Page 1 6000 PLEX ® DMINISTRATION ONSOLE UIDE Part No. 801-00254-000 Published December 1995 Revision 02...
Page 2: Revision
95052-8154 © 3Com Corporation, 1995. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without permission from 3Com Corporation.
Page 3: Table Of Contents
ONTENTS BOUT UIDE Introduction 1 How to Use This Guide 2 Conventions 3 LANplex 6000 Documentation 4 Documentation Comments 6 ETTING TARTED 6000 A PLEX DMINISTRATION VERVIEW About LANplex Administration 1-1 Conﬁguration Options 1-2 OW TO SE THE DMINISTRATION ONSOLE...
Page 4 Console Interface Parameters 2-11 Adjusting the Screen Height 2-11 Preventing Console Disconnections 2-12 Conﬁguring Control Panel Write Access 2-13 Disabling Reboot and Abort Keys 2-13 Running Scripts of Console Tasks 2-14 Getting Help in the Console 2-16 Online Help 2-16 Outlining 2-16 Exiting the Administration Console 2-17 YSTEM...
Page 5 Pinging an IP Station 3-16 Displaying IP Statistics 3-17 Setting Up SNMP on Your System 3-18 Conﬁguring the SNMP Mode 3-18 Conﬁguration Guidelines 3-19 Displaying SNMP Settings 3-20 Setting the Mode 3-21 Conﬁguring Community Strings 3-21 Administering SNMP Trap Reporting 3-23 Displaying Trap Information 3-23 Conﬁguring Trap Reporting 3-25 Removing Trap Destinations 3-26...
Page 6 , FDDI, & T THERNET OKEN DMINISTERING THERNET ORTS Displaying Ethernet Port Information 8-1 Frame Processing and Ethernet Statistics 8-5 Labeling a Port 8-7 Setting the Port State 8-8 FDDI R DMINISTERING ESOURCES About Conﬁguring FDDI Resources 9-1 The Backplane Path Mode 9-2 Modules and FDDI Resources 9-3 Conﬁguring the Backplane Path Mode 9-3...
Page 7 DMINISTERING OKEN ORTS Displaying Token Ring Port Information 10-1 Frame Processing and Token Ring Statistics 10-6 Labeling a Port 10-8 Setting the Port State 10-8 Setting the Port Speed 10-9 Setting the Port Mode 10-9 ETTING UP THE YSTEM FOR OVING NALYSIS About Roving Analysis 11-1...
Page 8 Setting the Port Path Cost 13-9 Setting the Port Priority 13-10 Setting the Source Route Ring Number 13-11 Administering Port Addresses 13-12 Listing Addresses 13-12 Adding New Addresses 13-13 Removing Addresses 13-13 Flushing All Addresses 13-14 Flushing Dynamic Addresses 13-15 Freezing Dynamic Addresses 13-15 REATING AND SING...
Page 9 Port Group Filter A-12 Common Syntax Errors A-13 ECHNICAL UPPORT On-line Technical Services B-1 3Com Bulletin Board Service B-1 Access by Modem B-1 Access by ISDN B-2 World Wide Web Site B-2 ThreeComForum on CompuServe B-2 3ComFacts Automated Fax Service B-3...
Page 11 BOUT UIDE Introduction The LANplex 6000 Administration Console User Guide provides all the information you need to conﬁgure and manage your LANplex system once it is installed and the system is attached to the network. Prior to using this guide, you should have already installed and set up your system using the LANplex 6000 Getting Started guide.
Page 12 BOUT UIDE How to Use This This guide is organized by types of tasks you may need to perform on the Guide LANplex system. These parts are described in Table 1. Table 1 Description of Guide Parts Part Contents I: Getting Started Introducing LANplex system administration Learning about the various system configurations and the quick commands to perform them...
Page 13 Conventions Table 1 Description of Guide Parts (continued) Part Contents IV: Bridging Configuring bridge and bridge port parameters Administering the Spanning Tree Protocol bridge and bridge port parameters Displaying and configuring bridge port addresses Creating and using packet filters Creating address and port groups and using them as filtering criteria V: Appendices Additional information about packet filters: opcode...
Page 14 (+), for example: Press [Ctrl]+[Alt]+[Del]. LANplex 6000 The following documents comprise the LANplex 6000 documentation set. Documentation If you want to order a document that you do not have or order additional documents, contact your sales representative for assistance.
Page 15 LANplex 6000 Documentation LANplex 6000 Planning Your Site Provides information on the planning requirements you should consider when preparing your site for a LANplex 6000 system. (Shipped with system/Part No. 801-00251-000) LANplex 6000 Getting Started Describes all the procedures necessary for installing, cabling, powering up, and troubleshooting your LANplex system.
Page 16 3Com at: sdtechpubs_comments@3Mail.3Com.com Please include the following information when commenting: Document title Document part number (listed on back cover of document) Page number (if appropriate) LANplex 6000 Planning Your Site Example: Part No. 801-00128-000 Page 2-5 (chapter 2, page 5)
Page 17 ETTING TARTED Chapter 1 LANplex 6000 Administration Overview Chapter 2 How to Use the Administration Console...
Page 19: About Lanplex Administration
6000 PLEX DMINISTRATION VERVIEW This chapter introduces you to LANplex 6000 administration and brieﬂy describes the switching system parameters that you can conﬁgure. For information on LANplex Extended Switching functionality refer to the LANplex 6000 Extended Switching User Guide. About LANplex The LANplex system switching software is installed at the factory in ﬂash...
Page 20: Conﬁguration Options
VERVIEW Additionally, when managing your LANplex system, you may want to view important MAC, port, bridge, and IP statistics. The LANplex 6000 Administration Console allows you to conﬁgure your system and display these important statistics. For more complete network management, you can use an external application, such as 3Com’s Transcend Enterprise...
Page 21 Configuration Options Table 1-1 System-level Conﬁguration Options (continued) Option Description & Quick Access For More Information, Go to... (continued) Name the system Assign a unique name to the system for management. For Chapter 4: Administering Your example, you may choose to name the system based on System Environment its location: LANplex-Floor2.
Page 22 Management Access to the System The factory defaults for the baud rate allow you to connect page 3-3 a VT or tty type terminal or terminal emulator to the serial LANplex 6000 Control Panel User port with a null modem cable. Guide Quick Command:...
Page 23 Configuration Options Table 1-2 Management Access Conﬁguration Options (continued) Option Description & Quick Access For More Information, Go to... Set the SNMP mode Specify whether the system is managed with a single Chapter 3: Configuring agent or with multiple agents — one for each logical Management Access to the System device (chassis, bridge, router) in the system.
Page 24 1: LAN 6000 A HAPTER PLEX DMINISTRATION VERVIEW Table 1-3 Ethernet, FDDI, & Token Ring Conﬁguration Options (continued) Option Description & Quick Access For More Information, Go to... Set FDDI path Set the minimum value for the TVX timer, the minimum Chapter 9: Administering FDDI parameters value for the T-Max timer, and the maximum value for the...
Page 25 Configuration Options Table 1-3 Ethernet, FDDI, & Token Ring Conﬁguration Options (continued) Option Description & Quick Access For More Information, Go to... Label a Token Ring Give a Token Ring port a unique name. Useful for port Chapter 10: Administering Token port identification when managing the system.
Page 26 1: LAN 6000 A HAPTER PLEX DMINISTRATION VERVIEW Table 1-4 Bridging Conﬁguration Options (continued) Option Description & Quick Access For More Information, Go to... Configure Spanning Block redundant routes, creating a loopless network that Chapter 12: Administering the Tree Protocol (STP) operates as if only one link connects each LAN.
Page 27: Levels Of User Access
OW TO SE THE DMINISTRATION ONSOLE This chapter familiarizes you with the Administration Console user access levels and explains how to: Move within the Console’s menu hierarchy to perform tasks Set up the Console interface parameters Access online help Use scripts for performing Console tasks Exit the Console Levels of User The Administration Console supports three password levels, allowing the...
Page 28: Administer Access Example
2: H HAPTER OW TO SE THE DMINISTRATION ONSOLE The passwords are stored in nonvolatile memory. You must enter the password correctly before you are allowed to continue. The ﬁrst time you access the Console, the password is null. As the initial user, access the system at the administer level and press return Initial user access at the password prompt.
Page 29: Read Access Example
Using Menus to Perform Tasks Read Access If you have read access, the system menu contains only the display options Example shown below: Menu options: ------------------------------------------------------------------ display - Display the system configuration Only the display baseline - Administer statistics baseline option in the Type ‘q’...
Page 30: Console Menu Structure
2: H HAPTER OW TO SE THE DMINISTRATION ONSOLE Console Menu The following sections show the menu paths for performing tasks from the Structure top-level menu and provide a brief description of each top-level menu option. System Menu From the system menu, you can view the system conﬁguration, set up your system for management, conﬁgure Administration Console interface parameters, work with nonvolatile data, and reboot the system (see Figure 2-1).
Page 31: Fddi Menu
Using Menus to Perform Tasks FDDI Menu From the fddi menu, you can view information about and conﬁgure FDDI stations, paths, MACs, and ports (see Figure 2-3). For example, to enable the LLC service of an FDDI MAC, you would enter fddi at the top-level menu, mac at the fddi menu, then llcService at the mac menu.
Page 32: Token Ring Menu
2: H HAPTER OW TO SE THE DMINISTRATION ONSOLE Token Ring Menu From the tokenring menu, you can view information for Token Ring ports and name Token Ring ports (see Figure 2-4). You can also enable or disable Token Ring ports, conﬁgure the Token Ring port speed, and set the Token Ring port mode.
Page 33 Using Menus to Perform Tasks Top-Level Menu bridge menu port menu address menu system display summary list ethernet mode detail fddi ipFragmentation multicastLimit remove tokenring ipxSnapTranslation stpState flushAll addressThreshold stpCost flushDynamic bridge trFDDIMode stpPriority freeze snmp addressThreshold srRingNumber analyzer agingTime addressGroup menu address script...
