3Com 2924 Sfp Users Manual ManualsLib Makes It Easy To Find Manuals Online!

2014-12-12

: 3Com 3Com-2924-Sfp-Users-Manual-118772 3com-2924-sfp-users-manual-118772 3com pdf

Open the PDF directly: View PDF .
Page Count: 216 [warning: Documents this large are best viewed by clicking the View PDF Link!]

3Com® Baseline Switch 2916-SFP Plus

and Baseline Switch 2924-SFP Plus

User Guide

3CBLSG16 / 3CBLSG24

www.3Com.com

Part Number 10016143 Rev. AA

Published May 2007

3Com Corporation

350 Campus Drive

Marlborough,

MA 01752-3064

in any form or by any means or used to make any derivative work (such as translation, transformation, or

adaptation) without written permission from 3Com Corporation.

3Com Corporation reserves the right to revise this documentation and to make changes in content from time

to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.

3Com Corporation provides this documentation without warranty, term, or condition of any kind, either

implied or expressed, including, but not limited to, the implied warranties, terms or conditions of

merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or

changes in the product(s) and/or the program(s) described in this documentation at any time.

If there is any software on removable media described in this documentation, it is furnished under a license

agreement included with the product as a separate document, in the hard copy documentation, or on the

removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,

please contact 3Com and a copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein are

provided to you subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense.

Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or

as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are

provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited

rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is

applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or

documentation contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not

be registered in other countries.

3Com and the 3Com logo are registered trademarks of 3Com Corporation.

Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and Windows

NT are registered trademarks of Microsoft Corporation. Novell and NetWare are registered trademarks of

Novell, Inc. UNIX is a registered trademark in the United States and other countries, licensed exclusively

through X/Open Company, Ltd.

IEEE and 802 are registered trademarks of the Institute of Electrical and Electronics Engineers, Inc.

All other company and product names may be trademarks of the respective companies with which they are

associated.

ENVIRONMENTAL STATEMENT

It is the policy of 3Com Corporation to be environmentally friendly in all operations. To uphold our policy, we

are committed to:

Establishing environmental performance standards that comply with national legislation and regulations.

Conserving energy, materials and natural resources in all operations.

Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized

environmental standards. Maximizing the recyclable and reusable content of all products.

Ensuring that all products can be recycled, reused and disposed of safely.

Ensuring that all products are labelled according to recognized environmental standards.

Improving our environmental record on a continual basis.

End of Life Statement

3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.

Regulated Materials Statement

3Com products do not contain any hazardous or ozone-depleting material.

Environmental Statement about the Documentation

The documentation for this product is printed on paper that comes from sustainable, managed forests; it is

fully biodegradable and recyclable, and is completely chlorine-free. The varnish is environmentally friendly, and

the inks are vegetable-based with a low heavy-metal content.

ABOUT THIS GUIDE

This guide provides information about the Web user interface for the

3Com® Baseline Switch 2916-SFP Plus and Baseline Switch 2924-SFP

Plus. The Web interface is a network management system that allows you

to configure, monitor, and troubleshoot your switch from a remote web

browser. The Web interface web pages are easy-to-use and

easy-to-navigate.

User Guide

Overview

This section provides an overview to the User Guide. The User Guide

provides the following sections:

■Getting Started — Provides introductory information about the

Switch 2916 and 2924 and how they can be used in your network. It

covers summaries of hardware and software features.

■Using the 3Com Web Interface — Provides information for using

the Web interface including adding, editing, and deleting device

configuration information.

■Viewing Basic Settings — provides information for viewing and

configuring essential information required for setting up and

maintaining device settings.

■Managing Device Security — Provides information for configuring

both system and network security, including traffic control, ACLs, and

device access methods.

■General System Information — Provides information for

configuring general system information including the user-defined

system name, the user-defined system location, and the system

contact person.

■Configuring Ports — Provides information for configuring port

settings.

4ABOUT THIS GUIDE

■Aggregating Ports — Provides information for configuring Link

Aggregation which optimizes port usage by linking a group of ports

together to form a single LAG.

■Configuring VLANs — Provides information for configuring VLANs.

VLANs are logical subgroups with a Local Area Network (LAN) which

combine user stations and network devices into a single virtual LAN

segment, regardless of the physical LAN segment to which they are

attached.

■Configuring IP and MAC Address Information — Provides

information for configuring IP addresses, DHCP and ARP.

■Configuring IGMP Snooping — Provides information for

configuring IGMP Snooping.

■Configuring Spanning Tree — Provides information for configuring

Classic and Rapid Spanning Tree.

■Configuring SNMP — Provides information for configuring the

Simple Network Management Protocol (SNMP) which provides a

method for managing network devices.

■Configuring Quality of Service — Provides information defining

Quality of Service, including DSCP and CoS mapping, policies, and

configuring Trust mode.

■Managing System Files — Provides information for defining file

maintenance.

■Managing System Logs — Provides information for viewing system

logs, and configuring device log servers.

■Viewing Statistics — Provides information for viewing RMON and

interface statistics.

■Managing Device Diagnostics — Provides information for

managing device diagnostics.

Intended Audience 5

Intended Audience This guide is intended for network administrators familiar with IT

concepts and terminology.

If release notes are shipped with your product and the information there

differs from the information in this guide, follow the instructions in the

release notes.

Most user guides and release notes are available in Adobe Acrobat

Reader Portable Document Format (PDF) or HTML on the 3Com Web site:

■http://www.3Com.com

Conventions Table 1 lists conventions that are used throughout this guide.

Documentation

In addition to this guide, other documentation available for the 3Com

Baseline Switch 2916-SFP Plus/2924-SFP Plus include the following:

■Safety and Support Information: Provides installation, set-up, and

regulatory compliance information.

Table 1 Notice Icons

Icon Notice Type Description

Information

note

Information that describes important features or

instructions.

Caution Information that alerts you to potential loss of data

or potential damage to an application, system, or

device.

Warning Information that alerts you to potential personal

injury.

CONTENTS

ABOUT THIS GUIDE

User Guide Overview ................................................................................. 3

Intended Audience..................................................................................... 5

Conventions .............................................................................................. 5

Related Documentation ............................................................................. 5

1GETTING STARTED

About the Switch 2916 and 2924 ............................................................ 12

Front Panel Detail..................................................................................... 13

LED Status Indicators................................................................................ 14

System Specifications ............................................................................... 15

Installing the Switch................................................................................. 16

Setting Up for Management .................................................................... 17

Methods of Managing a Switch ............................................................... 17

Switch Setup Overview ............................................................................ 18

Using the Command Line Interface (CLI) .................................................. 21

Setting Up Web Interface Management ................................................... 25

Setting Up SNMP Management V1 or V2 ................................................. 26

Default Users and Passwords.................................................................... 27

Upgrading Software using the CLI............................................................ 27

2USING THE 3COM WEB INTERFACE

Starting the 3Com Web Interface............................................................. 28

Understanding the 3Com Web Interface .................................................. 30

Using Screen and Table Options ............................................................... 33

Saving the Configuration ......................................................................... 37

Resetting the Device ................................................................................ 38

Restoring Factory Defaults........................................................................ 39

Logging Off the Device ............................................................................ 40

3VIEWING BASIC SETTINGS

Viewing Device Settings ...........................................................................41

Viewing Color Keys ..................................................................................43

4MANAGING DEVICE SECURITY

Configuring System Access.......................................................................45

Defining RADIUS Clients...........................................................................50

Defining Port-Based Authentication (802.1X)............................................52

Defining Access Control Lists....................................................................57

Enabling Broadcast Storm.........................................................................78

5GENERAL SYSTEM INFORMATION

Viewing System Description......................................................................80

Configuring System Name Information.....................................................82

Configuring System Time .........................................................................83

6CONFIGURING PORTS

Viewing Port Settings ...............................................................................85

Defining Port Settings...............................................................................88

Viewing Port Details .................................................................................90

7AGGREGATING PORTS

Viewing Link Aggregation ........................................................................93

Configuring Link Aggregation ..................................................................93

Modifying Link Aggregation .....................................................................95

Removing Link Aggregation......................................................................96

Viewing LACP ..........................................................................................97

Modifying LACP .......................................................................................98

8CONFIGURING VLANS

Viewing VLAN Details.............................................................................102

Viewing VLAN Port Details......................................................................103

Creating VLANs......................................................................................104

Modifying VLAN Settings ....................................................................... 105

Modifying Port VLAN Settings ................................................................ 107

Removing VLANs ................................................................................... 108

9CONFIGURING IP AND MAC ADDRESS INFORMATION

Defining IP Addressing........................................................................... 109

Configuring ARP Settings....................................................................... 110

Configuring Address Tables.................................................................... 114

10 CONFIGURING IGMP SNOOPING

Introduction........................................................................................... 123

Defining IGMP Snooping........................................................................ 124

11 CONFIGURING SPANNING TREE

Viewing Spanning Tree .......................................................................... 127

Defining Spanning Tree.......................................................................... 130

Modifying Spanning Tree ....................................................................... 133

12 CONFIGURING SNMP

Defining SNMP Communities ................................................................. 136

Removing SNMP Communities............................................................... 138

Defining SNMP Traps ............................................................................. 139

Removing SNMP Traps ........................................................................... 140

13 CONFIGURING QUALITY OF SERVICE

Viewing CoS Settings............................................................................. 143

Defining CoS ......................................................................................... 144

Viewing CoS to Queue .......................................................................... 145

Defining CoS to Queue .......................................................................... 145

Viewing DSCP to Queue ........................................................................ 147

Configuring DSCP Queue....................................................................... 148

Configuring Trust Settings...................................................................... 149

Viewing Bandwidth Settings .................................................................. 150

Defining Bandwidth Settings ..................................................................151

Defining Voice VLAN ..............................................................................153

14 MANAGING SYSTEM FILES

Backing Up System Files .........................................................................163

Restoring Files ........................................................................................164

Upgrade the Firmware Image .................................................................165

Activating Image Files.............................................................................166

15 MANAGING SYSTEM LOGS

Viewing Logs..........................................................................................168

Configuring Logging ..............................................................................169

16 VIEWING STATISTICS

Viewing Port Statistics ............................................................................172

17 MANAGING DEVICE DIAGNOSTICS

Configuring Port Mirroring .....................................................................175

Viewing Cable Diagnostics .....................................................................178

A3COM NETWORK MANAGEMENT

3Com Network Supervisor......................................................................181

3Com Network Director .........................................................................182

3Com Network Access Manager ............................................................182

3Com Enterprise Management Suite ......................................................183

Integration Kit with HP OpenView Network Node Manager....................183

BDEVICE SPECIFICATIONS AND FEATURES

Related Standards ..................................................................................184

Environmental ........................................................................................184

Physical ..................................................................................................184

Electrical.................................................................................................185

Switch Features ......................................................................................185

CPIN-OUTS

Console Cable ....................................................................................... 189

Null Modem Cable................................................................................. 190

PC-AT Serial Cable ................................................................................. 190

Modem Cable........................................................................................ 190

Ethernet Port RJ-45 Pin Assignments...................................................... 191

DTROUBLESHOOTING

Problem Management ........................................................................... 192

Troubleshooting Solutions ...................................................................... 192

E3COM CLI REFERENCE GUIDE

Getting Started with the Command Line Interface ................................. 195

CLI Commands ...................................................................................... 196

FGLOSSARY

............................................................................................................. 206

GOBTAINING SUPPORT FOR YOUR 3COM PRODUCTS

Solve Problems Online............................................................................ 212

Purchase Extended Warranty and Professional Services........................... 212

Access Software Downloads .................................................................. 213

REGULATORY NOTICES

1GETTING STARTED

This chapter contains introductory information about the 3Com® Baseline

Switch 2916-SFP Plus and the Baseline Switch 2924-SFP Plus and how

they can be used in your network. It covers summaries of hardware and

software features and also the following topics:

■About the Switch 2916 and 2924

■Front Panel Detail

■LED Status Indicators

■System Specifications

■Installing the Switch

■Setting Up for Management

■Methods of Managing a Switch

■Switch Setup Overview

■Using the Command Line Interface (CLI)

■Setting Up Web Interface Management

■Setting Up SNMP Management V1 or V2

■Default Users and Passwords

■Upgrading Software using the CLI

12 CHAPTER 1: GETTING STARTED

About the Switch

2916 and 2924

The Switch 2916 and Switch 2924 are Gigabit Ethernet switching

products that deliver flexible three-speed performance (10/100/1000) and

advanced voice-optimized features such as auto-QoS and auto-voice

VLAN. This makes the switches ideal for medium businesses and small

enterprises seeking to build a secure converged network.

The Switch 2916 and 2924 includes the following models:

■Baseline Switch 2916-SFP Plus 16-Port

■Baseline Switch 2924-SFP Plus 24-Port

The Switch 2916 and 2924 feature the following advantages:

■Full Gigabit speed access ports

■Jumbo frames

■Port security

■Link aggregation control protocol (LACP)

■Up to 256 VLANs

■Access control lists (ACLs)

■Port-based mirroring

Summary of

Hardware Features

Table 1 summarizes the hardware features supported by the Switch 2916

and 2924.

Table 1 Hardware Features

Feature Switch 2916 and 2924

Addresses Up to 8,000 supported

Auto-negotiation Supported on all ports

Forwarding Modes Store and Forward

Duplex Modes Half and full duplex on all front panel ports

Auto MDI/MDIX Supported on all ports. If fiber SFP transceivers are used,

Auto MDIX is not supported.

Flow Control In full duplex operation all ports are supported.

The Switch 2916 and 2924 ports are capable of

receiving, but not sending pause frames.

Traffic Prioritization Supported (using the IEEE Std 802.ID, 1998 Edition):

Eight traffic queues per port

Front Panel Detail 13

Front Panel Detail Figure 1 shows the front panel of the Switch 2916-SFP Plus 16-Port unit.

Figure 1 Switch 2916 SFP 16-Port—front panel

Figure 2 shows the front panel of the Switch 2924-SFP Plus 24-Port unit.

Figure 2 Switch 2924 SFP Plus 24-Port—front panel

Ethernet, Fast Ethernet,

and Gigabit Ethernet Ports

Auto-negotiating 10/100/1000BASE-T ports

SFP Ethernet Ports Supports fiber Gigabit Ethernet long-wave (LX), and

fiber Gigabit Ethernet short-wave (SX) transceivers in

any combination.

Mounting 19-inch rack or standalone mounting

Table 1 Hardware Features (continued)

Feature Switch 2916 and 2924

14 CHAPTER 1: GETTING STARTED

LED Status

Indicators

The 2916-SFP Plus 16-Port and 24-Port Ethernet switches provide LED

indicators on the front panel for your convenience to monitor the switch.

Table 2 describes the meanings of the LEDs.

Table 2 Description on the LEDs of the Switch 2916 and 2924

LED Label Status Description

Power Power Green The switch starts normally. The LED flashes

when the system is performing power-on self

test (POST).

Yellow The system has failed the POST.

OFF The switch is powered off.

10/100/1000

BASE-T

Ethernet port

status

Link/

Activity

Green The port works at the rate of 1000 Mbps; the

LED flashes quickly when the port is sending

or receiving data.

Yellow The port works at the rate of 10/100 Mbps;

the LED flashes quickly when the port is

sending or receiving data.

OFF The port is not connected.

Duplex mode Duplex Yellow The port is in full duplex mode.

OFF The port is not connected, or is in half duplex

mode.

1000Base SFP

port status

SFP

Module

Active

Green The SFP module is inserted.

OFF The SFP module is not inserted or is not

recognized.

System Specifications 15

System

Specifications

Table 3 contains the system specifications of the Switch 2916 and 2924

series switches.

Additional specifications can be found in Appendix B “Device

Specifications and Features”.

Table 3 System specifications of the Switch 2916 and 2924 series switches

Specification

Switch 2916-SFP Plus

16-Port 3CBLSG16

Switch 2924-SFP Plus

24-Port 3CBLSG24

Physical dimensions

(H×W×D)

44×440×173 mm (1.73 17.3 6.81 in.)

Weight 2.0 kg (4.4 lb)

Console port One Console port

Gigabit Ethernet ports on

the front panel

16 × 10/100/100 Mbps

Ethernet ports

Four Gigabit SFP Combo

ports

24 × 10/100/100 Mbps

Ethernet ports

Four Gigabit SFP Combo

ports

AC Input voltage Rated voltage range: 100–240 VAC, 50/60 Hz

Power consumption

(full load)

58 W 84 W

Operating temperature 0 to 40 °C (32 to 113 °F)

Relative humidity 10 to 90% noncondensing

16 CHAPTER 1: GETTING STARTED

Installing the

Switch

This section contains information that you need to install and set up your

3Com switch.

WARNING: Safety Information. Before you install or remove any

components from the Switch or carry out any maintenance procedures,

you must read the 3Com Switch Family Safety and Regulatory

Information document enclosed.

AVERTISSEMENT: Consignes de securite. Avant d'installer ou d'enlever

tout composant de Switch ou d'entamer une procedure de maintenance,

lisez les informations relatives a la securite qui se trouvent dans 3Com

Switch Family Safety and Regulatory Information.

VORSICHT: Sicherheitsinformationen. Bevor Sie Komponenten aus

dem Switch entfernen oder den Switch hinzufugen oder

Instandhaltungsarbeiten verrichten, lesen Sie die 3Com Switch Family

Safety and Regulatory Information.

ADVERTENCIA: Informacion de seguridad. Antes de instalar o extraer

cualquier componente del Switch o de realizar tareas de mantenimiento,

debe leer la informacion de seguridad facilitada en el 3Com Switch Family

Safety and Regulatory Information.

AVVERTENZA: Informazioni di sicurezza. Prima di installare o

rimuovere qualsiasi componente dal Switch o di eseguire qualsiasi

procedura di manutenzione, leggere le informazioni di sicurezza riportate

3Com Switch Family Safety and Regulatory Information.

OSTRZEŻENIE: Informacje o zabezpieczeniach. Przed instalacją

lub usunięciem jakichkolwiek elementów z product lub

przeprowadzeniem prac konserwacyjnych należy zapoznać się z

informacjami o bezpieczeństwie zawartymi w 3Com Switch Family

Safety and Regulatory Information.

CAUTION: Opening the switch or tampering with the warranty sticker

can void your warranty.

Setting Up for Management 17

Setting Up for

Management

To make full use of the features offered by your switch, and to change

and monitor the way it works, you have to access the management

software that resides on the switch. This is known as managing the

switch. Managing the switch can help you to improve the efficiency of

the switch and therefore the overall performance of your network.

This section explains the initial set up of the switch and the different

methods of accessing the management software to manage a switch. It

covers the following topics:

■Methods of Managing a Switch

■Switch Setup Overview

■Manually set the IP Address using the Console Port

■Viewing IP Information using the Console Port

■Setting Up Web Interface Management

■Setting Up SNMP Management V1 or V2

■Default Users and Passwords

Methods of

Managing a Switch

To manage your switch you can use one of the following methods:

■Web Interface Management

■SNMP Management

In addition, you can use the Command Line Interface through the

Console port for basic operations of the switch including setting and

viewing the IP address, configuring user accounts, upgrading switch

firmware, and more. Refer to “3Com CLI Reference Guide” on page 195.

Web Interface

Management

Each switch has an internal set of web pages that allow you to manage

the switch using a Web browser remotely over an IP network (see

Figure 3).

18 CHAPTER 1: GETTING STARTED

Figure 3 Web Interface Management over the Network

Refer to “Setting Up Web Interface Management” on page 25.

SNMP Management You can manage a switch using any network management workstation

running the Simple Network Management Protocol (SNMP) as shown in

Figure 4. For example, you can use the 3Com Network Director software,

available from the 3Com website.

Figure 4 SNMP Management over the Network

Refer to “Setting Up SNMP Management V1 or V2” on page 26.

Switch Setup

Overview

This section gives an overview of what you need to do to get your switch

set up and ready for management when it is in its default state. The

whole setup process is summarized in Figure 5. Detailed procedural steps

are contained in the sections that follow. In brief, you need to:

■Configure IP information manually for your switch or view the

automatically configured IP information

■Prepare for your chosen method of management

Workstation

Switch

Connect over Network

via web browser

SNMP Network Management

Workstation Switch

Connect over Network

using SNMP

Switch Setup Overview 19

Figure 5 Initial Switch Setup and Management Flow Diagram

CAUTION: To protect your switch from unauthorized access, you must

change the default password as soon as possible, even if you do not

intend to actively manage your switch. For more information on default

users and changing default passwords, see “Default Users and

Passwords” on page 27.

Plug and Play Setup

Initial IP Information Setup

Feature Management

Power Up the Switch.

IP Information is automatically

configured using DHCP

See page 20

Do you want to manually

configure the IP information?

Connect to the

console port and use

the Command Line

Interface.

See page 21

How do you want to manage your Switch? See page 17

SNMP

See page 26

Command Line Interface

(basic setup only)

Connect using the

console port.

See page 21

Web Interface

Connect over the

network.

See page 26

How do you want to view the automatically

configured IP information?

How do you want to connect to the Switch?

Connect to a front panel

port and use the Web

Interface.

See page 25

Connect to the

console port and use

the Command Line

Interface.

See page 23

Yes No

Refer to the label on

the rear of the switch

which details the

default IP address.

Is a DHCP server present?

Yes No

The switch uses its default IP

information

See page 20

20 CHAPTER 1: GETTING STARTED

IP Configuration The switch’s IP configuration is determined automatically using DHCP, or

manually using values you assign.

Automatic IP Configuration using DHCP

By default the switch tries to configure its IP Information without

requesting user intervention. It tries to obtain an IP address from a DHCP

server on the network.

Default IP Address If no DHCP server is detected, the switch will use

its default IP information. The default IP address is 169.254.x.y, where x

and y are the last two bytes of its MAC address.

Note: The switch’s default IP address is listed on a label located on the

rear of the switch.

If you use automatic IP configuration it is important that the IP address of

the switch is static, otherwise the DHCP server can change the switch’s IP

addresses and it will be difficult to manage. Most DHCP servers allow

static IP addresses to be configured so that you know what IP address will

be allocated to the switch. Refer to the documentation that accompanies

your DHCP server.

You should use the automatic IP configuration method if:

■your network uses DHCP to allocate IP information, or

■flexibility is needed. If the switch is deployed onto a different subnet, it

will automatically reconfigure itself with an appropriate IP address,

instead of you having to manually reconfigure the switch.

If you use the automatic IP configuration method, you need to discover

the automatically allocated IP information before you can begin

management. Work through the “Viewing IP Information using the

Console Port” on page 23.

Manual IP Configuration

When you configure the IP information manually, the switch remembers

the information that you enter until you change it again.

You should use the Manual IP configuration method if:

■You do not have a DHCP server on your network, or

■You want to remove the risk of the IP address ever changing, or

Using the Command Line Interface (CLI) 21

■Your DHCP server does not allow you to allocate static IP addresses.

(Static IP addresses are necessary to ensure that the switch is always

allocated the same IP information.)

For most installations, 3Com recommends that you configure the switch

IP information manually. This makes management simpler and more

reliable as it is not dependent on a DHCP server, and eliminates the risk of

the IP address changing.

To manually enter IP information for your switch, work through the

“Manually set the IP Address using the Console Port” on page 22.

Using the

Command Line

Interface (CLI)

You can access the switch through the Console port to manually set the

IP address, or to view the IP address that was assigned automatically (for

example, by a DHCP server).

For more information about the CLI, refer to “3Com CLI Reference Guide”

on page 195.

Connecting to the

Console Port

This section describes how to connect to your switch through the

Console port.

Prerequisites

■A workstation with terminal emulation software installed, such as

Microsoft Hyperterminal. This software allows you to communicate

with the switch using the console port directly.

■Documentation supplied with the terminal emulation software.

■The console cable (RJ-45) supplied with your switch.

You can find pin-out diagrams for the cable in Appendix C on page 189.

22 CHAPTER 1: GETTING STARTED

Connecting the Workstation to the Switch

1Connect the workstation to the console port using the console cable as

shown in Figure 6.

Figure 6 Connecting a Workstation to the Switch using the Console Port

To connect the cable:

aAttach the cable’s RJ-45 connector to the Console port of the switch.

bAttach the other end of the cable to the workstation.

2Open your terminal emulation software and configure the COM port

settings to which you have connected the cable. The settings must be set

to match the default settings for the switch, which are:

■38,400 baud (bits per second)

■8 data bits

■no parity

■1 stop bit

■no hardware flow control

Refer to the documentation that accompanies the terminal emulation

software for more information.

3Power up the switch. The Power on Self Test (POST) will be performed.

The Switch 2916 and 2924 takes approximately one minute to boot.

Manually set the IP

Address using the

Console Port

You are now ready to manually set up the switch with IP information

using the command line interface.

■You need to have the following information:

■IP address

■subnet mask

■default gateway

Console Port

Connection

Workstation

(with terminal emulation

software installed)

Console Cable

Switch

Using the Command Line Interface (CLI) 23

1Connect to the switch Console port as described in “Connecting to the

Console Port” page 21.

2The command line interface login sequence begins as soon as the switch

detects a connection to its console port. When the process completes,

the Login prompt displays.

3At the login prompt, enter admin as your user name and press Return.

The Password prompt displays.

4Press Return. If you have logged on correctly, Select menu option#

should be displayed.

5Enter the IP address and subnet mask for the switch as follows:

ipSetup xxx.xxx.xxx.xxx mmm.mmm.mmm.mmm

and then press Enter.

(Note: xxx.xxx.xxx.xxx is the IP address and mmm.mmm.mmm.mmm is

the subnet mask of the switch.)

6Enter the logout command to terminate the CLI session.

The initial setup of your switch is now complete and the switch is ready

for you to set up your chosen management method. See “Methods of

Managing a Switch” on page 17.

Viewing IP

Information using the

Console Port

This section describes how to view the automatically allocated IP

information using the command line interface. The automatic IP

configuration process usually completes within one minute after the

switch is connected to the network and powered up.

1Connect to the switch Console port as described in “Connecting to the

Console Port” page 21.

The automatic IP configuration process usually completes within one

minute.

2The command line interface login sequence begins as soon as the switch

detects a connection to its console port.

3At the login prompt, enter admin as your user name and press Return.

4At the password prompt, press Return.If you have logged on correctly,

Select menu option# is displayed.

24 CHAPTER 1: GETTING STARTED

5Enter Summary to view a summary of allocated IP addresses. The

following is an example of the display from the Summary command.

Select menu option# summary

IP Method: default

IP address: 169.254.99.51

Subnet mask: 255.255.0.0

Runtime version: 00_00_38 (date 01-Apr-2007 time 15:31:29)

Bootcode version: 1.0.0.12 (date 01-Apr-2007 time 17:44:52)

Select menu option#

The initial set up of your switch is now complete and the switch is ready

for you to set up your chosen management method. See “Methods of

Managing a Switch” on page 17.

