enterasys switch configuration guide enterasys switch configuration guide

Link Aggregation Control Protocol (LACP) is described in Chapter 11, Configuring Link Aggregation. Configuring Port Link Flap Detection Procedure 8-1 Configuring SFP Ports for 100BASE-FX Step Task Command(s) 4. Terms and Definitions Table 11-7 11-16 Link Aggregation Configuration Terms and Definitions (continued) Term Definition Port Priority Port priority determines which physical ports are moved to the attached state when physical ports of differing speeds form a LAG. Enterasys Matrix N Standalone (NSA) Series Configuration Guide Firmware Version 5.41.xx P/N 9034073-08 Rev. Stackable Switches Configuration Guide Firmware Version 6.03.xx.xxxx P/N 9034313-07. i Notice Enterasys Networks reserves the right to make changes in specifications and other information contained in this document and its web site without prior notice. Configuring ACLs C5(su)->router(Config)#show access-lists ipv6list1 ipv6list1 IPV6 access-list 1: deny icmpv6 2001:DB08:10::1/64 any 2: permit tcp 2001:db08:20::20/64 eq snmp any assign-queue 5 3: permit ipv6 2001:FFFF:30::30/64 any C5(su)->router(Config)#interface vlan 200 C5(su)->router(Config-if(Vlan 200))#ipv6 access-group ipv6list1 in C5(su)->router(Config-if(Vlan 200))#exit Configuring MAC ACLs Procedure 24-3 describes how to configure a MAC ACL. IPv6 Routing Configuration Setting Routing General Parameters IPv6 routing parameters are set in router global configuration mode. Note Do not use hardware flow control. Routing Interfaces Example The following example shows how to enable RIP on the switch, then configure VLAN 1 with IP address 192.168.63.1 255.255.255.0 as a routing interface and enable RIP on the interface. set arpinspection vlan vlan-range [logging] 3. Table 3-1 lists some commonly used commands. @ # $ % ^ & * () ? IP Broadcast Settings the clear arp command to delete a specific entry or all entries from the switch ARP table. Configuring PIM-SM Table 19-8 DVMRP Show Commands Task Command Display DVMRP routing information, neighbor information, or DVMRP enable status. Licensing Advanced Features Node-Locked Licensing On the C3, B3, and G3 platforms, licenses are locked to the serial number of the switch to which the license applies. This configuration requires a charging circuit to charge the DC capacitors of the modules in a controlled way. Type 2. set multiauth idle-timeout auth-method timeout 2. Table 15-2 provides a summary of STP port roles. Licensing Advanced Features Table 4-3 Advanced Configuration (continued) Task Refer to Configure RIP. ThisexampleshowshowtodisplayswitchtypeinformationaboutSID1: Usethiscommandtodisplayvariousdataflowanderrorcountersonstackports. index DisplaytheconfigurationoftheTACACS+serveridentifiedbyindex. C5(su)->router(Config)#show access-lists 121 Extended IP access list 121 1: deny ip 10.0.0.1 0.0.255. Figure 16-1 displays an illustration of the policy configuration of a example infrastructure. Configuring Authentication Optionally Enable Guest Network Privileges With PWA enhanced mode enabled, you can optionally configure guest networking privileges. show snmp counters Display SNMP engine properties. The switch can enforce a password aging interval on a per-user basis (set system login aging). Configuring SNMP security model and security level used to request access. Achtung: Verweit auf wichtige Informationen zum Schutz gegen Beschdigungen. Port Configuration Overview Auto-Negotiation and Advertised Ability Auto-negotiation is an Ethernet feature that facilitates the selection of port speed, duplex, and flow control between the two members of a link, by first sharing these capabilities and then selecting the fastest transmission mode that both ends of the link support. Access Control Lists on the A4 A4(su)->router(Config)#access-list mac mymac permit 00:01:00:02:00:01 any assignqueue 2 A4(su)->router(Config)#show access-lists mymac mymac MAC access-list 1: deny 00-E0-ED-1D-90-D5 any 2: permit 00:01:00:02:00:01 any assign-queue 2 A4(su)->router(Config)#access-list interface mymac fe.1.2 in A4(su)->router(Config)#show access-lists interface fe.1.2 24-14 Port-string Access-list ----------- ----------- fe.1. RSTP bridges receiving MSTP BPDUs interpret them as RSTP BPDUs. clear cdp {[state] [port-state portstring] [interval] [hold-time] [authcode]} Refer to your devices CLI Reference Guide for more information about each command. 2. Figure 15-13 shows that with a single Spanning Tree configuration, only a single link towards the root forwards on a bridge. Display the current settings for the Management Authentication Notification MIB. Table 25-3 Setting Routing General Parameters Task Command(s) Enable or disable IPv6 forwarding. Configuring VRRP Table 23-1 Default VRRP Parameters (continued) Parameter Description Default Value advertise-interval Specifies the interval between the advertisement the master sends to other routers participating in the selection process. Example PoE Configuration A PoE-compliant G-Series device is configured as follows: One 400W power supply is installed. Configuring SNMP Configuring SNMPv1/SNMPv2c Creating a New Configuration Procedure 12-1 shows how to create a new SNMPv1 or SNMPv2c configuration. You need to know the index value associated with a single entity to enable, disable, initialize, or reauthenticate a single entity. VLAN Support on Enterasys Switches If a unicast untagged frame is received on Port 5, it would be classified for VLAN 50. In router global configuration mode, enable DHCPv6. The stackable fixed switch and standalone fixed switch devices support MAC-based authentication. Stateless autoconfiguration is part of Router Advertisement and the Enterasys Fixed Switches can support both stateless and stateful autoconfiguration of end nodes. 