Page 34: Snmp Menu
2: H HAPTER OW TO SE THE DMINISTRATION ONSOLE SNMP Menu From the snmp menu, you can conﬁgure the SNMP agent mode, community strings, and trap reporting (see Figure 2-7). For example, to ﬂush all trap reporting destinations, you would enter snmp at the top-level menu, trap at the snmp menu, then ﬂush at the trap menu.
Page 35: Selecting Menu Options
Using Menus to Perform Tasks Selecting Menu You select a menu option by entering its name (or enough of the name Options to uniquely identify it within the particular menu) at the selection prompt. For example, to access the system menu from the top-level menu, you could enter: Select a menu option: system...
Page 36: Entering Values
2-10 2: H HAPTER OW TO SE THE DMINISTRATION ONSOLE If a command is entered incorrectly, you receive a prompt telling you that what you entered was not valid or was ambiguous. You must re-enter the command from the point it became incorrect. Entering Values When you reach the level where you perform a speciﬁc task, you are prompted for a value.
Page 37: Console Interface Parameters
Console Interface Parameters 2-11 Console Interface You can change three Console interface parameters: screen height, console Parameters disconnections, and the reboot and abort control keys. Adjusting the Most terminal screens have a height of 24 lines. You can change the Screen Height Administration Console’s screen height to increase or decrease the space available for displaying information.
Page 38: Preventing Console Disconnections
2-12 2: H HAPTER OW TO SE THE DMINISTRATION ONSOLE Preventing Console Because only a single shell is supported by the Administration Console, you Disconnections may be disconnected from your session if someone else remotely accesses the Console. The possible reasons for Console disconnections are listed in Table 2-2.
Page 39: Conﬁguring Control Panel Write Access
Configuring Control Panel Write Access 2-13 Conﬁguring You can permit or prohibit the modiﬁcation of system conﬁgurations and Control Panel MIB parameters from the LANplex system’s control panel. See the LANplex Write Access 6000 Control Panel User Guide, for more information about the parameters you can set from the control panel.
Page 40: Running Scripts Of Console Tasks
2-14 2: H HAPTER OW TO SE THE DMINISTRATION ONSOLE Running Scripts You can use scripts to expedite and automate Administration Console tasks. of Console Tasks Any command you enter in the Administration Console can become part of a script. You can even script your entire system setup so that you can repeat the exact setup on another LANplex system.
Page 41 Running Scripts of Console Tasks 2-15 # This script performs some start-up configurations. # Set the modem serial port baud rate. system serialPort modemSpeed # modem serial port baud rate # Set the system name system name Engineering LANplex_4 # Assign an IP address to the LANplex. ip interface define 158.101.112.99 # IP address for the system...
Page 42: Getting Help In The Console
2-16 2: H HAPTER OW TO SE THE DMINISTRATION ONSOLE Getting Help in If you need assistance when using the Administration Console, the Console the Console has online help and an outlining feature, both of which can be accessed from anywhere in the Console. These features are described below. Online Help The Administration Console online help provides an overview of the Console and lets you access information about any menu option in the...
Page 43: Exiting The Administration Console
Exiting the Administration Console 2-17 Exiting the If you are using an rlogin session to access the system, exiting will terminate Administration the session. If you are accessing the system through the serial port, exiting Console returns you to the password prompt. To exit from the Administration Console: Top-Level Menu 1 Return to the top level of the Administration Console, if you are not already...
Page 44 2-18 2: H HAPTER OW TO SE THE DMINISTRATION ONSOLE...
Page 45 YSTEM LEVEL UNCTIONS Chapter 3 Conﬁguring Management Access to the System Chapter 4 Administering Your System Environment Chapter 5 Updating System Software Chapter 6 Baselining Statistics Chapter 7 Saving, Restoring, & Resetting Nonvolatile Data...
Page 47: About Management Access
LMM+ Ethernet port or the ﬁrst LMM+ FDDI MAC. Once you establish an IP interface, you can also set up the system to be managed by an SNMP-based network management application, such as 3Com’s Transcend Enterprise Manager. Using a Serial...
Page 48 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM Using an IP Through the LMM+’s Ethernet port, you can rlogin or telnet to the Interface Administration Console. A unique IP address on a separate IP network from the in-band network is used to identify this interface. This connection is faster than the serial port, and it allows you to connect to the Administration Console using TCP/IP from a host.
Page 49: Setting Up The Terminal Serial Port
Setting up the Terminal Serial Port Setting up the The default baud rate for the terminal serial port is 9600. You may need to Terminal Serial change the baud rate to match the port speed on your terminal. Port CAUTION: Baud rate changes take effect immediately. You will be unable to communicate using the serial port until you adjust the baud rate of your terminal or terminal emulator appropriately.
Page 50: Setting The Port Speed
3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM Setting the The default baud rate for the modem serial port is 9600. You may need to Port Speed change the baud rate to match your external modem. To set the baud rate for the modem serial port: Top-Level Menu 1 From the top level of the Administration Console, enter: system...
Page 51: Setting Up An Ip Interface For Management
Setting up an IP Interface for Management Setting up an IP is a standard networking protocol used for communications among IP Interface for various networking devices. To access the system using TCP/IP or to manage Management the system using SNMP, you must set up IP for your system as described in this section.
Page 52 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM Packets to be forwarded by the switching module contain the IP addresses of the original source and the ultimate destination. Subnet Mask A subnet mask is a 32-bit number that uses the same format and representation as IP addresses.
Page 53: Displaying Interfaces
Setting up an IP Interface for Management Displaying Interfaces You can display a table that shows all IP interfaces conﬁgured for each switching module in the system, including their parameter settings. To display IP interface information: Top-Level Menu 1 From the Administration Console top-level menu, enter: system ethernet interface...
Page 54 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM If you do not assign all ports to this interface, ensure that you include the port to which your network management station is attached. To deﬁne an IP interface: Top-Level Menu 1 From the top level of the Administration Console, enter: system ethernet interface...
Page 55: Modifying An Interface
Setting up an IP Interface for Management Modifying an Interface. To modify an IP interface that you have already deﬁned: Top-Level Menu 1 From the top level of the Administration Console, enter: system ethernet interface ip interface modify fddi display route tokenring define...
Page 56 3-10 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM Each routing table entry contains the following information: Destination IP Address and Subnet Mask These elements deﬁne the address of the destination network, subnet, or host. A route matches a given IP address if the bits in the IP address corresponding to the bits set in the route subnet mask match the route destination address.
Page 57: Deﬁning An Interface
Setting up an IP Interface for Management 3-11 Displaying the Routing Table You can display the routing tables for the switching modules in a system to determine which routes are conﬁgured and if they are operational. To display the contents of the routing table: Top-Level Menu 1 From the Administration Console top-level menu, enter: system...
Page 58: Removing A Route
3-12 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM 2 Enter the slot of the switching module for which you want to deﬁne a static route. 3 Enter the destination IP address of the route. 4 Enter the subnet mask of the route. 5 Enter the gateway IP address of the route.
Page 59: Setting The Default Route
Setting up an IP Interface for Management 3-13 Setting the Default Route The default route is used by the switching module to forward packets that do not match any other routing table entry. A switching module can learn a default route using RIP, or you can conﬁgure a default route statically. If a switching module’s routing table does not contain a default route —...
Page 60: Administering The Arp Cache
3-14 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM Administering the The switching modules use the Address Resolution Protocol (ARP) to ﬁnd ARP Cache the MAC addresses corresponding to the IP addresses of hosts and other routers on the same subnets. Each device participating in routing maintains an ARP cache —...
Page 61: Flushing An Arp Cache Entry
Setting up an IP Interface for Management 3-15 Flushing an ARP Cache Entry Top-Level Menu You may want to delete all entries from the ARP cache if the MAC address system interface ethernet has changed. route fddi display tokenring remove 1 From the top level of the Administration Console, enter: bridge flush...
Page 62: Pinging An Ip Station
3-16 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM See the following example: Select slot(s) (3-4|all) [3-4]: passive Slot 3 - Select RIP mode (off, passive) [passive]: Slot 4 - Select RIP mode (off, passive) [passive]: passive Pinging an IP Once you have set up your IP interface, you may want to check to see if the Station LANplex system can communicate with other systems over the IP network.
Page 63: Displaying Ip Statistics
Setting up an IP Interface for Management 3-17 Displaying IP The IP statistics you can view are described in Table 3-3. Statistics Table 3-3 IP Statistics Field Description forwDatagrams Number of datagrams that the IP station attempted to forward inAddrErrors Number of datagrams that the IP station discarded because of an error in the source or destination IP address inDelivers...
Page 64: Setting Up Snmp On Your System
Access to system information through SNMP is controlled by community strings. For more information about using SNMP to manage the LANplex system, see Chapter 3: Management Access: Protocols of the LANplex 6000 Operation Guide. Conﬁguring the The LANplex system supports two SNMP modes: single agent and SNMP Mode multiple agent.
Page 65: Conﬁguration Guidelines
Setting Up SNMP on Your System 3-19 Conﬁguration Guidelines The conﬁguration guidelines for each method of management are described below: To conﬁgure SNMP for system management with a single SNMP agent you Method I must: Assign an IP address to at least one of the LMM+ FDDI MACs or the LMM+ Ethernet port.
Page 66: Displaying Snmp Settings
3-20 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM Set the SNMP mode to multipleAgent. For directly managed agents, set the destination IP address(es) of the management station(s) where traps should be forwarded by each agent. For indirectly managed agents, set the destination agent through which traps should be proxied.
Page 67: Setting The Mode
Setting Up SNMP on Your System 3-21 Setting the Mode The system is shipped with the SNMP mode default set for single agent. You should determine which SNMP mode you want to operate the system in and set the SNMP mode prior to performing any other SNMP conﬁgurations in the system.
Page 68 3-22 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM get and get-next requests are valid if the community string in the request matches the read-only community. When you set a community string, you can specify any value up to 48 Community string length characters long.
Page 69: Administering Snmp Trap Reporting
Setting Up SNMP on Your System 3-23 Administering For network management applications, you can use the Administration SNMP Trap Console to manually administer the trap reporting address information. Reporting If the system is set for multiple agent SNMP mode, trap reporting is based on destination address (IP address of the SNMP manager) and/or a destination agent (number of an agent used for proxying traps to an SNMP manager).
