SMC Networks TIGERSWITCH 10/100 Uživatelský manuál

TigerSwitch 10/10024-Port Fast Ethernet Switch◆ 24 10BASE-T/100BASE-TX auto MDI/MDI-X ports◆ Optional 1000BASE-X or 100BASE-FX modules◆ 8.8 Gbps of ag

CONTENTSivexit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-18quit . . . . . . . . . . . . . . . . . . . . . . . . .

CONFIGURING THE SWITCH2-68Web – Click VLAN, VLAN Port Configuration or VLAN Trunk Configuration. Fill in the required settings for each interface, cli

CONFIGURING PRIVATE VLANS2-69ports in their own community VLAN, and with their designated promiscuous ports. (Note that private VLANs and normal VLANs

CONFIGURING THE SWITCH2-70Command Attributes• VLAN ID – ID of configured VLAN (1-4094, no leading zeroes).• Primary VLAN – The primary VLAN with which

CONFIGURING PRIVATE VLANS2-71CLI – This example shows the switch configured with primary VLAN 5 and secondary VLAN 6. Port 3 has been configured as a

CONFIGURING THE SWITCH2-72Web – Click Private VLAN, Private VLAN Configuration. Enter the VLAN ID number, select Primary or Community type, then click

CONFIGURING PRIVATE VLANS2-73Web – Click Private VLAN, Private VLAN Association. Select the required primary VLAN from the scroll-down box, highlight

CONFIGURING THE SWITCH2-74Command Attributes• Port/Trunk – The switch interface.• PVLAN Port Type – Displays private VLAN port types.- Normal – The po

CONFIGURING PRIVATE VLANS2-75CLI – This example shows the switch configured with primary VLAN 5 and secondary VLAN 6. Port 3 has been configured as a

CONFIGURING THE SWITCH2-76• Primary VLAN – Conveys traffic between promiscuous ports, and between promiscuous ports and community ports within the ass

CLASS OF SERVICE CONFIGURATION2-77CLI – This example shows the switch configured with primary VLAN 5 and secondary VLAN 6. Port 3 has been configured

CONTENTSvshow dot1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-51SNMP Commands . . . . . . . . . . . . . . . . . . . . . . .

CONFIGURING THE SWITCH2-78This switch uses Weighted Round-Robin as the default mode for each port. Up to 8 separate traffic classes are defined in IEE

PORT TRUNK CONFIGURATION2-79Command Attributes• WRR – Weighted Round-Robin shares bandwidth at the egress ports by using scheduling weights of 1, 3, 1

CONFIGURING THE SWITCH2-80Command UsageBesides balancing the load across each port in the trunk, the other ports provide redundancy by taking over the

PORT TRUNK CONFIGURATION2-81• New – Selects a predefined port group to add to the specified trunk.Web – Click Trunk, Trunk Configuration. Enter a trun

CONFIGURING THE SWITCH2-82CLI – This example creates trunk 1 with ports 5 and 17. Just connect these ports to two static trunk ports on another switch

CONFIGURING SNMP2-83submit a valid community string for authentication. The options for configuring community strings and related trap functions are d

CONFIGURING THE SWITCH2-84Web – Click SNMP, SNMP Configuration. Add new community strings as required, select the access rights from the Access Mode d

CONFIGURING SNMP2-85Command Usage• You can enable or disable authentication messages via the Web interface.• You can enable or disable authentication

CONFIGURING THE SWITCH2-86Web – Click SNMP, SNMP Configuration. Fill in the IP address and community string for each Trap Manager that will receive th

MULTICAST CONFIGURATION2-87This switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts that want to receive a specific

CONTENTSvishow queue hol-prevention . . . . . . . . . . . . . . . . . . . . 3-87Interface Commands . . . . . . . . . . . . . . . . . . . . . . . .

CONFIGURING THE SWITCH2-88adjacent multicast switch/router to ensure that it will continue to receive the multicast service. Note: Multicast routers u

MULTICAST CONFIGURATION2-89Web – Click IGMP, IGMP Configuration. Adjust the IGMP settings as required, and then click Apply. (The default settings are

CONFIGURING THE SWITCH2-90You can use the Multicast Router Port Information page to display the ports on this switch attached to a neighboring multica

MULTICAST CONFIGURATION2-91Specifying Interfaces Attached to a Multicast RouterDepending on your network connections, IGMP snooping may not always be

CONFIGURING THE SWITCH2-92CLI – This example configures port 11 as a multicast router port within VLAN 1.Displaying Port Members of Multicast Services

MULTICAST CONFIGURATION2-93Web – Click IGMP, IP Multicast Registration Table. Select the VLAN ID and multicast IP address. The switch will display all

CONFIGURING THE SWITCH2-94Adding Multicast Addresses to VLANsMulticast filtering can be dynamically configured using IGMP Snooping and IGMP Query mess

MULTICAST CONFIGURATION2-95Web – Click IGMP, IGMP Member Port Table. Specify the interface attached to a multicast service (via an IGMP-enabled switch

CONFIGURING THE SWITCH2-96Showing Port StatisticsYou can display standard statistics on network traffic from the Interfaces Group and Ethernet-like MI

SHOWING PORT STATISTICS2-97Web – Click Statistics, Port Statistics. Select the required interface, and click Query. You can also use the Refresh butto

CONTENTSviiswitchport acceptable-frame-types . . . . . . . . . . . . . . 3-126switchport ingress-filtering . . . . . . . . . . . . . . . . . . . .

