enterasys switch configuration guide

Enterasys Switch Manuals and User Guides PDF Preview and Download Also described in this chapter are port link flap detection, port mirroring, and transmit queue monitoring and how to configure them. 3 CLI Basics This chapter provides information about CLI conventions for stackable and standalone switches and CLI properties that you can configure. IPv6 Routing Configuration Neighbor Discovery is the IPv6 replacement for ARP. Refer to Table 2-2 for console port pinout assignments. 4. How to Configure a Cisco Switch in 10 Steps - 2023 Guide & Tools Hopefully the commands above will help anyone get up to speed quickly out of the box in getting basic configuration and connection variables setup. In global configuration mode, configure an IPv4 static route. Optionally, insert new or replace existing rules. Spanning Tree Basics Identifying Designated, Alternate, and Backup Port Roles Ports in a Spanning Tree configuration are assigned one of four roles: root, designated, alternate, or backup. Enable or disable notifications for one or more authentication notification types. set multiauth mode multi 3. The allocation mechanism attempts to maximize aggregation, subject to management controls. 1 second hello interval The period between transmissions of hello packet advertisements. Link Aggregation Overview problems if they also wanted, or needed, to use a different brand of networking hardware. Create a community name. Examples 17-18 Chapter 18: Configuring Network Monitoring Basic Network Monitoring Features .. 18-1 Console/Telnet History Buffer . Chapter 20: IP Configuration Enabling the Switch for Routing . 20-1 Router Configuration Modes 20-1 Entering Router Configuration Modes . 20-2 Example Configuring Area Virtual-Link Authentication . 22-14 Configuring Area Virtual-Link Timers. 22-14 Configuring Route Redistribution 22-14 Configuring Passive Interfaces .. Extended IPv4 ACL Configuration .. 24-12 MAC ACL Configuration .. 24-13 Chapter 25: Configuring and Managing IPv6 Managing IPv6 . Disabling and Enabling Ports .. 26-9 MAC Locking Defaults . 26-9 MAC Locking Configuration .. 26-10 TACACS+ .. 11-3 13-1 13-2 13-3 14-1 15-1 15-2 15-3 15-4 15-5 15-6 15-7 15-8 15-9 15-10 15-11 15-12 15-13 15-14 15-15 15-16 15-17 16-1 17-1 17-2 17-3 17-4 17-5 19-1 19-2 19-3 19-4 19-5 19-6 22-1 22-2 22-3 22-4 22-5 22-6 23-1 23-2 23-3 25-1 Link Aggregation Example.. 11-12 Communication between LLDP-enabled Devices . 13-3 LLDP-MED .. 4-7 4-8 5-1 6-1 7-1 7-2 7-3 8-1 8-2 8-3 8-4 9-1 9-2 9-3 10-1 10-2 10-3 10-4 11-1 11-2 11-3 11-4 11-5 11-6 11-7 12-1 12-2 12-3 12-4 12-5 13-1 13-2 13-3 13-4 13-5 13-6 14-1 14-2 14-3 14-4 15-1 15-2 15-3 15-4 15-5 15-6 15-7 15-8 15-9 15-10 15-11 16-1 16-2 16-3 16-4 16-5 xx Default DHCP Server Parameters . 4-20 Configuring Pool Parameters 16-6 17-1 18-1 18-2 18-3 18-4 18-5 18-6 18-7 18-8 19-1 19-2 19-3 19-4 19-5 19-6 19-7 19-8 19-9 19-10 20-1 20-2 20-3 21-1 21-2 21-3 22-1 22-2 23-1 23-2 24-1 25-1 25-2 25-3 25-4 25-5 25-6 26-1 26-2 26-3 26-4 26-5 26-6 26-7 26-8 26-9 26-10 26-11 26-12 26-13 26-14 Policy Configuration Terms and Definitions 16-18 CoS Configuration Terminology About This Guide This guide provides basic configuration information for the Enterasys Networks Fixed Switch platforms using the Command Line Interface (CLI0, including procedures and code examples. TACACS+ Configuring the Source Address You can configure the source IP address used by the TACACS+ application on the switch when generating packets for management purposes. The Class of Service capability of the device is implemented by a priority queueing mechanism. If a RADIUS Filter-ID exists for the user account, the RADIUS protocol returns it in the RADIUS Accept message and the firmware applies the policy to the user. set dhcpsnooping enable 2. Transferring switch configurations Using the CLI commands described in the section beginning with TFTP: Copying a configuration file to a remote host (CLI), you can copy switch configurations to and from a