1. Manuals
  2. Brands
  3. SMC Networks Manuals
  4. Switch
  5. SMC7724M
  6. Management manual

SMC Networks SMC7724M Management Manual

Extended ethernet system
Hide thumbs Also See for SMC7724M:
Table of Contents

Advertisement

Quick Links

See also: Installation Manual
TigerAccess
Extended Ethernet System
Extended Ethernet System
◆ High-speed Internet access over existing phone lines
◆ Supports 24 Extended Ethernet lines
◆ Optional 1000BASE-X modules
◆ Concurrent data and telephone services (voice/ISDN)
over a single connection
◆ Supports evolving ETSI, ANSI, and ITU
standards for the copper local loop
◆ Spanning Tree Protocol
◆ Supports port trunks
◆ QoS support for four-level priority
◆ Full support for VLANs with GVRP
◆ IGMP multicast filtering and snooping
◆ Manageable via console, RMON

Management Guide

SMC7724M/VSW

Advertisement

Table of Contents
loading

Related Manuals for SMC Networks SMC7724M

Summary of Contents for SMC Networks SMC7724M

  • Page 1: Management Guide

    ◆ Spanning Tree Protocol ◆ Supports port trunks ◆ QoS support for four-level priority ◆ Full support for VLANs with GVRP ◆ IGMP multicast filtering and snooping ◆ Manageable via console, RMON Management Guide SMC7724M/VSW...
  • Page 3 TigerAccess Extended Ethernet System Management Guide From SMC’s Tiger line of feature-rich workgroup LAN solutions 38 Tesla Irvine, CA 92618 December 2002 Pub. # 150200022300A Phone: (949) 679-8000...
  • Page 4 Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC.

  • Page 5: Table Of Contents

    Connecting to the Switch ........
  • Page 6 Displaying Bridge Extension Capabilities ....2-22 Displaying Switch Hardware/Software Versions ... 2-24 Port Configuration ......... 2-26 Displaying Connection Status .
  • Page 7 Mapping Layer 3/4 Priorities to CoS Values ....2-69 Mapping IP Precedence ....... 2-70 Mapping DSCP Priority .
  • Page 8 ONTENTS Command Line Processing ......3-9 Command Groups ......... 3-10 General Commands .
  • Page 9 show radius-server ........3-43 SNMP Commands ......... 3-44 snmp-server community .
  • Page 10 ONTENTS Address Table Commands ........3-79 bridge address .
  • Page 11 ip igmp snooping ........3-115 ip igmp snooping vlan static ......3-115 ip igmp snooping version .
  • Page 12 ONTENTS efm reset ......... . 3-151 efm shutdown .

  • Page 13: Switch Management

    A PC may also be connected directly to the switch for configuration and monitoring via a command line interface (CLI). Note: The IP address for the switch is assigned via DHCP by default. To change this address, see “Setting an IP Address” on page 1-7.
  • Page 14 Enable GVRP automatic VLAN registration • Configure IGMP multicast filtering • TFTP upload and download of system firmware • TFTP upload and download of switch configuration files • Configure Spanning Tree parameters • Configure Class of Service (CoS) priority queuing •...

  • Page 15: Required Connections

    Required Connections The switch provides an RS-232 serial port that enables a connection to a PC or terminal for monitoring and configuring the switch. A null-modem console cable is provided with the switch. Attach a VT100-compatible terminal, or a PC running a terminal emulation program to the switch.

  • Page 16: Remote Connections

    CLI, refer to “Command Groups” on page 3-10. Remote Connections Prior to accessing the switch’s onboard agent via a network connection, you must first configure it with a valid IP address, subnet mask, and default gateway using a console connection, DHCP or BOOTP protocol.

  • Page 17: Basic Configuration

    CLI at the Privileged Exec level. Access to both CLI levels are controlled by user names and passwords. The switch has a default username and password for each level. To log into the CLI at the Privileged Exec level using the default user name and password, perform these steps: 1.

  • Page 18: Setting Passwords

    “username” command, record them and put them in a safe place. Passwords can consist of up to 8 alphanumeric characters and are case sensitive. To prevent unauthorized access to the switch, set the passwords as follows: 1. Open the console interface with the default user name and password “admin”...

