Asante-technologies 480 Uživatelský manuál Strana 1

IntraCore®39240/480Layer 2+ Gigabit Ethernet Switch User’s Manual

IP Settings IP Address Subnet Mask Default Gateway DHCP ARP 192.168.0.1 255.255.255.0 0.0.0.0 Client: Disabled Enabled Multicast Filtering I

100 Asante IntraCore IC39240/480 User’s Manual

Cable diagnostic a cable test that can be run for each port. 101 Asante IntraCore IC39240/480 User’s Manual

DHCP Relay/ DCP Option 82 – these screens control the relay of DHCP information from a server. VLANS can also be specified to receive DHCP informat

9.12 Statistics RMON information and settings are controlled using the next screens. General counters and timers are also displayed. 103 Asan

104 Asante IntraCore IC39240/480 User’s Manual

105 Asante IntraCore IC39240/480 User’s Manual

106 Asante IntraCore IC39240/480 User’s Manual

9.13 Help General help is available for many screens. 107 Asante IntraCore IC39240/480 User’s Manual

9.14 Logout Use this screen to logout and close the session. 108 Asante IntraCore IC39240/480 User’s Manual

Chapter 10: CLI Commands The CLI is divided into various modes. The Commands in one mode are not available until the operator switches to that partic

1.3 Package Contents The following items are included in the switch’s package: • Switch • AC power cord • RS232 straight-through serial cable for

Format ping <A.B.C.D> Mode User Mode 10.2.5 show 1）show port This command displays port status. Format show port {<port#> | all} Mode Use

Format clear igmpsnooping Mode Privileged Mode 10.3.2.5 clear static-mcast This command is used to clear static multicast groups Format clear static-

This command is used to exit current shell Format logout Mode Privileged Mode 10.3.8 ping This command is used to proceed ping destination host Forma

This command display dot1x and port configuration Format show dot1x config Mode Privileged Mode 2) show dot1x radius This command display radius conf

4) show lldp msap-entry This command is used to display msap details information Format show lldp msap-entry <1..26> Mode Privileged Mode 10.3.

This command is used to display switch running config Format show running-config Mode Privileged Mode 10.3.11.14 show snmp This command is used to di

10.3.11.18 show sysinfo This command is used to display system information including system up time Format show sysinfo Mode Privileged Mode 10.3.11.

Format Show rmon alarm<CR> Mode Privileged Mode Show rmon event log This command displays rmon event log. Format Show rmon event log event inde

This command is used to forward frame and learn SA into ARL table Format vlan ingress bypass Mode Global Config 10.4.2.4 vlan port This command is us

10.4.5 link-aggregation This command is used to configure link aggregation 10.4.5.1 link-aggregation addport This command is used to configure LAG gr

39480 Front Panel Ethernet ports Mini GBIC ports 39480 Rear Panel 12 Asante IntraCore IC39240/480 User’s Manual

10.4.7 Log This command is used to configure log server 10.4.7.1 Log log-server This command is used to configure log server 1) Log log-server name &

Mode Global Config 28 10.4.10.3 mgmt-accesslist disable This command disables management access list. Format mgmt-accesslist disable Mode Global Conf

Format network mgmt-vlan <vlan-ID> Mode Global Config 10.4.13.2 network parms This command configures static IP address of the switch. Format n

This command configures ports auto-negotiation mode. Format port-all auto-negotiate {enable|disable} Mode Global Config 10.4.14.3 port-all flow-contr

Format port-all Storm-Control broadcast-multicast <value> Mode Global Config 4) port-all storm-control broadcast-unknown This command configure

Mode Global Config 10.4.16 set commands 10.4.16.1 set IGMP Configure IGMP snooping. 1) set igmp enable This command enables igmp snooping. Format set

Mode Global Config 10.4.17 snmp commands 10.4.17.1 snmp notify This command configures snmp notification. Format snmp notify {enable|disable} Mode Gl

Mode Global Config snmp trapstation add <ip-addr> community <community name> type none Send no trap. Format snmp trapstation add <ip-a

3) spanning-tree forceversion none This command selects none spanning tree type. Format spanning-tree forceversion none Mode Global Config 10.4.110.2

10.4.110.8 spanning-tree mst Configure a multiple spanning tree instance. 1) spanning-tree mst instance This command creates or removes a MST instanc

1.4.1 LEDs The IC39240/480 front panel LED display allows you to monitor the status of the switch. The IC39240/480 has one power LED indicator. Ther

This command creates rmon alarm entry. Format rmon alarm index < 1..65535 >interval<0..3600>interface<port number>counter<1..17&