switch, or copy a software image to configure or replace an ACL in the switch configuration. Creating and enabling VLANs. Thisexampledisplaystheneighborsinthecache. Configuring Syslog Note: The set logging local command requires that you specify both console and file settings. Basic PIM-SM configuration includes the following steps: 1. In this sense, QoS is the third step in a three step process. set mac agetime time 4. MultiAuth mode Globally sets MultiAuth for this device. Figure 25-1 Basic IPv6 Over IPv4 Tunnel Router R1 Router R2 VLAN 20 195.167.20.1 Tunnel 10 IPv6 Addr: 2001:DB8:111:1::20/127 Tunnel Source: 195.167.20.1 Tunnel Destination: 192.168.10.1 VLAN 10 192.168.10.1 Tunnel 10 IPv6 Addr: 2001:DB8:111:1::10/127 Tunnel Source: 192.168.10.1 Tunnel Destination: 195.167.20. ARP poisoning is a tactic where an attacker injects false ARP packets into the subnet, normally by broadcasting ARP responses in which the attacker claims to be someone else. 8 Port Configuration This chapter describes the basic port parameters and how to configure them. Use the set port negotiation command to disable or enable auto-negotiation. Configuring Syslog Displaying Current Application Severity Levels To display logging severity levels for one or all applications currently running on your device: show logging application {mnemonic|all} Example This example shows output from the show logging application all command. Table 28-2 show sflow receivers Output Descriptions. 3. How many VLANs will be required? Using Multicast in Your Network unsolicited join (sent as a request without receiving an IGMP query first) In Figure 19-2, this type of exchange occurs between Router 2 and Host 2 when: (6) Host 2 sends a join message to Router 2. Licensing Procedure in a Stack Environment. SNMP Support on Enterasys Switches Versions Supported Enterasys devices support three versions of SNMP: Version 1 (SNMPv1) This is the initial implementation of SNMP. System(su)->show port ratelimit fe.1.1 Global Ratelimiting status is disabled. . set snmp community community_name 2. Syslog Components and Their Use Table 14-1 describes the Enterasys implementation of key Syslog components. The Enterasys Fixed Switches support neighbor advertise and solicit, duplicate address detection, and unreachability detection. Setting SNMP notification parameters (filters) 7. Refer to page ACL Configuration Overview Inserting a new ACL rule entry into an ACL Moving an ACL rule to a new location in an ACL Apply the ACL to VLAN interfaces, to ports, or to Link Aggregation ports. Use the following commands to review, re-enable, and reset the Spanning Tree mode. Configuration Procedures 22-20 Configuring OSPFv2. ARP requests are flooded in the VLAN. 300 seconds. IP Static Routes Procedure 20-2 Configuring the Routing Interface Step Task Command(s) 1. Its compact footprint uses 37 percent less space than its predecessor, making it ideal for under . Stackable Switches Configuration Guide Firmware Version 1.1.xx P/N 9034314-05. i Notice Enterasys Networks reserves the right to make changes in specifications and other information contained in this document and its web site without prior notice. For information about security modes and profiles, see Chapter 26, Configuring Security Features. 1 Setting Up a Switch for the First Time This chapter describes how to configure an Enterasys stackable or standalone Fixed Switch received from the factory that has not been previously configured. Routers R1 and R2 are both configured with one virtual router (VRID 1). Note that the actor and partner LACP timeout values must agree. RMON Procedure 18-1 Step Configuring Remote Network Monitoring (continued) Task Command(s) startup - (Optional) Specifies the alarm type generated when this event is first enabled rthresh - (Optional) Specifies the minimum threshold that will cause a rising alarm fthresh - (Optional) Specifies the minimum threshold that will cause a falling alarm revent - (Optional) Specifies the index number of the RMON event to be triggered when the rising threshold is crossed fevent - (Optional) Specifies. UsethiscommandtodisplayIPv6routingtableinformationforactiveroutes. 