  • Page 19: Setting An Ip Address

    VLAN. Manual Configuration You can manually assign an IP address to the switch. You may also need to specify a default gateway that resides between this device and management stations that exist on another network segment. Valid IP addresses consist of four decimal numbers, 0 to 255, separated by periods.
  • Page 20 WITCH ANAGEMENT Before you can assign an IP address to the switch, you must obtain the following information from your network administrator: • IP address for the switch • Default gateway for the network • Network mask for this network To assign an IP address to the switch, complete the following steps: 1.

  • Page 21: Dynamic Configuration

    If the “bootp” or “dhcp” option is saved to the startup-config file, then the switch will start broadcasting service requests as soon as it is powered To automatically configure the switch by communicating with BOOTP or...

  • Page 22: Enabling Snmp Management Access

    The switch can be configured to accept management commands from Simple Network Management Protocol (SNMP) applications such as SMC’s EliteView. You can configure the switch to (1) respond to SNMP requests or (2) generate SNMP traps. When SNMP management stations send requests to the switch (either to return information or to set a parameter), the switch provides the requested data or sets the specified parameter.

  • Page 23: Trap Receivers

    If there are no community strings, then SNMP management access to the switch is disabled. To prevent unauthorized access to the switch via SNMP, it is recommended that you change the default community strings. To configure a community string, complete the following steps: 1.

  • Page 24: Saving Configuration Settings

    WITCH ANAGEMENT 2. In order to configure the switch to send SNMP notifications, you must enter at least one snmp-server enable traps command. Type “snmp-server enable traps type,” where “type” is either authentication or link-up-down. Press <Enter>. Console(config)#snmp-server enable traps link-up-down...

  • Page 25: System Defaults

    Due to the size limit of the flash memory, the switch supports only two operation code files, and two diagnostic code files. However, you can have as many configuration files as available flash memory space allows.
  • Page 26 WITCH ANAGEMENT The following table lists some of the basic system defaults. Function IP Settings Web Management SNMP Security Console Port Connection 1-14 Parameter Management. VLAN DHCP BOOTP User Specified IP Address Subnet Mask Default Gateway HTTP Server HTTP Port Number Community Strings Authentication Failure Traps...
  • Page 27 Function Parameter Port Status Admin Status Auto-negotiation Flow Control 10/100 Mbps Port Capability 10/100/1000 Mbps Port Capability Link Aggregation Static Trunks LACP (all ports) Spanning Tree Status Protocol Fast Forwarding Address Table Aging Time Virtual LANs Default VLAN PVID Acceptable Frame Type Ingress Filtering GVRP (global) GVRP (port interface)
  • Page 28 WITCH ANAGEMENT Function Class of Service Multicast Filtering Broadcast Storm Protection System Log Rate Limit VDSL 1-16 Parameter Ingress Port Priority Weighted Round Robin IP Precedence Priority IP DSCP Priority IP Port Priority IGMP Snooping Act as Querier Status Broadcast Limit Rate Status Messages Logged Messages Logged to Flash Levels 0-3...

  • Page 29: Configuring The Switch

    CLI, refer to Chapter 3, “Command Line Interface” Prior to accessing the switch from a Web browser, be sure you have first performed the following tasks: 1. Configure the switch with a valid IP address, subnet mask, and default gateway using an out-of-band serial connection, BOOTP, or DHCP protocol.
  • Page 30 ONFIGURING THE WITCH 3. If the path between your management station and this switch does not pass through any device that uses the Spanning Tree Algorithm, then you can set the switch port attached to your management station to fast forwarding to improve the switch’s response time to management commands issued through the Web Interface (see “Managing Interface...

  • Page 31: Navigating The Web Browser Interface

    “admin.” Home Page When your Web browser connects with the switch’s Web agent, the home page is displayed as shown below. The home page displays the Main Menu on the left side of the screen and System Information on the right side.

  • Page 32: Configuration Options

    ONFIGURING THE WITCH Configuration Options Configurable parameters have a dialog box or a drop-down list. Once a configuration change has been made on a page, be sure to click on the “Apply” or “Apply Changes” button to confirm the new setting. The following table summarizes the Web page configuration buttons.

