Allied Telesis Rapier i AT-RP16Fi/SC manual

RAPIER SWITCH USER GUIDE Software Release 2.6.1[...]

2 Rapier Switch User Guide for Software Rele ase 2.6.1 Document Number C613-02025-00 REV C. Copyright © 2003 Allied T ele syn International, Corp. 960 Stewart Drive Suite B, Sunnyvale CA 94086, USA. All rights reserved. No part of this public ation may be repr oduced without prior written permission from Allied T elesyn. Allied T elesyn Internatio[...]

Contents CHAPTER 1 Introduction Introducing the Rapier Se ries Switch ................................ ............. ................ .... 7 Why Read this User G uide? ....... ................ ................ ................ ............. ........... 7 Where T o Find More Information ........................ ............. ................ .......[...]

4 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C The Diagnost ics Menu . ............. ................. ................ ................ ............... 36 Changing the P assword ............ ................. ................ ................ ............... 37 Context Sensitive GUI Help .... ................ ...............[...]

5 Software Release 2.6 .1 C613-02025 -00 REV C The Forwarding Process ............ ................. ................ ................ ............... 84 Layer 2 Filtering ..................... ................ ................ ................. ............ ...... 85 The Egress Rules . ................ ................ ................ ...........[...]

[...]

Chapter 1 Intr oduction Intr oducing the Rapier Series Switch Congratulations on purchasing the Rapier Seri es Layer 3 Fast Ethernet Switch, which combines wir e speed Layer 2 and Layer 3 IP switching with a power ful multiprotocol r outing softwar e suite. This guide introduces the Rapier Series Switch and wil l guide you thr ough the most common [...]

8 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C This user guide is or ganised into the following chapters: ■ Chapter 1, Introduction gives an overview of the switch featur es and of the documentation supplied with your switch. ■ Chapter 2, Getting Started with the Com mand Line Interface (CLI) descri bes how to gain access[...]

Introduction 9 Software Release 2.6 .1 C613-02025 -00 REV C ■ Rapier Series Switch Docu mentation and T ools CD-ROM The Rapier Series Switch Document ation Set in Adobe Acr obat PDF format is bundled with every switch—the complete refer ence to inst alling, configuring and managing the switch, includi ng detailed descriptions of all commands. T[...]

10 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Management Features The following featur es enhance management of the switch: ■ A sophisticated and configura ble event logging facility for monitoring and alarm notification to single or multiple management centres. ■ T riggers for automatic and timed execution of commands [...]

Introduction 11 Software Release 2.6 .1 C613-02025 -00 REV C ■ IPv6 multicast routing support, including Multicast Listener Discovery (MLDv2) and Pr otocol Independent Multicast (PIM) Sparse and Dense Modes. ■ OSPF , RIP (IP and Novell®), SAP (Novell®), EGP and BGP routing protocols. ■ ARP , Pr oxy ARP and Inverse ARP address resolution pro[...]

12 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C ■ Demand IPX ■ IPX/SPX Spoofing ■ IPX Filtering (not between swi tch ports) ■ AppleT al k ■ Resource Reservation Pr otocol (RSVP) ■ BGP-4 ■ Load balancer Most softwar e features that requir e a special featur e licence ar e bundled into one of the foll owing specia[...]

Chapter 2 Getting Started with the Command Line Interface (CLI) This Chapter This chapter describes how to access the switch’s CLI, and provides basic information about configuring the sw itch, including how to: ■ Physically connect a terminal or PC to the switch (see “ Connecting a T erminal or PC ” on page 14 and the Quick Inst all Guide)[...]

14 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Connecting a T erminal or PC The first thing to do after physically inst alling the switch is to start a terminal or terminal emulation session to access the switch. Then you can use the command line interface (CLI) to configur e the switch. If you wis h to configure the switch [...]

Getting Started with th e Command Li ne Interface (CLI) 15 Software Release 2.6 .1 C613-02025 -00 REV C If a modem is connected, configur e the sw itch to make and/or accept calls via the modem. T o set the CDCONTROL par ameter to “CONNECT” and the FLOW parameter to “HARDW ARE”, enter the command: SET ASYN CDCONTROL=CONNECT FLOW=HARD WARE I[...]

16 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C If IP addresses on your LAN are assi gned dyn amically by DHCP , you can set the switch to request an IP address from the DHCP server , using the commands: ADD IP INTERFACE=vlan1 IPADDRESS=DHC P ENABLE IP REMOTEASSIGN Y ou do not need to set the MASK parameter because the subnet[...]

