Allied Telesis 2.6.1 manual

AT-8800 SERIES SWITCH USER GUIDE Software Release 2.6.1[...]

2 A T -8800 Series Switch User Gu ide for Software Release 2.6.1 Document Number C613-02039-00 REV A. Copyright © 1999- 2003 Allied T e l e syn Internati o n a l, Corp. 960 Stewart Drive Suite B, Sunnyvale CA 94086, USA. All rights reserved. No part of this public ation may be repr oduced without prior written permission from Allied T elesyn. Alli[...]

Contents CHAPTER 1 Introduction Introducing the A T -8800 Series Sw itch ................ ................ ................ .............. 7 Why Read this User G uide? ....... ................ ................ .................... ................ .... 7 Where T o Find More Information ..................... ................... ................ ....[...]

4 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A The Diagnost ics Menu . ................. ................ ................ ................ ............ 36 Changing the P assword ................ ................ ................ ................ ............ 36 Context Sensitive GUI Help ..........................[...]

5 Software Release 2.6 .1 C613-02039 -00 REV A The Forwarding Process ............ ................. ................ ................ ............... 82 Layer 2 Filtering ..... ................... ................. ................ ................ ............... 83 The Egress Rules .......... ................. ................ ................ .[...]

[...]

Chapter 1 Intr oduction Intr oducing the A T -8800 Series Switch Congratulations on purchasing an A T -8800 Series Intelligent W ork group Switch. The A T -8800 Series Switch has been developed to meet the exceptionally high performance demands of low to mid-r ange applications and deliver low-l atency high-ban dwidth wir espeed Layer 2 and 3 s wit[...]

8 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A This user guide is or ganised into the following chapters: ■ Chapter 1, Introduction gives an overview of the switch featur es and of the documentation supplied with your switch. ■ Chapter 2, Getting Started with the Com mand Line Interface (CLI) descri bes how to [...]

Introduction 9 Software Release 2.6 .1 C613-02039 -00 REV A ■ A T -8800 Series Switch Documentation and T ools CD-ROM The A T -8800 Series Switch Docume ntation Set in Adobe Acrobat PDF format is bundled with every switch—the compl ete refer ence to installing, configuring and managing the switch, incl uding detailed descriptions of all command[...]

10 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Management Features The following featur es enhance management of the switch: ■ A sophisticated and configu rable event logging facility for monitoring and alarm notification to single or multiple management centres. ■ T riggers for automatic and timed execution o[...]

Introduction 11 Software Release 2.6 .1 C613-02039 -00 REV A ■ Sophisticated packet filtering. ■ Bridging. ■ V an Jacobson’s header compression, ST AC LZS and Predictor compr ession, and DES encryption. ■ T erminal serv ing using T elnet, with local host nick names. ■ Access to network printers via LPD or TCP streams. ■ Resource Reser[...]

12 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Most softwar e features that requi re a special featur e licence ar e bundled into one of the foll owing special featur e licenc e packs: ■ Full Layer 3 Feature Licence ■ Advanced Layer 3 Feature Licence ■ Security Pack Feature Licence For more information about[...]

Chapter 2 Getting Started with the Command Line Interface (CLI) This Chapter This chapter describes how to access the switch’s CLI, and provides basic information about configuring the s witch, including how to: ■ Physically connect a terminal or PC to the switch (see “ Connecting a T erminal or PC ” on page 14 and the Quick I nstall Guide)[...]

14 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Connecting a T erminal or PC The first thing to do after physically inst alling the switch is to start a terminal or terminal emulation session to access the switch. Then you can use the command line interface (CLI) to configur e the switch. If you wish to configur e [...]

Getting Started with the Command Li ne Interface (CLI) 15 Software Release 2.6 .1 C613-02039 -00 REV A If a modem is connected, configur e the sw itch to make and/or accept calls via the modem. T o set the CDCONTROL par ameter to “CONNECT” and the FLOW parameter to “HARDW ARE”, enter the command: SET ASYN CDCONTROL=CONNECT FLOW=HARD WARE If[...]

16 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A If IP addresses on your LAN are assi gned dyn amically by DHCP , you can set the switch to request an IP address from the DHCP server , using the commands: ADD IP INTERFACE=vlan1 IPADDRESS=DHC P ENABLE IP REMOTEASSIGN Y ou do not need to set the MASK parameter because[...]

