3Com 9000 manual SEC LE Security Configuration, SWS Switch security, SST Set switch security state

Page 325

Switch Security 325

Enable/Disable Enables or disables the LEC admission security status for the switch for Switch Security the current session.

Command Actions

Enter menu sequence:

(2) LEM: LAN Emulation

 

(3) SEC: LE Security Configuration

 

(3) SWS: Switch security

 

(2) SST: Set switch security state

Enter a parameter at the prompt

Parameter

Format or Range

Enable/disable state

1 to enable

 

2 to disable

Direct access sequence:

2 3 3 2 [parameters]

Command Result

 

System action taken:

The LEC admission security status for the switch is

 

enabled or disabled.

System message display:

Security on switch now ENABLED

 

Any LEC currently in operational state

 

will remain so unless it is restarted.

Example

Enter: 2 3 3 2 2

The new LEC admission security status for the switch is displayed as follows.

Security on switch now ENABLED

Any LEC currently in operational state will remain so unless

it is restarted.

Image 325
Contents CoreBuilder ATM Enterprise Switch Management Guide 3Com Corporation 5400 Bayfront Plaza Santa Clara, California Contents Logging Out Management Capabilities Starting Up LMA Access Level LoggingReset All Set Management Configuration to Factory DefaultsReset Switch 122 Update Ilmi Channel Polling Interval 123 116 Update Auto-discovery status 117103 Display Software Versions 104 105Get ATM Addresses at Port 135 134136 Network Prefix Display Network Prefix 148190 189192 ATM-Layer Statistics 193 198 AAL5-Layer Statistics 199218 Update Startup Delay 223 Lane Version of Switch 224222 229Reset LES Configurations 298 289 Update Elan Response Policy 291252 Display Elan MAC Addresses 254 255 Add Elan MAC Address 256 Display Elan ATM Addresses 257Configuring Pnni Nodes 333 Get Number of Nodes 334 Update LEC Elan Join Privilege for Current Session306 Display LAN Emulation Statistics 308343 344 Set Default ATM Address 345346 Get Peer Group ID 358394 389407 Display Ptse Node Information 412 414 Display Summary Address Table 416Menu Index Technical Support ATM Switch Fabric Module Specifications PhysicalAbout this Guide List conventions that are used throughout this guide ConventionsText Conventions Icon DescriptionConventions Command Result Command ActionsParameter Format or Range Command Description Sections Explains the command descriptionsKey Section Description CoreBuilder 9000 Documentation Overview Module Quick Start Guides or Getting Started Guides Paper DocumentsAn ATM network Documents on CD-ROMCompliance YearAbout this Guide CoreBuilder 9000 ATM Enterprise Switch has two components CoreBuilder ATM Enterprise Switch CharacteristicsATM Switch Fabric Module The ATM Interface Module Module Type No. of Ports Rate Mbps ATM InterfacesCard Type 3Com Part Number Preventing congestion Handling congestion Mechanisms for Preventing CongestionClassical IP Clip ATM Mechanisms for Handling CongestionVirtual Networks Call Admission CLP-based Cell DiscardSoftware Release Key FeaturesProtocols StandardsSupported Overview Starting UP Handling Sécurité Précautions deManipulation Switch Fabric ATMPoignées d’insertion/d’éjection sont ouvertes Vorkehrungen beim Umgang mit dem Modul CoreBuilder 9000 Enterprise Switch InstallationFast Setup Switch IntegratedCoreBuilder Integrated Fast Setup Procedure Navigation Aids Integrated Fast Setup Procedure SectionsSetup Section Description SectionsCapabilities ManagementStarting Up Access Level Privileges Access LevelsLMA Main Menu LMA Menu Structure LMA Menu SystemAt the Switch Setup Menu prompt, enter At the Platform Configuration Menu prompt, enterEntering the Menu Sequence Password in a format of up to eight alphanumeric characters Entering the Command ParametersPassword again exactly as before Command ResultsEditing Aids Menu Navigation FunctionsTo go Type or Press To perform this task Type or PressAutomatic Logout Configuring the Platform Update Admin-access Password Set Password to Factory Default Example Read-access password is updatedWrite-access password is