Getting Started with th e Command Li ne Interface (CLI) 17 Software Release 2.6 .1 C613-02025 -00 REV C T o add a static route, enter the command: ADD IP ROUTE= ipadd INTERFACE= interface NEXTHOP= ipadd [CIRCUIT= miox-circuit ] [DLCI= dlci ] [MASK= ipadd ][METRIC=1..16] [ METRIC1=1..16] [METRIC2=1..65535][POLICY=0..7] [PREF ERENCE=0..65535] T o dis[...]

18 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C ■ Do not use your birth date, str eet number or telephone number . ■ Do not write down y our passwor d anywher e. Make sure you remember the new passw o rd creat ed as you cannot retri eve a lost password. Recovery of a ccess to the switch is complex. Once you have logged in[...]

Getting Started with th e Command Li ne Interface (CLI) 19 Software Release 2.6 .1 C613-02025 -00 REV C Aliases The command line interface supports aliases. An alias is a short name for an often-used longer char acter sequence. When the user pr esses [Enter] to execute the command line, the command pr ocesso r first checks the command line for alia[...]

20 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Enabling Special Featur e Licences Y ou must enab le the special feature lice nce you have purchased before you can use the licenced featur es. Y ou will need the passwor d provided by your authorised distributor or r eseller. The advanced upgrade licence and passwor d are dif f[...]

Chapter 3 Getting Started with the Graphical User Interface (GUI) This Chapter This chapter describes how to access th e switch’s HTTP-based Graphical User Interface (GUI), and provides basic information about using the GUI, including: ■ What is the GUI? • an intr oduction to the Graphical User Interface ■ Accessing the switch via the GUI: [...]

22 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C What is the GUI? The GUI (Graphical User Interface) is a web-based device management tool, designed to make it easier to configure and monitor the switch. The GUI provides an alternative to the CLI (Comma nd Line Interface). Its purpose is to make complicated tasks simpler and r[...]

Getting Started with the Grap hical User Interface (GUI) 23 Software Release 2.6 .1 C613-02025 -00 REV C T o enabl e JavaScript in Netscape 6.2 . x : 1. From the E dit menu, select Prefer ence 2. Select the Advanced menu option. 3. Ensure that the “Enable JavaScript for Naviga tor” checkbox is checked. The minimum screen resolution on the PC is[...]

24 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Establishing a Connec tion to the Switch Before you start, consider how the switch fits into your network. If you are installing a new switch, consider w het her you want to configure it before deploying it into the LAN, or want to configure it in si tu . If you want to acce ss [...]

Getting Started with the Grap hical User Interface (GUI) 25 Software Release 2.6 .1 C613-02025 -00 REV C Option 1: Configuring the Switch before Installation Use this procedur e if: ■ Y ou want to configure the switch before installing it i n your LAN. ■ Y ou will be installing the switch at a remote of fice o r a customer site and want to conf[...]

26 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C 9. At the login prompt, enter the user name and passwor d The default username is manager: User Name: manager Password: friend The System Statu s or System Har dwar e Details page is dis played (Figur e 6 on page 31). Select options fr om the sidebar menu to configur e and manag[...]

Getting Started with the Grap hical User Interface (GUI) 27 Software Release 2.6 .1 C613-02025 -00 REV C Y ou can br owse to the switch thro ugh any VLAN , a s l o n g a s y o u gi v e t h a t VL A N a n I P address (see be low). These instructions assume you will use vlan1. The switch ports all belong to vlan1 by default. 3. Access the switch’ s[...]

28 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C 10. Point your web browser at the LAN interface’ s IP address For normal access, point your web br owser to http:// ip-address For secure access, point your web browser to https:// ip-address where ip-addr ess is the interface’s IP add ress. 11. At the login prompt, enter th[...]

Getting Started with the Grap hical User Interface (GUI) 29 Software Release 2.6 .1 C613-02025 -00 REV C 4. Browse to the switch For normal access, point your web br owser to http:// ip-address where ip-addr ess is the interface’s IP add ress. T o access the switch secur ely if SSL (Secure Sockets Layer) has been configur ed on the inter face, po[...]

30 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C 3. Enable system security T o enable system security , use the command: ENABLE SYSTEM SECURITY 4. Create an RSA key pair for this switch. T o create an RSA key pair , use the command: CREATE ENCO KEY=0 TYPE=RSA LENGTH=102 4 5. Set the s witch’ s distingu ished na me. T o set t[...]

Getting Started with the Grap hical User Interface (GUI) 31 Software Release 2.6 .1 C613-02025 -00 REV C 10. Configure an IP interface to run S SL over T o configure an IP interface that SSL will be run over , first enable IP using the command: ENABLE IP To m a k e VLAN1 the IP interface, and 172 .30.1.105 the interface’s IP address, use the comm[...]