Getting Started with the Command Li ne Interface (CLI) 17 Software Release 2.6 .1 C613-02039 -00 REV A T o add a static r oute, enter the command: ADD IP ROUTE= ipadd INTERFACE= interface NEXTHOP= ipadd [CIRCUIT= miox-circuit ] [DLCI= dlci ] [MASK= ipadd ][METRIC=1..16] [ METRIC1=1..16] [METRIC2=1..65535][POLICY=0..7] [PREF ERENCE=0..65535] T o dis[...]

18 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A ■ Do not use your birth date, str eet number or telephone number . ■ Do not write down y our passwor d anywher e. Make sure you remember t he new passw ord creat ed as you cannot r etrieve a lost password. Recovery of a ccess to the switch is complex. Once you hav[...]

Getting Started with the Command Li ne Interface (CLI) 19 Software Release 2.6 .1 C613-02039 -00 REV A Aliases The command line interface supports aliases. An alias is a short name for an often-used longer char acter sequence. When the user pr esses [Enter] to execute the command line, the command pr ocesso r first checks the command line for alias[...]

20 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Enabling Special Featur e Licences Y ou must ena ble the special feature lice nce you have purchased before you can use the licenced featur es. Y ou will need the passwor d pr ovided by your authorised distributor or r eseller. The advanced upgrade licence and passwor[...]

Getting Started with the Grap hical User Interface (GUI) 21 Software Release 2.6 .1 C613-02039 -00 REV A Chapter 3 Getting Started with the Graphical User Interface (GUI) This Chapter This chapter describes how to access th e switch’s HTTP-based Graphical User Interface (GUI), and provides basic information about using the GUI, including: ■ Wha[...]

22 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A What is the GUI? The GUI (Graphical User Interface) is a web-based device management tool, designed to make it easier to configure and monitor the switch. The GUI provides an alternative to the CLI (Comma nd Line Interface). Its purpose is to make complicated task s s[...]

Getting Started with the Grap hical User Interface (GUI) 23 Software Release 2.6 .1 C613-02039 -00 REV A T o enabl e JavaScript in Netscape 6.2. x : 1. From the E dit menu, select Prefe rence 2. Select the Advanced menu option. 3. Ensure that the “Enable JavaScript for Naviga tor” checkbox is checked. The minimum screen resolution on the PC is [...]

24 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Establishing a Connec tion to the Switch Before you start, consider how the switch fits into your network. If you are installing a new switch, consid er whet her you want to configure it before deploying it into the LAN, or want to configure it in si tu . If you want [...]

Getting Started with the Grap hical User Interface (GUI) 25 Software Release 2.6 .1 C613-02039 -00 REV A Option 1: Configuring the Switch before Installation Use this procedur e if: ■ Y ou want to configure the s witch befor e installing it in your LAN. ■ Y ou will be installing the switch at a r emote offi ce or a customer site and want to con[...]

26 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A 9. At the login prompt, enter the user name and passwor d The default username is manager: User Name: manager Password: friend The System Status page is displayed (Figur e 6 on page 31). S elect options from the sidebar menu to configur e and manage the switch. Option[...]

Getting Started with the Grap hical User Interface (GUI) 27 Software Release 2.6 .1 C613-02039 -00 REV A Figure 5: Configuring the swi tch from a PC in another subnet. Y ou can br owse to the switch thr ough any VLAN , a s l o n g a s y o u g i v e t h a t V L A N a n I P address (see be low). These instructions assume you will use vlan1. The switc[...]

28 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A 8. On the PC, bypass the HTTP proxy server , if necessary See “HTTP Proxy Servers” on page 23 for mor e information. 9. Point your web browser at the LAN interface’ s IP address For normal access, point your web br owser to http:// ip-address For secure access, [...]

Getting Started with the Grap hical User Interface (GUI) 29 Software Release 2.6 .1 C613-02039 -00 REV A 4. Browse to the switch For normal access, point your web br owser to http:// ip-address where ip-addr ess is the interface’s IP address . T o access the switch secur ely if SSL (Secur e Sockets Layer) has been configur ed on the inter face, p[...]

30 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A 2. Login as a Security Officer T o login as the user with Security Officer privilege called “CIPHER”, use the command: LOGIN CIPHER And then enter the password for “CIPHER”, “sbr4y3”. 3. Enable system security T o enable system security , use the command: [...]

Getting Started with the Grap hical User Interface (GUI) 31 Software Release 2.6 .1 C613-02039 -00 REV A 10. Configure an IP interface to r un SSL over T o configure an IP interface that SSL will be run over , first enable IP using the command: ENABLE IP To m a k e VLAN1 the IP interface, and 172.30.1.105 the interface’s IP address, use the comma[...]

