enterasys switch configuration guide

For example, set logging local console enable would not execute without also specifying file enable or disable. 9 Configuring VLANs This chapter describes how to configure VLANs on Enterasys fixed stackable and standalone switches. 159 Enterasys Switch Manuals and User Guides (392 Models) were found in All-Guides Database. (For example: security or traffic broadcast containment). show ip mroute [unicast-source-address | multicast-group-address] [summary] Refer to the devices CLI Reference Guide, as applicable, for an example of each commands output. Configuring Port Link Flap Detection If left unresolved, link flapping can be detrimental to network stability by triggering Spanning Tree and routing table recalculations. set ipsec encryption {3des | aes128 | aes192 | aes256} 4. Enabling DVMRP globally on the device and on the VLANs. Factory Default Settings Table 4-1 Default Settings for Basic Switch Operation (continued) Feature Default Setting Console (serial) port required settings Baud rate: 9600 Data bits: 8 Flow control: disabled Stop bits: 1 Parity: none DHCP server Disabled. engine ID A value used by both the SNMPv3 sender and receiver to propagate inform notifications. Weighted fair queuing assures that each queue will get at least the configured percentage of bandwidth time slices. Thischapterdescribesswitchrelatedloggingandnetworkmanagementcommandsandhowto usethem. Configuring Authentication Table 10-1 Default Authentication Parameters (continued) Parameter Description Default Value macauthentication Globally enables or disables MAC authentication on a device. Configuring CLI Properties Table 3-2 CLI Properties Configuration Commands (continued) Task Command Set the time (in minutes) an idle console or Telnet set logout timeout CLI session will remain connected before timing out. The ARP Table This example shows output from a successful ping to IP address 182.127.63.23: C5(su)->router#ping 182.127.63.23 182.127.63.23 is alive Use the traceroute command to display a hop-by-hop path through an IP network from the device to a specific destination host. Refer to page Syslog Operation By default, Syslog is operational on Enterasys switch devices at startup. Monitoring MSTP 15-29 Example 1: Configuring MSTP for Traffic Segregation This example illustrates the use of MSTP for traffic segregation by VLAN and SID. Brand New server xeon lenovo ThinkSystem ST550 server tower DHCP Snooping into the software forwarding path, where it may be processed by the DHCP relay agent, the local DHCP server, or forwarded as an IP packet. Service ACLs Table 26-8 TACACS+ Show Commands (continued) Task Command Displays only the current TACACS+ session settings. Configuring OSPF Areas Area 2 ABR2(su)->router(Config)#router ospf 1 ABR2(su)->router(Config-router)#area 0.0.0.2 range 10.3.0.0 255.255.0.0 ABR2(su)->router(Config-router)#area 0.0.0.2 range 10.3.2.0 255.255.255.0 noadvertise Area 3 ABR3(su)->router(Config)#router ospf 1 ABR3(su)->router(Config-router)#area 0.0.0.3 range 10.1.0.0 255.255.0.0 Figure 22-3 OSPF Summarization Topology Configuring a Stub Area A stub area is a non-transit area. 1 Setting Up a Switch for the First Time This chapter describes how to configure an Enterasys stackable or standalone Fixed Switch received from the factory that has not been previously configured. Initial Network Connection and Configuration for ExtremeXOS Configuring Authentication dynamic Egress formatting will be based upon information contained in the authentication response. Use clear license to remove an applied license from a switch. Enterasys Networks 9034313-07 Configuring Switches in a Stack . C5(rw)->set dhcp pool manual3 client-identifier 01:00:01:22:33:44:55 C5(rw)->set dhcp pool manual3 host 10.12.1.10 255.255.255.0 C5(rw)->set dhcp pool manual3 lease infinite Configuring Additional Pool Parameters Table 4-8 lists the commands that can be used to configure additional IP address pool parameters. Permit allow the frame to be switched. Enterasys Networks, Inc. declares that the equipment packaged with this notice conforms to the above directives. Policy Configuration Example Standard Edge Edge Switch platforms will be rate-limited using a configured CoS that will be applied to the student and faculty, and phoneFS policy roles. Creates a user policy profile that uses the user VLAN. It is designed for use where there may be many devices communicating at the same time, and any one of the devices could be the sender at any particular time. 2. Additional Configuration Tasks current.log Deleting a Backup Image File Since the stackable and standalone switches can store only two firmware images at a time, you may have to delete a backup image, if one exists, before you can manually download a new firmware image. When any change is made to the hardware configuration, power supply status, or redundancy mode, the firmware recalculates the power available for PoE. Terms and Definitions 10-30 Configuring User Authentication. Note: OSPF is an advanced routing feature that must be enabled with a license key. Bridges A, B, E and F participate in VLAN 20. RIP is described in RFC 2453. Disable WebView and show the current state. Setting SNMP notification parameters (filters) 7. In this way, both upstream and downstream facing ports are protected. Display the routing table, including static routes. Router Advertisement is part of the Neighbor Discovery process and is required for IPv6. 