User Manual

ManualsBrandsNETGEAR ManualsComputers & Accessories48x1G PoE+ 480W, 2x10G, 2xSFP+ Managed Switch

Table Of Contents

NETGEAR, Inc.

350 East Plumeria Drive

San Jose, CA 95134, USA

July 2021

202-11998-04

User Manual

M4300 Intelligent Edge Series

Fully Managed Stackable Switches

Software Version 12.0.11 and Earlier Versions

M4300 Series Switches

M4300-96X Modular Switch

Summary of content (721 pages)

PAGE 1
User Manual M4300 Intelligent Edge Series Fully Managed Stackable Switches S oft ware Ver sion 12.0 .11 an d Earl i e r Ve rs i on s M4 3 0 0 Ser ies Sw itche s M4 3 0 0-96X M odula r Sw i t c h July 2021 202-11998-04 NETGEAR, Inc.
PAGE 2
M4300 Intelligent Edge Series Fully Managed Stackable Switches Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads. You can also check out our NETGEAR Community for helpful advice at community.netgear.com. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
PAGE 3
M4300 Intelligent Edge Series Fully Managed Stackable Switches 202-11998-02 December 2019 We added information about the new third-party TPM404H HDMI port card in the following sections: • Third-party TPM404H HDMI Port Card for model M4300-96X on page 20. • Slot and Port Numbering on the Third-Party TPM404H HDMI Port Cards on page 30. • Configure and View Information About Slots and Port Cards on page 47.
PAGE 4
Contents Chapter 1 Get Started Supported Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18 Features for Switch Model M4300-96X . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Slot-Based Port Numbering for model M4300-96X. . . . . . . . . . . . . . . . .19 Slot Configuration for model M4300-96X . . . . . . . . . . . . . . . . . . . . . . . . .20 PoE Operation and Configuration for model M4300-96X . . . . . . . . . . .
PAGE 5
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure an IPv6 Management VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . .57 Configure an IPv4 Management Interface. . . . . . . . . . . . . . . . . . . . . . . . .60 Configure an IPv6 Management Interface. . . . . . . . . . . . . . . . . . . . . . . . .62 Manage the Time Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Configure the Time Setting . . . . . . . . . . . . . . . . . . . . .
PAGE 6
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure DHCPv6 Relay for an Interface . . . . . . . . . . . . . . . . . . . . . . . 121 Configure Power over Ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122 Configure Basic PoE Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122 Configure PoE Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124 Configure PoE Power Settings. . . . . . . . . . .
PAGE 7
M4300 Intelligent Edge Series Fully Managed Stackable Switches Change the Settings for an Existing Stack Member. . . . . . . . . . . . . . . 170 Configure the Mode of the Stack Ports . . . . . . . . . . . . . . . . . . . . . . . . . 172 Run Stack Port Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .174 Configure Stack Firmware Synchronization . . . . . . . . . . . . . . . . . . . . . . . . 176 View NSF Summary Data . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 8
M4300 Intelligent Edge Series Fully Managed Stackable Switches View PVST Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233 Manage Multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .234 View the MFDB Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234 View the MFDB Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 9
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure MRP Port Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286 View MMRP and Clear Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287 View and Clear MVRP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289 Manage Loop Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .290 About Loop Protection . . . . . . . . . . .
PAGE 10
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Advanced VRRP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . Configure an Advanced VRRP Secondary IP Address . . . . . . . . . . . . . Configure an Advanced VRRP Tracking Interface. . . . . . . . . . . . . . . . . View Advanced VRRP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 350 353 354 355 Chapter 6 Configure OSPF and OSPFv3 Configure OSPF . . . . . . . . . . . . . . . . . . . . . .
PAGE 11
M4300 Intelligent Edge Series Fully Managed Stackable Switches View the DVMRP Next Hop Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . 427 View the Multicast DVMRP Prune . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 428 View the DVMRP Route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429 Configure Multicast IGMP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .430 Configure IGMP Global Settings. . . . . . . . . . . . . .
PAGE 12
M4300 Intelligent Edge Series Fully Managed Stackable Switches Map DSCP Values to Queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474 Configure CoS Interface Settings for an Interface . . . . . . . . . . . . . . . . 475 Configure CoS Queue Settings for an Interface . . . . . . . . . . . . . . . . . . 476 Configure CoS Drop Precedence Settings . . . . . . . . . . . . . . . . . . . . . . 478 Manage Differentiated Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 13
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Console Port Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 536 Configure Denial of Service Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .537 Configure Access Control Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .540 Configure an Access Control Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 14
M4300 Intelligent Edge Series Fully Managed Stackable Switches View DAI Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587 Set Up Captive Portals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .589 Configure Captive Portal Global Settings . . . . . . . . . . . . . . . . . . . . . . . 589 Add a Captive Portal Instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 15
M4300 Intelligent Edge Series Fully Managed Stackable Switches Manage an RSPAN VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .658 Configure an RSPAN VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 658 Configure an RSPAN Source Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . 659 Configure an RSPAN Source Interface . . . . . . . . . . . . . . . . . . . . . . . . . . 660 Configure the RSPAN Destination Switch . . . . . . . . . . .
PAGE 16
M4300 Intelligent Edge Series Fully Managed Stackable Switches 802.1X. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .706 802.1X Example Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 707 MSTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .708 MSTP Example Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 17
1 1 Get Started This user manual is for the M4300 Intelligent Edge Series Fully Managed Stackable Switches and covers all M4300 switch models and modular model M4300-96X. This chapter provides an overview of how you can using your switch and access the local browser user interface (UI).
PAGE 18
M4300 Intelligent Edge Series Fully Managed Stackable Switches Supported Switches This release and this user manual are for the following M4300 switch models: • • • • Full 10G models: - M4300-16X (XSM4316PA and XSM4316PB). Full 10G switch model with sixteen 10G PoE+ copper ports in a half-width chassis - M4300-8X8F (XSM4316S). Full 10G switch model with eight 10G copper ports and eight 10G fiber ports in a half-width chassis - M4300-12X12F (XSM4324S).
PAGE 19
M4300 Intelligent Edge Series Fully Managed Stackable Switches Features for Switch Model M4300-96X For hardware information about switch model M4300-96X, including information about supported port cards, power supply units (PSUs), and Power over Ethernet (PoE) budgets, see the Fully Managed Stackable Switch M4300-96X Hardware Installation Guide. This section describes the features that this release supports for switch model M4300-96X.
PAGE 20
M4300 Intelligent Edge Series Fully Managed Stackable Switches For example, if a switch with unit number 1 includes an APM402XL port card in slot 9, port 1 on the port card is connected to four individual port cards, and port 2 on the port card is connected to another single 40G port, the port numbering is as follows: 1/9/1, 1/9/2, 1/9/3, 1/9/4, and 1/9/5.
PAGE 21
M4300 Intelligent Edge Series Fully Managed Stackable Switches • When you install one or more APM408P PoE port cards while switch model M4300-96 is operating, the switch detects these modules, initializes them, and automatically apples any existing configurations for the slots. • When you remove one or more APM408P PoE port cards while switch model M4300-96 is operating, the switch detects the absence of these port cards and automatically adjusts the configuration.
PAGE 22
M4300 Intelligent Edge Series Fully Managed Stackable Switches • The software manuals for the M4300 series switches, including modular model M4300-96X: - M4300 Intelligent Edge Series Fully Managed Stackable Switches Software Administration Manual - M4300 Intelligent Edge Series Fully Managed Stackable Switches CLI Command Reference Manual - M4300 Intelligent Edge Series Fully Managed Stackable Switches User Manual (this manual) - M4300 Intelligent Edge Series Fully Managed Stackable Switches Softw
PAGE 23
M4300 Intelligent Edge Series Fully Managed Stackable Switches Understanding the User Interfaces The switch software includes a set of comprehensive management functions for configuring and monitoring the system by using one of the following methods: • Local browser user interface (UI), either over an Ethernet network port or over the out-of-band (OOB) port (also referred to as the service port) • Simple Network Management Protocol (SNMP) • Command-line interface (CLI) Each of the standards-based man
PAGE 24
M4300 Intelligent Edge Series Fully Managed Stackable Switches Note: Other and later versions might work too but were not tested. The Device View is based on HTML version 5. Use a Web Browser to Access the Switch and Log In If this is the first time that you log in to the switch and you must use the default IP address of the switch, see the information in the installation guide for your switch and in the M4200 and M4300 Series ProSAFE Managed Switches Software Setup Manual.
PAGE 25
M4300 Intelligent Edge Series Fully Managed Stackable Switches The login window opens. 5. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. Access the Switch When You Know the IP Address The procedures in this manual assume that you know the IP address of your switch.
PAGE 26
M4300 Intelligent Edge Series Fully Managed Stackable Switches IMPORTANT: When you click the Apply button, your changes are saved for the web management session but are not retained by the switch when it is rebooted. You can manually save the configuration permanently (see Save the Configuration on page 671) or you can enable the automatic saving feature (see Configure Auto Save Mode on page 671), which lets the switch save the configuration permanently.
PAGE 27
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 3. Naming conventions for interfaces Interface Description Example Link aggregation group (LAG) LAG interfaces are logical interfaces that are used only for bridging functions. LAG 1, LAG 2, LAG 3, and so on CPU management interface This is the internal switch interface responsible for the switch base MAC address. This interface is not configurable and is always listed in the MAC Address Table.
PAGE 28
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 4.
PAGE 29
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 5. Port numbering for the 40G ports on the APM402XL port card Slot Number Slot Location Port Port Numbers for 10G Port Numbers for 40G Interface Convention 1 Upper row 1 1, 2, 3, 4 1 For 10G: 1/1/1, 1/1/2, 1/1/3, and 1/1/4. For 40G: 1/1/1. 2 5, 6, 7, 8 5 For 10G: 1/1/5, 1/1/6, 1/1/7, and 1/1/8. For 40G: 1/1/5. 1 1, 2, 3, 4 1 For 10G: 1/2/1, 1/2/2, 1/2/3, and 1/2/4. For 40G: 1/2/1.
PAGE 30
M4300 Intelligent Edge Series Fully Managed Stackable Switches Slot and Port Numbering on the Third-Party TPM404H HDMI Port Cards For the TPM404H port card, the ports in the port cards in the slots are numbered as described in the following table. Table 6.
PAGE 31
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Help > Online Help > Support. 5. To connect to the NETGEAR support site for the M4300 Series and M4300-96X switches, click the APPLY button. Local Browser UI Device View The Device View is an HTML applet that displays the ports on the switch.
PAGE 32
M4300 Intelligent Edge Series Fully Managed Stackable Switches The port coloring indicates whether a port is currently active. Green indicates that the port is enabled; red indicates that an error occurred on the port, or that the link is disabled. As yet another example, the following figure shows a close up of the Device View page for model M4300-96X. This figure shows an APM402XL port card in slot 5 and another in slot 8. Port 1/5/6 is expanded into four 10G ports, but port 1/5/5 is in 40G mode.
PAGE 33
M4300 Intelligent Edge Series Fully Managed Stackable Switches SNMP is enabled by default. The System Information page, which is the page that displays when you log in, displays the information that you need to configure an SNMP manager to access the switch. Any user can connect to the switch using the SNMP v3 protocol, but for authentication and encryption, the switch supports only one user, which is the admin user; therefore, only one profile can be created or modified. As of software version 12.0.9.
PAGE 34
2 2 Configure System Information This chapter covers the following topics: • Configure and Display the System and Slot Information • Configure a Loopback Interface • Configure Management Interfaces • Manage the Time Settings • Manage Precision Time Protocol • Configure DNS Settings • Configure the Switch Database Management Template Preference • Configure Green Ethernet Settings • Configure and Display Bonjour Settings • Configure DHCP Server Settings • Manage a DHCP L2 Relay • Manag
PAGE 35
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure and Display the System and Slot Information You can configure the view and configure the switch system information. For model M4300-96X, you can also configure the slot and port card information. View or Define System Information When you log in, the System Information page displays. You can configure and view general device information. To view or define system information: 1. Launch a web browser. 2.
PAGE 36
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. The factory default is blank. • System Location. Enter the location of this switch. You can use up to 255 alphanumeric characters. The factory default is blank. • System Contact. Enter the contact person for this switch. You can use up to 255 alphanumeric characters. The factory default is blank.
PAGE 37
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 7. Application Information and System Information (continued) Field Description IPv4 Management Interface The IPv4 management VLAN ID of the switch. Click the displayed Management VLAN ID value to jump to the configuration page. See Configure an IPv4 Management VLAN on page 55. IPv6 Management Interface The IPv6 management VLAN ID of the switch. Click the displayed Management VLAN ID value to jump to the configuration page.
PAGE 38
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page, click the Refresh button. The following table describes the nonconfigurable Fan Status information. Table 8. Fan Status Field Description Unit ID The unit ID of the switch to which the fan belongs. System-1 The working status of the System-1 fan in each unit. System-2 The working status of the System-2 fan in each unit. System-3 The working status of the System-3 fan in each unit.
PAGE 39
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page, click the Refresh button. The following table describes the nonconfigurable Temperature Status information. Table 9. Temperature Status information Field Description Unit ID The unit number in the switch. MAC-A The current temperature (in degrees Centigrade) of the MAC-A sensor of the switch. The maximum is 31°C. MAC-B The current temperature (in degrees Centigrade) of the MAC-B sensor of the switch.
PAGE 40
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page, click the Refresh button. The following table describes the nonconfigurable Device Status information. Table 10. Device Status Field Description Unit ID The unit number in the switch. Firmware Version The release.version.maintenance number of the code currently running on the switch. For example, if the release was 1, the version was 2, and the maintenance number was 4, the format would be 1.2.4.
PAGE 41
M4300 Intelligent Edge Series Fully Managed Stackable Switches View the System CPU Status To view the system CPU status: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 42
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes CPU Memory Status information. Table 11. CPU Memory Status information Field Description Total System Memory The total memory of the switch in KBytes. Available Memory The available memory space for the switch in KBytes. Configure the CPU Thresholds The CPU Utilization Threshold notification feature allows you to configure thresholds that, when crossed, trigger a notification.
PAGE 43
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Configure the Falling Threshold. Notification is triggered when the total CPU utilization falls below this level for a configured period of time. The falling utilization threshold must be equal to or less than the rising threshold value. The falling utilization threshold notification is made only if a rising threshold notification was done previously. Configuring the falling utilization threshold and time period is optional.
PAGE 44
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To clear all the counters, resetting all switch summary and detailed statistics to default values, click the Clear button. The discarded packets count cannot be cleared. The following table describes Switch Statistics information. Table 12. Switch Statistics information Field Description ifIndex The ifIndex of the interface table entry associated with the processor of this switch.
PAGE 45
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 12. Switch Statistics information (continued) Field Description Broadcast Packets Received The total number of packets received that were directed to the broadcast address. This does not include multicast packets. Receive Packets Discarded The number of inbound packets that were discarded even though no errors were detected to prevent their being deliverable to a higher-layer protocol.
PAGE 46
M4300 Intelligent Edge Series Fully Managed Stackable Switches View USB Device Information To display the USB device information: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 47
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the USB Directory Details information. Table 14. USB Directory Details information Field Description File Name The name of the file stored in the USB flash drive. File Size The size of the file stored in the USB flash drive in bytes Modification Time The last modification time of the file stored in the USB flash drive.
PAGE 48
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. For model M4300-96X only, from the Administrative State menu, select Enable or Disable. By default, all slots are enabled, but you can select to disable a slot. 6. For model M4300-96X only, from the Configured Card Model ID menu, select the port card. This option allows you to preconfigure the port card before you insert the port card. 7. For model M4300-96X, if you changed the settings, click the Apply button. Your settings are saved.
PAGE 49
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes information in the Supported Card table. Field Description Card Model The model ID of the supported port card. Card Index The index assigned to the port card type. Card Type The hardware type of the supported port card, which is assigned by the manufacturer.
PAGE 50
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure a Loopback Interface You can create, configure, and remove loopback interfaces. To configure a loopback interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 51
M4300 Intelligent Edge Series Fully Managed Stackable Switches 10. In the Secondary Subnet Mask field, enter the secondary subnet mask for this interface in dotted-decimal notation. This input field is visible only when Add Secondary is selected. This option is visible when IPv4 loopback is selected. 11. In the IPv6 mode field, enable IPv6 on this interface using the IPv6 address. This option is configurable before you specify an explicit IPv6 address. This option is visible when IPv6 loopback is selected.
PAGE 52
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select System > Management > Management Interfaces > IPv4 Service Port Configuration. 5. Select a Service Port Configuration Protocol radio button: • BootP. During the next boot cycle, the BootP client on the device broadcasts a BootP request in an attempt to acquire information from a BootP server on the network. • DHCP.
PAGE 53
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable fields on the Service Port Configuration page. Table 15. IPv4 Service Port Configuration Field Description Burned-in MAC Address The burned-in MAC address used for out-of-band connectivity. Interface Status Indicates whether the link status is up or down. Configure the IPv6 Service Port You can configure IPv6 network information on the service port.
PAGE 54
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the IPv6 mode Enable or Disable radio button. This specifies the IPv6 administrative mode on the service port. 6. Select the Service Port Configuration Protocol None or DHCP radio button. This specifies whether the device acquires network information from a DHCPv6 server. Selecting None disables the DHCPv6 client on the service port. 7. Select the IPv6 Stateless Address AutoConfig mode Enable or Disable radio button: • Enable.
PAGE 55
M4300 Intelligent Edge Series Fully Managed Stackable Switches The management VLAN is the logical interface used for in-band connectivity with the switch through any of the switch’s front panel ports. The configuration parameters associated with the switch’s management VLAN do not affect the configuration of the front panel ports through which traffic is switched or routed. To access the switch over a network, you must first configure it with IP information (IP address, subnet mask).
PAGE 56
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Management VLAN ID field, specify the Management VLAN ID of the switch. The management VLAN is used for management of the switch. It can be configured to any value in the range of 1–4093. 6. Select the Routing Mode radio button to Enable or Disable the global routing on the device. The default value is Enable. 7. Select the Configuration Method DHCP or Manual radio button: • DHCP. Transmit a DHCP request. • Manual. Do nothing.
PAGE 57
M4300 Intelligent Edge Series Fully Managed Stackable Switches The table below describes the nonconfigurable fields. Table 16. Nonconfigurable IPv4 Management Interface Status Field Description Management Interface Displays the current IPv4 management interface Link State Indicates whether the link status is up or down. Routing Interface Status Indicates whether the link status is up or down for the management interface. MAC Address The MAC address assigned to the management interface.
PAGE 58
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select System > Management > Management Interfaces > IPv6 Management VLAN Configuration. 5.
PAGE 59
M4300 Intelligent Edge Series Fully Managed Stackable Switches Your settings are saved. In the IPv6 Default Route Configuration section of the page, the nonconfigurable IPv6 Default Route that is displayed is the default route for the IPv6 VLAN interface. 13. To make changes, do the following: • To add or remove the IPv6 default route, select the Change IPv6 Default Route option, and specify the address value in the IPv6 Default Route Address field.
PAGE 60
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 17. Current IPv6 Management Interface Status Field Description MAC Address The MAC address assigned to the management interface. IPv6 Enable Mode Indicates whether IPv6 Enable Mode on the management interface is enabled or disabled. IPv6 Routing Mode Indicates whether IPv6 Routing Mode on the management interface is enabled or disabled.
PAGE 61
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use the Interface list to select the interface for which IPv4 parameters or management interface can be changed. 6. When you select the Set Management Interface option, it means that the management interface must be configured based on the interface selected. By default, this option is not selected. 7. Select the Configuration Method DHCP or Manual radio button. 8.
PAGE 62
M4300 Intelligent Edge Series Fully Managed Stackable Switches The table below describes the nonconfigurable fields. Table 18. Nonconfigurable IPv4 Management Interface Status Field Description Management Interface Displays the current IPv4 management interface Link State Indicates whether the link status is up or down. Routing Interface Status Indicates whether the link status is up or down for the management interface. MAC Address The MAC address assigned to the management interface.
PAGE 63
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. 4. Click the Login button. The System Information page displays. 5. Select System > Management > Management Interfaces > IPv6 Management Interface Configuration. 6. Use the Interface list to select the interface for which IPv6 parameters or management interface can be changed. 7.
PAGE 64
M4300 Intelligent Edge Series Fully Managed Stackable Switches 13. To make changes, do the following: • To add or remove the IPv6 default route, select the Change IPv6 Default Route option, and specify the address value in the IPv6 Default Route Address field. • In the Reset IPv6 Management Interface section of the page, use the Set Management Interface to Default option to delete the port-based IPv6 management interface configuration and set the IPv6 management interface back to the default VLAN 1. 14.
PAGE 65
M4300 Intelligent Edge Series Fully Managed Stackable Switches Manage the Time Settings The switch software supports the Simple Network Time Protocol (SNTP). As its name suggests, it is a less complicated version of Network Time Protocol, which is a system for synchronizing the clocks of networked computer systems, primarily when data transfer is handled through the Internet. Configure the Time Setting To configure the time setting: 1. Launch a web browser. 2.
PAGE 66
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the SNTP Global Settings To configure the SNTP global settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 67
M4300 Intelligent Edge Series Fully Managed Stackable Switches The default value is Unicast. 6. In the Port field, specify the local UDP port that the SNTP client receives server packets on. The allowed range is 1025 to 65535 and the value 123. The default value is 123. When the default value is configured, the actual client port value used in SNTP packets is assigned by the operating system. 7. Select the Source Interface to use for the SNTP client.
PAGE 68
M4300 Intelligent Edge Series Fully Managed Stackable Switches 13. Use the Offset Hours field to specify the number of hours of difference from UTC. The allowed range is –12 to 13. The default value is 0. 14. Use the Offset Minutes field to specify the number of minutes of difference from UTC. The allowed range is 0 to 59. The default value is 0. 15. Click the Apply button. Your settings are saved.
PAGE 69
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table displays the nonconfigurable SNTP Global Status information. Table 20. SNTP Global Status Field Description Version The SNTP version that the client supports. Supported mode The SNTP modes that the client supports. Multiple modes can be supported by a client. Last Update Time The local date and time (UTC) that the SNTP client last updated the system clock.
PAGE 70
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure an SNTP Server SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. The switch software operates only as an SNTP client and cannot provide time services to other systems. Time sources are established by stratums. Stratums define the accuracy of the reference clock.
PAGE 71
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select System > Management > Time > SNTP Server Configuration. 5. In the Server Type list, select the address type of the configured SNTP server address.
PAGE 72
M4300 Intelligent Edge Series Fully Managed Stackable Switches requesting order follows the lexicographical ordering of the entries in this table. The valid range is 1 to 3. The default value is 1. 9. Specify the NTP Version running on the server. The range is 1 to 4. The default value is 4. 10. Click the Add button. The SNTP server entry is added. 11. Repeat the previous steps to add additional SNTP servers. You can configure up to three SNTP servers. 12. Click the Apply button. Your settings are saved.
PAGE 73
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 21. SNTP Server Status (continued) Field Description Last Attempt Status The status of the last S9 NTP request to this server. If no packet was received from this server, a status of Other is displayed. • Other. None of the following enumeration values. • Success. The SNTP operation was successful and the system time was updated. • Request Timed Out. A directed SNTP request timed out without receiving a response from the SNTP server.
PAGE 74
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select Daylight Saving (DST) radio button: • Disable. Disable daylight saving time. • Recurring. Enable Recurring daylight saving time. • Recurring EU. Enable recurring EU daylight saving time. • Recurring USA. Enable recurring USA daylight saving time. • Non Recurring. Configure non-recurring daylight saving time. 6. Click the Apply button. Your settings are saved.
PAGE 75
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 22. DayLight Saving - Recurring Field Description Offset Configure recurring offset in minutes. The valid range is 1–1440 minutes. Zone Configure the time zone. The fields in the following table are visible only when DayLight Saving is Non Recurring. Table 23. DayLight Saving - Non Recurring Field Description Begins At These fields are used to configure the start values of the date and time. • Week. Configure the start week.
PAGE 76
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page, click the Refresh button. The following table displays the nonconfigurable Daylight Saving (DST) status information. Table 24. DayLight Saving Status Field Description Daylight Saving (DST) The Daylight Saving value, which is one of the following: • Disable • Recurring • Recurring EU • Recurring USA • Non Recurring Begins At Displays when the daylight saving time begins.
PAGE 77
M4300 Intelligent Edge Series Fully Managed Stackable Switches Manage Precision Time Protocol Precision Time Protocol (PTP, IEEE 1588) is a protocol that enables precise synchronization of clocks with a sub-microsecond accuracy across a packet-based network. PTP lets network devices of different precision and resolution synchronize to a grandmaster clock through an exchange of packets across the network.
PAGE 78
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Admin Mode Enable or Disable radio button. The default is Enable. 6. Click the Apply button. Your settings are saved. Manage the PTP Interface Settings On a standalone switch, by default, PTP is enabled globally on all interfaces. In a switch stack, by default, PTP is disabled for all interfaces. You can select individual interfaces on which you can enable or disable PTP.
PAGE 79
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure 6. From the Configured Mode menu, select Enable or Disable. The default is Enable. 7. Click the Apply button. Your settings are saved.
PAGE 80
M4300 Intelligent Edge Series Fully Managed Stackable Switches The DNS Server Configuration table includes a default DNS server with IP address 8.8.8.8. 5. Select the DNS Status Disable or Enable radio button: • Enable. Allow the switch to send DNS queries to a DNS server to resolve a DNS domain name. The default value is Enable. • Disable. Prevent the switch from sending DNS queries. 6. Enter the DNS Default domain Name to include in DNS queries.
PAGE 81
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Tunnel interface • Service port By default VLAN 1 is used as the source interface. 10. To specify the DNS server to which the switch sends DNS queries, do the following: a. In the DNS Server Address field in the DNS Server Configuration table, enter an IP address in standard IPv4 or IPv6 dot notation. b. Click the Add button. The server is added to the table. You can specify up to eight DNS servers.
PAGE 82
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select System > Management > DNS > Host Configuration. 5. In the Host Name (1 to 255 characters) field, specify the static host name to add. Its length cannot exceed 255 characters and it is a mandatory field. 6. In the IP Address field, enter the IP address in standard IPv4 dot notation to associate with the host name. 7. Click the Add button. The entry appears in the list on the page.
PAGE 83
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the Switch Database Management Template Preference A Switch Database Management (SDM) template is a description of the maximum resources a switch or router can use for various features. Different SDM templates allow different combinations of scaling factors, enabling different allocations of resources depending on how the device is used.
PAGE 84
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use SDM Next Template ID to configure the next active template. It is active only after the next reboot. To revert to the default template after the next reboot, use the Default option.
PAGE 85
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 27. SDM Template Preference Summary (continued) Field Description ARP Entries The maximum number of entries in the IPv4 Address Resolution Protocol (ARP) cache for routing interfaces. IPv4 Unicast Routes The maximum number of IPv4 unicast forwarding table entries. IPv6 NDP Entries The maximum number of IPv6 Neighbor Discovery Protocol (NDP) cache entries.
PAGE 86
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. Click the Apply button. Your settings are saved. Configure Green Ethernet Interface Settings To configure the Green Ethernet interface settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 87