CONFIGURING THE SWITCH2-98CLI – This example shows statistics for port 1.Rate Limit ConfigurationThis function allows the network manager to control t

RATE LIMIT CONFIGURATION2-99Rate limiting can be applied to individual ports or trunks. When an interface is configured with this feature, the traffic

CONFIGURING THE SWITCH2-100Web - Click Rate Limit, Input/Output Rate Limit Port/Trunk Configuration. Enable the Rate Limit Status for the required int

CONFIGURING 802.1X PORT AUTHENTICATION2-101The IEEE 802.1x (dot1x) standard defines a port-based access control procedure that prevents unauthorized a

CONFIGURING THE SWITCH2-102Displaying 802.1x Global SettingsThe dot1x protocol includes global parameters that control the client authentication proce

CONFIGURING 802.1X PORT AUTHENTICATION2-103Web – Click dot1x, dot1X Information.CLI -This example shows the default protocol settings for dot1x.Config

CONFIGURING THE SWITCH2-104identity lookup process that runs between the switch and authentication server. The configuration options for parameters ar

CONFIGURING 802.1X PORT AUTHENTICATION2-105Web – Select dot1x, dot1X Configuration. Enable dot1x globally for the switch, modify any of the parameter

CONFIGURING THE SWITCH2-106• Mode – Sets the authentication mode to one of the following options: - Force-Authorized – Configures the port to grant ac

CONFIGURING 802.1X PORT AUTHENTICATION2-107CLI – This example sets the authentication mode to enable dot1x on port 2. Displaying 802.1x StatisticsThis

CONTENTSviiiA Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . .A-1Troubleshooting Chart . . . . . . . . . . . . . . . . . . . . .

CONFIGURING THE SWITCH2-108Web – Select dot1x followed by dot1X statistics. Select the required port and then click Query. Click Refresh to update sta

CONFIGURING 802.1X PORT AUTHENTICATION2-109CLI – This example displays the dot1x statistics for port 1.Console#show dot1x statisticsEth 1/1Rx: EXPOL E

CONFIGURING THE SWITCH2-110

USING THE COMMAND LINE INTERFACE3-1CHAPTER 3COMMAND LINE INTERFACEThis chapter describes how to use the Command Line Interface (CLI).Using the Command

COMMAND LINE INTERFACE3-22. Enter the necessary commands to complete your desired tasks. 3. When finished, exit the session with the “quit” or “exit”

USING THE COMMAND LINE INTERFACE3-3If your corporate network is connected to another network outside your office or to the Internet, you need to apply

COMMAND LINE INTERFACE3-4Entering CommandsThis section describes how to enter CLI commands.Keywords and ArgumentsA CLI command is a series of keywords

ENTERING COMMANDS3-5Command CompletionIf you terminate input with a Tab key, the CLI will print the remaining characters of a partial keyword up to th

COMMAND LINE INTERFACE3-6The command “show interfaces ?” will display the following information:Partial Keyword LookupIf you terminate a partial keywo

ENTERING COMMANDS3-7Understanding Command ModesThe command set is divided into Exec and Configuration classes. Exec commands generally display informa

1-1CHAPTER 1SWITCH MANAGEMENTConnecting to the SwitchConfiguration OptionsThis switch includes a built-in network management agent. The agent offers a

COMMAND LINE INTERFACE3-8enable command, followed by the privileged level password “super” (page 3-29). To enter Privileged Exec mode, enter the follo

ENTERING COMMANDS3-9• Interface Configuration - These commands modify the port configuration such as speed-duplex and negotiation. • Line Configuratio

COMMAND LINE INTERFACE3-10Command Line ProcessingCommands are not case sensitive. You can abbreviate commands and parameters as long as they contain e

COMMAND GROUPS3-11RADIUS Client Configures RADIUS client-server authentication for logon access 3-38Port AuthenticationConfigures IEEE 802.1x port ac

COMMAND LINE INTERFACE3-12Note: Note that the access mode shown in the following tables is indicated by these abbreviations: NE (Normal Exec) PE (Priv

GENERAL COMMANDS3-13General CommandsenableUse this command to activate Privileged Exec mode. In privileged mode, additional commands are available, an

COMMAND LINE INTERFACE3-14Default SettingLevel 15Command ModeNormal ExecCommand Usage • “super” is the default password required to change the command

GENERAL COMMANDS3-15Command Usage The “>” character is appended to the end of the prompt to indicate that the system is in normal access mode.Examp

COMMAND LINE INTERFACE3-16show historyUse this command to show the contents of the command history buffer.Default Setting NoneCommand Mode Normal Exec

GENERAL COMMANDS3-17example, the !2 command repeats the second command in the Execution history buffer (config).reloadUse this command to restart the

SWITCH MANAGEMENT1-2The switch’s CLI configuration program, Web interface, and SNMP agent allow you to perform the following management functions:• Se

COMMAND LINE INTERFACE3-18Command Mode Global Configuration, Interface Configuration, Line Configuration, VLAN Database ConfigurationExample This exam

FLASH/FILE COMMANDS3-19quitUse this command to exit the configuration program.Default Setting NoneCommand Mode Normal Exec, Privileged ExecCommand Usa

COMMAND LINE INTERFACE3-20copyUse this command to move (upload/download) a code image or configuration file between the switch’s Flash memory and a TF

FLASH/FILE COMMANDS3-21Command Usage • The system prompts for data required to complete the copy command. • The destination file name should not conta

COMMAND LINE INTERFACE3-22The following example shows how to copy the running configuration to a startup file.The following example shows how to downl

FLASH/FILE COMMANDS3-23Command Usage • If the file type is used for system startup, then this file cannot be deleted. • “Factory_Default_Config.cfg” c

COMMAND LINE INTERFACE3-24Command Usage • If you enter the command dir without any parameters, the system displays all files. • File information is sh

FLASH/FILE COMMANDS3-25ExampleThis example shows the information displayed by the whichboot command. See the table under the dir command for a descrip

COMMAND LINE INTERFACE3-26ExampleRelated Commandsdir (3-23)whichboot (3-24) System Management CommandsThese commands are used to control system logs,

SYSTEM MANAGEMENT COMMANDS3-27hostnameUse this command to specify or modify the host name for this device. Use the no form to restore the default host

CONNECTING TO THE SWITCH1-3• RADIUS client support• MAC filtering securityRequired ConnectionsThe switch provides an RS-232 serial port that enables a

