the drop-down menu to select the IP addr ess of the accounting server to view or con figure. Click Add to displ ay the Ad[...]

178 Confi gurin g Syst em Inform atio n Addi ng a RA DIUS Ac count ing Serv er 1. Open the R ADIUS Accounting S er ver Configurat ion pag e. 2. Click Add . The Add R ADIUS A ccounting Server page displays. Figure 6-61. Add RADIU S Ac counti ng Se rver 3. Enter a n IP addre ss and name for the R ADIUS accountin g server to a dd. 4. Click Apply Cha n[...]

Confi guring Syst em Inform ation 179 RADIUS Account ing Server Stati stics Use the RADIUS Accounting Ser ver Statistics page to v iew statistical information for e ach RADI US accounting server configured on the system. T o access the R A DIUS Accounting Server Stat istics page, click System > Management Security > RADIUS Accounting Ser ver [...]

180 Confi gurin g Syst em Inform atio n • Pe n d i n g R e q u e s t s — The number of R ADIUS Accoun ting-Reque st packe ts destined f or this ser ver that h ave n ot y et tim ed o ut or rec eived a respons e. • Ti m e o u t s — The number of accou nting time outs to this server . • Unknown T ypes — The number of RADIUS packet s of unk[...]

Confi guring Syst em Inform ation 181 • Access R equests — The number of R ADIUS Access-Request packets sent to this server . Th is number does not incl ude retr ansmissions. • Access Retransmissions — The nu mber of RADIUS Access-Request packets r etransmitted to this ser ver . • Access Accepts — The number of RADIUS Access-Accept pack[...]

182 Confi gurin g Syst em Inform atio n Figure 6-65 . Authorizatio n Network RADIUS The Authoriza tion Netwo rk RADIUS page contains the following field: • Admi n Mode — Ena bles or disables the ability of the sw itch to accept VLAN assignment from the RA D I U S s e r v e r .[...]

Confi guring Syst em Inform ation 183 T elnet Server Use the T elnet Se rver page to enable or disable telnet servi ce on the switch or to modify the telnet port . To d i s p l a y t h e Te l n e t S e r v e r page, click System > Manageme nt Security > T elnet Server . Figure 6-66. T eln et Server The T elnet Ser ver page contains the follow[...]

184 Confi gurin g Syst em Inform atio n Configuring the T elnet Server Usin g CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • T el net Se rver Co mmands Denial of Ser vice Denial of Service refers to t he exploita tion of a variety of v ulnerab[...]

Confi guring Syst em Inform ation 185 • Denial of Service Min TCP Hdr Size — Specif y the minimu m TCP heade r size al lowed. If F irst F ragment DoS pr eventi on is enabled, the switch will drop pack ets that have a TCP head er smaller then this configu red value. • Denial of Service TCP F ragment — Enablin g TCP F ragment Do S prevention [...]

186 Confi gurin g Syst em Inform atio n Captive Portal The Captive P ortal (CP) feature allows you to block clients directly connected to the switch from accessing the network until user verification has been established. Y ou can configure CP verification to allow ac cess f or both gues t and authent icated users . Authentica ted users mu st be va[...]

Confi guring Syst em Inform ation 187 CP Global Conf iguration Fr o m t h e CP Global Co nfiguration page, you can control the administra tive state of the CP featur e and configure global settings that affect all captive portals confi gured on the switch. T o configure the global CP settings, click System > Captive P ortal > Glo bal Config u[...]

188 Confi gurin g Syst em Inform atio n • Authent ication Timeout — T o access the network through a portal, the client mu st first enter authentication information on an a uthentication W eb page. Enter the num ber of seconds to keep the authentication session open with the clien t. When the timeout expir es, the switch d isconnects any active[...]

Confi guring Syst em Inform ation 189 The CP Configurati on page con tains the following fields: • Configuration Name — If multiple CP con figurations exist on the system, sel ect the CP configurati on to view or configure. Use the Add button to ad d a new CP co nfigurat ion to the switch. • Captive P ortal — Use this field t o enable or di[...]

190 Confi gurin g Syst em Inform atio n Adding a Captive Portal Configuration 1. Open the Captive P ortal Configuration page. 2. Click Add . The Add CP Configuration page displays : Figure 6-70. A dd CP Con figuratio n 3. Enter a name for t he new CP configura tion. 4. Click Apply Cha nges . The CP config uration is added, and t he device is up dat[...]

Confi guring Syst em Inform ation 191 CP W eb Customization When a client connects to the access point, the user sees a W eb pa ge. The CP W eb Customization page allows you to customize t he appearance of t hat pa ge with sp ecific text and i mages. T o display the CP W eb Customizatio n page, click Sy stem > Captive P ortal > W eb Custom iz[...]

192 Confi gurin g Syst em Inform atio n Figure 6-73. CP Web Customiz ation (con t.) The CP W eb Customization page contains the following fields: • Captive P ortal ID — The d rop-down menu lists each CP configured on the switch. T o vi ew inform ation abou t the clien ts connected to t he CP , select it from t he list. • Bran ding Ima ge — [...]

Confi guring Syst em Inform ation 193 • User Label — Ente r the text to display next to the field wh ere the user enters the usernam e. • P assword Label — En ter the text to display next to the field w here the user enters the passwo r d. • Butt on L abel — Enter the text t o display on th e button the use r clicks to con nect to the n[...]

194 Confi gurin g Syst em Inform atio n Local U ser Y o u can configure a portal to accommodate gue st user s and authorized users. Gues t users do not have assigned user names and pass words. A uthorized users provide a valid user name and password that must first be validated agai nst a local dat abase or R ADI US server . A uthorized use rs can [...]

Confi guring Syst em Inform ation 195 Remov ing a L ocal Use r 1. Select the user from the Loc al U se r N am e field. 2. Select the Rem o ve option at the bottom of th e page. 3. Click Apply Cha nges to remo ve th e use r . Addin g a Loca l User 1. Open the Loca l User page. 2. Click Add . The Add Local User page displays: Figure 6-75. A dd Loca l[...]

196 Confi gurin g Syst em Inform atio n Configuring Users in a Remote RADIUS Server Y ou can use a remote RADIUS server client authorizat ion. Y ou must add all us ers to the RADIUS s erver . The local data base does not share any info rmation wi th the remote RADIUS databa se. The following table ind icates the RADIUS attributes you use to configu[...]

Confi guring Syst em Inform ation 197 Figure 6-77. User Gr oup The User Group page contains the following fields: • Group Nam e — The menu contains th e name of all of the grou ps configured on the system. The Default user group is con figured by default. New users are assigned to the 1-Default user group by defau lt. T o d elete a user grou p,[...]

198 Confi gurin g Syst em Inform atio n 3. Enter a name for the new group. 4. Click Apply Cha nges . The group is added, and the devi ce is updat ed. Displ aying t he User G roup Page 1. Open the User Group page. 2. Click Show All . The User Grou p Summ ary page displays: Figure 6- 79. C P User Grou p Summary 3. T o remo ve a co nfigured group , se[...]

Confi guring Syst em Inform ation 199 Figure 6-80. CP Interfa ce Associa tion The Interface A ssociation page contains the following fields: • CP Configurat ion — Lists the captive port als configur ed on the switch by number a nd name. • Interf ace List — Lists the interfac es availab le on the swi tch that ar e not curr ently associ ated [...]

200 Confi gurin g Syst em Inform atio n CP Status The CP Status p age contains a variety of i nformation about the CP feature . F rom the CP Sta tus page, you can access information about the CP activity and inte rfaces. T o view cap tive portal status informat ion, click System > Captive P ortal > Status . Figure 6-81. CP Sta tus The CP Stat[...]

Confi guring Syst em Inform ation 201 • CP IP Address — Shows the captive port al IP address • Configured Capti ve P ortals — Sh ows the number of captive portals configured on the switch. • Supported Captive P ortals — Shows the number of supported capti ve portals in the system. • Active Captive P ortals — Shows the number of capt[...]

202 Confi gurin g Syst em Inform atio n – The asso ciate d inte rfac es do n ot exist or do not supp ort t he CP ca pabi lity . • Block ed St atus — Ind icates whether authen tication attempts to the captive port al are curr ently blocked. Use the Block and Unblock bu ttons to control the blocked status. If the CP is blocked, users cannot gai[...]

Confi guring Syst em Inform ation 203 • Disable Reason — If the selected CP is disabled on this in terface, this field ind icates the reason, which can be one of the following: – Int erface Not At tach ed – Disabled by Admin istrator • Block ed St atus — Indicates whether the ca ptive port al is temporar ily block ed for aut henticati o[...]

204 Confi gurin g Syst em Inform atio n • P ackets R eceived Counter — Shows whether the interface supports displaying th e number of pack ets r eceived from each client . • P ackets T ransmitted Counter — Shows whether the interface support s displaying the number of packet s tra nsmit ted t o eac h clie nt. • Sess ion Timeout — Shows [...]

Confi guring Syst em Inform ation 205 Client Det ail The Clien t Detail page shows detailed information a bout each client connected to the network through a capt ive portal. T o view detai led information about the clients connec ted to the s witch thr ough the captiv e portal, click System > Captive P ortal > C lien t Deta il . Figure 6-86.[...]

206 Confi gurin g Syst em Inform atio n Figure 6-87. Inte rface - Client Status The Inter face Clie nt Stat us page contains the following fields: • Inte rface — T he drop-down me nu lists each interface on the swit ch. T o view information about the clients connecte d to a CP on this in terface, s elect it from t he list. • MAC Address — I[...]

Confi guring Syst em Inform ation 207 • Configuration Name — The drop-down menu lists each CP c onfigu r ed on the switch. T o view inform ation about the clients connec ted to the CP conf igurat ion, s e lect t he C P conf iguration nam e from the list. • MAC Address — Identifies the MAC address of the client. • IP Addr ess — Iden tifi[...]

208 Confi gurin g Syst em Inform atio n •T r a p s Authentication or Pri vacy Keys are modified in the SNMPv3 User Security Model (USM). Use the SNMP page to define SNMP parameters. T o display the SNMP page , click System > SNMP in the tree view . SNMP Global Paramet ers Use the Global P aramet ers page to enab le SNMP and Authentic ation not[...]

Confi guring Syst em Inform ation 209 2. T ype desir ed hexad ecimal ID int o the Loc al En gi ne ID fiel d. 3. Click Apply Cha nges . The new Local Engine ID is set, and the devi ce is updated . Using Default SNMP Engine ID 1. Open the Global P aram eters page . 2. Click the Use Default check box. 3. Click Apply Cha nges . The defa ult SNMP engin [...]

210 Confi gurin g Syst em Inform atio n Figure 6-90. SN MP View Settings The SNMP V iew Settings page contains the following fields: • Vi e w N a m e — Contains a list of user -defin ed views. A view name can con tain a maximu m of 30 alph anumeric char acters . • OID Subtree — S pecifies a va lid SNM P OID s tring that can includ e meta ch[...]

Confi guring Syst em Inform ation 211 Figure 6-91. Add View 3. Define th e rele v an t fields. 4. Click Apply Cha nges . The SNMP vi ew is added, and the devi ce is update d. Displ aying t he V iew T able 1. Open the SNMP V iew Settings p age . 2. Click Show All . The Vi e w T a b l e page displays: Figure 6-92. View T abl e[...]

212 Confi gurin g Syst em Inform atio n Removing SNMP V iews 1. Open the SNMP V iew Settings p age . 2. Click Show All . The Vi e w T a b l e page displays. 3. Select an S NMP view . 4. Check the Rem o ve chec k bo x. 5. Click Apply Cha nges . The SNMP vi ew is re moved, and the device is updated. Defining SNMP Vie ws Using CLI Commands F or inf or[...]

Confi guring Syst em Inform ation 213 Figure 6-93. A ccess Con trol Gro up The Access Control Group page contains the following fields: • Group Nam e — Contains a li st of user -defined grou ps to which acces s control rul es are a pplied. A group n ame can contai n a maximum of 30 alphanumer ic chara cters. • Secu rity Mod el — Defines the[...]

214 Confi gurin g Syst em Inform atio n – Rea d — Sele ct a view th at rest ricts mana gement acce ss to vie wing the c ontents of the agent . If no view is select e d, all objects e xcept the communit y-table, SNMPv3 user and access tables can be viewed. – Wr i t e — Select a view that perm its management read-write access to the contents [...]

Confi guring Syst em Inform ation 215 Figure 6-95. Acc ess T able Remov ing a G roup 1. Open the Access Control Configuration pag e. 2. Click Show All . The Access T able opens. 3. Select a group . 4. Check Rem ov e . 5. Click Apply Ch anges . The group is remov ed, and th e device is u pdated. Defining SNMP Access Control Using CLI Commands F or i[...]

216 Confi gurin g Syst em Inform atio n Figure 6-96. SNMP v3 User Securi ty Model (USM) The SNMPv3 User Security Model ( USM) page contains the following fields: • User Name — C ontains a list of user-defined user names. • Group Na me — Contains a list of us er -defined SNMP groups. SNM P groups are defined in the Access Control Grou p page[...]

Confi guring Syst em Inform ation 217 • Pr i v a c y — S pecifies whether or n ot the au thentica tion key is to be used. Choose one of the followin g values: – None — Do not use an authe ntica tion key . – des — Us e a CB C-DE S Symm etric E ncry ption P assword for the au thentic ation key . – des-ke y — Use an HMA C-MD5-96 A uthe[...]

218 Confi gurin g Syst em Inform atio n Figure 6-98. Add Remo te User 3. Define th e rele v an t fields. 4. Click Apply Cha nges . 5. The us er is added to the group , and the dev ice is updat ed. V iewing t he User Securit y Model T able 1. Open the SNMPv3 User Security Model ( USM) page. 2. Click Show All . The User Security Model T able display [...]

Confi guring Syst em Inform ation 219 Remov ing a U ser Secu rity Mod el T able Entry 1. Open the User Security Model page. 2. Click Show All . The User Security Model T able page displays. 3. Select an ent ry . 4. Check the Rem o ve chec k bo x. 5. Click Apply Cha nges . The entry is removed, and the d evice is updated. Defining SNMP Users Using C[...]

220 Confi gurin g Syst em Inform atio n Figure 6-100 . SNMPv1, 2 Community The SNMPv1, 2 Comm unity page contains the following fields: • Community Str ing — Contain s a list of user -defined communi ty strin gs that act as a pas sword a nd are used t o authenti cate the SNMP management stati on to the de vice. A commu nity str ing can c ontain[...]

Confi guring Syst em Inform ation 221 Addin g a New Com munit y 1. Open the SNMPv1, 2 Comm unity page. 2. Click Add . The Add SN MPv1,2 Co mmunity page displays: Figure 6-101 . Add SNMPv1,2 Community 3. Complete th e rele v an t fields. In addition to the field s in the SNMPv1, 2 Community pag e, th e Add SNMPv1, 2 Community page contains t he All [...]

222 Confi gurin g Syst em Inform atio n Figure 6- 102. Basi c and Adva nced T ab le Removing Communities 1. Open the SNMPv1, 2 Comm unity page. 2. Click Show All . The Basic and Advanced T able page displays. 3. Sele ct a community an d check the Rem ov e check box. 4. Click Apply Cha nges . The communi ty entr y is r emoved, an d the device is upd[...]

Confi guring Syst em Inform ation 223 Figure 6 -103. Notificati on Filter The Notifica tion F ilter p age contains the following fields: • Notification Filter Name — Cont ains a list of user-defined not ification filters . A not ification filt er name can contain a ma ximum of 30 charact ers. • New Object Ident ifier T ree — Displa ys the O[...]

224 Confi gurin g Syst em Inform atio n Figure 6-104 . Add Filter 3. Define the releva nt fields. 4. Click Apply Cha nges . The ne w fil ter is added , and the de vice is updat ed. Displaying the Filter T able 1. Open the Notificati on F ilter page. 2. Click Show All . The F ilter T able page app ears, wh ich displa ys all of the filte rs configure[...]

Confi guring Syst em Inform ation 225 Configuring Notification Filters Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • SNMP Commands. Notifi cation Recip ients Use the No tification Recipients pa ge to view information for defining filter[...]

226 Confi gurin g Syst em Inform atio n Figure 6-106. Notific ation Reci pients The Notification Recipients page contains the following fields: • Rec ip ie n t IP — Contains a u ser -defined list of notifica tion recipients IP addresses. • Notification T ype — The type of notification sen t. Th e possible field values are: – Tr a p — T [...]

Confi guring Syst em Inform ation 227 – Secu rity L eve l — The secu rity leve l attached t o notifica tions. The poss ible field va lues are: • NoAu NoPriv — The pack et is neit her authe nticated nor encrypted. • Au th No Pri v — The packet is authenticated. • Au th Pri v — The packet is both authenticated and encrypted. • UDP P[...]

228 Confi gurin g Syst em Inform atio n 4. Click Apply Cha nges . The notifica tion recipient is add ed, and t he device is update d. Displaying the Notifica tion Recipients T abl es 1. Open Not ifica tion R eci pien ts page. 2. Click Show All . The Notificati on Recipient T ables page o pens: Figure 6-108. Notific ation Reci pient T ables Removing[...]

Confi guring Syst em Inform ation 229 File Manageme nt Use the F ile Mana geme nt menu page to manage device software, the image file, and the configuration files. In addit ion to a TFTP server , the file manage ment feature has been enhanced to allow file uploads and downloads by using an HTTP session (in other words, by using y our web browser). [...]

230 Confi gurin g Syst em Inform atio n • Image D escrip tion — A field 0-128 characte rs in length that displays a n image de scription of the file. • Siz e — Displays the size of the specified file in bytes. • Rem ov e — Select to remove th e specified file. • Flash Memory Details — Disp lays Flash Mem ory availab ility deta ils, [...]

Confi guring Syst em Inform ation 231 Figure 6-111 . File Download The Fi l e D o w n l o a d page contains the following fields: Fi l e T y p e — Select the type of file to be dow nloaded. P ossible filetypes are: • Fi r m w a r e — Download s the active image. • SSH-1 RSA Key F ile — SSH-1 Riv est-Sham ir -Adleman (R SA) Key F ile • S[...]

232 Confi gurin g Syst em Inform atio n • Tr a n s f e r M o d e — Select the file transf er mode for the configu ration to downloa d. The options are: – TFTP — T rivial F ile T r ansfer P rotocol – SF TP — SSH F ile T ransfer P rotocol – SCP — Secu re Copy – HT TP — D ownload fi les of various types to the swit ch using an HT T[...]

Confi guring Syst em Inform ation 233 Downloading Files U sing CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • Configurat ion and Image Files Commands. File U ploa d Use the Fi l e U p l o a d t o S e r v e r page to upload configuration (ASCII[...]

234 Confi gurin g Syst em Inform atio n – TFTP — T rivial F ile T r ansfer P rotocol – SF TP — SSH F ile T ransfer P rotocol – SCP — Secu re Copy – HT TP — Hypertext T ransfer Proto col Upload Upload contains the following fields: • Server Address — The server IP address to which t he selected file is uploaded. • Destination F[...]

Confi guring Syst em Inform ation 235 Figure 6-113 . Cop y Files The Copy F iles p age contains the following fields: • Copy Master F ir mware — Specifies tha t a softwa re image file should be copied . • Destination — The destin ation un it(s) (with in the sta ck) to which th e file is copied. Select from the menu o ne of th e follow ing v[...]

236 Confi gurin g Syst em Inform atio n – Star tup Con fig — The startup configuration file. – Bac kup Co nfi g — The backup con figuration file. • Restore Configu ration F actory Default — Select the radio butt on and click Apply Changes to resto re all con figurat ion struct ures to the default s. Defining Adva nced Settings Use Advan[...]

Confi guring Syst em Inform ation 237 Use the Au to Co nf i gu ra tio n page to enabl e the switch t o be automatically configured when it is initialized and cannot find a configur ation file. W ith Auto Configuratio n enabled, the switch obta ins an IP addr ess and downloads a co nfiguration file from a TFTP server . NOTE: The Au to Confi gurat io[...]

238 Confi gurin g Syst em Inform atio n Configuring Auto Configuring Using the CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • Util ity Comm and s Defining Stac king Use the Stacki ng menus to set th e stacking charac teristics of the de vice. [...]

Confi guring Syst em Inform ation 239 Figure 6 -115. Unit Configura tion The Unit Configur ation page contains the following fields: • Switc h ID — Specifies unit t o be configured. • Change Swit ch ID to — Changes the unit num ber of the selected unit. • Management Sta tus — Shows wheth er the selected un it is a Managem ent Unit or a [...]

240 Confi gurin g Syst em Inform atio n • Plugged-in Mod el Identifier — A 16-b yte charact er string to identify the plugged -in mo del of the selected u nit. • Switc h Stat us — Displays the st atus of the selected uni t. The possible va lues are: – OK — The unit is in place and functioning. – Unsupported — The unit is in place, b[...]

Confi guring Syst em Inform ation 241 – OPR S tandby — Indicat es tha t this un it is operat ing as t he Stan dby Un it an d the con figured Stand by Unit is not part of the stac k. – CFG Stan dby — Indicat es that the unit is configured as the Standby U nit. The unit configured as the Stand by switch b ecomes the s tack mana ger if the cur[...]

242 Confi gurin g Syst em Inform atio n Figure 6- 117. S uppor ted Swit ches The Supported Switches page contains the following fields: • Supp orted Switch es — Drop-down list permits sel e ct ion of switches supported. • Switc h Ind ex — Specifies the in dex into the da tabase of the s upported sw itch types. • Switc h T y pe — H ardw [...]

Confi guring Syst em Inform ation 243 Viewing Supported Switches Using the CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide: • Sys tem Manageme nt Commands Stack Po rt Summary Use the Stack P ort Summary pa ge to view the st ackable ports present. T[...]

244 Confi gurin g Syst em Inform atio n • Link St atus — Indicates whether or not the stack interface f or each unit is operating. • Link Speed (Gb/s) — Indicates the nom inal speed of each un it’s link. Viewing Stack Port Summary Using the CLI Command F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the [...]

Confi guring Syst em Inform ation 245 • T ransmit Error R ate (Error s/sec) — Indicates the n umber of errors transmit ted per second. • T otal Error s — T otal numb er of errors transmitted . • Data Rate (Mb/s ) — Indicates the speed at which the d ata is received. • Receive Error Rate (Errors/ sec) — Indicates the num ber of error[...]

246 Confi gurin g Syst em Inform atio n • The collector can an alyze traffic patterns for whatever p rotocols are found in the headers (e.g. TCP/IP , IPX, Ethe rnet, AppleT alk…), which mea ns ther e is no need f or a layer 2 swit ch to decode a nd unde rstand all pr oto cols. sFlow Age nt Summary P acket Flow Sampling and Counter Sampling ar e[...]

Confi guring Syst em Inform ation 247 The sFlow Agent S ummary page contains the following fields: • Ve r s i o n — Un iquely id entifies the v ersion an d implem enta tion of th is MIB. The version string m ust have the f ollowing st ructur e : MIB V ersi on; Or ganizati on; Softw are R evision wher e: – MIB V e rsion — 1.3 , the version o[...]

248 Confi gurin g Syst em Inform atio n The sFlow R eceiver Configuratio n page contains the following fields: • Rec ei ve r I nd ex — Selects the receiver for wh ich data is to be displa yed or config ured. The allowe d rang e is 1 t o 8. • Receiver Owner String — The en tity making use of th is sFlowRcvrT able entry . The empty string ind[...]

Confi guring Syst em Inform ation 249 Configuring and Viewing sFlow Settings Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • sFlow Commands. sFlow Samp ler Configurat ion The sFlow Agent collects a statistical pack et-bas ed sampling of t[...]