32 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Using the GUI: Navigation and Featur es The GUI consists of a large number of pages , which you navigate betw een using the menu on the left of the br owser window . This secti on describes how to use the GUI, and gives an overview of its functionality . The Configura[...]

Getting Started with the Grap hical User Interface (GUI) 33 Software Release 2.6 .1 C613-02039 -00 REV A T o mo dify an existing item, sel ect it by clicking on the option button at the beginning of its entry in the selection ta ble. Then click the Modify butt on. This opens the popup “modify” page, which lets you expand or change the configura[...]

34 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Figure 9: An example of a popup “modify” page Editable Fields GUI pages allow you to enter values or select options through a range of field types. These in clude: • text fields, to enter character string s or numbers, especially for fields where ther e ar e few[...]

Getting Started with the Grap hical User Interface (GUI) 35 Software Release 2.6 .1 C613-02039 -00 REV A Apply Button An Apply button applies the configuratio n settings on the page or the section of the page. The new settin gs will ta ke ef fect immediately , but are not automatically saved. T o save the settings af ter clicking Apply , click the [...]

36 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A The Diagnostics Menu The GUI’s diagnostics pages enable you to tr oubleshoot network problems and observe traffic flow , including: • displaying the number of good and bad packets received and transmitted over each switch port • displaying the number and type of[...]

Getting Started with the Grap hical User Interface (GUI) 37 Software Release 2.6 .1 C613-02039 -00 REV A Saving Configuration Enter ed with the GUI Configuration changes applie d using the GUI can be saved to a configuration script by clicking the Sa ve button at the top of the sidebar menu. A pop-up Save window gives you the option of sa ving to t[...]

38 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Upgrading the GUI Y ou can download the latest GUI r esour ce file fr om the support si te at http://www .alliedtel esyn.co.nz . B ef ore yo u st ar t, e ns ure th at th e sw it ch i s ru n ni ng the most r ecent rele ase and patch files. The GUI is not part of the fi[...]

Getting Started with the Grap hical User Interface (GUI) 39 Software Release 2.6 .1 C613-02039 -00 REV A When the switch has loaded the file in to its RAM, it displays the messa ge “ File transfer successfully completed ”. It then wr ites the file to FLASH memory , which takes approx imately 30 seconds after the message. Once the file has been [...]

40 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Deleting T emporary Files Browsers stor e local copies of web pages as temporary f iles. If you upgrade to a new GUI r esource fi le, or if you encounter problems i n browsing to the GU I, you may need to delete these files (clear the cache). T o clear the cache in In[...]

Getting Started with the Grap hical User Interface (GUI) 41 Software Release 2.6 .1 C613-02039 -00 REV A Problem The GUI is behaving inconsiste ntly , or you cannot access some pages. Solution ■ Delete your browse r ’s temporary files (see “Deleti ng T emporary Files” on page 40) and try again. ■ Check that you are trying to access the GU[...]

42 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A IP Addr esses and DHCP Problem The switch is enabled as a DHCP server , but cannot assign an IP address to a host. Solution ■ Reboot the host machine. ■ Check the host’s TCP/IP settings, to make sure that the host is set to obtain its IP addr ess dynamicall y: I[...]

Getting Started with the Grap hical User Interface (GUI) 43 Software Release 2.6 .1 C613-02039 -00 REV A Loading Software Problem Y ou have attempted to load a new rele ase file onto the swit ch, but the load has failed and you cannot access th e switch through t he GUI. Solution 1. Access the switch’s CLI (see “ Connecting a T erminal or PC ?[...]

[...]

Chapter 4 Operating the switch This Chapter This chapter introduces basic oper ations on the switch, including: ■ “ User Accounts and Privileges ” on page 45 ■ “ Normal Mode and Security Mode ” on page 47 ■ “ Remote Management ” on page 49 ■ “ Storing Files in FLASH Me mory ” on page 49 ■ “ Using Scripts ” on page 50 ?[...]

46 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A In normal mode, a user with manage r privilege can cre ate and delete accounts for users with any of these privilege levels. User s and passwor ds ar e managed by the User Au thentication F acility . U sers and passwor ds ar e authe nticated using an internal database[...]

Operating the switch 47 Software Release 2.6 .1 C613-02039 -00 REV A See the Operations chapter in the A T -8800 Series Switch Software Refer ence for: ■ More information about managing and using accounts with user , manager and security officer privileges ■ A full list of commands that r equire security officer pr ivilege when the switch is in[...]