updated Admin-access password is updated Before you enter the new passwordEnter 1 1 1 Following prompt is displayed Passwords are reset to their factory valuesEnter y to confirm. The following message appears Setting Up for Current IP address is displayed Following message is displayedSIP IP Setup MNG Management setupNext reboot SIP Set IP AddressCurrent NMS IP address is displayed NMS NMS Setup NMS address is updated toExample Enter 1 1 SNS Set NMS AddressAddress found in the local IP subnetwork Current default gateway IP address is displayedSGW Set Default Gateway GWY Default Gateway SetupDefault Gateway address was Successfully set for the next rebootAddress Current IP subnet mask configuration is displayedSet for the next reboot MSK Subnet Mask SetupSSM Set Subnet Mask Subnet Mask address was successfullyCommunity String Enterprise SwitchCurrent read community string is displayed Update the Read Community String of the CoreBuilder 9000 ATM Update ReadCurrent write community string is displayed ATM Enterprise SwitchUpdate Write Current Ethernet Type configuration is displayed SET Set Ethernet Type ETH Ethernet Type SetupEth Type was successfully set for Management Configuration is set to the factory defaults RebootEnter 1 1 2 Following prompt is displayed Setting the Port Network Connection Type Command Actions UNI Port 1 7.1.2 7.1.3 7.1.4 7.2.1 7.2.2 7.2.3 Enter y to confirm. The following message is displayed Network connection type for port 3.1.2 is updated to UNIUNI for all ports, and 7 for maximum number of hops NNI configuration parameters are reset to UNI for all portsEnter 1 1 3 Following prompt is displayed CoreBuilder 9000 ATM Enterprise Switch Resetting AllParameters Enter 1 2 Following messages are displayedEnter 1 Following message is displayed ParametersDownloading Download Status Command ActionsSystem Software Display SoftwareMessage Meaning and Action Download MessagesEnter 1 3 Following prompts are displayed Download procedureLoad Modes Load Mode DescriptionConfiguration is uploaded to the host Host Enter 1 3 Following message is displayed Fabric Modules Managing SwitchModule Status Switch Fabric Module Parameters Switch Fabric Module ParametersName Description Enter 1 4 Following prompt is displayed Switch is rebooted and the following messages are displayedFabric Module Command Actions Reset Standby Switch Reset the standby switch fabric moduleEnter 1 4 3 Following prompt is displayed Mode Command Actions Direct access sequence 1 4 3 3 Interface Modules ConfiguringDisplay Interface Module InformationExample for the 16-slot chassis and 7-slot chassis Interface Module Slot Occupancy ParametersSlot ID Parameters Parameter DescriptionInterface Parameters Interface Card ParametersOC3-SC Selected ports are set and saved Enter 1 5 3 5.1.1 Following messages are displayedEnter 1 5 4 1.1.2 Following message is displayed Clock operational mode of port 1.1.2 is set to loop timingEnter 1 5 5 1.1.2 Following messages are displayed Loop mode of port 1.1.2 is set to Loop backInterface card was reset RST Reset Interface CardEnter 1 5 6 Following prompt is displayed IFC Interface CardsEnter System is logged out Logging Out and RebootingParameter Format or Range Confirm reboot Reboot Reboot the system Command ActionsReboots the ATM Enterprise Switch Enter 1 Following prompt is displayedDirect access sequence 1 Display ATM Features ATM FeaturesSoftware Versions Latest software version numbers Display Lecs ATM Address Update Lecs ATM Address LCS Lecs Setup SLE LE SetupSLA Set Active Lecs ATM Addr Active Lecs addraddressSwitch Clock Source Setting UpGet Clock Source StatusCannot be used as an external clock source port SourceSP2 Set External Clock Source Enter 1 8 Following prompt is displayed Internal Command ActionsIlmi Setup VER Ilmi Version Setup IME Ilmi SetupGET Get Ilmi Version Ilmi version is 3.0/3.1/4.0Ilmi version is reconfigured Ilmi version of port 3.1.2 is updated toExample Enter SET Set & Save Ilmi VersionEnter 1 1 8 2 1 Auto-configuration status of port 3.1.2 is enabled AUD Auto-Discovery Setup SET Set & Save Auto-Discovery Lecs via