Accton Technology CheetahSwitch Workgroup-3526F Management Manual

CheetahSwitch Workgroup-3514F

CheetahSwitch Workgroup-3526F

CheetahSwitch Workgroup-3526G

Management Guide

Management Guide

CheetahSwitch Workgroup-3514F

Intelligent/Stackable Fast Ethernet Switch with 12 10BASE-T / 100BASE-TX (RJ-45) Ports, and Optional Media Expansion and Stack Modules

CheetahSwitch Workgroup-3526F

Intelligent/Stackable Fast Ethernet Switch with 24 10BASE-T / 100BASE-TX (RJ-45) Ports, and Optional Media Expansion and Stack Modules

CheetahSwitch Workgroup-3526G

Intelligent Fast Ethernet Switch with 24 10BASE-T / 100BASE-TX (RJ-45) Ports, and Optional Media Expansion Modules

Copyright © 2000 by Accton Technology Corporation. All rights reserved.

No part of this document may be copied or reproduced in any form or by any means without the prior written consent of Accton Technology Corporation.

Accton makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability, quality, or fitness for any particular purpose. The information in this document is subject to change without notice. Accton reserves the right to make revisions to this publication without obligation to notify any person or entity of any such changes.

International Headquarters

No. 1 Creation Road III,

Science-based Industrial Park

Hsinchu 300, Taiwan, R.O.C.

Phone: 886-3-5770-270

FAX: 886-3-5770-267

Internet: [email protected]

USA Headquarters

6 Hughes

Irvine, CA 92618

Phone Numbers -

Sales: 800-926-9288

Support: 888-398-4101 or 949-707-4847

RMA: 800-762-4968

FAX: 949-707-2460

Accton is a trademark of Accton Technology Corporation. Other trademarks or brand names mentioned herein are trademarks or registered trademarks of their respective companies.

ES3514F

ES3526F

ES3526G

E072000-R04

F2.2 150074-102

Contents

Chapter 1: Switch Management

Configuration Options

Required Connections

Console Port (Out-of-Band) Connections

Remote Management via the Console Port

Configure the Switch Site

Configure the Remote Site

In-Band Connections

Chapter 2: Using the System Configuration Program

Login Screen

Main Menu

System Information Menu

Displaying System Information

Displaying Switch Version Information

Management Setup Menu

Changing the Network Configuration

IP Configuration

IP Connectivity Test (Ping)

HTTP Configuration

Configuring the Serial Port

Assigning SNMP Parameters

Configuring Community Names

Configuring IP Trap Managers

Console Login Configuration

Downloading System Software

Using TFTP to Download Over the Network

Configuring the Switch

Configuring Port Parameters

Viewing the Current Port Configuration

Using the Spanning Tree Algorithm

Configuring Bridge STA

Configuring STA for Ports

Viewing the Current Spanning Tree Information

Displaying the Current Bridge STA

Displaying the Current STA for Ports

Using a Mirror Port for Analysis

Configuring Port Trunks

IGMP Multicast Filtering

Configuring IGMP

Configuring Bridge MIB Extensions

2-21

2-22

2-22

2-24

2-25

2-26

2-27

2-28

2-29

2-31

2-31

2-32

2-15

2-16

2-17

2-18

2-18

2-19

2-20

2-1

2-1

2-3

2-5

2-6

2-7

2-8

2-9

2-10

2-11

2-12

2-13

2-14

1-1

1-1

1-1

1-1

1-2

1-2

1-2

1-2 i

ii

Contents

Configuring Traffic Classes

Port Priority Configuration

802.1p Port Traffic Class Information

Configuring Virtual LANs

802.1Q VLAN Base Information

802.1Q VLAN Current Table Information

802.1Q VLAN Static Table Configuration

802.1Q VLAN Port Configuration

Monitoring the Switch

Displaying Port Statistics

Displaying RMON Statistics

Displaying the Unicast Address Table

Displaying the IP Multicast Registration Table

Configuring Static Unicast Addresses

Resetting the System

Logging Off the System

Chapter 3: Web-Based Management

Web-Based Configuration and Monitoring

Navigating the Web Browser Interface

Home Page

Configuration Options

Panel Display

Port State Display

Console Configuration

Main Menu

System Information

Switch Information

Main Board

Agent Module

Expansion Slot

IP Configuration

SNMP Configuration

SNMP Community

Trap Managers

Security Configuration

Change Password

Firmware Upgrade Options

Web Upload Management

TFTP Download Management

Address Table Configuration

Spanning Tree Algorithm (STA)

3-9

3-10

3-10

3-11

Spanning Tree Information

Spanning Tree

3-14

3-14

Ports 3-15

3-11

3-11

3-12

3-12

3-12

3-13

3-14

3-5

3-6

3-7

3-8

3-8

3-8

3-8

3-1

3-1

3-2

3-2

3-3

3-3

3-4

2-40

2-41

2-42

2-43

2-45

2-46

2-47

2-48

2-48

2-33

2-34

2-35

2-36

2-36

2-37

2-38

Contents

Spanning Tree Configuration 3-16

Switch 3-16

When the Switch Becomes Root

STA Port Configuration

3-16

3-17


Bridge Capability

Bridge Settings

3-18

3-18

3-19

Priority 3-20

Port Priority Configuration 3-20

Port Traffic Class Information


3-21

3-22

VLAN Basic Information

VLAN Current Table

VLAN Static List

VLAN Static Table

3-22

3-23

3-24

3-25

VLAN Static Membership by Port

VLAN Port Configuration


Configuring IGMP

IP Multicast Registration Table

3-27

3-28

3-29

3-29

3-30

Port Menus

Port Information

Port Configuration

Using a Port Mirror for Analysis

Port Trunk Configuration

Port Statistics

Etherlike Statistics

RMON Statistics

3-31

3-31

3-32

3-33

3-34

3-36

3-36

3-37

Chapter 4: Advanced Topics

Layer-2 Switching

Spanning Tree Algorithm

Virtual LANs

Assigning Ports to VLANs

Port Overlapping

Automatic VLAN Registration (GVRP)

Forwarding Traffic with Unknown VLAN Tags

Forwarding Tagged/Untagged Frames

Connecting VLAN Groups

Multicast Filtering

IGMP Snooping

IGMP Protocol

Class-of-Service (CoS) Support

Port Trunks

SNMP Management Software

Remote Monitoring

4-3

4-4

4-4

4-4

4-5

4-1

4-1

4-1

4-2

4-3

4-3

4-5

4-5

4-6

4-6

4-6

4-7 iii

Contents

Appendix A: Troubleshooting

Troubleshooting Chart

Upgrading Firmware via the Serial Port

Appendix B: Pin Assignments

Console Port Pin Assignments

DB-9 Port Pin Assignments

Console Port to 9-Pin COM Port on PC

Console Port to 25-Pin DCE Port on Modem

Console Port to 25-Pin DTE Port on PC

A-1

A-1

A-2

B-1

B-1

B-1

B-2

B-2

B-2 iv

Chapter 1: Switch Management

Configuration Options

For advanced management capability, the SNMP/RMON Module provides a menu-driven system configuration program. This program can be accessed by a direct or modem connection to the serial port on the rear panel (out-of-band), or by a

Telnet connection over the network (in-band).

The management agent is based on SNMP (Simple Network Management

Protocol). This SNMP agent permits the switch to be managed from any PC in the network using in-band management software (such as Accton’s AccView).

The management agent also includes an embedded HTTP Web agent. This Web agent can be accessed using a standard Web browser from any computer attached to the network.

The system configuration program and the SNMP agent support management functions such as:

• Enable/disable any port

• Set the communication mode for any port

• Configure SNMP parameters

• Configure VLANs or multicast filtering

• Display system information or statistics

• Configure the switch to join a Spanning Tree

• Download system firmware

• Restart the system

Required Connections

Console Port (Out-of-Band) Connections

Attach a VT100 compatible terminal or a PC running a terminal emulation program to the serial port on the switch’s rear panel. Use the null-modem cable provided with this package, or use a null modem connection that complies with the wiring assignments shown in Appendix B of this guide.

When attaching to a PC, set terminal emulation type to VT100, specify the port used by your PC (i.e., COM 1~4), and then set communications to 8 data bits, 1 stop bit, no parity, and 19200 bps (for initial configuration). Also be sure to set flow control to

“none.” (Refer to “Configuring the Serial Port” on page 2-13 for a complete description of configuration options.)

Note: If the default settings for the management agent’s serial port have been modified and you are having difficulty making a console connection, you can display or modify the current settings using a Web browser as described under

“Console Configuration” on page 3-5.

1-1

Switch Management

Remote Management via the Console Port

Configure the Switch Site

Connect the switch’s DB9 serial port to the modem’s serial port using standard cabling. For most modems which use a 25-pin port, you will have to provide an

RS-232 cable with a 9-pin connector on one end and a 25-pin connector on the other end. Set the modem at the switch’s site to force auto-answer mode. The following is a sample initialization string: “ATQ1S0=1&D0&K0&W” as defined below:

Q1 : Inhibit result codes to DTE

S0=1 : Auto answer on first ring

D0

K0

W

: Don’t care DTR

: Disables DTE/DCE flow control

: Write command to modem memory

Configure the Remote Site

At the remote site, connect the PC’s COM port (COM 1~4) to the modem’s serial port. Set terminal emulation type to VT100, specify the port used by your PC (i.e.,

COM 1~4), and then set communications to 8 data bits, 1 stop bit, no parity, 19200 bps and no flow control.

In-Band Connections

Prior to accessing the Network Management Module via a network connection, you must first configure it with a valid IP address, subnet mask, and default gateway using an out-of-band connection or the BOOTP protocol.

After configuring the switch’s IP parameters, you can access the on-board configuration program from anywhere within the attached network. The on-board configuration program can be accessed using Telnet from any computer attached to the network. The switch and stack can also be managed by any computer using a

Web browser (Internet Explorer 4.0, or Netscape Navigator 4.0 or above), or from a network computer using network management software such as AccView .

Notes: 1.

By default BOOTP is disabled. To enable BOOTP, see “IP Configuration” on page 2-10.

2.

Use the Network Configuration menu to specify the maximum number of simultaneous Telnet sessions that are supported by the system (up to four).

3.

The on-board program only provides access to basic configuration functions.

To access the full range of SNMP management functions, you must use

SNMP- based network management software, such as Accton’s free

AccView/Open software.

1-2

Chapter 2: Using the System Configuration Program

Login Screen

Once a direct connection to the serial port or a Telnet connection is established, the login screen for the on-board configuration program appears as shown below.

AAAAA

AAAAA

AAAAA

AAAAAAA

AAAAAAAAAA

AAAAA AAAA

AAAAA AAAA

AAAAA AAAA CCCCCCC

AAAAA

AAAAA

AAAA CC

AAAA CC

AAAA CC

AAAAAAAA CC

CC CC

CC CC

AAAAAAAAA CCCCCCC

CC

CC

CCCCCC

CC

CC

CCCCCCC

TTTTTTTTTT

TT

TT

TT

TT

TT

OO

OOOOOO NN

OO NNN

NN

NN

OO

OO

OO NN NN NN

OO NN NN NN

OO OO NN

OOOOOO NN

NNN

NN

V2.12

CheetahSwitch Workgroup-3514/26

04-17-2000 (c)Copyright 2000, Accton Technology Corp.

User name :

Password :

If this is your first time to log into the configuration program, then the default user names are “admin” and “guest,” with no password. The administrator has Read/

Write access to all configuration parameters and statistics. While the guest has

Read Only access to the management program.

You should define a new administrator password, record it and put it in a safe place.

Select Console Login Configuration from the Management Setup Menu and enter a new password for the administrator. Note that passwords can consist of up to 11 alphanumeric characters and are not case sensitive.

Notes: 1.

Based on the default configuration, a user is allowed three attempts to enter the correct password; on the third failed attempt the current connection is terminated.

2.

The ES3526G does not support stacking.

Please disregard any references to the stack when using the ES3526G.

2-1

Using the System Configuration Program

After you enter the user name and password, you will have access to the system configuration program as illustrated by the following menu hierarchy:

* Not implemented in this firmware release.

2-2

Main Menu

Main Menu

With the system configuration program you can define system parameters, manage and control the switch, the connected stack and all its ports, or monitor network conditions. The figure below of the Main Menu and the following table briefly describe the selections available from this program.

Note: Options for the currently selected item are displayed in the highlighted area at the bottom of the interface screen.

Main Menu

=========

System Information Menu...

Management Setup Menu...

Device Control Menu...

Network Monitor Menu...

Restart System Menu...

Exit

Use <TAB> or arrow keys to move. <Enter> to select.

Menu

System Information Menu

System Information

Switch Information

Management Setup Menu

Network Configuration

Serial Port Configuration

SNMP Configuration


TFTP Download

Description

Provides basic system description, including contact information.

Shows hardware/firmware version numbers, power status, and expansion modules used in the stack.

Includes IP setup, Ping facility, HTTP (Web agent) setup, Telnet configuration, and MAC address.

Sets communication parameters for the serial port, including management mode, baud rate, console time-out, and screen data refresh interval.

Activates traps; and configures communities and trap managers.

Sets user names and passwords for system access, as well as the invalid password threshold and lockout time.

Downloads new version of firmware to update your system (in-band).

2-3


Menu

Device Control Menu

Port Configuration

Description

Port Information

Spanning Tree Configuration


Port Mirror Configuration

Port Trunking Configuration

IGMP Configuration

Specifies ports to group into aggregate trunks.

Configures IGMP multicast filtering.

Extended Bridge Configuration Displays/configures extended bridge capabilities provided by this switch.

802.1P Configuration Configures default port priorities and queue assignments.

802.1Q VLAN

Base Information

802.1Q VLAN Current Table

Information

802.1Q VLAN Static Table

Configuration

802.1Q VLAN

Port Configuration

Port GARP Configuration*

Port GMRP Configuration*

Enables any port, enables/disables flow control, and sets communication mode to auto-negotiation, full duplex or half duplex.

Displays operational status, including link state, flow control method, and duplex mode.

Enables Spanning Tree Algorithm; also sets parameters for hello time, maximum message age, switch priority, and forward delay; as well as port priority, path cost, and fast forwarding.

Displays full listing of parameters for the Spanning Tree Algorithm.

Sets the source and target ports for mirroring.

Displays basic VLAN information, such as VLAN version number and maximum VLANs supported.

Displays VLAN groups and port members.

Configures VLAN groups via static assignments, including setting port members, or restricting ports from being dynamically added to a port by the GVRP protocol.

Displays/configures port-specific VLAN settings, including PVID, ingress filtering, and GVRP.

Configures settings used in multicast filtering.

Configures GMRP multicast filtering.

Network Monitor Menu

Port Statistics

RMON Statistics

Unicast Address Table

Multicast Address Registration

Table*

Provides full listing for unicast addresses, as well as search and clear functions.

Provides full listing for multicast addresses, as well as search and clear functions.

IP Multicast Registration Table Displays all the multicast groups active on this switch, including multicast IP addresses and corresponding VLAN IDs.

Static Unicast Address Table

Configuration

Used to manually configure host MAC addresses in the unicast table.

Static Multicast Address Table

Configuration*

Restart System

Exit

Displays statistics on network traffic passing through the selected port.

Displays detailed statistical information for the selected port such as packet type and frame size counters.

Used to manually configure host MAC addresses in the multicast table.

Restarts system with options to use POST, or to retain factory defaults,

IP settings, or user authentication settings.

Exits the configuration program.


2-4


System Information Menu

Use the System Information Menu to display a basic description of the switch, including contact information, and hardware/firmware versions.


=======================

System Information ...

Switch Information ...

<OK>

Use <TAB> or arrow keys to move. <Enter> to select

Menu

System Information

Switch Information

Description


Shows hardware/firmware version numbers, power status, and expansion modules used in the stack.

2-5


Displaying System Information

Use the System Information screen to display descriptive information about the switch, or for quick system identification as shown in the following figure and table.

System Information

==================

System Description : CheetahSwitch Workgroup-3514/3526

System Object ID : 1.3.6.1.4.1.259.6.10.9

System Up Time : 48067 (0 day, 1 hr, 2min, 34 sec)

System Name

System Contact

: DEFAULT SYSTEM NAME

: DEFAULT SYSTEM CONTACT

System Location : DEFAULT SYSTEM LOCATION

<APPLY> <OK> <CANCEL>

Use <TAB> or arrow keys to move, other keys to make changes.

Parameter

System Description

System Object ID

System Up Time

Description

System hardware description.

MIB II object identifier for switch’s network management subsystem.