Page 70 1-10, 12-21 Proxying of remote SMT events is disabled Trap 6: Power Supply Failure only appears in the trap list if the LANplex 6000 has a dual power supply. Trap 3: New Root, Trap 4: Topology Change, and Trap 10: Address Threshold only appear in the trap list if the LANplex system...
Page 71: Conﬁguring Trap Reporting
Setting Up SNMP on Your System 3-25 If the system is set for multiple agent mode, the traps conﬁgured for each agent and the setting for proxying of remote SMT events is displayed. Slot 1 - Chassis Trap Destinations Configured Address Trap Numbers Enabled 158.101.112.3...
Page 72: Removing Trap Destinations
3-26 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM The trap numbers you enter allow the trap speciﬁed by that number to be sent to the destination address or agent(s) when the corresponding event occurs. Any traps that are not listed are not transmitted to the destination when the corresponding event occurs.
Page 73: Flushing Trap Destinations
Setting Up SNMP on Your System 3-27 Flushing Trap Destinations When ﬂushing the SNMP trap reporting destinations, you remove all trap destination agent and address information for the agent. To ﬂush all SNMP trap reporting destinations: Top-Level Menu 1 From the top level of the Administration Console, enter: system ethernet display...
Page 74 3-28 3: C HAPTER ONFIGURING ANAGEMENT CCESS YSTEM Local SMT events are automatically reported by the SNMP agent in a LANplex system. If you have a single LANplex on your network and you have no other way to access FDDI information, then you should enable proxying of SMT events. This conﬁguration provides access to the events occurring locally on the LANplex and those reported by other stations on the FDDI ring.
Page 75: Displaying The System Conﬁguration
DMINISTERING YSTEM NVIRONMENT This chapter focuses on the administration of your LANplex system environment, which involves: Displaying the current system conﬁguration Setting system passwords Setting the system name Changing the date and time Rebooting the system Displaying The system conﬁguration display provides software and hardware revisions, the System module status information, and warning messages for certain system Conﬁguration...
Page 76: Setting Passwords
4: A HAPTER DMINISTERING YSTEM NVIRONMENT The display contains the following general system information: The system type (LANplex 6004) System ID Software version Software build date and time The display also has one entry for each module in the system listing: Module entries Slot number Module status (On-line or Off-line)
Page 77 Setting Passwords To set a password: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet system password softwareUpdate fddi baseline tokenring serialPort 2 At the prompt requesting you to enter a password access level, enter one of bridge password the following:...
Page 78: Setting The System Name
4: A HAPTER DMINISTERING YSTEM NVIRONMENT Setting the You should give the LANplex system an easily recognizable and unique System Name name to aid in system management. For example, you may want to name the system according the its physical location, LP2500 ENGLAB. To name the system: Top-Level Menu 1 From the top level of the Administration Console, enter:...
Page 79: Rebooting The System
Rebooting the System Table 4-1 Date and Time Formats Format Description first mm month (1–12) date (1–31) last two digits of the year (00–99) hour (1–12) second mm minute (00–59) second (00–59) either AM or PM 4 Press [Return] when you want the system to start keeping the time that you entered.
Page 80 4: A HAPTER DMINISTERING YSTEM NVIRONMENT...
Page 81: About Updating Software
To update your system software, you can install a new version from any host running ftp. CAUTION: In order to run software version 6.0 on the LANplex 6000 you must have the new LMM Plus (LMM+) installed in your system. To verify if you have an LMM Plus installed check the module’s ejector tab to ensure it...
Page 82: Copying To Unix
5: U HAPTER PDATING YSTEM OFTWARE Copying to UNIX The LANplex software for a UNIX-based hard disk is distributed on four ﬂoppy diskettes. Diskettes #1, #2, and #3 contain the LANplex software. Diskette #4 contains the SNMP MIBs. The SNMP MIBs, on diskette #4, are provided so that you can compile on 3rd party applications.
Page 83: Copying To Dos
Copying Software to a Hard Disk The following ﬁles should be in your current default directory: README1 lp600000 lp600001 lp600002 restore_lpx 8 Use the supplied script to decompress and restore the split ﬁle ( lp600000, lp600001, lp600002 # ./restore_lpx Restoring the split ﬁle creates the uncompressed ﬁle .
Page 84: Loading Software
5: U HAPTER PDATING YSTEM OFTWARE Loading Software Before loading the system software on the LMM Plus, verify that the host machine, which has a copy of the updated system software, is connected to the system by one of the methods described in Chapter 3: Conﬁguring Management Access to the System.
Page 85 After the software is loaded, you are notiﬁed that installation has been completed: Installation complete. If the LANplex executable software image stored in EPROM is corrupted (for example, when a power failure occurs while you are updating software), contact 3Com Technical Support. See Appendix B: Technical Support.
Page 86 5: U HAPTER PDATING YSTEM OFTWARE...
Page 87: About Setting Baselines
ASELINING TATISTICS This chapter describes how baselining statistics work in the LANplex, and how to set, display, enable, or disable a baseline. About Setting Normally, statistics for MACs and ports start compiling at system power-up. Baselines Baselining allows you to view statistics relative to the time at which a baseline is set.
Page 88: Setting Baselines
6: B HAPTER ASELINING TATISTICS Setting Baselines Setting a baseline resets the counters to zero (the accumulated totals since power up are still maintained by the system). The baseline is timestamped. Top-Level Menu To set a baseline, enter the following commands from the top level of the system Administration Console, enter: display...
Page 89: About Working With Nonvolatile Data
AVING ESTORING ESETTING ONVOLATILE This chapter describes the nonvolatile (NV) data in the system and how to save, restore, and reset the data. About Working If you want to transfer NV data from one set of modules to another set or with Nonvolatile from one module to another, save the system’s NV data and restore it as Data...
Page 90: Saving Nv Data
7: S HAPTER AVING ESTORING ESETTING ONVOLATILE The ﬁle also contains the following information, which is used to resolve any inconsistencies when the NV data is restored: Software version number System ID Date and time of creation Type of conﬁguration Data checksums List of stored modules Saving NV Data...
Page 91: Restoring Nv Data
Restoring NV Data Login incorrect. Error: Could not open ftp session If a session is successfully opened, a system message notiﬁes you of the success or failure of your save as in the following examples: Success System NV data successfully stored in usr/jones/systemdata of host 158.101.112.34.
Page 92 7: S HAPTER AVING ESTORING ESETTING ONVOLATILE System ID Mismatch — System IDs do not match between the saved NV ﬁle Rule 2 and the target system. Mismatches in system IDs are allowed. Before restoring the NV data to a system with a different system ID, you should be aware of the following NV data that may cause problems when restored: Management IP addresses (deﬁned in IP interface conﬁgurations) are saved as NV data and restored.
Page 93 Restoring NV Data You are prompted for information for restoring the NV data saved to a ﬁle. Press [Return] at a prompt to use the value speciﬁed in brackets. Any entry for IP address, ﬁle name, and user name becomes the new default. 2 Enter the IP address of the host where the NV data ﬁle resides.
Page 94: Examining A Saved Nv Data File
7: S HAPTER AVING ESTORING ESETTING ONVOLATILE Examining a After saving NV data to a ﬁle, you can examine the header information of Saved NV Data that ﬁle. File To examine the ﬁle: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet...
Page 95: Resetting Nv Data To Defaults
Resetting NV Data to Defaults Resetting NV At times you may not want to restore the system NV data. Instead, you may Data to Defaults want to reset the values to the factory defaults so that you can start conﬁguring the system from the original settings. CAUTION: Resetting the NV data means that all NV memory is set back to the factory defaults.
Page 96 7: S HAPTER AVING ESTORING ESETTING ONVOLATILE...
Page 97 ,FDDI, & T THERNET OKEN Chapter 8 Administering Ethernet Ports Chapter 9 Administering FDDI Resources Chapter 10 Administering Token RIng Ports Chapter 11 Setting up the System for Roving Analysis...
Page 99: Displaying Ethernet Port Information
DMINISTERING THERNET ORTS This chapter describes how to: View Ethernet port information Conﬁgure Ethernet port labels Enable or disable an Ethernet port Displaying You can display either a summary of Ethernet port information or a detailed Ethernet Port report. When you display a summary of Ethernet port information, you Information receive information about the port, including its label, status, and the most pertinent statistics about general port activity and port errors.
Page 100 8: A HAPTER DMINISTERING THERNET ORTS The following example shows a detailed display for Ethernet ports on an EFSM: port rxFrames rxBytes rxFrameRate rxByteRate 406430 36336795 242400 29275605 port rxPeakByteRate rxPeakFrameRate noRxBuffers alignmentErrs 90484 58438 port fcsErrs lengthErrs rxInternalErrs rxDiscards port rxUnicasts rxMulticasts...
Page 101: Port
Displaying Ethernet Port Information An example of a summary display for Ethernet ports on an EFSM is shown below: port portLabel portState Office113_SPARCstation5 on-line Office322_Quadra900 on-line port rxFrames txFrames rxBytes txBytes 406876 1423733 36377226 234900612 242532 1257721 29293858 300479754 port rxErrs txErrs no noRxBuffers...
Page 102 8: A HAPTER DMINISTERING THERNET ORTS Table 8-1 Description of Fields for Ethernet Port Attributes (continued) Field Description noRxBuffers Number of frames discarded because there was no available buffer space portLabel 32-character string containing a user-defined name. The maximum length of the string is 32 characters, including the null terminator. portState Current software operational state of this port.
Page 103: Frame Processing And Ethernet Statistics
Displaying Ethernet Port Information Table 8-1 Description of Fields for Ethernet Port Attributes (continued) Field Description txFrameRate Average number of frames transmitted per second by this port during the most recent sampling period txFrames The number of frames transmitted by this port txInternalErrs Number of frames discarded because of an internal error during transmission...
Page 104 8: A HAPTER DMINISTERING THERNET ORTS Figure 8-1 shows the order in which these discard tests are made. from Ethernet Receive Frame Network rxFrames Frames received from the network Frames discarded because buffer space noRxBuffers was exhausted rxInternalErrs lengthErrs Frames discarded because frame in error alignmentErrs fcsErrs rxUcastFrames...