This command clears TCP/UDP destination port filter. Format access-list name <WORD> clear l4port DST port 40 Mode Global Config 4) access-list

access-list name <WORD> set l4port DST-port This command specifies the destination TCP/UDP port range. Format access-list name <WORD> set

Format arp static {add|delete} vid <1~4094> ip <A.B.C.D> mac <mac-address> Mode Global Config 10.4.25 dos Commands Note: This comma

e.g. switch(interface g1)#lacp admin 36768 10.5.3.2 priority command Configure lacp port priority Format lacp priority <0..65535> Mode Interfac

Mode Interface Config 10.5.7 admin-mode Configure administrative mode on a port Format Switch(Interface 1)# admin-mode {enable|disable} Mode Interfac

and 0 means no limit. Format storm-control broadcast <rate> Mode Interface Config 10.5.14.3 storm-control broadcast-multicast This command stor

This command configure the port priority on a MST instance:0~4096. Format spanning-tree mst priority <1 4096> Mode Interface Config 10.5.17.6 s

Appendix A: Basic Troubleshooting In the unlikely event that the switch does not operate properly, follow the troubleshooting tips below. If more hel

Appendix B: Specifications The sections below list the features and product specifications for the IntraCore IC39240/480 switch. TECHNICAL SPECIFICA

Chapter 2: Hardware Installation and Setup Use the following guidelines to easily install the switch, ensuring that it has the proper power supply an

- IEEE 802.1 S Multiple Spanning Tree Protocol - IEEE 802.1Q Tag VLAN (Up to 64) - Port-based QoS (options High/Normal) - Port Trunking - IEEE802.3ad

Standards Compliance - IEEE 802.3 10BASE-T Ethernet - IEEE 802.3u 100BASE-TX Fast Ethernet - IEEE 802.3ab 1000BASE-T Gigabit Ethernet - IEEE 802.3x

- IEEE802.3ab 1000BASE-T - IEEE802.3x flow control Physical - Dimensions: 430 x 350 x 44 (mm), 16.9 x 13.8 x 1.7 (inch) (IC39480) (WxDxH) 430 x 250

Security - 802.11x RADIUS Authentication - Management Access Control List Package Content - 48-port Giga + 4 Giga SFP L2+ Switch(IC39480) - 24-port

Appendix C: FCC Compliance and Warranty Statements C.1 FCC Compliance Statement This equipment has been tested and found to comply with the limits fo

C.3 IntraCore Warranty Statement Products: IntraCore IC39240/480 Subject to the limitations and exclusions below, Asante warrants to the original en

Index Cabling console...20 Ethernet...

context sensitive...30 IGMP configuration...48

148 Asante IntraCore IC39240/480 User’s Manual bandwidth...57 configuration...

• Do not tamper with the equipment. Doing so could void the warranty • Examine the work area for potential hazards (such as wet floors or ungrounde

1. Place the switch on a flat, stable surface. 2. Locate a rack-mounting bracket (supplied) and place it over the mounting holes on one side of th

2.4 Connecting Power Important: Carefully review the power requirements (Chapter 2.1.3) before connecting power to the switch. Use the following proc

determine whether the device at the other end of the link is a hub, switch, or workstation, and adjust its signals accordingly. No crossover cables a

• 1000BaseLZ GBIC: Cables with SC-type fiber connectors; 10µ single-mode fiber media up to 120 km (393,701') • 1000BaseT: Category 5 or better

IntraCore 39240/480 Layer 2+ Gigabit Ethernet Switch User’s Manual Asante 47709 Fremont Blvd Fremont, CA 94538 USA SALES 408-435-8388 TECHNICAL

Chapter 3: Initial Software Setup Configure the switch by connecting directly to it through a console (out-of-band management), running a terminal em

e. Press the Configuration button from the Connect To window. e f. Set the data rate to 9600 Baud. g. Set data format to 8 data bits, 1 stop bit

3.2 Connecting to a PC You can connect to the switch through a PC by using either an Ethernet or USB cable. Using a telnet session, you can telnet in

3.5 Restoring Factory Defaults To restore the switch to its factory default settings, follow the commands shown in the following screen. COMMAND>

Chapter 4: Understanding the Command Line Interface (CLI) The switch utilizes Command Line Interface (CLI) to provide access to several different com

COMMAND> The user top commands available at the user level are a subset of those available at the privileged level. In general, the user top comma

COMMAND> enable Username : admin Password : xxxxxx Switch# Command Purpose COMMAND> enable Enters the privileged EXEC mode. Switch# ? Lists pri

4.3 Global Configuration Mode Global configuration commands apply to features that affect the system as a whole, rather than just one protocol or int

log Configure log server radius-server Configure radius server static-address Static addr

Switch(Config)# interface 1 Switch(Interface 1)# ? exit Exit current shell dot1x Configure 802.1x mode

Table of Contents IntraCore 39240/480...

