MAC Address Security Configuration Menu | Nortel Networks 24T

Using the Console Interface

When the switch software detects a security violation, you can set the system to respond in any of the following ways:

•Send a trap

•Turn on destination address (DA) filtering

•Disable the specific port

You can also combine any of the three options listed above.

Choose MAC Address-Based Security (or press s) from the Switch Configuration Menu screen to display the MAC Address Security Configuration Menu screen.

MAC Address Security Configuration Menu

MAC Address Security Configuration...

MAC Address Security Port Configuration...

MAC Address Security Port Lists...

MAC Address Security Table...

Return to Switch Configuration Menu

Use arrow keys to highlight option, press <Return> or <Enter> to select option. Press Ctrl-R to return to previous menu. Press Ctrl-C to return to Main Menu.

Figure 3-8. MAC Address Security Configuration Menu

Table 3-7 describes the MAC Address Security Configuration Menu options.

309985-B Rev 00

3-23

Image 161

Nortel Networks 24T manual MAC Address Security Configuration Menu

Contents

Using the BayStack 410-24T 10BASE-T Switch Trademarks Copyright 2000 Nortel NetworksStatement of Conditions USA Requirements Only Taiwan Requirements Japan/Nippon Requirements OnlyCanada Requirements Only EC Declaration of Conformity Nortel Networks NA Inc. Software License Agreement Rev Page Contents Switch Software Image Configuration Parameters Chapter Installing the BayStack 410-24T Switch Chapter Using the Console Interface 102 Chapter Troubleshooting Appendix D Connectors and Pin Assignments Page Figures Xvi IP Configuration/Setup Screen Standalone Switch Figure B-1 Figure C-8. Configuring Igmp Snooping 2 Page Tables 100 Preface Organization Before You BeginThis guide has four chapters, six appendixes, and an index If you want to Go to Text Conventions Acronyms Related Publications Technical Solutions Center Telephone Number How to Get Help Description BayStack 410-24T Switch Comm Port Front Panel Uplink/Expansion Slot 10BASE-T Port Connectors LED Display Panel BayStack 410-24T Switch LED DescriptionsProvides descriptions of the LEDs Label Type Color State Meaning CAS Up Stack mode Off Switch is in standalone mode Green Back Panel BayStack 410-24T Switch Back Panel Country/Plug description Specifications Typical plug AC Power ReceptacleInternational Power Cord Specifications Cooling Fans Rpsu ConnectorCascade Module Slot Features Telnet Introduction to the BayStack 410-24T Switch Virtual Local Area Networks VLANs Security BayStack 410-24T Switch Security Feature See MAC Address-Based Security on MAC Address-Based Security RADIUS-Based Network Security Ieee 802.1p Igmp Snooping FeatureConfiguration and Switch Management Flash Memory Storage Switch Software ImageConfiguration Parameters MultiLink Trunking Autosensing and Autonegotiation Port Mirroring Ieee 802.1Q VLANs Stack software offset is Then the Stack MAC address becomes BootP Automatic IP Configuration/MAC Address Snmp MIB Support Trap Name Configurable Sent whenSnmp Trap Support Supported Snmp Traps Desktop Switch Application Network Configuration BayStack 410-24T Switch Used as a Desktop Switch BayStack 410-24T Switch Used as a workgroup Switch Segment Switch Application Configuring Power Workgroups and a Shared Media Hub High-Density Switched Workgroup Application Fail-Safe Stack Example Fail-Safe Stack Application BayStack 400-ST1 Cascade Module Stack Operation Cascade a In Connector Cascade a Out ConnectorUnit Select Switch Base Unit Initial Installation Temporary Base Unit Stack MAC Address Removing a Unit from the Stack Stack Configurations Stack Down Configurations Stack Up Configurations 13. Stack Down Configuration Example Redundant Cascade Stacking Feature 14. Redundant Cascade Stacking Feature 15. Port-Based Vlan Example Ieee 802.1Q Vlan Workgroups Ieee 802.1Q Tagging 16. Default Vlan Settings 17. Port-Based Vlan Assignment 19 .1Q Tag Assignment VLANs Spanning Multiple 802.1Q Tagged Switches VLANs Spanning Multiple Switches 22. VLANs Spanning Multiple Untagged Switches VLANs Spanning Multiple Untagged Switches 23. Possible Problems with VLANs and Spanning Tree Protocol 24. Multiple VLANs Sharing Resources Shared Servers 25. Vlan Broadcast Domains Within the Switch Default Vlan Configuration screen opens Figure To configure the Vlan port membership for Vlan 27. Vlan Configuration Screen Example To configure the Pvid port Vlan identifier for Port 28. Default Vlan Port Configuration Screen Example Vlan Workgroup Summary 29. Vlan Port