COMMAND LINE INTERFACE3-28Syntax username name {access-level level | nopassword | password {0 | 7} password}no username name• name - The name of the u

SYSTEM MANAGEMENT COMMANDS3-29Example This example shows how the set the access level and password for a user.enable passwordAfter initially logging o

COMMAND LINE INTERFACE3-30password to change the command mode from Normal Exec to Privileged Exec with the enable command (page 3-13).• The encrypted

SYSTEM MANAGEMENT COMMANDS3-31Related Commandsip http server (3-31)ip http serverUse this command to allow this device to be monitored or configured f

COMMAND LINE INTERFACE3-32show startup-configUse this command to display the configuration file stored in non-volatile memory that is used to start up

SYSTEM MANAGEMENT COMMANDS3-33Example Related Commandsshow running-config (3-34)Console#show startup-configbuilding startup-config, please wait...!

COMMAND LINE INTERFACE3-34show running-configUse this command to display the configuration information currently in use.Default Setting NoneCommand Mo

SYSTEM MANAGEMENT COMMANDS3-35Example Related Commandsshow startup-config (3-32)Console#show running-configbuilding running-config, please wait...!!

COMMAND LINE INTERFACE3-36show systemUse this command to display system information.Default Setting NoneCommand Mode Normal Exec, Privileged ExecComma

SYSTEM MANAGEMENT COMMANDS3-37show usersShows all active console and Telnet sessions, including user name, idle time, and IP address of Telnet client.

SWITCH MANAGEMENT1-4Note: When using HyperTerminal with Microsoft® Windows® 2000, make sure that you have Windows 2000 Service Pack 2 or later install

COMMAND LINE INTERFACE3-38Command Usage See “Displaying Switch Hardware/Software Versions” on page -28 for detailed information on software items. The

AUTHENTICATION COMMANDS3-39authentication loginUse this command to define the login authentication method and precedence. Use the no form to restore t

COMMAND LINE INTERFACE3-40Command Usage • RADIUS uses UDP which only offers best-effort delivery. Also, note that RADIUS encrypts only the password in

AUTHENTICATION COMMANDS3-41Command Mode Global ConfigurationExample radius-server portUse this command to set the RADIUS server network port. Use the

COMMAND LINE INTERFACE3-42radius-server keyUse this command to set the RADIUS encryption key. Use the no form to restore the default.Syntax radius-ser

AUTHENTICATION COMMANDS3-43Command Mode Global ConfigurationExample radius-server timeoutUse this command to set the interval between transmitting aut

COMMAND LINE INTERFACE3-44Command Mode Privileged ExecExample Port Authentication CommandsThe switch supports IEEE 802.1x (dot1x) port-based access co

PORT AUTHENTICATION COMMANDS3-45authentication dot1xSets the default authentication server type. Use the no form to restore the default.Syntaxauthenti

COMMAND LINE INTERFACE3-46dot1x defaultSets all configurable dot1x global and port settings to their default values.Syntaxdot1x defaultCommand ModeGlo

PORT AUTHENTICATION COMMANDS3-47dot1x port-controlSets the dot1x mode on a port interface. Use the no form to reset to the default.Syntaxdot1x port-co

BASIC CONFIGURATION1-5browser (Internet Explorer 5.0 or above, or Netscape Navigator 6.2 or above), or from a network computer using network managemen

COMMAND LINE INTERFACE3-48dot1x re-authenticateForces re-authentication on all ports or a specific interface.Syntaxdot1x re-authenticate [interface]in

PORT AUTHENTICATION COMMANDS3-49dot1x timeout quiet-periodSets the time that a switch port waits after the Max Request Count has been exceeded before

COMMAND LINE INTERFACE3-50Exampledot1x timeout tx-periodSets the time period during an authentication session that the switch waits before re-transmit

PORT AUTHENTICATION COMMANDS3-51show dot1xUse this command to show general port authentication related settings on the switch or a specific interface.

COMMAND LINE INTERFACE3-52• 802.1X Port Details – Displays detailed port access control settings for each interface as described in the preceeding pag

PORT AUTHENTICATION COMMANDS3-53ExampleConsole#show dot1xGlobal 802.1X Parametersreauth-enabled: yesreauth-period: 3600quiet-period: 350tx-period: 300

COMMAND LINE INTERFACE3-54SNMP CommandsControls access to this switch from management stations using the Simple Network Management Protocol (SNMP), as

SNMP COMMANDS3-55• rw - Specifies read-write access. Authorized management stations are able to both retrieve and modify MIB objects.Default Setting •

COMMAND LINE INTERFACE3-56Example Related Commandssnmp-server locationsnmp-server locationUse this command to set the system location string. Use the

SNMP COMMANDS3-57snmp-server hostUse this command to specify the recipient of a Simple Network Management Protocol notification operation. Use the no

SWITCH MANAGEMENT1-6Setting PasswordsNote: If this is your first time to log into the CLI program, you should define new passwords for both default us

COMMAND LINE INTERFACE3-58The snmp-server host command is used in conjunction with the snmp-server enable traps command. Use the snmp-server enable tr

SNMP COMMANDS3-59Default Setting Issue authentication and link-up-down traps.Command Mode Global ConfigurationCommand Usage If you do not enter an snm

COMMAND LINE INTERFACE3-60Command Mode Normal Exec, Privileged ExecCommand Usage This command provides information on the community access strings, co

IGMP SNOOPING COMMANDS3-61IGMP Snooping CommandsThis switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts that want t

COMMAND LINE INTERFACE3-62Default Setting EnabledCommand Mode Global ConfigurationExample The following example enables IGMP snooping.ip igmp snooping

IGMP SNOOPING COMMANDS3-63response-time. If the countdown finishes, and the client still has not responded, then that client is considered to have lef

