Configuring the Switch 140 | SMC Networks 100BASE-TX, 16 10BASE-T

3 Configuring the Switch

3-140

Image 176

SMC Networks 100BASE-TX, 16 10BASE-T manual Configuring the Switch 140

Contents

TigerSwitch 10/100 Page TigerSwitch 10/100 Installation Guide Trademarks Limited Warranty SMC Networks, Inc Tesla Irvine, CA Contents Page Iii Command Line Interface Contents Page Vii Viii Contents Appendix a Software Specifications Tables Xii Figures Xiii Figures Xiv Key Features Key FeaturesFeature Description Supports standard STP and Rapid Spanning Tree Protocol Rstp Description of Software Features Description of Software Features Introduction System Defaults System DefaultsFunction Parameter Default Password super System Defaults Function Parameter Pvid Client Enabled Clock Synchronization Disabled Introduction Connecting to the Switch Configuration Options Initial Configuration Required Connections Console Connection Basic ConfigurationRemote Connections Manual Configuration Setting PasswordsSetting an IP Address Dynamic Configuration Enabling Snmp Management Access Community Strings Saving Configuration Settings Trap Receivers Managing System Files Enter the name of the start-up file. Press Enter Configuring the Switch Using the Web Interface Navigating the Web Browser Interface Home Configuration Options Panel Display Reset Restarts the switch ConfigurationMain Menu Main Menu Description ACL 101 Current Table105 110 Class-of-service value IP Dscp Priority Matching an ACL rule Igmp Snooping 132 Igmp Configuration117 126 Displaying System Information Field Attributes Displaying Switch Hardware/Software Versions CLI Specify the hostname, location and contact information Displaying Switch Information Displaying Bridge Extension Configuration Displaying Bridge Extension Capabilities Command Attributes Setting the Switch’s IP AddressCLI Enter the following command IP Configuration Using DHCP/BOOTP IP Configuration using Dhcp Managing Firmware Downloading System Software from a Server Operation Code Image File Transfer Saving or Restoring Configuration Settings 10. Deleting Files Downloading Configuration Settings from a Server 11. Copy Configuration Settings Console Port Settings 12. Setting the Startup Configuration Settings 13. Console Port Settings Telnet Settings 14. Enabling Telnet Configuring Event Logging System Log Configuration Error resource exhausted Logging LevelsLevel Severity Name Description Alert Immediate action needed Emergency System unusable Remote Logs Configuration 16. Enabling Remote Logging and Adding Host IP Addresses Displaying Log Messages 17. Displaying System Logs Resetting the System Setting the System Clock Configuring Sntp 19. Configuring Sntp Setting the Time Zone Simple Network Management Protocol Setting Community Access Strings Access Mode 22. Configuring IP Trap Managers Specifying Trap Managers and Trap Types User Authentication Configuring User Accounts 23. Access Levels Configuring Local/Remote Logon Authentication Command Usage Radius Settings Tacacs Settings 24. Authentication Settings Configuring Https Compatible Operating Systems Web Browser Replacing the Default Secure-site Certificate 25. Https Settings Configuring the Secure Shell Configuring the Switch Generating the Host Key Pair 26. SSH Host-Key Settings Configuring the SSH Server SSH server includes basic settings for authentication Configuring Port Security 28. Configuring Port Security Configuring 802.1x Port Authentication Displaying 802.1x Global Settings 802.1x protocol provides client authenticationCLI This example shows the default global setting for Web Click Security, 802.1X, Information CLI This example enables 802.1x globally for the switch Configuring 802.1x Global SettingsConfiguring Port Settings for 31 .1x Port Configuration Authorized Consoleconfig#interface ethernet 1/2 Displaying 802.1x Statistics Statistical Values 1x Statistics Parameter Description 32. Displaying 802.1x Port Statistics CLI This example displays the 802.1x statistics for port Access Control Lists Configuring Access Control Lists Setting the ACL Name and Type CLI This example creates a standard IP ACL named david Configuring a Standard IP ACL 34. Configuring Standard ACLs Configuring an Extended IP ACL 35. Configuring Extended ACLs Configuring a MAC ACL 36. Configuring MAC ACLs Binding a Port to an Access Control List 37. Binding