250 Confi gurin g Syst em Inform atio n Figure 6-123 . sFlow S ampler Configura tion The sFlow Sampler Con figuration page contains the following fields: • Sampl er Data Sourc e — The sFlow data s ource for this sFlow sampler . This Agent supports ph ysical ports only . • Rec ei ve r I nd e x — The sFlo w Rece iver for this sFlo w samp ler [...]

Confi guring Syst em Inform ation 251 Figure 6-124 . sFlow S ampler Summary Configuring and Viewing sFlow Settings Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • sFlow Commands. sFlow Pol l Configurat ion The sFlow agent collects t ime-b[...]

252 Confi gurin g Syst em Inform atio n Figure 6-125 . sFl ow Poll Configura tion The sFlow P oll Configura tion page contains the following fields: • P oll DataSource — The sF low Sa mpler data s ource for th is fl ow sam pler . This Agent su pports physical ports only . • Rec ei ve r I nd ex — The sFlow Receiver for this sFlow Coun ter P [...]

Confi guring Syst em Inform ation 253 Configuring and Viewing sFlow Settings Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • sFlow Commands. Industry Standard Disco very Protoco l The Industry Standard Discovery P rotocol (ISDP) is a prop[...]

254 Confi gurin g Syst em Inform atio n Figure 6-127. ISD P Global Configu ration The ISDP Global Co nfiguration page contain the following fields: • ISDP Mo de — Use this field to enable or disable the Industry Standar d Discovery Protocol on the swit ch . • ISDP V2 Mo de — Use this f ield t o enabl e or d isable the Indus try Standar d Di[...]

Confi guring Syst em Inform ation 255 – other —In dicates that th e value is in the for m of a platform specific A SCII st ring conta ining info that iden tifies the device. F or example: ASCII string contains serialNum ber appe nded/p r ep ended with syst em name. Configuring ISDP Using CLI Commands F or inf orm at ion abou t th e CLI comm and[...]

256 Confi gurin g Syst em Inform atio n • P rotocol V ersion — Displays the ISDP Prot ocol V ersion for the neighbor . • Last T ime Changed — Displays when entry was last modified . Viewing ISDP Ca che T able Information CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter i[...]

Confi guring Syst em Inform ation 257 Figure 6-130 . ISDP Interf ace Summary Configuring ISDP Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • ISDP Comman ds. ISDP Stati stics Fr o m t h e ISDP Statistics page, you can view information abo[...]

258 Confi gurin g Syst em Inform atio n The ISDP Statistics page contain the following fields: • P ackets R eceived — Displa ys the nu mber of all ISDP protocol data units (PDU s) received. • P ackets T ransmitted — Displ ays the numbe r of all IS DP PDUs tran smitted. • ISDPv1 P ackets Received — D isplays th e num ber of v1 IS DP P DU[...]

Conf iguri ng Swi tching Infor matio n 259 7 Configuring Switching Information Overv iew This sectio n provides all syst em operations and general information for network security , ports, address tables, GARP , VLANs, Spanning T ree, P ort Aggregati on, and Multicast Support. The Switching menu page contains links to the following features: • Co[...]

260 Config uring Sw itching Infor mation Configuring Network Security Use the Net work Securit y menu page t o set netw ork securi ty through po rt-based a uthentic ation, loc ked ports, DH CP F iltering configura tion, and access control li sts. To d i s p l a y t h e Network Security page, c lick Switching > Networ k Security in th e tree view[...]

Conf iguri ng Swi tching Infor matio n 261 Figure 7 -1. Dot1x Authentica tion The Dot1x Authenti cation page contains the follo wing fields: Glob al Paramet ers • Admi nistrative M ode — P ermits 802.1 X port-based authentication on the sw itch. The possible field values are: – Enable — Ena bles 8 02.1X au thentica tion on the s witch. – [...]

262 Config uring Sw itching Infor mation Interface Paramete rs • Inte rface — S elects the U nit and P ort to be affected . • Guest VLAN — En ables or disables the guest VLAN mode on this interface. T o enable the guest VLAN , select the VL AN ID to us e as the guest V LAN. All VLANs configured on the system are included in the m enu. • U[...]

Conf iguri ng Swi tching Infor matio n 263 • Max Users — Set the maximum number of clients s upporte d on the port wh en MAC-b ased 802 .1X authentication is enabled on the port. The num ber of users allow ed to authenticate p er port ranges from 1 to 1 6. • Te r m i n a t i o n C a u s e — D isplays th e reason for te rmination. • MAC A [...]

264 Config uring Sw itching Infor mation Figure 7 -2. Dot1x Authen tication T able 3. Use the horizontal scroll bar or click the right arrow at the bottom of the screen to display the ri ght side of the table. 4. Use the Unit drop-down menu to view the Dot1x Authen ticatio n T able for other units in the stack , if they exist. Re-Authenticating One[...]

Conf iguri ng Swi tching Infor matio n 265 Chan ging Ad ministra tive P ort Cont rol 1. Open the Dot 1x Auth entica tion pag e. 2. Click Show All . The Dot1x Auth entica tion Ta b l e dis plays. 3. Scroll to the right side of the table and select the Edit check box for each port to configure. Change Admin P ort Control to Aut h o ri ze d , Unau tho[...]

266 Config uring Sw itching Infor mation Port Se curity The P ort Security pa ge is used to enable security on a per-port basis. When a port is lock ed, only packets with allowab le source MA C addresses can be forwarde d. All other packets ar e discarded. A MA C address can be defined as allowable by one of t wo meth ods: dyn amically or s tatical[...]

Conf iguri ng Swi tching Infor matio n 267 Viewing t he Por t Securi ty T abl e 1. Open the P ort Security page. 2. Click Show All. The Po r t S e c u r i t y T a b l e dis plays. Figure 7-5. Port Securi ty T able 3. Use the Unit drop-down menu to view the Po r t S e c u r i t y T a b l e for oth er units in t he stack, if t hey exist. Defining Mul[...]

268 Config uring Sw itching Infor mation P ackets can be filtered on ingress or egr ess. If the filter rules match, then some acti ons can be taken, including dropping the packet or disab ling the port. F or example, a network administrator defines an ACL r ule that says port number 20 can r eceive TCP pack ets. However , if a UDP packet is receive[...]

Conf iguri ng Swi tching Infor matio n 269 Figure 7-7. Add IP A CL 3. Enter t he desir ed ACL N am e in the related en try field . 4. Click Apply Cha nges . The IP -based AC L is added, and the de vice is updat ed. Remo ving an IP-bas ed ACL 1. Open the IP AC L Configuration pa g e, an d sel e ct t he ACL t o b e de le te d fr om t he IP ACL drop-d[...]

270 Config uring Sw itching Infor mation IP ACL Rule Conf iguratio n Use the I P ACL Rule Con figur ation page to define rules for IP -based ACLs. The acces s list definition includes rules that specify whether traffic matching the cri teria is forwarded normally or dis carded. Additional ly , you can spe cify to assig n traffic to a particular que[...]

Conf iguri ng Swi tching Infor matio n 271 • Action — Sele cts the AC L forw arding acti on. C hoose from the drop-down menu options t o apply a forwarding ac tion. P ossible va lues are: – Pe r m i t — F orwards packets which meet the ACL criteria. – Deny — Drops p acket s wh ich meet the ACL criteria. • Assign Queue ID — Click the[...]

272 Config uring Sw itching Infor mation Service T ype fields Select one of the following th r ee Ma tch fiel ds to use in matching pack ets to ACLs: • IP D SCP — Matches the packet DSCP valu e to the rule. Either the DSCP v alue or the IP P recedence value is used t o match packets to ACLs. – Sele ct From L ist — Select from a list of DSCP[...]

Conf iguri ng Swi tching Infor matio n 273 • A CL Commands MAC ACL Configur ation The MAC A CL Configurat ion page allows ne twork ad ministrators to define a MAC-b ased ACL. F or an e xplanation of ACLs, see "IP ACL Configuration." To d i s p l a y t h e MA C ACL C onfiguration page, cli ck Switching > Network Security > Access C[...]

274 Config uring Sw itching Infor mation Figure 7-11. Add MAC ACL 3. Enter t he desir ed MAC ACL N a me in the entry field . 4. Click Apply Cha nges . The MAC- based ACL i s added, and th e device is updated. Remov ing a MA C-based ACL 1. Open the MAC A CL Configuration page, and select the ACL to be removed from the MA C AC L drop- down menu. 2. S[...]

Conf iguri ng Swi tching Infor matio n 275 MAC ACL Rule Config uration Use the MAC ACL R ule Configuratio n page to define rules for MA C -based AC Ls. The access lis t definition includes rules that specify whether traffi c matching the criteri a is forwarded normally or discarded. A default 'deny all' rule is the last rule of every list[...]

276 Config uring Sw itching Infor mation • Assign Queue ID — Click the check b ox to app ly this criteria, t hen enter an iden tifying nu mber from 0 to 6. • Redirect Interface — Select from the drop-down list of interf aces one that packets meeting this rule can be r edirected t o. • Mirror Inter face — Select from the drop-down list o[...]

Conf iguri ng Swi tching Infor matio n 277 Addin g a New Rul e to a MAC- based AC L 1. Open the MAC A CL Ru le Configuration page. 2. Select the desired ACL from the MAC AC L drop-down menu. 3. Specify Create New Rule for Ru l e I D . 4. Enter a new ID number . 5. Define th e remaining fields as needed. 6. Click Apply Cha nges . The new rule is as [...]

278 Config uring Sw itching Infor mation Figure 7-14. IPv6 AC L Config uration The IPv 6 ACL C onf igur atio n page contains the following fields: • IPv6 ACL Name — Specify an IPv6 A CL name stri ng which incl udes alpha numeric ch aracters onl y . The name mu st start with an alphabetic character . This field displays the name of t he currentl[...]

Conf iguri ng Swi tching Infor matio n 279 4. Click Apply Cha nges . Displaying IPv6 ACLs 1. Open the IPv6 ACL Conf igura tio n page. 2. Click Show All . All IP ACLs and t heir related data d isplay in the IPv6 ACL T able . Figure 7-16. IPv6 ACL T able The Summary page has the following fields: • IPv6 ACL Name — De scribes the number ranges for[...]

280 Config uring Sw itching Infor mation T o display the IPv6 A CL Rule Configuration page, click Switching > Network Security > Access Control Lists > IPv6 Access Control Lists > Rul e Configuration in the navigation menu. Figure 7-17. IPv6 ACL - Ru le Configurat ion The IPv 6 ACL C onf igur atio n page contains the following fields: ?[...]

Conf iguri ng Swi tching Infor matio n 281 • Mirror Inter face — Sp ecifies the egress interface wh ere the ma tching traffic stream is copied, in addition to it bein g forwarded normally by the device. Th is field cannot be set if a R edirect Interface is already c onfig ured for the AC L rule . • Logging — When se t to T ru e, logging is [...]

282 Config uring Sw itching Infor mation • IPv6 DSCP Se r vice — Specify the IP DiffServ Code P oint (D SCP) va lue, wh ich is defi ned as th e high- or der six bits of the Service T ype octet in the IPv6 header . This is an optional configu ration. En ter an integer from 0 to 63. The IPv6 DSCP can be selected from one of the DSCP keywords in t[...]

Conf iguri ng Swi tching Infor matio n 283 ACL Bind Configurati on When an ACL is bound to an inte rface, all the r ules that have been defined are applied to the selected interface. Use the ACL Bind Co nfiguration page to assign ACL lists to A CL Priorit ies and Interfaces. F rom the W eb interfac e, you can co nfigure the ACL rule in the ingress [...]

284 Config uring Sw itching Infor mation – Assign ACL P riority — Assign s the priority of t his ACL. If more than one ACL is a pplied to an interface, then t he match criteria for the h ighest priority ACLs are checked first. Assigning an ACL to an Interface 1. Open the AC L Bind Configur ation page. 2. In the Inte rface field, s pecify the Un[...]

Conf iguri ng Swi tching Infor matio n 285 Configuring Ports The Po r t s menu page provides links for configuring port functionality , including adva nced features such as storm control and port mirroring, a n d for performing virtual port tests. T o di spla y the page , cli ck Sw itching > P orts in the t ree view . The Po r t s menu page cont[...]

286 Config uring Sw itching Infor mation Ena bling In gress Ba ckpres sure 1. Open the P ort s Global P aram eters page. 2. Select Enabl e from the drop-down menu in the Flow Cont rol field. 3. Click Apply Cha nges . 4. Ingress backpressur e is now enabled. Configuring Flow Control Using the CLI Commands F or inf orm at ion abou t th e CLI comm and[...]

Conf iguri ng Swi tching Infor matio n 287 Figure 7-20. Port Conf igurati on The P ort Configur ation page contains the following fields: • Po r t — Specifies the Unit and P ort for which port pa rameters a re defined. • Description (0–64 Characters ) — Provides a brief in terface d escription, su ch as E thernet. • Admi n Status — En[...]

288 Config uring Sw itching Infor mation – Fu l l — In dicates that th e inter face s upports t ransmission between the swit ch and the clie nt in both d irections sim ultan eously . • Current Duplex Mode — Displays the synchronized port dupl ex mode. • Auto Negotiatio n — Enable s Auto Nego tiation on th e port. Au to Negoti ation is a[...]

Conf iguri ng Swi tching Infor matio n 289 Defining Port Parameters 1. Open the P ort Configuration page. 2. Sele ct a unit and po rt in the Unit and Po r t fields. 3. Define the avai lable fields on the screen. 4. Click Apply Cha nges . The port paramet ers are saved to the switch. Displaying the Port T able 1. Open the P ort Configuration page. 2[...]

290 Config uring Sw itching Infor mation Modifying Port Configuration Settings fo r Multiple Ports 1. Open the P ort Configuration page. 2. Click Show All . The P ort Configuration T able displays . 3. Click Edit for each P ort to m odify . 4. Edit th e P o rt Confi guration field s as need ed. 5. Click Apply Cha nges . The P ort Conf igurat ion se[...]

Conf iguri ng Swi tching Infor matio n 291 The Pr o t e c t e d P ort Con figu rat ion page co ntains the following fields: • Po r t — Specifies the Unit and P ort for which port pa rameters a re defined. • P rotected Group ID — Drop-down menu used to assign a port to Group 0, 1, or 2. • Remove Group Name — Check th is box to disassocia[...]

292 Config uring Sw itching Infor mation Figure 7-24. A dd Prote cted Port 3. Use the drop-dow n menu to assign the numeric d esignation 0, 1, or 2 to the P rotected Group ID . 4. Enter a P rotected Group Name (1–32 characters) . 5. Click Apply Cha nges . The P rotected Grou p settings are copied, and the device is upd ated. Configuring Protected[...]

Conf iguri ng Swi tching Infor matio n 293 • LAG — Contains a l ist of LAG numbers . • LAG T ype — The port types t hat comprise the LAG. • Description (0–64 Characters ) — Description of t he port. • Admi n Status — Enables or di sables tr affic forwar ding th rough the sel ected LAG. • Current LA G Status — Indicates wh ethe[...]

294 Config uring Sw itching Infor mation 5. Admi n Status and Description can now be edited as nee ded. 6. Click Apply Cha nges . The LAG parameters are saved to the switch. Configuring LAGs with CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • [...]

Conf iguri ng Swi tching Infor matio n 295 – Multicast — If th e rate of L2 multicast tr affic ingres sing on an inte rface increases beyond the configu red threshold , the traffic will be d ropped. – Unknown U nicast — If th e rate of un known L 2 unicast (destination lookup failu re) traffic ingressing on an interface increases beyond the[...]

296 Config uring Sw itching Infor mation Modify ing Broa dcast Contr ol 1. Open the Sto rm C on tro l interface. 2. Click Show All . The Storm Control Set tings T able displays . 3. Check Edit for each port t hat Broad cast C ontr ol is to be modified. 4. Edit Broad cast C ont rol as needed. 5. Click Apply Cha nges . The storm control port p aramet[...]

Conf iguri ng Swi tching Infor matio n 297 Figure 7-29. Port Mirroring The P ort Mirroring page contains the following fields: • Ses sio n — Specifi es the monit oring sess ion. • Admi n Mode — Ena bles or Disables the port mirroring. • Destination P ort — Select th e port to wh ich port tra ffic may be copied. • Res et Ses s io n —[...]

298 Config uring Sw itching Infor mation Figure 7-30. A dd Source Port 3. Configure the following fields: Ses sion — Select t he session to monitor . Sourc e P o rt —S elect the unit and port from w hich traffic is mir rored. Up to four so urce ports can be mirrored t o a de stina tion p ort. Ty p e — Sp ecifies the type of traffic mon i tore[...]

Conf iguri ng Swi tching Infor matio n 299 Configuring a Port Mirroring Session Using CLI Comman ds F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • P ort Monitor Comman ds Flow Based Mirr oring The flow based mirroring feature builds upon the DiffServ compo[...]

300 Config uring Sw itching Infor mation Copying Mirroring to a Destination Port 1. Open the Flow Based Mirroring page. 2. Specify Po l i c y N a m e and Member Clas s , and se lect the dest ination u nit and port to be affec ted in Copy to Interface . 3. Click Apply Cha nges . The flow-based mirroring details are c opied to the specified port, and[...]

Conf iguri ng Swi tching Infor matio n 301 Figure 7-32. Stat ic MAC Address The S tatic MAC Address page contains the followi ng fields: • Inte rface — S pecifies the Unit and Port or LAG to wh ich th e static MAC add ress is applied. T o view addr esses for a differ ent Unit /P ort or LAG, chang e the Interface listed her e. • VLAN ID - MA C[...]

302 Config uring Sw itching Infor mation Figure 7-33. Add ing Static MA C Address 3. Complete the fields as needed. 4. Click Apply Cha nges . The new sta tic addr ess is ad ded to the Static MAC Address T able , and th e device i s updated . Modifying a Static Address in the Static MAC A ddress T able 1. Open the Stat ic MAC Addr ess page . 2. Modi[...]

Conf iguri ng Swi tching Infor matio n 303 Remov ing a S tatic Addre ss from t he St atic A ddres s T able 1. Open the Stat ic MAC Addr ess page . 2. Click Show All to displa y the Static MA C Address T able . 3. Check the Rem o ve check bo x for the address to be removed. 4. Click Apply Cha nges . The stat ic addr ess is deleted, an d the device i[...]

304 Config uring Sw itching Infor mation Figure 7-35. Dyna mic Address T able The Dynamic Address T a ble contains the following fields: • Address Aging (10–1000000) — Specifie s aging time in second s before a dynam ic MAC address is erased. The defa ult value is 300 second s. • Clear T a ble — Clears all dynamic MAC address da ta from t[...]

Conf iguri ng Swi tching Infor matio n 305 • Inte rface — Disp lay s the port numbe r . Defining the Aging T ime 1. Open the Dynamic Address T able page. 2. Define th e Address Aging field. 3. Click Apply Cha nges . The aging t ime is m odified, a nd the dev ice is upda ted. Query ing the Dyn ami c Address T able 1. Open the Dynamic Address T a[...]

306 Config uring Sw itching Infor mation Figure 7-36. GARP T imers The GARP T imers page contains the following fields: • Inte rface — Specifie s the Unit a nd P ort or L AG on w hich the GA RP timer is enabled . • GARP Join T i mer (10–100) — D isplays tim e, in cent iseconds, th at PDU s are transmitt ed. The possible field v alue is 10[...]

Conf iguri ng Swi tching Infor matio n 307 Figure 7-37. G ARP T imers T able 3. Use the Uni t drop-down menu to view the GARP T imers T able for other un its in the s tack, if th ey ex is t . Copying GARP T imers Se ttings 1. Open the GARP T imers page. 2. Click Show All . The GARP T imers T able display s. 3. Specify the Un it and P or t you are c[...]

308 Config uring Sw itching Infor mation Defining GARP T imers Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • GVRP Commands Configuring the Spanning T ree Pro tocol The Spanning T ree P r otocol (STP) provides a tree topology for any arr[...]

Conf iguri ng Swi tching Infor matio n 309 Figur e 7-38. Spanni ng T r ee Global Setti ngs The STP Global Settings page contains the following fields: • Spanning T ree Status — Enables or disables RSTP , STP , or MST P on t he switch. • STP Ope rati on M ode — Specifies t he STP m ode by w hich STP is en abled on the switch. P ossible field[...]

310 Config uring Sw itching Infor mation Bridge Settings • Pr i o r i t y — Specifies th e bridge priority val ue. When sw itches or bridges are running S TP , ea ch are assigned a priority . After exchanging BPDUs, the swit ch with the low est priority value becomes the root bridge. V alid v alues are from 0– 61440. Th e default value is 32 [...]

Conf iguri ng Swi tching Infor matio n 311 Figure 7-39. STP Port Sett ings The STP P o rt Settings p age contains the following fields: • Selec t a P ort — Specifies the Un it and P ort on which STP is enabled. • STP — Ena bles or disab les STP on the port . • Po r t F a s t — Enable s P ort F ast mode for the port when che cked . If P [...]

312 Config uring Sw itching Infor mation – Block ing — T he port is currently blocked and ca nnot be us ed to forwa rd traffic or learn M AC addr esses. – Listening — The po rt is currently in th e listening m ode. The port ca nnot forward traf fic nor can it learn MAC addre sses. – Learning — The p ort is currently in the learning mode[...]

Conf iguri ng Swi tching Infor matio n 313 Displaying the STP Port T able and Configuring STP Port Settings 1. Open the STP Port Settin gs pag e. 2. Click Show All . The STP P ort T able display s. Figure 7-40. STP Port T ab le 3. Use the Uni t drop-down menu to view the STP P ort T able for other u nits in the stack, if they exist. 4. T o chan ge [...]

314 Config uring Sw itching Infor mation Figure 7-41. STP LAG Se ttings The STP LAG Settings page contains the following fields: • Sele ct a LAG — Spe cifies the L AG num ber for wh ich you w ant t o modify STP sett ings. • STP — Enab les or disables STP on t he LAG. De fault is enable. • Po r t F a s t — Enables P ort F ast mode for th[...]

Conf iguri ng Swi tching Infor matio n 315 – Learning — The LAG is in the learn ing mode and can not forwar d traffic, but it can learn ne w MAC addr esses. – Fo r w a r d i n g — The L AG is currently in the forwa rding mode, and it can forward tra ffic and learn new MAC ad dres ses. – Brok en — The L AG is currently ma lfunctioning a [...]

316 Config uring Sw itching Infor mation Figure 7-42. STP LAG T able 3. T o change the STP settings for one or m ore LAGs, select the Edit option for the LAG(s), configure the desi red se tting s, and t hen c lick Apply Chan ges . Defining STP LAG Settings Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func t[...]

Conf iguri ng Swi tching Infor matio n 317 • Rol e — Disp lays the spanning tree role for the port in the S TP topology . • Mode — Displays the admin istrativ e mode and if its e nabled or di sabled. • F ast Link Operati onal Status — Ind icates if F ast Lin k is enable d or disabled for the port or LAG. If F ast Link is enabled for a p[...]

318 Config uring Sw itching Infor mation MSTP Settings The Multiple Spanning T ree P rotocol (MSTP) su pports multip le instances of Spanning T ree to efficiently channel VLAN t raffic over different interfaces. MSTP is compatible with b oth RSTP and STP ; a MSTP bri dge can be configur ed to beha ve entirely a s a RSTP bridge or a STP bridge. To d[...]

Conf iguri ng Swi tching Infor matio n 319 • Incl uded VLA Ns — Maps the selected VLANs to the s elect ed instance. Every VLAN b elongs to one instan ce on ly . • P riority (0–61440 ) — Specifies the switch priorit y for the selected s panning tree instance. The default value is 32 768. • Bridg e ID — Indicates the brid ge ID of the s[...]

320 Config uring Sw itching Infor mation Defining MST Instances Using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • Spa nning T ree Comma nds MSTP Interf ace Settings Use the MSTP Interface Setti ngs page to assign MSTP settings t o specific [...]

