IntraCore® 35160 Series Layer 2 Gigabit Switches v.2.
Quick Start Guide Follow the steps below to install the IntraCore switch: 1. 2. 3. 4. 5. Open the box and check the contents. See Chapter 1.3 Package Contents for a complete list of the items that are included with the IntraCore switch. Install the switch in an equipment or wall rack, or prepare it for desktop placement. Connect the power cord to the unit and to an appropriate power source. Connect network devices to the switch.
IntraCore 35160 Series Layer 2 Gigabit Switches v.2.0 User’s Manual Asanté Technologies, Inc. 821 Fox Lane San Jose, CA 95131 USA SALES 800-662-9686 Home/Office Solutions 800-303-9121 Enterprise Solutions 408-435-8388 TECHNICAL SUPPORT 801-566-8991: Worldwide 801-566-3787: Fax www.asante.com/support Copyright © 2003 Asanté Technologies, Inc. All rights reserved.
Table of Contents Quick Start Guide 2 Chapter 1. Introduction 1.1 Features 1.2 SwitchCore CXE2010 1.3 Package Contents 1.4 LEDs 1.5 Front and Back Panel Descriptions 1.6 Management and Configuration 6 6 7 7 7 9 9 Chapter 2. Hardware Installation and Setup 2.1 Installation Overview 2.2 Installation into an Equipment Rack 2.3 GBIC Interfaces 2.4 Installing the Optional Emergency Power Supply 2.5 Connecting Power 2.6 Connecting to the Network 2.7 Setup 2.8 Changing the Password 2.9 IP Assignment 2.
6.3 Community Name and Security 6.4 The MIB Tree 74 74 Chapter 7. Switching Concepts 7.1 VLANs 7.2 Spanning Tree Protocol 7.3 Full Duplex, Flow Control, and Auto-negotiation 76 76 77 78 Appendix A. Troubleshooting 80 Appendix B. Features and Specifications B.1 Features B.2 Specifications 81 81 81 Appendix C. FCC Compliance and Warranty Statements 83 Appendix D. Console Port Pin Outs 85 Appendix E. Online Warranty Registration 86 Appendix F.
Chapter 1. Introduction Thank you for purchasing the Asanté IntraCore 35160 Series Gigabit switch. These switches are a family of multi-media and multi-protocol switches capable of supporting Layer 2 Switching and Layer 4 Type of Service. They are designed to offer industry-leading performance at a very competitive cost of ownership. Note: This manual revision is for use with the IC35160 firmware version 2.0.
• • • Supports multiple user names and Secure Shell (SSH) Port Mirroring/monitoring on Ingress only Local and Global port management 1.2 SwitchCore CXE2010 The IC35160 utilizes a state-of-the-art packet processor on its system board, which provides 16 Gigabit Ethernet ports.
1.4.1 IC35160-T The IC35160-T has one power LED indicator, one (optional) emergency power LED, and two LED indicators for each of the 16 ports. See the table below for a complete LED description. LED Color Description Power Green Power is on. Off Green Power is off, or main power has failed. Primary power has failed and optional power supply is powering the switch. Off Green Optional power supply is in standby mode and primary power is working. A valid 1000Mbps link has been established.
1.5 Front and Back Panel Descriptions Refer to the following sections for detailed descriptions of the front and back panels of the IntraCore 35160 series switches. 1.5.1 IC35160-T The front panel of the IC35160-T contains the following: power and port LEDs; 12 10/100/1000BaseT ports; 4 dual-function Gigabit ports that support either 1000BaseT or GBIC style Gigabit Ethernet ports; and a console port.
1.6.1 Console Interface Users can access the switch in a more traditional way by connecting a PC or terminal to the console port or by telnet across the network. The menus are organized in a manner similar to the web-based interface. A detailed description can be found in Chapter 3 Configuration. 1.6.2 Web-Based Interface With Internet access, users can link directly to the local switch’s home page. Users can configure the switch, monitor the LED panel, and display statistics graphically.