a Port to an ACL Filtering Addresses for Management Access CLI This example allows Snmp access for a specific client 38. Creating a Web IP Filter List Port Configuration Displaying Connection StatusField Attributes Web Web Click Port, Port Information or Trunk Information Field Attributes CLI Basic Information Configuring Interface Connections CLI This example shows the connection status for Port 40. Port/Trunk Configuration Creating Trunk Groups Statically Configuring a Trunk 41. Configuring Port Trunks Enabling Lacp on Selected Ports 120 42. Lacp Configuration Configuring Lacp Parameters Dynamically Creating a Port Channel 43. Lacp Port Configuration 122 Field Description Displaying Lacp Port CountersLacp Statistics Displaying Lacp Settings and Status for the Local Side Displaying Lacp Local Settings 45. Displaying Lacp Port Internal Information Displaying Lacp Settings and Status for the Remote Side Displaying Lacp Remote Settings Field Description Setting Broadcast Storm Thresholds 47. Enabling Port Broadcast Control Configuring Port Mirroring 48. Mirror Port Configuration Configuring Rate Limits Rate Limit Granularity Rate Limit Configuration 50. Output Rate Limit Port Configuration Showing Port Statistics Parameter Description Port Statistics Parameter Description Or alignment error FormedOversize Frames Fragments 51. Port Statistics CLI This example shows statistics for port Address Table SettingsSetting Static Addresses 52. Configuring a Static Address Table Displaying the Address Table 53. Configuring a Dynamic Address Table CLI This example sets the aging time to 400 seconds Spanning Tree Algorithm ConfigurationChanging the Aging Time Displaying Global Settings Spanning Tree Algorithm Configuration 55. Displaying Spanning Tree Information Configuring Global Settings Global settings apply to the entire switch Configuration Settings for Rstp 56. Configuring Spanning Tree Displaying Interface Settings 57. Bpdu Transmission 58. Displaying Spanning Tree Information CLI This example shows the STA attributes for port Configuring Interface Settings 59. Configuring Spanning Tree per Port CLI This example sets STA attributes for port Vlan Configuration Ieee 802.1Q VLANs VA Vlan Aware VU Vlan Unaware Forwarding Tagged/Untagged Frames Enabling or Disabling Gvrp Global Setting CLI This example enables Gvrp for the switchDisplaying Basic Vlan Information Web Click VLAN, 802.1Q VLAN, Basic Information Command Attributes Web Displaying Current VLANs 62. Displaying Current VLANs Command Attributes CLI Creating VLANs 153 Adding Static Members to VLANs Vlan Index CLI This example creates a new Vlan 64. Configuring a Vlan Static Table Adding Static Members to VLANs Port Index 65. Vlan Static Membership by Port Configuring Vlan Behavior for Interfaces 66. Configuring VLANs per Port Private VLANs Displaying Current Private VLANs 67. Private Vlan Information Configuring Private VLANs Associating Community VLANs Each community Vlan must be associated with a primary Vlan Displaying Private Vlan Interface Information 69. Private Vlan Association Configuring Private Vlan Interfaces 70. Displaying Private Vlan Port Information 71. Private Vlan Port Configuration Setting the Default Priority for Interfaces Class of Service ConfigurationLayer 2 Queue Settings 72. Port Priority Configuration CLI This example assigns a default priority of 5 to port Mapping CoS Values to Egress Queues 10. Egress Queue Priority Mapping11. Priority Level Descriptions Priority Level Traffic Type Selecting the Queue Mode 73. Traffic Classes Setting the Service Weight for Traffic Classes 74. Selecting the Queue Mode 75. Configuring Interfaces for Queue Scheduling Selecting IP Precedence/DSCP Priority Layer 3/4 Priority SettingsMapping Layer 3/4 Priorities to CoS Values Mapping IP Precedence 12. Mapping IP Precedence Priority Level Traffic Type 10, 12, 14 18, 20, 22 26, 28, 30, 32, 34 38, 40 Mapping Dscp Priority13. Mapping Dscp Priority Values IP Dscp Value CoS Value 78. Mapping IP Dscp Priority Values Mapping IP Port Priority 79. Enabling IP Port Priority Status Mapping CoS Values to ACLs 14. Egress Queue Priority Mapping Multicast Filtering 81. ACL CoS Priority Configuring Igmp Snooping and Query Parameters Layer 2 Igmp Snooping and Query 82. Igmp Configuration Displaying Interfaces Attached to a Multicast Router 83. Displaying Multicast Router