Superstack II Switch Administration Console User Guide
 3Com Corporation 5400 Bayfront Plaza Santa Clara, California
 Contents
 Remote Access Parameters
Administration Console Interface Parameters
Setting Up an IP Interface for Management
Online Help
 Rebooting the System
Setting Passwords
About Setting Baselines
Setting Baselines
 Setting lerAlarm Setting lerCutoff
Setting tmaxLowerBound
Setting the Aging Time
Starting Port Monitoring
 10-7
Setting the Bridge Priority
10-8
10-9
 13-3
Using Groups in Packet Filters Listing Groups
Opcodes A-1
Destination Address Filter A-9
 Support from 3Com
Access by Modem
World Wide Web Site 3ComForum on CompuServe
Returning Products for Repair
 Introduction
About this Guide
Familiarity with communications protocols that are used on
Interconnected LANs
 This Guide
How to Use
Switch 2200. The parts of the guide are described in Table
 This guide
Conventions
 Documents, contact your sales representative for assistance
Switch
Documentation
 Comments
 Introduction
 Configuration Tasks
Administration Overview
About Switch Administration
 Adjust the console screen height for your terminal
General System Commands Task Quick Command For Details, See
 Change the factory default baud rate of the Console port
To the system, or reset nonvolatile data to defaults
 Configurations, and spanning tree configurations
System Management Setup Commands Task Quick Command
Bridging Commands Task Quick Command For Details, See
 12-1 and following
Administer bridge port addresses
Display bridge port information
Set the multicast packet firewall threshold
 9-2 to
Ethernet Commands Task Quick Command For Details, See
A summarized or detailed format
 8-3
Fddi Commands Task Quick Command
 Initial User Access
HOW to USE
Access
Levels of User
 Select access level read, write, administer Password
 Using Menus to Perform Tasks
 System-level Functions Menu Hierarchy for Administer Access
 Bridge Menu
Fddi Menu
 IP Menu
Bridging Menu Hierarchy for Administer Access
 Analyzer Menu
Snmp Menu
 Menu options are not case sensitive
Most abbreviated version of the same command string is
 Entering Values
 Parameters
Adjusting
Console Interface
 Disabling Reboot Abort Keys
 System consoleLock
 Enter the telnet timeout interval 30 minutes to 60 minutes
Running Scripts Administration Console Tasks
Setting Timeout Interval for Remote Sessions
 HOW to USE the Administration Console
 Running Scripts of Administration Console Tasks
 Console
Getting
Help
 To exit from the Administration Console
Exiting returns you to the password prompt
Exiting
There, by pressing the ESC key
 SYSTEM-LEVEL Functions
Page
 Management
Access to the System
About
 Setting Up Console Serial Port
 IP Interface for
Setting Up an
 Broadcast Address
 Broadcast address
Directed all 1s in the host field
Cost Ports All
 Ip interface modify
 Removing an Interface
 Timed out
Gateway IP Address
Timing out
 Defining a Static Route
 Default route is immediately removed from the routing table
 Administering the ARP Cache
 Setting the RIP Mode
 You could receive one of the following responses
Enter the IP address of the station you want to ping
 Statistics are displayed, as shown in this example
Displaying IP Statistics
IP statistics you can view are described in Table
 Community string settings are displayed as shown here
Setting Up Snmp on Your System
Displaying Snmp Settings
 Community string length
Administering Snmp Trap Reporting
 Enter an IP address of the Snmp manager destination address
Configuring Trap Reporting
 Trap address invalid or unreachable
This example shows a trap configuration
 You receive the following prompt
Remote SMT events. On all other Switch 2200s in your network
 Snmp trap smtProxyTraps
 Displaying System Configuration
Example of a Switch 2200 system configuration display
Environment
 Initial passwords
Setting Passwords
 You are prompted for the name of the system
Setting the System Name
Changing the Date and Time
 Rebooting
 You must disable the baseline
About Setting
Baselines
Displaying the Current Baseline
 Baselining is automatically enabled when a baseline is set
Setting Baselines
Enabling or Disabling Baselines
Message similar to the following appears
 Nonvolatile Data
