Manuals / Symbol Technologies / Computer Equipment / Switch

Symbol Technologies ES3000 manual Port security Secure Port security action trap-shutdown

Models: ES3000

1 320

Download 320 pages 40.8 Kb

Page 288

5-120ES3000 User Guide

!

interface FastEthernet0/16 no flow-control

!

interface FastEthernet0/17 no flow-control

!

interface FastEthernet0/18 no flow-control

!

interface FastEthernet0/19 no flow-control

port security max-mac-count 1 port security action noaction

!

interface FastEthernet0/20 no flow-control

port security Secure

port security action trap-shutdown

!

interface FastEthernet0/21 no flow-control

!

interface FastEthernet0/22 no flow-control

Image 288

Symbol Technologies manual Port security Secure Port security action trap-shutdown, 120ES3000 User Guide

Contents

ES3000 Ethernet Switch Page ES3000 Ethernet Switch User Guide 72E-68446-01 Revision a MayPage Contents Firmware Upgrades Administration Console Access Iv ES3000 User GuideMain Menu Spanning Tree Mstp Config Web Management Access Igmp Snooping-IGMP Snooping Config-IGMP SnoopingCommand Line Interface ViiAppendix A. Specifications & Pin Assignments Appendix B. Cabling GuidelinesAppendix C. Customer Support Introduction Notational ConventionsService Information Switch Management Overview About the ES3000 Ethernet SwitchManagement Access Overview Snmp AccessProtocols Virtual Terminal ProtocolsDefault Installation Preparing for Site InstallationSnmp Protocol Package Contents Supplying Power Terminal Type VT-100 CommunicationMode Administration of the ES3000 Ethernet Switch CLISwitch Management Overview Enter a user name of admin and password of symbol. Press OK Installing a SFP Fiber Transceiver 10ES3000 User Guide Firmware Upgrades To upgrade the switch firmware using the Web interface Administration Console Access Direct Access Management Method2ES3000 User Guide Verify the port settings are Baud RateData Bits Parity Stop Bits Flow ControlClick OK Saving Configuration Changes User InterfaceMain Menu Options Administration Console Access General Information Main Menu-System Administration-System Configuration Main Menu-System Admin.-Access Configuration Main Menu-Access-System IP Configuration Main Menu-Access-Management Access Press Ctrl-Wto save any changes to NvramAdministration Console Access Main Menu-System Admin-SNMP Configuration Menu Administration Console Access Main Menu-SNMP Config.-System Information Main Menu-SNMP Config.-Authorized Managers Set Manager Status Enables or disables a community stringSet Manager IP Restricted to specified IP onlyMain Menu-SNMP Config.-Trap Receiver Configuration EnableDisable Authentication traps are not generated Main Menu-SNMP Config. -Trap Selection Enable/Disable Auth Fail TrapDisable Port Link Down Trap20ES3000 User Guide Main Menu-System Admin. -Tools Menu Main Menu-System Admin.-Tools-Software Upgrade Main Menu-System Admin.-Tools-System Reboot Stop Switch is powered down NormalFactor-Default if the previous configuration crashed Main Menu-System Admin.-Tools-Save Config Main Menu-System Admin. -Tools -Upload/Download Config Set Configuration File NameSet Tftp Server IP Address Main Menu-System Admin.-Tools-SNTP Config There are configurable functions in the Sntp ConfigurationTo gain access Set Sntp Server IPMain Menu-System Admin.