COMMAND LINE INTERFACE3-64query-count, but a client has not responded, a countdown timer is started using an initial value set by this command. If the

IGMP SNOOPING COMMANDS3-65Command Usage The switch must be using IGMPv2 for this command to take effect.Example The following shows how to configure t

COMMAND LINE INTERFACE3-66• Some commands are only enabled for IGMPv2, including ip igmp query-max-response-time and ip igmp query-timeout. Example Th

IGMP SNOOPING COMMANDS3-67show mac-address-table multicastUse this command to show known multicast addresses.Syntax show mac-address-table multicast [

BASIC CONFIGURATION1-7Setting an IP AddressYou must establish IP address information for the switch to obtain management access through the network. T

COMMAND LINE INTERFACE3-68Line CommandsYou can access the onboard configuration program by attaching a VT100 compatible device to the server’s serial

LINE COMMANDS3-69lineUse this command to identify a specific line for configuration, and to process subsequent line configuration commands.Syntax line

COMMAND LINE INTERFACE3-70loginUse this command to enable password checking at login. Use the no form to disable password checking and allow connectio

LINE COMMANDS3-71• This command controls login authentication via the switch itself. To configure user names and passwords for remote authentication s

COMMAND LINE INTERFACE3-72Command Usage • When a connection is started on a line with password protection, the system prompts for the password. If you

LINE COMMANDS3-73Command Mode Line Configuration Command Usage • If user input is detected within the timeout interval, the session is kept open; othe

COMMAND LINE INTERFACE3-74Command Usage • When the logon attempt threshold is reached, the system interface becomes silent for a specified amount of t

LINE COMMANDS3-75Command Mode Line Configuration Example To set the silent time to 60 seconds, enter this command:Related Commands password-thresh (3-

COMMAND LINE INTERFACE3-76Example To specify 7 data bits, enter this command:Related Commands parity (3-76)parityUse this command to define generation

LINE COMMANDS3-77speedUse this command to set the terminal line's baud rate. This command sets both the transmit (to terminal) and receive (from

SWITCH MANAGEMENT1-8• Default gateway for the network • Network mask for this network To assign an IP address to the switch, complete the following st

COMMAND LINE INTERFACE3-78stopbitsUse this command to set the number of the stop bits transmitted per byte. Use the no form to restore the default set

IP COMMANDS3-79Example To show all lines, enter this command:IP CommandsThere are no IP addresses assigned to this switch by default. You must manuall

COMMAND LINE INTERFACE3-80ip addressUse this command to set the IP address for this device. Use the no form to restore the default IP address.Syntax i

IP COMMANDS3-81• You can start broadcasting BOOTP or DHCP requests by entering an ip dhcp restart command, or by rebooting the switch. Note: Only one

COMMAND LINE INTERFACE3-82• If the BOOTP or DHCP server has been moved to a different domain, the network portion of the address provided to the clien

IP COMMANDS3-83Command Usage A gateway must be defined if the management station is located in a different IP segment.Example The following example de

COMMAND LINE INTERFACE3-84show ip redirectsUse this command to show the default gateway configured for this device.Default Setting NoneCommand Mode Pr

IP COMMANDS3-85Command Mode Normal Exec, Privileged ExecCommand Usage • Use the ping command to see if another site on the network can be reached. • F

COMMAND LINE INTERFACE3-86HOL Blocking Prevention CommandsIf head-of-line (HOL) Blocking Prevention is enabled it prevents the forwarding of data to a

HOL BLOCKING PREVENTION COMMANDS3-87Syntax queue hol-preventionno queue hol-preventionDefault Setting EnabledCommand Mode Global ConfigurationCommand

BASIC CONFIGURATION1-9If the “bootp” or “dhcp” option is saved to the startup-config file (step 6), then the switch will start broadcasting service re

COMMAND LINE INTERFACE3-88Example This example displays the current status.Interface CommandsThese commands are used to display or set communication p

INTERFACE COMMANDS3-89interfaceUse this command to configure an interface type and enter interface configuration mode. Use the no form to remove a tru

COMMAND LINE INTERFACE3-90descriptionUse this command to add a description to an interface. Use the no form to remove the description.Syntax descripti

INTERFACE COMMANDS3-91• 10full - Forces 10 Mbps full-duplex operation • 10half - Forces 10 Mbps half-duplex operationDefault Setting • Auto-negotiatio

COMMAND LINE INTERFACE3-92negotiationUse this command to enable autonegotiation for a given interface. Use the no form to disable autonegotiation.Synt

INTERFACE COMMANDS3-93capabilitiesUse this command to advertise the port capabilities of a given interface during autonegotiation. Use the no form wit

COMMAND LINE INTERFACE3-94Command Usage When auto-negotiation is enabled with the negotiation command, the switch will negotiate the best settings for

INTERFACE COMMANDS3-95Command Usage • Flow control can eliminate frame loss by “blocking” traffic from end stations or segments connected directly to

COMMAND LINE INTERFACE3-96shutdown Use this command to disable an interface. To restart a disabled interface, use the no form.Syntax shutdownno shutdo

INTERFACE COMMANDS3-97switchport broadcast percentUse this command to configure broadcast storm control. Use the no form to disable broadcast storm co

SWITCH MANAGEMENT1-106. Then save your configuration changes by typing “copy running-config startup-config.” Enter the startup file name and press <

COMMAND LINE INTERFACE3-98clear countersUse this command to clear statistics on an interface.Syntaxclear counters interfaceinterface • ethernet unit/p

INTERFACE COMMANDS3-99show interfaces statusUse this command to display the status for an interface.Syntax show interfaces status interfaceinterface •

COMMAND LINE INTERFACE3-100Example show interfaces countersUse this command to display statistics for an interface. Syntax show interfaces counters in

INTERFACE COMMANDS3-101Command Usage If no interface is specified, information on all interfaces is displayed. For a description of the items displaye

COMMAND LINE INTERFACE3-102show interfaces switchportUse this command to display advanced interface configuration settings.Syntax show interfaces swit