Chapter 2. Hardware Installation and Setup The following guidelines will help the user to easily install the switch, and to ensure that it has the proper power supply and environment. 2.1 Installation Overview Follow these steps to install the IntraCore switch: 1. 2. 3. 4. Open the box and check the contents. See Chapter 1.3 Package Contents for a complete list of the items included with the IntraCore switch. Install the switch in an equipment or wall rack, or prepare it for desktop placement.
2.1.3 Power Requirements The electrical outlet should be located near the switch and be easily accessible. It must also be properly grounded. Make sure the power source adheres to the following guidelines: • • • Power: Auto Switching 110/240 VAC Frequency range: 50/60 Hz Maximum Input AC Current: 1.0A at 115 VAC full load 2.1.
2.3 GBIC Interfaces The GBIC Interface is the industry standard for Gigabit Ethernet Interfaces. Some of the benefits of GBIC include reducing the components needed in a “spares” inventory, being able to choose from a wide variety of manufacturers with cross-vendor compatibility, and having competitive prices. Instructions for installing, removing, and maintaining GBIC modules are provided in following sections. Model GBIC 1000SX GBIC 1000SX 3.3-5V GBIC 1000LX GBIC 1000LX 3.
2.3.2 Removing a GBIC Caution: GBIC 1000T modules run hot under normal operating conditions. When it has been removed from the system, place it on a heat-resistant surface and allow the module to cool before handling. Note: Unnecessary removals/insertions of a GBIC module will lead to premature failure of the GBIC. The rated duty cycle for a GBIC module is 100 to 500 removals/insertions. Follow the steps below to remove a GBIC interface from a Gigabit Ethernet module: 1.
2.6 Connecting to the Network The switch may be connected to an Ethernet network with the unit powered on or off. Use the following procedure to make the network connections: 1. 2. Connect the network devices to the switch, following the cable guidelines outlined below. After the unit is connected to the network, it can be configured for management capabilities (see the following chapters for information on configuration). 2.6.
2.6.2 Gigabit Ethernet Ports Cabling Procedures Cabling requirements for the optional hardware modules depend on the type of module installed. Use the following guidelines to determine the particular cabling requirements of the module(s): • • • • • • 1000BaseSX GBIC: Cables with SC-type fiber connectors; 62.
• • • Under the Settings tab, choose VT100 for Emulation mode Select Terminal keys for Function, Arrow, and Ctrl keys. Be sure the setting is for Terminal keys, NOT Windows keys Back under the Connect To tab, press the Configuration button • • • Set the data rate to 9600 Baud Set data format to 8 data bits, 1 stop bit and no parity Set flow control to NONE Now that terminal is set up correctly, power on the switch (boot sequence will display in terminal). 2.7.
2.8 Changing the Password The default password (which is Asante, and is case-sensitive) may allow immediate access to ANYONE on the network. To protect the switch from unauthorized changes to the configuration, change the administrator’s password. It can only be changed through the console or telnet interfaces. To change the administrator’s password, follow these steps: 1. 2. 3. 4. 5. 6. 7. 8. Establish a telnet session, and type Asante at the password prompt. Press Enter to proceed.
2.10 Simple Network Management Protocol (SNMP) The SNMP Configuration Menu allows the user to configure the unit’s read and write community strings, and to enable or disable authentication traps. This menu also allows the user to specify which of the network management stations will receive traps from the switch. The r option in the Configuration Menu displays the Protocol Configuration page. From there, select n to display the SNMP (Simple Network Management Protocol) Configuration Menu, as shown below.
Chapter 3. Configuration This chapter describes the log in procedure and configuration of the switch via the console or telnet interfaces. For information on configuring the switch via the web browser, see Chapter 5 Web-Based Management. Note: The screens shown are from the IC35160-T. The IC35160-G may have slightly different screens, but this will not affect the configuration instructions. The web browser user interface (Chapter 5) may also vary, but should not affect the configuration instructions.
