Siemens S223 manual

User Manual SURP ASS hiD 6615 S223/S323 R1.5 UMN:CLI A50010-Y3-C150-2-7619[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 2 A50010-Y3-C150-2-7619 Important Notice on Product Safety Elevated voltages are inevitably presen t at specific points in thi s electrical equipment. Some of the parts may also have elevated operating t emperatures. Non-observance of these conditions and the safety instructions can [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 3 Reason for Up date Summary: System softwa re upgrade added Det ails: Chapter/Section Reason for Update 1 1 System software upgrade added Issue History Issue Number Date of Issue Reason for Update 01 07/2006 Initial release 02 08/2006 System software upgrade added[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 4 A50010-Y3-C150-2-7619 This document consist s of a tot al 381 pa ges. All pages are issue 2. Content s 1 Introduction ....................................................................................................... 20 1.1 Audience ............................................[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 5 4.2.2 Authentication Interface ..................................................................................... 50 4.2.3 Primary Authentic ation Method ......................................................................... 50 4.2.4 RADIUS Server ....................[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 6 A50010-Y3-C150-2-7619 4.5.4 Applying Def ault V alue...................................................................................... 70 4.5.5 Displaying 802.1x Configuration ....................................................................... 70 4.5.6 802.1x User Authentic[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 7 6.3.2 IP ICMP Sour ce-Routing ................................................................................... 97 6.3.3 T racing Packet Route ........................................................................................ 98 6.3.4 Displaying User Conne cting to [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 8 A50010-Y3-C150-2-7619 7.3.3 Basic TL V ........................................................................................................ 123 7.3.4 LLDP Message ............................................................................................... 124 7.3.5 Interval [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 9 7.6.3.1 Scheduling Algorithm ....................................................................................... 147 7.6.3.2 Qos Weight ...................................................................................................... 149 7.6.3.3 802.1p Priory-to- q[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 10 A50010-Y3-C150-2-7619 8.1 VLAN .............................................................................................................. 178 8.1.1 Port-Based VLAN ........................................................................................... 179 8.1.1.1 Creating [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 1 1 8.3.5.9 Displaying Conf iguration ................................................................................. 216 8.3.6 Configuring PVSTP/PVRSTP .......................................................................... 217 8.3.6.1 Activating PVST P/PVRSTP .........[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 12 A50010-Y3-C150-2-7619 8.8.1.16 DHCP Packet S tatistics .................................................................................. 245 8.8.1.17 Displaying DHCP Pool Configuration ............................................................. 246 8.8.2 DHCP Address Allocati o[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 13 8.9.3.2 RM Node ......................................................................................................... 268 8.9.3.3 Port of ER P domain ......................................................................................... 268 8.9.3.4 Protected VLAN ..[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 14 A50010-Y3-C150-2-7619 9.2.5.5 Mrouter Port .................................................................................................... 294 9.2.5.6 Multicast TC N Floodi ng .................................................................................. 295 9.2.6 IGMP v3[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 15 10.1.1 Basic Config uration ......................................................................................... 318 10.1.1.1 Configuration T ype of BGP .............................................................................. 318 10.1.1.2 Enabling BGP Routing...[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 16 A50010-Y3-C150-2-7619 10.2.12 External Routes to OSPF Network ................................................................. 353 10.2.13 OSPF Distance ............................................................................................... 354 10.2.14 Host Route ........[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 17 Illustrations Fig. 2.1 Network S tructure wi th hiD 6615 S223/S323 ................................................. 23 Fig. 3.1 Software mode structure ................................................................................ 28 Fig. 4.1 Process of 802.1x Authentic[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 18 A50010-Y3-C150-2-7619 Fig. 8.38 Ring Recovery ............................................................................................. 267 Fig. 8.39 Example of S tacking .................................................................................... 270 Fig. 9.1 IGMP Sno[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 19 T ables T ab. 1.1 Overview of Chapters ..................................................................................... 20 T ab. 1.2 Command Notation of Guide Book ................................................................ 21 T ab. 3.1 Main Commands of Privilege[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 20 A50010-Y3-C150-2-7619 1 Introduction 1.1 Audience This manual is intended for SURP ASS hiD 6615 S223/S323 single-board Fast Ethernet switch operators a nd maintenance person nel for providers of Ethernet services. This manual assumes that you are familiar with the followi ng: • [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 21 1.3 Document Convention This guide uses the followi ng conventions to convey instructions and inform ation. Information This information symbol provides u seful in formation when using commands to config ure and means reader t ake note. Notes cont ain hel pful sugge stions[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 22 A50010-Y3-C150-2-7619 1.6 GPL/LGPL W arranty and Liability Exclusion The Siemens product, SURP ASS hiD 6615, contains both pr oprietary sof tware and “Open Source Software”. The Open Source Sof tware is licensed to you at no charge under the GNU General Public License (GPL) an[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 23 2 System Overview SURP ASS hiD 6615 L3 switch is typical Layer 3 switch intended to construct large-scale network, which provid es aggregated fun ction of upgraded LAN network consisted of typi- cal Ethernet switch. Laye r 3 switch can connect to PC, web server , LAN equip[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 24 A50010-Y3-C150-2-7619 2.1 System Features Main features of hiD 6615 S 223/S323, having Fast Ethernet swit ch and Layer 3 switchin g function which support s both Ethernet switching an d IP routing, are follow . Routing functionalities such as RIP , OSPF , BGP and PIM-SM are only a[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 25 DHCP The hiD 6615 S223/S32 3 support s DHCP (Dynam ic Host Co ntrol Prot ocol) Server that automatically assigns IP address to client s acce ssed to network. That means it has IP address pool, and operator can ef fectively utilize limited IP source by leasing temporary IP [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 26 A50010-Y3-C150-2-7619 RADIUS and T ACACS+ hiD 6615 S223/S323 support s client a uthenticat ion protocol, that is RADI US(Remote Au- thentication Dial-In User Service) and T ACA CS+(T erminal Access Controller Access Con- trol System Plus). Not only user IP and pa sswo rd registere[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 27 3 Command Line Interface (CLI) This chapter descri bes how to use the Comm and Line Interface (CLI ) which is used to configure the hiD 6615 S223/S323 syste m. • Command Mode • Useful T ip s 3.1 Command Mode Y ou can configure and manage the hiD 6615 S2 23/S323 by cons[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 28 A50010-Y3-C150-2-7619 Fig. 3.1 shows hiD 6615 S 323 software mode structure briefly . Fig. 3.1 Soft ware mode struct ure[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 29 3.1.1 Privileged EXEC V i ew Mode When you log in to the switch, the CLI will start with Privileged EXEC V iew mo d e t h at is a read-only mode. In this m ode, you can see a system co nfiguration and information with several com mands. T ab. 3.1 shows main command of Priv[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 30 A50010-Y3-C150-2-7619 T ab. 3.3 shows a couple of important main commands of Global Configuration mode. Command Description access-list Configures policy to limit routing information on the standard of AS. arp Registers IP address and MAC address in ARP t able. bgp Helps BGP confi[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 31 T ab. 3.4 shows a couple of main commands of Bridge Configuration mode. Command Description auto-reset Configures the system for automatic rebooting dhcp-server-filt er Configures packet filtering of DHCP server . erp Configures ERP function lacp Configures LACP function. [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 32 A50010-Y3-C150-2-7619 3.1.6 DHCP Configuration Mode T o open DHCP Config uration mode, use the command, ip dhcp pool POOL , on Global Configuration mode as follow . Then the prompt is changed from SWITCH(config)# to SWITCH(config -dhcp[POOL ])#. Command Mode Description ip dhcp po[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 33 3.1.8 Interface Configuration Mode T o open Interface Configuration mode, enter the command, interface INTERF ACE , on Global Configuration mode, and then t he prompt is change d from SWITCH(config)# to SWITCH(config-if)#. Command Mode Description interface INTERF ACE Glob[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 34 A50010-Y3-C150-2-7619 3.1.10 Router Conf iguration Mode T o open Router Configuration mode, use the following command. The system prompt is changed from SWITCH(config)# to SWI TCH(config-router)#. Command Mode Description router IP-PROT OCO L Global Opens Router Configuration mod [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 35 3.1.12 Route-Map Configuration Mode T o open Route-map Configuration mode, use the following command. The p rompt is changed from SWITCH(config)# to SWI TCH(config-route-map)#. Command Mode Description route-map NAME { permi t | deny } <1-65535> Global Opens Route-ma[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 36 A50010-Y3-C150-2-7619 3.2 Useful T ip s This section provides useful function s for user ’s convenien ce while using CLI commands. They are as follow . • Listing A vailable Commands • Calling Command History • Using Abbreviation • Using Command of Privileged EXEC Enable [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 37 Command Mode Description show list Shows available commands of the current mode. show cli All Shows available commands of the current mode with tree structure. The following is an exam ple of displaying list of available commands of Privileged EXEC Enable mode. SWITCH# sho[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 38 A50010-Y3-C150-2-7619 After using th ese commands in o rder: show clock → configure terminal → interface 1 → exit , press the arrow key < ↑ > and then you will see the com mands from latest one: exit → interface 1 → con figure terminal → sho w clock . SWITCHcon[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 39 3.2.5 Exit Current Command Mode T o exit to the previous command mode, use the following comman d. Command Mode Description exit Exits to the previous command mode. end All Exits to Privileged EXEC enable mode. If you use the command, exit , on Privileged EXEC View mode or[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 40 A50010-Y3-C150-2-7619 4 System Connection and IP Address 4.1 System Connection After inst alling swit ch, the hiD 6615 S223/S323 is supposed to examine that each po rt is rightly connected to netwo rk and management PC . And then, user conn ects t o system to configure and manage [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 41 4.1.2 Password for Pr ivileged EXEC Mode Y ou can configure a password to enhan ce the security for Privileged EXEC Enable mode. T o configure a password for Privileged EXEC Enable mode, use the followin g command. Command Mode Description p asswd enable P ASSWORD Configur[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 42 A50010-Y3-C150-2-7619 T o disable password encryption, use the following co mmand. Command Mode Description no service password-encryption Global Disables password encryption. 4.1.3 Changing Login Password T o configure a pa ssword for created account, use the following co mmand. [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 43 T o delete the created account, use the following com mand. Command Mode Description user del NAME Global Delete the created account. T o display the created account, use the following com mand. Command Mode Description show user Enable/Global Shows the created account. 4.[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 44 A50010-Y3-C150-2-7619 Command Mode Description privilege rmon-alarm level <0-15> { COMMAND | all } privilege rmon-event le vel <0-15> { COMMAND | all } Uses the specific command of RMON Configu ration mode in the level. privilege rmon-history le vel <0-15> { COMM[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 45 T o delete a configured security level, use the following command. Command Mode Description no privilege Deletes all configured security levels. no privilege bgp le vel <0-15> { COMMAND | all } no privilege bridge le vel <0-15> { COMMAND | all } no privilege co[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 46 A50010-Y3-C150-2-7619 T o display a configured security level, use the following command. Command Mode Description show privilege Shows a configured security level. show privilege now View Enable Global Shows a security level of current mode. The following is an example of creatin[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 47 leged EXEC Enable mode; however as level 1, it is possible to use n ot only the com- mands in level 1 but also t ime configuration comman ds in Privileged EXEC Enable mode and accessing commands to Global Configuration mode. 4.1.5 Limiting Number of User For hiD 6615 S223/[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 48 A50010-Y3-C150-2-7619 4.1.7 Auto Log-out For security reasons of the hiD 6615 S223/S323, i f no command is entere d within the configured inactivity time, the user is a uto matically logged out of the system. Administra- tor can configure the inactivity timer . T o enable auto-log[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 49 4.1.8.2 Auto System Rebooting The hiD 6615 S223/S323 reboot s the system according to user’s configuration. There are two basises for system rebooting. The se are CPU and memo ry . CPU is rebooted in case CPU Load or Interrupt Lo ad continues for the configured time. Mem[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 50 A50010-Y3-C150-2-7619 4.2.1 Authentication Method T o set the system authentication me thod, use the following comm and. Command Mode Description login { local | remote } { radius | t acacs | host | all } enable Set the system authentication method. local: authentication for conso[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 51 4.2.4 RADIUS Server 4.2.4.1 RADIUS Server for Sys tem Authentication T o add/delete the RADIUS server for system authentication, use the following command. Command Mode Description login radius server A.B.C.D KEY Adds the RADIUS server with its information. A.B.C.D: RADIUS[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 52 A50010-Y3-C150-2-7619 4.2.4.4 Frequency of Retrans mit If there is no response from RADIUS serv er , the hiD 6615 S223/S323 is supposed to re - transmit an authentication request. T o set the frequency of retransmitting an authentica- tion request, use the following command . Comm[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 53 T o specify a timeout value, use the following command . Command Mode Description login t acacs timeout <1 -100> Global S pecifies a timeout value. 