48 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A When the switch is in security mode, a us er with security of ficer pr ivilege is the only person who can execute commands which af fect switch security . T able 5 on page 48 lists commands that only a se curity officer can exe cute when the switch is in security mode[...]

Operating the switch 49 Software Release 2.6 .1 C613-02039 -00 REV A Remote Management Y ou can manage remote switches as easil y as you manage the local switch a terminal is connected to. From a termin al connected to any port (with either USER or MANAGER privilege), enter the command: TELNET ipadd to T elnet to the remote switch, specifying the r[...]

50 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A extensions of 3 characters . For example, the file extralongfilenam.cfg may be saved as extral~1.cfg in the FLASH File System. Ther efore, files can be accessed via two file names, either of which can be used for file management. A translation table, named longname.lf[...]

Operating the switch 51 Software Release 2.6 .1 C613-02039 -00 REV A In addition to the boot configuration sc ript that the switch automatically runs when it r estarts, you can run a configur ation script manually at any time, by entering the command: ACTIVATE SCRIPT= filename Y ou can also set a trigger to automatically execute a conf iguration sc[...]

52 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Loading and Uploading Files When you want to upgrade your switch to a new software patch or r elease, or use a new configuration file, load files onto the switch us ing the router ’s LOADER module. Y ou can also use the LOADER module to upload files, such as configu[...]

Operating the switch 53 Software Release 2.6 .1 C613-02039 -00 REV A Y ou may see files on your switch with fi le name extension s not listed in T able 6 on page 52. If you require mor e information about file types and file name extensions, contact your author ised distributor or reselle r. Do not change the header in a release or patch file. At b[...]

54 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Setting LOADER Defaults Y ou are likely to repeat the pr ocess of downloading fi les onto the swi tch using a similar method each time. Y ou can set de faults for some or all of the LOADER parameters. Y ou can then use or override some or all of these defaults for eac[...]

Operating the switch 55 Software Release 2.6 .1 C613-02039 -00 REV A Uploading Files Fr om the Switch The LOADER ca n upload files from the switch to a network host, using TF TP or ZMODEM. Upload files using one of the commands: UPLOAD [METHOD=TFTP] [FILE= filename ] [SERVER={ hostname | ipadd }] UPLOAD [METHOD=ZMODEM] [FILE= filenam e ] [ASYN= por[...]

56 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Upgrading Switch Softwar e When you first start the switch, it automa tica lly loads the s oftware release fr om FLASH memory into RAM, wher e the CPU uses it to r un all the r outer ’s software features. The switch may also load a patch file to improve the main rel[...]

Operating the switch 57 Software Release 2.6 .1 C613-02039 -00 REV A when the switch boots corr ectly , to then set up the pr eferred inst all with the new rel ease or patch. T o change the install information in the switch, enter the command: SET INSTALL={TEMPORARY|PREFERRED|DEFAULT} [RELEASE={ release-name |EPROM}] [PATCH = patch-name ] For secur[...]

58 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A on page 52). T o load the release file using your LOADER defau lt settings, enter the command: LOAD FILE= 86s-262.rez W ait for the releas e to load. This can take several minutes, even if you ar e loading t he file o ver a high speed lin k. T o see the p rogress of t[...]

Operating the switch 59 Software Release 2.6 .1 C613-02039 -00 REV A Example: Upgrade to a new patch file Use this procedur e to upgrade the softwar e r elease curr ently running on the switch with a new patch. This exampl e assumes that the current r elease, Software Release 2.6.1, is set as the pr eferre d release . T o upgrade to a new patc h fi[...]

60 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Using the Built-in Editor The A T -8800 Series Switch has a built-in full-screen text editor for editi ng script files stored on the switch file subsys tem. Using the text editor you can run script files manually , or set scrip t files to run automatically at switch r[...]

Operating the switch 61 Software Release 2.6 .1 C613-02039 -00 REV A SNMP communities ar e the main configuration item in the router ’s SNMP agent, and are defi ned in terms of a lis t of IP addresses which define the SNMP application entities (trap hosts and mana gement stations) in the community . T o create an SNMP community , enter the comman[...]

62 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A See other chapters in the A T -8800 Series Switch Software Refer ence for mor e information on how to: ■ Use the logging facility to monitor network a ctivity and to select and display the results (see the Logging Facility chapte r). ■ Use SNMP to manage the switc[...]