3.1 General Information The General Information Screen displays the current system information of the switch, such as its name, IP address, and boot information. The information displayed is read-only. To view General Information, type g from the Main Menu. A screen similar to that below appears. IntraCore 35160-T General Information Menu System up since: 07/16/2003 Wed. 03:57:59pm Software Version Bank 1 Image Version/Date: 1.20B/Jun 17 2003 20:41:25 (Running) Bank 2 Image Version/Date: 1.
To access the Configuration Menu when you are logged in as root or readwrite, type c from the Main Menu.
4. 5. Press Enter. The system administration information changes take effect. Type q to quit and return to the Configuration Menu. 3.4 System IP Configuration The System IP Configuration Menu displays, and allows the user to change, the information needed to access the switch over the network via in-band management. IntraCore 35160-T System IP Configuration Menu System System System System i m r q MAC Address: IP Address: Subnet Mask: Default Router: 00:00:94:BF:00:46 xxx.xxx.xxx.xxx 255.255.255.
IntraCore 35160-T Basic Port Configuration Menu Port: [01] Port Name: 1 8 ======== Operating Status: -------Auto Negotiation: ******** Speed/Duplex: gggggggg Port Status: Enabled Auto-Nego: Enabled h t a l d v g e q 9 16 ======== -++---+******** ggFgggHg Link Status: Down (GMII) Link Speed: N/A Help for Legends Toggle Port Status Enable/Disable Enable/Disable Auto-Negotiation Set 10M/100M/1000M bps Link Speed Toggle Half/Full Duplex Advanced Port Configuration Global Port Config
3.5.1 Enabling or Disabling a Port The enabling or disabling of a port is a manual operation that can be used to isolate a network device that might be causing problems on the network, or to prevent unauthorized use of a port or station. To enable or disable a port, use the following procedure: 1. 2. 3. Access the Basic Port Configuration Menu by typing p in the Configuration Menu. To select the port to enable or disable, type s, n, or p in the Basic Port Configuration Menu.
3.6.1 Enabling or Disabling 802.3x Flow Control Use the following procedure to control traffic and avoid congestion, such as during a shortage of buffer resources for the port. Flow control is accomplished by means of standard PAUSE control frames for each port, independent of all others. Before enabling the flow control for a port, that port must be configured to operate in Full Duplex mode.
The new maximum packet length is shown on the Advanced Port Configuration Menu. 3.6.5 Global Port Configuration The Global Port Configuration Menu allows the user to simultaneously change the configuration information for all ports. To change the port configuration for all ports, use the following procedure: 1. 2. From the Configuration Menu, type p to access the Port Configuration Menu. From the Basic Port Configuration Menu, type g. The Global Port Configuration Menu appears, as shown below.
Type d in the Configuration Menu. The Unicast Forwarding Database Configuration Menu appears, as shown below. IntraCore 35160-T Unicast Forwarding Database Configuration Menu Age-out Time: 300 sec.
3.7.2 Searching for a MAC Address The Unicast Forwarding Database can be searched by MAC address or by IP address. To search for a specific MAC or IP address, use the following procedure: 1. 2. Access the Unicast Forwarding Database Configuration Menu by typing d in the Configuration Menu. Type m to search for a MAC address. Type i to search for an IP address. 3. 4. Type the MAC or IP address at the prompt. Press Enter. If the address is located, it is displayed, with its associated information.
3.10 Protocol Configuration To access the Protocol Configuration Menu, enter the letter r from the Configuration Menu. Use the listed command letters to configure Simple Network Management Protocol (SNMP) and Spanning Tree Protocol (STP). IntraCore 35160-T Protocol Configuration Menu n s q SNMP Configuration Spanning Tree Configuration Return to previous menu root> 3.10.1 SNMP Configuration To access the SNMP Configuration Menu, enter the letter n from the Protocol Configuration Menu.
Settings Description SNMP Read Community The string that defines access rights for reading SNMP data objects. The default is public. SNMP Write Community The string that defines access rights for writing SNMP data objects. The default is private. Trap Authentication The status of the SNMP agent for authentication trap generation. The default is disabled. SNMP Trap Receivers The IP addresses of the network management stations that can receive traps from the switch.