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Use the EEE mode menu to Enable or Disable this option. The factory default is Disable. IF the EEE mode is not supported, then N/A is displayed. 8. Click the Apply button. Your settings are saved. Configure Green Ethernet Local and Remote Devices To configure green Ethernet local and remote devices: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 88
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. From the Interface menu, select the interface. 6. Use the EEE Admin Mode selection to enable or disable Energy Efficient Ethernet Admin Mode on the port. With EEE mode enabled, the port transitions to low power mode during a link idle condition. The default value is Disabled. If EEE Admin Mode is not supported, then N/A is displayed. 7.
PAGE 89
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 28. Green Ethernet Local Device information (continued) Field Description Rx_dll_enabled Status of the EEE capability negotiation on the local system. Rx_dll_ready Data Link Layer ready: This variable indicates that the rx system initialization is complete and is ready to update/receive LLDPDU containing EEE TLV.
PAGE 90
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable fields. Table 29. Green Ethernet Remote Device Information Field Description Remote ID The remote client identifier assigned to the remote system. Remote Tw_sys_tx (uSec) Integer that indicates the value of Tw_sys that the remote system can support. Remote Tw_sys_tx Echo (uSec) Integer that indicates the value of Transmit Tw_sys echoed back by the remote system.
PAGE 91
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page, click the Refresh button. The following table describes the nonconfigurable fields. Table 30. Green Ethernet Statistics Summary Field Description Current Power Consumption /Stack Power Consumption by all ports in switch in mWatts (mW). (mWatts) Percentage Power Saving /Stack (%) Percentage of power saved on all ports in switch when Green mode is enabled.
PAGE 92
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 31. Green Ethernet Feature Summary (continued) Field Description Interface Interface for which data is displayed or configured. Energy Detect Admin mode Enable or disable Energy Detect mode on the port. When this mode is enabled, when the port link is down, the PHY automatically goes down for a short period of time, then wakes up to check link pulses.
PAGE 93
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Interface. 6. In the Sampling Interval field, enter the interval at which EEE LPI data is collected. This is a global setting and is applied to all interfaces. The range is 30 to 36000.The default value is 3600. 7. In the Max Samples To Keep field, enter the maximum number of samples to keep. This is a global setting and is applied to all interfaces. The range is 1 to 168.The default value is 168. 8. Click the Apply button.
PAGE 94
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 33. Interface Green mode EEE LPI History Field Description Percentage Time spent in LPI mode since last sample Percentage of time spent in LPI mode during the current measurement interval. Percentage Time spent in LPI mode since last reset Percentage of time spent in LPI mode since EEE LPI statistics were reset.
PAGE 95
M4300 Intelligent Edge Series Fully Managed Stackable Switches Display Bonjour Information To display Bonjour information: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 96
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure DHCP Server Settings You can configure settings for DHCP server, DHCP pools, DHCP bindings, and DHCP relay. You can also view DHCP statistics and conflicts. Configure DHCP Server To configure a DHCP server: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 97
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Select the Conflict Logging mode Disable or Enable radio button. This specifies whether conflict logging on a DHCP server is to be enabled or disabled. The default value is Enable. 8. Select the BootP Automatic mode Disable or Enable radio button. This specifies whether BootP for dynamic pools is to be enabled or disabled. The default value is Disable. 9. To exclude addresses, do the following: a.
PAGE 98
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Click the Add button. The pool configuration is added. 6. Click the Apply button. Your settings are saved. The following table describes the DHCP Pool Configuration fields. Table 35. DHCP Pool Configuration Field Description Pool Name* For a user with read/write permission, this field shows names of all the existing pools along with an additional option Create.
PAGE 99
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 35. DHCP Pool Configuration (continued) Field Description Network Mask The subnet number for a DHCP address of a dynamic pool. Either Network Mask or Prefix Length can be configured to specify the subnet mask but not both. Network Prefix Length The subnet number for a DHCP address of a dynamic pool. Either Network Mask or Prefix Length can be configured to specify the subnet mask but not both. The valid range is 0 to 32.
PAGE 100
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 35. DHCP Pool Configuration (continued) Field Description DNS Server Addresses The list of DNS Server Addresses for the pool. Click the arrow beside the field name to expand the page and display a table where you can specify up to eight DNS Server Addresses in order of preference. NetBIOS Name Server Addresses The list of NetBIOS Name Server Addresses for the pool.
PAGE 101
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In Pool Name list, select the pool name. 6. Option Code specifies the Option Code configured for the selected Pool. 7. Use Option Type to specify the Option Type against the Option Code configured for the selected pool: • ASCII • Hex • IP Address 8. Option Value specifies the value against the Option Code configured for the selected pool. 9. Click the Add button. The Option Code is added for the selected pool.
PAGE 102
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select System > Services > DHCP Server > DHCP Server Statistics. The following table describes the DHCP Server Statistics fields. Table 36. DHCP Server Statistics Field Description Automatic Bindings The number of automatic bindings on the DHCP Server. Expired Bindings The number of expired bindings on the DHCP Server. Malformed Messages The number of the malformed messages.
PAGE 103
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 36. DHCP Server Statistics (continued) Field Description DHCPACK The number of DHCPACK messages sent by the DHCP Server. DHCPNAK The number of DHCPNAK messages sent by the DHCP Server. View DHCP Bindings Information To view the DHCP bindings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 104
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the DHCP Bindings Information fields. Table 37. DHCP Bindings Information Field Description IP Address The client's IP address. Hardware Address The client's hardware address. Lease Time Left The Lease Time Left in Days, Hours and Minutes dd:hh:mm format. Type The Type of Binding: Dynamic or Manual.
PAGE 105
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To display DHCP conflicts information, select one of the following radio buttons: • All Address Conflicts. Specify all address conflicts to be deleted. • Specific Address Conflict. Specify a specific dynamic binding to be deleted. The following table describes the DHCP Conflicts Information fields. Table 38. DHCP Conflicts Information Field Description IP Address The IP address of the host as recorded on the DHCP server.
PAGE 106
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Maximum Hop Count to enter the maximum number of hops a client request can take before being discarded. The range is (1 to 16). The default value is 4. 6. Select the Admin mode Disable or Enable radio button. When you select Enable, DHCP requests are forwarded to the IP address you entered in the Server Address field. 7. Use Minimum Wait Time to enter a Minimum Wait Time in seconds.
PAGE 107
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select System > Services > DHCP L2 Relay > DHCP L2 Relay Global Configuration. 5. Select the Admin mode Disable or Enable radio button. For global configuration, this enables or disables the DHCP L2 Relay on the switch. The default is Disable. 6.
PAGE 108
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select System > Services > DHCP L2 Relay > DHCP L2 Relay Interface Configuration. 5.
PAGE 109
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select System > Services > DHCP L2 Relay > DHCP L2 Relay Interface Statistics. The following table describes the DHCP L2 Relay Interface Statistics fields. Table 40. DHCP L2 Relay Interface Statistics Field Description Interface Shows the interface from which the DHCP message is received. UntrustedServerMsgsWithOpt82 Shows the number of DHCP message with option82 received from an untrusted server.
PAGE 110
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Admin mode Disable or Enable radio button. This enables or disables UDP Relay on the switch. The default value is Disable. 6. Use Server Address to specify the UDP Relay Server Address in x.x.x.x format. 7. Use UDP Port to specify the UDP Destination Port. These ports are supported: • DefaultSet. Relay UDP port 0 packets. This is specified if no UDP port is selected when creating the Relay server. • dhcp.
PAGE 111
M4300 Intelligent Edge Series Fully Managed Stackable Switches 10. Click the Apply button. Your settings are saved. The Hit Count field displays the number of UDP packets that are detected on the UDP port. Configure UDP Relay Interface Settings To configure UDP Relay Interface settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 112
M4300 Intelligent Edge Series Fully Managed Stackable Switches • pim-auto-rp. Relay PIM auto RP (UDP port 496) packets. • rip. Relay RIP (UDP port 520) packets • tacacs. Relay TACACS (UDP port 49) packet • tftp. Relay TFTP (UDP port 69) packets • time. Relay time service (UDP port 37) packets • Other. If this option is selected, the UDP Port Other Value is enabled. This option permits the user to enter their own UDP port in UDP Port Other Value. 8.
PAGE 113
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Admin mode Disable or Enable radio button. This specifies whether the DHCPv6 Service administrative mode is enabled or disabled The default value is Disable. 6. Use the DHCPv6 Server DUID field to specify the DHCP Unique Identifier (DUID) of the DHCPv6 server. 7. Click the Apply button. Your settings are saved. Configure the DHCPv6 Pool You can view the currently configured DHCPv6 server pools as well as to add and remove pools.
PAGE 114
M4300 Intelligent Edge Series Fully Managed Stackable Switches The Pool Name field shows the names of all the existing pools and the Create option. 5. To create a pool, select Create, and enter a unique name that identifies the DHCPv6 server pool to be created. The name can be up to 31 alphanumeric characters in length. 6. Use the Default Router Addresses field to specify the list of default router addresses for the pool. The user can specify up to eight default router addresses in order of preference. 7.
PAGE 115
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select System > Services > DHCPv6 Server > DHCPv6 Prefix Delegation Configuration. 5. Select from the list of configured Pool Names. 6. In the Prefix and Prefix Length fields, specify the delegated IPv6 prefix. 7. In the DUID field, specify the DUID identifier used to identify the client’s unique DUID value. 8. Specify the Client Name, which is useful for logging or tracing only.
PAGE 116
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Interface with the information to view or configure. You can either: a. In the Go To Interface field, enter the interface in unit/slot/port format and click the Go button. The entry corresponding to the specified interface is selected. b. Select the check box from the list of Interfaces configured for DHCPv6 server functionality. 6. In the Admin mode list, select to Enable or Disable DHCPv6 mode to configure server functionality.
PAGE 117
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select System > Services > DHCPv6 Server > DHCPv6 Bindings Information. 5. To refresh the page, click the Refresh button.
PAGE 118
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 41. DHCPv6 Binding Information (continued) Field Description Valid Lifetime The maximum amount of time in seconds that the client is allowed to use the prefix. Prefer Lifetime The preferred amount of time in seconds that the client is allowed to use the prefix.
PAGE 119
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To view detailed DHCPv6 statistics for an interface, from the Interface list select the entry for which data is to be displayed. If you select All, data is shown for all interfaces. 6. To reset the DHCPv6 counters for one or more interface, select each interface with the statistics to reset and click the Clear button. 7. To refresh the page, click the Refresh button.
PAGE 120
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 42. DHCPv6 Server Statistics (continued) Field Description DHCPv6 Request Packets Received The number of requests. DHCPv6 Confirm Packets Received The number of DHCPv6 Confirm messages received on the interface. This type of message is sent by a client to all DHCPv6 servers to determine whether its configuration is valid for the connected link.
PAGE 121
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 42. DHCPv6 Server Statistics (continued) Field Description DHCPv6 Reconfig Packets Transmitted The number of DHCPv6 reconfigure messages sent by the interface. This type of message is sent by a server to a DHCPv6 client to inform the client that the server has new or updated information. The client then typically initiates a renew/reply or Information-request/reply transaction with the server to receive the updated information.
PAGE 122
M4300 Intelligent Edge Series Fully Managed Stackable Switches You take one of the following actions: • In the Go To Interface field, enter the interface in unit/slot/port format and click the Go button. The entry corresponding to the specified interface is selected. • Select the check box from the list of Interfaces configured for DHCPv6 Relay functionality. 6. In the Admin mode field, specify the DHCPv6 mode, either Enable or Disable, to configure DHCPv6 Relay functionality. The default is Disable.
PAGE 123
M4300 Intelligent Edge Series Fully Managed Stackable Switches The Unit field displays the current PoE switch unit number. The Slot field displays the current PoE slot number for model M4300-96X. 5. To configure the settings for a PoE switch unit, select the check box for the switch unit number. 6. From the Power Management mode menu, select the power management algorithm that the switch uses to deliver power to the requesting PDs: • Static.
PAGE 124
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 43. Nonconfigurable fields on the basic PoE Configuration page (continued) Field Description Power Source The source of the system power. Consumed Power Total power in watts that is being delivered to all ports. Configure PoE Ports To configure PoE ports: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 125
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Legacy. Specifies that the port is powered using a high-inrush current, used by legacy PDs for which startup power requirements exceed 15W. • Pre-802.3at. Specifies that the port is powered in the IEEE 802.3af mode initially and then switched to the high-power IEEE 802.3at mode within a period of 75 msec. This mode must be selected if the PD does not perform Layer 2 classification or if the switch performs 2-event Layer 1 classification.
PAGE 126
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 44. Nonconfigurable fields on the Advanced PoE Configuration page (continued) Field Description Class The Class defines the range of power a PD is drawing from the system. Class definitions: 0 – 0.44-12.95 (watts) 1 – 0.44-3.83 (watts) 2 – 0.44-6.48 (watts) 3 – 0.44-12.95 (watts) 4 – 0.44-25.5 (watts) Output Voltage Current voltage being delivered to device in volts. Output Current Current being delivered to device in mA.
PAGE 127
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select System > PoE > Advanced > Power Configuration. 5. In the Power Status section, from the Unit ID menu, select the unit for which you want to display the power status. 6. For switch model M4300-96X only, select the Power Auto-rebalance Enable or Disable radio button. By default, the Enable radio button is selected. However, you can disable automatic power rebalancing among the PSU bays (power module slots) on switch model M4300-96X.
PAGE 128
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable fields in the Power Redundancy Configuration section. Field Description N+1 Active Displays whether the N+1 power redundancy feature is enabled. The possible values are Yes (enabled) and No (disabled). Number of PSU The total number of PSUs. Effective Number of PSU The effective number of PSUs, taking the N+1 power redundancy feature into account.
PAGE 129
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure SNMP You can configure SNMP settings for SNMP V1/V2 and SNMPv3. Configure the SNMP V1/V2 Community By default, two SNMP communities exist: • Private, with read/write privileges and status set to Enable. • Public, with read-only privileges and status set to Enable. These are well-known communities. You can change the defaults or to add other communities.
PAGE 130
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. Client Address. Taken together, the Client Address and Client IP Mask denote a range of IP addresses from which SNMP clients can use that community to access this device. If either (Client Address or IP Mask) value is 0.0.0.0, access is allowed from any IP address. Otherwise, every client's address is ANDed with the mask, as is the Client Address, and, if the values are equal, access is allowed.
PAGE 131
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Source Interface list, select the source interface to use for SNMP Trap receiver. Possible values are as follows: • Routing interface • Routing VLAN • Routing loopback interface • Tunnel interface • Service port VLAN 1 is used as source interface by default. 6. To add a host that receives SNMP traps, do the following steps: a. Community Name. Enter the community string for the SNMP trap packet to be sent to the trap manager.
PAGE 132
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. Click the Apply button. Your settings are saved. Configure SNMP V1/V2 Trap Flags You can enable or disable traps. When the condition identified by an active trap is encountered by the switch, a trap message is sent to any enabled SNMP Trap Receivers, and a message is written to the trap log. To configure the trap flags: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 133
M4300 Intelligent Edge Series Fully Managed Stackable Switches This enables or disables activation of authentication failure traps. The factory default is Enable. 6. Select the Link Up/Down Disable or Enable radio button This enables or disables activation of link status traps.The factory default is Enable. 7. Select the Multiple Users Disable or Enable radio button This enables or disables activation of multiple user traps.The factory default is Enable.
PAGE 134
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the SNMP Supported MIBs Status fields. Table 45. SNMP Supported MIBs Field Description Name The RFC number if applicable and the name of the MIB. Description The RFC title or MIB description. Configure SNMP V3 Users To configure SNMPv3 settings for the user account: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 135
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the User Name list, select the user account to be configured. The SNMP v3 Access mode field indicates the SNMPv3 access privileges for the user account. The admin account has read/write access, and all other accounts are assigned read-only access. 6. Select an Authentication Protocol radio button. The valid Authentication Protocols are None, MD5 or SHA: • If you select None, the user cannot access the SNMP data from an SNMP browser.
PAGE 136
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN. LLDP is a one-way protocol; there are no request/response sequences.
PAGE 137
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select System > LLDP > Global Configuration. 5. In the Transmit Interval field, enter the interval in seconds to transmit LLDP frames. The range is from 5 to 32768 secs. The default value is 30 seconds. 6. In the Transmit Hold Multiplier field, enter the multiplier on Transmit Interval to assign TTL. The range is from 2 to 10 secs. The default value is 4. 7. In the Re-Initialization Delay field, enter the delay before re-initialization.
PAGE 138
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select System > LLDP > Interface Configuration. 5. Use Go To Port to enter the Port in unit/slot/port format and click the Go button. The entry corresponding to the specified Port, is selected. 6. Use Port to specify the list of ports on which LLDP - 802.1AB can be configured. The Link Status field indicates whether the link is up or down. 7. Use Transmit to specify the LLDP - 802.1AB transmit mode for the selected interface. 8.
PAGE 139
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select System > LLDP > Statistics. The following table describes the LLDP Statistics fields. Table 46. LLDP Statistics Field Description Last Update The time when an entry was created, modified or deleted in the tables associated with the remote system.
PAGE 140
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 46. LLDP Statistics (continued) Field Description Discards The number of LLDP TLVs discarded for any reason by the LLDP agent on the corresponding port. Errors The number of invalid LLDP frames received by the LLDP agent on the corresponding port, while the LLDP agent is enabled. Age outs The number of age-outs that occurred on a given port.
PAGE 141
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In Interface list, select the ports on which LLDP - 802.1AB frames can be transmitted. The following table describes the LLDP Local Device Information fields. Table 47. LLDP Local Device Information Field Description Chassis ID Subtype The string that describes the source of the switch identifier. Chassis ID The string value used to identify the switch component associated with the local system.
PAGE 142
M4300 Intelligent Edge Series Fully Managed Stackable Switches View LLDP Remote Device Information You can view information on remote devices connected to the port. To view LLDP remote device information: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 143
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 48. LLDP Remote Device Information (continued) Field Description System Capabilities Enabled The system capabilities of the remote system which are supported and enabled. Time to Live The Time To Live value in seconds of the received remote entry. Management Address Type The type of the management address. Management Address • • Management Address. The advertised management address of the remote system. Type.
PAGE 144
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 49. LLDP Remote Device Inventory (continued) Field Description System Name Specifies model name of the remote device. Remote Port ID The port component associated with the remote system. Configure LLDP-MED Global Settings You can specify LLDP-MED parameters that are applied to the switch. To configure LLDP-MED global settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 145
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure LLDP-MED Interface To configure LLDP-MED Interface 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 146
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Extended Power via MDI - PD. To transmit the extended PD TLV in LLDP frames. • Inventory Information. To transmit the inventory TLV in LLDP frames. 10. Click the Apply button. Your settings are saved. View LLDP-MED Local Device Information To view LLDP-MED local device information: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 147
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Interface to select the ports on which LLDP-MED frames can be transmitted. The following table describes the LLDP-MED Local Device Information fields.L Table 50. LDP-MED Local Device Information Field Description Network Policy Information: Specifies if network policy TLV is present in the LLDP frames. Media Application Type The application type.
PAGE 148
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select System > LLDP > LLDP-MED > Remote Device Information. 5. Use Interface to select the ports on which LLDP-MED is enabled. The following table describes the LLDP-MED Remote Device Information fields. Table 51. LLDP-MED Remote Device Information Field Description Capability Information: The supported and enabled capabilities that was received in MED TLV on this port.
PAGE 149
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 51. LLDP-MED Remote Device Information (continued) Field Description Network Policy Information: Specifies if network policy TLV is received in the LLDP frames on this port. Media Application Type The application type. Types of application types are unknown, voicesignaling, guestvoice, guestvoicesignalling, softphonevoice, videoconferencing, streammingvideo, vidoesignalling.
PAGE 150
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 51. LLDP-MED Remote Device Information (continued) Field Description Extended POE PD: Specifies if extended PD TLV is received in LLDP frame on this port. Required The remote port's PD power requirement. Source The remote port's PD power source. Priority The remote port's PD power priority. View LLDP-MED Remote Device Inventory To view LLDP-MED remote device inventory: 1. Launch a web browser. 2.
PAGE 151
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Link Dependency The link dependency feature provides the ability to enable or disable one or more ports based on the link state of one or more different ports. With link dependency enabled on a port, the link state of that port is dependent on the link state of another port. For example, if port A is dependent on port B and the switch detects a link loss on port B, the switch automatically brings down the link on port A.
PAGE 152
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Click the Apply button. Your settings are saved. Configure a Link Dependency Interface To configure a link dependency interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 153
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. In the Link Dependency Interface Configuration section of the page, select which interfaces are displayed on the page: • Use LAG to display LAGs only. • Use All to display all physical ports and LAGs. 9. Use one of the following methods to select an interface: • Use the Go To Interface field by entering the interface in unit/slot/port format and click the Go button. The entry corresponding to the specified interface, is selected.
PAGE 154
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 54. Link Dependency Group Statistic (continued) Field Description Group Transitions Indicates the number of group transitions. Last Transition Time Indicates the time of the last group transitions. Configure ISDP You can configure ISDP global and interface settings. Configure ISDP Basic Global Settings To configure ISDP basic global settings: 1. Launch a web browser. 2.
PAGE 155
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. Use Timer to specify the period of time between sending new ISDP packets. The range is 5 to 254 seconds. The default value is 30 seconds. 7. Use Hold Time to specify the hold time for ISDP packets that the switch transmits. The hold time specifies how long a receiving device must store information sent in the ISDP packet before discarding it. The range 10 to 255 seconds. The default value is 180 seconds. 8.
PAGE 156
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Admin mode Disable or Enable radio button. This specifies whether the ISDP Service is enabled or disabled. The default value is Enable. 6. In the Timer field, specify the period of time between sending new ISDP packets. The range is 5 to 254 seconds. The default value is 30 seconds. 7. In the Hold Time field, specify the hold time for ISDP packets that the switch transmits.
PAGE 157
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure an ISDP Interface To configure an ISDP interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 158
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select System > ISDP > Advanced > Neighbor. The following table describes the ISDP Neighbor fields. Table 57. ISDP Neighbor Field Description Device ID The device ID of the ISDP neighbor.
PAGE 159
M4300 Intelligent Edge Series Fully Managed Stackable Switches View ISDP Statistics To view ISDP statistics: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 160
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 58. ISDP Statistics (continued) Field Description ISDP Checksum Error The number of the checksum error. ISDP Transmission Failure The number of the transmission failure. ISDP Invalid Format The number of the invalid format ISDP packets received. ISDP Table Full The table size of the ISDP table. ISDP Ip Address Table Full The table size of the ISDP IP address table.
PAGE 161
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Click the Delete button. The timer schedule is deleted. Configure the Timer Schedule To configure the timer schedule: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 162
M4300 Intelligent Edge Series Fully Managed Stackable Switches 10. Use the Date Start to set the schedule start date. If no date is specified, the schedule starts running immediately. 11. Use the Date Stop to set the schedule termination date. If No End Date selected, the schedule operates indefinitely. 12. Use the Recurrence Pattern to show with what period the event repeats. If recurrence is not needed (a timer schedule must be triggered just once), then set Date Stop as equal to Date Start.
PAGE 163
3 3 Manage Stacking This chapter covers the following topics: • M4300 Series Switch Stacking Overview • Firmware Synchronization and Upgrade • Stack Configuration Maintenance • Stack Master Election • Stack Factory Defaults Reset Behavior • Stack NSF • Configure a Stack • Run Stack Port Diagnostics • Configure Stack Firmware Synchronization • View NSF Summary Data • View NSF Checkpoint Statistics 163
PAGE 164
M4300 Intelligent Edge Series Fully Managed Stackable Switches M4300 Series Switch Stacking Overview A stackable switch is a switch that is fully functional operating as a stand-alone unit but can also be set-up to operate together with up to seven other switches. This group of switches shows the characteristics of a single switch while having the port capacity of the sum of the combined switches. One of the switches in the stack controls the operation of the stack. This switch is called the stack master.
PAGE 165
M4300 Intelligent Edge Series Fully Managed Stackable Switches Upgrading the firmware on a stack of switches is the same as upgrading the firmware on a single switch. After you download a new image by using the File Download page or SCC, the downloaded image is distributed to all the connected units of the stack. Note: We recommend that you set the active image for all stack members the same as the active image of the stack master.
PAGE 166
M4300 Intelligent Edge Series Fully Managed Stackable Switches preference can be assigned by the administrator. However, if all units are assigned the same management preference, then the unit with the highest MAC address is assigned as the stack master.
PAGE 167
M4300 Intelligent Edge Series Fully Managed Stackable Switches For NSF to be effective, adjacent networking devices must not reroute traffic around the restarting device. The switch uses three techniques to prevent traffic from being rerouted: • A protocol can distribute a part of its control plane to stack units so that the protocol can give the appearance that it is still functional during the restart. Spanning tree and port channels use this technique.
PAGE 168
M4300 Intelligent Edge Series Fully Managed Stackable Switches The Management Unit Selected menu displays the current primary management unit. 5. To change the primary management unit, select another unit ID of the stack member to become the stack master. A message displays to notify you that moving stack management unconfigures the entire stack including all interfaces. 6. Click the OK button to confirm the selection and reload the stack. The stack is unavailable until the boot process completes.
PAGE 169
M4300 Intelligent Edge Series Fully Managed Stackable Switches The valid range is 100 to 500. 7. Click the Apply button. Your settings are saved. Configure a Stack Member To configure a stack member before adding it to the stack: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 170
M4300 Intelligent Edge Series Fully Managed Stackable Switches Change the Settings for an Existing Stack Member To change the settings for an existing stack member: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 171
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable Stack Configuration fields. Table 59. Stack Configuration Field Description Hardware Management Preference The hardware management preference of the switch. The hardware management preference can be disabled or unassigned. Standby Status Identifies the switch that is configured as the standby unit. The possible values are as follows: • Cfg Standby.
PAGE 172
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 60. Stack Status nonconfigurable fields (continued) Field Description Switch Status The status of the selected unit. Possible values are as follows: • OK. The unit is connected and works properly. • Unsupported. The type of inserted unit is not supported. • Code Mismatch. The code version is not identical to the master/management unit. • Config Mismatch. The inserted device type is different from the configured devices. • Not Present.
PAGE 173
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select System > Stacking > Advanced > Stack Port Configuration. The page is shown in two parts. 5. Select the check box associated with the unit and port to configure: 6. From the Configured Stack mode field, select the operating mode of the port to be either: • Stack. The port connects to the stack port on another stack member. This is the default value for back panel stack mode. • Ethernet.