Conf iguri ng Swi tching Infor matio n 321 – Designated — Indicates the port or LAG through which t he designated switch is attached to the LAN. – Alterna te — P rovides an alt ernate pa th to the ro ot switch from th e interfa ce. – Back up — Provides a backup path to the designated LAN. Backup port s occur only when two ports ar e con[...]

322 Config uring Sw itching Infor mation Figure 7- 48. MS TP Inter face T able 3. Use the Uni t drop-down menu to view the MSTP Inter face T able for other un its in the stack, if they ex is t . 4. T o mod ify the port priority or pa th cost for one or m ore interfaces, check Edit for the desired interfaces. 5. Make the needed changes to the v alue[...]

Conf iguri ng Swi tching Infor matio n 323 Each VLAN in a network has an associated VLAN ID, which ap pears in the IEEE 802.1Q tag in the Layer 2 heade r of packets tran smitted on a VLAN. An end station ma y omit the tag, or the VLAN po rtion of the tag, in which case the first swi tch port to receive the packet may either reject it or insert a ta[...]

324 Config uring Sw itching Infor mation Figure 7-49. VLAN Membership The VLAN Membe rship page is divided into two sections. The to p section co ntains fields that define the entire VLAN’s mem bership. The bottom section co ntains tables tha t define membe rship settings for specific P orts and LAGs on this VLAN. F ollowing ar e the VLAN Member [...]

Conf iguri ng Swi tching Infor matio n 325 There are two tables in this section of th e page: • Po r t s — Displays and assigns VLAN membership to ports. T o assign membership, cli ck in Static for a specific port. Each click toggles between U, T , and b lank. See th e following ta ble for definitions. • LAGs — D ispla ys and assigns VLAN m[...]

326 Config uring Sw itching Infor mation Assigning VLAN Membership to a Port or LAG 1. Open the VLAN Mem bership pag e. 2. Select a VLAN from th e VLAN ID or VLAN N ame drop-down men u. 3. In the VLAN P ort Membership T able , as sign a value b y clicki ng in the Static row for a specific P ort/LAG. E ach click toggles between U, T , and blank (not[...]

Conf iguri ng Swi tching Infor matio n 327 W ith Double VLAN T unneling e nabled, every frame th at is transmitted from an interface has a D VLAN T ag attached while every pack e t that is r eceived from an interface has a tag removed (if on e or more tags are pr esent). Use the Double VLAN Gl obal Config uration page to specify the Double VLAN con[...]

328 Config uring Sw itching Infor mation – Custom — Use this to specify tha t double-tagged fram es will use a custom E thertype. A custom Ethert ype may b e used to ma ke th e switch int erope rable wi th speci fic or non-s tandar d equ ipment that d oes not s upport 802.1 o r vMA N valu es of Et hertyp e in double -tagged frames. F or m ore i[...]

Conf iguri ng Swi tching Infor matio n 329 The Double VLAN Interface Configuration page contains the following fields: • Inte rface — Select t he port or LAG for wh ich you wa nt to displ ay or config ure dat a. • Interf ace Mod e — En ables or disables double VLAN t agging on the selected interface . The default value is Disable . Assigni [...]

330 Config uring Sw itching Infor mation Copyi ng Doubl e VLAN Parame ters 1. Open the Double VLA N Interfa ce Config uration page. 2. Click Show All . The Double VLAN P ort P ar ameters T able display s. 3. Specify the P ort you are copying from in Copy P a rameters F rom . 4. Click Cop y T o for each Interface to receive these parameters. 5. Clic[...]

Conf iguri ng Swi tching Infor matio n 331 Figure 7-54. VLAN Port Settings The VLAN P ort Setting s page contains the following fields: • Po r t s — Specifies the Unit and P ort in cluded in the VLAN. • Po r t V L A N M o d e — Indicates the port mode. P ossible values are: – General — The port belon gs to VLANs, and e ach VL AN is user[...]

332 Config uring Sw itching Infor mation Assigning Port Settings 1. Open the VLAN P ort Set tings page. 2. Sele ct the port to wh ich you wa nt to assig n settings f rom the Unit and Po r t drop-d own menus. 3. Complete the re maining fi elds on th e page. 4. Click Apply Cha nges . The VLAN port se ttings ar e defi ned, and the de vice is up dated.[...]

Conf iguri ng Swi tching Infor matio n 333 Ass igning Por ts to VLAN Gr oups Usi ng CLI Comm ands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • VLAN Commands VLAN LAG S ettings Use the VLAN LAG Settings page to map a LAG to a VLAN. Unt agged packets enter[...]

334 Config uring Sw itching Infor mation – Admi t T ag Only — The LAG only acce pts tagged pack ets. – Admi t All — T agged and untagged packets ar e both accepted by the LAG. • Ingress F iltering — Enables or disables Ingress filtering by the LAG. Ingress filtering discards packets where the VLAN tag does not match the LAG VLAN m ember[...]

Conf iguri ng Swi tching Infor matio n 335 Modifying Settings for Multiple LA Gs 1. Open the VLAN LAG S ettings page. 2. Click Show All . The VLAN LAG T able displays . 3. Click Edit for each LAG to mo dify . 4. Edit field s as need ed. 5. Click Apply Cha nges . The VLAN L AG set tings are modified, a nd the dev ice is updat ed. Ass igning L AGs to[...]

336 Config uring Sw itching Infor mation • MAC Address — Specifies MAC Addr ess for a VL AN. • Bind to VLAN (1–4093) — Specifies VLAN to w hich the M AC is to be bound. Assigning Bind MAC to VLAN Settings 1. Open the Bind MAC t o VL AN pag e. 2. Ente r the M AC Ad dress to bind to th e VL AN. 3. Enter t he VLAN to which th e MAC Addr ess [...]

Conf iguri ng Swi tching Infor matio n 337 Removing a MAC - VLAN Entry 1. Open the Bind MAC t o VL AN pag e. 2. Click Show All . The MAC - VLAN Bind T able display s. 3. Check Rem ov e for each entry to remove. 4. Click Apply Cha nges . The entry/entries are removed, and the de vice is updated. Binding MACs to VLANs Using CLI Commands F or inf orm [...]

338 Config uring Sw itching Infor mation The Bind IP Subnet to VLAN page contains the following fields: • IP Addr ess — Specifies packet source IP address. • Subn et Mas k — Specifies packet sour ce IP subnet mask. • Bind to VLAN (1–4093) — Specifies VLAN to which th e IP Address is assigned. Bindin g an IP Su bnet t o a VLAN 1. Open [...]

Conf iguri ng Swi tching Infor matio n 339 Remov ing a MAC - IP Subn et Ent ry 1. Open the Bind IP Subn et to V LA N page. 2. Click Show All . The IP Subnet - VLAN Bind T able display s. 3. Check Rem ov e for each entry to remove. 4. Click Apply Cha nges . The entry/entries are removed, and the de vice is updated. Binding IP Subnets to VLANs Using [...]

340 Config uring Sw itching Infor mation Figure 7- 62. Protoc ol Gro up The P rot ocol G roup page contains the following fields: • P rotocol Group — Displays the name associated with the protocol group ID (up to 16 charact ers). Create a new group by clicking the Add button. • P rotocol — Specifies p rotocols (in hexadecim al format in th [...]

Conf iguri ng Swi tching Infor matio n 341 Figure 7- 63. A dd Proto col Grou p 3. Enter a new P rotocol Group Name and a VLAN ID to assoc iate with this group. 4. Return to the P rotocol Grou p page. 5. Select th e Prot ocol Group that you added, then sel ect the protocol. 6. In the fi rst Interfa ce column, cli ck to highli ght the interf aces to [...]

342 Config uring Sw itching Infor mation Removing Multiple Protocols From the Protocol Group T able 1. Open the P rotocol Group page. 2. Click Show All . The P rotocol Group T able dis plays. Figure 7- 64. Protoc ol Gro up T abl e 3. Check Rem ov e for the protocol groups you want to r emove. 4. Click Apply Cha nges . The protoc ol is r emoved , an[...]

Conf iguri ng Swi tching Infor matio n 343 Figure 7-65. GVRP Glob al Paramet ers The GVRP Global P arameters page contains the following fields: • GVRP G lobal St atus — Enables or disables GV RP on th e switch. GVRP is disabled by default. • Inte rface — Specifie s the Unit a nd P ort or L AG for wh ich GVRP is enabled . • GVRP S tate ?[...]

344 Config uring Sw itching Infor mation Displaying the GVRP Port Parameters T a ble 1. Open the GVRP G lobal P arameters page. 2. Click Show All . The GVRP P ort P arameter s T able displays . Figure 7-66. GVRP Port P arameters T able 3. Use the Unit drop-down menu to view the GVR P P ort P aram eters T ab le for other units in t he stack, if they[...]

Conf iguri ng Swi tching Infor matio n 345 Modifying GVRP Parameters for Multiple Ports 1. Open the GVRP G lobal P arameters page. 2. Click Show All . The GVRP P ort P arameter s T able displays . 3. Click Edit for each Interfa ce/LAG to m odify . 4. Edit the GVRP P ort P arameter field s as needed. 5. Click Apply Cha nges . The GVR P P ort P ara m[...]

346 Config uring Sw itching Infor mation Figur e 7-67. V oic e VLAN C onfig uration The V o ice VL AN Con figu ratio n page contains the following fields: • Vo i c e V L A N A d m i n M o d e — Select th e administra tive mode for V oice VLAN for the switch from the dro p-down menu . The defaul t is disabl e. • Po r t — Select the interface[...]

Conf iguri ng Swi tching Infor matio n 347 Configuring V oice VLAN Settings 1. Open the V oice VLAN Configuration pag e. 2. Configure the settings for the system or for each port . 3. Click Apply Cha nges . The syst em parameters are a pplied, and the devi ce is updated . Configuring V oice VLAN Using CLI Commands F or inf orm at ion abou t th e CL[...]

348 Config uring Sw itching Infor mation Figure 7-68. LACP Parame ters The LACP P arameters page is divided into two sections: Global P arameters and P ort P arameters. F ollowi ng are the fields on this page: Glob al Paramet ers • LACP System P r iority (1–65535) — Indicat es the LACP priority value for global settings . The default value is[...]

Conf iguri ng Swi tching Infor matio n 349 Displaying the LACP Parameters T able 1. Open the LACP P arameters page. 2. Click Show All . The LACP P arameters T able display s. Figure 7-69. LACP Parame ters T able 3. Use the Unit drop-down menu to view the LACP P a rameter s T able for other units in the stack, if t hey ex is t . Modifying LACP Param[...]

350 Config uring Sw itching Infor mation To d i s p l a y t h e LAG M emb ersh ip pa ge, cl ick Switching > Link Aggreg ation > LA G Membership in the tree view . Figure 7-70. LAG Membersh ip The LAG Memb ership page contains a table with t he following fields: • LACP — Aggreg ates a LAG port to LACP membe rsh ip. F or port s with a nu mb[...]

Conf iguri ng Swi tching Infor matio n 351 Addin g a LAG Port to an LAC P 1. Open the LAG Membership page. 2. Click in the LACP row to to ggle the d esired L AG p ort t o L . Note: The port must be assi gned to a LA G before it can be a ggrega ted to an LACP . 3. Click Apply Cha nges . The LAG port is aggregated to the LACP , and th e device is upd[...]

352 Config uring Sw itching Infor mation – Source MAC, VLAN, EtherT ype, SourceModule and P ort Id – Desti nation MA C, VLAN, EtherT ype, SourceModule and P ort Id – Source IP and So urce TC P/UDP P ort (default) – Destinatio n IP and Dest ination T CP/UDP P ort – Source/Destination MAC, VLAN, E therT ype, source MODID/port – Source/Des[...]

Conf iguri ng Swi tching Infor matio n 353 Figure 7-72. LAG Hash S ummary The LAG Hash Summary page contai ns a table wi th the followin g fields: • LAGs — Lists the LAG numbers . • Hash Al gorithm T ype — S hows the type of H ASH algorithm for unicast t raffic flows that is a ssociated with the L AG. Viewing the LAG Hash Algorithm Summary [...]

354 Config uring Sw itching Infor mation To d i s p l a y t h e Multicas t Support menu page, c lic k Switching > Multicast Support in the tree view . This Multicast Support page contains links to the following featur es: • Multic ast Global P arameters •B r i d g e M u l t i c a s t G r o u p • Bridge Mult icast F orw ard • IGMP Snoopin[...]

Conf iguri ng Swi tching Infor matio n 355 Enabling Bridge Multicast Filtering on the S witch 1. Open the Multicast Glob al P ar ameters page. 2. Select Enab le in the Bridge Multicast F iltering field. 3. Click Apply Cha nges . Bridge Multicas t is en abled on the swi tch. Enabling Multicast Forwarding and/o r IGMP Snooping Using CLI Commands F or[...]

356 Config uring Sw itching Infor mation Figure 7-7 4. Bridge Multicast Group The Bridge M ulticast Grou p page contains the following fields: • VLAN ID — Select s the VLA N t o add a mu lticas t gro up t o or to mo dify p orts on a n existin g mu lticast group. • Bridge Multicast Add ress — Identifies th e multicast group MAC a dd ress/IP [...]

Conf iguri ng Swi tching Infor matio n 357 • LAGs — Display s and assi gns multic ast group memb ersh ip to LAG s. T o a ssign mem bership, cli ck in Stat ic for a specific LAG . Each click toggles bet ween S, F , and bla nk. See th e following t able for definit ions. The following table contains definitions for port/LAG IGMP management settin[...]

358 Config uring Sw itching Infor mation Figure 7-75. Add Bridge Multic ast Group 3. Select the VLAN ID from the drop-down menu. 4. Define th e New Bridge Multicast IP or MAC addr ess. 5. In the Bridge Multicast Group tables , assign a s etting by clickin g in the Stat ic row for a specific port/LAG. Each click toggles b etween S, F , and blank. (n[...]

Conf iguri ng Swi tching Infor matio n 359 Removing a Bridge Multicast Group 1. Open the Bridge Multicast Group pag e. 2. Select the VLAN ID associated with the bridge mult icast group to be removed from the drop-dow n menu. The Bridge Multicast Address and the assigned ports/LAGs display . 3. Check the Rem o ve check box. 4. Click Apply Cha nges .[...]

360 Config uring Sw itching Infor mation • F orwar ding Mode — Specifies the multicast fo rw arding mode for the selected VLAN. P ossible v alues are: – F orward Un registered — P ermits the f orwar ding of IPv4 mul ticas t packet s with a des tinatio n addr ess that does not match an y of the gro ups announce d in earlie r IGMP Membership [...]

Conf iguri ng Swi tching Infor matio n 361 To d i s p l a y t h e IGMP Sn ooping page, c lick Switch ing > Multicas t Support > IGMP Snoo ping in the tree view . Use this page to go to the following features: • General IGMP Snooping • Global Q uerier Configura tion • VLAN Querier • VLAN Querier Status • MFDB IGM P Snooping T able Ge[...]

362 Config uring Sw itching Infor mation • Multicast Router Timeout — Specifies tim e before aging out a Multicas t router entry . Th e default value is 300 seco nds. • Lea ve T im eo ut — Sp ecifies time, in seconds, aft er a port leav e mess age is received before the entry is aged out. Enter an amount of time for the timeout period, or c[...]

Conf iguri ng Swi tching Infor matio n 363 Modifying IGMP Snooping Settings for Multiple Ports, LAGs, or VLANs 1. Open the General IGMP snooping page. 2. Click Show All . The IGMP Snooping T able displays . 3. Click Edit for each P ort, LAG, or VLAN to m odify . 4. Edit the IG MP Sn ooping fields as needed. 5. Click Apply Cha nges . The IGMP S noop[...]

364 Config uring Sw itching Infor mation Figure 7- 79. Global Querier C onfiguration The Globa l Querier Config uration page contains the following fields: • IP Addr ess— Specifies the Snoopin g Querier IP Add ress which will be used as the sou rce address in periodic IGMP queries. This address is used when no address is configur ed for the VLA[...]

Conf iguri ng Swi tching Infor matio n 365 VLAN Queri er Use the VLAN Querier pa ge to specify th e IGMP Snooping Q uerier settings for individual VLA Ns. To d i s p l a y t h e VLAN Q uerier page, click Switching > Multicast Suppor t > IGMP Snooping > VLAN Querier in the tree view . Figure 7-80. VLA N Querier The VLAN Querier page contain[...]

366 Config uring Sw itching Infor mation Adding a New VLAN and Configuring its VLAN Querier Settings 1. Open the VLAN Qu erier page. 2. Click Add . The page refreshes, and the Add VLA N page display s. Figure 7-81. Add VLAN Querier 3. Enter t he VLAN ID and, if desir ed, an opt ional VLAN name. 4. Complete the fields on the page as needed. 5. Click[...]

Conf iguri ng Swi tching Infor matio n 367 VLAN Queri er Status Use the VLAN Querier Status page to view the IGMP Snooping Qu erier se ttings for individua l VLANs. To d i s p l a y t h e VLAN Querier Status pa ge, click Switching > Multicast Support > IGMP Snoo ping > VLAN Querier Status in the tree view . Figure 7-83. IGMP Snooping VLAN [...]

368 Config uring Sw itching Infor mation – Disabled — The S nooping Querier is not opera tio nal on the VLAN. Th e Snooping Qu erier transi tions to disabled mode when 1) IGMP Snooping is not operational on th e VLAN, 2 ) the querie r addr ess is not configur ed or 3) the network mana gement addr ess is not config ured. • Ope rat ion al V ers[...]

Conf iguri ng Swi tching Infor matio n 369 The MFDB IG MP Snoopi ng T able page cont ains the following fields: • VLAN — D isp lays th e VL AN ID ass ociat ed wi th an IGM P gr oup e ntry in th e MF DB ta ble. • MAC Address — Displa ys the MAC Address associated with an IGM P group entry in the MFD B table. • Ty p e — D isp lays the ty [...]

370 Config uring Sw itching Infor mation MLD Snooping In IPv4, Layer 2 switches can use IGMP snooping to li mit the flooding of multica st traf fic by dyna mically configuring Layer -2 interfaces so that multica st traffi c is forw arded to only those interfaces asso ciated with an IP mul ticast address. In IP v6, MLD snooping perfor ms a similar f[...]

Conf iguri ng Swi tching Infor matio n 371 The MLD Snooping Ge neral page contains the following fields: • Interfa ce — Specifies t he Unit a nd P ort or th e LAG on w hich MLD Snooping sh ould be en abled. • A uto L earn — Ena ble or Disab le the abil ity of the swi tch to automa tically l earn about dy namic MLD ports. • Host Timeout ?[...]

372 Config uring Sw itching Infor mation MLD Snooping Glo bal Querier Confi guration Use the MLD Snooping Global Querier Configurati on page to configure the pa rameters for the M LD Snooping Querier . To d i s p l a y t h e Globa l Querier Conf iguration page, cli ck Switching > Multicast Support > MLD Snooping > Global Querier C onfigura[...]

Conf iguri ng Swi tching Infor matio n 373 MLD Snooping VLAN Quer ier Use the MLD Snooping VLAN Querier pa ge to specify the M LD Snooping Q uerier settings for individual VLANs. To d i s p l a y t h e MLD Snooping VLAN Querier page, cli ck Switching > Multicast Suppor t > MLD Snooping > VLAN Que rier in the tree view . Figure 7-89. ML D S[...]

374 Config uring Sw itching Infor mation Figure 7-90. Add VLAN Querier 3. Enter t he VLAN ID and, if desir ed, an opt ional VLAN name. 4. Complete the fields on the page as needed. 5. Click Apply Cha nges . The VLAN Querier settings are mod ified, and t he device i s updated. Displ aying t he MLD Sn ooping VLAN Quer ier Sum mary T able 1. Open the [...]

Conf iguri ng Swi tching Infor matio n 375 MLD Snooping VLAN Quer ier Status Use the VLAN Querier Status p age to view the MLD Snoopi ng Querier settings for individual VLANs. To d i s p l a y t h e VLAN Querier Status pa ge, click Switching > Multicast Support > MLD Sn ooping > VLAN Querier Status in the tree view . Figure 7-92. MLD S noo[...]

376 Config uring Sw itching Infor mation • Last Querier Address — Displa ys the IP address of the last querier from which a query was snooped on the V LAN . • Last Querier V er sion — Display s the MLD protocol version of the last querier from which a query was snooped on the VLAN. • Operational Max Response T ime — Display s the maximu[...]

Conf iguri ng Swi tching Infor matio n 377 • VLAN — Disp lays the VLAN ID associated wi th an ML D group entry in the MFDB t able. • MA C Address — Displays the MAC Addr ess associated with an MLD group entry in the MFDB tab le. • Ty p e — Displays the type of entry . Static ent ries are those that are con figured by the u ser . Dyna mi[...]

378 Config uring Sw itching Infor mation Figure 7-94. LLDP Co nfigurat ion The LLDP Configurat ion page contains the following fields: Global Settings • T ransmit I nterv al (1–32768) — Specifies t he interva l at which frames are transm itted. T he defau lt is 30 seco nd s. • Hold Multiplier (2–10) — Specifies m ultiplier on t he trans[...]

Conf iguri ng Swi tching Infor matio n 379 Modifying the LLDP Configuration 1. Open the LLDP Configuration pag e. 2. Define the field s as needed. 3. Click Apply Cha nges . LLDP p arameters are saved t o the switch. Displaying the LLDP Interface Settings T a ble 1. Open the LLDP Configuration pag e. 2. Click Show All . The LLDP I nterfa ce Sett ing[...]

380 Config uring Sw itching Infor mation Modifying LLDP Interfa ce Settings for Multiple Ports 1. Open the LLDP Configuration pag e. 2. Click Show All . The LLDP I nterfa ce Sett ings T a ble displays . 3. Click Edit for each Uni t/P ort to m odify . 4. Edit the LLDP Inte rface fields as need ed. 5. Click Apply Cha nges . The LLDP In terface settin[...]

Conf iguri ng Swi tching Infor matio n 381 The LLDP Statistics page displays t he following statistics: System-wide Statistics • Last Upda te — Displays the val ue of system up tim e the last time a remote data en try was created, modifi ed, or delet ed. • T otal Insert s — Displays the number of times a complet e se t of in formation adver[...]

382 Config uring Sw itching Infor mation LLDP Connect ions Use the LLDP Connections page to view the l ist of ports with LLDP enabled. Ba sic connection details are dis played. To d i s p l a y t h e LLDP Connections page, c lick Switching > LLDP > LLD P Connections in the t ree view . Figure 7-97. LLDP Connecti ons T able The LLDP Connecti o[...]

Conf iguri ng Swi tching Infor matio n 383 Viewing Details about th e LLDP Connections 1. Open the LLDP Connections page. 2. Click the in terface in th e Loc al In te r fac e field to view details abo ut tha t dev ice. The LLDP Connections - Det ailed page fo r the devi ce displays . Figure 7-98. Detail ed LLDP Con nections 3. Use the Back butt on [...]

384 Config uring Sw itching Infor mation Creating Lin k Depen dencies The link dependency feature provides the ability to enable or dis able one or more ports based on the link state of one or m ore differ ent p orts. W ith link de penden cy enabled on a port, the link state of that port is dependent on the link state of another port. F or exampl e[...]

Conf iguri ng Swi tching Infor matio n 385 Figure 7- 99. Li nk Depe nden cy Summary The Link Dependency Summary page contains the following fields: • Group ID — The ID number of t he group. • Member P orts — The list of memb er ports belonging to the grou p. • Po r t s D e p e n d e d O n — The list of ports upon which the group depends[...]

386 Config uring Sw itching Infor mation Figur e 7-100. Lin k Depend ency Gr oup Conf igurat ion 3. T o add a p ort to the Member P orts column , click the port in the Ava i l ab l e Port s column, a nd then click th e << button to the l eft of the Ava i l ab l e Port s colum n. C trl + click t o select mu ltiple p orts. 4. T o add a p ort to[...]