19 Configuring Multicast This chapter describes the multicast features supported by the Enterasys fixed switches. Sets the number of users to 2 on all the user ports. Basic OSPF Topology Configuration 1. Strict Priority Queuing With Strict Priority Queuing, a higher priority queue must be empty before a lower priority queue can transmit any packets. Preventing clients from using legacy protocols such as IPX, Apple Talk, and DECnet that should no longer be running on your network. (Optional on C5 only) Set the power redundancy mode on the system if two power supplies are installed. Table 25-3 lists the tasks and commands. show mgmt-auth-notify 2. Set to 30 seconds for non-broadcast networks. With LACP, if a set of links can aggregate, they will aggregate. Untagged. Took part in business critical , large scale projects and delivered them in a timely manner. Removing Units from an Existing Stack If the running stack uses a daisy chain topology, make the stack cable connections from the bottom of the stack to the new unit (that is, STACK DOWN port from the bottom unit of the running stack to the STACK UP port on the new unit). Remote port mirroring involves configuration of the following port mirroring related parameters: 1. Both transmit and receive traffic will be mirrored. Table 15-2 provides a summary of STP port roles. About This Guide This guide provides basic configuration information for the Enterasys Networks Fixed Switch platforms using the Command Line Interface (CLI0, including procedures and code examples. Alternatively, you can specify only the interface to be used to contact the DHCPv6 server and the Fixed Switch device will use the DHCPV6-ALL-AGENTS multicast address (FF02::1:2) to relay DHCPv6 messages to the DHCPv6 server. Router R1 Router 1(su)->router(Config)#interface vlan 111 Router 1(su)->router(Config-if(Vlan 111))#ip address 172.111.1.1 255.255.255. StudentFS(rw)->set policy profile 2 name student pvid-status enable pvid 10 cos-status enable cos 8 Assigning Traffic Classification Rules Forward traffic on UDP source port for IP address request (68), and UDP destination ports for protocols DHCP (67) and DNS (53). Assign the new super-user account as the emergency access account. 4. Image Version Length0x8 Image Version Bytes.0x30 0x2e 0x35 0x2e 0x30 0x2e 0x34 (x.xx.xx) The following secondary header is in the image: CRC.. 2 Configuring Switches in a Stack This chapter provides information about configuring Enterasys switches in a stack. Add the virtual switch to the stack using the set switch member command. User logs in via console <164>Apr 21 08:44:13 10.27.12. Use this command to enable or disable Loop Protect event notification. To display additional screen output: Press any key other than ENTER to advance the output one screen at a time. Service ACLs Restricting Management Access to the Console Port You can restrict access to system management to the switchs serial port only. With the exception of A4 ACLs, all ACLs are terminated with an implicit deny all rule. SpanGuard helps protect against Spanning Tree Denial of Service (DoS) SpanGuard attacks as well as unintentional or unauthorized connected bridges, by intercepting received BPDUs on configured ports and locking these ports so they do not process any received packets. Refer to page Link Aggregation Overview 11-1 Configuring Link Aggregation 11-9 Link Aggregation Configuration Example 11-11 Terms and Definitions 11-15 Link Aggregation Overview IEEE 802.3ad link aggregation provides a standardized means of grouping multiple parallel Ethernet interfaces into a single logical Layer 2 link. Configuring the underlying unicast routing protocol (for example, OSPF). Policies will be applied dynamically at authentication using a RADIUS authentication server and the Filter-ID attribute. Link Aggregation Overview Table 11-2 LAG Port Parameters (continued) Term Definition Administrative State A number of port level administrative states can be set for both the actor and partner ports. Ctrl+I or TAB Complete word. no access-list acl-number [entryno [entryno]] Example The following example creates an IPv4 extended ACL and associates it with VLAN 100. Port Mirroring Configuring SMON MIB Port Mirroring SMON port mirroring support allows you to redirect traffic on ports remotely using SMON MIBs. 3. RMON There are only three Filter Entries available, and a user can associate all three Filter Entries with the Channel Entry. Optionally, configure authentication and/or timer values for the virtual link. 1 Use a DB9 male null-modem (laplink) cable. The process described in this section would be repeated on every device that is connected in