For more information about the CLI, refer to “3Com CLI Reference Guide”

on page 195.

If you do not intend to use the command line interface using the console

port to manage the switch, you can logout, disconnect the serial cable

and close the terminal emulator software.

Setting Up Web Interface Management 25

Setting Up Web

Interface

Management

This section describes how you can set up web interface management

over the network.

Prerequisites

■Ensure you have already set up the switch with IP information as

described in “Methods of Managing a Switch” on page 17.

■Ensure that the switch is connected to the network using a Category 5

twisted pair Ethernet cable with RJ-45 connectors.

■A suitable Web browser.

Choosing a Browser

To display the web interface correctly, use one of the following Web

browser and platform combinations:

For the browser to operate the web interface correctly, JavaScript and

Cascading Style Sheets must be enabled on your browser. These features

are enabled on a browser by default. You will only need to enable them if

you have changed your browser settings.

The switch’s Web interface supports both secure (HTTPS) and non-secure

(HTTP) connections.

Table 4 Supported Web Browsers and Platforms

Browser

Platform

Windows 2000 Windows XP Windows Vista

Internet Explorer 6 Yes Yes Yes

Internet Explorer 7 Yes Yes Yes

Firefox 1.5 Yes Yes Yes

Firefox 2 Yes Yes Yes

Netscape 8 Yes Yes Yes

26 CHAPTER 1: GETTING STARTED

Web Management

Over the Network

To manage a switch using the web interface over an IP network:

1Be sure that you know your switch’s IP address. See “IP Configuration”

on page 20, and “Viewing IP Information using the Console Port” on

page 23.

2Check that your management workstation is on the same subnet as your

switch.

3Check you can communicate with the switch by entering a ping

command at the DOS or CMD prompt in the following format:

c:\ ping xxx.xxx.xxx.xxx

(where xxx.xxx.xxx.xxx is the IP address of the switch)

If you get an error message, check that your IP information has been

entered correctly and the switch is powered up.

4Open your web browser and enter the IP address of the switch that you

wish to manage in the URL locator, for example, in the following format:

http://xxx.xxx.xxx.xxx

5At the login and password prompts, enter admin as your user name and

press Return at the password prompt (or the password of your choice if

you have already modified the default passwords).

The main Web interface page is displayed.

Setting Up SNMP

Management V1 or

You can use any network management application running the Simple

Network Management Protocol (SNMP) to manage the switch. 3Com

offers a range of network management applications to address networks

of all sizes and complexity. See “3Com Network Management” on

page 181.

Be sure the management workstation is connected to the switch using a

port in VLAN 1 (the Default VLAN). By default, all ports on the switch are

in VLAN 1.

To display and configure SNMP management parameters, refer to

“Configuring SNMP” on page 135.

Default Users and Passwords 27

Default Users and

Passwords

If you intend to manage the switch or to change the default passwords,

you must log in with a valid user name and password. The switch has one

default user name. The default user is listed in Table 5.

Use the admin default user name (no password) to login and carry out

initial switch setup.

Upgrading

Software using the

CLI

This section describes how to upgrade software to your Switch from the

Command Line Interface (CLI).

Note: You can also upgrade the software using the switch Web user

interface. See “Upgrade the Firmware Image” page 165. Bootcode can

only be upgraded using the CLI.

1To download the runtime application file, enter:

upgrade aaa.aaa.aaa.aaa rrr runtime

where aaa.aaa.aaa.aaa is the IP address of the TFTP server and rrr is the

source runtime filename.

2To download the bootcode file, enter:

upgrade aaa.aaa.aaa.aaa bbb bootcode

where aaa.aaa.aaa.aaa is the IP address of the TFTP server and bbb is the

source bootcode filename.

The bootcode firmware may not require upgrading for every software

upgrade, therefore there may not be a new bootcode file to download.

3To set the switch to boot from the new software you have downloaded,

enter the following:

reboot

The following prompt displays:

Are you sure you want to reboot the system (yes, no):

4Enter yes and press Return. The system reboots the switch.

Table 5 Default Users

User Name

Default

Password Access Level

admin (no password) Management — The user can access and change

all manageable parameters

2USING THE 3COM WEB INTERFACE

This section provides an introduction to the user interface, and includes

the following topics:

■Starting the 3Com Web Interface

■Understanding the 3Com Web Interface

■Saving the Configuration

■Resetting the Device

■Restoring Factory Defaults

■Logging Off the Device

Starting the 3Com

Web Interface

This section includes the following topics:

■Multi-Session Web Connections

■Accessing the 3Com Web Interface

Multi-Session Web

Connections

The Multi-Session web connections feature enables 10 users to be

created and access the switch concurrently. Access levels provide read or

read/write permissions to users for configuring the switch. Users and

access levels are described in Configuring System Access Section. Login

information is always handled in the local database. A unique password is

required of each user. Two access levels exist on the 3Com Web Interface:

■Management access level — Provides the user with read/write

access. There is always one management level user configured for the

switch. The factory default is be username: admin with no Password.

■Monitor access level — Provides the user with read-only access.

Starting the 3Com Web Interface 29

Accessing the 3Com

Web Interface

This section contains information on starting the 3Com Web interface.

To access the 3Com user interface:

1Open an Internet browser.

2Enter the device IP address in the address bar and press Enter. The Enter

Network Password Page opens:

Figure 7 Enter Network Password Page

3Enter your user name and password. The device default factory settings is

configured with a User Name that is admin and a password that is blank.

Passwords are case sensitive.

4Click Login. The 3Com Web Interface Home Page opens:

30 CHAPTER 2: USING THE 3COM WEB INTERFACE

Figure 8 3Com Web Interface Home Page

Understanding the

3Com Web

Interface

The 3Com Web Interface Home Page contains the following views:

■Tab V iew — Provides the device summary configuration located at

the top of the home page.

■Tree View — Provides easy navigation through the configurable

device features. The main branches expand to display the

sub-features.

■Port Indicators — Located under the Device View at the top of the

home page, the port indicators provide a visual representation of the

ports on the front panel.

Understanding the 3Com Web Interface 31

Figure 9 Web Interface Components

The following table lists the user interface components with their

corresponding numbers:

This section provides the following additional information:

■Device Representation — Provides an explanation of the user

interface buttons, including both management buttons and task

icons.

■Using the Web Interface Management Buttons — Provides

instructions for adding, modifying, and deleting configuration

parameters.

Table 6 Interface Components

View Description

1 Tree View Tree View provides easy navigation through the configurable

device features. The main branches expand to display the

sub-features.

2 Tab View The Tab Area enables navigation through the different device

features. Click the tabs to view all the components under a

specific feature.

3 Web Interface

Information

Provides access to online help, and contains information about

the Web Interface.

32 CHAPTER 2: USING THE 3COM WEB INTERFACE

Device

Representation

The 3Com Web Interface Home Page contains a graphical panel

representation of the device that appears within the Device View Tab.

To access the Device Representation:

1Click Device Summary > Device View.

Figure 10 Device Representation

2By selecting a specific port with your mouse, you can view the port

statistics.

For detailed information on configuring ports, please refer to

“Configuring Ports” page 85.

Using the Web

Interface

Management Buttons

Configuration Management buttons and icons provide an easy method

of configuring device information, and include the following:

Table 7 3Com Web Interface Configuration Buttons

Button Button Name Description

Clear Logs Clears system logs.

Create Creates configuration

entries.

Apply Applies configuration

changes to the device.

Delete Deletes configuration

settings.

Table 8 3Com Web Interface Information Tabs

Tab Tab Name Description

Help Opens the online help.

Logout Logs the user out and

terminates the current

session.

Using Screen and Table Options 33

Using Screen and

Table Options

3Com contains screens and tables for configuring devices. This section

contains the following topics:

■Viewing Configuration Information

■Adding Configuration Information

■Modifying Configuration Information

■Removing Configuration Information

Viewing Configuration Information

To view configuration information:

1Click Port > Administration > Summary. The Port Settings Summary

Page opens:

Figure 11 Port Settings Summary Page

34 CHAPTER 2: USING THE 3COM WEB INTERFACE

Adding Configuration Information

User-defined information can be added to specific 3Com Web Interface

pages, by opening the IP Setup Page.

For example, to configure IP Setup:

1Click Administration > IP Setup. The IP Setup Page opens:

Figure 12 IP Setup Page

2Enter requisite information in the text field.

3Click Apply. The IP information is configured, and the device is updated.

Using Screen and Table Options 35

Modifying Configuration Information

1Click Administration > System Access > Modify. The System Access

Modify Page opens:

Figure 13 System Access Modify Page

2Modify the fields.

3Click Apply. The access fields are modified.

36 CHAPTER 2: USING THE 3COM WEB INTERFACE

Removing Configuration Information

1Click Administration > System Access > Remove. The System Access

Remove Page opens:

Figure 14 System Access Remove Page

2Select the user account to be deleted.

3Click Remove. The user account is deleted, and the device is updated.

Saving the Configuration 37

Saving the

Configuration

Configuration changes are only saved to the device once the user saves

the changes to the flash memory. The Save Configuration tab allows the

latest configuration to be saved to the flash memory.

To save the device configuration:

1Click Save Configuration. The Save Configuration Page opens:

Figure 15 Save Configuration Page

A message appears: The operation saves your configuration. Do you wish

to continue?

2Click OK. A Configuration is saved to flash memory successful message

appears.

3Click OK. The configuration is saved.

38 CHAPTER 2: USING THE 3COM WEB INTERFACE

Resetting the

Device

The Reset Page enables resetting the device from a remote location.

To prevent the current configuration from being lost, use the Save

Configuration Page to save all user-defined changes to the flash memory

before resetting the device.

To reset the device:

1Click Administration > Reset. The Reset Page opens:

Figure 16 Reset Page

2Click Reboot. A confirmation message is displayed.

3Click OK. The device is reset, and a prompt for a user name and

password is displayed.

Figure 17 User Name and Password Page

4Enter a user name and password to reconnect to the web interface.

Restoring Factory Defaults 39

Restoring Factory

Defaults

The Restore option appears on the Reset Page. The Restore option

restores device factory defaults.

To restore the device:

1Click Administration > Reset. The Reset Page opens:

Figure 18 Reset Page

The Reset Page contains the following fields:

■Initialize with Current IP Address — Resets the device with the

factory default settings, but maintains the current IP Address,

subnet mask, and default gateway address.

■Initialize with Default IP Address — Resets the device with the

factory default settings, including the factory default IP Address.

2Click the Initialize button. The system is restored to factory defaults.

40 CHAPTER 2: USING THE 3COM WEB INTERFACE

Logging Off the

Device

To log off the device:

1Click Logout. The Logout Page opens.

2The following message appears:

3Click OK. The 3Com Web Interface Home Page closes.

3VIEWING BASIC SETTINGS

This section contains information about viewing basic settings available

from the Web interface home page, including the Device Summary page

and the Color Keys page.

Viewing Device

Settings

The Device Summary Page displays general information, including the

system name, location, and contact, the system MAC address, System

Object ID, System Up Time, and software, boot, and hardware versions.

To view the Device Summary Settings:

1Click Device Summary. The Device Summary Page opens:

Figure 19 Device Summary Page

The Device Summary Page contains the following fields:

42 CHAPTER 3: VIEWING BASIC SETTINGS

■Product Description — Displays the device model number and name

■System Name — Defines the user-defined device name. The field

range is 0-160 characters.

■System Location — Defines the location where the system is

currently running. The field range is 0-160 characters.

■System Contact — Defines the name of the contact person. The field

range is 0-160 characters.

■Serial Number — Displays the device serial number.

■Product 3C Number — Displays the 3Com device 3C number.

■System Object ID — Displays the vendor’s authoritative identification

of the network management subsystem contained in the entity.

■MAC Address — Displays the device MAC address.

■System Up Time — Displays the amount of time since the most

recent device reset. The system time is displayed in the following

format: Days, Hours, Minutes, and Seconds. For example, 41 days, 2

hours, 22 minutes and 15 seconds.

■Software Version — Displays the installed software version number.

■Boot Version — Displays the current boot version running on the

device.

■Hardware Version — Displays the current hardware version of the

device.

■Poll Now — Enables polling the ports for port information including

speed, utilization and port status.

Viewing Color Keys 43

Viewing Color Keys The Color Key Page provides information about the RJ45 or SFP port

status. To view color keys:

1Click Device Summary > Color Key. The Color Key Page opens:

Figure 20 Color Key Page

The Color Key Page contains the following fields:

■RJ45 — Displays the port status of the RJ45 connections which are the

physical interface used for terminating twisted pair type cable.

■SFP — Displays the port status of the Small Form Factor (SFP) optical

transmitter modules that combine transmitter and receiver functions.

Table 9 describes the color and the port status:

Table 9 Color Key Definitions

Color Port Status

White Unconnected. No link detected.

Yellow Lower speed on 10/100/1000M port.

Green Maximum speed 10/100/1000M RJ45 or RJ45 SFP. Indicates that a

link was detected.

Light Blue SX/LX SFP. Indicates that a link was detected.

Light Gray Port has been set to inactive by User or Protocol.

Dark Blue Port has been selected by user.

Red Port or Transceiver has failed POST or Transceivers not recognized.

4MANAGING DEVICE SECURITY

The Management Security section provides information for configuring

system access, defining RADIUS authentication, port-based

authentication and defining access control lists.

This section includes the following topics:

■Configuring System Access

■Defining RADIUS Clients

■Defining Port-Based Authentication (802.1X)

■Defining Access Control Lists

■Enabling Broadcast Storm

Configuring System Access 45

Configuring System

Access

Network administrators can

define users, passwords, and access levels for

users using the System Access Interface.

The Multi-Session web feature is

enabled on device and allows 10 users to be created and access the

switch concurrently. Access levels provide read or read/write permissions

to users for configuring the switch. Login information is managed in the

local database. A unique password is required of each user. Two access

levels exist on the 3Com Web Interface:

■Management access level — Provides the user with read/write

access. There is always one management level user configured for the

switch. The factory default is be user name: admin with no Password.

■Monitor access level — Provides the user with read-only system

access.

This section contains the following topics:

■Viewing System Access Settings

■Defining System Access

■Modifying System Access

■Removing System Access

46 CHAPTER 4: MANAGING DEVICE SECURITY

Viewing System

Access Settings

The System Access Summary Page displays

the current users and access

levels defined on the device.

To view System Access settings:

1Click Administration > System Access > Summary. The System Access

Summary Page opens:

Figure 21 System Access Summary Page

The System Access Summary Page contains the following fields:

■User Name — Displays the user name. The possible predefined field

value is:

■Admin — Displays the predefined Administrative user name.

■Access Level — Displays the user access level. The lowest user access

level is Monitor and the highest is Management.

■Management — Provides the user with read and write access

rights.

■Monitor — Provides the user with read access rights.

Configuring System Access 47

Defining System

Access

The System Access Setup Page allows network administrators to

define

users, passwords, and access levels for users using the System Access

Interface.

Monitor users have no access to this page.

1Click Administration > System Access > Setup. The System Access

Setup Page opens:

Figure 22 System Access Setup Page

The System Access Setup Page contains the following fields:

■User Name — Defines the user name.

■Access Level — Defines the user access level. The lowest user access

level is Monitor and the highest is Management.

■Management — Provides users with read and write access rights.

■Monitor — Provides users with read access rights.

■Password — Defines the user password. User passwords can contain

up to 10 characters.

■Confirm Password — Verifies the password.

2Define the fields.

3Click Apply. The Users are created, and the device is updated.

48 CHAPTER 4: MANAGING DEVICE SECURITY

Modifying System

Access

The System Access Modify Page allows network administrators to

modify

users, passwords, and access levels using the System Access Interface.

Monitor users have no access to this page.

1Click Administration > System Access > Modify. The System Access

Modify Page opens:

Figure 23 System Access Modify Page

The System Access Modify Page contains the following fields:

■User Name — Displays the user name.

■Access Level — Displays the user access level. The lowest user access

level is Monitoring and the highest is Management.

■Management — Provides users with read and write access rights.

■Monitor — Provides users with read access rights.

■Password Modify — Changes a password for an existing user.

■Password — Defines the local user password. Local user passwords

can contain up to 8 characters.

■Confirm Password — Verifies the password.

2Select a User Name to be modified.

3Modify the fields.

4Click Apply. The User settings are modified, and the device is updated.

Configuring System Access 49

Removing System

Access

The System Access Remove Page allows network administrators to

remove users from the System Access Interface.

Monitor users have no access to this page.

To re mo ve users :

1Click Administration > System Access > Remove. The System Access

Remove Page opens:

Figure 24 System Access Remove Page

The System Access Remove Page contains the following fields:

■Remove User(s) — Select user(s) from the list below to be removed.

■User Name — Displays the user name.

■Access Level — Displays the user access level. The lowest user access

level is Monitoring and the highest is Management.

■Management — Provides users with read and write access rights.

■Monitoring — Provides users with read access rights.

2Select a User to be deleted.

The last user with management access may not be deleted.

3Click Remove. The User is deleted, and the device is updated.

50 CHAPTER 4: MANAGING DEVICE SECURITY

Defining RADIUS

Clients

Remote Authorization Dial-In User Service (RADIUS) servers provide

additional security for networks. RADIUS servers provide a centralized

authentication method for 802.1X.

The default parameters are user-defined, and are applied to newly

defined RADIUS servers. If new default parameters are not defined, the

system default values are applied to newly defined RADIUS servers.

Monitor users have no access to this page.

To configure the RADIUS client:

1Click Security > RADIUS Client > Setup. The Radius Client Setup Page

opens:

Figure 25 Radius Client Setup Page

The Radius Client Setup Page contains the following fields:

■Primary Server — Defines the RADIUS Primary Server authentication

fields.

■Backup Server — Defines the RADIUS Backup Server authentication

fields.

■Host IP Address — Defines the RADIUS Server IP address.

Defining RADIUS Clients 51

■Authentication Port — Identifies the authentication port. The

authentication port is used to verify the RADIUS server authentication.

The authenticated port default is 1812.

■Number of Retries — Defines the number of transmitted requests

sent to the RADIUS server before a failure occurs. Possible field values

are 1-10. The default value is 3.

■Timeout for Reply — Defines the amount of time (in seconds) the

device waits for an answer from the RADIUS server before retrying the

query, or switching to the next server. Possible field values are 1-30.

The default value is 3.

■Dead Time — Defines the default amount of time (in minutes) that a

RADIUS server is bypassed for service requests. The range is 0-2000.

The default value is 0.

■Key String — Defines the default key string used for authenticating

and encrypting all RADIUS-communications between the device and

the RADIUS server. This key must match the RADIUS encryption.

2Define the fields.

3Click OK. The RADIUS client is enabled, and the system is updated.

52 CHAPTER 4: MANAGING DEVICE SECURITY

Defining Port-Based

Authentication

(802.1X)

Port-based authentication authenticates users on a per-port basis via an

external server. Only authenticated and approved system users can

transmit and receive data. Ports are authenticated via the RADIUS server

using the Extensible Authentication Protocol (EAP). Port-based

authentication includes:

■Authenticators — Specifies the device port which is authenticated

before permitting system access.

■Supplicants — Specifies the host connected to the authenticated

port requesting to access the system services.

■Authentication Server — Specifies the server that performs the

authentication on behalf of the authenticator, and indicates whether

the supplicant is authorized to access system services.

Port-based authentication creates two access states:

■Controlled Access — Permits communication between the

supplicant and the system, if the supplicant is authorized.

■Uncontrolled Access — Permits uncontrolled communication

regardless of the port state.

This section includes the following topics:

■Viewing 802.1X Authentication

■Defining 802.1X Authentication

Defining Port-Based Authentication (802.1X) 53

Viewing 802.1X

Authentication

The 802.1X Summary Page allows the network administrator to view

port-based authentication settings.

To view Port-based Authentication:

1Click Security > 802.1X > Summary. The 802.1X Summary Page opens:

Figure 26 802.1X Summary Page

The 802.1X Summary Page contains the following fields:

■Port — Displays a list of interfaces.

■User Name — Displays the supplicant user name.

■Admin Port Control — Displays the admin port authorization state.

■ForceUnauthorized — Indicates that either the port control is force

Unauthorized and the port link is down, or the port control is Auto

but a client has not been authenticated via the port.

■ForceAuthorized — Indicates that the port control is Forced

Authorized, and clients have full port access.

■Auto — Indicates that the port control is Auto and a single client

has been authenticated via the port.

■Current Port Control — Displays the current port authorization state.

54 CHAPTER 4: MANAGING DEVICE SECURITY

■Guest VLAN — Indicates whether an unauthorized port is allowed to

join the Guest VLAN. The possible field values are:

■Enable — Enables an unauthorized port to join the Guest VLAN.

■Disable — Disables an unauthorized port to join the Guest VLAN.

■Periodic Reauthentication — Enables periodic reauthentication on

the port.

■Enable — Enables the periodic reauthentication on the port.

■Disable — Disables the periodic reauthentication on the port. This

is the default.

■Reauthentication Period — Displays the time span (in seconds) in

which the selected port is reauthenticated. The field default is 3600

seconds.

■Authenticator State — Displays the current authenticator state.

■Termination Cause — Indicates the reason for which the port

authentication was terminated.

2Click Apply. Port Authentication is enabled, and the device is updated.

Defining 802.1X

Authentication

The 802.1X Setup Page contains information for configuring 802.1X

global settings on the device and defining specific 802.1X setting for

each port individually.

Monitor users have no access to this page.

Defining Port-Based Authentication (802.1X) 55

To configure 802.1X Settings:

1Click Security > 802.1X > Setup. The 802.1X Setup Page opens:

Figure 27 802.1X Setup Page

The 802.1X Setup Page contains the following fields:

802.1X Global Settings

■Port Based Authentication State — Indicates if Port Authentication

is enabled on the device. The possible field values are:

■Enable — Enables port-based authentication on the device.

■Disable — Disables port-based authentication on the device. This is

the default value.

■Authentication Method — Specifies the authentication method

used for port authentication. The possible field values are:

■RADIUS — Provides port authentication using the RADIUS server.

■RADIUS, None — Provides port authentication, first using the

RADIUS server. If the port is not authenticated, then no

authentication method is used, and the session is permitted.

■None — Indicates that no authentication method is used to

authenticate the port.

■Enable Guest VLAN — Provides limited network access to authorized

ports. If a port is denied network access via port-based authorization,

but the Guest VLAN is enabled, the port receives limited network

56 CHAPTER 4: MANAGING DEVICE SECURITY

access. For example, a network administrator can use Guest VLANs to

deny network access via port-based authentication, but grant Internet

access to unauthorized users.

■Guest VLAN ID — Specifies the guest VLAN ID.

802.1X Port Settings

■Admin Port Control — Displays the admin port authorization state.

■Auto — Enables port based authentication on the device. The

interface moves between an authorized or unauthorized state

based on the authentication exchange between the device and the

client.

■Force Authorized — Places the interface into an authorized state

without being authenticated. The interface re-sends and receives

normal traffic without client port based authentication.

■Force Unauthorized — Denies the selected interface system access

by moving the interface into unauthorized state. The device cannot

provide authentication services to the client through the interface.

■Guest VLAN — Specifies whether the Guest VLAN is enabled on the

port. The possible field values are:

■Enable — Enables using a Guest VLAN for unauthorized ports. If a

Guest VLAN is enabled, the unauthorized port automatically joins

the VLAN selected from the Guest VLAN ID dropdown list.

■Disable — Disables Guest VLAN on the port. This is the default.

■Periodic Reauthentication — Enables periodic reauthentication on

the port.

■Enable — Enables the periodic reauthentication on the port.

■Disable — Disables the periodic reauthentication on the port.

■Reauthentication Period — Displays the time span (in seconds) in

which the selected port is reauthenticated. The field default is 3600

seconds.

2Define the fields.

3Click Apply. The 802.1X Settings are enabled, and the device is updated.

Defining Access Control Lists 57

Defining Access

Control Lists

Access Control Lists (ACL) allow network managers to define

classification actions and rules for specific ingress ports. Packets entering

an ingress port, with an active ACL are either admitted or denied entry. If

they are denied entry, the port can be disabled.

For example, an ACL rule is defined states that port number 20 can

receive TCP packets, however, if a UDP packet is received, the packet is

dropped. ACLs are composed of access control entries (ACEs) that are

made of the filters that determine traffic classifications.

The following are examples of filters that can be defined as ACEs:

■Source Port IP Address and Wildcard Mask — Filters the packets

by the Source port IP address and wildcard mask.

■Destination Port IP Address and Wildcard Mask — Filters the

packets by the Source port IP address and wildcard mask.

■ACE Priority — Filters the packets by the ACE priority.

■Protocol — Filters the packets by the IP protocol.

■DSCP — Filters the packets by the DiffServ Code Point (DSCP) value.

■IP Precendence — Filters the packets by the IP Precedence.

■Action — Indicates the action assigned to the packet matching the

ACL. Packets are forwarded or dropped. In addition, the port can be

shut down, a trap can be sent to the network administrator, or packet

is assigned rate limiting restrictions for forwarding.

This section includes the following topics:

■Viewing MAC Based ACLs

■Configuring MAC Based ACLs

■Removing MAC Based ACLs

■Viewing IP Based ACLs

■Defining IP Based ACLs

■Modifying IP Based ACLs

■Removing IP Based ACLs

■Viewing ACL Binding

■Configuring ACL Binding

■Removing ACL Binding

58 CHAPTER 4: MANAGING DEVICE SECURITY

Viewing MAC Based

ACLs

The MAC Based ACL Summary Page displays information regarding MAC

Based ACLs configured on the device. Ports are reactivated from the

Interface Configuration Page.

To view MAC Based ACLs:

1Click Device > ACL > MAC Based ACL > Summary. The MAC Based

ACL Summary Page opens:

Figure 28 MAC Based ACL Summary Page

The MAC Based ACL Summary Page contains the following fields:

■ACL Name — Contains a list of the MAC-based ACLs.

■Priority — Indicates the rule priority, which determines which rule is

matched to a packet on a first match basis.

■Source Address — Indicates the source MAC address.

■Source Mask — Indicates the source MAC address Mask.

■Destination Address — Indicates the destination MAC address.

■Destination Mask — Indicates the destination MAC address Mask.

■VLAN ID — Matches the packet's VLAN ID to the ACE. The possible

field values are 1 to 4095.

■CoS — Classifies traffic based on the CoS tag value.

■CoS Mask — Displays the CoS mask used to filter CoS tags.

Defining Access Control Lists 59

■Ethertype — Provides an identifier that differentiates between

various types of protocols.

■Action — Indicates the ACL forwarding action. In addition, the port

can be shut down, a trap can be sent to the network administrator, or

packet is assigned rate limiting restrictions for forwarding. The options

are as follows:

■Permit — Forwards packets which meet the ACL criteria.

■Deny — Drops packets which meet the ACL criteria.

■Shutdown — Drops packet that meets the ACL criteria, and

disables the port to which the packet was addressed. Ports are

reactivated from the Port Administration Setup Page.

