SMC Networks SMC6724L3 , F, S, 1-3

D

ESCRIPTION

OF

S

OFTWARE

F

EATURES

1-3

minimum delay for moving real-time multimedia data across the network.

While multicast filtering and routing provide support for real-time network

applications. Some of the management features are briefly described below.

Configuration Backup and Restore – You can save the current

configuration settings to a file on a TFTP server, and later download this

file to restore the switch configuration settings.

Authentication – This switch authenticates management access via the

console port, Telnet or Web browser. User names and passwords can be

configured locally or can be verified via a remote authentication server (i.e.,

RADIUS). Port-based authentication is also supported via the IEEE

802.1x protocol. This protocol uses the Extensible Authentication

Protocol over LANs (EAPOL) to request a user name and password from

the 802.1x client, and then verifies the client’s right to access the network

via an authentication server (i.e., RADIUS server).

Access Control Lists – ACLs provide packet filtering for IP frames

(based on address, protocol, TCP/UDP port number or TCP control

code) or any frames (based on MAC address or Ethernet type). ACLs can

by used to improve performance by blocking unnecessary network traffic

or to implement security controls by restricting access to specific network

resources or protocols.

DHCP Server and DHCP Relay – A DHCP server is provided to assign

IP addresses to host devices. Since DHCP uses a broadcast mechanism, a

DHCP server and its client must physically reside on the same subnet.

Since it is not practical to have a DHCP server on every subnet, DHCP

Relay is also supported to allow dynamic configuration of local clients

from a DHCP server located in a different network.