32 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Using the GUI: Navigation and Featur es The GUI consists of a large number of pages , which you navigate betw een using the menu on the left of the br owser window . This section de scribes how to use the GUI, and gives an overview of its functionality . The Configuration Menu Y[...]

Getting Started with the Grap hical User Interface (GUI) 33 Software Release 2.6 .1 C613-02025 -00 REV C T o delete or destroy an item, select it by clicking on the op tion button at the beginning of its entry in the selection table. Then click the Remove button. Only one person can configure a particular switch with the GUI at a time, to avoid cla[...]

34 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Figure 8: An example of a po pup “add” page Figure 9: An example of a po pup “modify” page Editable Fields GUI pages allow you to enter values or select options through a range of field types. These in clude: • text fields, to enter character string s or numbers, espec[...]

Getting Started with the Grap hical User Interface (GUI) 35 Software Release 2.6 .1 C613-02025 -00 REV C • radio button lists, to choose one of a set of mutually-exclusive options • checkboxes, to enable or disable features. Ports Graphic Pages on which you can select switch ports use a Ports graphic - a vis ual repr esentation of the switch po[...]

36 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C The Management Menu Y ou can use the GUI to manage the switch itself, includ ing: • cr eating user accounts an d enabling system securi ty • cr eating and editing files • backing fi les up to the switch’s Flash memory or to a PC or TF TP server • r estoring the switch?[...]

Getting Started with the Grap hical User Interface (GUI) 37 Software Release 2.6 .1 C613-02025 -00 REV C • displaying the contents of th e switch’s file system and how much memory is used and available. Y ou can also delete files • an interface to the switch’s command line interface, allowing you to enter CLI commands. Changing the Passwor [...]

38 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Combining GUI and CLI Configuration Y ou can alternate between the GUI and the CLI without difficulty . Note that GUI pages will not automatically refresh to reflect changes in the CLI configuration; you must reload the relevant page (for example, by clicking the Refresh button [...]

Getting Started with the Grap hical User Interface (GUI) 39 Software Release 2.6 .1 C613-02025 -00 REV C If you have multiple valid r esource files an d rele ases stor ed on the switch, use the SET INST ALL command to change the release and resour ce file the switch uses (see below). 2. Load the new file onto the switch Download the GUI resource fi[...]

40 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C T r oubleshooting The GUI resour ce file has an 8-di git name, with the file extension rsc (for example, d_r48e03.rsc ). T o check which r esour ce files are present on the switch, use the command: SHOW FILE T o see which GUI r esource fi le the switch is curr ently using, and w[...]

Getting Started with the Grap hical User Interface (GUI) 41 Software Release 2.6 .1 C613-02025 -00 REV C • The IP addr ess of the switch’s interface may be incorrect. T o corr ect this, access the CLI and use the IP ADDR ESS parameter of command SE T IP INTERF ACE • The IP addr ess of the switch’s defaul t gateway may be incorrect, so that [...]

42 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C ■ Check that the switch is passing the corr ect DNS information to hosts on the LAN, if the switch is a DHCP server . If the switch acting as a DHCP client as well, and ther efor e is passing on DNS inf ormation from another DHCP server , check that this DHCP server is providi[...]

Getting Started with the Grap hical User Interface (GUI) 43 Software Release 2.6 .1 C613-02025 -00 REV C Problem The switch’ s time is incorre ct, even though it assigns the correct time to devices on the LAN. Solution The UTC offset is pr obably incorrec t, or needs to be adjusted for the beginning or end of summer time. T o correct this, select[...]

[...]

Chapter 4 Operating the switch This Chapter This chapter introduces basic oper ations on the switch, including: ■ “ User Accounts and Privileges ” on page 45 ■ “ Normal Mode and Security Mode ” on page 47 ■ “ Remote Management ” on page 50 ■ “ Storing Files in FLASH Memory ” on page 51 ■ “ Using Scripts ” on page 52 ?[...]

46 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C In normal mode, a user with manage r privilege can create and delete accounts for users with any of these privilege levels. User s and passwor ds are managed by the User Au thentication Faci lity . Users and passwor ds ar e authenticate d using an internal database called the Us[...]

Operating the switch 47 Software Release 2.6 .1 C613-02025 -00 REV C See the Operations chapter in the Rapier Seri es Switch Software Reference for: ■ More information about managing and using accounts with user , manager and security officer privileges ■ A full list of command s that requir e security of ficer pr ivilege whe n the switch is in[...]

48 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C When the switch is in security mode, a us er with security of ficer privilege is the only person who can execute commands which af fect switch security . T a ble 5 on page 48 lists commands that only a se curity officer can exe cute when the switch is in security mode. A complet[...]