Configuring MAC

Based ACLs

The MAC Based ACL Setup Page allows the network administrator to

select, create and define rules for MAC-based Access Control Lists.

Monitor users have no access to this page.

1Click Device > ACL > MAC Based ACL > Setup. The MAC Based ACL

Setup Page opens:

Figure 29 MAC Based ACL Setup Page

The MAC Based ACL Setup Page contains the following fields:

■Selection ACL — Lists previously defined Access Control Lists.

■Create ACL — Create a new user-defined MAC based ACL.

60 CHAPTER 4: MANAGING DEVICE SECURITY

Add Rules to ACL

■Priority — Indicates the ACE priority, which determines which ACE is

matched to a packet on a first-match basis. The possible field values

are 1-2147483647.

■Source MAC Address — Matches the source MAC address to which

packets are addressed to the ACE.

■Source Mask — Indicates the source MAC Address wildcard mask.

Wildcards are used to mask all or part of a source MAC address.

Wildcard masks specify which bits are used and which are ignored. A

wildcard mask of FF:FF:FF:FF:FF:FF indicates that no bit is important. A

wildcard of 00.00.00.00.00.00.00 indicates that all bits are important.

For example, if the source MAC address is 00:AB:22:11:33:00 and the

wildcard mask is 00:00:00:00:00:FF, the first five bytes of the MAC are

used, while the last byte is ignored. For the source MAC address

00:AB:22:11:33:00, this wildcard mask matches all MAC addresses in

the range 00:AB:22:11:33:00 to 00:AB:22:11:33:FF.

■Destination MAC Address — Matches the destination MAC address

to which packets are addressed to the ACE.

■Destination Mask — Indicates the destination MAC Address

wildcard mask. Wildcards are used to mask all or part of a destination

MAC address. Wildcard masks specify which bits are used and which

are ignored. A wildcard mask of FF:FF:FF:FF:FF:FF indicates that no bit

is important. A wildcard mask of 00.00.00.00.00.00 indicates that all

bits are important. For example, if the destination MAC address is

00:AB:22:11:33:00 and the wildcard mask is 00:00:00:00:00:FF, the

first five bytes of the MAC are used, while the last byte is ignored. For

the destination MAC address 00:AB:22:11:33:00, this wildcard mask

matches all MAC addresses in the range 00:AB:22:11:33:00 to

00:AB:22:11:33:FF.

■VLAN ID — Matches the packet's VLAN ID to the ACE. The possible

field values are 1 to 4093.

■CoS — Classifies traffic based on the CoS tag value.

■CoS Mask — Defines the CoS mask used to classify network traffic.

■Ethertype — Provides an identifier that differentiates between

various types of protocols.

■Action — Indicates the ACL forwarding action. In addition, the port

can be shut down, a trap can be sent to the network administrator, or

Defining Access Control Lists 61

packet is assigned rate limiting restrictions for forwarding. The options

are as follows:

■Permit — Forwards packets which meet the ACL criteria.

■Deny — Drops packets which meet the ACL criteria.

■Shutdown — Drops packet that meets the ACL criteria, and

disables the port to which the packet was addressed. Ports are

reactivated from the Port Administration Setup Page.

2Define the fields.

3Click Apply. The Rule Setup settings are configured, and the device is

updated.

Modifying MAC

Based ACLs

The MAC Based ACL Modify Page allows the network administrator to

modify MAC Based ACLs settings.

Monitor users have no access to this page.

1Click Device > ACL > MAC Based ACL > Modify. The MAC Based ACL

Modify Page opens:

Figure 30 MAC Based ACL Modify Page

The MAC Based ACL Modify Page contains the following fields:

■Select ACL — Selects the ACL to be bound.

■Select Rule — Indicates the rule for which Access Control Entries are

defined.

62 CHAPTER 4: MANAGING DEVICE SECURITY

Modify

■Priority — Indicates the rule priority, which determines which rule is

matched to a packet on a firstmatch basis.

■Source MAC Address — Matches the source MAC address to which

packets are addressed to the ACE.

■Source Mask — Indicates the source MAC Address wildcard mask.

Wildcards are used to mask all or part of a source address by

specifying which bits are used and which are ignored. A wildcard

mask of FF:FF:FF:FF:FF:FF indicates that no bit is important. A wildcard

of 00.00.00.00.00.00.00 indicates that all bits are important. For

example, if the source MAC address is E0:3B:4A:C2:CA:E2 and the

wildcard mask is 00:00:00:00:00:FF, the first five bytes of the MAC are

used, while the last byte is ignored. For the source MAC address

E0:3B:4A:C2:CA:E2, this wildcard mask matches all MAC addresses in

the range E0:3B:4A:C2:CA:00 to E0:3B:4A:C2:CA:FF.

■Destination MAC Address — Matches the destination MAC address

to which packets are addressed to the ACE.

■Destination Mask — Indicates the destination MAC Address

wildcard mask. Wildcards are used to mask all or part of a destination

address by specifying which bits are used and which are ignored. A

wildcard mask of FF:FF:FF:FF:FF indicates that no bit is important. A

wildcard mask of 00.00.00.00.00.00 indicates that all bits are

important. For example, if the destination MAC address is

E0:3B:4A:C2:CA:E2 and the wildcard mask is 00:00:00:00:00:FF, the

first five bytes of the MAC are used, while the last byte is ignored. For

the destination MAC address E0:3B:4A:C2:CA:E2, this wildcard mask

matches all MAC addresses in the range E0:3B:4A:C2:CA:00 to

E0:3B:4A:C2:CA:FF.

■VLAN ID — Matches the packet's VLAN ID to the ACE. The possible

field values are 1 to 4093.

■CoS — Classifies traffic based on the CoS tag value.

■CoS Mask — Defines the CoS mask used to classify network traffic.

■Ethertype — Provides an identifier that differentiates between

various types of protocols.

■Action — Indicates the ACL forwarding action. The port can be shut

down, a trap can be sent to the network administrator, or packet is

assigned rate-limiting restrictions for forwarding. The options are:

Defining Access Control Lists 63

■Permit — Forwards packets which meet the ACL criteria.

■Deny — Drops packets which meet the ACL criteria.

■Shutdown — Drops packet that meets the ACL criteria, and

disables the port to which the packet was addressed. Ports are

reactivated from the Port Administration Setup Page.

2Define the fields.

3Click Apply. The MAC based settings are modified, and the device is

updated.

Removing MAC Based

ACLs

The MAC Based ACL Remove Page allows the user to remove MAC Based

ACLs.

Monitor users have no access to this page.

To remove MAC Based ACLs:

1Click Device > ACL > MAC Based ACL > Remove. The MAC Based ACL

Remove Page opens:

Figure 31 MAC Based ACL Remove Page

The MAC Based ACL Remove Page contains the following fields:

■ACL Name — Contains a list of the MAC-based ACLs.

■Remove ACL — Enables the ACL to be removed.

64 CHAPTER 4: MANAGING DEVICE SECURITY

■Priority — Indicates the rule priority, which determines which rule is

matched to a packet on a firstmatch basis.

■Source Address — Matches the source MAC address to which

packets are addressed to the ACE.

■Destination Address — Matches the destination MAC address to

which packets are addressed to the ACE.

■VLAN ID — Matches the packet's VLAN ID to the ACE. The possible

field values are 1 to 4093.

■CoS — Classifies Class of Service of the packet.

■CoS Mask — Defines the wildcard bits to be applied to the CoS.

■Ethertype — Provides an identifier that differentiates between

various types of protocols.

■Action — Indicates the ACL forwarding action. In addition, the port

can be shut down, a trap can be sent to the network administrator, or

packet is assigned rate limiting restrictions for forwarding. The options

are as follows:

■Permit — Forwards packets which meet the ACL criteria.

■Deny — Drops packets which meet the ACL criteria.

■Shutdown — Drops packet that meets the ACL criteria, and

disables the port to which the packet was addressed. Ports are

reactivated from the Port Administration Setup Page.

2Select the ACL Name to be deleted.

3Select the ACL to be removed from the table.

4Click the Remove checkbox.

5Click Apply. The selected ACLs are deleted, and the device is updated.

Defining Access Control Lists 65

Viewing IP Based

ACLs

The IP Based ACL Summary Page displays information regarding IP Based

ACLs configured on the device.

To view IP Based ACLs:

1Click Device > ACL > IP Based ACL > Summary. The IP Based ACL

Summary Page opens:

Figure 32 IP Based ACL Summary Page

The IP Based ACL Summary Page contains the following fields:

■ACL Name — Contains a list of the IP Based ACLs.

■Priority — Indicates the ACE priority, which determines which ACE is

matched to a packet on a first-match basis. The possible field values

are 1-2147483647, with 1 being the highest priority.

■Protocol — Indicates the protocol in the ACE to which the packet is

matched.

■Destination Port — Indicates the destination port that is matched

packets. Enabled only when TCP or UDP are selected in the Protocol

list.

■Source Port — Indicates the source port that is matched packets.

Enabled only when TCP or UDP are selected in the Protocol list.

■Flag Set — Indicates the TCP flag to which the packet is mapped.

■ICMP Type — Specifies an ICMP message type for filtering ICMP

packets.

66 CHAPTER 4: MANAGING DEVICE SECURITY

■ICMP Code — Specifies an ICMP message code for filtering ICMP

packets. ICMP packets that are filtered by ICMP message type can also

be filtered by the ICMP message code.

■IGMP Type — IGMP packets can be filtered by IGMP message type.

■Source Address — Matches the source IP address to which packets

are addressed to the ACL.

■Source Mask — Indicates the source IP address mask.

■Destination Address — Matches the destination IP address to which

packets are addressed to the ACL.

■Destination Mask — Indicates the destination IP address mask.

■DSCP — Matches the packet DSCP value to the ACL. Either the DSCP

value or the IP Precedence value is used to match packets to ACLs.

■IP - Prec. — Indicates matching ip-precedence with the packet IP

precedence value.

■Action — Indicates the ACL forwarding action. In addition, the port

can be shut down, a trap can be sent to the network administrator, or

packet is assigned rate limiting restrictions for forwarding. The options

are as follows:

■Permit — Forwards packets which meet the ACL criteria.

■Deny — Drops packets which meet the ACL criteria.

■Shutdown — Drops packet that meets the ACL criteria, and

disables the port to which the packet was addressed. Ports are

reactivated from the Port Administration Setup Page.

Defining IP Based

ACLs

Access Control Lists (ACL) allow network managers to define

classification actions and rules for specific ingress ports. Your switch

supports up to 256 ACLs. Packets entering an ingress port, with an active

ACL, are either admitted or denied entry. If they are denied entry, the user

can disable the port. ACLs are composed of access control entries (ACEs)

that are made of the filters that determine traffic classifications. The total

number of ACEs that can be defined in all ACLs together is 256.

Monitor users have no access to this page.

Defining Access Control Lists 67

To configure IP Based Access Control Lists:

1Click Device > ACL > IP Based ACL > Setup. The IP Based ACL Setup

Page opens:

Figure 33 IP Based ACL Setup Page

The IP Based ACL Setup Page contains the following fields:

■Selection ACL — Selects the ACL to be bound.

■Create ACL — Defines a new user-defined IP based ACL.

Add Rules to ACL

■Priority — Defines the ACL priority. ACLs are checked on the first fit

basis. The ACL priority defines the ACL order in the ACL list.

■Protocol — Indicates the protocol in the ACE to which the packet is

matched. The possible fields are:

■Select from List — Selects a protocol on which ACE can be based.

■Protocol ID — Adds user-defined protocols by which packets are

matched to the ACE. Each protocol has a specific protocol number

which is unique. The possible field range is 0-255.

■Source Port — Indicates the source port that is used for matched

packets. Enabled only when TCP or UDP are selected in the Protocol

list. The field value is either user defined or Any. If Any is selected the

IP based ACL is applied to any source port.

68 CHAPTER 4: MANAGING DEVICE SECURITY

■Destination Port — Indicates the destination port that is used for

matched packets. Enabled only when TCP or UDP are selected in the

Protocol list. The field value is either user defined or Any. If Any is

selected, the IP based ACL is applied to any destination port.

■TCP Flags — If checked, enables configuration of TCP flags matched

to the packet. The possible fields are:

■Urg — Urgent pointer field significant. The urgent pointer points to

the sequence number of the octet following the urgent data.

■Ack — Acknowledgement field significant. The acknowledgement

field is the byte number of the next byte that the sender expects to

receive from the receiver.

■Psh — Push (send) the data as soon as possible, without buffering.

This is used for interactive traffic.

■Rst — Reset the connection. This invalidates the sequence numbers

and aborts the session between the sender and receiver.

■Syn — Synchronize Initial Sequence Numbers (ISNs). This is used to

initialize a new connection.

■Fin — Finish. This indicates there is no more data from the sender.

This marks a normal closing of the session between the sender and

receiver.

For each TCP flag, the possible field values are:

■Set — Enables the TCP flag.

■Unset — Disables the TCP flag.

■Don’t Care — Does not check the packet’s TCP flag.

■ICMP — If checked, enables filtering ICMP packets for an ICMP

message type. The possible values are:

■Select from List — Selects an ICMP message type from a list.

■ICMP Type — Specifies an ICMP message type.

■Any — Does not filter for an ICMP message type.

■ICMP Code — If checked, enables specifying an ICMP message code

for filtering ICMP packets. ICMP packets that are filtered by ICMP

message type can also be filtered by the ICMP message code.

■IGMP — If checked, enables filtering IGMP packets for an IGMP

message type. The possible values are:

■Select from List — Selects an IGMP message type from a list.

Defining Access Control Lists 69

■IGMP Type — Specifies an IGMP message type.

■Any — Does not filter for an IGMP message type.

■Source IP Address — If selected, enables matching the source port IP

address to which packets are addressed to the ACE, according to a

wildcard mask. The field value is either user defined or Any. If Any is

selected, accepts any source IP address and disables wildcard mask

filtering.

■Wild Card Mask — Defines the source IP address wildcard mask.

Wildcard masks specify which bits are used and which bits are

ignored. A wildcard mask of 255.255.255.255 indicates that no bit

is important. A wildcard mask of 0.0.0.0 indicates that all the bits

are important. For example, if the source IP address is

149.36.184.198 and the wildcard mask is 0.0.0.255, the first three

bytes of the IP address are matched, while the last eight bits are

ignored. For the source IP address 149.36.184.198, this wildcard

mask matches all IP addresses in the range 149.36.184.0 to

149.36.184.255. A wildcard mask must not contain leading

zeroes. For example, a wildcard mask of 010.010.011.010 is

invalid, but a wildcard mask of 10.10.11.10 is valid.

■Destination IP Address — If selected, enables matching the

destination port IP address to which packets are addressed to the ACE,

according to a wildcard mask. The field value is either user defined or

Any. If Any is selected, accepts any destination IP address and disables

wildcard mask filtering.

■Wild Card Mask — Indicates the destination IP Address wildcard

mask. Wildcards are used to mask all or part of a destination IP

Address. Wildcard masks specify which bits are used and which

bits are ignored. A wildcard mask of 255.255.255.255 indicates

that no bit is important. A wildcard mask of 0.0.0.0 indicates that

all bits are important. For example, if the destination IP address

149.36.184.198 and the wildcard mask is 0.0.0.255, the first three

bytes of the IP address are matched, while the last eight bits are

ignored. For the destination IP address 149.36.184.198, this

wildcard mask matches all IP addresses in the range 149.36.184.0

to 149.36.184.255. A wildcard mask must not contain leading

zeroes. For example, a wildcard mask of 056.022.075.032 is

invalid, but a wildcard mask of 56.22.75.32 is valid.

■Match DSCP — Matches the packet DSCP value to the ACL. Either

the DSCP value or the IP Precedence value is used to match packets to

ACLs.

70 CHAPTER 4: MANAGING DEVICE SECURITY

■Match IP Precedence — Matches the packet IP Precedence value to

the ACE. Either the DSCP value or the IP Precedence value is used to

match packets to ACLs.

■Action — Indicates the ACL forwarding action. In addition, the port

can be shut down, a trap can be sent to the network administrator, or

packet is assigned rate limiting restrictions for forwarding. The options

are as follows:

■Permit — Forwards packets which meet the ACL criteria.

■Deny — Drops packets which meet the ACL criteria.

■Shutdown — Drops packet that meets the ACL criteria, and

disables the port to which the packet was addressed. Ports are

reactivated from the Port Administration Setup Page.

2Select an ACL from the ACL Name drop-down list.

3Define the rule setup fields.

4Click Apply. The ACL rule setup is enabled, and the device is updated.

Modifying IP Based

ACLs

The IP Based ACL Modify Page allows the network administrator to

modify IP Based ACLs settings.

Monitor users have no access to this page.

Figure 34 IP Based ACL Modify Page

Defining Access Control Lists 71

The IP Based ACL Modify Page contains the following fields:

■Selection ACL — Selects the ACL to be modified.

Modify Rule

■Priority — Defines the ACL priority. ACLs are checked on the first fit

basis. The ACL priority defines the ACL order in the ACL list.

■Protocol — Indicates the protocol in the ACE to which the packet is

matched.

■Select from List — Selects a protocol from a list on which ACE can

be based.

■Protocol ID — Adds user-defined protocols by which packets are

matched to the ACE. Each protocol has a specific protocol number

which is unique. The possible field range is 0-255.

■Source Port — Enables creating an ACL based on a specific protocol.

■Any — Enables creating an ACL based on any protocol.

■Destination Port — Indicates the destination port that is matched

packets. Enabled only when TCP or UDP are selected in the Protocol

list.

■Any — Enables creating an ACL Based on any protocol.

■TCP Flags — If checked, enables configuration of TCP flags matched

to the packet. The possible fields are:

■Urg — Urgent pointer field significant. The urgent pointer points to

the sequence number of the octet following the urgent data.

■Ack — Acknowledgement field significant. The acknowledgement

field is the byte number of the next byte that the sender expects to

receive from the receiver.

■Psh — Push (send) the data as soon as possible, without buffering.

This is used for interactive traffic.

■Rst — Reset the connection. This invalidates the sequence numbers

and aborts the session between the sender and receiver.

■Syn — Synchronize Initial Sequence Numbers (ISNs). This is used to

initialize a new connection.

■Fin — Finish. This indicates there is no more data from the sender.

This marks a normal closing of the session between the sender and

receiver.

72 CHAPTER 4: MANAGING DEVICE SECURITY

For each TCP flag, the possible field values are:

■Set — Enables the TCP flag.

■Unset — Disables the TCP flag.

■Don’t Care — Does not check the packet’s TCP flag.

■ICMP — If checked, enables filtering ICMP packets for an ICMP

message type. The possible values are:

■Select from List — Selects an ICMP message type from a list.

■ICMP Type — Specifies an ICMP message type.

■Any — Does not filter for an ICMP message type.

■ICMP Code — If checked, enables specifying an ICMP message code

for filtering ICMP packets. ICMP packets that are filtered by ICMP

message type can also be filtered by the ICMP message code.

■IGMP — If checked, enables filtering IGMP packets for an IGMP

message type. The possible values are:

■Select from List — Selects an IGMP message type from a list.

■IGMP Type — Specifies an IGMP message type.

■Any — Does not filter for an IGMP message type.

■Source IP Address — Matches the source IP address to which

packets are addressed to the ACL.

■Wild Card Mask — Defines the source IP address wildcard mask.

Wildcard masks specify which bits are used and which bits are

ignored. A mask of 255.255.255.255 indicates that no bit is

important. A mask of 0.0.0.0 indicates that all the bits are

important. For example, if the source IP address is 149.36.184.198

and the wildcard mask is 255.255.255.00, the first three bytes of

the IP address are ignored, while the last eight bits are used.

■Destination IP Address — Matches the destination IP address to

which packets are addressed to the ACL.

■Wild Card Mask — Indicates the destination IP Address wildcard

mask. Wildcards are used to filter a destination IP Address. Masks

specify which bits are used and which bits are ignored. A wildcard

mask of 255.255.255.255 indicates that no bit is important. A

wildcard mask of 0.0.0.0 indicates that all bits are important. For

example, if the destination IP address 149.36.184.198 and the

wildcard mask is 255.255.0.0, the first two bytes of the IP address

are used, while the last two bytes are ignored.

Defining Access Control Lists 73

■Match DSCP — Matches the packet DSCP value to the ACL. Either

the DSCP value or the IP Precedence value is used to match packets to

ACLs.

■Match IP Precedence — Matches the packet IP Precedence value to

the ACE. Either the DSCP value or the IP Precedence value is used to

match packets to ACLs.

■Action — Indicates the ACL forwarding action. In addition, the port

can be shut down, a trap can be sent to the network administrator, or

packet is assigned rate limiting restrictions for forwarding. The options

are as follows:

■Permit — Forwards packets which meet the ACL criteria.

■Deny — Drops packets which meet the ACL criteria.

■Shutdown — Drops packet that meets the ACL criteria, and

disables the port to which the packet was addressed. Ports are

reactivated from the Port Administration Setup Page.

Removing IP Based

ACLs

The IP Based ACL Remove Page allows the user to remove IP Based ACLs.

Monitor users have no access to this page.

1Click Device > ACL > IP Based ACL > Remove. The IP Based ACL

Remove Page opens:

Figure 35 IP Based ACL Remove Page

74 CHAPTER 4: MANAGING DEVICE SECURITY

The IP Based ACL Remove Page contains the following fields:

■ACL Name — Contains a list of the IP-based ACLs.

■Remove ACL — Removes an ACL. The possible field values are:

■Checked — Removes the selected IP-based ACL.

■Unchecked — Maintains the IP-based ACL.

■Priority — Indicates the ACL priority, which determines which ACL is

matched to a packet on a first-match basis. The possible field values

are 1-2147483647.

■Protocol — Indicates the protocol in the ACE to which the packet is

matched.

■Destination Port — Defines the TCP/UDP destination port.

■Source Port — Defines the TCP/UDP source port to which the ACL is

matched.

■Flag Set — Sets the indicated TCP flag matched to the packet.

■ICMP Type — Specifies an ICMP message type for filtering ICMP

packets.

■ICMP Code — Specifies an ICMP message code for filtering ICMP

packets. ICMP packets that are filtered by ICMP message type can also

be filtered by the ICMP message code.

■IGMP Type — IGMP packets can be filtered by IGMP message type.

■Source Address — Indicates the source IP address.

■Source Mask — Indicates the source IP address mask.

■Destination Address — Indicates the destination IP address.

■Destination Mask — Indicates the destination IP address mask.

■DSCP — Matches the packet DSCP value to the ACL. Either the DSCP

value or the IP Precedence value is used to match packets to ACLs.

■IP - Prec. — Indicates matching ip-precedence with the packet IP

precedence value.

■Action — Indicates the ACL forwarding action. In addition, the port

can be shut down, a trap can be sent to the network administrator, or

packet is assigned rate limiting restrictions for forwarding. The options

are as follows:

■Permit — Forwards packets which meet the ACL criteria.

■Deny — Drops packets which meet the ACL criteria.

Defining Access Control Lists 75

■Shutdown — Drops packet that meets the ACL criteria, and

disables the port to which the packet was addressed. Ports are

reactivated from the Port Administration Setup Page.

2Select an ACL to be removed.

3Click Apply. The selected ACLs are deleted, and the device is updated.

Viewing ACL Binding The ACL Binding Summary Page displays the user-defined ACLs mapped

to the interfaces.

To view ACL Binding:

1Click Device > ACL > ACL Binding > Summary. The ACL Binding

Summary Page opens:

Figure 36 ACL Binding Summary Page

The ACL Binding Summary Page contains the following fields:

■Interface — Displays the port or LAG number to which the ACL is

bound.

■ACL Name — Displays the name of ACL which is bound to a selected

port.

76 CHAPTER 4: MANAGING DEVICE SECURITY

Configuring ACL

Binding

The ACL Binding Setup Page allows the network administrator to bind

specific ports to MAC or IP Based ACLs.

The monitor user has no access to this page.

To define ACL Binding:

1Click Device > ACL > ACL Binding > Summary. The ACL Binding

Summary Page opens:

Figure 37 ACL Binding Setup Page

The ACL Binding Setup Page contains the following fields:

■Select Port(s) — Indicates the ports to be configured.

■Bind ACL — Assigns an Access Control List to a port or LAG.

■MAC-based ACL — Displays the MAC based ACL to which the

interface is assigned.

■IP-based ACL — Displays the IP based ACL to which the interface is

assigned.

■Select ACL — Contains a list of previously defined Access Control

Lists to which the port or LAG can be bound. To bind an ACL to a

LAG, the ACL should be bound to its port members.

2Define the relevant fields.

3Click Apply. ACL Binding is defined, and the device is updated.

Defining Access Control Lists 77

Removing ACL

Binding

The ACL Binding Remove Page allows the network administrator to

remove user-defined ACLs from a selected interface.

Monitor users have no access to this page.

To remove ACL Binding:

1Click Device > ACL > ACL Binding > Remove. The ACL Binding Remove

Page opens:

Figure 38 ACL Binding Remove Page

The ACL Binding Remove Page contains the following fields:

■Interface — Displays the port interface to which the ACL is bound.

■ACL Name — Displays the name of ACL to be removed from the

selected port.

2Select an ACL to be removed.

3Click Apply. The selected ACLs are removed, and the device is updated.

78 CHAPTER 4: MANAGING DEVICE SECURITY

Enabling Broadcast

Storm

Broadcast Storm limits the amount of Multicast and Broadcast frames

accepted and forwarded by the device. When Layer 2 frames are

forwarded, Broadcast and Multicast frames are flooded to all ports on the

relevant VLAN. This occupies bandwidth, and loads all nodes on all ports.

A Broadcast Storm is a result of an excessive amount of broadcast

messages simultaneously transmitted across a network by a single port.

Forwarded message responses are heaped onto the network, straining

network resources or causing the network to time out.

Broadcast Storm is enabled for all Gigabit ports by defining the packet

type and the rate the packets are transmitted. The system measures the

incoming Broadcast and Multicast frame rates separately on each port,

and discards the frames when the rate exceeds a user-defined rate.

Packet threshold is ignored if Broadcast Storm Control is Disabled.

Monitor users have no access to this page.

1Click Device > Broadcast Storm > Setup. The Broadcast Storm Setup

Page opens:

Figure 39 Broadcast Storm Setup Page

Enabling Broadcast Storm 79

The Broadcast Storm Setup Page contains the following fields:

■Broadcast Storm Control — Indicates if forwarding Broadcast

packet types is enabled on the interface.

■Disabled — Disables broadcast control on the selected port.

■Broadcast — Enables broadcast control on the selected port.

■Broadcast&Multicast — Enables broadcast and multicast control on

the selected port.

■Packet Rate Threshold (3500-1,000,000) — Indicates the maximum

rate (kilobits per second) at which unknown packets are forwarded.

The range is 3,500-1,000,000. The default value is 3500.

2Define the relevant fields.