PAGE 174
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 61. Stack Port Configuration (continued) Field Description Link Speed (Gbps) The maximum speed of the stacking port. Transmit Data Rate (Mbps) The approximate transmit rate on the stacking port. Transmit Error Rate The number of errors in transmit packets per second. Total Transmit Errors The total number of errors in transmit packets since boot. The counter might wrap.
PAGE 175
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select Unit ID to display the packet path starting from the selected unit. 6. Select All to display the packet path from all the units in the stack. 7. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the Stack Port Diagnostics fields. Table 62. Stack Port Diagnostics Field Definition Unit ID The unit. Port The stackable interface on the given unit.
PAGE 176
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Stack Firmware Synchronization To configure the stack firmware synchronization features: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 177
M4300 Intelligent Edge Series Fully Managed Stackable Switches View NSF Summary Data To display NSF Summary data: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 178
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable NSF Summary data that is displayed. Table 64. NSF Summary Field Description Operational Status Indicates whether NSF is enabled on the chassis. NSF is enabled by default. Last Startup Reason The type of activation that caused the software to start the last time. The possible values are as follows: • Power On. The switch is rebooted.
PAGE 179
M4300 Intelligent Edge Series Fully Managed Stackable Switches View NSF Checkpoint Statistics To view NSF checkpoint statistics: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 180
4 4 Configure Switching Information This chapter covers the following topics: • Configure VLANs • Configure Auto-VoIP • Configure iSCSI Settings • Configure Spanning Tree Protocol • Manage Multicast • Configure MVR • Search and Manage the MAC Address Table • Manage Port Settings • Manage Link Aggregation Groups • Manage the Multiple Registration Protocol Settings • Manage Loop Protection 180
PAGE 181
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure VLANs Adding virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a VLAN switch forwards traffic based on the Layer 2 header, which is fast, and like a router, it partitions the network into logical segments, which provides better administration, security, and management of multicast traffic. By default, all ports on the switch are in the same broadcast domain.
PAGE 182
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Switching> VLAN > Basic > VLAN Configuration. 5. To reset VLAN settings to their default values, select the Reset Configuration check box. The factory default values are as follows: • All ports are assigned to the default VLAN of 1. • All ports are configured with a PVID of 1. • All ports are configured to an Acceptable Frame Types value of Admit All Frames. • All ports are configured with Ingress Filtering disabled.
PAGE 183
M4300 Intelligent Edge Series Fully Managed Stackable Switches The VLAN name can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always uses the name Default. The VLAN Type field identifies the type of the VLAN you are configuring. You cannot change the type of the default VLAN (VLAN ID = 1): it is always type Default. When you create a VLAN using this page, its type is always Static. A VLAN that is created by GVRP registration initially uses a type of Dynamic.
PAGE 184
M4300 Intelligent Edge Series Fully Managed Stackable Switches WARNING: If you select this button and confirm your selection on the next page, all VLAN configuration parameters are reset to their factory default values. 6. Confirm your selection. All VLANs, except for the default VLAN, are deleted. The factory default values are as follows: • All ports are assigned to the default VLAN of 1. • All ports are configured with a PVID of 1.
PAGE 185
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Switching> VLAN > Advanced > VLAN Configuration. 5. In the Internal VLAN Allocation Base field, specify the VLAN allocation base for the routing interface. You can enter a value from 1 to 4093. 6. Select the Internal VLAN Allocation Policy Ascending or Descending radio button. This specifies a policy for the internal VLAN allocation. 7. Click the Apply button. Your settings are saved.
PAGE 186
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Switching> VLAN > Advanced > VLAN Trunking Configuration. 5. To specify which interfaces are displayed on the page, select one of the following options: • Select the Unit ID field to display physical port information for the selected unit. • Use LAG to display LAGs only. • Use All to display all physical ports. 6.
PAGE 187
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. Select from the list to configure the Native VLAN ID. This is the native VLAN for the port, and is valid only when the port switchport mode is Trunk. 10. Configure the Trunk Allowed VLANs. This is the set of VLANs of which the port can be a member when configured in Trunk mode. By default, this list contains all possible VLANs, even if they are not yet created. VLAN IDs are in the range 1 to 4093.
PAGE 188
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the VLAN ID list, select the VLAN ID. 6. In the Group Operation list, select all the ports and configure them: • Untag All. Select all the ports on which all frames transmitted for this VLAN are untagged. All the ports are included in the VLAN. • Tag All. Select the ports on which all frames transmitted for this VLAN are tagged. All the ports are included in the VLAN. • Remove All.
PAGE 189
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information displayed on the page. Table 66. Advanced VLAN Membership Field Definition VLAN Name The name for the VLAN that you selected. It can be up to 32 alphanumeric characters long, including blanks. VLAN ID 1 always uses the name Default. VLAN Type The type of the VLAN you selected: • Default (VLAN ID = 1). Always present • Static. A VLAN that you configured • Dynamic.
PAGE 190
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information displayed on the page. Table 67. VLAN Status Field Definition VLAN ID The VLAN identifier (VID) of the VLAN. The range of the VLAN ID is 1 to 4093. VLAN Name The name of the VLAN. VLAN ID 1 is always named `Default`. VLAN Type The VLAN type: • Default (VLAN ID = 1). Always present • Static. A VLAN that you configured • Dynamic.
PAGE 191
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To display information for all physical ports and LAGs, click the ALL button. 6. Select the interfaces. Select the Interface check box next to the interfaces. You can select multiple interfaces. To select all the interfaces, select the Interface check box in the heading row. 7. In the PVID field, specify the VLAN ID to assign to untagged or priority-tagged frames received on this port. The factory default is 1. 8.
PAGE 192
M4300 Intelligent Edge Series Fully Managed Stackable Switches • When disabled, all frames are forwarded in accordance with the 802.1Q VLAN bridge specification. The factory default is disabled. 12. In the Port Priority field, specify the default 802.1p priority assigned to untagged packets arriving at the port. You can enter a number from 0 to 7. 13. Click the Apply button. Your settings are saved.
PAGE 193
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the MAC Address field, type a valid MAC address to be bound to a VLAN ID. This field is configurable only when a MAC-based VLAN is created. 6. In the VLAN ID field, specify a VLAN ID in the range of 1 to 4093. 7. Take one of the following actions: • To add the add a MAC address to the VLAN mapping, click the Add button. • To delete a MAC address from VLAN mapping, click the Delete button.
PAGE 194
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Switching> VLAN > Advanced > Protocol Based VLAN Group Configuration. 5. In the Group Name field, type a name for the new group. You can enter up to 16 characters. 6. In the Protocol field, select the protocols to be associated with the group. There are three configurable protocols: • IP. IP is a network layer protocol that provides a connectionless service for the delivery of data. • ARP.
PAGE 195
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Switching> VLAN > Advanced > Protocol Based VLAN Group Membership. 5. In the Group ID list, select the protocol-based VLAN group ID. 6.
PAGE 196
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure an IP Subnet-Based VLAN IP subnet-to-VLAN mapping is defined by configuring an entry in the IP Subnet to VLAN table. An entry is specified through a source IP address, network mask, and the desired VLAN ID. The IP subnet-to-VLAN configurations are shared across all ports of the device. To add or delete an IP subnet-based VLAN: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 197
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Switching> VLAN > Advanced > Port DVLAN Configuration. 5. Select Interface check boxes to select the physical interface.
PAGE 198
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure a Voice VLAN You can configure the parameters for voice VLAN configuration. Only users with read/write access privileges can change the data on this page. To configure a voice VLAN: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 199
M4300 Intelligent Edge Series Fully Managed Stackable Switches This is enabled only when VLAN ID or dot1p is selected as the interface mode. 9. In the CoS Override Mode field, select Disable or Enable. The default is Disable. 10. In the Authentication Mode field, select Enable or Disable. The default is Enable. When the authentication mode is enabled, voice traffic is allowed on an unauthorized voice VLAN port. When the authentication mode is disabled, devices are authorized through dot1x.
PAGE 200
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the GVRP Mode Disable or Enable radio button. This selects the GARP VLAN registration protocol administrative mode for the switch. The factory default is Disable. 6. Select the GMRP Mode Disable or Enable radio button. This selects the GARP multicast registration protocol administrative mode for the switch. The factory default is Disable. 7. Click the Apply button. Your settings are saved.
PAGE 201
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Interface to select the physical interface for which data is to be displayed or configured. 6. In the Port GVRP Mode field, select Enable or Disable. This specifies the GARP VLAN registration protocol administrative mode for the port.If you select Disable, the protocol is not active and the join time, leave time, and leave all time have no effect. The factory default is Disable. 7.
PAGE 202
M4300 Intelligent Edge Series Fully Managed Stackable Switches 11. Click the Apply button. Your settings are saved. Configure Auto-VoIP You can configure protocol-based port settings and OUI settings. Configure Protocol-Based Port Settings To configure protocol-based port settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 203
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. In the Class Value list, specify the CoS tag value to be reassigned for packets received on the voice VLAN when Remark CoS is enabled. 7. Click the Apply button. Your settings are saved. Configure Auto-VoIP OUI-Based Properties To configure auto-VoIP OUI-based properties: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 204
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Switching > Auto-VoIP > OUI-based > Port Settings. The Operational Status field displays the current operational status of each interface. 5.
PAGE 205
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select Switching > Auto-VoIP > OUI-based > OUI Table. 5. In the Telephony OUI(s) field, specify the VoIP OUI prefix to be added in the format AA:BB:CC. Up to 128 OUIs can be configured. 6. In the Description field, enter the description for the OUI. The maximum length of description is 32 characters.
PAGE 206
M4300 Intelligent Edge Series Fully Managed Stackable Switches Delete Entries From the OUI Table To delete one or more entries from the OUI table: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 207
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable Auto-VoIP status information. Table 70. Auto-VoIP Status Field Description Auto-VoIP VLAN ID The auto-VoIP VLAN ID. Maximum Number of Voice Channels Supported The maximum number of voice channels supported. Number of Voice Channels Detected The number of VoIP channels prioritized successfully.
PAGE 208
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Global iSCSI Settings To configure the global iSCSI settings on the switch: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 209
M4300 Intelligent Edge Series Fully Managed Stackable Switches The global traffic class mapping configuration determines the traffic class used to transmit iSCSI packets. The traffic mapping configuration options are as follows: • IEEE 802.1P • IP-DSCP The configuration of the CoS component determines changes in the mapping of IEEE 802.1p or IP-DSCP values to traffic classes. For more information, see Manage Class of Service on page 471. 8.
PAGE 210
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable iSCSI Sessions information. Table 71. iSCSI Sessions Field Description Target Name The target’s name. Initiator Name The initiator’s name. Initiator Session ID (ISID) The iSCSI identifier.
PAGE 211
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the TCP Port field, specify the TCP port for the target that monitors iSCSI traffic. Up to 16 TCP ports can be defined in the system. The well-known iSCSI ports 860 and 3260 are configured as defaults but you can remove them as any other configured target. 6. In the IP address field, specify an IP address for the target that monitors iSCSI traffic. The default is 0.0.0.0. 7.
PAGE 212
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following describes the nonconfigurable iSCSI Sessions information that is displayed. Table 72. iSCSI Sessions Field Description Target Name The target’s name. Initiator Name The initiator’s name. Initiator Session ID (ISID) The unique identifier an initiator assigns to its session endpoint which, when combined with the iSCSI initiator name, provides a unique name for the iSCSI initiator port.
PAGE 213
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable iSCSI Sessions Detailed information. Table 73. iSCSI Sessions Detailed Field Description Session Index The list of session indices. The rest of the fields on this page correspond to the currently selected Session Index. Target Name The target’s name. Initiator Name The initiator’s name.
PAGE 214
M4300 Intelligent Edge Series Fully Managed Stackable Switches Note: For two bridges to be in the same region, the force version must be 802.1s and their configuration name, digest key, and revision level must match. For additional information about regions and their effect on network topology, refer to the IEEE 802.1Q standard. Configure Basic STP Settings To configure STP basic settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 215
M4300 Intelligent Edge Series Fully Managed Stackable Switches The options are IEEE 802.1d, IEEE 802.1w, IEEE 802.1s, PVST, and RPVST. 7. Use Configuration Name to specify an identifier used to identify the configuration currently being used. It can be up to 32 alphanumeric characters. 8. Use Configuration Revision Level to specify an identifier used to identify the configuration currently being used. The values allowed are between 0 and 65535. The default value is 0. 9.
PAGE 216
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable fields. Table 74. STP Configuration Field Description Configuration Digest Key Identifier used to identify the configuration currently being used. Configuration Format Selector The version of the configuration format being used in the exchange of BPDUs. MST ID Table consisting of the MST instances (including the CST) and the corresponding VLAN IDs associated with each of them.
PAGE 217
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Admin Mode Disable or Enable radio button. This specifies whether spanning tree operation is enabled on the switch. The default is Enable. 6. Use Force Protocol Version to specify the Force Protocol Version parameter for the switch. The options are IEEE 802.1d, IEEE 802.1w, IEEE 802.1s, PVST, and RPVST. The default is IEEE 802.1w. 7.
PAGE 218
M4300 Intelligent Edge Series Fully Managed Stackable Switches 11. Select the BPDU Filter Disable or Enable radio button. This specifies whether the BPDU Filter feature is enabled. STP BPDU filtering applies to all operational edge ports. Edge Port in an operational state is supposed to be connected to hosts that typically drop BPDUs. If an operational edge port receives a BPDU, it immediately loses its operational status.
PAGE 219
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure CST Settings You can configure Common Spanning Tree (CST) and Internal Spanning Tree on the switch. To configure CST settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 220
M4300 Intelligent Edge Series Fully Managed Stackable Switches set to the next lowest priority that is a multiple of 4096. For example, if the priority is attempted to be set to any value between 0 and 4095, it is set to 0. The default priority is 32768. • Bridge Max Age (secs). The bridge maximum age time for the Common and Internal Spanning Tree (CST), which indicates the amount of time in seconds a bridge waits before implementing a topological change.
PAGE 221
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 76. STP Advanced CST Configuration Field Description Forward Delay(secs) Derived value of the Root Port Bridge Forward Delay parameter. Hold Time(secs) Minimum time between transmission of Configuration BPDUs. CST Regional Root Priority and base MAC address of the CST Regional Root. CST Path Cost Path Cost to the CST tree Regional Root.
PAGE 222
M4300 Intelligent Edge Series Fully Managed Stackable Switches The port priority is set in multiples of 16. For example if the priority is attempted to be set to any value between 0 and 15, it is set to 0. If it is tried to be set to any value between 16 and (2*16-1) it is set to 16 and so on. The default value is 128. 7. Use Admin Edge Port to specify if the specified port is an Edge Port within the CIST. Use the menu to select Disable or Enable. The default value is Disable. 8.
PAGE 223
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information displayed on the page. Table 77. CST Port Configuration Field Description Auto Calculated Port Path Cost Displays whether the path cost is automatically calculated (Enabled) or not (Disabled). Path cost is calculated based on the link speed of the port if the configured value for Port Path Cost is zero. Hello Timer The value of the parameter for the CST.
PAGE 224
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the CST Status information displayed on the page. Table 78. CST Port Status Field Description Interface Identify the physical or port channel interfaces associated with VLANs associated with the CST. Port ID The port identifier for the specified port within the CST.
PAGE 225
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 78. CST Port Status (continued) Field Description Topology Change Acknowledge Identifies whether the topology change acknowledgement flag is set for the next BPDU to be transmitted for this port. It is either True or False. Edge port Indicates whether the port is enabled as an edge port. It takes the value Enabled or Disabled. Point-to-point MAC Derived value of the point-to-point status.
PAGE 226
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To add a new MST, do the following: a. Configure the MST values, • MST ID. Specify the ID of the MST to create. The valid values for this are 1 to 4094. This is only visible when the select option of the MST ID select box is selected. • Priority. The bridge priority value for the MST. When switches or bridges are running STP, each is assigned a priority.
PAGE 227
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 79. MST Configuration (continued) Field Description Root Path Cost Path Cost to the Designated Root for this MST instance. Root PortIdentifier Port to access the Designated Root for this MST instance. View the Spanning Tree MST Port Status You can configure and display Multiple Spanning Tree (MST) settings on a specific port on the switch.
PAGE 228
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use MST ID to select one MST instance from existing MST instances. 6. Use Interface to select one of the physical or port channel interfaces associated with VLANs associated with the selected MST instance. 7. Use Port Priority to specify the priority for a particular port within the selected MST instance. The port priority is set in multiples of 16.
PAGE 229
M4300 Intelligent Edge Series Fully Managed Stackable Switches View STP Statistics You can view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To view Spanning Tree statistics: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 230
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure PVST VLAN Settings You can view and configure Per VLAN Spanning Tree Protocol (PVST)/Per VLAN Rapid Spanning Tree Protocol (RPVST) VLAN settings for the device. To configure PVST/RPVST VLAN settings for the device: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 231
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. In the Forward Time field, configure the spanning tree forward delay time for a specified VLAN. The range is 4 to 30 seconds. The default value is 15 seconds. This interval is a time for listening and learning states before transitioning a port to the forwarding state. 9. Use the Max Age field to configure the spanning tree maximum age time for a specified VLAN.
PAGE 232
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Switching > STP > Advanced > PVST Interface. 5. Select a VLAN ID from the list of VLANs with enabled STP Admin mode and PVST or RPVST. Note: The Other option is used for configuring a VLAN which is not yet created.
PAGE 233
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. The Per VLAN Cost is the path cost from the port to the root bridge. The values allowed are between 1 and 200,000,000. By default, cost is not configured. Use the value 0 to unconfigure the setting. If per VLAN cost is not configured, the path cost value is set based on Link Speed. 8. Click the Apply button. Your settings are saved.
PAGE 234
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The Status field displays Neither PVST nor Rapid-PVST is enabled. If you change the STP mode to PVST or to RPVST, the page displays statistic information. Manage Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255.
PAGE 235
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Search by MAC Address to enter a MAC address. Enter six two-digit hexadecimal numbers separated by colons, for example 00:01:23:43:45:67. 6. Click the GO button. If the address exists, that entry is displayed. An exact match is required. Table 85. MFDB Table Field Description MAC Address The multicast MAC address for which you requested data. VLAN ID The VLAN ID to which the multicast MAC address is related.
PAGE 236
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select Switching > Multicast > MFDB > MFDB Statistics. The following table describes the MFDB Statistics fields. Table 86. MFDB Statistics Field Description Max MFDB Table Entries The maximum number of entries that the Multicast Forwarding Database table can hold.
PAGE 237
M4300 Intelligent Edge Series Fully Managed Stackable Switches Allowing switches to snoop IGMP packets is a creative effort to solve this problem. The switch uses the information in the IGMP packets as they are being forwarded throughout the network to determine which segments receive packets directed to the group address. Configure IGMP Snooping Automatically with IGMP Plus Mode IGMP Plus mode lets you automatically configure IGMP snooping, which is used to build forwarding lists for multicast traffic.
PAGE 238
M4300 Intelligent Edge Series Fully Managed Stackable Switches If enabled, the following IGMP snooping modes are automatically enabled: • Admin mode • Proxy Querier mode • Report Flood Mode • Exclude Mrouter Interface Mode • Fast Leave Auto-assignment Mode The default is Enable. If disabled, these IGMP snooping modes are automatically disabled. Note: For information about other settings on the page, see Configure IGMP Snooping Manually on page 238. 6. Click the Apply button.
PAGE 239
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Switching> Multicast > IGMP Snooping > Configuration. 5. Select the Admin Mode Enable or Disable radio button. This selection enables or disables the administrative mode for IGMP snooping for the switch. The default is Disable. 6.
PAGE 240
M4300 Intelligent Edge Series Fully Managed Stackable Switches If enabled, the switch forwards IGMP Join/Leave PDUs that it receives on a downstream port to an upstream mrouter interface. In addition, the switch forwards a multicast data stream to an upstream mrouter interface only if that port already received an IGMPv1 or IGMPv2 membership message. The switch drops unknown multicast streams. The default is Enable.
PAGE 241
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select Switching> Multicast > IGMP Snooping > Interface Configuration. The page lists all physical, VLAN, and LAG interfaces. 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure 6.
PAGE 242
M4300 Intelligent Edge Series Fully Managed Stackable Switches 10. From the Fast Leave menu, select to enable or disable the IGMP snooping fast leave mode for the interface. This selection enables or disables the automatic assignment of fast-leave messages for the interface. The default is Disable. The Fast Leave Operational Mode field shows the status of the interface. 11. From the Proxy Querier menu, select to enable or disable the proxy querier for the interface.
PAGE 243
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Proxy Querier • Querier Election Mode • Installs reserved Multicast MAC addresses into the system. If disabled, these IGMP snooping modes are automatically disabled for the VLAN. Note: For information about other settings on the page, see Configure IGMP Snooping for VLANs Manually on page 243. 7. Click the Apply button. Your settings are saved.
PAGE 244
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Membership Interval. Specify the value for the group membership interval of IGMP snooping for the VLAN. The value must be the value in the Maximum Response Time field plus a value of 1 to 3600 seconds. • Maximum Response Time. Specify the value for the maximum response time of IGMP snooping for the VLAN. The range must be from 1 to the value in the Group Membership Interval field minus 1.
PAGE 245
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. To modify the IGMP snooping settings for a VLAN manually, do the following: a. Select the check box next to the VLAN ID b. Update the settings. c. Click the Apply button. Your settings are saved. Configure a Multicast Router You can configure the interface as the one the multicast router is attached to. All IGMP packets snooped by the switch are forwarded to the multicast router reachable from this interface.
PAGE 246
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure a Multicast Router VLAN You can configure an interface to forward the snooped IGMP packets from a specific VLAN only to the multicast router that is connected to the interface. The configuration is not needed most of the time since the switch automatically detects a multicast router and forwards the IGMP packets accordingly.
PAGE 247
M4300 Intelligent Edge Series Fully Managed Stackable Switches IGMP Snooping Querier Overview IGMP snooping requires that one central switch or router periodically query all end-devices on the network to announce their multicast memberships. This central device is the IGMP querier. The IGMP query responses, known as IGMP reports, keep the switch updated with the current multicast group membership on a port-by-port basis.
PAGE 248
M4300 Intelligent Edge Series Fully Managed Stackable Switches This specifies the snooping querier address to be used as the source address in periodic IGMP queries. This address is used when no address is configured on the VLAN on which query is being sent. 7. Use IGMP Version to specify the IGMP protocol version used in periodic IGMP queries. The range is 1 to 2. The default value is 2. 8.
PAGE 249
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To create a new VLAN ID for IGMP snooping, select New Entry from the VLAN ID field and complete the following fields. You can also set pre-configurable snooping querier parameters. • VLAN ID. The VLAN ID for which the IGMP snooping querier is to be enabled. • Querier Election Participate Mode. Enable or disable querier Participate mode. • - Disabled.
PAGE 250
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure MLD Snooping Automatically with MLD Plus Mode MLD Plus mode lets you automatically configure MLD snooping, which is used to build forwarding lists for multicast traffic. You can also configure MLD snooping manually (see Configure MLD Snooping Manually on page 251). To configure MLD snooping automatically: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens.
PAGE 251
M4300 Intelligent Edge Series Fully Managed Stackable Switches If disabled, these MLD snooping modes are automatically disabled. Note: For information about other settings on the page, see Configure MLD Snooping Manually on page 251. 6. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable MLD Snooping Configuration fields. Table 90.
PAGE 252
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the MLD Snooping Admin Mode Enable or Disable radio button to specify the administrative mode for MLD snooping for the switch. The default is Disable. 6. Select the Proxy Querier Mode Enable or Disable radio button. This enables or disables an MLD proxy querier on the system. If it is disabled, then an MLD proxy query with source IP 0::0 is not sent in response to an MLD leave packet. If it is enabled, then MLD proxy queries are sent.
PAGE 253
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable MLD Snooping Configuration fields. Table 91. MLD Snooping Configuration Field Definition Multicast Control Frame Count The number of multicast control frames that have been processed by the CPU. Interfaces Enabled for MLD Snooping One or more interfaces on which MLD snooping is administratively enabled.
PAGE 254
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Next to the Interface column, select the check box for the interface that you want to configure All physical, VLAN, and LAG interfaces are listed in the Interface column. 6. Use Admin Mode to select the interface mode for the selected interface for MLD snooping for the switch. The default is Disable. 7.
PAGE 255
M4300 Intelligent Edge Series Fully Managed Stackable Switches To configure MLD snooping for VLANs automatically: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 256
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure MLD Snooping for VLANs Manually You can manually configure the settings for MLD snooping for VLANs, which is used to build forwarding lists for multicast traffic. You can also configure MLD snooping for VLANS automatically (see Configure MLD Snooping for VLANs Automatically with MLD Plus Mode on page 254). To configure the settings for MLD snooping for VLANs manually: 1. Launch a web browser. 2.
PAGE 257
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. In the Multicast Router Expiry Time field, specify the value for the multicast router expiration time of MLD Snooping for the specified VLAN ID. The valid range is 0 to 3600. 10. From the Proxy Querier Mode menu, select to enable or disable the proxy querier mode for the specified VLAN ID. If you select Disable, the MLD proxy query with source IP 0::0 is not sent in response to an MLD leave packet. The default value is Enable. 11.
PAGE 258
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. From the Interface menu, select the interface for which you want to enable or disable the multicast router configuration. 6. From the Multicast Router menu, select Enable or Disable. 7. Click the Apply button. Your settings are saved. Configure Multicast Router VLAN Settings To configure multicast router VLAN settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 259
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. From the Interface menu, select the interface for which you want to enable or disable the multicast router configuration. 6. Use the VLAN ID field to specify the VLAN ID for which you want to enable or disable the multicast router configuration. 7. Form the Multicast Router menu, select Enable or Disable. 8. Click the Apply button. Your settings are saved.
PAGE 260
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. Use Querier Address to specify the snooping querier address to be used as source address in periodic MLD queries. This address is used when no address is configured on the VLAN on which query is being sent. The supported IPv6 formats are x:x:x:x:x:x:x:x and x::x. 7. Use MLD Version to specify the MLD protocol version used in periodic MLD queries. 8.
PAGE 261
M4300 Intelligent Edge Series Fully Managed Stackable Switches When this mode is disabled, on detecting another querier of same version in the VLAN, the snooping querier moves to a non-querier state. When this mode is enabled, the snooping querier participates in querier election where the lowest IP address wins the querier election and operates as the querier in that VLAN. The other querier moves to non-querier state. 7.
PAGE 262
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure MVR You can configure basic, advanced, group, interface or group membership settings. Configure Basic MVR Settings To configure basic MVR settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 263
M4300 Intelligent Edge Series Fully Managed Stackable Switches membership. The value is equal to the tenths of a second. The range is from 1 to 100 tenths. The factory default is 5 tenths or one-half. 8. Use MVR Mode to specify the MVR mode of operation. Possible values are compatible or dynamic. The factory default is compatible. 9. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information displayed on the page. Table 93.
PAGE 264