Ilmi is ENABLED/DISABLED MIB Ilmi MIB View SetupGET Get Lecs via Ilmi ON/OFF StatusLECS-via-ILMI status of port 3.1.2 is enabled Enter 1 1 8 4 1 8 4 VPI/VCI = 0/16 is periodically polled for connectivity Enter 1 1 8 4 4 3.1.2 Display User ATM Addresses PortAddresses at Port Enter the menu sequence 3 CON Connections Enter 3 1 1 UME Parameters Describes the UME parameters displayed by the commandUME Parameters ADD Get ATM Addresses CON ConnectionsSTC Get Static and NNI Addresses At PortParameters Describes the parameters displayed by the commandPort Command Actions Parameters Enter 3 4 2 1 STP Static ATM Addresses Setup C Setup of Connections and ATMAddresses ADD Add ATM AddressATM address member n was deleted from DEL Delete ATM AddressPort Enter 3 4 2 4 Enter 3 4 2 Following prompt is displayed Display Network Network PrefixPrefix Managing Network Interfaces Signaling Setup Signaling Timers Configuring Virtual ChannelsConfiguring Virtual Channels RTG Routing CLL Calls Example Display Info for a Specific SVC Call Example Display all SVC Calls for an ATM address memberTwo additional destinations Example Display all PVC Calls for a PortWith two additional destinations Call Parameters Shows the call parameters displayed by the commandCall Parameters Display Port Connections Example Display all Connections at a Port Port SVC Connection Parameters Example Display Info for a Connection at a PortPort SVC Connection Parameters PRT ATM ports Port Static Connection Parameters Port Static Connection ParametersConnections Command Actions Create Permanent Virtual Channel PVC Enter 3 4 1 Following information is displayed Create Permanent Virtual Channel PVC Direct access sequence 3 4 1 2 parameters Full PVC Call Parameters Enter 3 4 1 3 p2p 5.1.1 0 37 5.1.2 0 You cannot add an additional PVC destination to a P2P PVC You cannot release SVCs with this menu Parameter Example Enter 3 4 GEP Display PVCs PVC PVCs SetupFollowing prompt appears Enter y to confirm, n to cancel Following message appearsAll inactive PVCs are deleted from the flash memory All PVCs of the specific port are deleted Connections of Port Command ActionsDisplay Maximum NNI Hops SetupNNI Hops Maximum NNI Hops parameter is updated to Signaling Setup VCC VPI/VCI range setup SIG Signaling SetupGET Get VPI/VCI range Following information is displayed for an OC-12c port Following information is displayed for an OC-3c portInformation, see Display VPI/VCI Range on Maximum VPI for port 3.1.2 is updated to Protocol Profile Enter 1 1 4 5 Enter 1 1 4 5 2 3.1.2 Following information is displayed Protocol Version Parameters Protocol Version ParametersEnter 1 1 4 5 4 3.1.2 Display the value of the call-proceeding enable value Display Call-Proceeding Enable ValueEnter 1 1 Following message appears Enable Value Command ActionsEnter 1 1 4 Following prompt appears Enter Y to confirm, N to cancelHalf. For more information, see Timer Resolution on page 98 Protocol timersResponse is overdue Enter 1 1 4 1 RES Timer Resolution setup Timer resolution is updated to 250 msec and saved to flashSET Set Timer Resolution Timer resolution was successfully set4 2 parameters Parameter Format or Range Port number Slot.group.portDisplayed in seconds Enter 1 1 4 2 Shows the Sscop Timers displayed by the command Sscop TimersSscop Timers QSA Get Signaling QsaalSscop Configuration Parameters Sscop Configuration ParametersEnter 1 1 4 4 Configuring Virtual Channels Statistics Physical LayerEnter 4 1 1 Statistic Physical Layer StatisticsPhysical statistics are reset for port Statistics Command ActionsATM-Layer Statistics Reset Counters Per Port Reset Counters Per VPI/VCIEnter 4 2 Following information is displayed Example Enter 4 2 Following information is displayed Enter 4 2 3 1.1.1 3 RPR Reset counters per port ATM Counters for the specified port are reset toReset ATM counters completed ATM ATM layerPerform menu item 3CON\2RTG\1CLL to Counters are resetAAL5-Layer Statistics Display AAL-Layer Statistics Reset AAL-Layer StatisticsYou can display the following AAL5-layer statistics SAR Counters Enter 4 3 Following information is displayedEnter 