Conf iguri ng Swi tching Infor matio n 387 Dynamic ARP Inspection Dynamic ARP Inspection (DAI) is a security featur e that rejects inval id and malicious ARP pack ets. DAI prevents a class of man-in-the-middle attacks, where an unfriendly station intercepts traffic for other stations by poisoning the ARP ca ches of its unsuspe cting neighbors. The [...]

388 Config uring Sw itching Infor mation The Dynamic ARP Insp ection Gl obal Con figura tion page contains the following fields: • V a li date So urce MAC — Select the DAI Source MA C V alidation Mode for the switch. If you sel ect Enable, S ender MAC validation for t he ARP packets will be en abled. The de fault is Disable. • V alidate D est[...]

Conf iguri ng Swi tching Infor matio n 389 Figure 7-102. Dynamic ARP Inspe ction Inte rface Conf iguration The Dynamic A RP Inspect ion Inte rface Conf iguratio n page contains the following fields: • Po r t — Sel ect t he por t or LAG for which data is to be displayed or configured. • Tr u s t S t a t e — Indicates wh ether the interface i[...]

390 Config uring Sw itching Infor mation DAI VLAN Config uration Use the DAI VLAN Configuration page to select the DAI-ca pable VLANs f or which informati on is to be displayed or configur ed. T o display the DAI VL AN Configuration page, click Switching > Dynamic ARP Inspection > VLAN Configur ation in the navigatio n tree. Figure 7-103 . Dy[...]

Conf iguri ng Swi tching Infor matio n 391 Configuring Dynamic ARP Inspection With CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this function, refer to the follow ing chapter in the CLI Reference Guide : • Dyn amic ARP Inspect ion Commands DAI ACL Config uration Use the DAI ARP ACL Configuration page to add or remov[...]

392 Config uring Sw itching Infor mation Displ aying t he DAI A CL Sum mary T able and Removin g an Ent ry 1. Open the D AI ACL Configura tion page. 2. Click Show All . The Dyna mic ARP Inspe ction A CL Su mmary table disp lays. Figure 7-105 . Dynami c ARP Inspec tion ACL Summary 3. T o remove a n ARP ACL fr om th e list, sel ect the Rem ove o ptio[...]

Conf iguri ng Swi tching Infor matio n 393 Figure 7 -106. Dynamic ARP Inspection Rule Config uration The Dynami c ARP Insp ection Rule Co nfigur atio n page contains the following fields: • ARP AC L Name — Select the ARP ACL f or which inf ormat ion is to be dis played or configu red. • Sender IP Ad dress — T o create a new ru le for the se[...]

394 Config uring Sw itching Infor mation DAI Stati stics Use the D AI Statist ics page to disp lay the st atistics per VLA N. T o display the DA I Statistics pag e, click Switching > Dynamic A RP Inspectio n > Statistics in the navigati on tree. Figure 7-108 . Dyn amic ARP Inspec tion Sta tistics The Dynamic ARP Inspect ion Statistics page co[...]

Conf iguri ng Swi tching Infor matio n 395 • Dropped — The num ber of not valid ARP p ackets dropped by DAI. Configuring Dynamic ARP Inspection With CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this function, refer to the follow ing chapter in the CLI Reference Guide : • Dyn amic ARP Inspect ion Commands DHCP Sn[...]

396 Config uring Sw itching Infor mation • DHCP Snoop ing P er sist ent Con figu rati on • DHCP S nooping Static Bind ings Configurat ion • DHCP Snoop ing Dynamic B indings Summary • DHCP Snoop ing St atisti cs •I P S o u r c e G u a r d DHCP Sn ooping Config uration Use the DHC P Snooping Co nfiguration page to control th e DHCP Snooping[...]

Conf iguri ng Swi tching Infor matio n 397 DHCP Snooping In terface Conf iguration Use the DHCP Snooping Interfa ce Configurat ion pag e to configure the DHCP S nooping se ttings on individual interfaces. The hardware rate lim its DHC P packets sent to th e CPU from untrust ed interf aces to 64 Kbps. The re is no hardwar e rate limiting on trusted [...]

398 Config uring Sw itching Infor mation The DHCP Snooping Interfa ce Configuration page contains the following fields: • Po r t — Sele ct the interfa ce for which d ata is to be displayed or configu red. • Tr u s t S t a t e — If i t is enab led, the D HCP s nooping appl ication considers t he port as tru sted. The defau lt is Disable. •[...]

Conf iguri ng Swi tching Infor matio n 399 DHCP Snooping VLAN Con figuration The DHCP snoo ping application does not forward server messages because they a r e forwarded in hardwar e. DHCP snooping forwards valid DHCP client messages r eceived on no n-routing VLANs. The message is forwarded on all tr usted int erfaces in the VLAN. DHCP snooping can[...]

400 Config uring Sw itching Infor mation Figure 7- 113. DHCP Sn ooping VLAN Su mmary Configuring DHCP Snooping With CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this function, refer to the follow ing chapter in the CLI Reference Guide : • DHCP Snooping Commands DHCP Snooping Per sistent Confi guration Use the DHCP S[...]

Conf iguri ng Swi tching Infor matio n 401 – Loca l — Select the L ocal check b ox to store the DHCP binding database in the flash memory on the switch . – R emote — Check the Remote check box to store the DHCP bin ding datab ase on a r emote ser ver . • Rem ot e I P A dd re ss — Enter the Rem ote IP address on which the snoo ping data [...]

402 Config uring Sw itching Infor mation If the abs olute leas e time of the snooping data base entr y expires, then that ent ry will be remov ed. Y ou should ta ke care of the system time to be consiste nt a cross the reboots. Otherwise, the snooping entries will not e xpire properly . If a host sends a DHCP r elease while the switch is r ebooting[...]

Conf iguri ng Swi tching Infor matio n 403 • MAC Address — Sp ecify the M AC address for the bindin g to be adde d. This is th e Key to the bind ing datab ase . • VLAN ID — Selec t the VLAN from the li st for th e binding rul e. The range of the VLAN ID is 1 to 4093. • IP Addr ess — Sp ecify a valid IP add ress for the binding ru le. Di[...]

404 Config uring Sw itching Infor mation Figure 7-118. DHCP Snoo ping D ynamic Bindi ngs Su mmary The DHCP Snooping D ynamic Bindings Summ ary page contains the following fields: • Inte rface — Displ ays the int erface. • MAC Address — Disp lays the MAC ad dress . • VLAN ID — Dis plays the VL AN ID. • IP Addr ess — Displays the IP a[...]

Conf iguri ng Swi tching Infor matio n 405 DHCP Snoopi ng Statist ics The DHCP Snooping St atistics pa ge di spl ays DHCP sno opin g int er fac e stat ist ics . T o access the DHCP Snooping St atistics page, click Switching > DH CP Snoopi ng > Statistics in the navigati on tree. Figure 7- 119. DHCP Sn ooping Statis tics The DHCP Snooping St a[...]

406 Config uring Sw itching Infor mation IP Source Guar d IP source guar d (IPSG) is a security feature that filters IP pack ets base d on source ID. The source ID may either be source IP address or a {source IP address, source MAC address} pair . IPSG is disabled by default. NOTE : The PowerCon nect 6220 does not su pport IPSG. The IP Source Guard[...]

Conf iguri ng Swi tching Infor matio n 407 IPSG Binding Configuration Use the IPSG Binding Configur ation page di splays DHCP snooping interfa ce statistics. T o access the DHCP Snooping Statistics page, click Switching > DHCP Snoop ing > IP Source Guard > IPSG Bi nding C onfig uratio n in the naviga tion tr ee. Figure 7 -121. IPSG Bind in[...]

408 Config uring Sw itching Infor mation IPSG Binding Configuration Summary The IPSG Bindin g Configuration Summary page disp lays the IPSG Stati c binding list and IPSG dynamic binding list (the s tatic bindings configured in Binding configuration page). T o access the IPSG Binding Configuration Summary page, click Switching > DHCP Snoop ing &g[...]

Conf iguri ng Swi tching Infor matio n 409 Before it relays DHCP requests from clients, the switch can add a Circuit ID and a Remote ID. These provide information about the circuit and port numbe r connected to the client. This information is add ed a s sub opt ions i n t he D HCP Opti on 8 2 pac kets (see s ections 3.1 and 3.2 o f RFC3046). The sw[...]

410 Config uring Sw itching Infor mation DHCP Re lay Interf ace Configur ation Use this pa ge to enable L2 DHCP r elay on i ndividual ports. NOTE: L2 DHCP relay mus t also be en abled gl obal ly on the switch. T o access this page, click Switching > DH CP Relay > Interface Configurat ion in the tree vi ew . Figure 7-124 . DHCP Rel ay Interfac[...]

Conf iguri ng Swi tching Infor matio n 411 Figure 7-125. DHCP Relay Interfa ce Summary Configuring DHCP Relay With CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this function, refer to the follow ing chapter in the CLI Reference Guide : • L2 DHCP Re lay A gent Comma nds DHCP Re lay Interf ace Statis tics Use this pa [...]

412 Config uring Sw itching Infor mation The DHCP Relay I nterface Statisti cs page contains the following fields: • Inte rface — Se lect the slot/port to configure this fea tur e on. • Untrust ed Server Msg s With Option-82 — If the selected in terface is configu red in untrusted mode, this field shows the number of messages received on th[...]

Conf iguri ng Swi tching Infor matio n 413 DHCP Re lay VLAN Conf iguration Y ou can enable L2 DHCP r elay on a par ticular VLAN. The VLAN is identified by a service VLAN ID ( S- VID), which a service provider us es to identify a customer ’s traffic while trave rsing the provider network to multiple r emote sites. The swit ch uses the VLAN me mb e[...]

414 Config uring Sw itching Infor mation • DHC P Re la y Rem ot e- Id — Wh en a st ring is entered here, if a client sends a DHCP requ est to th e switch and the client is in a VLAN t hat correspond s to the select ed S- VID, then the swit ch adds the string to the R emote-ID sub-op tion of Option 82 in the DH CP request pack et. The ra nge is [...]

Conf iguri ng Swi tching Infor matio n 415 Port Co nfiguration Summary Use the P ort Configur ation Summary page to view infor mation abou t the port mem bers and LACP modes for the aggregator groups. From the P ort Config uration Summary page, you can access the Po r t Configur ation page . To d i s p l a y t h e P ort Confi guration Summary page,[...]

416 Config uring Sw itching Infor mation Confi guring Port Aggr egator G roups Y ou can assign each port to an ag gregator g roup from the P ort Configurat ion page, which is accessible from the P ort Configurat ion Summary page. By default, all ports are in aggr egator group 1. 1. Open the P ort Configuration Summary page. 2. Click any Mod ify lin[...]

Conf iguri ng Swi tching Infor matio n 417 Rem oving Port s from an Ag gregato r Group 1. Open the P ort Configuration Summary page. 2. Select the Rem o ve op tion fo r the group with the po rts to remove . 3. Click Apply Cha nges . All ports assigned to the P ort Aggregator group are r emov ed from the group and are not assigned to any group. Note[...]

418 Config uring Sw itching Infor mation The Group Config uration Summary page contains the following fields: • Group ID — Identifies th e aggregator group. • VLAN — Select the VLAN or VLANs that will have th e Aggregator Group as a member . An Aggregator Group can be a memb er of multiple VLANs, but each VLAN can only belong to one Aggrega[...]

Conf iguri ng Swi tching Infor matio n 419 • Duplex — Ident ifies the group du plex mode, wh ich is either Fu ll or H alf. – Fu l l — Indica tes that the group support s transmis sion betwe en the switc h and the clie nt in both directions simul taneou sly . – Half — Indica tes that the group supports transmission bet ween the switch a [...]

420 Config uring Sw itching Infor mation Group VLAN MAC Summary Use the Group VLAN MAC Summary pag e to v iew t he MA C add res s ta ble en trie s for one P ort Aggregator group or all groups. To d i s p l a y t h e Group VLAN MAC Summary page, c lick Switching > P ort Aggregato r > Group VLAN MAC Summary in the tree view . Figure 7-133 . Gro[...]

Viewing Stat istic s and Re mote Mon itoring 421 8 V iewing Statistics and Remo te Monitoring Overv iew This sectio n explains the RMON options avail able from the Statistics/RMON menu page. These options include vi ewing statistics in t able form, editin g and viewing RMON st atistics, and charting P ort and LAG st atistics. The Statistics/RMON me[...]

422 Viewing Stat istic s and Re mote Mon itoring T able Views The T able V iews menu page contains links to web pages that disp lay statistics in table form. T o display this p age, c lick Statistics /RMON > T abl e V iews in the tree view . F ollowing are the web pages accessible from this menu page: • Interfa ce Statistics •E t h e r l i k[...]

Viewing Stat istic s and Re mote Mon itoring 423 The Interface Statistics p age contains the following fields: • Inte rface — S elect phys ical interface (un it, port) or LAG interface for w hich statist ics is displayed . • Refresh Rate — Specifies am ount of time that passes before statistics ar e refreshed. The possible field values are [...]

424 Viewing Stat istic s and Re mote Mon itoring Etherl ike Statisti cs Use the E ther lik e Stat is tics page to display interfa ce statistics. T o di spla y the page , cli ck Statistics/RMO N > Ta b l e V i e w s > Etherlike Statistics in the tree view . Figur e 8-2. Etherl ike Sta tist ics The Eth erl ike St at istic s page contains the fo[...]

Viewing Stat istic s and Re mote Mon itoring 425 • Internal MAC Receive Errors — Displa ys numbe r of internal MAC received errors on the selected interface. • Recei ved P ause Frames — Displays numb er of received paused fram es on the selected interface. T ransmitted P ause Frames — Displays number of transm itted pause d frames on the [...]

426 Viewing Stat istic s and Re mote Mon itoring The GVRP Statistics page cont ains the following fields: • Inte rface — S elect phys ical interface (un it, port) or LA G int erface for which statistics will be displ ay ed. • Refresh Rate — Specifies am ount of time that passes before statistics ar e refreshed. The possible field values are[...]

Viewing Stat istic s and Re mote Mon itoring 427 EAP Stat istics Use the EA P Statistics page to dis play inform ation abou t EAP pa ckets r eceived on a spe cific port. F or more information about EAP , see "D ot1x Authentication." To d i s p l a y t h e EAP Statistics page, click Stat istics/RMON > Ta b l e V i e w s > EAP Statist[...]

428 Viewing Stat istic s and Re mote Mon itoring • Res po nd Fram es Re ce iv ed — Disp lays the numbe r of valid EA P Respond frames received on th e port. • Request ID F rames Received — Displa ys the number of E AP Request ID frames that h ave been r eceived on the port. • Request F rames T ransmitted — Displays th e number of EAP Re[...]

Viewing Stat istic s and Re mote Mon itoring 429 Utiliz ation Summa ry Use the Utilizatio n Summary page to di spl ay in terf ace u til izat ion stat istic s. T o di spla y the page , cli ck Statistics/RMO N > Ta b l e V i e w s > Utilization Summa ry in the tree view . Figure 8-5 . Utilization S ummary The Uti lizat io n Sum mar y page con t[...]

430 Viewing Stat istic s and Re mote Mon itoring Viewing Interface Utilization Sta tistics Using the CLI Command F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • RMON Comman ds Counter Summar y Use the Counter Summary page to dis play interface utilization s[...]

Viewing Stat istic s and Re mote Mon itoring 431 • Received Errors — Displ ays num ber of received errors on the interface. • T ransmit Errors — Disp lays num ber of transmitted errors from the int erface. Setting Refresh Rate 1. Open the Count er Summa ry page. 2. Select the Refresh Rate from the drop-down menu. Statistics r ef r esh for t[...]

432 Viewing Stat istic s and Re mote Mon itoring RMON Statistics Use the RMON Statistics pa ge t o disp lay d etail s abo ut swi tch us e such as pa cket pr ocessi ng st atis tics and errors that have occurr ed on the switch. T o di spla y the page , cli ck Statistics/RMO N > RMON > Statistics in the tree view . Figure 8-7. RMON St atistics T[...]

Viewing Stat istic s and Re mote Mon itoring 433 • Multicast P ackets Received — Displays number of good multica st packets received on the inte rface sinc e the sw itc h wa s las t refreshe d. • CRC & Align Errors — Displays nu mber of CRC and Align errors that h ave occurred on the in terface sinc e the sw itc h wa s las t refreshe d.[...]

434 Viewing Stat istic s and Re mote Mon itoring RMON History Con trol Statistic s Us e the RMON History Control page to maintain a history of statistics on each port. F or each interface (either a physical port or a p ort-channel), you can de fine how many buckets e xist, and the time interval betwe en each bu cket snapshot . T o di spla y the pag[...]

Viewing Stat istic s and Re mote Mon itoring 435 Addi ng a Hi story Co ntrol Entry 1. Open the RMON History Control page. 2. Click Add . The Add Hi story En try page displays. Figure 8-9. Add Hi story Entr y 3. Complete the fiel ds on this page and cli ck Apply Chan ges . The entry is added to the RMON Histor y Control T able . Displ aying th e RMO[...]

436 Viewing Stat istic s and Re mote Mon itoring V iewing R MON Hist ory Cont rol Us ing the CLI Com mands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • RMON Comman ds RMON History T able Use the RMON History T able page to display interface- specific sta[...]

Viewing Stat istic s and Re mote Mon itoring 437 • Drop Events — Displa ys the total numb er of events in wh ich packets were dropped by the port due to lack of resources. Note tha t this number is not n ecessarily the nu mber of packets dropped; it is just the number of times this cond ition has been detected. • Recei ved Bytes (Oct ets) —[...]

438 Viewing Stat istic s and Re mote Mon itoring V iewing R MON Hist ory Cont rol Us ing the CLI Com mand F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • RMON Comman ds RMON Event Contr ol Use the RMON Event s Control page to define RMON events. Events ar e[...]

Viewing Stat istic s and Re mote Mon itoring 439 The RMON Event Control page contains the following fields: • Event En try — Sele cts the event. • Commun ity — Sp ecifies the community t o which the ev ent belongs. • Description — De scribes the user -defined event. • Event T ype — Selects the e vent type. P ossible values are: – [...]

440 Viewing Stat istic s and Re mote Mon itoring Modify ing an RMON Even t 1. Open the RMON Event Co ntrol page. 2. Click Show All to displa y the Even t Control T able page. 3. Select the Edit check box in for the e vent entry to chan ge. 4. Modify the fields on the page as needed. 5. Click Apply Cha nges . The RMON Events T able entry is modif ie[...]

Viewing Stat istic s and Re mote Mon itoring 441 RMON Event Log Use the RMON Event Log page to display a lis t of RMON events. T o di spla y the page , cli ck Statistics/RMO N > RMON > Events L og in the tree view . Figure 8-15. R MON Eve nt Log The RMON Event Log pa ge contains the following fie lds: • Event — Display s the RMO N Events [...]

442 Viewing Stat istic s and Re mote Mon itoring RMON Alarms Use the RMON A larms page to set network alarms. Alarms occur when certai n thre sholds are cros sed for the configured RMON counters. The alarm tri ggers an event to o ccur . The events can be configured as part of the RMON Ev ents group. F or more information about events, see " RM[...]

Viewing Stat istic s and Re mote Mon itoring 443 • Rising Threshold (0 –2147483647) — D isplay s th e risin g co unte r value that t rigge rs the risin g thr eshold al arm. The ri sing thr eshold i s prese nted on top of the graph bars. Each monitor ed vari able is desi gnated a color . The defaul t is 100. • Rising Ev ent — D isplays th [...]

444 Viewing Stat istic s and Re mote Mon itoring Figure 8-17. Add an Alarm Entry 3. Complete the fields on thi s page as needed. 4. Click Apply Cha nges . The RMON ala rm is added, and the devi ce is upda ted. Displaying the Alarm T able 1. Open the RMON Alarms page. 2. Click Show All. The left side of the RMON Alarm s T able display s. Figure 8-18[...]

Viewing Stat istic s and Re mote Mon itoring 445 Remov ing One Alarm T able Entry 1. Open the RMON Alarms page. 2. Sele ct an entry i n the Alarm En try drop-down menu. 3. Check the Rem o ve chec k b ox a nd click Apply Chan ges . The entry is removed, and the d evice is updated. Removing Multiple Alarm T able Entries 1. Open the RMON Alarms page. [...]

446 Viewing Stat istic s and Re mote Mon itoring Charts The Ch art menu page contains links to web pages that allow you to chart stat istics on a g raph. T o display the Charts menu page, click Statistics/RMON > Charts in the tr ee vi ew . The Char ts menu page contains links to t h e following features: •P o r t s S t a t i s t i c s •L A G[...]

Viewing Stat istic s and Re mote Mon itoring 447 The P orts Statistics page contain s the following fields: • Unit No . — Selects the port to be displayed. • Inte rface St atis tics — Selects Interface Statistics when clic ked, and specifies th e type of int erface statist ics to graph from the drop-down menu. Th e default is Received Rate [...]

448 Viewing Stat istic s and Re mote Mon itoring LAG Stat istics Use the LAG Statistics pag e to chart LAG -r elated s tatistics o n a graph. T o di spla y the page , cli ck Statistics/RMO N > Cha rts > LAGs in the tree view . Figure 8-20. LAG Stat istics The LAG Statist ics page co ntains the following fie lds: • Inte rface St atis tics ?[...]

Viewing Stat istic s and Re mote Mon itoring 449 Displaying LAG Statistics 1. Open the LAG Statisti cs pag e. 2. Click the r adio b utton asso ciate d w ith the stat istics to ch art. 3. Sele ct the type of st atistic s from the r elate d drop-down menu . 4. Sele ct the desir ed r efresh rate from th e Refresh Rate drop-down menu. 5. Click Draw . T[...]

450 Viewing Stat istic s and Re mote Mon itoring[...]

Conf iguring Ro uting 451 9 Configuring Routing Overv iew The P owerConnect M6220/M6348/ M8024 suppor ts the IP routing feature . Use the Routi ng men u page to configure routing on VLANs. When a pack et enters the switch, t he destination MAC addr ess is check ed to see if it matches a ny of the configured routing interfaces. If it does, then the [...]

452 Confi gur ing Rout ing ARP The P ow erConn ect M62 20/M634 8/M802 4 uses the AR P protocol to associate a laye r 2 MAC addr ess with a laye r 3 IPv4 address. Addit ionally , the adminis trator ca n statica lly add entri es into th e ARP tab le. ARP is a ne cessary part of the internet protoco l (IP) and is use d to translate an IP address to a [...]

Conf iguring Ro uting 453 ARP Create Use the ARP Create page to add a n entry to the Address Resolut ion Pr otoco l table. T o di spla y the page , cli ck Routing > ARP > ARP Create in th e tr ee vie w . Figure 9-1. ARP Crea te The ARP Crea te page contains the following fields: • IP Addr ess — Enter the I P addre ss you want to add. It m[...]

454 Confi gur ing Rout ing Adding Entries to the ARP T able using the CLI Command F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Refer ence Guide : • ARP Commands ARP T able Configurati on Use this pa ge to chang e the config urati on paramete rs for the A ddress Resolution Pr[...]

Conf iguring Ro uting 455 The ARP T able Con figuration page contains the following fields: • Age T ime (secs) — En ter the value you want the sw itch to use for the AR P entry ageout time. Y o u must enter a valid integer , which represents the number of seconds it t akes for an ARP entry to age out. The range for this field is 15 to 216 00 se[...]

456 Confi gur ing Rout ing Confi guring ARP T able 1. Open the ARP T a ble Configuration page. 2. Change para meters as nee ded. 3. Click Apply Cha nges . Changes ar e saved, and th e ARP table is up dated. Configuring ARP T ab le with CLI Co mmands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing ch[...]