SAVING, RESTORING, and Resetting Nonvolatile Data
Working with
 Saving NV Data
 NV Data
Restoring
Saving the NV data
Restoration rules described here
 System nvData restore
 You are returned to the NV data menu options
Examining a Saved NV Data File
 You see the following prompt
Resetting NV Data to Defaults
 Ethernet and Fddi Parameters
III
Page
 Displaying
Ports
Ethernet Port
Information
 RxDiscards
 Describes the information provided about an Ethernet port
 Layer to receive them or because the port was disabled
Default is enabled
Long and are not configurable
Disabled
 Successfully
Second long and are not configurable
Transmitted successfully
TxPeakByteRate
 There is no buffer space available Frame is in error
 TxFrames Frames delivered to this port
TxDiscards TxQOverflows
 Labeling a Port
Setting the Port State
 Fddi Stations
Administering
Resources
 Can be Thru, Isolated, WrapA, and WrapB
Describes these statistics
ConnectPolicy
This value can be user-defined
 Description of Fields for Fddi Station Attributes TNotify
Defaults for connecting to a Port M
Frames NIF. This value can be user-defined
TraceMaxExp
 Normal tree connection
With defaults for connecting to a Port M
Topology
Node may not go to Thru state in CFM
 Enabling Disabling Status Reporting
Setting Neighbor Notification Timer
 Fddi Paths
 RingLatency
Description of Fields for Fddi Path Attributes MaxTReq
TmaxLowBound
TraceStatus Current Trace status of the path TvxLowBound
 Station, which appears in brackets
To set tvxLowerBound
 Fddi MACs
 Displaying MAC Information
 Administering Fddi MACs
 Describes the information provided for the Fddi MAC
 Description of Fields for Fddi MAC Attributes OldDownstream
Error during reception
Neighbor
OldUpstream
 There is no buffer space available Frame is in error
 Receive Frame Network
 Shows the order in which the discard tests are made
Setting the Frame Error Threshold
 Enter the new threshold value. See the following example
Setting the Not Copied Threshold
 Setting MAC Paths
Enabling Disabling LLC Service
 Displaying Port Information
Administering Fddi Ports
 Describes the type of information provided for an Fddi port
 Setting lerCutoff
 Setting Port Labels
 Fddi port path
 Analysis
Roving Analysis
About Roving
 Receive
Roving Analysis
On a specific system
 Adding an Analyzer Port
 Removing an Analyzer Port
 Monitoring
Starting Port
You can start monitoring port activity
See the example below for starting port monitoring
 Stopping Port Monitoring
 Bridging Parameters
 Information about the bridge is displayed
Displaying Bridge Information
 Each item in the bridge parameter list is described in Table
Following example shows a display of bridge information
 Learning states. The default value is 15 seconds
BridgeFwdDelay
Root. The default value is 2 seconds
ForwardDelay
 Bridge Attributes Parameter Description MaxAge
Default value is disabled
Is determined by the root bridge
Mode
 Disabling IP
Enabling
Fragmentation
Disabling IPX
 Address
Setting
Threshold
Aging Time
 Enabling and Disabling STP on a Bridge
Enter enabled or disabled at the prompt
STP Bridge
 To configure the STP bridge priority
Setting the Bridge Maximum Age
 To configure the forward delay value
Forward delay The recommended value is 15 seconds
 Setting the STP Group Address
 Bridge Port
 Following example shows a bridge port detail display
Following example shows a bridge port summary display
 Port is attached
RxErrorDiscs
DesignatedCost
BPDUs from the designated bridge for that LAN
 Management frames
Bridge Port Attributes Parameter Description RxFrames
RxMcastExcDiscs
Exceeded
 Disabled The port has been disabled by management
Disabled in which the port is currently operating
Bridge Port Attributes Parameter Description State
Blocking The bridge continues to run the Spanning Tree
 Shows the order in which the discard decisions are made
 Multicast packet firewall, see Bridging Extensions
Multicast Limit
You are prompted for port type
 Enabling
STP Bridge Port
Disabling STP
On a Port
 Bridge port stpCost
 Bridge port stpPriority
 Listing Addresses
Administering Port Addresses
 You are prompted for the port number
From the top level of the Administration Console, enter
Enter the number of the port