1-100: waiting-time for the response (default: 3) 4.2.5.4 Additional T ACACS+ Configuration The hiD 6615 S223/S323 prov[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 54 A50010-Y3-C150-2-7619 4.2.6 Accounting Mode The hiD 6615 S223/S323 provides the account ing function of AAA (Authentication, Au- thorization, and Accounting). Accounting is the process of measuring the reso urce s a user has consumed. T ypically , accounting measure s the amount o[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 55 4.2.8 Sample Configuration [Sample Configuration 1] C onfiguration RADIUS server The following is an example of configuri ng authorization method in SURP ASS hiD 6615. It is configured to add RADIUS to default method in ca se of clients connecting through con- sole and tel[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 56 A50010-Y3-C150-2-7619 [Sample Configuration 2] C onfiguration T ACACS+ server The following is an example of config uring autho rization method as T ACACS+. SWITCH(config)# user add user test1 Changing password for user Enter the new password (minimum of 5, maximum of 8 characters[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 57 place with TCP/IP through SNMP or telnet, it requires IP address. Y ou can enable interface to communica te wi th switch interface on netwo rk and assign IP address as the following: • Enabling Interface • Disabling Interface • Assigning IP Address to Network Interfa[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 58 A50010-Y3-C150-2-7619 4.3.3 Assigning IP Addres s to Network Interface After enabling interface, you need to assign IP address. T o assign IP address to specified network interface, u se the following command. Command Mode Description ip address IP-ADDRESS/M Assigns IP address to [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 59 The following is an exampl e of configuring st at ic rout e to reach three destinations, which are not directly connected. SWITCH(config)# ip route 100.1.1.0/24 10.1.1.2 SWITCH(config)# ip route 200.1.1.0/24 20.1.1.2 SWITCH(config)# ip route 172.16.1.0/24 30.1.1.2 T o disp[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 60 A50010-Y3-C150-2-7619 4.3.7 Displaying Interface T o display interface st atus and config uration, use the following co mmand. Command Mode Description show interface [ INTER F ACE ] Enable Global Interface Shows interface status and configuration. INTERF ACE: interface name show [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 61 4.4 SSH (Secure Shell) Network security is getting more import ant according to using network has bee n general- ized between users. However , typical FTP and telnet service has weakness for security . SSH (Secure Shell) is security shell for l ogin. Through SSH, all dat a[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 62 A50010-Y3-C150-2-7619 4.4.1.5 Assigning Specific Authentication Key After enablin g ssh server , each client will upload generated key . The ssh se rver can as- sign specific key among the uploaded keys from several client s. T o verify Authentication Key , use the following comma[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 63 T o configure authentication key in the hi D 6615 S223/S323, use the following command. Command Mode Description ssh keygen { rsa1 | rsa | dsa } Global Configures authentication key . rsa1: SSH ver . 1 public key for the authentication rsa: SSH ver . 2 public key for the a[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 64 A50010-Y3-C150-2-7619 4.5 802.1x Authentication T o enhance security and porta bility of netwo rk management, there are two ways of au- thentication based on MA C address and port -ba sed authenticati on which restrict client s attempting to access to port. The port-based aut hent[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 65 4.5.1 802.1x Authentication 4.5.1.1 Enabling 802.1x T o configure 802.1x, the user should enable 802. 1x daemon first. In orde r to enable 802.1x daemon, use the following com mand. Command Mode Description dot1x system-auth -control Enables 802.1x daemon. no dot1x syste m[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 66 A50010-Y3-C150-2-7619 After default serve r is designated, all re quests sta rt from the RADIUS server . If there’s n o response from default server agai n, the authentic ation reque st is tried for RADIUS se rver designated as next one. T o configure IP address of RADIUS server[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 67 4.5.1.4 Authentication Port After configuring 802.1x authenticatio n mode, you should select the authenticati on port. Command Mode Description dot1x nas-port PORTS Designates 802. 1x authentication port. no dot1x nas-port PORTS Global Disables 802.1x authentication port. [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 68 A50010-Y3-C150-2-7619 4.5.1.7 Configuring Number of Request to RADIUS Server After 802.1x authentication config ured as ex plained above and the use r tries to connect with the port, the process of authenti cati on is progressed amo ng user ’s PC and the equipment as authenticat[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 69 Command Mode Description dot1x reauth-enable PORTS Enables 802.1x re-authentication. no dot1x reauth-ena ble PORTS Global Disables 802.1x re-authentication. 4.5.2.2 Configuring the Interval of Re-Authentication RAIDIUS server cont ains the dat abase about the u ser who has[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 70 A50010-Y3-C150-2-7619 the following command. Command Mode Description dot1x reauthenticate PORTS Global Implement re-authentication regardless of the config- ured time interval. 4.5.3 Initializing Authentication St atus The user can initialize the entire configu rati on on the por[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 71 4.5.7 Sample Configuration The following is to show the co nfiguration af ter configuring pot nu mber 4 as the authenti- cation port and registering IP address of aut hentication po rt and in formation of RADIUS server . SWTICH(config)# dot1x system-auth-control SWTICH(con[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 72 A50010-Y3-C150-2-7619 PortAuthed |.......................................... MacEnable |...m...................................... MacAuthed |...u...................................... ------------------------------------------------------- p = port-based, m = mac-based, a = authe[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 73 5 Port Configuration It is possible for user to configure ba sic envir onment such a s auto-negotiate, transmit rate, and flow control of the hiD 6615 S223/S323 port. Al so, it includes instru ctions how to con- figure port mirroring and port as b asic. 5.1 Port Basic It i[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 74 A50010-Y3-C150-2-7619 Command Mode Description port medium PORT { sf p | rj45 } Bridge Selects port type (Default: RJ45) T o view the configuration of switch port type, use the following command. Command Mode Description show port medium Enable Global Bridge Shows port type 5.2 Et[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 75 5.2.2 Auto-negotiation Auto-negotiation is a mech anism that take s co ntrol of the cable when a connecti on is es- tablished to a netwo rk device. Auto-negotiation dete cts the variou s modes that exist in the network device on the other end of the wire and advertises it [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 76 A50010-Y3-C150-2-7619 SWITCH(bridge)# show port 1 ------------------------------------------------------------------- NO TYPE PVID STATUS MODE FLOWCTRL INSTALLED (ADMIN/OPER) ------------------------------------------------------------------- 1: Ethernet 1 Up/Up Force/Half/100 Off[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 77 T o configure flow control of the Et hernet port, use the following command. Command Mode Description port flow-control PORTS { on | off } Bridge Configures flow control for a specified port, enter the port number . (default: off) The following is an example of configuri n[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 78 A50010-Y3-C150-2-7619 5.2.7 T raffic St atistics 5.2.7.1 The Packet s St atistics T o display traffic stati stic of each port o r interface with MIB or RM ON MIB data defined, use the following commands. Command Mode Description show port statistics avg-pkt [ PORTS ] Shows traffic[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 79 Otherwise, to clear all recorded st atistics of port and initiate, use the following command. Command Mode Description clear port statistics { POR TS | all } Enable Global Bridge Clears all recorded port statistics. 5.2.7.2 The CPU statistics T o display CPU stati stics of[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 80 A50010-Y3-C150-2-7619 5.2.8 Port St atus T o display a port status, use the followin g command. Command Mode Description show port PORTS Sho ws configured state of port, enter the port number . show port description [ PORTS ] Shows port specific description (max. number of char- a[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 81 Fig. 5.2 Port Mirroring T o configure port mirroring, designate mirrore d port s and monitor po rt. Then enable po rt mirroring function. Monitor port should be connected to the watch program installed PC. Y ou can designate only one monitor port but many mirrored p orts f[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 82 A50010-Y3-C150-2-7619 Ste p 4 T o delete and modify the configur ation, use the following command . Command Mode Description mirror disable Deactivate monitoring. mirror del PORTS [ ingress | egress ] Bridge Delete a port from the mirrored ports. Ste p 5 T o disable monitoring fun[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 83 6 System Environment 6.1 Environment Configuration Y ou can configure a system environme nt of the hiD 6615 S223/S323 with the following items: • Host Name • T ime and Dat e • Ti m e Z o n e • Network T ime Protocol • Simple Network T ime Protocol (SNTP) • T er[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 84 A50010-Y3-C150-2-7619 The following is an example of setting system time and date as 10:20pm, July 4 th, 2005. SWITCH# clock 06 Mar 2006 10:20 Mon, 6 Mar 2006 10:20:00 GMT+0000 SWITCH# 6.1.3 T ime Zone The hiD 6615 S223/S323 provides three kind s of time zone, GM T , UCT and UTC. [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 85 T o display a configured NTP , use the following command. Command Mode Description show ntp Enable Global Shows a configured NTP function. The following is an example of configuring 203.25 5.1 12.96 as NTP server , running it and showing it. SWITCH(config)# ntp 203.255.112[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 86 A50010-Y3-C150-2-7619 always correct and there won't be any subsequent time jump s af ter the initial correction. Unlike NTP , SNTP usually uses just on e Ethernet T ime Serve r to calculate the time and then it "jumps" the syste m time to the ca lculated time. It c[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 87 6.1.8 Login Banner It is possible to set system login and log-out banne r . Administrator can leave a message to other users with this banner . T o set system login and log-out banne r , use the following command. Command Mode Description banner Sets a banner before login [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 88 A50010-Y3-C150-2-7619 Command Mode Description no dns Global Deletes DNS server and domain name. 6.1.10 Fan Operation In hiD 6615 S223/S323, it is po ssible to cont rol fan operation. T o control fan operation, use the following command . Command Mode Description fan operation { o[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 89 T o show a configured threshold of CPU load, use the followin g command. Command Mode Description show cpuload All Shows a configured threshold of CPU load. 6.1.12.2 Port T raffic T o set a threshold of port traf fic, use the following command. Command Mode Description thr[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 90 A50010-Y3-C150-2-7619 6.1.12.4 System T emperature T o set a threshold of system tem perature, use the followin g command. Command Mode Description threshold temp VA L U E VA L U E Sets a threshold of system temperature in the unit of centigrade (°C). V ALUE: Threshold temperatur[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 91 6.1.14 Assigning IP Address of FTP Client Serveral IP a ddresses can be assign ed on hiD 6615 S223/S323. But user can specify one source I P address connecting FTP server wh en the switch is a client. T o configure FTP binding address as a source IP address when hiD 6615 S[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 92 A50010-Y3-C150-2-7619 The following is an example to display a configu ration of syslog. SWITCH# show running-config syslog ! syslog start syslog output info local volatile syslog output info local non-volatile ! SWITCH# 6.2.2 Saving System Configuration If you change a configurat[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 93 T o back up a system configuration file us ing FTP or TFTP , use the following command. Command Mode Description copy { ft p | tft p } confi g upload { FILE-NAME | startup-config } Uploads a file to ftp or f ttp server with a name config- ured by user . copy { ft p | tft p[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 94 A50010-Y3-C150-2-7619 After restorin g a default configuration, you need to restart the system to initiate. The following is an example of restori ng a default co nfiguration of the system. SWITCH(config)# restore factory-defaults You have to restart the system to apply the change[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 95 The following is the basic informatio n to operate ping test. Items Description Protocol [ip] Supports ping test. Default is IP . T arget IP address Sends ICMP echo message by inputting IP address or host name of destination in order to check network status with relative. [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 96 A50010-Y3-C150-2-7619 The following is the information to use pi ng test for multiple IP addresse s. Items Description Source address or interface Designates the address where the relative device should respond in source ip address. T ype of ser vice [0]: The service filed of QoS [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 