Chapter 5 Layer 2 Switching This section descri bes the Layer 2 swit ching featu res on the A T -880 0 Series Switch, and how to configure them. Switch Ports Each Ethernet switch port is unique ly identified by a port number . The switch supports a number of featur es at the physic al level that allow it to be connected in a variety of physical net[...]

64 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A T o enable or disable a switch port, use the commands: ENABLE SWITCH PORT={ port-list |ALL} DISABLE SWITCH PORT={ port-list |ALL} Resetting Ethernet ports at the hardware level discar ds all frames queued for reception or transmission on the port, and r estarts autone[...]

Layer 2 Swi tching 65 Software Release 2.6 .1 C613-02039 -00 REV A Configured speed/duplex The port speed and duplex mode configured for this port. One of “Autonegotiate” or a comb ination of a speed (one of “10 Mbps”, “100 Mbps” o r “1000 Mbps”) and a duplex mode (one of “half duplex” or “full duplex ”). Actual speed/duplex[...]

66 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Autonegotiation of Port Speed and Duplex Mode Each of the switch ports can operate at either 10 Mbps or 100 Mbps, in either full duplex or half duplex mode. In full dupl ex mode a port can trans mit and receive data simultaneously , while in ha lf duplex mode the port[...]

Layer 2 Swi tching 67 Software Release 2.6 .1 C613-02039 -00 REV A The SHOW SWITCH POR T command displays the port speed and duplex mode settings. Port T runking Port trunking, also known as port bund ling or link aggr egation, allows a number of ports to be configur ed to jo in tog ether to make a single logical connection of higher bandwidth. Thi[...]

68 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A which the whole trunk group belongs, unless it is first removed fr om the trunk group. The members of a trunk group can be specified when it is cr eated, and ports can be added to or r emoved fr om a trunk gr oup using the commands: ADD SWITCH TRUNK= trunk PORT= port-[...]

Layer 2 Swi tching 69 Software Release 2.6 .1 C613-02039 -00 REV A Packet Storm Protection The packet storm pr otection featur e al lows the user to set limits on the reception rate of br oadcast, multicast and destina tion lookup failure packets. The software allows separate limits to be set for each port, beyond which each of the differ ent packe[...]

70 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A the BCLIMIT parameter description for important information about packe t rate limiting. The default value for this parameter is NONE . If packet storm protection limits ar e set on the swit ch, the POR T parameter must specify complete processing blocks. The ability [...]

Layer 2 Swi tching 71 Software Release 2.6 .1 C613-02039 -00 REV A T o send packets that match particular criteri a to the mirror por t, first cr eate a classifier o r classifiers using the command: CREATE CLASSIFIER Then crea te a har dware filter with the ACTION parameter se t to SENDMIRROR, using the command: ADD SWITCH HWFILTER CLASSIFIER= clas[...]

72 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A T able 9: Example output from the SH OW SWITCH POR T INTRUSION command. A switch port can be manually locked be fore it reaches the learning limit, by using the command: ACTIVATE SWITCH PORT={ port-list |ALL} LOCK A d d re s s e s c a n be m a n u al l y a d d e d t o[...]

Layer 2 Swi tching 73 Software Release 2.6 .1 C613-02039 -00 REV A Devices that are members of the same VLAN only exchange data with each other thr ough the switch’s switching ca pabilities. T o exchange data between devices in separate VLANs, the switch’s r outing capabilities ar e used. The switch passes VLAN status inf ormation, indicating w[...]

74 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Figure 13: Format of user p riority and VLAN data in an Ether net frame. Ethernet packets which contain a VLAN tag are r eferred to as tagged frames, and switch ports that transmit ta gged fra mes are r eferr ed to as tagged ports . Ethernet packets which do not conta[...]

Layer 2 Swi tching 75 Software Release 2.6 .1 C613-02039 -00 REV A Every frame admitted by the switch has a VID associated with it. If a frame arrives on a tagged port, the associated VID is determined from the VLAN tag the frame had when it arrived. If a fram e arrives on an untagged port, it is associated with the VID of the VLAN fo r which the i[...]

76 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Figure 14: VLANs with tagged ports. VLAN Membership of Untagged Packets A VLAN that does not send any VLAN-ta gged frames is a logical gr ouping of ports. All untagged traf fi c arriving at those ports belongs to that VLAN. VLANs based on untagged ports are li mited, [...]