3Click Apply. Broadcast Storm is defined, and the device is updated.

5GENERAL SYSTEM INFORMATION

This section contains information about configuring general system

parameters, and includes the following:

■Viewing System Description

■Configuring System Name Information

■Configuring System Time

Viewing System

Description

The Device View Page displays parameters for configuring general device

information, including the system name, MAC Address, software and

hardware versions, and more.

1Click Device Summary. The Device View Page opens.

Figure 40 Device View Page

Viewing System Description 81

The Device View Page contains the following fields:

■Product Description — Displays the device model number and

name. Not user-editable.

■System Name — Displays the user-defined device name. See

“Configuring System Name Information” page 82.

■System Location — Displays the location where the system is

currently running. See page 82.

■System Contact — Displays the name of the contact person. See

“Configuring System Name Information” page 82.

■Serial Number — Displays the device serial number. Not editable.

■Product 3C Number — Displays the 3Com device model number.

Not editable.

■System Object ID — Displays the vendor’s authoritative identification

of the network management subsystem contained in the entity. Not

editable.

■MAC Address — Displays the device MAC address. Not editable.

■System Up Time — Displays the amount of time since the device was

reset.

■Software Version — Displays the installed software version number.

■Boot Version — Displays the current boot version running on the

device.

■Hardware Version — Displays the current hardware version of the

device.

■Poll Now — This button immediately polls the switch ports for

information including speed, use and status. The information is displayed

by clicking the port icons at the top of the Device View tab. “Device

Representation” page 32.

82 CHAPTER 5: GENERAL SYSTEM INFORMATION

Configuring System

Name Information

The System Name Page allows the Network Administrator to provide a

user-defined system name, location, and contact information for the

device.

Monitor users have read-only permissions on this page.

To configure the System Name:

1Click Administration > System Name. The System Name Page opens:

Figure 41 System Name Page

The System Name Page includes the following fields:

■System Name — Defines the user-defined device name. The field

range is 0-100 characters.

■System Location — Defines the location where the system is

currently running. The field range is 0-100 characters.

■System Contact — Defines the name of the contact person. The field

range is 0-100 characters.

2Define the fields.

3Click Apply. The System Name is enabled, and the device is updated.

4Be sure to save your configuration, or you changes will be lost when the

switch is rebooted. To save the configuration, refer to “Saving the

Configuration” on page 37.

Configuring System Time 83

Configuring System

Time

The System Time Setup Page contains fields for defining system time

parameters for the local hardware clock. Daylight Savings Time can be

enabled on the device.

Monitor users have limited permissions on this page.

Country specific times need to be added manually.

To configure the System Time:

1Click Administration > System Time. The System Time Setup Page

opens:

Figure 42 System Time Setup Page

The System Time Setup Page contains the following sections:

■Local Settings — Displays the system time in the following format:

■Time — Indicates the system time. You can configure the Hours (in

24-hour format), Minutes, and Seconds.

■Date — Displays the month of the year. You can configure the

Month, Day, and Year.

■Daylight Saving — This check box enables and disables automatic

Daylight Saving Time (DST) on the switch. When checked, the DST

setup parameters are displayed.

84 CHAPTER 5: GENERAL SYSTEM INFORMATION

■DST Region — Selects USA or European standard DST, or

customizable DST.

■USA — The device switches to DST at 2:00 a.m. from the second

Sunday in March, and reverts to standard time at 2:00 a.m. on the

First Sunday of November

■European — The device switches to DST at 1:00 am on the last

Sunday in March and reverts to standard time at 1:00 am on the

last Sunday in October. The European option applies to EU

members, and other European countries using the EU standard.

■Other — The DST definitions are user-defined and can be

customized to your location. If Other is selected, the From and To

fields must be defined.

■Time Set Offset — Sets the amount of time adjusted for DST (in

minutes). The default time is 60 minutes.

■From — Indicates the non-recurring time that DST begins when the

region is set to Other. Enter the Hours, Minutes, Month, day, and Year

for DST to begin.

■To — Indicates the non-recurring time that DST ends when the region

is set to Other. Enter the Hours, Minutes, Month, day, and Year for

DST to end.

■Recurring — When the region is set to Other, this check box enables

user-defined DST that is constant from year to year.

■Recurring From — The recurring time that DST begins each year.

Select or type the Day, Week, Month, and Time.

■Recurring To — The recurring time that DST ends each year. Select or

type the Day, Week, Month, and Tim.:

2Define the local Time and Date.

3Enable or disable automatic DST by clicking the Daylight Savings box.

4Configure the region, Time Set Offset, Recurring, From and To fields as

appropriate for your location.

5Click Apply. The DST settings are saved, and the device is updated.

6Be sure to save your configuration, or you changes will be lost when the

switch is rebooted. To save the configuration, refer to “Saving the

Configuration” on page 37.

6CONFIGURING PORTS

This section contains information for configuring Port Settings, and

includes the following sections:

■Viewing Port Settings

■Defining Port Settings

■Viewing Port Details

Viewing Port

Settings

The Port Administration Summary Page permits the network manager to

view the current port and LAG setting configuration. The Port

Administration Summary Page also displays to which LAGs the port

belongs. When configuring the port speed and port Duplex mode, please

note the following:

■Setting the port speed to 10/100/1000 and the Duplex mode to Half =

admin speed is = 10/100/1000 half and no advertisement.

■Setting the port speed to 10/100/1000 and the Duplex mode to Full =

admin speed is = 10/100/1000 full and no advertisement.

■Setting the port speed to 10/100/1000 and the Duplex mode to Auto

= admin speed is = Admin Advertisement = 10/100/1000 full and half.

■Setting the port speed to Auto and Duplex mode to Half = Admin

Advertisement = 10+100+1000 half.

■Setting the port speed to Auto and Duplex mode to Full = Auto -

Admin Advertisement = 10+100+1000 and Full.

■Setting the port speed to 10/100/1000 and the Duplex mode to Auto

= Admin Advertisement = 10/100/1000 Full+Half.

86 CHAPTER 6: CONFIGURING PORTS

To view Port Settings:

1Click Port > Administration > Summary. The Port Administration

Summary Page opens:

Figure 43 Port Administration Summary Page

The Port Administration Summary Page contains the following fields:

■Port — Indicates the selected port number.

■Port Status — Indicates whether the port is currently operational or

non-operational. The possible field values are:

■Up — Indicates the port is currently operating.

■Down — Indicates the port is currently not operating.

■Suspended — Indicates the port has been shutdown through a

device security option.

■Port Speed — Displays the configured rate for the port. The port type

determines what speed setting options are available. Port speeds can

only be configured when auto negotiation is disabled. The possible

field values are:

Viewing Port Settings 87

■10M — Indicates the port is currently operating at 10 Mbps.

■100M — Indicates the port is currently operating at 100 Mbps.

■1000M — Indicates the port is currently operating at 1000 Mbps.

■Duplex Mode — Displays the port duplex mode. This field is

configurable only when auto negotiation is disabled, and the port

speed is set to 10M or 100M or 1000M per second. This field cannot

be configured on LAGs. The possible field values are:

■Full — The interface supports transmission between the device and

its link partner in both directions simultaneously.

■Half — The interface supports transmission between the device

and the client in only one direction at a time.

■Flow Control — Displays the flow control status on the port.

Operates when the port is in full duplex mode. The possible field

values are:

■Enable — Enables flow control on the port.

■Disable — Disables flow control on the port.

88 CHAPTER 6: CONFIGURING PORTS

Defining Port

Settings

The Port Administration Setup Page allows network managers to

configure port parameters for specific ports.

Monitor users have no access to this page.

To configure Port Settings:

1Click Port > Administration > Setup. The Port Administration Setup

Page opens:

Figure 44 Port Administration Setup Page

The Port Administration Setup Page contains the following fields:

■Port State — Defines the port state. The possible values are:

■No Change — Retains the current port status.

■Enable — Enables the port.

■Disable — Disables the port.

■Speed — Defines the configured rate for the port. The port speed

determines what speed setting options are available. Port speeds can

only be configured when auto negotiation is disabled. The possible

field values are:

Defining Port Settings 89

■10 — Indicates the port is currently operating at 10 Mbps.

■100 — Indicates the port is currently operating at 100 Mbps.

■1000 — Indicates the port is currently operating at 1000 Mbps.

■Auto — Use to automatically configure the port.

■No Change — Retains the current port speed.

■Duplex — Displays the port duplex mode. This field is configurable

only when auto negotiation is disabled, and the port speed is set to

10M or 100M. This field cannot be configured on LAGs. The possible

field values are:

■Auto — Use to automatically configure the port.

■Full — The interface supports transmission between the device and

its link partner in both directions simultaneously.

■Half — The interface supports transmission between the device

and the client in only one direction at a time.

■No Change — Retains the current port duplex mode.

■Flow Control — Displays the flow control status on the port.

Operates when the port is in full duplex mode. The possible field

values are:

■Enable — Enables flow control on the port.

■Disable — Disables flow control on the port.

■No Change — Retains the current flow control status on port.

■Reactivate — Reactivates a port if the port has been shutdown

through a device security option. The possible field values are:

■Reactivate — Reactivates a port.

■No Change — Retains the current port status.

■Select Ports — Displays the ports to be configured.

2Define the fields.

3Click Apply. The ports are enabled, and the device is updated.

90 CHAPTER 6: CONFIGURING PORTS

Viewing Port

Details

The Port Detail Page displays current port parameters for specific ports.

Monitor users have no access to this page.

To view Port Details:

1Click Port > Administration > Detail. The Port Detail Page opens:

Figure 45 Port Detail Page

The Port Detail Page contains the following fields:

■Select a Port — Displays the current port settings.

■Port State — Indicates the port state. The possible field values are:

■Enable — Enables the port.

■Disable — Disables the port.

■Flow Control — Displays the flow control status on the port.

Operates when the port is in full duplex mode. The possible field

values are:

■Enable — Enables flow control on the port.

■Disable — Disables flow control on the port.

Viewing Port Details 91

■Speed — Displays the configured rate for the port. The port type

determines what speed setting options are available. Port speeds can

only be configured when auto negotiation is disabled. The possible

field values are:

■10 — Indicates the port is currently operating at 10 Mbps.

■100 — Indicates the port is currently operating at 100 Mbps.

■1000 — Indicates the port is currently operating at 1000 Mbps.

■Auto — Use to automatically configure the port.

■Duplex — Displays the port duplex mode. This field is configurable

only when auto negotiation is disabled, and the port speed is set to

10M or 100M. This field cannot be configured on LAGs. The possible

field values are:

■Auto — Use to automatically configure the port.

■Full — The interface supports transmission between the device and

its link partner in both directions simultaneously.

■Half — The interface supports transmission between the device

and the client in only one direction at a time.

2Define the fields.

3Click Apply. The ports are enabled, and the device is updated.

7AGGREGATING PORTS

This section contains information for configuring Link Aggregation,

which optimizes port usage by linking a group of ports together to form a

single LAG. A Link Aggregated Group (LAG) aggregates ports or VLANs

into a single virtual port or VLAN. Aggregating ports multiplies the

bandwidth between the devices, increases port flexibility, and provides

link redundancy. Ensure the following:

■All ports within a LAG must be the same media type.

■All ports added to an existing LAG which are part of a tagged VLAN

inherit the existing VLAN tags.

■Auto-negotiation mode is not configured on the port.

■The port is in full-duplex mode.

■All ports in the LAG have the same ingress filtering and tagged modes.

■All ports in the LAG have the same back pressure and flow control

modes.

■All ports in the LAG have the same priority.

■All ports in the LAG have the same transceiver type.

■The device supports up to eight LAGs, and eight ports in each LAG.

■Ports added to a LAG lose their individual port configuration. When

ports are removed from the LAG, the original port configuration is

applied to the ports.

This section contains the following topics:

■Viewing Link Aggregation

■Configuring Link Aggregation

■Modifying Link Aggregation

■Removing Link Aggregation

■Viewing LACP

■Modifying LACP

Viewing Link Aggregation 93

Viewing Link

Aggregation

The Link Aggregation Summary Page displays port usage by linking a

group of ports together to form a single LAG. Aggregating ports

multiplies the bandwidth between the devices, increases port flexibility,

and provides link redundancy.

To view Link Aggregation:

1Click Ports > Link Aggregation > Summary. The Link Aggregation

Summary Page opens:

Figure 46 Link Aggregation Summary Page

The Link Aggregation Summary Page includes the following fields:

■Group ID — Displays the Link Aggregated Group ID.

■Type — Displays the type of link aggregation for the Group ID.

■Ports — Displays the member ports included in the specified LAG.

Configuring Link

Aggregation

The Link Aggregation Create Page optimizes port usage by linking a

group of ports together to form a single LAG. Aggregating ports

multiplies the bandwidth between the devices, increases port flexibility,

and provides link redundancy.

Monitor users have no access to this page.

94 CHAPTER 7: AGGREGATING PORTS

1Click Ports > Link Aggregation > Create. The Link Aggregation Create

Page opens:

Figure 47 Link Aggregation Create Page

The Link Aggregation Create Page includes the following fields:

■Enter aggregation Group ID — Displays the group ID. The range is

1-8 groups.

■Static — Selects the link aggregation type to be static.

■LACP — Selects the link aggregation type to be LACP.

■Select ports for the new aggregation — Displays the ports for

which the link aggregation parameters are defined.

■Blue — Displays a member of the aggregation being created.

■White — Displays a non existent member of any aggregation.

■Grey — Displays a member of an existing aggregation or VLAN.

Summary

■Group ID — Displays the Link Aggregated Group ID.

■Member Ports — Displays the ports configured to the LAG.

2Define the fields.

3Click Apply. The LAG configuration is defined, and the device is updated.

Modifying Link Aggregation 95

Modifying Link

Aggregation

The Link Aggregation Modify Page optimizes port usage by linking a

group of ports together to form a single LAG. Aggregating ports

multiplies the bandwidth between the devices, increases port flexibility,

and provides link redundancy.

Monitor users have no access to this page.

To modify Link Aggregation:

1Click Ports > Link Aggregation > Modify. The Link Aggregation

Modify Page opens:

Figure 48 Link Aggregation Modify Page

The Link Aggregation Modify Page includes the following fields:

■Select Aggregation to Modify — Selects the Link Aggregation

Group ID to modify.

■Selected Ports — Allows the network manager to select ports to be

added or removed from a current aggregation. The selected or

de-selected ports are color-coded as follows:

■Blue — Displays a member of the modified aggregation.

■White — Not a member of any aggregation.

■Grey — Displays a member of an existing aggregation or VLAN.

96 CHAPTER 7: AGGREGATING PORTS

Summary

■Group ID — Displays the Link Aggregated Group ID.

■Type — Displays the link aggregation type.

■Member Ports — Displays the ports configured to the LAG.

2Define the fields.

3Click Apply. Link Aggregation is configured, and the application is

updated.

Removing Link

Aggregation

The Link Aggregation Remove Page allows the network manager to

remove group IDs containing member ports.

Monitor users have no access to this page.

To remove Link Aggregation:

1Click Ports > Link Aggregation > Remove. The Link Aggregation

Remove Page opens:

Figure 49 Link Aggregation Remove Page

Viewing LACP 97

The Link Aggregation Remove Page includes the following fields:

■Select Aggregation(s) to Remove — Displays the Link Aggregation

table. Each row corresponds to a Link Aggregated Group ID. The fields

in the table are:

■Group ID — Displays the Link Aggregated Group ID.

■Type — Displays the Link Aggregation type.

■Member Ports — Displays the ports for which the link aggregation

parameters are defined.

2Select a group ID to be removed

3Click Remove. The Link aggregation is removed, and the device is

updated.

Viewing LACP LAG ports can contain different media types if the ports are operating at

the same speed. Aggregated links can be set up manually or

automatically established by enabling LACP on the relevant links.

Aggregate ports can be linked into link-aggregation port-groups. The

LACP Summary Page contains fields for viewing LACP LAGs.

1Click Port > LACP > Summary. The LACP Summary Page opens:

Figure 50 LACP Summary Page

98 CHAPTER 7: AGGREGATING PORTS

The LACP Summary Page contains the following fields:

■Port — Displays the port number to which timeout and priority values

are assigned.

■Port-Priority — Displays the LACP priority value for the port. The field

range is 1-65535.

■LACP Timeout — Displays the administrative LACP timeout. The

possible field values are:

■Long — Specifies the long timeout value.

■Short — Specifies the short timeout value.

Modifying LACP LAG ports can contain different media types if the ports are operating at

the same speed. Aggregated links can be set up manually or

automatically established by enabling LACP on the relevant links.

Aggregate ports can be linked into link-aggregation port-groups. The

LACP Modify Page contains fields for modifying LACP LAGs.

1Click Port > LACP > Summary. The LACP Modify Page opens:

Figure 51 LACP Modify Page

Modifying LACP 99

The LACP Modify Page contains the following fields:

■LACP System Priority — Specifies system priority value. The field

range is 1-65535. The field default is 1

■Select Port — Displays the port number to which timeout and priority

values are assigned.

■LACP Port Priority — Displays the LACP priority value for the port.

The field range is 1-65535.

■LACP Timeout — Displays the administrative LACP timeout. The

possible field values are:

■Long — Specifies the long timeout value.

■Short — Specifies the short timeout value.

2Define the fields.

3Click Apply. Link Aggregation is modified, and the application is

updated.

8CONFIGURING VLANS

This section contains the following topics:

■VLAN Overview

■Viewing VLAN Details

■Viewing VLAN Port Details

■Creating VLANs

■Modifying VLAN Settings

■Modifying Port VLAN Settings

■Removing VLANs

VLAN Overview VLANs are logical subgroups with a Local Area Network (LAN) which

combine user stations and network devices into a single unit, regardless

of the physical LAN segment to which they are attached. VLANs allow

network traffic to flow more efficiently within subgroups. VLANs use

software to reduce the amount of time it takes for network changes,

additions, and moves to be implemented. VLANs restrict traffic within the

VLAN.

VLAN1 is the management VLAN. You can only manage the switch

through a port that is an untagged member of VLAN1.

VLANs have no minimum number of ports, and can be created per unit,

per device, or through any other logical connection combination, since

they are software-based and not defined by physical attributes.

VLANs function at Layer 2. Since VLANs isolate traffic within the VLAN, a

Layer 3 router working at a protocol level is required to allow traffic flow

between VLANs. Layer 3 routers identify segments and coordinate with

VLANs. VLANs are Broadcast and Multicast domains. Broadcast and

Multicast traffic is transmitted only in the VLAN in which the traffic is

generated.

101

VLAN tagging provides a method of transferring VLAN information

between VLAN groups. VLAN1is the default VLAN. All ports are untagged

members of VLAN1 by default. If any port becomes an untagged member

of a different VLAN, then the port is removed from untagged

membership of VLAN1. For example: If port 24 is made an untagged

member of VLAN 5, the port will no longer be a member of VLAN1.

However, if the port is made an tagged member of VLAN5, it still remains

untagged in VLAN1.

A port can only be an untagged member of one VLAN. By default it is

untagged member of VLAN1. If its untagged membership from another

VLAN is removed, it will default to untagged membership in VLAN1.

There is no restriction on tagged membership. A port can be a tagged

member of any number of multiple VLANs.

102 CHAPTER 8: CONFIGURING VLANS

Viewing VLAN

Details

The VLAN Detail Page provides information and global parameters on

VLANS configured on the system.

1Click Device > VLAN > VLAN Detail. The VLAN Detail Page opens:

Figure 52 VLAN Detail Page

The VLAN Detail Page contains the following information:

■Select a VLAN to display — Selects a VLAN to be display.

■Membership Type — Displays the membership type for each VLAN.

The possible field values are:

■Untagged — Indicates the interface is an untagged member of the

VLAN.

■Tagged — Indicates the interface is a tagged member of a VLAN.

VLAN tagged packets are forwarded by the interface. The packets

contain VLAN information.

■Not a Member — Indicates the interface is not a member of the

VLAN

Viewing VLAN Port Details 103

Viewing VLAN Port

Details

The VLAN Port Detail Page provides displays VLAN configured ports.

To view VLAN Port details:

1Click Device > VLAN > Port Detail. The VLAN Port Detail Page opens:

Figure 53 VLAN Port Detail Page

The VLAN Port Detail Page contains the following information:

■Select Port — Selects the port to be displayed.

■Untagged membership — Indicates the port is an untagged

member of the VLAN.

■Tagged membership — Indicates the port is a tagged member of a

VLAN. VLAN tagged packets are forwarded by the interface. The

packets contain VLAN information.

104 CHAPTER 8: CONFIGURING VLANS

Creating VLANs The VLAN Setup Page allows the network administrator to create

user-defined VLANs.

The monitor users have no access to this page.

To crea te VL ANs :

1Click Device > VLAN > Setup. The VLAN Setup Page opens:

Figure 54 VLAN Setup Page

The VLAN Setup Page contains the following fields:

Create

■VLAN IDs — Creates a VLAN ID.

■ID — Displays the VLAN ID.

■Name — Displays the user-defined VLAN name.

Rename VLAN

■ID — Displays the VLAN ID.

■Name — Renames the user-defined VLAN name.

2.Enter a VLAN Number.

Modifying VLAN Settings 105

3Click Create. The VLANs are configured, and the device is updated.

To re nam e a VLAN :

1Highlight a VLAN to be renamed from the VLAN list.

2Enter the new name for the VLAN.

3Click Rename. The VLAN is renamed, and the device is updated.

Modifying VLAN

Settings

The Modify VLAN Page allows the network manager to rename VLANs

and change VLAN membership.

The monitor users have no access to this page.

To edit VLAN Settings:

1Click Device > VLAN > Modify VLAN. The Modify VLAN Page opens:

Figure 55 Modify VLAN Page

The Modify VLAN Page contains the following fields:

■Select a VLAN to Modify — Modifies a VLAN Name from a drop

down list.

■Rename — Renames the VLAN Name.

106 CHAPTER 8: CONFIGURING VLANS

■Select port to add to the VLAN — Adds a selected port to the

VLAN.

■Select Membership Type — Displays the membership type for each

VLAN. The possible field values are:

■Untagged — Indicates the interface is an untagged member of the

VLAN.

■Tagged — Indicates the interface is a tagged member of a VLAN.

VLAN tagged packets are forwarded by the interface. The packets

contain VLAN information.

■Not a Member — Indicates the interface is not a member of the

VLAN.

■Not Available for Selection — Indicates the interface is not

available for selection.

■Select All — Allows the user to select all ports to be added to the

VLAN.

■Select None — Removes the ports selected.

To re nam e VL ANs :

1Select a VLAN from the list to be renamed.

2Click Rename. The VLANs are renamed, and the device is updated.

To add ports to a VLAN

1Select a VLAN to modify.

2Select the membership type for the selected port.

3Select ports to be added to the selected VLAN.

4Click Apply. The selected ports are added to the VLAN, and the device is

updated.

Modifying Port VLAN Settings 107

Modifying Port

VLAN Settings

The Modify VLAN Port Page allows the network manager to modify port

VLAN settings.

The monitor users have no access to this page.

1Click Device > VLAN > Modify Port. The Modify VLAN Port Page opens:

Figure 56 Modify VLAN Port Page

The Modify VLAN Port Page contains the following fields:

■Select a Port — Selects a port to be modified.

■Select Membership Type — Displays the membership type for each

VLAN. The possible field values are:

■Tagged — Indicates the interface is a tagged member of a VLAN.

VLAN tagged packets are forwarded by the interface. The packets

contain VLAN information.

■Untagged — Indicates the interface is an untagged member of the

VLAN.

■Not Available for Selection — Indicates the interface is not

available for selection.

■VLAN ID — Enter the VLAN ID to which the port is assigned.

2Select a port.

108 CHAPTER 8: CONFIGURING VLANS

3Select Membership type.

4Enter VLAN ID to be assigned to the port.

5Click Apply. The VLANs are configured, and the device is updated.

Removing VLANs The VLAN Remove Page allows the network administrator to remove

VLANs.

The monitor users have no access to this page.

1Click Device > VLAN > Remove. The VLAN Remove Page opens:

Figure 57 VLAN Remove Page

The VLAN Remove Page contains the following fields:

■ID — Displays the VLAN ID.

■Name — Displays the user-defined VLAN name.

■Select All — Allows the user to select the entire table to be removed.

2Select the VLAN ID to be deleted.

3Click Remove. The selected VLANs are deleted, and the device is

updated.

9CONFIGURING IP AND MAC

ADDRESS INFORMATION

This section contains information for defining IP interfaces, and includes

the following sections:

■Defining IP Addressing

■Configuring ARP Settings

■Configuring Address Tables

Defining IP

Addressing

The IP Setup Page contains fields for assigning an IP address. The default

gateway is erased when the Default IP address is modified. Packets are

forwarded to the default gateway when sent to a remote network.

The monitor user has no access to this page.

1Click Administration > IP Setup. The IP Setup Page opens:

Figure 58 IP Setup Page

110 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION

The IP Setup Page contains the following fields:

■Configuration Method — Indicates if the IP address has been

configured statically or added dynamically. The possible field values

are:

■Static — Indicates that the IP Interface is configured by the user.

■DHCP — Indicates that the IP Interface is dynamically created.

■IP Address — Displays the currently configured IP address.

■Subnet Mask — Displays the currently configured subnet mask.

■Default Gateway — Displays the currently configured default

gateway.

2Select Manual or DHCP mode.

3If Manual has been selected, configure the IP Address, Subnet Mask and

Default Gateway.

4Click Apply. The IP configuration is enabled, and the device is updated.

Configuring ARP

Settings

The Address Resolution Protocol (ARP) converts IP addresses into physical

addresses, and maps the IP address to a MAC address. ARP allows a host

to communicate with other hosts when only the IP address of its

neighbors is known.

This section includes the following sections:

■Viewing ARP Settings

■Defining ARP Settings

■Removing ARP Entries

Configuring ARP Settings 111

Viewing ARP Settings The ARP Settings Summary Page displays the current ARP settings.

To view ARP Settings:

1Click Administration > ARP Settings > Summary. The ARP Settings

Summary Page opens:

Figure 59 ARP Settings Summary Page

The ARP Settings Summary Page contains the following fields:

■Interface — Indicates the VLAN for which ARP parameters are

defined.

■IP Address — Indicates the station IP address, which is associated

with the MAC Address.

■MAC Address — Displays the station MAC address, which is

associated in the ARP table with the IP address.

■Status — Displays the ARP table entry type. Possible field values are:

■Dynamic — Indicates the ARP entry is learned dynamically.

■Static — Indicates the ARP entry is a static entry.

112 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION

Defining ARP Settings The ARP Settings Setup Page allows network managers to define ARP

parameters for specific interfaces.

The monitor users have no access to this page.

To configure ARP entries:

1Click Administration > ARP Settings > Setup. The ARP Settings Setup

Page opens:

Figure 60 ARP Settings Setup Page

The ARP Settings Setup Page contains the following fields:

■VLAN — Indicates the VLAN for which ARP parameters are defined.