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. Use the MVR Multicast VLAN to specify the VLAN on which MVR multicast data is received. All source ports belong to this VLAN. The value can be set in a range of 1 to 4094. The default value is 1. 7. Use the MVR Global query response time to set the maximum time to wait for the IGMP reports membership on a receiver port. This time applies only to receiver-port leave processing.
PAGE 265
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use the MVR Group IP to specify the IP address for the new MVR group. 6. Use the Count to specify the number of contiguous MVR groups. This helps you to create multiple MVR groups through a single click of the Add button. If the field is empty, then clicking the button creates only one new group. The field is displayed as empty for each particular group. The range is from 1 to 256. 7. Click the Add button. The MVR group is added.
PAGE 266
M4300 Intelligent Edge Series Fully Managed Stackable Switches The status of each port displays. 5. Use Interface to select the interface. 6. Use Admin Mode to Enable or Disable MVR on a port. The factory default is Disable. 7. Use Type to configure the port as an MVR receiver port or a source port. The default port type is none. 8. Use Immediate Leave to Enable or Disable the Immediate Leave feature of the MVR on a port. The factory default is Disable. 9. Click the Apply button. Your settings are saved.
PAGE 267
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use the Group IP to specify the IP multicast address of the MVR group. 6. Use the Port List to view the configured list of members of the selected MVR group. You can use this port list to add the ports you selected to this MVR group. 7. Click the Apply button. Your settings are saved. View MVR Statistics To view MVR statistics: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 268
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information displayed on the page. Table 96. MVR Statistics Field Definition IGMP Query Received The number of received IGMP queries. IGMP Report V1 Received The number of received IGMP reports V1. IGMP Report V2 Received The number of received IGMP reports V2.
PAGE 269
M4300 Intelligent Edge Series Fully Managed Stackable Switches Search and Manage the MAC Address Table You can view or configure the MAC Address Table. This table contains information about unicast entries for which the switch has forwarding or filtering information. This information is used by the transparent bridging function in determining how to propagate a received frame. Search the MAC Address Table To search the MAC address table: 1. Launch a web browser. 2.
PAGE 270
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Searched by VLAN ID. Select VLAN ID, enter the VLAN ID, for example, 100. Then click the Go button. If the address exists, the entry is displayed as the first entry followed by the remaining (greater) MAC addresses. • Searched by Port. Select Port, enter the port ID in Unit/Slot/Port format, for example, 2/1/1. Then click the Go button.
PAGE 271
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Address Aging Timeout (seconds) to specify the time-out period in seconds for aging out dynamically learned forwarding information. IEEE 802.1D-1990 recommends a default of 300 seconds. The value can be specified as any number between 10 and 1000000 seconds. The factory default is 300. 6. Click the Apply button. Your settings are saved. Configure a Static MAC Address To configure a static MAC address: 1. Launch a web browser. 2.
PAGE 272
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. Take one of the following actions: • Click the Add button. The static MAC address is added to the switch. • Click the Delete button. The static MAC address deleted from the switch. Manage Port Settings You can view and monitor the physical port information for the ports available on the switch. Configure Port Settings You can configure the physical interfaces on the switch. To configure port settings: 1. Launch a web browser. 2.
PAGE 273
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. From the Admin Mode menu, select Enable or Disable. This sets the port control administrative mode. For the port to participate in the network, you must select Enable. The factory default is Enable. 8. From the LACP Mode menu, select Enable or Disable. This selects the Link Aggregation Control Protocol administrative mode. The mode must be enabled in order for the port to participate in link aggregation. The factory default is Enable. 9.
PAGE 274
M4300 Intelligent Edge Series Fully Managed Stackable Switches The default debounce timer value is 0, which means that debouncing is disabled. 15. From the Flow Control menu, select to enable or disable IEEE 802.3 flow control. The default is Disable. The switch does not send pause frames if the port buffers become full. Flow control helps to prevent data loss when the port cannot keep up with the number of frames being switched.
PAGE 275
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Expandable Port Settings You can view and configure the expandable ports. To view and configure expandable ports information: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 276
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the Port Link Flap Settings You can configure the port link flap settings, which determine when a port is automatically placed in the disabled state. You can also configure the automatic recovery settings, which allows a port to be automatically activated again. To configure the port link flap settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 277
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Auto-Recovery Admin Mode. Select the Enable or Disable radio button. This setting determines the auto-recovery administrative mode. To enable auto-recovery, you must select Enable. The default is Disable. If enabled, the port is automatically removed from the disabled state after the interval is reached. • Auto-Recovery Interval. Enter the period in seconds after which the port is automatically removed from the disabled state.
PAGE 278
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information displayed on the page. Table 99. Port Description Field Description Port Selects the interface for which data is to be displayed or configured. MAC Address The physical address of the specified interface. PortList Bit Offset The bit offset value that corresponds to the port when the MIB object type PortList is used to manage in SNMP.
PAGE 279
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following describes the nonconfigurable information that is displayed. Table 100. Port Transceiver Field Description Port The interface for which data is to be displayed. Vendor Name Vendor name of the SFP. Link Length 50 μm Link length supported for 50 μm fiber. Link Length 62, 5 μm Link length supported for 62, 5 μm fiber. Serial Number Serial number of the SFP. Part Number Part number of the SFP.
PAGE 280
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Switching> LAG > LAG Configuration. 5. Use LAG Name to enter the name to be assigned to the LAG.
PAGE 281
M4300 Intelligent Edge Series Fully Managed Stackable Switches algorithm, excellent load balancing performance, and packet attributes selection based on the packet type: • For L2 packets, source and destination MAC address are used for hash computation. • For L3 packets, source IP, destination IP address, TCP/UDP ports are used. 8. Use STP Mode to enable or disable the Spanning Tree Protocol administrative mode associated with the LAG. The possible values are as follows: • Disable.
PAGE 282
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure LAG Membership You can select two or more full-duplex Ethernet links to be aggregated together to form a link aggregation group (LAG), which is also known as a port-channel. The switch can treat the port-channel as if it were a single link. To configure LAG membership: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 283
M4300 Intelligent Edge Series Fully Managed Stackable Switches The factory default is Enable, which causes the trap to be sent. 10. Use STP Mode to enable or disable the Spanning Tree Protocol administrative mode associated with the LAG. The possible values are as follows: • Disable. Spanning tree is disabled for this LAG. • Enable. Spanning tree is enabled for this LAG. Enable is the default. 11. Use Static Mode to select enable or disable.
PAGE 284
M4300 Intelligent Edge Series Fully Managed Stackable Switches Manage the Multiple Registration Protocol Settings Like 802.1AS, Multiple Registration Protocol (MRP) is an audio video bridging (AVB) feature that is available on some FASTPATH platforms. MVR is a base registration protocol that enables devices running an MRP application to register attributes to other devices in a network. MRP provides an application to register attributes such as bandwidth for a given AV stream and MAC address information.
PAGE 285
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Global MRP Settings You can configure global MRP settings for the switch. To configure global MRP settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 286
M4300 Intelligent Edge Series Fully Managed Stackable Switches individual MAC address information and group MAC address membership. End stations can request to join or leave a multicast group, or to register an individual MAC address with a specific VLAN. MAC address entries can be dynamically registered and deregistered if MMRP is administratively enabled on the device. 7. Select the Periodic State Machine (MVRP) Enable or Disable radio button.
PAGE 287
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To configure one or more ports or LAGs, select the check box next to each port or LAG to configure. You can select multiple ports to apply the same settings to the selected interfaces. 6. In the MVRP Mode field, select Enable or Disable. This specifies the administrative mode of Multiple VLAN Registration Protocol (MVRP) on the interface. MVRP registers VLANs in the network, enabling automatic VLAN configuration on the device. 7.
PAGE 288
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Switching > MRP > Advanced > MMRP Statistics. 5. To refresh the page with the latest information on the switch, click the Refresh button. 6. To clear the statistics for one or more ports, do the following: a.
PAGE 289
M4300 Intelligent Edge Series Fully Managed Stackable Switches View and Clear MVRP Statistics You can view and clear information about the MVRP frames transmitted and received by the switch and by each interface. To view and clear MVRP statistics: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 290
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information that the MVRP Global Statistics page displays. Table 103. MVRP Statistics Field Description Interface In the MVRP Statistics table, this field identifies the interface associated with the rest of the data in the row. Frames Received The number of MVRP frames that were received on the switch.
PAGE 291
M4300 Intelligent Edge Series Fully Managed Stackable Switches If the source MAC address matches the MAC address of the switch, the switch can perform one of the following actions, depending on how you configure the action: • The port is shut down. • A log message is generated. (If a syslog server is configured, the log message can be sent to the syslog server.) • The port is shut down and a log message is generated. If loop protection is disabled, the multicast packet is silently dropped.
PAGE 292
M4300 Intelligent Edge Series Fully Managed Stackable Switches The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Switching> L2 Loop Protection > L2 Loop Protection Configuration. 5.
PAGE 293
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the Loop Protection Settings for Ports and View the Loop Protection State Before you can configure loop protection for individual ports, you must globally enable loop protection (see Configure the Global Loop Protection Settings on page 291). To enable and configure loop protection for a port and view the loop protection state on the switch: 1. Launch a web browser. 2.
PAGE 294
M4300 Intelligent Edge Series Fully Managed Stackable Switches Note: You can select multiple ports. You can select all ports by selecting the check box in the table header. 7. From the Keep Alive menu, select Enable to specify that loop protection must be enabled on the port. By default, loop protection is disabled for a port. 8. From the RX Action menu, select the action that the switch takes when a loop is detected on the port: • Log. Log the message when a loop is detected on the port. • Disable.
PAGE 295
5 5 Manage Routing This chapter covers the following topics: • Manage Routes • Configure the Routing IP Settings • Configure Routing Parameters for the Switch • Manage IPv6 • Manage VLANs • Configure Address Resolution Protocol • Configure RIP • Configure Router Discovery • Configure Virtual Router Redundancy Protocol 295
PAGE 296
M4300 Intelligent Edge Series Fully Managed Stackable Switches Manage Routes The Routing Table collects routes from multiple sources: static routes and local routes. The Routing Table can learn multiple routes to the same destination from multiple sources. The Routing Table lists all routes. Configure a Basic Route To configure a basic route: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 297
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. Next Hop IP Address displays the outgoing router IP address to use when forwarding traffic to the next router (if any) in the path toward the destination. The next router is always one of the adjacent neighbors or the IP address of the local interface for a directly attached network. 9. Preference displays an integer value from 1 to 255.
PAGE 298
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 105. Routing Table Basic Route Configuration (continued) Field Description Preference The preference is an integer value from (0 to 255). The user can specify the preference value (sometimes called administrative distance) of an individual static route. Among routes to the same destination, the route with the lowest preference value is the route entered into the forwarding database.
PAGE 299
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Subnet Mask indicates the portion of the IP interface address that identifies the attached network. This is also referred to as the subnet/network mask. 8. Next Hop IP Address displays the outgoing router IP address to use when forwarding traffic to the next router (if any) in the path toward the destination. The next router is always one of the adjacent neighbors or the IP address of the local interface for a directly attached network. 9.
PAGE 300
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 106. Route Configuration - Learned Routes (continued) Field Description Preference The preference is an integer value from 0 to 255. The user can specify the preference value (sometimes called administrative distance) of an individual static route. Among routes to the same destination, the route with the lowest preference value is the route entered into the forwarding database.
PAGE 301
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Static to specify the static route preference value in the router. The default value is 1. The range is 1 to 255. 6. Specify the RIP route preference value in the router. The default value is 120. The range is 1 to 255. 7. Specify the OSPF Intra route preference value in the router. The default value is 110. The range is 1 to 255.
PAGE 302
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the Routing IP Settings You can configure routing IP settings for the switch, as opposed to the IP settings for an interface. To configure the routing IP settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 303
M4300 Intelligent Edge Series Fully Managed Stackable Switches By default, the rate limit is 100 packets/sec (the burst interval is 1000 msec). To disable ICMP Rate limiting, set this field to 0. The valid rate Interval is from 0 to 2147483647. 9. Use ICMP Rate Limit Burst Size to control the ICMP error packets by specifying the number of ICMP error packets that are allowed per burst interval. By default, burst size is 100 packets.
PAGE 304
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information displayed on the page. Table 108. IP Basic Statistics Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error.
PAGE 305
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 108. IP Basic Statistics (continued) Field Description IpInUnknownProtos The number of locally addressed datagrams received successfully but discarded because of an unknown or unsupported protocol. IpInDiscards The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but that were discarded (for lack of buffer space).
PAGE 306
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 108. IP Basic Statistics (continued) Field Description IcmpInErrors The number of ICMP messages that the entity received but determined as having ICMP-specific errors (bad ICMP checksums, bad length, and so on). IcmpInDestUnreachs The number of ICMP destination unreachable messages received. IcmpInTimeExcds The number of ICMP time exceeded messages received. IcmpInParmProbs The number of ICMP parameter problem messages received.
PAGE 307
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Routing Parameters for the Switch You can configure routing parameters for the switch as opposed to an interface. To configure routing parameters for the switch: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 308
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. Use ICMP Rate Limit Interval to control the ICMP error packets by specifying the number of ICMP error packets that are allowed per burst interval. By default, the rate limit is 100 packets/sec, (the burst interval is 1000 msec). To disable ICMP Ratelimiting set this field to 0. The valid rate interval is in the range 0 to 2147483647. 9.
PAGE 309
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing> IP > Advanced > Statistics. The following table describes the nonconfigurable information displayed on the page. Table 110.
PAGE 310
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 110. IP Statistics (continued) Field Description IpInAddrErrors The number of input datagrams discarded because the IP address in their IP header's destination field was not a valid address to be received at this entity. This count includes invalid addresses (for example, 0.0.0.0) and addresses of unsupported classes (such as., Class E).
PAGE 311
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 110. IP Statistics (continued) Field Description IpFragOKs The number of IP datagrams that were fragmented at this entity. IpFragFails The number of IP datagrams that were discarded because they needed to be fragmented at this entity but could not be, for example this can occur because their Don't Fragment flag was set.
PAGE 312
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 110. IP Statistics (continued) Field Description IcmpOutSrcQuenchs The number of ICMP source quench messages sent. IcmpOutRedirects The number of ICMP redirect messages sent. For a host, this is zero, since hosts do not send redirects. IcmpOutEchos The number of ICMP echo (request) messages sent. IcmpOutEchoReps The number of ICMP echo reply messages sent. IcmpOutTimestamps The number of ICMP timestamp (request) messages.
PAGE 313
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Port column, select the check box for the interface that you want to configure. 6. Use Description to enter the description for the interface. 7. Use IP Address Configuration Method to enter the method by which an IP address is configured on the interface.
PAGE 314
M4300 Intelligent Edge Series Fully Managed Stackable Switches If you select Disable, they are dropped. The default value is Disable. 13. Use Encapsulation Type to select the link layer encapsulation type for packets transmitted from the specified interface. The possible values are Ethernet and SNAP. The default is Ethernet. 14. Use Proxy Arp to disable or enable proxy ARP for the specified interface. 15. Use Local Proxy Arp to disable or enable local proxy ARP for the specified interface. 16.
PAGE 315
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the Secondary IP Address To configure the secondary IP address: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 316
M4300 Intelligent Edge Series Fully Managed Stackable Switches Manage IPv6 Configure IPv6 Global Settings You can configure IPv6 routing parameters for the switch, as opposed to an interface. To configure IPv6 global settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 317
M4300 Intelligent Edge Series Fully Managed Stackable Switches This value controls the ICMP error packets. The default burst size is 100 packets. When the burst interval is 0, then configuring this field is not a valid operation. The valid burst size is 1 to 200. 9. Click the Apply button. Your settings are saved. View the IPv6 Route Table To view the IPv6 Route Table: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 318
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 113. IPv6 Route Table Field Description Protocol The type of protocol for the active route. Next Hop Interface The interface over which the route is active. For a reject route, the next hop would be a Null0 interface. Next Hop IP Address The next hop IPv6 address for the active route. Preference The route preference of the configured route. Configure IPv6 Interface Settings Configure IPv6 interface settings: 1.
PAGE 319
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. All physical interfaces are valid. 6. Select Enable or Disable in the IPv6 Mode list.
PAGE 320
M4300 Intelligent Edge Series Fully Managed Stackable Switches This is the amount of time allocated to consider the neighbors reachable after ND confirmation. The range of reachable time is 0 to 3600000. The default is 0. 16. Use the Adv Interval field to specify the maximum time allowed between sending router advertisements from the interface. The range of the maximum advertisement interval is 4 to 1800. The default value is 600. 17.
PAGE 321
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the IPv6 Prefix Settings Configure the IPv6 prefix settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 322
M4300 Intelligent Edge Series Fully Managed Stackable Switches 12. In the Autonomous Flag list, select Enable or Disable. This specifies whether the selected prefix can be used for autonomous address configuration. The default value is Enable. 13. Click the Add button. The IPv6 address is added to the interface. 14. Click the Apply button. Your settings are saved. The Current State field displays the state of the IPV6 address. The state is TENT if routing is disabled or DAD fails.
PAGE 323
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. From the Interface list, select the interface. When the selection is changed, a page refresh occurs, causing all fields to be updated for the newly selected port. 6. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information that is displayed. Table 115.
PAGE 324
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 115. IPv6 Advanced Interface Statistics (continued) Field Description Received Datagrams Discarded Due To No Route The number of input datagrams discarded because no route could be found to transmit them to their destination Received Datagrams With Unknown The number of locally-addressed datagrams received successfully but Protocol discarded because of an unknown or unsupported protocol.
PAGE 325
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 115. IPv6 Advanced Interface Statistics (continued) Field Description Datagrams Successfully Fragmented The number of IPv6 datagrams that were fragmented at this output interface. Datagrams Failed To Fragment The number of output datagrams that could not be fragmented at this interface. Datagrams Fragments Created The number of output datagram fragments that were generated as a result of fragmentation at this output interface.
PAGE 326
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 116. ICMPv6 Statistics (continued) Field Description ICMPv6 Neighbor Solicit Messages The number of ICMP Neighbor Solicit messages received by the interface. Received ICMPv6 Neighbor Advertisement Messages Received The number of ICMP Neighbor Advertisement messages received by the interface. ICMPv6 Redirect Messages Received The number of ICMPv6 Redirect messaged received by the interface.
PAGE 327
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 116. ICMPv6 Statistics (continued) Field Description ICMPv6 Neighbor Solicit Messages The number of ICMP Neighbor Solicitation messages sent by the Transmitted interface. ICMPv6 Neighbor Advertisement Messages Transmitted The number of ICMP Neighbor Advertisement messages sent by the interface. ICMPv6 Redirect Messages Transmitted The number of Redirect messages sent.
PAGE 328
M4300 Intelligent Edge Series Fully Managed Stackable Switches example, 2001:231F:::1. Then click the Go button. If the address exists, that entry is displayed. An exact match is required. • To search by Interface, select Interface from the Search By list, enter the interface ID in unit/slot/port format, for example, 2/1/1. Then click the Go button. If the address exists, that entry is displayed. 6. To refresh the page with the latest information on the switch, click the Refresh button. 7.
PAGE 329
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure an IPv6 Static Route Configure an IPv6 static route: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 330
M4300 Intelligent Edge Series Fully Managed Stackable Switches View the IPv6 Route Table To view the IPv6 route table: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 331
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 118. IPv6 Advanced Route Table (continued) Field Description Next Hop IP Address The next hop IPv6 address for the active route. Preference The route preference of the configured route. Configure IPv6 Route Preferences Use this page to configure the default preference for each protocol. These values are arbitrary values in the range of 1 to 255 and are independent of route metrics.
PAGE 332
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. In the OSPFv3 Inter field, specify the OSPFv3 inter route preference value in the router. The range is 1 to 255. The default value is 110. 8. In the OSPFv3 External field, specify the OSPFv3 external route preference value in the router. The range is 1 to 255. The default value is 110. 9. Click the Apply button. Your settings are saved. The Local field displays the local preference.
PAGE 333
M4300 Intelligent Edge Series Fully Managed Stackable Switches This specifies the mode of sending ICMPv6 Destination Unreachables on this interface. If you select Disable, then this interface does not send ICMPv6 destination unreachables. By default IPv6 destination unreachables mode is enabled. 10. In the IPv6 Address/Prefix Length field, enter a configured IPv6 address for the selected interface. The address must be entered in the format prefix/length. 11.
PAGE 334
M4300 Intelligent Edge Series Fully Managed Stackable Switches routing. A port can be either a VLAN port or a router port, but not both. However, a VLAN port can be part of a VLAN that is a router port. Use the VLAN Static Routing Wizard The VLAN Static Routing Wizard creates a VLAN, adds selected ports to the VLAN. The VLAN Static Routing Wizard gives you the option to add the selected ports as a link aggregation (LAG).
PAGE 335
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use VLAN ID to specify the VLAN identifier (VID) associated with this VLAN. The range of the VLAN ID is 1 to 4093. 6. Use Ports to display selectable physical ports and LAGs (if any). Selected ports are added to the routing VLAN. Each port has three modes: • T (Tagged). Select the ports on which all frames transmitted for this VLAN are tagged. The ports that are selected are included in the VLAN. • U (Untagged).
PAGE 336
M4300 Intelligent Edge Series Fully Managed Stackable Switches This field displays the IDs of all the VLANs configured on this switch. 6. Use IP Address to enter the IP address to be configured for the VLAN routing interface. 7. Use Subnet Mask to enter the subnet mask to be configured for the VLAN routing interface. 8. Click the Add button. The VLAN routing interface is added for the selected VLAN ID. The following table describes the nonconfigurable information displayed on the page. Table 119.
PAGE 337
M4300 Intelligent Edge Series Fully Managed Stackable Switches Display the ARP Entries in the ARP Cache Use this page to display ARP entries in the ARP cache. The table lists the remote connections most recently seen by this switch. To display ARP entries in the ARP cache: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 338
M4300 Intelligent Edge Series Fully Managed Stackable Switches Add an Entry to the ARP Table You can add an entry to the Address Resolution Protocol (ARP) table. To add an entry to the ARP table: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 339
M4300 Intelligent Edge Series Fully Managed Stackable Switches The pagination navigation menu functions as follows: - Rows per page. Select how many table entries are displayed per page. Possible values are 20, 50, 100, 200, and All. If you select All, the browser might be slow to display the information. - <. Display the previous page of the table data entries. - >. Display the next page of the table data entries. The following table describes the nonconfigurable information displayed on the page.
PAGE 340
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Age Time to enter the amount of time, in seconds, that a dynamic ARP entry remains in the ARP table before aging out. The range is 15 to 21600 seconds. The default value for Age Time is 1200 seconds. 6. Use Response Time to enter the amount of time, in seconds that the device waits for an ARP response to an ARP request that it sends. The range for this field is 1 to 10 seconds. The default value is 1 second. 7.
PAGE 341
M4300 Intelligent Edge Series Fully Managed Stackable Switches • None. Selected if the user does not want to delete any entry from the ARP Table. • Remove IP Address. This field displays only if you select Specific Dynamic/Gateway Entry or Specific Static Entry in the Remove from Table list. The Remove IP Address field allows you to enter the IP address against the entry that is to be removed from the ARP table. 11. Click the Apply button. Your settings are saved.
PAGE 342
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the RIP Admin Mode field, select the Enable or Disable option. If you select Enable, RIP is activated for the switch. The default is Enable. 6. Click the Apply button. Your settings are saved. Configure RIP Settings To configure advanced RIP settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 343
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. Select a Split Horizon Mode radio button: • None. No special processing for this case. • Simple. A route is not included in updates sent to the router from which it was learned. The default is Simple. • Poison Reverse. A route is included in updates sent to the router from which it was learned, but the metric is set to infinity.
PAGE 344
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > RIP > Advanced > Interface Configuration. 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button.
PAGE 345
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. Select Enable or Disable from the RIP Mode list. Before you enable RIP version 1 or version 1c on an interface, you must first enable network directed broadcast mode on the corresponding interface. The default value is Disable. 9. Select the Authentication Type from the list. The types are as follows: • None. This is the initial interface state. If you select this option, no authentication protocols are run. • Simple.
PAGE 346
M4300 Intelligent Edge Series Fully Managed Stackable Switches To configure advanced RIP route redistribution settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 347
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Destination IP address and netmask • Action (permit or deny) All other fields (such as Source and Destination Port, Precedence, Tos, and so on) are ignored. The source IP address is compared to the destination IP address of the route. The source IP netmask in the access list rule is treated as a wildcard mask, indicating which bits in the source IP address must match the destination address of the route.
PAGE 348
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Router Discovery To configure router discovery: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 349
M4300 Intelligent Edge Series Fully Managed Stackable Switches This is the maximum length of time that the advertised addresses are to be considered as valid router addresses by hosts. 11. Use Preference Level to specify the preference level of the router as a default router relative to other routers on the same subnet. Higher numbered addresses are preferred. You must enter an integer. 12. Click the Apply button. Your settings are saved.
PAGE 350
M4300 Intelligent Edge Series Fully Managed Stackable Switches The VRID field is configurable only if you are creating a new virtual router. The valid values are 1 to 255. 7. Select the unit/slot/port for the new virtual router from the Interface menu. 8. In the Primary IP Address field, enter the primary IP address of the virtual router. 9. From the Mode menu, select the Active or Inactive mode for the new virtual router. 10. Click the Add button. The virtual router is added to the switch configuration.
PAGE 351
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Global Configuration Admin Mode field, set the administrative status of VRRP in the router by selecting the Enable or Disable radio button. By default, VRRP is disabled. 6. Select the VRID. The VRID field is configurable only if you are creating a new virtual router. The valid values are 1 to 255. 7. Select the unit/slot/port for the new virtual router from the Interface menu. 8.
PAGE 352
M4300 Intelligent Edge Series Fully Managed Stackable Switches Enter a number from 1 to 255. The default value is 1 second. 12. In the Primary IP Address field, enter the IP address that is associated with the virtual router. The default is 0.0.0.0. 13. From the Authentication Type menu, select the type of authentication for the virtual router. The options are as follows: • 0-None. No authentication is performed. The default is None. • 1-Simple. Authentication is performed using a text password. 14.
PAGE 353
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure an Advanced VRRP Secondary IP Address To configure the advanced VRRP secondary IP address settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 354