-Tools-System Log Main Menu-Port Configuration Menu Main Menu-Ports-Basic Port Config Admin field TypeLink ModeAutomatic. Choose N to manually configure a port Flow ControlGigabit Ports Main Menu-Ports-Basic Port Config-Port Counters Main Menu-Ports-Basic Port Config-Port Mirroring Main Menu-Ports-Port Security Main Menu-Ports-Port Security-Radius 36ES3000 User Guide Main Menu-Ports-Power over Ethernet Admin. status Status of administration for a port PriorityPriority on power supplying Two functions are provided for the PoE controlOne of the following Low priority port is shut downDeny next port connection Administration Console Access Main Menu-Ports-Link Aggregation Main Menu-Ports-Link Aggregation-LA Config Main Menu-Ports-Link Aggregation-Set Port Priority Main MenuVLANs Vlan ID #1 cannot be deleted under any circumstanceMain Menu-VLANs-VLANs by VLAN-ID Give the corresponding Vlan ID To configure a Vlan Member To create a new Vlan GroupSelect Create Vlan Select Delete VlanChoose E to enable and D to disable Select Set Gvrp StatusSelect Set Management Status To create a VlanMain Menu-VLANs-VLAN Port Configuration Menu Set Port VIDPort Tagged OnlyMain Menu-IGMP Snooping Configuration Menu Multicast traffic through the switchMain Menu-IGMP Snooping-IGMP Snooping Config Multicast traffic through the switchMain Menu-IGMP Snooping-VLAN Filter Table Main Menu-IGMP Snooping-Router Port Table Main Menu-Spanning Tree Configuration Menu Forwarding DB Mstp ConfigMain Menu-Spanning Tree-Forwarding DB Static Address TableDisplay MAC Address By Port Display MAC Address by MACStatic Address Table To remove an entry Hit key DAdministration Console Access Switches to work cross-switch Global Mstp StatusMstp is not running Protocol VersionCross-switch MST Config DigestCist Configuration Wide configurationMain Menu-Spanning Tree-CIST Config StatusRapid Spanning Tree Main Menu-Spanning Tree-MSTP Config-CIST Basic Port Config Administration Console Access Main Menu-Spanning Tree-MSTP Config.-MSTP Instance Config Administration Console Access Main Menu-Spanning Tree-MSTP Config.-Regional Topology Info Main Menu-QoS Quality of Service Configuration Menu Main Menu-QoS-Policy Config Main Menu-QoS-Queue Config Main Menu-QoS-Queue Config.-Queue Mapping Main Menu-QoS-Rate Limiting Incoming port BroadcastExecute CLI 72ES3000 User Guide Web Management Access System Admin InformationVLANs Igmp SnoopingSaving Web Interface Configuration Changes To save changes made within the Web interface, refer toSystem Admin-Access-IP Configuration System Admin-Access-Management Access System Admin-Access-User Name Password Change System Admin-SNMP Configuration System Admin-SNMP Configuration-SNMP Information System Admin-SNMP Configuration-Authorized Managers System Admin-SNMP Configuration-Trap Receiver Authentication TrapsPort Link Down Trap Link Down TrapWeb Management Access System Admin-Tools-Software Upgrade System Admin-Tools-System Reboot Factory DefaultStop StartSystem Admin-Tools-Save Configuration System Admin-Tools-SNTP Configuration Into itSystem Admin-Tools-System Log Menu System Admin-Tools-TFTP Configuration File Upload/ Download System Admin-Ports-Port Status and Configuration Type of port, this field is not user configurableWeb Management Access System Admin-Ports-Port Counters System Admin-Ports-IP Port Mirroring System Admin-Ports-Port Security -Radius Configuration System Admin-Ports-Port Security -802.1x Configuration System Admin-Ports-Power over Ethernet System Admin-Ports-Power over Ethernet-Port Configuration Class Usage Example 28ES3000 User Guide Or disabled AdministratorDetection Method Deny next port connection, regardlessPowered Power Usage ThresholdDefined, no Snmp trap is sent Web Management Access End of Algorithm System Admin-Ports-Link Aggregation-System Priority System Admin-Ports-Link Aggregation-Add Group System Admin-Ports-Link Aggregation-Set Port Priority VLANs-VLAN Config-VLANs by VLAN-ID VLANs-VLAN Config-Creating/Modify Vlan Assign the new Vlan a name within the Vlan Name field38ES3000 User Guide VLANs-VLAN Config-Create/Modify 802.1Q Trunk 40ES3000 User Guide VLANs-VLAN Config-VLANs by Port 42ES3000 User