Page 105: Labeling A Port
Labeling a Port Figure 8-2 shows the order in which these discard tests are made. Transmit Frame Statistics txUcastFrames Frames delivered to this port txMcastFrames Frames discarded because port disabled txDiscards Frames discarded because txQOverflows transmit queue full excessDeferrals Frames discarded because transmit excessCollision error during transmission carrierSenseErr...
Page 106: Setting The Port State
8: A HAPTER DMINISTERING THERNET ORTS Setting the You can enable (place on-line) or disable (place off-line) Ethernet ports. Port State When an Ethernet port is enabled, frames are transmitted normally over that port. When an Ethernet port is disabled, the port does not send or receive frames.
Page 107: About Conﬁguring Fddi Resources
FDDI station (single station mode). Because the LANplex 6000 is a slot-based system, conﬁguring stations, paths, MACs, and ports is performed based on the slot of the module to which these FDDI resources are related.
Page 108: Path Mode
HAPTER DMINISTERING ESOURCES The Backplane Figure 9-1 shows how the LANplex 6000 FDDI backplane paths change from Path Mode single station mode to multi-station mode. In single station mode, all MACs and ports that connect to the backplane paths belong to Station 1. A MAC or port can be moved to a new backplane path by changing the requested path conﬁguration, which allows these...
Page 109: Modules And Fddi Resources
For example, if you wanted to change the station assignment of the EFSM MACs, you would select Slot 3 when prompted. Conﬁguring the The LANplex 6000 has three FDDI backplane paths that can be conﬁgured Backplane Path in one of two ways: Mode Single station mode —...
Page 110 9: A FDDI R HAPTER DMINISTERING ESOURCES CAUTION: When you change the FDDI backplane path mode and reboot the system, you reset the station and path assignments of all MACs and ports to the default values. To set the FDDI backplane path mode: Top-Level Menu 1 From the top level of the Administration Console, enter: system...
Page 111: Administering Fddi Stations
Administering FDDI Stations 3 At the reboot system prompt, enter y. The system reboots and the new mode takes effect. Administering An FDDI station is an addressable node on the network that can transmit, FDDI Stations repeat, and receive information. A station contains only one Station Management (SMT) entity and at least one MAC or one port.
Page 112 9: A FDDI R HAPTER DMINISTERING ESOURCES See the following example of station information: configuration tNotify statusReporting connectPolicy isolated enabled 0x8000 ecmState remoteDisconect traceMaxExp false 87500000 stationId 00-00-00-80-3e-02-95-00 This station display was generated from an LMM+ MAC attached to Station 1 of the system.
Page 113: Setting The Connection Policies
LMM+ — A, B, or M EFSM — M or S FCM — M By default, all connections to the LANplex 6000 FDDI ports are valid, except for M-M connections. The possible connections to reject and their corresponding bits are listed in Table 9-3.
Page 114 9: A FDDI R HAPTER DMINISTERING ESOURCES Table 9-3 Bit to Set for Rejecting a Station Connection (continued) Connection Rejected... If This Bit Is Set Connection Rules (port - Remote port) Tree connection with possible redundancy. The node shall not go to Thru state in CFM. In a single MAC node, Port B shall have precedence (with defaults) for connecting to a Port M.
Page 115: Setting Neighbor Notiﬁcation Timer
Administering FDDI Stations Setting Neighbor The T-notify attribute is a timer used in the Neighbor Notiﬁcation protocol to Notiﬁcation Timer indicate the interval of time between the generation of Neighbor Information Frames (NIF). NIF frames allow stations to discover their upstream and downstream neighbors.
Page 116: Enabling/Disabling Status Reporting
9-10 9: A FDDI R HAPTER DMINISTERING ESOURCES Enabling/Disabling The statusReporting attribute controls whether a station generates Status Status Reporting Report Frames (SRFs) to report events and conditions to network management stations. By default, status reporting is enabled. If you do not have an SMT management station listening to these event reports or if you use SNMP to monitor FDDI events on all FDDI end-stations, you can set this attribute to disabled so that SRFs will not be generated by the station.
Page 117: Port 1
Administering FDDI Paths 9-11 Administering FDDI’s dual, counter-rotating ring consists of a primary and a secondary FDDI Paths ring. FDDI stations can be connected to either ring or to both rings simultaneously. Data ﬂows downstream on the primary ring in one direction from one station to its neighboring station.
Page 118 9-12 9: A FDDI R HAPTER DMINISTERING ESOURCES 4 Enter the path ( = primary, = secondary, = local). In single station mode, the primary, secondary, and local paths are available for selection. In multi-station mode, the primary and secondary paths are available for stations related only to the LMM+ (the secondary path is local to the LMM+) and the primary path is available for all stations related to the FCM, EFSM, and ESM.
Page 119: Port
Administering FDDI Paths 9-13 Setting The tvxLowerBound attribute speciﬁes the minimum time value of fddiMAC tvxLowerBound TvxValue that will be used by any MAC that is conﬁgured onto this path. A MAC uses its valid transmission timer (TVX) to detect and recover from certain ring errors.
Page 120: Port 1
9-14 9: A FDDI R HAPTER DMINISTERING ESOURCES Setting The tmaxLowerBound attribute speciﬁes the minimum time value of tmaxLowerBound fddiMAC T-Max that will be used by any MAC that is conﬁgured onto this path. This value speciﬁes the boundary for how high T-Req (the requested token rotation time) can be set.
Page 121: Setting Maxt-Req
Administering FDDI Paths 9-15 Setting maxT-req The maxT-Req attribute speciﬁes the maximum time value of fddiMACT-Req that will be used by any MAC that is conﬁgured onto this path. T-Req is the value that a MAC bids during the claim process to determine a ring’s operational token rotation time, T_Opr.
Page 122: Administering Fddi Macs
9-16 9: A FDDI R HAPTER DMINISTERING ESOURCES Administering An FDDI MAC uses a token-passing protocol to determine which station has FDDI MACs control of the physical medium (the ring). The primary purpose of the MAC is to deliver frames (packets) to their destination by scheduling and performing all data transfers.
Page 123 Administering FDDI MACs 9-17 The following example show the summary display of FDDI MAC information: slot rxFrames txFrames rxBytes txBytes 101884 34320 22689080 10257112 97115 31939 21782677 9546481 slot Errors noRxBuffers txQOverflows slot upstream downstream 00-80-3e-02-95-16 00-80-3e-02-95-41 00-80-3e-02-95-40 00-80-3e-02-95-01 The following example show the detail display of FDDI MAC information:...
Page 124: Rxunicasts Rxmulticasts
9-18 9: A FDDI R HAPTER DMINISTERING ESOURCES slot rxFrames rxBytes rxFrameRate rxByteRate 103666 23089968 7582 98897 22183565 7582 slot mac rxPeakFrameRate rxPeakByteRate lostCount lateCount 10308 10308 slot notCopiedCount notCopiedThresh notCopiedRatio notCopiedCond 6550 inactive 6550 inactive slot errorCount frameErrThresh frameErrorRatio frameErrCond inactive inactive...
Page 125 Administering FDDI MACs 9-19 Table 9-5 describes the type of information provided for the FDDI MAC. Table 9-5 Description of Fields for FDDI MAC Attributes Field Description currentPath Path on which this MAC is currently located (primary or secondary) downstream MAC address of this MAC’s downstream neighbor downstreamType Indicates the PC type...
Page 126 9-20 9: A FDDI R HAPTER DMINISTERING ESOURCES Table 9-5 Description of Fields for FDDI MAC Attributes (continued) Field Description oldUpstream Previous value of the MAC address of this MAC’s upstream neighbor ringOpCount Number of times that this MAC has entered the operational state from the non-operational state rmtState State of the ring management as defined in SMT...
Page 127 Administering FDDI MACs 9-21 Table 9-5 Description of Fields for FDDI MAC Attributes (continued) Field Description tvxExpiredCount Number of times that this MAC’s valid transmission timer has expired tvxValue Value of the valid transmission timer in use by this MAC txByteRate Average number of bytes transmitted per second by this MAC during the most recent sampling period...
Page 128: Frame Processing And Fddi Mac Statistics
9-22 9: A FDDI R HAPTER DMINISTERING ESOURCES Frame Processing and FDDI MAC Statistics All frames on the FDDI network are received promiscuously by an FDDI MAC. A frame may be discarded, however, for the following reasons: There is no buffer space available The frame is in error LLC service is disabled This is an NSA Frame and the A-bit is set...
Page 129: Setting The Frame Error Threshold
Administering FDDI MACs 9-23 Figure 9-3 shows the order in which the discard tests are made. Transmit Frame Statistics txUcastFrames Frames delivered to this MAC txMcastFrames Frames discarded because LLC Service txDiscards disabled or ring not operational Frames discarded because transmit txQOverflows queue full Frames discarded because of error...
Page 130: Setting The Not Copied Threshold
9-24 9: A FDDI R HAPTER DMINISTERING ESOURCES 3 Enter the MAC number. 4 Enter the new threshold value. See the following example: Select MAC [1]: MAC 1 - Enter new value [655]: Setting the Not The NotCopiedThreshold attribute determines when a MAC condition report Copied Threshold is generated because too many frames could not be copied.
Page 131: Enabling/Disabling Llc Service
Administering FDDI MACs 9-25 Enabling/Disabling The LLC service allows LLC frames to be sent and received on the MAC. LLC LLC Service frames are all data frames transmitted on the network. If there is something wrong on your network, you may want to turn off data (user) trafﬁc for a MAC by disabling LLC Service.
Page 132: Setting The Mac Paths
9-26 9: A FDDI R HAPTER DMINISTERING ESOURCES 2 Enter the slot(s). You are prompted for a station assignment for each MAC in the slot(s) you speciﬁed. 3 Enter the station assignment. The possible values are 1, 2, or 3. Remember that each of these stations uses the corresponding backplane path as its primary path.