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure an Advanced VRRP Tracking Interface To configure an advanced VRRP tracking interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 355
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. In the Tracked Route Prefix field, enter the prefix of the route. 9. In the Tracked Route Prefix Length field, enter the prefix length of the route. 10. In the Priority Decrement field, enter priority decrement value the for the route. The valid range is 1 to 254. The default value is 10. The nonconfigurable Reachable field displays the reachability of the tracked route. 11. Click the Add button.
PAGE 356
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information that is displayed. Table 128. Advanced VRRP Statistics Field Description Global Statistics Router Checksum Errors The total number of VRRP packets received with an invalid VRRP checksum value.
PAGE 357
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 128. Advanced VRRP Statistics (continued) Field Description Authentication Failure The total number of VRRP packets received that did not pass the authentication check. IP TTL Errors The total number of VRRP packets received by the virtual router with IP Time-To-Live (TTL) not equal to 255. Zero Priority Packets Received The total number of VRRP packets received by the virtual router with a priority of 0.
PAGE 358
6 6 Configure OSPF and OSPFv3 This chapter covers the following topics: • Configure OSPF • Configure OSPFv3 358
PAGE 359
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure OSPF Configure Basic OSPF Settings To configure basic OSPF settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 360
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the OSPF Default Route Advertise Settings To configure default route advertise settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 361
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Default Information Originate field, select the Enable or Disable option. If you select Enable, OSPF originates an external LSA advertising a default route (0.0.0.0/0.0.0.0). Default Information Originate is disabled by default. 6. In the Always field, select True or False.
PAGE 362
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Router ID field, enter the 32-bit integer in dotted-decimal format that uniquely identifies the router within the autonomous system (AS). To change the router ID, you must first disable OSPF. After you set the new router ID, you must reenable OSPF for the change to take effect. The default value is 0.0.0.0, although this is not a valid router ID. 6. In the Admin Mode field, select Enable or Disable.
PAGE 363
M4300 Intelligent Edge Series Fully Managed Stackable Switches An opaque LSA is used for flooding user-defined information within an OSPF router domain. 9. When the number of nondefault external LSAs exceeds a configured limit, the router enters an overflow state as defined in RFC 1765. Use the Exit Overflow Interval field to specify how long in seconds OSPF must wait before attempting to leave overflow state. In overflow state, OSPF cannot originate nondefault external LSAs.
PAGE 364
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configuring this field overwrites any present interface level passive mode setting. OSPF does not form adjacencies on passive interfaces, but does advertise attached networks as stub networks. The default is Disabled. 17. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 129.
PAGE 365
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > OSPF > Advanced > Common Area Configuration. 5. Enter the OSPF Area ID.
PAGE 366
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 130. OSPF Common Area Configuration (continued) Field Description Area LSA Checksum The 32-bit unsigned sum of the link state advertisements' LSA checksums contained in this area's link state database. This sum excludes external (LSA type 5) link state advertisements. The sum can be used to determine if there was a change in a router's link state database, and to compare the link state database of two routers.
PAGE 367
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. Click the Add button. The area is configured as a stub area. 9. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 131. OSPF Stub Area Configuration Field Description SPF Runs The number of times that the intra-area route table was calculated using this area's link state database. This is typically done using Dijkstra's algorithm.
PAGE 368
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Enter the OSPF Area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. 6. Configure the Import Summary LSAs by selecting Enable or Disable from the list. If you select Enable, summary LSAs are imported into NSSA areas. 7. Configure the Default Information Originate.
PAGE 369
M4300 Intelligent Edge Series Fully Managed Stackable Switches The value is the period of time that an elected translator continues to perform its duties after it determines that its translator status was deposed by another router. The valid range is 0 to 3600. 10. In the Redistribute Mode field, select Enable or Disable from the list. This configures the NSSA ABR so that learned external routes are redistributed to the NSSA. 11. Click the Add button. The area is configured as an NSSA area. 12.
PAGE 370
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > OSPF > Advanced > Area Range Configuration. 5. Enter the OSPF Area ID.
PAGE 371
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > OSPF > Advanced > Interface Configuration. 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button.
PAGE 372
M4300 Intelligent Edge Series Fully Managed Stackable Switches • State • Designated router • Backup designated router • Number of link events • LSA Ack interval • Metric cost For OSPF to be fully functional, you must enter a valid ID address and subnet mask. For more information, see Configure the IP Interface on page 312. Note: Once OSPF is initialized on the router, it remains initialized until the router is reset. 8.
PAGE 373
M4300 Intelligent Edge Series Fully Managed Stackable Switches Make an interface passive to prevent OSPF from forming an adjacency on an interface. OSPF advertises networks attached to passive interfaces as stub networks. Interfaces are not passive by default, meaning that the passive mode default is Disable. 15. In the OSPF Network Type list, select Broadcast or Point-to-Point. OSPF selects a designated router and originates network LSAs only for broadcast networks.
PAGE 374
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 133. OSPF Interface Configuration (continued) Field Description State The state of the selected router interface. State is one of the following: • Down. This is the initial interface state. The lower-level protocols indicated that the interface is unusable. Interface parameters are set to their initial values. All interface timers are disabled, and there are no adjacencies associated with the interface. • Loopback.
PAGE 375
M4300 Intelligent Edge Series Fully Managed Stackable Switches View and Clear OSPF Statistics for an Interface If OSPF is enabled, you can view and clear statistics for the selected interface. To view and clear OSPF statistics for an interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 376
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable OSPF Interface Statistics data that is displayed. Table 134. OSPF Interface Statistics Field Description OSPF Area ID The OSPF area to which the selected router interface belongs. An OSPF area ID is a 32 bit integer in dotted-decimal format that uniquely identifies the area to which the interface connects.
PAGE 377
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 134. OSPF Interface Statistics (continued) Field Description Authentication Failure The number of OSPF packets dropped because the sender is not an existing neighbor or the sender's IP address does not match the previously recorded IP address for that neighbor.
PAGE 378
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > OSPF > Advanced > Neighbor Table. 5. To refresh the page with the latest information on the switch, click the Refresh button. 6.
PAGE 379
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 135. OSPF Neighbor Table (continued) Field Description State The state of a neighbor can be the following: • Down. This is the initial state of a neighbor conversation. It indicates that no recent information was received from the neighbor. On NBMA networks, hello packets can still be sent to Down neighbors, although at a reduced frequency. • Attempt. This state is valid only for neighbors attached to NBMA networks.
PAGE 380
M4300 Intelligent Edge Series Fully Managed Stackable Switches View the OSPF Link State Database To view the OSPF link state database: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 381
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 136. OSPF Link State Database (continued) Field Description LSA Type The format and function of the link state advertisement.
PAGE 382
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information that is displayed in the External Link State Database (LSDB) table. Table 137. OSPF External Link State Database Table Field Description Router ID The 32-bit integer in dotted-decimal format that uniquely identifies the router within the autonomous system (AS). The router ID is set on the IP Configuration page. To change the router ID you must first disable OSPF.
PAGE 383
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 138. OSPF AS Opaque Link State Database Table (continued) Field Description LS ID The link state ID identifies the piece of the routing domain that is being described by the advertisement. The value of the LS ID depends on the advertisement's LS type. Age The time since the link state advertisement was first originated, in seconds. Sequence The sequence number field is a signed 32-bit integer.
PAGE 384
M4300 Intelligent Edge Series Fully Managed Stackable Switches Virtual links can be configured between any pair of area border routers having interfaces to a common (non-backbone) area. 6. Configure the Neighbor Router ID by entering the neighbor portion of a virtual link specification. Virtual links can be configured between any pair of area border routers having interfaces to a common (non-backbone) area. 7.
PAGE 385
M4300 Intelligent Edge Series Fully Managed Stackable Switches The key value is displayed only if you are logged on with read/write privileges; otherwise, it is displayed as asterisks. 13. In the Authentication ID field, enter the ID to be used for authentication. You are prompted to enter an ID only when you select Encrypt as the authentication type. The ID is a number between 0 and 255, inclusive. 14. Click the Add button The new virtual link is added. 15. Click the Apply button. Your settings are saved.
PAGE 386
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 139. OSPF Virtual Link Configuration (continued) Field Description State The state of the interface. It takes one the following values: • Down. This is the initial interface state. The lower-level protocols indicated that the interface is unusable. Interface parameters are set to their initial values. All interface timers are disabled, and there are no adjacencies associated with the interface. • Waiting.
PAGE 387
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Routing > OSPF > Advanced > Route Redistribution. 5. From the Source menu, select from the list of available source routes that were not previously configured for redistribution by OSPF. The valid values are as follows: • BGP • Connected • OSPF • RIP • Static 6. In the Redistribute list, select to Enable or Disable the redistribution for the selected source protocol. 7.
PAGE 388
M4300 Intelligent Edge Series Fully Managed Stackable Switches The source IP address is compared to the destination IP address of the route. The source IP netmask in the access list rule is treated as a wildcard mask, indicating which bits in the source IP address must match the destination address of the route. Note: A 1 in the mask indicates a do not care in the corresponding address bit.
PAGE 389
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. From the Support Mode list, configure how the unit performs graceful restarts by selecting from the following possible values: • Always. Indicates that OSPF performs a graceful restart for all planned and unplanned warm restart events. • Disabled. Disables OSPF performing graceful restarts. • Planned. Indicates that OSPF performs a graceful restart only when a restart is planned (for example, due to an initiate failover command).
PAGE 390
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information that is displayed. Table 140. NSF OSPF Summary Field Description Restart Status The restart status of OSPF Helper feature. The possible values are as follows: • Not Restarting • Planned Restart • Unplanned Restart Restart Age (seconds) The amount of time since the last restart occurred. Restart Exit Reason Displays how the master unit on the switch last started up.
PAGE 391
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Admin Mode Disable or Enable radio button. If you select Enable, OSPFv3 is activated for the switch. By default, OSPFv3 is enabled. You must configure a router ID before OSPFv3 can become operational. For more information, see Configure the Routing IP Settings on page 302. Note: Once OSPFv3 is initialized on the router, it remains initialized until the router is reset. 6.
PAGE 392
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Default Information Originate Enable radio button. Selecting Enable makes it possible to specify the other settings on this page. Selecting Disable returns the other fields on this page to their default values. 6. Select the Always True or False radio button. When set to True, this field sets the router advertise. The default is False. 7. In the Metric field, specify the metric of the default route.
PAGE 393
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Routing > OSPFv3 > Advanced > OSPFv3 Configuration. 5. Enter the Router ID in 32-bit integer, dotted-decimal format that uniquely identifies the router within the autonomous system (AS). To change the router ID you must first disable OSPFv3. After you set the new router ID, you must reenable OSPFv3 for the change to take effect. The default value is 0.0.0.0, although this is not a valid router ID. 6.
PAGE 394
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. Use the Default Metric field to set a default for the metric of redistributed routes. This field displays the default metric if one was already set, or blank if one was not configured earlier. The valid values are 1 to 16777214. The default is 0 (unconfigured). 10. Use the Maximum Paths field to configure the maximum number of paths that OSPFv3 can report to a given destination. The valid values are 1 to 4. 11.
PAGE 395
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 141. Advanced OSPFv3 Configuration (continued) Field Description External LSA Checksum The sum of the LS checksums of the external LSAs contained in the link state database. This sum can be used to determine if there was a change in a router's link state database, and to compare the link state databases of two routers. New LSAs Originated In any given OSPFv3 area, a router originates several LSAs. Each router originates a router-LSA.
PAGE 396
M4300 Intelligent Edge Series Fully Managed Stackable Switches The area is returned to the normal state. The following table describes the nonconfigurable information that is displayed. Table 142. Advanced OSPFv3 Common Area Configuration Field Description External Routing A definition of the router's capabilities for the area, including whether or not AS-external-LSAs are flooded into or throughout the area.
PAGE 397
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Area ID field, enter the OSPF area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. 6. In the Import Summary LSAs list, select the Enable or Disable option. If you select Enable, summary LSAs are imported into areas. The default is Enable. 7.
PAGE 398
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > OSPFv3 > Advanced > NSSA Area Configuration. 5. In the Area ID field, enter the OSPF area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. 6.
PAGE 399
M4300 Intelligent Edge Series Fully Managed Stackable Switches b. Candidate. Cause the router to participate in the translator election process when it attains border router status. 9. In the Translator Stability Interval field, configure the translator of the NSSA. The value is the period of time that an elected translator continues to perform its duties after it determines that its translator status was deposed by another router. The valid range is 0 to 3600. 10.
PAGE 400
M4300 Intelligent Edge Series Fully Managed Stackable Switches 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4.
PAGE 401
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > OSPFv3 > Advanced > Interface Configuration. 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button.
PAGE 402
M4300 Intelligent Edge Series Fully Managed Stackable Switches Note: Once OSPFv3 is initialized on the router, it remains initialized until the router is reset. 8. Configure the Router Priority by entering the OSPFv3 priority for the selected interface. The priority of an interface is specified as an integer from 0 to 255. The default is 1, which is the highest router priority. A value of 0 indicates that the router is not eligible to become the designated router on this network. 9.
PAGE 403
M4300 Intelligent Edge Series Fully Managed Stackable Switches OSPF uses this value in computing shortest paths. The range is from 1 to 65,535. The default is 1. Metric Cost is configurable only if OSPFv3 is initialized on the interface. 17. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 145. Advanced OSPFv3 Interface Configuration Field Description IPv6 Address The IPv6 address of the interface.
PAGE 404
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 145. Advanced OSPFv3 Interface Configuration (continued) Field Description Designated Router The identity of the designated router for this network, in the view of the advertising router. The designated router is identified here by its router ID. The value 0.0.0.0 means that there is no designated router. Note: This field displays only if the OSPFv3 admin mode is enabled.
PAGE 405
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the OSPFv3 Interface Selection area of the page, in the Interface list, select the interface. 6. To refresh the page with the latest information on the switch, click the Refresh button. 7. To clear all the statistics of the OSPFv3 interface, click the Clear button. The following table describes the nonconfigurable OSPF Interface Statistics data that is displayed. Table 146.
PAGE 406
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 146. Advanced OSPFv3 Interface Statistics (continued) Field Description Area LSA Count The total number of link state advertisements in this area's link state database, excluding AS External LSAs. IPv6 Address The IPv6 address of the interface. Interface Events The number of times the specified OSPFv3 interface changed its state, or an error occurred.
PAGE 407
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 146. Advanced OSPFv3 Interface Statistics (continued) Field Description LS Requests Sent The number of LS requests sent on this interface by this router. LS Requests Received The number of LS requests received on this interface by this router. LS Updates Sent The number of LS updates sent on this interface by this router. LS Updates Received The number of LS updates received on this interface by this router.
PAGE 408
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information that is displayed. Table 147. Advanced OSPFv3 Neighbor Table Field Description Interface The interface for which data is to be displayed or configured. Slot 0 is the base unit. Interface Identifier The interface ID that the neighbor advertises in its hello packets on this link.
PAGE 409
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information that is displayed. Table 148. Advanced OSPFv3 Link State Database Field Description Router ID The 32-bit integer in dotted-decimal format that uniquely identifies the router within the autonomous system (AS). The router ID is set on the OSPFv3 Configuration page.
PAGE 410
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 148. Advanced OSPFv3 Link State Database (continued) Field Description Age The time since the link state advertisement was first originated, in seconds. Sequence The sequence number field is a signed 32-bit integer. It is used to detect old and duplicate link state advertisements. The larger the sequence number, the more recent the advertisement. Checksum The checksum is used to detect data corruption of an advertisement.
PAGE 411
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 149. Advanced OSPFv3 External Link State Database Table (continued) Field Description LSA Type The format and function of the link state advertisement. LSA Type is one of the following: • Router LSA. A router can originate one or more router LSAs for a given area. Each router LSA originated in an area describes the collected states of all the router's interfaces to the area. • Network LSA.
PAGE 412
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > OSPFv3 > Advanced > Virtual Link Configuration. 5. Enter the Area ID of the OSPF area. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects.
PAGE 413
M4300 Intelligent Edge Series Fully Managed Stackable Switches 12. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 150. Advanced OSPFv3 Virtual Link Configuration Field Description Neighbor State The state of the virtual neighbor relationship. The OSPFv3 interface state can be any of these values: • Down. This is the initial interface state.The lower-level protocols indicated that the interface is unusable.
PAGE 414
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 150. Advanced OSPFv3 Virtual Link Configuration (continued) Field Description State The state of the interface. It takes one the following values: • Down. This is the initial interface state. The lower-level protocols indicated that the interface is unusable. Interface parameters are set to their initial values. All interface timers are disabled, and there are no adjacencies associated with the interface. • Waiting.
PAGE 415
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > OSPFv3 > Advanced > Route Redistribution. 5. From the Source menu, select from the list of available source routes that were not previously configured for redistribution by OSPFv3.
PAGE 416
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing > OSPFv3 > Advanced > NSF OSPFv3 Summary. 5. From the Support mode list, select one of the following values: • Always.
PAGE 417
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 151. Advanced NSF OSPFv3 Summary (continued) Field Description Restart Exit Reason Displays how the master unit on the switch last started up. The possible values are as follows: • Not Attempted. Graceful restart was not been attempted. • In Progress. Restart is in progress. • Completed. The previous graceful restart completed successfully. • Timed Out. The previous graceful restart timed out. • Topology Changed.
PAGE 418
7 7 Configure Multicast Routing This chapter covers the following topics: • Multicast Overview • Configure Multicast IGMP Settings • Configure PIM Settings • Configure Multicast Static Routes • Configure the Multicast Admin Boundary • Configure IPv6 Multicast Settings 418
PAGE 419
M4300 Intelligent Edge Series Fully Managed Stackable Switches Multicast Overview Multicast is best suited for video and audio traffic requiring multicast packet control for optimal operation. Multicast includes support for IGMPv2 and IGMPv3. Communication from point to multipoint is called multicasting. The source host (point) transmits a message to a group of zero or more hosts (multipoint) that are identified by a single IP destination address.
PAGE 420
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 152. Multicast Mroute Table (continued) Field Description Incoming Interface The incoming interface on which multicast packets for this source/group arrive. Outgoing Interfaces The list of outgoing interfaces on which multicast packets for this source/group are forwarded. Up Time (hh:mm:ss) The time in seconds since the entry was created.
PAGE 421
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Group IP field, enter multicast group IP address. 6. In the Egress VLAN List field, enter the VLAN or VLANs to which the multicast group IP address belongs. 7. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 153.
PAGE 422
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Routing > Multicast > Global Configuration. 5. In the Admin Mode field, select the Enable or Disable option to set the administrative status of multicast forwarding in the router. The default is Disable. 6. Click the Apply button. Your settings are saved. The following describes the nonconfigurable information that is displayed. Table 154.
PAGE 423
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. 6. Enter the TTL Threshold below which a multicast data packet is not forwarded from the selected interface. Enter a number between 0 and 255. The default is 1.
PAGE 424
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Admin Mode Disable or Enable radio button. This sets the administrative status of DVMRP to active or inactive. The default is Disable. 6. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 155. DVMRP Global Configuration Field Description Version The current value of the DVMRP version string.
PAGE 425
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. 6. In the Interface Mode field, select the Enable or Disable option to set the administrative mode of the selected DVMRP routing interface. The default is Disable. 7.
PAGE 426
M4300 Intelligent Edge Series Fully Managed Stackable Switches Search for DVMRP Neighbors To search for DVMRP neighbors: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 427
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 157. DVMRP Neighbor (continued) Field Description Expiry Time The DVMRP expiry time for the specified neighbor on the selected interface. This is the time left before this neighbor entry ages out, and is not applicable if the neighbor router's state is down. Generation ID The DVMRP generation ID for the specified neighbor on the selected interface.
PAGE 428
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information that is displayed. Table 158. DVMRP Next Hop Field Description Source IP The IP address used with the source mask to identify the source network for this table entry. Source Mask The network mask used with the source IP address. Next Hop Interface The outgoing interface for this next hop. Type The next hop type.
PAGE 429
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 159. DVMRP Prune (continued) Field Description Source Mask The network mask used with the source IP address. Expiry Time The amount of time remaining before this prune will expire at the upstream neighbor. If no prune messages were received from downstream neighbors, this is set to the value of the default prune lifetime timer; otherwise, it is set to the smallest received value or the default timer, whichever is less.
PAGE 430
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 160. DVMRP Route (continued) Field Description Interface The interface on which IP datagrams sent by these sources are received. A value of 0 typically means the route is an aggregate for which no next-hop interface exists. Metric The distance in hops to the source subnet. Expiry Time The amount of time remaining before this prune expires at the upstream neighbor.
PAGE 431
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. Click the Apply button. Your settings are saved. Configure the IGMP Routing Interface To configure the IGMP routing interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 432
M4300 Intelligent Edge Series Fully Managed Stackable Switches This variable allows tuning for the expected packet loss on a subnet. If you expect the subnet to be lossy, enter a higher number for this parameter. IGMP is robust to robustness variable –1 packet losses. Valid values are 1 to 255. The default value is 2. 9. In the Query Interval field, enter the frequency in seconds at which IGMP host-query packets are to be transmitted on this interface. Valid values are 1 to 3600. The default value is 125.
PAGE 433
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Routing> Multicast > IGMP > Routing Interface Statistics. 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information that is displayed. Table 161. Multicast IGMP Routing Interface Statistics Field Description Interface The interface on which the IGMP is enabled. IP Address The IP address of the selected interface.
PAGE 434
M4300 Intelligent Edge Series Fully Managed Stackable Switches View IGMP Groups To view the IGMP groups: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 435
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 162. Multicast IGMP Groups (continued) Field Description Up Time The time elapsed since this entry was created. Expiry Time The minimum amount of time remaining before this entry is aged out. Version 1 Host Timer The time remaining until the local router assumes that no IGMP version 1 members are on the IP subnet attached to this interface.
PAGE 436
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use the Search menu to search for multicast entries by interface or group IP address. • Select Interface from the menu, enter the interface in unit/slot/port format (for example, 1/0/13), and click the Go button. If the entry exists, the entry is displayed as the first entry, followed by the remaining entries. • Select Group IP from the menu, enter the multicast group IP, and click the Go button.
PAGE 437
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing> Multicast > IGMP > Proxy Interface Configuration. 5. Use the Interface list to select the port.
PAGE 438
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 164. Multicast IGMP Proxy Interface Configuration (continued) Field Description Operational Mode The operational state of IGMP proxy interface. Querier Address on Proxy Interface The querier address on the proxy interface. Number of Groups The current number of multicast group entries for the IGMP proxy interface in the cache table. Version Enter the version of IGMP to configure on the selected interface.
PAGE 439
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following describes the nonconfigurable information that is displayed. Table 165. Multicast IGMP Proxy Interface Statistics Field Description Proxy Interface The interface on which IGMP packets are received. Version The version of IGMP packets received. Queries Received The number of IGMP queries received. Report Received The number of IGMP reports received. Reports Sent The number of IGMP reports sent.
PAGE 440
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information that is displayed. Table 166. Multicast IGMP Proxy Membership Field Description Proxy Interface The interface on which IGMP proxy is enabled. Group IP The IP multicast group address. Source Hosts This parameter shows source addresses that are members of this multicast address.
PAGE 441
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing> Multicast > PIM > Global Configuration. 5. In the Admin Mode field, select the protocol of PIM in the router. Possible values are Disable, PIM-SM, or PIM-DM. The default is Disable. 6. Click the Apply button.
PAGE 442
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the SSM Group Address field, enter the source-specific multicast group IP address. 6. In the SSM Group Mask field, enter the source-specific multicast group IP address mask. 7. Click the Add button. The source-specific group is added. Configure PIM Interface To configure the multicast PIM interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 443
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Next to the Interface column, select the check box for the interface that you want to configure. 6. In the Admin Mode field, select the Enable or Disable option to set the administrative status of PIM in the router. The default is Disable. 7. In the Hello Interval field, enter the time in seconds between the transmission of PIM hello messages on this interface. The valid values are from 0 to 18000. The default value is 30. 8.
PAGE 444
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select Routing> Multicast > PIM > PIM Neighbor. 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information that is displayed. Table 168. Multicast PIM Neighbor Field Description Interface The interface on which the neighbor is displayed. Neighbor IP The IP address of the PIM neighbor for this entry.
PAGE 445
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Routing> Multicast > PIM > Candidate RP Configuration. The following table describes the nonconfigurable information that is displayed. Table 169. Multicast PIM Neighbor Field Description Field Description Interface The interface on which the neighbor is displayed. Neighbor IP The IP address of the PIM neighbor for this entry. Up Time (hh:mm:ss) The time since this PIM neighbor (last) became a neighbor of the local router.
PAGE 446
M4300 Intelligent Edge Series Fully Managed Stackable Switches To refresh the page with the latest information on the switch, click the Refresh button. Table 170. Multicast PIM Neighbor Field Description Interface The interface on which the neighbor is displayed. Neighbor IP The IP address of the PIM neighbor for this entry. Up Time (hh:mm:ss) The time since this PIM neighbor (last) became a neighbor of the local router.
PAGE 447
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. From the list of interfaces, select the Interface. 6. Enter the Group Address transmitted in candidate-RP-advertisements. If you enter an IPv6 address, the format is prefix/prefix length. 7. In the Group Mask field, enter the group address mask transmitted in candidate-RP-advertisements 8. In the C-RP Advertisement Interval field, specify the duration in seconds at which the C-RP messages are unicast to the bootstrap router (BSR).
PAGE 448
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. In the Priority field, enter the priority of C-BSR. 8. Enter the Advertisement Interval value of the C-BSR in seconds. The default value is 60. 9. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 171.
PAGE 449