INTERFACE COMMANDS3-103• Gvrp status – Shows if GARP VLAN Registration Protocol is enabled or disabled (page 3-140).• Allowed Vlan – Shows the VLANs t

COMMAND LINE INTERFACE3-104This example shows the configuration for port 3 when set to promiscuous mode for private VLANs.Rate Limit CommandsThis func

RATE LIMIT COMMANDS3-105rate-limitUse this command to set the rate limit. Use the no form to remove the rate limit.Syntaxrate-limit {input | output} p

COMMAND LINE INTERFACE3-106ExampleThis example sets the rate limit for input and output traffic on port 2 to 312K when operating at 10 Mbps or 3.12 Mb

ADDRESS TABLE COMMANDS3-107mac-address-table staticUse this command to map a static address to a destination port. Use the no form to remove an addres

BASIC CONFIGURATION1-11The default strings are:• public - with read-only access. Authorized management stations are only able to retrieve MIB objects.

COMMAND LINE INTERFACE3-108• Static addresses will not be removed from the address table when a given interface link is down. • Static addresses are b

ADDRESS TABLE COMMANDS3-109show mac-address-tableUse this command to view classes of entries in the bridge-forwarding database.Syntax show mac-address

COMMAND LINE INTERFACE3-110Examplemac-address-table aging-timeUse this command to set the aging time for entries in the address table. Use the no form

SPANNING TREE COMMANDS3-111show mac-address-table aging-timeUse this command to show the aging time for entries in the address table.Default Setting N

COMMAND LINE INTERFACE3-112spanning-treeUse this command to enable the Spanning Tree Algorithm globally for the switch. Use the no form to disable it.

SPANNING TREE COMMANDS3-113Example The following example shows how to enable the Spanning Tree Algorithm for the switch:spanning-tree forward-timeUse

COMMAND LINE INTERFACE3-114Example spanning-tree hello-timeUse this command to configure the spanning tree bridge hello time globally for this switch.

SPANNING TREE COMMANDS3-115spanning-tree max-ageUse this command to configure the spanning tree bridge maximum age globally for this switch. Use the n

COMMAND LINE INTERFACE3-116spanning-tree priorityUse this command to configure the spanning tree priority globally for this switch. Use the no form to

SPANNING TREE COMMANDS3-117The recommended range is:- Ethernet: 50-600- Fast Ethernet: 10-60- Gigabit Ethernet: 3-10 Default Setting • Ethernet – half

SWITCH MANAGEMENT1-12Trap ReceiversYou can also specify SNMP stations that are to receive traps from the switch.To configure a trap receiver, complete

COMMAND LINE INTERFACE3-118Default Setting 128Command Mode Interface Configuration (Ethernet, Port Channel)Command Usage • This command defines the pr

SPANNING TREE COMMANDS3-119Command Mode Interface Configuration (Ethernet, Port Channel)Command Usage • This command is used to enable/disable the fas

COMMAND LINE INTERFACE3-120Command Mode Privileged ExecCommand Usage For a description of the items displayed under “Bridge-group information, see “Ma

VLAN COMMANDS3-121VLAN CommandsA VLAN is a group of ports that can be located anywhere in the network, but communicate as though they belong to the sa

COMMAND LINE INTERFACE3-122vlan databaseUse this command to enter VLAN database mode. All commands in this mode will take effect immediately.Default S

VLAN COMMANDS3-123Related Commands show vlan (3-131)vlanUse this command to configure a VLAN. Use the no form to restore the default settings or delet

COMMAND LINE INTERFACE3-124• VLAN 1 cannot be suspended, but any other VLAN will be suspended.• You can configure up to 127 VLANs on the switch.Exampl

VLAN COMMANDS3-125Example The following example shows how to set the interface configuration mode to VLAN 1, and then assign an IP address to the VLAN

COMMAND LINE INTERFACE3-126Example The following shows how to set the configuration mode to port 1, and then set the switchport mode to trunk:switchpo

VLAN COMMANDS3-127switchport ingress-filteringUse this command to enable ingress filtering for an interface. Use the no form to restore the default.Sy

MANAGING SYSTEM FILES1-132. Enter the name of the start-up file. Press <Enter>.Managing System FilesThe switch’s flash memory supports three typ

COMMAND LINE INTERFACE3-128switchport native vlanUse this command to configure the PVID (i.e., default VLAN ID) for a port. Use the no form to restore

VLAN COMMANDS3-129switchport allowed vlanUse this command to configure VLAN groups on the selected interface. Use the no form to restore the default.S

COMMAND LINE INTERFACE3-130Example The following example shows how to add VLANs 1, 2, 5 and 6 to the allowed list as tagged VLANs for port 1:switchpor

VLAN COMMANDS3-131Example The following example shows how to prevent port 1 from being added to VLAN 3:show vlanUse this command to show VLAN informat

COMMAND LINE INTERFACE3-132Example The following example shows how to display information for VLAN 1:Private VLAN CommandsPrivate VLANs provide port-b

PRIVATE VLAN COMMANDS3-133To configure private VLANs, follow these steps:1. Use the private-vlan command to designate one or more community VLANs and

COMMAND LINE INTERFACE3-134private-vlanUse this command to create a primary or secondary (i.e., community) private VLAN. Use the no form to remove the

PRIVATE VLAN COMMANDS3-135Exampleprivate vlan associationUse this command to associate a primary VLAN with a secondary (i.e., community) VLAN. Use the

COMMAND LINE INTERFACE3-136Exampleswitchport mode private-vlanUse this command to set the private VLAN mode for an interface. Use the no form to resto

PRIVATE VLAN COMMANDS3-137Exampleswitchport private-vlan host-associationUse this command to associate an interface with a secondary VLAN. Use the no

SWITCH MANAGEMENT1-14also provides a facility to upload firmware files to the system directly through the console port. See “Upgrading Firmware via th