■IP Address — Indicates the station IP address, which is associated

with the MAC address.

■MAC Address — Displays the station MAC address, which is

associated in the ARP table with the IP address.

■ARP Entry Age Out — Specifies the amount of time (in seconds) that

passes between ARP Table entry requests. Following the ARP Entry

Age period, the entry is deleted from the table. The range is 1 -

40000000. The default value is 300 seconds.

2Define the fields.

3Click Apply. The ARP parameters are defined, and the device is updated.

Configuring ARP Settings 113

Removing ARP

Entries

The ARP Settings Remove Page provides parameters for removing ARP

entries from the ARP Table.

The monitor user has no access to this page.

To remove ARP entries:

1Click Administration > IP Addressing > ARP Settings > Remove. The

ARP Settings Remove Page opens:

Figure 61 ARP Settings Remove Page

The ARP Settings Remove Page contains the following fields:

■Clear ARP Table Entries — Specifies the types of ARP entries that are

cleared. The possible values are:

■None — Maintains the ARP entries.

■All — Clears all ARP entries.

■Dynamic — Clears only dynamic ARP entries.

■Static — Clears only static ARP entries.

■Remove — Removes a specific ARP entry. The possible field values

are:

■Checked — Removes the selected ARP entries.

■Unchecked — Maintains the current ARP entries.

114 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION

■Interface — Indicates the VLAN for which ARP parameters are

defined.

■IP Address — Indicates the station IP address which is associated with

the MAC address.

■MAC Address — Displays the station MAC address, which is

associated in the ARP table with the IP address.

■Status — Displays the ARP table entry type. Possible field values are:

■Dynamic — Indicates the ARP entry is learned dynamically.

■Static — Indicates the ARP entry is a static entry.

2Select the Interface to be removed.

3Click Remove. The ARP interface is removed, and the device is updated.

Configuring

Address Tables

MAC addresses are stored in either the Static Address or the Dynamic

Address databases. A packet addressed to a destination stored in one of

the databases is forwarded immediately to the port. The Dynamic

Address Table can be sorted by interface, VLAN, and MAC Address. MAC

addresses are dynamically learned as packets from sources arrive at the

device. Addresses are associated with ports by learning the ports from the

frames source address. Frames addressed to a destination MAC address

that is not associated with any port, are flooded to all ports of the

relevant VLAN. Static addresses are manually configured. In order to

prevent the bridging table from overflowing, dynamic MAC addresses,

from which no traffic is seen for a certain period, are erased.

This section includes the following sections:

■Viewing Address Table Settings

■Viewing Port Summary Settings

■Adding Entries into Address Tables

■Defining Aging Time

■Removing Address Table Ports

■Removing Address Tables

Configuring Address Tables 115

Viewing Address

Table Settings

The Address Table Summary Page displays the current MAC address table

configuration.

To view Address Table settings:

1Click Monitoring > Address Tables > Summary. The Address Table

Summary Page opens:

Figure 62 Address Table Summary Page

The Address Table Summary Page contains the following fields:

■State — Filters the list of MAC Addresses displayed according to the

type of MAC Address configuration. Possible values are:

■All — Displays all MAC Addresses.

■Static — Displays the MAC Addresses that were entered by a user.

■Dynamic — Displays the MAC Addresses that were detected by the

switch.

■MAC Address — Displays the current MAC addresses listed in the

MAC address table, filtered by the selected value of the State field.

■VLAN ID — Displays the VLAN ID attached to the MAC Address.

■State — Displays a table display based on the type of MAC address.

Possible values are:

■Config Static — Indicates the MAC address is statically configured.

116 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION

■Config Dynamic — Indicates the MAC address is dynamically

configured.

■Port Index — Indicates the Port through which the address was

learned.

■Aging Time — Specifies the amount of time the MAC Address

remains in the MAC Address before it is timed out if no traffic from

the source is detected. The default value is 300 seconds.

Viewing Port

Summary Settings

The Port Summary Page allows the user to view the MAC addresses

assigned to specific ports.

1Click Monitoring > Address Tables > Port Summary. The Port

Summary Page opens:

Figure 63 Port Summary Page

The Port Summary Page contains the following fields:

■Select a Port — Displays the current port settings.

■State — Filters the list of MAC Addresses displayed according to the

type of MAC Address configuration. Possible values are:

■All — Displays all MAC Addresses assigned to the port.

■Static — Displays static MAC Addresses assigned to the port.

■Dynamic — Displays dynamic MAC Addresses assigned to the port.

Configuring Address Tables 117

■MAC Address — Displays MAC Addresses currently listed in the MAC

Addresses table, filtered by the selected value of the State field.

■VLAN ID — Displays the VLAN ID attached to the MAC Address.

■State — Displays a port table display based on the type of address.

Possible values are:

■Config Static — Indicates the MAC Address is statically configured.

■Config Dynamic — Indicates the MAC Address is dynamically

configured.

■Port Index — Indicates Port Table entry number.

■Aging Time — Specifies the amount of time the MAC Address

remains in the Dynamic MAC Address table before it is timed out if no

traffic from the source is detected. The default value is 300 seconds.

Adding Entries into

Address Tables

The Address Table Add Page allows the network manager to assign MAC

addresses to ports with VLANs.

The monitor users have no access to this page.

To add Address Tables:

1Click Monitoring > Address Tables > Add. The Address Table Add Page

opens:

Figure 64 Address Table Add Page

118 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION

The Address Table Add Page contains the following fields:

■VLAN ID — Assigns a VLAN ID to the user-defined MAC Address.

■MAC Address — Defines a MAC Address to be assigned to the

specific port and VLAN ID.

■No Aging — Indicates that the MAC address assigned by the user is

not aged out.

■Checked — Indicates that the Address Table entry assigned by the

user is not aged out.

■Unchecked — Indicates that the Address Table entry assigned by

the user is aged out.

■Select a Port — Select the port for which the MAC settings are

defined.

■MAC Address — Displays the current MAC addresses listed in the

MAC address table.

■VLAN ID — Displays the VLAN ID assigned to the user-defined MAC

Address.

■State — Displays the current MAC Address state. Possible values are:

■Config Static — Indicates that the Address Table entry assigned by

■Port Index — Indicates Port Table entry number.

■Aging Time — Specifies the amount of time the MAC Address

remains in the Dynamic MAC Address table before it is timed out if no

traffic from the source is detected. The default value is 300 seconds.

2Define the fields.

3Click Apply. The MAC address is added to the address table, and the

device is updated.

Configuring Address Tables 119

Defining Aging Time The Address Table Setup Page allows the network manager to define the

Address Table Aging Time. The Aging Time is the amount of time the

MAC Addresses remain in the Dynamic MAC Address Tab le before they

are timed out if no traffic from the source is detected. The default value is

300 seconds.

The monitor users have no access to this page.

To define the Aging Time:

1Click Monitoring > Address Tables > Setup. The Address Table Setup

Page opens:

Figure 65 Address Table Setup Page

The Address Table Setup Page contains the following field:

■Aging Time — Specifies the amount of time the MAC Address

remains in the Dynamic MAC Address table before it is timed out if no

traffic from the source is detected. The default value is 300 seconds.

2Enter the desired aging time.

3Click Apply. The MAC address table configuration is enabled, and the

device is updated.

120 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION

Removing Address

Table Ports

The Port Remove Page allows the network manager to remove ports from

the address tables.

The monitor users have no access to this page.

To remove ports:

1Click Monitoring > Address Tables > Port Remove. The Port Remove

Page opens:

Figure 66 Port Remove Page

The Port Remove Page contains the following fields:

■Select a Port — Displays the current port settings.

■MAC Address — Displays the current MAC addresses listed in the

MAC address table.

■VLAN ID — Displays the VLAN ID attached to the MAC Address.

■State — Displays the MAC address configuration method. Possible

values are:

■Config Static — Indicates the MAC address is statically configured.

■Config Dynamic — Indicates the MAC address is dynamically

configured.

■Port Index — Indicates Port Table entry number.

Configuring Address Tables 121

■Aging Time — Specifies the amount of time the MAC Address

remains in the Dynamic MAC Address before it is timed out if no

traffic from the source is detected. The default value is 300 seconds.

2Select the port(s) to remove.

3Click Remove. The selected ports are removed from the MAC address

table, and the device is updated.

Removing Address

Tabl es

The Address Table Remove Page allows the network manager to remove

current MAC addresses from the Address Table.

The monitor users have no access to this page.

To re mo ve Ad dress Tabl es:

1Click Monitoring > Address Table > Remove. The Address Table

Remove Page opens:

Figure 67 Address Table Remove Page

The Address Table Remove Page contains the following fields:

■MAC Address — Displays the current MAC addresses listed in the

MAC address table.

■VLAN ID — Displays the VLAN ID attached to the MAC Address.

■State — Displays the MAC address configuration method. Possible

values are:

122 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION

■Config Static — Indicates the MAC address is statically configured.

■Config Dynamic — Indicates the MAC address is dynamically

configured.

■Port Index — Indicates Port Table entry number.

■Aging Time — Specifies the amount of time the MAC Address

remains in the Dynamic MAC Address before it is timed out if no

traffic from the source is detected. The default value is 300 seconds.

2Select the MAC addresses to remove.

3Click Remove. The selected MAC addresses are removed from the MAC

address table, and the device is updated.

10 CONFIGURING IGMP SNOOPING

Introduction This section contains information for configuring IGMP Snooping.

When IGMP Snooping is enabled globally, all IGMP packets are forwarded

to the CPU. The CPU analyzes the incoming packets and determines:

■Which ports want to join which Multicast groups.

■Which ports have Multicast routers generating IGMP queries.

■Which routing protocols are forwarding packets and Multicast traffic.

Ports requesting to join a specific Multicast group issue an IGMP report,

specifying that Multicast group is accepting members. This results in the

creation of the Multicast filtering database.

This section contains the following topic:

■Defining IGMP Snooping

124 CHAPTER 10: CONFIGURING IGMP SNOOPING

Defining IGMP

Snooping

The IGMP Snooping Setup Page allows network managers to define

IGMP Snooping parameters.

The monitor users have read-only access to this page.

1Click Device > IGMP Snooping > Setup. The IGMP Snooping Setup

Page opens:

Figure 68 IGMP Snooping Setup Page

The IGMP Snooping Setup Page contains the following fields:

■IGMP Snooping Status — Indicates if IGMP Snooping is enabled on

the device. The possible field values are:

■Disable — Indicates that IGMP Snooping is disabled on the device.

This is the default value.

■Enable — Indicates that IGMP Snooping is enabled on the device.

■Select VLAN ID — Specifies the VLAN ID.

■IGMP Status — Indicates if IGMP snooping is enabled on the VLAN.

The possible field values are:

■Disable — Disables IGMP Snooping on the VLAN. This is the

default value.

■Enable — Enables IGMP Snooping on the VLAN.

Defining IGMP Snooping 125

2Select Enable IGMP Snooping.

3Define the fields.

4Click Apply. IGMP Snooping is enabled, and the device is updated.

11 CONFIGURING SPANNING TREE

This section contains information for configuring STP. The Spanning Tree

Protocol (STP) provides tree topography for any arrangement of bridges.

STP also provides a single path between end stations on a network,

eliminating loops.

Loops occur when alternate routes exist between hosts. Loops in an

extended network can cause bridges to forward traffic indefinitely,

resulting in increased traffic and reducing network efficiency.

While Classic STP prevents Layer 2 forwarding loops in a general network

topology, convergence can take between 30-60 seconds. Rapid Spanning

Tree Protocol (RSTP) detects and uses network topologies that allow a

faster STP convergence without creating forwarding loops.

The device supports the following STP versions:

■Classic STP — Provides a single path between end stations, avoiding

and eliminating loops.

■Rapid STP — Detects and uses network topologies that provide faster

convergence of the spanning tree, without creating forwarding loops.

While Classic STP prevents Layer 2 forwarding loops in a general

network topology, convergence can take between 30-60 seconds.

Rapid Spanning Tree Protocol (RSTP) detects and uses network

topologies that allow a faster STP convergence without creating

forwarding loops.

This section contains the following topics:

■Viewing Spanning Tree

■Defining Spanning Tree

■Modifying Spanning Tree

Viewing Spanning Tree 127

Viewing Spanning

Tree

The Spanning Tree Summary Page displays the current Spanning Tree

parameters for all ports.

To view Spanning Tree Summary:

1Click Device > Spanning Tree > Summary. The Spanning Tree

Summary Page opens:

Figure 69 Spanning Tree Summary Page

The Spanning Tree Summary Page contains the following fields:

■Port — The interface for which the information is displayed.

■STP — Indicates if STP is enabled on the port. The possible field values

are:

■STP — Indicates that STP is enabled on the port.

■RSTP — Indicates that RSTP is enabled on the port.

■Disable — Indicates that neither STP nor RSTP is enabled on the

port.

■Port Fast — Indicates if Fast Link is enabled on the port. If Fast Link

mode is enabled for a port, the Port State is automatically placed in

the Forwarding state when the port link is up. Fast Link optimizes the

STP protocol convergence. STP convergence takes 30 seconds and is

not dependent on the number of switches in the network.

128 CHAPTER 11: CONFIGURING SPANNING TREE

■Root Guard — Restricts the interface from acting as the root port of

the switch. The possible field values are:

■Enable — Indicates Root Guard is enabled on the port

■Disable — Indicates Root Guard is disabled on the port.

■Port State — Displays the current STP state of a port. If enabled, the

port state determines what action is taken on traffic. Possible port

states are:

■Disable — Indicates that STP is currently disabled on the port. The

port forwards traffic while learning MAC addresses.

■Blocking — Indicates that the port is currently blocked and cannot

forward traffic or learn MAC addresses. Blocking is displayed when

Classic STP is enabled.

■Listening — Indicates that the port is in Listening mode. The port

cannot forward traffic nor can it learn MAC addresses.

■Learning — Indicates that the port is in Learning mode. The port

cannot forward traffic, however it can learn new MAC addresses.

■Forwarding — Indicates that the port is in Forwarding mode. The

port can forward traffic and learn new MAC addresses.

■Discarding — Indicates that the port is in Discarding mode. The

port is listening to BPDUs, and discards any other frames it receives.

■Port Role — Displays the port role assigned by the STP algorithm to

provide to STP paths. The possible field values are:

■Root — Provides the lowest cost path to forward packets to the

root switch.

■Designated — The port or LAG through which the designated

switch is attached to the LAN.

■Alternate — Provides an alternate path to the root switch from the

root interface.

■Backup — Provides a backup path to the designated port path

toward the Spanning Tree leaves. Backup ports occur only when

two ports are connected in a loop by a Point-to-Point link, or when

a LAN has two or more connections connected to a shared

segment.

■Disabled — The port is not participating in the Spanning Tree.

■Speed — Indicates the speed at which the port is operating.

Viewing Spanning Tree 129

■Path Cost — Indicates the port contribution to the root path cost. The

path cost is adjusted to a higher or lower value, and is used to forward

traffic when a path is re-routed.

■Priority — Priority value of the port. The priority value influences the

port choice when a bridge has two ports connected in a loop. The

priority range is between 0 -240. The priority value is determined in

increments of 16.

■RSTP Link Type — Indicates whether a Point-to-Point link is

established, or if the device is permitted to establish a Point-to-Point

link. The possible field values are:

■Auto — Enables the device to establish automatically

point-to-point link.

■Point to Point — Indicates if a point-to-point link is currently

established on the port. Ports set to Full Duplex modes are

considered Point-to-Point port links.

■Shared — Enables the device to establish a shared link.

■Designated Bridge ID — Indicates the bridge priority and the MAC

Address of the designated bridge.

■Designated Port ID — Indicates the selected port priority and

interface.

■Designated Cost — Indicates the cost of the port participating in the

STP topology. Ports with a lower cost are less likely to be blocked if

STP detects loops.

■Forward Transitions — Indicates the number of times the port has

changed from Forwarding state to Blocking state.

130 CHAPTER 11: CONFIGURING SPANNING TREE

Defining Spanning

Tree

Network administrators can assign STP settings to specific interfaces

using the Spanning Tree Setup Page.

The monitor user has no access to this page.

To configure Spanning Tree Setup:

1Click Device > Spanning Tree > Setup. The Spanning Tree Setup Page

opens:

Figure 70 Spanning Tree Setup Page

The Spanning Tree Setup Page contains the following fields:

■Global Settings

■Bridge Settings

■Designated Root

Defining Spanning Tree 131

Global Setting ■Spanning Tree State — Indicates whether STP is enabled on the

device. The possible field values are:

■Classic — Enables STP on the device.

■RSTP — Enables RSTP on the device.

■Disable — Disables STP and RSTP on the device.

■BPDU Handling — Determines how BPDU packets are managed

when STP is disabled on the port or device. BPDUs are used to

transmit spanning tree information. The possible field values are:

■Filtering — Filters BPDU packets when spanning tree is disabled on

an interface. This is the default value.

■Flooding — Floods BPDU packets when spanning tree is disabled

on an interface.

■Path Cost Default Values — Specifies the method used to assign

default path cost to STP ports. The possible field values are:

■Short — Specifies 1 through 65,535 range for port path cost. This

is the default value.

■Long — Specifies 1 through 200,000,000 range for port path cost.

The default path cost assigned to an interface varies according to

the selected method (Hello Time, Max Age, or Forward Delay).

Bridge Setting ■Priority — Specifies the bridge priority value. When switches or

bridges are running STP, each is assigned a priority. After exchanging

BPDUs, the device with the lowest priority value becomes the Root

Bridge. The field range is 0-61440. The default value is 32768. The

port priority value is provided in increments of 4096.

■Hello Time — Specifies the device Hello Time. The Hello Time

indicates the amount of time in seconds a Root Bridge waits between

configuration messages. The default is 2 seconds.

■Max Age — Specifies the device Maximum Age Time. The Maximum

Age Time is the amount of time in seconds a bridge waits before

sending configuration messages. The default Maximum Age Time is

20 seconds.

■Forward Delay — Specifies the device Forward Delay Time. The

Forward Delay Time is the amount of time in seconds a bridge remains

in a listening and learning state before forwarding packets. The

default is 15 seconds.

132 CHAPTER 11: CONFIGURING SPANNING TREE

Designated Root ■Bridge ID — Identifies the Bridge priority and MAC address.

■Root Bridge ID — Identifies the Root Bridge priority and MAC

address.

■Root Port — Indicates the port number that offers the lowest cost

path from this bridge to the Root Bridge. This field is significant when

the bridge is not the Root Bridge. The default is zero.

■Root Path Cost — Specifies the cost of the path from this bridge to

the Root Bridge.

■Topology Changes Counts — Specifies the total amount of STP

state changes that have occurred.

■Last Topology Change — Indicates the amount of time that has

elapsed since the bridge was initialized or reset, and the last

topographic change that occurred. The time is displayed in a

day-hour-minute-second format, such as 2 days 5 hours 10 minutes

and 4 seconds.

2Define the fields.

3Click Apply. STP is enabled, and the device is updated.

Modifying Spanning Tree 133

Modifying

Spanning Tree

TheSpanning Tree Modify Page contains information for modifying

Spanning Tree parameters.

Monitor users have no access to this page.

To modify Spanning Tree:

1Click Device > Spanning Tree > Modify. The Spanning Tree Modify

Page opens:

Figure 71 Spanning Tree Modify Page

The Spanning Tree Modify Page contains the following fields:

■STP — Indicates if STP is enabled on the port. The possible field values

are:

■Enable — Indicates that STP is enabled on the port.

■Disable — Indicates that STP is disabled on the port.

■Port Fast — Indicates if Fast Link is enabled on the port. If Fast Link

mode is enabled for a port, the Port State is automatically placed in

the Forwarding state when the port link is up. Fast Link optimizes the

STP protocol convergence. STP convergence takes 30 seconds and is

not dependent on the number of switches in the network. The

possible field values are:

134 CHAPTER 11: CONFIGURING SPANNING TREE

■Enabled — Indicates fast link is enabled on the port.

■Auto — Enables the device to automatically establish a fast link.

■Disabled — Indicates fast link is disabled on the port.

■Root Guard — Restricts the interface from acting as the root port of

the switch. The possible field values are:

■Enable — Indicates Root Guard is enabled on the port

■Disable — Indicates Root Guard is disabled on the port.

■Default Path Cost — Indicates if Default Path Cost is enabled. The

possible field values are:

■Enable — Enables the default path cost on the port.

■Disable — Disables the default path cost on the port.

■Path Cost — Indicates the port contribution to the root path cost. The

path cost is adjusted to a higher or lower value, and is used to forward

traffic when a path is re-routed. The field range is 1-200,000,000.

■Priority — Priority value of the port. The priority value influences the

port choice when a bridge has two ports connected in a loop. The

priority value is between 0 -240. The priority value is determined in

increments of 16.

■RSTP Link Type — Indicates whether a Point-to-Point link is

established, or if the device is permitted to establish a Point-to-Point

link. The possible field values are:

■Auto — Enables the device to establish automatically Point-to-Point

link.

■Point to Point — Indicates if a Point-to-Point link is currently

established on the port. Ports set to Full Duplex modes are

considered Point-to-Point port links.

■Shared — Enables the device to establish a shared link.

■Select Port(s) — Indicates the ports to be defined.

2Select the ports to be defined

3Define the fields.

4Click Apply. Spanning Tree is modified on the port, and the device is

updated.

12 CONFIGURING SNMP

Simple Network Management Protocol (SNMP) provides a method for

managing network devices. The device supports the following SNMP

versions:

■SNMP version 1

■SNMP version 2c

SNMP v1 and v2c The SNMP agents maintain a list of variables, which are used to manage

the device. The variables are defined in the Management Information

Base (MIB). The SNMP agent defines the MIB specification format, as well

as the format used to access the information over the network. Access

rights to the SNMP agents are controlled by access strings.

This section contains the following topics:

■Defining SNMP Communities

■Removing SNMP Communities

■Defining SNMP Traps

■Removing SNMP Traps

136 CHAPTER 12: CONFIGURING SNMP

Defining SNMP

Communities

Access rights are managed by defining communities in the SNMP

Communities Setup Page. When the community names are changed,

access rights are also changed. SNMP communities are defined only for

SNMP v1 and SNMP v2c.

Monitor users have no access to this page.

To define SNMP communities:

1Click Administration > SNMP > Communities > Setup. The SNMP

Communities Setup Page opens:

Figure 72 SNMP Communities Setup Page

The SNMP Communities Setup Page contains the following fields:

■SNMP Status — Defines SNMP on the device. The possible field

values are:

■Enable — Enables SNMP on the device.

■Disable — Disables SNMP on the device.

■Insert New Community — Adds a SNMP community.

Defining SNMP Communities 137

SNMP Management

■Management Station — Displays the management station IP

address for which the SNMP community is defined.

■Open Access (0.0.0.0) — Provides SNMP access to all the stations.

Community String

■Standard — Displays pre-defined community strings. The possible

field values are:

■Public — Displays the pre-defined public community string name.

■Private — Displays the pre-defined private community string name.

■User Defined — Defines a user-defined community string name.

■Access Mode — Defines the access rights of the community. The

possible field values are:

■Read Only — Management access is restricted to read-only, and

changes cannot be made to the community.

■Read Write — Management access is read-write and changes can

be made to the device configuration, but not to the community.

2Define the relevant fields.

3Click Apply. The SNMP Communities are defined, and the device is

updated.

138 CHAPTER 12: CONFIGURING SNMP

Removing SNMP

Communities

The SNMP Communities Remove Page allows the system manager to

remove SNMP Communities.

Monitor users have no access to this page.

To remove SNMP communities:

1Click Administration > SNMP > Communities > Remove. The SNMP

Communities Remove Page opens:

Figure 73 SNMP Communities Remove Page

The SNMP Communities Remove Page contains the following fields:

■Remove — Removes a community. The possible field values are:

■Checked — Removes the selected SNMP community.

■Unchecked — Maintains the SNMP communities.

■Management Station — Displays the management station IP

address for which the SNMP community is defined.

■Community String — Displays the user-defined text string which

authenticates the management station to the device.

Defining SNMP Traps 139

■Access Mode — Displays the access rights of the community. The

possible field values are:

■Read Only — Management access is restricted to read-only, and

changes cannot be made to the community.

■Read Write — Management access is read-write and changes can

be made to the device configuration, but not to the community.

2Select the SNMP Community to be removed.

3Click Remove. The SNMP Community is removed, and the device is

updated.

Defining SNMP

Traps

The SNMP Traps Setup Page contains information for defining filters that

determine whether traps are sent to specific users, and the trap type sent.

Monitor users have no access to this page.

To define SNMP traps:

1Click Administration > SNMP > Traps. The SNMP Traps Setup Page

opens:

Figure 74 SNMP Traps Setup Page

140 CHAPTER 12: CONFIGURING SNMP

The SNMP Traps Setup Page contains the following fields:

■Recipients IP Address — Defines the IP address to which the traps

are sent.

■Community String — Defines the community string of the trap

manager.

■Trap Version — Defines the trap type. The possible field values are:

■SNMP V1 — Indicates that SNMP Version 1 traps are sent.

■SNMP V2c — Indicates that SNMP Version 2 traps are sent.

2Define the relevant fields.

3Click Apply. The SNMP Traps are defined, and the device is updated.

Removing SNMP

Traps

The SNMP Traps Remove Page allows the network manager to remove

SNMP Traps.

Monitor users have no access to this page.

To remo ve SNMP tr aps :

1Click Administration > SNMP > Traps > Remove. The SNMP Traps

Remove Page opens:

Figure 75 SNMP Traps Remove Page

Removing SNMP Traps 141

The SNMP Traps Remove Page contains the following fields:

■Remove — Deletes the currently selected recipient. The possible field

values are:

■Checked — Removes the selected recipient from the list of

recipients.

■Unchecked — Maintains the list of recipients.

■Recipients IP — Defines the IP address to which the traps are sent.

■Trap — Displays the trap type. The possible field values are:

■SNMP V1 — Indicates that SNMP Version 1 traps are sent.

■SNMP V2c — Indicates that SNMP Version 2 traps are sent.

■Community String — Defines the community string of the trap

manager.

2Select the SNMP trap to be deleted.

3Click Remove. The SNMP trap is deleted, and the device is updated.

13 CONFIGURING QUALITY OF

SERVICE

Quality of Service (QoS) provides the ability to implement QoS and priority

queuing within a network. For example, certain types of traffic that

require minimal delay, such as Voice, Video, and real-time traffic can be

assigned a high priority queue, while other traffic can be assigned a lower

priority queue. The result is an improved traffic flow for traffic with high

demand. QoS is defined by:

■Classification — Specifies which packet fields are matched to specific

values. All packets matching the user-defined specifications are

classified together.

■Action — Defines traffic management where packets are forwarded

are based on packet information, and packet field values such as

VLAN Priority Tag (VPT) and DiffServ Code Point (DSCP).