Layer 2 Swi tching 77 Software Release 2.6 .1 C613-02039 -00 REV A If the network includes VLANs that do not need to share network resour ces or span several switches, VLAN member ship can useful ly be based on untagged ports. Otherwise, VLAN membersh ip should be determined by tagging (see “ VLAN T agging ” on page 73). Figure 15 on page 77 sh[...]

78 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A T o add tagged ports to a VLAN, use the command: ADD VLAN={ vlan-name |1..4094} PORT={ port-list |ALL} FRAME=TAGGED A port can be tagged for any number of VLANs. T o add untagged ports to a VLAN, use the command: ADD VLAN={ vlan-name |1..4094} PORT={ port-list |ALL} [[...]

Layer 2 Swi tching 79 Software Release 2.6 .1 C613-02039 -00 REV A Summary of VLAN tagging rules When designing a VLAN and adding ports to VLANs, the fo llowing rules apply . 1. Each port, except for the mir ror port, mus t belong to at least one static VLAN. By default, a port is an untagged member of the default VLAN. 2. A port can be untagged fo[...]

80 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Generic VLAN Registration Pr otocol (GVRP) The GARP application GVRP allows switches in a network to dynamica lly share VLAN membership information, to r educe the need for statically configuring all VLAN membership change s on all switches in a network. See the Gener[...]

Layer 2 Swi tching 81 Software Release 2.6 .1 C613-02039 -00 REV A The default settings for the Ingr ess Rules ar e to Admit All Frames, and for Ingress Filtering to be OFF . This me ans that if n o VLAN configuratio n has been done, all incoming frames pass on to the Le arning Pr ocess, r egar dless of whether or not they are VLAN tagg ed. The par[...]

82 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A If the frame’s sour ce addr ess is not alr e ady in the Forwar ding Database for the VLAN, the address i s added and an ageing ti mer for that entry is started. If the frame’s source address is alr eady in th e Forwarding Database, the ageing timer for that entry [...]

Layer 2 Swi tching 83 Software Release 2.6 .1 C613-02039 -00 REV A the switch floods the fr ame on all ports in the VLAN ex cept the port on which the frame was rece ived. If the destination addr ess is found, the switch discar ds the frame if the port is not in the STP ‘Forwar ding’ state, if the destination address is on the same port as the [...]

84 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Figure 16: Example output from the SHOW SWITCH FIL TER command. For each VLAN, the destination MAC address of a frame to be forwarded is checked against the Forwar ding Database. If the re is no entry fo r the destination addr ess and VLAN, the frame is transm itted o[...]

Layer 2 Swi tching 85 Software Release 2.6 .1 C613-02039 -00 REV A The Egr ess Rules Once the Forwardin g Process has dete rmined which p orts and transmis sion queues to forward a frame fr om, the Egress Rules for each port determine whether or not the outgoing frame is VLAN-tagged with its numerica l VLAN Identifier (VID). (See “ V irtual Local[...]

86 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A T o display the mapping of user prio rity to QOS egr ess queues, use the command: SHOW SWITCH QOS Figure 17: Example output from the SHOW SWITCH QOS command Spanning T r ee Protocol (STP) The Spanning T ree Pr otocol (STP) makes it possible to automatically dis able r[...]

Layer 2 Swi tching 87 Software Release 2.6 .1 C613-02039 -00 REV A A spanning tree r unning in standar d mode can take up to o ne minute to r ebuild after a topology or configuration chan ge. The Rapid Spanning T ree algorithm provides for a mor e rapid r ecovery of connectivity following the failur e of a bridge, bridge port, or a LAN. For informa[...]

88 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A T o specify whether the STP will operat e in ST ANDARD mode or RAPID mode, use the command: SET STP={ stp-name |ALL} [MODE={STANDARD|RAPID} ] [ other parameters ] The default is ST ANDARD. If the mode is changed while the algorithm is running then the STP is r e-initi[...]

Layer 2 Swi tching 89 Software Release 2.6 .1 C613-02039 -00 REV A by the Root Bridge. The FOR W ARDDELA Y , MAXAGE and HELLOTIME parameters ar e interr elated. See the no te and formulae below . The default value for FOR W ARDDELA Y is 15 seconds. The HELLOTIME parameter sets the time, in seconds, be tween the transmission of switch spanni ng tr e[...]

90 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Figure 18: Example output from the SHOW STP command. STP Information ---------------------------------------- -------------------- Name .................. grey Mode .................. Rapid RSTP Type ............. Normal VLAN members .......... vlan4 (4) Status ......[...]

