Enterasys Networks 7S4280-19-SYS, 2S4082-25-SYS manual Layer 2 In-Band Management Topology

Page 72

General Management Considerations

–The NAC Controller Engine management IP address is used for management traffic generated from the NAC Controller Engine, and the NAC Controller Engine remediation IP address used to run the remediation web server.

–The NAC Controller Engine remediation IP address, mask, and default gateway must belong to the subnet that spans the downstream and upstream routers.

–The NAC Controller Engine management IP address along with a mask is assigned to the 10/100 Ethernet port. Therefore, the 10/100 Ethernet port must be connected into the topology with a separate physical link onto the management VLAN. No default gateway is assigned to the management IP address.

–The NAC Controller Engine management IP address and NAC Controller PEP IP addresses, masks, and gateway must be part of the same subnet, and not on the subnet that spans the upstream and downstream routers which carries data traffic.

–A management VLAN ID must be specified. All management traffic sourced from the NAC Controller PEP egresses the upstream and downstream ports of the NAC Controller tagged to the management VLAN. Therefore, the upstream and downstream routers must be configured to 802.1Q VLAN trunk the management VLAN to the NAC Controller.

–The NetSight management server IP address should be configured on the same subnet as the NAC Controller Engine and NAC Controller PEP IP addresses. Otherwise, management traffic sourced from the NAC Controller Engine and NAC Controller PEP will traverse the data VLAN on the way to the NetSight management server.

See Figure 6‐4 on page 6‐5 for a diagram of layer 2 Out‐Of‐Band management and Figure 6‐6 on page 6‐6 for a diagram of layer 3 Out‐Of‐Band management