■VPT Classification Information — VLAN Priority Tags (VPT) are used

to classify packets by mapping packets to one of the egress queues.

VPT to Queue assignments are user-definable. Packets arriving

untagged are assigned a default VPT value, which is set on a per-port

basis. The assigned VPT is used to map the packet to the egress

queue.

This section contains information for configuring QoS, and includes the

following topics:

■Viewing CoS Settings

■Defining CoS

■Viewing CoS to Queue

■Defining CoS to Queue

■Viewing DSCP to Queue

■Configuring DSCP Queue

■Configuring Trust Settings

■Viewing Bandwidth Settings

■Defining Bandwidth Settings

■Defining Voice VLAN

Viewing CoS Settings 143

Viewing CoS

Settings

The CoS Summary Page displays CoS default settings assigned to ports.

To view CoS Settings:

1Click Device > QoS > CoS > Summary. The CoS Summary Page opens:

Figure 76 CoS Summary Page

The CoS Summary Page contains the following fields:

■Interface — Displays the interface for which the CoS default value is

defined.

■Default CoS — Displays the default CoS value for incoming packets

for which a VLAN priority tag is not defined. The possible field values

are 0-7.

144 CHAPTER 13: CONFIGURING QUALITY OF SERVICE

Defining CoS The CoS Setup Page contains information for enabling QoS globally.

Monitor users have no access to this page.

To configure CoS Settings:

1Click Device > QoS > CoS Setup. The CoS Setup Page opens:

Figure 77 CoS Setup Page

The CoS Setup Page contains the following fields:

■QoS Mode — Determines the QoS mode on the device:

■Disable — Disables QoS on the device.

■Enable — Enables QoS on the device.

■Select Port(s) — Indicates the ports to be configured.

■Set Default — Sets the default user priority. The possible field values

are 0-7. The default CoS value is 0. With the default settings, 0 is the

lowest and 7 is the highest priority.

■Restore Default — Restores the device factory defaults for CoS

values.

2Define the fields.

3Click Apply. CoS is enabled on the device, and the device is updated.

Viewing CoS to Queue 145

Viewing CoS to

Queue

The CoS to Queue Summary Page contains a table that displays the CoS

values mapped to traffic queues.

To view CoS Values to Queues:

1Click Device > QoS > CoS to Queue > Summary. The CoS to Queue

Summary Page opens:

Figure 78 CoS to Queue Summary Page

The CoS to Queue Summary Page contains the following fields:

■Class of Service — Specifies the CoS priority tag values, where zero is

the lowest and 7 is the highest.

■Queue — Defines the traffic forwarding queue to which the CoS

priority is mapped. Four traffic priority queues are supported.

Defining CoS to

Queue

The CoS to Queue Setup Page contains fields for mapping CoS values to

traffic queues. Four traffic priority queues are supported on the device,

with 1 representing the lowest queue and four as the highest. The

highest priority queue functions with strict priority while queues 1-3

function with WRR priority with the following weights (1, 2 and 10)

respectively. CoS 0-5 can’t be assigned to queue 4 as it is dedicated to

high priority traffic like voice and control messages.

The monitor user has no access to this page.

146 CHAPTER 13: CONFIGURING QUALITY OF SERVICE

To configure CoS values to queues:

1Click Policy > QoS General > CoS to Queue > Setup. The CoS to

Queue Setup Page opens:

Figure 79 CoS to Queue Setup Page

The CoS to Queue Setup Page contains the following fields:

■Restore Defaults — Restores the device factory defaults for mapping

CoS values to a forwarding queue.

■Class of Service — Specifies the CoS priority tag values, where zero is

the lowest and 7 is the highest.

■Queue — Defines the traffic forwarding queue to which the CoS

priority is mapped.

2Define the queue number in the Queue field next to the required CoS

value.

3Click Apply. The CoS value is mapped to a queue, and the device is

updated.

Viewing DSCP to Queue 147

Viewing DSCP to

Queue

The DSCP to Queue Summary Page contains fields for mapping DSCP

settings to traffic queues. For example, a packet with a DSCP tag value of

3 can be assigned to queue 4.

To view the DSCP Queue:

1Click Device > QoS > DSCP to Queue > Summary. The DSCP to Queue

Summary Page opens:

Figure 80 DSCP to Queue Summary Page

The DSCP to Queue Summary Page contains the following fields:

■DSCP — Displays the incoming packet’s DSCP value.

■Queue — Specifies the traffic forwarding queue to which the DSCP

priority is mapped. Four traffic priority queues are supported.

148 CHAPTER 13: CONFIGURING QUALITY OF SERVICE

Configuring DSCP

Queue

The DSCP to Queue Setup Page contains fields for mapping DSCP settings

to traffic queues. For example, a packet with a DSCP tag value of 3 can

be assigned to queue 1.

The monitor user has no access to this page.

To map CoS to Queues:

1Click Device > QoS > DSCP to Queue > Setup. The DSCP to Queue

Setup Page opens:

Figure 81 DSCP to Queue Setup Page

The DSCP to Queue Setup Page contains the following fields:

■Restore Defaults — Restores the device factory defaults for mapping

DSCP values to a traffic forwarding queue.

■DSCP — Displays the incoming packet’s DSCP value.

■Queue — Specifies the traffic forwarding queue to which the DSCP

priority is mapped. Four traffic priority queues are supported.

2Define the queue number in the Queue field next to the required DSCP

value.

3Click Apply. The DSCP values are mapped to a queue, and the device is

updated.

Configuring Trust Settings 149

Configuring Trust

Settings

The Trust Setup Page contains information for enabling trust on

configured interfaces. The original device QoS default settings can be

reassigned to the interface in the Trust Setup Page.

To enable Trust:

1Click Device > QoS > Trust Setup. The Trust Setup Page opens:

Figure 82 Trust Setup Page

The Trust Setup Page contains the following fields:

■Trust Mode — Defines which packet fields to use for classifying

packets entering the device. When no rules are defined, the traffic

containing the predefined packet CoS field is mapped according to

the relevant trust modes table. Traffic not containing a predefined

packet field is mapped to “best effort”. The possible Trust Mode field

values are:

■CoS — Classifies traffic based on the CoS tag value.

■DSCP — Classifies traffic based on the DSCP tag value.

2Define the fields.

3Click Apply. Trust mode is enabled on the device.

150 CHAPTER 13: CONFIGURING QUALITY OF SERVICE

Viewing Bandwidth

Settings

The Bandwidth Summary Page displays bandwidth settings for a specified

interface.

To view Bandwidth Settings:

1Click Device > QoS > Bandwidth > Summary. The Bandwidth

Summary Page opens:

Figure 83 Bandwidth Summary Page

The Bandwidth Summary Page contains the following fields:

■Interface — Displays the interface for which rate limit and shaping

parameters are defined.

Ingress Rate Limit

■Status — Indicates if rate limiting is defined on the interface. The

possible field values are:

■Enable — Enables ingress rate limiting on the interface.

■Disable — Disables ingress rate limiting on the interface.

■Rate Limit — Indicates the traffic limit for the port. The field range is

3,500-1,000,000 kbps per second.

Defining Bandwidth Settings 151

Egress Shaping Rates

■Status — Defines the shaping status. The possible field values are:

■Enable — Enables egress traffic shaping for the interface.

■Disable — Disables egress traffic shaping for the interface.

■CIR — Defines CIR as the interface shaping type. The possible field

range is 64-1,000,000,000 kbits per second.

■CbS — Defines CbS as the interface shaping type. The possible field

range is 4096-16,769,020 bytes per second.

Defining

Bandwidth Settings

The Bandwidth Setup Page allows network managers to define the

bandwidth settings for a specified interface. Interface shaping can be

based on an interface and is determined by the lower specified value. The

interface shaping type is selected in the Bandwidth Setup Page.

The monitor user has no access to this page.

To configure Bandwidth Settings:

1Click Policy > QoS General > Bandwidth > Setup. The Bandwidth

Setup Page opens:

Figure 84 Bandwidth Setup Page

152 CHAPTER 13: CONFIGURING QUALITY OF SERVICE

The Bandwidth Setup Page contains the following fields:

Ingress Rate Limit

■Enable Ingress Rate Limit — Enables setting an Ingress Rate Limit.

■Ingress Rate Limit — Indicates the traffic limit for the port. The

possible field value is 3,500-1,000,000 kbps per second.

Egress Shaping Rate

■Enable Egress Shaping Rate — Enables Egress Shaping Rates.

■Committed Information Rate (CIR) — Defines CIR as the interface

shaping type. The possible field value is 64-1,000,000,000 kbps per

second.

■Committed Burst Size (CbS) — Defines CbS as the interface shaping

type. The possible field value is 4096-16,769,020 bytes per second.

■Select ports — Indicates the ports to be configured.

2Select the ports to be configured.

3Define the fields.

4Click Apply. The bandwidth is defined, and the device is updated.

Defining Voice VLAN 153

Defining Voice

VLAN

Voice VLAN allows network administrators enhance VoIP service by

configuring ports to carry IP voice traffic from IP phones on a specific

VLAN. VoIP traffic has a preconfigured OUI prefix in the source MAC

address. Network Administrators can configure VLANs on which voice IP

traffic is forwarded. Non-VoIP traffic is dropped from the Voice VLAN in

auto Voice VLAN secure mode. Voice VLAN also provides QoS to VoIP,

ensuring that the quality of voice does not deteriorate if the IP traffic is

received unevenly. The system supports one Voice VLAN.

There are two operational modes for IP Phones:

■IP phones are configured with VLAN-mode as enabled, ensuring that

tagged packets are used for all communications.

■If the IP phone’s VLAN-mode is disabled, the phone uses untagged

packets. The phone uses untagged packets while retrieving the initial

IP address through DHCP. The phone eventually use the Voice VLAN

and start sending tagged packets.

This section contains the following topics:

■Viewing Voice VLANs

■Defining Voice VLAN

■Defining Voice VLAN Port Settings

■Viewing Voice VLAN Port Definitions

■Viewing the OUI Summaries

■Modifying OUI Definitions

154 CHAPTER 13: CONFIGURING QUALITY OF SERVICE

Viewing Voice VLANs The Voice VLAN Summary Page contains information about the Voice

VLAN currently enabled on the device, including the ports enabled and

included in the Voice VLAN.

To view Voice VLAN Settings:

1Click Device > QoS > VoIP > Traffic Setting > Summary. The Voice

VLAN Summary Page opens:

Figure 85 Voice VLAN Summary Page

The Voice VLAN Summary Page contains the following fields:

■Voice VLAN State — Indicates if Voice VLAN is enabled on the

device. The possible field values are:

■Enable — Enables Voice VLAN on the device.

■Disable — Disables Voice VLAN on the device. This is the default

value.

■Voice VLAN ID — Defines the Voice VLAN ID number.

■Voice VLAN Aging Time — Indicates the amount of time after the

last IP phone's OUI is aged out for a specific port. The port will age out

after the bridge and voice aging time. The default time is one day. The

field format is Day, Hour, Minute. The aging time starts after the MAC

Address is aged out from the Dynamic MAC Address table. The

default time is 300 sec. For more information on defining MAC

address age out time, see Defining Aging Time.

■Ports Enabled for Voice VLAN — Displays the ports on which Voice

VLAN is enabled.

Defining Voice VLAN 155

■Ports in the Voice VLAN — Displays the ports which are included in

the Voice VLAN. The possible values are:

■Active Members — Displays dynamic ports added to the Voice

VLAN in Auto mode.

■Static Members — Displays static ports that were manually added

to the Voice VLAN.

Defining Voice VLAN The Voice VLAN Setup Page provides information for enabling and

defining Voice VLAN globally on the device.

To configure Voice VLAN Settings:

1Click Device > QoS > VoIP > Traffic Setting > Setup. The Voice VLAN

Setup Page opens:

Figure 86 Voice VLAN Setup Page

The Voice VLAN Setup Page contains the following fields:

■Voice VLAN Status — Indicates if Voice VLAN is enabled on the

device. The possible field values are:

■Enable — Enables Voice VLAN on the device.

■Disable — Disables Voice VLAN on the device. This is the default

value.

■Voice VLAN ID — Defines the Voice VLAN ID number.

156 CHAPTER 13: CONFIGURING QUALITY OF SERVICE

■Voice VLAN Aging Time — Indicates the amount of time after the

last IP phone's OUI is aged out for a specific port. The port will age out

after the bridge and voice aging time. The default time is one day. The

field format is Day, Hour, Minute. The aging time starts after the MAC

Address is aged out from the Dynamic MAC Address table. The

default time is 300 sec. For more information on defining MAC

address age out time, see Defining Aging Time.

2Select Enable in the Voice VLAN State field.

3Define the Voice VLAN and Voice VLAN Aging Time fields.

4Click Apply. The Voice VLAN is defined, and the device is updated.

Defining Voice VLAN

Port Settings

The Voice VLAN Port Setup Page contains information for defining Voice

VLAN port/LAG settings.

To configure Voice VLAN port settings:

1Click Device > QoS > VoIP > Traffic Setting > Port Setup. The Voice

VLAN Port Setup Page opens:

Figure 87 Voice VLAN Port Setup Page

The Voice VLAN Port Setup Page contains the following fields:

■Voice VLAN Port Mode — Defines the Voice VLAN mode. The

possible field values are:

■No Changes — Maintains the current Voice VLAN port/LAG

settings. This is the default value.

Defining Voice VLAN 157

■None — Indicates that the selected port/LAG will not be added to a

Voice VLAN.

■Manual — Adding a selected port/LAG to a Voice VLAN.

■Auto — Indicates that if traffic with an IP Phone MAC Address is

transmitted on the port/LAG, the port/LAG joins the Voice VLAN.

The port/LAG is aged out of the voice VLAN if the IP phone’s MAC

address (with an OUI prefix) is aged out and exceeds the defined. If

the MAC Address of the IP phones OUI was added manually to a

port/LAG in the Voice VLAN, the user cannot add it to the Voice

VLAN in Auto mode, only in Manual mode.

■Voice VLAN Port Security — Indicates if port security is enabled on

the Voice VLAN. Port Security ensures that packets arriving with an

unrecognized MAC address are dropped.

■No Changes — Maintains the current Voice VLAN port security

settings.

■Enable — Enables port security on the Voice VLAN.

■Disable — Disables port security on the Voice VLAN. This is the

default value.

■Select Port — Enables selecting specific ports and LAGs to which the

Voice VLAN settings are applied.

■Selected (Blue) — Indicates the port or LAG is selected, and Voice

VLAN settings are applied to the port.

■Unselected — Indicates the port or LAG is not selected, and the

Voice VLAN settings are not applied to the port/LAG. This is the

default value.

■Selected Ports — Lists the ports and LAGS on which the Voice VLAN

settings are applied.

2Click a port in the Zoom View. The port is highlighted blue.

3Define the Voice VLAN Port Mode and Voice VLAN Security fields.

4Click Apply. The Voice VLAN port settings are defined, and the device is

updated.

158 CHAPTER 13: CONFIGURING QUALITY OF SERVICE

Viewing Voice VLAN

Port Definitions

The Voice VLAN Port Details Page displays the Voice VLAN port settings

for specific ports.

The Voice VLAN Port Details Page contains the following fields:

■Select Port — Enables selecting specific ports to which the Voice

VLAN port definitions are applied.

■Selected (Blue) — Indicates the port is selected, and Voice VLAN

settings are applied to the port.

■Unselected — Indicates the port is not selected, and the Voice

VLAN settings are not applied to the port. This is the default value.

■Port — Displays the Voice VLAN Port Details for a selected port.

■Voice VLAN Port Security — Indicates if port security is enabled on

the Voice VLAN. Port Security ensures that packets arriving with an

unrecognized MAC address are dropped.

■No Changes — Maintains the current Voice VLAN port security

settings.

■Enable — Enables port security on the Voice VLAN.

■Disable — Disables port security on the Voice VLAN. This is the

default value.

■Voice VLAN Port Mode — Defines the Voice VLAN mode. The

possible field values are:

■No Changes — Maintains the current Voice VLAN port settings.

This is the default value.

■None — Indicates that the selected port will not be added to a

Voice VLAN.

■Manual — Adding a selected port to a Voice VLAN.

■Auto — Indicates that if traffic with an IP Phone MAC Address is

transmitted on the port, the port joins the Voice VLAN. The port is

aged out of the voice VLAN if the IP phone’s MAC address (with an

OUI prefix) is aged out and exceeds the defined. If the MAC

Address of the IP phones OUI was added manually to a port in the

Voice VLAN, the user cannot add it to the Voice VLAN in Auto

mode, only in Manual mode.

Defining Voice VLAN 159

To view Voice VLAN Port Detail Settings:

1Click Device > QoS > VoIP > Traffic Setting > Port Detail. The Voice

VLAN Port Details Page opens:

Figure 88 Voice VLAN Port Details Page

2Click a port in the Zoom View. The port is highlighted blue, and the Voice

VLAN port settings are displayed in the text box.

Viewing the OUI

Summaries

The Voice VLAN OUI Summary Page lists the Organizationally Unique

Identifiers (OUIs) associated with the Voice VLAN. The first three bytes of

the MAC Address contain a manufacturer identifier. While the last three

bytes contain a unique station ID. Using the OUI, network managers can

add specific manufacturer’s MAC addresses to the OUI table. Once the

OUIs are added, all traffic received on the Voice VLAN ports from the

specific IP phone with a listed OUI, is forwarded on the voice VLAN.

160 CHAPTER 13: CONFIGURING QUALITY OF SERVICE

To view VLAN Settings:

1Click Device > QoS > VoIP Traffic Setting > OUI Summary. The Voice

VLAN OUI Summary Page opens:

Figure 89 Voice VLAN OUI Summary Page

The Voice VLAN OUI Summary Page contains the following fields:

OUI List

■Telephony OUI(s) — Lists the OUIs currently enabled on the Voice

VLAN. The following OUIs are enabled by default.

■00:E0:BB — Assigned to 3Com IP Phones.

■00:03:6B — Assigned to Cisco IP Phones.

■00:E0:75 — Assigned to Polycom/Veritel IP Phones.

■00:D0:1E — Assigned to Pingtel IP Phones.

■00:01:E3 — Assigned to Siemens IP Phones.

■00:60:B9 — Assigned to NEC/Philips IP Phones.

■00:0F:E2 — Assigned to H3C IP Phones.

■Description — Provides an OUI description (up to 32 characters).

Defining Voice VLAN 161

Modifying OUI

Definitions

The Voice VLAN OUI Modify Page allows network administrators to add

new OUIs or to remove previously defined OUIs from the Voice VLAN. The

OUI is the first half on the MAC address and is manufacture specific.

While the last three bytes contain a unique station ID. The packet priority

derives from the source/destination MAC prefix. The packet gets higher

priority when there is a match with the OUI list. Using the OUI, network

managers can add specific manufacture’s MAC addresses to the OUI

table. Once the OUIs are added, all traffic received on the Voice VLAN

ports from the specific IP phone with a listed OUI, is forwarded on the

voice VLAN.

To modify OUI Settings:

1Click Device > QoS > VoIP Traffic Setting > OUI Modify. The Voice

VLAN OUI Modify Page opens:

Figure 90 Voice VLAN OUI Modify Page

The Voice VLAN OUI Modify Page contains the following fields:

■Telephony OUI — Defines new OUIs enabled on the Voice VLAN.

■Description — Provides a user-defined OUI description.

2Enter an OUI in the Telephony OUI field.

3Enter an OUI description in the OUI field.

4Click Apply. The new OUI is defined, and the device is updated.

14 MANAGING SYSTEM FILES

This section contains information about managing configuration files and

installing and backing up switch firmware, including the following topics:

■Backing Up System Files

■Restoring Files

■Upgrade the Firmware Image

■Activating Image Files

Configuration File

Structure

The configuration file structure consists of the following:

■Startup Configuration File — Contains the commands required to

reconfigure the device to the same settings as when the device is

powered down or rebooted. The Startup file is created by copying the

configuration commands from the Running Configuration file or by

downloading the configuration file from via TFTP or HTTP.

■Running Configuration File — Contains all configuration file

commands, and all commands entered during the current session.

When the device is powered down or rebooted, the commands in the

Running Configuration file are lost. During startup, all commands in

the Startup file are copied to the Running Configuration File and

applied to the device. To update the Startup file, click the Save

Configuration button before powering down the device. This copies

the Running Configuration file to the Startup Configuration file.

■Image files — Software upgrades are used when a new version file is

downloaded. The file is checked for the right format, and that it is

complete. After a successful download, the new version is marked,

and is used after the device is reset.

Backup and restore of the configuration files are always done from and

to the Startup Config file.

Backing Up System Files 163

Backing Up System

Files

The Backup Page permits network managers to backup the system

configuration to a TFTP or HTTP server.

The monitor users have no access to this page.

1To keep your currently running configuration, click the Save

Configuration item on the left side of the page.

2Click Administration > Backup & Restore > Backup. The Backup Page

opens:

Figure 91 Backup Page

The Backup Page contains the following fields:

■Upload via TFTP — Enables initiating an upload to the TFTP server.

■Upload via HTTP — Enables initiating an upload to the HTTP server

or HTTPS server.

■TFTP Server IP Address — Specifies the TFTP Server IP Address to

which the configuration files are uploaded.

■Destination File Name — Specifies the destination file to which the

configuration file is uploaded.

3Define the relevant fields.

4Click Apply. The backup file is defined, and the device is updated.

164 CHAPTER 14: MANAGING SYSTEM FILES

Restoring Files The Restore Page restores files from the TFTP or HTTP server.

The monitor users have no access to this page.

1Click Administration > Backup & Restore > Restore. The Restore Page

opens:

Figure 92 Restore Page

The Restore Page contains the following fields:

■Download via TFTP — Enables a download from the TFTP server.

■Download via HTTP — Enables a download from the HTTP server or

HTTPS server.

Configuration Download

■TFTP Server IP Address — Specifies the TFTP Server IP Address from

which the configuration files are downloaded.

■Source File Name — Specifies the source file from which the

configuration file is downloaded.

2Define the relevant fields.

3Click Apply. The restore file is defined, and the device is updated.

Upgrade the Firmware Image 165

Upgrade the

Firmware Image

The Restore Image Page permits network managers to upgrade the

switch firmware.

■Note: The bootcode can only be upgraded using the Command Line

Interface (CLI). See “Upgrading Software using the CLI” page 27.

■The monitor user has no access to this page.

To download the software image:

1Click Administration > Firmware Upgrade > Restore Image. The

Restore Image Page opens:

Figure 93 Restore Image Page

The Restore Image Page contains the following fields:

■Download via TFTP — Enables initiating a download via the TFTP

server.

■Download via HTTP — Enables initiating a download via the HTTP

server or HTTPS server.

■TFTP Server IP Address — Specifies the TFTP Server IP Address from

which the image files are downloaded.

■Source File Name — Specifies the image files to be downloaded.

2Define the relevant fields.

3Click Apply. The files are downloaded, and the device is updated.

166 CHAPTER 14: MANAGING SYSTEM FILES

Activating Image

Files

The Active Image Page allows network managers to select and reset the

Image files. The Device Boot is downloaded onto the device through the

CLI.

To upload System files:

1Click Administration > Firmware Upgrade > Active Image. The

Active Image Page opens:

Figure 94 Active Image Page

The Active Image Page contains the following fields:

■Active Image After Reset — The Image file which is active on the

unit after the device is reset. The possible field values are:

■Current Image — Activates the current image after the device is

reset.

■Backup Image — Activates backup image after the device is reset.

2Select the active image to be activated after reset.

3Click Apply. The active image file is defined, and the device is updated.

15 MANAGING SYSTEM LOGS

This section provides information for managing system logs. The system

logs enable viewing device events in real time, and recording the events

for later usage. System Logs record and manage events and report errors

and informational messages. Event messages have a unique format, as

per the Syslog protocols recommended message format for all error

reporting. For example, Syslog and local device reporting messages are

assigned a severity code, and include a message mnemonic, which

identifies the source application generating the message. It allows

messages to be filtered based on their urgency or relevancy. Each

message severity determines the set of event logging devices that are

sent per each event message.

The following table lists the log severity levels:

This section includes the following topics:

■Viewing Logs

■Configuring Logging

Table 10 System Log Severity Levels

Severity Level Message

Emergency Highest (0) The system is not functioning.

Alert 1The system needs immediate attention.

Critical 2The system is in a critical state.

Error 3A system error has occurred.

Warning 4A system warning has occurred.

Notice 5The system is functioning properly, but a system

notice has occurred.

Informational 6Provides device information.

Debug 7Provides detailed information about the log. If a

Debug error occurs, contact Customer Tech Support.

168 CHAPTER 15: MANAGING SYSTEM LOGS

Viewing Logs The Logging Display Page contains all system logs in a chronological order

that are saved in RAM (Cache).

The monitor user has read-only access to this feature.

To view Logging:

1Click Administration > Logging > Display. The Logging Display Page

opens:

Figure 95 Logging Display Page

The Logging Display Page contains the following fields and buttons:

■Save Preview — Saves the displayed Log table.

■Clear Logs — Deletes all logs from the Log table.

■Log Time — Displays the time at which the log was generated.

■Severity — Displays the log severity.

■Description — Displays the log message text.

2Click Clear Logs. The selected logs are cleared, and the device is

updated.

Configuring Logging 169

Configuring

Logging

The Logging Setup Page contains fields for defining which events are

recorded to which logs. It contains fields for enabling logs globally, and

parameters for defining logs. Log messages are listed from the highest

severity to the lowest severity level.

The monitor users have no access to this page.

To define Log Parameters:

1Click Administration > Logging > Setup. The Logging Setup Page

opens:

Figure 96 Logging Setup Page

The Logging Setup Page contains the following fields:

■Enable Local Logging — Indicates if device local logs for Cache and

servers are enabled. Console logs are enabled by default. The possible

field values are:

■Checked — Enables device logs.

■Unchecked — Disables device logs.

170 CHAPTER 15: MANAGING SYSTEM LOGS

■Severity level — Indicates the minimum severity level for which a

message will be logged. When a severity level is selected, all severity

level choices above the selection are selected automatically. The

possible field values are:

■Emergency — The highest warning level. If the device is down or

not functioning properly, an emergency log message is saved to

the specified logging location.

■Alert — The second highest warning level. An alert log is saved, if

there is a serious device malfunction; for example, all device

features are down.

■Critical — The third highest warning level. A critical log is saved if a

critical device malfunction occurs; for example, two device ports

are not functioning, while the rest of the device ports remain

functional.

■Error — A device error has occurred, for example, if a single port is

offline.

■Warning — The lowest level of a device warning. The device is

functioning, but an operational problem has occurred.

■Notice — Provides device information.

■Info — Provides device information.

■Debug — Provides debugging messages.

■Not Active — Provides no messages.

■Enable Syslogging — Indicates if device syslogs for Cache and

servers are enabled. The possible field values:

■Checked — Enables syslogs.