Layer 2 Swi tching 91 Software Release 2.6 .1 C613-02039 -00 REV A T able 18: Parameters in the outp ut of the SHOW STP c ommand . Parameter Meaning STP Name The name of the Spanning T ree P rotocol entity . Mode Whether STP is running in standard, or rapid mode. RSTP T ype Whether RSTP is operating normally , or as STP compatible. In STP compatibl[...]

92 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A The various parameters used by the Spa nning T ree Algorithm for the specifie d ports, or all ports with in the specified STP , or all STPs, are set with the SET STP POR T command: SET STP={ stp-name |ALL} PORT={ port-list |ALL} A port can belong to a single STP. This[...]

Layer 2 Swi tching 93 Software Release 2.6 .1 C613-02039 -00 REV A so that a port operating at 10Mbps has a default pathcost of 100, a port operating at 100 Mbps has a default path cost of 10, and a port operating at 1 Gbps has a default pathcost of 1. Setting the pathcost to a lar ger value on a particular port is like ly to r educe the traf fic o[...]

94 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Figure 19: Example output from the SHOW STP POR T command. STP Port Information ---------------------------------------- -------------------- STP ..................... grey STP Status ............ ON Port .................. 3 RSTP Port Role ...... Disabled State .....[...]

Layer 2 Swi tching 95 Software Release 2.6 .1 C613-02039 -00 REV A The spanning tre e algorithm can be recalc ulated at any time, and all timers and counters be initialised, us ing the command: RESET STP={ stpname |ALL} T o show STP counters, use the command: SHOW STP[={ stpname |ALL}] COUNTER T able 19: Parameters displayed in the ou tput of the S[...]

96 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Figure 20: Example output from the SHOW STP COUNTER command STP Counters --------------------------------- --------------------------- STP Name: default Receive: Tra nsmit: Total STP Packets 0 Total STP Packets 1677 Configuration BPDU 0 Configuratio n BPDU 0 TCN BPDU [...]

Layer 2 Swi tching 97 Software Release 2.6 .1 C613-02039 -00 REV A If necessary , all the STP configuration th at users have created on the switch can be re m o ve d , so t h a t a l l S T P s ex c ep t t h e default STP ar e destr oyed, and all other defaults are r estor ed, using the command: PURGE STP The PURGE STP command sh ould be used wi th [...]

98 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A out all ports. IGM P snooping is in dependent of the IGMP and Layer 3 configuration, so an IP interface does no t have to be attached to the VLAN, and IGMP does not have to be enabled or configured. IGMP snooping is enabled by default. T o disable it , use the command[...]

Layer 2 Swi tching 99 Software Release 2.6 .1 C613-02039 -00 REV A Figure 21: Example output from the SHOW IP IGMP command. IGMP Protocol ------------------------------------ --------------------------------- ------------- Status ........................... E nabled Default Query Interval ........... 1 25 secs Default Timeout Interval ......... 2 7[...]

100 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A T riggers The T rigger Facility can be used to automatically r un specified command scripts when particular triggers are activa ted. When a trigger is activated by an event, global parameters and parameters specific to the event are passed to the script that is run. [...]

Chapter 6 Layer 3 The A T -8800 Series Switch routes IP and IP multicasting traffic at wire speed between VLANs, and supports a number of other Layer 3 pr otocols. Once a VLAN has been created (see “ V irtua l Local Area Networks (VLANs) ” on page 72), the VLAN name can be used wherever a logical interface is requir ed in commands for configuri[...]

102 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Inter net Pr otocol (IP) The switch performs IP r outing at wir e speed between VLANs that have been configur ed as IP in terfaces. For e xample, to add t he admin VLAN as an IP interface, giving it an IP address of 192.168.163.39 in the su bnet 192.168.163.0, first [...]

Layer 3 103 Software Release 2.6 .1 C613-02039 -00 REV A Routing Information Pr otocol (RIP) Routing protocols such as RIPv1 and RIPv2 can be enabled on a VLAN. For example, to ena ble RIPv2 on the ad min VLAN, use th e command: ADD IP RIP INTERFACE=vlan11 SEND=RIP 2 RECEIVE=BOTH T o display information about RIP (Fig ur e 23 on page 103), use the [...]

104 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Figure 24: Example output from the SHOW IPX CIRCUIT command. AppleT alk T o create an AppleT alk port (interface) associated with the admin VLAN, use the command: ADD APPLE PORT INTERFACE= vlan11 T o disp lay information about t he ports config ured for AppleT alk (F[...]