26 Configuring Security Features This chapter. For example: C5(su)->dir Images: ================================================================== Filename: c5-series_06.42.06.0008 Version: 06.42.06. show ipv6 status If necessary, enable IPv6 management. Link Aggregation Overview Single Port Attached State Rules By default, a LAG must contain two or more actor and partner port pairs for the LAG to be initiated by this device. Port 5 has its own filtering database and is not aware of what addressing information has been learned by other VLANs. Use the area virtual-link authentication-key command in OSPF router configuration command mode to configure simple authentication on this area virtual-link. The reader should in all cases consult Enterasys Networks to determine whether any such changes have been made. Configuring MSTP Figure 15-12 Traffic Segregation in an MSTP Network Configuration Bridge C VLAN 10 ge.1.2 ge.1.1 MAC Address: 00-00-00-00-00-03 All Priority = 32768 VLAN 10 SID 1 Port Path Cost = 1 Bridge D VLAN 10 ge.1.1 ge.1.2 VLAN 10 MAC Address: 00-00-00-00-00-04 All Priority = 32768 ge.1.1 ge.1.2 ge.1.1 ge.1.2 ge.1.3 ge.1.4 ge.1.3 ge.1.4 Bridge A Bridge B MAC Address: 00-00-00-00-00-01 All Priority = 4096 MAC Address: 00-00-00-00-00-02 All Priority = 8192 Bridge E ge.1.2 ge.1. SNTP Configuration b. SNMP Support on Enterasys Switches Table 12-1 SNMP Message Functions (continued) Operation Function get-response Replies to a get-request, get-next-request, and set-request sent by a management station. How to back up the configuration of an Enterasys C2G 124-24 switch via The PVID determines the VLAN to which all untagged frames received on the port will be classified. Management Authentication Notification MIB Functionality Refer to the CLI Reference for your platform for detailed information about the commands listed below in Procedure 5-4. A designated port may forward with the exchange of two BPDUs in rapid succession. Configuring Authentication The following code example: Creates and names two VLANS, one for the users and one for the phones. ThisexampleshowshowtodisplayPIMinterfacestatistics. enterasys handles ingress and egress separately. Frames will egress as tagged. 14881000 for 10- Gigabit ports Use the show port broadcast command to display current threshold settings. UsethiscommandtodisplaySNTPclientsettings. For both DVMRP and PIM-SM for IPv4 to operate, IGMP must be enabled. RADIUS Management Authentication Procedure 26-2 Configuring IPsec Step Task Command(s) 1. Creates a CoS setting of index 55. Configuring IGMP Snooping. Configuration parameters and stacking information can also be cleared on the master unit only by selecting the restore configuration to factory defaults option from the boot menu on switch startup. Terms and Definitions LoopProtect Lock status for port lag.0.2, SID 56_ is UNLOCKED Enterasys->show spantree lpcapablepartner port lag.0.2 Link partner of port lag.0.2_is LoopProtect-capable. DHCPv6 Configuration address, a multicast address, or a link-local address. 15 Configuring Spanning Tree This chapter provides the following information about configuring and monitoring the Spanning Tree protocol on Enterasys stackable and standalone fixed switches. Configuring SNMP Subtree OID Subtree mask View Type Storage type Row status = = = = = 1.3.6.1.2.1 View Name Subtree OID Subtree mask View Type Storage type Row status = = = = = = All 1.3.6.1.2.1.2 included nonVolatile active excluded nonVolatile active You can test this configuration using any MIB browser directed to the IP of the configured device and using the default community name public associated with the view All. Refer to the CLI Reference for your switch model for more information about each command. We then set the lease duration to infinite. Premium Edge The S-Series Edge Switch will be rate-limited using a configured