TigerSwitch 10/100 50-Port Layer 2 Switch ◆ 48 10BASE-T/100BASE-TX auto-MDI/MDI-X ports ◆ 2 auto-MDI/MDI-X 10/100/1000BASE-T combo ports with associated SFP slots ◆ Non-blocking switching architecture ◆ Support for redundant power unit ◆ Spanning Tree Protocol ◆ Up to six LACP or static 4-port trunks ◆ Layer 2/3/4 CoS support through four priority queues ◆ Full support for VLANs with GVRP ◆ IGMP multicast filtering and snooping ◆ Manageable via console, Web, SNMP/RMON Management Guide SMC6750L2
TigerSwitch 10/100 Management Guide From SMC’s Tiger line of feature-rich workgroup LAN solutions 38 Tesla Irvine, CA 92618 Phone: (949) 679-8000 June 2002 Pub.
Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC. SMC reserves the right to change specifications at any time without notice. Copyright © 2002 by SMC Networks, Inc. 38 Tesla Irvine, CA 92618 All rights reserved.
LIMITED WARRANTY Limited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free from defects in workmanship and materials, under normal use and service, for the applicable warranty term. All SMC products carry a standard 90-day limited warranty from the date of purchase from SMC or its Authorized Reseller. SMC may, at its own discretion, repair or replace any product not operating as warranted with a similar or functionally equivalent product, during the applicable warranty term.
WARRANTIES EXCLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE, CUSTOMER’S SOLE REMEDY SHALL BE REPAIR OR REPLACEMENT OF THE PRODUCT IN QUESTION, AT SMC’S OPTION. THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING WARRANTIES OR CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
CONTENTS 1 Switch Management . . . . . . . . . . . . . . . . . . . . . . . . . . .1-1 Connecting to the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Required Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2 Remote Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4 Basic Configuration . . . . . . . . . . . . . .
CONTENTS Configuring Interface Connections . . . . . . . . . . . . . . . . . . . . . . Setting Broadcast Storm Thresholds . . . . . . . . . . . . . . . . . . . . . Configuring Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . Address Table Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Setting Static Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Displaying the Address Table . . . . . . . . . . . . . . . . . . . . . . . . .
CONTENTS Configuring IGMP Parameters . . . . . . . . . . . . . . . . . . . . . . . . . Interfaces Attached to a Multicast Router . . . . . . . . . . . . . . . . . Displaying Port Members of Multicast Services . . . . . . . . . . . . Adding Multicast Addresses to VLANs . . . . . . . . . . . . . . . . . . Showing Device Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 2-72 2-74 2-77 2-78 2-79 Command Line Interface . . . . . . . . . . . . . . . . . . . . . .
CONTENTS whichboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . boot system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . System Management Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . enable password . . . . . . . . . . . .
CONTENTS show ip redirects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-54 ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-54 Line Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-56 line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-57 login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CONTENTS bridge priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-87 bridge-group path-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-88 bridge-group priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-89 bridge-group portfast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-90 show bridge group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-91 VLAN Commands . . . . . . . . . .
CONTENTS switchport priority default . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-121 queue bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-122 queue cos-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-123 show queue bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-125 show queue cos-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-125 map ip port (Global Configuration) . . . . . .
CONTENTS APPENDICES: A Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .A-1 Troubleshooting Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1 Upgrading Firmware via the Serial Port . . . . . . . . . . . . . . . . . . . . . . . . . A-2 B Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .B-1 Console Port Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 DB-9 Port Pin Assignments . . .
CHAPTER 1 SWITCH MANAGEMENT Connecting to the Switch Configuration Options The TigerSwitch 10/100 SMC6750L2 includes a built-in network management agent. The agent offers a variety of management options, including SNMP, RMON and a Web-based interface. A PC may also be connected directly to the switch for configuration and monitoring via a command line interface (CLI). Note: The IP address for this switch is assigned via DHCP by default. To change this address, see “Setting an IP Address” on page 1-6.
SWITCH MANAGEMENT The switch’s CLI configuration program, Web interface, and SNMP agent allow you to perform the following management functions: • Set user names and passwords for up to 16 users • Set an IP interface for a management VLAN • Configure SNMP parameters • Enable/disable any port • Set the speed/duplex mode for any port • Configure up to 255 IEEE 802.
CONNECTING TO THE SWITCH Attach a VT100-compatible terminal, or a PC running a terminal emulation program to the switch. You can use the console cable provided with this package, or use a null-modem cable that complies with the wiring assignments shown in Appendix B. To connect a terminal to the console port, complete the following steps: 1. Connect the console cable to the serial port on a terminal, or a PC running terminal emulation software, and tighten the captive retaining screws on the DB-9 connector.
SWITCH MANAGEMENT 4. Once you have set up the terminal correctly, the console login screen will be displayed. For a description of how to use the CLI, see “Using the Command Line Interface” on page 3-1. For a list of all the CLI commands and detailed information on using the CLI, refer to “Command Groups” on page 3-10.
BASIC CONFIGURATION Basic Configuration Console Connection The CLI program provides two different command levels — normal access level (Normal Exec) and privileged access level (Privileged Exec). The commands available at the Normal Exec level are a limited subset of those available at the Privileged Exec level and allow you to only display information and use basic utilities. To fully configure switch parameters, you must access the CLI at the Privileged Exec level.
SWITCH MANAGEMENT Passwords can consist of up to 8 alphanumeric characters and are case sensitive. To prevent unauthorized access to the switch, set the passwords as follows: 1. Open the console interface with the default user name and password “admin” to access the Privileged Exec level. 2. Type “configure” and press . 3. Type “username guest password 0 password,” for the Normal Exec level, where password is your new password. Press . 4.
BASIC CONFIGURATION Note: Only one VLAN interface can be assigned an IP address (the default is VLAN 1). This defines the management VLAN, the only VLAN through which you can gain management access to the switch. If you assign an IP address to any other VLAN, the new IP address overrides the original IP address and this becomes the new management VLAN. Manual Configuration You can manually assign an IP address to the switch.
SWITCH MANAGEMENT 4. To set the IP address of the default gateway for the network to which the switch belongs, type “ip default-gateway gateway,” where “gateway” is the IP address of the default gateway. Press . Console(config)#interface vlan 1 Console(config-if)#ip address 192.168.1.5 255.255.255.0 Console(config-if)#exit Console(config)#ip default-gateway 192.168.1.
BASIC CONFIGURATION 3. Type “exit” to return to the global configuration mode. Press . 4. Type “ip dhcp restart” to begin broadcasting service requests. Press . 5. Wait a few minutes, and then check the IP configuration settings, by typing the “show ip interface” command. Press . 6. Then save your configuration changes by typing “copy running-config startup-config.” Enter the startup file name and press .
SWITCH MANAGEMENT Community Strings Community strings are used to control management access to SNMP stations, as well as to authorize SNMP stations to receive trap messages from the switch. You therefore need to assign community strings to specified users or user groups, and set the access level. The default strings are: • public - with read-only access. Authorized management stations are only able to retrieve MIB objects. • private - with read-write access.
BASIC CONFIGURATION Trap Receivers You can also specify SNMP stations that are to receive traps from the switch. To configure a trap receiver, complete the following steps: 1. From the Privileged Exec level global configuration mode prompt, type “snmp-server host host-address community-string,” where “host-address” is the IP address for the trap receiver and “community-string” is the string associated with that host. Press . 2.
SWITCH MANAGEMENT Managing System Files The switch’s flash memory supports three types of system files that can be managed by the CLI program, Web interface, or SNMP. The switch’s file system allows files to be uploaded and downloaded, copied, deleted, and set as a start-up file. The three types of files are: • Configuration — These files store system configuration information and are created when configuration settings are saved.
SYSTEM DEFAULTS System Defaults The switch’s system defaults are provided in the configuration file “Factory_Default_Config.cfg.” To reset the switch defaults, this file should be set as the startup configuration file. See “Setting the Startup Configuration File” on page 2-19. The following table lists some of the basic system defaults. Function Parameter Default IP Settings Management. VLAN 1 DHCP Enabled BOOTP Disabled User Specified Disabled IP Address 0.0.0.0 Subnet Mask 255.0.0.
SWITCH MANAGEMENT Function Parameter Default Console Port Connection Baud Rate 9600 Data bits 8 Stop bits 1 Parity none Local Console Timeout 0 (disabled) Admin Status Enabled Auto-negotiation Enabled Flow Control Disabled 10/100 Mbps Port Capability 10 Mbps half duplex 10 Mbps full duplex 100 Mbps half duplex 100 Mbps full duplex Full-duplex flow control disabled Port Status 10/100/1000 Mbps Port 10 Mbps half duplex Capability 10 Mbps full duplex 100 Mbps half duplex 100 Mbps full du
SYSTEM DEFAULTS Function Parameter Default Virtual LANs Default VLAN 1 PVID 1 Acceptable Frame Type All Ingress Filtering Disabled GVRP (global) Disabled GVRP (port interface) Disabled Ingress Port Priority 0 Weighted Round Robin Class 0: 1 Class 1: 4 Class 2: 16 Class 3: 64 IP Precedence Priority Disabled IP DSCP Priority Disabled IP Port Priority Disabled Class of Service Multicast Filtering IGMP Snooping Enabled Act as Querier Enabled Broadcast Storm Protection Status Ena
SWITCH MANAGEMENT 1-16
CHAPTER 2 CONFIGURING THE SWITCH Using the Web Interface This switch provides an embedded HTTP Web agent. Using a Web browser you can configure the switch and view statistics to monitor network activity. The Web agent can be accessed by any computer on the network using a standard Web browser (Internet Explorer 5.0 or above, or Netscape Navigator 6.2 or above). Note: You can also use the Command Line Interface (CLI) to manage the switch over a serial connection to the console port or via Telnet.
CONFIGURING THE SWITCH 3. After you enter a user name and password, you will have access to the system configuration program. Notes: 1. You are allowed three attempts to enter the correct password; on the third failed attempt the current connection is terminated. 2.
NAVIGATING THE WEB BROWSER INTERFACE Configuration Options Configurable parameters have a dialog box or a drop-down list. Once a configuration change has been made on a page, be sure to click on the “Apply” or “Apply Changes” button to confirm the new setting. The following table summarizes the Web page configuration buttons. Button Action Revert Cancels specified values and restores current values prior to pressing “Apply” or “Apply Changes.” Refresh Immediately updates values for the current page.
CONFIGURING THE SWITCH Notes: 1. To ensure proper screen refresh, be sure that Internet Explorer 5.x is configured as follows: Under the menu “Tools / Internet Options / General / Temporary Internet Files / Settings,” the setting for item “Check for newer versions of stored pages” should be “Every visit to the page.” 2. When using Internet Explorer 5.0, you may have to manually refresh the screen after making configuration changes by pressing the browser’s refresh button.
MAIN MENU Main Menu Using the onboard Web agent, you can define system parameters, manage and control the switch, and all its ports, or monitor network conditions. The following table briefly describes the selections available from this program.
CONFIGURING THE SWITCH Menu Description Page Address Table Static Addresses Displays entries for interface, address or VLAN 2-30 Dynamic Addresses Displays or edits static entries in the Address Table 2-31 Address Aging Sets timeout for dynamically learned entries 2-32 Spanning Tree STA Information Displays STA values used for the bridge 2-35 STA Configuration Configures global bridge settings for STA 2-37 STA Port Information Configures individual port settings for STA 2-37 STA Trunk Inf
MAIN MENU Menu Description Page Sets the default priority for each port 2-54 Priority Default Port Priority Default Trunk Priority Sets the default priority for each trunk 2-54 Traffic Class Maps IEEE 802.1p priority tags to output queues 2-55 Queue Scheduling Configures Weighted Round Robin queueing 2-58 IP Precedence/DSCP Globally selects IP Precedence or DSCP Priority Status Priority, or disables both.