Length of time the current management agent has been running.

(Note that the first value is 1/100 seconds.)

System Name*

System Contact*

Name assigned to the switch system.

Contact person for the system.

System Location* Specifies the area or location where the system resides.

* Maximum string length is 99, but the screen only displays 45 characters. You can use the arrow keys to browse the whole string.

2-6


Displaying Switch Version Information

Use the Switch Information screen to display hardware/firmware version numbers for the main board, as well as the power status.

Switch Information : Unit 1

==================

Main Board

Hardware Version

Firmware Version

Serial Number

Port Number

Internal Power Status

Redundant Power Status

Expansion Slot 1

Expansion Slot 2

: V3.0

: V1.11

: 00-CB-00-00-00-00

: 24

: Active

: Inactive

: ---------------------

: ---------------------

Agent Module

Hardware Version

POST ROM Version

Firmware Version

SNMP Agent

: V3.0 (801 CPU)

: V1.10

: V2.12

: Master

<OK> <PREV UNIT> <NEXT UNIT>

Use <TAB> or arrow keys to move. <Enter> to select

Parameter

Main Board

Hardware Version

Firmware Version

Serial Number

Port Number


Redundant Power Status

Expansion Slot 1

Expansion Slot 2*

Description

Hardware version of the main board.

System firmware version in ROM.

The serial number of the main board.

Number of built-in ports.

Indicates if the primary power is active or inactive.

Indicates if the redundant power is active or inactive.

Shows module type if inserted

(100BASE-FX or 1000BASE-SX).

Shows module type if inserted

(100BASE-FX or 1000BASE-SX or 4GB Stack).

Agent Module

Hardware Version

POST ROM Version

Hardware version of the agent module.

Power-On Self-Test version number.

Firmware Version

SNMP Agent

Firmware version of the agent module.

Shows if this module is Master or Backup Master.

* Stacking is not supported on the ES3526G.

2-7


Management Setup Menu

After initially logging onto the system, adjust the communication parameters for your console to ensure a reliable connection (Serial Port Configuration). Specify the IP addresses for the switch (Network Configuration / IP Configuration), and then set the

Administrator and User passwords (Console Login Configuration). Remember to record them in a safe place. Also set the community string which controls access to the on-board SNMP agent via in-band management software (SNMP Configuration).

The items provided by the Management Setup Menu are described in the following sections.


=====================

Network Configuration ...

Serial Port Configuration ...

SNMP Configuration ...

Console Login Configuration ...

TFTP Download ...

<OK>


Menu



SNMP Configuration


TFTP Download

Description

Includes IP setup, Ping facility, HTTP (Web agent) setup, Telnet configuration, and MAC address.

Sets communication parameters for the serial port, including management mode, baud rate, console time-out, and screen data refresh interval.

Activates traps; and configures communities and trap managers.

Sets user names and passwords for system access, as well as the invalid password threshold and lockout time.

Downloads new version of firmware to update your system (in-band).

2-8


Changing the Network Configuration

Use the Network Configuration menu to set the bootup option, configure the switch’s

Internet Protocol (IP) parameters, enable the on-board Web agent, or to set the number of concurrent Telnet sessions allowed. The screen shown below is described in the following table.


=====================

IP Configuration ...

IP Connectivity Test (Ping) ...

HTTP Configuration ...

MAX Number of allowed Telnet sessions (1 -4) : 4

MAC Address : 00-E0-29-52-28-00



Parameter

IP Configuration

IP Connectivity Test (Ping)

HTTP Configuration

MAX Number of Allowed Telnet

Sessions

MAC Address

Description

Screen used to set the bootup option, or configure the switch’s IP parameters.

Screen used to test IP connectivity to a specified device.

Screen used to enable the Web agent.

The maximum number of Telnet sessions allowed to simultaneously access the agent module.

Physical address of the agent module.

2-9


IP Configuration

Use the IP Configuration screen to set the bootup option, or configure the switch’s IP parameters. The screen shown below is described in the following table.

Network Configuration : IP Configuration

========================================

Interface Type : Ethernet

IP Address

Subnet Mask

Gateway IP

IP State

: 10.1.113.29

: 255.255.0.0

:

: USER-CONFIG



Parameter

Interface Type

IP Address

Subnet Mask

Default Gateway

IP State

Description

Indicates IP over Ethernet.

IP address of the stack you are managing. The system supports SNMP over UDP/

IP transport protocol. In this environment, all systems on the Internet, such as network interconnection devices and any PC accessing the agent module (or running AccView) must have an IP address.

Valid IP addresses consist of four numbers, of 0 to 255, and separated by periods.

Anything outside of this format will not be accepted by the configuration program.

Subnet mask of the switch you have selected. This mask identifies the host address bits used for routing to specific subnets.

Gateway used to pass trap messages from the system’s agent to the management station. Note that the gateway must be defined if the management station is located in a different IP segment. The default value is null.

Specifies whether IP functionality is enabled via manual configuration, or set by

Boot Protocol (BOOTP). Options include:

USER-CONFIG - IP functionality is enabled based on the default or user specified

IP Configuration. (This is the default setting.)

BOOTP Get IP - IP is enabled but will not function until a BOOTP reply has been received. BOOTP requests will be periodically broadcast by the switch in an effort to learn its IP address. (BOOTP values can include the IP address, default gateway, subnet mask, and TFTP server IP.)

2-10


IP Connectivity Test (Ping)

Use the IP Connectivity Test to see if another site on the Internet can be reached.

The screen shown below is described in the following table.

Network Configuration : IP Connectivity Test (Ping)

===================================================

IP Address :

Test Times : 1

Success : 0

[Start]

Interval : 3

Failure : 0



Parameter

IP Address

Test Times

Interval

Success/Failure

Description

IP address of the site you want to ping.

The number of ICMP echo requests to send to the specified site.

Range: 1~1000

The interval (in seconds) between pinging the specified site.

Range: 1~10 seconds

The number of times the specified site has responded or not to pinging.

2-11


HTTP Configuration

Use the HTTP Configuration screen to enable/disable the on-board Web agent, and to specify the TCP port that will provide HTTP service. The screen shown below is described in the following table.

Network Configuration : HTTP Configuration

==========================================

HTTP Server : ENABLED

HTTP Port Number : 80


Use <TAB> or arrow keys to move, <Space> to scroll options.

Parameter

HTTP Server

HTTP Port Number

Description

Enables/disables access to the on-board Web agent.

Specifies the TCP port that will provide HTTP service.

Range : 0~65535

Default : Port 80

(Telnet Port 23 is prohibited.)

2-12


Configuring the Serial Port

You can access the on-board configuration program by attaching a VT100 compatible device to the switch’s serial port. (For more information on connecting to this port, see “Required Connections” on page 1-1.) The communication parameters for this port can be accessed from the Serial Port Configuration screen shown below and described in the following table.


=========================

Management Mode : CONSOLE MODE

Baud rate

Data bits

Stop bits

: 19200

: 8

: 1

Parity

Time-Out (in minutes)

: NONE

: 10

Auto Refresh (in seconds) : 5


Use <TAB> or arrow keys to move. <Space> to scroll options

Parameter Default

Management Mode Console

Mode

Baud rate 19200

Data bits

Stop bits

Parity

Time-Out

8 bits

1 bit

None

10 minutes

Auto Refresh 5 seconds

Description

Indicates that the console port settings are for direct console connection.

The rate at which data is sent between devices.

Options : 2400, 4800, 9600, 19200 and auto detection.

Note that when auto detection is selected, you need to first press the

Enter key once to set the data rate and initialize the connection.

Sets the data bits of the RS-232 port.

Options : 7, 8

Sets the stop bits of the RS-232 port.

Options : 1, 2

Sets the parity of the RS-232 port.

Options : none/odd/even

If no input is received from the attached device after this interval, the current session is automatically closed.

Range : 0 - 100 minutes; where 0 indicates disabled

Sets the interval before a console session will auto refresh the console information, such as Spanning Tree Information, Port Configuration,

Port Statistics, and RMON Statistics.

Range : 0, or 5-255 seconds; where 0 indicates disabled

2-13


Assigning SNMP Parameters

Use the SNMP Configuration screen to display and modify parameters for the

Simple Network Management Protocol (SNMP). The switch includes an on-board

SNMP agent which monitors the status of its hardware, as well as the traffic passing through its ports. A computer attached to the network, called a Network

Management Station (NMS), can be used to access this information. Access rights to the on-board agent are controlled by community strings. To communicate with the switch, the NMS must first submit a valid community string for authentication. The options for configuring community strings and related trap functions are described in the following sections.

SNMP Configuration

==================

Send Authentication Fail Traps : ENABLED

SNMP Communities ...

IP Trap Managers ...



Parameter Description

Send Authentication Fail Traps Issue a trap message to specified IP trap managers whenever authentication of an SNMP request fails. (The default is disabled.)

SNMP Communities

IP Trap Managers

Assigns SNMP access based on specified strings.

Specifies management stations that will receive authentication failure messages or other trap messages from the switch.

2-14


Configuring Community Names

The following figure and table describe how to configure the community strings authorized for management access. Up to 5 community names may be entered.

SNMP Configuration : SNMP Communities

=====================================

Community Name

1.

public

2.

3.

4.

5.

Access

READ/WRITE

Status

ENABLED



Parameter

Community Name

Access

Status

Description

A community entry authorized for management access.

Maximum string length : 20 characters

Management access is restricted to Read Only or Read/Write.

Sets administrative status of entry to enabled or disabled.

Note: The default community string is “public” with Read/Write access.

2-15


Configuring IP Trap Managers

The following figure and table describe how to specify management stations that will receive authentication failure messages or other trap messages from the switch. Up to 5 trap managers may be entered.

IP Address

1.

10.1.0.23

2.

3.

4.

5.

SNMP Configuration : IP Trap Managers

=====================================

Community Name

Public

Status

DISABLED



Parameter

IP Address

Community Name

Status

Description

IP address of the trap manager.

A community specified for trap management access.

Sets administrative status of selected entry to enabled or disabled.

2-16


Console Login Configuration

Use the Management Setup: Console Login Configuration to restrict management access based on specified user names and passwords, or to set the invalid password threshold and time-out. There are two user types, Administrator and

Guest. Only the Administrator has write access for parameters governing the SNMP agent. You should therefore assign a user name and password to the Administrator as soon as possible, and store it in a safe place. (If for some reason your password is lost, or you cannot gain access to the System Configuration Program, contact

Accton Technical Support for assistance.) The parameters shown on this screen are indicated in the following figure and table.


===========================

Password Threshold : 3

Lock-out Time (in minutes) : 0

User Type User Name Password

-----------------------------------

ADMIN :

GUEST : admin guest



Parameter

Password

Threshold

Default

3

Description

Sets the password intrusion threshold which limits the number of failed logon attempts.

Range : 0~65535

Lock-out Time 0 The time (in seconds) the management console will be disabled due to an excessive number of failed logon attempts.

Range : 0~65535 (0 indicates disabled)

Administrator has access privilege of Read/Write for all screens.

Admin*

Guest* name: admin password: null name: guest password: null

Guest has access privilege of Read Only for all screens.

* Passwords can consist of up to 11 alphanumeric characters and are not case sensitive.

2-17


Downloading System Software

Using TFTP to Download Over the Network

Use the TFTP Download menu to load software updates into the switch. The download file should be an ES3514F/26F or ES3526G binary file from Accton; otherwise the agent will not accept it. The success of the download operation depends on the accessibility of the TFTP server and the quality of the network connection. After downloading the new software, the agent will automatically restart itself. Parameters shown on this screen are indicated in the following figure and table.

TFTP Download

=============

Download Server IP :

Agent Software Upgrade

Download Filename

Download Mode

[Process TFTP Download]

Download status : Complete

: ENABLED

:

: PERMANENT


Use <TAB> or arrow keys to move. Other keys to make changes.

Parameter

Download Server IP

Agent Software Upgrade

Download Filename

Download Mode

Description

IP address of a TFTP server.

The binary file to download.

Download to permanent flash ROM.

Note: You can also download firmware using the Web agent (page 3-12) or by a direct console connection after a restart (page A-2).

2-18


Configuring the Switch

The Device Control menu is used to control a broad range of functions, including port configuration, Spanning Tree, port mirroring, multicast filtering, and Virtual

LANs. Each of the setup screens provided by these configuration menus is described in the following sections.

Device Control Menu

===================

Port Configuration ...

Extended Bridge Configuration ...

Port Information ...

802.1P Configuration ...

Spanning Tree Configuration ...802.1Q VLAN Base Information ...

Spanning Tree Information ...

802.1Q VLAN Current Table Information ..

Mirror Port Configuration ...

802.1Q VLAN Static Table Configuration ..

Port Trunking Configuration ...802.1Q VLAN Port Configuration ...

IGMP Configuration ...

Port GARP Configuration ...

Port GMRP Configuration ...

<OK>


Menu

Port Configuration

Description

Sets communication parameters for ports.

Port Information Displays current port settings and port status.

Spanning Tree Configuration Configures the switch and its ports to participate in a local Spanning Tree.


Mirror Port Configuration

Displays the current Spanning Tree configuration for the switch and its ports.


Port Trunking Configuration Specifies ports to group into aggregate trunks.

IGMP Configuration Configures IGMP multicast filtering.

Extended Bridge Configuration Displays/configures extended bridge capabilities provided by this switch.

802.1P Configuration Configures default port priorities and queue assignments.

802.1Q VLAN

Base Information

802.1Q VLAN Current Table

Information

Displays basic VLAN information, such as VLAN version number and maximum VLANs supported.

Displays VLAN groups and port members.

802.1Q VLAN Static Table

Configuration

Configures VLAN groups via static assignments, including setting port members.

802.1Q VLAN Port ConfigurationDisplays/configures port-specific VLAN settings, including PVID and ingress filtering.

Port GARP Configuration* Configures generic attribute settings used in the spanning tree protocol,

VLAN registration, multicast filtering.

Port GMRP Configuration* Configures GMRP multicast filtering.


2-19


Configuring Port Parameters

Use the Port Configuration menus to set or display communication parameters for any port or module in the stack.

Port Configuration : Unit 1 Port 1 - 12

==================

8

9

10

11

12

5

6

7

Flow Control on all ports : [Enable] [Disable]

Port Type Admin Flow Control Speed and Duplex

--------------------------------------------------------

1

2

3

4

10/100TX

10/100TX

10/100TX

10/100TX

ENABLED

ENABLED

ENABLED

ENABLED

DISABLED

DISABLED

DISABLED

DISABLED

AUTO

AUTO

AUTO

AUTO

10/100TX

10/100TX

10/100TX

10/100TX ENABLED

10/100TX ENABLED

10/100TX ENABLED

10/100TX ENABLED

10/100TX

ENABLED

ENABLED

ENABLED

ENABLED

DISABLED

DISABLED

DISABLED

DISABLED

DISABLED

DISABLED

DISABLED

DISABLED

AUTO

AUTO

AUTO

AUTO

AUTO

AUTO

AUTO

AUTO

<APPLY> <OK> <CANCEL> <PREV UNIT> <NEXT UNIT> <PREV PAGE> <NEXT PAGE>

Use <TAB> or arrows keys to move. <Space> to scroll options.

Parameter

Flow Control on all ports

Type

Default

Disabled

Admin

Flow Control

Enabled

Disabled

Speed and Duplex Auto

Description

See “Flow Control” in this table.

Shows port type as:

10/100TX : 10BASE-T / 100BASE-TX

100BASE-FX

1000SX :

Allows you to disable a port due to abnormal behavior (e.g., excessive collisions), and then re-enable it after the problem has been resolved.

You may also disable a port for security reasons.

Used to enable or disable flow control. Flow control can eliminate frame loss by “blocking” traffic from end stations or segments connected directly to the switch when its buffers fill. IEEE 802.3x flow control is used for full duplex. Note that flow control should not be used if a port is connected to a hub.

Indicates current port speed and duplex mode.

Note that Auto-negotiation is not available for the 100BASE-FX ports.

100BASE-FX is fixed at 100 Mbps, full-duplex. And while

1000BASE-SX does auto-negotiate duplex mode and flow control, its speed is fixed at 1000 Mbps.

2-20


Viewing the Current Port Configuration

The Port Information screen displays the port type, status, link state, and flow control in use, as well as the communication speed and duplex mode. To change any of the port settings, use the Port Configuration menu.

Port Information : Unit 1 Port 1 - 12

================

Port Type Operational Link FlowControl Speed and

InUse Duplex InUse

-------------------------------------------------------------

1.

10/100TX YES UP NONE 100-FULL

2.

