Manuals / 3Com / Computer Equipment / Tablet

3Com 5112M-TPLS Link Integrity, Module Security, Installing and Operating the Module 3

Models: 5112M-TPLS

1 108

Download 108 pages 10.66 Kb

Page 51

If you set up redundancy between a secure port and a non-secure port (whether on a Security Module port or other module port), a warning message is displayed to terminal management. The warning informs you that this configuration has the potential to automatically cause a change in security when the primary port fails and the secondary port becomes activated.

Link Integrity

In general, enable Link Integrity for the Security Module to conform to the10BASE-T standard. Disable Link Integrity to connect to older equipment that does not conform to the 10BASE-T standard.

Enable Link integrity at both ends or disable Link Integrity at both ends of the connection. If one end of the connection is different, the module with Link Integrity enabled reports a Link Integrity error.

If you enable a port and disable Link Integrity, the Status LED for that port is on for 10 seconds and blinks off for 400 msecs to indicate that Link Integrity is disabled.

Enter the following management command to enable Link Integrity for all ports on the Ethernet module in slot 5.

ONline> set port 5.all link_integrity enable [ENTER]

Module Security

The Module Security DIP switch allows you to enable or disable security for the module. 3Com recommends that you leave this switch in its factory default setting (Off). This setting ensures that in the unlikely event of a concurrent failure of both the master management module and concentrator power, the Security Module ports will power up with ports disabled in a concentrator without network management.

Note: When the Security switch is set to enabled, port mode is set to disabled. Conversely, when the Security switch is set to disabled, port mode is set to enabled.

Installing and Operating the Module 3 - 15

Image 51

3Com 5112M-TPLS installation and operation guide Link Integrity, Module Security, Installing and Operating the Module 3