Operating the switch 49 Software Release 2.6 .1 C613-02025 -00 REV C DESTROY SA DESTROY ST AR DISABLE FEA TURE DISABLE IPSEC DISABLE ISAKMP DISABLE PKI DEBUG DISABLE SA DISABLE SSH DISABLE USER DUMP EDIT ENABLE FEA TURE ENABLE IPSEC ENABLE ISAKMP ENABLE PKI DEBUG ENABLE PPP DEBUG ENABLE PPP TEMPLA TE DEBUG ENABLE SA ENABLE SNMP ENABLE SSH ENABLE ST[...]

50 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Remote Management Y ou can manage remote switches as easily as you manage the local s witch a terminal is connected to. From a termin al connected to any port (with either USER or MANAGER privilege), enter the command: TELNET ipadd to T elnet to the remote switch, specifying the[...]

Operating the switch 51 Software Release 2.6 .1 C613-02025 -00 REV C Storing Files in FLASH Memory When you purchase the switch, the switch softwar e re lease, the online help files, and a de fault configuration file are stor ed in FLASH memory , where they are saved even if the switch is powered down. Y ou will use the FLASH me mo r y t o st ore u[...]

52 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Using Scripts When you star t or re start the swi tch, or when it a utomatically r estart s, it executes the configuration command s in the boot script. A boot script is a text file containing a sequence of standar d commands that the switch executes at startup. The default b oo[...]

Operating the switch 53 Software Release 2.6 .1 C613-02025 -00 REV C Storing Multiple Scripts Y ou can store multiple configuration scripts on the switch. This allows you to test new configuration scripts once , before setting them as the default configuration. For example, to test the new configuration script test.cfg , enter the command: RESTART [...]

54 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Y ou may see files on your switch with file name extensions not li sted in T able 6 on page 53. If you require mor e information about file types and file name extensions, contact your author ised distributor or reselle r. Do not change the header in a release or patch file. At [...]

Operating the switch 55 Software Release 2.6 .1 C613-02025 -00 REV C T o load a file onto the switch using the HTTP protocol, enter the command: LOAD [METHOD={HTTP|WEB|WWW}] [DELAY= delay ] [DESTFILE= destfilename ] [DESTINATION= BOOTBLOCK|FLASH}] [HTTPPROXY={ hostname | ipadd } [PASSWORD=passwor d] [PROXYPORT=1..65535]] [SERVER={ hostna me | ipadd[...]

56 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C T o load a patch fi le 1. Configure the LOADER. Set the LOADER module with defaults to make the pr ocess of downloading files in future simpler . SET LOADER METHOD=HTTP SERVER=192.168 .1.1 DESTINATION=FLASH 2. Download the patch file. Download the patch file onto the switch, usi[...]

Operating the switch 57 Software Release 2.6 .1 C613-02025 -00 REV C 2. Upload the conf ig uration file. Upload the configuration file fr om the switch into the TF TP directory of the TF TP server on the network, using the defaults set above. UPLOAD FILE= filename.cfg Monitor the load progr ess. SHOW LOAD When the upload is complete, check that the[...]

58 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C When the switch r eboots, it checks the i nstall information in a s trict or der: • Firstly , the switch checks the temporar y install. If a temporary ins tall is specified, the swit ch loads it into RA M and runs it. At the same time, it deletes the temporary install informat[...]

Operating the switch 59 Software Release 2.6 .1 C613-02025 -00 REV C Example: Upgrade to a Ne w Softwar e Release Using TF TP This example assume s the switch is co rrectly configured to allow TF TP to function. This means that IP is conf igured and the switch is able to communicate with the designated TF TP se rver . The TF TP server is assumed to[...]

60 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C compatible, so your curr ent configuration should run with little or no modifications on the later r elease. CREATE CONFIG= myconfig.cfg SET CONFIG= myconfig.cfg The SET CONFIG information survives the release update. Reboot the switch. RESTART REBOOT The switch reboots, loading[...]

Operating the switch 61 Software Release 2.6 .1 C613-02025 -00 REV C The switch reboots, loading the new patch file and the specified configuration. Check that the s witch operates corr ectly with the new patch file. 3. Make the patch part of the defau lt (permanent) releas e. If the switch operates corr ectly wi th the new patch, make the r elease[...]

62 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C SNMP and MIBs Y ou can remotely monitor some features o f the switch using Simple Network Management Protocol (SNMP). For information about the MIBs supported by the switch, see Appendix C: SNMP MIBs in the Rapier Series Switch Software Refer ence. The SNMP agent is disabled by [...]

