Manuals / Motorola / Computer Equipment / Switch

Motorola manual Usm Statistics Values, 7-10 WS5100 Series Switch System Reference Guide

Models: WS5100

1 364

Download 364 pages 29.43 Kb

Page 318

7-10WS5100 Series Switch System Reference Guide

Usm Statistics

Values

Displays SNMP v3 events specific to Usm. The User-based Security Model (USM) decrypts incoming messages. The module then verifies authentication data. For outgoing messages, the USM module encrypts PDUs and generates authentication data. The module then passes the PDUs to the message processor, which then invokes the dispatcher.

The USM module's implementation of the SNMP-USER-BASED-SM-MIB enables SNMP to issue commands to manage users and security keys. The MIB also enables the agent to ensure a requesting user exists and has the proper authentication information. When authentication is done, the request is carried out by the agent.

Displays the current numerical value for the Usm Metric described on the left-hand side of the screen. The value equals the number of times the target event occurred. This data is helpful in troubleshooting Usm (Authentication and Encryption) related problems within the network.

Image 318

Motorola manual Usm Statistics Values, 7-10 WS5100 Series Switch System Reference Guide

Contents

WS5100 Series Switch System Reference Guide2007 Motorola, Inc. All rights reserved Contents Chapter 3. Switch InformationChapter 1. Overview Chapter 4. Network Setup Chapter 5. Switch ServicesTOC-2 WS5100 Series Switch System Reference Guide Chapter 6. Switch Security TOC-3Chapter 7. Switch Management Chapter 8. DiagnosticsTOC-4 WS5100 Series Switch System Reference Guide TOC-5 TOC-6 WS5100 Series Switch System Reference Guide Documentation Set About This GuideIntroduction Document ConventionsNotational Conventions Overview 1.1 Hardware Overview1.1.1.2Power Protection 1.1.1 Physical Specifications1.1.1.1Power Cord Specifications 1.1.2 System Status LED CodesPrimary Error CodesStart Up Standby•Wired Switching •Management Features 1.2.1 Infrastructure Features•Infrastructure Features •Wireless Switching •Security Features •Access Port SupportText Based Configuration 1.2.1.1Installation Feature1.2.1.3Configuration Management 1.2.1.4Diagnostics1.2.1.7Process Monitor 1.2.1.5Serviceability1.2.1.6Tracing / Logging 1.2.1.8Hardware Abstraction Layer and DriversConfiguring Switch Redundancy on page 1.2.2 Wireless Switching1.2.1.11Password Recovery Switch Password Recovery on page•AP and MU Load Balancing •Wireless Roaming 1.2.2.1Physical Layer Features 802.11a•Self Healing •Wireless Capacity •Power Save Polling •QoS1.2.2.3Proxy-ARP 1.2.2.4HotSpot / IP Redirect1.2.2.6Voice Prioritization Configuring WMM on page1.2.2.5IDM Identity Driven Management 1.2.2.7Self Healing•AP Balancing Across Multiple Switches Neighbor Configuration1.2.2.8Wireless Capacity Detector APs•Interswitch Layer 2 Roaming AP Balancing Across Multiple Switches1.2.2.10Wireless Roaming •International Roaming •MU Move CommandL3 Roaming Interswitch Layer 2 RoamingMU Move Command Fast Roaming802.11e QoS 1.2.2.11Power Save Polling1.2.2.12QoS 802.1p SupportDCSCP to AC Mapping 1.2.2.13Wireless Layer 2 SwitchingData QoS 1.2.2.14Automatic Channel Selection1.2.3.1DHCP Servers 1.2.3 Wired SwitchingDHCP Server Settings on page 1.2.3.2DDNS1.2.3.5Interface Management 1.2.4 Management Features1.2.3.4VLAN Enhancements 1.2.3.6Multiple WLAN Support•Encryption and Authentication •MU Authentication 1.2.5 Security Features1.2.5.1Encryption and Authentication •Switch-to-Wired •802.1x AuthenticationKeyguard-WEP 1.2.5.2MU AuthenticationWPA2 Kerberos1.2.5.3Secure Beacon 1.2.5.6Switch-to-Wired1.2.5.7802.1x Authentication 1.2.5.4MU to MU