CONFIGURING THE SWITCH Menu Description Page IP Multicast Registration Table Displays all multicast groups active on this switch, including multicast IP addresses and VLAN ID 2-78 IGMP Member Port Table Indicates multicast addresses associated with the 2-77 selected VLAN Statistics Lists Ethernet and RMON port statistics 2-79 Basic Configuration Displaying System Information You can easily identify the system by providing a descriptive name, location and contact information.
BASIC CONFIGURATION Web – Click System/System Information. Specify the system name, location, and contact information for the system administrator, then click Apply. (This page also includes a Telnet button that allows you to access the Command Line Interface via Telnet.) CLI – Specify the hostname, location and contact information.
CONFIGURING THE SWITCH Setting the IP Address An IP address may be used for management access to the switch over your network. By default, the switch uses DHCP to assign IP settings to VLAN 1 on the switch. If you wish to manually configure IP settings, you need to change the switch’s user-specified defaults (IP address 0.0.0.0 and netmask 255.0.0.0) to values that are compatible with your network.
BASIC CONFIGURATION • Subnet Mask – This mask identifies the host address bits used for routing to specific subnets. • Gateway IP Address – IP address of the gateway router between this device and management stations that exist on other network segments. • MAC Address – The MAC address of this switch. Manual Configuration Web – Click System/IP. Specify the management interface, IP address and default gateway, then click Apply. CLI – Specify the management interface, IP address and default gateway.
CONFIGURING THE SWITCH Web – Click System/IP. Specify the Management VLAN, set the IP Address Mode to DHCP or BOOTP. Then click “Apply” to save your changes. The switch will broadcast a request for IP configuration settings on the next power reset. Otherwise, you can click “Restart DHCP” to immediately request a new address. If you lose your management connection, use a console connection and enter “show ip interface” to determine the new switch address.
SECURITY Security Configuring the Logon Password The guest only has read access for most configuration parameters. However, the administrator has write access for parameters governing the onboard agent. You should therefore assign a new administrator password as soon as possible, and store it in a safe place. Notes: 1. If you log into the Web interface as guest (Normal Exec level), you can view page information but only change the guest password.
CONFIGURING THE SWITCH Configuring Radius Logon Authentication Remote Authentication Dial-in User Service (RADIUS) is an authentication protocol that uses a central server to control access to RADIUS-compliant devices on the network. A RADIUS server can be programmed with a database of multiple user name/password pairs and associated privilege levels for each user or group that requires management access to this switch using the console port, Telnet or the Web.
SECURITY • Timeout for a reply – The number of seconds the switch waits for a reply from the RADIUS server before it resends the request. Note: The local switch user database has to be set up by manually entering user names and passwords using the CLI. Web – Click System/Radius. Specify the authentication sequence, server address, port number and other parameters, then click “Apply.” CLI Commands CLI – Specify all the required parameters to enable logon authentication.
CONFIGURING THE SWITCH Managing Firmware You can upload/download firmware to or from a TFTP server. By saving runtime code to a file on a TFTP server, that file can later be downloaded to the switch to restore operation. You can also set the switch to use new firmware without overwriting the previous version. Command Attributes • TFTP Server IP Address – The IP address of a TFTP server.
MANAGING FIRMWARE If you download specifying a new destination file name, be sure to select the new file from the drop-down box, and then click “Apply Changes.” To start the new firmware, reboot the system. CLI – Enter the IP address of the TFTP server, select “config” or “opcode” file type, then enter the source and destination file names, set the new file to start up the system, and then restart the switch. Console#copy tftp file TFTP server ip address: 10.1.0.99 Choose file type: 1. config: 2.
CONFIGURING THE SWITCH Saving or Restoring Configuration Settings You can upload/download configuration settings to/from a TFTP server. The configuration file can be later downloaded to restore the switch’s settings. Command Attributes • Destination File Name — The destination configuration file name should not contain slashes (\ or /), the leading letter of the file name should not be a period (.), and the length of file name should be 1 to 31 characters. (Valid characters: A-Z, a-z, 0-9, “.
MANAGING FIRMWARE CLI – Enter the IP address of the TFTP server, specify the source file on the server, set the startup file name on the switch, and then restart the switch. Console#copy tftp startup-config TFTP server ip address: 192.168.1.19 Source configuration file name: startup2.0 Startup configuration file name [startup] : startup2.0 / Console# 3-18 Setting the Startup Configuration File If you download to a new file name, then select the new file from the drop-down box, and click “Apply Changes.
CONFIGURING THE SWITCH Copying the Running Configuration to a File CLI – If you copy the running configuration to a file, you can set this file as the startup file at a later time, and then restart the switch. Console#copy running-config file destination file name : 051902.cfg / Console# Console#config Console(config)#boot system config: 051902.
MANAGING FIRMWARE • Configurable PVID Tagging – This switch allows you to override the default Port VLAN ID (PVID used in frame tags) and egress status (VLAN-Tagged or Untagged) on each port. (Refer to “VLAN Configuration” on page 2-41.) • Local VLAN Capable – This switch does not support multiple local bridges (i.e., multiple Spanning Trees). • GMRP – GARP Multicast Registration Protocol (GMRP) allows network devices to register endstations with multicast groups.
CONFIGURING THE SWITCH CLI – Enter the following command.
MANAGING FIRMWARE Web – Click System/Switch Information. CLI – Use the following command to display version information. Console#show version Unit1 Serial number Service tag Hardware version Number of ports Main power status Redundant power status Agent(master) Unit id Loader version Boot rom version Operation code version Console# 3-37 :00000000000000000000 :0000000 :R0C :50 :up :not present :1 :1.0.0.0 :1.0.0.0 :1.0.1.
CONFIGURING THE SWITCH Port Configuration Displaying Connection Status You can use the Port Information or Trunk Information pages to display the current connection status, including link state, speed/duplex mode, flow control, and auto-negotiation. Command Attributes 2-24 • Name – Interface label. • Type – Indicates the of port type (100Base-TX, 1000Base-TX or 1000Base-SFP). • Admin Status – Shows if the interface is enabled or disabled. • Oper Status – Indicates if the link is Up or Down.
PORT CONFIGURATION Web – Click Port/Port Information or Trunk Information. Modify the required interface settings, and click “Apply.” CLI – This example shows the connection status for Port 13.
CONFIGURING THE SWITCH Configuring Interface Connections You can use the Trunk Configuration or Port Configuration page to enable/disable an interface, manually fix the speed and duplex mode, set flow control, set auto-negotiation, and set the interface capabilities to advertise. Command Attributes • Name – Allows you to label an interface. (Range: 1-64 characters) • Admin – Allows you to manually disable an interface. You can disable an interface due to abnormal behavior (e.g.
PORT CONFIGURATION - Sym - Transmits and receives pause frames for flow control (Gigabit Ethernet ports only) - FC - Supports flow control • Trunk – Indicates if a port is a member of a trunk. To create trunks and select port members, see “Port Trunk Configuration” on page 2-66. Note: Autonegotiation must be disabled before you can configure or force the interface to use the Speed/Duplex Mode or Flow Control options. Web – Click Port/Port Configuration or Trunk Configuration.
CONFIGURING THE SWITCH Setting Broadcast Storm Thresholds Broadcast storms may occur when a device on your network is malfunctioning, or if application programs are not well designed or properly configured. If there is too much broadcast traffic on your network, performance can be severely degraded or everything can come to complete halt. You can protect your network from broadcast storms by setting a threshold for broadcast traffic for each port.
PORT CONFIGURATION Configuring Port Mirroring You can mirror traffic from any source port to a target port for real-time analysis. You can then attach a logic analyzer or RMON probe to the target port and study the traffic crossing the source port in a completely unobtrusive manner. Command Usage • The mirror port and monitor port speeds must match, otherwise traffic may be dropped from the monitor port. • All mirror sessions have to share the same destination port.
CONFIGURING THE SWITCH Address Table Settings Switches store the addresses for all known devices. This information is used to route traffic directly between the inbound and outbound ports. All the addresses learned by monitoring traffic are stored in the dynamic address table. You can also manually configure static addresses that are bound to a specific port. Setting Static Addresses A static address can be assigned to a specific interface on this switch.
ADDRESS TABLE SETTINGS CLI – This example adds an address to the static address table, but sets it to be deleted when the switch is reset. Console(config)#bridge 1 address 00-e0-29-94-34-de vlan 1 forward ethernet 1/1 delete-on-reset 3-79 Console(config)# Displaying the Address Table The Dynamic Address Table contains the MAC addresses learned by monitoring the source address for traffic entering the switch.
CONFIGURING THE SWITCH For example, the following screen shows the dynamic addresses for port 7. CLI – This example also displays the address table entries for port 11. Console#show bridge 1 ethernet 1/11 Interface Mac Address Vlan Type --------- ----------------- ---- ----------------Eth 1/11 00-10-b5-62-03-74 1 Learned Console# 3-80 Changing the Aging Time You can set the aging time for entries in the dynamic address table. Command Usage The range for the aging time is 10 - 1000000 seconds.
SPANNING TREE PROTOCOL CONFIGURATION Spanning Tree Protocol Configuration The Spanning Tree Algorithm can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers.
CONFIGURING THE SWITCH The following global attributes can be configured: 2-34 • Spanning Tree State – Enable/disabled this switch to participate in a STA-compliant network. • Priority – Bridge priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device. However, if all devices have the same priority, the device with the lowest MAC address will then become the root device.
SPANNING TREE PROTOCOL CONFIGURATION • Forward Delay – The maximum time (in seconds) the root device will wait before changing states (i.e., listening to learning to forwarding). This delay is required because every device must receive information about topology changes before it starts to forward frames. In addition, each port needs time to listen for conflicting information that would make it return to a blocking state; otherwise, temporary data loops might result.
CONFIGURING THE SWITCH CLI – This command displays global STA settings, followed by the settings for each port. Console#show bridge group 1 3-91 Bridge-group information -------------------------------------------------------------Spanning tree protocol :ieee8021d Spanning tree enable/disable :enable Priority :32768 Hello Time (sec.) :2 Max Age (sec.) :20 Forward Delay (sec.) :15 Designated Root :32768.
SPANNING TREE PROTOCOL CONFIGURATION Configuring the global settings for STA Web – Click STA/STA Configuration. Modify the required attributes, click “Apply.” CLI – This example enables Spanning Tree Protocol, and then sets the indicated attributes.
CONFIGURING THE SWITCH 2-38 • Disabled - The port has been disabled by the user or has failed diagnostics. • Blocking - Port receives STA configuration messages, but does not forward packets. • Listening - Port will leave blocking state due to a topology change, start transmitting configuration messages, but does not yet forward packets. • Learning - Port has transmitted configuration messages for an interval set by the Forward Delay parameter without receiving contradictory information.
SPANNING TREE PROTOCOL CONFIGURATION The following interface attributes can be configured: • Priority – Defines the priority used for this port in the Spanning Tree Protocol. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the Spanning Tree. This makes a port with higher priority less likely to be blocked if the Spanning Tree Protocol is detecting network loops.
CONFIGURING THE SWITCH Web – Click STA/STA Port Information or STA Trunk Information. CLI – This example shows the STA attributes for port 5. Console#show bridge group 1 ethernet 1/5 3-91 Bridge-group information -------------------------------------------------------------Spanning tree protocol :ieee8021d Spanning tree enable/disable :enable Priority :32768 Hello Time (sec.) :2 Max Age (sec.) :20 Forward Delay (sec.) :15 Designated Root :32768.
