Manuals / Brands / Computer Equipment / Switch / Enterasys Networks / Computer Equipment / Switch

Enterasys Networks D2G124-12, D2G124-12P manual - page 2

1 496
Download 496 pages, 3.79 Mb
Contents
Main Page Notice Version: Information in this guide refers to D-Series firmware version 1.0.xx ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. Page Page Contents About This Guide Chapter 1: Introduction Chapter 2: Basic Configuration Page Chapter 3: Discovery Protocol Configuration Chapter 4: Port Configuration Page Chapter 5: SNMP Configuration Chapter 6: Spanning Tree Configuration Page Chapter 7: 802.1Q VLAN Configuration Chapter 8: Differentiated Services Configuration Chapter 9: Policy Classification Configuration Chapter 10: Port Priority and Rate Limiting Configuration Chapter 11: IGMP Configuration Chapter 12: Logging and Network Management Chapter 13: RMON Configuration Chapter 14: DHCP Server Configuration Chapter 15: Security Configuration Page Index Figures Tables Page Page About This Guide Using This Guide Structure of This Guide Important Notice Related Documents Conventions Used in This Guide Thefollowingconventionsareusedinthetextofthisdocument: Thefollowingiconsareusedinthisguide: Getting Help Page Introduction D-Series CLI Overview Switch Management Methods Factory Default Settings Page Table 1-1 Default Settings for Basic Switch Operation (Continued) Using the Command Line Interface Starting a CLI Session Connecting Using the Console Port Connecting Using Telnet Logging In Using a Default User Account Using an Administratively Configured User Account Navigating the Command Line Interface Getting Help with CLI Syntax CLI Command Modes Performing Keyword Lookups Syntax Defaults Displaying Scrolling Screens Abbreviating and Completing Commands Basic Line Editing Commands TheCLIsupportsEMACslikelineeditingcommands.Tabl e 12listssomecommonlyused commands. Table 1-2 Basic Line Editing Commands Page Basic Configuration Quick Start Setup Commands Setting User Accounts and Passwords Thecommandsusedtoconfigureuseraccountsandpasswordsarelistedbelow. Table 2-4 Optional CLI Setup Commands show system login set system login clear system login set password set system password length set system password aging set system password history show system lockout Setting Basic Switch Properties TodisplayandsetthesystemIPaddressandotherbasicsystem(switch)properties. Thecommandsusedtosetbasicsysteminformationarelistedbelow. Table 2-5 show system lockout Output Details show ip address UsethiscommandtodisplaythesystemIPaddressandsubnetmask. ThisexampleshowshowtodisplaythesystemIPaddressandsubnetmask: set ip address UsethiscommandtosetthesystemIPaddress,subnetmaskanddefaultgateway. clear ip address show ip protocol set ip protocol show system show system hardware show system utilization Page show system enhancedbuffermode set system enhancedbuffermode show time set time show summertime set summertime set summertime date set summertime recurring clear summertime set prompt show banner motd set banner motd clear banner motd show version set system name set system location set system contact set width set length show logout set logout show console set console baud Activating Licensed Features License Key Field Descriptions Clearing, Showing, and Moving Licenses Commands set license show license clear license Configuring System Power and Power over Ethernet (PoE) show inlinepower set inlinepower threshold set inlinepower trap show port inlinepower set port inlinepower Downloading a Firmware Image Downloading from a TFTP Server Downloading via the Serial Port Page Reverting to a Previous Image Reviewing and Selecting a Boot Firmware Image Purpose Commands show boot system set boot system Starting and Configuring Telnet show telnet set telnet telnet Managing Switch Configuration and Files Configuration Persistence Mode show snmp persistmode set snmp persistmode save config dir show file Usethiscommandtodisplaythecontentsofafile. filename Specifiesthenameofthefiletodisplay. show config configure copy delete show tftp settings set tftp timeout clear tftp timeout set tftp retry clear tftp retry Clearing and Closing the CLI cls (clear screen) exit Resetting the Switch reset clear config Using and Configuring WebView show webview set webview show ssl set ssl Page Discovery Protocol Configuration Configuring CDP show cdp Ifportstringisnotspecified,allCDPinformationwillbedisplayed. ThisexampleshowshowtodisplayCDPinformationforportsge.1.1throughge.1.9: Tabl e 38providesanexplanationofthecommandoutput. Table 3-8 show cdp Output Details set cdp state set cdp auth set cdp interval set cdp hold-time clear cdp show neighbors Configuring Cisco Discovery Protocol show ciscodp show ciscodp port info set ciscodp status set ciscodp timer set ciscodp holdtime set ciscodp port Page clear ciscodp Port Configuration Port Configuration Summary Port String Syntax Used in the CLI Port Slot/Unit Parameters Used in the CLI Configuring SFP Ports for 100BASE-FX Reviewing Port Status show port show port status show port counters Page Disabling / Enabling and Naming Ports set port disable set port enable show port alias set port alias Setting Speed and Duplex Mode show port speed set port speed show port duplex set port duplex Enabling / Disabling Jumbo Frame Support show port jumbo set port jumbo clear port jumbo Setting Auto-Negotiation and Advertised Ability show port negotiation set port negotiation show port advertise set port advertise clear port advertise Setting Flow Control show flowcontrol set flowcontrol Setting Port Link Traps and Link Flap Detection show port trap set port trap show linkflap Page set linkflap globalstate set linkflap portstate set linkflap interval set linkflap action clear linkflap action set linkflap threshold set linkflap downtime clear linkflap down clear linkflap Configuring Broadcast Suppression show port broadcast set port broadcast clear port broadcast Port Mirroring Mirroring Features show port mirroring set port mirroring clear port mirroring Link Aggregation Control Protocol (LACP) LACP Operation LACP Terminology D-Series Usage Considerations show lacp Page set lacp set lacp asyspri set lacp aadminkey clear lacp set lacp static clear lacp static set lacp singleportlag clear lacp singleportlag show port lacp [(32768,00e0639db587,32768),(32768,000000000000, 1411)] set port lacp clear port lacp Page Configuring Protected Ports Protected Port Operation set port protected show port protected clear port protected set port protected name show port protected name clear port protected name SNMP Configuration SNMP Configuration Summary SNMPv1 and SNMPv2c SNMPv3 About SNMP Security Models and Levels Using SNMP Contexts to Access Specific MIBs Configuration Considerations Reviewing SNMP Statistics show snmp engineid show snmp counters UsethiscommandtodisplaySNMPtrafficcountervalues. ThisexampleshowshowtodisplaySNMPcountervalues Page Configuring SNMP Users, Groups, and Communities Table 5-19 show snmp counters Output Details (Continued) show snmp user set snmp user clear snmp user show snmp group set snmp group clear snmp group show snmp community set snmp community clear snmp community Configuring SNMP Access Rights show snmp access Page set snmp access clear snmp access Configuring SNMP MIB Views show snmp view ThisexampleshowshowtodisplaySNMPMIBviewconfigurationinformation: show snmp context UsethiscommandtodisplaythecontextlistconfigurationforSNMPsviewbasedaccesscontrol. Table 5-23 show snmp view Output Details set snmp view clear snmp view Configuring SNMP Target Parameters show snmp targetparams Page set snmp targetparams clear snmp targetparams Configuring SNMP Target Addresses show snmp targetaddr set snmp targetaddr clear snmp targetaddr Configuring SNMP Notification Parameters About SNMP Notify Filters Commands show newaddrtrap set newaddrtrap show snmp notify set snmp notify clear snmp notify show snmp notifyfilter set snmp notifyfilter clear snmp notifyfilter show snmp notifyprofile set snmp notifyprofile clear snmp notifyprofile Creating a Basic SNMP Trap Configuration Example How SNMP Will Use This Configuration Spanning Tree Configuration Spanning Tree Configuration Summary Overview: Single, Rapid, and Multiple Spanning Tree Protocols RSTP MSTP Spanning Tree Features Loop Protect Configuring Spanning Tree Bridge Parameters