Allow1.2.5.8IEEE 802.1AB LLDP Change Username/Password after AP AdoptionReset Username/Password to Factory Defaults 1.2.5.9 WIPS1.2.5.10Rogue AP Detection RF scan by Access Port on all channels•RF scan by Access Port on all channels •SNMP Trap on discovery •Authorized AP ListsAuthorized AP Lists Configuring ACLs on pageSNMP Trap on discovery Rogue AP Report1.2.6 Access Port Support 1.2.5.14NAT1.2.5.15Certificate Management •Switch Password Recovery 2.1Accessing the Switch Web UI•Accessing the Switch Web UI •Upgrading the Switch Image •Auto Installation2.1.2 Connecting to the Switch Web UI To display the switch Web UIThe switch login screen displays 2.2 Switch Password Recovery Switch Web UI Access and Image Upgrades2.3 Upgrading the Switch Image 2.4 Auto Installation Configuring Auto Install via the CLI 2.5 Downgrading the Switch Image 2.6AP-4131Access Point to Access Port Conversion3.Select the AP Installation main menu item 2-8 WS5100 Series Switch System Reference Guide7.Select the Firmware Update Menu-F3 menu item 2-10 WS5100 Series Switch System Reference Guide •Viewing the Switch Interface Switch Information3.1 Viewing the Switch Interface •Viewing Switch Port Information3.1.1 Viewing the Switch Configuration System Name 3.1.1.1Viewing Dashboard Details 3-4 WS5100 Series Switch System Reference Guide•Alarms •Ports •Environment •CPU Memory 3.1.2Viewing Switch Statistics Number of MUs 3.2 Viewing Switch Port Information 3.2.1Viewing the Port Configuration3.2.1.1Editing the Port Configuration 3.2.2Viewing the Ports Runtime Status 3.2.3 Viewing the Ports Statistics 2. Select the Statistics tab 3.2.3.1Detailed Port Statistics To view detailed statistics for a port2.Click the Details button 3.2.3.2Viewing the Port Statistics Graph •Input Bytes •Input Pkts Dropped 3.3 Viewing Switch Configurations NameSize Bytes Created Modified3.3.2Editing a Config File 3.3.3Transferring a Config File Path 3.4Viewing Switch Firmware InformationPassword File3.4.1Editing the Switch Firmware 2.Click the Edit button 3.4.3 Updating the Switch Firmware If using TFTP, use tftp://ipaddress/path/filenameboot of the switch 3.5 Configuring Automatic UpdatesEnable IP AddressFile Name With 3.6 Viewing the Switch Alarm Log 3.6.1Viewing Alarm Log Details 3.7Viewing Switch Licenses 3.8How to use the Filter Option 3-30 WS5100 Series Switch System Reference Guide •Configuring Switch Virtual Interfaces Network Setup•Viewing and Configuring Layer 2 Virtual LANs •Viewing and Configuring Switch WLANssee Configuring Switch Virtual Interfaces on page Resolution EntriesSwitch Virtual Wireless LANs•Viewing Address Resolution 4.2.1Configuring DNS•Configuring DNS •Configuring IP Forwarding 4.2 Viewing Network IP Information4.2.1.2Configuring Global Settings 4.2.1.1Adding an IP Address for a DNS Server4.2.2Configuring IP Forwarding The following details display in the table 4.2.2.1Adding a New Static Route 4.2.3Viewing Address Resolution 2.Select the Address Resolution tab4.3 Viewing and Configuring Layer 2 Virtual LANs The following details display in the tableName 4.3.1 Editing the Details of an Existing VLAN •Configuring the Virtual Interface 4.4Configuring Switch Virtual Interfaces4.4.1Configuring the Virtual Interface •Viewing Virtual Interface StatisticsName 4.4.1.1Adding a Virtual Interface 4.4.1.2Modifying a Virtual Interface4.4.2Viewing Virtual Interface Statistics Bytes In 2. Select the Statistics tabName Packets In4.4.2.1Viewing Virtual Interface Statistics To view detailed virtual interface statistics2. Click the Details button 2.Click the Graph button •Configuring WLANs •Viewing WLAN Statistics 4.5Viewing and Configuring Switch WLANs4.5.1Configuring WLANs •Viewing VLAN/Tunnel Assignments •Configuring WMMTo configure a WLAN 2.Click the Configuration tab4.5.1.1Editing the WLAN Configuration 4. Click the Edit button VLAN ID Configuring WPA/WPA2 using TKIP and CCMP on page WPA-WPA2-TKIPCCMP on page •Configuring 802.1x EAP •Configuring Kerboros 4.5.1.2Configuring Authentication TypesConfiguring 802.1x EAP •Configuring HotspotsConfiguring Kerboros MU TimeoutMU Max Retries 3.Click the Edit button •Setting up the Hotspot Web pages Configuring HotspotsSwitch Hotspot Redirection •Setting up the Radius serverConfiguring an Internal Hotspot Header Text Network SetupTitle Text Footer TextConfiguring External Hotspot Main Logo URLDescriptive Text Login Page URL Configuring Advanced Hotspot 4.Select the Hotspot button from within the Authentication field Configuring Dynamic MAC ACL Configuring External Radius Server Support4-36 WS5100 Series Switch System Reference Guide 3.Click the Edit button •Motorola user privilege values • Configuring WEP 4.5.1.3Configuring Different Encryption TypesConfiguring the User Login Sources • Configuring WEP 128 / KeyGuardConfiguring WEP Configuring WEP 128 / KeyGuard 6.Use the Key #1-4 areas to specify key numbers Configuring WPA/WPA2 using TKIP and CCMP •1011121314151617 •18191A1B1C1D1E1F 4.5.2 Viewing WLAN Statistics 2. Click the Statistics tab 4.5.2.1Viewing WLAN Statistics in Detail ESSID To view detailed graphical statistics for a WLAN 2. Click the Graph button 4.5.2.3Viewing WLAN Switch Statistics 4.5.3Viewing VLAN/Tunnel Assignments 2.Click the VLAN/Tunnel Assignment tab4.5.4Configuring WMM WMM enabled Access Category to 4.5.4.1Editing WMM Settings 4.6Viewing Associated MU Details 4.6.1 Viewing MU Status•Viewing MU Status •Viewing MU Statistics 2. Click the Status tab 4.6.1.1Viewing MU Details 4.6.2Viewing MU Statistics 2. Click the Statistics tab 4.6.2.1Viewing MU Statistics in Detail MAC Address 4.7Viewing Access Port Information 4.6.2.2View a MU Statistics Graph•Configuring WLAN Assignment •Configuring WMM 4.7.1Configuring Access Port Radios•Configuring Access Port Radios •Viewing AP StatisticsAP Type 4.7.1.1Configuring an AP’s Global Settings Configuring Layer 3 Access Port Adoption on pagePort Authentication 4.7.1.2 Editing AP Settings4.Click the Configure Port Authentication button To edit a radio’s configuration Maximum MUs ports Network SetupRTS Threshold pathConfiguring Rate Settings 4.7.1.3Adding APs 4.7.2 Viewing AP Statistics 2. Click the Statistics tab 4.7.2.1Viewing AP Statistics in Detail 4.7.2.2Viewing AP Statistics in Graphical Format 4.7.3Configuring WLAN Assignment 2.Click the WLAN Assignment tab4.7.3.1Editing a WLAN Assignment 4.7.4Configuring WMM 2.Click the WLAN Assignment tab4.7.4.1Editing WMM Settings •Configuring AP Adoption Defaults 4.8 Viewing Access Port Adoption Defaults4.8.1Configuring AP Adoption Defaults •Configuring Layer 3 Access Port Adoption2.Click the Configuration tab 4.8.1.1Editing Default Radio Adoption Settings •Primary Only: Enables only the primary antenna ports 4-86 WS5100 Series Switch System Reference GuideRTS Threshold the transmission pathConfiguring Rate Settings To configure a radio’s rate settings4.8.2 Configuring Layer 3 Access Port Adoption 4.8.3Configuring WLAN AssignmentSelect/Change Assigned WLANs 2.Click the WLAN Assignment tab4.8.4Configuring WMM 4.8.4.1Editing Access Port Adoption WMM Settings •Viewing Adopted Access Ports 4.9 Viewing Access Port Status4.9.1Viewing Adopted Access Ports •Viewing Unadopted Access Ports4.9.2Viewing Unadopted Access Ports To view existing Radio Configuration information2. Click the Adopted AP tab 2.Click the Unadopted AP tab Network Setup 4-96 WS5100 Series Switch System Reference Guide •DHCP Server Settings •Configuring