10/100TX

3.

10/100TX

4.

10/100TX

5.

10/100TX

YES

YES

YES

YES

UP

UP

UP

UP

NONE

NONE

NONE

NONE

100-FULL

100-FULL

100-FULL

100-FULL

6.

10/100TX

7.

10/100TX

8.

10/100TX

9.

10/100TX

10.

10/100TX

11.

10/100TX

12.

10/100TX

YES

YES

YES

YES

YES

YES

YES

UP

UP

UP

UP

UP

UP

UP

NONE

NONE

NONE

NONE

NONE

NONE

NONE

100-FULL

100-FULL

100-FULL

100-FULL

100-FULL

100-FULL

100-FULL



Parameter

Type

Operational

Link

FlowControl InUse

Speed and Duplex InUse

Description

Shows port type as:


100BASE-FX

1000SX :

Shows if the port is functioning or not.

Indicates if the port has a valid connection to an external device.

Shows the flow control type in use. Flow control can eliminate frame loss by “blocking” traffic from end stations connected directly to the switch. Back pressure is used for half duplex and IEEE 802.3x for full duplex. Note that flow control should not be used if a port is connected to a hub.

Displays the current port speed and duplex mode used. (Note that

Auto-negotiation is not available for 100BASE-FX ports.)

2-21


Using the Spanning Tree Algorithm

The Spanning Tree Algorithm can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices (that is, an STA-compliant switch, bridge or router) in your network to ensure that only one route exists between any two stations on the network. For a more detailed description of how to use this algorithm, refer to

“Spanning Tree Algorithm” on page 4-1.

Spanning Tree Configuration : Selection Menu

============================================

STA Bridge Configuration ...

STA Port Configuration ...

<OK>


Configuring Bridge STA

The following figure and table describe Bridge STA configuration.

Spanning Tree Configuration : Bridge STA Configuration

======================================================

Spanning Tree Protocol

Priority

: ENABLED

: 32768

Hello Time (in seconds) : 2

Max Age (in seconds) : 20

Forward Delay (in seconds): 15


Use <TAB> or arrow keys to move, <Space> to scroll options, other keys to make changes.

Parameter

Spanning Tree

Protocol

Priority

Default

Enabled

32,768

Description

Enable this parameter to participate in a STA compliant network.

Device priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device. However, if all devices have the same priority, the device with the lowest MAC address will then become the root device.

Enter a value from 0 - 65535.

Remember that the lower the numeric value, the higher the priority.

2-22

Parameter

Hello Time

Default

2

Max (Message)

Age

20

Forward Delay 15


Description

Time interval (in seconds) at which the root device transmits a configuration message.

The minimum value is1.

The maximum value is the lower of 10 or [(Max. Message Age / 2) -1].

The maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All device ports

(except for designated ports) should receive configuration messages at regular intervals. Any port that ages out STA information (provided in the last configuration message) becomes the designated port for the attached LAN. If it is a root port, a new root port is selected from among the device ports attached to the network.

The minimum value is the higher of 6 or [2 x (Hello Time + 1)].

The maximum value is the lower of 40 or [2 x (Forward Delay - 1)].

The maximum time (in seconds) the root device will wait before changing states (i.e., listening to learning to forwarding). This delay is required because every device must receive information about topology changes before it starts to forward frames. In addition, each port needs time to listen for conflicting information that would make it return to a blocking state; otherwise, temporary data loops might result.

The maximum value is 30.

The minimum value is the higher of 4 or [(Max. Message Age / 2) + 1].

2-23


Configuring STA for Ports

The following figure and table describe port STA configuration.

9

10

11

12

4

5

6

7

8

Spanning Tree Port Configuration : Unit 1 Port 1 - 12

================================

Fast forwarding on all ports : [Enable] [Disable]

Port Type Priority Cost FastForwarding

-----------------------------------------------------

1 10/100TX 128 19 ENABLED

2

3

10/100TX

10/100TX

128

128

19

19

ENABLED

ENABLED

10/100TX

10/100TX

10/100TX

10/100TX

10/100TX

10/100TX

10/100TX

10/100TX

10/100TX

128

128

128

128

128

128

128

128

128

19

19

19

19

19

19

19

19

19

ENABLED

ENABLED

ENABLED

ENABLED

ENABLED

ENABLED

ENABLED

ENABLED

ENABLED


Use <TAB> or arrow keys to move. <Enter> to select, other keys to make changes.

Parameter

Fast forwarding on all ports

Type

Priority

(Path) Cost

Fast Forwarding

Default

Enabled

128

100/19/4

Enabled

Description

See “FastForwarding” in this table.

Shows port type as:


100BASE-FX

1000SX :

Defines the priority for the use of a port in the STA algorithm. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the

Spanning Tree. Where more than one port is assigned the highest priority, the port with lowest numeric identifier will be enabled. The range is 0 - 255.

This parameter is used by the STA algorithm to determine the best path between devices. Therefore, lower values should be assigned to ports attached to faster media, and higher values assigned to ports with slower media. (Path cost takes precedence over port priority.)

The default and recommended range is:

Ethernet: 100 (50~600)

Fast Ethernet: 19 (10~60)

Gigabit Ethernet: 4 (3~10)

The full range is 0 - 65535.

This parameter is used to enable/disabled the Fast Spanning Tree mode for the selected port. In this mode, ports skip the Blocked,

Listening and Learning states and proceed straight to Forwarding.

Note: Fast Forwarding enables end-node workstations and servers to overcome time-out problems when the Spanning Tree Algorithm is implemented in a network. Therefore, Fast Forwarding should only be enabled for ports connected to an end-node device.

2-24


Viewing the Current Spanning Tree Information

The Spanning Tree Information screen displays a summary of the STA information for the overall bridge or for a specific port. To make any changes to the parameters for the Spanning Tree, use the Spanning Tree Configuration menu.

Spanning Tree Information : Selection Menu

==========================================

STA Bridge Information ...

STA Port Information ...

<OK>


2-25


Displaying the Current Bridge STA

The parameters shown in the following figure and table describe the current Bridge

STA Information.

Spanning Tree Information : Bridge STA Information

==================================================

Priority : 32768

Hello Time (in seconds) : 2

Max Age (in seconds) : 20

Forward Delay (in seconds): 5

Hold Time (in seconds) : 1

Designated Root

Root Cost

: 128.0000E800E800

: 501

Root Port

Reconfig Counts

Topology Up Time

: 1

: 3

: 48069 (0 day, 1 hr, 2min, 34 sec)

<OK>

Use <Tab> or arrow keys to move, <Enter> to select.

Parameter

Priority

Hello Time

Max Age

Forward Delay

Hold Time

Designated Root

Root Cost

Root Port

Reconfig Count

Topology Up Time

Description

Device priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device.

However, if all devices have the same priority, the device with the lowest

MAC address will then become the root device.

The time interval (in seconds) at which the root device transmits a configuration message.

The maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure.

The maximum time (in seconds) the root device will wait before changing states (i.e., listening to learning to forwarding).

The minimum interval between the transmission of consecutive

Configuration BPDUs.

The priority and MAC address of the device in the Spanning Tree that this switch has accepted as the root device.

The path cost from the root port on this switch to the root device.

The number of the port on this switch that is closest to the root. This switch communicates with the root device through this port. If there is no root port, then this switch has been accepted as the root device of the Spanning Tree network.

The number of times the Spanning Tree has been reconfigured.

The time since the Spanning Tree was last reconfigured.

2-26


Displaying the Current STA for Ports

The parameters shown in the following figure and table are for port STA Information.

Spanning Tree Port Information : Unit 1 Port 1 - 12

==============================

Port Type Status Designated Designated Designated

Cost Bridge Port

-----------------------------------------------------------

1.

10/100TX BROKEN 5011 32768.0010B54C1EB6

128.1

2.

10/100TX BROKEN

3.

10/100TX BROKEN

4.

10/100TX BROKEN

5.

10/100TX BROKEN

5011

5011

5011

5011

32768.0010B54C1EB6

32768.0010B54C1EB6

32768.0010B54C1EB6

32768.0010B54C1EB6

128.2

128.3

128.4

128.5

6.

10/100TX FORWARDING 4992 32769.2000E8003889

0.6

7.

10/100TX BROKEN 5011 32768.0010B54C1EB6

128.7

8.

10/100TX BROKEN

9.

10/100TX BROKEN

10.

10/100TX BROKEN

5011

5011

5011

32768.0010B54C1EB6

32768.0010B54C1EB6

32768.0010B54C1EB6

128.8

128.9

128.10

11.

10/100TX BROKEN

12.

10/100TX BROKEN

5011 32768.0010B54C1EB6

128.11

5011 32768.0010B54C1EB6

128.12


Use <TAB> or arrows keys to move. <Enter> to select.

Parameter

Type

Status

Designated

Cost

Description

Shows port type as:


100BASE-FX

1000SX :

Displays current state of this port within the Spanning Tree:

Broken No link has been established on this port.

Disabled

Blocking

Port has been disabled by the user or has failed diagnostics.

Port receives STA configuration messages, but does not forward packets.

Listening

Learning

Forwarding

Port will leave blocking state due to topology change, starts transmitting configuration messages, but does not yet forward packets.

Port has transmitted configuration messages for an interval set by the

Forward Delay parameter without receiving contradictory information.

Port address table is cleared, and the port begins learning addresses.

The port forwards packets, and continues learning addresses.

The rules defining port status are:

• A port on a network segment with no other STA compliant bridging device is always forwarding.

• If two ports of a switch are connected to the same segment and there is no other

STA device attached to this segment, the port with the smaller ID forwards packets and the other is blocked.

• All ports are blocked when the switch is booted, then some of them change state to listening, to learning, and then to forwarding.

The cost for a packet to travel from this port to the root in the current Spanning Tree configuration. The slower the media, the higher the cost.

2-27


Parameter

Designated Bridge

(ID)

Designated

Port (ID)

Description

The priority and MAC address of the device through which this port must communicate to reach the root of the Spanning Tree.

The priority and number of the port on the designated bridging device through which this switch must communicate with the root of the Spanning Tree.

Using a Mirror Port for Analysis

You can mirror traffic from any source port to a target port for real-time analysis. You can then attach a logic analyzer or RMON probe to the target port and study the traffic crossing the source port in a completely unobtrusive manner. When mirroring port traffic, note that the target port must be included in the same VLAN as the source port. (See “Configuring Virtual LANs” on page 2-37.)

You can use the Mirror Port Configuration screen to designate a single port pair for mirroring as shown below.

Mirror Port Configuration

=========================

Mirror Source Port : Unit 1

Port 1

Mirror Target Port : Unit 1

Port 2

Status : DISABLED

Parameter

Mirror Source Port

Mirror Target Port

Status



Description

The port whose traffic will be monitored.

The port that will duplicate or “mirror” all the traffic happening on the monitored port.

Enables or disables the mirror function.

2-28


Configuring Port Trunks

Port trunks can be used to increase the bandwidth of a network connection or to ensure fault recovery. You can configure up to four trunk connections (combining

2~4 ports into a fat pipe) between any two ES3514F, ES3526F or ES3526G switches. However, before making any physical connections between devices, use the Trunk Configuration menu to specify the trunk on the devices at both ends.

When using a port trunk, note that:

• The ports used in a trunk must all be of the same media type (RJ-45, 100 Mbps fiber, or 1000 Mbps fiber). The ports that can be assigned to the same trunk have certain other restrictions as described on page 2-31.

• Ports can only be assigned to one trunk.

• The ports at both ends of a connection must be configured as trunk ports.

• The ports at both ends of a trunk must be configured in an identical manner, including speed, duplex mode, and VLAN assignments.

• The communication mode must be configured identically at both ends of the trunk.

• None of the ports in a trunk can be configured as a mirror source port or mirror target port.

• All the ports in a trunk have to be treated as a whole when moved from/to, added or deleted from a VLAN.

• The Spanning Tree Algorithm will treat all the ports in a trunk as a whole.

• Enable the trunk prior to connecting any cable between the switches to avoid creating a loop.

• Disconnect all trunk port cables or disable the trunk ports before removing a port trunk to avoid creating a loop.

2-29


You can use the Port Trunking Configuration screen set up port trunks as shown below:

Trunk ID Status

--------Unit : -

Port : --

Member List

1 2 3 4

--------------------------------------------------------

Unit : -

Port : --

Unit : -

Port : --

Unit : -

Port : --

--

Port Trunking Configuration

===========================

-------Unit : -

Port : --

Unit : -

Port : --

Unit : -

Port : --

Unit : -

Port : --

--------Unit : -

Port : --

Trunk ID : 1

Unit : -

Port : --

Unit : -

Port : --

Trunk ID : 1

Unit : -

Port : --

Member Unit : 1

Member Port : 1

[Show]

[Enable]

[More]

[Disable] [Add] [Delete]

<OK>


Parameter

Trunk ID

Status

Unit*

Port

[Show]

[More]

Description

Configure up to four trunks per switch.

Shows if the selected trunk is enabled or disabled.

Specifies a switch unit in the stack (1~4).

Select from 2 ~ 4 ports per trunk.

Displays trunk settings, where the first trunk listed is specified by “Trunk ID.”

Scrolls through the list of configured trunks.

[Enable] [Disable]

[Add] [Delete]

Enables/disables the selected trunk.

Adds/deletes the port specified by

Trunk ID / Member Unit / Member Port.


2-30


The RJ-45 ports used for one side of a trunk must all be on the same internal switch chip. The port groups permitted include:

Group 3 Switch Model Group 1 Group 2

ES3514F 1,2,7,8

ES3526F 1,2,3,4, 13,14,15,16 5,6,7,8, 17,18,19,20

ES3526G 1,2,3,4, 13,14,15,16 5,6,7,8, 17,18,19,20

9,10,11,12, 21,22,23,24

9,10,11,12, 21,22,23,24

The 100BASE-FX fiber ports used for one side of a trunk must all be on the same module. However, the 1000BASE-SX ports used for one side of a trunk may be on any switch in the stack, or both on the same switch if used standalone.

Media Module

100BASE-FX

1000BASE-SX

Any ports on a single module.

Up to four Gigabit ports from any switch in the stack, or both Gigabit ports on two modules installed in a standalone switch.

For example, when using Gigabit ports to form a trunk within a stack, the Gigabit ports will all be at Port 25. In this case, you could specify a trunk group consisting of:

(Unit1-Port25, Unit2-Port25, Unit3-Port25, Unit4-Port25), or two trunks consisting of:

(Unit1-Port25, Unit2-Port25) and (Unit3-Port25, Unit4-Port25).

2-31


IGMP Multicast Filtering

Multicasting is used to support real-time applications such as video conferencing or streaming audio. A multicast server does not have to establish a separate connection with each client. It merely broadcasts its service to the network, and any hosts which want to receive the multicast register with their local multicast switch/ router. Although this approach reduces the network overhead required by a multicast server, the broadcast traffic must be carefully pruned at every multicast switch/router it passes through to ensure that traffic is only passed on the hosts which subscribed to this service.

This switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts who want to receive a specific multicast service. The switch looks up the IP Multicast Group used for this service and adds any port which received a similar request to that group. It then propagates the service request on to any neighboring multicast switch/router to ensure that it will continue to receive the multicast service. (For more information, see “IGMP Protocol” on page 4-5.)

Configuring IGMP

This protocol allows a host to inform its local switch/router that it wants to receive transmissions addressed to a specific multicast group. You can use the IGMP

Configuration screen to configure multicast filtering shown below.

IGMP Configuration

==================

IGMP Status

Act as IGMP Querier

: ENABLED

: DISABLED

IGMP Query Count : 5

IGMP Report Delay (Minutes) : 5


Use <TAB> or arrow keys to move. <Space> to scroll option.

Parameter

IGMP Status

Act as IGMP Querier

IGMP Query Count

IGMP Report Delay

Description

If enabled, the switch will monitor network traffic to determine which hosts want to receive multicast traffic. This is also referred to as IGMP Snooping.

If enabled, the switch can serve as the “querier,” which is responsible for asking hosts is they want to receive multicast traffic. (Not available for the current firmware release.)

The maximum number of queries issued for which there has been no response before the switch takes action to solicit reports.

The time (in minutes) between receiving an IGMP Report for an IP multicast address on a port before the switch sends an IGMP Query out that port and removes the entry from its list.

Note: The default values are indicated in the sample screen.

2-32


Configuring Bridge MIB Extensions

The Bridge MIB includes extensions for managed devices that support Traffic

Classes and Virtual LANs. To display and configure these extensions, use the

Extended Bridge Configuration screen as shown below.

