CheetahSwitch Workgroup-3726M Management Guide
Management Guide CheetahSwitch Workgroup-3726M Intelligent Stackable Fast Ethernet Switch with 24 10BASE-T / 100BASE-TX (RJ-45) Ports, and Optional Media Expansion and Stack Modules
Copyright © 2002 by Accton Technology Corporation. All rights reserved. No part of this document may be copied or reproduced in any form or by any means without the prior written consent of Accton Technology Corporation. Accton makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability, quality, or fitness for any particular purpose. The information in this document is subject to change without notice.
Limited Warranty Accton Technology Corporation Limited Warranty: Accton warrants all is products to be free of manufacturing defects in workmanship and materials, under normal use and service, for the applicable warranty term. All Accton products carry a standard 90-day limited warranty from the date of purchase from Accton or its Authorized Reseller.
Limited Warranty NEGLECT, IMPROPER INSTALLATION OR TESTING, UNAUTHORIZED ATTEMPTS TO REPAIR, OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING, OR OTHER HAZARD.
Contents Switch Management Configuration Options Required Connections Console Port (Out-of-Band) Connections In-Band Connections Using the System Configuration Program Login Screen Console Configuration Navigation Keys and Buttons Main Menu System Information Menu Displaying System Information Displaying Switch Version Information Management Setup Menu Changing the Network Configuration IP Configuration IP Connectivity Test (Ping) HTTP Configuration Configuring the Serial Port Assigning SNMP Parameters Conf
Contents Configuring Traffic Classes Port Priority Configuration 802.1P Port Traffic Class Information Configuring Virtual LANs 802.1Q VLAN Base Information 802.1Q VLAN Current Table Information 802.1Q VLAN Static Table Configuration 802.
Contents Spanning Tree Algorithm (STA) Spanning Tree Information Spanning Tree Ports Spanning Tree Configuration Switch When the Switch Becomes Root STA Port Configuration Configuring Bridge MIB Extensions Bridge Capability Bridge Settings Priority Port Priority Configuration Port Traffic Class Information Configuring Virtual LANs VLAN Basic Information VLAN Current Table VLAN Static List VLAN Static Table VLAN Static Membership by Port VLAN Port Configuration IGMP Multicast Filtering Configuring IGMP IP Mu
Contents Forwarding Tagged/Untagged Frames Connecting VLAN Groups Multicast Filtering IGMP Snooping IGMP Protocol Class-of-Service (CoS) Support Port Trunks SNMP Management Software Remote Monitoring 4-4 4-4 4-5 4-5 4-5 4-6 4-6 4-6 4-7 Troubleshooting Troubleshooting Chart Upgrading Firmware via the Serial Port A-1 A-1 A-2 Pin Assignments Console Port Pin Assignments DB-9 Port Pin Assignments Console Port to 9-Pin DTE Port on PC Console Port to 25-Pin DTE Port on PC B-1 B-1 B-1 B-1 B-1 Glossary Index
Chapter 1: Switch Management Configuration Options For advanced management capability, the Management Module provides a menu-driven system configuration program. This program can be accessed by a direct connection to the serial port on the rear panel (out-of-band), or by a Telnet connection over the network (in-band). The management agent is based on SNMP (Simple Network Management Protocol).
Switch Management In-Band Connections Prior to accessing the Management Module via a network connection, you must first configure it with a valid IP address, subnet mask, and default gateway using an out-of-band connection or the BOOTP protocol. Note: By default BOOTP is disabled and the IP address is set to 10.1.0.1. To enable BOOTP, see “IP Configuration” on page 2-11.
Chapter 2: Using the System Configuration Program Login Screen Once a direct connection to the serial port or a Telnet connection is established, the login screen for the on-board configuration program appears as shown below. AAAAAAA AAAAAAAAAA AAAAA AAAA AAAAA AAAA AAAAA AAAA CCCCCCC AAAAA AAAA CC CC AAAAA AAAA CC AAAAA AAAA CC AAAAA AAAAAAAA CC CC AAAAA AAAAAAAAA CCCCCCC V2.
Using the System Configuration Program After you enter the user name and password, you will have access to the system configuration program as illustrated by the following menu hierarchy: System Information Menu Management Setup Menu Device Control Menu Network Monitor Menu System Information Switch Information Network Configuration Serial Port Configuration SNMP Configuration Console Login Configuration TFTP Download Configuration Save & Restore Management Configuration Banner Message Configuration P
Console Configuration Navigation Keys and Buttons Console Configuration Navigation Keys and Buttons Menu items and configurable parameters in any screen can be selected by using or the arrow keys. As you select each field, help information for the item is displayed in the highlighted line at the bottom of the screen. To change a setting, type in the parameter field or scroll through fixed options using the bar.
Using the System Configuration Program Main Menu With the system configuration program you can define system parameters, manage and control the switch, the connected stack and all its ports, or monitor network conditions. The figure below of the Main Menu and the following table briefly describe the selections available from this program. Note: Options for the currently selected item are displayed in the highlighted area at the bottom of the interface screen. Main Menu ========= System Information Menu..
Main Menu Menu Description Device Control Menu Port Configuration Enables any port, enables/disables flow control, and sets communication mode to auto-negotiation, full duplex or half duplex. Port Information Displays operational status, including link state, flow control method, and duplex mode.