Secure NTP Switch Services•Displaying the Services Interface •Configuring Switch Redundancy •Layer 3 Mobility5.1 Displaying the Services Interface To display a Services Summary•Configuring the Switch DHCP Server 5.2 DHCP Server Settings5.2.1Configuring the Switch DHCP Server •Configuring Excluded IP Address InformationTo configure DHCP there are fewer users Lease Timedd:hh:mm Domain5.2.1.2Adding a New DHCP Pool 2. Click the Add button at the bottom of the screen 5.2.1.3Configuring DHCP Global Options 5.2.1.4Configuring DHCP Server DDNS Values 10.Refer to the Status field To view the attributes of existing host pools 5.2.3Configuring Excluded IP Address Information 5.2.4 Configuring DHCP Server Relay Information 2. Click the Relay tab 5.2.5 Viewing DHCP Server Status •Defining the SNTP Configuration 5.3Configuring Secure NTP5.3.1Defining the SNTP Configuration •Defining a SNTP Neighbor Configuration2. Select the Configuration tab 5.3.2Adding a New SNTP Symmetric Key 5.3.3Defining a SNTP Neighbor Configuration 2. Select the NTP Neighbor tab 5.3.4 Adding an NTP Neighbor 5.3.5 Viewing SNTP Associations 2.Select the NTP Associations tab 5.3.6 Viewing SNTP Status 5.4 Configuring Switch Redundancy Root delayRoot Dispersion 5-26 WS5100 Series Switch System Reference Guide •Configuring Redundancy Group Membership •Reviewing Redundancy StatusTo configure switch redundancy 5.4.1Reviewing Redundancy Status 2. Select the Status tab 5.4.2Configuring Redundancy Group Membership 2. Select the Member tab 5.4.2.1Displaying Redundancy Member Details moduleadopted reboot of the switchsince the last reboot License Aggregation Rules on page5.4.3Redundancy Group License Aggregation Rules 5.4.2.2Adding a Redundancy Group Member5.5Layer 3 Mobility 5.5.1Configuring Layer 3 Mobility•Configuring Layer 3 Mobility •Defining the Layer 3 Peer ListTo locate switch IP addresses on the network To configure Layer 3 Mobility for the switch 5.5.2 Defining the Layer 3 Peer List 5.5.3 Reviewing Layer 3 Peer List Statistics 2.Select the Peer Statistics tab5.5.4Reviewing Layer 3 MU Status 5.6 Configuring GRE Tunnels 2. Select the MU Status tab• Assigning routes to different types of traffic •Assigning priority to different types of traffic Source IP To configure GRE tunnelling on the switchName Destinations IP5.6.1Editing the Properties of a GRE Tunnel address5.6.2Adding a New GRE Tunnel 5.7Configuring Self Healing 2.Select the Enable Neighbor Recovery checkbox5.7.1Configuring Self Healing Neighbor Details 2.Select the Neighbor Details tab5.7.1.1Editing the Properties of a Neighbor 2.Select the Neighbor Details tab3. Select an existing neighbor and click the Edit button 5.8 Configuring Switch Discovery 5.8.1Configuring Discovery Profilesto be located IndexProfile Name Start IP Address5.8.1.1Adding a New Discovery Profile 5.8.2Viewing Discovered Switches IP Address •Configuring NAT Information Switch Security•Configuring Wireless Filters •Configuring ACLs •Configuring IKE Settings •Configuring IPSec VPN6-2 WS5100 Series Switch System Reference Guide Wireless Filters on pageConfiguring Trustpoint Associated Keys on page Access Port Intrusion6.2 AP Intrusion Detection 6.2.1Enabling and Configuring AP Detection•Enabling and Configuring AP Detection •Approved APs Reported by APs5.Click the Apply button to save the changes made 6.2.1.1Adding or Editing an Allowed AP 6.2.2 Approved APs Reported by APs 2.Select the Approved APs Reported by APs tab6.2.3 Unapproved APs Reported by APs 2.Click on the Unapproved APs Reported by APs tab6.2.4Unapproved APs Reported by MUs 2.Click on the Unapproved APs Reported by MUs tab6.3MU Intrusion Detection 6.3.1Configuring MU Intrusion Detection•Configuring MU Intrusion