VLAN CONFIGURATION Web – Click STA/STA Port Configuration or STA Trunk Configuration. Modify the required attributes, then click “Apply.” CLI – This example sets STA attributes for port 5. Console(config)#interface ethernet 1/5 Console(config-if)#bridge-group 1 priority 0 Console(config-if)#bridge-group 1 path-cost 50 Console(config-if)#bridge-group 1 portfast 3-68 3-89 3-88 3-90 VLAN Configuration In conventional networks with routers, broadcast traffic is split up into separate domains.
CONFIGURING THE SWITCH VLANs help to simplify network management by allowing you to move devices to a new VLAN without having to change any physical connections. VLANs can be easily organized to reflect departmental groups (such as Marketing or R&D), usage groups (such as e-mail), or multicast groups (used for multimedia applications such as videoconferencing).
VLAN CONFIGURATION in one or more VLANs, but the device at the other end of the link does not support VLANs, then you must add this port as an untagged port (that is, a port attached to a VLAN-unaware device). VLAN Classification – When the switch receives a frame, it classifies the frame in one of two ways. If the frame is untagged, the switch assigns the frame to an associated VLAN (based on the PVID of the receiving port.
CONFIGURING THE SWITCH To implement GVRP in a network, you must first configure the static VLANs required on switches that are connected to PCs, servers, and other devices, so that these VLANs can be propagated across the network (Web - VLAN / VLAN Membership). For other core switches in the network, enable GVRP on the links between these devices (Web - VLAN / Port Settings or Trunk Settings).
VLAN CONFIGURATION • Maximum Number of Supported VLANs – Maximum number of VLANs that can be configured on this switch. Web – Click VLAN/VLAN Basic Information. CLI – Enter the following command.
CONFIGURING THE SWITCH Web – Click VLAN/VLAN Current Table. Select any ID from the scroll-down list. Command Attributes for CLI Interface 2-46 • VLAN – ID of configured VLAN (1-4094, no leading zeroes). • Type – Shows how this VLAN was added to the switch. - Dynamic: Automatically learned via GVRP. - Static: Added as a static entry. • Name – Name of the VLAN (1 to 64 characters). • Status – Shows if this VLAN is enabled or disabled. - Active: VLAN is operational. - Suspend: VLAN is suspended; i.e.
VLAN CONFIGURATION CLI – Current VLAN information can be displayed with the following command.
CONFIGURING THE SWITCH CLI – This example creates a new VLAN. Console(config)#vlan database Console(config-vlan)#vlan 5 name R&D media ethernet state active Console(config-vlan)# 3-94 3-95 Adding Interfaces Based on Membership Type Command Attributes • Port – Port identifier. • Trunk – Trunk identifier. • VLAN – ID of configured VLAN (1-4094, no leading zeroes). • Name – Name of the VLAN (1 to 64 characters). • Status – Shows if this VLAN is enabled or disabled. - Enable: VLAN is operational.
VLAN CONFIGURATION • Trunk Member – Indicates if a port is a member of a trunk. To add a trunk to the selected VLAN, use the last table on the VLAN Static Table page. Web – Click VLAN/VLAN Static Table. Select a VLAN ID from the scroll-down list. Modify the VLAN name and status if required. Select the membership type by marking the appropriate radio button in the list of ports or trunks. Click “Apply.” CLI – The following example shows how to add tagged and untagged ports to VLAN 2.
CONFIGURING THE SWITCH Adding Interfaces Based on Static Membership Command Attributes • Interface – Port or trunk identifier. • Member – VLANs for which the selected interface is a tagged member. • Non-Member – VLANs for which the selected interface is not a tagged member. Web – Open VLAN/VLAN Static Membership. Select an interface from the scroll-down box (Port or Trunk). Click “Query” to display VLAN membership information for the interface.
VLAN CONFIGURATION Configuring VLAN Behavior for Interfaces You can configure VLAN behavior for specific interfaces, including the default VLAN identifier (PVID), accepted frame types, ingress filtering, GVRP status, and GARP timers. Command Usage • GVRP – GARP VLAN Registration Protocol defines a way for switches to exchange VLAN information in order to automatically register VLAN members on interfaces across the network.
CONFIGURING THE SWITCH • GVRP Status – Enables/disables GVRP for the interface. GVRP must be globally enabled for the switch before this setting can take effect. (See “Displaying Bridge Extension Capabilities” on page 2-20.) When disabled, any GVRP packets received on this port will be discarded and no GVRP registrations will be propagated from other ports. (Default: Enabled) • GARP Join Timer – The interval between transmitting requests/ queries to participate in a VLAN group.
CLASS OF SERVICE CONFIGURATION Web – Click VLAN/VLAN Port Configuration or VLAN Trunk Configuration. Fill in the required settings for each interface, click “Apply.” CLI – This example sets port 1 to accept only tagged frames, assigns PVID 3 as the native VLAN ID, enables GVRP, sets the GARP timers, and then sets the switchport mode to hybrid.
CONFIGURING THE SWITCH Setting the Default Priority for Interfaces You can specify the default port priority for each interface on the switch. All untagged packets entering the switch are tagged with the specified default port priority, and then sorted into the appropriate priority queue at the output port. Command Usage • This switch provides four priority queues for each port. It uses Weighted Round Robin to prevent head-of-queue blockage.
CLASS OF SERVICE CONFIGURATION Web – Click Priority/Default Port Priority or Default Trunk Priority. Modify the default priority for any interface, then click “Apply.” CLI – This example assigns a default priority or 5 to port 3.
CONFIGURING THE SWITCH to recommendations in the IEEE 802.1p standard as shown in the following table. Queue 0 1 2 3 0 1 Priority 2 3 4 5 6 7 The priority levels recommended in the IEEE 802.1p standard for various network applications are shown in the following table. However, you can map the priority levels to the switch’s output queues in any way that benefits application traffic for your own network.
CLASS OF SERVICE CONFIGURATION Web – Click Priority/Traffic Classes. Assign priorities to the output queues, then click “Apply.” CLI – The following example shows how to map CoS values 0, 1 and 2 to CoS priority queue 0, value 3 to CoS priority queue 1, values 4 and 5 to CoS priority queue 2, and values 6 and 7 to CoS priority queue 3.
CONFIGURING THE SWITCH Setting the Service Weight for Traffic Classes This switch uses the Weighted Round Robin (WRR) algorithm to determine the frequency at which it services each priority queue. As described in “Mapping CoS Values to Egress Queues” on page 2-55, the traffic classes are mapped to one of the four egress queues provided for each port. You can assign a weight to each of these queues (and thereby to the corresponding traffic priorities).
CLASS OF SERVICE CONFIGURATION Mapping Layer 3/4 Priorities to CoS Values This switch supports several common methods of prioritizing layer 3/4 traffic to meet application requirements. Traffic priorities can be specified in the IP header of a frame, using the priority bits in the Type of Service (ToS) octet or the number of the TCP/UDP port. If priority bits are used, the ToS octet may contain three bits for IP Precedence or six bits for Differentiated Services Code Point (DSCP) service.
CONFIGURING THE SWITCH CLI – The following example globally enables IP Precedence service on the switch. Console(config)#map ip precedence Console# 3-128 Mapping IP Precedence The Type of Service (ToS) octet in the IPv4 header includes three precedence bits defining eight different priority levels ranging from highest priority for network control packets to lowest priority for routine traffic. The default IP Precedence values are mapped one-to-one to Class of Service values (i.e.
CLASS OF SERVICE CONFIGURATION Web – Click Priority/IP Precedence Priority. Select a port or trunk from the Interface field (note that settings apply to all interfaces). Select an IP Precedence value from the IP Precedence Priority Table by clicking on it with your cursor, enter a value in the Class of Service Value field, and then click “Apply.” Be sure to also select “IP Precedence” from the IP Precedence/DSCP Priority Status menu.
CONFIGURING THE SWITCH Mapping DSCP Priority The DSCP is six bits wide, allowing coding for up to 64 different forwarding behaviors. The DSCP replaces the ToS bits, and it retains backward compatibility with the three precedence bits so that non-DSCP compliant, ToS-enabled devices, will not conflict with the DSCP mapping. Based on network policies, different kinds of traffic can be marked for different kinds of forwarding. The DSCP default values are defined in the following table.
CLASS OF SERVICE CONFIGURATION CLI – The following example globally enables DSCP Priority service on the switch, maps DSCP value 1 to CoS value 0 on port 5, and then displays all the DSCP Priority settings for that port.
CONFIGURING THE SWITCH Mapping IP Port Priority You can also map network applications to Class of Service values based on the IP port number (i.e., TCP/UDP port number) in the frame header. Some of the more common TCP service ports include: HTTP: 80, FTP: 21, Telnet: 23 and POP3: 110. Command Attributes • IP Port Priority Status – Enables or disables the IP port priority. • Interface – Selects the port or trunk interface to which the settings apply.
CLASS OF SERVICE CONFIGURATION CLI – The following example globally enables IP Port Priority service on the switch, maps HTTP traffic on port 5 to CoS value 0, and then displays all the IP Port Priority settings for that port. Console(config)#map ip port Console(config)#interface ethernet 1/5 Console(config-if)#map ip port 80 cos 0 Console(config-if)#end Console#show map ip port ethernet 1/5 TCP port mapping status: disabled 3-126 3-68 3-127 3-132 Port Port no.
CONFIGURING THE SWITCH Port Trunk Configuration Ports can be combined into an aggregate link to increase the bandwidth of a network connection where bottlenecks exist or to ensure fault recovery. You can create up to six trunks at a time, with any single trunk containing up to four ports. The switch supports both static trunking and dynamic LACP (Link Aggregation Control Protocol). LACP configured ports can automatically negotiate a trunked link with LACP-configured ports on another device.
PORT TRUNK CONFIGURATION Dynamically Configuring a Trunk with LACP Web – Click Trunk/LACP Configuration. Select any of the switch ports from the scroll-down port list and click “Add.” After you have completed adding ports to the member list, click “Apply.” CLI – The following example enables LACP for ports 17 and 18. Just connect these ports to two LACP-enabled trunk ports on another switch to form a trunk.
CONFIGURING THE SWITCH Statically Configuring a Trunk Web – Click Trunk/Trunk Configuration. Enter a trunk ID of 1-6 in the Trunk field, select any of the switch ports from the scroll-down port list, and click “Add.” After you have completed adding ports to the member list, click “Apply.” CLI – This example creates trunk 1 with ports 11 and 12. Just connect these ports to two static trunk ports on another switch to form a trunk.
CONFIGURING SNMP Configuring SNMP The switch includes an onboard agent that continuously monitors the status of its hardware, as well as the traffic passing through its ports, based on the Simple Network Management Protocol (SNMP). A network management station can access this information using software such as EliteView. Access rights to the onboard agent are controlled by community strings.
CONFIGURING THE SWITCH CLI – The following example adds the string “spiderman” with read/write access. Console(config)#snmp-server community spiderman rw Console(config)# 3-43 Specifying Trap Managers You can specify up to five management stations that will receive authentication failure messages and other trap messages from the switch. Command Usage • You can enable or disable authentication messages via the Web interface.
MULTICAST CONFIGURATION CLI – This example adds a trap manager and enables authentication traps. Console(config)#snmp-server host 10.1.19.23 batman Console(config)#snmp-server enable traps authentication 3-45 3-47 Multicast Configuration Multicasting is used to support real-time applications such as video conferencing or streaming audio. A multicast server does not have to establish a separate connection with each client.
CONFIGURING THE SWITCH The purpose of IP multicast filtering is to optimize a switched network’s performance, so multicast packets will only be forwarded to those ports containing multicast group hosts or multicast routers/switches, instead of flooding traffic to all ports in the subnet (VLAN). Configuring IGMP Parameters You can configure the switch to forward multicast traffic intelligently.
