Enterasys Networks 7S4280-19-SYS, 2S4082-25-SYS manual NAC Controller Ports

Page 70

Overview

The ports located in the lower rows of the NAC Controller are referred to as ʺdownstream ports,ʺ and connect downlink to infrastructure devices such as access layer switches in the network. The two gigabit Ethernet ports located at the top of the NAC Controller are referred to as ʺupstream ports,ʺ and connect uplink to upstream devices such as core routers. The 10/100 Ethernet port located at the top of the NAC Controller supports management functionality with an Out‐Of‐Band management configuration, as explained below. See Figure 6‐1 for the location of the different NAC Controller port types.

It is important to note that the NAC Controller appliance transparently bridges packets at layer 2 from downstream ports to upstream ports, downstream ports to other downstream ports, upstream ports to downstream ports, and upstream port to other upstream ports. Therefore, it is not necessary to have a 1:1 downstream port to upstream port configuration on the NAC Controller. Furthermore, the traffic enforcement point on the NAC Controller is implemented as traffic ingressed the downstream ports per MAC address or IP address before the traffic is bridged through the NAC Controller to any other port. As a result of traffic sourced from an end system being appropriately filtered (for example: forwarded, discarded, contained to a VLAN, or prioritized) upon ingress to the NAC Controller port before it is bridged, the flow of traffic from each downstream end system is securely controlled to all other devices connected to other upstream and downstream ports on the NAC Controller.

Figure 6-1 NAC Controller Ports

Note: Figure 6-1displays a 2S4082-25-SYS, but NAC Controller ports are in the same location on both systems.

Figure 6‐3 through Figure 6‐6 display the configuration topologies for the four NAC Controller installation types. In each case, upstream ports on the NAC Controller connect to the network core in the direction of where the NetSight management server connects to the network, although it is not necessary to connect the NetSight management server upstream from the NAC Controller. Downstream ports on the NAC Controller connect to the network edge where end systems are connecting.

