Allied Telesis C613-02013-00 manual Virtual LANs

Page 35

Layer 2 Switching

35

discarded. If TRAP is specified, packets received from MAC addresses not on the port’s learn list will be discarded and an SNMP trap will be generated. If DISABLE is specified, the first time a packet is received from a MAC address not on the port’s learn list, it will be discarded, an SNMP trap will be generated and the port(s) will be disabled. To re-enable the port, disable the Port Security function on the port. The default value for this parameter is DISCARD.

If INTRUSIONACTION is set to TRAP or DISABLE, a list of MAC addresses for devices that are active on a port, but which are not allowed or learned for the port, can be displayed using the command:

SHOW SWITCH PORT={port-listALL} INTRUSION

Figure 8-1: Example output from the SHOW SWITCH PORT INTRUSION command.

Switch Port Information

----------------------------------------------------------------------------

Port 2 - 13 intrusion(s) detected

00-00-c0-1d-2c-f8 00-90-27-87-a5-22 00-00-cd-01-00-4a 00-d0-b7-4d-93-c0 08-00-5a-a1-02-3f 00-d0-b7-d5-5f-a9 00-b0-d0-20-d1-01 00-90-99-0a-00-49 00-10-83-05-72-83 00-00-cd-00-45-9e 00-00-c0-ad-a3-d0 00-a0-24-8e-65-3c 00-90-27-32-ad-61

----------------------------------------------------------------------------

A switch port can be manually locked before it reaches the learning limit, by using the command:

ACTIVATE SWITCH PORT={port-listALL} LOCK

Addresses can be manually added to a port locked list up to a total of 256 MAC addresses, and the learning limit can be extended to accommodate them, by using the command:

ADD SWITCH FILTER ACTION={FORWARDDISCARD} DESTADDRESS=macadd

PORT=port [ENTRY=entry] [LEARN] [VLAN={vlanname1..4094}]

Learned addresses on locked ports can be saved as part of the switch configuration, so that they will be part of the configuration after a power cycle, using the command:

CREATE CONFIG=filename

If the configuration is not saved when there is a locked list for a port, the learning process begins again after the router is restarted.

Virtual LANs

A Virtual LAN is a software-defined broadcast domain. The switch’s VLAN feature allows the network to be segmented by software management, improving network performance. Workstations, servers, and other network equipment connected to the switch can be grouped according to similar data and security requirements. Several VLANs can be connected to the same switch.

Devices that are members of a VLAN only exchange data with each other through the switching capabilities of the switch. Further flexibility can be gained by using VLAN tagging. To exchange data between devices in separate VLANs, the switch’s routing capabilities are used. VLAN status information,