Using the System Configuration Program System Information Menu Use the System information Menu to display a basic description of the switch, including contact information, and hardware/firmware versions. System Information Menu ======================= System Information ... Switch Information ... Use or arrow keys to move. to select. Menu Description System Information Provides basic system description, including contact information.
System Information Menu Displaying System Information Use the System Information screen to display descriptive information about the switch, or for quick system identification as shown in the following figure and table. System Information ================== System Description : CheetahSwitch Workgroup 3726M System Object ID : 1.3.6.1.4.1.259.6.10.
Using the System Configuration Program Displaying Switch Version Information Use the Switch Information screen to display hardware/firmware version numbers for the main board, as well as the power status. Switch Information : Unit 1 ================== Main Board Hardware Version Firmware Version Serial Number Port Number Internal Power Status Redundant Power Status Expansion Slot 1 Expansion Slot 2 : : : : : : : : V3.0 V1.
Management Setup Menu Management Setup Menu After initially logging onto the system, adjust the communication parameters for your console to ensure a reliable connection (Serial Port Configuration). Specify the IP addresses for the switch (Network Configuration / IP Configuration), and then set the Administrator and Guest passwords (Console Login Configuration). Remember to record them in a safe place.
Using the System Configuration Program Changing the Network Configuration Use the Network Configuration menu to set the bootup option, configure the switch’s Internet Protocol (IP) parameters, enable the on-board Web agent, or to set the number of concurrent Telnet sessions allowed. The screen shown below is described in the following table. Network Configuration ===================== IP Configuration ... IP Connectivity Test(Ping) ... HTTP Configuration ...
Management Setup Menu IP Configuration Use the IP Configuration screen to set the bootup option, or configure the switch’s IP parameters. The screen shown below is described in the following table. Network Configuration : IP Configuration ======================================== Interface Type : Ethernet IP Address : 10.2.13.19 Subnet Mask : 255.255.252.0 Gateway IP : IP State : USER-CONFIG Use or arrow keys to move, other keys to make changes.
Using the System Configuration Program IP Connectivity Test (Ping) Use the IP Connectivity Test to see if another site on the Internet can be reached. The screen shown below is described in the following table. Network Configuration : IP Connectivity Test (Ping) =================================================== IP Address : Test Times : 1 Interval : 3 Success Failure : 0 : 0 [Start] Use or arrow keys to move, other keys to make changes.
Management Setup Menu HTTP Configuration Use the HTTP Configuration screen to enable/disable the on-board Web agent, and to specify the TCP port that will provide HTTP service. The screen shown below is described in the following table. Network Configuration : HTTP Configuration ========================================== HTTP Server : ENABLED HTTP Port Number : 80 Use or arrow keys to move, to scroll options.
Using the System Configuration Program Configuring the Serial Port You can access the on-board configuration program by attaching a VT100 compatible device to the switch’s serial port. (For more information on connecting to this port, see “Required Connections” on page 1-1.) The communication parameters for this port can be accessed from the Serial Port Configuration screen shown below and described in the following table.
Management Setup Menu Assigning SNMP Parameters Use the SNMP Configuration screen to display and modify parameters for the Simple Network Management Protocol (SNMP). The switch includes an on-board SNMP agent which monitors the status of its hardware, as well as the traffic passing through its ports. A computer attached to the network, called a Network Management Station (NMS), can be used to access this information. Access rights to the on-board agent are controlled by community strings.
Using the System Configuration Program Configuring Community Names The following figure and table describe how to configure the community strings authorized for management access. Up to 5 community names may be entered. SNMP Configuration : SNMP Communities ===================================== Community Name 1. 2. 3. 4. 5. public Access READ/WRITE Status ENABLED Use or arrow keys to move, other keys to make changes.
Management Setup Menu Configuring IP Trap Managers The following figure and table describe how to specify management stations that will receive authentication failure messages or other trap messages from the switch. Up to 5 trap managers may be entered. SNMP Configuration : IP Trap Managers ===================================== IP Address Community Name Status 1. 2. 3. 4. 5. Use or arrow keys to move, other keys to make changes.
Using the System Configuration Program Console Login Configuration Use the Management Setup: Console Login Configuration to restrict management access based on specified user names and passwords, or to set the invalid password threshold and time-out. There are only two user types defined, ADMIN (Administrator) and GUEST, but you can set up to five different user names and passwords. Only Administrators have write access for parameters governing the switch.
Management Setup Menu Downloading System Software Using TFTP to Download Over the Network Use the TFTP Download menu to load software updates into the switch. The download file should be an CheetahSwtich Workgroup-3726M binary file from Accton; otherwise the agent will not accept it. The success of the download operation depends on the accessibility of the TFTP server and the quality of the network connection. After downloading the new software, the agent will automatically restart itself.
Using the System Configuration Program Saving the System Configuration Use the Configuration Save & Restore menu to save the switch configuration settings to a file on a TFTP server. The file can be later downloaded to the switch to restore the switch’s settings. The success of the operation depends on the accessibility of the TFTP server and the quality of the network connection. Parameters shown on this screen are indicated in the following figure and table.
Configuring the Switch Configuring the Switch The Device Control menu is used to control a broad range of functions, including port configuration, Spanning Tree, port mirroring, multicast filtering, and Virtual LANs. Each of the setup screens provided by these configuration menus are described in the following sections. Device Control Menu =================== Port Configuration ... Port Information ... Spanning Tree Configuration ... Spanning Tree Information ... Mirror Port Configuration ...