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the RP Address field, enter the IP address for one or more multicast groups. 6. In the Group Address field, enter the group address of the RP. 7. Enter the Group Mask of the RP to be created or deleted. 8. In the Override field, select Enable or Disable. Enable indicates that, if there is a conflict, the RP configured with this option prevails over the RP learned by BSR. 9. Click the Add button.
PAGE 450
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. Click the Add button. The static route is added to the switch. 10. Click the Apply button. Your settings are saved. Configure the Multicast Admin Boundary The definition of an administratively scoped boundary is a mechanism to stop the ingress and egress of multicast traffic for a given range of multicast addresses on a given routing interface. To configure the multicast admin boundary: 1. Launch a web browser. 2.
PAGE 451
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure IPv6 Multicast Settings View the IPv6 Multicast Mroute Table You can view the contents of the Mroute Table in tabular format. To view the Mroute Table: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 452
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 172. Multicast Mroute Table (continued) Field Description Protocol The multicast routing protocol which created this entry. The possible values are as follows: • PIM-DM • PIM-SM Flags The value displayed in this field is valid if the multicast routing protocol running is PIM-SM. The possible values are RPT or SPT. For other protocols a – (hyphen) is displayed.
PAGE 453
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure IPv6 PIM SSM While PIM employs a specially-configured rendezvous point (RP) router that serves as a meeting junction for multicast senders and listeners, Protocol-Independent Multicast Single-Source Multicast (PIM-SSM) does not use an RP. It supports only source route delivery trees. It is used between routers so that they can track which multicast packets to forward to each other and to their directly connected LANs.
PAGE 454
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the IPv6 PIM Interface To configure the IPv6 PIM interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 455
M4300 Intelligent Edge Series Fully Managed Stackable Switches 11. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 173. IPv6 PIM Interface Configuration Field Description Protocol State The state of PIM in the router. either Operational or Non-Operational. IPv6 Prefix/Length The IPv6 address prefix and the length of the selected interface. Designated Router The designated router on the selected PIM interface.
PAGE 456
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 174. IPv6 PIM Neighbor Field Description Up Time (hh:mm:ss) The time since this PIM neighbor (last) became a neighbor of the local router. Expiry Time (hh:mm:ss) The minimum time remaining before this PIM neighbor is aged out. Configure the IPv6 PIM Candidate Rendezvous Point To configure the IPv6 PIM candidate rendezvous point: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 457
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the IPv6 PIM Bootstrap Router Candidate Settings To configure the IPv6 PIM BSR Candidate settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 458
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information that is displayed. Table 175. IPv6 PIM BSR Candidate Configuration Field Description BSR Expiry Time (hh:mm:ss) Time (in hours, minutes and seconds) in which the learned elected bootstrap router (BSR) expires. IP Address The IP address of the elected BSR.
PAGE 459
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. Click the Add button. The static RP address is added for one or more multicast groups. 10. Click the Apply button. Your settings are saved. Configure IPv6 MLD Global Settings To configure the IPv6 PIM global settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 460
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing> IPv6 Multicast > MLD > Routing Interface Configuration. 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button.
PAGE 461
M4300 Intelligent Edge Series Fully Managed Stackable Switches 11. Enter the Startup Query Count value to indicate the configured number of queries sent out on startup, separated by the startup query interval. The default value is 2. 12. In the Last Member Query Interval field, enter the last member query interval in milliseconds.
PAGE 462
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information that is displayed. Table 177. IPv6 MLD Routing Interface Statistics Field Description Interface The interface for which data is to be displayed. Querier Status Indicates whether the selected interface is an MLD querier or non-querier on the subnet it is associated with.
PAGE 463
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select Routing> IPv6 Multicast > MLD > MLD Groups. 5. Use the Search menu to search for multicast entries by interface or group: • Select Interface from menu, enter the interface in unit/slot/port format (for example 1/0/13), and click the Go button. If the entry exists, it is displayed as the first entry, followed by the remaining entries.
PAGE 464
M4300 Intelligent Edge Series Fully Managed Stackable Switches View and Clear IPv6 MLD Traffic To view and clear IPv6 MLD traffic: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 465
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 179. IPv6 Multicast MLD Traffic (continued) Field Description Leaves Received The number of valid MLD leaves received by the router. Leaves Sent The number of valid MLD leaves sent by the router. Configure the IPv6 MLD Proxy Interface To configure the IPv6 multicast MLD proxy interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 466
M4300 Intelligent Edge Series Fully Managed Stackable Switches The unsolicited report interval is the time between repetitions of a host's initial report of membership in a group. Valid values are 1 to 260. The default value is 1. 8. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 180. IPv6 Multicast MLD Proxy Interface Configuration Field Description IPv6 Prefix The IPv6 address of the MLD proxy interface.
PAGE 467
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Routing> IPv6 Multicast > MLD > Proxy Interface Statistics. 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information that is displayed. Table 181. IPv6 Multicast MLD Proxy Interface Statistics Field Description Proxy Interface The interface on which MLD proxy packets received. Version The version of MLD proxy packets received.
PAGE 468
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information that is displayed. Table 182. IPv6 Multicast MLD Proxy Membership Field Description Proxy Interface The interface on which the MLD proxy is enabled. Group IP The IPv6 multicast group address. Source Hosts Source addresses that are members of this multicast address.
PAGE 469
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Routing> IPv6 Multicast > Static Routes Configuration. 5.
PAGE 470
8 8 Configure Quality of Service This chapter covers the following topics: • Quality of Service Overview • Manage Class of Service • Manage Differentiated Services 470
PAGE 471
M4300 Intelligent Edge Series Fully Managed Stackable Switches Quality of Service Overview In a typical switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria.
PAGE 472
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Global CoS Settings To configure global CoS settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 473
M4300 Intelligent Edge Series Fully Managed Stackable Switches The default value is untrusted. 9. Click the Apply button. Your settings are saved. Map 802.1p Priorities to Queues The 802.1p to Queue Mapping page also displays the Current 802.1p Priority Mapping table. To map 802.1p priorities to queues: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 474
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Click the Apply button. Your settings are saved. Map DSCP Values to Queues You can specify which internal traffic class to map the corresponding DSCP value. To map DSCP values to queues: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 475
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure CoS Interface Settings for an Interface You can apply an interface shaping rate to all interfaces or to a specific interface. To configure CoS settings for an interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 476
M4300 Intelligent Edge Series Fully Managed Stackable Switches The default value is 802.1p. 8. Use Interface Shaping Rate to specify the maximum bandwidth allowed. This is typically used to shape the outbound transmission rate.This value is controlled independently of any per-queue maximum bandwidth configuration. It is effectively a second-level shaping mechanism. The default value is 0. Valid Range is 0 to 100 in increments of 1. The value 0 means that the maximum is unlimited. 9. Click the Apply button.
PAGE 477
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply a trust mode or rate to all interfaces. 6. Use the Queue ID menu to select the queue to be configured (platform based). 7. Use Minimum Bandwidth to specify the minimum guaranteed bandwidth allotted to this queue.
PAGE 478
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure CoS Drop Precedence Settings To configure CoS Drop Precedence settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 479
M4300 Intelligent Edge Series Fully Managed Stackable Switches 10. Use WRED Drop Probability Scale to determine the packet drop probability for the current drop precedence level. The range is 0 to 100. The default is 10. 11. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 183. CoS Interface Queue Drop Precedence Status Field Description Interface The CoS configurable interface. Queue ID The queue ID.
PAGE 480
M4300 Intelligent Edge Series Fully Managed Stackable Switches Packet processing begins by testing the class match criteria for a packet. A policy is applied to a packet when a class match within that policy is found. DiffServ Wizard Overview The DiffServ wizard enables DiffServ on the switch by creating a traffic class, adding the traffic class to a policy, and then adding the policy to the ports that you select.
PAGE 481
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select QoS> DiffServ > DiffServ Wizard. 5. Use Traffic Type to define the DiffServ Class. Traffic type options are: VOIP, HTTP, FTP, Telnet, and Every. 6. Ports displays the ports which can be configured to support a DiffServ policy.
PAGE 482
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Basic DiffServ Settings Packets are filtered and processed based on defined criteria. The filtering criteria is defined by a class. The processing is defined by a policy's attributes. Policy attributes can be defined on a per–class instance basis, and it is these attributes that are applied when a match occurs. The configuration process begins with defining one or more match criteria for a class.
PAGE 483
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the administrative mode for DiffServ: • Enable. Differentiated Services are active. This the default mode. • Disable. The DiffServ configuration is retained and can be changed but it is not active. 6. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 184.
PAGE 484
M4300 Intelligent Edge Series Fully Managed Stackable Switches To configure the global DiffServ mode: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 485
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 185. DiffServ Status (continued) Field Description Policy table The number of configured policies out of the total allowed on the switch. Policy Instance table The number of configured policy class instances out of the total allowed on the switch. Policy Attributes table The number of configured policy attributes (attached to the policy class instances) out of the total allowed on the switch.
PAGE 486
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To create a new class, enter a class name, select the class type, and click the Add button. This field also lists all the existing DiffServ class names, from which one can be selected. The switch supports only the Class Type value All, which means all the various match criteria defined for the class is satisfied for a packet match. All signifies the logical AND of all the match criteria.
PAGE 487
M4300 Intelligent Edge Series Fully Managed Stackable Switches You can select the class type only when you are creating a new class. After you create the class, this field displays the class type, but you cannot change it. 10. Define the criteria to associate with a DiffServ class: • Match Every. This adds to the specified class definition a match condition whereby all packets are considered to belong to the class. • Reference Class. Select this option to reference another class for criteria.
PAGE 488
M4300 Intelligent Edge Series Fully Managed Stackable Switches in a match (where x is any hexadecimal number). Note that this is not a wildcard mask, which ACLs use. • Source MAC Mask. This is a bit mask in the same format as a MAC address indicating which part(s) of the source MAC address to use for matching against packet content. • Destination MAC Address. Select this option to require a packet’s destination MAC address to match the specified MAC address.
PAGE 489
M4300 Intelligent Edge Series Fully Managed Stackable Switches configure a range, a match occurs if a packet's destination port number is the same as any destination port number within the range. After you select this option, use the following fields to configure a destination port keyword, destination port number, or destination port range for the match criteria: • - Protocol. Select the desired L4 keyword from the list on which the match is based.
PAGE 490
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure DiffServ IPv6 Class Settings You can add a new IPv6 DiffServ class name, or to rename or delete an existing class. You can also define the criteria to associate with a DiffServ class. As packets are received, these DiffServ classes are used to prioritize packets. You can use multiple match criteria in a class. The logic is a Boolean logical-AND for this criteria. After creating a class, click the class link to the Class page.
PAGE 491
M4300 Intelligent Edge Series Fully Managed Stackable Switches The Class Configuration page displays, showing the configuration fields for the class.
PAGE 492
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. To configure the IPv6 class, complete the fields: • Class Name. The name for the configured DiffServ class. • Class Type. The DiffServ class type. You can specify the class type only when you are creating a new class. After the class is created, this field displays the class type, but you cannot change it. 10. Define the criteria to associate with a DiffServ class: • Match Every.
PAGE 493
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information displayed in the Class Summary at the bottom of the DiffServ Advanced IPv6 Class Configuration page. Table 187. DiffServ IPv6 Class Configuration - Class Summary Field Description Match Criteria The configured match criteria for the specified class. Values The values of the configured match criteria.
PAGE 494
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. Click the Add button. The new policy is added to the switch. 9. To configure the policy attributes, click the name of the policy. The policy name is a hyperlink. The Policy Configuration page displays, showing the configuration fields for the policy. 10. Select the Assign Queue to which packets of this policy-class are assigned. This is an integer value in the range 0 to 6. 11. Configure the policy attributes: • Drop.
PAGE 495
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Mark IP Precedence. This is an IP precedence value in the range from 0 to 7. • Mirror • Redirect • Two Rate Policy. With the two-rate policer, you can enforce traffic policing according to two separate rates: Committed Rate and Peak Rate. • Mark IP DSCP. This lists the keywords for the known DSCP values from which one can be selected. The list includes 'other' as an option for the remaining values. • Simple Policy.
PAGE 496
M4300 Intelligent Edge Series Fully Managed Stackable Switches secondary (inner) 802.1Q tag of a double VLAN tagged packet. If the packet does not already contain this header, one is inserted. • Send. These packets are presented unmodified by DiffServ to the system forwarding element. • Mark IP Precedence. These packets are marked by DiffServ with the specified IP Precedence value before being presented to the system forwarding element. This selection requires that the Mark IP Precedence field be set.
PAGE 497
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. 6. Policy Name. Lists all the policy names from which one can be selected.
PAGE 498
M4300 Intelligent Edge Series Fully Managed Stackable Switches The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select QoS > DiffServ > Advanced > Service Statistics. 5.
PAGE 499
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 190. DiffServ Service Statistics (continued) Field Description Policy Name Name of the policy currently attached to the specified interface and direction. Operational Status Operational status of the policy currently attached to the specified interface and direction. The value is either Up or Down. Member Classes List of all DiffServ classes currently defined as members of the selected policy name.
PAGE 500
9 9 Manage Switch Security You can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS) settings, and authentication lists.
PAGE 501
M4300 Intelligent Edge Series Fully Managed Stackable Switches Manage User Accounts and Passwords You can configure user accounts and login passwords. Configure User Accounts By default, two user accounts exist: • admin, with read/write privileges • guest, with read-only privileges The account names are not case-sensitive. The first time that you log in as an admin user to the local browser UI, no password is required (that is, the password is blank). As of software version 12.0.9.
PAGE 502
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the User Name field, enter the name for the new account. You can enter a new user name only when you are creating an account. User names are up to 64 characters in length and are not case-sensitive. Valid characters include all the alphanumeric characters as well as the hyphen (-) and underscore (_) characters. The user name default is not valid. User names once created cannot be changed or modified. 6.
PAGE 503
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Security> Management Security > Local User > User Password Configuration. 5. In the Password Minimum Length field, type the minimum character length of all new local user passwords. 6. In the Password Aging (days) field, type the maximum time for which the user passwords are valid in days, from the time the password is set.
PAGE 504
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Security> Management Security > Enable Password. 5. In the Password field, type the password. Passwords are a maximum of 64 alphanumeric characters. 6. In the Confirm Password field, type the password again, to confirm that you entered it correctly. 7. Click the Apply button. Your settings are saved. Configure a Line Password To configure a line password: 1. Launch a web browser. 2.
PAGE 505
M4300 Intelligent Edge Series Fully Managed Stackable Switches Passwords are a maximum of 64 alphanumeric characters. 6. In the Confirm Console Password field, type the password again to confirm that you typed it correctly. 7. In the Telnet Password field, type the Telnet password. Passwords are a maximum of 64 alphanumeric characters. 8. In the Confirm Telnet Password field, type the password again to confirm that you entered it correctly. 9. In the SSH Password field, type the SSH password.
PAGE 506
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Security > Management Security > RADIUS > Radius Configuration. The Current Server IP Address field is blank if no servers are configured (see Configure a RADIUS Server on page 508). The switch supports up to three configured RADIUS servers. If more than one RADIUS servers is configured, the current server is the primary server.
PAGE 507
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. In the Timeout Duration field, specify the time-out value, in seconds, for request retransmissions. The valid range is 1–30. The default value is 5. Consider the maximum delay time when you configure RADIUS maximum retransmit and RADIUS time-out. If multiple RADIUS servers are configured, the maximum retransmit value on each is exhausted before the next server is attempted.
PAGE 508
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure a RADIUS Server To configure a RADIUS server: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 509
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the RADIUS server statistics displayed on the page. Table 192. RADIUS statistics Field Description Radius Server The address of the RADIUS server or the name of the RADIUS server for which the statistics are displayed. Round Trip Time The time interval, in hundredths of a second, between the most recent access-reply/access-challenge and the access-request that matched it from this RADIUS authentication server.
PAGE 510
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure RADIUS Accounting Servers To configure a RADIUS accounting server: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 511
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes RADIUS accounting server statistics available on the page. Table 193. RADIUS Accounting Server Statistics Field Description Accounting Server Address The accounting server associated with the statistics. Round Trip Time(secs) The time interval, in hundredths of a second, between the most recent accounting-response and the accounting-request that matched it from this RADIUS accounting server.
PAGE 512
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Global TACACS Settings You can configure the TACACS settings for communication between the switch and the TACACS server you configure through the inband management port. To configure global TACACS settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 513
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Routing VLAN. The primary IP address of a VLAN routing interface is used as the source address. • Routing loopback interface. The primary IP address of a routing loopback interface is used as the source address. • Service port. The management port source IP is used as the source address. By default VLAN 1 is used as source interface. When the None value is displayed, it means that the configured routing interface has become nonrouting.
PAGE 514
M4300 Intelligent Edge Series Fully Managed Stackable Switches The range is 1–30. 10. Click the Add button. The server is added to the switch. Configure Authentication Lists The switch supports various authentication lists. Configure a Login Authentication List A login list specifies the authentication methods to be used to validate switch or port access for the users associated with the list.
PAGE 515
M4300 Intelligent Edge Series Fully Managed Stackable Switches The options are as follows: - Enable. The privileged EXEC password is used for authentication. - Line. The line password is used for authentication. - None. The user cannot be authenticated. - RADIUS. The user's name and password are authenticated using the RADIUS server instead of local server. - TACACS. The user's name and password are authenticated using the TACACS server. - Deny. Authentication always fails. 7.
PAGE 516
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. In the columns in table header (1, 2, 3, 4, 5, 6), select the method to appear first in the selected authentication enable list. The options are as follows: - Enable. The privileged EXEC password is used for authentication. - Line. The line password is used for authentication. - None. The user cannot be authenticated. - RADIUS. The user's name and password are authenticated using the RADIUS server instead of local server. - TACACS.
PAGE 517
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the check box for the dot1x list name. 6. Select the method to appear first in the selected authentication login list. The options are as follows: • IAS. The user’s ID and password in internal authentication server database is used for authentication. • Local. The user’s locally stored ID and password are used for authentication. • RADIUS. The user’s ID and password are authenticated using the RADIUS server instead of locally.
PAGE 518
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Security > Management Security > Authentication List > HTTP Authentication List. 5. Select the check box for the HTTP list name. 6. In the columns in table header (1, 2, 3, 4, 5, 6), select the method to appear first in the selected authentication enable list. The options are as follows: - Enable. The privileged EXEC password is used for authentication. - None. The user cannot be authenticated. - RADIUS.
PAGE 519
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Security > Management Security > Authentication List > HTTPS Authentication List. 5. Select the check box for the HTTPS list name. 6.
PAGE 520
M4300 Intelligent Edge Series Fully Managed Stackable Switches View Login Sessions To view login sessions: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 521
M4300 Intelligent Edge Series Fully Managed Stackable Switches Manage HHTP, HTTPS, and SSH Access You can configure HTTP and Secure HTTP access to the switch’s management interface. Configure HTTP Server Settings To access the switch using a web browser, you must first configure it with IP information (IP address, subnet mask, and default gateway).
PAGE 522
M4300 Intelligent Edge Series Fully Managed Stackable Switches This specifies whether the switch can be accessed from a web browser. If you enable web mode, you can manage the switch from a web browser. The factory default is Enable. 6. In the HTTP Port field, enter the HTTP port number. The valid range is 80 and 1025 to 65535. The default value is 80. 7. In the HTTP Session Soft Timeout (Minutes) field, set the inactivity time-out for HTTP sessions. The value must be in the range of 1 to 60 minutes.
PAGE 523
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select Security > Access > HTTPS > HTTPS Configuration. 5. Select the Admin Mode Disable or Enable radio button. This enables or disables the administrative mode of Secure HTTPS. The currently configured value is displayed. The default value is Disable. You can download SSL certificates only when the HTTPS admin mode is disabled.
PAGE 524
M4300 Intelligent Edge Series Fully Managed Stackable Switches The value must be in the range of 0 to 16. The default value is 16. The currently configured value is displayed. 12. Click the Apply button. Your settings are saved. The Authentication List field displays the authentication list for HTTPS. Manage Certificates You can generate or delete certificates. To manage certificates: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 525
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. Click the Apply button. Your settings are saved. The Certificate Generation Status field displays the SSL certificate generation status. Download Certificates You can transfer a certificate file to the switch. For the web server on the switch to accept HTTPS connections from a management station, the web server needs a public key certificate. You can generate a certificate externally (for example, offline) and download it to the switch.
PAGE 526
M4300 Intelligent Edge Series Fully Managed Stackable Switches • SSL DH Weak Encryption Parameter PEM File. SSL Diffie-Hellman Weak Encryption Parameter file (PEM Encoded) • SSL DH Strong Encryption Parameter PEM File. SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded) 6. In the Transfer Mode list, specify the protocol to use to transfer the file: • TFTP. Trivial File Transfer Protocol • SFTP. Secure File Transfer Protocol • SCP. Secure Copy Protocol 7.
PAGE 527
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Security > Access > SSH > SSH Configuration. 5. Select the SSH Admin Mode Disable or Enable radio button. This enables or disables the SSH server administrative mode. When this mode is enabled, the device can be accessed by using an SSH client on a remote system. The currently configured value is displayed. The default value is Disable. 6.
PAGE 528
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable fields that display on the page. Table 195. SSH Configuration Field Description SSH Version The SSH server on the device can accept connections from an SSH client using Protocol Level 2 for SSH (SSH-2). Protocol Level 2 for SSH is enabled by default. Current Number of SSH Sessions The number of active SSH sessions between remote SSH clients and the SSH server on the device.
PAGE 529
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select an RSA Keys Management radio button: • None. This is the default selection. • Generate RSA Keys. Begin generating the RSA host keys. To generate SSH key files SSH must be administratively disabled and there can be no active SSH sessions. • Delete RSA Keys. Delete the corresponding RSA key file, if it is present. 6. Select a DSA Keys Management radio button: • None. This is the default selection. • Generate DSA Keys.
PAGE 530
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable fields that display on the page. Table 196. RSA Key Management Field Description Keys Present Displays which of the following keys or both (if any) are present on the device: • SSH-2 Rivest-Shamir-Adelman (RSA) key file (PEM Encoded) • SSH-2 Digital Signature Algorithm (DSA) key file (PEM Encoded) Key Generation In Progress Displays which key is being generated (if any), RSA, DSA, or None.
PAGE 531
M4300 Intelligent Edge Series Fully Managed Stackable Switches • SSH-2 DSA Key PEM File. SSH-2 Digital Signature Algorithm (DSA) key file (PEM Encoded) 6. In the Transfer Mode list, select the protocol to use to transfer the file: • TFTP. Trivial File Transfer Protocol • SFTP. Secure File Transfer Protocol • SCP. Secure Copy Protocol 7. In the Server Address Type field, specify either IPv4, IPv6, or DNS. This specifies the format of the TFTP/SFTP/SCP Server Address field. The factory default is IPv4.
PAGE 532
M4300 Intelligent Edge Series Fully Managed Stackable Switches For information about creating an enable authentication list, see Configure a Login Authentication List on page 514. To configure the Telnet authentication list: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 533
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Inbound Telnet You can regulate new inbound Telnet sessions. If Allow New Telnet Sessions is enabled, new inbound Telnet sessions can be established until there are no more sessions available. If Allow New Telnet Sessions is disabled, no new inbound Telnet sessions are established. An established session remains active until the session is ended or an abnormal network error ends the session. To configure inbound Telnet: 1.
PAGE 534
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. In the Session Timeout field, specify how many minutes of inactivity occur on an inbound Telnet session before the session is logged off. You can enter any number from 1 to 160. The factory default is 5 minutes. 7. In the Maximum Number of Sessions field, specify how many simultaneous inbound Telnet sessions are allowed. The maximum is 5, which is also the factory default. 8. Click the Apply button. Your settings are saved.
PAGE 535
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Next to Allow new telnet sessions, select the Disable or Enable radio button. This specifies whether the new outbound Telnet session is enabled or disabled. The default value is Enabled so that new outbound Telnet sessions can be established until there are no more sessions available. If it is disabled, no new outbound Telnet sessions are established.
PAGE 536
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Console Port Access To configure the console port: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 537
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information that is displayed. Table 197. Console Port Field Description Character Size (bits) The number of bits in a character. This is always 8. Flow Control Whether hardware flow control is enabled or disabled. It is always disabled. Stop Bits The number of stop bits per character. It is always 1.
PAGE 538
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Denial of Service Min TCP Header Size field, specify the minimum TCP header size allowed. If DoS TCP Fragment is enabled, the switch drops these packets: • First TCP fragments with a TCP payload: IP_Payload_Length - IP_Header_Size < Min_TCP_Header_Size. • Its range is 0 to 255. The default value is 20. 6. Select the Denial of Service ICMPv4 Disable or Enable radio button.
PAGE 539
M4300 Intelligent Edge Series Fully Managed Stackable Switches 10. Select the Denial of Service First Fragment Disable or Enable radio button. This enables First Fragment DoS prevention, which causes the switch to check DoS options on first fragment IP packets when switch are receiving fragmented IP packets. Otherwise, switch ignores the first fragment IP packages.The factory default is Disable. 11. Select the Denial of Service ICMP Fragment Disable or Enable radio button.
PAGE 540
M4300 Intelligent Edge Series Fully Managed Stackable Switches 21. Select the Denial of Service UDP Port Disable or Enable radio button. Enabling UDP Port DoS prevention causes the switch to drop packets with UDP source port equal to UDP destination port. The factory default is Disable. 22. Click the Apply button. Your settings are saved. Configure Access Control Settings You can configure an access control profile and associate an access control rule with the profile.
PAGE 541
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Access Profile Name field, enter the name of the access profile to be added. The maximum length is 32 characters. 6. Take one of the following actions: • To activate an access profile, select the Activate Profile check box. • To deactivate an access profile, select the Deactivate Profile check box. • To remove an access profile, select the Remove Profile check box.
PAGE 542
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Access Rule Settings for the Access Control Profile After you set up an access control profile, you can configure and apply an access control rules. However, to do this, the access control profile must be in a deactivated state. AFter you added the access control rule, you can reactivate the access control profile. To configure the access rule settings: 1. Launch a web browser. 2.
PAGE 543