Rapier Switch Software Release 2.2.1 C613-02013-00 Rev A

Image 35
Contents User Guide Page Contents Documentation Roadmap Chapter Why Read This User Guide?Technical support Where To Find More InformationSwitching Features What Can the Rapier Switch Do?Routing Features Advanced Feature Licence AT-RPFL3Upgrade Optional Features Command Line Interface Simple SwitchingLogging Giving the Switch an IP AddressEntering Commands SET PasswordEnabling the GUI Enable AT-RPFL3Upgrade Feature LicenceEnable GUI Starting the GUI Graphical User InterfaceNavigating Monitoring Show File User PrivilegesFile Subsystem Show System Online CLI HelpNone Configuration ScriptsSaving Configuration Entered with the GUI DramEditor Saving Configuration Entered with the CLIInstall Information Show Install Delete InstallReleases and Patches into the Switch Load METHOD=HTTP DESTINATION=FLASH Example Install Software Upgrade for Rapier SwitchShow Load Enable SnmpSnmp and MIBs Show Snmp Enable Snmp AuthenticatetrapEnabling and Disabling Switch Ports Switch PortsSTP EnabledISO8802-3 Csmacd OFFAcceptable Frames Types Autonegotiation of Port Speed and Duplex ModeSELECT=MACSRCMACDESTMACBOTHIPSRCIPDESTIPBOTH Port TrunkingShow VLAN=ALL Packet Storm Protection Port Mirroring Port security ADD Switch L3FILTER MatchEnable Switch Mirror Disable Switch Mirror INTRUSIONACTION=NONEDISCARDTRAPDISABLEVirtual LANs Example output from the Show Switch Port Intrusion commandRapier Switch User Guide Creating VLANs Without Vlan Tags Static and dynamic VLANsMarketing Vlan Switch Training Vlan Trunk ports GarpParameter Meaning Vlan TaggingFRAME=TAGGEDUNTAGGED Tagged VLANs Summary of Vlan Tagging RulesIngress Rules Layer 2 Switching ProcessGeneric Vlan Registration Protocol Gvrp Learning Process Disable Switch LearningShow Switch Enable Switch LearningEnable Switch Ageingtimer Disable Switch Ageingtimer SET Switch AGEINGTIMER=10..1000000Layer 2 Filtering Example output from the Show Switch Filter commandFRAME=UNTAGGEDTAGGED Egress RulesShow Switch QOS Quality of ServiceSET Switch QOS=P1,P2,P3,P4,P5,P6,P7,P8 Spanning Tree Port States Spanning Tree Protocol STPConfiguring STP SET STP=stpnameALL PRIORITY=0..65535 Example output from the Show STP command Parameters To display STP port information, use the command TCN Bpdu To show STP counters, use the commandINTERFACE=VLAN3 Interfaces to Layer 3 ProtocolsIgmp Snooping Purge STPShow IP Igmp Enable IP Igmp Disable IP IgmpSET IP Igmp TIMEOUT=1..65535 QUERYINTERVAL=1..65535 Group List TriggersEvent Page Show IP Interface Internet Protocol IPRouting Information Protocol RIP IP MulticastingUplink Novell IPXShow IPX Circuit Active Enable RsvpAppleTalk Resource Reservation Protocol RsvpRAW Show Rsvp Interface

C613-02013-00 specifications

The Allied Telesis C613-02013-00 is a versatile and powerful network switch designed to meet the demands of modern networking environments. This device is part of Allied Telesis's extensive range of networking solutions, catering to both enterprise and industrial applications. It is engineered for high performance, reliability, and ease of management, making it a suitable choice for organizations that require robust connectivity solutions.

One of the main features of the C613-02013-00 is its support for advanced Layer 2 switching capabilities. This provides businesses with the necessary tools to manage and direct network traffic efficiently. The switch includes support for VLAN (Virtual Local Area Network) technology, which allows for the segmentation of network traffic, enhancing both security and performance. With VLANs, organizations can isolate critical workloads and improve network management while ensuring that sensitive information is protected from unauthorized access.

Another key characteristic of the C613-02013-00 is its extensive support for Power over Ethernet (PoE). This feature enables the switch to deliver electrical power along with data over standard Ethernet cabling. This is particularly beneficial for powering devices such as IP cameras, wireless access points, and VoIP phones, reducing the need for additional power supply infrastructure. With PoE capabilities, the switch simplifies installation and enhances flexibility in deploying network devices.

The C613-02013-00 also boasts advanced network management features, including support for SNMP (Simple Network Management Protocol) for efficient monitoring and troubleshooting. This ensures that network administrators can maintain optimal performance and quickly address any issues that arise. Additionally, the switch supports network redundancy features like Rapid Spanning Tree Protocol (RSTP), which helps to prevent network loops and minimizes downtime.

In terms of physical characteristics, the C613-02013-00 is designed for durability and ease of deployment in various environments. Its compact form factor allows for effective space utilization in data centers and network closets. Moreover, it features a fanless design, making it suitable for deployment in noise-sensitive environments such as offices and classrooms.

In summary, the Allied Telesis C613-02013-00 is a robust network switch offering advanced features such as Layer 2 switching, PoE support, and comprehensive network management capabilities. Its design and performance make it an excellent choice for businesses seeking to enhance their network infrastructure with reliable and secure connectivity solutions.