Deleting a Trap Receiver Use the following procedure to delete a trap receiver that has been previously designated: 1. 2. 3. Open the SNMP Configuration Menu by typing n in the Configuration Menu. Type d to Delete a Trap Receiver. A prompt for the entry of the trap receiver appears. Enter the number of the entry to be deleted (1,2,3, or 4) and press Enter. The trap receiver is deleted from the SNMP Trap Receivers list. For further details on using SNMP, see Chapter 6 SNMP Management. 3.10.
Enabling and Disabling STP The switch is shipped with Spanning Tree enabled on all ports by default. To enable or disable STP on the switch, use the following procedure: 1. 2. Open the Spanning Tree Configuration Menu by typing s in the Protocol Configuration Menu. Type t to toggle STP to enabled or disabled. When STP is disabled, there is a prompt to confirm the change. The STP status is changed. The status is displayed near the top of the Spanning Tree Configuration Menu.
3.11 Trunk Group Configuration The IC35160 supports link aggregation (port trunking). This feature is used to combine two or more links (ports) in order to increase the overall bandwidth of the link, thereby sharing or balancing the data load. Link aggregation creates better redundancy and fault tolerance, as network traffic is dynamically distributed across ports as links are added to the trunk.
3.12 QoS Priority Queue Management Quality of Service (QoS) Priority Queue is a feature that allows the switch to prioritize packets, thereby ensuring that high-priority traffic is handled before low-priority traffic when there is congestion on the network. This can improve network performance and bandwidth utilization on your network.
To assign a Priority Group to an interface, type p in the QoS Priority Queue Management Menu to access the Priority Group Configuration Menu. Only one list can be assigned per interface. Type g to set the Priority Group, or type the corresponding command letter to select another task.
3.13 User Interface Configuration To access the User Interface Configuration Menu, enter the letter u from the Configuration Menu. Use the listed command letters to configure user interfaces (SSH, Telnet, and HTTP server), UI timeout, passwords, add/delete access hosts, and access control. IntraCore 35160-T User Interface Configuration Menu Console UI Idle Time Out: Console UI idle time-out feature is disabled SSH/Telnet UI Idle Time Out: 5 Min.
The new SSH/Telnet UI Time Out is reflected in the User Interface Configuration Menu. After configuring the desired time-outs, type q to return to the previous menu. 3.13.3 Change Password Use this option to change the password that the user must enter when they log in. Important! The factory default password is Asante. The password is case-sensitive. To change the current Local Management Interface or Web-based Interface password, use the following procedure: 1. 2. 3.
3.13.6 Enabling or Disabling the Web Server The current HTTP Server Status is shown in the User Interface Configuration. Important! For security, the web server is disabled by default. It cannot be enabled if SSH is currently enabled. One or the other must be left disabled. To toggle the status of the HTTP server, type h in the User Interface Configuration Menu. 3.13.7 Access Control The enhanced switch login process allows for multiple users to access the switch.
3.14.1 Port Mirroring Port Mirroring allows the user to configure the switch to copy all traffic associated with one port (the Monitor Port) to a Mirror Port on the switch. The user can connect the Mirror Port to a network analyzer or RMON probe for packet analysis. The user can configure the Monitor Port to send either transmitted or received traffic to the Mirror Port.
3.14.2 System Clock Select o from the System Utility Menu to access the System Clock Configuration Menu. Use the command letters to set the date and time. IntraCore 35160-T System Clock Configuration Menu System up since: 07/16/2003 Current date/time: 07/24/2003 d t q Wed. Thu. 03:57:59pm 10:12:48am Set [D]ate Set [T]ime Return to previous menu root> 3.14.3 System Reset The System Reset Configuration Menu allows the user to reset the switch by performing a “warm” reboot.
Scheduling a System Reset The user can schedule the switch to automatically perform a reset from one second up to 24 hours (86,400 seconds) in advance. To schedule a reset, use the following procedure: 1. 2. 3. Open the System Reset Menu by typing r in the System Utility Menu. Type s to schedule a reset time (within the specified range). Enter the number of seconds the switch will wait before it automatically resets. Important! The maximum number of seconds that can be entered is 86,400 (24 hours). 4.