COMMAND LINE INTERFACE3-138switchport private-vlan mappingUse this command to map an interface to a primary VLAN. Use the no form to remove this mappi

PRIVATE VLAN COMMANDS3-139show vlan private-vlanUse this command to show the private VLAN configuration settings on this switch.Syntaxshow vlan privat

COMMAND LINE INTERFACE3-140GVRP and Bridge Extension CommandsGARP VLAN Registration Protocol defines a way for switches to exchange VLAN information i

GVRP AND BRIDGE EXTENSION COMMANDS3-141Default Setting DisabledCommand Mode Interface Configuration (Ethernet, Port Channel)Command Usage GVRP can onl

COMMAND LINE INTERFACE3-142Example garp timerUse this command to set the values for the join, leave and leaveall timers. Use the no form to restore th

GVRP AND BRIDGE EXTENSION COMMANDS3-143experiencing difficulties with GMRP or GVRP registration/deregistration.• Timer values are applied to GVRP for

COMMAND LINE INTERFACE3-144Command Mode Normal Exec, Privileged ExecExample Related Commandsgarp timer (3-142)bridge-ext gvrpUse this command to enabl

GVRP AND BRIDGE EXTENSION COMMANDS3-145Example show bridge-extUse this command to show the configuration for bridge extension commands.Default Setting

COMMAND LINE INTERFACE3-146Priority CommandsClass of Service (CoS) allows data packets that have greater precedence to receive higher service priority

PRIORITY COMMANDS3-147queue modeUse this command to set the queue mode to strict priority or Weighted Round-Robin (WRR) for the four class of service

SYSTEM DEFAULTS1-15SNMP Community Strings “public” (read only) “private” (read/write) Traps Authentication traps: enabledLink-up-down events: enabledS

COMMAND LINE INTERFACE3-148Command Mode Privileged ExecExample Mirror Port CommandsThis section describes how to mirror traffic from a source port to

MIRROR PORT COMMANDS3-149Default Setting No mirror session is defined. When enabled, the default mirroring is for both received and transmitted packet

COMMAND LINE INTERFACE3-150Default Setting Shows all sessions.Command Mode Privileged ExecCommand Usage This command displays the currently configured

PORT TRUNKING COMMANDS3-151Guidelines for Creating Trunks• Finish configuring port trunks before you connect the corresponding network cables between

COMMAND LINE INTERFACE3-152port-group Use this command to add a predefined port group to a trunk. Use the no form to remove a port group from a trunk.

PORT TRUNKING COMMANDS3-153Example The following example creates trunk 1 and then adds port 1 and 13:Console(config)#interface port-channel 1Console(c

COMMAND LINE INTERFACE3-154

A-1APPENDIX ATROUBLESHOOTINGTroubleshooting ChartTroubleshooting ChartSymptom ActionCannot connect using Telnet, Web browser, or SNMP software• Be sur

TROUBLESHOOTINGA-2Cannot access the on-board configuration program via a serial port connection• Be sure to have set the terminal emulator program to

B-1APPENDIX BUPGRADING FIRMWARE VIATHE SERIAL PORTThe switch contains three firmware components that can be upgraded; the diagnostics (or Boot-ROM) co

38 TeslaIrvine, CA 92618Phone: (949) 679-8000TigerSwitch 10/100Management GuideFrom SMC’s Tiger line of feature-rich workgroup LAN solutionsMay 2003Pu

SWITCH MANAGEMENT1-16Port Status Admin Status EnabledAuto-negotiation EnabledFlow Control Disabled10/100 Mbps Port Capability10 Mbps half duplex10 Mbp

UPGRADING FIRMWARE VIA THE SERIAL PORTB-24. When the switch initialization screen appears, enter firmware-download mode by pressing <Esc> immedi

B-39. If using Windows HyperTerminal, click the “Transfer” button, and then click “Send File...” Select the XModem Protocol and then use the “Browse”

UPGRADING FIRMWARE VIA THE SERIAL PORTB-4For example, the following screen text shows the download procedure for a runtime code file: 13. Set your PC’

RESTORING SWITCH DEFAULTSB-52. Enter <0> to access the File Manager menu. The following screen will appear:3. Enter <S> and set the Factor

UPGRADING FIRMWARE VIA THE SERIAL PORTB-65. Enter <G> to boot the system.[0]FileManager:[1]Test Mode Set:[x] Exit !Enter Selection:x[1]Image Upd

Glossary-1GLOSSARY10BASE-TIEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3, 4, or 5 UTP cable.100BASE-TXIEEE 802.3u specific

GLOSSARYGlossary-2Collision DomainSingle CSMA/CD LAN segment.CSMA/CDCarrier Sense Multiple Access/Collision Detect is the communication method employe

GLOSSARYGlossary-3Full DuplexTransmission method that allows switch and network card to transmit and receive concurrently, effectively doubling the ba

GLOSSARYGlossary-4LANs, and defines a standard way for VLANs to communicate across switched networks. IEEE 802.1pAn IEEE standard for providing qualit

GLOSSARYGlossary-5IGMP SnoopingListening to IGMP Query and IGMP Report packets transferred between IP Multicast Routers and IP Multicast host groups t

SYSTEM DEFAULTS1-17Virtual LANs Default VLAN 1PVID 1Acceptable Frame Type AllIngress Filtering DisabledSwitchport Mode (Egress Mode)Untagged framesPri

GLOSSARYGlossary-6Management Information Base (MIB)An acronym for Management Information Base. It is a set of database objects that contains informati

GLOSSARYGlossary-7into or out of the network. Traffic that falls within the rate limit is transmitted, while packets that exceed the acceptable amount

GLOSSARYGlossary-8Virtual LAN (VLAN)A Virtual LAN is a collection of network nodes that share the same collision domain regardless of their physical l

C-1APPENDIX CPIN ASSIGNMENTSConsole Port Pin AssignmentsThe DB-9 serial port on the switch’s front panel is used to connect to the switch for out-of-b