Using the System Configuration Program Configuring Port Parameters Use the Port Configuration menus to set or display communication parameters for any port or module in the stack.
Configuring the Switch Viewing the Current Port Configuration The Port Information screen displays the port type, status, link state, and flow control in use, as well as the communication speed and duplex mode. To change any of the port settings, use the Port Configuration menu.
Using the System Configuration Program Using the Spanning Tree Algorithm The Spanning Tree Algorithm can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices (that is, an STA-compliant switch, bridge or router) in your network to ensure that only one route exists between any two stations on the network.
Configuring the Switch Parameter Default Description Hello Time 2 Time interval (in seconds) at which the root device transmits a configuration message. The minimum value is1. The maximum value is the lower of 10 or [(Max. Message Age / 2) -1]. Max (Message) Age 20 The maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All device ports (except for designated ports) should receive configuration messages at regular intervals.
Using the System Configuration Program Configuring STA for Ports The following figure and table describe port STA configuration.
Configuring the Switch Viewing the Current Spanning Tree Information The Spanning Tree Information screen displays a summary of the STA information for the overall bridge or for a specific port. To make any changes to the parameters for the Spanning Tree, use the Spanning Tree Configuration menu. < Spanning Tree Information Menu > Spanning Tree Bridge State Spanning Tree Port State Use or arrow keys to move. to select.
Using the System Configuration Program Displaying the Current Bridge STA The parameters shown in the following figure and table describe the current Bridge STA State. Spanning Tree Information : STA Bridge Information ================================================== Priority Hello Time (in seconds) Max Age (in seconds) Forward Delay (in seconds) Hold Time (in seconds) Designated Root Root Cost Root Port Reconfig Counts Topology Up Time : : : : : : : : : : 32768 2 20 15 1 32768.
Configuring the Switch Displaying the Current STA for Ports The parameters shown in the following figure and table are for port STA Information. Spanning Tree Port Information : Unit 1 Port ============================== Port Type 1 - 12 Designated Designated Designated Cost Bridge Port -------------------------------------------------------------------------1 10/100TX NO LINK 0 32768.0010B5FD84BB 128.1 2 10/100TX NO LINK 0 32768.0010B5FD84BB 128.2 3 10/100TX NO LINK 0 32768.0010B5FD84BB 128.
Using the System Configuration Program Parameter Description Designated Bridge (ID) The priority and MAC address of the device through which this port must communicate to reach the root of the Spanning Tree. Designated Port (ID) The priority and number of the port on the designated bridging device through which this switch must communicate with the root of the Spanning Tree. Using a Mirror Port for Analysis You can mirror traffic from any source port to a target port for real-time analysis.
Configuring the Switch Configuring Port Trunks Port trunks can be used to increase the bandwidth of a network connection or to ensure fault recovery. You can configure up to five trunk connections (combining 2~4 ports into a fat pipe) between any two standalone CheetahSwtich Workgroup-3726M switches, or up to 12 for an entire stack. However, before making any physical connections between devices, use the Trunk Configuration menu to specify the trunk on the devices at both ends.
Using the System Configuration Program You can use the Port Trunking Configuration screen to set up port trunks as shown below: Port Trunking Configuration =========================== Trunk ID Status 1 ----------Unit : Port : -- Member List 2 3 ----------- ----------Unit : Unit : Port : -Port : -- 4 ----------Unit : Port : -- ---------- --------------- -- -------- Unit : Port : -- Unit : Port : -- Unit : Port : -- Unit : Port : -- -- -------- Unit : Port : -- Unit : Port : -- Unit : Port : -
Configuring the Switch The RJ-45 ports used for one side of a trunk must all be on the same internal switch chip. The port groups permitted include: Group 1 Group 2 Group 3 1, 2, 3, 4, 13, 14, 15, 16 5, 6, 7, 8, 17, 18, 19, 20 9, 10, 11, 12, 21, 22, 23, 24 The 100BASE-FX fiber ports used for one side of a trunk must all be on the same module. However, the 1000BASE-SX and 1000BASE-LX ports used for one side of a trunk may be on any switch in the stack, or both on the same switch if used standalone.
Using the System Configuration Program IGMP Multicast Filtering Multicasting is used to support real-time applications such as video conferencing or streaming audio. A multicast server does not have to establish a separate connection with each client. It merely broadcasts its service to the network, and any hosts which want to receive the multicast register with their local multicast switch/ router.
Configuring the Switch Configuring Broadcast Storm Control Use the Broadcast Storm Control Configuration screen to enable broadcast storm control for any port on the switch, as shown below.
Using the System Configuration Program Configuring Bridge MIB Extensions The Bridge MIB includes extensions for managed devices that support Traffic Classes and Virtual LANs. To display and configure these extensions, use the Extended Bridge Configuration screen as shown below.
Configuring the Switch Configuring Traffic Classes IEEE 802.1P defines up to 8 separate traffic classes. This switch supports Quality of Service (QoS) by using two priority queues, with Weighted Fair Queuing for each port. You can use the 802.1P Configuration menu to configure the default priority for each port, or to display the mapping for the traffic classes as described in the following sections. 802.1P Configuration ==================== 802.1P Port Priority Configuration ... 802.