97 6.3.2 IP ICMP Source-Routing If you implement PING test to verify the stat u s of network connection, icmp request ar- rives at the final destination as the clos est rout e according to the routing theory . Fig. 6.1 Ping T est for Network S t atus In the above figure, if y[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 98 A50010-Y3-C150-2-7619 T o perform ping test as the route which the manager designate d, use the following step s. Ste p 1 Enable IP so urce-routing function from the equipme nt connected to PC which the PING test is going to be performed. T o enable/disable IP source-routing in t [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 99 The following is an example of traci ng p acket route sent to 10.2.2.20. SWITCH# traceroute 10.2.2.20 traceroute to 10.2.2.20 (10.2.2.20), 30 hops max, 38 byte packets 1 10.2.2.20 (10.2.2.20) 0.598 ms 0.418 ms 0.301 ms SWITCH# 6.3.4 Displaying User Connecting to System T o[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 100 A50010-Y3-C150-2-7619 6.3.6 Configuring Ageing time SURP ASS hiD 6615 records MAC T able to prevent Broadcast pa ckets from transmitting. And unnecessary MAC address that do es not response during specified time is deleted from the MAC table automatically . The specified time is [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 101 6.3.9 System Memory Information T o display a system memory status, use the followin g command. Command Mode Description show memor y Shows system memory information. show memory { bgp | dhcp | imi | lib | nsm | ospf | pim | rip } Enable Global Shows system memory informa[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 102 A50010-Y3-C150-2-7619 The following is an example of displaying information of the runnin g processes. SWITCH# show process USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND admin 1 0.2 0.2 1448 596 ? S 20:12 0:05 init [3] admin 2 0.0 0.0 0 0 ? S 20:12 0:00 [keventd] admin 3[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 103 configure one of two as def ault OS what user want s. In hiD 6615 S223/S323, a system image saved in os1 is configured as def ault OS by default. T o desgnate a default OS, use the following comm and. Command Mode Description default-os { os1 | os2 } Enable Desgnates defa[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 104 A50010-Y3-C150-2-7619 7 Network Management 7.1 Simple Network Management Protocol (SNMP) Simple Network Management Protocol (SNMP) sy ste m is consisted of three part s: SNMP manager , a managed device and S NMP agent. SNMP is an application-layer protocol that allows SNMP manage[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 105 T o display a configured SNMP commu nity , use the following command. Command Mode Description show snmp communit y Enable Global Shows a created SNMP community . The following is an example of creating 2 SNMP communities. SWITCH(config)# snmp community ro public SWITCH(c[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 106 A50010-Y3-C150-2-7619 7.1.3 SNMP Com2sec SNMP v2 authori zes the host to access the agent according to the identity of the host and community name. The command, com 2sec , specifies the mapping from the identity of the host and community name to securi ty name. T o configure an S[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 107 7.1.5 SNMP View Record Y ou can create an SNMP view reco rd to limit access to MIB object s with object identity (OID) by an SNMP mana ger . T o configure an SNMP view record, use the following command. Command Mode Description snmp view VIEW { includ ed | excluded } OID [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 108 A50010-Y3-C150-2-7619 T o display a granted an SNMP group to access a specifi c SNMP view record, use the fol- lowing command. Command Mode Description show snmp access Enable Global Shows a granted an SNMP group to access a specific SNMP view recor d The following is an example [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 109 7.1.8.1 SNMP T rap Host T o set an SNMP trap ho st, use the following command. Command Mode Description snmp trap-host IP-ADDRESS [ COMMUNITY ] snmp trap2-host IP-ADDRESS [ COMMUNITY ] S pecifies IP address of an SNMP trap host. snmp inform-trap-host IP-ADDRESS [ COMMUNIT[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 1 10 A50010-Y3-C150-2-7619 7.1.8.3 Enabling SNMP T rap The system provides vari ous kind of SNMP trap, but it may inef ficiently work if all these trap messages are sent very frequently . Theref ore, you can select each SNMP trap sent to an SNMP trap host. The system is configured to[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 1 1 1 snmp trap dhcp-lease Configures the system to send SNMP trap when no more IP address that can be assigned in the subnet of DHCP server is left. snmp trap fan Configures the system to send SNMP trap when the fan begins to operate or stops. snmp trap power Configures the [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 1 12 A50010-Y3-C150-2-7619 7.1.8.5 Displaying SNMP T rap T o display a configuration of SNMP trap, use the following command. Command Mode Description show snmp trap Enable Global Shows a configuration of SNMP trap. The following is an example of configu ring IP addre ss 10.1.1.1 as [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 1 13 7.1.9.2 Default Alarm Severity T o configure a priority of alarm, use the following com mand. Command Mode Description snmp alarm-severit y default { critical | major | minor | wa rn ing | intermediate } Global Configures the priority of alarm. (default: minor) 7.1.9.3 A[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 1 14 A50010-Y3-C150-2-7619 7.1.9.4 Generic Alarm Severity T o configure generic alarm severity , use the following command. Command Mode Description snmp alarm-severit y fan-fail { critical | maj or | minor | wa rn i n g | intermediate } Configures the p riority of fan-fail alarm snm[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 1 15 If you want to delete a configured alarm severity , use the following command. Command Mode Description no snmp alarm-severity fan-fail no snmp alarm-severity cold-start no snmp alarm-severity broadcast- over no snmp alarm-severity cpu-load-over no snmp alarm-severity dh[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 1 16 A50010-Y3-C150-2-7619 Command Mode Description snmp alarm-severity adva-if-tr ans-fault { criti- cal | major | minor | warn i n g | intermediate } Sends alarm notification with the sever- ity when ADV A informs to fail to transmit the packet s. snmp alarm-severity adva-psu-fail [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 1 17 Command Mode Description snmp alarm-severit y erp-domain-reach-fail { critical | major | minor | wa rn in g | intermedi- ate } Sends alarm notification with the sever- ity when there is disconnection between ERP domains snmp alarm-severity erp-domain-ulot p { critical | [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 1 18 A50010-Y3-C150-2-7619 T o display a configured severity of alarm, use the following comm ands. Command Mode Description show snmp alarm-se verity Enable Global Shows a configured severity of alarm. T o deletes a recorded alarm in the system, use the following co mmand. Command M[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 1 19 7.2 Operation, Administration and Maintenance (OAM) In the enterprise, Ethernet links and n etworks have been manag ed via Simple Network Management Protocol (SNMP). Although SNMP provides a very flexible manag ement so- lution, it is not always effici ent and is sometim[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 120 A50010-Y3-C150-2-7619 7.2.2 Local OAM Mode T o configure Local OAM, use the following com mand. Command Mode Description oam local mode { acti ve | p assive } PORTS Bridge Configures the mode of local OAM. Both request and loopback are po ssible for local OA M active. However , r[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 121 T o display the information of peer host us ing OAM function, use the following comm and. Command Mode Description oam remote alar m optical <1-3> <0-65535> PORT S oam remote alar m temperatur e <0-255> PORTS oam remote alarm volt age { mi n | max } <[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 122 A50010-Y3-C150-2-7619 The following is to configure to enable OAM loopback functio n through 25 port of the switch and operate on ce. SWITCH(bridge)# oam local admin enable 25 SWITCH(bridge)# oam remote loopback enable 25 SWITCH(bridge)# show oam local 25 LOCAL PORT[25] ---------[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 123 7.3 Link Layer Discovery Protocol (LLDP) Link Layer Discovery Protocol (LLDP) is t he functio n of transmitting data for network management for the switches connected in LAN according to IEEE 802.1ab standard. 7.3.1 LLDP Operation The hiD 6615 S223/S32 3 supporting LLDP t[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 124 A50010-Y3-C150-2-7619 In hiD 6615 S223/S323, t he administrator can enable and di sable basic TL V by selecting it. T o enable basic TL V by selecting it, use the following command. Command Mode Description lld p enab le PORTS { portdescrip- tion | sysn ame | sysdescription | sys[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 125 7.3.6 Displaying LLDP Configuration T o display LLDP configuration, use the following com mand. Command Mode Description show lldp config POR TS Shows LLDP configuration. show lldp remote POR TS Show statistics for remote entries. show lldp st atistics PORTS Enable Global[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 126 A50010-Y3-C150-2-7619 7.4 Remote Monitoring (RMON) Remote Monitoring (RMON) is a funct ion to monitor communication st atus of devices connected to Ethernet at remote place. While S NMP can give information only about the device mounted SNMP agent, RMON g ives information about o[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 127 want to list available commands. The following is an example of listing available commands on RMON Configuration mode. SWITCH(config-rmonhistory[5])# ? RMON history configuration commands: active Activate the history data-source Set data source port do To run exec command[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 128 A50010-Y3-C150-2-7619 1 sec is the minimum time which can be sel ected. But the minimum sampling interval currently is 30 sec, i.e., all intervals w ill be round up to a multiple of 30 seconds. 7.4.1.5 Activating RMON History T o activate RMON history , use the follo wing command[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 129 7.4.2 RMON Alarm There are two ways to compare with the th reshold: absolute co mpari son and delt a com- par ison . • Absolute Comp arison : Comparing sample data with the threshold at configured in- terval, if the data is more than the thre shold or less than it, alar[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 130 A50010-Y3-C150-2-7619 7.4.2.2 Object of Sample Inquiry User needs object value used for sample inquiry to pro vide RMON Alarm. The following is rule of object for sample inquiry . T o assign object used for sample inquiry , use the follow- ing command. Command Mode Description sa[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 131 7.4.2.5 Lower Bound of Threshold If you need to occur alarm when object used for sample inquiry is less than lower bound of threshold, you should configure lower boun d of threshold. T o configure lower bound of threshold, use the following command. Command Mode Descripti[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 132 A50010-Y3-C150-2-7619 T o configure interval of sample inquiry for RMON al arm, use the following comm and. Command Mode Description sample-interval <0-65535> RMON Configures interval of sample inquiry . (unit: second) 7.4.2.8 Activating RMON Alarm After finishing all confi[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 133 T o configure community for trap messag e transmission, use the following comm and. Command Mode Description community NAME RMON Configures password for trap message transmission right. NAME: community name 7.4.3.2 Event Description It is possible to describe event briefl[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 134 A50010-Y3-C150-2-7619 Command Mode Description active RMON Activates RMON event. 7.4.3.6 Deleting Configuration of RMON Event Before changing the configuration of RM ON event, you should delete RMON event of the number and configure it again. T o delete RMON event, use the follow[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 135 7.5 Syslog The syslog is a function that allows the network el ement to generate the event notification and forward it to the event message collector like a syslog serve r . This function is enabled as default, so even though you disable this function manually , the syslo[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 136 A50010-Y3-C150-2-7619 Syslog Output Lev el with a Priority T o set a user-defined syslog output level with a priority , use the following command. Command Mode Description syslog output priority { auth | authpri v | cron | daemon | kern | local1 | local2 | local3 | local4 | local[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 137 The following is an examp le of configuring syslog messag e to send all logs higher than notice to remote host 10.1.1.1 and confi gurin g local1.info to transmit to console. SWITCH(config)# syslog output notice remote 10.1.1.1 SWITCH(config)# syslog output priority local1[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 138 A50010-Y3-C150-2-7619 7.5.4 Debug Message for Remote T e rminal T o display a syslog debug message to a remote terminal, use the f ollowing command. Command Mode Description terminal monitor Enables a terminal monitor function. no terminal monitor Enable Disables a terminal monit[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 139 7.6 Rule and QoS The hiD 6615 S223/S323 p rovides rule and QoS feature for traf fic management. The rule classifies incoming traf fic, and then processe s the traf fic according to user-defined poli- cies. Y ou can use the physical port, 802.1p priority (CoS), VLAN ID, DS[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 140 A50010-Y3-C150-2-7619 • Scheduling Algorithm T o handle overloading of traf fics, you need to configure diff erently processing orders of graphic by using schedul ing algorith m. The hiD 66 15 S223/S323 provides: – S trict Priority Queuing (SPQ) – Weighted Round Robin (WRR)[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 141 7.6.2.3 Packet Classification After configuring a p acket classification fo r a rule, then configure ho w to process the packet s. T o specify a packet-classifying p attern, use the following comman d. When specifying a so urce and destination IP addres s as a packet-cla [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 142 A50010-Y3-C150-2-7619 Command Mode Description ip { A.B.C.D | A.B.C.D/M | any } { A.B.C.D | A.B.C.D/M | any } icmp Classifies an IP protocol (ICMP): A.B.C.D: source/destination IP address A.B.C.D/M: source/destination IP address with mask any: any source/destination IP address ic[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 143 7.6.2.4 Rule Action T o specify a rule action ( match ) for the packet s matching conf igu red classify ing pat terns, use the following command . Command Mode Description match den y Denies a packet. match permit Permits a p acket. match redirect PORT Redirects to specif[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 144 A50010-Y3-C150-2-7619 T o delete a specified rule action ( match ), use the following comm and. Command Mode Description