3. Type n to display the next page of System Log information, or type q to quit. Clearing the System Log Use the following procedure to clear all entries from the current System Log: 1. 2. Open the System Log Menu by typing l in the System Utility Menu. Type c to clear the current System Log. New entries will accrue as events occur. 3.14.
3.14.6 TFTP File Transfers The software image file must be downloaded from a server on the network that is running a TFTP server application. IntraCore 35160-T TFTP File Downloading Menu Bank 1 Image Version/Date: Bank 2 Image Version/Date: File Type: Server IP: File Name: Retry Count: Destination Bank: s f t c d b r a q 1.20B/Jun 17 2003 20:41:25 (Running) 1.10 /May 20 2003 18:01:54 Image xxx.xxx.xxx.xxx rt35160_120B.
3.14.7 PING Utility Type p on the System Utility Menu to enter an IP address to Ping. IntraCore 35160-T System Utility Menu m o r l b t p q Port Mirroring Configuration System Clock Configuration System Reset Options System Log Bootstrap Configuration TFTP File Transfers PING Utility Return to previous menu Enter IP Address (ddd.ddd.ddd.ddd)> 3.15 Statistics Viewing statistics on a regular basis allows the manager to evaluate the network’s performance.
Chapter 4. Advanced Management This chapter deals with the advanced management of the switch, via the console mode or telnet connection. See Chapter 5 Web-Based Management for information on managing the switch through the web browser. The following sections describe the these advanced topics for management of the IntraCore 35160: • • • • SNMP and RMON Management Security Management VLAN Management Multicast Management 4.
4.2 Security Management To access the Security Management Menu, type t in the Configuration Menu. Use the listed command letters to configure port security, duplicate IP detection and trap, and station movement trap, or to display the duplicated IP list and reset all security parameters to factory default.
1. 2. From the Configuration Menu, type t to access the Security Management Menu. Type l to display the duplicated IP list. A screen appears, similar to the following screen. +---------------+-----------------+--+-----------------+--+ | IP Address | Owner MAC | P| Spoofer MAC | P| +---------------+-----------------+--+-----------------+--+ xxx.xxx.xxx.xxx 00:00:94:CC:C5:36 1 00:00:94:CC:C7:37 17 xxx.xxx.xxx.xxx 00:00:94:CC:C5:36 1 00:00:94:CC:C7:37 17 xxx.xxx.xxx.
Configuring Port New Node Detection Trap The port new node detection trap security measure (also called “port security trap”) ensures that when any new device is connected to the secured port, an alert will be sent to the designated trap receiver. The new device is detected when it is connected to the switch and its MAC address is recognized as one not present in the current address table.
By default, security levels 2 and 3 are both disabled. Configuring Security Level 2 or Level 3 To set security level 2 (port lock) or level 3 (intruder lock) on a port: 1. 2. 3. 4. 5. 6. From the Configuration Menu, type t to access the Security Management Menu. Type p to access the Port Security Configuration Menu. Select o to Set/Clear port security. Type s to set security and enter the port number(s). Type 2 to select Port Security with Port Lock, or 3 to select Port Security with Intruder Lock.
Note: The IC35160 802.1X implementation supports following clients: Windows XP (Microsoft) Windows 2000 + SP4 (Microsoft) The IC35160 802.1X implementation supports following RADIUS servers: Internet Authentication Service (Microsoft) The IEEE 802.1X Supplicant (or client) is the network access device requesting LAN services. The Authenticator is the network access point that has authentication enabled, and can be a wireless access point or LAN switch ports.
IntraCore 35160-T 802.1X Configuration Menu 802.1X Awareness : Enabled SystemAuthControl : Disabled Port Control: 1 8 9 16 -------- -------- -: Force Authenticated M: Auto Mode (Multiple Host) U: Force UnAuthenticated S: Auto Mode (Single Host) F: First Come, First Serve (Single Host) x s c a p t r h q Toggle 802.