PIN ASSIGNMENTSC-2DB-9 Port Pin AssignmentsConsole Port to 9-Pin DTE Port on PCConsole Port to 25-Pin DTE Port on PCEIA Circuit CCITT Signal Descripti

Index-1Aaddress table 2-38BBOOTP 2-13broadcast storm, threshold 2-34CClass of Serviceconfiguring 2-77queue mapping 2-77community string 2-83configurat

INDEXIndex-2RRADIUS, logon authentication 2-17rate limit configuration 2-98restarting the system 2-24Sserial portconfiguring 3-61, 3-68, 3-86SNMPcommu

38 TeslaIrvine, CA 92618Phone: (949) 679-8000FOR TECHNICAL SUPPORT, CALL:From U.S.A. and Canada (24 hours a day, 7 days a week)(800) SMC-4-YOU; (949)

SWITCH MANAGEMENT1-18

2-1CHAPTER 2CONFIGURING THE SWITCHUsing the Web InterfaceThis switch provides an embedded HTTP Web agent. Using a Web browser you can configure the sw

CONFIGURING THE SWITCH2-2Notes: 1. You are allowed three attempts to enter the correct password; on the third failed attempt the current connection is

NAVIGATING THE WEB BROWSER INTERFACE2-3Home PageWhen your Web browser connects with the switch’s Web agent, the home page is displayed as shown below.

CONFIGURING THE SWITCH2-4new setting. The following table summarizes the Web page configuration buttons.Notes: 1. To ensure proper screen refresh, be

MAIN MENU2-5Main Menu Using the onboard Web agent, you can define system parameters, manage and control the switch, and all its ports, or monitor netw

CONFIGURING THE SWITCH2-6Trunk Broadcast ControlSets the broadcast storm threshold for each trunk2-34Mirror Sets the source and target ports for mirro

MAIN MENU2-7VLAN Trunk Configuration Specifies default trunk VID and VLAN attributes 2-65Private VLANPrivate VLAN Information Shows private VLANs and

Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for its use, n

CONFIGURING THE SWITCH2-8IGMPIGMP Configuration Enables multicast filtering; configures parameters for multicast query2-87Multicast Router Port Inform

BASIC CONFIGURATION2-9Basic ConfigurationDisplaying System InformationYou can easily identify the system by providing a descriptive name, location and

CONFIGURING THE SWITCH2-10Web – Click System, System Information. Specify the system name, location, and contact information for the system administra

BASIC CONFIGURATION2-11CLI – Specify the hostname, location and contact information.Setting the IP Address The IP address for this switch is unassigne

CONFIGURING THE SWITCH2-12Command Attributes• Management VLAN – This is the only VLAN through which you can manage the switch. By default, all ports o

BASIC CONFIGURATION2-13Manual ConfigurationWeb – Click System, IP. Specify the management interface, IP address and default gateway, then click Apply.

CONFIGURING THE SWITCH2-14Web – Click System, IP. Specify the Management VLAN, and set the IP Address Mode to DHCP or BOOTP. Click Apply to save your

CONFIGURING USER AUTHENTICATION2-15Renewing DCHP – DHCP may lease addresses to clients indefinitely or for a specific period of time. If the address e

CONFIGURING THE SWITCH2-16The default guest name is “guest” with the password “guest.” The default administrator name is “admin” with the password “ad

CONFIGURING USER AUTHENTICATION2-17Configuring RADIUS Logon AuthenticationRemote Authentication Dial-in User Service (RADIUS) is a logon authenticatio

vLIMITED WARRANTYLimited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free from defects in workmanship and materials, un

CONFIGURING THE SWITCH2-18Command Attributes• Authentication – Select the authentication, or authentication sequence required:- Radius – User authenti

CONFIGURING USER AUTHENTICATION2-19Web – Click System, Radius. To configure local or remote authentication preferences, specify the authentication seq

CONFIGURING THE SWITCH2-20Managing FirmwareYou can upload/download firmware to or from a TFTP server. By saving runtime code to a file on a TFTP serve

MANAGING FIRMWARE2-21Web – Click System, Firmware. Enter the IP address of the TFTP server, enter the file name of the software to download, enter the

CONFIGURING THE SWITCH2-22Saving or Restoring Configuration SettingsYou can upload/download configuration settings to/from a TFTP server. The configur

MANAGING FIRMWARE2-23Web – Click System, Configuration. Enter the IP address of the TFTP server, enter the name of the file to download, select a file

CONFIGURING THE SWITCH2-24If you download the startup configuration file under a new file name, you can set this file as the startup file at a later t

DISPLAYING BRIDGE EXTENSION CAPABILITIES2-25Command Attributes• Extended Multicast Filtering Services – This switch does not support the filtering of

CONFIGURING THE SWITCH2-26Web – Click System, Bridge Extension.CLI – Enter the following command. Console#show bridge-ext 3-145Max support vlan number

ENABLING OR DISABLING GVRP (GLOBAL SETTING)2-27Enabling or Disabling GVRP (Global Setting)GARP VLAN Registration Protocol (GVRP) defines a way for swi

LIMITED WARRANTYviFOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED, EITHER IN

CONFIGURING THE SWITCH2-28Displaying Switch Hardware/Software Versions Use the Switch Information page to display hardware/firmware version numbers fo

DISPLAYING SWITCH HARDWARE/SOFTWARE VERSIONS2-29Web – Click System, Switch Information.CLI – Use the following command to display version information.