4 3 Following message is displayed You can display the following AAL5 control statistics AAL5 Control Frame Port StatisticsEnter 4 4 1 AAL5-layer control statistics are reset for port Port Statistics Command ActionsYou can display the following signaling statistics Signaling Protocol StatisticsEnter 4 5 1 Signaling statistics are reset for port Counters Command ActionsViewing Statistics Managing LAN Emulation Learp Policy Configuration LEC OperationsLAN Emulation Services SetupStatus Command Actions 5 1 LE service status will be Disabled on the next reboot Direct access sequence 1 1 5 2 Lecs service status is set for the next reboot Lecs is disabled LAN Emulation Redundancy Setup Enter 1 1 5 3 Lecs is entered into the LECS-order database SYS Platform configLOL Lecs ordered list AOL Add to Lecs ordered listDOL Del from Lecs ordered list Lecs with index 2 is removed from the LECS-order databaseRedundant Lecs deleted LES Redundancy Parameters LES Redundancy ParametersRDN LE Service redundancy setup Redundant Lane Services on page 137 in the Operations GuideLRM Change LE Service Redundancy ModeStartup delay LRD Set LE Service redundancyStartup Delay Changed 600Version Command Actions Get Switch LaneLane Version Not to a specific ElanThat join after the change Lane version of the switch is changedParameter Format or Range Lane version Configuration Command Actions ConfigurationMpoa Devices Display Current MPSDescribes the Mpoa Server configuration parameters Mpoa Server Configuration ParametersMpoa Server Configuration Parameters Variable Name DescriptionEnter 2 5 1 2 Set Keep-AliveSets the MPS-p2 keep-alive lifetime parameter Lifetime Command ActionsSet Internetwork Sets the MPS-p3 protocols parameter Layer Protocols Command ActionsParameter Format or Range Internetwork-layer ProtocolsMPS Mpoa Server Configuration MPA Mpoa Devices ConfigurationLEM LAN Emulation MP4 Set initial retry timeSet Retry Time Sets the MPS-p5 retry time maximum parameter Maximum Command ActionsMP5 Set retry time maximum 10 300 secondsSet Give Up Time Sets the MPS-p6 give-up time parameter MP7 Set default holding time Time Command ActionsEnter 2 5 2 Following information is displayed Describes the Mpoa Client configuration parameters Mpoa Client Configuration ParametersMpoa Client Configuration Parameters MPC Mpoa Client Configuration Frame Count Command ActionsFrame Time Command Actions Parameter Format or Range Flow detection protocols Protocols Command ActionsFlow detection protocols parameter is set Command Result Set Retry Time Sets the MPC-p5 retry time maximum parameter MP6 Set hold down time Set Hold Down Time Sets the MPS-p6 hold down time parameter30 1200 seconds Update Resident Lecs Address You can configure the resident Lecs address as followsLecs Address Display Resident Lecs AddressAddress Command Actions Resident Lecs address is updated Bytes. The update takes place immediatelyLCS LE Config Service LSP Set resident Lecs addrCommand Actions Enter 2 1 Search policy of the resident Lecs is displayed Database Operations Lecs ElanDescribes the Elan LES parameters Elan LES ParametersElan LES Parameters LCS LE Configuration Service Database Command ActionsLNT Lecs network topology LEP Display Elan type & paramsElan Parameters in Lecs Database Database that you can updateDescribes the Elan parameters in the Lecs database Elan Parameters in Lecs DatabaseEnter 2 1 5 3 elan6914 1 MAC MAC Addresses Info Addresses Command ActionsMAD Display all MAC addresses Specified MAC address is deleted from the Elan Delete Elan MAC Delete a MAC address inserted from an ElanMAC MAC Address Info DEL Delete MAC AddressConsole responds with the confirmation AAD Display all ATM addresses ATM ATM Address InfoATM ATM Addresses Info Specified ATM address is deleted from the ElanATM address was deleted for this elan System responds with the confirmation New elan was added ANE Add new Elan recordEnter 2 1 5 DEL Delete Elan recor d Confirmation message is displayedElan record was deleted You cannot assign a segment ID to a non-token ring Elan Segment id has been updatedSegment ID is added to