Conf iguring Ro uting 457 The IP Configur ation page contains the following fields: • Default Time to Live — The default va lue inserted into t he Time- T o-Live field of the IP header of datagrams origin ated by th e switch, if a TT L value is not supplied by the transport layer protocol. • Rou ti ng Mo de — Sele ct Enable or Dis able from[...]

458 Confi gur ing Rout ing IP St atist ics The statistics reported on the IP Statistics pag e are as specifi ed in RFC 121 3. T o di spla y the page , cli ck Rout ing > IP > S tatist ics in the t ree view . Figure 9-4. IP Stat istics The IP Statistics page contains the following fields: • IpInRec eiv es — The tot al number of input dat ag[...]

Conf iguring Ro uting 459 • IpForwDatagr ams — The number of inpu t datagra ms for whic h this entit y was not th eir final IP desti nation, as a r esult of wh ich an atte mpt was ma de to find a route to forw ar d them to that fina l dest inatio n. In entiti es w hich d o no t act a s IP G atew ays, th is co unte r inclu des o nly t hose p ack[...]

460 Confi gur ing Rout ing • Icmp InMs gs — The total numb er o f ICM P m essag es w hich the en tity received . Not e tha t th is co unte r includes all those counted b y icmpInErr ors. • Icmp InErro rs — The n umber of ICM P messages which the entity received but determin ed as having ICMP -s pecific errors (bad ICMP checksums, b ad lengt[...]

Conf iguring Ro uting 461 Refreshing IP Statistics 1. Open the IP Stat isti cs pag e. 2. Click Re f r e s h . The screen displays with the present state of the data in the sw itch. Displaying IP Statistics using the CLI Co m mand F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Re[...]

462 Confi gur ing Rout ing The IP I nter face C onfig urat io n page contains the following fields: • Inte rface — Select the in terface to configure from the drop-down menu. Th e drop-down men u contains l oopback interfaces and VLANs cr eated from the Switching → VLAN → VLAN Membership → Add pag e. • IP Addr ess — E nter the I P add[...]

Conf iguring Ro uting 463 Modifying an IP Interfa ce 1. Open the IP Int erfac e Con figu ratio n page. 2. Change values a s needed. 3. Click Apply Cha nges . Changes ar e saved, and th e IP Interf ace is upd ated. IP Interface Configuration CLI Comma nd s F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this function, se e the follow [...]

464 Confi gur ing Rout ing •L i n k S t a t e D a t a b a s e • Virtual Link Configura tion • V irtual Link S ummary • Rout e Redistribu tion Configu ration • Route Re distri bution S ummary OSPF Configu ration Use the OSPF Configuratio n page to enable OS PF on a route r and to config ure the related OSPF settings . T o di spla y the pag[...]

Conf iguring Ro uting 465 The OSPF Config uration page contains the following fields: • Rou te r I D — T he 32-bit integer in dotted decimal form at tha t uniquel y identifies t he router w ithin the autonomou s system (AS). If y ou want to cha nge the Router ID you must first disable O SPF . After you set the new Rou ter ID, you mu st re-en ab[...]

466 Confi gur ing Rout ing • External LSA Checksum — The sum of the LS checksums of t he external LSAs (link state advertisements) contained in the link-state d atabase. This sum can be u sed to determ ine if there has been a ch ange in a rout er's li nk state data base, and to comp are th e link-s tate databa ses of two rou ters. This val[...]

Conf iguring Ro uting 467 Def aul t Rout e Adv ert ise • Default Information Originate — E nable or Disa ble Defa ult Rou te Advertis e. • Alway s — Sets the rout er advert ise 0.0.0.0 /0.0.0.0 when set t o T rue. • Metric — Specifies t he metric of the default route. Th e valid values are 1 to 1677 7214. En ter 0 to uncon figure. • M[...]

468 Confi gur ing Rout ing Figure 9- 7. OSPF Are a Confi gurati on The OSP F Are a Conf igu ratio n page displays the following fields: • Area — Select the ar ea to be displ ayed from th e drop-down menu. When an ar ea is selected, fields in the Stub Area Information are displayed. • Area ID — The O SPF area. An Area ID is a 32 -bit integer[...]

Conf iguring Ro uting 469 • Area LSA Checksum — T he 32- bit u nsign ed sum of the lin k-state adve rtise men ts' LS chec ksum s contai ned in this ar ea's lin k-state da tabase. Th is sum e xclude s ext ernal (LS ty pe 5) link -state advertisements. Th e sum can be used to determine if t here has been a change in a router's link[...]

470 Confi gur ing Rout ing Displ aying an OSPF A rea Conf igurati on 1. Open the OSPF Area Con figuration page. 2. Select the OSPF area to display from the d rop-down men u. The OSPF a r e a configuration is displa yed for th is area. Deleting an OSPF A rea Configuration Use these steps to delete NSSA config uration or Stub ar ea configuration. 1. [...]

Conf iguring Ro uting 471 The OSPF Stub Area Summary page displays the foll owing fields: • Area ID — The Area ID of the stub a rea. • Ty p e o f S e r v i c e — The type of service associated with the stub metric. The switch supports Normal only . • Metric V alue — The m etric value for t he default route a dvertised into th e area. ?[...]

472 Confi gur ing Rout ing The OSPF Area Ra nge Configurat ion page contains the following fields: • Area ID — Select th e area for which data is to be configured from the drop-down menu. • IP Addr ess — En ter the IP Address for the address ra nge for the selected area. • Subn et Mas k — Enter t he Subnet Mask for the address range for[...]

Conf iguring Ro uting 473 Interf ace Statisti cs Use the OS PF Interfa ce Statistics page t o displa y statis tics for the se lected interface. The information is displayed only if OSPF is enabled. T o di spla y the page , cli ck Routing > O SPF > Interface Stat istics in the tree view . Figure 9 -10. OSPF Interfac e Statistics The OSPF Inter[...]

474 Confi gur ing Rout ing • Neighbor Events — The number of t imes this neighbor r elation ship has cha nged state , or an error has occurred . • Extern al LSA Cou nt — Th e nu mber of extern al (L S type 5) link- state advert isem ents in the lin k-st ate datab ase. • Sent P a ckets — The number of OS PF packets transmitted on the int[...]

Conf iguring Ro uting 475 • DD P ackets R eceived — The number of Database Description packets r eceiv ed on this interface by this ro uter . • LS Requests Se nt — The number of LS Re quests s ent on t his i nterfac e by this rou ter . • LS Req u es ts Re ce ive d — The n umber of LS R equests received on this interface by this router .[...]

476 Confi gur ing Rout ing Figure 9-11. OSPF In terface Configurat ion The OSP F Inte rfac e Co nfig urat ion page contains the following fields: • Inte rface — S elect the in terface for wh ich data is to be displayed or con figured from the drop-down menu. • IP Addr ess — Displa ys the address of the VLAN Interface. • Subn et Mas k — [...]

Conf iguring Ro uting 477 • Advertise Second aries — Select Enable or Disable from the drop-down menu to indicate th e advert iseabil ity of all secondary add ress es. By defau lt all the s econdary addr esses would be adve rtised on an interface enabled for OSPF . • Rou te r Pr ior i ty — Ente r the OSPF priorit y for the selected interfac[...]

478 Confi gur ing Rout ing • Authentica tion T ype — Y ou may se lect an au then ticatio n ty pe ot her th an None by clicking on the Modify button. Y ou then se e a new web page, wher e you can select t he authen tication ty pe from the dro p-down menu. P ossib le val ues ar e: – None — This is t he initial in terface state. If you select [...]

Conf iguring Ro uting 479 – Backup Designated R outer — This router is the Backup Designated Router on the attached network. It is promoted to Designated R outer if the present Designated Router fails. The rou ter establishes adjacencies to all other routers a ttached to the network. Th e Backup Designated Router perform s slightly d ifferent f[...]

480 Confi gur ing Rout ing Confi guring an OSPF I nterfa ce usin g CLI Com mands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide: • OSPF Comma nds Neighbor T able Use the OSP F Neighb or T able page to disp lay the O SPF neighbo r ta ble list. When a particular[...]

Conf iguring Ro uting 481 The OSPF Nei ghbor T able page displays t he following fields: • Inte rface — S elect the in terface for wh ich data is to be dis played from a dr op-down menu. • Rou te r I D — A 32-bit inte ger in dotted decimal form at representing the neighb or interface. • IP Addr ess — T he IP address of the neighboring r[...]

482 Confi gur ing Rout ing Figure 9- 13. OSPF Neighbor C onfiguration The OSPF Neig hbor Configur ation page contains the following fields: • Inte rface — S elect the V LAN in ter face on whi ch ro u ting is enab led from the drop-d own menu. • Neighbor IP A ddress — Select t he IP Address of the neighbor for which data is to be displayed .[...]

Conf iguring Ro uting 483 – Attem pt — This state is only valid for neighbors atta ched to NBMA networks. It indica tes that no recent information has been r eceiv ed from the ne ighbor , but th at an effort should be mad e to contact t he neighbor (sending the neighbor Hell o pack ets at interv als of Hel lo Interval ). – Init — In this st[...]

484 Confi gur ing Rout ing Link St ate Data base Use the OSP F Link Sta te Database page to display OSPF link state, e xternal LSDB table, and A S opaq ue LS DB ta ble info rmat ion . T o di spla y the page , cli ck Rout ing > O SPF > Li nk Sta te Dat abase in t he tree view . Figure 9-14. OSPF Li nk State Database The OSPF Link State Dat aba[...]

Conf iguring Ro uting 485 • LS ID — The L ink State ID identifies t he piece of th e routing doma in tha t is being des cribed by th e advertisement. T he value of the LS ID depends on th e advertisement's LS type. • Age — The time since the link sta te advertisement w as first originated, in seconds. • Sequ enc e — The s equence n[...]

486 Confi gur ing Rout ing Figure 9-15. OSPF Virtual Link Configur ation - Create The OSP F V irtu al L ink C onf igur atio n pages contain the following fields: • V irtua l Link (Area ID - Neighbor Router ID) — Select t he virt ual link for whic h you want to d isplay or configure data. It consists of the Area ID and Neighbor R outer ID. T o c[...]

Conf iguring Ro uting 487 • Inte rface De lay Int er val (secs) — T he OSPF T ransit D elay fo r the virt ual link in units of second s. It specifies the estim ated n umber of se conds it takes to transm it a link state up date packet over th is interfac e. • Stat e — The cu rr ent state of t he selected Virtual Link. One of: – Down — T[...]

488 Confi gur ing Rout ing – Sim ple — If you select Simple you a re prompted to enter an au thentication key . This key is included, in th e clear , in the O SPF head er of all packets sent on the network. All routers on the networ k must be co nfigur ed with the same k ey . – Encryp t — If you s elect Encryp t yo u are pro mpt ed to e nte[...]

Conf iguring Ro uting 489 Figure 9-16. OSPF Virtual Link Configur ation 5. Click Configure Au thentication to m odify a uthe ntica tion. The following pa ge appears:[...]

490 Confi gur ing Rout ing Figure 9 -17. OSPF V irtual Link Au thenticat ion Config uration 6. Select valu es for Authentic ation T y pe and Au thentic ation Ke y . 7. Click Apply Cha nges when finis hed. Configuring Virtual Link Data 1. Open the OSPF V irtual Link Configuration page. 2. Specify the area ID and n eighbor router ID t o configure. 3.[...]

Conf iguring Ro uting 491 Displaying Virtual Link Data 1. Open the OSPF V irtual Link Configuration page. 2. Specify the area ID and n eighbor router ID t o display . The virtu al link da ta for th ese IDs d isplays. Remov ing a Virt ual Lin k 1. Open the OSPF V irtual Link Configuration page. 2. Specify the A r ea ID and Neighbor R outer ID associ[...]

492 Confi gur ing Rout ing Figure 9-18. OSPF Virtual Link Summary The OSPF V irtual Link Summary page co ntains the following fie lds: • Area ID — The Area ID portion of the v irtual link iden tification for which data is to be displayed . The Area ID and Neighbor Rou ter ID together d efine a virtua l link. • Neighbor Rout er ID — The n ei[...]

Conf iguring Ro uting 493 Displaying the Virtual Link Summary using the CLI Command F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Refer ence Guide: • OSPF Comma nds Route Re distribu tion Confi guration Use the O S P F Ro u te Re d is t r i bu t i o n Co n f ig u r a t io n p[...]

494 Confi gur ing Rout ing The OSPF Route Redistribution Configu ration p age contains the following fields: • Sour ce — A protocol configured for OSPF to r edistribute the routes learned through this protocol. Only s ource route s that have been config ured f or re distribution by OSPF are available. P ossible values are Static, Connected, and[...]

Conf iguring Ro uting 495 Crea ting an OSPF R oute Redi stribu tion So urce When no redistributions are configured, the system displays only Create in the Configured Source field and possible sources in the Av ailable S ource fields. When you select an A vailable Source, enter configuration data, and click Apply Changes , the item displa ys in the [...]

496 Confi gur ing Rout ing Route Re distributi on Summary Use the O SP F Ro ute Redi str ib ut ion Su mm ar y page to display OSPF Route Red istribution configurations. T o di spla y the page , cli ck Ro u t i n g > O S P F > Ro ut e R e di s t r ib u t i on S u m m ar y in t he tree view . Figure 9-20. OSPF R oute Redistri bution Su mmary Th[...]

Conf iguring Ro uting 497 BOOTP/DH CP Relay Agent BootP/D HCP Re lay Agen t enables B ootP/DH CP client s and se rvers to exchange Boo tP/DHCP messages across different subnets. The relay agent receives the requests from the clients, and checks the valid hops and giaddr fields. If the number of hops is greater than the configur ed, the agent assume[...]

498 Confi gur ing Rout ing BOOTP/DHCP Relay Agent Configurat ion Use the BO OTP/DHC P Relay Ag ent Conf igurati on page to configure and display a B OOTP/DHCP rel a y a ge n t . T o di spla y the page , cli ck Routing > BOOTP/DHCP R elay Agent > Configuration in the tree view . Figure 9 -21. BOOTP/DHCP R elay Agen t Configur ation The BOOTP/D[...]

Conf iguring Ro uting 499 Configuring BOOTP/DHCP 1. Open the BOOTP/DHCP Con figuration page. 2. Enter d ata in the field s as needed. 3. Click Apply Cha nges when finis hed. The BOOTP/DHCP data i s configu red, an d the device is updat ed. Configuring BOOTP/DHCP using CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this [...]

500 Confi gur ing Rout ing The BOOTP/ DHCP Status pa ge disp lay s the fo llo win g fie ld s: • Maximu m Hop Count — The maximum nu mber of Hops a cl ient r equest can g o without b eing disc arded. • Server IP Address — The IP address of the BOO TP/DHCP serve r or the IP address of the next BO OTP /D HC P R el ay Age n t. • Admi n Mode ?[...]

Conf iguring Ro uting 501 IP Helper Gl obal Configu ration Use the IP Helper Glo bal C onf igu ratio n page to add, sh ow , or delete UDP Rela y and Helper IP configuration T o di spla y the page , cli ck Routing > IP Helper > Globa l Configuratio n in the tree vie w . Figure 9-23. IP Helpe r Global Configur ation[...]

502 Confi gur ing Rout ing The IP Helper Global Configur ation page contains the following fields: • UDP Relay Mode — Use the menu to enabl e or disable the UD P relay mode. Y ou mu st enable the UDP Relay Mod e to relay any other protocols for which an IP helper address has been configured. By defaul t UDP Re lay Mode is Enab led. • UDP Dest[...]

Conf iguring Ro uting 503 • Server Address — The IPv4 add ress of the server to which pa ckets ar e relayed for th e specific UDP Destinati on P ort. • Hit Co unt — The number of times a packet has been forwarded or discarded accor ding to this entry . • Rem ov e — Removes the specified UDP Relay when sel ected and Apply Cha nge s is pr[...]

504 Confi gur ing Rout ing IP Help er Interface Conf iguration Use the IP Helper Inte rfa ce Co nfig ur atio n page to add, show , or delete UDP Relay and Helper IP configuration for a sp ecific interface. T o di spla y the page , cli ck Routing > IP Helper > Inte rface Configur ation in the tree view . Figure 9 -25. IP Helper Inte rface Conf[...]

Conf iguring Ro uting 505 Adding an IP Helper Entry to an Interface 1. Open the IP Hel per Inter face Configu ration page . 2. Click Add to dis play the Interface Confi guration Add pa ge : Figure 9-26. Add Help er IP Address 3. Sele ct the interf ace to use for the r elay . 4. Select a UDP Destinat ion port name from the menu or enter the UDP Dest[...]

506 Confi gur ing Rout ing IP He lper Stat isti cs Use the IP Helper Statistics p age to vi ew UDP Re lay Stat istics for the swi tch. T o di spla y the page , cli ck Routing > IP Helper > Statistics in the tree view . Figure 9 -27. IP Helper Sta tistics The IP Helper Stat istics page contains the following fields: • DHCP Client Messages Re[...]

Conf iguring Ro uting 507 • DHCP Client Messages Hop Count Exceeded Max — The number of DHCP client messages r eceived whose hop count is la rger than the maxi mum allowe d. The maximum ho p count is a configurable value.A log m essage is written for each such failure. The DHCP relay agent does not relay these pack ets. • DHCP Pkts Rcvd T oo [...]

508 Confi gur ing Rout ing RIP Configu ration Use the RIP Con figuration page to enable and configur e or disable RIP in Globa l mode. T o display the page, c lic k R outing > RIP > Configurat ion in the tree view . Figure 9-28. RIP Co nfigurat ion The RIP Config uration page contains the following fields: • RIP Admin Mode — Select Enable[...]

Conf iguring Ro uting 509 • Host Routes Accep t Mode — Selec t Enable o r Disable f rom the drop-do wn menu. If you select Enable, the router accepts host routes. The default is Enable. • Global Route Changes — Display s the number of rou te changes made to t he IP Route D atabase by RIP . This d oes not include th e r efresh of a route&apo[...]

510 Confi gur ing Rout ing RIP Inter face Summary Use the RI P Interf ace Summary page to dis play RIP configur ation status on an interface. T o di spla y the page , cli ck Rout ing > RIP > Inter face Summ ary in the tree view . Figure 9-29. RIP Interfac e Summary The RIP Inte rface Summary page d isp lay s the fo llo win g fie lds : • Int[...]

Conf iguring Ro uting 511 • Rec ei ve V er si on — Spe cifies which RIP version control pa ckets ar e accepted by the interface. The defau lt is Both. P os sible values are: – RIP - 1 — only R IP version 1 formatted pa ck e ts are r eceived. – RIP - 2 — only R IP version 2 formatted pa ck e ts are r eceived. – Both — packets are r e[...]

512 Confi gur ing Rout ing RIP Inter face Configurat ion Use the RI P Interf ace Confi guratio n page to enab le and configure or to disable RI P on a specific interface. T o di spla y the page , cli ck Rout ing > RI P > Inte rface Configu rati on in the tree view . Figure 9- 30. R IP Interf ace Con figurati on The RIP Inter fac e Co nfig ura[...]

Conf iguring Ro uting 513 – RIP - 2 — accept only RIP version 2 formatt ed packets. – Both — accept packets in either format . • None — no RIP control pack ets is accepted. • RIP Admin Mode — Select E nable or Disable from the drop-down menu. Before you enable R IP versi on 1 or versio n 1c on an interf ace, you must fi rst enabl e [...]

514 Confi gur ing Rout ing Configuring the RIP Interface 1. Open the RIP Interface Configuration pag e. 2. Specify the in terface for wh ich da ta is to be con figured. 3. Enter dat a into the fields a s needed: Send V er sio n — F rom the drop-down box, select None , RIP - 1 , RIP -1 c , or RIP2 . Rec ei ve V er si on — F rom the drop-down box[...]

Conf iguring Ro uting 515 Static Reject Routes A stati c reject ro ute is a stati c route to disca rd the pa ckets to a particular destinat ion, there by forcing a black- hole r outi ng behav ior fo r a part icul ar set of IP prefix es. Static re ject routes can help pr event a routing loop in the network if a default route is conf igur ed on a rou[...]

516 Confi gur ing Rout ing The drop-down m enu lists the ACLs configured through the pages under Switching → Network Secu rity → Access Control Lists → IP Access Control Lists . When used for route filte ring, the only fields in an access list tha t get used are: – Source IP Addr ess and net mask – Destinatio n IP Addr ess and netm ask ?[...]

Conf iguring Ro uting 517 RIP Route Redi stribution Summary Use the RI P Route Re distr ibution Summary page to display Route Redistribution configurations. T o di spla y the page , cli ck Routing > RIP > Route Redistributi on Summ ary in the tree view . Figure 9-32. RIP Route Redistribution Summary The RIP Route Redistribution Summary page c[...]

518 Confi gur ing Rout ing Displ aying R IP Route Redist ribution Summa ry usin g the CL I Command F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Refer ence Guide: • Routing Informat ion Prot ocol (RIP) Commands Router Di scovery The Router Discovery p rotocol is used by host [...]

Conf iguring Ro uting 519 Figure 9-33. Rou ter Discove ry Configu ration The Router Discovery Configuration page cont ains the following fields: • VLAN Interfa ce — Select the router interfac e for which data is to be configured. • Advertise Mode — Select Enable or Disable from the drop -down menu. If you select En able, Ro uter Advertiseme[...]

520 Confi gur ing Rout ing Confi guring Route r Discov ery 1. Open the Router Discovery Configuration page. 2. Select the router in terface to be configured. 3. Configure data as n eeded for the remainin g fields. 4. Click Apply Cha nges Specified configu ration cha nges are sa ve d, and the de vice is upd ated. Confi guring Route r Discov ery usi [...]

Conf iguring Ro uting 521 The Router Discovery Status page displays the following fields: • Inte rface — The router inter face for whi ch data i s displa yed. • Advertise Mode — The values are Enable or Disable. En able deno tes that Router D iscovery is enabled on that interfa ce. • Advertise Address — The IP Add r ess used to advertis[...]

522 Confi gur ing Rout ing Rout e T abl e Use the Router Route T able page to di splay the route tab le config uration. T o di spla y the page , cli ck Routing > Router > Route T able in the t ree view . Figur e 9-35 . Router Route T able The Router R oute T able page displays the following fields: • T otal Number of Routes — T he total n[...]

Conf iguring Ro uting 523 –O S P F T y p e - 1 –O S P F T y p e - 2 –R I P • Next Hop Interfa ce — T he outgoing rou ter interface t o use wh en forwa rding traffic to the destin ation. • Next Hop IP A ddress — The outgoing router IP address to us e when forw arding traffic to th e next router (if an y) in the p ath towards the destin[...]

524 Confi gur ing Rout ing The Ro u te r B e s t Rou t e s T a b l e p age displays the following fields: • T otal Number of Routes — The total number of routes in the route table. • Network Ad dress — The IP rou te prefix for the destina tion. • Subn et Mas k — Also referred to as the subnet/network ma sk, this indicates the portion of[...]

Conf iguring Ro uting 525 Route Entry Conf iguratio n Use the Router Route Entry Configuratio n page to add new and configur e router routes. T o di spla y the page , cli ck Routing > Router > Ro ute Ent ry Configuration in the tree view . Figur e 9-37. Route r Route En try Con figura tion The Router R oute Entry Configuration page contains t[...]

526 Confi gur ing Rout ing –O S P F T y p e - 1 –O S P F T y p e - 2 –R I P • Next Hop Interfa ce — T he outgoing rou ter interface t o use wh en forwa rding traffic to the destin ation. • Next Hop IP A ddress — The outgoing router IP address to us e when forw arding traffic to th e next router (if an y) in the p ath towards the desti[...]