CONFIGURING THE SWITCH2-30Port ConfigurationDisplaying Connection StatusYou can use the Port Information or Trunk Information pages to display the cur

PORT CONFIGURATION2-31• MAC Address – The physical layer address for this port. - CLI only; to access this on the Web, see “Setting the IP Address” on

CONFIGURING THE SWITCH2-32CLI – This example shows the connection status for Port 13.Configuring Interface ConnectionsYou can use the Port Configurati

PORT CONFIGURATION2-33• Flow Control* – Allows you to manually enable or disable flow control. • Autonegotiation (Port Capabilities) – Allows auto-neg

CONFIGURING THE SWITCH2-34Web – Click Port, Port Configuration or Trunk Configuration. Modify the required interface settings, and click Apply.CLI – S

PORT CONFIGURATION2-35You can protect your network from broadcast storms by setting a port or trunk threshold for broadcast traffic. Any broadcast pac

CONFIGURING THE SWITCH2-36Web – Click Port, Port Broadcast Control or Trunk Broadcast Control. Set the threshold for each port or trunk, and then clic

PORT CONFIGURATION2-37Configuring Port MirroringYou can mirror traffic from any source port to a target port for real-time analysis. You can then atta

iCONTENTS1 Switch Management . . . . . . . . . . . . . . . . . . . . . . 1-1Connecting to the Switch . . . . . . . . . . . . . . . . . . . . . . .

CONFIGURING THE SWITCH2-38Web – Click Port, Mirror. Specify the source port, the traffic type to be mirrored, and the monitor port, then click Add.CLI

ADDRESS TABLE SETTINGS2-39Setting Static AddressesA static address can be assigned to a specific interface on this switch. Static addresses are bound

CONFIGURING THE SWITCH2-40Web – Click Address Table, Static Addresses. Specify the mode, the interface, the MAC address and duration, then click Add S

ADDRESS TABLE SETTINGS2-41Command Attributes• Interface – Indicates a port or trunk.• MAC Address – Physical address associated with this interface.•

CONFIGURING THE SWITCH2-42Changing the Aging TimeYou can set the aging time for entries in the dynamic address table. Command Attributes• Aging Time –

SPANNING TREE ALGORITHM CONFIGURATION2-43device (except for the root device) which incurs the lowest path cost when forwarding a packet from that devi

CONFIGURING THE SWITCH2-44The following global attributes display statistical values and cannot be changed:• Configuration Changes – The number of tim

SPANNING TREE ALGORITHM CONFIGURATION2-45the network. (References to “ports” in this section means “interfaces,” which includes both ports and trunks.

CONFIGURING THE SWITCH2-46CLI – This command displays global STA settings, followed by settings for each port. Note: The current root port and current

SPANNING TREE ALGORITHM CONFIGURATION2-47Configuring the Global Settings for STAWeb – Click Spanning Tree, STA Configuration. Modify the required attr

CONTENTSiiPort Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-30Displaying Connection Status . . . . . . . . . . . .

CONFIGURING THE SWITCH2-48Command AttributesThe following attributes are read-only and cannot be changed:• Port Status – Displays current state of thi

SPANNING TREE ALGORITHM CONFIGURATION2-49• Designated Cost – The cost for a packet to travel from this port to the root in the current Spanning Tree c

CONFIGURING THE SWITCH2-50• Path Cost – This parameter is used by the STP to determine the best path between devices. Therefore, lower values should b

SPANNING TREE ALGORITHM CONFIGURATION2-51Displaying the Interface Settings for STA Web – Click Spanning Tree, STA Port Information or STA Trunk Inform

CONFIGURING THE SWITCH2-52Configuring the Interface Settings for STAWeb – Click Spanning Tree, STA Port Configuration or STA Trunk Configuration. Modi

VLAN CONFIGURATION2-53VLANs help to simplify network management by allowing you to move devices to a new VLAN without having to change any physical co

CONFIGURING THE SWITCH2-54traffic to the same VLAN(s), either manually or dynamically using GVRP. However, if you want a port on this switch to partic

VLAN CONFIGURATION2-55Automatic VLAN Registration – GVRP (GARP VLAN Registration Protocol) defines a system whereby the switch can automatically learn

CONFIGURING THE SWITCH2-56Forwarding Tagged/Untagged FramesIf you want to create a small port-based VLAN for devices attached directly to a single swi

VLAN CONFIGURATION2-57*Web OnlyWeb – Click VLAN, VLAN Base Information.CLI – Enter the following command. Displaying Current VLANsThe VLAN Current Tab

CONTENTSiiiInterfaces Attached to a Multicast Router . . . . . . . . . . . 2-89Specifying Interfaces Attached to a Multicast Router . . . 2-91Display

CONFIGURING THE SWITCH2-58• Status – Shows how this VLAN was added to the switch. - Dynamic GVRP: Automatically learned via GVRP.- Permanent: Added as

VLAN CONFIGURATION2-59• Ports / Channel groups – Shows the VLAN interface members.CLI – Current VLAN information can be displayed with the following c

CONFIGURING THE SWITCH2-60• State (CLI) – Shows if this VLAN is enabled or disabled. - Active: VLAN is operational.- Suspend: VLAN is suspended; i.e.,

VLAN CONFIGURATION2-61Adding Static Members to VLANs (VLAN Index)Use the VLAN Static Table to configure port members for the selected VLAN index. Assi

CONFIGURING THE SWITCH2-62• Membership Type – Select VLAN membership for each interface by marking the appropriate radio button for a port or trunk: -

VLAN CONFIGURATION2-63Web – Click VLAN, VLAN Static Table. Select a VLAN ID from the scroll-down list. Modify the VLAN name and status if required. Se

CONFIGURING THE SWITCH2-64Adding Static Members to VLANs (Port Index)Use the VLAN Static Membership by Port menu to assign VLAN groups to the selected

VLAN CONFIGURATION2-65CLI – This example adds Port 3 to VLAN 1 as a tagged port.Configuring VLAN Behavior for InterfacesYou can configure VLAN behavio

CONFIGURING THE SWITCH2-66- If ingress filtering is enabled, the interface will discard incoming frames tagged for VLANs which do not include this in

VLAN CONFIGURATION2-67• GARP Leave Timer* – The interval a port waits before leaving a VLAN group. This time should be set to more than twice the join