the network to ensure that each device has a secure management VLAN. RIP Configuration Example Table 21-2 lists the default RIP configuration values. (Not applicable for super user accounts.) Router: Calls the readers attention to router-specific commands and information. Display the current IPsec settings. Screen Hierarchy The contents of this chapter are arranged following the structure shown in Figure 3-1. Configuring SNMP . Packets sent to 172.111.1.1/16 would go to Router R2. If Spanning Tree is disabled globally all linked ports will be in a forwarding state and the Spanning Tree Protocol will not run. Whether the switch enforces aging of system passwords. Thisexampleshowshowtodisplaythelinkflapparameterstable: Tabl e 74providesanexplanationoftheshowlinkflapparameterscommandoutput. MAC Locking Response Validation When the MS-CHAP2-Success attribute is received in an access accept RADIUS response frame, it will be validated according to RFC2548 and RFC2759. Interpreting Messages Every system message generated by the Enterasys switch platforms follows the same basic format: time stamp address application [unit] message text Example This example shows Syslog informational messages, displayed with the show logging buffer command. C5(rw)->ping 10.10.10.1 10.10.10. . If the device supports routing, enter router configuration mode and configure an IP address on the VLAN interface. Enterasys C5G124-24 : Configuration manual - ManualShelf Optionally, configure a default distance, or preference, for static IPv6 routes that do not have a preference specified. Download Configuration manual of Enterasys C2H124-24 Switch for Free or View it Online on All-Guides.com. Stackable Switches Configuration Guide Firmware Version 6.03.xx.xxxx P/N 9034313-07. i Notice Enterasys Networks reserves the right to make changes in specifications and other information contained in this document and its web site without prior notice. If you clear a license from a member unit in a stack while the master unit has a activated license, the status of the member will change to ConfigMismatch and its ports will be detached from the stack. Using Multicast in Your Network Figure 19-4 PIM Traffic Flow 7 3 1 DR RP Source 5 4 2 6 Last Hop Router Receiver 1. Its compact footprint uses 37 percent less space than its predecessor, making it ideal for under . IPv6 Routing Configuration the MTU value for the tunnel interfaces was reduced by 20 octets, to allow for the basic IPv4 headers added to IPv6 packets. 30 pounds of muscle before and after Default settings are listed in Table 15-6: Table 15-6 Spanning Tree Port Default Settings Setting Default Value Bridge priority mode 802. STP allows for the automatic reconfiguration of the network. Procedure 25-5 Neighbor Discovery Configuration Step Task Command(s) 1. set mac agetime time 4. Prepare high/low level design & solution. In global configuration mode, configure an IPv6 static route. Configuring Node Aliases C5(su)->show nodealias config ge.1.1 Port Number ----------ge.1.1 Max Entries ----------32 Used Entries -----------32 Status ---------Enable The following command disables the node alias agent on port ge.1.8: C5(su)->set nodealias disable ge.1. 3. Resolution of incidents of 2nd level. SNTP Configuration Unicast Polling Mode When an SNTP client is operating in unicast mode, SNTP update requests are made directly to a server, configured using the set sntp server command. Optionally, disable clearing of dynamic MAC addresses on link change. Configuration of normal port mirroring source ports and one destination port on all switches, as described above. RADIUS Management Authentication Procedure 26-2 Configuring IPsec Step Task Command(s) 1. User Account Overview Procedure 5-2 on page 5-4 shows how a super-user creates a new super-user account and assigns it as the emergency access account. MultiAuth mode Globally sets MultiAuth for this device. Refer to page Configuring RIP 21-1 Configuring IRDP 21-5 Configuring RIP Using RIP in Your Network The fixed switches support Routing Information Protocol (RIP) Version 1 and 2. If it is not a command issue you might want to check your tftp server. Usethiscommandtodisplaythesystemshardwareconfiguration. show mac [address mac-address] [fid fid] [port port-string] [type {other | learned | self | mgmt | mcast}] 2. Table 6-1 6-8 File Management Commands Task Command List all the files stored on the system, or only a specific file. Authentication can be either clear text or encrypted MD5. show snmp counters Display SNMP engine properties. IP Static Routes Procedure 20-2 Configuring the Routing Interface Step Task Command(s) 1. Initial Configuration Overview Table 4-2 Default Settings for Router Operation (continued) Feature Default Setting Hello interval (OSPF) Set to 10 seconds for broadcast and point-to-point networks. DHCP snooping forwards valid DHCP client messages received on non-routing VLANs. ENTERASYS SECURESTACK C3 CONFIGURATION MANUAL Pdf Download 12-18 Display SNMP traffic counter values. (1800 seconds) preference level The preference value