Guide Displays Igmp Snooping-IGMP Snooping Config-VLAN Filter Table Igmp Snooping-IGMP Snooping Config-Router Port Table Spanning Tree-Forwarding DB-Add Static FDB Entries Spanning Tree-Forwarding DB-FDB by Port/MAC/VLAN Spanning Tree-MSTP Configuration-MSTP Config Mstp Config DigestLower number receives priority Web Management Access Spanning Tree-MSTP Configuration-CIST Configuration Set Bridge Forward DelayDefines the maximum hop count delay Maximum age timeWeb Management Access 52ES3000 User Guide Web Management Access Spanning Tree-MSTP Configuration-MSTP Instance Configuration Web Management Access 56ES3000 User Guide QoS-Policy Config-Create Classifier 58ES3000 User Guide Destination MAC Protocol60ES3000 User Guide QoS-Policy Configuration-Create In-Profile Action Action Description Value RangeQoS-Policy Configuration-Create Out-Profile Action QoS-Policy Configuration-Create No-Match Action Burst SizeQoS-Policy Configuration-Create Port List QoS-Policy Configuration-Create Policy QoS-Policy Configuration-Policy Sequence Examples with Applied Policies 68ES3000 User Guide QoS-Queue Config-Queue Mapping Priority Queue QoS-Rate Limiting-Storm Control Configuration Except the incoming port ES3000 Ethernet Switch Command Brief Help Key2ES3000 User Guide Command Hierarchy Mode Command Line Interface 6ES3000 User Guide Basic Commands HelpLogout HelpEnable ConfigureEnable ConfigureDisable DisableInterface InterfaceEnd ExitEnd ExitAll command modes PingPing ip Ip IP addressCopy running-config tftp Copy tftp imageIP address File nameCopy running-config startup-config Use this command to save the config to NvramCopy running-config startup-config Web Browser Commands Ip http serverIp http server No ip http server Use the show ip http server command to display telnet Show ip http server command has no default settingShow ip http server Show ip http serverSnmp Commands Snmp-server agentSnmp-server agent No snmp-server agent Snmp-server location Snmp-server contactSnmp-server location string No snmp-server location Snmp-server contact string No snmp-server contactGlobal configuration Snmp-server communitySnmp-server community index community privilege ip IndexBasic Switch Configuration Menu-SNMP-SNMP Trap Receiver Snmp-server hostSnmp-server enable traps Basic Switch Configuration Menu-SNMP-Enable/DisableAuthentication Trap Show snmp command has no default setting Show snmpShow snmp Basic System Management Commands HostnameShow sys-info Show sys-infoDnikarl Console inactivity-timer Console inactivity-timer minShow console Show consoleTelnet-server enable Telnet-server command has no argumentTelnet Server Telnet-server inactivity-timer Telnet-server inactivity-timer minShow telnet-server Show telnet-serverIP Addressing Commands Ip addressIp address ip mask Ip address dhcp Ip address renewIp address dhcp Use the show ip conf command to display IP configurations Show ip confShow ip conf Security Commands Administrator User NameUsername Username name stringLayer-2 Interface Commands Use the shutdown command to enable or disable a portInterface configuration ShutdownSpeed-duplex Interface port Speed-duplex optionFlow-control Show interface infoInterface port Flow-control No flow-control Show interfaceSwitch# show interface Show interface counters errors Show interface counters errors portShow interface counters Show interface counters portPort monitor feature is disabled by default Port monitorInterface port Port monitor port direction direction PacketsShow monitor command has no default setting Show monitorShow monitor Storm-control threshold Storm-control thresholdthresholdThreshold Default value is disabled Storm-control broadcastStorm-control multicast Storm-control broadcast No storm-control