MULTICAST CONFIGURATION Command Attributes • IGMP Status — When enabled, the switch will monitor network traffic to determine which hosts want to receive multicast traffic. This is also referred to as IGMP Snooping. (Default: Disabled) • Act as IGMP Querier — When enabled, the switch can serve as the Querier, which is responsible for asking hosts if they want to receive multicast traffic.
CONFIGURING THE SWITCH Web – Click IGMP/IGMP Configuration. Adjust the IGMP settings as required, and then click “Apply.” (The default settings are shown below.) CLI – This example modifies the settings for multicast filtering, and then displays the current status.
MULTICAST CONFIGURATION Displaying Interfaces Attached to a Multicast Router Command Attributes • VLAN ID – ID of configured VLAN (1-4094). • Multicast Router List – Multicast routers dynamically discovered by this switch or those that are statically assigned to an interface on this switch. Web – Click IGMP/Multicast Router Port Information. Select the required VLAN ID from the scroll-down list to display the associated multicast routers.
CONFIGURING THE SWITCH (port or trunk) on your switch, you can manually configure that interface to join all the current multicast groups. This can ensure that multicast traffic is passed to all the appropriate interfaces within the switch. Command Attributes • Interface – Activates the Port or Trunk scroll down list. • VLAN ID – Selects the VLAN to propagate all multicast traffic coming from the attached multicast router/switch. • Port or Trunk – Specifies the interface attached to a multicast router.
MULTICAST CONFIGURATION Displaying Port Members of Multicast Services You can display the port members associated with a specified VLAN and multicast IP address. Command Attribute • VLAN ID – Selects the VLAN in which to display port members. • Multicast IP Address – The IP address for a specific multicast service • Multicast Group Port List – Ports propagating a multicast service; i.e., ports that belong to the indicated VLAN group. Web – Click IGMP/IP Multicast Registration Table.
CONFIGURING THE SWITCH CLI – This example displays all the known multicast services supported on VLAN 1, along with the ports propagating the corresponding services. The type field shows if this entry was learned dynamically or was statically configured. Console#show bridge 1 multicast vlan 1 VLAN M'cast IP addr. Member ports Type ---- --------------- ------------ ------1 224.0.0.12 Eth1/12 USER 1 224.1.2.
SHOWING DEVICE STATISTICS Web – Click IGMP/IGMP Member Port Table. Specify the interface attached to a multicast service (via an IGMP-enabled switch or multicast router), indicate the VLAN that will propagate the multicast service, specify the multicast IP address, and then click “Add.” After you have completed adding ports to the member list, click “Apply.” CLI – This example assigns a multicast address to VLAN 1, and then displays all the known multicast services supported on VLAN 1.
CONFIGURING THE SWITCH passing through each port. All values displayed have been accumulated since the last system reboot, and are shown as counts per second. Statistics are refreshed every 60 seconds by default. Note: RMON groups 2, 3 and 9 can only be accessed using SNMP management software such as EliteView. Web – Click Statistics/Port Statistics. Select the required interface, and then click “Query.” You can also use the Refresh button at the bottom of the page to update the screen.
SHOWING DEVICE STATISTICS CLI – This example shows statistics for port 13.
CONFIGURING THE SWITCH 2-82
USING THE COMMAND LINE INTERFACE CHAPTER 3 COMMAND LINE INTERFACE This chapter describes how to use the Command Line Interface (CLI). Using the Command Line Interface Accessing the CLI When accessing the management interface for the switch over a direct connection to the server’s console port, or via a Telnet connection, the switch can be managed by entering command keywords and parameters at the prompt. Using the switch's command-line interface (CLI) is very similar to entering commands on a UNIX system.
COMMAND LINE INTERFACE After connecting to the system through the console port, the login screen displays: User Access Verification Username: admin Password: CLI session with the SMC6750L2 is opened. To end the CLI session, enter [Exit]. Console# Telnet Connection Telnet operates over the IP transport protocol. In this environment, your management station and any network device you want to manage over the network must have a valid IP address.
ENTERING COMMANDS After you configure the switch with an IP address, you can open a Telnet session by performing these steps: 1. From the remote host, enter the Telnet command and the IP address of the device you want to access. 2. At the prompt, enter the user name and system password. The CLI will display the “Vty-0#” prompt for the administrator to show that you are using privileged access mode (i.e., Privileged Exec), or “Vty-0>” for the guest to show that you are using normal access mode (i.e.
COMMAND LINE INTERFACE You can enter commands as follows: • To enter a simple command, enter the command keyword. • To enter multiple commands, enter each command in the required order. For example, to enable Privileged Exec command mode, and display the startup configuration, enter: Console>enable Console#show startup-config • To enter commands that require parameters, enter the required parameters after the command keyword.
ENTERING COMMANDS Showing Commands If you enter a “?” at the command prompt, the system will display the first level of keywords for the current command class (Normal Exec or Privileged Exec) or configuration class (Global, Interface, Line, or VLAN Database). You can also display a list of valid keywords for a specific command.
COMMAND LINE INTERFACE between the command and question mark.) For example “s?” shows all the keywords starting with “s.” Console#show s? snmp startup-config system Negating the Effect of Commands For many configuration commands you can enter the prefix keyword “no” to cancel the effect of a command or reset the configuration to the default value. For example, the logging command will log system messages to a host server. To disable logging, specify the no logging command.
ENTERING COMMANDS command classes and associated modes are displayed in the following table: Class Mode Exec Normal Privileged Configuration* Global Interface Line VLAN * You must be in Privileged Exec mode to access any of the configuration modes. Exec Commands When you open a new console session on switch with the user name “guest,” the system enters Normal Exec command mode (or guest mode). Only a limited number of the commands are available in this mode.
COMMAND LINE INTERFACE Username: guest Password: [system login password] CLI session with the SMC6750L2 is opened. To end the CLI session, enter [Exit]. Console#enable Password: [privileged level password if so configured] Console# Configuration Commands Configuration commands are privileged level commands used to modify switch settings. These commands modify the running configuration only and are not saved when the switch is rebooted.
ENTERING COMMANDS Global Configuration mode. The system prompt will change to “Console(config-if)#,” “Console(config-line)#” or Console(config-vlan)” indicating that you have access privileges to the associated commands. You can use the end command to return to the Privileged Exec mode. Console(config)#interface ethernet 1/5 Console(config-if)#exit Console(config)#line console Console(config-line)# Command Line Processing Commands are not case sensitive.
COMMAND LINE INTERFACE Command Groups The system commands can be broken down into the functional groups shown below.
COMMAND GROUPS Command Group Description Page Priority Sets port priority for untagged frames, relative weight for each priority queue, also sets priority for TCP/ UDP traffic types, IP precedence, and DSCP 3-120 Mirror Port Mirrors data to another port for analysis without affecting the data passing through or the performance of the monitored port 3-135 Port Trunking and LACP Statically groups multiple ports into a single logical trunk; configures Link Aggregation Control Protocol for port trunks
COMMAND LINE INTERFACE General Commands Command Function Mode enable Activates privileged mode NE Page 3-12 disable Returns to normal mode from privileged mode PE 3-13 configure Activates global configuration mode PE 3-14 reload Restarts the system PE 3-16 end Returns to Privileged Exec mode GC, IC, LC, VC 3-16 exit Returns to the previous configuration mode, or any exits the CLI 3-17 quit Exits a CLI session NE, PE 3-17 help Shows how to use help any NA ? Shows options fo
GENERAL COMMANDS Command Usage • “super” is the default password required to change the command mode from Normal Exec to Privileged Exec. (To set this password, see the enable password command on page 3-27.) • The “#” character is appended to the end of the prompt to indicate that the system is in privileged access mode. • You only need to use Level 15. Setting the password for Level 0 has no effect. • You cannot set a null password with the enable password command.
COMMAND LINE INTERFACE Command Usage The “>” character is appended to the end of the prompt to indicate that the system is in normal access mode. Example Console#disable Console> Related Commands enable configure Use this command to activate Global Configuration mode. You must enter this mode to modify any settings on the switch.
GENERAL COMMANDS show history Use this command to show the contents of the command history buffer. Default Setting None Command Mode Normal Exec, Privileged Exec Command Usage The history buffer size is fixed at 20 commands.
COMMAND LINE INTERFACE reload Use this command to restart the system. Note: When the system is restarted, it will always run the Power-On Self-Test. It will also retain all configuration information stored in non-volatile memory by the copy running-config startup-config command. Default Setting None Command Mode Privileged Exec Command Usage This command resets the entire system.
GENERAL COMMANDS Example This example shows how to return to the Privileged Exec mode from the Interface Configuration mode: Console(config-if)#end Console# exit Use this command to return to the previous configuration mode or exit the configuration program.
COMMAND LINE INTERFACE Command Usage The quit and exit commands can both exit the configuration program. Example This example shows how to quit a CLI session: Console#quit Press ENTER to start session User Access Verification Username: Flash/File Commands These commands are used to manage the system code or configuration files.
FLASH/FILE COMMANDS Syntax copy file {file | running-config | startup-config | tftp} copy running-config {file | startup-config | tftp} copy startup-config {file | running-config | tftp} copy tftp {file | running-config | startup-config} • file - Keyword that allows you to copy to/from a file. • running-config - Keyword that allows you to copy to/from the current running configuration. • startup-config - The configuration used for system initialization.
COMMAND LINE INTERFACE Example The following example shows how to upload the configuration settings to a file on the TFTP server: Console#copy file tftp Choose file type: 1. config: 2. opcode: <1-2>: 1 Source file name: startup TFTP server ip address: 10.1.0.99 Destination file name: startup.01 / Console# The following example shows how to copy the running configuration to a startup file.
FLASH/FILE COMMANDS Command Mode Privileged Exec Command Usage • If the file type is used for system startup, then this file cannot be deleted. • “Factory_Default_Config.cfg” cannot be deleted. Example This example shows how to delete the test2.cfg configuration file from Flash memory. Console#delete test2.cfg Console# Related Commands dir dir Use this command to display a list of files in Flash memory.
COMMAND LINE INTERFACE Command Mode Privileged Exec Command Usage • If you enter the command dir without any parameters, the system displays all files. • File information is shown below: Column Heading Description file name The name of the file. file type File types: Boot-Rom, Operation Code, and Config file. startup Shows if this file is used when the system is started. size The length of the file in bytes.
FLASH/FILE COMMANDS Example This example shows the information displayed by the whichboot command. See the table on the previous page for a description of the file information displayed by this command. Console#whichboot file name file type startup size (byte) ----------------- -------------- ------- ----------diag_0060 Boot-Rom image Y 111360 run_0200 Operation Code Y 1083008 startup Config File Y 2710 Console# boot system Use this command to specify the file or image used to start up the system.
COMMAND LINE INTERFACE Example Console(config)#boot system config: startup Console(config)# Related Commands dir whichboot System Management Commands These commands are used to control system logs, passwords, user name, browser configuration options, and display or configure a variety of other system information.
SYSTEM MANAGEMENT COMMANDS Command Function Mode Page System Status Commands show startup-config Displays the contents of the configuration file PE (stored in Flash memory) that is used to start up the system 3-33 show running-config Displays the configuration data currently in use PE 3-35 show system Displays system information NE, PE 3-36 show users Shows all active console and Telnet sessions, NE, including user name, idle time, and IP address PE of Telnet client 3-36 show version Displ
COMMAND LINE INTERFACE username Use this command to require user name authentication at login. Use the no form to remove a user name. Syntax username name {access-level level | nopassword | password {0 | 7} password} no username name • name - The name of the user. Up to 8 characters, case sensitive. Maximum number of users: 16 • access-level level - Specifies the user level. • The device has two predefined privilege levels: 0: Normal Exec, 15: Privileged Exec.