Configuration Screen Example 30. Vlan Configuration Spanning Multiple Switches Vlan Configuration Rules Igmp Snooping 31. IP Multicast Propagation With Igmp Routing 32. BayStack 410-24T Switch Filtering IP Multicast Streams 1 33. BayStack 410-24T Switch Filtering IP Multicast Streams 2 Igmp Snooping Configuration Rules 34. Prioritizing Packets Ieee 802.1p Prioritizing 35. Port Transmit Queue Traffic Class Configuration screen opens Figure To configure the port priority level, follow these steps 37. Setting Port Priority Example Vlan Port Configuration screen opens Figure MultiLink Trunks 38. Switch-to-Switch Trunk Configuration Example 39. Switch-to-Server Trunk Configuration Example Client/Server Configuration Using MultiLink Trunks 40. Client/Server Configuration Example Setting up the Trunk Configuration for S1 Trunk Configuration Screen ExamplesTrunk Configuration Screen for Switch S1 42. MultiLink Trunk Configuration Screen for Switch S1 MultiLink Trunk Configuration screen opens Figure Using the BayStack 410-24T 10BASE-T Switch 43. MultiLink Trunk Configuration Screen for Switch S2 Trunk Configuration Screen for Switch S2 Using the BayStack 410-24T 10BASE-T Switch 44. MultiLink Trunk Configuration Screen for Switch S3 Trunk Configuration Screen for Switch S3 Using the BayStack 410-24T 10BASE-T Switch 45. MultiLink Trunk Configuration Screen for Switch S4 Trunk Configuration Screen for Switch S4 Using the BayStack 410-24T 10BASE-T Switch MultiLink Trunking Configuration Rules Before Configuring Trunks Using the BayStack 410-24T 10BASE-T Switch 46. Loss of Distributed Trunk Members 47. Path Cost Arbitration Example Spanning Tree Considerations for MultiLink Trunks 48. Example 1 Correctly Configured Trunk 49. Example 2 Detecting a Misconfigured Port Additional Tips About the MultiLink Trunking Feature Port Mirroring Conversation Steering 50. Port-Based Mirroring Configuration Example Port-Based Mirroring Configuration Using the BayStack 410-24T 10BASE-T Switch 51. Port Mirroring Port-Based Screen Example Address-Based Mirroring Configuration 52. Address-Based Mirroring Configuration Example 53. Port Mirroring Address-Based Screen Example Port Mirroring Configuration Rules Installation Requirements Installing the BayStack 410-24T Switch Package Contents Installing the BayStack 410-24T Switch on a Flat Surface Installation Procedure Installing the BayStack 410-24T Switch in a Rack Positioning the Chassis in the Rack Attaching Mounting Brackets Attaching Devices to the BayStack 410-24T Switch BASE-T Port Connections Connecting 10BASE-T Ports and 10/100 MDA Ports Fiber Optic Port Connections Connecting Fiber Optic MDA Ports Console/Comm Port To connect a terminal to the Console/Comm port Connecting a Terminal to the Console/Comm Port Connecting Power Grounded AC Power Outlet BayStack 410-24T Switch AC Power Receptacle Verifying the Installation Using the LEDs Verifying the InstallationPower-Up Sequence Stage Description LED indication Configuration includes an additional test Cascade Sram test Verifying the Installation Using the Self-Test Screen 12. Nortel Networks Logo Screen Standalone Switch Setup Initial Setup 13. Main Menu 14. IP Configuration/Setup Screen Standalone Switch Stack Setup 15. Main Menu Standalone Switch Example 17. IP Configuration/Setup Screen Stack Configuration Installing the BayStack 410-24T Switch Page Accessing the CI Menus and Screens Chapter Using the Console Interface Navigating the CI Menus and Screens Using the CI Menus and Screens Map of Console Interface Screens Screen Fields and Descriptions Console Interface Main Menu Main Menu Console Interface Main Menu options Describes the CI main menu options Reset Configuration FileReset to Default Settings Logout OptionDescription Describes the IP Configuration/Setup screen fields IP Configuration/Setup IP Configuration/Setup Screen Fields IP Address to Ping Start Ping Choosing a BootP Request ModeFieldDescription BootP or Last Address BootP Disabled BootP Always BootP When Needed Describes the Snmp Configuration screen fields Snmp ConfigurationSnmp Configuration Screen Fields Field Description Read-Only Snmp Configuration Screen Fields Describes the System Characteristics screen fields System Characteristics System Characteristics Screen Fields System Characteristics Screen Fields Describes the Switch Configuration Menu screen options Switch Configuration Switch Configuration Menu Screen Options MAC Address Table Option Description Igmp ConfigurationDisplay Port Statistics Clear All Port Statistics Field Description Aging Time Describes the MAC Address Table