Port Information 84. Static Multicast Router Port Configuration Specifying Static Interfaces for a Multicast Router Displaying Port Members of Multicast Services 85. IP Multicast Registration Table Assigning Ports to Multicast Services 86. Igmp Member Port Table Consoleconfig#ip igmp snooping vlan 1 static Ethernet 1/12 Configuring the Switch 140 Telnet Connection Using the Command Line InterfaceAccessing the CLI Command Line Interface Entering Commands Command CompletionGetting Help on Commands Keywords and Arguments Showing Commands Negating the Effect of Commands Using Command HistoryUnderstanding Command Modes Command Modes Exec Commands Configuration Commands Configuration Modes Command Prompt Consoleconfig-if# 104 Command Line Processing Command Line ProcessingErases a mistake when entering a command Keystroke Function Command Groups Command Groups Description Line Commands Line Login Related CommandsSyntax Login local no login Example Password Username 4-26 passwordSyntax Password 0 7 password no password No password is specified Timeout login response Exec-timeoutSyntax Timeout login response seconds no silent-time Syntax Exec-timeout seconds no exec-timeout Password-thresh Silent-time4-15 Timeout login responseSyntax Password-thresh threshold no password-thresh Default value is three attempts Silent-time DatabitsSyntax Silent-time seconds no silent-time Syntax Databits 7 8 no databits Parity Syntax Parity none even odd no parity Speed StopbitsSyntax Speed bps no speed Syntax Stopbits 1 Disconnect Show lineSyntax Disconnect session-id Syntax Show line console vty General Commands EnableTo show all lines, enter this command General Commands Function Mode Disable Disable Enable passwordEnable Level Configure Show history Reload End This command exits the configuration program This example shows how to quit a CLI sessionExit Quit Prompt System Management CommandsDevice Designation Commands User Access Commands User Access Commands Function ModeHostname Syntax Hostname name no hostname Username 10. Default Login Settings Username Access-level PasswordGuest Admin Enable password Default is level Default password is super IP Filter Commands 11. IP Filter Commands Function ModeManagement Management Show management Ip http server Web Server CommandsIp http port Syntax No ip http secure-server Default Setting Ip http secure-serverIp http port 13. Https System Support Web Browser Operating System Ip http secure-port Ip http secure-port4-32 Copy tftp https-certificatePortnumber The UDP port used for HTTPS/SSL. Range Ip http secure-server4-31 Ip telnet server Telnet Server CommandsIp telnet port Secure Shell Commands 15. SSH Commands Function ModeIp telnet port Sets the SSH server key size Copy tftp public-key System Management Commands Ip ssh crypto host-key generate 4-39 show ssh Syntax Ip ssh server no ip ssh server Default SettingIp ssh server Ip ssh timeout Ip ssh authentication-retriesSyntax Ip ssh timeout seconds no ip ssh timeout Exec-timeout4-13 show ip ssh Syntax Delete public-key username dsa rsa Ip ssh server-key sizeDelete public-key Ip ssh crypto host-key generate Ip ssh crypto zeroizeSyntax Ip ssh crypto host-key generate dsa rsa Syntax Ip ssh crypto zeroize dsa rsa Syntax Ip ssh save host-key dsa rsa Ip ssh save host-keyShow ip ssh Show ssh 16. show ssh display description Show public-key Syntax Show public-key user username hostUsername Name of an SSH user. Range 1-8 characters Shows all public keys Event Logging Commands 17. Event Logging Commands Function ModeSyntax No logging on Default Setting Logging on 18. Logging Levels Flash errors level 3 RAM warnings level 7Logging history Logging host Logging facilitySyntax No logging host hostipaddress Hostipaddress The IP address of a syslog server Logging trap Clear loggingSyntax Logging trap level no logging trap Syntax Clear logging flash ram Following example shows sample messages stored in RAM Show logSyntax Show log flash ram This command displays the logging configuration Show loggingSyntax Show logging flash ram trap 19. show logging flash/ram display description Time Commands Facility commandLogging trap command 21. Time Commands Function Mode Sntp server 4-51 sntp poll 4-51 show sntp Syntax No sntp client Default SettingSntp client Sntp server Sntp pollSyntax Sntp server ip1 ip2 ip3 Sntp client 4-50 sntp poll 4-51 show sntp Sntp client