■Unchecked — Disables syslogs.

Configuring Logging 171

■Severity level — Indicates the minimum severity level for which a

message will be logged. When a severity level is selected, all severity

level choices above the selection are selected automatically. The

possible field values are:

■Emergency — The highest warning level. If the device is down or

not functioning properly, an emergency log message is saved to

the specified logging location.

■Alert — The second highest warning level. An alert log is saved, if

there is a serious device malfunction; for example, all device

features are down.

■Critical — The third highest warning level. A critical log is saved if a

critical device malfunction occurs; for example, two device ports

are not functioning, while the rest of the device ports remain

functional.

■Error — A device error has occurred, for example, if a single port is

offline.

■Warning — The lowest level of a device warning. The device is

functioning, but an operational problem has occurred.

■Note — Provides device information.

■Informational — Provides device information.

■Debug — Provides debugging messages.

■Syslog IP Address — Defines IP Address to upload syslog messages.

■Syslog Port — Defines the UDP Port through which syslog messages

are uploaded.

2Define the fields.

3Click Apply. The log parameters are set, and the device is updated.

16 VIEWING STATISTICS

This section contains information about viewing port statistics.

Viewing Port

Statistics

The Port Statistics Summary Page contains fields for viewing information

about device utilization and errors that occurred on the device.

To view RMON statistics:

1Click Ports > Statistics > Summary. The Port Statistics Summary Page

opens:

Figure 97 Port Statistics Summary Page

The Port Statistics Summary Page contains the following fields:

■Select Port (s) — Defines the specific port for which RMON statistics

are displayed.

Viewing Port Statistics 173

■Refresh Rate — Defines the amount of time that passes before the

interface statistics are refreshed. The possible field values are:

■No Refresh — Indicates that the port statistics are not refreshed.

■15 Sec — Indicates that the port statistics are refreshed every 15

seconds.

■30 Sec — Indicates that the port statistics are refreshed every 30

seconds.

■60 Sec — Indicates that the port statistics are refreshed every 60

seconds.

■Received Bytes (Octets) — Displays the number of octets received

on the interface since the device was last refreshed. This number

includes bad packets and FCS octets, but excludes framing bits.

■Received Packets — Displays the number of packets received on the

interface, including bad packets, Multicast and broadcast packets,

since the device was last refreshed.

■Broadcast Packets Received — Displays the number of good

broadcast packets received on the interface since the device was last

refreshed. This number does not include Multicast packets.

■Multicast Packets Received — Displays the number of good

Multicast packets received on the interface since the device was last

refreshed.

■CRC & Align Errors — Displays the number of CRC and Align errors

that have occurred on the interface since the device was last

refreshed.

■Undersize Packets — Displays the number of undersized packets

(less than 64 octets) received on the interface since the device was last

refreshed.

■Oversize Packets — Displays the number of oversized packets (over

1522 octets) received on the interface since the device was last

refreshed.

■Fragments — Displays the number of fragments (packets with less

than 64 octets, excluding framing bits, but including FCS octets)

received on the interface since the device was last refreshed.

■Jabbers — Displays the

total number of received packets that were

longer than 1522 octets. This number excludes frame bits, but includes

FCS octets that had either a bad Frame Check Sequence (FCS) with an

integral number of octets (FCS Error) or a bad FCS with a non-integral

174 CHAPTER 16: VIEWING STATISTICS

octet (Alignment Error) number. The field range to detect jabbers is

between 20 ms and 150 ms.

■Collisions — Displays the number of collisions received on the

interface since the device was last refreshed.

■Frames of 64 Bytes — Number of 64-byte frames received on the

interface since the device was last refreshed.

■Frames of 65 to 127 Bytes — Number of 65 to 127 byte frames

received on the interface since the device was last refreshed.

■Frames of 128 to 255 Bytes — Number of 128 to 255 byte frames

received on the interface since the device was last refreshed.

■Frames of 256 to 511 Bytes — Number of 256 to 511 byte frames

received on the interface since the device was last refreshed.

■Frames of 512 to 1023 Bytes — Number of 512 to 1023 byte

frames received on the interface since the device was last refreshed.

■Frames of 1024 to 1522 Bytes — Number of 1024 to 1522 byte

frames received on the interface since the device was last refreshed.

2Select a port. The port statistics are displayed.

3Click Clear All Counters. The port statistics counters are cleared and the

new statistics are displayed.

17 MANAGING DEVICE DIAGNOSTICS

This section contains information for viewing and configuring port and

cable diagnostics, and includes the following topics:

■Configuring Port Mirroring

■Viewing Cable Diagnostics

Configuring Port

Mirroring

Port mirroring monitors and mirrors network traffic by forwarding copies

of incoming and outgoing packets from one port to a monitoring port.

Port mirroring can be used as a diagnostic tool as well as a debugging

feature. Port mirroring also enables switch performance monitoring.

Network administrators can configure port mirroring by selecting a

specific port from which to copy all packets, and other ports to which the

packets copied.

The monitor user has limited access to this page.

This section contains the following topics:

■Defining Port Mirroring

■Removing Port Mirroring

176 CHAPTER 17: MANAGING DEVICE DIAGNOSTICS

Defining Port

Mirroring

The Port Mirroring Setup Page contains parameters for configuring port

mirroring.

To enable port mirroring:

1Click Monitoring > Port Mirroring > Setup. The Port Mirroring Setup

Page opens:

Figure 98 Port Mirroring Setup Page

The Port Mirroring Setup Page contains the following fields:

■Select Port Type — Defines the port that will be the monitor port

(destination port) and the port that will be mirrored (source port). The

possible values are:

■Monitor — Defines the port as the monitor port, the destination

port.

■Mirror — Defines the port as the mirrored port to be monitored

and indicates the traffic direction to be monitored. If selected, the

possible values are:

■Mirror In — Enables port mirroring on the port RX.

■Mirror Out — Enables port mirroring on the port TX.

Configuring Port Mirroring 177

■Select port — Selects the port for mirroring or monitoring. A port

unavailable for mirroring is colored grey.

■Summary — Displays the current monitor and mirror ports. The fields

displayed are:

■Monitor — Displays the monitor port.

■Mirror In — Displays ports that are monitored on the RX.

■Mirror Out — Displays ports that are monitored on the TX.

2Select a port type.

3If the Mirrored port type is selected, select Mirror In and/or Mirror Out.

4Select the ports to be monitored.

5Click Apply. Port mirroring is enabled, and the device is updated.

Removing Port

Mirroring

The Port Mirroring Remove Page permits the network manager to

terminate port mirroring or monitoring.

The monitor users have no access to this page.

1Click Monitoring > Port Mirroring > Remove. The Port Mirroring

Remove Page opens:

Figure 99 Port Mirroring Remove Page

178 CHAPTER 17: MANAGING DEVICE DIAGNOSTICS

The Port Mirroring Remove Page contains the following fields:

■Monitor — Displays the monitor port.

■Mirror In — Displays ports that are monitored on the RX.

■Mirror Out — Displays ports that are monitored on the TX.

2Select the ports to be removed.

3Click Remove. Port mirroring is removed, and the device is updated.

Viewing Cable

Diagnostics

The Cable Diagnostics Summary Page contains fields for viewing tests on

copper cables. Cable testing provides information about where errors

occurred in the cable, the last time a cable test was performed, and the

type of cable error which occurred. The tests use Time Domain

Reflectometry (TDR) technology to test the quality and characteristics of a

copper cable attached to a port.

The monitor users have limited access to this page.

To view cables diagnostics:

1Click Monitoring > Cable Diagnostics > Summary. The Cable

Diagnostics Summary Page opens:

Figure 100 Cable Diagnostics Summary Page

Viewing Cable Diagnostics 179

The Cable Diagnostics Summary Page contains the following fields:

■Ports — Specifies the port to which the cable is connected.

■Test Resu lt — Displays the cable test results. Possible values are:

■No Cable — Indicates a cable is not connected, or the cable is

connected on only one side, or the cable is shorter than 1 meter.

■Short Cable — Indicates that a short has occurred in the cable.

■OK — Indicates that the cable passed the test.

■Cable Fault Distance — Indicates the distance from the port where

the cable error occurred, in meters.

■Last Update — Indicates the last time the port was tested.

2Click Apply. The test results are displayed.

Configuring Cable

Diagnostics

The Diagnostics Page contains fields for performing tests on copper

cables. Cable testing provides information about where errors occurred in

the cable, the last time a cable test was performed, and the type of cable

error, which occurred. The tests use Time Domain Reflectometry (TDR)

technology to test the quality and characteristics of a copper cable

attached to a port.

When performing cable tests consider the following:

■During the tests, ports are in the down state.

■The minimum cable length resolution is one meter, so if the cable is

shorter than 1 meter the test will display “no cable”.

■An open cable or a 2-pair copper cable will display a cable fault

distance of 0.

■The maximum cable length is 120 meters.

180 CHAPTER 17: MANAGING DEVICE DIAGNOSTICS

To te st ca bles:

1Click Monitoring > Cable Diagnostics > Diagnostics. The Diagnostics

Page opens:

Figure 101 Diagnostics Page

The Diagnostics Page contains the following fields:

■Select a Port — Specifies the port to be tested.

■Test Resu lt — Displays the cable test results. Possible values are:

■No Cable — Indicates that a cable is not connected to the port, or

the cable is connected on only one side or the cable is shorter than

1 meter.

■Short Cable — Indicates that a short has occurred in the cable.

■OK — Indicates that the cable passed the test.

■Cable Fault Distance — Indicates the distance from the port where

the cable error occurred.

A Cable Fault Distance of 0 can result from a short (<1m) cable, an open

cable or a 2-pair copper cable.

■Last Update — Indicates the last time the port was tested.

2Select a port to be tested.

3Click Apply. The ports are tested, and the page is updated.

A3COM NETWORK MANAGEMENT

3Com has a range of network management applications to address

networks of all sizes and complexity, from small and medium businesses

through large enterprises. The applications include:

■3Com Network Supervisor

■3Com Network Director

■3Com Network Access Manager

■3Com Enterprise Management Suite

■Integration Kit with HP OpenView Network Node Manager

Details of these and other 3Com Network Management Solutions can be

found at www.3com.com/network_management

3Com Network

Supervisor

3Com® Network Supervisor (3NS) is an easy-to-use management

application that graphically discovers, maps, and monitors the network

and links. It maps devices and connections so you can easily:

■Monitor stress levels

■Set thresholds and alerts

■View network events

■Generate reports in user-defined formats

■Launch embedded device configuration tools

3NS is configured with intelligent defaults and the ability to detect

network misconfigurations. It can also offer optimization suggestions,

making this application ideal for network managers with all levels of

experience.

To find out more about 3Com Network Supervisor and to download a

trial version, go to: www.3com.com/3ns

182 APPENDIX A: 3COM NETWORK MANAGEMENT

3Com Network

Director

3Com Network Director (3ND) is a standalone application that allows you

to carry out key management and administrative tasks on midsized

networks. By using 3ND you can discover, map, and monitor all your

3Com devices on the network. It simplifies tasks such as backup and

restore for 3Com device configurations as well as firmware and agent

upgrades. 3ND makes it easy to roll out network-wide configuration

changes with its intelligent VLAN configuration tools and the powerful

template based configuration tools. Detailed statistical monitoring and

historical reporting give you visibility into how your network is

performing.

To find out more about how 3Com Network Director can help you

manage your 3Com network and to download a trial version, go to:

www.3com.com/3nd

3Com Network

Access Manager

3Com Network Access Manager is installed seamlessly into Microsoft

Active Directory and Internet Authentication Service (IAS). It simplifies the

task of securing the network perimeter by allowing the administrator to

easily control network access directly from the “Users and Computers”

console in Microsoft Active Directory. With a single click, a user (or even

an entire department) can be moved to a different VLAN, or a computer

can be blocked from connecting to the network.

3Com Network Access Manager leverages the advanced desktop security

capabilities of 3Com switches and wireless access points (using IEEE

802.1X or RADA desktop authentication) to control both user and

computer access to the network.

To find out more about 3Com Network Access Manager, go to:

www.3com.com/NAM

3Com Enterprise Management Suite 183

3Com Enterprise

Management Suite

3Com Enterprise Management Suite (EMS) delivers comprehensive

management that is flexible and scalable enough to meet the needs of

the largest enterprises and advanced networks.

This solution provides particularly powerful configuration and change

control functionalities, including the capability to:

■Customize scheduled bulk operations

■Create a detailed audit trail of all network changes

■Support multiple distributed IT users with varying access levels and

individualized network resource control

The client-server offering operates on Windows and UNIX (Linux and

Solaris) systems.

3Com EMS is available in four packages, varying in the maximum number

of devices actively managed. These include SNMP-capable devices such as

switches, routers, security switches, the 3Com VCX™ IP Telephony server,

and wireless access points:

■Up to 250 devices

■Up to 1,000 devices

■Up to 5,000 devices

■An unlimited number of devices

To find out more about 3Com Enterprise Management Suite, go to:

www.3com.com/ems

Integration Kit with

HP OpenView

Network Node

Manager

3Com Integration Kit for HP OpenView Network Node Manager offers

businesses the option of managing their 3Com network directly from HP

OpenView Network Node Manager. The kit includes Object IDs, icons,

MIBs, and traps for 3Com devices. The package supports both Windows

platforms and UNIX or Solaris platforms. It can be installed as a

standalone plug-in to HP OpenView, or used with a 3Com management

application such as 3Com Enterprise Management Suite (EMS).

To find out more about 3Com Integration Kit for HP OpenView Network

Node Manager, go to: www.3com.com/hpovintkit

BDEVICE SPECIFICATIONS AND

FEATURES

Related Standards The 3Com® Baseline Switch 2916-SFP Plus and Baseline Switch 2924-SFP

Plus have been designed to the following standards:

Environmental

Physical

Function 8802-3, IEEE 802.3 (Ethernet), IEEE 802.3u (Fast

Ethernet), IEEE 802.3ab (Gigabit Ethernet), IEEE 802.1D

(Bridging)

Safety UL 60950-1, EN 60950-1, CSA 22.2 No. 60950-1, IEC

60950-1

EMC Emissions EN55022 Class A, CISPR 22 Class A, FCC Part 15

Subpart B Class A, ICES-003 Class A, VCCI Class A,

EN61000-3-2, EN61000-3-3.

EMC Immunity EN55024

Operating Temperature 0 to 40 °C (32 to 104°F).

Storage Temperature –40 to +70 °C (–40 to +158 °F)

Humidity 0-95% (non-condensing)

Standard EN 60068 (IEC 68)

Width 440 mm (17.3 in.)

Depth 173 mm cm (6.81 in.)

Height 44 mm (1.73 in.) or 1U.

Weight

Switch 2916-SFP Plus

Switch 2924-SFP Plus

2.5 kg (5.5 lb)

2.6 kg (5.7 lb)

Mounting Free-standing, or 19 in. rack-mounted using the

supplied mounting kit

Electrical 185

Electrical

Switch Features This section describes the device features. The system supports the

following features:

Line Frequency 50/60 Hz

Input Voltage 100–240 Vac (auto range)

Current Rating

Switch 2916-SFP Plus

Switch 2924-SFP Plus

1 Amp (Max)

1.5 Amp (Max)

Maximum Power

Consumption

Switch 2916-SFP Plus

Switch 2924-SFP Plus

58 Watts

84 Watts

Max Heat Dissipation

Switch 2916-SFP Plus

Switch 2924-SFP Plus

198 BTU/hr

286 BTU/hr

Table 11 Features of the Baseline Switch 2916-SFP Plus and Switch 2924-SFP Plus

Feature Description

Auto Negotiation The purpose of auto negotiation is to allow a device to advertise modes of

operation. The auto negotiation function provides the means to exchange

information between two devices that share a point-to-point link

segment, and to automatically configure both devices to take maximum

advantage of their abilities.

Auto negotiation is performed totally within the physical layers during link

initiation, without any additional overhead to either the MAC or higher

protocol layers. Auto negotiation allows the ports to do the following:

■Advertise their abilities

■Acknowledge receipt and understanding of the common modes of

operation that both devices share

■Reject the use of operational modes that are not shared by both

devices

■Configure each port for the highest-level operational mode that both

ports can support

Automatic MAC Addresses Aging MAC addresses from which no traffic is received for a given period are

aged out. This prevents the Bridging Table from overflowing.

Back Pressure On half duplex links, the receiver may employ back pressure (i.e. occupy

the link so it is unavailable for additional traffic), to temporarily prevent

the sender from transmitting additional traffic. This is used to prevent

buffer overflows.

186 APPENDIX B: DEVICE SPECIFICATIONS AND FEATURES

Address Resolution Protocol (ARP) ARP converts between IP addresses and MAC (i.e., hardware) addresses.

ARP is used to locate the MAC address corresponding to a given IP

address. This allows the switch to use IP addresses for routing decisions

and the corresponding MAC addresses to forward packets from one hop

to the next.

Class Of Service (CoS) Provide traffic belonging to a group preferential service (in terms of

allocation of system resources), possibly at the expense of other traffic.

Command Line Interface The Command Line Interface (CLI) is an interface using a serial connection

that allows basic features to be configured, including IP address

management and firmware upgrading. The CLI is not intended as the

main interface for the switch.

Configuration File Management The device configuration is stored in a configuration file. The

Configuration file includes both system wide and port specific device

configuration. The system can display configuration files in the form of a

collection of CLI commands, which are stored and manipulated as text

files.

DHCP Clients Dynamic Host Client Protocol. DHCP enables additional setup parameters

to be received from a network server upon system startup. DHCP service

is an on-going process.

Fast Link STP can take up to 30-60 seconds to converge. During this time, STP

detects possible loops, allowing time for status changes to propagate and

for relevant devices to respond. 30-60 seconds is considered too long of a

response time for many applications. The Fast Link option bypasses this

delay, and can be used in network topologies where forwarding loops do

not occur.

Full 802.1Q VLAN Tagging Compliance IEEE 802.1Q defines an architecture for virtual bridged LANs, the services

provided in VLANs and the protocols and algorithms involved in the

provision of these services. An important requirement included in this

standard is the ability to mark frames with a desired Class of Service (CoS)

tag value.

IGMP Snooping IGMP Snooping examines IGMP frame contents, when they are forwarded

by the device from work stations to an upstream Multicast router. From

the frame, the device identifies work stations configured for Multicast

sessions, and which Multicast routers are sending Multicast frames.

Link Aggregated Groups Link Aggregated Group (LAG). The system provides up-to eight

Aggregated Links may be defined, each with up to eight member ports,

to form a single. LAGs provide:

■Fault tolerance protection from physical link disruption

■Higher bandwidth connections

■Improved bandwidth granularity

■High bandwidth server connectivity

■LAG is composed of ports with the same speed, set to full-duplex

operation.

Table 11 Features of the Baseline Switch 2916-SFP Plus and Switch 2924-SFP Plus (continued)

Feature Description

Switch Features 187

MAC Address Capacity Support The device supports up to 8K MAC addresses. The device reserves specific

MAC addresses for system use.

MAC Multicast Support Multicast service is a limited broadcast service, which allows one-to-many

and many-to-many connections for information distribution. Layer 2

Multicast service is where a single frame is addressed to a specific

Multicast address, from where copies of the frame are transmitted to the

relevant ports.

MDI/MDIX Support The device automatically detects whether the cable connected to an RJ-45

port is crossed or straight through, when auto-negotiation is enabled.

Standard wiring for end stations is Media-Dependent Interface (MDI) and

the standard wiring for hubs and switches is known as Media-Dependent

Interface with Crossover (MDIX).

Password Management Password management provides increased network security and improved

password control. Passwords for HTTP, HTTPS, and SNMP access are

assigned security features. For more information on Password

Management, see “Default Users and Passwords” page 27.

Port-based Authentication Port-based authentication enables authenticating system users on a

per-port basis via an external server. Only authenticated and approved

system users can transmit and receive data. Ports are authenticated via

the Remote Authentication Dial In User Service (RADIUS) server using the

Extensible Authentication Protocol (EAP).

Port-based Virtual LANs Port-based VLANs classify incoming packets to VLANs based on their

ingress port.

Port Mirroring Port mirroring monitors and mirrors network traffic by forwarding copies

of incoming and outgoing packets from a monitored port to a monitoring

port. Users specify which target port receives copies of all traffic passing

through a specified source port.

RADIUS Clients RADIUS is a client/server-based protocol. A RADIUS server maintains a

user database, which contains per-user authentication information, such

as user name, password and accounting information.

Rapid Spanning Tree Spanning Tree can take 30-60 seconds for each host to decide whether its

ports are actively forwarding traffic. Rapid Spanning Tree (RSTP) detects

uses of network topologies to enable faster convergence, without

creating forwarding loops.

Remote Monitoring Remote Monitoring (RMON) is an extension to SNMP, which provides

comprehensive network traffic monitoring capabilities (as opposed to

SNMP which allows network device management and monitoring).

RMON is a standard MIB that defines current and historical MAC-layer

statistics and control objects, allowing real-time information to be

captured across the entire network.

Self-Learning MAC Addresses The device enables automatic MAC address learning from incoming

packets. The MAC addresses are stored in the Bridging Table

Table 11 Features of the Baseline Switch 2916-SFP Plus and Switch 2924-SFP Plus (continued)

Feature Description

188 APPENDIX B: DEVICE SPECIFICATIONS AND FEATURES

SNMP Alarms and Trap Logs The system logs events with severity codes and timestamps. Events are

sent as SNMP traps to a Trap Recipient List.

SNMP Versions 1 and 2 Simple Network Management Protocol (SNMP) over the UDP/IP protocol

controls access to the system.

Spanning Tree Protocol 802.1d Spanning tree is a standard Layer 2 switch requirement that

allows bridges to automatically prevent and resolve L2 forwarding loops.

Switches exchange configuration messages using specifically formatted

frames and selectively enable and disable forwarding on ports.

SSL Secure Socket Layer (SSL) is an application-level protocol that enables

secure transactions of data through privacy, authentication, and data

integrity. It relies upon certificates and public and private keys.

Static MAC Entries MAC entries can be manually entered in the Bridging Table, as an

alternative to learning them from incoming frames. These user-defined

entries are not subject to aging, and are preserved across resets and

reboots.

TCP Transport Control Protocol (TCP). TCP connections are defined between 2

ports by an initial synchronization exchange. TCP ports are identified by

an IP address and a 16-bit port number. Octets streams are divided into

TCP packets, each carrying a sequence number.

TFTP Trivial File Transfer Protocol The device supports boot image, software and configuration

upload/download via TFTP.

Virtual Cable Testing VCT detects and reports copper link cabling occurrences, such as open

cables and cable shorts.

VLAN Support VLANs are collections of switching ports that comprise a single broadcast

domain. Packets are classified as belonging to a VLAN based on either the

VLAN tag or based on a combination of the ingress port and packet

contents. Packets sharing common attributes can be grouped in the same

VLAN.

Web-based Management With web-based management, the system can be managed from any

web browser. The system contains a Web Server, which serves HTML

pages, through which the system can be monitored and configured. The

system internally converts web-based input into configuration commands,

MIB variable settings and other management-related settings.

Table 11 Features of the Baseline Switch 2916-SFP Plus and Switch 2924-SFP Plus (continued)

Feature Description

CPIN-OUTS

Console Cable A Console cable is an 8-conductor RJ45-to-DB9 cable. One end of the

cable has an RJ-45 plug for connecting to the switch’s Console port, and

the other end has a DB-9 socket connector for connecting to the serial

port on the terminal, as shown in Figure 102.

Figure 102 Console cable

Table 12 Console cable pinouts

RJ-45 Signal Direction DB9 (modem) DB9 (console)

1RTS — 7 8

2DTR — 4 6

3TXD — 3 2

4CD — 1 5

5GND — 5 5

6RXD — 2 3

7DSR — 6 4

8CTS — 8 7

190 APPENDIX C: PIN-OUTS

Null Modem Cable RJ-45 to RS-232 25-pin

PC-AT Serial Cable RJ-45 to 9-pin

Modem Cable RJ-45 to RS-232 25-pin

Screen

TxD

RxD

Ground

RTS

CTS

DSR

DCD

DTR

Screen

RxD

TxD

Ground

RTS

DTR

CTS

DSR

DCD

Shell

Switch 5500

Cable connector: RJ-45 female

PC/Terminal

Cable connector: 25-pin male/female

only required if screen

always required

required for handshake

Screen

DTR

TxD

RxD

CTS

Ground

DSR

RTS

DCD

Screen

DCD

RxD

TxD

DTR

Ground

DSR

RTS

CTS

Shell

Switch 5500

Cable connector: RJ-45 female

PC-AT Serial Port

Cable connector: 9-pin female

only required if screen

Always required

always required

required for handshake

Required for handshake

Screen

TxD

RxD

RTS

CTS

DSR

Ground

DCD

DTR

Screen

TxD

RxD

RTS

CTS

DSR

Ground

DCD

DTR

Shell

Switch 5500

Cable connector: RJ-45 female

RS-232 Modem Port

Cable connector: 25-pin male

Ethernet Port RJ-45 Pin Assignments 191

Ethernet Port RJ-45

Pin Assignments

10/100 and 1000BASE-T RJ-45 connections.

Table 10 Pin assignments

Table 11 Pin assignments

Pin Number 10/100 1000

Ports configured as MDI

1Transmit Data + Bidirectional Data A+

2Transmit Data −Bidirectional Data A−

3Receive Data + Bidirectional Data B+

4Not assigned Bidirectional Data C+

5Not assigned Bidirectional Data C−

6Receive Data −Bidirectional Data B−

7Not assigned Bidirectional Data D+

8Not assigned Bidirectional Data D−

Pin Number 10/100 1000

Ports configured as MDIX

1Receive Data + Bidirectional Data B+

2Receive Data −Bidirectional Data B−

3Transmit Data + Bidirectional Data A+

4Not assigned Bidirectional Data A−

5Not assigned Bidirectional Data D+

6Transmit Data −Bidirectional Data D−

7Not assigned Bidirectional Data C+

8Not assigned Bidirectional Data C−

DTROUBLESHOOTING

This section describes problems that may arise when installing the and

how to resolve these issue. This section includes the following topics:

■Problem Management — Provides information about problem

management.

■Troubleshooting Solutions — Provides a list of troubleshooting

issues and solutions for using the device.

Problem

Management

Problem management includes isolating problems, quantifying the

problems, and then applying the solution. When a problem is detected,

the exact nature of the problem must be determined. This includes how

the problem is detected, and what are the possible causes of the

problem. With the problem known, the effect of the problem is recorded

with all known results from the problem. Once the problem is quantified,

the solution is applied. Solutions are found either in this chapter, or

through customer support. If no solution is found in this chapter, contact

Customer Support.

Troubleshooting

Solutions

Listed below are some possible troubleshooting problems and solutions.

These error messages include:

■Switch does not run; power LED is off.