Port Configuration – You can manually configure the speed, duplex

mode, and flow control used on specific ports, or use auto-negotiation to

detect the connection settings used by the attached device. Use the

full-duplex mode on ports whenever possible to double the throughput of

switch connections. Flow control should also be enabled to control

Contents

Main TigerSwitch 10/100 24-Port Layer 3 Switch Managemen t Guide Page Page Page L W IMITED v ARRANTY vi vii ONTENTS 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-1 2 Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1 3 Configuring the Switch . . . . . . . . . . . . . . . . . . . . . . . . 3-1 viii ix x xi 4 Command Line Interface . . . . . . . . . . . . . . . . . . . . . . 4-1 xii xiii xiv xv xvi xvii xviii xix xx Page Page 1-1 NTRODUCTION Key Features 1-2 Description of Software Features F S 1-3 1-4 F S 1-5 1-6 F S 1-7 1-8 System Defaults D 1-9 1-10 D 1-11 Page NITIAL 2-1 ONFIGURATION Connecting to the Switch Configuration Options C 2-2 Required Connections S 2-3 C 2-4 Remote Connections Basic Configuration C 2-6 Setting Passwords Setting an IP Address C 2-7 Manual Configuration C 2-8 Dynamic Configuration C 2-9 Enabling SNMP Management Access Community Strings C 2-10 C 2-11 Trap Receivers Saving Configuration Settings C Managing System Files Page Page 3-1 3 S THE ONFIGURING Page Navigating the Web Browser Interface Page I B W 3-5 S 3-6 I B W 3-7 S 3-8 I B W 3-9 S 3-10 I B W 3-11 Basic Configuration Displaying System Information C 3-13 S 3-14 Displaying Switch Hardware/Software Versions C ASIC ONFIGURATION 3-15 Web Click System, Switch Information. S 3-16 Displaying Bridge Extension Capabilities C 3-17 Setting the Switchs IP Address S 3-18 Page Page C 3-21 S 3-22 Managing Firmware Downloading System Software from a Server C 3-23 Saving or Restoring Configuration Settings Page C 3-25 Setting the System Clock S 3-26 Configuring SNTP C 3-27 Setting the Time Zone User Authentication A 3-29 S 3-30 Configuring Local/Remote Logon Authentication A 3-31 S 3-32 Configuring 802.1x Port Authentication A 3-33 S 3-34 Displaying 802.1x Global Settings A 3-35 S 3-36 Configuring 802.1x Global Settings A 3-37 S 3-38 Configuring Port Authorization Mode A 3-39 CLI This example sets the authentication mode to enable dot1x on port 2. Displaying 802.1x Statistics This switch can display statistics for dot1x protocol exchanges for any port. Statistical Values S CLI This example displays the dot1x statistics for port 4. 3-40 C Access Control Lists Configuring Access Control Lists S 3-42 Setting the ACL Name and Type C L 3-43 Configuring a Standard IP ACL S 3-44 Configuring an Extended IP ACL C L 3-45 Page C L 3-47 Configuring a MAC ACL Page Page S 3-50 Simple Network Management Protocol Setting Community Access Strings Page S 3-52 H P Dynamic Host Configuration Protocol Configuring DHCP Relay Service Page H P C 3-55 Configuring the DHCP Server S 3-56 Enabling the Server, Setting Excluded Addresses H P C 3-57 Configuring Address Pools S 3-58 Page Page Page S 3-62 Displaying Address Bindings C Port Configuration Displaying Connection Status S 3-64 C 3-65 S THE ONFIGURING WITCH C 3-67 Configuring Interface Connections S 3-68 C 3-69 Setting Broadcast Storm Thresholds S 3-70 Configuring Port Mirroring C 3-71 Showing Port Statistics S 3-72 C 3-73 S 3-74 C 3-75 Page C 3-77 Configuring Rate Limits Page C 3-79 Trunk Configuration } S 3-80 Dynamically Configuring a Trunk } Page } S 3-82 Statically Configuring a Trunk C RUNK ONFIGURATION 3-83 Address Table Settings Page Page Spanning Tree Algorithm Configuration S 3-88 x x T C A 3-89 Displaying Global Settings S 3-90 T C A 3-91 S 3-92 Configuring Global Settings T C A 3-93 Page T C A 3-95 Displaying Interface Settings x T x C A 3-97 Page T C A 3-99 Configuring Interface Settings S 3-100 T C A 3-101 VLAN Configuration 3-103 Assigning Ports to VLANs S 3-104 3-105 S 3-106 Forwarding Tagged/Untagged Frames Page S 3-108 Displaying Current VLANs 3-109 S 3-110 Creating VLANs 3-111 Adding Static Members to VLANs (VLAN Index) S 3-112 