SYSTEM MANAGEMENT COMMANDS Command Usage The encrypted password is required for compatiblity with legacy password settings (i.e., plain text or encrypted) when reading the configuration file during system bootup or when downloading the configuration file from a TFTP server. There is no need for you to manually configure encrypted passwords. Example This example shows how the set the access level and password for a user.
COMMAND LINE INTERFACE Command Usage The encrypted password is required for compatiblity with legacy password settings (i.e., plain text or encrypted) when reading the configuration file during system bootup or when downloading the configuration file from a TFTP server. There is no need for you to manually configure encrypted passwords.
SYSTEM MANAGEMENT COMMANDS Related Commands ip http server ip http server Use this command to allow this device to be monitored or configured from a browser. Use the no form to disable this function. Syntax ip http server no ip http server Default Setting Enabled Command Mode Global Configuration Example Console(config)#ip http server Console(config)# Related Commands ip http port logging on Use this command to control logging of error messages.
COMMAND LINE INTERFACE Command Mode Global Configuration Command Usage The logging process controls error messages to be sent to SNMP trap receivers. You can use the logging history command to control the type of error messages that are stored in memory and sent to a specified SNMP trap receiver.
SYSTEM MANAGEMENT COMMANDS • level - One of the level arguments listed below. Messages sent include the selected level up through level 0.
COMMAND LINE INTERFACE clear logging Use this command to clear messages from the log buffer. Syntax clear logging [flash | ram] • flash - Event history stored in Flash memory (i.e., permanent memory). • ram - Event history stored in temporary RAM (i.e., memory flushed on power reset). Default Setting None Command Mode Privileged Exec Example Console#clear logging Console# Related Commands show logging show logging Use this command to display the logging configuration for system and event messages.
SYSTEM MANAGEMENT COMMANDS Default Setting None Command Mode Privileged Exec Example Console#show logging flash Syslog logging: Disable History logging in FLASH: level errors Console# show startup-config Use this command to display the configuration file stored in non-volatile memory that is used to start up the system.
COMMAND LINE INTERFACE Example Console#show startup-config building startup-config, please wait.....
SYSTEM MANAGEMENT COMMANDS show running-config Use this command to display the configuration information currently in use. Default Setting None Command Mode Privileged Exec Command Usage Use this command in conjunction with the show startup-config command to compare the information in running memory to the information stored in non-volatile memory. Example Console#show running-config building running-config, please wait..... ! ! snmp-server community private rw snmp-server community public ro . . . . .
COMMAND LINE INTERFACE show system Use this command to display system information. Default Setting None Command Mode Normal Exec, Privileged Exec Example Console#show system System description: SMC TigerSwitch - SMC6750L2 System OID string: 1.3.6.1.4.1.202.20.24 System information System Up time: 0 days, 1 hours, 23 minutes, and 44.
SYSTEM MANAGEMENT COMMANDS Example Console#show users Username accounts: Username Privilege -------- --------guest 0 admin 15 Online users: Line Username Idle time (h:m:s) Remote IP addr. ----------- -------- ----------------- --------------* 0 console admin 0:00:00 1 vty 0 admin 0:04:37 10.1.0.19 Console# show version Use this command to display hardware and software version information for the system.
COMMAND LINE INTERFACE RADIUS Client Commands Remote Authentication Dial-in User Service (RADIUS) is a system that uses a central server running RADIUS software to control access to RADIUS-aware devices on the network. A RADIUS server contains a database of multiple user name/password pairs with associated privilege levels for each user or group that require management access to a switch using the console port, Telnet or Web.
RADIUS CLIENT COMMANDS Default Setting None Command Mode Global Configuration Example Console(config)#authentication login radius Console(config)# Related Commands username - for setting the local user names and passwords radius-server host Use this command to specify the RADIUS server. Use the no form to restore the default. Syntax radius-server host host_ip_address no radius-server host host_ip_address - IP address of server.
COMMAND LINE INTERFACE radius-server port Use this command to set the RADIUS server network port. Use the no form to restore the default. Syntax radius-server port port_number no radius-server port port_number - RADIUS server UDP port used for authentication messages. (Range: 1-65535) Default Setting None Command Mode Global Configuration Example Console(config)#radius-server port 181 Console(config)# radius-server key Use this command to set the RADIUS encryption key.
RADIUS CLIENT COMMANDS Command Mode Global Configuration Example Console(config)#radius-server key green Console(config)# radius-server retransmit Use this command to set the number of retries. Use the no form to restore the default. Syntax radius-server retransmit number_of_retries no radius-server retransmit number_of_retries - Number of times the switch will try to authenticate logon access via the RADIUS server.
COMMAND LINE INTERFACE radius-server timeout Use this command to set the interval between transmitting authentication requests to the RADIUS server. Use the no form to restore the default. Syntax radius-server timeout number_of_seconds no radius-server timeout number_of_seconds - Number of seconds the switch waits for a reply before resending a request.
SNMP COMMANDS SNMP Commands Controls access to this switch from SNMP management stations, as well as the error types sent to trap managers.
COMMAND LINE INTERFACE Default Setting • public - Read-only access. Authorized management stations are only able to retrieve MIB objects. • private - Read-write access. Authorized management stations are able to both retrieve and modify MIB objects. Command Mode Global Configuration Command Usage The first snmp-server community command you enter enables SNMP (SNMPv1). The no snmp-server community command disables all versions of SNMP.
SNMP COMMANDS Example Console(config)#snmp-server contact Paul Console(config)# Related Commands snmp-server location snmp-server location Use this command to set the system location string. Use the no form to remove the location string. Syntax snmp-server location text no snmp-server location text - String that describes the system location.
COMMAND LINE INTERFACE Syntax snmp-server host host-addr community-string no snmp-server host host-addr • host-addr - Name or Internet address of the host (the targeted recipient). (Maximum host addresses: 5 trap destination ip address entries) • community-string - Password-like community string sent with the notification operation.
SNMP COMMANDS Example Console(config)#snmp-server host 10.1.19.23 batman Console(config)# Related Commands snmp-server enable traps snmp-server enable traps Use this command to enable this device to send Simple Network Management Protocol traps or informs (SNMP notifications). Use the no form to disable SNMP notifications.
COMMAND LINE INTERFACE command with no keywords, all notification types are enabled. If you enter the command with a keyword, only the notification type related to that keyword is enabled. The snmp-server enable traps command is used in conjunction with the snmp-server host command. Use the snmp-server host command to specify which host or hosts receive SNMP notifications. In order to send notifications, you must configure at least one snmp-server host command.
IP COMMANDS Example SNMP traps: Authentication: enable Link-up-down: enable SNMP communities: 1. private, and the privilege is read-write 2.
COMMAND LINE INTERFACE Command Function ip default-gateway Defines the default gateway through which an GC in-band management station can reach this device Mode Page 3-52 show ip interface Displays the IP settings for this device PE 3-53 show ip redirects Displays the default gateway configured for this device PE 3-54 ping Sends ICMP echo request packets to another NE, node on the network PE 3-54 ip address Use this command to set the IP address for this device.
IP COMMANDS separated by periods. Anything outside this format will not be accepted by the configuration program. • If you select the bootp or dhcp option, IP is enabled but will not function until a BOOTP or DHCP reply has been received. Requests will be broadcast periodically by this device in an effort to learn its IP address. (BOOTP and DHCP values can include the IP address, default gateway, and subnet mask).
COMMAND LINE INTERFACE Command Usage • DHCP requires the server to reassign the client’s last address if available. • If the BOOTP or DHCP server has been moved to a different domain, the network portion of the address provided to the client will be based on this new domain. Example In the following example, the device is reassigned the same address.
IP COMMANDS Command Usage A gateway must be defined if the management station is located in a different IP segment. Example The following example defines a default gateway for this device: Console(config)#ip default-gateway 10.1.0.254 Console(config)# Related Commands show ip redirects show ip interface Use this command to display the settings of an IP interface. Default Setting All interfaces Command Mode Privileged Exec Command Usage This switch can only be assigned one IP address.
COMMAND LINE INTERFACE show ip redirects Use this command to show the default gateway configured for this device. Default Setting None Command Mode Privileged Exec Example Console#show ip redirects ip default gateway 10.1.0.254 Console# Related Commands ip default-gateway ping Use this command to send ICMP echo request packets to another node on the network. Syntax ping host [count count][size size] • host - IP address or IP alias of the host. • count - Number of packets to send.
IP COMMANDS Command Usage • Use the ping command to see if another site on the network can be reached. • Following are some results of the ping command: • Normal response -The normal response occurs in one to ten seconds, depending on network traffic. • Destination does not respond - If the host does not respond, a “timeout” appears in ten seconds. • Destination unreachable - The gateway for this destination indicates that the destination is unreachable.
COMMAND LINE INTERFACE Line Commands You can access the onboard configuration program by attaching a VT100 compatible device to the server’s serial port. These commands are used to set communication parameters for the serial port or a virtual terminal. Note that Telnet is considered a virtual terminal connection, and the only commands that apply to Telnet include exec-timeout and password-thresh.
LINE COMMANDS line Use this command to identify a specific line for configuration, and to process subsequent line configuration commands. Syntax line {console | vty} • console - Console terminal line. • vty - Virtual terminal for remote console access. Default Setting There is no default line. Command Mode Global Configuration Command Usage Telnet is considered a virtual terminal connection and will be shown as “Vty” in screen displays such as show users. However, the serial communication parameters (e.g.
COMMAND LINE INTERFACE login Use this command to enable password checking at login. Use the no form to disable password checking and allow connections without a password. Syntax login [local] no login local - Selects local password checking. Authentication is based on the user name specified with the username command. Default Setting By default, virtual terminals require a password.
LINE COMMANDS password Use this command to specify the password for a line. Use the no form to remove the password. Syntax password {0 | 7} password no password - {0 | 7} - 0 means plain password, 7 means encrypted password - password - Character string that specifies the line password. The string can contain any alphanumeric characters, besides spaces, and can contain up to 8 characters. The password is case sensitive. Default Setting No password is specified.
COMMAND LINE INTERFACE Related Commands login password-thresh exec-timeout Use this command to set the interval that the system waits until user input is detected. Use the no form to remove the timeout definition. Syntax exec-timeout seconds no exec-timeout seconds - Integer that specifies the number of seconds.
LINE COMMANDS password-thresh Use this command to set the password intrusion threshold which limits the number of failed logon attempts. Use the no form to remove the threshold value. Syntax password-thresh threshold no password-thresh threshold - The number of allowed password attempts. (Range: 1-120; 0: no threshold) Default Setting The default value is three attempts.
COMMAND LINE INTERFACE silent-time Use this command to set the amount of time the management console is inaccessible after the number of unsuccessful logon attempts exceeds the threshold set by the password-thresh command. Use the no form to remove the silent time value. Syntax silent-time seconds no silent-time seconds - The number of seconds to disable console response. (Range: 0-65535; 0: no silent-time) Default Setting The default value is no silent-time.
LINE COMMANDS databits Use this command to set the number of data bits per character that are interpreted and generated by the console port. Use the no form to restore the default value. Syntax databits {7 | 8} no databits • 7 - Seven data bits per character. • 8 - Eight data bits per character. Default Setting 8 data bits per character Command Mode Line Configuration Command Usage The databits command can be used to mask the high bit on input from devices that generate 7 data bits with parity.