Page 133 Administering FDDI MACs 9-27 You are prompted for a path assignment for each MAC in the slot(s) you speciﬁed. 4 Enter the station assignment. The possible values are 1, 2, or 3. See the following example for single station mode path assignments: Select slot(s) (1-2,4|all) [1-2,4]: Select MAC(s) (1-3|all) [1-3]: Slot 1 MAC 1 - Select path (isol,pri,sec,loc) [pri]:...
Page 134: Administering Fddi Ports
9-28 9: A FDDI R HAPTER DMINISTERING ESOURCES Administering Within an FDDI station, the PHY and PMD entities make up a port. A port FDDI Ports (the PHY/PMD pair that connects to the ﬁber media) is located at both ends of a physical connection and determines the characteristics of that connection.
Page 135 Administering FDDI Ports 9-29 slot port portLabel lemCount Backbone1 SrvrRm001 slot port lerEstimate lerAlarm lerCutoff lerCondition inactive inactive slot port lemRejectCount lctFailCount ebErrorCount ebErrorCond inactive inactive slot port lineState currentPath connectState pcmState isolated connecting connect isolated connecting connect slot port pcWithhold myType neighborType...
Page 136: Setting Leralarm
9-30 9: A FDDI R HAPTER DMINISTERING ESOURCES Table 9-6 Description of Fields for FDDI Port Attributes (continued) Field Description myType Type of port connector on the port neighborType Type of port connector at the other end of the physical connection pcmState Current Physical Connection Management (PCM) State defined in pcWithhold...
Page 137: Setting Lercutoff
Administering FDDI Ports 9-31 example, if you want to express the value 1 x 10 , you would enter 8 as the value. Setting lerCutoff The lerCutoff attribute is the link error rate estimate at which a link connection is disabled. Once the lerCutoff value is reached, the PHY that detected a problem is disabled.
Page 138: Setting Port Labels
9-32 9: A FDDI R HAPTER DMINISTERING ESOURCES Setting Port Labels Port labels serve as a useful reference point and as an accurate means of identifying your ports for management. You may want to label your FDDI ports for easy identiﬁcation of the devices attached to them (for example, workstation, server, FDDI backbone).
Page 139: Setting The Port Paths
Administering FDDI Ports 9-33 If you change a station assignment, then you must reboot the system for the change to take effect. See the following example: Select slot(s) (2,4|all) [2,4]: Select ports(s) (1-6|all): Slot 2 port 1 - Enter new FDDI station number (1-3) [1]: Slot 2 port 2- Enter new FDDI station number (1-3) [1]: You have requested that this port be moved to a different FDDI station.
Page 140 9-34 9: A FDDI R HAPTER DMINISTERING ESOURCES 4 Select the DAS conﬁguration for peer mode at the prompt. isol thru 5 Select the DAS conﬁguration , or for tree mode isol wrap AB dualHome at the prompt. The information you enter may vary depending on the type of module you are conﬁguring: For an LMM+, you are prompted for the DAS conﬁguration for both the peer and tree connections.
Page 141 Administering FDDI Ports 9-35 See the following example for single station mode path assignments: Select slot(s) (2,4|all) [2]: Select port(s) (1-6|all) [1-3]: Slot 2 port 1 - Select path (isol,pri,sec,loc) [pri]: isol Slot 2 port 2 - Select path (isol,pri,sec,loc) [sec]: Slot 2 port 3 - Select path (isol,pri,sec,loc) [loc]: Slot 2 port 4 - Select path (isol,pri,sec,loc) [isol]: Slot 2 port 5 - Select path (isol,pri,sec,loc) [pri]:...
Page 142 9-36 9: A FDDI R HAPTER DMINISTERING ESOURCES...
Page 143: Displaying Token Ring Port Information
DMINISTERING OKEN ORTS This chapter describes how to: View Token Ring port information Conﬁgure Token Ring port labels Enable or disable a Token Ring port Conﬁgure Token Ring port speed Conﬁgure Token Ring port mode Displaying Token You can display either a summary of Token Ring port information or a Ring Port detailed report.
Page 144 10-2 10: A HAPTER DMINISTERING OKEN ORTS To display information about the Token Ring ports: Top-Level Menu 1 From the top level of the Administration Console, enter: system ethernet summary tokenring summary fddi detail tokenring label bridge portState portSpeed tokenring detail snmp portMode analyzer...
Page 145 Displaying Token Ring Port Information 10-3 The following example shows a detailed display for Token Ring ports on a TRSM: rxFrames rxBytes rxFrameRate rxByteRate 65806 rxPeakFrameRate rxPeakByteRate noRxBuffers rxInternalErrs 9741 rxUnicasts rxMulticasts rxDiscards fcsErrs txFrames txBytes txFrameRate txByteRate 7535 2485537 txPeakFrameRate txPeakByteRate rxLongFrames...
Page 146 10-4 10: A HAPTER DMINISTERING OKEN ORTS Table 10-1 Description of Fields for Token Ring Port Attributes Field Description abortDelimErr Number of times an abnormally terminated frame was seen a/cErr Number times that more than one AMP or SMP frame was seen without the A/C field set.
Page 147 Displaying Token Ring Port Information 10-5 Table 10-1 Description of Fields for Token Ring Port Attributes (continued) Field Description rxDiscards Number of frames discarded during reception rxErrs Sum of all receive errors associated with this port (field only appears in the summary option) rxLongFrame Number of frames longer than 4500 bytes received by this port rxFrameRate...
Page 148: Frame Processing And Token Ring Statistics
10-6 10: A HAPTER DMINISTERING OKEN ORTS Table 10-1 Description of Fields for Token Ring Port Attributes (continued) Field Description txOverflows Not applicable txPeakByteRate Peak value of ethernetPortByteTransmitRate for this port since the station was last initialized txPeakFrameRate Peak value of ethernetPortFrameTransmitRate for this port since the station was last initialized txUnicasts Number of unicast (non-multicast) frames queued for transmission...
Page 149 Displaying Token Ring Port Information 10-7 Frames are delivered to a Token Ring port by bridges, routers, and management applications. However, a frame may be discarded for the following reasons: The Token Ring port is disabled There is no room on the transmit queue An error occurred during frame transmission The frame is too long Figure 10-2 shows the order in which these discard tests are made.
Page 150: Labeling A Port
10-8 10: A HAPTER DMINISTERING OKEN ORTS Labeling a Port Port labels serve as a useful reference point and as an accurate means of identifying your ports for management. You may want to label your Token Ring ports so that you can easily identify the device speciﬁcally attached to each port (for example, LAN, workstation, or server).
Page 151: Setting The Port Speed
Setting the Port Speed 10-9 Setting the You may set the port speed for any Token Ring port to 4 Mbps, 16Mbps, or Port Speed 16Mbps Early Token Release. The default port speed for all Token Ring ports is 16 Mbps. To set the port speed for a Token Ring port: Top-Level Menu 1 From the top level of the Administration Console, enter:...
Page 152 10-10 10: A HAPTER DMINISTERING OKEN ORTS...
Page 153: About Roving Analysis
ETTING UP THE YSTEM FOR OVING NALYSIS This chapter describes how to set up the system for Roving Analysis. With Roving Analysis, you can monitor Ethernet port activity either locally or remotely using a network analyzer attached to the system. About Roving Roving Analysis is the monitoring of Ethernet port trafﬁc for network Analysis...
Page 154 11-2 11: S HAPTER ETTING UP THE YSTEM FOR OVING NALYSIS or EFSM) on which the remote port is located. The remote system or module must be located on the same FDDI ring as the system to which the analyzer is attached. Figure 11-2 shows local and remote monitoring on a single LANplex system.
Page 155: Displaying The Roving Analysis Conﬁguration
Displaying the Roving Analysis Configuration 11-3 FDDI (Connection through the LMM A/B ports) Port on switching Remote port to monitor on module chosen for another LANplex system’s network analyzer switching module LANplex 6012 Network Analyzer Figure 11-2 Monitoring Remotely Between Two LANplex Systems You can have a maximum of 16 network analyzers connected to a system Conﬁguration rules and the following maximum number of ports monitored per module:...
Page 156: Adding An Analyzer Port
11-4 11: S HAPTER ETTING UP THE YSTEM FOR OVING NALYSIS To display the Roving Analysis conﬁgurations: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet analyzer display fddi remove tokenring start 2 Enter the slot number(s) of the module(s) for which you want to display the bridge stop Roving Analysis conﬁguration.
Page 157: Removing An Analyzer Port
Removing an Analyzer Port 11-5 If your port selection is not valid, you will receive one of the following Port selection errors messages: Error adding analyzer - monitoring already configured on this port Error adding analyzer - analyzer already configured on this port Once the analyzer port is set, it is disabled from receiving or transmitting any other data.
Page 158: Starting Port Monitoring
After you have a local or remote port conﬁgured for the network analyzer, Monitoring you can start monitoring port activity. 3Com recommends that you ALWAYS conﬁgure the analyzer port before conﬁguring the monitored ports. To start monitoring a new port:...
Page 159: Stopping Port Monitoring
Stopping Port Monitoring 11-7 CAUTION: If you receive the above message, check your analyzer port conﬁguration before proceeding. An incorrect conﬁguration will result in frames being continuously ﬂooded throughout your bridged network. You are then prompted for an FDDI port through which the data should be forwarded as shown below: Select FDDI port (1-2): Once you successfully conﬁgure a port to monitor, all the data received and...
Page 160 11-8 11: S HAPTER ETTING UP THE YSTEM FOR OVING NALYSIS...
Page 161 RIDGING Chapter 1012 Administering the Bridge Chapter 1113 Administering Bridge Ports Chapter 1214 Creating and Using Packet Filters Chapter 1315 Conﬁguring Address and Port Groups to Use in Packet Filters...
Page 163: Displaying Bridge Information
DMINISTERING THE RIDGE This chapter describes how to view the bridge set up and how to conﬁgure the following bridge-level parameters: Bridging mode (Transparent or Express Switching) IP fragmentation IPX snap translation Address threshold Address aging time Spanning Tree Protocol (STP) parameters For information about conﬁguring the bridge port, see Chapter 13.
