Manuals / Brands / Computer Equipment / Switch / Compaq / Computer Equipment / Switch

Compaq Interconnect Switch Security Issues, Table 2-1:User Privileges, Root, User+, and User Privileges

1 207

Download 207 pages, 4.66 Mb

Setting Up and Installing the GbE Interconnect Switch

When planning the configuration, consider the default settings for the following parameters:

•Switch IP settings

•VLAN and Group VLAN Registration Protocol (GVRP) settings

•STP settings

•Port names and types

•Multilink trunk settings

•CoS settings

•Interswitch cross-connect settings

•SNMP/RMON settings

•User name and password settings

•Default access to various management interfaces

•IGMP Snooping settings

IMPORTANT: Refer to Appendix C for a complete list of default configuration settings.

Security Issues

When planning the configuration for a GbE Interconnect Switch, to secure access to the management interface:

•Create users with various access levels to the local console, remote Telnet, and Web interface. Refer to Table 2-1 for the three levels of user access privileges.

•Enable or disable access to various management interfaces to fit the security policy.

•Change default SNMP/RMON community strings for read-only and read-write access.

Root, User+, and User Privileges

There are three levels of user privileges: Root, User+, and User. Some menu selections available to users with Root privileges may not be available to those with User+ and User privileges. The following table summarizes the user privileges.