Setting Timers To set the timing parameters, type t in the 802.1X Configuration Menu. After changing any of the parameters listed below, the change will be noted in the top of the menu screen. IntraCore 35160-T 802.1X Constant Configuration Menu Quiet-period <0..65535,default=60> Tx-period <0..65535,default=30> Supplicant-timeout <1..300,default=30> Server-timeout <1..300,default=30> MaxReq <1..10,default=2> ReAuthMax <1..10,default=2> ReAuth-period <1..
Setting RADIUS Parameters To enter the802.1X RADIUS Configuration Menu, type r in the 802.1X Configuration Menu. Use the command letters to configure the corresponding values for the RADIUS server on your network. IntraCore 35160-T 802.1X RADIUS Configuration Menu Radius Server IP Shared Key NAS-Identifier Called-Station-Id Server Port s k n p q : : : : : 192.168.0.
4.3 VLAN Management A virtual LAN, or VLAN, is a logical grouping that allows stations to communicate as if they were physically connected to a single LAN, independent of the actual physical configuration of a network. The IntraCore 35160 supports port-based VLANs, in compliance with the IEEE 802.1Q standard. The following sections describe how to configure and manage VLANs on the switch. For more information on VLANs, see Chapter 7 Switching Concepts. 4.3.
IntraCore 35160-T VLAN Management Menu VLAN Version: Max. Supported VLAN ID: Number of VLANs Configured: v p d a r q 1 4094 64 VLAN Type: Max. Supported VLANs: Number of Active VLANs: Port Based 1024 64 VLAN Group Static Configuration VLAN Port Attribute Configuration Display VLAN Groups Summary Display Port VLAN Attribute Summary Reset VLAN Configuration to Factory Default Return to previous menu Command> 4.3.
Removing a VLAN To remove the VLAN, from the VLAN Group Static Configuration Menu, type r. Enabling and Disabling Management Access The IntraCore 35160 supports configurable management access for VLANs. By default, management access is enabled, and all devices connected to the switch in a VLAN can communicate with the switch management agent. Important! Management access for a VLAN can be disabled.
4.3.4 Configuring VLAN Port Attributes To configure port attributes, type p in the VLAN Management Menu (or l in the VLAN Group Static Configuration Menu). This accesses the VLAN port configuration menu, shown below. Navigate to the port to configure by typing a command (s, n, or p), as shown at the bottom of the screen.
untagged frames received by the port are dropped and the source address of the untagged frames is not learned. Incoming tagged frames are forwarded to the VLAN whose VID is included in the tag header of the frame. See “Enabling and Disabling Port Ingress Filtering” in this chapter for more information about the forwarding and filtering of received tagged frames.
4.3.6 Displaying a VLAN Port Summary To view a unit port VLAN summary, type v in the Configuration Menu to access the VLAN Management Menu, then type a to access the Port VLAN Attribute Summary. A screen similar to the one following will appear. To view the summary for other units, type a command as shown at the bottom of the screen.
IGMP Communication on a LAN (between the end stations and the routers) is managed by the Internet Group Management Protocol (IGMP). For complete information about IGMP, see RFC 1112, “Host Extensions...” and RFC 2236, “Internet Group Management Protocol, Version 2” . A router that supports multicast and IGMP sends periodic messages called “queries” on its LAN interfaces. These queries inquire if any end stations want to join a multicast group.
Advanced IGMP Configuration To enable or disable transmitting query packets, set the query interval, or to enable or disable IGMP Proxy Report Forward, type v in the IP Multicast Traffic Management Menu.
4.4.2 IP Multicast Forwarding Database Configuration The Multicast Forwarding Database lists addresses of multicast groups, and assigns them to specific VLANs. It also lists the ports within a VLAN that can receive traffic from the multicast address. To access the Multicast FDB Configuration Menu, type c in the Configuration Menu to display the IP Multicast Traffic Management Menu, and then type m.
Chapter 5. Web-Based Management This chapter describes how to manage the switch by means of a Web browser, using Web pages to monitor and configure the switch. Most of the options and functions provided by Web browser management are similar to those of the Local Management Interface. For additional details about managing the switch, refer to Chapter 3 Configuration, and Chapter 4 Advanced Management. Important! To use Web browser management, the switch must be configured with an IP address.