Detection •Viewing Filtered MUsand switch columns 2.Click the Configuration tab•Collection Settings •Violation Parameters Switch6.3.2Viewing Filtered MUs 6.4Configuring Wireless Filters Editing an Existing Wireless Filter on page 6.4.1Editing an Existing Wireless Filter 6.4.2 Adding a new Wireless Filter 6.4.3 Associating an ACL with WLAN 6.5Configuring ACLs•Configuring an ACL •Attaching an ACL •Attaching an ACL on a WLAN Interface/Port6.5.1.1Router ACLs •Router ACLs •Port ACLs •Wireless LAN ACLs6.5.1 ACL Overview •ACL Actions •Precedence Order6.5.1.2Port ACLs 6.5.1.3Wireless LAN ACLs 6.5.1.4ACL Actions6.5.1.5Precedence Order 6.5.2 Configuring an ACL 6.5.2.1Adding a New ACL6.5.2.2Adding a New ACL Rule Precedence is a required parameter 6.5.2.3Editing an Existing Rule 6.5.3.1Adding a New ACL Configuration 6.5.3 Attaching an ACL6.5.4Attaching an ACL on a WLAN Interface/Port 6.5.4.1Adding a New ACL WLAN Configuration 6.5.5 Reviewing ACL Statistics 6.6.1Defining Dynamic NAT Translations 6.6Configuring NAT Information•Configuring NAT Interfaces •Viewing NAT Status •Defining Dynamic NAT TranslationsType 6.6.1.1Adding a New Dynamic NAT Configuration 2.Click on the Dynamic Translation tab6.6.2 Defining Static NAT Translations 2.Click the Static Translation tab6.6.2.1Adding a New Static NAT Configuration 2.Click on the Static Translation tab3. Click the Add button 6.6.3 Configuring NAT Interfaces 6.6.4 Viewing NAT Status 6.7Configuring IKE Settings •Defining the IKE Configuration•Setting IKE Policies •Viewing SA Statistics 6.7.1 Defining the IKE Configuration 2.Click the Configurations tabPeer IP Address 6.7.2 Setting IKE PoliciesAggressive Mode of peers•An encryption scheme protecting the data Priority Priority 6.7.3 Viewing SA Statistics 6.8Configuring IPSec VPN •Configure a DHCP Sever to give public IP address•Configure a Crypto policy IKE •Defining the IPSec VPN Remote Configuration •Configure security associations parameters•Defining the IPSec Configuration •Configuring IPSEC VPN Authentication6.8.1Defining the IPSec Configuration •Viewing IPSec Security Associations6.8.1.1Editing an Existing Transform Set 6.8.1.2Adding a New Transform Set 3. Click the Add button 6.8.2 Defining the IPSec VPN Remote Configuration 6.8.3 Configuring IPSEC VPN Authentication 6-50 WS5100 Series Switch System Reference Guide2.Click the Authentication tab 6.8.4 Configuring Crypto Maps 6-52 WS5100 Series Switch System Reference Guide•Crypto Map Manual SAs •Crypto Map Transform Sets 6.8.4.1Crypto Map Entries•Crypto Map Entries •Crypto Map Peers •Crypto Map InterfacesMode Config 6.8.4.2Crypto Map Peers 2. Click the Crypto Maps tab and select Peers 6.8.4.3Crypto Map Manual SAs 6.8.4.4Crypto Map Transform Sets 6-58 WS5100 Series Switch System Reference GuideName Priority / Seq #higher the priority Transform Set6.8.4.5Crypto Map Interfaces 6.8.5 Viewing IPSec Security Associations To display IPSec VPN security associations2.Click the IPSec SAs tab •Configuring Radius Authentication and Accounting 6.9Configuring the Radius Server•Defining the Radius Configuration •Configuring Radius Users6.9.1.1User Database •TTLS and MSCHAPv2 •PEAP and GTC•PEAP and MSCHAPv2 6.9.1.5LDAP 6.9.1.3Access Policy6.9.1.4Proxy to External Radius Server 6.9.1.6Accounting6.9.3 Defining the Radius Configuration 6.9.3.1Radius Client Configuration 6.9.3.2Radius Proxy Server ConfigurationTo configure Radius proxy server support 2.Select the Authentication tab 6.9.5Configuring Radius Users 2.Select the Users tab 6.9.6 Configuring Radius User Groups 2. Select the Groups tab 6.9.7 Viewing Radius Accounting Logs 6.10 Creating Server Certificates 2.Select the Accounting Logs tab6.10.1Using Trustpoints to Configure