Operating the switch 63 Software Release 2.6 .1 C613-02025 -00 REV C ■ How to use LDAP to load PKI certif icates and CRLs onto your s witch. ■ Switch Startup Operations ■ How to use FLASH compaction to regain storage space on the switch. Read “ Warn ing about FLAS H memory ” on page 12 befor e you attempt to do this. ■ How to set aliase[...]

[...]

Layer 2 Swi tching 65 Software Release 2.6 .1 C613-02025 -00 REV C Chapter 5 Layer 2 Switching This section descri bes the Layer 2 switching features on the Rapier Serie s Switch, and how to configure them. Switch Ports Each Ethernet switch port is unique ly identified by a port number . The switch supports a number of featur es at the physic al le[...]

66 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Resetting Ethernet ports at the hardware level discar ds all frames queued for reception or transmission on the port, and r estarts autonegotiation of port speed and duplex mode. Ports ar e reset using the command: RESET SWITCH PORT={ port-list |ALL} [C OUNTER] T o display infor[...]

Layer 2 Swi tching 67 Software Release 2.6 .1 C613-02025 -00 REV C Actual speed/duplex The port speed and duplex mode that this port is actually running at. A combination of a speed (one of “10 Mbps”, “100 Mbps” or “1 000 Mbps”) and a d uplex mode (one of “half duplex” or “full duplex”). Configured master/slave mode The mas ter/[...]

68 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Autonegotiation of Port Speed and Duplex Mode Each of the switch ports can operate at either 10 Mbps or 100 Mbps, in either full duplex or half duple x mode. In full duplex mode a port can transmit and receive data simultaneously , while in ha lf duplex mode the port can either [...]

Layer 2 Swi tching 69 Software Release 2.6 .1 C613-02025 -00 REV C The SHOW SWITCH POR T command displays the port speed and duplex mode settings. Port T runking Port trunking, also known as port bund ling or link aggregation, allows a number of ports to be configur ed to jo in together to make a single logical connection of higher bandwidth. This [...]

70 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C All the ports in a tr unk gr oup must belong to the same VLAN. Ports in a tr unk group can be added to other VLANs, either as individual ports or as an entire group. A port in a trunk group cannot be deleted fr om any of the VLAN(s) to which the whole trunk group belongs, unless[...]

Layer 2 Swi tching 71 Software Release 2.6 .1 C613-02025 -00 REV C Packet Storm Protection The packet storm pr otection feature al lows the user to set limits on the reception rate of br oadcast, multicast and destina tion lookup failure packets. The software allows separate limits to be set for each port, beyond which each of the differ ent packet[...]

72 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C the BCLIMIT parameter description for important information about packet rate limiting. The default value for this parameter is NONE. If packet s torm protection limits ar e set on the swit ch, the POR T parameter must specify complete processing blocks. The ability of the switc[...]

Layer 2 Swi tching 73 Software Release 2.6 .1 C613-02025 -00 REV C T o send packets that match particular criteri a to the mirror port, first creat e a classifier o r classifiers us ing the command: CREATE CLASSIFIER Then crea te a har dware fi lter with the ACTION parameter set to SENDMIRROR, using the command: ADD SWITCH HWFILTER CLASSIFIER= clas[...]

74 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Figure 13: Example output from the SHOW SWITCH PORT INTRUSION command. A switch port can be manually locked be fore it reaches the learning limit, by using the command: ACTIVATE SWITCH PORT={ port-list |ALL} LOCK Ad dr e ss es c a n b e m a n u a l l y a d d e d t o a po r t l o[...]

Layer 2 Swi tching 75 Software Release 2.6 .1 C613-02025 -00 REV C Devices that are members of the same VLAN only exchange data with each other thr ough the switch’s switching ca pabilities. T o exchange data between devices in separate VLANs, the s witch’s routi ng capabilities are used. The switch passes VLAN status informati on, indicating w[...]

76 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Figure 14: Format of user priori ty and VLAN data in an Ether net frame. Ethernet packets which contain a VLAN tag are r eferred to as tagged frames, and switch ports that transmit ta gged fra mes are r eferred to as tagged ports . Ethernet packets which do not contain the VLAN [...]

Layer 2 Swi tching 77 Software Release 2.6 .1 C613-02025 -00 REV C Every frame admitted by the switch has a VID associated with it. If a frame arrives on a tagged port, the associated VID is determined from the VLAN tag the frame had when it arrived. If a fram e arrives on an untagged port, it is associated with the VID of the VLAN fo r which the i[...]

78 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Figure 15: VLANs with tagged ports. VLAN Membership of Untagged Packets A VLAN that does not send any VLAN-ta gged frames is a logical gr ouping of ports. All untagged traf fi c arri ving at those ports belongs to that VLAN. VLANs based on untagged ports are li mited, because ea[...]