CoS that is applied to the services and phoneES policy role. VRRP Overview Figure 23-1 Basic VRRP Topology VRID 1 172.111.1.1 Router R1 Router R2 ge.1.1 VLAN 111 172.111.1.1/16 ge.1.1 VLAN 111 172.111.1.2/16 Host 1 172.111.1.100/16 Default Gateway 172.111.1.1 Figure 23-1 shows a basic VRRP topology with a single virtual router. Highly accomplished Network engineering professional with 10+ years of experience in designing, deploying, migrating and supporting critical systems. Removing Units from an Existing Stack Use clear ip address to remove the IP address of the stack. (Optional) Verify the new settings. Testing Network Connectivity Configuring Static Routes Procedure 20-3 lists the commands to configure a static route. Configuring PIM-SM R1(su)->router(Config)#interface vlan 3 R1(su)->router(Config-if(Vlan 3))#ip address 172.1.2.1 255.255.255.0 R1(su)->router(Config-if(Vlan 3))#ip igmp enable R1(su)->router(Config-if(Vlan 3))#ip ospf enable R1(su)->router(Config-if(Vlan 3))#ip pimsm enable R1(su)->router(Config-if(Vlan 3))#no shutdown R1(su)->router(Config-if(Vlan 3))#exit R1(su)->router(Config)#interface vlan 4 R1(su)->router(Config-if(Vlan 4))#ip address 172.1.3.1 255.255.255. 1.1 IP phone ge. The process described in this section would be repeated on every device that is connected in the network to ensure that each device has a secure management VLAN. Note: Globally enabling 802.1x on a switch sets the port-control type to auto for all ports. Configuring SNMP security model and security level used to request access. priority Sets which ports continue to receive power in a low power situation. Systems incident management. Spanning Tree Basics RSTP Operation RSTP optimizes convergence by significantly reducing the time to reconfigure the networks active topology when physical topology or configuration parameter changes occur. Configuring VLANs the device. Configuring Authentication If VLAN authorization is not enabled, the tunnel attributes are ignored. Displaying Scrolling Screens If the CLI screen length has been set using the set length command, CLI output requiring more than one screen will display --More-- to indicate continuing screens. Use the show tftp settings command to display current settings. Fiber ports always have a status of MDIX. Configured channel, filter, and buffer information will be saved across resets, but not frames within the capture buffer. Monitoring MSTP 15-29 Example 1: Configuring MSTP for Traffic Segregation This example illustrates the use of MSTP for traffic segregation by VLAN and SID. Automatic IP Address Pools When configuring an IP address pool for dynamic IP address assignment, the only required steps are to name the pool and define the network number and mask for the pool using the set dhcp pool network command. sFlow Configuring Poller and Sampler Instances A poller instance performs counter sampling on the data source to which it is configured. Configuring PIM-SM PIM-SM is an advanced routing feature that must be enabled with a license key. Enable or disable MAC authentication globally on the device. Enterasys Vlan Config - ShoreTel Forums Configure an RMON filter entry. User Authentication Overview Dynamic VLAN Assignment The RADIUS server may optionally include RADIUS tunnel attributes in a RADIUS Access-Accept message for dynamic VLAN assignment of the authenticated end system. DHCP and BOOTP Relay DHCP/BOOTP relay functionality is applied with the help of UDP broadcast forwarding. The ingress VLAN could be a switching or routing VLAN. Table 14-1 Syslog Terms and Definitions Term Definition Enterays Usage Facility Categorizes which functional process is generating an error message. This sets the port VLAN ID (PVID). Based on the exchanged BPDU information, the spanning tree algorithm selects one of the switches on the network as the root switch for the tree topology. Specification Guide (English) Quick Setup Guide (English) User Manual (English) Installation Instruction (English) DFE (PLATINUM) WITH 60 10 