COMMAND LINE INTERFACE parity Use this command to define generation of a parity bit. Use the no form to restore the default setting. Syntax parity {none | even | odd} no parity • none - No parity • even - Even parity • odd - Odd parity Default Setting No parity Command Mode Line Configuration Command Usage Communication protocols provided by devices such as terminals and modems often require a specific parity bit setting.
LINE COMMANDS bps - Baud rate in bits per second. (Options: 9600, 19200, 38400, 57600, 115200 bps) Default Setting 9600 bps Command Mode Line Configuration Command Usage Set the speed to match the baud rate of the device connected to the serial port. Some baud rates available on devices connected to the port might not be supported. The system indicates if the speed you selected is not supported.
COMMAND LINE INTERFACE Example To specify 2 stop bits, enter this command: Console(config-line)#stopbits 2 Console(config-line)# show line Use this command to display the terminal line’s parameters. Syntax show line [console | vty] • console - Console terminal line. • vty - Virtual terminal for remote console access.
INTERFACE COMMANDS Interface Commands These commands are used to display or set communication parameters for an Ethernet port, aggregated link, or VLAN.
COMMAND LINE INTERFACE interface Use this command to configure an interface type and enter interface configuration mode. Syntax interface interface interface • ethernet unit/port - unit - This is device 1. - port - Port number.
INTERFACE COMMANDS Default Setting None Command Mode Interface Configuration (Ethernet, Port Channel) Example The following example adds a description to Ethernet port 25. Console(config)#interface ethernet 1/25 Console(config-if)#description RD-SW#3 Console(config-if)# speed-duplex Use this command to configure the speed and duplex mode of a given interface when autonegotiation is disabled. Use the no form to restore the default.
COMMAND LINE INTERFACE Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage To force operation to the speed and duplex mode specified in a speed-duplex command, use the no negotiation command to disable auto-negotiation on the selected interface. Example The following example configures port 5 to 100 Mbps, half-duplex operation.
INTERFACE COMMANDS Example The following example configures port 11 to use autonegotiation. Console(config)#interface ethernet 1/11 Console(config-if)#negotiation Console(config-if)# capabilities Use this command to advertise the port capabilities of a given interface during autonegotiation. Use the no form with parameters to remove an advertised capability, or the no form without parameters to restore the default values.
COMMAND LINE INTERFACE Example The following example configures Ethernet port 5 capabilities to 100half, 100full and flow control. Console(config)#interface ethernet 1/5 Console(config-if)#capabilities 100half Console(config-if)#capabilities 100full Console(config-if)#capabilities flowcontrol Console(config-if)# flowcontrol Use this command to enable flow control. Use the no form to disable flow control.
INTERFACE COMMANDS • Due to a hardware limitation, flow control only works on those ports located in the same chip (ports 1-24, 49 and ports 25-48, 50). Cross-chip flow control does not work. Example The following example enables flow control on port 5. Console(config)#interface ethernet 1/5 Console(config-if)#flowcontrol Console(config-if)#no negotiation Console(config-if)# Related Commands capabilities (flowcontrol, symmetric) shutdown Use this command to disable an interface.
COMMAND LINE INTERFACE Example The following example disables port 5. Console(config)#interface ethernet 1/5 Console(config-if)#shutdown Console(config-if)# switchport broadcast Use this command to configure broadcast storm control. Use the no form to disable broadcast storm control. Syntax switchport broadcast packet-rate rate no switchport broadcast rate - Threshold level as a rate; i.e., packets per second.
INTERFACE COMMANDS Example The following shows how to configure broadcast storm control at 600 packets per second on port 5: Console(config)#interface ethernet 1/5 Console(config-if)#switchport broadcast packet-rate 600 Console(config-if)# show interfaces status Use this command to display the status for an interface. Syntax show interfaces status interface interface • ethernet unit/port - unit - This is device 1. - port - Port number.
COMMAND LINE INTERFACE Example Console#show interfaces status ethernet 1/7 Information of Eth 1/7 Basic information: Port type: 100tx Mac address: 00-30-f1-47-58-40 Configuration: Name: Port admin: Up Speed-duplex: Auto Capabilities: 10half, 10full, 100half, 100full, Broadcast storm: Enabled Broadcast storm limit: 500 packets/second Flow control: Disabled Lacp: Disabled Current status: Link status: Up Port operation status: Up Operation speed-duplex: 100full Flow control type: None Console# show interfaces
INTERFACE COMMANDS Example Console#show interfaces counters ethernet 1/7 Ethernet 1/ 7 Iftable stats: Octets input: 30658, Octets output: 196550 Unicast input: 6, Unicast output: 5 Discard input: 0, Discard output: 0 Error input: 0, Error output: 0 Unknown protos input: 0, QLen output: 0 Extended iftable stats: Multi-cast input: 0, Multi-cast output: 3064 Broadcast input: 262, Broadcast output: 1 Ether-like stats: Alignment errors: 0, FCS errors: 0 Single Collision frames: 0, Multiple collision frames: 0 SQ
COMMAND LINE INTERFACE Command Mode Normal Exec, Privileged Exec Example This example shows the configuration setting for Ethernet port 25.
ADDRESS TABLE COMMANDS bridge address Use this command to map a static address to a port in a VLAN. Use the no form to remove an address. Syntax bridge bridge-group address mac-address vlan vlan-id forward interface [action] no bridge bridge-group address address vlan vlan-id • • • • bridge-group - Bridge group index (bridge 1). mac-address - MAC address. vlan-id - VLAN ID (Range: 1-4094) interface • ethernet unit/port - unit - This is device 1. - port - Port number.
COMMAND LINE INTERFACE • Static addresses are bound to the assigned interface and will not be moved. When a static address is seen on another interface, the address will be ignored and will not be written to the address table. Example Console(config)#bridge 1 address 00-e0-29-94-34-de vlan 1 forward ethernet 1/1 delete-on-reset Console(config)# show bridge Use this command to view classes of entries in the bridge-forwarding database.
ADDRESS TABLE COMMANDS Command Usage • The MAC Address Table contains the MAC addresses associated with each interface. Note that the Type field may include the following types: • Learned - dynamic address entries • Permanent - static entry • Delete-on-reset - static entry to be deleted when system is reset • The maximum number of address entries is 8191.
COMMAND LINE INTERFACE bridge-group aging-time Use this command to set the aging time for entries in the address table. Use the no form to restore the default aging time. Syntax bridge-group bridge-group aging-time seconds no bridge-group bridge-group aging-time • bridge-group - Bridge group index (bridge 1). • seconds - Time is number of seconds (10-1000000).
SPANNING TREE COMMANDS Command Mode Privileged Exec Example Console#show bridge group 1 aging-time Aging time: 300 sec. Console# Spanning Tree Commands This section includes commands that configure the Spanning Tree Algorithm (STA) globally for the switch, and commands that configure STA for the selected interface.
COMMAND LINE INTERFACE bridge spanning-tree Use this command to enable STA globally for the switch. Use the no form to disable it. Syntax bridge bridge-group spanning-tree no bridge bridge-group spanning-tree bridge-group - Bridge group index (bridge 1). Default Setting Spanning tree is enabled. Command Mode Global Configuration Command Usage The Spanning Tree Algorithm (STA) can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers.
SPANNING TREE COMMANDS bridge forward-time Use this command to configure the spanning tree bridge forward time globally for this switch. Use the no form to restore the default. Syntax bridge bridge-group forward-time seconds no bridge bridge-group forward-time • bridge-group - Bridge group index (bridge 1). • seconds - Time in seconds. (Range: 4 - 30 seconds) • The minimum value is the higher of 4 or [(max-age / 2) + 1].
COMMAND LINE INTERFACE bridge hello-time Use this command to configure the spanning tree bridge hello time globally for this switch. Use the no form to restore the default. Syntax bridge bridge-group hello-time time no bridge bridge-group hello-time bridge-group - Bridge group index (bridge 1). time - Time in seconds, (range: 1 - 10 seconds). The maximum value is the lower of 10 or [(max-age / 2) -1].
SPANNING TREE COMMANDS • The minimum value is the higher of 6 or [2 x (hello-time + 1)]. • The maximum value is the lower of 40 or [2 x (forward-time - 1)]. Default Setting 20 seconds Command Mode Global Configuration Command Usage This command sets the maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All device ports (except for designated ports) should receive configuration messages at regular intervals.
COMMAND LINE INTERFACE Command Mode Global Configuration Command Usage Bridge priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device. However, if all devices have the same priority, the device with the lowest MAC address will then become the root device.
SPANNING TREE COMMANDS Command Usage • This command is used by the spanning-tree algorithm to determine the best path between devices. Therefore, lower values should be assigned to ports attached to faster media, and higher values assigned to ports with slower media. • Path cost takes precedence over port priority.
COMMAND LINE INTERFACE Example Console(config)#interface ethernet 1/5 Console(config-if)#bridge-group 1 priority 0 Console(config-if)# bridge-group portfast Use this command to set a port to fast forwarding. Use the no form to disable fast forwarding. Syntax bridge-group bridge-group portfast no bridge-group bridge-group portfast bridge-group - Bridge group index (bridge 1).
SPANNING TREE COMMANDS show bridge group Use this command to show the spanning tree configuration. Syntax show bridge group bridge-group [interface] • bridge-group - Bridge group index (bridge 1). • interface • ethernet unit/port - unit - This is device 1. - port - Port number.
COMMAND LINE INTERFACE Example Console#show bridge group 1 ethernet 1/11 Bridge-group information -------------------------------------------------------Spanning tree protocol :ieee8021d Spanning tree enable/disable :enable Priority :32768 Hello Time (sec.) :2 Max Age (sec.) :20 Forward Delay (sec.) :15 Designated Root :32768.0000e9000066 Curent root :0 Curent root cost :0 Number of topology changes :1 Last topology changes time (sec.):2167 Hold times (sec.
VLAN COMMANDS VLAN Commands A VLAN is a group of ports that can be located anywhere in the network, but communicate as though they belong to the same physical segment. This section describes commands used to create VLAN groups, add port members, specify how VLAN tagging is used, and enable automatic VLAN registration for the selected interface.
COMMAND LINE INTERFACE Command Function Mode Page Display VLAN Information show vlan Shows VLAN information NE, PE 3-103 show interfaces status vlan Displays status for the specified VLAN interface NE, PE 3-75 show interfaces switchport Displays the administrative and operational status of an interface NE, PE 3-77 vlan database Use this command to enter VLAN database mode. All commands in this mode will take effect immediately.
VLAN COMMANDS vlan Use this command to configure a VLAN. Use the no form to restore the default settings or delete a VLAN. Syntax vlan vlan-id [name vlan-name] media ethernet [state {active | suspend}] no vlan vlan-id [name | state] • vlan-id - ID of configured VLAN. (Range: 1-4094, no leading zeroes) • name - Keyword to be followed by the VLAN name. • vlan-name - ASCII string from 1 to 64 characters. • media ethernet - Ethernet media type. • state - Keyword to be followed by the VLAN state.
COMMAND LINE INTERFACE Example The following example adds a VLAN, using vlan-id 105 and name RD5. The VLAN is activated by default. Console(config)#vlan database Console(config-vlan)#vlan 105 name RD5 media ethernet Console(config-vlan)# Related Commands show vlan interface vlan Use this command to enter interface configuration mode for VLANs, and configure a physical interface. Syntax interface vlan vlan-id vlan-id - ID of the configured VLAN.
VLAN COMMANDS switchport mode Use this command to configure the VLAN membership mode for a port. Use the no form to restore the default. Syntax switchport mode {trunk | hybrid} no switchport mode • trunk - Specifies a port as an end-point for a VLAN trunk. A trunk is a direct link between two switches, so the port transmits and receives tagged frames that identify the source VLAN. • hybrid - Keyword that specifies a hybrid VLAN interface. The port may receive or transmit tagged or untagged frames.