6-2 Initializing the NAC Controller

Image 70

Contents Enterasys Page Page Regulatory Compliance Information Electromagnetic Compatibility EMC Supplement to Product Instructions Vcci Notice Enterasys NETWORKS, INC. Firmware License Agreement Vii Viii Contents Appendix a Specifications and Regulatory Compliance NAC Controller PEP InstallationTroubleshooting Initializing the NAC ControllerIndex FiguresTables MGBIC-08 Xiv About This Guide How to Use This GuideWho Should Use This Guide Related Documents For Refer toTypographical Conventions Commonly Used AcronymsGetting Help Introduction OverviewN1-7C111 Chassis NAC Controller PEPOverview 2S4082-25 NAC Controller PEP 2S4082-25 NAC Controller PEP7S4280-19 NAC Controller PEP 7S4280-19 NAC Controller PEPPower Supply Status Through System Management Redundant Power SuppliesPower Supply Lanview LEDs Auto-Ranging Power SuppliesStandards Compatibility Lanview Diagnostic LEDsSecure Networks Policy Support Standalone or Rack Mountable ChassisLanview Diagnostic LEDs Introduction Installation Requirements and Guidelines Site GuidelinesPower Supply PS LED Status Definitions Configuration GuidelinesPower Supply LEDs Lanview LEDsFan LED States and Definitions NAC Controller PEP Network RequirementsFan LED LED Color Status100BASE-TX Network Link Aggregation10BASE-T Network 1000BASE-T Network1000BASE-SX/LX/ELX Network Page Enterasys Matrix N1 Chassis Setup Unpacking the Enterasys Matrix N1 ChassisOrder of Installation Setting Up the Enterasys Matrix N1 ChassisInstalling the Chassis on a Flat Surface QuantityInstalling the Rubber Feet Installing the Chassis into a RackInstalling the Chassis on the Rack Shelf Installing the Chassis Directly to the Rack Attaching the Electrostatic Discharge Wrist StrapPowering Up a Enterasys Matrix N1 Chassis ESD Grounding ReceptacleConnecting the 15-Amp AC Power Cords Cooling FansUnpacking the NAC Controller PEP NAC Controller PEP InstallationRequired Tools Important NoticeInstalling Optional Mini-GBICs Contents of Module Carton QuantityInstallation Mini-GBIC with LC Connector Installing NAC Controller PEP into the Matrix N1 Chassis Removing the Mini-GBICInstallation PreparationN1 Chassis slot Metal back panel FTM2 backplane connectors Connecting to the NetworkConnecting UTP Cables to the 2S4082-25 NAC Controller PEP cardConnecting a Twisted Pair Segment to the NAC Controller PEP RJ45 connector RJ45 port connector port Group Select buttonRX+ TX1+ RX1 TX2+ TX3+ RX3 RX2 TX4+ RX4 Connecting Fiber-Optic Cables to Mini-GBICs 10 Cable Connection to MT-RJ Fiber-Optic Connectors 11 Cable Connection to LC Fiber-Optic Connectors Connecting to an IBM PC or Compatible Device Connecting to COM Port for Local ManagementWhat Is Needed Parameter SettingConnecting to a VT Series Terminal 12 Connecting an IBM PC or CompatibleConnecting to a Modem 13 Connecting a VT Series TerminalCOM Port Adapter Wiring and Signal Diagram Adapter Wiring and Signal AssignmentsRJ45 Modem Port Adapter Wiring and Signal Diagram Completing the InstallationVT Series Port Adapter Wiring and Signal Diagram RJ45 DB25First-Time Log-In Using a Console Port Connection 15 Matrix DFE Startup Screen Example N7 Chassis About the Management Mgmt LED TroubleshootingUsing Lanview Viewing the Receive and Transmit ActivityLanview LEDs for the 2S4082-25 Lanview LEDs for the 7S4280-19Color State Recommended Action Lanview LEDsAlternating 67% on, 33% off Troubleshooting Checklist Series Configuration Guide for proper setupTroubleshooting Checklist Problem Possible Cause Recommended ActionOverview of the NAC Controller PEP Shutdown Procedure OFFLINE/RESET Switch for the 2S4082-25Recommended Shutdown Procedure Last Resort Shutdown ProcedurePage Initializing the NAC Controller NAC Controller Ports General Management Considerations Layer 3 NAC Controller PositioningLayer 2 In-Band Management Topology Layer 2 Out-Of-Band Management Topology Preparation for NAC Controller Initialization Layer 3 Out-Of-Band ManagementNAC Controller Initialization Procedure Choose NAC Controller Installation TypeEnter the Management Vlan ID NAC Controller Initialization Procedure 12 Setup NAC Controller PEP Networking 13 Enter NetSight Server IP Address 16 Configure System Date and Time 17 Set the System Date 19 Select the UTC/Local Hardware Clock Setting 21 Enable an Snmp Daemon Setup the Vlan Configurations NAC Controller Policy ConfigurationNAC Controllers Require Separate Domains 24 Determining NAC Controller Mode of Operation Modifying NAC Controllers Preconfigured Policy 25 Import From Device Wizard26 Import From Device Wizard 28 Services Screen Adding Assessment Classification RulesModifying the Downstream Default Policy Page Physical Specifications Specifications and Regulatory Compliance7C111 Chassis Specifications and Regulatory Compliance Table A-1 Chassis Specifications PhysicalEnvironmental Requirements Power SupplyRegulatory Requirements External Power Supply NAC Controller Engine Interface SpecificationsTable A-5 NAC Controller Engine Specifications Ports Processor/MemoryNAC Controller Engine COM Port Pinout Assignments Table A-5 NAC Controller Engine SpecificationsTable A-6 COM Port Pin Assignments Signal Name Input/Output EnvironmentalPorts NAC Controller PEP 2S4082-25 Module SpecificationsTable A-7 Specifications for 2S4082-25 Processors/MemoryTable A-9 Specifications NAC Controller PEP 7S4280-19 SpecificationsTable A-8 COM Port Pin Assignments Signal Name Input/Output 2S4082-25 COM Port Pinout AssignmentsTable A-10 Mini-GBIC Input/Output Port Specifications Mini-GBIC Input/Output Specifications7S4280-19 COM Port Pinout Assignments MGBIC-LC01/MGBIC-MT01 Specifications 1000BASE-SX Gigabit Ethernet SpecificationsMGBIC-LC03 Specifications 1000BASE-SX MGBIC-LC09 Specifications 1000BASE-LX MGBIC-08 Specifications 1000BASE-ELXRegulatory Compliance MGBIC-02 Specifications 1000BASE-TTable A-20 MGBIC-02 / Specifications Table A-21 Compliance StandardsMode Switch Bank Settings Optional Installations Setting the Mode SwitchesMemory Locations and Replacement Procedures Location of Memory ModulesConnector fingers Flash Dimm Replacement ProcedureConnector arms Flash DimmInstalling the Dimm Figure B-4 Installing the DimmConnector contacts Dram Simm Replacement ProcedureInstalling the Dram Simm Removing the Dram SimmDram Simm Connector arms Connector contacts Dram Simm alignment notchesIndex NumericsIndex-2