Figure 6-3 Layer 2 In-Band Management Topology

6-4 Initializing the NAC Controller

Image 72

Contents Enterasys Page Page Regulatory Compliance Information Electromagnetic Compatibility EMC Supplement to Product Instructions Vcci Notice Enterasys NETWORKS, INC. Firmware License Agreement Vii Viii Contents NAC Controller PEP Installation TroubleshootingAppendix a Specifications and Regulatory Compliance Initializing the NAC ControllerIndex FiguresTables MGBIC-08 Xiv How to Use This Guide About This GuideWho Should Use This Guide Related Documents For Refer toTypographical Conventions Commonly Used AcronymsGetting Help Introduction OverviewN1-7C111 Chassis NAC Controller PEPOverview 2S4082-25 NAC Controller PEP 2S4082-25 NAC Controller PEP7S4280-19 NAC Controller PEP 7S4280-19 NAC Controller PEPRedundant Power Supplies Power Supply Lanview LEDsPower Supply Status Through System Management Auto-Ranging Power SuppliesLanview Diagnostic LEDs Secure Networks Policy SupportStandards Compatibility Standalone or Rack Mountable ChassisLanview Diagnostic LEDs Introduction Installation Requirements and Guidelines Site GuidelinesConfiguration Guidelines Power Supply LEDsPower Supply PS LED Status Definitions Lanview LEDsNAC Controller PEP Network Requirements Fan LEDFan LED States and Definitions LED Color StatusLink Aggregation 10BASE-T Network100BASE-TX Network 1000BASE-T Network1000BASE-SX/LX/ELX Network Page Enterasys Matrix N1 Chassis Setup Unpacking the Enterasys Matrix N1 ChassisSetting Up the Enterasys Matrix N1 Chassis Installing the Chassis on a Flat SurfaceOrder of Installation QuantityInstalling the Chassis into a Rack Installing the Rubber FeetInstalling the Chassis on the Rack Shelf Installing the Chassis Directly to the Rack Attaching the Electrostatic Discharge Wrist StrapPowering Up a Enterasys Matrix N1 Chassis ESD Grounding ReceptacleConnecting the 15-Amp AC Power Cords Cooling FansNAC Controller PEP Installation Required ToolsUnpacking the NAC Controller PEP Important NoticeInstalling Optional Mini-GBICs Contents of Module Carton QuantityInstallation Mini-GBIC with LC Connector Installing NAC Controller PEP into the Matrix N1 Chassis Removing the Mini-GBICInstallation PreparationConnecting to the Network Connecting UTP Cables to the 2S4082-25N1 Chassis slot Metal back panel FTM2 backplane connectors NAC Controller PEP cardConnecting a Twisted Pair Segment to the NAC Controller PEP RJ45 connector RJ45 port connector port Group Select buttonRX+ TX1+ RX1 TX2+ TX3+ RX3 RX2 TX4+ RX4 Connecting Fiber-Optic Cables to Mini-GBICs 10 Cable Connection to MT-RJ Fiber-Optic Connectors 11 Cable Connection to LC Fiber-Optic Connectors Connecting to COM Port for Local Management What Is NeededConnecting to an IBM PC or Compatible Device Parameter SettingConnecting to a VT Series Terminal 12 Connecting an IBM PC or CompatibleConnecting to a Modem 13 Connecting a VT Series TerminalAdapter Wiring and Signal Assignments COM Port Adapter Wiring and Signal DiagramRJ45 Completing the Installation VT Series Port Adapter Wiring and Signal DiagramModem Port Adapter Wiring and Signal Diagram RJ45 DB25First-Time Log-In Using a Console Port Connection 15 Matrix DFE Startup Screen Example N7 Chassis Troubleshooting Using LanviewAbout the Management Mgmt LED Viewing the Receive and Transmit ActivityLanview LEDs for the 2S4082-25 Lanview LEDs for the 7S4280-19Lanview LEDs Color State Recommended ActionAlternating 67% on, 33% off Troubleshooting Checklist Series Configuration Guide for proper setupTroubleshooting Checklist Problem Possible Cause Recommended ActionOverview of the NAC Controller PEP Shutdown Procedure OFFLINE/RESET Switch for the 2S4082-25Recommended Shutdown Procedure Last Resort Shutdown ProcedurePage Initializing the NAC Controller NAC Controller Ports General Management Considerations Layer 3 NAC Controller PositioningLayer 2 In-Band Management Topology Layer 2 Out-Of-Band Management Topology Preparation for NAC Controller Initialization Layer 3 Out-Of-Band ManagementNAC Controller Initialization Procedure Choose NAC Controller Installation TypeEnter the Management Vlan ID NAC Controller Initialization Procedure 12 Setup NAC Controller PEP Networking 13 Enter NetSight Server IP Address 16 Configure System Date and Time 17 Set the System Date 19 Select the UTC/Local Hardware Clock Setting 21 Enable an Snmp Daemon NAC Controller Policy Configuration Setup the Vlan ConfigurationsNAC Controllers Require Separate Domains 24 Determining NAC Controller Mode of Operation Modifying NAC Controllers Preconfigured Policy 25 Import From Device Wizard26 Import From Device Wizard 28 Services Screen Adding Assessment Classification RulesModifying the Downstream Default Policy Page Specifications and Regulatory Compliance 7C111 Chassis Specifications and Regulatory CompliancePhysical Specifications Table A-1 Chassis Specifications PhysicalPower Supply Environmental RequirementsRegulatory Requirements NAC Controller Engine Interface Specifications Table A-5 NAC Controller Engine Specifications PortsExternal Power Supply Processor/MemoryTable A-5 NAC Controller Engine Specifications Table A-6 COM Port Pin Assignments Signal Name Input/OutputNAC Controller Engine COM Port Pinout Assignments EnvironmentalNAC Controller PEP 2S4082-25 Module Specifications Table A-7 Specifications for 2S4082-25Ports Processors/MemoryNAC Controller PEP 7S4280-19 Specifications Table A-8 COM Port Pin Assignments Signal Name Input/OutputTable A-9 Specifications 2S4082-25 COM Port Pinout AssignmentsMini-GBIC Input/Output Specifications Table A-10 Mini-GBIC Input/Output Port Specifications7S4280-19 COM Port Pinout Assignments Gigabit Ethernet Specifications MGBIC-LC01/MGBIC-MT01 Specifications 1000BASE-SXMGBIC-LC03 Specifications 1000BASE-SX MGBIC-LC09 Specifications 1000BASE-LX MGBIC-08 Specifications 1000BASE-ELXMGBIC-02 Specifications 1000BASE-T Table A-20 MGBIC-02 / SpecificationsRegulatory Compliance Table A-21 Compliance StandardsMode Switch Bank Settings Optional Installations Setting the Mode SwitchesMemory Locations and Replacement Procedures Location of Memory ModulesFlash Dimm Replacement Procedure Connector armsConnector fingers Flash DimmInstalling the Dimm Figure B-4 Installing the DimmDram Simm Replacement Procedure Installing the Dram SimmConnector contacts Removing the Dram SimmDram Simm Connector arms Connector contacts Dram Simm alignment notchesIndex NumericsIndex-2