To get help specific to a command mode, a command, a keyword, or an argument, perform one of the following commands: Command Purpose Help Obtain a

Generally, uppercase letters represent variables. For example, after entering a command, such as hostname, and using a space and a question mark, yo

sequence to recall successively more recent commands. 4.6 Using Command-Line Editing Features and Shortcuts A variety of shortcuts and editing feat

4.6.2 Completing a Partial Command Name If you cannot remember a complete command name, press the Tab key to allow the system to complete a partial e

Chapter 5: Managing the System and Configuration Files This chapter explains how to manage the system information, as well as how to manage the confi

5.1.2 Specify the Hostname The factory-assigned default host name is Switch. To specify or modify the host name for the network, use the Network sys

Switch# show running-config 5.2 Managing Configuration Files This section discusses how to download configuration files from remote servers, and sto

Switch# copy nvram_config tftp 192.168.123.100 file Specify a filename Switch# copy nvram_config tftp 192.168.123.100 file WORD

Switch# clear config Don’t forget to use ‘save’ command to preserve the new configuration across reboots. 5.3 Managing system image Files This syst

5.4.1 Configuring SNMP Support The Simple Network Management Protocol (SNMP) system consists of three parts: an SNMP manager, an SNMP agent, and a Ma

3.2 Connecting to a PC...

• Define SNMP Trap Operations Command Purpose snmp trapstation add 192.168.123.100 community public type linkchange trap-version 1 Create a trap ho

Each bridge should receive regular configuration BPDUs from the direction of the root bridge. If the maximum age timer expires before the bridge rece

• Designated port—connects to the designated switch, which has the lowest path cost when forwarding packets from that LAN to the root bridge. The po

Configuring Switch/Bridge Priority For <priority> the range is 0 to 61440 in increments of 4096; the default is 32768. The lower number is used

The default setting is no edge port configuration. To return the switch to its default setting, use the following configuration command. Command Purp

For <port-priority>, the range is 0–240 in increments of 16; the default is 128. The lower the number, the higher the priority. 45 Asante In

Chapter 6: Configuring IP The Internet Protocol (IP) is a packet-based protocol used to exchange data over computer networks. All other IP protocols

/19 32 Class C 8,192 Hosts /18 64 Class C 16,384 Hosts /17 128 Class C 32,768 Hosts /16 256 Class C OR 1 Class B 65,536 Hosts /13 2,048

6.2 Managing IP Multicast Traffic Multicast traffic is a means to transmit a multimedia stream from the Internet (a video conference, for example) wi

Enable the IGMP querier Multicast switches can send IGMP host-query messages to discover which multicast groups are present on attached networks. T

5.5 Spanning Tree Algorithm ...

6.3 Access Lists An access list is a criteria statement that the switch uses to determine whether to allow or block traffic based on MAC addresses,

Command Purpose access-list name acl1 set …… Set the criteria statement of an access list named ‘acl_name’ access-list name acl1 action …… Specify t

6.3.3 Applying an Access List to an Interface After creating your access lists, you can choose interfaces for which the access lists will be applied

Chapter 7: VLAN Configuration VLANs are used to organize any group of network nodes into separate broadcast domains. VLANs confine broadcast traffic

number Enter a VLAN ID range Enter a range of VLAN ID Switch(Config)# vlan add number <2..4094> Ente

Switch(Config)# vlan add number 4 Switch(Config)# vlan port ports port-configure 2 untagged 11-14 Switch(Config)# vlan port ports port-configure 1 ex

The trunk port accepts tagged and untagged frames. All the untagged frames are classified to the trunk port’s native VLAN (the VLAN whose VID match

Chapter 8: Quality of Service Configuration Quality of Service (QoS) is a general term referring to various methods of traffic management you can emp

Command Purpose Switch<config>#qos scheduling [wrr | strict] Set the scheduling method. Switch<config>#qos wrr ….. Set the settings of t

To change priority-queue mapping, use the following command in EXEC mode: Command Purpose Switch<config>#qos cos …… Set the mapping between 8

Chapter 9: Configuring the Switch Using the GUI ...

8.3 Traffic Shaping Traffic shaping allows you to control the traffic going out from an interface in order to match its flow to the speed of the rem

Chapter 9: Configuring the Switch Using the GUI This chapter provides and overview of configuring the switch with the graphical user interface (GUI).