■Cannot connect to management using Console connection

■Cannot connect to switch management using HTTP, SNMP, etc.

■Self-test exceeds 15 seconds

■No connection is established and the port LED is on

■Device is in a reboot loop

■No connection and the port LED is off

■Lost Password.

Troubleshooting Solutions 193

Table 12 Troubleshooting Solutions

Problems Possible Cause Solution

Switch does not run; power

LED is off.

Power is disconnected. Verify that the power cord is properly connected to the

switch, and to the mains supply.

Cannot connect to

management using

Console connection

Be sure the terminal emulator program is set to VT-100

compatible, 38400 baud rate, no parity, 8 data bits and

one stop bit

Use the included cable, or be sure that the pin-out

complies with a standard null-modem cable

Cannot connect to switch

management using HTTP,

SNMP, etc.

Be sure the switch has a valid IP address, subnet mask and

default gateway configured

Check that your cable is properly connected with a valid

link light, and that the port has not been disabled

Ensure that your management station is plugged into the

appropriate VLAN to manage the device

If you cannot connect using the web, the maximum

number of connections may already be open. Please try

again at a later time.

No response from the

terminal emulation

software

Faulty serial cable

Incorrect serial cable

Software settings

Replace the serial cable

Replace serial cable for a pin-to-pin straight/flat cable

Reconfigure the emulation software connection settings.

Response from the terminal

emulations software is not

readable

Faulty serial cable

Software settings

Replace the serial cable

Reconfigure the emulation software connection settings.

Self-test exceeds 15

seconds

The device may not be

correctly installed.

Remove and reinstall the device. If that does not help,

consult your technical support representative.

No connection is

established and the port

LED is on

Wrong network address in

the workstation

No network address set

Wrong or missing protocol

Faulty ethernet cable

Faulty port

Faulty module

Incorrect initial

configuration

Configure the network address in the workstation

Configure the workstation with IP protocol

Replace the cable

Replace the module

Erase the connection and reconfigure the port

194 APPENDIX D: TROUBLESHOOTING

Device is in a reboot loop Software fault Download and install a working or previous software

version from the console

No connection and the port

LED is off

Incorrect ethernet cable,

e.g., crossed rather than

straight cable, or vice

versa, split pair (incorrect

twisting of pairs)

Fiber optical cable

connection is reversed

Bad cable

Wrong cable type

Check pinout and replace if necessary

Change if necessary. Check Rx and Tx on fiber optic cable

Replace with a tested cable

Verify that all 10 Mbps connections use a Cat 5 cable

Check the port LED or zoom screen in the NMS

application, and change setting if necessary

Lost Password Contact 3Com

Table 12 Troubleshooting Solutions (continued)

Problems Possible Cause Solution

E3COM CLI REFERENCE GUIDE

This section describes using the

Command Line Interface

(CLI) to manage

the device. The device is managed through the CLI from a direct

connection to the device console port

Getting Started

with the Command

Line Interface

Using the CLI, network managers enter configuration commands and

parameters to configure the device. Using the CLI is very similar to

entering commands on a UNIX system.

Console Port To start using the CLI via a console port:

1Connect the RJ-45 cable to the Console port of the switch to the serial

port of the terminal or computer running the terminal emulation

application.

2Set the baud rate to 38400.

3Set the data format to 8 data bits, 1 stop bit, and no parity.

4Set Flow Control to none.

5Under Properties, select VT100 for Emulation mode.

6Select Terminal keys for Function, Arrow, and Ctrl keys. Ensure that

the setting is for Terminal keys (not Windows keys).

Logging on to the CLI The Login process requires a User Name and Password. The default user

name for first time configuration is admin. No password is required. User

names and passwords are case sensitive.

To logon to the CLI Interface:

1Press Enter without typing in a username. The Login prompt displays:

2Enter your User Name at the Login prompt.

196 APPENDIX E: 3COM CLI REFERENCE GUIDE

3Press Enter. The Password prompt displays:

The Login information is verified, and displays the following CLI menu:

If the password is invalid, the following message appears and Login

process restarts.

Automatic Logout The user session is automatically terminated after 30 minutes in which no

device configuration activity has occurred. The following message is

displayed:

Concurrent CLI

Sessions

The command line interface supports one CLI session.

CLI Commands This Command section contains the following commands:

■?

■Ping

■Summary

■ipSetup

■Upgrade

■Initialize

■Reboot

■Logout

■Password

Password:

Select menu option#

Incorrect Password

Session closed by automatic logout.

CLI Commands 197

?The ? command displays a list of CLI commands on the device.

Syntax

Default Configuration

This command has no default configuration.

User Guidelines

There are no user guidelines for this command.

Example

The following displays the list presented for the ? command:

Select menu option#?

initialize

ipsetup

logout

ping

reboot

summary

upgrade

Reset the device to factory default and reboot.

Configures IP address

Logout from this session.

Send echo messages

Power cycles the device.

Summarizes IP setup and software versions.

Software upgrade over TFTP.

198 APPENDIX E: 3COM CLI REFERENCE GUIDE

Ping The Ping command sends ICMP echo request packets to another node

on the network.

Syntax

ping [

P address | URL| hostname]

Parameters

■IP Address — IP address to ping.

■URL — URL address to ping.

■hostname — hostname to ping. (Range: 1 - 158 characters)

Default Configuration

This command has no default configuration.

User Guidelines

There are no user guidelines for this command.

Example

The following displays current IP configuration and software versions

running on the device:

Select menu option# ping 10.6.150.75

Pinging 10.6.150.75 with 32 bytes of data:

Reply from 10.6.150.75: bytes=32 time<1ms TTL=128

Ping statistics for 10.6.150.75:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

CLI Commands 199

Summary The Summary command displays the current IP configuration and

software versions running on the device. It is intended for devices that

support separate runtime and bootcode Images.

Syntax

summary

Default Configuration

This command has no default configuration.

User Guidelines

There are no user guidelines for this command.

Example

The following displays current IP configuration and software versions

running on the device:

Select menu option:

IP Method:

IP address:

Subnet mask:

Default gateway:

Runtime version:

Bootcode version:

Summary

Manual

1.2.3.4

255.255.255.0

4.3.2.1

example1.ext

example2.ext

200 APPENDIX E: 3COM CLI REFERENCE GUIDE

ipSetup The ipSetup command allows the user to define an IP address on the

device either manually or via a DHCP server.

Syntax

ipSetup [dhcp| ip-address mask [default-gateway ip-address]]

Parameters

■dhcp — Specifies the IP address is acquired automatically from the

Dynamic Host Configuration Protocol (DHCP) server.

■ip-address mask— Specifies that the IP address and default

gateway are configured manually by the user (Range: 0.0.0.0. -

223.255.255.255).

Default Configuration

No default IP address is defined for interfaces.

User Guidelines

IP Addresses configured beyond the range of 224.0.0.0 are defined as

multicast, experimental or broadcast addresses.

If a default gateway is configured manually, the IP-address and mask are

required to be the same as the gateway-address and mask.

Example

The following example displays an IP address configured manually:

The following example displays an IP address obtained via a DHCP server:

ipSetup 161.71.34.120 255.255.255.0

ipSetup DHCP

CLI Commands 201

Upgrade The Upgrade command starts a system download and thereby allowing

a system upgrade.

Syntax

upgrade [TFTP Server IP Address|Destination File Name| File Type]

Parameters

■TFTP Server IP Address — Defines the TFTP server’s IP address.

■Source File Name — Specifies the source file name.

■File Type — Defines the file type to be downloaded. The possible

values are:

■runtime — Downloads the runtime software application file.

■bootcode — Downloads the bootcode software file.

Default Configuration

This command has no default configuration.

User Guidelines

During the upgrade process, a series of dots appear representing the

upgrade process in the CLI interface. When the upgrade process is

completed, the command prompt reappears.

The Dual Software Image feature is supported therefore the next boot

after upgrade command will always use the newly downloaded image.

202 APPENDIX E: 3COM CLI REFERENCE GUIDE

Initialize The Initialize command resets the device configuration to factory

defaults, including the IP configuration.

Syntax

Initialize

Default Configuration

This command has no default configuration.

User Guidelines

The system prompts for confirmation of the request. If no response is

entered within 15 seconds, timeout occurs and the command is not

executed.

Example

Select menu option# initialize

WARNING: This command initializes the system to factory

defaults and causes a reset.

Do you wish to continue (Y,N)[N]: N

Select menu option#

CLI Commands 203

Reboot The Reboot command simulates a power cycle of the device.

Syntax

reboot

Default Configuration

This command has no default configuration.

User Guidelines

There are no user guidelines for this command.

Example

Select menu option: reboot

Are you sure you want to reboot the system (yes,no)[no]: no

Select menu option:

204 APPENDIX E: 3COM CLI REFERENCE GUIDE

Logout The Logout command terminates the CLI session.

Syntax

logout

Default Configuration

This command has no default configuration.

User Guidelines

There are no user guidelines for this command.

Example

Select menu option: logout

exiting session...

Username:

CLI Commands 205

Password The Password command changes the user’s password.

Syntax

password

Default Configuration

This command has no default configuration.

User Guidelines

The user needs to login to the session in order to change the password.

Example

Select menu option: password

Change password for user: username

Old password:

Enter new password:

Retype password:

The command line interface password has been successfully

changed.

Select menu option:

FGLOSSARY

Access Control List

(ACL)

ACLs can limit network traffic and restrict access to certain users or

devices by checking each packet for certain IP or MAC (i.e., Layer 2)

information.

Address Resolution

Protocol (ARP)

ARP converts between IP addresses and MAC (i.e., hardware) addresses.

ARP is used to locate the MAC address corresponding to a given IP

address. This allows the switch to use IP addresses for routing decisions

and the corresponding MAC addresses to forward packets from one

hop to the next.

Boot Protocol

(BOOTP)

BOOTP is used to provide bootup information for network devices,

including IP address information, the address of the TFTP server that

contains the devices system files, and the name of the boot file.

Class of Service (CoS) CoS is supported by prioritizing packets based on the required level of

service, and then placing them in the appropriate output queue. Data is

transmitted from the queues using weighted round-robin service to

enforce priority service and prevent blockage of lower-level queues.

Priority may be set according to the port default, the packet’s priority

bit (in the VLAN tag), TCP/UDP port number, IP Precedence bit, or DSCP

priority bit.

Differentiated

Services Code Point

Service (DSCP)

DSCP uses a six-bit tag to provide for up to 64 different forwarding

behaviors. Based on network policies, different kinds of traffic can be

marked for different kinds of forwarding. The DSCP bits are mapped to

the Class of Service categories, and then into the output queues.

Domain Name

Service (DNS)

A system used for translating host names for network nodes into IP

addresses.

Dynamic Host

Control Protocol

(DHCP)

Provides a framework for passing configuration information to hosts on

a TCP/IP network. DHCP is based on the Bootstrap Protocol (BOOTP),

adding the capability of automatic allocation of reusable network

addresses and additional configuration options.

207

Extensible

Authentication

Protocol over LAN

(EAPOL)

EAPOL is a client authentication protocol used by this switch to verify

the network access rights for any device that is plugged into the

switch. A user name and password is requested by the switch, and

then passed to an authentication server (e.g., RADIUS) for verification.

EAPOL is implemented as part of the IEEE 802.1X Port Authentication

standard.

Generic Multicast

Registration Protocol

(GMRP)

GMRP allows network devices to register end stations with multicast

groups. GMRP requires that any participating network devices or end

stations comply with the IEEE 802.1p standard.

IEEE 802.1D Specifies a general method for the operation of MAC bridges, including

the Spanning Tree Protocol.

IEEE 802.1Q VLAN Tagging—Defines Ethernet frame tags which carry VLAN

information. It allows switches to assign end stations to different virtual

LANs, and defines a standard way for VLANs to communicate across

switched networks.

IEEE 802.1p An IEEE standard for providing quality of service (QoS) in Ethernet

networks. The standard uses packet tags that define up to eight traffic

classes and allows switches to transmit packets based on the tagged

priority value.

IEEE 802.1s An IEEE standard for the Multiple Spanning Tree Protocol (MSTP) which

provides independent spanning trees for VLAN groups.

IEEE 802.1X Port Authentication controls access to the switch ports by requiring

users to first enter a user ID and password for authentication.

IEEE 802.3ac Defines frame extensions for VLAN tagging.

IEEE 802.3x Defines Ethernet frame start/stop requests and timers used for flow

control on full-duplex links.

IGMP Snooping Listening to IGMP Query and IGMP Report packets transferred between

IP Multicast Routers and IP Multicast host groups to identify IP Multicast

group members.

IGMP Query On each subnetwork, one IGMP-capable device can act as the querier

— that is, the device that asks all hosts to report on the IP multicast

groups they wish to join or to which they already belong. The elected

querier is the device with the lowest IP address in the subnetwork.

208 APPENDIX F: GLOSSARY

Internet Control

Message Protocol

(ICMP)

A network layer protocol that reports errors in processing IP packets.

ICMP is also used by routers to feed back information about better

routing choices.

Internet Group

Management

Protocol (IGMP)

A protocol through which hosts can register with their local router for

multicast services. If there is more than one multicast switch/router on a

given subnetwork, one of the devices is made the “querier” and

assumes responsibility for keeping track of group membership.

In-Band Management Management of the network from a station attached directly to the

network.

IP Multicast Filtering A process whereby this switch can pass multicast traffic along to

participating hosts.

IP Precedence The Type of Service (ToS) octet in the IPv4 header includes three

precedence bits defining eight different priority levels ranging from

highest priority for network control packets to lowest priority for

routine traffic. The eight values are mapped one-to-one to the Class of

Service categories by default, but may be configured differently to suit

the requirements for specific network applications.

Layer 2 Data Link layer in the ISO 7-Layer Data Communications Protocol. This

is related directly to the hardware interface for network devices and

passes on traffic based on MAC addresses.

Layer 3 Network layer in the ISO 7-Layer Data Communications Protocol. This

layer handles the routing functions for data moving from one open

system to another.

Link Aggregated

Group (LAG)

Aggregates ports or VLANs into a single virtual port or VLAN.

Link Aggregation See Port Trunk.

Management

Information Base

(MIB)

An acronym for Management Information Base. It is a set of database

objects that contains information about a specific device.

MD5 Message Digest

Algorithm

An algorithm that is used to create digital signatures. It is intended for

use with 32 bit machines and is safer than the MD4 algorithm, which

has been broken. MD5 is a one-way hash function, meaning that it

takes a message and converts it into a fixed string of digits, also called

a message digest.

209

Multicast Switching A process whereby the switch filters incoming multicast frames for

services for which no attached host has registered, or forwards them to

all ports contained within the designated multicast VLAN group.

Out-of-Band

Management

Management of the network from a station not attached to the

network.

Port Authentication See IEEE 802.1X.

Port Mirroring A method whereby data on a target port is mirrored to a monitor port

for troubleshooting with a logic analyzer or RMON probe. This allows

data on the target port to be studied unobstructively.

Port Trunk Defines a network link aggregation and trunking method which

specifies how to create a single high-speed logical link that combines

several lower-speed physical links.

Private VLANs Private VLANs provide port-based security and isolation between ports

within the assigned VLAN. Data traffic on downlink ports can only be

forwarded to, and from, uplink ports.

Protected Extensible

Authentication

Protocol (PEAP)

A protocol proposed by Microsoft, Cisco and RSA Security for securely

transporting authentication data, including passwords, over 802.11

wireless networks. Like the competing standard Tunneled Transport

Layer Security (TTLS), PEAP makes it possible to authenticate wireless

LAN clients without requiring them to have certificates, simplifying the

architecture of secure wireless LANs.Protocol-Independent Multicasting

(PIM)

This multicast routing protocol floods multicast traffic downstream, and

calculates the shortest-path back to the multicast source network via

reverse path forwarding. PIM uses the router’s IP routing table rather

than maintaining a separate multicast routing table as with DVMRP.

PIM - Sparse Mode is designed for networks where the probability of a

multicast client is low, such as on a Wide Area Network. PIM - Dense

Mode is designed for networks where the probability of a multicast

client is high and frequent flooding of multicast traffic can be justified.

Remote

Authentication

Dial-in User Service

(RADIUS)

RADIUS is a logon authentication protocol that uses software running

on a central server to control access to RADIUS-compliant devices on

the network.

210 APPENDIX F: GLOSSARY

Remote Monitoring

(RMON)

RMON provides comprehensive network monitoring capabilities. It

eliminates the polling required in standard SNMP, and can set alarms on

a variety of traffic conditions, including specific error types.

Rapid Spanning Tree

Protocol (RSTP)

RSTP reduces the convergence time for network topology changes to

about 10% of that required by the older IEEE 802.1D STP standard.

Secure Shell (SSH) A secure replacement for remote access functions, including Telnet. SSH

can authenticate users with a cryptographic key, and encrypt data

connections between management clients and the switch.

Routing Information

Protocol (RIP)

The RIP protocol seeks to find the shortest route to another device by

minimizing the distance-vector, or hop count, which serves as a rough

estimate of transmission cost. RIP-2 is a compatible upgrade to RIP. It

adds useful capabilities for subnet routing, authentication, and

multicast transmissions.

Simple Network

Management

Protocol (SNMP)

The application protocol in the Internet suite of protocols which offers

network management services.

Spanning Tree

Protocol (STP)

A technology that checks your network for any loops. A loop can often

occur in complicated or backup linked network systems. Spanning Tree

detects and directs data along the shortest available path, maximizing

the performance and efficiency of the network.

Terminal Access

Controller Access

Control System Plus

(TACACS+)

TACACS+ is a logon authentication protocol that uses software running

on a central server to control access to TACACS-compliant devices on

the network.

Transmission Control Protocol/Internet Protocol (TCP/IP)

Protocol suite that includes TCP as the primary transport protocol, and

IP as the network layer protocol.

Trivial File Transfer

Protocol (TFTP)

A TCP/IP protocol commonly used for software downloads.

User Datagram

Protocol (UDP)

UDP provides a datagram mode for packet-switched communications. It

uses IP as the underlying transport mechanism to provide access to

IP-like services. UDP packets are delivered just like IP packets –

connection-less datagrams that may be discarded before reaching their

targets. UDP is useful when TCP would be too complex, too slow, or

just unnecessary.

211

Virtual LAN (VLAN) A Virtual LAN is a collection of network nodes that share the same

collision domain regardless of their physical location or connection

point in the network. A VLAN serves as a logical workgroup with no

physical barriers, and allows users to share information and resources as

though located on the same LAN.

XModem A protocol used to transfer files between devices. Data is grouped in

128-byte blocks and error-corrected.

GOBTAINING SUPPORT FOR

YOUR 3COM PRODUCTS

3Com offers product registration, case management, and repair services

through eSupport.3com.com. You must have a user name and password

to access these services, which are described in this appendix.

Product to Gain

Service Benefits

To take advantage of warranty and other service benefits, you must first

3Com eSupport services are based on accounts that are created or that

you are authorized to access.

Solve Problems

Online

3Com offers the following support tool:

■3Com Knowledgebase — Helps you to troubleshoot 3Com

products. This query-based interactive tool is located at:

http://knowledgebase.3com.com

It contains thousands of technical solutions written by 3Com support

engineers.

Purchase Extended

Warranty and

Professional

Services

To enhance response times or extend your warranty benefits, you can

purchase value-added services such as 24x7 telephone technical support,

software upgrades, onsite assistance, or advanced hardware

replacement.

Experienced engineers are available to manage your installation with

minimal disruption to your network. Expert assessment and

implementation services are offered to fill resource gaps and ensure the

success of your networking projects. For more information on 3Com

Extended Warranty and Professional Services, see:

http://www.3com.com/

Access Software Downloads 213

Contact your authorized 3Com reseller or 3Com for additional product

and support information. See the table of access numbers later in this

appendix.

Access Software

Downloads

You are entitled to bug fix / maintenance releases for the version of

software that you initially purchased with your 3Com product. To obtain

access to this software, you need to register your product and then use

the Serial Number as your login. Restricted Software is available at:

http://eSupport.3com.com/

To obtain software releases that follow the software version that you

originally purchased, 3Com recommends that you buy an Express or

Guardian contract, a Software Upgrades contract, or an equivalent

support contract from 3Com or your reseller. Support contracts that

include software upgrades cover feature enhancements, incremental

functionality, and bug fixes, but they do not include software that is

released by 3Com as a separately ordered product. Separately orderable

software releases and licenses are listed in the 3Com Price List and are

available for purchase from your 3Com reseller.

and repair services. To access these services for your region, use the

appropriate telephone number, URL, or e-mail address from the table in

the next section.

Telephone Technical

Support and Repair

To obtain telephone support as part of your warranty and other service

benefits, you must first register your product at:

http://eSupport.3com.com/

When you contact 3Com for assistance, please have the following

information ready:

■Product model name, part number, and serial number

■A list of system hardware and software, including revision level

■Diagnostic error messages

■Details about recent configuration changes, if applicable

214 APPENDIX G: OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS

To send a product directly to 3Com for repair, you must first obtain a

return materials authorization number (RMA). Products sent to 3Com

without authorization numbers clearly marked on the outside of the

package will be returned to the sender unopened, at the sender’s

expense. If your product is registered and under warranty, you can obtain

an RMA number online at http://eSupport.3com.com/. First-time users

must apply for a user name and password.

Telephone numbers are correct at the time of publication. Find a current

directory of 3Com resources by region at:

http://csoweb4.3com.com/contactus/

Country Telephone Number Country Telephone Number

Asia, Pacific Rim — Telephone Technical Support and Repair

Australia

Hong Kong

India

Indonesia

Japan

Malaysia

New Zealand

1800 075 316

2907 0456

000 800 440 1193

001 803 852 9825

03 3507 5984

1800 812 612

0800 450 454

Philippines

PR of China

Singapore

South. Korea

Taiwan

Thailand

1800 144 10220 or

029003078

800 810 0504

800 616 1463

080 698 0880

00801 444 318

001 800 441 2152

Pakistan Call the U.S. direct by dialing 00 800 01001, then dialing 800 763 6780

Sri Lanka Call the U.S. direct by dialing 02 430 430, then dialing 800 763 6780

Vietnam Call the U.S. direct by dialing 1 201 0288, then dialing 800 763 6780

You can also obtain non-urgent support in this region at this email address apr_technical_support@3com.com

Or request a return material authorization number (RMA) by FAX using this number: +61 2 9937 5048, or send an

email at this email address: ap_rma_request@3com.com

Europe, Middle East, and Africa — Telephone Technical Support and Repair

From anywhere in these regions not listed below, call: +44 1442 435529

From the following countries, call the appropriate number:

Austria

Belgium

Denmark

Finland

France

Germany

Hungary

Ireland

Israel

Italy

0800 297 468

0800 71429

800 17309

0800 113153

0800 917959

0800 182 1502

06800 12813

1 800 553 117

180 945 3794

800 879489

Luxembourg

Netherlands

Norway

Poland

Portugal

South Africa

Spain

Sweden

Switzerland

U.K.

800 23625

0800 0227788

800 11376

00800 4411 357

800 831416

0800 995 014

900 938 919

020 795 482

0800 553 072

0800 096 3266

You can also obtain support in this region using this URL: http://emea.3com.com/support/email.html

You can also obtain non-urgent support in this region at these email addresses:

Technical support and general requests: customer_support@3com.com

Return material authorization: warranty_repair@3com.com

Contract requests: emea_contract@3com.com

Latin America — Telephone Technical Support and Repair

Antigua

Argentina

Aruba

Bahamas

Barbados

Belize

Bermuda

Bonaire

Brazil

Cayman

Chile

Colombia

Costa Rica

Curacao

Ecuador

Dominican Republic

1 800 988 2112

0 810 444 3COM

1 800 998 2112

52 5 201 0010

1 800 998 2112

0800 13 3COM

1 800 998 2112

AT&T +800 998 2112

1 800 998 2112

AT&T +800 998 2112

Guatemala

Haiti

Honduras

Jamaica

Martinique

Mexico

Nicaragua

Panama

Paraguay

Peru

Puerto Rico

Salvador

Trinidad and Tobago

Uruguay

Venezuela

Virgin Islands

AT&T +800 998 2112

57 1 657 0888

AT&T +800 998 2112

1 800 998 2112

571 657 0888

01 800 849CARE

AT&T +800 998 2112

54 11 4894 1888

AT&T +800 998 2112

1 800 998 2112

AT&T +800 998 2112

1 800 998 2112

AT&T +800 998 2112

57 1 657 0888

You can also obtain support in this region in the following ways:

■Spanish speakers, enter the URL: http://lat.3com.com/lat/support/form.html

■Portuguese speakers, enter the URL: http://lat.3com.com/br/support/form.html

■English speakers in Latin America, send e-mail to: lat_support_anc@3com.com

US and Canada — Telephone Technical Support and Repair

All locations: Network Jacks; Wired or Wireless Network Interface Cards:

All other 3Com products:

1 800 876 3266

Country Telephone Number Country Telephone Number

REGULATORY NOTICES

FCC STATEMENT This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to

part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful

interference when the equipment is operated in a commercial environment. This equipment generates, uses

and can radiate radio frequency energy and, if not installed and used in accordance with the instructions,

may cause harmful interference to radio communications. Operation of this equipment in a residential area is

likely to cause harmful interference to radio communications, in which case the user will be required to

correct the interference at their own expense.

INFORMATION TO THE USER If this equipment does cause interference to radio or television reception, which can be determined by

turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of

the following measures:

■Reorient the receiving antenna.

■Relocate the equipment with respect to the receiver.

■Move the equipment away from the receiver.

■Plug the equipment into a different outlet so that equipment and receiver are on different branch circuits.

If necessary, the user should consult the dealer or an experienced radio/television technician for additional

suggestions. The user may find the following booklet prepared by the Federal Communications Commission

helpful:

How to Identify and Resolve Radio-TV Interference Problems

This booklet is available from the U.S. Government Printing Office, Washington, DC 20402, Stock No.

004-000-00345-4.

In order to meet FCC emissions limits, this equipment must be used only with cables which comply with IEEE

802.3.

ICES STATEMENT This Class A digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la Classe A est conforme à la norme NMB-003 du Canada.

CE STATEMENT (EUROPE)This product complies with the European Low Voltage Directive 73/23/EEC and EMC Directive 89/336/EEC as

amended by European Directive 93/68/EEC.

Warning: This is a class A product. In a domestic environment this product may cause radio interference in

which case the user may be required to take adequate measures.

A copy of the signed Declaration of Conformity can be downloaded from the Product Support web page for

the Baseline Switch 2916/2924-SFP Plus family (3CBLSG16 and 3CBLSG24) at http://www.3Com.com.

Also available at http://support.3com.com/doc/BL_SWITCH_2916/2924_SFP_EU_DOC.pdf

VCCI STATEMENT

3Com 2924 Sfp Users Manual ManualsLib Makes It Easy To Find Manuals Online!

Navigation menu

Versions of this User Manual:

Views

Navigation