broadcastStorm-control unicast Storm-control unicast No storm-control unicastShow storm-control command has no default setting Show storm-controlShow storm-control Link Aggregation Commands Lacp trunkKEY port list modeMode Option Meaning LacpLacp system-priority Lacp system-priority priority-valueLacp port-priority Show lacpLacp port-priority priority-value Show lacpSwitch# show lacp System Priority 40000 MAC Address Commands Mac-address-table staticMac-address-table static mac-addr port vlan vlanID Mac-address-table aging-time Show mac-address-table aging-timeMac-address-table aging-timesec Show mac-address-table aging-timeShow mac-address-table mac Show mac-address-table interfaceShow mac-address-table mac Show mac-address-table interface portShow mac-address-table vlan Show mac-address-table vlan vlanIDC command has no arguments or keywords Command has no default settingShow mac-address-table static Show mac-address-table staticMultiple Spanning Tree Commands Spanning-tree mstSpanning-tree mst name Spanning-tree mst name nameSpanning-tree mst revision Spanning-tree mst versionSpanning-tree mst revison revision Spanning-tree mst version verSpanning-tree mst max-hops Spanning-tree mst prioritySpanning-tree mst max-hopshop Spanning-tree mst priority prioritySpanning-tree mst max-age Spanning-tree mst hello-timeSpanning-tree mst max-age seconds Spanning-tree mst hello-time secondsSpanning-tree mst forward-time Spanning-tree mst forward-time secondsFrom BridgeMaxAge / 2 + 1 to Spanning-tree mst instance priority Spanning-tree mst instance priority priorityPriority Integer ranges from 1 to Values are rejectedSpanning-tree mst instance vlan Spanning-tree mst shutdownSpanning-tree mst instanceinstance-idvlanvlan-range Spanning-tree mst shutdownSpanning-tree mst port-priority Spanning-tree mst costSpanning-tree mst port-priority priority Spanning-tree mst cost costSpanning-tree mst init-migration Init Protocol Migration on the Port in MstpSpanning-tree mst init-migration Spanning-tree mst edgeport Spanning-tree mst point-to-pointSpanning-tree mst edgeport Spanning-tree mst point-to-point statusSpanning-tree mst instance shutdown Spanning-tree mst instance instance shutdownSyntax Description Integer ranges from 1 to Spanning-tree mst instance port-priority Spanning-tree mst instance costSpanning-tree mst instanceinstance-idport-priority priority Spanning-tree mst instance cost costShow spanning-tree mst configuration Show spanning-tree mst configurationSetting Show spanning-tree mst cist configuration Use this command to display the Mstp Cist configurationShow spanning-tree mst cist configuration Show spanning-tree mst cist interface Show spanning-tree mst cist interface port listShow spanning-tree mst instance configuration Use this command to display Mstp Cist configurationShow spanning-tree mst instance configuration Show spanning-tree mst instance interface Show spanning-tree mst instance interface port listIgmp Snooping Commands Ip igmp snoopingIp igmp snooping aging-time Ip igmp snooping aging-time router host secIp igmp snooping report-forward-interval Ip igmp snooping report-forward-interval secIp igmp snooping vlan-filter vlan Show ip igmp snooping confIp igmp snooping vlan-filter vlan vlanID Show ip igmp snooping confShow mac-address-table multicast Show mac-address-table multicstShow ip igmp snooping mrouter Show ip igmp snooping mrouterShow Router Port table Menu Show ip igmp snooping vlan-filter-table Show ip igmp snooping vlan-filter-tableVlan Commands Vlan initVlan init Name memberForbidden Port list List of port instancesUse the no interface command to delete a Vlan in the system ManagementNo interface No interface vlanIDUse the Pvid command to configure a Pvid on a port Frame-typeType All admit