Page show spantree stats ThisexampleshowshowtodisplaythedevicesSpanningTreeconfiguration: Tabl e 628showsadetailedexplanationofcommandoutput. Table 6-28 show spantree Output Details set spantree show spantree version set spantree version clear spantree version show spantree bpdu-forwarding set spantree bpdu-forwarding show spantree bridgeprioritymode set spantree bridgeprioritymode clear spantree bridgeprioritymode show spantree mstilist set spantree msti clear spantree msti show spantree mstmap set spantree mstmap clear spantree mstmap show spantree vlanlist show spantree mstcfgid set spantree mstcfgid clear spantree mstcfgid set spantree priority clear spantree priority set spantree hello clear spantree hello set spantree maxage clear spantree maxage set spantree fwddelay clear spantree fwddelay show spantree backuproot set spantree backuproot clear spantree backuproot show spantree tctrapsuppress set spantree tctrapsuppress clear spantree tctrapsuppress set spantree protomigration show spantree spanguard set spantree spanguard clear spantree spanguard show spantree spanguardtimeout set spantree spanguardtimeout clear spantree spanguardtimeout show spantree spanguardlock clear / set spantree spanguardlock show spantree spanguardtrapenable set spantree spanguardtrapenable clear spantree spanguardtrapenable show spantree legacypathcost set spantree legacypathcost clear spantree legacypathcost Configuring Spanning Tree Port Parameters set spantree portadmin clear spantree portadmin show spantree portadmin show spantree portpri set spantree portpri clear spantree portpri show spantree adminpathcost set spantree adminpathcost clear spantree adminpathcost show spantree adminedge set spantree adminedge clear spantree adminedge Configuring Spanning Tree Loop Protect Parameters set spantree lp show spantree lp clear spantree lp show spantree lplock clear spantree lplock set spantree lpcapablepartner show spantree lpcapablepartner clear spantree lpcapablepartner set spantree lpthreshold show spantree lpthreshold clear spantree lpthreshold set spantree lpwindow show spantree lpwindow clear spantree lpwindow set spantree lptrapenable show spantree lptrapenable clear spantree lptrapenable set spantree disputedbpduthreshold show spantree disputedbpduthreshold clear spantree disputedbpduthreshold show spantree nonforwardingreason Page Page 802.1Q VLAN Configuration VLAN Configuration Summary Port String Syntax Used in the CLI Creating a Secure Management VLAN Viewing VLANs Command show vlan Creating and Naming Static VLANs set vlan set vlan name clear vlan clear vlan name Assigning Port VLAN IDs (PVIDs) and Ingress Filtering show port vlan set port vlan clear port vlan show port ingress filter set port ingress filter show port discard set port discard Configuring the VLAN Egress List show port egress set vlan forbidden set vlan egress clear vlan egress show vlan dynamicegress set vlan dynamicegress Setting the Host VLAN show host vlan set host vlan clear host vlan Enabling/Disabling GVRP (GARP VLAN Registration Protocol) About GARP VLAN Registration Protocol (GVRP) Overview How It Works Page show gvrp show garp timer set gvrp clear gvrp set garp timer Page Differentiated Services Configuration Globally Enabling or Disabling Diffserv Purpose Command set diffserv adminmode Creating Diffserv Classes and Matching Conditions show diffserv info show diffserv class set class create set diffserv class delete set diffserv class match Page Page set diffserv class rename Configuring Diffserv Policies and Assigning Classes show diffserv policy set diffserv policy create set diffserv policy delete set diffserv policy class set diffserv policy mark set diffserv policy police style simple set diffserv policy police action conform set diffserv policy police action nonconform set diffserv policy rename Assigning Policies to Service Ports show diffserv service info show diffserv service stats set diffserv service DiffServ Configuration Examples Page Policy Classification Configuration Policy Classification Configuration Summary Configuring Policy Profiles show policy profile Thisexampleshowshowtodisplaypolicyinformationforprofile11: set