3-113 Adding Static Members to VLANs (Port Index) Page 3-115 S 3-116 3-117 x 3-119 Configuring Uplink and Downlink Ports S 3-120 Class of Service Configuration Setting the Default Priority for Interfaces Page S 3-122 Mapping CoS Values to Egress Queues Page S 3-124 Setting the Service Weight for Traffic Classes Page Page Page S 3-128 C S 3-129 Mapping DSCP Priority S THE ONFIGURING WITCH Page S 3-132 Page S 3-134 Multicast Filtering F 3-135 IGMP Protocol S 3-136 Layer 2 IGMP (Snooping and Query) F 3-137 Configuring IGMP Snooping Parameters S 3-138 F 3-139 Displaying Interfaces Attached to a Multicast Router S 3-140 Specifying Static Interfaces for a Multicast Router Page S 3-142 Displaying Port Members of Multicast Services F 3-143 Assigning Ports to Multicast Services S ( 3-144 Layer 3 IGMP (Query used with Multicast Routing) F 3-145 Configuring IGMP Interface Parameters S 3-146 Page S 3-148 Displaying Multicast Group Information 3-149 IP Routing Overview S 3-150 Initial Configuration 3-151 IP Switching S 3-152 Routing Path Management Routing Protocols 3-153 S 3-154 Basic IP Interface Configuration 3-155 Configuring IP Routing Interfaces S 3-156 3-157 Address Resolution Protocol S 3-158 Proxy ARP 3-159 Basic ARP Configuration S 3-160 Configuring Static ARP Addresses 3-161 Displaying Dynamically Learned ARP Entries S 3-162 3-163 Displaying Local ARP Entries Page 3-165 Displaying Statistics for IP Protocols IP Statistics S 3-166 3-167 Web - Click IP, Statistics, IP. CLI - See the example on page 3-164. S 3-168 ICMP Statistics Page S 3-170 UDP Statistics 3-171 TCP Statistics Page 3-173 Displaying the Routing Table Page 3-175 Configuring the Routing Information Protocol S 3-176 Configuring General Protocol Settings 3-177 S 3-178 Specifying Network Interfaces for RIP 3-179 Configuring Network Interfaces for RIP S 3-180 3-181 S 3-182 3-183 Displaying RIP Information and Statistics S 3-184 RIP Information and Statistics Page S 3-186 Configuring the Open Shortest Path First Protocol 3-187 S 3-188 Configuring General Protocol Settings 3-189 S 3-190 3-191 S 3-192 Configuring OSPF Areas 3-193 S 3-194 3-195 S 3-196 Configuring Area Ranges (Route Summarization for ABRs) 3-197 S 3-198 Configuring OSPF Interfaces 3-199 S 3-200 3-201 Page 3-203 S 3-204 Configuring Virtual Links Page S 3-206 Configuring Network Area Addresses 3-207 S 3-208 Configuring Summary Addresses (for External AS Routes) Page S 3-210 Redistributing External Routes 3-211 S 3-212 Configuring NSSA Settings 3-213 Displaying Link State Database Information S 3-214 Page S 3-216 Displaying Information on Border Routers 3-217 Displaying Information on Neighbor Routers S 3-218 Multicast Routing R 3-219 Configuring Global Settings for Multicast Routing Displaying the Multicast Routing Table S 3-220 Page S 3-222 Configuring DVMRP R 3-223 Configuring Global DVMRP Settings S 3-224 R 3-225 Page R 3-227 Configuring DVMRP Interface Settings S 3-228 R 3-229 Displaying Neighbor Information S 3-230 Displaying the Routing Table R 3-231 Configuring PIM-DM S 3-232 Configuring Global PIM-DM Settings R 3-233 Configuring PIM-DM Interface Settings S 3-234 R 3-235 S 3-236 Displaying Interface Information R 3-237 Displaying Neighbor Information Page 4-1 CHAPTER 4 COMMAND LINE I Using the Command Line Interface Accessing the CLI Console Connection L I 4-2 Telnet Connection C Entering Commands Keywords and Arguments Page C NTERING The command show interfaces ? will display the following information: OMMANDS 4-5 Page C 4-7 Exec Commands L I 4-8 Configuration Commands C 4-9 L I 4-10 Command Line Processing G Command Groups The system commands can be broken down into the functional groups shown below L I 4-12 C 4-13 Line Commands L I 4-14 line C 4-15 login L I 4-16 password C 4-17 exec-timeout L I 4-18 password-thresh C 4-19 silent-time L I 4-20 databits C 4-21 parity Page C 4-23 stopbits show line L General Commands I 4-24 Example To show all lines, enter this command: C 4-25 enable Page C 4-27 configure show history L I 4-28 reload C 4-29 end exit Page M C Device Designation Commands 4-31 