If the device supports routing, enter router configuration mode and configure an IP address on the VLAN interface. Understanding and Configuring Loop Protect Figure 15-15 Basic Loop Protect Scenario Figure 15-16 shows that, without Loop Protect, a failure could be as simple as someone accidentally disabling Spanning Tree on the port between Switch 2 and 3. Enterasys C5 Gigabit Ethernet Switch Hardware Installation Guide Adryan Ramirez Indicates that the concentration of the hazardous substance in all homogeneous materials in the parts is below the relevant threshold of the SJ/T 11363-2006 standard. If you want to change the default timeout value for a specific server or all servers, you must enter the set tacacs server command using the timeout parameter. Configuration Guide Firmware 6.61.xx and Higher. Database contains 1 Enterasys C5K175-24 Manuals (available for free online viewing or Page 1 Matrix V-Series V2H124-24P Fast Ethernet Switch Hardware . First, the module is verified as present in Slot 2, and the port status is shown as operating as a 1000BASE-SX port. Considerations About Using clear config in a Stack To create a virtual switch configuration in a stack environment: 1. If two supplies are installed in redundant mode, system power redundancy is guaranteed if one supply fails. Thisexampleshowshowtodisplaymultipleauthenticationsystemconfiguration: Configuring User + IP Phone Authentication. Enterasys Networks, Inc. Firmware License Agreement BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. For example: A4(su)->show boot system Current system image to boot: a4-series_06.61.00.0026 Use the set boot system command to set the firmware image to be loaded at startup. Using the viewnames assigned in Step 1, create restricted views for v1/v2c users, and unrestricted views for v3 users. set system login username {readwrite|read-only} enable (All other parameters are optional.) RMON Table 18-2 Default RMON Parameters (continued) Parameter Description Default Value capture asksize The RMON capture requested maximum octets to save in the buffer. PAGE 3. By default, RIP version 2 supports automatic route summarization, which summarizes sub-prefixes to the classful network boundary when crossing network boundaries. ACL Configuration Overview The following example displays IPv4 extended access control list 120, then deletes entries 2 and 3, and redisplays the ACL. Use the following commands to review, re-enable, and reset the Spanning Tree mode. set port inlinepower port-string {[admin {off | auto}] [priority {critical | high | low}] [type type]} admin Enables (auto) or disables (off) PoE on a port. Only DHCP clients associated with this VLAN will be served IP addresses from the DHCP address pool associated with this routed interface (VLAN). Port Mirroring LAG ports can be a mirror source port, but not a mirror destination port. Create a DHCPv6 pool and enter pool configuration mode for that pool. Default settings are listed in Table 15-6: Table 15-6 Spanning Tree Port Default Settings Setting Default Value Bridge priority mode 802. Enable or disable Telnet services, inbound, outbound, or all. Configuring RIP Configure a RIP authentication key for use on the interface. The port cost value may also be administratively assigned using the set spantree adminpathcost command. When passwords are entered on the switch using the CLI, the switch automatically suppresses the clear text representation of the password. Configuring Link Aggregation The virtual link aggregation ports continue to be designated as lag.0.x, where x can range from 1 to 24, depending on the maximum number of LAGs configured. The sources DR registers (that is, encapsulates) and sends multicast data from the source directly to the RP via a unicast routing protocol (number 1 in figure). If these assumptions are not true, please refer to Chapter 1, Setting Up a Switch for the First Time for more information. You and Enterasys agree as follows: 1. Hosts on the link discover the addresses of their neighboring routers by listening for advertisements. DHCP Configuration IP Address Pools IP address pools must be configured for both automatic and manual IP address allocation by a DHCP server. Strong analytical and problem solving skills. Transferring switch configurations Using the CLI commands described in the section beginning with TFTP: Copying a configuration file to a remote host (CLI), you can copy switch configurations to and from a switch, or copy a software image to configure or replace an ACL in the switch configuration. set txqmonitor downtime seconds The default value is 0, meaning that disabled ports will remain disabled until cleared manually or until their next link state transition. Enable ARP inspection on the VLANs where clients are connected, and optionally, enable logging of invalid ARP packets. Refer to the CLI Reference for your platform for more information about the commands listed below. Configuring Cisco Discovery Protocol Refer to your devices CLI Reference Guide for a description of the output of each command. ACL Configuration