The Web Browser Management Overview page contains a sidebar with 9 management option buttons, and a view of the IntraCore front panel that displays real-time switch operating information, as well as contact information for Asanté Technologies, Inc. Note: The browser pages shown in this chapter are typical of those used for the IntraCore, and settings are given only as examples. The user must configure the IntraCore with parameters that are specific to the user’s application and site requirements.
The page has six sections, which are listed at the top of the page. To view another section, click a link at the top of the page or scroll down. 5.3 Port Config (Port Configuration) Button This button opens the Port Configuration page, which provides a comprehensive overview of the status of each port on the IntraCore, as shown below. To configure individual ports, click on the associated blue number in the left-hand margin to access that port’s configuration page.
5.4 Span Tree (Spanning Tree) Button This button opens the Spanning Tree Protocol (STP) Configuration page, which shows the STP Configuration of the switch, as shown below. STP configuration is explained in Chapter 4 Advanced Management. Click the STP Port Configuration button to display the STP Configuration settings for each port (see the port configuration page following), or configure the ports all together (globally) from the right side of the page.
5.5 SNMP Button This button displays the SNMP (Simple Network Management Protocol) page, as shown below. See SNMP Configuration in Chapter 3 for an explanation of SNMP settings. 5.6 Addr (Address) Table Button The Addr Table button opens the MAC and IP Address Table page, which displays two tables, as shown in the following screen: The top table displays the counts of IP and MAC addresses for each port. The lower table displays IP and MAC addresses for either a particular port, or for all ports.
To see the MAC and IP addresses, the activity status, and the VLAN ID for the devices connected to a particular port, click the port’s number in the top table. Use the Search boxes to search for either an IP or MAC address on the switch. 5.7 VLAN Button This button opens the VLAN Groups page, as shown on the following screen. 5.7.1 VLAN Configuration VLAN Group - Create To create a VLAN group, enter a VID and a name for the new VLAN, enable Mgmt Access for the VLAN and click Apply.
5.7.2 Port Configuration To configure the VLAN ports, click on the VLAN Ports link at the top of the VLAN Groups page. Click on the port number to go to the VLAN Port configuration page, as shown on the following screen. Here, the user can set the port type, assign a port VLAN ID, add or delete VLANs from the port, select acceptable frame types, enable port ingress filtering. Click Apply Changes when finished. Restart the switch for the changes to take effect. Set Port Type Select IEEE 802.
Port Ingress Filtering From the drop-down menu, select Disabled or Enabled. See Chapter 4 Advanced Management for more information. Tag/Untag Port Egress Type Click Tag Port Egress Type to set the port to send tagged frames for any given VLAN. Click Untag Port Egress Type to set the port to send untagged frames. See Chapter 4 Advanced Management for more information. 5.8 Trunking Button The IC35160 supports link aggregation (port trunking).
To access the configuration pages for individual ports, click on the respective port number in the left-hand column. Select the Security Level from the drop-down menu (None, 1-New node trap, 2-Intruder lock port, and 3-Intruder lock MAC).
Chapter 6. SNMP Management The IntraCore 35160 switch can be managed using a Simple Network Management Protocol (SNMP) compatible management station running platforms such as HP OpenView or MG Soft’s MIB Browser. 6.1 SNMP Management Operations A network management application is concerned with performance statistics gathered by the devices on the managed network, in reading and changing current configuration information, and in receiving alerts of unusual events.
6.3 Community Name and Security SNMP v.1 was not designed to be a secure protocol. There is no true password, although the string known as a community string does serve some of the same purposes. SNMP-aware devices, such as this switch, often ship with well-known community strings. For this reason, it is important that the manager change the default community strings before putting the switch on a network.
6.4.2 MIB Groups Supported The following MIB-II groups are supported: • • • • • • • • • The System group – General information about the managed system, such as contact information and system name The Interfaces group – Information about each interface in the managed unit, and statistics for that interface The Address Translation group – This group is deprecated, and should not be used The IP group – Contains counters for Internet Protocol Traffic.