System Management Commands Page M C 4-33 username L I 4-34 enable password M C 4-35 Web Server Commands ip http port L I 4-36 ip http server M C 4-37 Event Logging Commands logging on L I 4-38 logging history M C 4-39 clear logging Page M C 4-41 Time Commands L I 4-42 sntp client M C 4-43 sntp server L I 4-44 sntp poll Page L I 4-46 clock timezone M C 4-47 System Status Commands show startup-config L I 4-48 M C 4-49 show running-config L I 4-50 show startup-config (4-47) M C 4-51 show system show users L I 4-52 show version C Flash/File Commands copy L I 4-54 C 4-55 Page C 4-57 dir L I 4-58 whichboot C 4-59 boot system L I Authentication Commands Authentication Sequence authentication login C 4-61 RADIUS Client Page C 4-63 radius-server port radius-server key Page C 4-65 radius-server timeout show radius-server L I 4-66 802.1x Port Authentication Page L I 4-68 dot1x max-req dot1x port-control C 4-69 dot1x re-authenticate dot1x re-authentication Page C 4-71 dot1x timeout tx-period L I 4-72 show dot1x C 4-73 L I 4-74 Access Control List Commands C L 4-75 L I 4-76 IP ACLs access-list ip C L 4-77 L I 4-78 permit, deny (Standard ACL) C L 4-79 permit, deny (Extended ACL) L I 4-80 C L 4-81 ip access-group Page Page L I 4-84 MAC ACLs access-list mac C L 4-85 permit, deny (MAC ACL) L I 4-86 Page Page Page L I 4-90 SNMP Commands snmp-server community 4-91 snmp-server contact Page 4-93 snmp-server host L I 4-94 snmp-server enable traps 4-95 show snmp L I 4-96 4-97 DHCP Commands DHCP Client ip dhcp client-identifier L I 4-98 ip dhcp restart client 4-99 DHCP Relay ip dhcp restart relay L I 4-100 4-101 ip dhcp relay server L I 4-102 DHCP Server 4-103 service dhcp Page 4-105 network L I 4-106 default-router 4-107 domain-name Page 4-109 next-server bootfile L I 4-110 netbios-name-server 4-111 netbios-node-type L I 4-112 lease 4-113 host L I 4-114 client-identifier 4-115 hardware-address L I 4-116 clear ip dhcp binding 4-117 show ip dhcp binding L I 4-118 Interface Commands C 4-119 interface description L I 4-120 speed-duplex C 4-121 negotiation L I 4-122 capabilities C 4-123 L I 4-124 flowcontrol C 4-125 shutdown L I 4-126 switchport broadcast packet-rate C 4-127 clear counters Page C 4-129 show interfaces counters L I 4-130 C 4-131 show interfaces switchport L I 4-132 P C Mirror Port Commands port monitor L I 4-134 show port monitor L Rate Limit Commands L I 4-136 rate-limit A Link Aggregation Commands L I 4-138 channel-group Page L I 4-140 T C Address Table Commands mac-address-table static L I 4-142 clear mac-address-table dynamic T C 4-143 show mac-address-table L I 4-144 mac-address-table aging-time Page L I 4-146 Spanning Tree Commands T C 4-147 spanning-tree L I 4-148 spanning-tree mode T C 4-149 spanning-tree forward-time Page T C 4-151 spanning-tree priority L I 4-152 spanning-tree pathcost method Page L I 4-154 spanning-tree cost T C 4-155 spanning-tree port-priority L I 4-156 spanning-tree edge-port T C 4-157 spanning-tree portfast L I 4-158 spanning-tree link-type T C 4-159 spanning-tree protocol-migration L I 4-160 show spanning-tree T C REE PANNING OMMANDS VLAN Commands Editing VLAN Groups vlan database 4-163 vlan L I Configuring VLAN Interfaces 4-164 4-165 interface vlan L I 4-166 switchport mode 4-167 switchport acceptable-frame-types L I 4-168 switchport ingress-filtering 4-169 switchport native vlan L I 4-170 switchport allowed vlan 4-171 switchport forbidden vlan L I 4-172 Displaying VLAN Information show vlan 4-173 Configuring Private VLANs pvlan L I 4-174 show pvlan GVRP GVRP and Bridge Extension Commands bridge-ext gvrp Page GVRP C E B 4-177 L I 4-178 show gvrp configuration garp timer GVRP C E B 4-179 Page C 4-181 Priority Commands Priority Commands (Layer 2) L I 4-182 switchport priority default C 4-183 queue bandwidth L I 4-184 queue cos-map C 4-185 show queue bandwidth L I 4-186 show queue cos-map C 4-187 Priority Commands (Layer 3 and 4) map ip port (Global Configuration) L I 4-188 map ip port (Interface Configuration) C 4-189 map ip precedence (Global Configuration) map ip precedence (Interface