policy profile clear policy profile Configuring Classification Rules show policy rule Page show policy capability Page set policy rule Page clear policy rule clear policy all-rules Assigning Ports to Policy Profiles set policy port clear policy port Configuring Policy Class of Service (CoS) About Policy-Based CoS Configurations Page set cos state UsethiscommandtoenableordisableClassofService. Switchcommand,readwrite. enable|disable EnablesordisablesClassofServiceontheswitch.Defaultstateis disabled. show cos state clear cos state set cos settings clear cos settings show cos settings set cos port-config show cos port-config clear cos port-config set cos port-resource show cos port-resource clear cos port-resource set cos reference show cos reference clear cos reference show cos unit clear cos all-entries show cos port-type Page Port Priority and Rate Limiting Configuration Port Priority Configuration Summary Configuring Port Priority show port priority set port priority clear port priority Configuring Priority to Transmit Queue Mapping show port priority-queue set port priority-queue clear port priority-queue Configuring Quality of Service (QoS) show port txq set port txq clear port txq Page Page IGMP Configuration IGMP Overview About IP Multicast Group Management About Multicasting Configuring IGMP at Layer 2 show igmpsnooping set igmpsnooping adminmode set igmpsnooping interfacemode set igmpsnooping groupmembershipinterval set igmpsnooping maxresponse set igmpsnooping mcrtrexpiretime set igmpsnooping add-static set igmpsnooping remove-static show igmpsnooping static show igmpsnooping mfdb clear igmpsnooping Page Page Logging and Network Management Thischapterdescribesswitchrelatedloggingandnetworkmanagementcommandsandhowto usethem. Configuring System Logging show logging server set logging server clear logging server show logging default set logging default clear logging default show logging application set logging application clear logging application show logging local set logging local clear logging local show logging buffer Monitoring Network Events and Status history show history set history ping show users disconnect Managing Switch Network Addresses and Routes TodisplayordeleteswitchARPtableentries,andtodisplayMACaddressinformation. show arp UsethiscommandtodisplaytheswitchsARPtable. set arp clear arp traceroute show mac show mac agetime set mac agetime clear mac agetime set mac algorithm show mac algorithm clear mac algorithm set mac multicast clear mac address show mac unreserved-flood set mac unreserved-flood Configuring Simple Network Time Protocol (SNTP) show sntp ThisexampleshowshowtodisplaySNTPclientsettings: Tabl e 1241providesanexplanationofthecommandoutput. Table 12-41 show sntp Output Details set sntp client clear sntp client set sntp server clear sntp server set sntp poll-interval clear sntp poll-interval set sntp poll-retry clear sntp poll-retry set sntp poll-timeout clear sntp poll-timeout Configuring Node Aliases show nodealias config set nodealias clear nodealias config Page RMON Configuration RMON Table 13-43 RMON Monitoring Group Functions and Commands (Continued) Statistics Group Commands show rmon stats set rmon stats clear rmon stats History Group Commands show rmon history set rmon history clear rmon history Alarm Group Commands show rmon alarm set rmon alarm properties set rmon alarm status clear rmon alarm Event Group Commands show rmon event set rmon event properties set rmon event status clear rmon event Filter Group Commands show rmon channel set rmon channel clear rmon channel show rmon filter set rmon filter clear rmon filter Packet Capture Commands show rmon capture set rmon capture clear rmon capture DHCP Server Configuration DHCP Overview DHCP Server Configuring a DHCP Server Configuring General DHCP Server Parameters set dhcp set dhcp bootp set dhcp conflict logging show dhcp conflict clear dhcp conflict set dhcp exclude clear dhcp exclude set dhcp ping clear dhcp ping show dhcp binding clear dhcp binding show dhcp server statistics clear dhcp server statistics Configuring IP Address Pools Manual Pool Configuration Considerations Page set dhcp pool clear dhcp pool set dhcp