for this advertised address. Use the following commands to review, re-enable, and reset the Spanning Tree mode. PAGE 3. A value of 0 equates to an 802.1p priority of 0. TACACS+ Procedure 26-4 TACACS+ Configuration (continued) Step Task Command(s) 8. Type "Show version" from the prompt. Configuring IGMP Table 19-4 Layer 3 IGMP Configuration Commands Task Command Set the maximum response time being inserted into group-specific queries sent in response to leave group messages. The Filter-ID for that user is returned to the switch in the authentication response, and the authentication is validated for that user. 3. (8) When it no longer wants to receive the stream, Host 2 can do one of the following: - Send a leave message to Router 2. Refer to page Spanning Tree Protocol Overview While the network is in a steady state, alternate and backup ports are in blocking state; root and designated ports are in forwarding state. User Authentication Overview When the maptable response is set to tunnel mode, the system will use the tunnel attributes in the RADIUS reply to apply a VLAN to the authenticating user and will ignore any Filter-ID attributes in the RADIUS reply. The following example configures DHCP snooping and dynamic ARP inspection in a routing environment using RIP. For information on changing these default settings, refer to Chapter 5, User Account and Password Management. show port [port-string] Display operating and admin status, speed, duplex mode and port type for one or more ports on the device. 4. The RP router, for the group, is selected by using the hash algorithm defined in RFC 2362. DHCP Configuration IP Address Pools IP address pools must be configured for both automatic and manual IP address allocation by a DHCP server. Note: The Cisco Discovery Protocol must be globally enabled using the set ciscodp status command before operational status can be set on individual ports. Three ICMP probes will be transmitted for each hop between the source and the traceroute destination. Condition Default Value IPv6 DHCP Disabled IPv6 DHCP Relay Agent Information Option 32 IPv6 DHCP Relay Agent Information Remote ID Sub-option 1 IPv6 DHCP Preferred Lifetime 2592000 seconds IPv6 DHCP Valid Lifetime 604800 seconds Configuration Examples Procedure 25-6 describes the tasks to configure a Fixed Switch interface as a DHCPv6 relay agent. A packet is either forwarded (a permit rule) or not forwarded (a deny rule) according to the first rule that is matched. GARP Multicast Registration Protocol (GMRP) A GARP application that functions in a similar fashion as GVRP, except that GMRP registers multicast addresses on ports to control the flooding of multicast frames. DHCPv6 Configuration DHCPv6 Pool: pool22 Static Bindings: Binding for Client 00:01:00:06:99:a3:ff:11:22:33:44:55:66:77 IA PD: IA ID not specified, Prefix: 3001:2222::/48 Preferred Lifetime infinite, Valid Lifetime infinite Static Bindings: Binding for Client 00:01:00:06:99:a3:ff:11:22:33:44:55:66:77 IA PD: IA ID not specified, Prefix: 3001:3333::/48 Preferred Lifetime infinite, Valid Lifetime infinite DNS Server: 2001:DB8:222:111::10 DNS Server: 2001:DB8:4444:5555::20 Domain Name: enterasys. Examples This example displays the current ratelimit configuration on port fe.1.1. DHCP Snooping Table 26-9 DHCP Snooping Default Parameters (continued) Parameter Default Setting Burst interval 1 second Managing DHCP Snooping Table 26-10 on page 21 lists the commands to display DHCP snooping information. Type configure from Privileged EXEC mode. Removing Units from an Existing Stack Use clear ip address to remove the IP address of the stack. Table 28-2 show sflow receivers Output Descriptions. Securestack a2 Read online or download PDF Enterasys Networks A2H124-24FX User Manual. Configure DHCP snooping. To connect to the console port: 1. Using the all parameter will display all default and non-default configuration settings. RSTP provides rapid connectivity following the failure of a switching device, switch port, or the addition of a switch into the network. The following example applies two different license keys to members of the stack. Implementao e Suporte em Redes convergentes de Voz e Dados para suporte de toda a Soluo SIEMENS proposta, com estudo de novas tecnologias que se adequam necessidade de novos . Procedure 24-1 Configuring IPv4 Standard and Extended ACLs Step Task 1. Once the desired master unit has been selected, reset the system using the reset command. The DC voltage can be directly connected to the modules only after the capacitors are charged to a sufficient level. Set the port duplex mode to full. Advanced Configuration Overview Procedure 4-1 contains the steps to assign an IP address and configure basic system parameters. Enterasys Networks B3G124-24P, B3G124-48P Using the Reset Switch This basic configuration requires the configuration of four interfaces and associated IP addresses. DHCPv6 Configuration Relay Remote ID Option Flags Procedure 25-7 on page 25-17 describes the tasks to configure a Fixed Switch interface as a DHCPv6 server.