no match den y no match permi t no match redirect no match mirror no match dscp no match cos no match ip-prec no match band width no match vlan no match cop y-[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 145 T o delete a specified rule action ( no-match ), use the following command. Command Mode Description no no-m atch deny no no-match redirect no no-match mirror no no-m atch dscp no no-m atch cos no no-match ip-prec no no-match co py-to-cpu Rule Deletes a specified rule act[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 146 A50010-Y3-C150-2-7619 7.6.2.7 Displaying Rule The following command ca n be used to show a certain rule by it s name, all rules of a cer- tain type, or all rules at once sorte d by rule type. Command Mode Description show rule NAME Shows a rule, enter a rule name. NAME: rule name[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 147 7.6.3.1 Scheduling Algorithm T o process incoming packet s by the queue scheduler , the hiD 6615 S223/S323 provides the scheduling algorithm as S trict Priority Queuing (SP), Weighted Round Ro bin (WRR) and Weighte d Fair Queuing (WFQ). Weighted Round Robin (WRR) WRR proc[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 148 A50010-Y3-C150-2-7619 Fig. 7.2 Weighted Fai r Queuing Strict Priority Queuing (SP) SPQ processes first more import ant dat a than the others. Since all dat a are processed by their priority , data with hig h priority can be processed fast but data without low prio rity might be d[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 149 T o select a packet sche duling mode, use the following comm and. Command Mode Description qos scheduling-mod e { sp | wr r } Selects a p acket scheduling mode for a ports: sp: strict priority queuing wrr: weighted round robin qos cpu schedu ling-mode sp Global Selects a [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 150 A50010-Y3-C150-2-7619 T o define an 802.1p priory-to-queue map for 8 queues, use the foll owing command. Command Mode Description qos map <0-7> <0-3> Global Priority to queue number mapping, priorit y value (0-7) according to 802.1p: 0 = lowest: best effort (be) 1: ba[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 151 7.6.4.1 Rule Creation For the hiD 6615 S223/S323, you need to open Admin Access Rule Configurati on mode first. After opening Admin Access Rule Configuration mode, the prom pt changes from SWITCH(config)# to SWITCH(c onfig-admin-rule[NAME])#. T o open Rule Configuration m[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 152 A50010-Y3-C150-2-7619 7.6.4.3 Packet Classification After configuring a p acket classification fo r a rule, then configure ho w to process the packet s. T o specify a packet-classifying p attern, use the following comman d. When specifying a so urce and destination IP addres s as[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 153 7.6.4.4 Rule Action T o specify a rule action ( match ) for the packet s matching conf igu red classify ing pat terns, use the following command . Command Mode Description match den y Denies a packet. match permit Admin-rule Permits a p acket. T o delete a specified rule [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 154 A50010-Y3-C150-2-7619 execution of comm and, apply . That is, if several rules being di ff erent only in one value should be created, then only the one changed value need s to be entered again. 7.6.4.6 Modifying and Deleting Rule T o modify a rule, use the following comm and. Com[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 155 7.7 NetBIOS Filtering NetBIOS (Network Basic Input/Output System) is a program that allows application s on different com puters to communicate within a local a rea network (LAN). NetBIOS is used in Ethernet, included as part of NetBIOS Extended User Interfac e (NetBEUI).[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 156 A50010-Y3-C150-2-7619 The following is an example of configuri ng NetBIOS filtering in port 1~5 and showing it. SWITCH(bridge)# netbios-filter 1-5 SWITCH(bridge)# show netbios-filter o:enable .:disable -------------------------- 1 2 12345678901234567890123456| -------------------[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 157 Command Mode Description max-hosts POR TS <1-16> Limits the number of connection to a port by setting maximum host: PORTS: enter the port number . 1-16: enter the maximum MAC number . no max-hosts POR TS Bridge Deletes configured max-host, enter the port number . Th[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 158 A50010-Y3-C150-2-7619 T o configure max new host s, use the following comm and. Command Mode Description max-new-hosts PORTS MAX- MAC-NU MBER The number of MAC address that can be learned on the port for a second. max-new-hosts system PORTS MAX-MAC-NUMBER Bridge The number of MAC[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 159 Step 2 Set the maximum number of secure MAC add ress for the port. Command Mode Description port security PORT S maximu m <1-16384> Bridge Sets a maximum number of secure MAC address for the port. 1-16384: Maximum number of ad dresses (default: 1) Step 3 Set the vio[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 160 A50010-Y3-C150-2-7619 T o display the configuration of port securi ty , use the following command. Command Mode Description show port security [ PORTS ] Bridge Shows port security on the port. This is an example of configur ing port security on port 7. SWITCH(config)# bridge SWIT[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 161 T o disable the configuration of port secure aging, use the following comm and. Command Mode Description no port security PORTS aging static Disables aging for only statistically configured secure addresses. no port security PORTS aging time Disables port secure aging for[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 162 A50010-Y3-C150-2-7619 T o remove registered dynamic MAC addresses from the MAC table, use the followin g command. Command Mode Description clear mac Clears dynamic MAC addresses. clear mac NAME Clears dy namic MAC addresses. clear mac NAME PORT Clears dynamic MAC addresses. NAME:[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 163 7.12 MAC Filtering It is possible to forward frame to MAC address of destination. Without specific perform- ance degradation, maximum 4,096 MA C addres ses can be registered. 7.12.1 Default Policy of MAC Filtering The basic policy of filterin g based on system is set to a[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 164 A50010-Y3-C150-2-7619 Command Mode Description mac-filter add MACADDR { deny | permit } Bridge Allows or blocks packet which brings configured mac address to specified port. V ariable MAC-ADDRESS is composed of twelve di gits number in Hexa decimal. It is pos- sible to check it b[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 165 Sample Configuration The latest policy is recorded as numb er 1. The following is an exa mple of permitting MAC address 00:02:a5:74:9b:17 and 00:01:a7 :70:01:d2 and showing t able of filter policy . SWITCH(bridge)# mac-filter add 00:02:a5:74:9b:17 permit SWITCH(bridge)# m[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 166 A50010-Y3-C150-2-7619 7.13.1.1 Registering ARP T able The content s of ARP t able are automatica lly registered whe n MAC address co rresponds to MAC address is founded. The n etwork adm inistrat or could use MAC address of spe- cific IP addre ss in Network by registering on ARP [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 167 7.13.2 ARP Alias Although clients are join ed in same client switch, it may be impossible to communicate between client s for their private securi ty . When you need to make them communicate each other , the hiD 6615 S223/S323 supports AR P alias, which respon ses ARP req[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 168 A50010-Y3-C150-2-7619 Y ou can configure the switch to perform additional checks on the destination MAC ad- dress, the sender and t arget IP address and the source MAC address. Command Mode Description ip arp inspection validate { src- mac | dst-mac | ip } Inspects specific check[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 169 7.13.4 Gratuitous ARP Gratuitous ARP is a broadcast pa cket like an ARP request. It cont aining IP address and MAC address of gateway , and the network is ac cessible even thoug h IP ad dresses of specific host’ s gateway are r epeatedly assigned to the other . Configur[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 170 A50010-Y3-C150-2-7619 Ty p e V a l u e Ty p e V a l u e ICMP_ECHOREPL Y 0 ICMP_DEST_UNREACH 3 ICMP_SOURCE_QUENCH 4 ICMP_REDIRECT 5 ICMP_ECHO 8 ICMP_TIME_EX CEEDED 1 1 ICMP_P ARAMETERPROB 12 ICMP_TIMEST AMP 13 ICMP_TIMEST AMPREPL Y 14 ICMP_INFO_RE QUEST 15 ICMP_INFO_REPL Y 16 ICMP[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 171 T o configure interval to transmit ICMP me ssage, the administrator should configure th e type of message and the interval time. Use the following command, to configu re the interval for transmit ICMP message. Command Mode Description ip icmp interval rate-mask MAS K Glob[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 172 A50010-Y3-C150-2-7619 T o configure the limited ICMP transmi ssion time, use the following command. Command Mode Description ip icmp interval rate-limit IN- TERV AL Global Configures a limited ICMP transmission time. INTERV AL: 0-2000000000 (unit: 10 ms) The default ICMP interval[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 173 The following is an example for configu ring ICMP Redire ct Message and checking the configuration. SWITCH(config)# show running-config (omitted) interface 1 ip address 222.121.68.247/24 ! ! ! SWITCH(config)# ip redirects SWITCH(config)# show running-config (omitted) inte[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 174 A50010-Y3-C150-2-7619 help prevent that hackers can find impossible con nections. T o configure not to send the message that informs TCP conne ction can not be done, u se the following command. Command Mode Description ip tcp ignore rst-unknow n Configures to block the message th[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 175 7.16.1.1 Packet Dump by Protocol Y ou can see packets about BOOTPS, DHCP , ARP and ICMP using the following com- mand. Command Mode Description debug packet { interface IN TER- FA C E | port PORTS } protocol { bootps | dhcp | arp | icmp } { src- ip A.B.C.D | dest-ip A.B.C[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 176 A50010-Y3-C150-2-7619 T ab. 7.4 shows the options for packet dump. Option Description -a Change Network & Broadcast address to name. -d Change the complied packet-matching code to readable letters and close it -e Output link-level header of each line -f Output outer internet [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 177 7.16.2 Debug Packet Dump The hiD 6615 S223/S323 provide s network d ebugging functio n to prevent system over- head for unknown p acket inflow . Monitoring pr ocess checks CP U load per 5 seconds. If there is more traf fic than thre shold, user can captu re packet s using[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 178 A50010-Y3-C150-2-7619 8 System Main Functions 8.1 VLAN The first step in setting up your bri dging netwo rk is to define VLAN on your switch. VLAN is a bridged network th at is logically segment ed by cu stomer or function. Each V LAN con- tains group of ports called VLAN members[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 179 8.1.1 Port-Based VLAN The simplest implicit mappi ng rule is known as port -based VLAN. A frame is assigned t o a VLAN based solely on th e switch port on which the frame arrives. In the ex ample de- picted in Figure, frames arriving on p orts 1 thro ugh 4 are assigned to[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 180 A50010-Y3-C150-2-7619 8.1.1.1 Creating VLAN T o configure VLAN on user’s network, use the following com mand. Command Mode Description vlan create VLANS Bridge Creates new VLAN by assigning VLAN ID: VLANS: enter the number of VLAN ID (f rom 1 to 4094). The variable VLANS is a p[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 181 8.1.1.5 Displaying VLAN T o display a configuration of VLAN, use the following command. Command Mode Description show vlan [ VLANS ] Enable Global Bridge Shows the configuration for specific VLAN, enter VLAN ID. 8.1.2 Protocol-Based VLAN User can use a VLAN mappin g that [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 182 A50010-Y3-C150-2-7619 Command Mode Description vlan macbase MAC-ADDRESS <1-4094> Configure VLAN based on MAC address no vlan macbase MAC- ADDRESS Bridge Clears configured VLAN based on MAC address. 8.1.4 Subnet-based VLAN In order to configure VLAN based on S ubnet, user sh[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 183 Advantages Disadvant ages VLAN association rules only need to be applied once. T ags can onl y be interpreted by VLAN aware devices. Only edge switches need to know the VLAN as- sociation rules. Edge switches must strip tags before forwarding frames to legacy devices or V[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 184 A50010-Y3-C150-2-7619 8.1.8 QinQ QinQ or Double T agging is one way for tunneling bet ween networks TU TU TT T U U T T T VLAN 200 VLAN 200 VLAN 201 VLAN 201 VLAN 641 PVID 641 T: Tagged U: Untagged Customer A Customer A Customer B Customer B Trunk Port Trunk Port Tunnel Port Tunne[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 185 able of carrying double-t agged traf fic. A trunk po rt is always connecte d to another trunk port on a different switch. Switchin g shall be performed between trunk port s and tunnel s ports and b etween dif ferent trunk port s. 8.1.8.1 Double T agging Operation Step 1 I[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 186 A50010-Y3-C150-2-7619 • DT and HT LS cannot be configured at the same time. (If switch shoul d operate as DT , HTSL has to be disabled.) • TPID value of all ports on switch is sam e. • Access Port should be configured as Unt agged, and Uplink p ort as T agged. • Ignore al[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 187 isolation. If you want to configure Priv ate VLAN on the hiD 6615 S223/S323 switch, refer to Port Isolation configuration. 8.1.9.1 Port Isolation The Port Isolation feature is a m ethod that re strict s L2 switchin g between isolated port s in a VLAN. Nevertheless, flows [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 188 A50010-Y3-C150-2-7619 Fig. 8.5 In Case External Packets Enter und er Layer 2 environment (1 ) T o transmit the untagged pa cket from uplink port to subs criber , a new VLAN should be created including all subscribe r ports an d uplink port s. This makes the uplink port s to rec- [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 189 8.1.10 VLAN T ranslation VLAN T ranslation is simpl y an action of Rule. This function is to translate the value of specific VLAN ID which classified by Rule. The switch makes T ag adding PVID on Untagge d packet s, and use T agged Packet as it is. That is, all packets ar[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 190 A50010-Y3-C150-2-7619 | 1 2 3 4 Na me( VID| FID) |123456789012345678901234567890123456789012 ----------------------------------------------------------------- default( 1| 1) |u...uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu br2( 2| 2) |.u........................................ br3( 3|[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 191 --------------------------------------------------------------- | 1 2 3 4 Eth ertype | VID |123456789012345678901234567890123456789012 --------------------------------------------------------------- 0x0800 5 .p........................................ 0x0900 6 ...p........