  • Page 33: Panel Display

    Panel Display The Web agent displays an image of the switch’s ports, indicating whether each link is up or down. Clicking on the image of a port opens the Port Configuration page as described on page 2-22. Main Menu Using the onboard Web agent, you can define system parameters, manage and control the switch, or monitor network conditions.
  • Page 34 Configures individual port settings for STA Configures individual trunk settings for STA Displays basic information on the VLAN type supported by this switch Shows the current port members of each VLAN and whether or not the port supports VLAN tagging...
  • Page 35 Menu VLAN Port Configuration VLAN Trunk Configuration Private VLAN Private VLAN Status Private VLAN Link Configuration Priority Default Port Priority Default Trunk Priority Traffic Classes Queue Scheduling IP Precedence/DSCP Priority Status IP Precedence Priority IP DSCP Priority IP Port Priority Status IP Port Priority Copy Settings Trunk...
  • Page 36 Sets the rate limit for each port Sets the rate limit for each trunk Batch assigns profiles for speed and distance range to all the VDSL ports on the switch For individual VDSL ports: Enables or disables the port Enables or disables Remote Digital...

  • Page 37: Basic Configuration

    Fields and Attributes • System Name – Name assigned to the switch system. • Object ID – MIB II object ID for switch’s network management subsystem. • Location – Specifies the system location. • Contact – Administrator responsible for the system.

  • Page 38: Web Interface

    Specify the hostname, location and contact information. Console(config)#hostname SMC7724M/VSW Console(config)#snmp-server location R&D 3F Console(config)#snmp-server contact Geoff Console#show system System description: SMC7724M/VSW Manager System OID string: 1.3.6.1.4.1.259.6.13.1 System information System Up time: 0 days, 3 hours, 30 minutes, and 9.74 seconds System Name...

  • Page 39: Setting The Ip Address

    By default, the switch uses DHCP to assign IP settings to VLAN 1 on the switch. If you wish to manually configure IP settings, you need to set the IP address and netmask to values that are compatible with your network.

  • Page 40: Manual Configuration

    Gateway IP Address – IP address of the gateway router between this device and management stations that exist on other network segments. • MAC Address – The MAC address of this switch. Manual Configuration Web Interface Click System/IP. Specify the management interface, IP address, and default gateway, then click “Apply.”...
  • Page 41 IP configuration settings on the next power reset. Otherwise, click “Restart DHCP” to immediately request a new address. Note: If you lose your web management connection, use a console connection and enter “show ip interface” to determine the new switch address.

  • Page 42: Renewing Dchp

    Renewing DCHP DHCP may lease addresses to clients indefinitely or for a specific period of time. If the address expires or the switch is moved to another network segment, you will lose management access to the switch. In this case, reboot the switch or submit a client request to restart DHCP service.

  • Page 43: Configuring Radius Logon Authentication

    Server IP Address – the IP address of the RADIUS server. • Server Port Number – the UDP port number used by the RADIUS server. • Secret Text String – the text string that is shared between the switch and the RADIUS server. ASIC ONFIGURATION 3-28...

  • Page 44: Managing Firmware

    You can upload/download firmware to/from a TFTP server. By saving runtime code to a file on a TFTP server, that file can later be downloaded to the switch to restore operation. You can also set the switch to use new firmware without overwriting the previous version.

  • Page 45: Downloading System Software From A Server

    Web Interface Click System/Firmware. Enter the IP address of the TFTP server, enter the file name of the software to download, select a file on the switch to overwrite or specify a new file name, then click “Transfer from Server.”...

  • Page 46: Saving Or Restoring Configuration Settings

    To start the new firmware, enter the “reload” command or reboot the system. Saving or Restoring Configuration Settings You can upload/download configuration settings to/from a TFTP server. The configuration file can be later downloaded to restore the switch’s settings. Command Usage •...
  • Page 47 Web Interface Click System/Configuration. Enter the IP address of the TFTP server, enter the name of the file to download, select a file on the switch to overwrite or specify a new file name, and click “Transfer from Server.” Command Line Interface Enter the IP address of the TFTP server, specify the source file on the server, set the startup file name on the switch, and then restart the switch.