Extended Bridge Configuration

=============================

Bridge Capability : (Read Only)

Extended Multicast Filtering Services : NO

Traffic Classes : YES

Static Entry Individual Port : YES

VLAN Learning

Configurable PVID Tagging

Local VLAN Capable

: SVL

: YES

: NO

Bridge Settings :

Traffic Class : FALSE

GMRP

GVRP

: DISABLED

: DISABLED


Use <TAB> or arrow keys to move. <Space> to scroll option.

Parameter

Bridge Capability

Extended Multicast Filtering

Services

Traffic Classes

Local VLAN Capable

Description

This switch does not support filtering of individual multicast addresses based on GMRP (GARP Multicast Registration Protocol).

This switch provides mapping of user priorities to multiple traffic classes.

(Refer to “802.1p Port Traffic Class Information” on page 2-36.)

Static Entry Individual Port This switch allows static filtering for unicast and multicast addresses. (Refer to Network Monitor Menu / Static Unicast Address Table Configuration and

Static Multicast Address Table Configuration.)

VLAN Learning This switch uses Shared VLAN Learning (SVL), whereby the VLAN filtering database is shared among all ports.

Configurable

PVID Tagging

This switch allows you to override the default PVID (Port VLAN ID) assigned to untagged incoming frames under “802.1Q VLAN Port Configuration” on page 2-41.

This switch does not support multiple local bridges (that is, multiple Spanning

Trees).

Bridge Settings

Traffic Class*

GMRP*

Multiple traffic classes are supported by this switch as indicated under Bridge

Capabilities. However, the switch supports just two priority queues and only the default port priority can be configured. The switch does not support the configuration of traffic class mapping. Therefore, this parameter under Bridge

Settings is set to False and cannot be enabled.

GARP Multicast Registration Protocol (GMRP) allows network devices to register endstations with multicast groups.

IGMP Snooping is currently used by this switch to provide multicast filtering.

2-33



GVRP* GARP VLAN Registration Protocol (GVRP) defines a way for switches to exchange VLAN information in order to register necessary VLAN members on ports across the network. This function should be enabled to permit

VLANs groups which extend beyond the local switch.

* Not enabled in this firmware release.

Configuring Traffic Classes

IEEE 802.1p defines up to 8 separate traffic classes. This switch supports Quality of

Service (QoS) by using two priority queues, with Weighted Fair Queuing for each port. You can use the 802.1P Configuration menu to configure the default priority for each port, or to display the mapping for the traffic classes as described in the following sections.

802.1P Configuration : Selection Menu

====================

802.1P Port Priority Configuration ...

802.1P Port Traffic Class Information ...

<OK>

Use <TAB> or arrows keys to move. <Enter> to select.

2-34


Port Priority Configuration

Inbound frames that do not have any VLAN tags are tagged with the input port’s default VLAN ID (PVID) and the Default Ingress User Priority as shown in the following menu, and then sorted into the appropriate priority queue at the output port. (Note that if the output port is an untagged member of the associated VLAN, these frames are stripped of all VLAN tags prior to transmission.)

The default priority for all ingress ports is zero. Therefore, any inbound frames that do not have priority tags will be placed in the low priority queue of the output port.

You can use the following menu to adjust default ingress priority for any port as shown below.

802.1P Port Priority Configuration : Unit 1 Port 1 - 12

==================================

7

8

9

10

11

12

2

3

4

5

6

Port Default Ingress Number of Egress

User Priority Traffic Class

---------------------------------------

1 0 2

0

0

0

0

0

2

2

2

2

2

0

0

0

0

0

0

2

2

2

2

2

2



Parameter

Port

Description

Numeric identifier for switch port.

Default Ingress User Priority Default ingress priority can be set to any value from 0~7, where 0~3 specifies the low priority queue and 4~7 specifies the high priority queue.

Number of Egress Traffic

Classes

Indicates that this switch supports two priority output queues.

2-35


802.1p Port Traffic Class Information

This switch provides two priority levels with Weighted Fair Queuing for port egress.

This means that any frames with a priority tag from 0~3 are sent to the low priority queue “0” while those from 4~7 are sent to the high priority queue “1” as shown in the following screen.

802.1P Port Traffic Class Information : Unit 1 Port 1 - 12

=====================================

7

8

9

10

11

12

2

3

4

5

6

Port User Priority

0 1 2 3 4 5 6 7

-------------------------------------

1 0 0 0 0 1 1 1 1

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1



Parameter

Port

User Priority

Description


Shows that user priorities 0~3 specify the low priority queue and 4~7 specify the high priority queue.

2-36


Configuring Virtual LANs

You can use the VLAN configuration menu to assign any port on the switch to any of up to 255 LAN groups. In conventional networks with routers, broadcast traffic is split up into separate domains. Switches do not inherently support broadcast domains. This can lead to broadcast storms in large networks that handle traffic such as IPX or NetBeui. By using IEEE 802.1Q compliant VLANs, you can organize any group of network nodes into separate broadcast domains, confining broadcast traffic to the originating group. This also provides a more secure and cleaner network environment. For more information on how to use VLANs, see “Virtual

LANs” on page 4-2. The VLAN configuration screens are described in the following sections.

802.1Q VLAN Base Information

The 802.1Q VLAN Base Information screen displays basic information on the VLAN type supported by this switch.

802.1Q VLAN Base Information

============================

VLAN Version Number

MAX VLAN ID

: 1

: 2048

MAX Supported VLANs : 255

Current Number of 802.1Q VLANs Configured : 1

<OK>

Return to previous panel.

<Enter> to select.

Parameter

VLAN Version Number

MAX VLAN ID

MAX Supported VLANs

Current Number of VLANs

Configured

Description

The VLAN version used by this switch as specified in the IEEE 802.1Q standard.

Maximum VLAN ID recognized by this switch.

Maximum number of VLANs that can be configured on this switch.

The number of VLANs currently configured on this switch.

2-37


802.1Q VLAN Current Table Information

This screen shows the current port members of each VLAN and whether or not the port supports VLAN tagging. Ports assigned to a large VLAN group that crosses several switches should use VLAN tagging. However, if you just want to create a small port-based VLAN for one or two switches, you can assign ports to the same untagged VLAN. The current configuration is shown in the following screen.

802.1Q VLAN Current Table Information

=====================================

Deleted VLAN Entry Counts : 0

VID Creation Time Status

--------------------------------------------------

1 0 (0 day 0 hr 0 min 0 sec) Permanent

Unit Current Egress Ports Current Untagged Ports

1. 111111111111 111111111111 ---111111111111 111111111111 ----

2. ------------ ------------ --------------- ------------ ----

3. ------------ ------------ --------------- ------------ ----

4. ------------ ------------ --------------- ------------ ----

Sorted by VID : 1

Port 1 Port 13 Port 25

[Show] [More]

<OK>



Deleted VLAN Entry Counts The number of times a VLAN entry has been deleted from this table.

VID

Creation Time

Status

The ID for the VLAN currently displayed.

The value of sysUpTime (System Up Time) when this VLAN was created.

Shows how this VLAN was added to the switch.

Dynamic GVRP: Automatically learned via GVRP.

Permanent: Added as a static entry.

Unit*

Current Egress Ports

Stack unit.

Shows the ports which have been added to the displayed VLAN group, where

“1” indicates that a port is a member and “0” that it is not.

Current Untagged Ports

Sorted by VID

[Show]

[More]

If a port has been added to the displayed VLAN (see Current Egress Ports), its entry in this field will be “1” if the port is untagged or “0” if tagged.

The VLAN ID number from which the display will start.

Displays the members for the VLAN indicated by the “Sorted by VID” field.

Displays any subsequent VLANs if configured.


2-38


802.1Q VLAN Static Table Configuration

Use this screen to create a new VLAN or modify the settings for an existing VLAN.

You can add/delete port members for a VLAN from any unit in the stack as a tagged or untagged member. Or you can prevent a port from being automatically added to a VLAN by the GVRP protocol.


======================================

VID VLAN Name Status

------------------------------

1 Active

Unit Egress Ports Forbidden Egress Ports

1. 111111111111 111111111111 ---000000000000 000000000000 ----

2. ------------ ------------ --------------- ------------ ----

3. ------------ ------------ --------------- ------------ ----

4. ------------ ------------ --------------- ------------ ----

Unit Untagged Ports

1. 111111111111 111111111111 ---VID : 1

2. ------------ ------------ ---[Show]

3. ------------ ------------ ---[More]

4. ------------ ------------ ---[New]



Parameter

VID

VLAN Name

Description


Range: 1-2048

A user-specified symbolic name for this VLAN.

String length: Up to 8 alphanumeric characters

Status

Unit*

Egress Ports

Forbidden Egress Ports

Sets the current editing status for this VLAN as: Not in Service, Destroy or

Active.

Stack unit.

Set the entry for any port in this field to “1” to add it to the displayed VLAN, or

“0” to remove it from the VLAN.

Prevents a port from being automatically added to this VLAN via GVRP.

Note that GVRP is not supported in the current firmware release.

Untagged Ports You can add a port to the displayed VLAN as an untagged port by setting this field to “1” or as a tagged port by setting it to “0.” This field is only enabled if the corresponding port has been added to the displayed VLAN as an “Egress

Port.”

Displays settings for the specified VLAN.

[Show]

[More]

[New]

Displays consecutively numbered VLANs.

Sets up the screen for configuring a new VLAN.


2-39


For example, the following screen displays settings for VLAN 2, which includes untagged ports 1-6, and forbidden port 8.


======================================

VID VLAN Name Status

------------------------------

Unit Egress Ports

2 Active

Forbidden Egress Ports

1. 111111000000 000000000000 ---000000010000 000000000000 ----

2. ------------ ------------ --------------- ------------ ----

3. ------------ ------------ --------------- ------------ ----

4. ------------ ------------ --------------- ------------ ----

Unit Untagged Ports

1. 111111000000 000000000000 ---VID : 2

2. ------------ ------------ ---[Show]

3. ------------ ------------ ---[More]

4. ------------ ------------ ---[New]



Notes : 1. To allow this switch to participate in a VLAN group that extends beyond this switch, you must add the VLAN ID for the required external groups.

2. If a removed port is no longer assigned to any other group as an untagged port, it will automatically be assigned to VLAN group 1 as untagged.

2-40


802.1Q VLAN Port Configuration

Use this screen to configure port-specific settings for IEEE 802.1Q VLAN features.

802.1Q VLAN Port Configuration : Unit 1 Port 1 - 12

===============================

10

11

12

6

7

8

9

2

3

4

5

Port PVID Acceptable Ingress GVRP GVRP Failed GVRP Last

Frame Type Filtering Status Registrations PDU Origin

---------------------------------------------------------------------

1 1 All FALSE DISABLED 0 00-00-00-00-00-00

1

1

1

1

All

All

All

All

FALSE

FALSE

FALSE

FALSE

DISABLED

DISABLED

DISABLED

DISABLED

0

0

0

0

00-00-00-00-00-00

00-00-00-00-00-00

00-00-00-00-00-00

00-00-00-00-00-00

1

1

1

1

1

1

1

All

All

All

All

All

All

All

FALSE

FALSE

FALSE

FALSE

FALSE

FALSE

FALSE

DISABLED

DISABLED

DISABLED

DISABLED

DISABLED

DISABLED

DISABLED

0

0

0

0

0

0

0

00-00-00-00-00-00

00-00-00-00-00-00

00-00-00-00-00-00

00-00-00-00-00-00

00-00-00-00-00-00

00-00-00-00-00-00

00-00-00-00-00-00



Parameter

PVID

Acceptable Frame Type

Ingress Filtering

GVRP Status 2

1

1

Description

The VLAN ID assigned to untagged frames received on this port.

This switch accepts “All” frame types, including VLAN tagged or VLAN untagged frames. Note that all VLAN untagged frames received on this port are assigned to the PVID for this port.

If set to “True,” incoming frames for VLANs which do not include this ingress port in their member set will be discarded at the ingress port.

Enables or disables GVRP for this port. When disabled, any GVRP packets received on this port will be discarded and no GVRP registrations will be propagated from other ports.

Note that GVRP must be enabled for the switch before this setting can take effect. (See Device Control Menu / Extended Bridge Configuration.)

GVRP Failed Registrations 2 The total number of failed GVRP registrations, for any reason, on this port.

GVRP Last PDU Origin 2 The Source MAC Address of the last GVRP message received on this port.

1: These controls do not affect VLAN independent BPDU frames, such as GVRP or STP. However, they do affect VLAN dependent BPDU frames, such as GMRP.

2: Not available for the current firmware release.

2-41


Monitoring the Switch

The Network Monitor Menu provides access to port statistics, RMON statistics, IP multicast addresses, and the static address table. Each of the screens provided by these menus is described in the following sections.

Network Monitor Menu

====================

Port Statistics ...

RMON Statistics ...

Unicast Address Table ...

Multicast Address Registration Table ...

IP Multicast Registration Table ...

Static Unicast Address Table Configuration ...

Static Multicast Address Table Configuration...

<OK>


Menu

Port Statistics

RMON Statistics


Description


Displays detailed statistical information for the selected port such as packet type and frame size counters.

Provides full listing of all unicast addresses stored in the switch, as well as sort, search and clear functions.

Displays the ports that belong to each GMRP Multicast group. Multicast Address Registration

Table*

IP Multicast

Registration Table

Displays the ports that belong to each IP Multicast group.

Static Unicast Address Table

Configuration

Allows you to display or configure static unicast addresses.

Static Multicast Address Table

Configuration*

Allows you to display or configure static GMRP multicast addresses.


2-42


Displaying Port Statistics

Port Statistics display key statistics from the Ethernet-like MIB for each port. Error statistics on the traffic passing through each port are displayed. This information can be used to identify potential problems with the switch (such as a faulty port or unusually heavy loading). The values displayed have been accumulated since the last system reboot.

Select the required port. The statistics displayed are indicated in the following figure and table.

Port Statistics : Unit 1 Port 1

===============

Ether Like Counter:

Alignment Errors

FCS Errors

:0 Late Collisions

:0 Excessive Collisions

:9

:0

Single Collision Frames :0 Internal Mac Transmit Errors :0

Multiple Collision Frames :0 Carrier Sense Errors :0

SQE Test Errors

Deferred Transmissions

:0 Frames Too Long :0

:0 Internal Mac Receive Errors :0

[Refresh Counters] [Reset Counters]

<OK> <PREV UNIT> <NEXT UNIT> <PREV PORT> <NEXT PORT>


Menu

Alignment Errors

FCS Errors

Single Collision Frames*

Multiple Collision Frames*

SQE Test Errors*

Description

The number of alignment errors (mis-synchronized data packets).

The number of frames received that are an integral number of octets in length but do not pass the FCS check.

The number of successfully transmitted frames for which transmission is inhibited by exactly one collision.

A count of successfully transmitted frames for which transmission is inhibited by more than one collision.

A count of times that the SQE TEST ERROR message is generated by the

PLS sublayer.

Deferred Transmissions*

Late Collisions

A count of frames for which the first transmission attempt on a particular interface is delayed because the medium was busy.

The number of times that a collision is detected later than 512 bit-times into the transmission of a packet.

Excessive Collisions* The number of frames for which transmission failed due to excessive collisions.

Internal Mac Transmit Errors* The number of frames for which transmission failed due to an internal MAC sublayer transmit error.

Carrier Sense Errors* The number of times that the carrier sense condition was lost or never asserted when attempting to transmit a frame.

Frames Too Long The number of frames received that exceed the maximum permitted frame size.

2-43


Menu Description

Internal Mac Receive Errors* The number of frames for which reception failed due to an internal MAC sublayer receive error.

* The reported values will always be zero because these statistics are not supported by the internal chip set.

Note : Statistics are automatically refreshed every 5 seconds (see page 2-13).

Displaying RMON Statistics

Use the RMON Statistics screen to display key statistics for each port from RMON group 1. (RMON groups 2, 3 and 9 can only be accessed using SNMP management software such as AccView.) The following screen displays the overall statistics on traffic passing through each port. RMON statistics provide access to a broad range of statistics, including a total count of different frame types and sizes passing through each port. Values displayed have been accumulated since the last system reboot.