Contents

ONline 10BASE-T Security Module Installation and Operation Guide Document Number Printed February Model Number 5112M-TPLS3Com Corporation 118 Turnpike Road Southborough, MA U.S.A 508 FAX 508 VDE Class B Compliance ii ONline 10BASE-T Security Module Installation and Operation GuideFederal Communications Commission Notice Canadian Emissions RequirementsRestricted Rights ONline 10BASE-T Security Module Installation and Operation Guideiv ONline 10BASE-T Security Module Installation and Operation Guide Contents How to Use This GuideChapter 1 - Introduction Chapter 2 - Designing and Expanding the NetworkPrecautionary Procedures Quick Installation Chart Chapter 3 - Installing and Operating the ModuleChapter 4 - Configuring Security Features vi ONline 10BASE-T Security Module Installation and Operation GuideChapter 5 - Troubleshooting Appendix A - SpecificationsONline 10BASE-T Security Module Installation and Operation Guide viii ONline 10BASE-T Security Module Installation and Operation Guide Appendix B - Technical SupportIndex ONline 10BASE-T Security Module Installation and Operation Guide Figuresx ONline 10BASE-T Security Module Installation and Operation Guide ONline 10BASE-T Security Module Installation and Operation Guide TablesPage How to Use This Guide AudienceONline 10BASE-T Security Module Installation and Operation Guide Structure of This Guide xiv ONline 10BASE-T Security Module Installation and Operation GuideExample Document ConventionsConvention IndicatesA Warning. A xvi ONline 10BASE-T Security Module Installation and Operation GuideRelated Documents A Caution. AONline 10BASE-T Security Module Installation and Operation Guide 6-Slot ONline System Concentrator Installation and Operation3Com Documents Reference DocumentsPage 1 Introduction The ONline 10BASE-T Security ModuleIntroduction 1 Application Theory of OperationONline Management Figure 1-1. ONline 10BASE-T Security Module ApplicationIntroduction 1 Page 2 Designing and Expanding the Network Designing and Expanding the Network 2Basic Network Rules Understanding the General RulesTable 2-1. Seven Basic Network Rules RuleDefinition Recommendations/NotesRule Many LAN products delay the signalevery microsecond delay shrinks the Table 2-1. Seven Basic Network Rules ContinuedThe fiber link distances RuleDefinition Recommendations/NotesTable 2-2. LAN Product Equivalent Distances LAN EquivalenceLAN Product Equivalent FiberEquivalent Fiber Fiber Backbone, Twisted Pair To-The-DeskTable 2-2. LAN Product Equivalent Distances Continued LAN ProductFiber Backbone, Twisted Pair To-The-Desk Example Designing and Expanding the Network 2 Figure 2-1. Sample Configuration Distance CalculationTable 2-3. Maximum Link Distance on Twisted Pair Twisted Pair Backbone, Twisted Pair To-The-DeskCable Gauge Supports Link Distances Up ToPatch Panels Figure 2-2. Unshielded Twisted Pair NetworkDesigning and Expanding the Network 2 Figure 2-3. Redundant Twisted Pair Configuration Redundant LinksDesigning and Expanding the Network 2 To set link redundancy between two Security ModulesPage Installing and Operating the Module 3 3 Installing and Operating the ModuleUnpacking Procedures Precautionary ProceduresQuick Installation Chart ProcedureVerification Installing the ModuleConfiguring the Module LED and NetworkUnpacking Procedures Setting the Dip Switch Figure 3-1. Security Module Dip Switch SW1 LocationInstalling and Operating the Module 3 Table 3-2. DIP Switch SW1 Network Selection Settings SwitchSwitch Settings Network SelectionOff On SettingFunction FactoryInstalling the Cable Tie-Wrap Kit Installing the Module3. Insert the tie-wrap through the opening on the tie-wrap bracket To install the tie-wrap kitInstalling and Operating the Module 3 Figure 3-2. Attaching the Tie-Wrap Bracket to the ModuleCaution Do not fasten the tie-wrap around the module ejectors Figure 3-3. Attaching Cables With 90 ConnectorsInstalling the Module Figure 3-4. Installing an ONline 10BASE-T Security ModuleInstalling and Operating the Module 3 Figure 3-5. ONline 10BASE-T Security Module Cable Connection Installing and Operating the Module 3 Configuring the ModuleONline set port 3.all mode enable ENTER Port EnableNetwork Assignment Port RedundancyONline set port 5.all linkintegrity enable ENTER Link IntegrityModule Security Installing and Operating the Module 3Saving Module Configurations Reverting Module ConfigurationsAutopartition Threshold Installing and Operating the Module 3 Showing Module ConfigurationsMonitoring the Front Panel Figure 3-6. Security Module Faceplate Installing and Operating the Module 3Table 3-4. Interpretation of the Security Module LEDs ColorState NameInstalling and Operating the Module 3 Network ConfigurationLED and Network Verification LED StatePage Configuring Security Features 4 4 Configuring Security FeaturesProcedure Quick Reference for Configuring SecurityCommand Table 4-1. Quick Reference for Configuring the Security Module4. Initiate Autolearning to ProcedureCommand Configuring Security FeaturesEavesdropping Security Configuring Security FeaturesIntrusion Detection Configuring Security Features 4Figure 4-1. Example of Eavesdropping Security Figure 4-2. Example of Intrusion Detection Defining Port Security TypeConfiguring Security Features Defining Port Action on IntrusionConfiguring Autolearning Mask Enabling PortsONline set security autolearn 3.all mask disable ENTER Configuring Security Features 4 Configuring Autolearning6. Upon completion of Autolearning, the following message is displayed ONline set security autolearn 3.1 macaddress 08-54-6f-01-32-08 ENTER Defining a MAC Address ManuallyConfiguring Security Features 4 ONline set security port 3.1 macaddress 08-54-6f-01-32-08 ENTERAutolearn download done downloaded y addresses total Downloading the Autolearning DatabaseONline set security autolearn 3.1 download ENTER Note overwriting existing addresses in the Security databaseConfiguring Security Features 4 Configuring Security ModeShowing Security Configurations Saving Security ConfigurationsReverting Security Configurations Configuring Security Features 4 Showing Port ConfigurationsPage Configuring Security Features 4 Showing Security AutolearnShowing Security Intruder List Clearing Security Configurations Clearing the MAC Address TableConfiguring Security Features 4 ONline clear security intruderlist ENTER Intruder List cleared Clearing the Autolearning DatabaseClearing the Security Intruder List ONline clear security autolearn 3.1 macaddress all ENTERUsing 3Com MIB Security Variables EMM Security SNMP VariablesConfiguring Security Features 4 Using the Security Module SNMP Variables Configuring Security Features 4 Page 5 Troubleshooting TroubleshootingTroubleshooting 5 Indication Troubleshooting Using the Status LEDsTroubleshooting ProblemLED State TroubleshootingProblem Troubleshooting 5Table 5-2. Troubleshooting Using the Activity LEDs Troubleshooting Using the Activity LEDsPossible Problem Troubleshooting SolutionsTroubleshooting 5 Technical AssistancePage A Specifications Electrical SpecificationsSpecifications A Environmental Specifications Mechanical SpecificationsGeneral Specifications Specifications A 50-Pin Connector and CableFigure A-1. 50-Pin Cable Male and Female Connectors Polarity Transceiver Port #Port # Twisted Pair Connectors and CablesTrans TransTwisted Pair Connectors Figure A-2. RJ-45 Connector PinoutsSpecifications A Twisted Pair Cables B Technical Support On-line Technical SupportTechnical Support B Support from Your Network Supplier Email Technical SupportWorld Wide Web Site Technical Support B Support from 3ComReturning Products for Repair Accessing the 3Com MIBTechnical Support B 3Com Technical PublicationsPage Numerics IndexIndex 2 Index Index 4 Index Wiring Closet, A-8 Unpacking Procedures Unshielded Twisted Pair CableUnshielded Twisted Pair Network Sample Configuration Uploading Security Configurations