the Lecs database SEG Edit segment id C23, forDescribes the signaling statistics parameters Signaling Statistics ParametersLecs Statistics Parameters Describes the Lecs statistics parametersEnter 2 1 Lecs database statistics are displayed Enter 2 1 Following prompt is displayed Shows how many LECs the Lecs database may contain Display Lecs Maximum Connection NumberEnter 2 1 8 Following message is displayed Sets the number of LECs the Lecs database may contain Update Lecs Maximum Connection NumberNumber of Lecs ConnectionsLAN Emulation Redundancy ALS Add redundant LES to RDN LE Service redundancyElan Redundant LES successfully addedEnter 2 1 5 9 2 elan739 FEP Force Elan to Primary Enter 2 1 5 9 3 elan739 Display general information about redundant ELANs Display Redundant ELANs General InformationDescribes the ELANs general parameters Redundant ELANs General ParametersRedundant ELANs General Parameters Display specific information about Redundant ELANs Display Redundant ELANs Specific InformationDescribes the ELANs specific parameters Redundant ELANs Specific ParametersRedundant ELANs Specific Parameters Display general information on a redundant LES LES General Command Actions InformationRedundant LES General Parameters Describes the redundant LES general parametersEnter 2 1 Following information is displayed LES Specific Information Command ActionsLES Update Elan LES-BUS Address You can configure the LES address, as followsDisplay LES-BUS Addresses Display LES-BUSEnter 2 2 Following information is displayed Enter 2 2 3 1 1 2 c0.da.60 .49 Direct access sequence 2 2 Enter 2 2 Following information is displayed Describes the Elan parameters for resident LESs Elan Parameters for Resident LESsElan #4 is of Token Ring type Elan Parameters for Resident LESsDatabase Describes the Elan parameters that can be updated Parameters of the Elan with ID 14 are updatedElan Parameters for a LES Elan Parameters for a LESDisplay Elan Response Policy Learp Policy ConfigurationDescribes the Elan response policies Elan Response PoliciesElan Response Policies Enter 2 2 Following messages are displayed Possible Learp policies Describes the Learp verification policies Learp Verification PoliciesLearp policies Learp Verification PoliciesEnter 2 2 3 1 5 2 Managing LAN Emulation Learp Policies for Route Descriptor Example Enter 2 2Describes the Learp policies for the route descriptor Learp Policies for Route DescriptorEnter 2 2 3 1 7 2 Following prompt appear Response policy, and Learp response policiesDirect access sequence 2 2 3 1 Update the Lane multicast forward delay parameter Update Lane Multicast Forward DelayLane multicast forward delay time is updated Enter 2 2 Following message appearsDisplay LEC LEC OperationsConnection Info LEC Connection Information LEC Connection Information ParametersADD Clients MAC Addresses Lecid Display LAN Emulation Statistics Command ActionsEnter 2 2 3 4 1 Enter 2 2 3 4 2 2 Describes the LEC statistics parameters LEC StatisticsLEC Statistics NameDescriptionRES Reset General LE LES LE ServicesELN ELANs Information StatisticsEnter 2 2 3 Following message is displayed DSL Destroy specific LEC Enter 2 2 5 Following prompt appears Enter Y to confirm, N to cancel the reset requestManaging LAN Emulation LEC Elan Admission Security Enter 2 3 1 1 Enter 2 3 1 2 1 Security List LECs in ElanSecurity List Enter 2 3 2 1 Session Command to initialize the Elan security list Enter 2 3 2 4 1 47.0.0.0.0.0.3c.0.0.a0 Enter Y to continue, N to cancel Enter 2 3 2 6 1 CHK Perform a security check Display Switch Switch SecuritySecurity Status Command Actions SWS Switch security SEC LE Security ConfigurationSST Set switch security state Security on switch now EnabledSave Security Restore Security ConfigurationSave Security Direct access sequence 2 3 LEC Elan Admission Security Pnni Configuring the Route Cache Showing Pnni InformationViewing Following command allows you to view the current Pnni stateCurrent Pnni State Display PNNI/E-IISP StateNodes Configuring PnniEnter 1 1 9 4 1 State Operations Guide for more information on E.164 Enter 1 1 Following message is