NEC N8406-022A Handbuch

N8406-022A 1Gb Intelligent L2 Switch Application Guide Part number: 856-126757-106-00 First edition: July 2008 456-01764-000 PN#

N8406-022A 1Gb Intelligent L2 Switch Application Guide 10 SNMP v3.0 SNMPv3 is an enhanced version of the Simple Network Management Protocol, appr

N8406-022A 1Gb Intelligent L2 Switch Application Guide 11 View based configurations CLI user equivalent To configure an SNMP user equivalent to the

N8406-022A 1Gb Intelligent L2 Switch Application Guide 12 Configuring SNMP trap hosts SNMPv1 trap host 1. Configure a user with no authenticatio

N8406-022A 1Gb Intelligent L2 Switch Application Guide 13 SNMPv2 trap host configuration The SNMPv2 trap host configuration is similar to the SNMPv1

N8406-022A 1Gb Intelligent L2 Switch Application Guide 14 Secure access to the switch Secure switch management is needed for environments that p

N8406-022A 1Gb Intelligent L2 Switch Application Guide 15 How RADIUS authentication works RADIUS authentication works as follows: 1. A remote admin

N8406-022A 1Gb Intelligent L2 Switch Application Guide 16 >> RADIUS Server# apply >> RADIUS Server# save Configuring RADIUS on the s

N8406-022A 1Gb Intelligent L2 Switch Application Guide 17 CAUTION: If you configure the RADIUS secret using any method other than a direct cons

N8406-022A 1Gb Intelligent L2 Switch Application Guide 18 2. Apply, verify, and save the configuration. RADIUS authentication features Th

N8406-022A 1Gb Intelligent L2 Switch Application Guide 19 RADIUS attributes for user privileges When the user logs in, the switch authenticates the

2 Legal notices © 2008 NEC Corporation. The information contained herein is subject to change without notice. The only warranties for NEC products a

N8406-022A 1Gb Intelligent L2 Switch Application Guide 20 Authorization Authorization is the action of determining a user‟s privileges on the dev

N8406-022A 1Gb Intelligent L2 Switch Application Guide 21 Configuring TACACS+ authentication on the switch (AOS CLI example) 1. Turn TACACS+ authen

N8406-022A 1Gb Intelligent L2 Switch Application Guide 22 Configuring TACACS+ authentication on the switch (BBI example) 1. Configure TACACS+ au

N8406-022A 1Gb Intelligent L2 Switch Application Guide 23 e. Configure custom privilege-level mapping (optional). Click Submit to accept each mappi

N8406-022A 1Gb Intelligent L2 Switch Application Guide 24 Secure Shell and Secure Copy Secure Shell (SSH) and Secure Copy (SCP) use secure tunnel

N8406-022A 1Gb Intelligent L2 Switch Application Guide 25 Enabling or disabling SCP apply and save Enter the following commands from the switch CLI

N8406-022A 1Gb Intelligent L2 Switch Application Guide 26 For example: >> # scp ad4.cfg [email protected]:putcfg Applying and saving co

N8406-022A 1Gb Intelligent L2 Switch Application Guide 27 Generating RSA host and server keys for SSH access To support the SSH server feature, two

N8406-022A 1Gb Intelligent L2 Switch Application Guide 28 User access control The switch allows an administrator to define end user accounts that

N8406-022A 1Gb Intelligent L2 Switch Application Guide 29 Ports and trunking Introduction The first part of this chapter describes the different typ

N8406-022A 1Gb Intelligent L2 Switch Application Guide 3 Contents Accessing the switch Introduction ...

N8406-022A 1Gb Intelligent L2 Switch Application Guide 30 Statistical load distribution In a configured trunk group containing more than one port

N8406-022A 1Gb Intelligent L2 Switch Application Guide 31 Port trunking example In this example, the Gigabit uplink ports on each switch, and the cr

N8406-022A 1Gb Intelligent L2 Switch Application Guide 32 Configuring trunk groups (AOS CLI example) 1. On Switch 1, configure trunk groups 5 an

N8406-022A 1Gb Intelligent L2 Switch Application Guide 33 Configuring trunk groups (BBI example) 1. Configure trunk groups. a. Click the Configure

N8406-022A 1Gb Intelligent L2 Switch Application Guide 34 d. Enable the Trunk Group. To add ports, select each port in the Ports Available list,

N8406-022A 1Gb Intelligent L2 Switch Application Guide 35 b. Select Trunk Groups. c. Information about each configured trunk group

N8406-022A 1Gb Intelligent L2 Switch Application Guide 36 Link Aggregation Control Protocol Link Aggregation Control Protocol (LACP) is an IEEE 8

N8406-022A 1Gb Intelligent L2 Switch Application Guide 37 Configuring LACP Use the following procedure to configure LACP for port 20 and port 21 to

N8406-022A 1Gb Intelligent L2 Switch Application Guide 38 VLANs Introduction This chapter describes network design and topology considerations fo

N8406-022A 1Gb Intelligent L2 Switch Application Guide 39 Viewing and configuring PVIDs You can view PVIDs from the following AOS CLI commands: Por

N8406-022A 1Gb Intelligent L2 Switch Application Guide 4 Determining the path for forwarding BPDUs ...