[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 192 A50010-Y3-C150-2-7619 default b r2 br3 br 4 Outer Network Uplink Port SWITCH(bridge)# vlan create br2 SWITCH(bridge)# vlan create br3 SWITCH(bridge)# vlan create br4 SWITCH(bridge)# vlan del default 3-8 SWITCH(bridge)# vlan add br2 3,4 untagged SWITCH(bridge)# vlan add br3 5,6 un[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 193 Bandwidth with 1 port Enlarged bandwid th with many ports A logical port that can be made by aggregating a number of the ports. Fig. 8.7 Link Aggregation The hiD 6615 S223/S323 supports t wo kinds of link aggre gation as port trunk an d LACP . There’s a little dif feren[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 194 A50010-Y3-C150-2-7619 enter . It is decided with Source IP address, De stination IP address, Source MAC address, Destination Mac address and the u ser could get info rmation of packet s to deci ded packet route. • dstip : Destination IP address • dstmac: Destination MAC addre[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 195 • Configuring LA CP • Packet Route • Operating Mode of Member Port • Priority of Switch • Identifying Member Port s within LACP • BPDU T ransmissi on Rate • Key value of Member Port • Priority • Displaying LACP Configuration 8.2.2.1 Configuring LACP Step[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 196 A50010-Y3-C150-2-7619 • dstip : Destination IP address • dstmac: Destination MAC address • srcdstip: Runs by reference to both So urce IP addre ss and Destination IP address • srcdstmac: Source MAC address and De stination MAC addre ss • srcip: Source IP address • src[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 197 8.2.2.4 Identifying Member Ports within LACP The port configured as member port is bas i cally configured to aggregate to LACP . How- ever , even though the configuration as member port is not rel eased, they could operate as independent port without being agg regated to [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 198 A50010-Y3-C150-2-7619 T o delete key value of configured memb er port, use the following command. Command Mode Description no lacp port admin-ke y POR TS Bridge Deletes key value of select ed member port, select the member port number . 8.2.2.7 Priority of Member Port T o configu[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 199 8.2.2.9 Displaying LACP Configuration T o display a configured LACP , use the following command. Command Mode Description show lacp aggregat or Shows the information of aggregated port. show lacp aggregator AGGRE- GA TIONS Shows the information of selected aggregated port[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 200 A50010-Y3-C150-2-7619 8.3 S p anning-T ree Protocol (STP) LAN, which is composed of double-path like to ken ri ng, has the advantage that it is pos- sible to access in case of d isconnection with on e path . However , there is another problem named Loop when you always use the do[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 201 Meanwhile, RSTP (Rapid S panning-T ree Proto col) defined in IEEE 802.1w innovate re- duces the time of network convergence on ST P (S panning-T ree Protocol). It is easy and fast to configure new protocol. Also, 802.1w includes 802.1d in side, so it can provide compat ib[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 202 A50010-Y3-C150-2-7619 After configuring STP , these switches exchange their information. The priority of SWITCH A is 8, the priority of SWITCH B is 9 and the priority of SWITCH C is 10. In this case, SWITCH A is automatically c onfigured as a root switch . Designated S witch Afte[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 203 Designated Port and Root Port A Root Port is the port in the active topology that provides connectivity from the Desig- nated Switch toward the root. A Designated Port is a port in the active topology used to forward traf fic away from the root onto the link for which thi[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 204 A50010-Y3-C150-2-7619 Port St ates Each port on a switch can be in one of five states. Blocking Listening Learning Forwarding BPDUs or time out indicat e Potentia l to become active BPDUs indicate port should n ot be activ e Forwar ding timer expired BPDUs ind icate port should n[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 205 8.3.2 RSTP Operation STP or RST P is configu red on network where Loop can be created. However , RSTP is more rapidly progressed than STP at the st age of reaching to the last topology . This sec- tion describes how the RSTP more improved than STP works. It cont ains the [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 206 A50010-Y3-C150-2-7619 BPDU Policy 802.1d forwards BPDU following Hello-time inst alled in root switch and the other switch except root switch its own BPDU only when rece iving BPDU from root switch. Howeve r , in 802.1w not only root switch but also all t he other switches forwar[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 207 Switch B Switch C BPDU Flow ROOT Switch D 1. New link created 2. Transmit BPDU at listening state 3. Block to prevent loop Switch A Fig. 8.16 Convergence of 802.1d Network This is very an epochal way of preventing a loop. The matter is that communication is disconnected d[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 208 A50010-Y3-C150-2-7619 SWITCH A negotiates with root through BPDU. T o make link between SWITCH A and root, port state of non-e dge designated port of SWITCH is ch anged to blocking. Although SWITCH A is connected to root, loop will not be created be cause SWITCH A is blocked to S[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 209 It is same with 802.1d to block the connection of SWITCH D and SWITCH C. However , 802.1w does not need any configured time to negotiate between switche s to make for- warding state of specific port. So it is very fast progressed. During prog ress to forwarding state of p[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 210 A50010-Y3-C150-2-7619 Operation Here explains how STP/MSTP differently operat es on the LAN. Suppose to configure 1 00 of VLAN from Switch A to B, C. In case of STP , there’s only a STP on all of VLAN and it does not provide multiple inst ances. While existing STP is a protocol[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 21 1 In CST , A and B are the switches operating with STP and C, D and, E are those operating with MSTP . First, in CST , CIST is establishe d to decide CST Root . After CST root is de- cided, the closest switch to CST root is decided a s IST root of the region. Here, CST roo[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 212 A50010-Y3-C150-2-7619 8.3.5 Configuring STP/RSTP/MSTP T o configure STP and RSTP , use the following steps. Step 1 Decide STP mode using the stp force -v ersion { stp | rstp } comm and. Step 2 Activate MST daemon usin g the stp mst enable command. Step 3 Configure det ail options[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 213 T ransmit Rate Path-c ost 4M 250 10M 100 100M 19 1G 4 10G 2 Ta b . 8 . 2 STP Path-cost T ransmit Rate Path-c ost 4M 20,000,000 10M 2,000,000 100M 200,000 1G 20,000 10G 2,000 Ta b . 8 . 3 RSTP Path-cost When the route decide d by path -cost gets overloading, you wo uld bet[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 214 A50010-Y3-C150-2-7619 8.3.5.5 MST Region If MSTP is est ablished in the hiD 661 5 S223/S 323, decid e which MST region the switch is going to belong to by configuring MST configur ation ID. Configuration ID cont ains region name, revision, VLAN map. T o set configuration ID, use [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 215 8.3.5.6 MSTP Pro tocol MSTP protocol has a backward comp atibility . MSTP is comp atible with STP and RSTP . If some other bridge runs with STP mode and send BPDU version o f STP or RSTP , MSTP automatically changes to STP mode. ST P mode can not be changed to MS TP mode [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 216 A50010-Y3-C150-2-7619 T o delete the edge port mode, use the following com mand. Command Mode Description no stp edge-por t PORTS Bridge Deletes port edge mode: PORTS: select the port number . 8.3.5.9 Displaying Configuration T o display the configuration af ter configuring STP ,[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 217 8.3.6 Configuring PVSTP/PVRSTP STP and RSPT are designed with on e VLAN in the network. If a port b ecomes blocking state, the physical port itself is blocke d. But PVSTP (Per VLAN S panning T ree Protocol) and PVRSTP (Per VLAN Rapid S panning T ree Protocol) maintains sp[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 218 A50010-Y3-C150-2-7619 8.3.6.2 Root Switch In order establish PVSTP , PVRSTP function, firs t of all, Root switch should be decided. Each switch has its own B ridge ID and Root switch on same LAN is deci ded by comp ar- ing their Bridge ID. Howev er , the user can change Root swit[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 219 8.3.7 Root Guard The standard STP does n ot allow the administrator to enforce the position of the root bridge, as any bridge in the network with lowe r bridge ID will t ake the role of the root bridge. Root guard feature is desig ned to pr ovide a way to enforce the root[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 220 A50010-Y3-C150-2-7619 T o clear configured Restart ing Protocol Migration, use the following comm and. Command Mode Description stp clear-detect ed-protocol PORTS Bridge Configures restarting pr otocol migration function. 8.3.9 Bridge Protocol Da t a Unit Configuration Bridge Pro[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 221 T o clear configured hello-time, use the following com mand. Command Mode Description no stp mst hello-time Returns to the default hello time value of STP , RSTP and MSTP . no stp pvst hellow -time VLAN- RANGE Bridge Returns to the default hello time value of PVSTP and PV[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 222 A50010-Y3-C150-2-7619 T o delete a configured max age, use the following command. Command Mode Description no stp mst max-age Returns to the default max-age value of STP , RSTP and MSTP . no stp pvst max-age VLAN- RANGE Bridge Returns to the default max-ag e value of PVSTP and PV[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 223 T o configure BPDU guard in the swit ch, perform the following procedure. Step 1 Configure the specific port as edge-po rt. Command Mode Description stp edge-port PORTS Configures the port as Edge port. no stp edge-por t PORTS Bridge Disables Edge port configuration. Step[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 224 A50010-Y3-C150-2-7619 T o enable/disable self loop detection, use the followin g command. Command Mode Description self-loop-detec t { enable | di s- able } Bridge Enables/disables self loop detection function. T o display a configuration for BPDU, use the following command. Comm[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 225 8.3.10 Sample Configuration Backup Route When you design layer 2 network, you must consider backup route for st able STP net- work. This is to prevent net work corruption when just one additiona l path exit s. Switch A Switch B Switch E Switch C Switch D Aggregation Switc[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 226 A50010-Y3-C150-2-7619 MSTP Confi guration Router VLAN 101 ~ 200 MST Region 1 Instance 1 VLAN 111~120 Instance 2 VLAN 121~130 Instance 3 VLAN 131~140 Region Na me : tes t Revision :1 MST R egion 2 Instance 1 VLAN 170 Instance 2 VLAN 180~190 Instance 3 VLAN 191~195 Region Na me : t[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 227 8.4 V irtual Router Redu ndancy Protocol (VRRP) Virtual ro uter redundancy proto col (VRRP) is co nfiguring V irtual router (VRRP Group) consisted of VRRP routers to prevent netwo rk failure ca used by one dedicated router . Y ou can configure maximum 255 VRRP route rs in[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 228 A50010-Y3-C150-2-7619 8.4.1 Configuring VRRP T o configure the hiD 6615 S323 as device in V irtual Router , use the following command on Global Configuration mode. Then you can co nfigure VRRP by opening VRRP Configu- ration mode. Command Mode Description router vrrp INTERF ACE G[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 229 8.4.1.2 Access to Associated IP Address If you configure the function of accessing As sociated IP addre ss, you can access to As- sociated IP address by the command s such as ping. T o configure the function of accessing Asso ciated IP address, use the following command. [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 230 A50010-Y3-C150-2-7619 The following is an exampl e of configuring Ma ster Router and Backup Ro uter by comp ar- ing their Priorities: V irtual Routers, Layer 3 SWITCH 1 – 101 and Layer 3 SWITCH 2 – 102. Then, regardless of IP addresses, one that h as higher Priority , Layer 3[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 231 <Layer 3 SWITCH1: IP address - 10.0.0.1/24> SWTICH1(config)# router vrrp default 1 SWITCH1(config-router)# associate 10.0.0.5 SWITCH1(config-router)# exit SWITCH1(config)# show vrrp default - virtual router 1 ---------------------------------------------- state mast[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 232 A50010-Y3-C150-2-7619 Internet Master Router 1 IP : 10.0.0.3/24 Default Gateway : 10.0.0.5/24 Backup Router 1 IP : 10.0.0.2/24 Backup Router 2 IP : 10.0.0.1/24 Virtual Router Associate IP : 10.0.0.5/24 1. Link Down If the interface doesn ’ t recognize to be Link down, it is sup[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 233 T o configure an authentication password for se curity of V irtual Router , use the following command on VRRP configuration mode. Command Mode Description authentication c lear_text P ASSWORD Configures an authentication password. no authenticati on VRRP Deletes a configu[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 234 A50010-Y3-C150-2-7619 Also, to make Preempt “enable” as default setting, use the followi ng command on VRRP configuration mode. Command Mode Description no preempt VRRP Deletes the former configuration of Preempt to enable it. 8.4.1.7 VRRP St atistics T o display the VRRP st [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 235 8.5.1 Configuring Rate Limit T o set a port bandwidth, use the following com mand. Command Mode Description rate PORTS RA TE [ egress | in- gress ] Sets port bandwidth. If you input egress or ingress, you can configure outgoing packet or incoming packet. The unit is 64 Kb[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 236 A50010-Y3-C150-2-7619 8.6 Flood Guard Flood-guard limit s number of packet s, how many p acket s can be transmitted , in config- ured bandwid th, whereas Rate limit co ntrols pa ckets thro ugh configuring wi dth of band- width, which p ackets p ass through. This func tio n preven[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 237 8.6.2 Sample Configuration The following is an example of showing the c onfiguration af ter limiting the number of packet s transmitted to the port number 1 as 10,0 00. SWITCH(bridge)# mac-flood-guard 1 10000 SWITCH(bridge)# show mac-flood-guard --------------------------[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 238 A50010-Y3-C150-2-7619 8.8 Dynamic Host Configuration Protocol (DHCP) Dynamic host configuratio n protocol (DHCP) is a TCP/IP st andard for si mplifying the ad- ministrative management of IP address conf iguration by automat ing address config ura- tion for network client s. The D[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 239 The hiD 6615 S223/S323 flexibly provide s the