Overview This section describes ACL creation, rule entry, and application of the ACL to a port or routing VLAN required to implement an ACL, as well as, the features available for managing ACL rules and displaying ACLs. The trap indicates port, SID and loop protection status. Terms and Definitions 10-30 Configuring User Authentication. Syslog combines this value and the severity value to determine message priority. Configuring ACLs Procedure 24-1 Configuring IPv4 Standard and Extended ACLs (continued) Step Task Command(s) 6. Then, it looks to see if the tag list (v3TrapTag) specified in the notification entry exists. Configuring VLANs Procedure 9-1 Static VLAN Configuration (continued) Step Task Command(s) 7. By default, MAC authentication is globally disabled on the device. ThisexampleshowshowtodisplaythesystemIPaddressandsubnetmask: Thefollowingtableprovidesanexplanationofthecommandoutput. Tabl e 268providesanexplanationofthecommandoutput. set port vlan port-string vlan-id [modify-egress | no-modify-egress] Optionally, specify whether or not the ports should be added to the VLANs untagged egress list and removed from other untagged egress lists. Configuring Authentication Table 10-1 Default Authentication Parameters (continued) Parameter Description Default Value realm Specifies authentication server configuration scope. area area-id virtual-link router-id Refer to Configuring Area Virtual-Links on page 22-12 for more information. Link Aggregation Overview problems if they also wanted, or needed, to use a different brand of networking hardware. User Authentication Overview Figure 10-1 Applying Policy to Multiple Users on a Single Port Authentication Request User 1 Switch Authentication Response Radius Server SMAC 00-00-00-11-11-11 Authentication Credentials User 1 Authentication Credentials User 2 Authentication Request Authentication Credentials User 3 Authentication Response User 2 SMAC 00-00-00-22-22-22 Port ge.1.5 Authentication Request User 3 Dynamic Admin Rule for Policy 1 SMAC = 00-00-00-11-11-11 ge.1. Table 25-5 show ipv6 ospf database Output Details. VLAN authorization status Enables or disables globally and per port VLAN authorization. Optionally, set the timeout period for aging learned MAC entries. Permit allow the frame to be switched. 13 Configuring Neighbor Discovery This chapter describes how to configure the Link Layer Discovery Protocol (LLDP), the Enterasys Discovery Protocol, and the Cisco Discovery Protocol on Enterasys fixed stackable and standalone switches. IP packets are not encapsulated in any further protocol headers as they transit the Autonomous System (AS). - Time out the IGMP entry by not responding to further queries from Router 2. This procedure would typically be used when the system is NOT configured for routing. Link Aggregation Overview Note: A given link is allocated to, at most, one LAG at a time. Using Multicast in Your Network A DVMRP device forwards multicast packets first by determining the upstream interface, and then by building the downstream interface list. Use the passive-interface command in router configuration command mode to configure an interface as passive or to set passive as the default mode of operation for all interfaces. (Optional) Use the CLI to verify the port mirroring instance has been deleted as shown in the following example: C5(su)->show port mirroring No Port Mirrors configured. Dynamic ARP Inspection VLAN Configuration set vlan create 10 set vlan create 192 clear vlan egress 1 ge.1.1-2 set vlan egress 10 ge.1.2 untagged set vlan egress 192 ge.1.1 untagged DHCP Snooping Configuration set dhcpsnooping enable set dhcpsnooping vlan 1 enable set dhcpsnooping vlan 10 enable set dhcpsnooping vlan 192 enable set dhcpsnooping verify mac-address disable set dhcpsnooping trust port ge.1. DHCP Snooping into the software forwarding path, where it may be processed by the DHCP relay agent, the local DHCP server, or forwarded as an IP packet. sFlow Table 18-3 describes how to manage remote network monitoring. set mac agetime time 4. Configuring VRRP Router 2(su)->router(Config-router)#exit Multiple Backup VRRP Configuration Figure 23-3 shows a multi-backup sample configuration. How many VLANs will be required? Optionally, enable the TACACS+ client to send multiple requests to the server over a single TCP connection. ThisexampleshowshowtodisplayswitchtypeinformationaboutSID1: Usethiscommandtodisplayvariousdataflowanderrorcountersonstackports. set lacp aadminkey port-string value 5. The trap generation will be done using the Enterasys Syslog Client MIB notification etsysSyslogSecureLogDroppedMsgNotification. Default is 300 seconds. Table 13-2 LLDP Show Commands Task Command Display LLDP configuration information. set multiauth idle-timeout auth-method timeout 2. Use the show users command to display information for active console port or Telnet sessions on the switch. Chapter 19, Configuring Multicast Configure VRRP. User Authentication Overview Implementing User Authentication Take the following steps to implement user authentication: Determine the types