Using the System Configuration Program Port Priority Configuration Inbound frames that do not have any VLAN tags are tagged with the input port’s default VLAN ID (PVID) and the Default Ingress User Priority as shown in the following menu, and then sorted into the appropriate priority queue at the output port. (Note that if the output port is an untagged member of the associated VLAN, these frames are stripped of all VLAN tags prior to transmission.) The default priority for all ingress ports is zero.
Configuring the Switch 802.1P Port Traffic Class Information This switch provides two priority levels with Weighted Fair Queuing for port egress. This means that any frames with a priority tag from 0~3 are sent to the low priority queue “0” while those from 4~7 are sent to the high priority queue “1” as shown in the following screen. 802.
Using the System Configuration Program Configuring Virtual LANs You can use the VLAN configuration menu to assign any port on the switch to any of up to 256 LAN groups. In conventional networks with routers, broadcast traffic is split up into separate domains. Switches do not inherently support broadcast domains. This can lead to broadcast storms in large networks that handle traffic such as IPX or NetBeui. By using IEEE 802.
Configuring the Switch 802.1Q VLAN Current Table Information This screen shows the current port members of each VLAN and whether or not the port supports VLAN tagging. Ports assigned to a large VLAN group that crosses several switches should use VLAN tagging. However, if you just want to create a small port-based VLAN for one or two switches, you can assign ports to the same untagged VLAN. The current configuration is shown in the following screen. < 802.
Using the System Configuration Program 802.1Q VLAN Static Table Configuration Use this screen to create a new VLAN or modify the settings for an existing VLAN. You can add/delete port members for a VLAN from any unit in the stack as a tagged or untagged member. Or you can prevent a port from being automatically added to a VLAN by the GVRP protocol. 802.1Q VLAN Static Table Configuration ====================================== VID VLAN Name Status -----------------------------1 Active Unit 1. 2. 3. 4.
Configuring the Switch For example, the following screen displays settings for VLAN 2, which includes untagged ports 1-6, and forbidden port 8. 802.1Q VLAN Static Table Configuration ====================================== VID VLAN Name Status -----------------------------2 Active Unit Egress Ports 1. 111111000000 000000000000 00-2. ------------ ------------ ---3. ------------ ------------ ---4. ------------ ------------ ---Unit Untagged Ports 1. 111111000000 000000000000 00-2.
Using the System Configuration Program 802.1Q VLAN Port Configuration Use this screen to configure port-specific settings for IEEE 802.1Q VLAN features. 802.
Configuring the Switch Port Security Configuration Use the Port Security Configuration screen to enable and configure port security for the switch. Port Security allows you to configure each port with a list of MAC addresses of devices that are authorized to access the network through that port.
Using the System Configuration Program Monitoring the Switch The Network Monitor Menu provides access to port statistics, RMON statistics, IP multicast addresses, and the static address table. Each of the screens provided by these menus is described in the following sections. Network Monitor Menu ==================== Port Statistics ... RMON Statistics ... Unicast Address Table ... Multicast Address Registration Table ... IP Multicast Registration Table ... Static Unicast Address Table Configuration ...
Monitoring the Switch Displaying Port Statistics Port Statistics display key statistics from the Ethernet-like MIB for each port. Error statistics on the traffic passing through each port are displayed. This information can be used to identify potential problems with the switch (such as a faulty port or unusually heavy loading). The values displayed have been accumulated since the last system reboot. Select the required port. The statistics displayed are indicated in the following figure and table.
Using the System Configuration Program Menu Description Internal Mac Receive Errors The number of frames for which reception failed due to an internal MAC sublayer receive error. * The reported values will always be zero because these statistics are not supported by the internal chip set. Note: Statistics are automatically refreshed every 5 seconds (see page 2-14). Displaying RMON Statistics Use the RMON Statistics screen to display key statistics for each port from RMON group 1.
Monitoring the Switch Menu Description Jabbers The total number of frames received that were longer than 1518 octets (excluding framing bits, but including FCS octets), and had either an FCS or alignment error. Collisions The best estimate of the total number of collisions on this Ethernet segment. 64 Byte Frames The total number of frames (including bad packets) received and transmitted that were 64 octets in length (excluding framing bits but including FCS octets).
Using the System Configuration Program Displaying the Unicast Address Table The Address Table contains the MAC addresses and VLAN identifier associated with each port (that is, the source port associated with the address and VLAN), sorted by MAC address or VLAN ID. You can search for a specific address, clear the entire address table, or information associated with a specific address, or set the aging time for deleting inactive entries.
Monitoring the Switch Menu Description [Clear] Clears address table entries according to the settings on the right-hand side of the screen. Use or the arrow keys to select the “Cleared by” field, then use the to select the primary key, MAC or VID. In the VLAN ID field, set the ID to clear the table of all entries in a specific VLAN. In the MAC field, set a specific MAC address to clear from the table. Select the [Clear] field and press to remove entries from the table.
Using the System Configuration Program Configuring Static Unicast Addresses Use the Static Unicast Address Table Configuration screen to manually configure host MAC addresses in the unicast table. You can use this screen to associate a MAC address with a specific VLAN ID and switch port as shown below.
Resetting the System Resetting the System Use the Restart command under the Main Menu to reset the management agent. The reset screen includes options as shown in the following figure and table. System Restart Menu =================== Restart Option : POST Reload Factory Defaults Keep IP Setting Keep User Authentication : : : : YES NO NO NO [Restart] Use or arrow keys to move, to scroll options.