all packets Show vlan GvrpShow vlan vlanID Gvrp No gvrpUse the show vlan gvrp command to display Vlan information Show vlan gvrpShow vlan gvrp Use the show vlan port command to display Vlan information Show vlan portShow vlan port Quality of Service Commands Mls qos command has no argumentMls qos Priority-queue cos-mapShow mls qos Show priority-queue cos-mapShow mls qos Show priority-queue cos-mapSwitch# show priority-queue cos-map Diffserv Commands Global configuration commandDiffserv classifier MacDiffserv inprofile PrecedenceCos Diffserv nomatch No-match ID for diffservDiffserv outprofile Diffserv portlistMeter-id PortlistDiffserv policy ValueShow diffserv classifier Show diffserv classifierShow diffserv inprofile Show diffserv outprofileShow diffserv inprofile Show diffserv outprofileShow diffserv portlist Show diffserv portlistShow diffserv policy Show diffserv policy indexShow diffserv policy prcedence port 16 802.1x Commands Dot1x radiusDot1x port-control Dot1x radius NasidDot1x re-authentication Dot1x re-authentication No dot1x re-authenticationDot1x timeout re-authperiod Dot1x timeout supp-timeoutDot1x timeout re-authperiod minute Dot1x timeout supp-timeout secondDot1x timeout quiet-period Dot1x timeout serverDot1x timeout quiet-period second Dot1x timeout tx-period Dot1x max-reqDot1x max-req count Dot1x re-authenticate Dot1x re-authenticateDot1x init Dot1x initDot1x control-direction Dot1x control-direction directionOn the incoming traffic Incoming and outgoing trafficShow dot1x Show dot1x port-listPort-list Radius Commands Radius-server hostShow radius-server command has no default setting Show radius-serverShow radius-server Sntp Commands Hosts are not assigned by defaultSntp server Sntp poll-intervalSntp daylight-saving Sntp timezoneSntp daylight-saving No sntp daylight-saving Show timezone locationThis command has no default value Show sntpShow sntp Syslog Commands Use the show log command to display log for the switchShow log command has no default setting Show logUse the log clear command to delete the syslog Log clearLog clear Power Over Ethernet Commands Use the peth trap command to configure a PoE trapPeth trap Peth usage-thresholdDown, to allow higher-priority ports topower up Peth disconnection-methodPeth capacitor-detection Peth disconnection-method methodPeth limit Peth priorityPeth limit mwatt Peth priority levelUse the peth shutdown command to shut down a PoE port Peth shutdownPeth shutdown Show peth-conf Show peth-portShow peth-conf Prilileged Exec114ES3000 User Guide Miscellaneous Commands System mtuShow system mtu Show system mtu116ES3000 User Guide Sample Configuration File Configuration fileUsername name admin password software No flow-control Command Line Interface Port security Secure Port security action trap-shutdown 120ES3000 User GuidePort monitor FastEthernet0/23 No flow-control Vlan-type 802.1qNo snmp-server enable traps snmp authentication Ip address 172.16.3.42 Ip igmp snoopingNo snmp-server Mls qos End124ES3000 User Guide Specifications ES3000 Ethernet Switch has the following specificationsRJ-45 Plug and RJ-45 Connector MtbfFast Ethernet Cable Guidelines CertificationCategory 5 Cable Specifications Ensure the fiber cable is crossed over to guarantee linkCategory 5 Cable Twisted Pair CablesPatch Panels and Cables OverviewCabling Length Return LossNear End Cross Talk Next Patch Cables Optimum Performance6ES3000 User Guide Customer Support North American Contacts Obtain additional information by contacting Symbol at 4ES3000 User Guide Glossary GL-2ES3000 User Guide GL-3 GL-4ES3000 User Guide GL-5 GL-6ES3000 User Guide Index NumericsIN-2ES3000 User Guide IN-3 IN-4ES3000 User Guide IN-5 IN-6ES3000 User Guide IN-7 Web interface Page Symbol Technologies, Inc