functions as the DHCP server or DHCP re- lay agent according to your DHCP configuration. This chapter cont ains the following se ctions: • DHCP Server • DHCP Address Alloca tion with Option 82 • DHCP Lease Dat abase • [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 240 A50010-Y3-C150-2-7619 8.8.1.1 DHCP Pool Creation The DHCP pool is a grou p of IP addresse s that will be assigned to DHCP client s by DHCP serve r . Y ou can create various DHCP p ools th at can be conf igured with a dif ferent network, default gateway and range of IP addres se s[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 241 The following is an example for specifying the ran ge of IP addresses. SWITCH(config)# service dhcp SWITCH(config)# ip dhcp pool sample SWITCH(config-dhcp[sample])# network 100.1.1.0/24 SWITCH(config-dhcp[sample])# default-router 100.1.1.254 SWITCH(config-dhcp[sample])# r[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 242 A50010-Y3-C150-2-7619 The following is an example of setting default and ma ximum IP lease time. SWITCH(config)# service dhcp SWITCH(config)# ip dhcp pool sample SWITCH(config-dhcp[sample])# network 100.1.1.0/24 SWITCH(config-dhcp[sample])# default-router 100.1.1.254 SWITCH(confi[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 243 8.8.1.8 Domain Name T o set a domain name, use the following comm and. Command Mode Description domain-name DOMAIN Sets a domain name. no domain-name DHCP Pool Deletes a specified domain name. 8.8.1.9 DHCP Server Option If a DHCP server option is specified, the DHCP serv [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 244 A50010-Y3-C150-2-7619 T o select a recognition method of DHCP clients, use t he following command. Command Mode Description ip dhcp database-key { clie nt-id | hardware-address } Global Selects a recognition method of DHCP client s 8.8.1.12 IP Address V alidation Before assigning[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 245 T o display a list of valid or invalid (blocked) IP addresses, use the following com mand. Command Mode Description show ip dhcp authoriz ed-arp val id Shows a list of valid IP addresses. show ip dhcp authoriz ed-arp invalid Enable Global Bridge Shows a list of invalid (d[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 246 A50010-Y3-C150-2-7619 The following is an example of displaying DHCP p acket statistics. SWITCH(config)# show ip dhcp server statistics =========================================== Message Recieved/Error(0/0) ------------------------------------------- DHCP DISCOVER 0 DHCP REQUEST[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 247 8.8.2 DHCP Address Allocation with Option 82 The DHCP server provided by the hiD 6615 S223/S323 can assign dynamic I P addresse s based on DHCP option 82 information sent by the DHCP relay agent. The information sent via DHCP option 82 will be used to identify which port [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 248 A50010-Y3-C150-2-7619 T o delete specified option 82 informatio n for IP assignment, use th e following command. Command Mode Description no relay-information remote-i d ip A.B.C.D [ cir- cuit-id { hex HEXSTRING | index <0-65535> | text STRING }] no relay-information re mot[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 249 8.8.3 DHCP Lease Dat abase 8.8.3.1 DHCP Database Agent The hiD 6615 S223/S32 3 provides a feature t hat al lows to a DHCP server automatically saves a DHCP lease database o n a DHCP dat abase agent. The DHCP d atabase a gent should be a TFTP server , which stores a DHCP l[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 250 A50010-Y3-C150-2-7619 8.8.3.3 Deleting DHCP Lease Dat abase T o delete a DHCP lea se database, u se the following command. Command Mode Description clear ip dhcp leasedb A.B.C.D/M Deletes a DHCP lease database a specified subnet. clear ip dhcp leasedb po ol POOL Deletes a DHCP le[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 251 Before configuring DHCP server or relay , you need to use the service dhcp command first to activate the DHCP function in the system. 8.8.4.1 Packet Forwarding Address A DHCP client send s DHCP_DISCOVER messa ge to a DHCP server . DHCP_DISCOVER message is broadcasted with[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 252 A50010-Y3-C150-2-7619 T o enable the smart relay agent forwarding, use the following command. Command Mode Description ip dhcp smart-relay Enables a smart rela y . no ip dhcp sma rt-relay Global Disables a smart relay . 8.8.5 DHCP Option 82 In some networks, it is necessary to us[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 253 Client Identifier S poofing By using the agent-supplied remote ID opti on, the u ntrusted and as-yet unst andardi zed client identifier field need not be used by the DHCP server . Fig. 8.33 shows how the DHCP relay ag ent with the DHCP option 82 operates. DHCP Server DHCP[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 254 A50010-Y3-C150-2-7619 T o specify a remote ID, use the following command. Command Mode Description syst em-rem ote-id hex HEXSTRING syst em-rem ote-id ip A.B.C.D syst em-rem ote-id text STRING Option 82 S pecifies a remote ID. (default: system MAC address) T o specify a circuit I[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 255 If you specify the def ault trust policy as deny , the DHCP pack et that carries the informa- tion you specifies below will be permitted, and vice versa. T rusted Remote ID T o specify a trusted remote ID, use the followin g command. Command Mode Description trust remote-[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 256 A50010-Y3-C150-2-7619 8.8.6 DHCP Client An interface of the hiD 6615 S223/S323 can be configured as a DHCP client, whi ch can obtain an IP address from a DHCP server . T he configurable DHCP client functionality al- lows a DHCP client to use a user-sp ecified c lient ID, class ID[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 257 8.8.6.5 IP Lease T ime T o specify IP lease time that is requeste d to a DHCP serve r , use the following command. Command Mode Description ip dhcp client lease <120-21474 83637> Specifies I P lease time in the unit of second (default: 3600). no ip dhcp client lease[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 258 A50010-Y3-C150-2-7619 8.8.7 DHCP Snooping For enhanced security , the hiD 6615 S223/S323 provides the DHCP snoop ing feature. The DHCP snoopi ng filters unt rusted DHCP messages and maint ains a DHCP snooping binding tabl e. An untrusted message is a message received from out sid[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 259 8.8.7.3 DHCP Rate Limit T o set the number of DHCP packet per se co nd (pp s) that an interface can re ceive, use the following command. Command Mode Description ip dhcp snooping limit-rat e PORTS <1-255> Sets a rate limit for DHCP p ackets. (unit: pps) no ip dhcp s[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 260 A50010-Y3-C150-2-7619 8.8.7.6 DHCP Snooping Dat abase Agent When DHCP snooping is enable d, the system uses the DHCP snooping bi nding dat abase to store information about untrusted interfac es. Ea ch database e ntry (binding) has an IP address, associated MA C address, lease tim[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 261 The DHCP snooping dat abase agent should be TFTP server . 8.8.7.7 Displaying DHCP Snooping Configuration T o display DHCP snooping table, use the followi ng command. Command Mode Description show ip dhcp snoo ping Shows a DHCP snooping configuration. show ip dhcp snoo pin[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 262 A50010-Y3-C150-2-7619 T o enable IP source guard, DHCP snooping nee ds to be enabled. T o enable IP source guard with a source IP address filtering on a port, use the following command. Command Mode Description ip dhcp verify source PORT S Enables IP sour ce guard with a source I[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 263 8.8.9 DHCP Filtering 8.8.9.1 DHCP Packet Filtering For the hiD 6615 S223/S323, it is possible to block t he specific client with MAC address. If the blocked MAC address by administrato r request s IP add ress, the serve r does not assign IP . This function is to strength [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 264 A50010-Y3-C150-2-7619 DHCP Server A Client 1 Client 2 To prevent IP assignment from client 3, DHCP filteri ng is needed for the port hiX 5430 Client 3 The device that can be a DHCP server Request from client 1, 2 is transmitt ed to client 3 IP assigned by client 3 not by DHCP ser[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 265 8.9 Ethernet Ring Protection (ERP) The ERP is a Siemens pro tection protocol and procedure to protect Ethernet ring topolo- gies. It is a fast failure detection and recovery so that it decreases the time to prevent Loop under 50ms. The main characteristics of the ERP are [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 266 A50010-Y3-C150-2-7619 Normal Node Normal Node Normal Node RM Node P S 1. Secondary port of RM node is changed as unblocking state 2. Send Link Down Message 2. Send Link Down Message Fig. 8.36 Ring Protection When a Link Failure is recovered, a temporar y loop may occur . T o rect[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 267 3. Unblock the port recovered from Link Failure 2. Send RM Link Up mes sage Normal Node Normal Node Normal Node RM Node P S 2. Send RM Link Up message 1. Block RM Node of secondary port Fig. 8.38 Ring Recovery 8.9.2 Loss of T est Packet (LOTP) ERP re cognizes the Li nk Fa[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 268 A50010-Y3-C150-2-7619 8.9.3.2 RM Node T o configure RM Node, use the following command. Command Mode Description erp rmnode DOMAIN-ID Configures RM node of ERP node mode. no erp rmnode DOMAIN-ID Bridge Configures ERP node mode as normal node. 8.9.3.3 Port of ERP domain T o config[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 269 8.9.3.6 Manual Switch to Secondary T o configure Manual Switch to Secondary , use the following com mand. Command Mode Description erp ms-s DOMAIN-ID Bridge Configures ERP manual switch to secondary T o disable Manual Switch to Secondary , use the following command. Comma[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 270 A50010-Y3-C150-2-7619 T o return ERP T est Packet Interval as Default, use the following co mmand. Command Mode Description no erp test-packet-interval DO- MAIN-ID Bridge Configures ERP test pa cket interval as default value 8.9.3.10 Displaying ERP Configuration T o display a con[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 271 A switch, which is supposed to manage the other switches in stacki ng is named as Ma s- ter switch and the other switches ma naged by Master switch a re named as Slave switch. Regardless of inst alled place or co nnection state, M aster switch can che ck and manage all Sl[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 272 A50010-Y3-C150-2-7619 8.10.3 Disabling S t acking T o disable stacking, use the following command. Command Mode Description no stack Global Disables t he stacking function 8.10.4 Displaying St acking St atus Command Mode Description show stack Enable Global Shows a configuration [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 273 open Interface configuration mode of VLAN to regi ster as a switch group for sta cking. The following is an example of configuring Interfa ce of switch group as 1. SWITCH_A# configure terminal SWITCH_A(config)# interface 1 SWITCH_A(interface)# ip address 192.168.10.1/16 S[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 274 A50010-Y3-C150-2-7619 [Sample Configuration 2] Accessing from Master Switch to Slave Switch The following is an example of accessin g to Slave switch from Master switch configured in [Sample Configuration 1]. If you show the configuratio n of Slave switch in [Sample Configuration[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 275 Command Mode Description no storm-control { broadcast | multicast | dlf } [ PORTS ] Bridge Disables broadcast, multicast, or DLF storm control respectively . T o display a configuration of storm control, use the following command. Command Mode Description show storm-contr[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 276 A50010-Y3-C150-2-7619 port02 : 2200/ 1518 port03 : 2200/ 1518 port04 : 2200/ 1518 port05 : 2200/ 1518 port06 : 2200/ 1518 port07 : 2200/ 1518 port08 : 2200/ 1518 port09 : 2200/ 1518 port10 : 2200/ 1518 port11 : 1518/ 1518 port12 : 1518/ 1518 SWITCH(bridge)# 8.13 Blocking Direct B[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 277 The following is an example of configura tion to mtu size as 100. SWITCH(config-if)# mtu 100 SWITCH(config-if)# show running-config interface 1 ! interface default mtu 100 bandwidth 1m ip address 10.27.41.181/24 SWITCH(config-if)[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 278 A50010-Y3-C150-2-7619 9 IP Multicast T raditional IP network pro vided unicast transmission a host to se nd packet s to a singl e host or broadcast transmission. But multicast provides grou p transmission a host to send packet s to a group of all h osts. In the multicast environm[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 279 ing and PIM-SM should be configured at the same tim e. hiX 5430 More than one port on same interf ace Layer 3 Netw or k Multicast Server PIM-SM Set-top Box Set-top Box Multicast data IGMP Join/Leave message IGMP Snooping Fig. 9.3 IGMP Snoopi ng and PIM-SM Configuration Ne[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 280 A50010-Y3-C150-2-7619 9.1.3 Clearing MRIB Information Clearing T ot al or Partial Group Entry of MRIB If you use the clear ip mroute comma nd, the MRIB clears the m ulticast route entries in its multicast route t able, and removes the entrie s from the multicast forwarder . Each [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 281 9.1.4 Displaying MRIB Information T o display MRIB information, use the following command s Command Mode Description show ip mroute { dense | sparse } { count | summary } show ip mroute GROUP-ADDR [ SRC-IP-ADDRESS ] { dense | sp arse } { count | summary } show ip mroute G[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 282 A50010-Y3-C150-2-7619 9.1.7 Multicast Aging L2 and L3 Join information about Multicast Group used to apply on the chip set without Multicast S tream, which makes dissatisfaction for Maximum Multicast Entry . Multicast Ag- ing is to optimize Multicast Entry management using Multic[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 283 9.2 Internet Group Manage ment Protocol (IGMP) Internet Group Management Protocol (IGMP) is use d by hosts a nd routers that support multicasting. All the systems on a network ca n know which ho sts belon g to which multi- cast group s. IGMP is not m ulticast routing prot[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 284 A50010-Y3-C150-2-7619 9.2.1.2 Removing IGMP Entry T o clear IGMP interface entries, use the followin g command. Command Mode Description clear ip igmp interface INTE R- FA C E Clears IGMP interface entries on an interface. clear ip igmp group { * | A.B.C. D [ INTERF ACE ]} Enable[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 285 IGMP cache, but the swit ch is not a member . Therefo re it can support fast switching. T o configure IGMP static Join, use the f ollowing comm and. Command Mode Description ip igmp static-group A.B.C.D vla n VLAN por t PORT reporter A.B.C.D Configures IGMP static join se[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 286 A50010-Y3-C150-2-7619 querier for the interface af ter the pr evious querie r has stopped querying. Command Mode Description ip igmp querier-timeout <60-300> Configures the IGMP queier timeout. 