Page 164 12-2 12: A HAPTER DMINISTERING THE RIDGE The following example shows a display of bridge information. stpState timeSinceLastTopologyChange enabled 1 hr 28 mins 31 secs topologyChangeCount topologyChangeFlag false BridgeIdentifier designatedRoot 8000 00803e003040 7fff 00803e026294 bridgeMaxAge maxAge bridgeHelloTime helloTime bridgeFwdDelay forwardDelay holdTime rootCost rootPort...
Page 165 Displaying Bridge Information 12-3 Table 12-1 Bridge Attributes (continued) Parameter Description agingTime Time-out period in seconds (between 10 and 32267) for aging out dynamically learned forwarding information. The default value is 300 seconds (or 5 minutes). bridgeFwdDelay Forward delay value used when this bridge is the root bridge. This value sets the amount of time a bridge spends in the “listening”...
Page 166: Setting The Bridging Mode
The advantages and disadvantages of using Express Switching are deﬁned in Chapter 6: Express Switching or Chapter 12: Token Ring in the LANplex System in the LANplex 6000 Operation Guide. The advantages and disadvantages of using Transparent, Source Route/Transparent or Source Route modes are deﬁned in Chapter 12: Token Ring in the LANplex System in...
Page 167 Setting the Bridging Mode 12-5 You can mix bridging modes within your system. To set the bridging mode for the ESM, EFSM, or TRSM: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet bridge mode mode fddi ipFragmentation...
Page 168: Enabling/ Disabling Ip Fragmentation
12-6 12: A HAPTER DMINISTERING THE RIDGE Enabling/ When IP fragmentation is enabled, large FDDI packets are “fragmented” into Disabling IP smaller packets. This allows FDDI and Ethernet stations connected to the Fragmentation LANplex to communicate using IP even if the FDDI stations are transmitting packets that would typically be too large to bridge.
Page 169: Setting Protocol Address Translation From Token Ring To Fddi
Setting Protocol Address Translation from Token Ring to FDDI 12-7 To enable or disable IPX Snap Translation for a bridge: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet bridge ipxSnapTranslation mode fddi ipFragmentaion tokenring ipxSnapTranslation 2 Enter the number(s) of the slot(s) or...
Page 170: Setting The Address Threshold
12-8 12: A HAPTER DMINISTERING THE RIDGE Setting the The address threshold for a bridge is the reporting threshold for the total Address number of Ethernet addresses known to a particular switching module. Threshold When this threshold is reached, the SNMP trap addressThresholdEvent is generated.
Page 171: Administering Stp Bridge Parameters
For more information about how the Spanning Tree parameters interact at the bridge-level to create a loopless network, see Chapter 5: Transparent Bridging in the LANplex 6000 Operation Guide. Enabling/Disabling You can enable and disable Spanning Tree on any bridge in the system.
Page 172: Setting The Bridge Priority
12-10 12: A HAPTER DMINISTERING THE RIDGE Setting the Bridge The bridge priority inﬂuences the choice of the root bridge and the Priority designated bridge. The lower the bridge’s priority number, the more likely that the bridge will be chosen as the root bridge or a designated bridge. The bridge priority value is appended as the most signiﬁcant portion of a Bridge priority values bridge identiﬁer (for example:...
Page 173: Setting The Bridge Hello Time
Administering STP Bridge Parameters 12-11 Top-Level Menu To conﬁgure the bridge max age: system display ethernet 1 From the top level of the Administration Console, enter: mode fddi ipFragmentation tokenring bridge stpMaxAge ipxSnapTranslation bridge trFDDIMode addressThreshold snmp 2 Enter the number(s) of the slot(s) or to conﬁgure the max age of all agingTime analyzer...
Page 174: Setting The Bridge Forward Delay
12-12 12: A HAPTER DMINISTERING THE RIDGE Setting the Bridge The forward delay value speciﬁes the amount of time a bridge spends in the Forward Delay “listening” and “learning” states. This value temporarily prevents a bridge from starting to forward data packets to and from a link until news of a topology change has spread to all parts of a bridged network.
Page 175: Displaying Bridge Port Information
DMINISTERING RIDGE ORTS This chapter describes how to view bridge port information and conﬁgure the following: Multicast packet threshold Spanning Tree Protocol (STP) parameters Bridge port addresses Displaying Bridge port information includes the STP conﬁgurations for the bridge port. Bridge Port You can display this information in both summary and detail formats.
Page 176 13-2 13: A HAPTER DMINISTERING RIDGE ORTS The following example shows a bridge port summary display for an EFSM. port rxFrames rxDiscards txFrames FDDI 1680326 1095 654715 Ethernet 411180 1353766 Ethernet 12 243559 1184225 port portId state fwdTransitions FDDI 0x8001 enabled forwarding Ethernet...
Page 177 Displaying Bridge Port Information 13-3 Table 13-1 describes the type of information provided for the bridge port. Table 13-1 Bridge Port Attributes Parameter Description designatedBridge Identification of the designated bridge of the LAN to which the port is attached designatedCost Cost through this port to get to the root bridge.
Page 178 13-4 13: A HAPTER DMINISTERING RIDGE ORTS Table 13-1 Bridge Port Attributes (continued) Parameter Description rxErrorDiscs Number of frames discarded by this port because of internal bridge system errors (such as hardware and software address table discrepancies) rxFloodUcasts Number of unicast frames received on this port that were flooded to one or more ports rxForwardMcasts Number of multicast frames received on this bridge port...
Page 179 Displaying Bridge Port Information 13-5 Table 13-1 Bridge Port Attributes (continued) Parameter Description state Spanning Tree state (blocking, listening, learning, forwarding, disabled) in which the port is currently operating: Blocking: the bridge continues to run Spanning Tree on that port, but the bridge does not receive data packets from the port, learn locations of station addresses from it, or forward packets onto it.
Page 180: Frame Processing And Bridge Port Statistics
13-6 13: A HAPTER DMINISTERING RIDGE ORTS Frame Processing All frames received on a physical (Ethernet, FDDI, or Token Ring) interface and Bridge Port and not explicitly directed to the LANplex system are delivered to the Statistics corresponding bridge port. A frame is then either forwarded to another bridge port or discarded.
Page 181: Setting The Multicast Limit
Ethernet segment connected to the port. For more information about the multicast packet ﬁrewall, see Chapter 8: LANplex Bridging Extensions in the LANplex 6000 Operation Guide. The default is zero (0), which means that no threshold is set. Default value...
Page 182: Administering Stp Bridge Port Parameters
13-8 13: A HAPTER DMINISTERING RIDGE ORTS 3 Enter , or Ethernet FDDI tokenring You are prompted for port number(s). 4 Enter the number(s) of the port(s) or to set the threshold for all ports on the bridge. You are prompted for a new value for each port you speciﬁed. 5 Enter the new multicast threshold value for the port(s).
Page 183: Setting The Port Path Cost
Administering STP Bridge Port Parameters 13-9 You are prompted for the port number(s). 4 Enter the number(s) of the port(s) or to enable or disable all ports for Spanning Tree. You are prompted for a new value for each port you speciﬁed. 5 Enter at the prompts.
Page 184: Setting The Port Priority
13-10 13: A HAPTER DMINISTERING RIDGE ORTS You are prompted for the path cost for each port you speciﬁed. 5 Enter the path cost for the port(s). The following example shows values being set for more than one module and one port: Slot 2 FDDI port 1 - Enter a new value [100]: Slot 5 Ethernet port 3 - Enter a new value [100]: Slot 5 Ethernet port 4 - Enter a new value [100]:...
Page 185: Setting The Source Route Ring Number
Administering STP Bridge Port Parameters 13-11 Slot 4 Ethernet port 3 - Enter new value [0x80]: Slot 4 Ethernet port 4 - Enter new value [0x80]: If your conﬁguration was successful, you return to the previous menu. If the conﬁguration was not successful, you are notiﬁed that your changes failed, and you can try to re-enter those changes.
Page 186: Administering Port Addresses
13-12 13: A HAPTER DMINISTERING RIDGE ORTS Administering You can administer the MAC addresses of stations connected to Ethernet Port Addresses and FDDI ports on the LANplex system. Listing Addresses You can display MAC addresses currently associated with the selected ports. Each address type (static or dynamic), assigned port, and age are also listed.
Page 187: Adding New Addresses
Administering Port Addresses 13-13 Adding New When you assign new MAC addresses to the selected ports, these addresses Addresses are added as statically-conﬁgured addresses. A statically conﬁgured address is never aged and can never be learned on a different Ethernet port. To add a MAC address: Top-Level Menu 1 From the top level of the Administration Console, enter:...
Page 188: Flushing All Addresses
13-14 13: A HAPTER DMINISTERING RIDGE ORTS You are prompted for the address to be removed. 5 Enter addresses to remove, pressing [Return] after each entry. Once you have entered all of the addresses to be removed, enter to return to the previous menu.
Page 189: Flushing Dynamic Addresses
Administering Port Addresses 13-15 Flushing Dynamic You can ﬂush all dynamic (automatically learned) addresses from the Addresses selected port(s) on the module(s) you select. To ﬂush dynamic addresses: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet...
Page 190 13-16 13: A HAPTER DMINISTERING RIDGE ORTS...
Page 191: About Packet Filtering
REATING AND SING ACKET ILTERS This chapter describes how to create and edit packet ﬁlters using the packet ﬁlter language. This chapter also provides instructions for how to list, display, and delete currently deﬁned ﬁlters, load packet ﬁlter deﬁnitions created in an ASCII-based editor onto the LANplex system, and assign ﬁlters to ports on a switching module.
Page 192: Listing Packet Filters
SING ACKET ILTERS For detailed explanations of packet ﬁlter concepts, see Chapter 7: User- deﬁned Packet Filtering in the LANplex 6000 Operation Guide. Listing Packet When you list the packet ﬁlters for switching modules in the system, the Filters ﬁlter identiﬁcation, ﬁlter name (if any), and ﬁlter assignments are displayed.
Page 193: Displaying Packet Filters
Displaying Packet Filters 14-3 Displaying When displaying the contents of a single packet ﬁlter, you select the packet Packet Filters ﬁlter using the ﬁlter id (which you can obtain by listing the packet ﬁlters as described in the previous section). The packet ﬁlter instructions are displayed;...