You are prompted for one or more addresses to add
 Flushing All Addresses
 You are prompted for the port numbers
 Packet Filtering
Packet Filters
 Listing Packet Filters
 Displaying Packet Filters
 Creating and Using Packet Filters
 Describes the instructions and stacks of a packet filter
 Ethernet and Fddi Packet Fields
Basic Elements of a Packet Filter
 PushField
Packet Filter Operands Description Opcode Packet field
Size of the field can be 1, 2, 4, or 6 bytes
Want the filter to examine a 48-bit address Constant
 Accept and Reject Instructions
 Creating Packet Filters 12-9
Preprocessed and Run-time Storage
 Opcode.size operand... # comment
 12-11
 Creating and Using Packet Filters
 # XNS Filtering Section
Pseudocode translates into the following packet filter
 Enter executable instruction #2
Enter executable instruction #1
 Enter executable instruction #4
Enter executable instruction #3
Enter executable instruction #5
Enter executable instruction #6
 Only IP pkts w/in socket range
This combination looks like this
 Add a not statement to discard any matching packets
 Maximum length of a packet filter definition is 4096 bytes
 Being edited
Command are discarded
Delete Previous Ctrl+h
Character One position Delete Current Ctrl+d
 Editing, Checking
Deleting Packet Filters
Saving
Packet Filters
 At the Replace existing filter? prompt
 Bridge packetFilter load
Loading Packet Filters
 Fddi
 Unassigning Packet Filters from Ports
 Using Groups
Configuring Address Port Groups to USE Packet Filters
User-defined Packet Filtering in the SuperStack II Switch
Address and port groups in packet filters
 To list the currently defined groups, enter this command
OR, for port groups, enter the following command
 Displaying Groups
Enter this command
 Creating New Groups
 Address 08-32-45-e3-32-21
Enter the ports in this syntax
 Port Ethernet
 Ports to Groups
Adding
Addresses
 Address 08-37-21-65-78-c4
 To remove an address from a group, enter
Removing Addresses or Ports from a Group
OR, to remove a port from a group, enter
Enter the ports in the syntax
 Address 08-42-21-84-78-f1
 Loading Groups 13-11
 Configuring Address and Port Groups to USE in Packet Filters
 Appendixes
 Opcodes
Packet Filter Opcodes
Opcodes are described in this section
Name name
 Bytes PushLiteral.size value
PushField.size offset
 Byte PushSAGM
PushTop
Byte PushDAGM
Byte
 Byte Eq equal
PushSPGM
Byte PushDPGM
 Byte Le less than or equal to
Ne not equal
Byte Lt less than
 Byte Bit-wise
Gt greater than
Byte Ge greater than or equal to
 Byte Xor bit-wise exclusive-OR
Or bit-wise or
Byte Not
Byte Accept
 Byte Shiftr shift right
Reject
Byte Shiftl shift left
 Packet filter concepts
Packet Filter
Examples
 Address
 XNS
To make a copy of the type field
Page
 Common Syntax
Errors
 Number with a leading 0x or 0X is treated as
Characters of the number
Hexadecimal
Number with a leading 0 is treated as octal
 Variety of services. This appendix describes these services
Services
Online Technical
Through the following online systems
 Press Return to see the 3ComForum main menu
Access by Isdn
 Support from
Maintenance, application training, and support services
Your Network
Supplier
 To find your authorized service provider
U.S. and Canada, call 800 876-3266 for customer service
3Com
Support contracts are available from 3Com
 Index
Address Resolution Protocol. See ARP address threshold
3ComFacts B-3 3ComForum B-2 Abort
ARP cache flushing 3-12 removing entry
 Cost
Multicast limit, setting 11-7 Spanning Tree Enabling
Statistics, displaying 10-1bridge port
 PortState Station MAC addresses 11-11Ethernet address
SRFs 8-2 Connection policies, setting
Fddi path defined
Fddi port
 Enabling Le opcode A-5
Removing from -9, 3-10 status
 On-line technical services B-1opcode
Name opcode A-1 Naming the Switch 2200 4-3ne opcode A-5
Password configuring
Multicast frames Packet filters 12-1multicast limit
 Fddi ports 8-19ping IP station
Broadcast address 3-4default mode 3-12displaying state
Rlogin
 SMT event
Snmp agent Accessing through IP 3-1defined Snmp trap
Sniffing. See roving analysis and analyzer
Port LER Condition Port Path Change
 Defined 8-7 setting
Switch
TOpr Technical support B-1telnet
Packet filter 12-12, 12-14, A-11 xor opcode A-7