60-300: number of seconds that router waits af ter the previous querier has stop[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 287 9.2.2.4 IGMP v2 Fast Leave In IGMP version 2, you can minimize the leave latency of IGMP membe rships. This com- mand is used when only one re ceiver host is connected to each interface. When this command is n ot configured, the r outer sends an IGMP group-sp ecific query[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 288 A50010-Y3-C150-2-7619 9.2.3 L2 MFIB Occasionally , unknown multicast traffic is flooded because a MA C address has timed out or has not been learned by the switch. T o guarantee that no multicast traffic is flooded to the port, use the following command. Command Mode Description [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 289 Step 3 Enable IGMP snooping on a VLAN interface. Command Mode Description ip igmp snooping vlan VLANS Global Enables IGMP snooping on a VLAN interface. VLANS: 1-4094 Step 4 Return to Privileged EXEC Enable mode using the exit command. T o diable IGMP snooping on a VLAN in[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 290 A50010-Y3-C150-2-7619 Multicast Packet Multicast Router hiX 5430 1. Request th e Multicast Packet 2. Transmit the Multicast packet to the port that sen d jo in massage Multicast Join request Multicast P acket Fig. 9.4 IP Multicasting IGMP Snoopi ng is a function that finds port, [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 291 T o disable IGMP snooping fast-leave, use the followin g command. Command Mode Description no ip igmp snooping immedia te- leav e Deletes the fast-leave. no ip igmp snooping vlan VLAN- ID immed iate- leave Global Deletes the fast-leave on a VLAN interface. T o display IGM[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 292 A50010-Y3-C150-2-7619 The Query Interval of IGMP v2 Snooping Querier T o configure a query interval of the querier , use the following command. Command Mode Description ip igmp snoopi ng querier quer y- interval <1-1800> Configures the IGMP snooping querier query interval o[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 293 T o display IGMP query parameter , use the following command. Command Mode Description show ip igmp snooping [ vl a n VLANS ] querier [ detail ] Enable Global Bridge V erifies that the IGMP snooping querier is enabled. 9.2.5.3 IGMP v2 Snooping Last-Member-Interval When re[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 294 A50010-Y3-C150-2-7619 9.2.5.4 IGMP v2 Snooping Report Method When IGMP report suppression is enabl ed, the switch forwards only one IGMP report pe r multicast router query . When report suppressi on is disa bled, all IGMP report s are for- warded to the multicast routers. Command[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 295 T o disable the port where multicast router is connected, use the following com mand. Command Mode Description no ip igmp snooping mr outer port { PORTS | cp u } Disables the port where mult icast router is connected on the system no ip igmp snoopin g vlan VLANS mrouter p[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 296 A50010-Y3-C150-2-7619 T o flood multicast traffic when TC N packet is re ceived, use the following comm and. Command Mode Description ip igmp snooping tc n flood Designates the port where multicast router is con- nected to on the system. ip igmp snooping tcn vlan VLANS flood Glob[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 297 9.2.6 IGMP v3 S nooping This chapter consist s of these sections • IGMP Snoopi ng V ersion • Join Host Management • Immediate Block 9.2.6.1 IGMP Snooping V ersion The report s sent to the multicast router are s ent based on the version of that interface. A user can [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 298 A50010-Y3-C150-2-7619 T o display a configuration, use the following command. Command Mode Description show ip igmp snooping explicit- tracking { vlan VLANS | port PORTS | group A.B.C.D } Enable Global Bridge Shows a configuration. 9.2.6.3 Immediate Block For a Layer 2 IGMP v2 ho[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 299 9.2.7.1 Enabling MVR T o use the MVR, enable the MVR function with the following comm and. Command Mode Description mvr Enables MVR on the system. no mvr Global Disables MVR on the system. 9.2.7.2 MVR Group Address S tatically configure a VLAN interface to rece ive multic[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 300 A50010-Y3-C150-2-7619 T o delete the statically configured MVR group address, use the following comm and. Command Mode Description no mvr vlan VLAN helper Global Deletes a MVR group address. IP ADDRESS: specific IP address 9.2.7.4 Send and Receive Port S tatically configure a VLA[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 301 dropped, and the port is n ot allowed to receive IP multica st traffic from that group. If the filtering action permits a ccess to the multicas t gro up, the IGMP report from the port is forwarded for normal processi ng. IGMP filtering controls only group spe cific query [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 302 A50010-Y3-C150-2-7619 9.2.8.4 Applying IGMP Profile to the Filter Port T o apply the configured IGMP Profile to the filter port, use the following comman d. Command Mode Description ip igmp filter port PORT S profile <1-2147483647> Global Configures IGMP profile. PORTS: por[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 303 9.2.9 Displaying IGMP Snooping T able T o display an IGMP snooping t able, use the following command. Command Mode Description show ip igmp snoo ping groups [ IP-ADDRESS ] show ip igmp snoo ping groups port [ POR T | cpu ] show ip igmp snoo ping groups vla n VLANS show ip[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 304 A50010-Y3-C150-2-7619 1. Multicast packet transmitted to RP (Rendezvous Point) A B C D E F 2. Ask RP for multicast packet 3. RP transmits multicast packet for the request RP 2. Ask RP for multicast packet 3. RP transmits multi cast packet for the request Fig. 9.5 RPT of PIM-SM Al[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 305 9.3.1.1 PIM-SM and Passive Mode Y ou need to open Interface Configuration mode of specified interface for a ctivating PIM- SM on Ethernet interface. T o open Interface Configuration mode, use the following com- mand. Command Mode Description interface INTERF ACE Global Op[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 306 A50010-Y3-C150-2-7619 the DR. 9.3.1.3 Filters of Neighbor in PIM Enable filtering of neighbors on the interface. When configuring a neighbor filter-PIM-SM will either not est ablish adjacency with the neighbor , or terminate adjacen cy with the ex- isting neighbors-if denied by f[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 307 9.3.1.5 PIM Debug T o activate PIM-SM debugging, use the following command. Command Mode Description debug pim { all | event s | nexthop | mib | mfc | nsm | packet [ in | out ] | st ate | timer } Activates PIM debugging. all : all PIM debugging events: PIM event s nexthop[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 308 A50010-Y3-C150-2-7619 priority , becomes BSR among them. If there are routers, which have same pri ority , then one router , which has the highest IP address, becom es BSR. It is possible to configure t he following mess ages, which are inclu ded in candidate-BSR message. Since i[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 309 decide which IP address to be used as candidate-R P . This command is used to st atically configure the RP address f or multicast groups. T o configure IP address to be used in candidate-RP , use the following command. Command Mode Description ip pim rp-address A.B.C.D [&[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 310 A50010-Y3-C150-2-7619 9.3.4.3 KA T (Keep Alive T ime) of RP Y ou can configure KA T for (S, G) state s at RP to monitor PIM Register packet s, overridi ng the generic KA T timer value. Command Mode Description ip pim rp-register-kat <1-65535> Configures Keep Alive T ime. 1-[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 31 1 T o configure the registration suppression time, use the following co mmand. Command Mode Description ip pim register-suppr ession <1-65535> Configures the time of registration suppression. 1-65535: The register suppression on time in seconds. no ip pim register-su[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 312 A50010-Y3-C150-2-7619 sage in response. It is normally the loopback interface addres s, but can also be other physical addresse s. This address mu st be adver tised by uni cast routing protocols on the DR. Command Mode Description ip pim register- source { A.B.C.D | INTERF ACE } [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 313 9.3.7 PIM Join/Prune Interoperability T o configure the TX interval of PIM/Join/Prune Message, use the following com mand. Command Mode Description ip pim message-inter val <1-65535> Configures Join/Prune timer value. 1-65535: interval (unit: second) no ip pim messa[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 314 A50010-Y3-C150-2-7619 When the Register message is tran smitted, the range of Checksum in header conforms to header pa rt as RFC st andard, b ut whole pa cket is included in the range of checksum in case of Cisco router . For comp atibility with Cisco router , you should configur[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 315 9.3.9 PIM-SSM Group T o define the Source S pecific Multicast (SSM ) range of IP multicast addresses, use the following command. When an SSM range of IP multicast addres ses is defined by the ip pim ssm command, no Multica st Source Discovery Protocol (MSDP) Source -Activ[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 316 A50010-Y3-C150-2-7619 T o display the PIM Snooping configuration, use the following command. Command Mode Description show ip pim snoopi ng Sho ws the PIM snooping configuration such as en- able/disable status and the enabled VLANs. show ip pim snooping vlan VLANS Shows the multi[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 317 10 IP Routing Protocol Routing functionalities such as RIP , OSPF , BGP and PIM-SM are only available for hi D 6615 S323. (Unavailable for hiD 6615 S 223) 10.1 Border Gateway Protocol (BGP) The Border Gateway Protocol (BGP ) is an exteri or gateway protocol (EGP) that is [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 318 A50010-Y3-C150-2-7619 10.1.1 Basic Configuration 10.1.1.1 Configuration T ype of BGP When configuring BGP , you can select BGP configuration type between st andard BGP and ZebOS BGP for the hiD 6615 S323. The standa rd BGP is one of the general BGP configuration type, which inclu[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 319 Ste p 2 T o specify a network to operate with BGP , use the following command. Command Mode Description network A.B.C.D/M network A.B.C.D mask NET- MASK Router Adds BGP network to operate. A.B.C.D/M: network address with netmask A.B.C.D: network address NETMASK: subnet ma[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 320 A50010-Y3-C150-2-7619 10.1.2.1 Summary of Path Aggregation combines the characteristics of several dif ferent routes and advert ises a sin- gle route. In the example of 2 route s info rmation of 172.16.0.0/24 and 1 72.16.1.0/24, the as-set pa rameter creates an agg regate entry a[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 321 10.1.2.3 Multi-Exit Discriminator (MED) During the best-path sel ection proces s, the switch comp ares weight, local preference an d as-path in turn among the simila r param eters of BGP routers. Then, the MED is consid- ered when selecting the be st path amon g many alte[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 322 A50010-Y3-C150-2-7619 T o ignore AS-path for sele cting the best path, use the followin g command. Command Mode Description bgp bestpath as-path ignore Ignores the information of AS-path as a factor in the algorithm for choosing the best route. no bgp bestpath as-path ignore Rout[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 323 T o compare MED values on the exchange of path information betwee n Confederation Peers, use the following command. Command Mode Description bgp bestpath med confed [ mi ss- ing-as-wor st ] bgp bestpath med missing-as- wor st [ confed ] Router Configures the router to con[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 324 A50010-Y3-C150-2-7619 • Rest art T ime It’s the waiting time for the resta rting of Neighboring router’s BGP process. Resta rt time allows BGP pro cess time to rest art and implement the intern al connection (The session). However , if it’s not working properly , it is co[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 325 10.1.4 BGP Neighbor T o assign IP address or peer group na me for BGP Neig hboring router within specifie d AS number , use the following command. Command Mode Description neighbor { NEIGHBOR-IP | WOR D } remo te-as <1-65535> Configures BGP neighboring router and sp[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 326 A50010-Y3-C150-2-7619 T o create a BGP Peer Group, use the following command. Command Mode Description neighbor NAME peer-group Create a BGP peer group. NAME: peer group name no neighbor NAME peer-group Router Delete the BGP peer group created before. T o specify neighbor to the [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 327 T o disable the exchange information with a specified route r or peer group, use the follow- ing command. Command Mode Description neighbor { NEIGHBOR-IP | WOR D } shut down Shutdowns any active sessi on for the specified router or peer group and delete all related routin[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 328 A50010-Y3-C150-2-7619 T o reset the sessions of all peers and initialize the details of ro ute configurations, use the following command. Command Mode Description clear ip bgp * in [ prefix-filter ] clear ip bgp * ipv4 { unicast | multicast } in [ prefix-filter ] Resets the sessi[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 329 Command Mode Description clear ip bgp <1-65535> soft [ in | out ] clear ip bgp <1-65535> ipv4 { unicast | multicast } soft [ in | out ] Global Updates the route information only while the session is possible of BGP neighboring routers which are config- ured a [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 330 A50010-Y3-C150-2-7619 See Section 10.1.5.1 when you configu re the detail p arameters. T o reset the sessions of BGP router co nnected to external AS an d initialize the detail s of route configurations, use the following co mmand. Command Mode Description clear ip bgp external i[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 331 Command Mode Description clear ip bgp peer-group GROUP out clear ip bgp peer-group GROUP ipv4 { unicast | multicast } out Resets the session for all members of specified peer group. GROUP: peer group name out: clears outgoing advertised routes. unicast | multicast: addres[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 332 A50010-Y3-C150-2-7619 Command Mode Description show ip bgp neighbor s NEIGHBOR-IP recei ved-routes show ip bgp ipv4 { unicast | mul- ticast } neighbors NEIGHBOR-IP received-routes The received-route s option displays all received routes (both accepted and rejected) from the speci[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 333 10.2 Open Shortest Path First (OSPF) Open shortest path first (OSPF) is an interi or gate way protocol developed by the OSPF working group of Internet Engineering T ask Fo rce (IETF). OSPF designed for IP network support s IP subnetting and marks on information fro m exte[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 334 A50010-Y3-C150-2-7619 Step1 Open Router Configuration mode from G lobal Configu ration mode. Command Mode Description router ospf [<1-65535>] Opens Rout er Configuration mode with enabling OSPF . no router os p f [<1-65535>] Global Disables OSPF routing protocol. In c[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 335 Ste p 3 Use the network command to specify a network to operate with OSPF . There are two ways to show network information co nfigurations. Firstly , show s IP address with bitmask like “10.0.0.0/8”. Seco ndly , shows IP addre ss with wildcard bit inf ormation like ?