Layer 3 105 Software Release 2.6 .1 C613-02039 -00 REV A Figure 25: Example output from the SHOW APPLE POR T command. Resour ce Reservation Pr otocol (RSVP) The Resource Reservation Pr otocol (RSVP) enables the r eceiver of a traffic flow to make the r esour ce re servations necessa ry to ensur e that the r eceiver obtains the desired QoS for the t[...]

[...]

Chapter 7 Maintenance and T r oubleshooting This Chapter If you are familiar with networking and switch operations, you may be able to diagnose and solve some pr oblems yourself. This chapter gives tips on how to: ■ start your switch (see “ How the Switch Starts Up ” on page 108). ■ avoid proble ms (see “ How to A void Problems ” on pag[...]

108 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A How the Switch Starts Up The sequence of operations that the s witch performs when it boots ar e: 1. Perform startup self te sts. 2. Perform the install override option. 3. Load the FLASH boot release as the INST ALL boot. 4. Inspect and check INST ALL information. 5[...]

Maintenance and T roubl eshooting 109 Software Release 2.6 .1 C613-02039 -00 REV A When you start the switch the FLASH boot release is always loaded first. The FLASH boot rele ase contains all the code r equir ed to obtain and chec k the INST ALL information. This first boot is known as the INST ALL boot. The INST ALL information is inspected and t[...]

110 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Backup switch If your network has many switches, yo u may wi sh to keep a ba ckup switch ready to replace any switch that malfunctions. When you upgrade the softwar e release or patch on the other switches in the network, upgrade the backup too. Store on it one curr [...]

Maintenance and T roubl eshooting 111 Software Release 2.6 .1 C613-02039 -00 REV A What to Do if Y ou Clear FLASH Memory Completely DO NOT clear the FLASH memory comple tely . The software release files ar e stored in FLASH, and clearing it woul d leave no softwar e to run the switch. If you accidentally do this, yo u will need to: 1. Boot with def[...]

112 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A What to Do if the PPP Link Disconnects Regularly If the device at the other end of the PPP link is not an A TR router or switch but is supplied by another vendor turn LQR (Link Quality Reporting) of f on PPP links (LQR=OFF) and instead use LCP Echo Request and Echo R[...]

Maintenance and T roubl eshooting 113 Software Release 2.6 .1 C613-02039 -00 REV A ■ T o get debugging output, enter the com mand: SHOW DEBUG ■ Depending on the pr oblem, the support personnel may also ask you for the output from the followin g commands (see the Monitoring and Fault Diagnosis section in the Op erations chapter , A T -8800 Serie[...]

114 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A T o set PING defaults, enter the command: SET PING [{[IPADDRESS=] ipadd |[IPXADDRESS=] network:sta tion | [APPLEADDRESS=] network.node }] [LENGTH = number ] [NUMBER={ number |CONTINUOUS}] [PATTERN = hexnum ] [{SIPADDRESS= ipadd |SIPXADDRESS= networ k:station |SAPPLEA[...]

Maintenance and T roubl eshooting 115 Software Release 2.6 .1 C613-02039 -00 REV A The “IP Packet Forwarding” field in the output should be set to “Enabled”. Refer to the documentation for the host TCP/IP software for more information about configuring a gateway . The host’s TCP/IP softwar e should be configur ed to use the Head Office sw[...]

116 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A T r oubleshooting IPX Configurations No Routes are Visible to the Remote Router 1. Check the PPP link T o check that the PPP link is active, enter the command: SHOW PPP The display should look like that shown in Fi gure 28 on page 1 16. The state of the IPX control p[...]

Maintenance and T roubl eshooting 117 Software Release 2.6 .1 C613-02039 -00 REV A 3. Check for file server on Remote Office switch Does the file server appear in the IPX service table of th e Remote Of fice switch? If the server does not appear in the table, its pres ence is not advertised to the local LAN. T o check this, enter the command: SHOW [...]

118 A T -8800 Series Switch User Guide Software Release 2.6.1 C613-02039- 00 REV A Any parameters not specified use the de faults configur ed with a previous invocation of the command: SET TRACE [[IPADDRESS=] ipadd ] [MAXTTL= number ] [ MINTTL= number ] [NUMBER= number ] [PORT= port-number ] [SCRE ENOUTPUT={YES|NO}] [SOURCE= ipadd ] [TIMEOUT= numbe[...]