Chapter 7. Switching Concepts A bridge is a hardware device used to connect multiple networks into one big network. However, when a bridge receives a broadcast from one interface, it will forward the frame to all interfaces and flood the wire, easily overwhelming the network. The traditional solution to the problem of broadcast flooding is to use a router.
7.1.3 Port VLAN ID To allow untagged packets to participate in a VLAN, a Port VLAN ID (PVID) must be assigned in the relevant port(s). Each port on the switch has a default PVID of 1 (the default VLAN) and will receive both tagged and untagged frames. The manager may configure the PVID of any desired port (the range is 1 to 4094). For ports that have been configured to receive only tagged frames, the PVID is meaningless.
Forward Delay After a recalculation of the spanning tree, the Forward Delay parameter regulates the delay before each port begins transmitting traffic. If a port begins forwarding traffic too soon (before a new root bridge has been selected), the network can be adversely affected. The default value for Forward Delay is 15 seconds.
7.3.2 Flow Control With a link operating at a high data rate, a switch may experience occasional limitations in the buffer space used to store Ethernet frames before forwarding them. In this situation, if the sending station continues to send frames, the switch will have no option but to discard the frames. This may quickly lead to unacceptable delays in upper-level protocols. In order to avoid unnecessarily dropping frames, a switch may implement Flow Control.
Appendix A. Troubleshooting In the unlikely event the switch does not operate properly, follow the troubleshooting tips below. If more help is needed, contact Asanté’s technical support at support@asante.com. Problem The Power LED is not lit. The Emergency Power LED is not lit. The 10/100/1000 port Link LEDs are not lit. The GBIC Link LED is not lit. Cannot establish communication to another device (switch, router, workstation, etc.). Cannot auto-negotiate the port speed.
Appendix B. Features and Specifications The sections below list the features and product specifications for the IntraCore 35160 Series Gigabit Ethernet switches. B.
Environmental Range Operating Temperature: Relative Humidity: Power: Redundant DC Power: 32º to 104º F (0º to 40º C) 10% to 90% non-condensing Auto-switching, 110-240 VAC, 50/60 Hz; grounded IEC cord 12VDC Auto-switching from main 110/240 VAC for emergency backup Standards Compliance IEEE: IEEE 802.1D spanning tree and bridge filters IEEE 802.1p prioritization (class of service) IEEE 802.1Q virtual LAN (VLAN) IEEE 802.1X port-based access control IEEE 802.3x full duplex and flow control IEEE 802.
Appendix C. FCC Compliance and Warranty Statements FCC Compliance Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
3. 4. 5. 6. 7. 8. 9. and used. If Asanté receives notice of such defects during the warranty period, Asanté will replace software media that does not execute its programming instructions due to such defects. Asanté does not warrant that the operation of Asanté products will be uninterrupted or error free.
Appendix D. Console Port Pin Outs The console port is used to connect with a terminal using a serial modem RS-232C cable (available from Radio Shack’s website, www.radioshack.com, catalog # 26-117). The setting is 9600-N81. The table below lists the pin outs.
Appendix E. Online Warranty Registration Before calling Asanté Technical Support, please register the switch online at www.asante.com/support/registration.html. By doing so, you’ll be entitled to special offers, up-to-date information, and important product bulletins. You may also register the switch by using the warranty card found in the printed Getting Started Guide.
Appendix F. BootP Configuration The switch is shipped with BootP support. If the network contains a BootP server configured with available, valid IP addresses, BootP allows the switch to be configured automatically with an IP address when it is connected to the network and is powered on. Important! BootP configuration works only if switch does not have an IP address assigned to it. Use the following procedure to set up BootP: 1. 2. 3.
Loading Software Remotely To set the switch to download its software over the network from a remote server, use the following procedure: 1. 2. Open the Local Bootstrap Configuration Menu by typing b in System Utility Menu. Open the Remote Bootstrap Configuration Menu by typing r in the Local Bootstrap Configuration Menu. The menu appears, as shown below.