Layer 2 Swi tching 79 Software Release 2.6 .1 C613-02025 -00 REV C If the network includes VLANs that do not need to share network resour ces or span several switches, VLAN member ship can useful ly be based on untagged ports. Otherwise, VLAN membership s hould be determined by tagging (see “ VLAN T agging ” on page 75). Figure 16 on page 79 sh[...]

80 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C T o add tagged ports to a VLAN, use the command: ADD VLAN={ vlan-name |1..4094} PORT={ port-list |ALL} FRAME=TAGGED A port can be tagged for any number of VLANs. T o add untagged ports to a VLAN, use the command: ADD VLAN={ vlan-name |1..4094} PORT={ port-list |ALL} [FRAME=UNTAG[...]

Layer 2 Swi tching 81 Software Release 2.6 .1 C613-02025 -00 REV C Summary of VLAN tagging rules When designing a VLAN and adding ports to VLANs, the foll owing rules apply . 1. Each port, except for the mir ror port, mus t belong to at least one static VLAN. By default, a port is an untagged member of the default VLAN. 2. A port can be untagged fo[...]

82 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Generic VLAN Registration Pr otocol (GVRP) The GARP application GVRP allows switches in a network to dy namically share VLAN membership information, to r educe the need for statically configuring all VLAN membership change s on all switches in a network. See the Generic Attribut[...]

Layer 2 Swi tching 83 Software Release 2.6 .1 C613-02025 -00 REV C The default settings for the Ingr ess Rules ar e to Admit All Frames, and for Ingress Filtering to be OFF . This means that if no VLAN configuration has be en done, all incoming frames pass on to the Le arning Pr ocess, r egardless of whether or not they are VLAN tagg ed. The parame[...]

84 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C If the frame’s sour ce addr ess is not alr e ady in the Forwar ding Database for the VLAN, the address i s added and an ageing timer f or that entry is started. If the frame’s source address is alr eady in th e Forwarding Database, the ageing timer for that entry is restarte[...]

Layer 2 Swi tching 85 Software Release 2.6 .1 C613-02025 -00 REV C the switch floods the fr ame on all ports in the VLAN except the port on which the frame was rece ived. If the destination addre ss is found, the switch discar ds the frame if the port is not in the STP ‘Forwar ding’ state, if the destination address is on the same port as the s[...]

86 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Figure 17: Example output from the SHOW SWITCH FIL TER command. For each VLAN, the destination MAC address of a frame to be forwarded is checked against the Forwar ding Database. If ther e is no entry for the destination addr ess and VLAN, the f rame is transmitte d on all ports[...]

Layer 2 Swi tching 87 Software Release 2.6 .1 C613-02025 -00 REV C The Egr ess Rules Once the Forwardin g Process has dete rmined which ports and transm ission queues to forward a frame from, the Egress Rules for each por t determine whether or not the outgoing frame is VLAN-tagged with its numerica l VLAN Identifier (VID). (See “ V irtual Local [...]

88 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C T o display the mapping of user prio rity to QOS egr ess queues, use the command: SHOW SWITCH QOS Figure 18: Example output from the SHOW SWITCH QOS command Rapier i Series s witches include full QoS functionality , including ■ policies, to provide a QoS configuration for a po[...]

Layer 2 Swi tching 89 Software Release 2.6 .1 C613-02025 -00 REV C Spanning T r ee Pr otocol (STP) The Spanning T ree Pr otocol (STP) makes it poss ible to automatically disabl e redundant paths in a network to avoid loops, and enable them when a fault in the network means they are nee ded to keep tr affic flowing. A sequence of LANs and switches m[...]

90 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C A spanning tree r unning in standar d mode can take up to one mi nute to re build after a topology or configuration chan ge. The Rapid Spanning T ree algorithm provides for a mor e rapid r ecovery of connectivity following the failure of a bridge, bridge port, or a LAN. For info[...]

Layer 2 Swi tching 91 Software Release 2.6 .1 C613-02025 -00 REV C T o specify whether the STP will operat e in ST ANDARD mode or RAPID mode, use the command: SET STP={ stp-name |ALL} [MODE={STANDARD|RAPID} ] [ other parameters ] The default is ST ANDARD. If the mode is changed while the algorithm is running then the STP is r e-initialised. T o dis[...]

92 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Configuring STP By default, the switch has one defau lt STP which cannot be destr oyed. In most situations this defaul t STP will suf fice. By default, all VLANs, and therefor e all ports, belong to the default STP . T o add or delete a VLAN and all the ports belong ing to it fr[...]