Conf iguring Ro uting 527 Figure 9-39. Rout e Entry Co nfigura tion - Ad d Static Ro ute T ype 4. Click Apply Cha nges . The new route is added, and you a re r edirected to the Configured Routes page. Addi ng a Ro uter Route using the CLI Comma nd F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing cha[...]

528 Confi gur ing Rout ing Configur ed Routes Use the Confi gured R outes page to display the routes that have been configured. T o di spla y the page , cli ck Routing > Router > Configured Routes i n t he tree view . Figure 9- 40. Config ured Ro utes The Configured Ro utes page displays the following fields: • Network Ad dress — The IP r[...]

Conf iguring Ro uting 529 Addi ng a Ro uter Route 1. Open the Config ured Rout es page. 2. Click Add . The Router R ou te Entry Configuration page displ ays, as F igure 9-38 shows. 3. Ne xt to Rou te T yp e, use the drop-down box t o add a Def ault route or a Static route. Default — Enter th e defaul t gateway addre ss in the Next Hop IP Address [...]

530 Confi gur ing Rout ing Y ou can select Static Reject as a route type from the Rout e T ype field on t he following pages under the Ro u ti n g > Ro u te r menu: • Rout e Entry C onfigura tion • Con figured R outes NOTE: For a sta tic re ject rout e, the next hop i nterf ace valu e is Null 0. Pa ckets to the netw ork addr ess speci fied i[...]

Conf iguring Ro uting 531 Conf igurin g Rout e Pref eren ces usi ng CLI Comma nd F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Refer ence Guide: • OSPF Comma nds VLAN Routing Y o u can configure P owerCon nect M 6220/M634 8/M8024 softwa re with so me VLANs that suppor t routi[...]

532 Confi gur ing Rout ing VLAN Routi ng Configur ation Use the VLAN R outing Co nfiguration page to enable routing on VLAN interfaces and t o add VLAN routing interfaces. T o di spla y the page , cli ck Routing > VLAN R outing > Config uration in the tree view . Figur e 9-42. VLAN Rou ting C onfig uratio n The VLAN Routi ng Co nfig urat ion [...]

Conf iguring Ro uting 533 VLAN Routi ng Summary Use the VLAN Routing Summary page to display t he VLAN routing summary . T o di spla y the page , cli ck Routing > VLAN Routing > Summary in the tree view . Figure 9-44. VLAN Routing Summary The VLAN Routing Summary page displays the following fields : • VLAN ID — The ID of the VLAN whose da[...]

534 Confi gur ing Rout ing VRRP The Virtual Router Redundancy (VRRP) protocol is designed to handle default router fail ures by providing a scheme to dynamically elect a backup router . The driving force was to minimize “black hole” periods due to the failure of the default gateway router during which all traffic directed towards it is lost unt[...]

Conf iguring Ro uting 535 VRRP Ro uter Config uration Use the VRRP Configuration page to enabl e or disable the administrative status of a virtual router . T o di spla y the page , cli ck Routing > VRRP > Router Configuration in the tree view . Figure 9-45. VRRP Router Configu ration The V irtual Ro uter Configuration page contains the follow[...]

536 Confi gur ing Rout ing • Advertisement Interval — Ent er the time, in seconds, bet ween the transmission of advertisement packets by this virtua l router . En ter a numb er between 1 and 255. T he defau lt value is 1 second. • Inte rface IP Addres s — Indicates the IP Address as sociated w ith the selected interface. • IP Addr ess —[...]

Conf iguring Ro uting 537 Figure 9- 46. Virtual Rou ter Se condary Address 3. In the Secondary Address fie ld, s elect Create to add a new second ary IP addr ess, or se lect an e xisting seco ndary IP ad dres s to modify . 4. In the IP Add ress field, en ter the secondary IP address. 5. Click Apply Cha nges . Configuring VRRP Interface T racking 1.[...]

538 Confi gur ing Rout ing Figure 9-48. Add VRRP I nterf ace T racking 4. Complete the fi elds a s necess ary . The Add VRRP Int erface T racki ng page contai ns the fol lowing f ields. • Inte rface — The interface associated wit h the V irtual Router ID. • Vi r t u a l R o u t e r I D — The V irtua l Router I D. • T rack I nterface — S[...]

Conf iguring Ro uting 539 Figure 9-50. Add VRRP R oute T rac king 4. Complete the fi elds a s necess ary . The Add VRRP Route T rack in g pag e contains the followin g fields. • Inte rface — The interface associated wit h the V irtual Router ID. • Vi r t u a l R o u t e r I D — The V irtua l Router I D. • Tr a c k R o u t e p f x — Ent [...]

540 Confi gur ing Rout ing VRRP V irtual Router Sta tus Use the Virtual Router Status page to displa y vi rt ual router status. T o di spla y the page , cli ck Routing > VRRP > V irtual Router Status in the tr ee vi ew . Figure 9-51. Virtual Router Sta tus The V irtual Router Status page displays the following fields: • VRID — Virtua l Ro[...]

Conf iguring Ro uting 541 • Interface IP Add ress — T he actual IP Address associated with th e interface used by the Virtual Router . • Owner — Set to T rue if the Virtual IP Address and the Interface IP Address ar e the sam e, otherwise set to False. If this param ete r is se t to T rue , the Virtua l Rou ter is the owner of the Virtual I[...]

542 Confi gur ing Rout ing VRRP V irtual Router Sta tistics Use the V irtual Router Statistics page to disp lay statistics for a specified virtual router . T o di spla y the page , cli ck Routing > VRRP > V irtual Ro uter Statistics in the tree view . Figure 9-52. Virtual Router Sta tistics The V irtual Router Statistics page contains the fie[...]

Conf iguring Ro uting 543 • Up T ime — T he time , in da ys, hours , minu tes and s econ d s, that has elapsed since the virtual rou ter trans itioned to th e initialized state. • State T ransitioned to Master — The total num ber of time s that th is virtual rou ter 's state has trans itioned to Mast er . • Advertisement Recei ved ?[...]

544 Confi gur ing Rout ing T unnels The P owerConnect M 6220/M6348/ M8024 switches support the creation, deletion, and management of tunnel interfaces. These are dynamic interfaces that are created and deleted through user-configura tion. Each switch also supports t he functionality of a 6to4 b order router that connects a 6to4 s ite to a 6to4 doma[...]

Conf iguring Ro uting 545 T unnels Config uration Use the T unnels Configurat ion page to create, configure, or delete a tunnel. T o di spla y the page , cli ck Routing > T unnels > Configuratio n i n the tree view . Figure 9-53. T un nels Configura tion The T unnels Configuration page contains the following fields: • T unnel — Use the dr[...]

546 Confi gur ing Rout ing • IPv6 A ddress —Select a n IPv6 address for the selected T unnel interface. Add is also a valid choice if the maximum n umber of ad dress es has not been configured. • IPv6 A ddress — When Add is chosen from the IPv6 Addr e ss drop-down menu , this IPv6 addr ess input field becomes vis ible. The Add ress must be [...]

Conf iguring Ro uting 547 Figure 9- 54. T unne ls Confi gurati on - Entry 5. Configure the fields as needed. 6. Enter d esired values in the remainin g fields. 7. Click Apply Cha nges . The new tun nel is save d, and the de vice is upd ated. Modify ing an Exis ting T unnel 1. Open the T unnels Con figuration page. 2. Specify the t unnel t o mod ify[...]

548 Confi gur ing Rout ing Remov ing a T unnel 1. Open the T unnels Con figuration page. 2. Specify the tu nnel to remove in the T unnel drop-dow n menu. 3. Click Delete T unnel . The tunn el is dele ted, and the device i s updated . Confi guring a T unnel using C LI Comm ands F or inf orm at ion abou t th e CLI com man d th at per for ms thi s fun[...]

Conf iguring Ro uting 549 • IPv6 A ddress — T he IPv6 Address(es) of the T u nnel. IPv6 Address S tate — Sho ws wh ether the a ddre ss is active . Displ aying T unnels Summar y using the CLI Command F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Refer ence Guide: • T unn[...]

550 Confi gur ing Rout ing Loopbacks Con figuration Use the Loopback s Co nfig urat ion page to create, configur e, or remove loopback interfaces. Y ou can also set up or del ete a secondary addr ess for a loo pback. T o di spla y the page , cli ck Routing > L oopbacks > Configuration in the tree view . Figure 9- 56. Lo opbac k Config uratio [...]

Conf iguring Ro uting 551 • IPv6 A ddress — Select list of configur ed IPv6 addr esses for the selected Loopback interface. Add is also a valid choice if the ma ximum num ber of addresses has not been configured. This option only displays w hen th e Protocol specified is IPv6. • IPv6 A ddress — W hen Add is chosen from t he IPv6 A ddress se[...]

552 Confi gur ing Rout ing Figur e 9-57. Loopbac ks Con figura tion - IPv4 Entr y 5. Enter IPv4 in the P r otocol field. 6. Enter d esired values in the remainin g fields. 7. Click Sub mit . The new loopb ack is saved, and the webpa ge reapp ears showing secon dary addr ess conf iguration f ields.[...]

Conf iguring Ro uting 553 Figur e 9-58. Loopbac k Con figurat ion - Add Seconda ry Ad dress 8. Complete th e Secon dary A ddress , Secon dar y IP A ddres s , and Secondary Su bnet Mask fields. 9. Click the Add Seconda ry button. The secondary add ress is saved, and the webpage reap pears showing the pr imary and sec ondary loopb ack addre sses. Cre[...]

554 Confi gur ing Rout ing Figur e 9-59. Loopbac ks Con figura tion - IPv6 Entr y 5. Choose IPv6 from the drop-down box in the P rotocol field. 6. Add the IPv6 A ddress . 7. Enter d esired values in the remainin g fields. 8. Click Sub mit . The ne w loopbac k is s aved, a nd the device is upda ted. Confi guring an Exist ing Loop back 1. Open the Lo[...]

Conf iguring Ro uting 555 Remov ing a L oopback 1. Open the Loopback Configuration pag e. 2. Specify the l oopback to remove in the Loopba ck drop-dow n menu. 3. Click Delete Loopback . The loopb ack is delete d, and the de vice is updat ed. Remov ing a Se condar y Addre ss 1. Open the Loopback Configuration pag e. 2. Specify the l oopback to be af[...]

556 Confi gur ing Rout ing Loopbacks Summar y Use the L oopbacks Summary page t o display a s ummary of configur ed loo pbacks. T o di spla y the page , cli ck Routing > L oopba cks > Summa ry in the t ree view . Figure 9- 60. Lo opbacks Summary The Lo opbacks Summary page displ ays the following fields: • Loopback Interface — The ID of t[...]

Confi gurin g IPv6 557 10 Configuring IPv6 Overv iew IPv6 is the ne xt generation of the Internet P rotocol. W ith 128-bit address es, versus 32-bit addr esses for IPv4, IPv6 solves the address depletion issues s een with IPv4 and removes the r e quirement for Network Address T ranslation (NA T), which is used in IPv4 netwo rks to reduce the number[...]

558 Confi gurin g IPv6 Global Configuration Use the G loba l Co nfig urat ion page to enable IPv6 f orwarding on the router , enable the forwarding of IPv6 unicas t datagrams, a nd configur e global IPv6 settings. T o di spla y the page , cli ck IPv6 > Global Con figuration in the tree view . Figure 10-1. IPv6 Glo bal Config uration The IPv6 Glo[...]

Confi gurin g IPv6 559 Configuring IPv6 using the CLI Comma nds F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • IPV6 Rout ing Commands Interface Configuration Use the I nterf ace Co nfig urat ion page to configure IPv6 interface parameters. This page has be[...]

560 Confi gurin g IPv6 The IPv6 Inter face Configur ation page contains the following fields: • Inte rface — Selects the interface to be configured. When the selection is changed, a screen refr esh occurs, causin g all fields to be updat ed for the n ewl y s elected interface . Shows only rout ing-enabled interfaces and tunnels. • IPv6 Mo de [...]

Confi gurin g IPv6 561 • IPv6 Routing Ope rat iona l Mode — Displa ys the operational stat e of an interface. • Interface Ma ximum T ran smit Unit — Specifies t he maxim um tran smit unit on an inte rface. If the value is 0 then this interface is not enable d for routing . It is no t valid to set this valu e to 0 if routing is enabl ed. The[...]

562 Confi gurin g IPv6 Interface Summary Use the Interface Summar y page to display s ettings for all IPv6 int erfaces. T o di spla y the page , cli ck IPv6 > Interf ace Summary in the tree view . Figure 10-3. IPv6 Int erface Summary The IPv 6 Int erface Summ ary page contains the following fields: Interf ace — Specifies the interface whose se[...]

Confi gurin g IPv6 563 IPv6 Statistics Use the IPv6 St ati sti cs page to displa y IPv6 traffic s tatis tics for one or all int erfac es. T o di spla y the page , cli ck IPv6 > IPv6 Statistics in the tree view . Figure 10-4. IPv6 Sta tistics The IPv6 Statistics page contains the following fields: • Inte rface — Se lects the inte rface for wh[...]

564 Confi gurin g IPv6 • Received Datagrams Discarded Due T o MTU — The number of inpu t datagrams t hat could n ot be forwarded because their size exceed ed t he link MT U of outgoing interface. • Received Datagrams Discarded Due T o No Route — T he nu mbe r of inp ut da tagra ms discarded because no route could b e found to tra nsmit the [...]

Confi gurin g IPv6 565 • Datagr ams T ransmit F a iled — The number of datagrams wh ich thi s entity fai led to transmi t successful ly . • Datagrams Successfully F ragmented — The number of I Pv6 datagr ams that have been successf ully fragm ented at this ou tput int erface. • Datagr ams F ail ed T o F rag ment — The number of output d[...]

566 Confi gurin g IPv6 • ICMPv6 Neighbor Advertisement Messages R eceived — The n umber of ICMP Neighbor Advertiseme nt messages received by the in terface. • ICMP v6 R edir ect Mes sag es Re ceive d — T he number of ICMPv6 Redirect messaged received by the interfac e. • ICMPv6 Group M embership Query M essages Received — The number of [...]

Confi gurin g IPv6 567 • ICMPv6 Neighbor Advertisement Messages T ransmit ted — The n umber of ICMP Neighbor Advertisement messages sent by the inter face. • ICMP v6 R edir ect Mes sage s T ransm itted — The number of Redir ect messages sent. • ICMP v6 Gr oup Me mber ship Query Messages T ra nsmitted — T he number of ICMPv 6 Group Membe[...]

568 Confi gurin g IPv6 IPv6 Neighbor T able Use the IPv6 Neighb or T able page to dis play IPv6 neighbor de tails for a spe cified interface. T o di spla y the page , cli ck IPv6 > IPv6 Neighbo r T able in the tree vi ew . Figure 10-5. IPv 6 Neighbor T a ble The IPv6 N eig hbor T able page contains the following fields: • Inte rface — Se lec[...]

Confi gurin g IPv6 569 – Rea ch ab le — P ositive conf irmation was r eceived w ithin the last Reachable T ime millisecon ds that the forward path to the ne ighbor was functioning p roperly . While in R EACH state, the dev ice takes no special action as packets ar e sent . – Stale — More than ReachableTime milliseconds have elapsed since th[...]

570 Confi gurin g IPv6 The DHCPv6 menu page contains links to web pages that define and displa y DHCPv 6 parameters and data. T o disp lay this page, click IPv6 > DHCPv6 in the tree view . F ollowing are the web pages accessible from this menu page: • DHCPv 6 Global Co nfiguration • DHCPv 6 P ool Configuration • P refix Delega tion Configu[...]

Confi gurin g IPv6 571 The DHCPv6 Global Co nfiguration page contains the following fields: • DHCPv6 Admin Mode — Specifies DH CPv6 operati on on th e switch . P o ssible values are Enable and Disable; the defau lt valu e is Disable. • Rel ay O pti o n — Sp ecifies Relay Agen t Informa tion Option value. T he values allowed are between 32 t[...]

572 Confi gurin g IPv6 DHCPv6 Pool Conf iguration DHCP for IPv6 clients ar e co nnected to a server which is configured to use p arameters from a pool that you set up. The pool is i dentified with a pool name, and contains IPv6 addresses and domain na mes of DNS serv ers. Use the Pool Configur ation page to creat e a pool and/or configure po ol par[...]

Confi gurin g IPv6 573 Figure 10-8. Pool C onfiguratio n - Display The P ool Conf igurati on page contains the following fields: • P ool Name — Drop-d own menu that li sts all th e pool names conf igur ed. When Create is selected, fields on the page a r e cleared of data, i n preparation for new pool in formation. • P ool Name — Display s t[...]

574 Confi gurin g IPv6 • Domain Name — Di splays th e selected DNS d omain n ame from the previous field. Enter a new DNS domain name he re when Add is selected in th e p revious field. A ma ximum of 2 55 alpha numeric characters can be entere d. Click Delete to remove a domain n ame from this pool. The name is deleted when Apply Changes is cli[...]

Confi gurin g IPv6 575 Configuring DHCPv6 Pool Parameters using the CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • DHCPv6 C ommands Prefix Del egation Config uration Use the Pref ix Delegation Conf iguration page to configure a delegated prefi[...]

576 Confi gurin g IPv6 • DUID - Displa ys selec ted DUID value or allows entr y of new one. • Va l i d L i f e t i m e — Specifie s the valid lifet ime in seconds for d elegated prefix. • P refer Lifetime — Specifies the prefer lifetime in seconds for de legated prefix. • Delete — Deletes t he displa yed pool pr efix de legati on conf[...]

Confi gurin g IPv6 577 DHCPv6 Pool Summar y Use the P ool Sum mary page to display se ttings for all DHCPv6 P ools. At least one pool must be cr eated using DHCPv6 P ool Configuration before the P ool Summary displays. T o di spla y the page , cli ck IPv6 > DH CPv6 > P ool Summary in th e tr ee vi ew . Figure 10-10 . Pool Summary The P ool Su[...]

578 Confi gurin g IPv6 Displaying the Pool Summary using the CLI Command F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • DHCPv6 C ommands DHCPv6 In terface Config uration Use the DHCPv6 Interface Config uration page to config ure a DHCPv6 interface. T o di [...]

Confi gurin g IPv6 579 Delete — Ch eck this b ox and clic k Apply C hang es to delete this conf iguration . This field disp lays when the Interf ace Mode is Serve r or Relay . Rel ay I nt e rf ac e — Se lect s the in terface to reach a relay serv er . Th is fiel d displa ys wh en the I nterf ace Mo de is Re lay . Destination IP Address — S el[...]

580 Confi gurin g IPv6 Configuring a DHCPv6 Interface Using the CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • DHCPv6 C ommands Configuring a DHCPv6 Interface for Server Interface Mode 1. Open the DHCPv6 Interface Con figuration page. 2. Speci[...]

Confi gurin g IPv6 581 Configuring a DHCPv6 Interface for Server Interface Mode Using the CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • DHCPv6 C ommands DHCPv6 Server Bindings Summary Use the Ser ver B indings Summary page to d ispla y all DH[...]

582 Confi gurin g IPv6 • P refer Lifetime — Specifies t he preferr ed li fetime v alue in secon ds of the prefix associat ed with a binding. Displaying Server Bindings using the CLI Command F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • DHCPv6 C ommand[...]

Confi gurin g IPv6 583 The DHCPv6 Statist ics page displays the following fields: • Inte rface — Select th e interface for which data is to be d isplayed or configured. On selecting All , data is shown for all interfa ces. Message s Rece ived This section sp ecifies the agg regate of all i nterface leve l statistics for r eceived message s: •[...]

584 Confi gurin g IPv6 Displaying DHCPv6 Sta tistics using the CLI Command F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • DHCPv6 C ommands OSPFv3 OSPFv3 is the Open Short est P ath F irst routing protoc ol for IPv6. It is similar to OSPFv2 in its concept o[...]

Confi gurin g IPv6 585 OSPFv3 Co nfiguration Use the O SPF v3 Co nfig ur ation page to activate and configur e OSPFv3 for a switch. T o di spla y the page , cli ck IPv6 > O SPFv3 > C onfig uratio n in the tree view . Figure 10-16 . OSPF v3 Configu ration The OSPFv3 Con figuration page contains the following fields: • Rou te r I D — T he 3[...]

586 Confi gurin g IPv6 • ASBR M ode — Reflects w hether the A SBR mode is en abled or disabled. E nable im plies that the router is an autonom ous system border router . Ro uter automatica lly becomes an ASBR when it is configured to r edistribute routes learned from other protocol. • ABR St atus — The va lues of this are Enable or D isable[...]

Confi gurin g IPv6 587 • Default Rou te Advertise: Use this se ction to configu re the parameters for Defaul t Route Advertiseme nts into OS PF domain. • Default Information Originate — Enable or disable Defaul t Route Advertise. NOTE: The va lues for Alway s, Me tric, and Met ric T ype ca n only be confi gured afte r Def ault I nforma tion O[...]

588 Confi gurin g IPv6 OSPFv3 Ar ea Configura tion Use the OSPFv3 Area Config uration page to cr eate and configure an OS PFv3 area. T o di spla y the page , cli ck IPv6 > OSPFv3 > Area Configuration in the tree view . Figure 10-17 . OSPF v3 Area Confi guration The OSPFv3 Are a Configuratio n page contains the following fields: • Area ID ?[...]

Confi gurin g IPv6 589 • Area LSA Checksum — T he 32- bit u nsign ed sum of the lin k-state adve rtise men ts' LS chec ksum s contai ned in this ar ea's lin k-state da tabase. Th is sum e xclude s ext ernal (LS ty pe 5) link -state advertisements. Th e sum can be used to determine if t here has been a change in a router's link st[...]

590 Confi gurin g IPv6 Figure 10-19 . OSPF v3 Stub Area Conf igurati on 5. Complete the r emaining fields . 6. Click Apply Cha nges . The Stub Area in format ion is save d and the dev ice is updat ed. Configuring OSPFv3 NSSA Area 1. Open the OSPFv3 Area Configuration page. 2. Modify the field s as needed. 3. Click Apply Cha nges . The web page reap[...]

Confi gurin g IPv6 591 Figure 10-20 . OSPF v3 Area Config uration - NSSA 5. Complete the r emaining fields . 6. Click Apply Cha nges . The NSS A informat ion is saved a nd the d evice is upd ated. Deleting OSPFv3 Stub Area Information 1. Open the OSPFv3 Area Configuration page with configured Stub Area information. 2. Click Delete Stub Area . 3. Cl[...]

592 Confi gurin g IPv6 OSPFv3 Stub Ar ea Summary Use the OSP Fv3 Stub Ar ea Summary page to dis play OSPFv3 stub ar ea detail. T o di spla y the page , cli ck IPv6 > OSP Fv3 > Stub Area Summary in the t ree view . Figure 10-21. OSPFv3 Stu b Area Summary The OSPFv3 Stub Area Summary page displays the following fie lds: • Area ID — The Area[...]

Confi gurin g IPv6 593 OSPFv3 Area Rang e Configuratio n Use the OSP Fv3 Area Range Co nfiguration page to configur e OSPFv 3 ar ea ranges. T o di spla y the page , cli ck IPv6 > O SPFv3 > A rea Ra nge Co nfigu ratio n in the tree view . Figure 10-22 . OS PFv3 Area Rang e Config uration The OSPFv3 Area Range Configuration page con tains the f[...]

594 Confi gurin g IPv6 • Create New Area Range — Click this check box to create a new O SPFv3 area range using the va lues you specified. • Area ID — The OS PFv3 area. • IPv6 P ref ix — The IPv 6 P refix of an address range for the area. • LSDB T ype — The Lin k Advertisement type f or the address range and area. • Advertisement ?[...]

Confi gurin g IPv6 595 OSPFv3 I nterface Con figuration Use the OSPFv3 Interf ace Configurat ion page to create and configure OSPFv3 int erfaces . This page ha s been updated to include the P assive Mode field. T o di spla y the page , cli ck IPv6 > OSP Fv3 > Interface Configuration in the t ree view . Figure 10-23 . OSPF v3 Interface C onfig[...]