Using the System Configuration Program 2-54
Chapter 3: Web-Based Management Web-Based Configuration and Monitoring As well as the menu-driven system configuration program, the agent module provides an embedded HTTP Web agent. This agent can be accessed by any computer on the network using a standard Web browser (Internet Explorer 4.0 or above, or Netscape Navigator 4.0 or above). Using the Web browser management interface you can configure a switch and view statistics to monitor network activity.
Web-Based Management Navigating the Web Browser Interface To access the Web-browser interface you must first enter a user name and password. The default user name is “admin,” with no password.” The administrator has Read/Write access to all configuration parameters and statistics. Home Page When your Web browser connects with the switch’s Web agent, the home page is displayed as shown below.
Panel Display Configuration Options Configurable parameters have a dialog box or a drop-down list. Once a configuration change has been made on a page, be sure to click on the “Apply” button at the bottom of the page to confirm the new setting. The following table summarizes the Web page configuration buttons. Web Page Configuration Buttons Button Action Apply Sets specified values in the management agent. Revert Cancels specified values prior to pressing the “Apply” button.
Web-Based Management Port State Display Click on any port to display a summary or port status as shown below, as well as Etherlike statistics (page 3-42) and RMON statistics (page 3-43). Parameter Description Type Shows port type as: Admin Status Shows if the port is enabled, or has been disabled due to abnormal behavior or for security reasons. See “Port Configuration” on page 3-34. Link Status Indicates if the port has a valid connection to an external device.
Panel Display Console Configuration If you are having difficulties making an out-of-band console connection to the serial port on the agent module, you can display or modify the current settings for the serial port through the Web agent. Click on the management module icon in the switch image to display or configure these settings, as shown below. Parameter Default Baud rate 19200 bps Description The rate at which data is sent between devices. Options : 2400, 4800, 9600, 19200, and auto detection.
Web-Based Management Main Menu Using the on-board Web agent, you can define system parameters, manage and control the switch, the connected stack and all its ports, or monitor network conditions. The following table briefly describes the selections available from this program. Menu Description System Provides basic system description, including contact information. Switch Shows hardware/firmware version numbers, power status, and expansion modules in use.
System Information System Information Use the System Information screen to display descriptive information about the switch, or for quick system identification as shown in the following figure and table. Parameter Description System Name* Name assigned to the switch system. IP Address IP address of the agent you are managing. The agent supports SNMP over UDP/ IP transport protocol.
Web-Based Management Switch Information Use the Switch Information screen to display hardware/firmware version numbers for the main board, as well as the power status and modules plugged into the system. Main Board Parameter Description Serial Number Serial number of the main board. Number of Ports Number of switch ports (including modules). Hardware Version Hardware version of the main board. Firmware Version Main board system firmware version in ROM.
Switch Information Expansion Slot Parameter Description Expansion Slot 1 Shows module type if inserted (100BASE-FX, 1000BASE-SX or 1000BASE-LX). 2-Port 100Base-FX-SC(MMF) 1-Port 1000Base-SX-SC 1-Port 1000Base-LX-SC Expansion Slot : 100BASE-FX (multimode) : 1000BASE-SX (multimode) : 1000BASE-LX (singlemode) Shows module type if inserted (100BASE-FX, 1000BASE-SX, 1000BASE-LX or Stacking).
Web-Based Management IP Configuration Use the IP Configuration screen to set the bootup option, configure the IP address for the on-board management agent, or set the number or concurrent Telnet sessions allowed. The screen shown below is described in the following table. Parameter Default Description IP State USER-CONFIG Specifies whether IP functionality is enabled via manual configuration, or set by Boot Protocol (BOOTP).
SNMP Configuration SNMP Configuration Use the SNMP Configuration screen to display and modify parameters for the Simple Network Management Protocol (SNMP). The stack should include an SNMP agent module which monitors the status of its hardware, as well as the traffic passing through its ports. A computer attached to the network, called a Network Management Station (NMS), can be used to access this information. Access rights to the agent module are controlled by community strings.
Web-Based Management Trap Managers The following figure and table describe how to specify management stations that will receive authentication failure messages or other trap messages from the switch. Up to 5 trap managers may be entered. Parameter Description Trap Manager Capability Up to 5 trap managers may be used. Trap Manager IP Address IP address of the trap manager. Trap Manager Community A community authorized to receive trap messages.
Firmware Upgrade Options Firmware Upgrade Options You can upgrade system firmware via a Web browser, a TFTP server, or a direct connection to the console port. Web Upload Management Use the Web Upload Management menu to load software updates into the switch. The upload file should be an CheetahSwtich Workgroup-3726M binary file from Accton; otherwise the agent will not accept it. The success of the upload operation depends on the quality of the network connection.
Web-Based Management Configuration Save and Restore Use the Configure screen to save the switch configuration settings to a file on a TFTP server. The file can be later downloaded to the switch to restore the switch’s settings. The success of the operation depends on the accessibility of the TFTP server and the quality of the network connection. Configuration Upload Management Use the Configuration Upload Management to save the switch configuration to a file on a TFTP sever.
Address Table Configuration Address Table Configuration The Address Table contains the unicast MAC addresses and VLAN identifier associated with each port (that is, the source port), sorted by MAC address or VLAN. You can also clear the entire address table, or information associated with a specific address; or set the aging time for deleting inactive entries. The information displayed in the Address Table is indicated in the following figure and table.