Page 194: How The Packet Filter Language Works
14-4 14: C HAPTER REATING AND SING ACKET ILTERS Concepts for Writing Before writing a packet ﬁlter, you should understand the basic concepts a Filter listed below: How the packet ﬁlter language works What the basic elements of a packet ﬁlter are How to implement sequential tests in a packet ﬁlter What the pre-processed and run-time storage requirements are How the Packet Filter Language Works...
Page 195 Creating Packet Filters 14-5 Table 14-2 describes the instructions and stacks of a packet ﬁlter. Table 14-2 Packet Filter Instructions and Stacks — Descriptions and Guidelines Element Descriptions and Guidelines Instructions Each instruction in a packet filter definition must be on a separate line in the packet filter definition file.
Page 196: Basic Elements Of A Packet Filter
14-6 14: C HAPTER REATING AND SING ACKET ILTERS Basic Elements of a Packet Filter Before creating a packet ﬁlter, you must decide which part of the packet you want to ﬁlter. This can be the destination address, source address, type/length, or some part of the data.
Page 197 Creating Packet Filters 14-7 The Ethernet and FDDI packet ﬁelds in Figure 14-1 are used as operands in the packet ﬁlter. The two simplest operands are described in Table 14-3. Table 14-3 Packet Filter Operands Operand Description Opcode to Use packet field A field in the packet that can reside at any offset.
Page 198: Implementing Sequential Tests In A Packet Filter
14-8 14: C HAPTER REATING AND SING ACKET ILTERS Implementing Sequential Tests in a Packet Filter Filter language expressions are normally evaluated to completion — a packet is accepted if the value remaining on the top of the stack is non-zero.
Page 199: Pre-Processed And Run-Time Storage
Creating Packet Filters 14-9 The following example shows the use of both accept and reject in a packet ﬁlter. This packet ﬁlter was created for a network running both Phase I and Phase II AppleTalk. The goal of the ﬁlter is to eliminate the AppleTalk trafﬁc. Name “Filter AppleTalk datagrams”...
Page 200: Procedure For Writing A Filter
14-10 14: C HAPTER REATING AND SING ACKET ILTERS For run-time storage of packet ﬁlter programs, each switching module Run-time storage of packet ﬁlters provides a maximum of 8192 bytes. There is no explicit system or per packet ﬁlter overhead; however, performance considerations may result in unused areas of the run-time storage.
Page 201: Examples Of Creating Filters
Creating Packet Filters 14-11 4 Apply a logic operation to the values in steps 2 and 3. The operator you use depends on what comparison you want to make. Variations to these four basic steps of writing packet ﬁlters include: Using for each additional comparison you intend to make with pushTop...
Page 202: Packet Filter Solution
14-12 14: C HAPTER REATING AND SING ACKET ILTERS Packet Filter Solution The solution is to create a highly sophisticated packet ﬁlter that prevents only the broadcast packets from the market data servers from being forwarded onto the segments that are not part of an active trading ﬂoor. Before writing the packet ﬁlter, it is important to understand the functions that the ﬁlter must provide.
Page 203 Creating Packet Filters 14-13 The pseudocode translates into the following packet ﬁlter: Name “IP XNS ticker bcast filter” # Assign this filter in the multicast path # of a port only--this is very important # XNS FILTERING SECTION pushField.w # get the type field of the packet and # place it on top of the stack pushLiteral.w 0x0600...
Page 204 14-14 14: C HAPTER REATING AND SING ACKET ILTERS The rest of this section concentrates on the parts of the ﬁlter, showing you how to translate the pseudocode’s requirements into ﬁlter language. The large ﬁlter on page 14-14 is broken down into subsets to show how you can create small ﬁlters that perform one or two tasks, then combine them for more sophisticated ﬁltering.
Page 205 Creating Packet Filters 14-15 4 Enter executable instruction #3: # if the two values on the top of the stack are equal, then return a non-zero value By itself, this ﬁlter looks like the following: Name “Forward only XNS packets” pushField.w # get the type field of the packet and # place it on top of the stack...
Page 206 14-16 14: C HAPTER REATING AND SING ACKET ILTERS 7 Enter executable instruction #6: # compare if the value of the socket is less than the upper bound 8 Enter executable instruction #7: and # “and” together with “ge” and “lt” test to determine if the socket value is “within”...
Page 207 Creating Packet Filters 14-17 4 Add an and statement to compare the results of step 2 with the results of step 3: and # compare if IP and in range This combination would look like the following: Name “Only IP pkts w/in socket range” pushField.w # get the type field of the packet and # place it on top of the stack...
Page 208: Tools For Writing A Filter
14-18 14: C HAPTER REATING AND SING ACKET ILTERS 5 Go through steps 2 through 4 as described in “Combining a Subset of the Filters” on page 14-17. 6 Add an or statement: or # determine if the type field is either XNS or IP 7 Add a not statement to cause any matching packets to be discarded: not # discard if (IP &...
Page 209 Creating Packet Filters 14-19 To use the built-in line editor to create a packet ﬁlter deﬁnition: Top-Level Menu 1 From the top level of the Administration Console, enter: system list display ethernet display bridge packetFilter create mode fddi create ipFragmentation tokenring delete The packet ﬁlter line editor appears.
Page 210: Using An External Text Editor
14-20 14: C HAPTER REATING AND SING ACKET ILTERS Table 14-6 Packet Filter Editor Commands (continued) Command Keys Description Delete Line Ctrl-k Deletes the remainder of the line from the current cursor position. If the cursor is positioned over the first character, all of the characters on the line are deleted, but the line is retained.
Page 211: Editing Packet Filters
Editing Packet Filters 14-21 Editing Packet You can use the LANplex system line editor to edit packet ﬁlters. Once you Filters save the packet ﬁlter, it is checked for syntax errors. The LANplex system software will not allow you to assign the packet ﬁlter to any slots until the ﬁlter is error-free.
Page 212: Loading Packet Filters
14-22 14: C HAPTER REATING AND SING ACKET ILTERS After you have corrected all errors and saved the packet ﬁlter, it is converted to internal form and updated on the switching modules to which it is assigned. For ﬁlters edited with an external text editor, ﬁlter errors are checked when the ﬁlter is loaded onto the module (see “Loading Packet Filters”).
Page 213: Copying Packet Filters
Copying Packet Filters 14-23 Copying Packet You can copy a packet ﬁlter from one module to another. Filters To copy a packet ﬁlter: Top-Level Menu system list 1 From the top level of the Administration Console, enter: display ethernet display mode fddi create...
Page 214: Unassigning Packet Filters From Ports
14-24 14: C HAPTER REATING AND SING ACKET ILTERS In the example below, the assignment is to the transmit all (txA) and receive all (rxA) paths on port 1 of slots 3 and 4. Select filter [1-n]: Select slot(s) [3-5, all]: Select port type(s) (Ethernet,FDDI|all) [Ethernet,FDDI]: FDDI Select port(s) (1-16|all) [1-16]:...
Page 215 Unassigning Packet Filters from Ports 14-25 Select port type(s) (Ethernet,FDDI|all) [Ethernet,FDDI]: FDDI Select port(s) (1-16|all) [1-16]: Select path(s) (txA,txM,rxA,rxM|all) [txA,rxA]: The slots are limited to those that have the ﬁlter loaded and have at least one port/path assigned to the ﬁlter. The ports are limited to those that have at least one path assigned to the ﬁlter, while the paths are limited to those that are assigned to the ﬁlter.
Page 216 14-26 14: C HAPTER REATING AND SING ACKET ILTERS...
Page 217: Using Groups In Packet Filters
LANplex Ethernet and FDDI ports) as ﬁltering criteria in a packet ﬁlter. For more information about address and port group concepts, see Chapter 7: User-deﬁned Packet Filtering in the LANplex 6000 Operation Guide. A packet ﬁlter uses groups to make ﬁltering decisions by accessing the source group mask and the destination group mask of a group.
Page 218: Listing Groups
15-2 15: C HAPTER ONFIGURING DDRESS AND ROUPS TO SE IN ACKET ILTERS In this example, packets are not forwarded to ports included in groups 3 Port group packet ﬁlter example and 8. Name “Discard Groups 3 and 8” pushSPGM # Get source port group mask pushLiteral.l 0x0084...
Page 219: Displaying Groups
Displaying Groups 15-3 group mask of 1 (the bit set in the mask) and the address group mask is loaded into slots 3, 6, and 11. Address Groups Address Group 1 - Accounting Address group mask - bit 1 Slot 3, 6, 11 Address Group 2 - Development Address group mask - bit 6 Slot 4...
Page 220: Creating New Groups
15-4 15: C HAPTER ONFIGURING DDRESS AND ROUPS TO SE IN ACKET ILTERS An example of displaying an address group is shown below. In this example, Address group example address group 2 is displayed. The address group id and the name (if any) are displayed, followed by Ethernet addresses that are members of the group.
Page 221 Creating New Groups 15-5 4 Enter the address or port group name. 5 Enter the addresses or ports to add to the new group. Type after entering all the addresses or ports. Enter the addresses in MAC format as: xx-xx-xx-xx-xx-xx Enter the ports in the syntax: <...
Page 222: Deleting Groups
15-6 15: C HAPTER ONFIGURING DDRESS AND ROUPS TO SE IN ACKET ILTERS Select slot(s) [4, 7-9, all]: Select a bit in the address group mask [3-8, 14-32]: Enter the address group name: Marketing Enter the addresses for the group - type q to return to the menu: Address: 08-32-45-fe-76-d3 08-32-45-e3-32-21...
Page 223: Copying Groups
Copying Groups 15-7 Copying Groups Copying from one module to another is faster than loading a group to multiple modules. To copy an address or port group: 1 From the top level of the Administration Console, enter the following for the address group menu: bridge packetFilter addressGroup copy Or enter the following for the port group menu:...
Page 224 15-8 15: C HAPTER ONFIGURING DDRESS AND ROUPS TO SE IN ACKET ILTERS 1 From the top level of the Administration Console, enter the following to add Top-Level Menu system addresses to an address group: display ethernet list mode list display fddi ipFragmentation...