596 Confi gurin g IPv6 • Rou te r Pr ior i ty — Ente r the OSPFv3 priority for the selected interface. Th e priority of an in terface is specified as an int eger from 0 to 255. The default is 1, which is the high est router priority . A value of 0 indicates that the router is no t eligible to become t he designated router on this network. • R[...]

Confi gurin g IPv6 597 – W aiting — The rou ter is trying to d etermine the identity of the (Backu p) Designated R outer for the n etwo rk by m oni toring received Hello P ackets . The router is n ot allowed to e lect a Backup Designated Ro uter or a Designated R outer until i t transitions out of W aiting state. T his prevents unneces sary cha[...]

598 Confi gurin g IPv6 OSPFv3 I nterface St atistics Use the OSP Fv3 Inte rface Stati stics page to di splay OS PFv3 in terface statistics. Information is only displayed if OSPF is enabl ed. Several fields have been added to this page. T o di spla y the page , cli ck IPv6 > OSP Fv3 > Interface Statistics in the tree vie w . Figure 10-24 . OSP[...]

Confi gurin g IPv6 599 • Vi r t u a l E v e n t s — The n umber of state chan ges or errors th a t have oc curred on th is virtu al link. • Neighbor Events — The number of t imes this neighbor r elation ship has cha nged state , or an error has occurred . • Extern al LSA Cou nt — Th e nu mber of extern al (L S type 5) link- state advert[...]

600 Confi gurin g IPv6 • LS Acknowledgements Sent — The n umber of LS ac knowledgemen ts sent on this interface by this router . • LS Acknowledgements Recei ved — T he number of LS a cknowledgemen ts received on this interface by t his r outer . Displaying OSPFv3 Interface Statistics 1. Open the OSPFv 3 Inter face S tatis tics page. 2. Sele[...]

Confi gurin g IPv6 601 Figure 10-25 . OSPF v3 Neighbors The OSPFv3 Ne ighbor s page contains the following fields: • Inte rface — Se lects the int erface for which d ata is to be displaye d or con figured. • Neighbor Rout er ID — Selects the IP Address of the neighbor for which data is to be displayed. • Area ID — A 32 -bit integer in d[...]

602 Confi gurin g IPv6 • Stat e — The state of a neighbor can be t he following: – Down — This is the ini tial state of a neighbor con versation. It indicates t hat there is no recent inform ation received from the n eighbor . On NBM A networks, Hello packet s may still be sent to Down nei ghbors, although at a red uced fr equency . – Att[...]

Confi gurin g IPv6 603 Displaying OSPFv3 Neighbors using the CLI Command F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • OSPFv3 Commands OSPFv3 Nei ghbor T able Use the OSP Fv3 Neig hbor T able page to display the OSPF neighbor table list. When a particular[...]

604 Confi gurin g IPv6 The OSPFv3 Ne ighbor T able page displays the following f ields: • Inte rface — Se lects the int erface for which d ata is to be displaye d or con figured. • Neighbor Router ID — A 32-bit in teger in dotted d ecimal form at repr esen ting the neigh bor interface. • Pr i o r i t y — T he priority of this neigh bor [...]

Confi gurin g IPv6 605 OSPFv3 L ink State Database Use the OSP Fv3 Link Sta te Databas e page t o display the li nk state and e xternal LSA databases. The OSPFv 3 Link Stat e Data base page has been updated to display e xternal LSDB table information in add itio n to O SPF v3 li nk s tat e info rm ati on. T o di spla y the page , cli ck IPv6 > O[...]

606 Confi gurin g IPv6 • Age — The time since the link sta te advertisement w as first originated, in seconds. • Sequ enc e — The s equence num ber field is a signed 3 2-bit integer . It is used to detect old an d duplicate link state ad vertisements. The larger the sequence nu mber , the more recent the advertisement. • Checksum — The [...]

Confi gurin g IPv6 607 OSPFv3 V irtual Link Configurat ion Use the OSP Fv3 V irt ual Link C onfiguration page to define a new or config ure an existing virtual link. T o display this page, a valid OSPFv3 area must be defined through the OSPFv3 Area Configuration page. T o di spla y the page , cli ck IPv6 > O SPFv3 > V irtual Link Confi gurati[...]

608 Confi gurin g IPv6 • Dead Inter val (secs) — Enter the O SPF dead int erval for th e specified interfa ce in second s. This specifies how lon g a router wa its to se e a neighbor rou ter's Hello pa ckets before declaring t hat the router is down . This p arameter m ust be the sam e for all rou ters attached t o a network . This value s[...]

Confi gurin g IPv6 609 Creati ng a New Virtual Link 1. Open the OSPFv3 V irtual Link Configuration page. 2. Select Create New V irtual Link from the drop-down menu to define a new virtu al link. 3. Enter th e Neighbor Router ID . 4. Click Cre ate . The new link is created, and you are returned to the Virtual Link Co nfiguration page. Confi gurin g [...]

610 Confi gurin g IPv6 OSPFv3 V i rtual Link Su mmary Use the OSP Fv3 V i rtual Link Summary page to disp lay virtual link data b y Area ID and Neigh bor Router ID. T o di spla y the page , cli ck IPv6 > O SPFv3 > V irtual Link S ummary in the tree view . Figure 10-29 . OSPF v3 Virtual Link Summary The OSPFv3 V irtual Link Summary page displa[...]

Confi gurin g IPv6 611 • Dead Inter val (secs) — The OS PF dead in terval for the virtual link in u nits of secon ds. This sp ecifies how lo ng a router waits to see a nei ghbor router 's Hello packets before declaring t hat the rou ter is down. This pa rameter mu st be the same for a ll rout ers attached t o a common network , and shoul d[...]

612 Confi gurin g IPv6 The OSPFv3 Route R edistribution Configuration page contains the following fields: • Source P rotocol — Select the type of source routes to configur e for r edistri bution by OSPF . V alid values are Static and Con nected. • Metric — S e ts th e m e tr ic v al ue to b e us ed a s t he m et ri c o f red is tr ib u te d[...]

Confi gurin g IPv6 613 Confi guring OSPFv3 Rout e Redist ributio n using the CLI Command F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • OSPFv3 Commands OSPFv3 Ro ute Redistr ibution Summar y Use the O SP Fv 3 Rou te Re dis tri bu ti on S um mar y page to d[...]

614 Confi gurin g IPv6 IPv6 Routes The IPv6 Rou tes menu page contains links to web pages that define and disp lay IPv6 Routes parameters and data. T o display this pa ge, click IPv6 > IPv6 Rout es in th e tree view . F ollowi ng are the web pages accessible from this menu page: • IPv6 Rout e Entry Confi guration •I P v 6 R o u t e T a b l e[...]

Confi gurin g IPv6 615 The IPv6 Route Entry Configuration page contains the following fields: • IPv6 Network P refix/P refixLengt h — Enter a valid IPv 6 Network Add ress a nd Prefix. • Next Ho p IPv6 Addres s — E nter an IPv 6 Next Hop Address. If the Next Hop IPv6 Address specified is a Link- local IPv6 Addr ess, specify the Interface f o[...]

616 Confi gurin g IPv6 IPv6 R out e T able Use the IPv6 Route T able page to di splay al l active IPv6 r outes and thei r setti ngs. T o di spla y the page , cli ck IPv6 > IPv6 R outes > IPv6 Route T able in the tree view . Figure 10-34 . IPv6 Ro ute T abl e The IPv6 Route T abl e page displays the following f ields: • Rou te s D is pl ay e[...]

Confi gurin g IPv6 617 Displaying the IPv6 Route T a ble 1. Open the IPv6 Route T able pag e. 2. Select th e type of rout es to displ ay from the Rou te s D is pl a ye d field. The selected routes display . Displ aying t he IPv6 Route T able using th e CLI C ommand F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see t[...]

618 Confi gurin g IPv6 Figure 10- 35. IPv6 Rout e Prefe rences The IPv6 Route P references page contains the fields shown below . In each case, the lowest values indicate the highes t prefer ence. • Loc al — This field dis plays the lo cal route p r eference value. • Stat ic — The static route prefer ence valu e in the router . The defau lt[...]

Confi gurin g IPv6 619 Configuring IPv6 Route Preferences using the CLI Command F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide : • IPv6 Routing Command s Configur ed IPv6 Routes Use the Configured IPv6 Routes page to display select ed IPv6 routes. T o di spla [...]

620 Confi gurin g IPv6 • Delete — Click th is box and the Re fr esh button to delete t he displaye d route. Whe n the Best Ro utes or All Rout es op tion s ar e sele ct, t he fol lowin g fi elds a ppear : • Number of Routes — Displays the number of Best Rou tes or All Routes. • IPv6 Prefix/Prefix L e ngth — Displa ys the Net work Pr efi[...]

Confi guring Qual ity of S ervice 621 11 Configuring Quality of Service Qualit y of Service Ove rview This sectio n gives an overview of Q uality of Servi ce (QoS) and exp lains the QoS feat ures availab le from the Qual ity of Service menu page —Differentia ted Services and Class of Service. In a t yp i c al s w i t ch , e ac h p hy s i c al p o[...]

622 Confi gurin g Qual ity of S ervic e Configuring Differ entiated Serv ices DiffSer v Overview The QoS feature contains Differ entiated Services (DiffS erv) supp ort that allows traffic t o be cla ssified into str e ams and give n certain QoS tr eatment in accordance with defined per -hop behaviors. Standard IP -based networks are designed to pro[...]

Confi guring Qual ity of S ervice 623 Diffse rv Configurati on Use the Diffserv Co nfiguration page to display Dif fServ General Status Group informat ion, which includes the current administrative mode setting as well as the current and maximum number of rows in each of the main DiffServ p rivate MIB tabl es. To d i s p l a y t h e page, c lic k Q[...]

624 Confi gurin g Qual ity of S ervic e Changing Diffserv Admin Mode 1. Open the Diffserv Configuration page. 2. Tu r n Diffserv Admin M ode on or off by selecting Enable or Disable from the drop-down menu. 3. Click Apply Cha nges . The Diffse rv Admin Mode is chan ged, and t he device is u pdated. Displa ying MIB T ables Using th e CLI Com mands F[...]

Confi guring Qual ity of S ervice 625 – All — All the va rious ma tch criteria defined for the clas s should be satisfied for a packet mat ch. All signifies the logical AND of all the match cr iteria. • P rotocol — Ind icates how to interpret Layer 3. T his field displays the type s of packets supported by DiffServ . The Layer 3 P rotocol o[...]

626 Confi gurin g Qual ity of S ervic e Class C riteria Use the Diffserv Class Crit eria page to define the crit eria to as sociat e with a Di ffServ c lass. As packets are r eceived, th ese DiffServ classes are used to prioritize packets. To d i s p l a y t h e page, c lick Quality of Service > Di fferentiated Services > Cl ass Criteria in t[...]

Confi guring Qual ity of S ervice 627 Match Attributes (IPv4) Use the following fields to match IPv 4 packets to a class. Click t he check box fo r each field to be used as a criterion for a cla ss, and enter da ta in the re lated field. Y ou can have multiple mat ch criteria in a class. The logic is a Boolean “logical-and” for this criteri a. [...]

628 Confi gurin g Qual ity of S ervic e • Source MAC Mask — Specifies the Source MAC address wildcard mask. Wild card masks determine wh ic h bi ts are us e d a nd w hi ch b it s a re i gn o red . A wi l d c ard m as k o f 0 0. 0 0. 00 .0 0 .0 0. 0 0 i nd ic a te s t h at no bit is importa nt. A wildcard of FF :FF :FF :F F :FF :FF ind icates th[...]

Confi guring Qual ity of S ervice 629 Match Attributes (IPv6) Use the following fields to match IPv6 packets to a class. F or oth er fields not listed here, se e the description in "Mat ch Attributes (IPv4)" on page 627. Click the check box for each field to be us ed as a criter ion for a cl ass, and enter data in the relate d fiel d. Y o[...]

630 Confi gurin g Qual ity of S ervic e Policy Conf iguration Use the Diff serv P olicy Confi gur ation page to associate a collection of classes with one or mo re policy sta teme nts. To d i s p l a y t h e page, c lic k Quality of Ser vice > Dif feren tiate d Se r vices > P olicy Co nfiguration in the tree view . Figure 11-6. Diffse rv Poli[...]

Confi guring Qual ity of S ervice 631 Use Add a Cl ass to a ssoc iate a cl ass wi th th is poli cy . U se Rem o ve a Cl as s to remo ve th e class from this policy . 4. Select the class to be affected from t he relevant drop-down menu. 5. Click Apply Cha nges . The mod ified policy is s aved, and the dev ice is updat ed. Rena ming a Polic y 1. Open[...]

632 Confi gurin g Qual ity of S ervic e Figure 11-8. Diffse rv Policy Summary Removing a Policy Configuration 1. Open the Diffserv P olicy Configuration page. 2. Select the p olicy nam e to be deleted from th e Po l i c y N a m e drop-down menu. 3. Check the Rem o ve check box. 4. Click Apply Cha nges . The associat ed policy con figuration is remo[...]

Confi guring Qual ity of S ervice 633 Policy Cl ass Definitio n Use the Diffserv P olicy Class Definition page to a ssociate a class to a policy , and to define attr ibutes for that policy -class instance. To d i s p l a y t h e page, click Quality of Ser vice > Differentiated Ser vices > P olicy Class Definition in the tree view . Figure 1 1[...]

634 Confi gurin g Qual ity of S ervic e – Po l i c i n g : All ows you to confi gure ho w policin g is perfor med, as wel l as configu re wha t happens to packets that ar e considered conforming an d non- conform ing. F or m ore information on the field s that di splay wh en Po l i c i n g is selected, see "P olicing T r affic Cond ition.&qu[...]

Confi guring Qual ity of S ervice 635 • IP DS CP — Sele cts the I P DSC P to m ark. Selec t from t he drop down menu or ent er directly in t he User V alue field. • IP P recedence — Selects th e specified IP Pr ecedence queue n umber to mark. Class of Ser vice — Selects the specified Cla ss of Service queue number to mark. Configuring Pac[...]

636 Confi gurin g Qual ity of S ervic e • Color Mode — Selects the t ype of color policing used. Choose Co lor Blind or Color Awar e from t he drop- down menu. • Conform Action Selector — Selects wha t happens to packets that are consider ed conform ing (below the police rate). O ptions are Send, Drop, Ma rk CoS, Mark IP DSCP , Mark IP Pr e[...]

Confi guring Qual ity of S ervice 637 Service Con figuration Use the Dif fserv Servic e C onfi gura tion page to activate a policy on a port. To d i s p l a y t h e page, c lic k Quality of Ser vice > Dif feren tiate d Se r vices > Ser vice Configurat ion in t he tree view . Figure 11 -13. Diffserv Service Configuration The Diff serv Se rvice[...]

638 Confi gurin g Qual ity of S ervic e Figure 11-14. Diffserv Service Summary Assigning a Policy to a Port Using the CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide: • QoS Comman ds Service Det ailed Statis tics Use the Diffser v Service Det ailed[...]

Confi guring Qual ity of S ervice 639 • Po l i c y N a m e — Display s the policy associated with the selected in terface. • Operationa l Status — D isplays w hether the p olicy is a ctive or not on this in terface. • Member Classes — Selects th e member class for which oct et stati stics ar e to displ ay . • Offered P ackets — D is[...]

640 Confi gurin g Qual ity of S ervic e Mapping T able Configurat ion Each port in the switch can be configur e d to trust one of the pa cket fields (802.1 p, IP P recedence, or IP DSCP), or to n ot trus t any pa cket ’s pri ority de signatio n (untrusted mode). If the port is set to a trusted mode, it uses a mapping t able appropri ate for the t[...]

Confi guring Qual ity of S ervice 641 Figure 11- 16. Mappi ng T abl e Config uratio n — CoS (8 02.1P) CoS (802.1P) T rust Mode The CoS (802.1P) Map ping T able Config uration page contains the following fields: • Inte rface — Sele cts the in terf ace t o whic h the clas s of se rvice con figuration is applied. Select a un it and port or LAG, [...]

642 Confi gurin g Qual ity of S ervic e Configuring CoS (802.1P) T rust Mode 1. Open the Mapping T able Configuration page. 2. Sele ct the unit and port or LAG to be affected, or select Global to ap ply th e set tings to all int erfaces . 3. Select a Tr u s t M o d e . 4. Select a Queue to associate with each Class of Service . 5. Click Apply Cha n[...]

Confi guring Qual ity of S ervice 643 Configuring the IP DSCP T able T o access the DSCP Queue Mapping T a ble , click Quality of Service > Class of Service > Mapp ing T able Configuratio n in the tree view , and then click the DSC P T a ble link. Figure 11- 17. DSCP Qu eue Ma pping T able[...]

644 Confi gurin g Qual ity of S ervic e The DSCP Queue Ma pping T able page contains the following fields: • DSCP In — Check t o select as a criterion, a nd enter which DiffServ Cod e P o int in the packet to use. This field determines to which queue the packet is sent. • Queue ID — Selects the queu e to which the packet is sent. Restoring [...]

Confi guring Qual ity of S ervice 645 The Inte rface C onfig uratio n page contains the following fields: • Inte rface — Selects the in terface to be affected b y the Inter face Sh apin g Rat e . Select Unit/P ort , or LAG to be affected from the drop-down menu. Select Global to specify al l interfaces . • Inte rface Shapi ng Rate — Se ts t[...]

646 Confi gurin g Qual ity of S ervic e Figur e 11-19. Inte rface Queue Co nfigu ration The Interface Qu eue Configuration page con tains the following fie lds: • Inte rface — Specifie s the Inte rface (Unit/P ort, LAG, or Globa l) that’s b eing config ured. • Queue ID — Selects the queu e to be configured from the drop-down m enu. • Mi[...]

Confi guring Qual ity of S ervice 647 Displaying Interface Queue Settings 1. Open the Interface Queue Configuration pag e. 2. Click Show All . The Interface Queue Status page displays. 3. Select Unit / P ort , LAG , or Glob al . Figur e 11-20. Inte rface Qu eue St atus Configuring an Interface Queue Using the CLI Commands F or inf orm at ion abou t[...]

648 Confi gurin g Qual ity of S ervic e Auto V oIP V oice over Internet Protocol (V oIP) allows you to make telephone calls us ing a computer net work over a data network lik e the Internet. W ith the incr eased prominence of del ay-sensitive applicat ions (voice, video , and other multimed ia applications) deploye d in ne tworks today , proper Q o[...]

Confi guring Qual ity of S ervice 649 The Auto V oI P Conf igur atio n page contains the following fields: • Au to V oI P M od e — E nables or Disables Auto V oIP m ode. Th e default is Disable. • T raffic Class —Di splays the tra ffic class used for V oIP tra ffic. Configuring Auto V oIP Using the CLI Commands F or inf orm at ion abou t th[...]

650 Confi gurin g Qual ity of S ervic e Viewing the Auto V oIP Summary T able 1. Open the Aut o V oIP Interfa ce Configurat ion pag e. 2. Click Show All . The Auto V oIP Su mmary pag e ope ns. Figure 11-23 . Auto V oIP Summary Configuring Auto V oIP Using the CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion[...]

Confi gurin g IP Mult ica st 651 12 Configuring IP Multicast Overv iew This chapter describes how to configure multicast featur es on the P owe rConnect M6220/M 6348/M802 4. Multicast protoco ls are used to deliver Multicast packets from one source to multi receivers. They facilitate better bandwidth utilization, less host and router processing, ma[...]

652 Config uring IP M ulticast Multicast The Multica st menu page co ntains links to we b pages that define and display Multi cas t parameters and data. T o dis play this page, click IP Mul ticast > Multi cast in the tree view . F ollowi ng are the web pages accessible from this menu page: • Mult icast Global Configuration • Multicas t Inter[...]

Confi gurin g IP Mult ica st 653 The Multicas t Global Configur ation page contains the following fields: • Admi n Mode — Sele ct Ena ble or Dis able to set th e admin istrativ e status of Mult icast F orw arding in the router . T he default is Disab le. • P rotocol State — The operat ional stat e of the mul ticast f orwar ding module . •[...]

654 Config uring IP M ulticast Configuring Multicast Forwarding Administrative Mode 1. Open the Multic ast Glob al Co nfigura tion page. 2. Select Ena ble or Disa ble for the Admi n Mode . 3. Click Apply Cha nges . The mult icast gl obal config uration is sav ed, and the dev ice is upda ted. Configuring/Displaying Multicast Forwarding Parameters us[...]

Confi gurin g IP Mult ica st 655 Multicas t Interface Conf igurati on Use the Multicast Int erface Configurat ion page t o configur e the T TL thr eshold of a mu lticast int erface. Y o u must configure at least one router inte rface before fields disp lay on this page. T o di spla y the page , cli ck IP Multicast > Multicas t > Interface Co [...]

656 Config uring IP M ulticast Configuring a Multicast Interface u sing the CLI Command F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Refer ence Guide: • Multic ast Commands Multicas t Mroute Summary Use the Multicast M route Summary page to displ ay MRou te data. T o di spla[...]

Confi gurin g IP Mult ica st 657 • Expiry T ime (secs) — The ti me in seconds b efore this entry ages out a nd is remove d from the t able. • RPF Neighbor — The IP addr ess of th e Revers e P ath F orward ing neighb or . • P rotocol — The mul ticast routing protocol which cr eated this entry . The possibilities are: – PIM-DM – PIM-S[...]

658 Config uring IP M ulticast Multicas t Static Routes Con figuration Use the Multicast Static R outes Configurat ion page to co nfigure a new static ent ry in the M route tabl e or to modify an e xisting entry . T o di spla y the page , cli ck IP Multicast > Multicas t > Static Rout es Configur ation in the tree view . Figur e 12-4. Multi c[...]

Confi gurin g IP Mult ica st 659 Configuring a Static Route 1. Open the Stat ic Rou tes page. 2. Select Create Sta tic Route in the Source field to configu re a new static e ntry , or select one of th e existing entries. 3. Modify th e remaining fields as needed. 4. Click Apply Cha nges . The new or mo dified stat ic route is sav ed, and t he devic[...]

660 Config uring IP M ulticast The Multicast Static Route s Summary page display s the following fields: • Sour ce IP — The IP A ddress that ident ifies the mu lticast p acket source for this route . • Sour ce Mas k — The subnet mas k applie d to the Source IP addr ess. • RPF Address — The IP addr ess of the RPF ne ighbor . • Metric ?[...]

Confi gurin g IP Mult ica st 661 The Mult ica st Admin Bo unda ry Conf igu ratio n page contain s the following fields: • Group — Se lect Create Bound ary from the drop-down menu to cr eate a new ad min scope bound ary , or select one of the existing boun dary specificat ions t o display or upd a te its con figuration. • Inte rface — Select[...]

662 Config uring IP M ulticast Multicas t Admin Boundary Summary Use the Multicast Ad min Bounda ry Summ ary page to di splay existi ng admini strat ively scop ed boundaries. T o di spla y the page , cli ck IP Multicast > Multicas t > Admin Bo undary Summary in the tree view . Figure 12-7. Multic ast Admin Bou ndary Summary The Multicast Admi[...]

Confi gurin g IP Mult ica st 663 Multicas t Route T able Use the Multicast R oute T able pa ge is used to display MRoute dat a. T o di spla y the page , cli ck IPv4 Multicast > Mult icast > Multicas t Ro ute T able or IPv6 Mu lticast > Multicas t > Multicas t Route T able . Figure 12- 8. Mu lticast Route T able The Multicas t Ro ute T a[...]