Layer 2 Swi tching 93 Software Release 2.6 .1 C613-02025 -00 REV C switches. The Bridge Identifier parame ter is used in all configuration Spanni ng T ree Protocol packets transmitted by th e switch. The first tw o octets, spec ified by the PRIORITY pa rameter , determine th e switch’s priority for becoming the root bridge or a designated bridge [...]

94 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Figure 20: Example output from the SHOW STP command. STP Information ---------------------------------------- -------------------- Name .................. grey Mode .................. Rapid RSTP Type ............. Normal VLAN members .......... vlan4 (4) Status ................ [...]

Layer 2 Swi tching 95 Software Release 2.6 .1 C613-02025 -00 REV C T able 18: Parameters in the outp ut of the SHOW STP c ommand . Parameter Meaning STP Name The name of the Spanning T ree Pr otocol entity . Mode Whether STP is running in standard, or rapid mode. RSTP T ype Whether RSTP is operating normally , or as STP compatible. In STP compatibl[...]

96 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C The various parameters used by the Spa nning T ree Algorithm for the specifie d ports, or all ports within the specified STP , or all STPs, are set with th e SET STP POR T command: SET STP={ stp-name |ALL} PORT={ port-list |ALL} A port can belong to a single STP , except on the [...]

Layer 2 Swi tching 97 Software Release 2.6 .1 C613-02025 -00 REV C Each port also has a path cost, which is used if the port is the r oot port for the STP on the switch. The path cost is added to the r oot path cost field in configuration messages received on the po rt to determine the total cost of the path to the root bridge. The default P A THCO[...]

98 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Figure 21: Example output from the SHOW STP POR T command. STP Port Information ---------------------------------------- -------------------- STP ..................... grey STP Status ............ ON Port .................. 3 RSTP Port Role ...... Disabled State ............... [...]

Layer 2 Swi tching 99 Software Release 2.6 .1 C613-02025 -00 REV C The spanning tre e algorithm can be recalc ulated at any time, and all timers and counters be initialised, us ing the command: RESET STP={ stpname |ALL} T o show STP counters, use the command: SHOW STP[={ stpname |ALL}] COUNTER T able 19: Parameters displayed in the ou tput of the S[...]

100 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Figure 22: Example output from the SHOW STP COUNTER command STP Counters --------------------------------- --------------------------- STP Name: default Receive: Tra nsmit: Total STP Packets 0 Total STP Packets 1677 Configuration BPDU 0 Configuratio n BPDU 0 TCN BPDU 0 TCN BPDU[...]

Layer 2 Swi tching 101 Software Release 2.6 .1 C613-02025 -00 REV C If necessary , all the ST P configuration th at users have created on the switch can be re m o ve d , s o th a t a ll S T P s e x c ep t th e default STP are destr oyed, and all other defaults are r estore d, using the command: PURGE STP The PURGE STP command sh ould be used wi th [...]

102 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C out all ports. IGM P snooping is in dependent of the IGMP and Layer 3 configuration, so an IP interface does no t have to be attached to the VLAN, and IGMP does not have to be enabled or configur ed. IGMP snooping is enabled by default. T o disable it, use the command: DISABLE [...]

Layer 2 Swi tching 103 Software Release 2.6 .1 C613-02025 -00 REV C Figure 23: Example output from the SHOW IP IGMP command. IGMP Protocol ------------------------------------ ----------------------------------------- ----- Status ........................... E nabled Default Query Interval ........... 1 25 secs Default Timeout Interval ......... 2 [...]

104 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C T riggers The T rigger Facility can be used to automatically r un specified command scripts when particular triggers are activa ted. When a tr igger is activated by an event, global parameters and parameters specific to the event are passed to the script that is run. For a full[...]

Chapter 6 Layer 3 The Rapier Series Switch r outes IP and IP multicasting traf fic at wir e speed between VLANs, and supports a number of other Layer 3 pr otocols. Once a VLAN has been created (see “ V irtual Local Ar ea Networks (VLANs) ” on page 74), the VLAN name can be used wherever a logical interface is requir ed in commands for configuri[...]

106 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Inter net Protocol (IP) The switch performs IP r outing at wir e speed between VLANs that have been configur ed as IP int erfaces. For exampl e, to add the admin VLAN as an I P interface, giving it an IP address of 192.168.163.39 in the su bnet 192.168.163.0, first enable IP us[...]

Layer 3 107 Software Release 2.6 .1 C613-02025 -00 REV C Routing Information Pr otocol (RIP) Routing protocols such as RIPv1 and RIPv2 can be enabled on a VLAN. For example, to ena ble RIPv2 on the ad min VLAN, use th e command: ADD IP RIP INTERFACE=vlan11 SEND=RIP 2 RECEIVE=BOTH T o display information about RIP (Fig ur e 25 on page 107), use the [...]