screen fieldsMAC Address Table Screen Fields Field Description Find an Address MAC Address Security Configuration Menu MAC Address Security Configuration Menu Options MAC Address Security Configuration MAC Address Security Configuration Screen Field Description MAC Address Security MAC Address Security Configuration Screen FieldsSNMP-Locked Partition Time MAC Address Security Configuration Screen Fields 10. MAC Address Security Port Configuration Screen 1 MAC Address Security Port Configuration 11. MAC Address Security Port Configuration Screen 2 Field Description Unit MAC Address Security Port Configuration Screen FieldsPort Trunk 12. MAC Address Security Port Lists Screens 5 Screens MAC Address Security Port Lists Port List MAC Address Security Port Lists Screen FieldsField Description Entry Port List Syntax Copying an Existing Field into an Adjacent Field Adding a New Port to an Existing Port Number ListRemoving a Port from an Existing Port Number List 14. MAC Address Security Table Screens 16 Screens MAC Address Security Table 15. MAC Address Security Table Screen Allowed Source MAC Address Security Table Screen Fields Vlan Configuration Menu 12. Vlan Configuration Menu Screen Options 12 describes the Vlan Configuration Menu screen options Vlan Configuration Field Description Create Vlan 13 describes the Vlan Configuration screen fieldsVlan Configuration Screen Fields Vlan Configuration Screen Fields Field Description User-defined PID 13. Vlan Configuration Screen FieldsVlan State Port Membership PID Name Encapsulation PID Value hex Vlan Type Predefined Protocol Identifier PID PID Value hex Comments Reserved PIDs Vlan Port Configuration Gigabit Ports and BayStack 410-24T Switch Ports Restriction Filter Tagged Frames 16 describes the Vlan Port Configuration screen fieldsVlan Port Configuration Screen Fields 16. Vlan Port Configuration Screen Fields 19. Vlan Display by Port Screen Vlan Display by Port 17 describes the Vlan Display by Port screen fields Traffic Class ConfigurationVlan Display by Port Screen Fields VLANs Field Description User Priority 18 describes the Traffic Class Configuration screen fieldsTraffic Class Configuration Screen Fields Port Configuration Screen 1 Port Configuration Port Configuration Screen Fields 19 describes the Port Configuration screen fields LnkTrap High Speed Flow Control ConfigurationAutonegotiation Speed/Duplex1 20. High Speed Flow Control Configuration Screen Fields 23. High Speed Flow Control Configuration Screen High Speed Flow Control Configuration Screen Fields Choosing a High Speed Flow Control Mode Asymmetric MultiLink Trunk Configuration Utilization 21. MultiLink Trunk Configuration Menu Screen OptionsOption Description MultiLink Trunk MultiLink Trunk Configuration Screen Field Description Trunk MultiLink Trunk Configuration Screen Fields MultiLink Trunk Utilization Screen MultiLink Trunk Configuration Screen Fields 26. MultiLink Trunk Utilization Screen 1 MultiLink Trunk Utilization Screen Fields 23 describes the MultiLink Trunk Utilization screen fieldsTraffic Type Unit/Port 23. MultiLink Trunk Utilization Screen Fields Port Mirroring ConfigurationField Description Last 5 Minutes Last 30 Minutes 24. Port Mirroring Configuration Screen Fields 24 describes the Port Mirroring Configuration screen fields Unit/Port Y Field Description Monitor Unit/PortAddress a Address B Address-based Monitoring ModesFields Description Port-based 29. Rate Limiting Configuration Screen 1 Rate Limiting Configuration 30. Rate Limiting Configuration Screen 2 Rate Limiting Configuration Screen Fields 26 describes the Rate Limiting Configuration screen fieldsPacket Type Limit 27. Igmp Configuration Menu Screen Options Igmp Configuration Menu27 describes the Igmp Configuration Menu screen options Membership Igmp ConfigurationOption Description Display Multicast Group Field Description 28 describes the Igmp Configuration screen fieldsIgmp Configuration Screen Fields Igmp Configuration Screen Fields 28. Igmp Configuration Screen Fields Configuring Ports as Static Router Ports Multicast Group Membership Option Description 29 describes the Multicast Group Membership screen optionsMulticast Group Membership Screen Options 34. Port Statistics Screen Port Statistics Port Statistics Screen Fields 30 describes the Port Statistics screen fieldsGigabit MDA Port Statistics Screen Fields Pause Frames Single Collisions 31. Console/Comm Port Configuration Screen Fields Console/Comm Port Configuration Baud, 4800 Baud, 9600 Baud, 19200 Baud, 38400 Baud Password Type FieldDescription Console SwitchTelnet Switch Console Stack