100 1000BASE-T 7G4202-60 20 IP Configuration This chapter provides general IPv4 routing configuration information. After authentication succeeds, the user or device gains access to the network based upon the policy information returned by the authentication server in the form of the RADIUS Filter-ID attribute, or the static configuration on the switch. Important Notice Depending on the firmware version used on your Fixed Switch platform, some features described in this document may not be supported. An ABR keeps a separate copy of the link-state database for each area to which it is connected. Create a new read-write or read-only user login account and enable it. Achtung: Verweit auf wichtige Informationen zum Schutz gegen Beschdigungen. 9 Configuring VLANs This chapter describes how to configure VLANs on Enterasys fixed stackable and standalone switches. show file directory/filename Delete a file. Licensing Advanced Features Table 4-3 Advanced Configuration (continued) Task Refer to Configure RIP. If privacy is not specified, no encryption will be applied. Extensible Authentication Protocol (EAP) A protocol that provides the means for communicating the authentication information in an IEEE 802.1x context. Resolution of incidents of 2nd level. Packets sent to 172.111.1.1/16 would go to Router R2. Switch 3s blocking port eventually transitions to a forwarding state which leads to a looped condition. Since the admin key for the LAG and its associated ports must agree for the LAG to form, an easy way to ensure that LAGs do not automatically form is to set the admin key for all LAGS on all devices to a nondefault value. Connecting to a Switch This procedure describes how to connect to a switch. Set a new hello time interval: set spantree hello interval Valid interval values are 110. Therefore, you must know the serial number of the switch to be licensed when you activate the license on the Enterasys customer site, and also when you apply the license to the switch as described below. Packet flow sampling will cause a steady, but random, stream of sFlow datagrams to be sent to the sFlow Collector. ENTERASYS MATRIX-V V2H124-24FX QUICK REFERENCE MANUAL . Procedure 20-3 Configuring Static Routes Step Task Command(s) 1. Provides guest access to a limited number of the edge switch ports to be used specifically for internet only access. Account and password feature behavior and defaults differ depending on the security mode of the switch. Assign switch ports to the VLAN. Table 20-3 show ip ospf database Output Details. C5(su)save config Saving Configuration to stacking members Configuration saved C5(su)-> 2. Understanding and Configuring SpanGuard How Does It Operate? Refer to the CLI Reference for your platform for more information about these commands. Configuring OSPF Areas The virtual-link is treated as if it were an unnumbered point-to-point network belonging to the backbone and joining the two ABRs. 30 pounds of muscle before and after 30 pounds of muscle before and after Home Realizacje i porady Bez kategorii 30 pounds of muscle before and after ThiscommandclearsIPv6DHCPstatistics,eitherallstatisticsoronlyforaspecificinterface. Strict Priority Queuing With Strict Priority Queuing, a higher priority queue must be empty before a lower priority queue can transmit any packets. Enterasys C2H124-24 Switch Configuration manual PDF View/Download Configuring SNMP enterasys(su)->set snmp view viewname RW subtree 0.0 enterasys(su)->set snmp view viewname RW subtree 1.3.6.1.6.3.13.1 excluded enterasys(su)->set snmp targetparams TVv1public user public security-model v1 message processing v1 enterasys(su)->set snmp targetaddr TVTrap 10.42.1.10 param TVv1public taglist TVTrapTag enterasys(su)->set snmp notify TVTrap tag TVTrapTag Adding to or Modifying the Default Configuration By default, SNMPv1 is configured on Enterasys switches. Configuring PoE Procedure 7-2 PoE Configuration for Stackable B5 and C5 Devices (continued) Step Task Command(s) 6. Determines the prune lifetime.