M4300 Intelligent Edge Series Fully Managed Stackable Switches The rules are validated against the incoming management request in ascending order of their priorities. If a rule matches, the action is performed and subsequent rules below that are ignored. For example, if a source IP 10.10.10.10 is configured with priority 1 to permit, and source IP 10.10.10.10 is configured with priority 2 to deny, then access is permitted if the profile is active, and the second rule is ignored. 10. Click the Add button.
PAGE 544
M4300 Intelligent Edge Series Fully Managed Stackable Switches 4. Select Security > Port Authentication > Basic > 802.1X Configuration. 5. Select the Administrative Mode Disable or Enable radio button. This enables or disables 802.1X administrative mode on the switch. • Enable. Port-based authentication is permitted on the switch. If 802.1X is enabled, authentication is performed by a RADIUS server. This means the primary authentication method must be RADIUS.
PAGE 545
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure 802.1X Settings You can enable or disable 802.1X access control on the system. To configure 802.1X settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 546
M4300 Intelligent Edge Series Fully Managed Stackable Switches 10. Use Users to select the user name for the selected login list for 802.1x port security. 11. Use Login to select the login list to apply to the specified user. All configured login lists are displayed. The Authentication List field displays the list that is used by 802.1X. 12. Click the Apply button. Your settings are saved. Configure Port Authentication You can enable and configure port access control on one or more ports.
PAGE 547
M4300 Intelligent Edge Series Fully Managed Stackable Switches - Force authorized. The authenticator PAE unconditionally sets the controlled port to authorized. - Auto. The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant, authenticator, and the authentication server. - MAC Based.
PAGE 548
M4300 Intelligent Edge Series Fully Managed Stackable Switches in the range of 1 to 65535. The default value is 30. Changing the value does not change the configuration until the Apply button is clicked. • Server Timeout. Enter the server time-out for the selected port. The server time-out is the value, in seconds, of the timer used by the authenticator on this port to time-out the authentication server. The server time-out must be in the range of 1 to 65535. The default value is 30.
PAGE 549
M4300 Intelligent Edge Series Fully Managed Stackable Switches View the Port Summary You can view information about the port access control settings on a specific port. To view the port summary: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 550
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 199. Port Summary (continued) Field Description Operating Control Mode The control mode under which the port is actually operating. Possible values are as follows: • ForceUnauthorized • ForceAuthorized • Auto • MAC Based • N/A: If the port is in detached state, it cannot participate in port access control. Reauthentication Enabled This field shows whether reauthentication of the supplicant for the specified port is allowed.
PAGE 551
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 199. Port Summary (continued) Field Description VLAN Assigned The VLAN ID assigned to the selected interface by the authenticator. This field is displayed only when the port control mode of the selected interface is not MAC-based. This field is not configurable. VLAN Assigned Reason The reason for the VLAN ID assigned by the authenticator to the selected interface.
PAGE 552
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the fields on the Client Summary page. Table 200. Client Summary Field Description Port The port to be displayed. User Name The user name representing the identity of the supplicant device. Supplicant Mac Address The supplicant's device MAC address. Session Time The time since the supplicant as logged in seconds. Filter ID The policy filter ID assigned by the authenticator to the supplicant device.
PAGE 553
M4300 Intelligent Edge Series Fully Managed Stackable Switches Control Traffic With MAC Filtering You can configure MAC filters Configure MAC Filtering You can create MAC filters that limit the traffic allowed into and out of specified ports on the system. To configure MAC filter settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 554
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. From the VLAN ID list, select the VLAN to use with the MAC address to fully identify packets to be filtered. You can change this field only when Create Filter is selected from the MAC Filter list. 8. In the MAC Address field, specify the MAC address of the filter in the format 00:01:1A:B2:53:4D. You can change this field when you select the Create Filter option.
PAGE 555
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the information displayed on the page. Table 201. MAC Filter Summary Field Description MAC Address The MAC address of the filter in the format 00:01:1A:B2:53:4D. VLAN ID The VLAN ID associated with the filter. Source Port Members A list of ports to be used for filtering inbound packets. Destination Port Members A list of ports to be used for filtering outbound packets.
PAGE 556
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Port Security Mode Disable or Enable radio button. The Port Security Violations table shows information about violations that occurred on ports that are enabled for port security. The following table describes the fields in the Port Security Violations table. Table 202. Port Security Violations Field Description Port The physical interface.
PAGE 557
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Security > Traffic Control > Port Security > Interface Configuration. 5.
PAGE 558
M4300 Intelligent Edge Series Fully Managed Stackable Switches Convert Learned MAC Addresses to Static Addresses You can convert a dynamically learned MAC address to a statically locked address. To convert learned MAC addresses and view the learned MAC addresses for an interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 559
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table shows the MAC addresses and their associated VLANs learned on the selected interface. Table 203. Dynamic MAC Address Field Description Number of Dynamic MAC Addresses Learned The number of dynamically learned MAC addresses on the interface. VLAN ID The VLAN ID corresponding to the MAC address. MAC Address The MAC addresses learned on a specific port.
PAGE 560
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Private Groups To configure a traffic control private group: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 561
M4300 Intelligent Edge Series Fully Managed Stackable Switches The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Security > Traffic Control > Private Group > Private Group Membership. 5. In the Group ID list, select the group ID. 6.
PAGE 562
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Protect Ports If a port is configured as protected, it does not forward traffic to any other protected port on the switch, but it does forward traffic to unprotected ports. You can configure the ports as protected or unprotected. You need read-write access privileges to modify the configuration. To configure protected ports: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 563
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. Click the Apply button. Your settings are saved. Set Up Private VLANs A private VLAN contains switch ports that cannot communicate with each other, but can access another network. These ports are called private ports. Each private VLAN contains one or more private ports and a single uplink port or uplink aggregation group.
PAGE 564
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Private VLAN Association Settings To configure private VLAN association: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 565
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the Private VLAN Port Mode To configure the private VLAN port mode: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 566
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure a Private VLAN Host Interface To configure a private VLAN host interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 567
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure a Private VLAN Promiscuous Interface To configure a private VLAN promiscuous interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 568
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information displayed on the page. Table 207. Private VLAN Promiscuous Interface Configuration Field Description Interface Select the physical or LAG interface Operational VLAN(s) The operational VLANs. Manage the Storm Control Settings A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port.
PAGE 569
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following three controls provide an easy way to enable or disable each type of packets to be rate-limited on every port in a global fashion. The effective storm control state of each port can be viewed by going to the port configuration page. 5. Select the storm control settings: • Select the Broadcast Storm Control All Disable or Enable radio button. This enables or disables Broadcast Storm Recovery mode on all ports.
PAGE 570
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use one of the following methods to select a port: • In the Go To Port field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Port column, select the check box for the port that you want to configure, select multiple check boxes to apply the same setting to all selected ports, or select the check box in the table heading to apply the same settings to all ports. 6.
PAGE 571
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. Click the Apply button. Your settings are saved. Configure DHCP Snooping You can configure DHCP snooping global and interface settings. Configure DHCP Snooping Global Settings To configure DHCP snooping global settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 572
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Use VLAN ID to enter the VLAN for which the DHCP snooping mode is to be enabled. 8. Use DHCP Snooping Mode to enable or disable the DHCP snooping feature for the entered VLAN. The factory default is Disable. 9. Click the Apply button. Your settings are saved. Configure a DHCP Snooping Interface To configure a DHCP snooping interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 573
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. If Invalid Packets is enabled, DHCP snooping application logs invalid packets on this interface. The factory default is Disable. 8. Use Rate Limit (pps) to specify rate limit value for DHCP snooping purposes. If the incoming rate of DHCP packets exceeds the value of this for consecutive burst interval seconds, the port is shut down. If this value is N/A, then burst interval has no meaning, hence it is disabled. The default value is N/A.
PAGE 574
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To configure a static binding, specify the following: a. From the Interface menu, select the interface. b. In the MAC Address field, specify the MAC address that must be added for the binding entry. This is the key to the binding database. c. From the VLAN ID menu, select the VLAN for the binding rule. The range of the VLAN ID is 1 to 4093. d. In the IP Address field, specify a valid IP address for the binding rule. e. Click the Add button.
PAGE 575
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the fields of the Dynamic Binding Configuration table. Table 208. Dynamic DHCP Bindings Field Description Interface The interface on which the dynamic binding was learned. MAC Address The learned MAC address for the binding. VLAN ID The VLAN ID that corresponds to the binding. IP Address The IP address that corresponds to the binding. Lease Time The remaining lease time for the binding.
PAGE 576
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. In the Write Delay field, enter the maximum write time to write the database into local or remote. The range is 15 to 86400. 8. Click the Apply button. Your settings are saved. View and Clear the DHCP Snooping Statistics To view and clear the DHCP snooping statistics: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 577
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 209. DHCP Snooping Statistics (continued) Field Description Client Ifc Mismatch The number of DHCP messages that are dropped based on source MAC address and client HW address verification. DHCP Server Msgs The number of server messages that are dropped on an untrusted port. Configure IP Source Guard Interfaces You can configure IP source guard (IPSG) on each interface.
PAGE 578
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the port that you want to configure, select multiple check boxes to apply the same setting to all selected interfaces, or select the check box in the table heading to apply the same settings to all interfaces. 6.
PAGE 579
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure IP Source Guard Binding Settings To configure IP source guard static binding settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 580
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 210. IP Source Guard Dynamic Binding Configuration (continued) Field Description IP Address Displays valid IP address for the binding entry. Filter Type Filter type used on the interface. One is source IP address filter type, and the other is source IP address and MAC address filter type. Configure IPv6 Source Guard Interface Settings To configure IPv6 source guard Interface settings: 1. Launch a web browser. 2.
PAGE 581
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Use the IPv6SG Port Security menu to enable or disable the IPv6SG port security on the selected interface. If IPv6SG port security is enabled, then the packets are not forwarded if the sender MAC address is not in FDB table and it is not in the DHCP snooping binding database. To enforce filtering based on MAC address other required configurations are as follows: • Enable port-security globally.
PAGE 582
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. From the VLAN ID menu, select the VLAN from the list for the binding rule. 8. In the IPv6 Address field, specify valid IP address for the binding rule. 9. Click the Add button. The IPv6SG static binding entry is added to the database. The following table describes the nonconfigurable IPv6 Source Guard dynamic binding configuration information that is displayed. Table 211.
PAGE 583
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Validate Source MAC Disable or Enable radio button. This specifies the DAI source MAC validation mode for the switch. If you select Enable, sender MAC validation for the ARP packets is enabled. The factory default is Disable. 6. Select the Validate Destination MAC Disable or Enable radio button This specifies the DAI destination MAC validation mode for the switch.
PAGE 584
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use the VLAN ID check box or boxes to select one ore more DAI-capable VLANs. 6. In the Admin Mode list, select Enable or Disable. This indicates whether the dynamic ARP inspection is enabled on this VLAN. If this is set to Enable, then dynamic ARP inspection is enabled. If this is set to Disable, then dynamic ARP inspection is disabled. The default is Disable. 7.
PAGE 585
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Security > Control > Dynamic ARP Inspection > DAI Interface Configuration. 5.
PAGE 586
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure a DAI ACL You can configure a dynamic ARP inspection (DAI) ACL. To configure a DAI ACL: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 587
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Security > Control > Dynamic ARP Inspection > DAI ACL Rule Configuration. 5. From the ACL Name menu, select the DAI ARP ACL for which you want to configure the rule. 6.
PAGE 588
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. 6. To clear the DAI statistics, click the Clear button. The following table describes the nonconfigurable information displayed on the page. Table 212. DAI Statistics Field Description VLAN The enabled VLAN ID for which statistics are to be displayed.
PAGE 589
M4300 Intelligent Edge Series Fully Managed Stackable Switches Set Up Captive Portals The captive portal feature allows you to prevent clients from accessing the network until user verification is established. You can configure captive portal verification to allow access for both guest and authenticated users. Authenticated users must be validated against a database of authorized captive portal users before access is granted. The database can be stored locally on the device or on a RADIUS server.
PAGE 590
M4300 Intelligent Edge Series Fully Managed Stackable Switches This sets the administrative mode of the captive portal feature. By default CP is disabled. 6. In the Additional HTTP Port field, enter a port number between 0–65535 (excluding port 80). HTTP traffic uses standard port 80, but you can use the Additional HTTP Port field to configure an additional port for HTTP traffic. Enter 0 to unconfigure the additional HTTP port. The default is 0. 7.
PAGE 591
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 213. Captive Portal Global Configuration (continued) Field Description Configured Local Users The number of local users configured. Authenticated Users Shows the number of users currently authenticated to all captive portal instances on this switch. Add a Captive Portal Instance By default, the switch has one captive portal.
PAGE 592
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. In the Protocol field, select either HTTP or HTTPS as the captive portal instances used for communication with clients during the verification process: • HTTP does not use encryption during verification. • HTTPS uses the Secure Sockets Layer (SSL), which requires a certificate to provide encryption. The certificate is presented to the user at connection time. 8.
PAGE 593
M4300 Intelligent Edge Series Fully Managed Stackable Switches 17. In the Foreground Color field, specify the value of the foreground color. For example, #999999. 18. In the Separator Color field, specify the value of the separator color. For example, #46008F. 19. In the Max Bandwidth Down field, specify the maximum rate at which a client can receive data from the network. The rate is in bytes per seconds. 0 indicates the limit is not enforced. The range is 0 to 536870911. 20.
PAGE 594
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Security > Control > Captive Portal > CP Binding Configuration. 5. Select the CP ID from the list. The ID is a unique value that identifies the captive portal instance.
PAGE 595
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To refresh the page with the latest information on the switch, click the Refresh button. The following table describes the nonconfigurable information that is displayed. Table 214. Captive Portal Binding Table Field Description Interface The interface. CP ID The ID of the captive portal instance. Operational Status Indicates whether the portal is active on the specified interface.
PAGE 596
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Group ID from the list. 6. In the Group Name field, specify the name of the user group. The name can contain from 1 to 31 alphanumeric characters. 7. Click the Add button. The group is added. Configure Captive Portal User Settings To configure captive portal user settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 597
M4300 Intelligent Edge Series Fully Managed Stackable Switches To assign a user to more than one group, press the Ctrl key and click each group. New users are assigned to the 1-Default user group by default. 11. In the Session Timeout field, enter the number of seconds a user is permitted to remain connected to the network. Once the Session Timeout value is reached, the user is logged out automatically. 12. In the Idle Timeout field, enter the number of seconds to wait before terminating a session.
PAGE 598
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Security > Control > Captive Portal > CP Trap Flags. 5. Select the CP Trap Mode Disable or Enable radio button. This sets the option to enable or disable the captive portal trap mode. 6.
PAGE 599
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Security > Control > Captive Portal > CP Client. 5. To refresh the page with the latest information on the switch, click the Refresh button. 6.
PAGE 600
M4300 Intelligent Edge Series Fully Managed Stackable Switches provide traffic flow control, restrict contents of routing updates, decide which types of traffic are forwarded or blocked, and above all provide security for the network. ProSafe Managed switch software supports IPv4, IPv6, and MAC ACLs. You first create an IPv4 based or IPv6 based or MAC-based ACL ID. Then, you create a rule and assign it to a unique ACL ID.
PAGE 601
M4300 Intelligent Edge Series Fully Managed Stackable Switches Note: The steps in this procedure describe creating an ACL based on the destination MAC address. If you select a different ACL type, for example, ACL based on a source IPv4, then what is shown on this page varies, depending on the current step in the rule configuration process. 5. Use ACL Type to specify the ACL type you are using to create the ACL. You can select one type from 10 optional types: • ACL Based on Destination MAC.
PAGE 602
M4300 Intelligent Edge Series Fully Managed Stackable Switches • ACL Based on Source IPv4 L4 Port. To create an ACL based on the source IPv4 Layer 4 port number. • ACL Based on Destination IPv6 L4 Port. To create an ACL based on the destination IPv6 Layer 4 port number. • ACL Based on Source IPv6 L4 Port. To create an ACL based on the source IPv6 Layer 4 port number. Note: For L4 port options, two rules are created: one for TCP and one for UDP. 6. From the Direction menu, select Inbound or Outbound.
PAGE 603
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Rule ID to enter a whole number in the range of 1 to 1023 that is used to identify the rule. 6. Use Action to specify what action is taken if a packet matches the rule's criteria. The choices are Permit or Deny. 7. In the Match Every list, select either True or False: • True signifies that all packets must match the selected ACL and rule and are either permitted or denied.
PAGE 604
M4300 Intelligent Edge Series Fully Managed Stackable Switches Traffic rule applies either to inbound traffic only or to outbound traffic only. 12. From the Unit 1 and LAG switch figures onscreen, select the ports and LAGs to which the rule must apply. If a port or LAG is not selected, click the port or LAG to select it. If a port or LAG is selected, click the port or LAG to clear it again. 13. Click the Add button. The rule is added to the ACL based on the destination MAC address. 14.
PAGE 605
M4300 Intelligent Edge Series Fully Managed Stackable Switches To configure a MAC ACL: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4.
PAGE 606
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure MAC ACL Rules You can define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. A default deny all rule is the last rule of every list. To configure MAC ACL rules: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 607
M4300 Intelligent Edge Series Fully Managed Stackable Switches This field cannot be set if a mirror interface is already configured for the ACL rule. 11. Use Match Every to specify an indication to match every Layer 2 MAC packet. Valid values are as follows: • True. Signifies that every packet is considered to match the selected ACL rule. • False. Signifies that it is not mandatory for every packet to match the selected ACL rule. 12. Use CoS to specify the 802.
PAGE 608
M4300 Intelligent Edge Series Fully Managed Stackable Switches Valid format is xx:xx:xx:xx:xx:xx. 18. Use Source MAC Mask to specify the Source MAC address mask specifying which bits in the Source MAC to compare against an Ethernet frame. Valid format is xx:xx:xx:xx:xx:xx. 19. Use VLAN to specify the VLAN ID to compare against an Ethernet frame. Valid range of values is 1 to 4095. Either VLAN range or VLAN can be configured. 20. Use Logging to enable or disable logging.
PAGE 609
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select Security > ACL > Basic > MAC Binding Configuration. 5. Select a MAC ACL from the ACL ID list. You can select one and bind it to the interfaces. The packet filtering Direction for ACL is Inbound, which means the MAC ACL rules are applied to traffic entering the port. 6.
PAGE 610
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the information that is displayed in the Interface Binding Status section. Table 216. Interface Binding Status Field Description Interface The interface of the ACL assigned. Direction Displays selected packet filtering direction for ACL. ACL Type The type of ACL assigned to selected interface and direction.
PAGE 611
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the information displayed in the MAC Binding Table. Table 217. MAC Binding Table Field Description Interface The interface of the ACL assigned. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to selected interface and direction. ACL ID The ACL name identifying the ACL assigned to selected interface and direction.
PAGE 612
M4300 Intelligent Edge Series Fully Managed Stackable Switches The IP ACL page shows the current size of the ACL table and the maximum size of the ACL table. The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs. The maximum size is 100. The Current Number of ACL field displays the current number of the all ACLs configured on the switch. The Maximum ACL displays the maximum number of IP ACL can be configured on the switch, depending on the hardware.
PAGE 613
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Rules for an IP ACL You can display the rules for the IP access control lists (ACL) that you created. Note: An implicit deny all default rule exists as the last rule of an ACL list. This means that if an ACL is applied to a packet and if none of the explicit rules match, the final implicit deny all rule applies and the packet is dropped. To configure rules for an IP ACL: 1. Launch a web browser. 2.
PAGE 614
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Configure the following options for the rule: • Sequence Number. Enter a whole number in the range of 1 to 2147483647. This number is used to identify the rule. An IP ACL can contain up to 1023 rules. • Action. Specify what action is taken if a packet matches the rule’s criteria. The choice is Permit or Deny. • Logging. When set to Enable, logging is enabled for this ACL rule (subject to resource availability in the device).
PAGE 615
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Src IP Address. Enter an IP address using dotted-decimal notation to be compared to a packet’s source IP address as a match criteria for the selected IP ACL rule. • Src IP Mask. Specify the IP mask in dotted-decimal notation to be used with the source IP address. • Rate Limit Conform Data Rate. Value of Rate Limit Conform Data Rate specifies the conforming data rate of IP ACL Rule. Valid values are 1 to 4294967295 in Kbps.
PAGE 616
M4300 Intelligent Edge Series Fully Managed Stackable Switches If no rules exists, the Extended ACL Rule Table shows the message No rules have been configured for this ACL. If one or more rule exists for the ACL, the rules display in the Extended ACL Rule Table. 5. From the ACL ID/Name menu, select the IP ACL for which you want to add or a change a rule. For extended IP ACLs, this must be an ID in the range from 101 to 199 or a name. 6.
PAGE 617
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Action. Specify what action is taken if a packet matches the rule’s criteria. The choice is Permit or Deny. • Logging. When set to Enable, logging is enabled for this ACL rule (subject to resource availability in the device). If the access list trap flag is also enabled, this causes periodic traps to be generated indicating the number of times this rule was hit during the current report interval.
PAGE 618
M4300 Intelligent Edge Series Fully Managed Stackable Switches - If you select the Host radio button, the wildcard mask is configured as 0.0.0.0. If this field is left empty, it means any. The wildcard mask determines which bits are used and which bits are ignored. A wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard of 255.255.255.255 indicates that all of the bits are important. • Src L4. The options are available only when protocol is set to TCP or UDP.
PAGE 619
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Dst. In the Dst field, enter a destination IP address, using dotted-decimal notation, to be compared to a packet’s destination IP address as a match criteria for the selected IP ACL rule: - If you select the IP Address radio button, enter an IP address with a relevant wildcard mask to apply this criteria. If this field is left empty, it means any. - If you select the Host radio button, the wildcard mask is configured as 0.0.0.0.
PAGE 620
M4300 Intelligent Edge Series Fully Managed Stackable Switches The wildcard mask determines which bits are used and which bits are ignored. A wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard of 255.255.255.255 indicates that all of the bits are important. • IGMP Type. If you specify the IGMP type, the IP ACL rule matches the specified IGMP message type. Possible values are in the range 0 to 255. If this field is left empty, it means any. • ICMP.
PAGE 621
M4300 Intelligent Edge Series Fully Managed Stackable Switches - IP Precedence. This is an optional configuration. The IP precedence field in a packet is defined as the high-order three bits of the service type octet in the IP header. Enter an integer from 0 to 7. - IP TOS. This is an optional configuration. The IP ToS field in a packet is defined as all 8 bits of the service type octet in the IP header. The ToS bits value is a hexadecimal number from 00 to 09 and to aa to ff.
PAGE 622
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the IPv6 ACL field in the IPv6 ACL Table, specify the name for the IPv6 ACL. This is the IPv6 ACL name string, which includes up to 31 alphanumeric characters only. The name must start with an alphabetic character. 6. Click the Add button. The IPv6 ACL is added to the switch configuration. The following table describes the nonconfigurable information displayed on the page. Table 218.
PAGE 623
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Security > ACL > Advanced > IPv6 Rules. If no rules exists, the IPv6 ACL Rule Table shows the message No rules have been configured for this ACL.
PAGE 624
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Action. Specify what action is taken if a packet matches the rule’s criteria. The choice is Permit or Deny. • Logging. When set to Enable, logging is enabled for this ACL rule (subject to resource availability in the device). If the access list trap flag is also enabled, this causes periodic traps to be generated indicating the number of times this rule was hit during the current report interval.
PAGE 625
M4300 Intelligent Edge Series Fully Managed Stackable Switches - If you select the Host radio button, enter a host source IPv6 address to match the specified IPv6 address. If this field is left empty, it means any. The source IPv6 address argument must be in the form documented in RFC 2373 where the address is specified in hexadecimal using 16-bit values between colons. • Src L4. The options are available only when protocol is set to TCP or UDP.
PAGE 626
M4300 Intelligent Edge Series Fully Managed Stackable Switches The source IPv6 address argument must be in the form documented in RFC 2373 where the address is specified in hexadecimal using 16-bit values between colons. • Dst L4. The options are available only when protocol is set to TCP or UDP. Use the destination L4 port option to specify relevant matching conditions for L4 port numbers in the extended ACL rule.
PAGE 627
M4300 Intelligent Edge Series Fully Managed Stackable Switches - • The IPv6 ACL rule matches the specified ICMPv6 message type. Possible type numbers are in the range from 0 to 255. • If you specify information in the ICMP Code field, the IPv6 ACL rule matches the specified ICMPv6 message code. Possible values for code can be in the range from 0 to 255. • If these fields are left empty, it means any.
PAGE 628
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure IP ACL Interface Bindings When an ACL is bound to an interface, all the rules that are defined are applied to the selected interface. You can assign ACL lists to ACL priorities and interfaces. To configure IP ACL interface bindings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 629
M4300 Intelligent Edge Series Fully Managed Stackable Switches 7. Specify an optional Sequence Number to indicate the order of this access list relative to other access lists already assigned to this interface and direction. A low number indicates high precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached access list using that sequence number.
PAGE 630
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select Security > ACL > Advanced > Binding Table. 5. To delete an IP ACL-to-interface binding, select the check box next to the interface and click the Delete button. The following table describes the information displayed in the IP ACL Binding Table. Table 220. IP ACL Binding Table Field Description Interface Displays the selected interface.
PAGE 631
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the VLAN ID field, enter the VLAN ID to which the binding must apply. 6. From the Direction menu, select the packet filtering direction. 7. In the Sequence Number field, enter an optional sequence number. You can specify an optional sequence number to indicate the order of this access list relative to other access lists that are already assigned to the VLAN ID and selected direction. A lower number indicates a higher precedence order.
PAGE 632
10 10 Monitor the Switch and Network This chapter covers the following topics: • View Port and EAP Packet Statistics • Manage the Buffered, Command, and Console Logs • Configure the Syslog and Syslog Host Settings • View and Clear the Trap Logs • View and Clear the Event Log • Configure Multiple Port Mirroring • Manage an RSPAN VLAN • Configure sFlow 632
PAGE 633
M4300 Intelligent Edge Series Fully Managed Stackable Switches View Port and EAP Packet Statistics You can view port statistics, including detailed statistics, and Extensible Authentication Protocol (EAP) packets statistics. View and Clear Port Statistics You can view a summary of per-port traffic statistics on the switch and clear the statistics. To view and clear port statistics: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 634