Field Description Telnet Stack Switch PasswordConsole Read-Only Console Read-Write An Ascii string of up to 15 printable characters Any Ascii string of up to 15 printable characters Server 36. Renumber Stack Units Screen Renumber Stack Units 32. Renumber Stack Units Screen Options 32 describes the Renumber Stack Units screen options Hardware Unit Information Spanning Tree Configuration 33. Spanning Tree Configuration Menu Screen Options 38. Spanning Tree Configuration Menu Screen 39. Spanning Tree Port Configuration Screen 1 Spanning Tree Port Configuration Spanning Tree Port Configuration Screen Fields 40. Spanning Tree Port Configuration Screen 2 Spanning Tree Port Configuration Screen Fields 41. Spanning Tree Switch Settings Screen Display Spanning Tree Switch Settings Parameter Description 35 describes the Spanning Tree Switch Settings parameters35. Spanning Tree Switch Settings Parameters Delay Parameter Description Forward DelayBridge Hello Time 36 describes the Telnet Configuration screen fields Telnet Configuration Login Timeout Login Retries Inactivity Event Logging 36. Telnet Configuration Screen Fields Telnet Configuration Screen Fields Software Download 37. Software Download Screen Fields 37 describes the Software Download screen fields New Image LED Indications During the Download Process Link status LEDs ports 18 to 24 only The LEDs begin to Phase Description LED Indications38. LED Indications During the Software Download Process 44. Configuration File Download/Upload Screen Configuration File Copy Configuration 39. Configuration File Download/Upload Screen FieldsRetrieve Configuration Image to Server These parameters are not saved Used in this screen See Parameters Not Saved to the Configuration File 45. Event Log Screen Display Event Log Write Threshold Excessive Bad Entries 47. Sample Event Log Entry Exceeding the Write Threshold Flash Update 49. Self-Test Screen After Resetting the Switch Reset 50. Nortel Networks Logo Screen Reset to Default Settings 51. Self-Test Screen After Resetting to Default Settings 116 Logout 53. Password Prompt ScreenPage Chapter Troubleshooting Interpreting the LEDs Troubleshooting Diagnosing and Correcting the Problem Corrective Actions Normal Power-Up SequenceSymptom Probable cause Corrective action See Port Connection Problems on Port Connection Problems Port Interface Autonegotiation Modes Error code Description Corrective action Software Download Error CodesSoftware Download Error Codes Center Page Parameter Specifications Parameter Operating Specification Storage SpecificationEnvironmental Electrical Network Protocol and Standards Compatibility Physical DimensionsPerformance Specifications Data Rate Safety Agency CertificationInterface Options Electromagnetic Emissions Declaration of Conformity Electromagnetic Immunity Type Model/Description See Appendix B Media Dependent Adapters Label Description 10BASE-T/100BASE-TX MDA 100BASE-FX MDAs Figure B-2 BASE-FX MDA Front Panels Table B-2 BASE-FX MDA Components Figure B-3. Installing an MDA Installing an MDA Loosen the thumbscrews and remove the MDA Remove the AC power cord from the power sourceReplacing an MDA with a Different Model Page To learn more about Refer to this section Appendix C Quick Steps to Features To create or modify an 802.1Q VLAN, follow the flowcharts Configuring 802.1Q VLANs Figure C-2. Configuring 802.1Q VLANs 2 Figure C-3. Configuring 802.1Q VLANs 3 Figure C-4. Configuring MultiLink Trunks Configuring MultiLink Trunks Figure C-5. Configuring Port Mirroring 1 Configuring Port Mirroring Figure C-6. Configuring Port Mirroring 2 Figure C-7. Configuring Igmp Snooping 1 Configuring Igmp Snooping Figure C-8. Configuring Igmp Snooping 2 Figure C-9. Configuring Igmp Snooping 3 Figure D-1. RJ-45 8-Pin Modular Port Connector RJ-45 10BASE-T/100BASE-TX Port Connectors MDI and MDI-X Devices Table D-1 RJ-45 Port Connector Pin AssignmentsPin Signal Description Figure D-2. MDI-X to MDI Cable Connections MDI-X to MDI Cable Connections Figure D-3 MDI-X to MDI-X Cable Connections MDI-X to MDI-X Cable Connections Table D-2 DB-9 Console/Comm Port Connector Pin Assignments DB-9 RS-232-D Console/Comm Port ConnectorPage Appears in this CI screen Field Default setting Appendix E Default Settings Using the BayStack 410-24T 10BASE-TSwitch Default Settings Using the BayStack 410-24T 10BASE-T Switch Console Switch Password Type Appears in this CI screen Field Default setting For details about this field, see Page Appendix F Sample BootP Configuration File Using the BayStack 410-24T 10BASE-T Switch Index Index-2 Index-3 Index-4 Index-5 Index-6