RMON Statistics : Unit 1 Port 1

===============

Drop Events

Received Bytes

Received Frames

Broadcast Frames

Multicast Frames

:3249

:0

CRC/Alignment Errors :0

Undersize Frames :0

Oversize Frames

Fragments

:0 Jabbers

:199299 Collisions

:15746 64 Byte Frames

:0

:0

65-127 Byte Frames

:0

:0

:37837

:674356

128_255 Byte Frames :45430

256-511 Byte Frames :20447

512-1023 Byte Frames :3740

1024_1518 Byte Frames :35696

[Refresh Counters] [Reset Counters]

<OK> <PREV UNIT> <NEXT UNIT> <PREV PORT> <NEXT PORT>


Menu

Drop Events

Received Bytes

Received Frames

Broadcast Frames

Multicast Frames

CRC/Alignment Errors

Undersize Frames

Oversize Frames

Description

The total number of events in which packets were dropped due to lack of resources.

Total number of bytes of data received on the network. This statistic can be used as a reasonable indication of Ethernet utilization.

The total number of frames (bad, broadcast and multicast) received.

The total number of good frames received that were directed to the broadcast address. Note that this does not include multicast packets.

The total number of good frames received that were directed to this multicast address.

The number of CRC/alignment errors (FCS or alignment errors).

The total number of frames received that were less than 64 octets long

(excluding framing bits, but including FCS octets) and were otherwise well formed.

The total number of frames received that were longer than 1518 octets

(excluding framing bits, but including FCS octets) and were otherwise well formed.

2-44


Menu

Fragments

Jabbers

Description

The total number of frames received that were less than 64 octets in length

(excluding framing bits, but including FCS octets) and had either an FCS or alignment error.

The total number of frames received that were longer than 1518 octets

(excluding framing bits, but including FCS octets), and had either an FCS or alignment error.

The best estimate of the total number of collisions on this Ethernet segment.

Collisions

64 Byte Frames

65-127 Byte Frames

128-255 Byte Frames

The total number of frames (including bad packets) received and transmitted that were 64 octets in length (excluding framing bits but including FCS octets).

The total number of frames (including bad packets) received and transmitted that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets).

The total number of packets (including bad packets) received and transmitted that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).

1024-1518 Byte Frames The total number of packets (including bad packets) received and transmitted that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).

Note : Statistics are automatically refreshed every 5 seconds (see page 2-13).

2-45


Displaying the Unicast Address Table

The Address Table contains the MAC addresses and VLAN identifier associated with each port (that is, the source port associated with the address and VLAN), sorted by MAC address or VLAN ID. You can search for a specific address, clear the entire address table, or information associated with a specific address, or set the aging time for deleting inactive entries. The information displayed in the Address

Table is indicated in the following figure and table.

Aging Time : 300


=====================

Dynamic Counts : 244 Static Counts : 0

MAC VID Unit Port Status MAC VID Unit Port Status

---------------------------------------------------------------------

00-00-24-B3-28-83 1 1 2 D 00-00-E8-00-00-96 1 1 2 D

00-00-E2-12-F9-F8 1 1 2

00-00-E2-16-C5-82 1 1 2

00-00-E2-20-C3-D5 1 1 2

00-00-E2-21-74-D0 1 1 2

D

D

D

D

00-00-E8-00-01-01

00-00-E8-02-A0-E6

00-00-E8-07-12-5E

00-00-E8-10-00-AB

1

1

1

1

1

1

1

1

2

2

2

2

D

D

D

D

00-00-E8-00-00-02 1 1 2

00-00-E8-00-00-18 1 1 2

00-00-E8-00-00-1A 1 1 2

D

D

D

00-00-E8-11-11-33 1 1 2

00-00-E8-12-00-69 1 1 2

00-00-E8-12-24-60 1 1 2

D

D

D

Sorted by : MAC + VID

VLAN ID : 1

MAC

[Show]

: 00-00-00-00-00-00

[More]

Cleared by : MAC + VID

VLAN ID : 1

MAC

[Clear]

: 00-00-00-00-00-00

[Clear ALL]



Menu

Aging Time

Description

Time-out period in seconds for aging out dynamically learned forwarding information.

Range: 10 - 415 seconds; Default: 300 seconds

The number of dynamically learned addresses in the table.

Dynamic Count

Static Count

MAC

VID

Unit*

Port

Status

The number of static addresses in the table.

The MAC address of a node.

The VLAN(s) associated with this address or port.

Switch unit in the stack (1~4).

The port whose address table includes this MAC address.

Indicates address status as:

D: Dynamically learned, or

P: Fixed permanently by SNMP network management software.

Sorted/Cleared by Selects the primary key used to sort/clear the table: MAC or VID.

[Show] Displays the address table for the specified VLAN ID, sorted by primary key MAC or VID.

[More]

[Clear]

Scrolls through the entries in the address table.

Clears the specified MAC address.

[Clear All] Clears all MAC addresses in the table.


2-46


Displaying the IP Multicast Registration Table

Use the IP Multicast Registration Table to display all the multicast groups active on this switch, including multicast IP addresses and the corresponding VLAN ID.

IP Multicast Registration Table

===============================

VID Multicast IP Unit Multicast Group Port Lists Learned by

--------------------------------------------------------------------

1 225.1.1.1

1.

000000001100 110000000000 00

2.

000000001100 110000000000 00

IGMP

IGMP

3.

000000001100 110000000000 00

4.

000000001100 110000000000 00

IGMP

IGMP

5 225.1.1.2

1.

000000001100 110000000000 00

2.

000000001100 110000000000 00

3.

000000001100 110000000000 00

4.

000000001100 110000000000 00

Sorted by : VID + Multicast IP

VID : 1

Multicast IP :

[Show] [More]

<OK>

Use <TAB> or arrow keys to move, <Enter> to select.

IGMP

IGMP

Dynamic

IGMP

Menu

VID

Multicast IP

Unit*

Dynamic Port Lists

Learned by

Sorted by

Description

VLAN ID assigned to this multicast group.

IP address for specific multicast services.

Stack unit.

The switch ports registered for the indicated multicast service.

Indicates the manner in which this address was learned: Dynamic or IGMP.

Selects the primary sort key for displaying table entries. Note that only

VID+Multicast IP is implemented in the current firmware release.

[Show]

[More]

Displays the address table sorted on VID and then Multicast IP.

Scrolls through the entries in the address table.


2-47


Configuring Static Unicast Addresses

Use the Static Unicast Address Table Configuration screen to manually configure host MAC addresses in the unicast table. You can use this screen to associate a

MAC address with a specific VLAN ID and switch port as shown below.

Static Unicast Address Table Configuration

==========================================

VID MAC Address Unit Port Status

------------------------------------------------------------

1 00-00-00-E8-43-12 1 1 Permanent

Sorted by : VID + MAC

VID : 1

MAC : 00-00-00-00-00-00

VID : 1 MAC : 00-00-00-00-00-00

Port : 1

Status : Permanent

[Show] [More] [Set]

<OK>

Use <TAB> or arrow keys to move, <Enter> to select.

Menu

VID

MAC Address

Unit*

Port

Status

Description

The VLAN group this port is assigned to.

The MAC address of a host device attached to this switch.

The switch unit the host device is attached to.

The port the host device is attached to.

The status for an entry can be set to:

Permanent

DeleteOnReset

This entry is currently in use and will remain so after the next reset of the switch.

This entry is currently in use and will remain so until the next reset.

Invalid

DeleteOnTimeOut

Other

Removes the corresponding entry.

This entry is currently in use and will remain so until it is aged out. (Refer to “Aging Time” on page 2-46.)

This entry is currently in use but the conditions under which it will remain so differ from the preceding values.

Sorted by

[Show]

Selects the primary sort key for displaying table entries. Note that only

VID+MAC is implemented in the current firmware release.

Displays the static address table sorted on VID as the primary key and MAC address as secondary key.

Scrolls through entries in the static address table.

[More]

[Set] Adds the specified entry to the static address table, such as shown in the following example:

VID

Unit

Status


: 1 MAC : 00-00-00-e8-34-22

: 1 Port: 1

: Permanent

2-48

Resetting the System

Resetting the System

Use the Restart command under the Main Menu to reset the management agent.

The reset screen includes options as shown in the following figure and table.

System Restart Menu

===================

Restart Option :

POST : YES

Reload Factory Defaults : NO

Keep IP Setting : NO

Keep User Authentication : NO

[Restart]



Menu

POST

Reload Factory Defaults

Keep IP Setting

Keep User Authentication

[Restart]

Description

Runs the Power-On Self-Test

Reloads the factory defaults

Retains the settings defined in the IP Configuration menu.

Retains the user names and passwords defined in the Console Login

Configuration menu.

Restarts the switch.

Logging Off the System

Use the Exit command under the Main Menu to exit the configuration program and terminate communications with the switch for the current session.

2-49


2-50

Chapter 3: Web-Based Management

Web-Based Configuration and Monitoring

As well as the menu-driven system configuration program, the agent module provides an embedded HTTP Web agent. This agent can be accessed by any computer on the network using a standard Web browser (Internet Explorer 4.0 or above, or Netscape Navigator 4.0 or above).

Using the Web browser management interface you can configure a switch and view statistics to monitor network activity. The Web interface also provides access to a range of SNMP management functions with access to the switch’s MIB and RMON database.

Prior to accessing the switch from a Web browser, be sure you have first performed the following tasks:

1. Configure it with a valid IP address, subnet mask, and default gateway using an out-of-band serial connection or BOOTP protocol.

2. Set the Administrator user name and password using an out-of-band serial connection. Access to the Web agent is controlled by the same Administrator user name and password as the on-board configuration program.

Note: The ES3526G does not support stacking.

Please disregard any references to the stack when using the ES3526G.

3-1

Web-Based Management

Navigating the Web Browser Interface

To access the Web-browser interface you must first enter a user name and password. The default user name is “admin,” with no password. The administrator has Read/Write access to all configuration parameters and statistics.

Home Page

When your Web browser connects with the switch’s Web agent, the home page is displayed as shown below. The home page displays the Main Menu on the left-hand side of the screen and System Information on the right-hand side. The Main Menu links are used to navigate to other menus and display configuration parameters and statistical data.

If this is your first time to access the management agent, you should define a new

Administrator password, record it and put it in a safe place. From the Main Menu, select Security and enter a new password for the Administrator. Note that passwords can consist of up to 11 alphanumeric characters and are not case sensitive.

Note: Based on the default configuration, a user is allowed three attempts to enter the correct password; on the third failed attempt the current connection is terminated.

See “Console Login Configuration” on page 2-17.

3-2

Panel Display

Configuration Options

Configurable parameters have a dialog box or a drop-down list. Once a configuration change has been made on a page, be sure to click on the “Apply” button at the bottom of the page to confirm the new setting. The following table summarizes the

Web page configuration buttons.

Button

Apply

Revert

Refresh

Help

Web Page Configuration Buttons

Action

Sets specified values in the management agent.

Cancels specified values prior to pressing the “Apply” button.

Immediately updates values from the management agent.

Provides help on using the Web management interface.

Notes: 1.

To ensure proper screen refresh, be sure that Internet Explorer 5.0 is configured as follows: Under the menu “Tools / Internet Options / General /

Temporary Internet Files / Settings,” the setting for item “Check for newer versions of stored pages” should be “Every visit to the page.”

2.

When using Internet Explorer 5.0, you may have to manually refresh the screen after making configuration changes by pressing the browser’s refresh button.

Panel Display

The Web agent displays an image of the switch’s ports, showing port links and activity. Clicking on the image of a port displays statistics and configuration information for the port. Clicking on the image of the serial port (labeled “Mgmt”) displays the Console Configuration screen. Clicking on any other part of the front panel displays “Switch Information” as described on page 3-8.

3-3


Port State Display

Click on any port to display a summary or port status as shown below, as well as

Etherlike statistics (page 3-36) and RMON statistics (page 3-37).

Parameter

Type

Admin Status

Link Status

Speed Status

Duplex Status

Flow Control Status

VLAN

Description

Shows port type as:


100BASE-FX

1000SX :

Shows if the port is enabled, or has been disabled due to abnormal behavior or for security reasons. See “Port Configuration” on page 3-32.


Indicates the current port speed.

Indicates the port’s current duplex mode.

Shows the flow control type in use. Flow control can eliminate frame loss by

“blocking” traffic from end stations connected directly to the switch.

The VLAN ID assigned to untagged frames received on this port. You can set the default Port VLAN ID (PVID) under “VLAN Port Configuration” on page 3-28 to assign ports to the same untagged VLAN.

3-4

Panel Display

Console Configuration

If you are having difficulties making an out-of-band console connection to the serial port on the agent module, you can display or modify the current settings for the serial port through the Web agent. Click on the serial port icon in the switch image to display or configure these settings, as shown below.

Parameter

Baud rate

Default

19200 bps

Time-Out 10 minutes

Data bits

Stop bits

Parity

8 bits

1 bit none

Auto-Refresh Time 5 seconds

Description

The rate at which data is sent between devices.

Options : 2400, 4800, 9600, 19200, and auto detection.

Note that when AUTO is selected, you need to first press the Enter key once to set the data rate and initialize the connection.

If no input is received from the attached device after this interval, the current session is automatically closed.

Range : 0 - 100 minutes; 0: disabled

Sets the data bits of the RS-232 port.

Options : 7, 8

Sets the stop bits of the RS-232 port.

Options : 1, 2

Sets the parity of the RS-232 port.

Options : none/odd/even

Sets the interval before a console session will auto refresh the console information, such as Spanning Tree Information, Port

Configuration, Port Statistics, and RMON Statistics.

Range : 5-255 seconds; 0: disabled

3-5

Priority

VLAN

IGMP

Port

Mirror

Trunk

Statistics

Menu

System

Switch

IP

SNMP

Security

Upgrade

Address Table

STA


Main Menu

Using the on-board Web agent, you can define system parameters, manage and control the switch, the connected stack and all its ports, or monitor network conditions.

The following table briefly describes the selections available from this program.

Bridge Extension

Description


Shows hardware/firmware version numbers, power status, and expansion modules in use.

Includes boot state, IP address, and the maximum number of Telnet sessions allowed.

Configures communities and trap managers; and activates traps.

Sets password for system access.

Downloads new version of firmware to update your system.

Provides full listing of unicast addresses, sorted by address or VLAN.

Enables Spanning Tree Algorithm; also sets parameters for switch priority, hello time, maximum message age, and forward delay; as well as port priority and path cost.

Displays/configures extended bridge capabilities provided by this switch, including support for traffic classes and VLAN extensions.

Configures default port priorities and displays queue assignments.

Configures VLAN group members and other port-specific VLAN settings.

Configures IGMP multicast filtering.

Enables any port, sets communication mode to auto-negotiation, full duplex or half duplex, and enables/disables flow control.


Specifies ports to group into aggregate trunks.


3-6

System Information

System Information

Use the System Information screen to display descriptive information about the switch, or for quick system identification as shown in the following figure and table.

Parameter

System Name*

Description

Name assigned to the switch system.

IP Address

Object ID

Location*

IP address of the agent you are managing. The agent supports SNMP over UDP/

IP transport protocol. In this environment, all systems on the Internet, such as network interconnection devices and any PC accessing the agent (or running

AccView) must have an IP address. Valid IP addresses consist of four numbers, of 0 to 255, separated by periods. Anything outside of this format will not be accepted by the configuration program.

MIB II object identifier for switch’s network management subsystem.

Specifies the area or location where the system resides.

*

Contact *

System Up Time

Contact person for the system.

Length of time the current management agent has been running.

Maximum string length is 255, but the screen only displays 45 characters. You can use the arrow keys to browse the whole string.

3-7


Switch Information

Use the Switch Information screen to display hardware/firmware version numbers for the main board, as well as the power status and modules plugged into the system.

Main Board

Parameter

Serial Number

Number of Ports

Hardware Version

Description

Serial number of the main board.

Number of built-in ports.

Hardware version of the main board.

Firmware Version


System firmware version in ROM.

Power status for the switch.

Redundant Power Status Redundant power status for the switch.

Agent Module

Parameter

Hardware Version

POST ROM Version

Firmware Version

Role

Expansion Slot

Description

Hardware version of the Agent Module.

Agent Module’s Power-on Self-test version.

Agent Module’s firmware version.

Shows if this module is Master or Slave.

Parameter

Expansion Slot 1

Description

Shows module type if inserted (100BASE-FX or 1000BASE-SX).

Expansion Slot 2 Shows module type if inserted (100BASE-FX, 1000BASE-SX, or 4GB Stack).

* Stacking is not supported in the ES3526G.

3-8

IP Configuration

IP Configuration

Use the IP Configuration screen to set the bootup option, configure the IP address for the on-board management agent, or set the number or concurrent Telnet sessions allowed. The screen shown below is described in the following table.