Show sntpClock timezone This command displays the system clock Calendar setShow calendar Syntax System Status Commands 22. System Status Commands Function ModeLight unit Syntax Light unit unit Show startup-config Show running-config Show running-config4-56 Show startup-config4-55 Show users This command displays system informationShow system Show version Frame Size Commands 23. Frame Size Commands Function ModeJumbo frame Enables support for jumbo frames Syntax No jumbo frame Default Setting Copy Flash/File Commands24. Flash/File Commands Function Mode None Following example shows how to download a configuration file Dir Syntax Dir unit boot-rom config opcode filenameDelete Whichboot Following example shows how to display all file informationSyntax whichboot unit 25. File Directory Information Dir 4-64 whichboot Boot systemSyntax Boot system unit boot-romconfig opcode filename Authentication Commands Authentication SequenceAuthentication login 26. Authentication Commands Command Group Function Authentication enable Username for setting the local user names and passwords Radius Client 28. Radius Client Commands Function ModeShow radius-server Shows the current Radius settings Default Setting Auth-port Retransmit Command ModeRadius-server port Syntax Radius-server port portnumber no radius-server port Syntax Radius-server key keystring no radius-server key Radius-server keyRadius-server retransmit Radius-server timeout Show radius-server 29. Tacacs Commands Function Mode TACACS+ ClientTacacs-server host Tacacs-server port Syntax Tacacs-server key keystring no tacacs-server key Tacacs-server keyShow tacacs-server Port Security Commands 30. Port Security Commands Function ModeStatus Disabled Action None Maximum Addresses Interface Configuration Ethernet Command Usage 802.1x Port Authentication 31 .1x Port Authentication Command Function ModeAcquire a new client Dot1x timeout re-authperiod Be re-authenticated Dot1x timeout tx-period Dot1x default Syntax Dot1x default Command ModeDefault Command Mode Dot1x max-req Dot1x port-control Dot1x operation-modeForce-authorized Single-host Dot1x re-authenticate Dot1x re-authenticationSyntax Dot1x re-authenticate interface Syntax No dot1x re-authentication Command Mode Seconds The number of seconds. Range Dot1x timeout quiet-periodDot1x timeout re-authperiod Syntax Show dot1x statistics interface interface Dot1x timeout tx-periodShow dot1x Authenticator State Machine State Current state including initialize, reauthenticate Command Line Interface Access Control List Commands Access Control Lists Access-list ip 32. Access Control Lists Command Groups Function33. IP ACLs Command Function Mode Syntax No access-list ip standard extended aclname Standard ACL Permit, deny Ip access-group4-90 show ip access-list4-90Syntax No permit deny any source bitmask host source Access-list ip No permit deny tcp Extended ACL Show ip access-list Ip access-groupSyntax Show ip access-list standard extended aclname Syntax No ip access-group aclname Show ip access-group Map access-list ipShow ip access-list4-90 This command shows the ports assigned to IP ACLs Show map access-list ip Queue cos-map4-166 Show map access-list ipSyntax Show map access-list ip interface 34. Egress Queue Priority Mapping Access-list mac 35. MAC ACLs Command Function ModeSyntax No access-list mac aclname MAC ACLs Permit, deny MAC ACL Syntax No permit deny Show mac access-list Mac access-groupSyntax Show mac access-list aclname Syntax Mac access-group aclname Show mac access-group Map access-list macShow mac access-list4-95 This command shows the ports assigned to MAC ACLs Show map access-list mac Queue cos-map4-166 Show map access-list macSyntax Show map access-list mac interface 36. Egress Queue Priority Mapping Show access-list Show access-group37. ACL Information Command Function Mode ACL Information Snmp-server community Snmp Commands38. Snmp Commands Function Mode Snmp-server contact Snmp-server locationSyntax Snmp-server contact string no snmp-server contact Syntax Snmp-server location text no snmp-server location Snmp-server host Host Address None Snmp Version Snmp-server enable traps Snmp-server enable trapsIssue authentication and link-up-down traps This command checks the status of Snmp communications 103 Interface Commands 39. Interface Commands Function ModeInterface Port-channel channel-idRange Syntax Description