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the per-port statistics displayed on the page. Table 221. Port Statistics Field Description Interface This object indicates the interface of the interface table entry associated with this port on an adapter. Total Packets Received Without Errors The total number of packets received that were without errors.
PAGE 635
M4300 Intelligent Edge Series Fully Managed Stackable Switches The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Monitoring > Ports > Port Detailed Statistics.
PAGE 636
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the detailed port information displayed on the page. To view information about a different port, select the port number from the Interface menu. Table 222. Port Detailed Statistics Field Description MST ID Display the MST instances associated with the interface. ifIndex This object indicates the ifIndex of the interface table entry associated with this port on an adapter.
PAGE 637
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 222. Port Detailed Statistics (continued) Field Description Link Status Indicates whether the link is up or down. Link Trap Indicates whether or not the port sends a trap when link status changes. Packets RX and TX 64 Octets The total number of packets (including bad packets) received or transmitted that were 64 octets in length (excluding framing bits but including FCS octets).
PAGE 638
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 222. Port Detailed Statistics (continued) Field Description Packets Received 256-511 Octets The total number of packets (including bad packets) received that were between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).
PAGE 639
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 222. Port Detailed Statistics (continued) Field Description Alignment Errors The total number of packets received with a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad frame check sequence (FCS) with a nonintegral number of octets.
PAGE 640
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 222. Port Detailed Statistics (continued) Field Description Maximum Frame Size The maximum Ethernet frame size the interface supports or is configured to use, including Ethernet header, CRC, and payload. (1518 to 9216). The default maximum frame size is 1518. Total Packets Transmitted Successfully The number of frames that were transmitted by this port to its segment.
PAGE 641
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 222. Port Detailed Statistics (continued) Field Description GMRP Failed Registrations The number of times attempted GMRP registrations could not be completed. EAPOL Frames Received The number of valid EAPOL frames of any type that were received by this authenticator. EAPOL Frames Transmitted The number of EAPOL frames of any type that were transmitted by this authenticator.
PAGE 642
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use a button at the bottom of the page to perform one of the following actions: • To clear all the EAP counters for all ports on the switch, select the check box in the row heading and click the Clear button. Clicking the button resets all statistics for all ports to default values. • To clear the counters for a specific port, select the check box associated with the port and click the Clear button.
PAGE 643
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 223. EAP Statistics Field Description EAP Response Frames Received This displays the number of valid EAP response frames (other than resp/ID frames) that were received by this authenticator. EAP Request/ID Frames Transmitted This displays the number of EAP request/identity frames that were transmitted by this authenticator.
PAGE 644
M4300 Intelligent Edge Series Fully Managed Stackable Switches command returns a cable length estimate if this feature is supported by the PHY for the current link speed. Note that if the link is down and a cable is attached to a 10/100 Ethernet adapter then the cable status might be Open or Short because some Ethernet adapters leave unused wire pairs unterminated or grounded. The following table describes the nonconfigurable information displayed on the page. Table 224.
PAGE 645
M4300 Intelligent Edge Series Fully Managed Stackable Switches The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Monitoring > Logs > Buffered Logs. 5. To clear the buffered log from the memory, click the Clear button.
PAGE 646
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Admin Status Enable or Disable radio button. A log that is disabled does not log messages. 6. From the Behavior menu, select the action that occurs when the log is full. The log can either wrap around (Wrap, which is the default action) or logging can stop when the log is full (Stop-on-Full). 7. Form the Severity Filter menu, select the severity level: A log records messages equal to or above a configured severity level.
PAGE 647
M4300 Intelligent Edge Series Fully Managed Stackable Switches Message Log Format This topic applies to the format of all logged messages that are displayed for the message log, persistent log, or console log. Messages logged to a collector or relay through syslog use an identical format: • <15>Aug 24 05:34:05 0.0.0.0-1 MSTP[2110]: mspt_api.c(318) 237%% Interface 12 transitioned to root state on message age timer expiry.
PAGE 648
M4300 Intelligent Edge Series Fully Managed Stackable Switches Enable or Disable Console Logging This allows logging to any serial device attached to the host. To enable or disable console logging: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 649
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure the Syslog and Syslog Host Settings You can let the switch filter the messages that are forwarded, based on severity and generating component. You can also configure the syslog host settings. Configure the Syslog Settings To configure the syslog settings: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 650
M4300 Intelligent Edge Series Fully Managed Stackable Switches any collectors or relays. When the syslog Admin Status is enabled, messages are sent to configured collectors or relays using the values configured for each collector or relay. 6. Use Local UDP Port to specify the port on the local host from which syslog messages are sent. The range is 1 to 65535. The default port is 514. 7. Specify the Source Interface to use for syslog. Possible values are as follows: • None.
PAGE 651
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Host Configuration section, configure the following settings: • From the IP Address Type menu, select the address type of host. - IPv4 - IPv6 - DNS • In the Host Address field, specify the address of the host configured for the syslog. • In the Port field, specify the port on the host to which syslog messages are sent. The default port is 514. • Select the severity option in the Severity Filter list.
PAGE 652
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information. Table 225. Syslog Configuration Field Description Messages Received The number of messages received by the log process. This includes messages that are dropped or ignored. Messages Relayed The count of syslog messages relayed. Messages Ignored The count of syslog messages ignored. View and Clear the Trap Logs You can view and clear the entries in the trap log.
PAGE 653
M4300 Intelligent Edge Series Fully Managed Stackable Switches This resets all statistics for the trap logs to the default values. The following table describes the Trap Log information displayed on the page. Table 226. Trap Logs Field Description Number of Traps Since Last Reset The number of traps that occurred since the switch last rebooted. Trap Log Capacity The maximum number of traps stored in the log. If the number of traps exceeds the capacity, the entries overwrite the oldest entries.
PAGE 654
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. To clear the messages from the Event Log, click the Clear button. The following table describes the event log information displayed on the page. Table 227. Event Logs Field Description Entry The sequence number of the event. Type The type of the event. File Name The file in which the event originated. Line The line number of the event. Task Id The task ID of the event. Code The event code. Time The time this event occurred.
PAGE 655
M4300 Intelligent Edge Series Fully Managed Stackable Switches Globally Configure Multiple Port Mirroring To globally configure multiple port mirroring: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 656
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. From the Filter Type list, select the IP or MAC ACL that can mirror traffic that matches a permit rule. Possible values are as follows: • None. No filter is configured for the session. • IP ACL. Configure the IP access-list ID or name ACL. The ID of the IP ACL to apply to traffic from the source. Only traffic that matches the rules in the ACL is mirrored to the destination. • MAC ACL. Configure MAC ACL.
PAGE 657
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the Source Interface Configuration section, select which interfaces are displayed on the page: • Select Unit ID to display the physical ports of the selected unit. • Select LAG to display a list of LAGs only. • Select CPU to display a list of CPUs only. • Select VLANs to display a list of available VLANs. • Select All to display a list of all physical ports, LAG, CPU, and VLANs. 6.
PAGE 658
M4300 Intelligent Edge Series Fully Managed Stackable Switches If the VLAN is configured as the source VLAN, its direction is displayed as a blank field. 8. Click the Apply button. Your settings are saved. The settings are applied to the system. If the port is configured as a source port, the Mirroring Port field value is Mirrored. The Status field indicates the interface status.
PAGE 659
M4300 Intelligent Edge Series Fully Managed Stackable Switches The VLAN ID column lists all VLANs on the device. 5. Select the VLAN to use as the RSPAN VLAN. 6. In the Admin Mode list, select to Enable or Disable RSPAN support on the corresponding VLAN. The default value is Disable. 7. Click the Apply button. Your settings are saved. Configure an RSPAN Source Switch To configure an RSPAN source switch: 1. Launch a web browser. 2.
PAGE 660
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Session ID number from the list. 6. Select the Admin Mode True (enabled) or False (disabled) radio button for the selected session. When a particular session is enabled, any traffic entering or leaving the source ports of the session is copied (mirrored) onto the corresponding destination port or a remote switched port analyzer (RSPAN) VLAN. By default, Admin mode is False (disabled). 7.
PAGE 661
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Monitoring > Mirroring > RSPAN Source Switch Configuration. 5.
PAGE 662
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. Click the Apply button. Your settings are saved. Traffic of the selected interfaces is sent to the probe port. The Status field indicates the interface status. Configure the RSPAN Destination Switch To configure the RSPAN destination switch: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 663
M4300 Intelligent Edge Series Fully Managed Stackable Switches IP or MAC ACLs scan mirror traffic that matches a permit rule. Possible values are as follows: • None. No filter is configured for the session. • IP ACL. Configure IP ACL. • MAC ACL. Configure MAC ACL. 10. Enter the Filter Name, if it is configured for the session. 11. Click the Apply button. Your settings are saved. Configure sFlow sFlow is the standard for monitoring high-speed switched and routed networks.
PAGE 664
M4300 Intelligent Edge Series Fully Managed Stackable Switches Configure Basic sFlow Agent Information To configure basic sFlow agent information: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required.
PAGE 665
M4300 Intelligent Edge Series Fully Managed Stackable Switches The following table describes the nonconfigurable information. Table 228. sFlow Basic Agent Information Field Description Agent Version Uniquely identifies the version and implementation of this MIB. The version string must use the following structure: MIB Version;Organization;Software Revision where: • MIB Version: For example, 1.3, the version of this MIB • Organization: NETGEAR, Inc. • Revision: 1.
PAGE 666
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Routing loopback interface • Tunnel interface • Service port By default, VLAN 1 is used as the source interface. 6. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information. Table 229. sFlow Advanced Agent Information Field Description Agent Version Uniquely identifies the version and implementation of this MIB.
PAGE 667
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Next to the Receiver Index columns, select the check box for the receiver for which data must be displayed or configured. The allowed range to 1 to 8. 6. In the Receiver Owner field, specify the receiver owner. This is the entity making use of this sFlowRcvrTable entry. The empty string indicates that the entry is currently unclaimed and the receiver configuration is reset to the default values.
PAGE 668
M4300 Intelligent Edge Series Fully Managed Stackable Switches To configure the sFlow Interface: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in.
PAGE 669
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. Use Sampling Rate to specify the statistical sampling rate for packet sampling from this source. A sampling rate of 1 counts all packets. A sampling rate of 0 disables sampling. The allowed range is 1024 to 65536. 10. Use Maximum Header Size to specify the maximum number of bytes to be copied from a sampled packet. The allowed range is 20 to 256. 11. Click the Apply button. Your settings are saved.
PAGE 670
11 11 Maintenance and Troubleshooting This chapter covers the following topics: • Save the Configuration • Configure Auto Save Mode • Reset the Switch to Its Factory Default Settings • Reset All User Passwords to Their Default Settings • Upload or Export a File From the Switch • Download or Import a File to the Switch • Manage Software Image Files • Troubleshooting 670
PAGE 671
M4300 Intelligent Edge Series Fully Managed Stackable Switches Save the Configuration When you save the configuration, changes that you made are retained by the switch when it is rebooted. You can manually save the configuration or you can set up autosave. To save the configuration: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 672
M4300 Intelligent Edge Series Fully Managed Stackable Switches The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Maintenance > Save Config > Auto Install Configuration. The Autoinstall State field displays the current status of the Autoinstall process. 5. From the AutoInstall Mode menu, select the start/stop auto install mode on the switch. 6.
PAGE 673
M4300 Intelligent Edge Series Fully Managed Stackable Switches 3. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 4. Select Maintenance > Reset > Factory Default. 5. Select the check box. 6. Click the Apply button. A confirmation pop-up window opens. 7.
PAGE 674
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. Click the Apply button. All user passwords are reset to their factory default values. Upload or Export a File From the Switch You can upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to the TFTP server. Upload a File to the TFTP Server To upload a file from the switch to the TFTP server: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch.
PAGE 675
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Buffered Log. Specify Buffered Log to retrieve the system buffered (in-memory) log. • Tech Support. Specify Tech Support to retrieve the switch information needed for trouble-shooting. • Crash Logs. Specify Crash Log to retrieve the crash logs. • Backup Configuration. Specify Backup Configuration in text mode to retrieve the stored backup configuration. • CPU Packets Capture File.
PAGE 676
M4300 Intelligent Edge Series Fully Managed Stackable Switches Note: This field is visible only when the SFTP or SCP transfer mode is selected. 14. Click the Apply button. The file is uploaded. The last row of the table displays information about the progress of the file transfer. Upload a File Using HTTP To use HTTP file upload: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3.
PAGE 677
M4300 Intelligent Edge Series Fully Managed Stackable Switches • CPU Packets Capture File. Specify CPU Packets Capture File to retrieve the stored captured CPU packets. • Factory Default Configuration. Specify Factory Default Configuration in text mode to retrieve the stored factory default configuration. The factory default is CLI Banner. 6. Click the Apply button. The file is uploaded. Upload a File from the Switch to a USB Device To use upload a file from the switch to a USB device: 1.
PAGE 678
M4300 Intelligent Edge Series Fully Managed Stackable Switches Download or Import a File to the Switch The switch supports system file downloads from a remote system to the switch by using either TFTP or HTTP. Download a File For you to be able top download SSH key files, SSH must be administratively disabled and no active SSH sessions must occur. For you to be able to download SSL-related files, HTTPS must be administratively disabled. To download a file: 1. Launch a web browser. 2.
PAGE 679
M4300 Intelligent Edge Series Fully Managed Stackable Switches • SSH-2 RSA Key PEM File. Select this option to transfer an SSH-2 Rivest-Shamir-Adelman (RSA) key file (PEM Encoded) to the device. • SSH-2 DSA Key PEM File. Select this option to transfer an SSH-2 Digital Signature Algorithm (DSA) key file (PEM Encoded) to the device. • SSL Trusted Root Certificate PEM File. Select this option to transfer an SSL Trusted Root Certificate file (PEM Encoded) to the device.
PAGE 680
M4300 Intelligent Edge Series Fully Managed Stackable Switches 9. Use Transfer Mode to specify what protocol to use to transfer the file: • TFTP. Trivial File Transfer Protocol • SFTP. Secure File Transfer Protocol • SCP. Secure Copy Protocol • FTP. File Transfer Protocol 10. Use Server Address Type to specify either IPv4, IPv6, or DNS to indicate the format of the TFTP/SFTP/SCP Server Address field. The factory default is IPv4. 11.
PAGE 681
M4300 Intelligent Edge Series Fully Managed Stackable Switches For you to be able to download SSL PEM files, SSL must be administratively disabled and no active SSH sessions must occur. To download a file to the switch using HTTP: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The login window opens. 3. Enter admin as the user name, enter your local device password, and click the Login button.
PAGE 682
M4300 Intelligent Edge Series Fully Managed Stackable Switches 6. The Image Name field is visible only when File Type Software is selected. Use Image Name to select one of the images from the list: • Image1. Specify the code image1 to download. • Image2. Specify the code image2 to download. 7. Next to Select File, click the Browse button and navigate to the file to download. You can select a file of up to 80 characters. 8. Click the Apply button. The download begins.
PAGE 683
M4300 Intelligent Edge Series Fully Managed Stackable Switches If the file has errors, the update is stopped. The factory default is Software. 6. Use Image Name to select one of the images from the list: • Image1. Select image1 to download to image1. • Image2. Select image2 to download to image2. Only when File Type Software is selected is the Image Name field visible. 7. Use the File Path field to give a path for the file to download. You can enter up to 146 characters. The default is blank. 8.
PAGE 684
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Source Image to select the image1 or image2 as the source image (the image to be copied). 6. Use Switch Member to select the destination unit to which you are going to copy from the supervisor. 7. Use Destination Image to select the image1 or image2 as the destination image. 8. Click the Apply button. The image is copied. Configure Dual Image Settings The Dual Image feature allows the switch to retain two images in permanent storage.
PAGE 685
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use Unit to select the unit ID whose code image to activate, update, or delete. 6. Use Next Active Image to make the selected image the next active image for subsequent reboots of this unit. 7. Use Image Description to specify the description for the image that you selected. 8. Click the Apply button. Your settings are saved. Note: After activating an image, you must perform a system reset of the switch to run the new image.
PAGE 686
M4300 Intelligent Edge Series Fully Managed Stackable Switches If a reply to the ping is not received, the following message displays: Tx = Count, Rx = 0 Min/Max/Avg RTT = 0/0/0 msec If a reply to the ping is received, the following message displays: Reply From a.b.c.d: icmp_seq = 0. time= xyz usec. Reply From a.b.c.d: icmp_seq = 1. time= abc usec. Reply From a.b.c.d: icmp_seq = 2. time= def usec.
PAGE 687
M4300 Intelligent Edge Series Fully Managed Stackable Switches 8. Enter the Datagram Size of ping packet. The default value is 0 bytes. The range is 0 to 65507. 9. Enter the Source IP address or interface to use when sending the echo request packets. If source is not required, select None as the source option. Possible values are as follows: • None. The source address of the ping packet would be the address of the default outgoing interface. • IP Address.
PAGE 688
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Select the Ping type from the list. Possible values are as follows: • Global. Ping a global IPv6 address. • Link Local. Ping a link-local IPv6 address over the specified interface. This field is shown when Interface is selected as the ping option. 6. Use IPv6 Address/Hostname to enter the IPv6 address or host name of the station for the switch to ping. The initial value is blank. The format is xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx.
PAGE 689
M4300 Intelligent Edge Series Fully Managed Stackable Switches 11. Click the Apply button. Pings are sent to the specified IPv6 address or host name. The switch sends the number of pings specified in the Count field, and the results are displayed below the configurable data in the Results area. Send a Traceroute to an IPv4 Address Use this page to tell the switch to send a traceroute request to a specified IP address or host name.
PAGE 690
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Use IP Address/Hostname to enter the IP address or host name of the station to which you want to discover a path. The default value is blank. 6. Enter the number of Probes Per Hop. The default value is 3. The range is 1 to 10. 7. Enter the Maximum TTL for the destination. The default value is 30. The range is 1 to 255. 8. Enter the Initial TTL to be used. The default value is 1. The range is 1 to 255. 9.
PAGE 691
M4300 Intelligent Edge Series Fully Managed Stackable Switches If source is not required, select None as the source option. Possible values are as follows: • None. The source address of the ping packet would be the address of the default outgoing interface. • IP Address. The source IP address to use when sending the echo request packets. This field is shown when IP Address is selected as the source option. • Interface. The interface to use when sending the echo request packets.
PAGE 692
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. In the IPv6 Address/Hostname field, enter the IPv6 address or host name of the station to which you want the switch to discover a path. The initial value is blank. The IPv6 address or host name you enter is not retained across a power cycle. 6. Enter the Probes Per Hop. The default value is 3. The range is 1 to 10. 7. Enter the Maximum TTL for the destination. The default value is 30. The range is 1 to 255.
PAGE 693
M4300 Intelligent Edge Series Fully Managed Stackable Switches The default value is 0. The range is 0 to 39936. The size you enter is not retained across a power cycle. 13. Enter the Source IP address or interface to use when sending the echo request packets. If source is not required, select None as the source option. Possible values are as follows: • None. The source address of the ping packet would be the address of the default outgoing interface. • IP Address.
PAGE 694
M4300 Intelligent Edge Series Fully Managed Stackable Switches 5. Next to RPCAP USB, select the Enable radio button. 6. From the Capture Mode menu, select the CPU traffic type: • All. Capture all traffic. This option is the default setting. • TX. Capture transmitted traffic only. • RX. Capture received traffic only. 7. In the File Name field, enter the name of the USB file. The file name cannot include the following symbols: '\/:*?”<>|'.
PAGE 695
M4300 Intelligent Edge Series Fully Managed Stackable Switches The System Information page displays. 4. Select Maintenance > Troubleshooting > Full Memory Dump. 5. From the Protocol menu, select the protocol used to store the core dump file. Possible values are as follows: • None. Disable core dump. • TFTP. Set TFTP protocol. • NFS. Set NFS protocol. • USB. Set USB protocol. 6. In the File Path field, enter the path to the location to store the core dump file. 7.
PAGE 696
A Configuration Examples A This appendix contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) • Access Control Lists (ACLs) • Differentiated Services (DiffServ) • 802.
PAGE 697
M4300 Intelligent Edge Series Fully Managed Stackable Switches Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router. Routers connect LANs together, routing the traffic to the appropriate port.
PAGE 698
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged. Inversely, a T for a given port means that packets leaving the switch from that port are tagged with the VLAN ID that is associated with the port.
PAGE 699
M4300 Intelligent Edge Series Fully Managed Stackable Switches an untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20. Access Control Lists (ACLs) ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources.
PAGE 700
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Assign Queue ID: 0 • Match Every: False • CoS: 0 • Destination MAC: 01:02:1A:BC:DE:EF • Destination MAC Mask: 00:00:00:00:FF:FF • EtherType User Value: • Source MAC: 02:02:1A:BC:DE:EF • Source MAC Mask: 00:00:00:00:FF:FF • VLAN ID: 2 For more information about MAC ACL rules, see Configure MAC ACL Rules on page 606. 3.
PAGE 701
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Source IP Address: 192.168.187.0 • Source IP Mask: 255.255.255.0 For additional information about IP ACL rules, see Configure Rules for an IP ACL on page 613. 3. Click the Add button. 4. From the IP Rules page, create a second rule for IP ACL 1 with the following settings: • Rule ID: 2 • Action: Permit • Match Every: True 5. Click the Add button. 6.
PAGE 702
M4300 Intelligent Edge Series Fully Managed Stackable Switches There are two basic types of QoS: • Integrated Services: network resources are apportioned based on request and are reserved (resource reservation) according to network management policy (RSVP, for example). • Differentiated Services: network resources are apportioned based on traffic classification and priority, giving preferential treatment to data with strict timing requirements.
PAGE 703
M4300 Intelligent Edge Series Fully Managed Stackable Switches You can combine these classifiers with logical AND or OR operations to build complex MF-classifiers (by specifying a class type of all or any, respectively). That is, within a single class, multiple match criteria are grouped together as an AND expression or a sequential OR expression, depending on the defined class type.
PAGE 704
M4300 Intelligent Edge Series Fully Managed Stackable Switches The DiffServ feature supports the following types of traffic policing treatments (actions): • drop. The packet is dropped • mark cos. The 802.1p user priority bits are (re)marked and forwarded • mark dscp. The packet DSCP is (re)marked and forwarded • mark prec. The packet IP Precedence is (re)marked and forwarded • send: the packet is forwarded without DiffServ modification Color Mode Awareness.
PAGE 705
M4300 Intelligent Edge Series Fully Managed Stackable Switches • Destination Mask: 255.255.255.0 • Destination L4 Port: Other, and enter 4568 as the destination port value For more information about this page, see Configure a DiffServ Class on page 485. 4. Click the Apply button. 5. From the Policy Configuration page, create a new policy with the following settings: • Policy Selector: Policy1 • Member Class: Class1 For more information about this page, see Configure DiffServ Policy on page 493. 6.
PAGE 706
M4300 Intelligent Edge Series Fully Managed Stackable Switches 802.1X Local Area Networks (LANs) are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure, or permit unauthorized users to attempt to access the LAN through equipment already attached. In such environments you might want to restrict access to the services offered by the LAN to those users and devices that are permitted to use those services.
PAGE 707
M4300 Intelligent Edge Series Fully Managed Stackable Switches A Port Access Entity (PAE) is able to adopt one of two distinct roles within an access control interaction: 1. Authenticator: A Port that enforces authentication before allowing access to services available through that Port. 2. Supplicant: A Port that attempts to access services offered by the Authenticator. Additionally, there exists a third role: 3.
PAGE 708
M4300 Intelligent Edge Series Fully Managed Stackable Switches The Port Control setting for all other ports where authentication is not needed should be Authorized. When the Port Control setting is Authorized, the port is unconditionally put in a force-Authorized state and does not require any authentication. When the Port Control setting is Auto, the authenticator PAE sets the controlled port mode 3. In the Guest VLAN field for ports 1/0/5– 1/0/8, enter 150 to assign these ports to the guest VLAN.
PAGE 709
M4300 Intelligent Edge Series Fully Managed Stackable Switches The difference between the RSTP and the traditional STP (IEEE 802.1D) is the ability to configure and recognize full duplex connectivity and ports that are connected to end stations, resulting in rapid transitioning of the port to the Forwarding state and the suppression of Topology Change Notification. These features are represented by the parameters pointtopoint and edgeport. MSTP is compatible to both RSTP and STP.
PAGE 710
M4300 Intelligent Edge Series Fully Managed Stackable Switches and only one MSTI or CIST). For example, port A can be forwarding for instance 1 while discarding for instance 2. The port states changed since IEEE 802.1D specification. To support multiple spanning trees, a MSTP bridge must be configured with an unambiguous assignment of VLAN IDs (VIDs) to spanning trees. This is achieved by: 1. Ensuring that the allocation of VIDs to FIDs is unambiguous. 2.
PAGE 711
M4300 Intelligent Edge Series Fully Managed Stackable Switches Perform the following procedures on each switch to configure MSTP: 1. Use the VLAN Configuration page to create VLANs 300 and 500 (see Configure Basic VLAN Settings on page 181). 2. Use the VLAN Membership page to include ports 1/0/1–1/0/8 as tagged (T) or untagged (U) members of VLAN 300 and VLAN 500 (see Configure Basic VLAN Settings on page 181). 3.
PAGE 712
M4300 Intelligent Edge Series Fully Managed Stackable Switches 11. Create a second MST instance with the following settings • MST ID: 2 • Priority: 49152 • VLAN ID: 500 12. Click the Add button. In this example, assume that Switch 1 has become the Root bridge for the MST instance 1, and Switch 2 has become the Root bridge for MST instance 2. Switch 3 has hosts in the Sales department (ports 1/0/1, 1/0/2, and 1/0/3) and in the HR department (ports 1/0/4 and 1/0/5).
PAGE 713
B B Default Settings This appendix describes the default settings for many of the NETGEAR switch software features. Table 231. Default Settings Feature Default IP address for management VLAN 169.254.100.100 Service port IP address 192.168.0.239 Subnet mask 255.255.0.0 Default gateway 0.0.0.
PAGE 714
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 231. Default Settings (continued) Feature Default Auto Install Enabled Auto Save Disabled sFlow Enabled ISDP Enabled (Versions 1 and 2) RMON Enabled TACACS Not configured RADIUS Not configured SSH/SSL Disabled Telnet Enabled Denial of Service Protection Disabled Captive Portal Disabled Dot1x Authentication (IEEE 802.
PAGE 715
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 231.
PAGE 716
C C Acronyms and Abbreviations In most cases, acronyms and abbreviations are defined on first use in this document. Acronyms and abbreviations are also defined in the following table. Table 232. Acronyms and Abbreviations Acronym Definition 100BASE-TX Fast Ethernet at 100 Mbps (12.5 MBps) with auto-negotiation 1000BASE-T Gbps Ethernet over twisted pair a 1 Gbps (125 Mbps) 10GBASE-T Or IEEE 802.3an. A standard by the IEEE 802.
PAGE 717
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 232. Acronyms and Abbreviations (continued) Acronym Definition CoS Class of Service. An indication of how an upper-layer protocol requires a lower-layer protocol to treat its messages.
PAGE 718
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 232. Acronyms and Abbreviations (continued) Acronym Definition IAS Internal Authentication Server IFP Ingress Filter Processor IGMP Internet Group Management Protocol In-band Interface An IP interface that could be used for in-band management. Any IP interface other than the Out-of-Band port. IP Internet Protocol IP Address Owner The VRRP router that has the virtual router’s IP address(es) as real interface address(es).
PAGE 719
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 232. Acronyms and Abbreviations (continued) Acronym Definition MFDB Multicast Forwarding Database MIB Management Information Base MLAG Multi-switch Link Aggregation MMU Memory Management Unit MPLS Multiprotocol Label Switching: A standard involving IP quality.
PAGE 720
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 232. Acronyms and Abbreviations (continued) Acronym Definition RED Random Early Discard Routing Interface An IP interface whose physical ports are front panel ports and associated with a VLAN. Packets received on a routing interface can be transmitted on a different VLAN than they were received on.
PAGE 721
M4300 Intelligent Edge Series Fully Managed Stackable Switches Table 232. Acronyms and Abbreviations (continued) Acronym Definition VRRP Router A router running the Virtual Router Redundancy Protocol. It can participate in one or more virtual routers.