  • Page 48: Setting The Startup Configuration File

    To use the new settings, reboot the system. Command Line Interface Enter the IP address of the TFTP server, specify the source file on the server, set the startup file name on the switch, and then restart the switch. Console#copy tftp startup-config TFTP server ip address: 10.1.0.15...

  • Page 49: Copying The Running Configuration To A File

    Copying the Running Configuration to a File Web Interface You can save the running configuration to a file. Just enter the file name and click “Copy to File.” Command Line Interface If you copy the running configuration to a file, you can set this file as the startup file at a later time.

  • Page 50: Reset

    GMRP (GARP Multicast Registration Protocol.) • Traffic Classes – This switch provides mapping of user priorities to multiple traffic classes. (Refer to “This example sets the STP attributes for port 5.” on page 2-44.) •...
  • Page 51 Port VLAN ID (PVID used in frame tags) and egress status (VLAN-Tagged or Untagged) on each port. (Refer to “VLAN Configuration” on page 2-45.”) • Local VLAN Capable – This switch does not support multiple local bridges (i.e., multiple Spanning Trees.) • GMRP – GARP Multicast Registration Protocol (GMRP) allows network devices to register endstations with multicast groups.

  • Page 52: Displaying Switch Hardware/Software Versions

    Loader Version – Version number of loader code. • Boot-ROM Version – Version number of boot code. • Operation Code Version – Version number of runtime code. • Role – Shows that this switch is Master (i.e., operating stand-alone.) 2-24 3-113...
  • Page 53 Web Interface Click System/Switch Information. Command Line Interface Use the following command to display version information. Console#show version Unit1 Serial number Service tag Hardware version Module A type Module B type Number of ports Main power status Redundant power status :not present...

  • Page 54: Port Configuration

    ONFIGURING THE WITCH Port Configuration Displaying Connection Status You can use the Port Information or Trunk Information pages to display the current connection status, including link state, speed/duplex mode, flow control, and auto-negotiation. Fields and Attributes • Name – Interface label. •...
  • Page 55 Web Interface Click Port/Port Information or Trunk Information. Modify the required interface settings and click “Apply.” Command Line Interface This example shows the connection status for Port 13. Console#show interfaces status ethernet 1/13 Information of Eth 1/13 Basic information: Port type: 100TX-EFM Mac address: 00-30-f1-4d-1e-8c Configuration: Name:...

  • Page 56: Configuring Interface Connections

    Flow Control – Allows automatic or manual selection of flow control. • Flow control can eliminate frame loss by “blocking” traffic from end stations or segments connected directly to the switch when its buffers fill. When enabled, back pressure is used for half-duplex operation and IEEE 802.3x for full-duplex operation.
  • Page 57 • Sym - Transmits and receives pause frames for flow control. • FC - Supports flow control. • Trunk – Indicates if a port is a member of a trunk. Creates trunks and selects port members (see “Port Trunk Configuration” on page 2-78.) Note: Autonegotiation must be disabled before you can configure or force the interface to use the Speed/Duplex Mode or Flow Control options.

  • Page 58: Setting Broadcast Storm Thresholds

    ONFIGURING THE WITCH Command Line Interface Select the interface, and then enter the required settings. Console(config)#interface ethernet 1/13 Console(config-if)#description RD SW#13 Console(config-if)#shutdown Console(config-if)#no shutdown Console(config-if)#no negotiation Console(config-if)#speed-duplex 100half Console(config-if)#flowcontrol Console(config-if)#negotiation Console(config-if)#capabilities 100half Console(config-if)#capabilities 100full Console(config-if)#capabilities flowcontrol Setting Broadcast Storm Thresholds Broadcast storms may occur when a device on your network is malfunctioning, or if application programs are not well designed or properly configured.

  • Page 59: Configuring Port Mirroring

    Command Line Interface Specify an interface, and then enter the threshold. This threshold will then be set for all ports. The following sets broadcast suppression at 1000 packets per second. Use the no switchport broadcast command to disable broadcast storm control. Console(config)#interface ethernet 1/1 Console(config-if)#switchport broadcast packet-rate 1000 Console(config-if)#...