string no description DescriptionSpeed-duplex Negotiation 4-106 capabilities Syntax No negotiation Default SettingNegotiation Capabilities 4-107speed-duplex4-105 Following example configures port 11 to use autonegotiationCapabilities Syntax No flowcontrol Default Setting Flow control enabledFlowcontrol Negotiation 4-106speed-duplex4-105 flowcontrol Syntax No shutdown Default Setting Shutdown Switchport broadcast packet-rate This command clears statistics on an interfacePort-channel channel-idRange Default Setting Clear counters This command displays the status for an interface Show interfaces statusFollowing example clears statistics on port Syntax Show interfaces status interface This command displays interface statistics Show interfaces countersSyntax Show interfaces counters interface Shows the counters for all interfaces Shows all interfaces Show interfaces switchportSyntax Show interfaces switchport interface 40. Interfaces Switchport Statistics Mirror Port Commands 41. Mirror Port Commands Function ModeInterface Configuration Ethernet, destination port Port monitor Show port monitor Syntax Show port monitor interface Rate Limit Commands 42. Rate Limit Commands Function ModeRate-limit Actual rate limit = Rate limit level * Granularity Global Configuration Ethernet, Port Channel Use this command to display the rate limit granularityRate-limit granularity Show rate-limit Link Aggregation Commands 43. Link Aggregation Commands Syntax Channel-group channel-idno channel-group Channel-groupGuidelines for Creating Trunks Following example creates trunk 1 and then adds port Syntax No lacp Default SettingLacp Lacp system-priority 32768 Lacp admin-keyEthernet Interface Lacp admin-key Port Channel This command displays Lacp information Lacp port-priority Port Channel all 44. show lacp counters display descriptionType Badly formed PDU or an illegal value of Protocol Subtype 45. show lacp internal display description 46. show lacp neighbors display description 47. show lacp sysid display description Address Table Commands48. Address Table Commands Function Mode Vlan-id- Vlan ID Range Mac-address-table staticMac-address- MAC address Mac-address- MAC address Mask Bits to match in the address Clear mac-address-table dynamicShow mac-address-table Mac-address-table aging-time Show mac-address-table aging-time Spanning Tree Commands 49. Spanning Tree Commands Function ModeSyntax No spanning-tree Default Setting Spanning tree is enabled Rstp Spanning-tree modeSyntax Spanning-tree mode stp rstp no spanning-tree mode Spanning-tree forward-time Spanning-tree hello-time Spanning-tree max-age Long method Spanning-tree prioritySpanning-tree pathcost method This command limits the maximum transmission rate for BPDUs Spanning-tree transmission-limitSpanning-tree cost Count The transmission limit in seconds. Range Spanning-tree port-priority Priority The priority for a port. Range 0-240, in steps Syntax No spanning-tree edge-port Default Setting Spanning-tree edge-port Syntax No spanning-tree portfast Default Setting Spanning-tree portfastSpanning-tree link-type Spanning-treeedge-port4-140 Port-channel channel-idRange Command Mode Spanning-tree protocol-migrationAuto Syntax Spanning-tree protocol-migration interface Syntax Show spanning-tree interface This command shows the configuration for the spanning treeShow spanning-tree 144 Vlan Commands 50. VLANs Command Groups Function51. Editing Vlan Groups Command Function Mode Editing Vlan Groups By default only Vlan 1 exists and is active Vlan Database ConfigurationVlan Show vlan Configuring Vlan Interfaces 52. Configuring Vlan Interfaces Command Function ModeInterface vlan Interface vlan Switchport mode Switchport acceptable-frame-typesAll ports are in hybrid mode with the Pvid set to Vlan Switchport acceptable-frame-types4-148 Switchport ingress-filtering Syntax No switchport ingress-filtering Default Setting Switchport native vlan Switchport allowed vlan Switchport forbidden vlan No VLANs are included in the forbidden list Show vlan 53. Show Vlan Commands Function ModeDisplaying Vlan Information Configuring Private VLANs 54. Private Vlan Commands Function Mode Vlan Configuration Private-vlan No private-vlan primary-vlan-idassociation Switchport mode private-vlanPrivate vlan association Switchport private-vlan host-association Normal Vlan Syntax Show vlan private-vlan community