Web-Based Management Spanning Tree Algorithm (STA) The Spanning Tree Algorithm can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices (that is, STA-compliant switch, bridge or router) in your network to ensure that only one route exists between any two stations on the network. For a more detailed description of how to use this algorithm, refer to “Spanning Tree Algorithm” on page 4-1.
Spanning Tree Algorithm (STA) Ports The parameters shown in the following figure and table are for port STA Information. Parameter Description Port Status Displays the current state of this port within the spanning tree: No Link Disabled No link has been established on this port. Port has been disabled by the user or has failed diagnostics. Blocked Port receives STA configuration messages, but does not forward packets.
Web-Based Management Spanning Tree Configuration The following figures and tables describe Bridge STA configuration. Switch Parameter Default Usage Enabled Description Enable this parameter to participate in an STA compliant network. Priority 32,768 Device priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device. (Remember that the lower the numeric value, the higher the priority.
Spanning Tree Algorithm (STA) STA Port Configuration The following figure and table describe STA configuration for ports or modules. Parameter Default Description Fast Forwarding Mode (All Ports) Enabled See “Fast Forward” in this table. Priority 128 Defines the priority for the use of a port in the STA algorithm. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the spanning tree.
Web-Based Management Configuring Bridge MIB Extensions The Bridge MIB includes extensions for managed devices that support Traffic Classes and Virtual LANs. To display and configure these extensions, use the Bridge Extension screen as shown below: Bridge Capability Parameter Description Extended Multicast Filtering Services* Enables filtering of individual multicast addresses based on GMRP (GARP Multicast Registration Protocol).
Configuring Bridge MIB Extensions Bridge Settings Parameter Description Traffic Classes* Multiple traffic classes are supported by this switch as indicated under Bridge Capabilities. However, you can disable this function by clearing the check box for this parameter. GMRP* GARP Multicast Registration Protocol (GMRP) allows network devices to register endstations with multicast groups. IGMP Snooping is currently used by this switch to provide automatic multicast filtering.
Web-Based Management Priority IEEE 802.1P defines up to 8 separate traffic classes. This switch supports Quality of Service (QoS) by using two priority queues, with Weighted Fair Queuing for each port. You can use the Priority Menu to configure the default priority for each port, or to display the mapping for the traffic classes.
Priority Port Traffic Class Information This switch provides two priority levels with Weighted Fair Queuing for port egress. This means that any frames with a default or user priority from 0~3 are sent to the low priority queue “0” while those from 4~7 are sent to the high priority queue “1” as shown in the following screen. Parameter Description Port Numeric identifier for switch port. User Priority Shows that user priorities 0~3 specify the low priority queue and 4~7 specify the high priority queue.
Web-Based Management Configuring Virtual LANs You can use the VLAN configuration menu to assign any port on the switch to any of up to 256 LAN groups. In conventional networks with routers, broadcast traffic is split up into separate domains. Switches do not inherently support broadcast domains. This can lead to broadcast storms in large networks that handle a lot of NetBeui or IPX traffic. By using IEEE 802.
Configuring Virtual LANs VLAN Current Table This screen shows the current port members of each VLAN and whether or not the port supports VLAN tagging. Ports assigned to a large VLAN group that crosses several switches should use VLAN tagging. However, if you just want to create a small port-based VLAN for one or two switches, you can assign ports to the same untagged VLAN. The current configuration is shown in the following screen.
Web-Based Management VLAN Static List Use this screen to create or remove VLAN groups. Parameter Description Current Lists all the current VLAN groups created for this system. Up to 256 VLAN groups can be defined. To allow this switch to participate in a VLAN group that extends beyond this switch, you must add the VLAN ID for the required external groups. New Allows you to specify the name and numeric identifier for a new VLAN group.
Configuring Virtual LANs VLAN Static Table Use this screen to modify the settings for an existing VLAN. You can add/delete port members for a VLAN from any unit in the stack. (Note that VLAN 1 is fixed as an untagged VLAN containing all ports in the stack, and cannot be modified via this screen.) Parameter VLAN Description The ID for the VLAN currently displayed. Range: 1-2048 Name A user-specified symbolic name for this VLAN.
Web-Based Management Use the menu shown below to prevent a port from being dynamically added to the displayed VLAN group through GVRP. Parameter Description Forbidden Egress Ports Prevents a port from being automatically added to this VLAN via GVRP. Note that GVRP is not supported by the current firmware version. Add Adds the port selected in the non-members list to the members list. Remove Removes the port selected in the members list and places it in the non-members list.
Configuring Virtual LANs VLAN Static Membership by Port Use the screen shown below to assign VLAN groups to the selected port. To perform detailed port configuration for a specific VLAN, use the VLAN Static Table (page 3-27). Parameter Description Port Number Port number on the switch selected from the upper display panel. Add/Remove Add or remove selected VLAN groups for the port indicated in the Port Number field.
Web-Based Management VLAN Port Configuration Use this screen to configure port-specific settings for IEEE 802.1Q VLAN features. Parameter Description PVID The VLAN ID assigned to untagged frames received on this port. Use the PVID to assign ports to the same untagged VLAN. Acceptable Frame Type This switch accepts “All” frame types, including VLAN tagged or VLAN untagged frames. Note that all VLAN untagged frames received on this port are assigned to the PVID for this port.