Table 2-1: User Privileges

	Privilege	Root	User+	User
	Configuration	Yes	Read-only	Read-only

	Network Monitoring	Yes	Read-only	Read-only

	Community Strings and Trap Stations	Yes	Read-only	Read-only

	Update Firmware and Configuration Files	Yes	No	No

	System Utilities	Yes	Ping-only	Ping-only

				continued

Compaq ProLiant BL p-Class GbE Interconnect Switch User Guide				2-5

Contents

Compaq ProLiant BL p-ClassGbE Interconnect Switch Page Contents About This Guide Chapter Introduction Setting Up and Installing the GbE Interconnect Switch Configuring the GbE Interconnect Switch Using the Console Management Interface Configuring the GbE Interconnect Switch Using the Web-BasedManagement Appendix A Technical Specifications Appendix B RJ-45Pin Specification Appendix C Appendix E SNMP/RMON MIBs Support Appendix F Upgrading Firmware by Means of the Serial Port Appendix G Page About This Guide Page Where to Go for Additional Help Telephone Numbers Text Conventions Bold type Introduction ProLiant BL p-Class F-GbEInterconnect Kit Features Enterprise Class Performance GbE Interconnect Switch Redundancy Configuration and Management Diagnostic Tools GbE Interconnect Switch Architecture GbE Interconnect Switches Redundant Crosslinks Redundant Paths to Servers Supported Technologies Layer 2 Based Packet Forwarding IEEE 802.1Q Based Virtual Local Area Network Spanning Tree Protocol Simple Network Management Protocol and Remote Monitoring Port Mirroring Trunking Trivial File Transfer Protocol Support Storage and Forward Switching Scheme External Components GbE Interconnect Switch Front Panel Figure 1-4:GbE Interconnect Switch front panel Table 1-1:GbE Interconnect Switch Front Panel Figure 1-5:GbE Interconnect Switch front panel NIC LED assignments Table 1-2:GbE Interconnect Switch Front Panel NIC LED Assignments Figure 1-6:GbE Interconnect Switch front panel NIC LED functions Table 1-3:GbE Interconnect Switch Front Panel NIC LED Functions QuadT Interconnect Module Panel Figure 1-7:QuadT Interconnect Module connectors Table 1-4:QuadT Interconnect Module Connectors Figure 1-8:QuadT Interconnect Module LEDs Table 1-5:QuadT Interconnect Module LEDs DualTSX Interconnect Module Panel Figure 1-9:DualTSX Interconnect Module connectors Table 1-6:DualTSX Interconnect Module Connectors Figure 1-10:DualTSX Interconnect Module LEDs Table 1-7:DualTSX Interconnect Module LEDs Setting Up and Installing the GbE Interconnect Switch Installing a New GbE Interconnect Switch for a New Deployment Figure 2-2:Installing the GbE Interconnect Switches Replacing an Existing GbE Interconnect Switch Upgrading from RJ-45Patch Panels Planning the GbE Interconnect Switch Configuration Default Settings Security Issues Root, User+, and User Privileges Table 2-1:User Privileges Manually Configuring a GbE Interconnect Switch Configuring Multiple GbE Interconnect Switches Using the SNMP Script Utility Using a TFTP Server Cabling the GbE Interconnect Switch Figure 2-3:Installing the cable-retainingbracket Powering Up the GbE Interconnect Switch Accessing the GbE Interconnect Switch 9600 baud rate, eight data bits, no parity one stop bit Logging On and Configuring the GbE Interconnect Switch User name Tab Additional Information Configuring the GbE Interconnect Switch Using the Console Management Interface Before You Begin Connecting to the GbE Interconnect Switches Using the Console Management Interface Navigation Features Table 3-1:Console Management Interface Navigation Field-levelHelp and System Messages Function Logging On to the GbE Interconnect Switch Setting Up New Users User Accounts Management Setup User Accounts Add New Password Confirm New Password Saving Changes APPLY Managing User Accounts User Account Management Updating a User Account Update Root User+ User Configuring the GbE Interconnect Switch Configuration Configuring the IP Address 1.Highlight Configure IP Address from the Configuration menu Remote Management Setup Current Switch IP Settings New Switch IP Settings Get IP From Manual Subnet Mask Default Gateway Manual IP Address, Subnet Mask Default Gateway Management VID Configuring the GbE Interconnect Switch Information and Advanced Settings Configuring GbE Interconnect Switch Information Switch Information System Name System Location System Contact Auto-Logout 2 mins, 5 mins, 10 mins, 15 mins Never MAC Address Aging Time (sec) Scheduling Mechanism for CoS Queues RoundRobin Strict Strict Configure Port State Speed/Duplex Auto 1000M/Full, 100M/Full, 100M/Half, 10M/Full Configuring Restart Port Ingress Bandwidth Add/Modify Ingress Bandwidth Displaying Current Port Ingress Bandwidth Configuring Restart Port Egress Bandwidth Egress Bandwidth Displaying Current Port Egress Bandwidth Settings Configuring Spanning Tree Protocol 1.Highlight Configure Spanning Tree Protocol on the Configuration menu Configure Spanning Tree Max Age Hello Forward Delay Priority Configuring Port Spanning Tree Settings 1.Highlight Port Settings on the Configure Spanning Tree menu Configuring the Static (Destination-AddressFiltering) Table Configuring Static Unicast Filtering Table Add/Modify VLAN ID MAC Address Type Configuring Static Multicast Filtering Table Multicast MAC Address (E/-) E, F DeleteOnReset Configuring VLANs 1.Highlight Configure VLANs on the Configuration menu Configuring Static VLAN Entry Egress/Forbidden Tag/Untag Active Inactive Configuring a Port VLAN 1.Highlight Configure Port VLAN ID on the IEEE 802.1Q VLANs Configuration menu PVID 802.1Q Static VLAN Settings Configuring Port Ingress Filtering Ingress Filter Configuring Port GVRP Settings Port GVRP Settings GVRP State On Configuring IGMP Snooping 1.Highlight Configure