isolated primary Switchport private-vlan mappingShow vlan private-vlan Gvrp and Bridge Extension Commands 55. Gvrp and Bridge Extension Commands Function ModeSyntax No bridge-ext gvrp Default Setting Bridge-ext gvrp Show bridge-ext Switchport gvrpSyntax No switchport gvrp Default Setting Show gvrp configuration Garp timerThis command shows if Gvrp is enabled Syntax Show gvrp configuration interface Shows all Garp timers Show garp timerSyntax Show garp timer interface Priority Commands Priority Commands Layer56. Priority Commands Command Groups Function 57. Priority Commands Layer Function Mode Queue bandwidth Queue modeSyntax Queue mode strict wrr no queue mode Switchport priority default Queue cos-map Mapping CoS Values Show queue mode This command shows the current queue modeShow queue bandwidth Show queue cos-map4-168 Syntax Show queue cos-map interface This command shows the class of service priority mapShow queue cos-map Syntax No map ip port Default Setting Priority Commands Layer 359. Priority Commands Layer 3 Function Mode Following example shows how to map Http traffic to CoS value Syntax No map ip precedence Default Setting List below shows the default priority mapping 60. Mapping IP Precedence Values CoS Value Command Mode Command Line Interface Map ip dscp Global Configuration Syntax No map ip dscp Default Setting Syntax Show map ip port interface Use this command to show the IP port priority map61. IP Dscp to CoS Vales IP Dscp Value CoS Value Syntax Show map ip precedence interface This command shows the IP precedence priority mapShow map ip precedence Syntax Show map ip dscp interface This command shows the IP Dscp priority mapShow map ip dscp Multicast Filtering Commands Igmp Snooping Commands62. Multicast Filtering Commands Command Groups Function 63. Igmp Snooping Commands Function Mode Syntax No ip igmp snooping Default Setting Following example enables Igmp snoopingIp igmp snooping Ip igmp snooping vlan static Following configures the switch to use Igmp Version This command shows the Igmp snooping configurationIp igmp snooping version Show ip igmp snooping Show mac-address-table multicast Following shows the current Igmp snooping configurationThis command shows known multicast addresses Igmp Query Commands Layer 64. Igmp Query Commands Layer Function ModeSyntax No ip igmp snooping querier Default Setting Ip igmp snooping querier Following shows how to configure the query count to Ip igmp snooping query-intervalTimes Ip igmp snooping query-max-response-time4-182 Ip igmp snooping router-port-expire-time Seconds The report delay advertised in Igmp queries. RangeIp igmp snooping query-max-response-time Static Multicast Routing Commands 65. Static Multicast Routing Commands Function ModeIp igmp snooping vlan mrouter Syntax No ip igmp snooping vlan vlan-idmrouter interface Syntax Show ip igmp snooping mrouter vlan vlan-id Displays multicast router ports for all configured VLANsShow ip igmp snooping mrouter IP Interface Commands 66. IP Interface Commands Function ModeInterface Configuration Vlan Ip address This command submits a Bootp or Dhcp client request Ip dhcp restart Show ip interface Ip default-gatewaySyntax Ip default-gateway gateway no ip default-gateway Ip default-gateway4-187 This command has no default for the hostShow ip redirects Ping 189 Command Line Interface 190 Appendix a Software Specifications Software Features Standards Management FeaturesGroups 1, 2, 3, 9 Statistics, History, Alarm, Event Management Information Bases SNMPv2 RFC Sntp RFC SSH Version Tftp RFC Software Specifications Table B-1. Troubleshooting Chart Symptom Action Using System Logs Access Control List ACL Boot Protocol BootpClass of Service CoS Differentiated Services Code Point Service Dscp Garp Vlan Registration Protocol Gvrp Generic Attribute Registration Protocol GarpGeneric Multicast Registration Protocol Gmrp Group Attribute Registration Protocol Garp Igmp Snooping Igmp QueryInternet Group Management Protocol Igmp In-Band Management Multicast Switching Port AuthenticationRemote Authentication Dial-in User Service Radius Network Time Protocol NTP Secure Shell SSH Simple Network Management Protocol SnmpSimple Network Time Protocol Sntp Spanning Tree Protocol STP Virtual LAN Vlan XModem Downloading software 3-16,4-61 Gateway, default 3-12,4-187Numerics Index Index-3 Index-4 Page For Technical SUPPORT, Call