N8406-022A 1Gb Intelligent L2 Switch Application Guide 40 Figure 2 Default VLAN settings NOTE: The port numbers specified in these illustrat

N8406-022A 1Gb Intelligent L2 Switch Application Guide 41 Figure 4 802.1Q tagging (after port-based VLAN assignment) In the following figure, the t

N8406-022A 1Gb Intelligent L2 Switch Application Guide 42 VLANs and IP interfaces Carefully consider how you create VLANs within the switch, so t

N8406-022A 1Gb Intelligent L2 Switch Application Guide 43 Multiple VLANS with tagging The following figure shows only those switch port to server l

N8406-022A 1Gb Intelligent L2 Switch Application Guide 44 Table 9 Multiple VLANs with tagging Component Description CPU Blade Server #2 This bl

N8406-022A 1Gb Intelligent L2 Switch Application Guide 45 2. Configure the VLANs and their member ports. Since all ports are by default configured

N8406-022A 1Gb Intelligent L2 Switch Application Guide 46

N8406-022A 1Gb Intelligent L2 Switch Application Guide 47 2. Configure the VLANs and their member ports. Since all ports are by default configured

N8406-022A 1Gb Intelligent L2 Switch Application Guide 48

N8406-022A 1Gb Intelligent L2 Switch Application Guide 49 c. Click a port number to select it. d. Enable the port and enable VLAN tagging. e. C

N8406-022A 1Gb Intelligent L2 Switch Application Guide 5

N8406-022A 1Gb Intelligent L2 Switch Application Guide 50 2. Configure the VLANs and their member ports. a. Open the Virtual LANs folder, and s

N8406-022A 1Gb Intelligent L2 Switch Application Guide 51 The external Layer 2 switches should also be configured for VLANs and tagging. 3. Apply,

N8406-022A 1Gb Intelligent L2 Switch Application Guide 52 Spanning Tree Protocol Introduction When multiple paths exist on a network, Spanning Tr

N8406-022A 1Gb Intelligent L2 Switch Application Guide 53 Port path cost The port path cost assigns lower values to high-bandwidth ports, such as Gi

N8406-022A 1Gb Intelligent L2 Switch Application Guide 54 Adding and removing ports from STGs Information on adding and removing ports from STGs

N8406-022A 1Gb Intelligent L2 Switch Application Guide 55 Figure 8 Two VLANs on one instance of Spanning Tree Protocol In the following figure, VLA

N8406-022A 1Gb Intelligent L2 Switch Application Guide 56 Configuring Switch 1 (AOS CLI example) 1. Configure port and VLAN membership on Switch

N8406-022A 1Gb Intelligent L2 Switch Application Guide 57 c. Enter the Spanning Tree Group number and set the Switch Spanning Tree State to on. To

N8406-022A 1Gb Intelligent L2 Switch Application Guide 58 Configuring Port Fast Forwarding Use the following CLI commands to enable Port Fast For

N8406-022A 1Gb Intelligent L2 Switch Application Guide 59 RSTP and MSTP Introduction Rapid Spanning Tree Protocol (IEEE 802.1w) enhances the Spannin

N8406-022A 1Gb Intelligent L2 Switch Application Guide 6 Accessing the switch Introduction This guide describes how to use and configure the swit

N8406-022A 1Gb Intelligent L2 Switch Application Guide 60 RSTP configuration guidelines This section provides important information about configu

N8406-022A 1Gb Intelligent L2 Switch Application Guide 61 b. Open the MSTP/RSTP folder, and select General. c. Select RSTP mode,

N8406-022A 1Gb Intelligent L2 Switch Application Guide 62 Multiple Spanning Tree Protocol IEEE 802.1s Multiple Spanning Tree extends the IEEE 802

N8406-022A 1Gb Intelligent L2 Switch Application Guide 63 3. Assign VLANs to Spanning Tree Groups. >> /cfg/l2/stp 2 (Se

N8406-022A 1Gb Intelligent L2 Switch Application Guide 64 3. Configure Common Internal Spanning Trees (CIST) bridge parameters. a. Open the MST

N8406-022A 1Gb Intelligent L2 Switch Application Guide 65 4. Configure Common Internal Spanning Tree (CIST) port parameters. a. Open the MSTP/RSTP

N8406-022A 1Gb Intelligent L2 Switch Application Guide 66 c. Enter the Port Priority, Path Cost, and select the Link Type. Set the CIST Port Sta

N8406-022A 1Gb Intelligent L2 Switch Application Guide 67 IGMP Snooping Introduction IGMP Snooping allows the switch to forward multicast traffic on

N8406-022A 1Gb Intelligent L2 Switch Application Guide 68 IGMP Filtering With IGMP Filtering, you can allow or deny a port to send and receive mu

N8406-022A 1Gb Intelligent L2 Switch Application Guide 69 3. View dynamic IGMP information. >> /info/l3/igmp (Select IGMP In