  • Page 60: Configuring Port Security

    Command Usage • When port security is enabled, the selected port will stop learning MAC addresses. This prevents unauthorized access to the switch. The MAC addresses already in the address table will be retained and will not age out. •...

  • Page 61: Address Table Settings

    Console(config-if)#port security Console(config-if)# Address Table Settings The switch stores the addresses of known devices. This information is used to route traffic directly between the inbound and outbound ports. The addresses learned by monitoring traffic are stored in the dynamic address table. You may also manually configure static addresses that are bound to a specific port.
  • Page 62 ONFIGURING THE WITCH For example, the following screen shows the dynamic addresses for port 11. Command Line Interface This example also displays the address table entries for port 11. Console#show bridge 1 ethernet 1/11 Interface Mac Address --------- ----------------- ---- ----------------- Eth 1/11 00-10-b5-62-03-74 Console# 2-34...

  • Page 63: Setting Static Addresses

    Setting Static Addresses A static address can be assigned to a specific interface on this switch. Traffic sent from devices listed in the static address table will only be accepted on the specified interface. If any packets with a source address listed in this table enter another interface, they will be dropped.

  • Page 64: Changing The Aging Time

    ONFIGURING THE WITCH Changing the Aging Time You can set the aging time for entries in the dynamic address table. Command Usage The range for aging time: 10 - 1000000 seconds. (The default is 300 seconds.) Web Interface Click Address Table/Address Aging. Specify the new aging time, then click “Apply.”...

  • Page 65: Spanning Tree Protocol Configuration

    Spanning Tree that this switch has accepted as the root device. • Root Port – The number of the port on this switch that is closest to the root. This switch communicates with the root device through this port. If there is no root port, then this switch has been accepted as the root device of the Spanning Tree network.
  • Page 66 ONFIGURING THE WITCH • Priority – Bridge priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device. However, if all devices have the same priority, the device with the lowest MAC address will then become the root device.

  • Page 67: Displaying The Current Global Settings For Sta

    Displaying the current global settings for STA Web Interface Click Spanning Tree/STA Information. Command Line Interface This command displays global STA settings, followed by the settings for each port. Console#show bridge group 1 3-81 Bridge-group information ----------------------------------------------------------- Spanning tree protocol Spanning tree enable/disable Priority Hello Time (sec.)

  • Page 68: Configuring The Global Settings For Sta

    ONFIGURING THE WITCH Configuring the global settings for STA Web Interface Click STA/STA Configuration. Modify the required attributes then click “Apply.” Command Line Interface This example enables Spanning Tree Protocol, and then sets the indicated attributes. Console(config)#bridge 1 spanning-tree Console(config)#bridge 1 priority 40000 Console(config)#bridge 1 hello-time 5 Console(config)#bridge 1 max-age 40 Console(config)#bridge 1 forward-time 20...

  • Page 69: Managing Interface Settings

    Priority – Defines the priority used for this port in the Spanning Tree Protocol. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the Spanning Tree.
  • Page 70 ONFIGURING THE WITCH • Path Cost – This parameter is used by the STA to determine the best path between devices. Therefore, lower values should be assigned to ports attached to faster media, and higher values assigned to ports with slower media.
  • Page 71 Command Line Interface This example shows the STA attributes for port 5. Console#show bridge group 1 ethernet 1/5 Bridge-group information -------------------------------------------------------------- Spanning tree protocol Spanning tree enable/disable Priority Hello Time (sec.) Max Age (sec.) Forward Delay (sec.) Designated Root Current root port Current root cost Number of topology changes Last topology changes time (sec.):8094...
  • Page 72 ONFIGURING THE WITCH Web Interface Click STA/STA Port Configuration or STA Trunk Configuration. Modify the required attributes, then click “Apply.” Command Line Interface This example sets the STP attributes for port 5. Console(config)#interface ethernet 1/5 Console(config-if)#bridge-group 1 priority 0 Console(config-if)#bridge-group 1 path-cost 50 Console(config-if)#bridge-group 1 portfast Console(config-if)# 2-44...