Parameter

IP State

IP Address

Subnet Mask

Gateway IP

MAC Address

Number of Telnet sessions

Default Description

USER-CONFIG Specifies whether IP functionality is enabled via manual configuration, or set by Boot Protocol (BOOTP). Options include:

10.1.0.1

USER-CONFIG - IP functionality is enabled based on the default or user specified IP Configuration. (This is the default setting.)

BOOTP Get IP - IP is enabled but will not function until a BOOTP reply has been received. BOOTP requests will be periodically broadcast by the switch in an effort to learn its IP address. (BOOTP values can include the IP address, default gateway, and subnet mask.)

IP address of the switch you are managing. The switch supports

SNMP over UDP/IP transport protocol. In this environment, all systems on the Internet, such as network interconnection devices and any PC accessing the on-board agent (or running AccView) are assigned an IP address. Valid IP addresses consist of four numbers, of 0 to 255, separated by periods. Anything outside of this format will not be accepted by the configuration program.

255.255.0.0

4

Subnet mask of the switch you have selected. This mask identifies the host address bits used for routing to specific subnets.

Gateway used to pass trap messages from the switch to the management station. Note that the gateway must be defined if the management station is located in a different IP segment.

Physical address of the agent module.

Sets the number of concurrent Telnet sessions allowed to access the agent.

Default: 4 sessions

3-9


SNMP Configuration

Use the SNMP Configuration screen to display and modify parameters for the

Simple Network Management Protocol (SNMP). The stack should include an SNMP agent module which monitors the status of its hardware, as well as the traffic passing through its ports. A computer attached to the network, called a Network

Management Station (NMS), can be used to access this information. Access rights to the agent module are controlled by community strings. To communicate with the switch, the NMS must first submit a valid community string for authentication. The options for configuring community strings and related trap functions are described in the following figures and table.

SNMP Community

The following figure and table describe how to configure the community strings authorized for management access. Up to 5 community names may be entered.

Parameter

SNMP Community

Capability

Community String

Access Mode

Add/Remove

Description

Up to 5 community strings may be used.

A community entry authorized for management access. (The maximum string length is 20 characters.)

Management access is restricted to Read Only or Read/Write.

Add/remove strings from the active list.

3-10

Security Configuration

Trap Managers

The following figure and table describe how to specify management stations that will receive authentication failure messages or other trap messages from the switch. Up to 5 trap managers may be entered.


Trap Manager Capability Up to 5 trap managers may be used.

Trap Manager

IP Address

IP address of the trap manager.

Trap Manager Community

String

Add/Remove

A community authorized to receive trap messages.

Add/remove strings from the active list.

Enable Authentication

Traps

Issues a trap message to specified IP trap managers whenever authentication of an SNMP request fails.

Default: enabled

Security Configuration

Use the Security Configuration screen to restrict management access based on a specified password. The Administrator has write access for parameters governing the SNMP agent. You should therefore assign a password to the Administrator as soon as possible, and store it in a safe place. (If for some reason your password is lost, or you cannot gain access to the system’s configuration program, contact your

Accton distributor for assistance.)

Change Password

This password is for the system Administrator, with access privilege of Read/Write for all screens. Passwords can consist of up to 11 alphanumeric characters and are not case sensitive. (The defaults are: User name: admin; password: null)

3-11


Firmware Upgrade Options

You can upgrade system firmware via a Web browser, a TFTP server, or a direct connection to the console port.

Web Upload Management

Use the Web Upload Management menu to load software updates into the switch.

The upload file should be an ES3514F/26F or ES3526G binary file from Accton; otherwise the agent will not accept it. The success of the upload operation depends on the quality of the network connection. After uploading the new software, the agent will automatically restart itself. Parameters shown on this screen are indicated in the following figure and table.

Parameter

Upload Mode

File Name

Start Web Upload

Description

Uploads to permanent flash ROM.

The binary file to download. Use the Browse button to locate the file on your local network.

Starts uploading the file over the network.

TFTP Download Management

Use the TFTP Download Management menu to load software updates into the switch.

The download file should be an ES3514F/26F or ES3526G binary file from Accton; otherwise the agent will not accept it. The success of the download operation depends on the accessibility of the TFTP server and the quality of the network connection. After downloading the new software, the agent will automatically restart itself. Parameters shown on this screen are indicated in the following figure and table.

Parameter

Server IP Address

Download Mode

File Name

Start TFTP Download

Description

IP address of a TFTP server.

The system downloads to permanent flash ROM.

The binary file to download.

Issues request to TFTP server to download the specified file.

3-12

Address Table Configuration

Address Table Configuration

The Address Table contains the unicast MAC addresses and VLAN identifier associated with each port (that is, the source port), sorted by MAC address or

VLAN. You can also clear the entire address table, or information associated with a specific address; or set the aging time for deleting inactive entries. The information displayed in the Address Table is indicated in the following figure and table.

Parameter

Aging Time

Description

Time-out period in seconds for aging out dynamically learned forwarding information.

Range: 10 - 415 secs; default: 300 secs.

The number of dynamically learned addresses.

Dynamic Address

Count

Static Address Count The number of statically configured addresses.

Address Table Sort by

Entries can be sorted by address or VLAN ID.

Address Table The system displays the MAC address of each node, and the port whose address table includes this MAC address, the associated VLAN(s), and the address status (i.e., dynamic or static).

New Static Address Use these fields to add or remove a static entry to the address table. Indicate the address, stack unit, port and VLAN group when adding a new entry.

Add/Remove Adds/removes the selected address.

Clear Table Removes all addresses from the address table.

3-13



The Spanning Tree Algorithm can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices (that is, STA compliant switch, bridge or router) in your network to ensure that only one route exists between any two stations on the network. For a more detailed description of how to use this algorithm, refer to

“Spanning Tree Algorithm” on page 4-1.

Spanning Tree Information

The Spanning Tree Information screen displays a summary of the STA information for the overall bridge or for a specific port. To make any changes to the parameters for the Spanning Tree, use the Spanning Tree Configuration menu.

Spanning Tree

The parameters shown in the following figure and table describe the current bridge

STA Information.

Parameter

Spanning Tree State

Bridge ID

Max Age

Hello Time

Forward Delay

Designated Root

Root Port

Root Path Cost

Configuration Changes

Last Topology Change

Description

Shows if the switch is enabled to participate in an STA compliant network.

A unique identifier for this bridge, consisting of bridge priority plus MAC address (where the address is normally taken from the agent).

The maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure.


The maximum time (in seconds) the root device will wait before changing states (i.e., listening to learning to forwarding).

The priority and MAC address of the device in the spanning tree that this switch has accepted as the root device.

The number of the port on this switch that is closest to the root. This switch communicates with the root device through this port. If there is no root port, then this switch has been accepted as the root device of the spanning tree network.

The path cost from the root port on this switch to the root device.

The number of times the spanning tree has been reconfigured.

The time since the spanning tree was last reconfigured.

3-14


Ports

The parameters shown in the following figure and table are for port STA Information.

Parameter

Port Status

Description

Displays the current state of this port within the spanning tree:

Broken

Disabled

Blocked

No link has been established on this port.

Port has been disabled by the user or has failed diagnostics.

Listening

Port receives STA configuration messages, but does not forward packets.

Port will leave blocking state due to topology change, starts transmitting configuration messages, but does not yet forward packets.

Learning Port has transmitted configuration messages for an interval set by the Forward Delay parameter without receiving contradictory information. Port address table is cleared, and the port begins learning addresses.

Forwarding The port forwards packets, and continues learning addresses.

The rules defining port status are:

• A port on a network segment with no other STA compliant bridging device is always forwarding.

• If two ports of a switch are connected to the same segment and there is no other

STA device attached to this segment, the port with the smaller ID forwards packets and the other is blocked.

• All ports are blocked when the switch is booted, then some of them change state to listening, to learning, and then to forwarding.

Forward Transitions The number of times the port has changed status to forwarding state.

Designated Cost

Designated Bridge

The cost for a packet to travel from this port to the root in the current spanning tree configuration. The slower the media, the higher the cost.

The priority and MAC address of the device through which this port must communicate to reach the root of the spanning tree.

Designated Port The priority and number of the port on the designated bridging device through which this switch must communicate with the root of the spanning tree.

3-15


Spanning Tree Configuration

The following figures and tables describe Bridge STA configuration.

Switch

Parameter

Usage

Priority

Default

Enabled

32,768

Description

Enable this parameter to participate in an STA compliant network.

Device priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device. (Remember that the lower the numeric value, the higher the priority.) However, if all devices have the same priority, the device with the lowest MAC address will then become the root device.

Range: 0 - 65535

When the Switch Becomes Root

Parameter

Hello Time

Default

2

Max (Message)

Age

Forward Delay

20

15

Description


The minimum value is 1.

The maximum value is the lower of 10 or [(Max. Message Age / 2) -1].

The maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All device ports

(except for designated ports) should receive configuration messages at regular intervals. Any port that ages out STA information (provided in the last configuration message) becomes the designated port for the attached

LAN. If it is a root port, a new root port is selected from among the device ports attached to the network.

The minimum value is the higher of 6 or [2 x (Hello Time + 1)].

The maximum value is the lower of 40 or [2 x (Forward Delay - 1)].

The maximum time (in seconds) the root device will wait before changing states (i.e., listening to learning to forwarding). This delay is required because every device must receive information about topology changes before it starts to forward frames. In addition, each port needs time to listen for conflicting information that would make it return to a blocking state; otherwise, temporary data loops might result.

Maximum value is 30.

Minimum value is the higher of 4 or [(Max. Message Age / 2) + 1].

3-16


STA Port Configuration

The following figure and table describe STA configuration for ports or modules.

Parameter Default

Fast Forwarding

Mode

Enabled

(All Ports)

Priority 128

Description

See “Fast Forward” in this table.

Path Cost

Fast Forward

100/19/4

Enabled

Defines the priority for the use of a port in the STA algorithm. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the spanning tree. Where more than one port is assigned the highest priority, the port with lowest numeric identifier will be enabled.

The range is 0 - 255.

This parameter is used by the STA algorithm to determine the best path between devices. Therefore, lower values should be assigned to ports attached to faster media, and higher values assigned to ports with slower media.

The default and recommended range is:

Standard Ethernet:

Fast Ethernet:

Gigabit Ethernet:

100 (50~600)

19 (10~60)

4 (3~10)

The full range is 0 - 65535.

Note: Path cost takes precedence over port priority.

This enables/disables Fast Forwarding for the selected port. In this mode, ports skip the Blocked, Listening and Learning states and proceed straight to

Forwarding. Fast Forwarding enables end-node workstations and servers to overcome time-out problems when the Spanning Tree Algorithm is implemented in a network. Therefore, Fast Forwarding should only be enabled for ports that are connected to an end-node device.

3-17


Configuring Bridge MIB Extensions

The Bridge MIB includes extensions for managed devices that support Traffic

Classes and Virtual LANs. To display and configure these extensions, use the

Bridge Extension screen as shown below:

Bridge Capability

Parameter

Extended Multicast

Filtering Services*

Traffic Classes

Description

Enables filtering of individual multicast addresses based on GMRP (GARP Multicast

Registration Protocol).

Static Entry Individual

Port

VLAN Learning

Configurable

PVID Tagging

This switch provides mapping of user priorities to multiple traffic classes. (Refer to the Priority menu on page 3-20.)

This switch enables static filtering for unicast and multicast addresses. (Refer to the

Address Table Configuration on page 3-13.)

This switch uses Shared VLAN Learning (SVL), where the VLAN filtering database is shared among all ports.

This switch allows you to override the default PVID (Port VLAN ID) assigned to untagged incoming frames under VLAN Port Configuration on page 3-28.

Local VLAN Capable* A local bridge (that is, dedicated Spanning Tree) is applied to each individual VLAN.

* These functions are not available for the current firmware release.

3-18


Bridge Settings

Parameter

Traffic Classes*

GMRP*

Description

Multiple traffic classes are supported by this switch as indicated under Bridge

Capabilities. However, this switch supports just two priority queues and only the default port priority can be configured. The switch does not support the configuration of traffic class mapping. Therefore, this parameter under Bridge Settings is set to disabled and cannot be enabled.

GARP Multicast Registration Protocol (GMRP) allows network devices to register endstations with multicast groups.

GVRP*

IGMP Snooping is currently used by this switch to provide automatic multicast filtering.

GARP VLAN Registration Protocol (GVRP) defines a way for switches to exchange

VLAN information in order to register necessary VLAN members on ports across the network. This function should be enabled to permit VLANs groups which extend beyond the local switch.

* These functions are not available for the current firmware release.

3-19


Priority

IEEE 802.1p defines up to 8 separate traffic classes. This switch supports Quality of

Service (QoS) by using two priority queues, with Weighted Fair Queuing for each port. You can use the Priority Menu to configure the default priority for each port, or to display the mapping for the traffic classes.

Port Priority Configuration

Inbound frames that do not have any VLAN tags are tagged with the input port’s default VLAN ID (PVID) and the default ingress user priority as shown in the following screen, and then sorted into the appropriate priority queue at the output port. (Note that if the output port is an untagged member of the associated VLAN, these frames are stripped of all VLAN tags prior to transmission.)

The default priority for all ingress ports is zero. Therefore, any inbound frames that do not have priority tags will be placed in the low priority queue of the output port.

You can use the Port Priority Configuration screen to adjust default priority for any port as shown below.

Parameter

Port

Default Ingress

User Priority

Number of Egress Traffic

Classes

Description


Default priority can be set to any value from 0~7, where 0~3 specifies the low priority queue and 4~7 specifies the high priority queue.

Indicates that this switch supports two priority output queues.

3-20

Priority

Port Traffic Class Information

This switch provides two priority levels with Weighted Fair Queuing for port egress.

This means that any frames with a default or user priority from 0~3 are sent to the low priority queue “0” while those from 4~7 are sent to the high priority queue “1” as shown in the following screen.

Parameter

Port

User Priority

Class Range

Description


Shows that user priorities 0~3 specify the low priority queue and 4~7 specify the high priority queue.

The priority queue classes available on this switch.

3-21


Configuring Virtual LANs

You can use the VLAN configuration menu to assign any port on the switch to any of up to 255 LAN groups. In conventional networks with routers, broadcast traffic is split up into separate domains. Switches do not inherently support broadcast domains. This can lead to broadcast storms in large networks that handle a lot of

NetBeui or IPX traffic. By using IEEE 802.1Q compliant VLANs, you can organize any group of network nodes into separate broadcast domains, confining broadcast traffic to the originating group. This also provides a more secure and cleaner network environment. For more information on how to use VLANs, refer to “Virtual

LANs” on page 4-2. The VLAN configuration screens are described in the following sections.

VLAN Basic Information

The VLAN Basic Information screen displays basic information on the VLAN type supported by this switch.


VLAN Version Number The VLAN version used by this switch as specified in the IEEE 802.1Q standard.

MAX VLAN ID Maximum VLAN ID recognized by this switch.

MAX Supported VLANs Maximum number of VLANs that can be configured on this switch.

Current Number of VLANs

Configured

The number of VLANs currently configured on this switch.

3-22


VLAN Current Table

This screen shows the current port members of each VLAN and whether or not the port supports VLAN tagging. Ports assigned to a large VLAN group that crosses several switches should use VLAN tagging. However, if you just want to create a small port-based VLAN for one or two switches, you can assign ports to the same untagged VLAN. The current configuration is shown in the following screen.


VLAN Entry Delete Count The number of times a VLAN entry has been deleted from this table.

VLAN ID

Up Time at Creation

Status


The value of System Up Time (sysUpTime) when this VLAN was created.

Shows how this VLAN was added to the switch.

Dynamic GVRP: Automatically learned via GVRP.

Permanent: Added as a static entry.

Egress Ports

Untagged Ports

Shows the ports which have been added to the displayed VLAN group.

Shows the untagged VLAN port members.

3-23


VLAN Static List

Use this screen to create or remove VLAN groups.

Parameter

Current

New

Status

Add

Remove

Description

Lists all the current VLAN groups created for this system. Up to 255 VLAN groups can be defined.

To allow this switch to participate in a VLAN group that extends beyond this switch, you must add the VLAN ID for the required external groups.

Allows you to specify the name and numeric identifier for a new VLAN group. (The

VLAN name is only used for management on this system; it is not added to the

VLAN tag.)

Enables/disables the specified VLAN.

Adds a new VLAN group to the current list.

Removes a VLAN group from the current list.

If a removed port is no longer be assigned to any other group as an untagged port, it will automatically be assigned to VLAN group 1 as untagged.