COMMAND LINE INTERFACE switchport acceptable-frame-types Use this command to configure the acceptable frame types for a port. Use the no form to restore the default. Syntax switchport acceptable-frame-types {all | tagged} no switchport acceptable-frame-types • all - The port passes all frames, tagged or untagged. • tagged - The port only passes tagged frames.
VLAN COMMANDS switchport ingress-filtering Use this command to enable ingress filtering for an interface. Use the no form to restore the default. Syntax switchport ingress-filtering no switchport ingress-filtering Default Setting Disabled Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage • If ingress filtering is enabled, incoming frames for VLANs which do not include this ingress port in their member set will be discarded at the ingress port.
COMMAND LINE INTERFACE switchport native vlan Use this command to configure the PVID (i.e., default VLAN ID) for a port. Use the no form to restore the default. Syntax switchport native vlan vlan-id no switchport native vlan vlan-id - Default VLAN ID for a port.
VLAN COMMANDS switchport allowed vlan Use this command to configure VLAN groups on the selected interface. Use the no form to restore the default. Syntax switchport allowed vlan {add vlan-list [tagged | untagged] | remove vlan-list} no switchport allowed vlan • add vlan-list - List of VLAN identifiers to add. • remove vlan-list - List of VLAN identifiers to remove. Separate nonconsecutive VLAN identifiers with a comma and no spaces; use a hyphen to designate a range of IDs. Do not enter leading zeros.
COMMAND LINE INTERFACE switchport forbidden vlan Use this command to configure forbidden VLANs. Use the no form to remove the list of forbidden VLANs. Syntax switchport forbidden vlan {add vlan-list | remove vlan-list} no switchport forbidden vlan • add vlan-list - List of VLAN IDs to add. • remove vlan-list - List of VLAN IDs to remove. Separate nonconsecutive VLAN IDs with a comma and no spaces; use a hyphen to designate a range of IDs. Do not enter leading zeroes.
VLAN COMMANDS show vlan Use this command to show VLAN information. Syntax show vlan [id vlan-id | name vlan-name] • id - Keyword to be followed by the VLAN ID. - vlan-id - ID of the configured VLAN. (Range: 1-4094, no leading zeroes) • name - Keyword to be followed by the VLAN name. - vlan-name - ASCII string from 1 to 64 characters. Default Setting Shows all VLANs.
COMMAND LINE INTERFACE GVRP and Bridge Extension Commands GARP VLAN Registration Protocol defines a way for switches to exchange VLAN information in order to automatically register VLAN members on interfaces across the network. This section describes how to enable GVRP for individual interfaces and globally for the switch, as well as how to display default configuration settings for the Bridge Extension MIB.
GVRP AND BRIDGE EXTENSION COMMANDS Command Mode Interface Configuration (Ethernet, Port Channel) Example Console(config)#interface ethernet 1/1 Console(config-if)#switchport gvrp Console(config-if)# show gvrp configuration Use this command to show if GVRP is enabled. Syntax show gvrp configuration [interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) Default Setting Shows both global and interface-specific configuration.
COMMAND LINE INTERFACE garp timer Use this command to set the values for the join, leave and leaveall timers. Use the no form to restore the timers’ default values. Syntax garp timer {join | leave | leaveall} timer_value no garp timer {join | leave | leaveall} • {join | leave | leaveall} - Which timer to set. • timer_value - Value of timer.
GVRP AND BRIDGE EXTENSION COMMANDS Note: Set GVRP timers on all Layer 2 devices connected in the same network to the same values. Otherwise, GVRP will not operate successfully. Example Console(config)#interface ethernet 1/1 Console(config-if)#garp timer join 100 Console(config-if)# Related Commands show garp timer show garp timer Use this command to show the GARP timers for the selected interface. Syntax show garp timer [interface] interface • ethernet unit/port - unit - This is device 1.
COMMAND LINE INTERFACE Related Commands garp timer bridge-ext gvrp Use this command to enable GVRP. Use the no form to disable it. Syntax bridge-ext gvrp no bridge-ext gvrp Default Setting Disabled Command Mode Global Configuration Command Usage GVRP defines a way for switches to exchange VLAN information in order to register VLAN members on ports across the network. This function should be enabled to permit automatic VLAN registration, and to support VLANs which extend beyond the local switch.
IGMP SNOOPING COMMANDS Example Console#show bridge-ext Max support vlan numbers: 255 Max support vlan ID: 4094 Extended multicast filtering services: No Static entry individual port: Yes VLAN learning: IVL Configurable PVID tagging: Yes Local VLAN capable: No Traffic classes: Enabled Global GVRP status: Disabled GMRP: Disabled Console# IGMP Snooping Commands This switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts that want to receive a specific multicast service.
COMMAND LINE INTERFACE Command Function Mode Page ip igmp snooping query-interval Configures the query interval GC 3-115 ip igmp snooping query-max-response-ti me Configures the report delay GC 3-116 ip igmp snooping query-time-out Configures the query timeout GC 3-117 show ip igmp snooping Shows the IGMP snooping configuration PE 3-112 Mulitcast Router Commands ip igmp snooping vlan mrouter Adds a multicast router port GC 3-118 show ip igmp snooping Shows multicast router ports mrouter
IGMP SNOOPING COMMANDS ip igmp snooping vlan static Use this command to add a port to a multicast group. Use the no form to remove the port. Syntax ip igmp snooping vlan vlan-id static ip-address interface no ip igmp snooping vlan vlan-id static ip-address interface • vlan-id - VLAN ID (Range: 1-4094) • ip-address - IP address for multicast group • interface • ethernet unit/port - unit - This is device 1. - port - Port number.
COMMAND LINE INTERFACE ip igmp snooping version Use this command to configure the IGMP snooping version. Use the no form to restore the default. Syntax ip igmp snooping version {1 | 2} no ip igmp snooping version • 1 - IGMP Version 1 • 2 - IGMP Version 2 Default Setting IGMP Version 2 Command Mode Global Configuration Command Usage • All systems on the subnet must support the same version.
IGMP SNOOPING COMMANDS Command Mode Privileged Exec Example The following shows the current IGMP snooping configuration: Console#show ip igmp snooping Service status: Enabled Querier status: Enabled Query count: 2 Query interval: 125 sec Query max response time: 10 sec Query time-out: 300 sec IGMP snooping version: Version 2 Console# show bridge multicast Use this command to show known multicast addresses.
COMMAND LINE INTERFACE Example The following shows the multicast entries learned through IGMP snooping for bridge group 1, VLAN 1: Console#show bridge 1 multicast vlan 1 igmp-snooping VLAN M'cast IP addr. Member ports Type ---- --------------- ------------ ------1 224.1.2.3 Eth1/11 IGMP Console# ip igmp snooping querier Use this command to enable the switch as an IGMP snooping querier. Use the no form to disable it.
IGMP SNOOPING COMMANDS ip igmp snooping query-count Use this command to configure the query count. Use the no form to restore the default. Syntax ip igmp snooping query-count count no ip igmp snooping query-count count - The maximum number of queries issued for which there has been no response before the switch takes action to solicit reports.
COMMAND LINE INTERFACE Command Mode Global Configuration Example The following shows how to configure the query interval to 100 seconds: Console(config)#ip igmp snooping query-interval 100 Console(config)# ip igmp snooping query-max-response-time Use this command to configure the snooping report delay. Use the no form of this command to restore the default.
IGMP SNOOPING COMMANDS Related Commands ip igmp snooping version ip igmp snooping query-time-out Use this command to configure the snooping query-timeout. Use the no form of this command to restore the default. Syntax ip igmp snooping query-time-out seconds no ip igmp snooping query-time-out seconds - The time the switch waits after the previous querier has stopped querying before it takes over as the querier.
COMMAND LINE INTERFACE ip igmp snooping vlan mrouter Use this command to statically configure a multicast router port. Use the no form to remove the configuration. Syntax ip igmp snooping vlan vlan-id mrouter interface no ip igmp snooping vlan vlan-id mrouter interface • vlan-id - VLAN ID (Range: 1-4094) • interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) Default Setting No static multicast router ports are configured.
IGMP SNOOPING COMMANDS show ip igmp snooping mrouter Use this command to display information on statically configured and dynamically learned multicast router ports. Syntax show ip igmp snooping mrouter [vlan vlan-id] vlan-id - VLAN ID (Range: 1-4094) Default Setting Displays multicast router ports for all configured VLANs.
COMMAND LINE INTERFACE Priority Commands The commands described in this section allow you to specify which data packets have greater precedence when traffic is buffered in the switch due to congestion. This switch supports CoS with four priority queues for each port. Data packets in a port’s high-priority queue will be transmitted before those in the lower-priority queues.
PRIORITY COMMANDS Command Function Mode show map ip precedence Shows the IP precedence map PE 3-133 Page show map ip dscp Shows the IP DSCP map PE 3-134 switchport priority default Use this command to set a priority for incoming untagged frames, or the priority of frames received by the device connected to the specified interface. Use the no form to restore the default value.
COMMAND LINE INTERFACE • This switch provides four priority queues for each port. It is configured to use Weighted Round Robin, which can viewed with the queue bandwidth command. Inbound frames that do not have VLAN tags are tagged with the input port’s default ingress user priority, and then placed in the appropriate priority queue at the output port. The default priority for all ingress ports is zero.
PRIORITY COMMANDS Command Usage WRR allows bandwidth sharing at the egress port by defining scheduling weights. Example The following example shows how to assign WRR weights of 1, 3, 5 and 7 to the CoS priority queues 0, 1, 2 and 3: Console(config)#queue bandwidth 1 3 5 7 Console(config)# Related Commands show queue bandwith queue cos-map Use this command to assign class of service (CoS) values to the CoS priority queues. Use the no form set the CoS map to the default values.
COMMAND LINE INTERFACE Default Setting This switch supports Class of Service by using four priority queues, with Weighted Round Robin Queuing for each port. Eight separate traffic classes are defined in IEEE 802.1p. The default priority levels are assigned according to recommendations in the IEEE 802.1p standard as shown in the following table.
PRIORITY COMMANDS Related Commands show queue cos-map show queue bandwidth Use this command to display the weighted round-robin (WRR) bandwidth allocation for the four class of service (CoS) priority queues. Default Setting None Command Mode Privileged Exec Example Console#show queue bandwidth Queue ID Weight -------- -----0 1 1 4 2 16 3 64 Console# show queue cos-map Use this command to show the class of service priority map.
COMMAND LINE INTERFACE Command Mode Privileged Exec Example Console#show queue cos-map ethernet 1/11 Information of Eth 1/11 Queue ID Traffic class -------- ------------0 1 2 1 0 3 2 4 5 3 6 7 Console# map ip port (Global Configuration) Use this command to enable IP port mapping (i.e., class of service mapping for TCP/UDP sockets). Use the no form to disable IP port mapping.
PRIORITY COMMANDS map ip port (Interface Configuration) Use this command to set IP port priority (i.e., TCP/UDP port priority). Use the no form to remove a specific setting. Syntax map ip port port-number cos cos-value no map ip port port-number • port-number - 16-bit TCP/UDP port number.
COMMAND LINE INTERFACE map ip precedence (Global Configuration) Use this command to enable IP precedence mapping (i.e., IP Type of Service). Use the no form to disable IP precedence mapping. Syntax map ip precedence no map ip precedence Default Setting Disabled Command Mode Global Configuration Command Usage • The precedence for priority mapping is IP Port, IP Precedence or IP DSCP, and default switchport priority. • IP Precedence and IP DSCP cannot both be enabled.