IGMP Snooping on the Configuration menu IGMP Snooping Settings Switch IGMP Querier Query Interval Response Configuring Port Trunking 1.Highlight Configure Port Trunking on the Configuration menu Port Trunking Settings Group Name Member Configuring Port Mirroring 1.Highlight Configure Port Mirroring on the Configuration menu Source Port Source Direction Target Port Configuring the Threshold of Broadcast/Multicast/DA-UnknownStorm Threshold (Pkts/sec) Configuring Class of Service, Default Priority, and Traffic Class Configuring Class of Service Max Packets Latency Assigning Port Default Priority Configuring Class of Traffic Configuring Port Security 1.Highlight Configure Port Security on the Configuration menu Admin State Max. Addr Mode Configuring Priority MAC Addresses 1.Highlight Configure Priority MAC Addresses on the Configuration menu Setup Priority MAC Address Add Priority Level Src.Addr Either Configuring RS232 and SLIP 1.Highlight Configure RS232 and SLIP on the Configuration menu Serial Port and SLIP Settings Monitoring GbE Interconnect Switch Functions Network Monitoring Monitoring Port Utilization 1.Highlight Port Utilization on the Network Monitoring Menu Port Utilization %Util CLEAR COUNTER Monitoring Trunk Utilization 1.Highlight Trunk Utilization on the Network Monitoring Menu Trunk Utilization Monitoring Port Error Packets 1.Highlight Port Error Packets on the Network Monitoring Menu Suspend Monitoring Port Packet Analysis 1.Highlight Port Packet Analysis on the Network Monitoring Menu Monitoring MAC Address Forwarding Table 1.Highlight Browse MAC Address on the Network Monitoring Menu Searching for a Particular MAC Address Browse By MAC Address Monitoring GbE Interconnect Switch History 1.Highlight Switch History from the Network Monitoring Menu Switch History Monitoring IGMP Snooping Reports 1.Highlight IGMP Snooping on the Network Monitoring Menu Monitoring the Dynamic Group Registration Table 1.Highlight Dynamic Group Registration Table on the Network Monitoring Menu Dynamic Group Registration Table Monitoring VLAN Status 1.Highlight VLAN Status on the Network Monitoring Menu Configuring SNMP Manager SNMP Manager Configuration SNMP Community String Access Right Using System Utilities System Utilities Upgrading Firmware from a TFTP Server 1.Highlight Upgrade Firmware from TFTP Server on the Switch Utilities menu Server IP Address Path\Filename START Downloading Configuration File from a TFTP Server Saving Settings to a TFTP Server 1.Highlight Save Settings to TFTP Server on the Switch Utilities menu Saving the History Log to a TFTP Server 1.Highlight Save History Log to TFTP Server on the Switch Utilities menu Performing a Ping Test 1.Highlight Ping Test on the Switch Utilities menu IP Address Rebooting the GbE Interconnect Switch Reboot Save Configuration & Reboot & Load Factory Default Reboot & Load Factory Default Configuration Except IP Logging Out Logout Account Login Configuring the GbE Interconnect Switch Using the Web-BasedManagement Interface Connecting to the GbE Interconnect Switch Enter Network Password Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Maintaining the GbE Interconnect Switch Using TFTP Services Updating the Firmware File Path TFTP Services Update Firmware from Server Start Downloading a Configuration File on a TFTP Server Configuration File Saving Settings to TFTP Server Save Settings Saving History Log Displaying GbE Interconnect Switch History Sequence Log Text Ping Test Target IP Address Repeat Pinging for Resetting the GbE Interconnect Switch Configuration to Factory Defaults Factory Reset Reset to Factory Default Rebooting the GbE Interconnect Switch Restart System 2.Click Restart Setting the Connection Timeout Connection Timeout Logging Out Technical Specifications Table A-1:General Specifications continued Table A-2:Physical and Environmental Specifications Table A-3:Performance Specifications RJ-45Pin Specification Table B-2: RJ-45Connector Pin Assignment for Gigabit over Copper Runtime Switching Software Default Settings Table C-1:Switch A and Switch B: General Default Settings continued Page Switch A: Port Names, VLANs, STP/ByPass, Trunking Default Settings Table C-2:Switch A: Port Names, VLANs, STP/ByPass, Trunking Default Settings Page Switch B: Port Names, VLANs, STP/ByPass, Trunking Default Settings Table C-3:Switch B: Port Names, VLANs, STP/ByPass, Trunking Default Settings Page Spanning Tree Protocol Listening State Page Learning State Forwarding State Disabled State Page Troubleshooting STP Spanning Tree Protocol Failure Figure D-6:Example of Spanning Tree Protocol failure Full/Half Duplex Mismatch Unidirectional Link Packet Corruption Resource Errors Identifying a Data Loop Avoiding Trouble Know Where the Root Is Located Know Which Links Are Redundant Minimize the Number of Ports in the Blocking State Page Page SNMP/RMON MIBs Support Standard MIBs Enterprise-SpecificMIBs Upgrading Firmware by Means of the Serial Port Page Shift+3 Ctrl+C Boot Configuration Menu Figure F-3:Boot Configuration Menu XModem ZModem Call Interconnect Switch – HyperTerminal Disconnect b.From the Interconnect Switch – HyperTerminal window menu, select File then Properties Browse Send Page Troubleshooting Table G-1:Troubleshooting: Setting Up and Accessing Table G-1:Troubleshooting: Setting Up and Accessing continued Page Page Table G-2:Troubleshooting: Configuring Table G-3:Troubleshooting: Using a TFTP Server Table G-4:Troubleshooting: Upgrading Firmware Using the Serial Port Regulatory Compliance Notices—ProLiant p-Class C-GbEInterconnect Kit Taiwan Notice Japanese Notice Regulatory Compliance Notices—ProLiantBL p-Class F-GbEInterconnect Kit Index