3-24


VLAN Static Table

Use this screen to modify the settings for an existing VLAN. You can add/delete port members for a VLAN from any unit in the stack. (Note that VLAN1 is fixed as an untagged VLAN containing all ports in the stack, and cannot be modified via this screen.)

Parameter

VLAN

Name

Description


Range: 1-2048

A user-specified symbolic name for this VLAN.

String length: 8 alphanumeric characters

Enables/disables the specified VLAN.

Status

Use the following menu to add or remove a port to the displayed VLAN group. As you can see from this example, all ports are included in VLAN 1 by default.

Parameter

Egress Ports

Description

Adds ports to the specified VLAN.

3-25


Use the menu shown below to prevent a port from being dynamically added to the displayed VLAN group through GVRP.


Forbidden Egress Ports Prevents a port from being automatically added to this VLAN via GVRP. Note that

GVRP is not supported by the current firmware version.

Use the menu shown below to assign ports to the specified VLAN group as an IEEE

802.1Q tagged or untagged port. Assign ports as tagged if they are connected to

802.1Q VLAN compliant devices, or untagged if they are connected to

VLAN-unaware devices.

Parameter

Untagged Ports

Description

Adds an authorized egress port to the displayed VLAN as an untagged port.

Note: If a removed port is no longer assigned to any other group as an untagged port, it will automatically be assigned to VLAN group 1 as untagged.

3-26


VLAN Static Membership by Port

Use the screen shown below to assign VLAN groups to the selected port. To perform detailed port configuration for a specific VLAN, use the VLAN Static Table (page

3-25).

Parameter

Port Number

Add/Remove

Description

Port number on the switch selected from the upper display panel.

Add or remove selected VLAN groups for the port indicated in the Port Number field.

3-27


VLAN Port Configuration

Use this screen to configure port-specific settings for IEEE 802.1Q VLAN features.


PVID The VLAN ID assigned to untagged frames received on this port. Use the PVID to assign ports to the same untagged VLAN.

Acceptable Frame Type This switch accepts “All” frame types, including VLAN tagged or VLAN untagged frames. Note that all VLAN untagged frames received on this port are assigned to the PVID for this port.

Ingress Filtering

GVRP Status*

If set to “True,” incoming frames for VLANs which do not include this port in their member set will be discarded at the inbound port.

Enables or disables GVRP for this port. When disabled, any GVRP packets received on this port will be discarded and no GVRP registrations will be propagated from other ports.

GVRP Failed

Registrations*

Note that GVRP must be enabled for the switch before this setting to take effect.

(See “Configuring Bridge MIB Extensions” on page 3-18.)

The total number of failed GVRP registrations, for any reason, on this port.

GVRP Last PDU Origin* The Source MAC Address of the last GVRP message received on this port.

* GVRP is not available for the current firmware release.

3-28


IGMP Multicast Filtering

Multicasting is used to support real-time applications such as video conferencing or streaming audio. A multicast server does not have to establish a separate connection with each client. It merely broadcasts its service to the network, and any hosts which want to receive the multicast register with their local multicast switch/ router. Although this approach reduces the network overhead required by a multicast server, the broadcast traffic must be carefully pruned at every multicast switch/router it passes through to ensure that traffic is only passed on the hosts which subscribed to this service.

This switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts who want to receive a specific multicast service. The switch looks up the IP Multicast Group used for this service and adds any port which received a similar request to that group. It then propagates the service request on to any neighboring multicast switch/router to ensure that it will continue to receive the multicast service. (For more information, see “IGMP Protocol” on page 4-5.)

Configuring IGMP

This protocol allows a host to inform its local switch/router that it wants to receive transmissions addressed to a specific multicast address group. Use the IGMP

Configuration screen to set key parameters for multicast filtering as shown below.

Parameter

IGMP Status

Act as IGMP Querier*

IGMP Query Count*

Description

If enabled, the switch will monitor network traffic to determine which hosts want to receive multicast traffic.

If enabled, the switch can serve as the “querier,” which is responsible for asking hosts is they want to receive multicast traffic.

The maximum number of queries issued for which there has been no response before the switch takes action to solicit reports.

IGMP Report Delay* The time (in minutes) between receiving an IGMP Report for an IP multicast address on a port before the switch sends an IGMP Query out that port and removes the entry from its list.

* IGMP Query is not available in the current firmware release.

Note: The default values are indicated in the sample screen.

3-29


IP Multicast Registration Table

Use the IP Multicast Registration Table to display all the multicast groups active on this switch, including multicast IP addresses and the corresponding VLAN ID.

Parameter

VLAN ID

Multicast

IP Address

Learned by

Multicast Group

Port Lists

Description

VLAN ID assigned to this multicast group.

IP address for specific multicast services.

Indicates the manner in which this address was learned: Dynamic or IGMP.

The switch ports registered for the indicated multicast service.

3-30

Port Menus

Port Menus

Port Information

The Port Information screen displays the port status, link state, the communication speed and duplex mode, as well as the flow control in use. To change any of the port settings, use the Port Configuration menu. The parameters are shown in the following figure and table.

Parameter

Admin Status

Link Status

Speed Status

Duplex Status

Flow Control Status

Description

Shows if the port is enabled or not.


Shows the port speed (10M, 100M or 1000M).

Displays the current duplex mode.

Shows the flow control type in use. Flow control can eliminate frame loss by

“blocking” traffic from end stations connected directly to the switch. Back pressure is used for half duplex and IEEE 802.3x for full duplex. Note that flow control should not be used if a port is connected to a hub.

3-31


Port Configuration

Use the Port Configuration menu to configure any port on the switch.

Parameter

Flow Control (on all ports)

Admin Status

Duplex Status

Default

Disabled

Enable

Auto-

Negotiation

Flow Control Status Disabled

Description

See “Flow Control Status” in this table.

Allows you to disable a port due to abnormal behavior, and then re-enable it after the problem has been resolved. You may also disable a port for security reasons.

Used to set the current port speed, duplex mode, flow control, and auto-negotiation.

Auto-Negotiation is the default setting for 10BASE-T, 100BASE-TX and 1000BASE-SX; but is not available for 100BASE-FX.

Used to enable or disable flow control. Flow control can eliminate frame loss by “blocking” traffic from end stations or segments connected directly to the switch when its buffers fill. Back pressure is used for half duplex and IEEE 802.3x for full duplex. Note that flow control should not be used if a port is connected to a hub.

Note: 100BASE-FX is fixed at 100 Mbps, full-duplex.

1000BASE-SX is fixed at 1000 Mbps, but auto-negotiates duplex mode and flow control.

3-32

Using a Port Mirror for Analysis

Using a Port Mirror for Analysis

You can mirror traffic from any source port to a target port for real-time analysis. You can then attach a logic analyzer or RMON probe to the target port and study the traffic crossing the source port in a completely unobtrusive manner. When mirroring port traffic, note that the target port must be included in the same VLAN as the source port. (See “VLAN Static List” on page 3-24.)

You can use the port mirror configuration screen to designate a single port pair for mirroring as shown below.

Parameter

Status

Mirror Source Unit

Mirror Source Port

Mirror Target Unit

Mirror Target Port

Description

Enables/disables port mirroring.

The switch containing the mirror source port.

The port whose traffic will be monitored.

The switch containing the mirror target port.

The port that will duplicate or “mirror” all the traffic happening on the monitored port.

3-33


Port Trunk Configuration

Port trunks can be used to increase the bandwidth of a network connection or to ensure fault recovery. You can configure up to four trunk connections (combining

2~4 ports into a fat pipe) between any two ES3514F, ES3526F or ES3526G switches. However, before making any physical connections between devices, use the Trunk Configuration menu to specify the trunk on the devices at both ends.

When using a port trunk, note that:

• The ports used in a trunk must all be of the same media type (RJ-45, 100 Mbps fiber, or 1000 Mbps fiber). The ports that can be assigned to the same trunk have certain other restrictions as described on page 3-35.

• Ports can only be assigned to one trunk.

• The ports at both ends of a connection must be configured as trunk ports.

• The ports at both ends of a trunk must be configured in an identical manner, including speed, duplex mode, and VLAN assignments.

• The communication mode must be configured identically at both ends of the trunk.

• None of the ports in a trunk can be configured as a mirror source port or mirror target port.

• All the ports in a trunk have to be treated as a whole when moved from/to, added or deleted from a VLAN.

• The Spanning Tree Algorithm will treat all the ports in a trunk as a whole.

• Enable the trunk prior to connecting any cable between the switches to avoid creating a loop.

• Disconnect all trunk port cables or disable the trunk ports before removing a port trunk to avoid creating a loop.

3-34

Port Trunk Configuration

Use the Port Trunking Configuration screen to set up port trunks as shown below:

Parameter

Trunk

Status

Member List

Description

A unique identifier for this trunk. You can configure up to four trunks per switch.

Enables or disables the displayed trunk.

You can create up to 16 trunks for the entire stack by specifying the trunk identifier, switch unit and port number, and then pressing the “Add” button. Each trunk can contain from 2 to 4 ports.

The RJ-45 ports used for one side of a trunk must all be on the same internal switch chip. The port groups permitted include:

Group 3 Switch Model Group 1

ES3514F 1,2,7,8

ES3526F

ES3526G

1,2,3,4, 13,14,15,16

1,2,3,4, 13,14,15,16

Group 2

5,6,7,8, 17,18,19,20

5,6,7,8, 17,18,19,20

9,10,11,12, 21,22,23,24

9,10,11,12, 21,22,23,24

The 100BASE-FX fiber ports used for one side of a trunk must all be on the same module. However, the 1000BASE-SX ports used for one side of a trunk may be on any switch in the stack, or both on the same switch if used standalone.

Media Module

100BASE-FX

1000BASE-SX

Any ports on a single module.

Up to four Gigabit ports from any switch in the stack, or both Gigabit ports on two modules installed in a standalone switch.

For example, when using Gigabit ports to form a trunk within a stack, the Gigabit ports will all be at Port 25. In this case, you could specify a trunk group consisting of:

(Unit1-Port25, Unit2-Port25, Unit3-Port25, Unit4-Port25), or two trunks consisting of:

(Unit1-Port25, Unit2-Port25) and (Unit3-Port25, Unit4-Port25).

3-35


Port Statistics

Use the Port Statistics menu to display Etherlike or RMON statistics for any port on the switch. The statistics displayed are indicated in the following figure and table.

Etherlike Statistics

Etherlike Statistics display key statistics from the Ethernet-like MIB for each port.

Error statistics on the traffic passing through each port are displayed. This information can be used to identify potential problems with the switch (such as a faulty port or unusually heavy loading). Values displayed have been accumulated since the last system reboot.

Parameter

Alignment Errors

Description

The number of alignment errors (mis-synchronized data packets).

FCS Errors The number of frames received that are an integral number of octets in length but do not pass the FCS check.

Single Collision Frames* The number of successfully transmitted frames for which transmission is inhibited by exactly one collision.

Multiple Collision Frames* A count of successfully transmitted frames for which transmission is inhibited by more than one collision.

SQE Test Errors* A count of times that the SQE TEST ERROR message is generated by the PLS sublayer.

Deferred Transmissions* A count of frames for which the first transmission attempt on a particular interface is delayed because the medium was busy.

Late Collisions The number of times that a collision is detected later than 512 bit-times into the transmission of a packet.

Excessive Collisions*

Internal Mac Transmit

Errors*

Carrier

Sense Errors*

Frames Too Long

The number of frames for which transmission failed due to excessive collisions.

The number of frames for which transmission failed due to an internal MAC sublayer transmit error.

The number of times that the carrier sense condition was lost or never asserted when attempting to transmit a frame.

The number of frames received that exceed the maximum permitted frame size.

Internal Mac Receive

Errors*

The number of frames for which reception failed due to an internal MAC sublayer receive error.

* The reported values will always be zero because these statistics are not supported by the internal chip set used in this switch.

Note : Statistics are automatically refreshed every 60 seconds.

3-36

Port Statistics

RMON Statistics

RMON Statistics display key statistics for each port or media module from RMON group 1. (RMON groups 2, 3 and 9 can only be accessed using SNMP management software such as AccView.) The following screen displays overall statistics on traffic passing through each port. RMON statistics provide access to a broad range of statistics, including a total count of different frame types passing through each port.

Values displayed have been accumulated since the last system reboot.

Parameter

Drop Events

Received Bytes

Received Frames

Broadcast Frames

Multicast Frames

CRC/Alignment Errors

Undersize Frames

Oversize Frames

Fragments

Jabbers

Collisions

64 Byte Frames

65-127 Byte Frames

128-255 Byte Frames

Description

The total number of events in which packets were dropped due to lack of resources.

Total number of bytes of data received on the network. This statistic can be used as a reasonable indication of Ethernet utilization.

The total number of frames (bad, broadcast and multicast) received.

The total number of good frames received that were directed to the broadcast address. Note that this does not include multicast packets.

The total number of good frames received that were directed to this multicast address.

The number of CRC/alignment errors (FCS or alignment errors).

The total number of frames received that were less than 64 octets long (excluding framing bits, but including FCS octets) and were otherwise well formed.

The total number of frames received that were longer than 1518 octets (excluding framing bits, but including FCS octets) and were otherwise well formed.

The total number of frames received that were less than 64 octets in length

(excluding framing bits, but including FCS octets) and had either an FCS or alignment error.

The total number of frames received that were longer than 1518 octets (excluding framing bits, but including FCS octets), and had either an FCS or alignment error.

The best estimate of the total number of collisions on this Ethernet segment.

The total number of frames (including bad packets) received and transmitted that were 64 octets in length (excluding framing bits but including FCS octets).

The total number of frames (including bad packets) received and transmitted that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets).


3-37


Parameter

256-511 Byte Frames

Description




Note : Statistics are automatically refreshed every 60 seconds.

3-38

Chapter 4: Advanced Topics

The CheetahSwitch Workgroup-3514F/26F/26G supports Layer 2 switching and other advanced features, which are described in this chapter.

Layer-2 Switching

When a frame enters a port, its destination MAC address is checked in the address database to see which port leads to this destination. If the destination address belongs to the incoming port, the frame is dropped or “filtered” because it addressed to the local segment. If the destination address if found on another port, the frame is forwarded to that port and queued for output. But, if the destination address is not found in the address database, the frame is sent to one or more output ports based on the rules for handling tagged or untagged VLAN frames.

If the source MAC address of the frame was not found in the address database, it is recorded along with the incoming port number where it entered the switch. This information is then used to make later decisions for frame forwarding.

Switching involves the following steps:

• VLAN Classification

• Learning

• Filtering

• Forwarding

• Aging

Spanning Tree Algorithm

The Spanning Tree Algorithm (that is, the STA configuration algorithm as outlined in

IEEE 802.1D) can be used to detect and disable network loops, and to provide link backup. This allows the switch to interact with other bridging devices (including STA compliant switches, bridges or routers) in your network to ensure that only one route exists between any two stations on the network. If redundant paths or loops are detected, one or more ports are put into a blocking state (stopped from forwarding packets) to eliminate the extra paths. Moreover, if one or more of the paths in a stable spanning tree topology fail, this algorithm will automatically change ports from blocking state to forwarding state to reestablish contact with all network stations.

The STA uses a distributed algorithm to select a bridging device (STA compliant switch, bridge or router) that serves as the root of the spanning tree network. It selects a root port on each bridging device (except for the root device) which incurs the lowest path cost when forwarding a packet from that device to the root device.

Then it selects a designated bridging device from each LAN which incurs the lowest path cost when forwarding a packet from that LAN to the root device. All ports connected to designated bridging devices are assigned as designated ports. After determining the lowest cost spanning tree, it enables all root ports and designated ports, and disables all other ports. Network packets are therefore only forwarded between root ports and designated ports, eliminating any possible network loops.

4-1

Advanced Topics

Once a stable network topology has been established, all bridges listen for Hello

BPDUs (Bridge Protocol Data Units) transmitted from the Root Bridge. If a bridge does not get a Hello BPDU after a predefined interval (Maximum Age), the bridge assumes that the link to the Root Bridge is down. This bridge will then initiate negotiations with other bridges to reconfigure the network to reestablish a valid network topology.

The following figure gives an illustration of how the Spanning Tree Algorithm assigns bridging device ports.

Virtual LANs

Switches do not inherently support broadcast domains, which can lead to broadcast storms in large networks that handle a lot of IPX or NetBeui traffic. In conventional networks with routers, broadcast traffic is split up into separate domains to confine broadcast traffic to the originating group and provide a much cleaner network environment. Instead of using physically separate subnets which are linked by traditionally slow routers, this switch creates segregated broadcast domains based on easily configurable VLANs, and then links these VLANs as required with wire-speed routing.