displayed 196 in the Operations Guide for more information on E.164Enter 1 1 9 4 3 1 Enter 1 1 9 4 3 2 Pnni node administrative status is set to UP To UP Command ActionsPnni node administrative status is set to Down To Down reboot Command ActionsPDB Purge whole Pnni Enter 1 1 9 4 3 3 1 Node level of node 1 is set to Following message is 7displayed3 3 2 Default ATM address takes place after the next reboot 9 4 3 3 2 3 parameters Address is updated to its new value 9 4 3 3 3 3 3 3 9 4 3 3 4 3 3 4 SID Set Node ID Node ID is updated to its new value 3 3 5 Name of the node is updated to 3Com World 9 4 3 3 6 9 4 3 3 6 2 parameters Configuring and Managing Pnni 9 4 3 4 1 parameters 9 4 3 4 2 parameters 9 4 3 4 3 parameters 9 4 3 4 4 parameters 9 4 3 4 5 parameters 9 4 3 4 6 parameters Interval takes place after the next reboot 9 4 3 4 8 parameters 9 4 3 4 9 parameters 9 4 3 4 10 parameters 9 4 3 4 11 parameters 9 4 3 4 12 parameters 9 4 3 4 13 parameters Enter 1 1 9 4 3 4 14 Enter 1 1 9 4 3 4 15 Enter 1 1 9 4 3 4 16 All the timers are set to the default values Default Values Command ActionsSetting Optimization Metrics Optimization Metrics Table Parameters Classes of ServiceValue Description Optimization ValuesValue of the CBR optimization parameter is updated Value of the RealTime-VBR optimization parameter is updated 9 4 3 5 2 3 parameters 9 4 3 5 2 4 parameters Value of the UBR optimization parameter is updated to All Classes to Default Command Actions Parameter Format or Range Port number Slot.subslot.port Select Port for Interface Parameter SettingConfiguring and Managing Pnni 9 4 4 2 1 parameters Weight bit rate service category 9 4 4 2 3 parameters 9 4 4 2 4 parameters 9 4 4 2 5 parameters Weight unspecified bit rate service category 9 4 4 2 To Default Values Command Actions Scope Mapping Table Parameters Managing Scope MappingScope Mapping Table Parameters Pnni ScopePnniScopeLocalNetworkPlusTwo Enter 1 1 Following information is displayed MST Modify Scope Mapping Hierarchical level of pnniScopeGlobal is updated to After the next reboot Get Cache State Configuring the Route CacheSCS Set Cache State Will continue to be used when an ADD Party route is added 11 1 9 10 4 6 After this number of calls, the cache will be refreshed 9 4 6 6 parameters Showing Pnni Following commands allow you to display Ptse and other PnniInformation Display All PTSEsPtse Table Parameters Node Topology Link Section Ptse Table ParametersPtse Table Parameters Node Address Section Ptse Table Parameters Statistics Section Enter 1 1 9 4 7 Node Ptse Table Parameters Information Command ActionsExample Topology Link Ptse Table Parameters Example Summary Address Table Parameters Address Table Command ActionsNode Address Ptse Table Parameters Example Peer Group Leader Table Parameters Peer Group Leader Table ParametersEnter 1 1 Following information is displayed Peer Group Neighbor Table Parameters Neighbor Information Command ActionsStatistics Table Parameters Information node is up Command ActionsPhysical SafetyEnvironmental Electromagnetic Compatibility ConnectorsStandards Supported Interface LEDsMenu Index Management Setup165 164180 182173 171174 176112 137113 114101 102107 108250 249251 253267 266280 283286 310311 314229 228230 231153 151156 157201 199202 204332 330333 334353 352354 355377 375378 379399 398400 401Appendix B Menu Index Services ServicesOnline Technical 3ComUsername anonymous Access by Analog ModemHours a day, 7 days a week Country Data Rate Telephone Number847 262 Access by Digital Modem408 727 Country Telephone Number Asia, Pacific Rim Europe, South Africa, and Middle EastCountry Telephone Number Fax Number Appendix C Technical Support Module GlossaryApplication LMA Software LEDSoftware Error LED Indicator LEDModule Status LED MultiplexingGlossary Numbers IndexCall admission control 28 call-proceeding enable value Efci site marking 28 Elan emulated LAN Learp MIB II Pnni Ptse Storage humidity 421 subnet mask configuration Displaying 66 write-access password updating Index 3Com Corporation Limited Warranty Additional Services
Related manuals
Manual 52 pages 35.68 Kb