Configuration) L I 4-190 C 4-191 map ip dscp (Global Configuration) map ip dscp (Interface Configuration) L I 4-192 C 4-193 show map ip port L I 4-194 show map ip precedence C 4-195 show map ip dscp L I Multicast Filtering Commands Page L I 4-198 ip igmp snooping version F C 4-199 show ip igmp snooping L I 4-200 show mac-address-table multicast F C 4-201 IGMP Query Commands (Layer 2) ip igmp snooping querier L I 4-202 ip igmp snooping query-count Page L I 4-204 ip igmp snooping router-port-expire-time F C IGMP Commands (Layer 3) 4-205 L I 4-206 ip igmp F C 4-207 ip igmp robustval ip igmp query-interval L I 4-208 ip igmp max-resp-interval F C 4-209 ip igmp last-memb-query-interval L I 4-210 ip igmp version Page L I 4-212 clear ip igmp group F C 4-213 show ip igmp groups L I 4-214 Example The following shows the IGMP groups currently active on VLAN 1: C IP Interface Commands Basic IP Configuration L I 4-216 ip address C 4-217 L I 4-218 ip default-gateway C 4-219 show ip interface show ip redirects L I 4-220 ping C 4-221 Example Address Resolution Protocol (ARP) Related Commands interface (4-119) L I 4-222 arp C 4-223 arp-timeout clear arp-cache L I 4-224 show arp ip proxy-arp IP Routing Commands L I 4-226 Global Routing Configuration ip routing C 4-227 ip route L I 4-228 clear ip route show ip route C 4-229 show ip traffic L I 4-230 C 4-231 Routing Information Protocol (RIP) router rip L I 4-232 timers basic C 4-233 network L I 4-234 neighbor C 4-235 version L I 4-236 ip rip receive version C 4-237 ip rip send version L I 4-238 C 4-239 ip split-horizon L I 4-240 ip rip authentication key C 4-241 ip rip authentication mode L I 4-242 show rip globals show ip rip C 4-243 L I Open Shortest Path First (OSPF) 4-244 C 4-245 L I 4-246 router ospf C 4-247 router-id L I 4-248 compatible rfc1583 default-information originate C 4-249 Page C 4-251 area range L I 4-252 area default-cost C 4-253 summary-address L I 4-254 redistribute C 4-255 network area L I 4-256 C 4-257 area stub L I 4-258 area nssa C 4-259 L I 4-260 area virtual-link C 4-261 L I 4-262 C 4-263 ip ospf authentication L I 4-264 ip ospf authentication-key C 4-265 ip ospf message-digest-key Page C 4-267 ip ospf dead-interval L I 4-268 ip ospf hello-interval ip ospf priority C 4-269 ip ospf retransmit-interval L I 4-270 ip ospf transmit-delay C 4-271 show ip ospf Use this command to show basic information about the routing configuration. Command Mode Page C 4-273 show ip ospf database L I 4-274 C 4-275 The following shows output when using the asbr-summary keyword. L I The following shows output when using the external keyword. 4-276 The following shows output when using the database-summary keyword. C 4-277 L I 4-278 The following shows output when using the network keyword. C 4-279 The following shows output when using the router keyword. L I The following shows output when using the summary keyword. 4-280 C 4-281 show ip ospf interface L I 4-282 show ip ospf neighbor C 4-283 show ip ospf summary-address L I 4-284 show ip ospf virtual-links R Multicast Routing Commands L I 4-286 ip igmp snooping vlan mrouter Page L I 4-288 ip multicast-routing show ip mroute R C 4-289 L I DVMRP Multicast Routing Commands 4-290 This example lists all entries in the multicast table in summary form: R C 4-291 router dvmrp Page Page Page R C 4-295 default-gateway L I 4-296 ip dvmrp R C 4-297 ip dvmrp metric L I 4-298 clear ip dvmrp route show router dvmrp R C DMVRP routes are shown in the following example: 4-299 The default settings are shown in the following example: L I Example 4-300 show ip dvmrp neighbor R C PIM-DM Multicast Routing Commands 4-301 show ip dvmrp interface L I 4-302 router pim R C 4-303 ip pim dense-mode L I 4-304 ip pim hello-interval Page L I 4-306 ip pim join-prune-holdtime R C 4-307 ip pim graft-retry-interval Page R C 4-309 show ip pim interface show ip pim neighbor Page A PPENDIX A-1 A T ROUBLESHOOTING Page Page F P S B-2 B-3 Page G Glossary-1 LOSSARY Glossary-2 Glossary-3 Glossary-4 Glossary-5 Glossary-6 Glossary-7 Page NDEX A B C D F G H I L O P Q R S T U V