9.1 Main Configuration Menu Use the navigation panel on the left side of the GUI screen to configure the switch. From this panel you can access the f

9.2 System Use this section to access general information about the switch. 9.2.1 System System Information With the first system screen up a name

9.2.2 System Network management. This page allows the setting of static IP information. The switch can also be set to receive an address automatic

The table below lists the traditional classes and ranges of IP addresses and their status. Class Address or Range Status A 0.0.0.0 1.0.0.0 to 126.0

9.2.3 System Time Setting Use the Time Setting page to set the time zone or local time for the switch. Daylight savings can also be enabled. Cli

9.2.4 System – Green Ethernet. Green Ethernet is a power saving technology that allows the switch to save power when Ethernet is not being active

9.3 Port Management – Port Config The Port Management section displays assorted settings for each port. Port Management – Port Config - Specific

Port management – LACP Property. The LACP properties are displayed on this screen. The system LACP Priority can be set here. By clicking on a por

Chapter 1: Introduction The IntraCore IC39240/480 24-port Layer 2+ Managed Gigabit Switch is a high-performance network switch used to reduce network

Port Management – LAG Group. Click on a group number to set the groups properties. Port Management – LAG Group - Each Group. Once a link ag

9.4 VLAN Management. VLANs are used to organize any group of network nodes into separate broadcast domains. VLANs confine broadcast traffic to the

VLAN MANAGEMENT – VLAN SETTINGS. With a vlan selected, ports can be marked as tagged, or untagged. Lover on the screen, LAG groups can also be tag

VLAN MANAGEMENT – VLAN PORT. This screen allows additional settings to be controlled on a per port basis. Here the PVID can be changed to. Changin

9.5 Spanning Tree. RSTP (Rapid spanning tree protocol) can be enabled at this screen. Various timer settings can also be set. Use this screen to

Use this screen to change the priority and the path cost for specific ports. The priority default value is 128, and the value range is 0–240 (in mul

MSTP. Multiple Spanning Tree Protocol can be enabled on this page. Individual Port properties can be manipulated at this screen. 76 Asante IntraC

MST Instance parameters can be modified on the following two screens. 77 Asante IntraCore IC39240/480 User’s Manual

9.6 Multicast. Static multicast settings can be set. Port by port participation can be controlled. 78 Asante IntraCore IC39240/480 User’s

IGMP The Internet Group Management Protocol (IGMP) manages the multicast groups on a LAN. IP hosts use IGMP to report their group membership to dire

1.2 System Defaults The system defaults are the configuration parameters set in the factory. Use command ‘Clear config’ to restore the defaults. The

9.7 Security - Port Security. Each port can be listed individually or a table can be displayed using the Show Table button Access control lists

802.1X can be enabled on a per port basis Radius server can be identified at this screen. A secret key can be created and the port can be altered

TACAS+ and Storm Control are available on the next screens. 82 Asante IntraCore IC39240/480 User’s Manual

Management IP list can be used to enter a list of IP addresses to limit the availability of switch Management. Auto DoS provides protection from

9.8 QoS. Quality of service settings allow various protocols to be selected to protect functions that require real time performance and limit other

DSCP can be implemented on this page. There are eight queues available numbering 0 – 7. Click on the Mode selector to choose DSCP. Then settings

802.1P priory is supported to four queues. Each priority level can be assigned to one of the four queues. 86 Asante IntraCore IC39240/480 Use

Port-based QoS allows the priority for each port to be manually set. Click the Update button when done to save changes. 87 Asante IntraCore IC

Rate Control allows traffic shaping for each port. An ingress rate limit can also be set. 88 Asante IntraCore IC39240/480 User’s Manual

9.9 SNMP Various screens are available to enable and manipulate SNMP. Profiles can be set for users, communities, and groups. SNMP allows network m

Flow Control Port Capability Disabled 1000BASE-T – 10 Mbps half duplex 10 Mbps full duplex 100 Mbps half duplex 100 Mbps full duplex 1000 Mbps full

SNMP Continued 90 Asante IntraCore IC39240/480 User’s Manual

9.10 LLDP 91 Asante IntraCore IC39240/480 User’s Manual

92 Asante IntraCore IC39240/480 User’s Manual

9.11 Admin - Admin Password Admin password is the screen that can be used to change the password. Remember to click Save Settings when done. L2 T

Static addresses can be added using this screen. Dynamic ARP is the screen that allows aging time and trusted ports to be set on a per port basis

Port Mirroring – To set up a mirror, identify the port to be mirrored by checking the ingress mirror, or egress mirror for the port. Next select t

96 Asante IntraCore IC39240/480 User’s Manual

ADMIN Continued – assorted administration functions are controlled using the next several screens. 97 Asante IntraCore IC39240/480 User’s M

98 Asante IntraCore IC39240/480 User’s Manual

99 Asante IntraCore IC39240/480 User’s Manual