108 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Figure 26: Example output from the SHOW IPX CIRCUIT command. AppleT alk AppleT alk is enabled with a sp ecial feature lice nse. T o obta in a speci al feature license contact an Allied T elesyn auth orised distributor or reseller. T o create an AppleT alk port (interface) assoc[...]

Layer 3 109 Software Release 2.6 .1 C613-02025 -00 REV C Figure 27: Example output from the SHOW APPLE POR T command. Resour ce Reservation Pr otocol (RSVP) RSVP is enabled with a special featu re license. T o obtain a special feature license contact an Allied T elesyn authorised distributor or reseller. The Resource Reservation Pr otocol (RSVP) en[...]

[...]

Chapter 7 Maintenance and T r oubleshooting This Chapter If you are familiar with networking and switch operations, you may be able to diagnose and solve some problems yourself. This chapter gives tips on how to: ■ start your switch (see “ How the Switch Starts Up ” on page 1 12). ■ avoid proble ms (see “ How to A void Problems ” on pag[...]

112 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C How the Switch Starts Up The sequence of operations that the s witch performs when it boots ar e: 1. Perform startup self te sts. 2. Perform the install override option. 3. Load the EPROM release as the INST A LL boot. 4. Inspect and check INST ALL information. 5. Load the requ[...]

Maintenance and T roubles hooting 113 Software Release 2.6 .1 C613-02025 -00 REV C When you star t the switch t he EPROM r e lease is always loaded first. The EPROM re lease contains all the code r equir ed to obtain and check the INST ALL information. This first boot is known as the INST ALL boot. The INST ALL information is inspected and the swit[...]

114 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Backup switch If your network has many switches, yo u may wi sh to keep a back up switch ready to replace any switch that malfunctions. When you upgrade the software release or patch on the other switches in the network, upgrade the backup too. Store on it one curr ent config s[...]

Maintenance and T roubles hooting 115 Software Release 2.6 .1 C613-02025 -00 REV C What to Do if Y ou Clear FLASH Memory Completely DO NOT clear the FLASH memory comple tely . The software release files are stored in FLASH, and clearing it woul d leave no softwar e to run the switch. If you accidentally do this, you will need to: 1. Boot with def a[...]

116 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C What T o Do if ISDN Fails to Connect Make sure the system territory is set to the country or re gion in which your switch is located. This is important be cause dif fer ent countries use variations on the ISDN pr otocols, and the system territory setting on the switch e nsures [...]

Maintenance and T roubles hooting 117 Software Release 2.6 .1 C613-02025 -00 REV C Y ou ca n re se t p a ss wo rd s f or a cc ou n ts w i th MANAGER privilege wit h the same command, provide d the manager can lo gin to at least one account wi th MANAGER privilege. If you requir e further assi stance contact your authorised distributor or r eseller.[...]

118 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C Resetting Switch Defaults T o restart the switch at any time with no configuration, enter the command: RESTART SWITCH CONFIG=NONE If boot.cfg has changed, to set it back to the default configuration by saving the default dynamic configuration to the boot.cfg file, enter the com[...]

Maintenance and T roubles hooting 119 Software Release 2.6 .1 C613-02025 -00 REV C If PING to the end destination fails, PING intermediate network address es. If you can successfully PING some network addr esses, and not others, you can deduce which link in the network is down. Note that if Network Address T ranslation (N A T) is configured on the [...]

120 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C 5. Contact your authorised distri butor or reseller for assistance If the route still does not appear , co ntact your authorised distributor or resel ler for assistance. T elnet F ails 1. If T elnet to switch fails Check that the IP addr ess you used matches the one assigned to[...]

Maintenance and T roubles hooting 121 Software Release 2.6 .1 C613-02025 -00 REV C In Microsoft® W i ndows™ 2000, click Setting s → Control Pane l → Network and Dial-up Connectio ns → Local Area Connecti on → Properties . Select Internet connection (TCP/IP) and click Properties . Click Obtain an IP addr ess automatically . 3. Check that [...]

122 Rapier Switch User Guide Software Release 2.6.1 C613-02025-00 REV C configuration of the workstation or file se rver . Check with your Novell network administrator . 2. Check NET .CFG file T ake care with the works tation NET .CFG file. Always specify the encapsulation (frame) as diff erent LA N card drivers use diff erent default encapsulation[...]

Maintenance and T roubles hooting 123 Software Release 2.6 .1 C613-02025 -00 REV C Using T race Route for IP T raf fic Y ou can use trace route to discover the r oute that packets pass between two systems running the IP pr otocol. T race route sends an ini tial UDP packets with the T ime T o Live (TTL) field in the IP he ader set starting at 1. The[...]