[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 336 A50010-Y3-C150-2-7619 10.2.4.1 Authentication T ype Authentication encodes communications amo ng the routers. This function is for security of information in OSPF router . T o configure authentication of OSPF router for security , use the following command. Command Mode Descripti[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 337 T o configure an authentication key which is based on MD5 encoding, use the following command. Command Mode Description ip ospf message-digest-ke y <1- 255> md5 KEY [ active ] ip ospf message-digest-ke y <1- 255> md5 [ active ] ip ospf A.B.C.D message-digest- [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 338 A50010-Y3-C150-2-7619 T o delete a configured interface cost for OSPF , use the following command. Command Mode Description no ip ospf cost no ip ospf A.B.C.D cost Interface Deletes a configured an interface cost for OSPF . 10.2.4.4 Blocking T ransmission of Route Information Dat[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 339 T ransmit dela y is considering of the configuratio n for LSA transmission time. The interval explained as above must be consi stent across all routers in an att ached net- work. T o configure a Hello interval, use the following command. Command Mode Description ip ospf h[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 340 A50010-Y3-C150-2-7619 10.2.4.6 OSPF Maximum T ransmission Unit (MTU) Router verifies MTU when DD (Dat abase De scription) is exchanging among the route rs on OSPF networks. Basically , OSPF network can not be organized if there are dif ferent sizes of MTUs between routers. Theref[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 341 T o delete a configured priority of OSPF router , use the following co mmand. Command Mode Description no ip ospf priority no ip ospf A.B.C.D priority Interface Deletes a configured priority of OSPF router . 10.2.4.8 OSPF Network T ype There are 4 types of OSPF netwo rk. [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 342 A50010-Y3-C150-2-7619 T o delete a configured router communicated by non-b roadcast type, use the following command. Command Mode Description no neighbor A.B.C.D cos t [<1-65535>] no neighbor A.B.C.D pr iorit y [<0-255>] no neighbor A.B.C.D priorit y poll-interval [&l[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 343 10.2.6.2 Default Cost of Area The default cost of Area is configured only in ABR. ABR function is for delivering t he summary default route to stub area or NSSA, in that ca ses the default cost of area must be required. However , ABR which does not have stu b area or NSSA[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 344 A50010-Y3-C150-2-7619 10.2.6.4 Not So Stubby Area (NSSA) NSSA (Not So S tubby Area) is stub Area whic h can transmit the routing information to Area by ASBR. On the other hand, S tub Area cannot transmit the routing information to area. T o configure NSSA, use the following comma[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 345 T o configure NSSA with one option, use the followin g command. Command Mode Description area <0-4294967295> nssa default-i nformation - originate area <0-4294967295> nssa de f a ult-i nformation - originate metric <0-16777214> area <0-4294967295> [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 346 A50010-Y3-C150-2-7619 10.2.6.5 Area Range In case of OSPF belon gs to several Areas, Area routing information can b e shown in one routing path. Like as ab ove, various routing informa tion of Area can be comb ined and summarized to transmit to out side. T o summarize and combine[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 347 10.2.6.7 Stub Area S tub Area is that ABR is connected to Backbone Area. If it is assigned as S tub Area, ABR will notify the default path to S tub Area and other routing protocol information will not transmit to S tub Area. T o create S tub Area, use the following comman[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 348 A50010-Y3-C150-2-7619 In this time, if there is no answer from receiver for c onfigured time, the ro uter trans- mits LSA ag ain. Retransmit-interval is configu ration of the time interval betwe en transmission and retransmissi on • Dead-interval If there is no hello packet for[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 349 T o delete a configured virtual link, use the following command. Command Mode Description no area <0-4294967295> virtual-link A.B.C.D authentication [ message- digest | null ] no area <0-4294967295> virtual-link A.B.C.D authentication-ke y KEY no area <0-42[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 350 A50010-Y3-C150-2-7619 T o configure the Graceful Restart, use the following command. Command Mode Description cap ability restart { graceful | reliable-graceful | signaling } Configures the Graceful Restart. no capability rest art Router Releases the configuration. The following [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 351 T o release the configuration, use the following comm and. Command Mode Description no ospf rest art grace-period <1-1800> ospf rest art helper never no ospf rest art helper max-grace-period <1- 1800> Global Releases t he configuration. 10.2.9 Op aque-LSA Supp[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 352 A50010-Y3-C150-2-7619 • route-map T ransmit s specific routing informatio n to assign ed route which has MAP-NAME. The detail op tions for default route configuratio n are classified in 4 as above, and those configurations can be sele cted more than 2 options without orde r. Th[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 353 T o configure the period of finding, use the following command. Command Mode Description timers spf SPF-DELA Y SPF- HOLD Router Configures the period of finding in the unit of second. SPF-DELA Y : 0-2147483647 (default: 5) SPF-HOLD: 0-2147483647 (defau lt: 10) T o release[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 354 A50010-Y3-C150-2-7619 The following example shows h ow to configure it with more than 2 option s: • redistribute { bgp | conne cted | kernel | rip | static } metric <0-16777214> tag <0- 4294967295> • redistribute { bgp | connected | kernel | rip | st atic } ta g &[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 355 The following example shows h ow to configure the dist ance with more than 2 o ptions: • dist ance osp f external <1-255> inter-area <1-2 55> • dist ance osp f inter-area <1-255> intra-area <1-255> T o make it as a default, use the following co[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 356 A50010-Y3-C150-2-7619 10.2.16 Blocking Routing Information The hiD 6615 S323 can classify and restrict t he routing information. T o configure this function, sort the specific routing information in acce ss-list first, and block the routing in- formation in access-list. T o block[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 357 10.2.18.1 Displaying OSPF Protocol Information Y ou can verify several information about OSPF protocol. T o display the information about OSPF protocol, use the following com mand. Command Mode Description show ip ospf Shows the information about OSPF protocol. show ip os[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 358 A50010-Y3-C150-2-7619 T o display the interface information of OSPF , use the following command. Command Mode Description show ip ospf interface [ INTERF ACE ] Enable Global Shows the interface information of OSPF . T o display the information of neighbor route, use the following[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 359 10.2.18.2 Displaying Debugging Information The hiD 6615 S323 use s debug command to find the reason of problem. Use t he follow- ing command. Command Mode Description debug ospf all Shows all the debugging information. debug ospf event s [ abr | asbr | lsa | nssa | os | r[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 360 A50010-Y3-C150-2-7619 10.2.18.4 Maximum Process of LSA The hiD 6615 S323 can configures maximum nu mber of LSA to process. LSA is classified as internal route LSA and external route L SA, maximum number of LSA can configure on each class. And also, If process of LSA is over the c[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 361 10.3 Routing Information Protocol (RIP) Routing Information Protocol (RIP), as it is more commonly used than any other Routing Protocols, for use in small, homogene ous networks. It is a cla ssical dist ance-vector rout- ing protocol with using hop count. RIP is formally [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 362 A50010-Y3-C150-2-7619 Step 2 Configure the network to operate as RIP . Command Mode Description network { A.B.C.D/M | INTER- FA C E } Establishes the network to operate as RIP . A.B.C.D/M: IP prefix (e.g. 35.0.0.0/8) INTERF ACE: interface name no networ k { A.B.C.D/M | INTER- FA [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 363 Command Mode Description neighbor A.B.C.D Configures a neighbor router to exchange routing in- formation. A.B.C.D: neighbor address no neighbor A.B.C.D Router Deletes the neighbor router . Y ou can block the routing information to specific inte rface by using the p assive[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 364 A50010-Y3-C150-2-7619 Command Mode Description ip rip receive version 1 Receives RIP v1 type p acket only from the interface. ip rip receive version 2 Receives RIP v2 type p acket only from the interface. ip rip receive version 1 2 Interface Receives both RIP v1 and RIP v2 type p[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 365 Command Mode Description redistribute { kernel | connected | static | osp f | bgp } redistribute { kernel | connected | static | osp f | bgp } metric <0-16> redistribute { kernel | connected | static | osp f | bgp } route-map WOR D redistribute { kernel | connected [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 366 A50010-Y3-C150-2-7619 Command Mode Description match interface INTERF ACE T ransmit s the information to specified interface only . INTERF ACE: interface name match ip address {<1-199> | <1300-2699> | N AME } T ransmits the information matched with access-list. 1-199:[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 367 10.3.7 Administrative Dist ance Administrative distance is a measure of the tr ustworthiness of the sour ce of the routing in- formation. In large scaled network, Administrative dist ance is the feature that routers use in order to select the best path w hen there are two[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 368 A50010-Y3-C150-2-7619 10.3.9.1 Filtering Access List and Prefix List The hiD 6615 S323 switch is able to permit and deny condition s that you can use to filter inbound or outbound rout es by access-list or prefix-list. Use the distribute-list comm and to apply the access list to [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 369 T o add the value of routing metrics, use the following command. Command Mode Description offset-list ACCESS-LIST { in | out } <0-16> [ INTERF ACE ] Router Add an offset to incoming or outgoing metrics to r outes learned via RIP . ACCESS-LIST : a ccess list name 0-1[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 370 A50010-Y3-C150-2-7619 T o adjust the timers, use the following command. Command Mode Description timers basic UPDA TE TIMEOUT GARBAGE Adjusts RIP network timers. no timers basic UPDA TE TIME- OUT GARBAGE Router Restores the default timers. 10.3.12 Split Horizon Normally , routers[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 371 T o configure RIP authentication, use the following command. Command Mode Description ip rip authentication key-chain NAME Enables authentication for RIP v2 p ackets and to spec- ify the set of keys that can be used on an interface. NAME: name of key chain ip rip authenti[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 372 A50010-Y3-C150-2-7619 command. Command Mode Description recv-bu f fer size <8196- 2147483647> Sets the UDP Buf fer size value for using RIP . 8196-2147483647: UDP buffer size value no recv-buffer size <8196- 2147483647> Router Restore the default value of UDP buffer s[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 373 11 System Sof tware Upgrade For the system enhancem ent and sta bility , new system software m ay be released. Using this software, the hiD 6615 S223/323 can be upgraded without any hardware ch ange. Y ou can simply upgrade your system software with th e provided upgrade [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 374 A50010-Y3-C150-2-7619 ############################################################################## ############################################################################## ############################################################ 13661792 bytes download OK. SWITCH# sho[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 375 Ste p 2 T o enable the MGMT interface to communicate with TFTP server , you need to configure a proper IP address, subnet mask and gateway on the interface. T o configure an IP address, use the followin g command. Command Mode Description ip A.B.C.D Configures an IP addre[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 376 A50010-Y3-C150-2-7619 Ste p 3 Download the new system sof tware via TFTP using the following command. Command Mode Description load { os1 | os2 } A.B.C.D FIL E- NAME Boot Downloads the system software. os1 | os2: the area where the system software is stored A.B.C.D: TFTP server a[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 377 Ste p 4 Reboot the system with the new system software u sing the following command. Command Mode Description reboot [ os1 | os2 ] Boot Reboots the system with specified system sof tware. os1 | os2: the area where the system software is stored If the new system softw are [...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 378 A50010-Y3-C150-2-7619 Ste p 4 Exit the FTP client using the followin g command. Command Mode Description exit FTP Exits the FTP client. T o reflect the downloaded system sof tware, the system must rest art using the reload command! For more inform ation, see Section 4.1.8.1. The [...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 379 12 Abbreviations ACL Access Control List ARP Address Resolution Protocol BGP Border Gateway Protocol CBS Committed Burs t Size CE Communauté Européenne CIDR Classless Inter Domain Routing CIR Committed Information Rate CLI Command Line Interface CoS Class of Service CPE[...]

U M N : C L I U s e r M a n u a l SURPASS hiD 6615 S223/S323 R1.5 380 A50010-Y3-C150-2-7619 IETF Internet Engineering T ask Force IGMP Internet Group Management Protocol IP Internet Protocol IRL Input Rate Limiter ISP Internet Service Provider ITU International T elecommunication Union ITU-T International T elecommunication Union - T elecommunicati[...]

User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 381 STP S panning T ree Protocol SW Software TCP T ransmission Control Protocol TDM T ime Division Multiplexing TFTP T rivial FTP TMN T elecommunication Management Net work TOS T ype of Service UDP User Datagram Protocol UMN User Ma nual VID VLAN ID VLAN V irtual Local Area N[...]