An IEEE 802.1Q VLAN is a group of ports that can be located anywhere in the network, but communicate as though they belong to the same physical segment.

VLANs help to simplify network management by allowing you to move devices to a new VLAN without having to change any physical connections. VLANs can be easily organized to reflect departmental groups (such as Marketing or R&D), usage groups

(such as e-mail), or multicast groups (used for multimedia applications such as video conferencing).

VLANs provide greater network efficiency by reducing broadcast traffic, but also allow you to make network changes without having to update IP addresses or IP subnets. VLANs inherently provide a high level of network security, since traffic must pass through a Layer 3 switch or a router to reach a different VLAN.

4-2

Virtual LANs

This switch supports the following VLAN features:

• Up to 255 VLANs based on the IEEE 802.1Q standard

• Distributed VLAN learning across multiple switches using explicit or implicit tagging and GVRP protocol

• Port overlapping, allowing a port to participate in multiple VLANs

• End stations can belong to multiple VLANs

• Passing traffic between VLAN-aware and VLAN-unaware devices

• Priority tagging

• Port trunking with VLANs

Assigning Ports to VLANs

Before enabling VLANs for the switch, you must first assign each port to the VLAN group(s) it will participate in. (By default all ports are assigned to VLAN 1 as untagged ports.) Add a port as a tagged port (that is, a port attached to a

VLAN-aware device) if you want it to carry traffic for one or more VLANs and the device at the other end of the link also supports VLANs. Then assign the port at the other end of the link to the same VLAN(s). However, if you want a port on this switch to participate in one or more VLANs, but the device at the other end of the link does not support VLANs, then you must add this port as an untagged port (that is, a port attached to a VLAN-unaware device).

Port-based VLANs are tied to specific ports. The switch’s forwarding decision is based on the destination MAC address and its associated port. Therefore, to make valid forwarding and flooding decisions, the switch learns the relationship of the

MAC address to its related port—and thus to the VLAN—at run-time. When the switch receives a frame, it assigns the frame to the port’s default VLAN if the frame is untagged (determined by the PVID of the receiving port), or maps it for output to the broadcast domain associated with the frame’s VLAN tag.

Port Overlapping

Port overlapping can be used to allow access to commonly shared network resources among different VLAN groups, such as file servers or printers. Note that if you implement VLANs which do not overlap, but still need to communicate, you can connect them using the Layer-3 router/switch.

Automatic VLAN Registration

(GVRP)

GVRP defines a system whereby the switch can automatically learn the VLANs each endstation should be assigned to. If an endstation (or its network adapter) supports the IEEE 802.1Q VLAN protocol, it can be configured to broadcast a message to your network indicating the VLAN groups it wants to join. When this switch receives these messages, it will automatically place the receiving port in the specified VLANs, and then forward the message to all other ports. When the message arrives at another switch that supports GVRP, it will also place the receiving port in the specified VLANs, and pass the message on to all other ports.

VLAN requirements are propagated in this way throughout the network. This allows

4-3

Advanced Topics

GVRP-compliant devices to be automatically configured for VLAN groups based solely on endstation requests.

Forwarding Traffic with Unknown VLAN Tags

This switch only supports 255 VLANs, but up to 4094 VLANs are supported by the

IEEE 802.1Q VLAN protocol. Therefore, if this switch is attached to endstations that issue VLAN registration requests, it will have to forward unknown VLAN tags. This traffic can only be propagated to the rest of the network if automatic VLAN registration is enabled on your switch.

Forwarding Tagged/Untagged Frames

Ports can be assigned to multiple tagged or untagged VLANs. Each port on the switch is therefore capable of passing tagged or untagged frames. To forward a frame from a VLAN-aware device to a VLAN-unaware device, the switch first decides where to forward the frame, and then strips off the VLAN tag. However, to forward a frame from a VLAN-unaware device to a VLAN-aware device, the switch first decides where to forward the frame, and then inserts a VLAN tag reflecting this port’s default VID. The default PVID is VLAN 1 for all ports, but this can be changed

(see page 2-41 or page 3-28).

Connecting VLAN Groups

The switch supports intra-VLAN communication using wire-speed switching.

However, if you have devices in separate VLANs that must communicate, and it is not practical to include these devices in a common VLAN, then the VLANs can be connected via the Layer-3 switch (such as the ES3616) or router.

4-4

Multicast Filtering

Multicast Filtering

Multicasting sends data to a group of nodes instead of a single destination. The simplest way to implement multicasting is to broadcast data to all nodes on the network. However, such an approach wastes a lot of bandwidth if the target group is small compared to overall the broadcast domain.

Since applications such as video conferencing and data sharing are more widely used today, efficient multicasting has become vital. A common approach is to use a group registration protocol that lets nodes join or leave multicast groups. A switch or router can then easily determine which ports contain group members and send data out to those ports only. This procedure is called multicast filtering.

The purpose of multicast filtering is to optimize a switched network’s performance, so multicast packets will only be forwarded to those ports containing multicast group hosts or multicast routers/switches instead of flooding to all ports in the subnet

(VLAN). These CheetahSwitch models support multicast filtering by passively monitoring IGMP Query and Report messages.

IGMP Snooping

A layer 2 switch can passively snoop on IGMP Query and Report packets transferred between IP Multicast Routers/Switches and IP Multicast host groups to learn the IP Multicast group members. It simply monitors the IGMP packets passing through it, picks out the group registration information, and configures multicast filters accordingly. IGMP Snooping generates no additional network traffic, allowing you to significantly reduce the multicast traffic passing through your switch.

IGMP Protocol

The Internet Group Management Protocol (IGMP) runs between hosts and their immediately neighboring multicast router/switch. IGMP is a multicast host registration protocol that allows any host to inform its local router that it wants to receive transmissions addressed to a specific multicast group.

A router, or multicast-enabled switch, can periodically ask their hosts is they want to receive multicast traffic. If there is more than one router/switch on the LAN performing IP multicasting, one of these devices is elected “querier” and assumes the responsibility of querying the LAN for group members.

Based on the group membership information learned from IGMP, a router/switch can determine which (if any) multicast traffic needs to be forwarded to each of its ports.

At Layer 3, multicast routers use this information, along with a multicast routing protocol such as DVMRP, to support IP multicasting across the Internet.

Note that IGMP neither alters nor routes any IP multicast packets. A multicast router/ switch must be used to deliver IP multicast packets across different subnetworks.

4-5

Advanced Topics

Class-of-Service (CoS) Support

The CheetahSwitch Workgroup-3514F/26F/26G provides two transmit queues on each port, with a Weighted Fair Queuing scheme. This function can be used to provide independent priorities for various types of data such as real-time video or voice, and best-effort data.

Priority assignment to a packet in the CheetahSwitch Workgroup-3514F/26F/26G can be accomplished in any of the following ways:

• Priority can be explicitly assigned by end stations which have applications that require a higher priority than best-effort. This switch utilizes the IEEE 802.1p and

802.1Q tag structure to decide priority assignments for the received packets.

• A port may be manually configured as high priority. In this case, when any other port receives traffic from a high-priority port, that traffic is automatically placed in the high-priority output queue.

Port Trunks

Ports can be combined into an aggregate link to increase the bandwidth of a network connection or ensure fault recovery. You can group ports into trunks that consist of two, three or four ports, creating an aggregate bandwidth of up to 8 Gbps when grouping multiple Gigabit ports. Besides balancing the load across each port in the trunk, the additional ports provide redundancy by taking over the load if another port in the trunk should fail.

When using port trunks, remember that:

• Before removing a port trunk via the configuration menu, you must disable all the ports in the trunk or remove all the network cables. Otherwise, a loop may be created.

• To disable a single link within a port trunk, you should first remove the network cable, and then disable both ends of the link via the configuration menu. This allows the traffic passing across that link to be automatically distributed to the other links in the trunk, without losing any significant amount of traffic.

SNMP Management Software

SNMP (Simple Network Management Protocol) is a communication protocol designed specifically for managing devices or other elements on a network. Network equipment commonly managed with SNMP includes hubs, switches, bridges, routers and host computers. SNMP is typically used to configure these devices for proper operation in a network environment, as well as monitor them to evaluate performance and detect potential problems.

Accton provides AccView network management software for free with all of its manageable products. AccView contains a complete management platform, including network discovery, mapping, event manager, log manager, MIB browser,

RMON analysis tools, and device management modules. Accton also provides optional plug-in device management modules for HP OpenView.

4-6

Remote Monitoring

Remote Monitoring

Remote Monitoring (RMON) provides a cost-effective way to monitor large networks by placing embedded or external probes on distributed network equipment (hubs, switches or routers). Accton’s AccView network management software can access the probes embedded in recent Accton network products to perform traffic analysis, troubleshoot network problems, evaluate historical trends, or implement proactive management policies. RMON has already become a valuable tool for network managers faced with a quickly changing network landscape that contains dozens or hundreds of separate segments. RMON is the only way to retain control of the network and analyze applications running at multi-megabit speeds. It provides the tools you need to implement either reactive or proactive policies that can keep your network running based on real-time access to key statistical information.

This switch provides support for mini-RMON which contains the four key groups required for basic remote monitoring. These groups include:

Statistics: Includes all the tools needed to monitor your network for common errors and overall traffic rates. Information is provided on bandwidth utilization, peak utilization, packet types, errors and collisions, as well as the distribution of packet sizes.

History: Can be used to create a record of network utilization, packet types, errors and collisions. You need a historical record of activity to be able to track down intermittent problems. Historical data can also be used to establish normal baseline activity, which may reveal problems associated with high traffic levels, broadcast storms, or other unusual events. Historical information can also be used to predict network growth and plan for expansion before your network becomes too overloaded.

Alarms: Can be set to test data over any specified time interval, and can monitor absolute or changing values (such as a statistical counter reaching a specific value, or a statistic changing by a certain amount over the set interval). Alarms can be set to respond to either rising or falling thresholds.

Events: Defines the action to take when an alarm is triggered. The response to an alarm can include recording the alarm in the Log Table or sending a message to a trap manager. Note that the Alarm and Event Groups are used together to record important events or immediately respond to critical network problems.

4-7

Advanced Topics

4-8

Appendix A: Troubleshooting

Troubleshooting Chart

Symptom

Cannot connect using

Telnet, Web browser, or

SNMP software

Can’t access the on-board configuration program via a serial port connection

Forgot or lost the password

Troubleshooting Chart

Action

• Be sure to have configured the agent with a valid IP address, subnet mask and default gateway.

• Check that you have a valid network connection to the switch and that the port you are using has not been disabled.

• Check network cabling between the management station and the switch.

• If you cannot connect using Telnet, you may have exceeded the maximum number of concurrent Telnet sessions permitted. Try connecting again at a later time.

• Be sure to have set the terminal emulator program to VT100 compatible,

8 data bits, 1 stop bit, no parity and 19200 bps.

• If the switch is configured for Auto (baud rate detection), the terminal emulator program must be set at 2400~19200 baud, 8 data bits, 1 stop bit, no parity, and flow control set to none. Also, you must first press the

Enter key once to set the data rate and initialize the connection.

• Check that the null-modem serial cable conforms to the pin-out connections provided in Appendix B.

• Contact Accton Technical Support for help.

A-1

Troubleshooting

Upgrading Firmware via the Serial Port

You can upgrade system firmware by connecting your computer to the serial port on the switch, and using a console interface package that supports the XModem protocol. (See “Required Connections” on page 1-1.)

1. Restart the system by using the Restart System command or resetting the power by pulling out the power cord, waiting five seconds, and plugging it back in.

2. When the system initialization screen appears as shown below, press “D” to download system firmware, and then indicate the code type (1: Runtime, 2:

POST, 3: Mainboard).

(c)Copyright 1999, Accton Inc.

CheetahSwitch Workgroup-3514/3526

LOADER Version V1.02

POST Version V1.10

------ Performing the Power-On Self Test (POST) ------

EPROM Checksum Test ....................... PASS

Testing the System SDRAM .................. PASS

CPU Self Test ............................. PASS

EEPROM Checksum Test ...................... PASS

SEEPROM Checksum Test ..................... PASS

MAC Address ..............00-e0-29-52-28-00

------------ Power-On Self Test Completed ------------

(D)ownload System Image or (S)tart Application: [S]

Select the Firmware Type to Download (1)Runtime (2)POST

(3)Mainboard [1]:

For example, if you select 1 (for downloading agent firmware), the system will display the following message:

(D)ownload System Image or (S)tart Application: [S]

Select the Firmware Type to Download (1)Runtime (2)POST

(3)Mainboard [1]: 1

Your Selection: Runtime Code

Download code to FlashROM address 0x02880000

3. Change your baud rate to 115200 bps, and press Enter to enable download mode. From the terminal emulation program, select the file you want to download, set the protocol to XModem, and then initialize downloading.

Notes: 1.

If you use Windows HyperTerminal, disconnect and reconnect to enable the new baud rate.

2.

The download file should be an ES3514F/26F or ES3526G binary file from

Accton; otherwise the agent will not accept it. The file naming convention is:

Runtime program: Agent-Vx.yz,

POST program: Boot-Vx.yx, and

Mainboard program: 8051-Vx.yz

A-2

Upgrading Firmware via the Serial Port

3. After the file has been downloaded, the console screen will display information similar to that shown below. Press “s” to start the management interface, change the baud rate back to 19200, and press Enter. The Logon screen will then appear.

XModem Download to DRAM buffer area 0x00200000: ... SUCCESS !

Verifying image in DRAM download buffer 0x00200000... SUCCESS !

Update FlashROM Image at 0x02880000 ... SUCCESS !

(D)ownload another Image or (S)tart Application: [S] s

Change Baud Rate to 19200 and Press <ENTER>.

For details on managing the switch, refer to Chapter 2 for information on the out-of-band console interface, or Chapter 3 for information on the Web interface.

A-3

Troubleshooting

A-4

Appendix B: Pin Assignments

CA

CB

CE

CF

BB

BA

CD

AB

CC

Console Port Pin Assignments

The DB-9 serial port on the switch’s rear panel is used to connect to the switch for out-of-band console configuration. The on-board menu-driven configuration program can be accessed from a terminal, a PC running a terminal emulation program, or from a remote location via a modem connection. The pin assignments used to connect to the serial port are provided in the following tables.

DB-9 Port Pin Assignments

EIA

Circuit

CCITT

Signal

Description

109

104

DCD (Data Carrier Detected)

RxD (Received Data)

103 TxD (Transmitted Data)

108.2

DTR (Data Terminal Ready)

102

107

SG (Signal Ground)

DSR (Data Set Ready)

105

106

125

RTS

CTS

RI

(Request-to-Send)

(Clear-to-Send)

(Ring Indicator)

7

8

9

3

4

5

6

1

2

Switch’s

DB9 DTE

Pin #

7

8

9

3

4

5

6

1

2

PC DB9

DTE

Pin #

4

5

22

7

6

2

20

8

3

Modem

DB25

DCE Pin #

Signal

Direction

DTE-DCE

<------

<------

------>

------>

-------

<------

------>

<------

<------

B-1

Pin Assignments

Console Port to 9-Pin COM Port on PC

Switch’s 9-Pin Serial

Port

1 DCD

2 RXD

3 TXD

4 DTR

5 SGND

6 DSR

7 RTS

8 CTS

9 RI

CCITT Signal

----------DCD

<--------TXD

----------RXD

----------DSR

-----------1

-----------3

----------> 2

----------> 6

----------SGND ---------5

----------DTR -----------4

----------CTS -----------> 8

<--------RTS ------------7

----------RI --------------9

PC’s 9-Pin COM

Port

Console Port to 25-Pin DCE Port on Modem


Port

CCITT Signal

1 <--------DCD -----------8

Modem’s 25-Pin

DCE Port

2 <--------RXD -----------3

3 ----------TXD ----------> 2

4 ----------DTR ----------> 20

5 ----------SGND ---------7

6 <--------DSR -----------6

7 ----------RTS -----------> 4

8 <--------CTS ------------5

9 <--------RI --------------22

Console Port to 25-Pin DTE Port on PC


Port

1 DCD

2 RXD

3 TXD

4 DTR

5 SGND

6 DSR

7 RTS

8 CTS

9 RI

7

9

5

6

20

3

4

1

2

Null Modem

20

7

4

5

6

2

8

1

3

PC’s 25-Pin DTE

Port

8 DCD

3 TXD

2 RXD

20 DTR

7 SGND

6 DSR

4 RTS

5 CTS

22 RI

B-2

ES3514F

ES3526F

ES3526G

E072000-R04

F2.2 150074-102

No results