N8406-022A 1Gb Intelligent L2 Switch Application Guide 7 Management Network The 1Gb Intelligent L2 Switch is a Switch Module within the Blade Enclos

N8406-022A 1Gb Intelligent L2 Switch Application Guide 70 3. Assign the IGMP Filter to a port. >> //cfg/l3/igmp/igmpflt (Select IG

N8406-022A 1Gb Intelligent L2 Switch Application Guide 71 c. Enable IGMP Snooping. d. Click Submit. 3. Apply, verify, and save the configuration

N8406-022A 1Gb Intelligent L2 Switch Application Guide 72 Configuring IGMP Filtering (BBI example) 1. Configure IGMP Snooping. 2. Enable IGMP

N8406-022A 1Gb Intelligent L2 Switch Application Guide 73 3. Define the IGMP Filter. a. Select Layer 3 > IGMP > IGMP Filters > Add Filter

N8406-022A 1Gb Intelligent L2 Switch Application Guide 74 4. Assign the filter to a port and enable IGMP Filtering on the port. a. Select Layer

N8406-022A 1Gb Intelligent L2 Switch Application Guide 75 c. Enable IGMP Filtering on the port. Select a filter in the IGMP Filters Available list,

N8406-022A 1Gb Intelligent L2 Switch Application Guide 76 Configuring a Static Multicast Router (BBI example) 1. Configure Static Mrouter. a.

N8406-022A 1Gb Intelligent L2 Switch Application Guide 77 Remote monitoring Introduction Remote Monitoring (RMON) allows network devices to exchange

N8406-022A 1Gb Intelligent L2 Switch Application Guide 78 2. View RMON statistics for the port. >> /stats/port 23

N8406-022A 1Gb Intelligent L2 Switch Application Guide 79 2. Select a port. 3. Enable RMON on the port.

N8406-022A 1Gb Intelligent L2 Switch Application Guide 8 Using the command line interfaces The command line interface (CLI) can be accessed via

N8406-022A 1Gb Intelligent L2 Switch Application Guide 80 4. Click Submit. 5. Apply, verify, and save the configuration. RMON group 2 —

N8406-022A 1Gb Intelligent L2 Switch Application Guide 81 Configure RMON History (BBI example) 1. Configure an RMON History group. a. Click the C

N8406-022A 1Gb Intelligent L2 Switch Application Guide 82 RMON group 3 — alarms The RMON Alarm group allows you to define a set of thresholds use

N8406-022A 1Gb Intelligent L2 Switch Application Guide 83 Configure RMON Alarms (AOS CLI example 2) 1. Configure the RMON Alarm parameters to track

N8406-022A 1Gb Intelligent L2 Switch Application Guide 84 Configure RMON Alarm Group parameters to check ifInOctets on port 19 once every hour. E

N8406-022A 1Gb Intelligent L2 Switch Application Guide 85 Configure RMON Alarms (BBI example 2) 1. Configure an RMON Alarm group. a. Click the Co

N8406-022A 1Gb Intelligent L2 Switch Application Guide 86 3. Apply, verify, and save the configuration. RMON group 9 — events The RMON Eve

N8406-022A 1Gb Intelligent L2 Switch Application Guide 87 Configuring RMON Events (BBI example) 1. Configure an RMON Event group. a. Click the Co

N8406-022A 1Gb Intelligent L2 Switch Application Guide 88 High availability Introduction Switches support high availability network topologies. T

N8406-022A 1Gb Intelligent L2 Switch Application Guide 89 Failure Detection Pair To use UFD, you must configure a Failure Detection Pair and then tu

N8406-022A 1Gb Intelligent L2 Switch Application Guide 9 4. Configuring the default gateways allows the switch to send outbound traffic to the rout

N8406-022A 1Gb Intelligent L2 Switch Application Guide 90 Monitoring Uplink Failure Detection The UFD information menu displays the current statu

N8406-022A 1Gb Intelligent L2 Switch Application Guide 91 Configuring UFD on Switch 2 (AOS CLI example) 1. Create a trunk group of uplink ports (2

N8406-022A 1Gb Intelligent L2 Switch Application Guide 92 d. Enable the FDP. Select ports in the LtM Ports Available list, and click Add to pl

N8406-022A 1Gb Intelligent L2 Switch Application Guide 93 Troubleshooting tools Introduction This appendix discusses some tools to help you use the

N8406-022A 1Gb Intelligent L2 Switch Application Guide 94 Configuring Port Mirroring (AOS CLI example) To configure Port Mirroring for the exampl

N8406-022A 1Gb Intelligent L2 Switch Application Guide 95 Configuring Port Mirroring (BBI example) 1. Configure Port Mirroring. a. Click the Confi

N8406-022A 1Gb Intelligent L2 Switch Application Guide 96 e. Enter a port number for the mirrored port, and select the Port Mirror Direction. f

N8406-022A 1Gb Intelligent L2 Switch Application Guide 97 Other network troubleshooting techniques Other network troubleshooting techniques include