pool network clear dhcp pool network set dhcp pool hardware-address clear dhcp pool hardware-address set dhcp pool host clear dhcp pool host set dhcp pool client-identifier clear dhcp pool client-identifier set dhcp pool client-name clear dhcp pool client-name set dhcp pool bootfile clear dhcp pool bootfile set dhcp pool next-server clear dhcp pool next-server set dhcp pool lease clear dhcp pool lease set dhcp pool default-router clear dhcp pool default-router set dhcp pool dns-server clear dhcp pool dns-server set dhcp pool domain-name clear dhcp pool domain-name set dhcp pool netbios-name-server clear dhcp pool netbios-name-server set dhcp pool netbios-node-type clear dhcp pool netbios-node-type set dhcp pool option clear dhcp pool option show dhcp pool configuration Thisexampledisplaysconfigurationinformationforalladdresspools. Page Security Configuration Overview of Security Methods RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment Filter-ID Attribute Formats Configuring RADIUS show radius Page set radius clear radius show radius accounting set radius accounting clear radius accounting Configuring 802.1X Authentication show dot1x Thisexampleshowshowtodisplay802.1Xstatus: Thisexampleshowshowtodisplayauthenticationdiagnosticsinformationforge.1.1: Thisexampleshowshowtodisplayauthenticationstatisticsforge.1.1: Thisexampleshowshowtodisplaythestatusofportreauthenticationcontrolforge.1.1through show dot1x auth-config Usethiscommandtodisplay802.1Xauthenticationconfigurationsettingsforoneormoreports. Page set dot1x set dot1x auth-config clear dot1x auth-config show eapol Mode set eapol Table 15-47 show eapol Output Details (Continued) clear eapol Configuring MAC Authentication show macauthentication show macauthentication session set macauthentication set macauthentication password clear macauthentication password set macauthentication port set macauthentication portinitialize set macauthentication portquietperiod clear macauthentication portquietperiod set macauthentication macinitialize set macauthentication reauthentication set macauthentication portreauthenticate set macauthentication macreauthenticate set macauthentication reauthperiod clear macauthentication reauthperiod set macauthentication significant-bits clear macauthentication significant-bits Configuring Multiple Authentication Methods About Multiple Authentication Types show multiauth set multiauth mode clear multiauth mode set multiauth precedence clear multiauth precedence show multiauth port set multiauth port clear multiauth port show multiauth station show multiauth session show multiauth idle-timeout Syntax set multiauth idle-timeout clear multiauth idle-timeout show multiauth session-timeout set multiauth session-timeout clear multiauth session-timeout Configuring VLAN Authorization (RFC 3580) show policy maptable response set policy maptable response set vlanauthorization set vlanauthorization egress clear vlanauthorization show vlanauthorization Configuring MAC Locking show maclock show maclock stations set maclock enable set maclock disable set maclock clear maclock set maclock static clear maclock static set maclock firstarrival clear maclock firstarrival set maclock agefirstarrival clear maclock agefirstarrival set maclock move set maclock trap Configuring Port Web Authentication (PWA) About PWA show pwa Usethiscommandtodisplayportwebauthenticationinformationforoneormoreports. Tabl e 1553providesanexplanationofthecommandoutput. Ifportstringisnotspecified,PWAinformationwillbedisplayedforallports. ThisexampleshowshowtodisplayPWAinformationforge.2.1: set pwa Usethiscommandtoenableordisableportwebauthentication. enable|disable Enablesordisablesportwebauthentication. Switchcommand,readwrite. Table 15-53 show pwa Output Details (Continued) show pwa banner set pwa banner clear pwa banner set pwa displaylogo set pwa ipaddress set pwa protocol set pwa guestname clear pwa guestname set pwa guestpassword set pwa gueststatus set pwa initialize set pwa quietperiod set pwa maxrequest set pwa portcontrol show pwa session set pwa enhancedmode Configuring Secure Shell (SSH) show ssh status set ssh set ssh hostkey Page Index Numerics A B C R S T U V