PRIORITY COMMANDS • cos-value - Class-of-Service value (Range: 0-7) Default Setting The list below shows the default priority mapping. IP Precedence Value CoS Value 0 0 1 1 2 2 3 3 4 4 5 5 6 6 7 7 Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage • The precedence for priority mapping is IP Port, IP Precedence or IP DSCP, and default switchport priority.
COMMAND LINE INTERFACE map ip dscp (Global Configuration) Use this command to enable IP DSCP mapping (i.e., Differentiated Services Code Point mapping). Use the no form to disable IP DSCP mapping. Syntax map ip dscp no map ip dscp Default Setting Enabled Command Mode Global Configuration Command Usage • The precedence for priority mapping is IP Port, IP Precedence or IP DSCP, and default switchport priority. • IP Precedence and IP DSCP cannot both be enabled.
PRIORITY COMMANDS • cos-value - Class-of-Service value (Range: 0-7) Default Setting The list below shows the default priority mapping. Note that all the DSCP values that are not specified are mapped to CoS value 0.
COMMAND LINE INTERFACE show map ip port Use this command to show the IP port priority map. Syntax show map ip port [interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) Default Setting None Command Mode Privileged Exec Example The following shows that HTTP traffic has been mapped to CoS value 0: Console#show map ip port TCP port mapping status: disabled Port Port no.
PRIORITY COMMANDS show map ip precedence Use this command to show the IP precedence priority map. Syntax show map ip precedence [interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number.
COMMAND LINE INTERFACE show map ip dscp Use this command to show the IP DSCP priority map. Syntax show map ip dscp [interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) Default Setting None Command Mode Privileged Exec Example Console#show map ip dscp ethernet 1/1 DSCP mapping status: disabled Port DSCP COS --------- ---- --Eth 1/ 1 0 0 Eth 1/ 1 1 0 Eth 1/ 1 2 0 Eth 1/ 1 3 0 . . .
MIRROR PORT COMMANDS Mirror Port Commands This section describes how to configure port mirror sessions. Command Function Mode Page port monitor Configures a mirror session IC 3-135 PE 3-136 show port monitor Shows the configuration for a mirror port port monitor Use this command to configure a mirror session. Use the no form to clear a mirror session. Syntax port monitor interface [rx | tx | both] no port monitor interface • interface - ethernet unit/port (source port) - unit - Switch (unit 1).
COMMAND LINE INTERFACE • The destination port is set by specifying an Ethernet interface. • You can create up to nine mirror sessions, but all must share the same destination port. However, you should avoid sending too much traffic to the destination port from multiple source ports. • The source and destination ports have to be either both in the port range 1-24 or 49 or both in the port range 25-48 or 50.
PORT TRUNKING COMMANDS Example The following shows mirroring configured from port 6 to port 11: Console(config)#interface ethernet 1/11 Console(config-if)#port monitor ethernet 1/6 Console(config-if)#end Console#show port monitor Port Mirroring ------------------------------------Destination port(listen port):Eth1/1 Source port(monitored port) :Eth1/6 Mode :RX/TX Console# Related Commands port monitor Port Trunking Commands Ports can be statically grouped into an aggregate link to increase the bandwidth o
COMMAND LINE INTERFACE Command Function Mode Page Trunk Status Display Command show interfaces status Shows trunk information port-channel NE, PE 3-75 channel-group Use this command to add a port to a trunk. Use the no form to remove a port from a trunk. Syntax channel-group channel-id no channel-group channel-id - Trunk index (Range: 1-6) Default Setting A new trunk contains no ports.
PORT TRUNKING COMMANDS lacp Use this command to enable 802.3ad Link Aggregation Control Protocol (LACP) for the current interface. Use the no form to disable it. Syntax lacp no lacp Default Setting Disabled Command Mode Interface Configuration (Ethernet) Command Usage • Finish configuring a port trunk before you connect the corresponding network cables between switches. • You can configure up to six trunks, containing up to four ports as a dynamic LACP trunk.
COMMAND LINE INTERFACE Example The following shows LACP enabled on ports 11-13. Because LACP has also been enabled on the ports at the other end of the links, the show interfaces status port-channel 1 command shows that Trunk1 has been established.
APPENDIX A TROUBLESHOOTING Troubleshooting Chart Troubleshooting Chart Symptom Action Cannot connect using Telnet, Web browser, or SNMP software • Be sure to have configured the agent with a valid IP address, subnet mask and default gateway. • Be sure that your management station has management VLAN access to the switch (default is VLAN 1). • Check that you have a valid network connection to the switch and that the port you are using has not been disabled.
TROUBLESHOOTING Upgrading Firmware via the Serial Port The switch contains two firmware components that can be upgraded; the diagnostics (or Boot-ROM) code and runtime operation code. The runtime code can be upgraded via the switch’s RS-232 serial console port, via a network connection to a TFTP server, or using SNMP management software. The diagnostics code can be upgraded only via the switch’s RS-232 serial console port. Note: You can use the switch’s web interface to download runtime code via TFTP.
UPGRADING FIRMWARE VIA THE SERIAL PORT File Name S/Up Type Size Create Time --------------------------------- ---- ---- ---------- -------$logfile_1 0 3 64 00:00:07 $logfile_2 0 3 64 00:00:12 diag_0070 0 1 96500 00:06:37 diag_0074 1 1 97780 00:00:05 run_03024 0 2 1121956 00:21:41 run_10020 1 2 1124416 00:00:10 --------------------------------- ---- ---- ---------- -------[X]modem Download [D]elete File [S]et Startup File [R]eturn to Factory Default [C]hange Baudrate [Q]uit Select> 5.
TROUBLESHOOTING If using Windows HyperTerminal, click the “Transfer” button, and then click “Send File....” Select the XModem Protocol and then use the “Browse” button to select the required firmware code file from your PC system. The “Xmodem file send” window displays the progress of the download procedure. Note: The download file must be a SMC6750L2 binary software file from SMC. 10. After the file has been downloaded, you are prompted with “Update Image File:” to specify the type of code file.
UPGRADING FIRMWARE VIA THE SERIAL PORT 15. Press to quit the firmware-download mode and boot the switch.
TROUBLESHOOTING A-6
APPENDIX B PIN ASSIGNMENTS Console Port Pin Assignments The DB-9 serial port on the switch’s front panel is used to connect to the switch for out-of-band console configuration. The onboard menu-driven configuration program can be accessed from a terminal, or a PC running a terminal emulation program. The pin assignments used to connect to the serial port are provided in the following tables. Figure B-1.
PIN ASSIGNMENTS Console Port to 9-Pin DTE Port on PC Switch’s 9-Pin Serial Port 2 RXD 3 TXD 5 SGND Null Modem <---------TXD ----------------------RXD ----------> -----------SGND ---------- PC’s 9-Pin DTE Port 3 TXD 2 RXD 5 SGND No other pins are used. Console Port to 25-Pin DTE Port on PC Switch’s 9-Pin Serial Port 2 RXD 3 TXD 5 SGND Null Modem <---------TXD ----------------------RXD ----------> -----------SGND ---------- No other pins are used.
GLOSSARY 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3, 4, or 5 UTP cable. 100BASE-TX IEEE 802.3u specification for 100 Mbps Fast Ethernet over two pairs of Category 5 UTP cable. 1000BASE-T IEEE 802.3ab specification for Gigabit Ethernet over two pairs of Category 5, 5e 100-ohm UTP cable. 1000BASE-X IEEE 802.3 shorthand term for any 1000 Mbps Gigabit Ethernet based on 8B/ 10B signaling.
GLOSSARY Collision Domain Single CSMA/CD LAN segment. CSMA/CD Carrier Sense Multiple Access/Collision Detect is the communication method employed by Ethernet and Fast Ethernet. Dynamic Host Control Protocol (DHCP) Provides a framework for passing configuration information to hosts on a TCP/IP network. DHCP is based on the Bootstrap Protocol (BOOTP), adding the capability of automatic allocation of reusable network addresses and additional configuration options.
GLOSSARY that VLANs defined in each switch can work automatically over a Spanning Tree network. Generic Attribute Registration Protocol (GARP) GARP is a protocol that can be used by endstations and switches to register and propagate multicast group membership information in a switched environment so that multicast data frames are propagated only to those parts of a switched LAN containing registered endstations. Formerly called Group Address Registration Protocol.
GLOSSARY IEEE 802.3 Defines carrier sense multiple access with collision detection (CSMA/CD) access method and physical layer specifications. IEEE 802.3ab Defines CSMA/CD access method and physical layer specifications for 1000BASE-T Fast Ethernet. IEEE 802.3ac Defines frame extensions for VLAN tagging. IEEE 802.3u Defines CSMA/CD access method and physical layer specifications for 100BASE-TX Fast Ethernet. IEEE 802.
GLOSSARY subnetwork, one of the routers is made the “querier” and assumes responsibility for keeping track of group membership. In-Band Management Management of the network from a station attached directly to the network. IP Multicast Filtering A process whereby this switch can pass multicast traffic along to participating hosts. Layer 2 Data Link layer in the ISO 7-Layer Data Communications Protocol.
GLOSSARY Multicast Switching A process whereby the switch filters incoming multicast frames for services for which no attached host has registered, or forwards them to all ports contained within the designated multicast VLAN group. Out-of-Band Management Management of the network from a station not attached to the network. Port Mirroring A method whereby data on a target port is mirrored to a monitor port for troubleshooting with a logic analyzer or RMON probe.
GLOSSARY Transmission Control Protocol/Internet Protocol (TCP/IP) Protocol suite that includes TCP as the primary transport protocol, and IP as the network layer protocol. Trivial File Transfer Protocol (TFTP) A TCP/IP protocol commonly used for software downloads. Virtual LAN (VLAN) A Virtual LAN is a collection of network nodes that share the same collision domain regardless of their physical location or connection point in the network.
GLOSSARY Glossary-8
INDEX A I address table 2-30 IGMP, configuring 2-71 IP address BOOTP/DHCP service 2-11 setting 2-10 B BOOTP 2-11 broadcast storm, threshold 2-28 C Class of Service configuring 2-53 queue mapping 2-53 community string 2-69 configuration settings, saving or restoring 2-18 console port pin assignments B-1 D default priority, ingress port 2-54 default settings 1-13 DHCP 2-11 downloading software 2-16, A-2 F firmware upgrades A-2 firmware version, displaying 2-22 firmware, upgrading 2-16 H hardware versi
INDEX R V RADIUS, logon authentication 2-14 VLANs configuring 2-41 S serial port configuring 3-56 XModem downloads A-2 SNMP community string 2-69 enabling traps 2-70 trap manager 2-70 software downloads 2-16, A-2 software version, displaying 2-22 Spanning Tree Protocol 2-33 startup files displaying 2-16 setting 2-16 statistics, switch 2-79 system software downloading from server 2-16 T trap manager 2-70 troubleshooting A-1 trunk configuration 2-66 LACP 2-67 static 2-68 U upgrading software 2-16, A-2
FOR TECHNICAL SUPPORT, CALL: From U.S.A. and Canada (24 hours a day, 7 days a week) (800) SMC-4-YOU; (949) 679-8000; Fax: (949) 679-1481 From Europe (8:00 AM - 5:30 PM UK Time) 44 (0) 118 974 8700; Fax: 44 (0) 118 974 8701 INTERNET E-mail addresses: techsupport@smc.com european.techsupport@smc-europe.com Driver updates: http://www.smc.com/index.cfm?action=tech_support_drivers_downloads World Wide Web: http://www.smc.com/ http://www.smc-europe.com/ FOR LITERATURE OR ADVERTISING RESPONSE, CALL: U.S.A.