IGMP Multicast Filtering IGMP Multicast Filtering Multicasting is used to support real-time applications such as video conferencing or streaming audio. A multicast server does not have to establish a separate connection with each client. It merely broadcasts its service to the network, and any hosts that want to receive the multicast register with their local multicast switch/ router.
Web-Based Management IP Multicast Registration Table Use the IP Multicast Registration Table to display all the multicast groups active on this switch, including multicast IP addresses and the corresponding VLAN ID. Parameter Description VLAN ID VLAN ID assigned to this multicast group. Multicast IP Address IP address for specific multicast services. Learned by Indicates the manner in which this address was learned: Dynamic or IGMP.
Port Menus Port Menus Port Information The Port Information screen displays the port status, link state, the communication speed and duplex mode, as well as the flow control in use. To change any of the port settings, use the Port Configuration menu. The parameters are shown in the following figure and table. Parameter Description Admin Status Shows if the port is enabled or not. Link Status Indicates if the port has a valid connection to an external device.
Web-Based Management Port Configuration Use the Port Configuration menu to configure any port on the switch. Parameter Default Description Flow control mode (on all ports) Disabled See “Flow Control Status” in this table. Admin Status Enable Allows you to disable a port due to abnormal behavior, and then re-enable it after the problem has been resolved. You may also disable a port for security reasons.
Port Menus Expansion Port Information The Expansion Port Information screen displays the port status, link state, the communication speed and duplex mode, as well as the flow control in use. To change any of the port settings, use the Expansion Port Configuration menu. The parameters shown in the following figure and table are for expansion ports. Parameter Description Admin Status Shows if the port is enabled or not. Link Status Indicates if the port has a valid connection to an external device.
Web-Based Management Expansion Port Configuration Use the Expansion Port Configuration menus to configure any module port on the switch. Parameter Default Description Admin Status Enable Allows you to disable a port due to abnormal behavior, and then re-enable it after the problem has been resolved. You may also disable a port for security reasons. Duplex Status AutoNegotiation Used to set the current port speed, duplex mode, flow control, and autonegotiation.
Port Menus Port Broadcast Storm Protect Configuration Use the Port Broadcast Storm Protect Configuration screen to configure broadcast storm control for any port on the switch. Parameter Default Description Broadcast Storm Protect Mode Enabled Allows you to enable/disable broadcast storm control for all ports on the switch. Protect Status Enabled Enables/disables broadcast control for the port.
Web-Based Management Port Security Configuration Use the Port Security Configuration screen to enable and configure port security for the switch. Port Security allows you to configure each port with a list of MAC addresses of devices that are authorized to access the network through that port. Parameter Description Port Number The port number on the unit. Status Port security can set to three states; Enabled, Disabled, or Learning.
Using a Port Mirror for Analysis Using a Port Mirror for Analysis You can mirror traffic from any source port to a target port for real-time analysis. You can then attach a network sniffer or RMON probe to the target port and study the traffic crossing the source port in a completely unobtrusive manner. When mirroring port traffic, note that the target port must be included in the same VLAN as the source port. (See “VLAN Static List” on page 3-26.
Web-Based Management Port Trunk Configuration Port trunks can be used to increase the bandwidth of a network connection or to ensure fault recovery. You can configure up five trunk connections (combining 2~4 ports into a fat pipe) between any two standalone CheetahSwtich Workgroup-3726M switches, or up to 12 for an entire stack. However, before making any physical connections between devices, use the Trunk Configuration menu to specify the trunk on the devices at both ends.
Port Trunk Configuration Use the Port Trunking Configuration screen to set up port trunks as shown below: Parameter Description Trunk A unique identifier for this trunk. You can configure up to five trunks per switch. Status Enables or disables the displayed trunk. Member List You can create up to 12 trunks for the entire stack by specifying the trunk identifier, switch unit and port number, and then clicking on the “Add” button. Each trunk can contain from 2 to 4 ports.
Web-Based Management Port Statistics Use the Port Statistics menu to display Etherlike or RMON statistics for any port on the switch. The statistics displayed are indicated in the following figure and table. Etherlike Statistics Etherlike Statistics display key statistics from the Ethernet-like MIB for each port. Error statistics on the traffic passing through each port are displayed.
Port Statistics RMON Statistics RMON Statistics display key statistics for each port or media module from RMON group 1. (RMON groups 2, 3 and 9 can only be accessed using SNMP management software.) The following screen displays overall statistics on traffic passing through each port. RMON statistics provide access to a broad range of statistics, including a total count of different frame types passing through each port. Values displayed have been accumulated since the last system reboot.
Web-Based Management Parameter Description 256-511 Byte Frames The total number of packets (including bad packets) received and transmitted that were between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets). 512-1023 Byte Frames The total number of packets (including bad packets) received and transmitted that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).
Chapter 4: Advanced Topics The CheetahSwtich Workgroup-3726M supports Layer 2 switching and other advanced features, which are described in this chapter. Layer 2 Switching When a frame enters a port, its destination MAC address is checked in the address database to see which port leads to this destination. If the destination address belongs to the incoming port, the frame is dropped or “filtered” because it is addressed to the local segment.
Advanced Topics Once a stable network topology has been established, all bridges listen for Hello BPDUs (Bridge Protocol Data Units) transmitted from the Root Bridge. If a bridge does not get a Hello BPDU after a predefined interval (Maximum Age), the bridge assumes that the link to the Root Bridge is down. This bridge will then initiate negotiations with other bridges to reconfigure the network to reestablish a valid network topology.