664 Config uring IP M ulticast Multicast Listen er Discovery Multicast Listene r Discovery (MLD) pro tocol enables IPv6 routers to discover the presence of multi cast listeners , the nodes who wi sh to receiv e the multicas t data packets, on it s directly-att ached int erfaces. The protocol specific ally discovers wh ich multicast addr esses are o[...]

Confi gurin g IP Mult ica st 665 The MLD Global Config uration p age contains the following field: • Admi n Mode — Select Ena ble or Disable to set t he MLD adm inistrative s tatus. The defau lt is disable. Click Apply Cha nges to send t he updated con figurat ion to the r outer . Conf igurati on changes take effect immediately . These changes [...]

666 Config uring IP M ulticast • Query Max Response T ime (secs) — Enter th e maximum query r espon se time to be ad verti sed in MLD v2 queries on this in terface, in ms. T he defau lt value is 100 00. V alid v alues a r e 0 to 65 535 milli seconds (ms). • Last Member Query Inter val — Enter the maximum re sponse time inserted i nto group-[...]

Confi gurin g IP Mult ica st 667 The MLD Rout ing Interface Sum mary page contains the following fields: • Inte rface — S elect the VL AN for wh ich data is to be d isplayed. Interfac e P a rameters s ection: • Global Admin Mod e — Displa ys whether MLD has been globally en abled or disabled. • Interf ace Mod e — Display s whether the a[...]

668 Config uring IP M ulticast • W rong V ersion Queries Received — T he number of queries that have been received on the selected interfac e with an M LD vers ion th at does not match the MLD version configured for the interface, over the lifetime of the entry . MLD r equires that all ro ut ers on a LAN be configur ed to run the same version o[...]

Confi gurin g IP Mult ica st 669 • Last Reporter — The IP Ad dress of the sour ce of the last mem bership r eport received for this IP Multicast group ad dress on the selected in terface. • Up T ime — The time elapsed in hour s:minutes:seconds since this entry w as created. • Expiry T ime — The ca che timer v alue which i ndicates the r[...]

670 Config uring IP M ulticast The MLD Rout ing Interface Source Li st Information page contains the following fields: • Multicast Gr oup IP — Sele ct the IP mult icast g roup addr ess fo r which data is to be displayed. On ly if group membersh ip reports have been received on the selected interface can you m ake this selection, and t he data o[...]

Confi gurin g IP Mult ica st 671 The MLD T raffic page contains the follow ing fields: • V alid MLD P ackets Received — T he total num ber of valid ML D packets r eceived by the router . • Va l i d M L D P a c k e t s S e n t — The t otal number of v alid MLD p ackets sent from the router • Querier Received — The to tal number of M LD p[...]

672 Config uring IP M ulticast The MLD P roxy Inte rface Configur ation page contains the following fields: • Inte rface — S elect the in terface for wh ich data is to be displaye d or config ured fr om the menu. Y ou must have configu red at least one router interface before configuring or d isp laying data for an MLD P roxy interfa ce and it [...]

Confi gurin g IP Mult ica st 673 MLD Proxy Confi guration Summary Use the M LD Proxy Configuration Summary page to view configuration and statistics on MLD proxy- enabled interfaces. T o display t his page, click IPv6 Multicast > MLD > P roxy Inte rface > Configur ation Summ ary in the naviga tion tree. Figure 12-16 . MLD Proxy Configu rat[...]

674 Config uring IP M ulticast • Ve r s i o n — The ve rsion of ML D configured on the M LD Proxy interface. • Unsolicited Report In terv al — The Unsol icited Repor t Interval in seconds is the time be tween repetitions of a h ost's initia l report of members hip in a g roup. • V ersion 1 Querier T imeout — The old er ML D version[...]

Confi gurin g IP Mult ica st 675 The Interf ace Membershi p Information pa ge contains the following fields: • Inte rface — D isplays th e interface on w hich M LD proxy is enabl ed. • Multicast G roup IP — Select the I P multicast group addr ess for which data is to be disp layed. I f no group membersh ip reports have been received on the [...]

676 Config uring IP M ulticast Interf ace Membership Info rmation—Detai led The Interf ace Membershi p Information —Detailed pa ge provides additional information on t he IP multicast group s for which the MLD proxy int erface ha s re ceived membership reports. T o display this page, c lic k IPv6 Mult icast > MLD > P roxy Interface > I[...]

Confi gurin g IP Mult ica st 677 Distance V ector Multicast Routing Protocol Distance V ector Multicast Routin g P rotocol ( D VMR P) exchanges pr obe packet s with al l its D VMR P enabled routers, it establi shes two way neighboring r elationships , and it builds a neig hbor table. It e xchanges r eport packets and creates a unicas t topology tab[...]

678 Config uring IP M ulticast DVMRP Global Conf iguration Use the DVMRP Glob al Configuratio n page to configure global DVMRP se ttings. T o di spla y the page , cli ck IP Multicast > DV M R P > Gl obal Conf igurat ion in the tree view . Figure 12- 19. DVMR P Global Configur atio n The DV MRP Global Config uration page contains the following[...]

Confi gurin g IP Mult ica st 679 Configuring DVMRP using the CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide: • D VMRP Commands DVMRP Interf ace Configurati on Us e the DVM R P Inte rfac e Conf igurat ion page to configure a D VMRP interface. Y ou [...]

680 Config uring IP M ulticast Configuring a DVMRP Interface 1. Open the D VMRP Interface Configuration pag e. 2. Sele ct the interfa ce to configu re fr om the Inte rface field. 3. Modify th e remaining fields as needed. 4. Click Apply Cha nges . The int erface confi gurati on is saved, and the devi ce is updat ed. Configuring a DVMRP Interface us[...]

Confi gurin g IP Mult ica st 681 Figure 12- 21. D VMRP Conf igurat ion Su mmary The DVMRP Co nfig ur atio n Summa ry page contains the following fields: • Inte rface — S elect the in terface for wh ich data is to be displayed . Y ou must configu re at le ast one router interface b efor e yo u can di splay data for a DVMRP inte rface. Interface [...]

682 Config uring IP M ulticast • Rec ei ve d B ad Rou tes — The n umber of inva lid routes received on the selected interface. • Sent Route s — T he number of r outes sent on the selected in terface. Neighbor P arameters • Neighbor IP — The IP a ddress of the neigh bor whose informa tion is display ed. • Stat e — The sta te of the s[...]

Confi gurin g IP Mult ica st 683 Next Hop Summary Use the Nex t Hop Summary page to display or p rint the ne xt hop summary by Source IP . T o di spla y the page , cli ck IP Multicast > DV M R P > Next H op Summary in the tree vie w . Figure 12-22 . Next Ho p Summary The Next Hop Sum mary page displays the following fields: • Sour ce I P ?[...]

684 Config uring IP M ulticast Prune Summa ry Use the Pr u n e S u m m a r y page to display or print the prune summary b y Group IP . T o di spla y the page , cli ck IP Multicast > DV M R P > Pr u n e S u m m a r y in the tree view . Figure 12-23 . Prune Summa ry The Pr u n e S u m m a r y page displays the following fields: • Group IP —[...]

Confi gurin g IP Mult ica st 685 Route Su mmary Use the Ro ute Su mm ary page to displ ay or prin t the DVMRP rout e summ ary . T o di spla y the page , cli ck IP Multicast > DV M R P > Ro ut e Su m m a r y in the tree view . Figure 12-24 . Rout e Summary The Ro u te S u m m a ry page displays the following fields: • Source A ddress - The n[...]

686 Config uring IP M ulticast Displaying the DVMRP Route Summary using the CLI Command F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Refer ence Guide: • D VMRP Commands Internet Group Manag ement Protocol The Internet Group Management Protocol (I GMP ) is used by IPv4 system[...]

Confi gurin g IP Mult ica st 687 IGMP Globa l Config uration Use the I GMP G lobal Conf igur ation page to se t IGMP on the syste m to ac tive or inactiv e. T o di spla y the page , cli ck IP Multicast > IGMP > Globa l Con figu ratio n in the t r ee view . Figure 12- 25. I GMP Glo bal Confi gurati on The IGMP G lobal Co nfiguratio n page cont[...]

688 Config uring IP M ulticast Routing I nterface The Ro u ti n g I nt er f a ce menu page contains links to web pages that configur e and display IGMP routing parameters and data. T o display this page, click IP Multicast > IGMP > Ro ut in g I nt e r fa c e in the tree view . F ollow ing are the web pages access ible from this menu page: •[...]

Confi gurin g IP Mult ica st 689 The IGMP I nterface Co nfigurat ion page contains the following fields: • Inte rface — S elect the in terface for wh ich data is to be displayed or con figured from the drop-down menu. • Inte rface M ode — Select Enabl e or Disable fr om the drop- down menu to set the admini strative status of IGMP on the se[...]

690 Config uring IP M ulticast IGMP Configuration Summary Use the IGMP Configurat ion Summar y page to display IG MP routing parameters and data. Y ou must configur e at least o ne IGMP router interface to access thi s page. To d i s p l a y t h e p a g e , c l i c k IP Multicas t > IGMP > Ro ut i n g In t e rf a c e > Configuration Summar[...]

Confi gurin g IP Mult ica st 691 • Ve r s i o n — The ve rsion of IGMP configured on the selected in terface. • Query Interval (secs) — The frequency at w hich IGMP host-query pa ckets are tra nsm itted on the selected interface. • Query Max Response T ime (1/10 of a second) — The maximum qu ery r esponse time ad vertised in IGMPv2 quer[...]

692 Config uring IP M ulticast IGMP Cache Information Use the IGMP Cache Infor mation page to display cache para meters and data for an IP multicast group address. Y ou must configure at least one IGMP r o uter interface to access this page. A lso , group membership reports must have been received on the selected interface for data to display here.[...]

Confi gurin g IP Mult ica st 693 • Ve r s i o n 1 H o s t T i m e r — The t ime remaining until the local router assum es that there are no longer any IGMP version 1 mem bers on the IP subnet attached to this interface. W hen an IGMPv1 members hip report is received, th is timer is r ese t to the group mem bership timer . W hile th is time r is[...]

694 Config uring IP M ulticast IGMP Interface Deta iled Membership Info Use the IGMP Interface Detailed Membershi p Inf o page to display detailed membership information for an interface. Y ou must configure at least one IGMP router interface to access this page. Also , group membership reports must have been received on the selected interface for [...]

Confi gurin g IP Mult ica st 695 • Sourc e Host s — The source addr esses which ar e members of this multica st addr ess. • Expiry T ime — The expiry time in terval against each source address which ar e memb ers of this multicast group. Th is is the am ount of tim e after wh ich the specified source entry is a ged out. Displaying IGMP Inte[...]

696 Config uring IP M ulticast Figure 12-30. IGMP Proxy In terface Co nfigurat ion The IGMP P roxy Interface Con figuration page contains the following field s: • Inte rface — Select the port fo r which dat a is to be di splaye d or confi gured from the dr op-down menu. Y ou must have con figur ed at le ast one rout er interf ace before configu[...]

Confi gurin g IP Mult ica st 697 IGMP Proxy Configuration Summary Use the IGMP P roxy Conf iguration Sum mary page to disp lay proxy interface configurat ions by interface. Y o u must have configured at least one router interfac e configured before data disp lays on thi s page. T o di spla y the page , cli ck IP Multicast > IGMP > Pr o x y I [...]

698 Config uring IP M ulticast • Unsolicited Report In terv al — The Unsol icited Report Interval is the time b etween r epetiti ons of a host's initi al report of member ship in a grou p. Default : 1 secon d. • V ersion 1 Querier T imeout — The ol der IGMP version 1 que rier timeout valu e in seconds. The O lder V ersion Qu erier Inte[...]

Confi gurin g IP Mult ica st 699 The IGMP P roxy Interface Membershi p Info page displays the following fields: • Inte rface — D isplays the in terface on w hich IGM P proxy is en abled. • Multicast G roup IP — Select the I P multicast group addr ess for which data is to be disp layed. I f no group membersh ip reports have been received on [...]

700 Config uring IP M ulticast IGMP Proxy Interface Membership Info Detailed Use the I GMP P roxy Inter face Members hip Info Det ailed pag e to di splay de tailed inter face membership data. Y ou must have configured at least one router interface before you can display det ailed interface membershi p information, and it should not be an IGMP routi[...]

Confi gurin g IP Mult ica st 701 Displaying Detailed IGMP Proxy Interface Membership Info 1. Open the IGMP Proxy Inte rface Memb ersh ip Info Detailed page. 2. Sele ct the interfa ce to display from the Inte rface drop-down menu. 3. Select the d esired Multi cast Group IP . Detailed members hip data for this interfa ce and m ulticast grou p IP disp[...]

702 Config uring IP M ulticast PIM-DM Global Con figuration Use the PIM-DM Global Config uration page to configure the administrative status of PIM-DM or PIM-SM on the switch. To d i s p l a y t h e p a g e , c l i c k IPv4 Multica st > PIM > Gl obal Confi guration or IPv6 Multi cast > PI M > Glo bal Co nfig ur ation in th e navig ation[...]

Confi gurin g IP Mult ica st 703 Configuring PIM-DM using the CLI Comma nd F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Refer ence Guide: • PIM-DM Commands PIM-DM Global St atus Use the PIM-DM Global Status page to view the administra tive status of PIM-DM or PIM-SM on the s[...]

704 Config uring IP M ulticast PIM-DM Inter face Configurat ion Use the PI M-DM Inte rface C onfigurati on page to configur e specific int erfaces with PIM. T o di spla y the page , cli ck IP v4 Mul ticast > PI M > Inte rface Confi gurat ion or IPv6 Mul ticast > PIM > Inter face Configur ation in the tree view . Figure 1 2-36. PIM Inter[...]

Confi gurin g IP Mult ica st 705 Configuring PIM-DM for an Interface 1. Open the PIM-DM Interface Configu ration pag e. 2. Sele ct the interfa ce to configu re fr om the Inte rface field. 3. Modify th e remaining fields as needed. 4. Click Apply Cha nges . The int erface confi gurati on is saved, and the devi ce is updat ed. Configuring PIM-DM for [...]

706 Config uring IP M ulticast The PIM Inter face Summary page contains the fo llowing fields: • Inte rface — Select the inter face for whi ch data is to be dis played. The re must be configur ed at l east one rou ter inter face befor e displ aying data for a PIM int erface, oth erwise an error mess age display s. Interfac e P a rameters fields[...]

Confi gurin g IP Mult ica st 707 Candidat e RP Confi guration The Candidate RP is configured on the Add Candid ate RP page. Use the Candidate R P Configuration page to display and delete the configured r endezvous points (RP s) for each port using PIM. T o access the page, click IPv4 Multicas t > PIM > Candidate RP Configurat ion or IPv6 Mul [...]

708 Config uring IP M ulticast Configuring the Candidate RP u sing the CLI Commands F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide: • PIM Command s Addin g a Cand idate R P Use the Add Candidate RP page to add PIM C andidate rendezvous poi nts (RP s) for ea ch[...]

Confi gurin g IP Mult ica st 709 Static RP Conf iguration Use the PIM Stati c RP Configur ation p ag e to di s p la y o r re m o v e t h e co n f i gu re d R P . T h e p a g e a ls o al l o ws adding new static RP s by clicking the Add butto n. T o access the page, click IPv4 Mult icas t > PIM > S tatic RP Co nfig uratio n or IPv6 Multic ast [...]

710 Config uring IP M ulticast Addin g a Static RP Use the Add Static RP p age to add the sp ecified stat ic rendezvous point (RP) for the P IM router . 1. Open the Static RP Configuration page. 2. Click Add . The Add Sta tic RP page displays. Figure 12-41 . Add Static RP 3. Enter the IP ad dress of the RP for the group range. 4. Ent er the grou p [...]

Confi gurin g IP Mult ica st 711 SSM Range Configu ration Use this pag e to displa y or remove the the So urce Specific Multicast (S SM) group IP addr ess and group mask for the PIM router . T o di spla y the page , cli ck IPv4 Multicast > PIM > SSM Range Configuratio n or IPv6 M ulti cast > PIM > SSM C andidate Configurati on . Figur e[...]

712 Config uring IP M ulticast Adding an SSM Ra nge Use the Add SSM Range page to add the Source-Sp ecific Multicast (SSM) Group IP Address and Group Mask (IPv4 ) or Pr efix Length (IPv6) for the PIM router . 1. Open the SSM Range Configu ration page. 2. Click Add . The Add SSM Range page displays . Figure 12-43 . Add SSM Range 3. Click the Add Def[...]

Confi gurin g IP Mult ica st 713 BSR Candidate Configurat ion Use this page to configure information to be used if the interface is selected as a bootstrap router . To d i s p l a y t h e p a g e , c l i c k IPv4 Multic ast > PIM > BSR Candidate Conf iguration or IPv6 Mult icast > PIM > BSR Candidate Conf iguration . Figure 1 2-44. BSR [...]

714 Config uring IP M ulticast BSR Candidate Summary Use this pa ge to display information ab out the conf igured BSR ca ndidates. T o display t his page, click IPv4 Multica st > PIM > BSR Candidat e Summary or IPv6 Multi cast > PIM > BS R Cand idate Summary . Figure 12-45 . BSR Cand idate Summary The BSR Cand idate Summar y page contai[...]

Confi gurin g IP Mult ica st 715 sends the data down th e shared tr ee to th e receivers. Shared tr ees centered on a RP do not necessari ly provi de the sh ortes t/opt imal pa th. I n such cases, PIM -SM provides a means t o switch to mor e efficient source-specific tr ees. The PIM-SM menu page contains links to web pages that define and disp lay [...]

716 Config uring IP M ulticast Figure 12-46. PIM -SM Glob al Conf iguration The PIM-SM Glob al Configura tion page contains the following fields: • Admi n Mode — Sele ct E nable or Disable from the d rop- down men u to set th e adm inis trativ e statu s of PIM-SM on t he system. Y ou must enable IGM P before enabling PIM-SM . The defau lt is Di[...]

Confi gurin g IP Mult ica st 717 The int erface confi gurati on is saved, and the devi ce is updat ed. Configuring PIM-SM using the CLI Command F or inf orm at ion abou t th e CLI comm and s tha t pe rfor m this func tion, see the fol lowing chap ter in the CLI Refer ence Guide: • PIM-SM Command s[...]

718 Config uring IP M ulticast PIM-SM Global St atus Use the PIM-SM Global Status page to display the globa l settings selected on the PIM- SM G lobal Configur ation page. T o di spla y the page , cli ck Multicast > PIM-SM > Global Status in the tree view . Figure 12-47 . PIM-S M Global Stat us The PIM-SM Glob al Status page display s the fol[...]

Confi gurin g IP Mult ica st 719 PIM-SM Inter face Configurat ion Use the PIM-SM I nterface Configura tion page to co nfigure PIM- SM for an i nterfac e. PIM-SM must b e enabled on the PIM-SM Global Configurati on page for this interface configuration page t o display . T o di spla y the page , cli ck Multicast > PIM-SM > Interface Configurat[...]

720 Config uring IP M ulticast • CBSR Hash M ask Le ngth — Enter the CB SR hash mask le ngth to be advertised in bootstrap messages if this inte rface is ele cted as the bootstrap router . Th is hash m ask len gth is us ed in th e hash algorithm for selecting th e RP for a pa rticular group . The valid values are from 0 to 32. Th e default valu[...]

Confi gurin g IP Mult ica st 721 PIM-SM Inter face Summary Use the PIM-SM Interface Su mmary page to display a PIM-SM interface and its setti ngs. At least one interfac e on this router mu st be set up as PIM-SM for this page to display . T o di spla y the page , cli ck Multicast > PIM-SM > Interf ace Summary in t he tr ee v iew . Figure 12-4[...]

722 Config uring IP M ulticast • CBSR P reference — The p refer ence valu e for the local int erface as a candida te bootstrap router . T he value of -1 is used to indicate t hat the local interfa ce is not a candida te BSR inter face. • CBSR Hash M ask Le ngth — The CBSR hash mask lengt h to be advertis ed in bootstrap messages if this int[...]

Confi gurin g IP Mult ica st 723 Componen t Summary Use the C omponent Su mmary page to display PI M-SM comp onent data. T o di spla y the page , cli ck Multicast > PIM-SM > Compo nent S ummary in the tree view . Figure 12-50. Compon ent Summary The Comp onent S ummary page displays the following fields: • Component Index — Unique numb er[...]

724 Config uring IP M ulticast RP Set Summary Use the PI M-SM RP Set Summary page to di splay the static RP infor mation fo r the PIM-S M router . T o di spla y the page , cli ck Multicast > PIM-SM > RP Set Summa ry in the tree view . Figure 12-51. PIM-SM RP Set Summary The PIM-SM RP Set S ummary page displays the following fields in a table:[...]

Confi gurin g IP Mult ica st 725 Candidat e RP Summary Use the PI M-SM Candidate RP Summary page t o display PI M informat ion for candidate Rendezvous Po i n t s ( R Ps ) f o r e a c h I P m u l t i c a s t g r o u p . T o di spla y the page , cli ck Multicast > PIM-SM > Candi date RP Summ ary in t he tree view . Figure 12-52 . PIM-S M Candi[...]

726 Config uring IP M ulticast Static RP Conf iguration Use the Static RP Configuratio n page to create th e spec ified st atic R P IP Address for the PIM-S M router . T o di spla y the page , cli ck Multicast > PIM-SM > Static RP Conf iguration in the tree view . Figure 1 2-53. Static RP Con figuration The Static RP Config uration page conta[...]

Confi gurin g IP Mult ica st 727 Configuring Static RP using the CLI Command F or inf orm at ion abou t th e CLI com man d th at per for ms thi s function, se e the follow ing chapter in the CLI Refer ence Guide: • PIM-SM Command s[...]

728 Config uring IP M ulticast[...]

Getti ng He lp 729 13 Getting Help This section contains information about ge tting hel p for quest ions abo ut the Dell™ P owerConnect™ M6220 /M6348/M802 4. The topics cover e d in thi s section include: • Obtaining Assi stance • Dell E nterprise T raining and Cert ification •P r o b l e m s W i t h Y o u r O r d e r • P rodu ct Inform[...]

730 Getting Help Obtaining Assistance If you exp erience a problem with your computer , yo u can complete the following steps to diagnose and troubleshoot t he pro blem: 1. F ill out the "Diagnosti cs Checklist" on page 733. 2. Use Dell's extensive suite of online services available at Dell Supp ort ( support.dell. com ) for help wit[...]

Getti ng He lp 731 • Dell Support e-mail add resses mobile_support @us.dell.com suppor t@us .dell.com la-t echsuppor t@dell.com (Latin Americ a and Cari bbean countri es only) apsupport@dell. com (Asian/P acific cou ntries only) • Dell Marketing and S ales e-mail addresses apmarketing@ dell.c om (Asian/P acific coun tries only) sales_ca nada@ d[...]

732 Getting Help Product Information If you nee d information about additio nal products availa ble from Dell, or if you would lik e to place an order , vis it the De ll web site at www .dell.com . F or the te lep ho ne n umb er t o c al l fo r yo ur re gio n o r to spe ak to a sa les sp eci alis t, se e "Co ntac ting D ell " on pa ge 73 [...]

Getti ng He lp 733 Diag nostics C hecklis t Name: Date: Addr ess: Phone nu mber: Service T ag (bar code on the back or bottom of the computer): Expr ess Servic e Code: Retu rn Material A uth oriza tion Number ( if provided by Dell supp ort techn ician): Operating system and ve rsion: Devices: Expansion card s: Are you co nnecte d to a ne twork? Y e[...]

734 Getting Help Contactin g Dell F or customers in the United States, call 800- WWW .DELL (80 0.999.3355). Note: If you do n ot have an a ctive Intern et con nect ion, y ou ca n find conta ct inf ormat ion on your purc hase in voic e, pack ing slip, bil l, or Dell product catalog. Dell provides seve ral online and telephone-based support and servi[...]

Getti ng He lp 735[...]