12-18 Display SNMP traffic counter values. If a LAG port is a mirror source port, no other ports can be configured as source ports. RMON Procedure 18-1 Configuring Remote Network Monitoring (continued) Step Task Command(s) 8. set dhcpsnooping trust port port-string enable 4. Fast Ethernet Switches. no access-list acl-number [entryno [entryno]] Example The following example creates an IPv4 extended ACL and associates it with VLAN 100. Table 14-7 show sntp Output Details, Table 15-1 RMON Monitoring Group Functions and Commands (Continued), Table 18-1 Enabling the Switch for Routing, Table 18-2 Router CLI Configuration Modes. Configuring Link Aggregation Procedure 11-1 Configuring Link Aggregation (continued) Step Task Command(s) 4. Procedure 25-7 DHCPv6 Server Configuration Step Task Command(s) 1. 2. Plan, implement IT security. The physical ports will initially retain admin key defaults. Syslog combines this value and the severity value to determine message priority. The DC voltage can be directly connected to the modules only after the capacitors are charged to a sufficient level. Configure RADIUS user accounts on the authentication server for each device. Terms and Definitions LACP port state is disabled by default on the B5s and C5s, so we will enable LACP port state here. Initial Configuration Overview Table 4-2 Default Settings for Router Operation (continued) Feature Default Setting Hello interval (OSPF) Set to 10 seconds for broadcast and point-to-point networks. User Authentication Overview When the maptable response is set to tunnel mode, the system will use the tunnel attributes in the RADIUS reply to apply a VLAN to the authenticating user and will ignore any Filter-ID attributes in the RADIUS reply. UsethiscommandtodisplayLLDPconfigurationinformation. Ports 1 through 5 on the switch unit 4 are configured as egress ports for the VLANs while ports 8 through 10 on the switch unit 5 are configured as ingress ports that will do the policy classification. Configuration Examples Enabling a Server and Console Logging Procedure 14-1 shows how you would complete a basic Syslog configuration. A typical situation occurs when a host requests an IP address with no DHCP server located on that segment. 6. Table 26-3 lists the logging commands that require different user access permissions when the security mode is set to C2. IRDP Disabled on all interfaces. Port Mirroring 2. Guide the actions of Level 1 and Level 2 teams focus on configuration changes, software updates, and preventive/ corrective maintenance, define and develop together with Management team, the initial performance procedures that should be used by the NOC. Resolution of incidents of 2nd level. The MST region presents itself to the rest of the network as a single device, which simplifies administration. Procedure 26-7 Basic Dynamic ARP Inspection Configuration Step Task Command(s) 1. Port Configuration Overview By default, Enterasys switch devices are configured to automatically detect the cable type connection, straight through (MDI) or cross-over (MDIX), required by the cable connected to the port. 1. Spanning Tree Basics RSTP Operation RSTP optimizes convergence by significantly reducing the time to reconfigure the networks active topology when physical topology or configuration parameter changes occur. Operation and Maintenance of layer 2 switch (cisco and extreme), configuration, backup and replacement. Since the admin key for the LAG and its associated ports must agree for the LAG to form, an easy way to ensure that LAGs do not automatically form is to set the admin key for all LAGS on all devices to a nondefault value. ThisexampleshowshowtodisplayallOSPFrelatedinformationfortheVLAN6interface: Tabl e 209providesanexplanationoftheshowippimsminterfacevlancommandoutput. Terms and Definitions 2. Thisexampledisplaystheneighborsinthecache. Configure an RMON filter entry. Brand . set system lockout emergency-access username 5. Procedure 20-3 Configuring Static Routes Step Task Command(s) 1. It can be enabled using the set security profile c2 command. Configured and maintained VPN products for establish IPsec (L2L . Decides if the upstream neighbor is capable of receiving prunes. The trap indicates port, SID and loop protection status. Use the advertise-interval command to change the advertise-interval for this VRID. Adjusting the Forward Delay Interval When rapid transitioning is not possible, forward delay is used to synchronize BPDU forwarding. If it is, then the sending device proceeds as follows. In this sense, QoS is the third step in a three step process. Refer to page Syslog Operation By default, Syslog is operational on Enterasys switch devices at startup. Note: You must be logged in to the Enterasys device with read-write access rights to use the commands shown in this procedure. After the stack has been configured, you can use the show switch unit command to physically identify each unit. 4. (Optional on C5 only) Set the power redundancy mode on the system if two power supplies are installed. Do you want to continue (y/n) [n]? Proxy ARP This variation of the ARP protocol allows the router to send an ARP response on behalf of an end node to the requesting host. You can insert a new rule into a specified entry location using the insert option. 14 Configuring Syslog This chapter describes how System Logging, or Syslog, operates on Enterasys fixed stackable and standalone switches, and how to configure Syslog. A destination port will only act as a mirroring port when the session is operationally active. The Enterasys switch products support the following five authentication methods: IEEE 802.1x MACbased Authentication (MAC) Port Web Authentication (PWA) Note: Through out this document: Use of the term "modular switch" indicates that the information is valid for the N-Series, S-Series, and K-Series platforms. Syslog Components and Their Use Basic Syslog Scenario Figure 14-1 shows a basic scenario of how Syslog components operate on an Enterasys switch. 4 - Load new operational code using XMODEM 5 - Display operational code vital product data 6 - Run Flash Diagnostics 7 - Update Boot Code 8 - Delete operational code 9 - Reset the system 10 - Restore Configuration to factory defaults (delete config files) 11 - Set new Boot Code password [Boot Menu] 2 5.