Page 225: Removing Addresses Or Ports From A Group
Removing Addresses or Ports from a Group 15-9 For port groups, entering an invalid port speciﬁcation results in error messages, similar to those described on page 15-5. An example of adding addresses to a group follows. In the example, two Address group example additional addresses are added to the Development address group.
Page 226 15-10 15: C HAPTER ONFIGURING DDRESS AND ROUPS TO SE IN ACKET ILTERS Enter the ports in the syntax: < Ethernet | E | FDDI | F > [port] < port number > As you enter addresses and ports, the system attempts to remove them from each of the modules on which the group is loaded.
Page 227: Loading Groups
Loading Groups 15-11 Loading Groups There is no explicit menu item to load address and port groups that are deﬁned in a ﬁle on a remote host. However, you can “load” groups by creating a script on a remote host (which includes your address or port group), and running that script.
Page 228 15-12 15: C HAPTER ONFIGURING DDRESS AND ROUPS TO SE IN ACKET ILTERS...
Page 229 PPENDICES Appendix A Packet Filter Opcodes, Examples, and Sytax Errors Appendix B Technical Support...
Page 231: Opcodes
ACKET ILTER PCODES XAMPLES YNTAX RRORS This appendix describes the speciﬁc opcodes you can use when creating the packet ﬁlter and provides numerous examples for commonly used packet ﬁlters. It also describes the possible syntax errors you may receive when loading a packet ﬁlter. Opcodes Opcodes are instructions used in packet ﬁlter deﬁnitions.
Page 232 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS pushField.size <offset> Description: Pushes a field from the target packet onto the stack. Packet data starting at <offset> is copied onto the stack. The most significant byte of the field is the byte at the specified offset.
Page 233 Opcodes pushTop Description: Pushes the current top of the stack onto the stack (that is, it reads the top of the stack and pushes the value onto the stack). The size of the push is determined by the size of the contents of the stack. Storage Needed: 1 byte pushSAGM...
Page 234 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS pushSPGM Description: Pushes the source port group mask (SPGM) onto the top of the stack. The SPGM is a bitmap representing the groups to which the source port of a packet belongs.
Page 235 Opcodes ne (not equal) Description: Pops two values from the stack and compares them. If they are not equal, a byte containing the value non-zero is pushed onto the stack; otherwise, a byte containing 0 is pushed. The size of the operands is determined by the contents of the stack.
Page 236 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS gt (greater than) Description: Pops two values from the stack and performs an unsigned comparison. If the first is greater than the second, a byte containing the value non-zero is pushed onto the stack;...
Page 237 Opcodes or (bit-wise OR) Description: Pops two values from the stack and pushes the bit-wise OR of these values back onto the stack. The size of the operands and the result are determined by the contents of the stack. Storage Needed: 1 byte xor (bit-wise exclusive-OR) Description:...
Page 238 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS reject Description: Conditionally rejects the packet being examined. A byte is popped from the stack. If it is non-zero, the packet is rejected and evaluation of the filter ends immediately; otherwise, filter evaluation continues with the next instruction. Storage Needed: 1 byte shiftl (shift left)
Page 239: Packet Filter Examples
Packet Filter Examples Packet Filter The following are examples of using the packet ﬁlter language. They start Examples with basic packet ﬁlter concepts. Destination This ﬁlter operates on the destination address ﬁeld of a frame. It allows Address Filter packets to be forwarded that are destined for stations with an OUI of 08-00-02.
Page 240: Type Filter
A-10 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS Type Filter This ﬁlter operates on the type ﬁeld of a frame. It allows packets to be forwarded that are IP frames. To customize this ﬁlter to another type value, change the literal value loaded in the instruction.
Page 241: Source Address And Type Filter
Packet Filter Examples A-11 Source Address and This ﬁlter operates on the source address and type ﬁelds of a frame. It Type Filter allows XNS packets to be forwarded that are from stations with an OUI of 08-00-02. To customize this ﬁlter to another OUI value, change the literal value loaded in the last instruction.
Page 242: Address Group Filter
A-12 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS Address Group This ﬁlter accepts only frames whose source and destination address are in Filter the same group. name “Forward Same Source and Destination” pushSAGM # Get source address group mask pushDAGM # Get destination addr.
Page 243: Common Syntax Errors
Common Syntax Errors A-13 Common Syntax When a packet ﬁlter deﬁnition is loaded, the deﬁnition is checked for syntax Errors errors. The syntax errors and their causes are listed in Table A-1. Table A-1 Syntax Errors When Loading Packet Filters Syntax Error Description An opcode was expected on the line and was not found.
Page 244 A-14 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS Table A-1 Syntax Errors When Loading Packet Filters (continued) Syntax Error Description The number specified as an offset or literal is improperly Invalid characters in formatted. Possible causes are 1) lack of white space setting number off the number, and 2) invalid characters in the number.
Page 245: On-Line Technical Services
3Com provides easy access to technical support information through a variety of services. This appendix describes these services. On-line Technical 3Com offers worldwide product support seven days a week, 24 hours a day, Services through the following on-line systems: 3Com Bulletin Board Service (3ComBBS) World Wide Web site 3ComForum on CompuServe®...
Page 246: Access By Isdn
56 Kbps. To access 3ComBBS using ISDN, dial the following number: (408) 654-2703 World Wide Web Site Access the latest networking information on 3Com’s World Wide Web site by entering our URL into your Internet browser: http://www.3Com.com/ This service features news and information about 3Com products, customer service and support, 3Com’s latest news releases, selected articles from...
Page 247: Comfacts Automated Fax Service
Support from If additional assistance is required, contact your network supplier. Many Your Network suppliers are authorized 3Com service partners who are qualiﬁed to provide Supplier a variety of services, including network planning, installation, hardware maintenance, application training, and support services.
Page 248: Support From 3Com
3Com support contracts are available from 3Com. In the U.S. and Canada, call (800) 876-3266 for customer service. If you are outside the U.S. and Canada, contact your local 3Com sales ofﬁce to ﬁnd your authorized service provider: Country Telephone Number...
Page 249 NDEX values 12-8 Numerics addressThresholdEvent 12-8 administer access example 2-2 3Com Bulletin Board Service (3ComBBS) B-1 Administration Console 3Com sales ofﬁces B-4 command strings, using 2-9 3ComFacts B-3 Control keys, enabling 1-3, 2-12 802.1d bridging exiting 2-17 enabling mode 1-7, 12-4...
Page 250 NDEX ASCII-based editor path cost, setting 13-9 and scripts 2-14 port priority, setting 13-10 for packet ﬁlters 14-18 states deﬁned 13-5 static address conﬁguration 1-8 statistics, displaying 13-1 to 13-3 broadcast address 3-6 bulletin board service B-1 backplane paths mode assigning MACs to stations 9-25 assigning ports to stations 9-32 changing to multi-station 9-2...
Page 251 NDEX destination port group mask (DPGM) 15-1 FDDI direct, route status 3-10 about conﬁguring resources 9-1 documentation backplane paths mode 9-1, 9-2, 9-3 for the LANplex system 4 conﬁgurations 1-5, 1-6, ?? to 1-7 dual homing conﬁguration 9-34 copying software to 5-3 fragmenting packets 12-6 software media 5-1 MAC conﬁgurations 1-6...
Page 252 NDEX ﬂash memory 5-1 Internet Control Message Protocol. See ICMP ﬂushing Internet Protocol. See IP ARP cache 3-15 learned routes 3-12 address translation 3-14 MAC addresses 13-14 ARP cache 3-14 SNMP trap addresses 3-27 interface 3-5 forward delay 12-12 management access 3-2 forwarding state 13-5 menus 2-7 FrameErrorThreshold...
Page 253 NDEX NV data restoration 7-3 and port labels 8-7, 9-32, 10-8 power supply warning 4-2 conﬁguring system access 3-1 to 3-16 rebooting 4-5 FDDI 1-5, 9-1 resetting to system defaults 1-3, 7-7 in-band 3-2 software installation 1-2 IP interface 1-4, 3-2, 3-5 system backup 7-2 out-of-band 3-2 system conﬁguration, displaying 4-1...
Page 254 NDEX deﬁned 9-2 packet Ethernet type 14-6 FDDI type 14-6 name opcode A-1 ﬁelds for operands 14-7 naming the LANplex 1-3, 4-4 packet ﬁlter ne opcode A-5 address group example 15-1 neighbor notiﬁcation assigning to ports 14-23 and LLC Service 9-25 basic elements 14-6 network monitoring.
Page 255 NDEX syntax errors A-13, A-14 unassigning from ports 14-24 See also address group and port group read access example 2-3 password reboot conﬁguring 1-2, 4-2 enabling CTL-X 1-3, 2-12 initial system access 2-2 resetting the system 4-5 levels of user access 2-1 reboot system 2-13 path cost receive all...
Page 256 NDEX conﬁguring 1-7 displaying conﬁgurations 3-18, 3-20 deﬁned 11-1 management modes 1-5 menu 2-8 menus 2-8 process overview 11-1 mode removing analyzer port 11-5 conﬁguration guidelines 3-19 starting port monitoring 11-6 description 3-18 stopping port monitoring 11-7 setting 3-21 See also analyzer proxying remote SMT events 3-28 trap reporting and SMT event proxying 3-27...
Page 257 NDEX source port group mask (SPGM) 15-1 and rebooting the system 4-5 Spanning Tree Protocol. See STP disconnection reason 2-12 management access 3-2 and FDDI stations 9-6, 9-10 temperature, warning 4-2 and lerAlarm 9-30 terminal emulation stack 14-5 and the serial port 3-1 static, route status 3-10 terminal serial port station...
Page 258 NDEX tvxLowerBound deﬁned 9-13 setting 9-13 UNIX and terminal emulation with LANplex 3-1 copying software to 5-2 software media 5-1 vi 2-14, 14-18 warning messages for system 4-2 wrapped ring 9-11 write access example 2-2 in packet ﬁlter 14-12, 14-14 packet ﬁlter A-11 xor opcode A-7...

3Com LANPLEX 6000 User Manual

Quick Links

Related Manuals for 3Com LANPLEX 6000

Summary of Contents for 3Com LANPLEX 6000