Certificates •Using Trustpoints to Configure Certificates•Configuring Trustpoint Associated Keys 6.10.1.1Creating a Server / CA Root Certificate Using the Wizard to Create a New Certificate akey for you new certificateSelect a trustpoint for the new certificate State Country2 characters CityUsing the Wizard Delete Operation 6.10.2Configuring Trustpoint Associated Keys 6.10.2.1Adding a New Key 6.10.2.2Transferring Keys 6-84 WS5100 Series Switch System Reference Guide •Displaying the Management Access Interface Switch Management7.1 Displaying the Management Access Interface •Configuring Access Control7.2 Configuring Access Control To display the main Management screenon Management •Configuring SNMP v3 Access 7.3Configuring SNMP Access•Configuring SNMP v1/v2 Access •Accessing SNMP v2/v3 Statistics7.3.1 Configuring SNMP v1/v2 Access 7.3.2Configuring SNMP v3 Access 7-6 WS5100 Series Switch System Reference GuideThe unique SNMPv3 usernames and passwords include 7-8 WS5100 Series Switch System Reference Guide 7.3.3 Accessing SNMP v2/v3 Statistics 7-10 WS5100 Series Switch System Reference Guide Usm Statistics Values•Enabling Trap Configuration 7.4 Configuring SNMP Traps7.4.1Enabling Trap Configuration •Configuring Trap ThresholdsWireless enable all traps within the Cluster categoryenable all traps within the Mobility category the Wireless category7.4.2 Configuring Trap Thresholds 2.Click the Wireless Statistics Thresholds tab7-14 WS5100 Series Switch System Reference Guide Wireless 7.4.2.1Wireless Trap Threshold ValuesSwitch Management Threshold Name7.5 Configuring SNMP Trap Receivers Timeout Trap VersionDestination Address Port Community Retry Count 7.5.1Editing SNMP Trap Receivers 7.5.2Adding SNMP Trap Receivers•Configuring Local Users 7.6Configuring Management Users7.6.1 Configuring Local Users •Configuring Switch Authentication7.6.1.1Creating a New Local User 7.6.1.2Modifying an Existing Local User Monitor 7.6.1.3Creating a Guest Admin and Guest User 7.6.2Configuring Switch Authentication 2. Click on the Authentication tab Adding a New Radius Server on page 2.Click on the Authentication tab7.6.2.2Adding a New Radius Server 6.Click on OK to complete the addition of the Radius Server 7-28 WS5100 Series Switch System Reference Guide •Displaying the Main Diagnostic Interface Diagnostics8.1 Displaying the Main Diagnostic Interface •Configuring System Logging8.1.1 Switch Environment 8.1.2CPU Performance 8.1.3 Switch Memory Allocation 8.1.4Switch Disk Allocation8.1.5Switch Memory Processes 8.1.6Other Switch Resources 2.Select the Other Resources tab 8.2 Configuring System Logging8.2.1Log Options •Log Options •File Management2. Select the Log Options tab 8.2.2File Management To display the entire contents of a log file 8.2.2.2Transferring Log Files 8.3 Reviewing Core Snapshots 8-12 WS5100 Series Switch System Reference Guide8.3.1Transferring Core Snapshots Transferring Core Snapshots on page8.4 Reviewing Panic Snapshots 8-14 WS5100 Series Switch System Reference GuideDisplays the size of the panic file in bytes NameSize Created8.4.1 Viewing Panic Details 8.4.2 Transferring Panic Files8.5 Debugging the Applet 8.6Configuring a Ping To view the switch’s existing ping configuration 8.6.2Adding a New Ping Test Test Name 8-22 WS5100 Series Switch System Reference Guide 8.6.3 Viewing Ping Statistics1.Select Diagnostics > Ping from the main menu To view ping test statisticsand target device DiagnosticsAverage RTT Last Response8-24 WS5100 Series Switch System Reference Guide Customer Support Web Site Appendix A Customer SupportMotorola’s Enterprise Mobility Support Center General InformationA-2 WS5100 Series System Reference Guide Page MOTOROLA INC 72E-100957-01Revision A June