Virtual LANs This switch supports the following VLAN features: • Up to 256 VLANs based on the IEEE 802.
Advanced Topics GVRP-compliant devices to be automatically configured for VLAN groups based solely on endstation requests. Forwarding Traffic with Unknown VLAN Tags This switch only supports 256 VLANs with VLAN IDs ranging from 1 to 2048, but the IEEE 802.1Q VLAN standard allows for VLAN IDs from 1 to 4094. Therefore, if this switch is attached to endstations that issue VLAN registration requests, it will have to forward unknown VLAN tags.
Multicast Filtering Multicast Filtering Multicasting sends data to a group of nodes instead of a single destination. The simplest way to implement multicasting is to broadcast data to all nodes on the network. However, such an approach wastes a lot of bandwidth if the target group is small compared to overall the broadcast domain. Since applications such as video conferencing and data sharing are more widely used today, efficient multicasting has become vital.
Advanced Topics Class-of-Service (CoS) Support The CheetahSwtich Workgroup-3726M provides two transmit queues on each port, with a Weighted Fair Queuing scheme. This function can be used to provide independent priorities for various types of data such as real-time video or voice, and best-effort data.
Remote Monitoring Remote Monitoring Remote Monitoring (RMON) provides a cost-effective way to monitor large networks by placing embedded or external probes on distributed network equipment (hubs, switches or routers). Network management software can access the probes embedded in network products to perform traffic analysis, troubleshoot network problems, evaluate historical trends, or implement proactive management policies.
Advanced Topics 4-8
Appendix A: Troubleshooting Troubleshooting Chart Troubleshooting Chart Symptom Action Cannot connect using Telnet, Web browser, or SNMP software • Be sure to have configured the agent with a valid IP address, subnet mask and default gateway. • Check that you have a valid network connection to the switch and that the port you are using has not been disabled. • Check network cabling between the management station and the switch.
Troubleshooting Upgrading Firmware via the Serial Port You can upgrade system firmware by connecting your computer to the serial port on the switch, and using a console interface package that supports the XModem protocol. (See “Required Connections” on page 1-1.) 1. Restart the system by using the Restart System command or resetting the power by pulling out the power cord, waiting five seconds, and plugging it back in. 2.
Upgrading Firmware via the Serial Port 3. After the file has been downloaded, the console screen will display information similar to that shown below. Press “s” to start the management interface, change the baud rate back to 19200, and press Enter. The Logon screen will then appear. XModem Download to DRAM buffer area 0x00200000: ... SUCCESS ! Verifying image in DRAM download buffer 0x00200000... SUCCESS ! Update FlashROM Image at 0x02880000 ...
Troubleshooting A-4
Appendix B: Pin Assignments Console Port Pin Assignments The DB-9 serial port on the switch’s rear panel is used to connect to the switch for out-of-band console configuration. The on-board menu-driven configuration program can be accessed from a terminal, a PC running a terminal emulation program. The pin assignments used to connect to the serial port are provided in the following tables.
Pin Assignments B-2
Glossary Bandwidth Utilization The percentage of packets received over time as compared to overall bandwidth. BOOTP Boot protocol used to load the operating system for devices connected to the network. GARP VLAN Registration Protocol (GVRP) Defines a way for switches to exchange VLAN information in order to register necessary VLAN members on ports along the Spanning Tree so that VLANs defined in each switch can work automatically over a Spanning Tree network.
Glossary Link Aggregation See Port Trunk. MIB An acronym for Management Information Base. It is a set of database objects that contains information about the device. It defines variables needed by the SNMP protocol to monitor and control components in a network. Out-of-Band Management Management of the network from a station that is not attached to the network. Port Mirroring A method whereby data on a target port is mirrored to an analysis port for troubleshooting with a network sniffer or RMON probe.
Glossary Telnet Defines a remote communication facility for interfacing to a terminal device over TCP/IP. Trivial File Transfer Protocol (TFTP) The TCP/IP standard protocol for file transfer with minimal capability and minimal overhead. TFTP depends on the connectionless datagram delivery service, UDP. Virtual LAN (VLAN) A Virtual LAN is a collection of network nodes that share the same collision domain regardless of their physical location or connection point in the network.
Glossary Glossary-4
Index Numerics E 802.1P port priority 3-22 802.1p port priority 4-6 802.1Q VLANs 2-40, 3-24, 4-2 802.
Index mirror port configuration 2-30, 3-39 multicast filtering 4-5 configuring 2-34, 3-31 registration table, displaying 2-51, 3-32 O out-of-band connection 1-1 P password configuration 2-18, 3-12 pin assignments, console port B-1 Ping test 2-12 port configuration 2-22, 3-34, 3-37 information 2-23, 3-33 overlapping 4-3 priority 2-37, 3-22 STA Information 2-29, 3-17 trunks 4-6 configuration 3-40 problems, troubleshooting A-1 PVID 2-44, 3-20, 4-3 Q QoS configuration 2-37, 3-22 R remote monitoring (RMON) 4
Index W Web access requirements 3-1 agent configuration 2-13 browser connection 1-2 interface configuration buttons 3-3 home page 3-2 login 3-2 main menu 3-6 panel display 3-3 passwords 3-2 upload 3-13 Weighted Fair Queuing 2-37, 3-22 X XModem downloads A-2 Index-3
Index Index-4
AC-ES3726M E022002-R01 F2.