of devices to be authenticated. Note: If this switch will be added to an existing stack, you should install the primary and backup firmware versions that are currently installed on the stack units. on page 2-5 for information about configuring a mixed stack. Configuring OSPF Areas Example Figure 22-5 OSPF NSSA Topology Area 1 RIP Backbone Router 1 Router 2 Router 3 Router 4 Router 5 Using the topology shown in Figure 22-5, the following code examples will configure Router 2 as the ABR between Area 1 and the backbone area 0. Connecting to a Switch This procedure describes how to connect to a switch. IP Static Routes Procedure 20-2 Configuring the Routing Interface Step Task Command(s) 1. Advanced Configuration Overview Procedure 4-1 contains the steps to assign an IP address and configure basic system parameters. Basic Network Monitoring Features 18-1 RMON 18-5 sFlow 18-9 Basic Network Monitoring Features Console/Telnet History Buffer The history buffer lets you recall your previous CLI input. IPv6 Neighbor Discovery Neighbor Solicitation Messages Neighbor Solicitation messages are sent on the local link to determine the link-local address of another node on the link, as well as to verify the uniqueness of a unicast address for DAD. Table 18-2 lists RMON parameters and their default values. Display the types of switches supported in the stack, using the show switch switchtype command. Use the no command to reset the IGMP last member query interval to the default value of 1 second. IPv6 Routing Configuration Setting Routing General Parameters IPv6 routing parameters are set in router global configuration mode. 1.1 IP switch ge. Dynamic ARP Inspection Table 26-13 Displaying Dynamic ARP Inspection Information (continued) Task Command To display the ARP configuration of one or more VLANs show arpinspection vlan vlan-range To display ARP statistics for all DAI-enabled VLANs or for specific VLANs show arpinspection statistics [vlan vlan-range] Table 26-14 Managing Dynamic ARP Inspection Task Command To remove additional optional ARP validation parameters that were previously configured. Adjusting the Forward Delay Interval When rapid transitioning is not possible, forward delay is used to synchronize BPDU forwarding. Understanding How VLANs Operate Forwarding Decisions VLAN forwarding decisions for transmitting frames is determined by whether or not the traffic being classified is or is not in the VLANs forwarding database as follows: Unlearned traffic: When a frames destination MAC address is not in the VLANs forwarding database (FDB), it will be forwarded out of every port on the VLANs egress list with the frame format that is specified. DHCP Configuration Table 4-7 Default DHCP Server Parameters Parameter Description Default Value Number of ping packets Specifies the number of ping packets the DHCP server sends to an IP address before assigning the address to a requesting client 2 packets Configuring DHCP IP Address Pools This section provides procedures for the basic configuration of automatic (dynamic) and manual (static) IP address pools, as well as a list of the commands to configure other optional pool parameters. Examples 17-18 Chapter 18: Configuring Network Monitoring Basic Network Monitoring Features .. 18-1 Console/Telnet History Buffer . Chapter 20: IP Configuration Enabling the Switch for Routing . 20-1 Router Configuration Modes 20-1 Entering Router Configuration Modes . 20-2 Example Configuring Area Virtual-Link Authentication . 22-14 Configuring Area Virtual-Link Timers. 22-14 Configuring Route Redistribution 22-14 Configuring Passive Interfaces .. Extended IPv4 ACL Configuration .. 24-12 MAC ACL Configuration .. 24-13 Chapter 25: Configuring and Managing IPv6 Managing IPv6 . Disabling and Enabling Ports .. 26-9 MAC Locking Defaults . 26-9 MAC Locking Configuration .. 26-10 TACACS+ .. 11-3 13-1 13-2 13-3 14-1 15-1 15-2 15-3 15-4 15-5 15-6 15-7 15-8 15-9 15-10 15-11 15-12 15-13 15-14 15-15 15-16 15-17 16-1 17-1 17-2 17-3 17-4 17-5 19-1 19-2 19-3 19-4 19-5 19-6 22-1 22-2 22-3 22-4 22-5 22-6 23-1 23-2 23-3 25-1 Link Aggregation Example.. 11-12 Communication between LLDP-enabled Devices . 13-3 LLDP-MED .. 4-7 4-8 5-1 6-1 7-1 7-2 7-3 8-1 8-2 8-3 8-4 9-1 9-2 9-3 10-1 10-2 10-3 10-4 11-1 11-2 11-3 11-4 11-5 11-6 11-7 12-1 12-2 12-3 12-4 12-5 13-1 13-2 13-3 13-4 13-5 13-6 14-1 14-2 14-3 14-4 15-1 15-2 15-3 15-4 15-5 15-6 15-7 15-8 15-9 15-10 15-11 16-1 16-2 16-3 16-4 16-5 xx Default DHCP Server Parameters . 4-20 Configuring Pool Parameters 16-6 17-1 18-1 18-2 18-3 18-4 18-5 18-6 18-7 18-8 19-1 19-2 19-3 19-4 19-5 19-6 19-7 19-8 19-9 19-10 20-1 20-2 20-3 21-1 21-2 21-3 22-1 22-2 23-1 23-2 24-1 25-1 25-2 25-3 25-4 25-5 25-6 26-1 26-2 26-3 26-4 26-5 26-6 26-7 26-8 26-9 26-10 26-11 26-12 26-13 26-14 Policy Configuration Terms and Definitions 16-18 CoS Configuration Terminology About This Guide This guide provides basic configuration information for the Enterasys Networks Fixed Switch platforms using the Command Line Interface (CLI0, including procedures and code examples.
enterasys switch configuration guide