  • Page 73: Vlan Configuration

    VLAN Configuration In conventional networks with routers, broadcast traffic is split up into separate domains. Switches do not inherently support broadcast domains. This can lead to broadcast storms in large networks that handle traffic such as IPX or NetBeui. By using IEEE 802.1Q-compliant VLANs, you can organize any group of network nodes into separate broadcast domains, thus confining broadcast traffic to the originating group.

  • Page 74: Assigning Ports To Vlans

    VLAN Classification – When the switch receives a frame, it classifies the frame in one of two ways. If the frame is untagged, the switch assigns the frame to an associated VLAN (based on the PVID of the receiving port. If the frame is tagged, the switch uses the tagged VLAN ID to identify the port broadcast domain of the frame.

  • Page 75: Forwarding Tagged/Untagged Frames

    VLAN C ONFIGURATION groups it wants to join. When this switch receives these messages, it will automatically place the receiving port in the specified VLANs and forward the message to all other ports. When the message arrives at another switch that supports GVRP, it will also place the receiving port in the specified VLANs and pass the message on to all other ports.

  • Page 76: Enabling Or Disabling Gvrp (Global Setting)

    VLANs are dynamically configured based on join messages issued by host devices and propagated throughout the network. GVRP must be enabled to permit automatic VLAN registration, and to support VLANs which extend beyond the local switch. (Default: Enabled.) Web Interface Click System, Bridge Extension.

  • Page 77: Displaying Basic Vlan Information

    Displaying Basic VLAN Information Fields and Attributes • VLAN Version Number – The VLAN version used by this switch as specified in the IEEE 802.1Q standard. (Web Interface only.) • Maximum VLAN ID – Maximum VLAN ID recognized by this switch.

  • Page 78: Displaying Current Vlans

    • Up Time at Creation – Time this VLAN was created; i.e., System Up Time. • Status – Shows how this VLAN was added to the switch. • Dynamic GVRP: Automatically learned via GVRP. • Permanent: Added as a static entry.
  • Page 79 Command Line Interface Fields and Attributes • VLAN – ID of configured VLAN (1-4094, no leading zeroes.) • Type – Shows how this VLAN was added to the switch. • Dynamic: Automatically learned via GVRP. • Static: Added as a static entry.

  • Page 80: Creating Vlans

    WITCH Creating VLANs Use the VLAN Static List to create or remove VLAN groups. To propagate information about VLAN groups used on this switch to external network devices, you must specify a VLAN ID for each of these groups. Fields and Attributes •...

  • Page 81: Adding Interfaces Based On Membership Type

    Adding Interfaces Based on Membership Type Fields and Attributes • Port – Port identifier. • Trunk – Trunk identifier. • VLAN – ID of configured VLAN (1-4094, no leading zeroes.) • Name – Name of the VLAN (1 to 32 characters.) •...
  • Page 82 ONFIGURING THE WITCH Web Interface Click VLAN/VLAN Static Table. Select a VLAN ID from the scroll-down list. Modify the VLAN name and status if required. Select the membership type by marking the appropriate radio button in the list of ports or trunks. Click “Apply.”...

  • Page 83: Adding Interfaces Based On Static Membership

    Adding Interfaces Based on Static Membership Fields and Attributes • Interface – Port or trunk identifier. • Member – VLANs for which the selected interface is a tagged member. • Non-Member – VLANs for which the selected interface is not a tagged member.

  • Page 84: Configuring Vlan Behavior For Interfaces

    • Acceptable Frame Type – Sets the interface to accept all frame types or only tagged frames. If only tagged frames are accepted, the switch will only accept frames if the frame tag matches a VLAN to which this interface has been assigned. (Default: All.) •...
  • Page 85 • GVRP Status – Enables/disables GVRP for the interface. GVRP must be globally enabled for the switch before this setting can take effect. (See “Displaying Bridge Extension Capabilities” on page 2-22) When disabled, any GVRP packets received on this port will be discarded and no GVRP registrations will be propagated from other ports.
  • Page 86 ONFIGURING THE WITCH • Mode – Indicates VLAN membership mode for a port. (Configure via CLI, see page 3-99.) • Trunk – Specifies a port as an end-point for a VLAN trunk. A trunk is a direct link between two switches, so the port transmits and receives tagged frames that identify the source VLAN.

  • Page 87: Configuring Private Vlans

    Private VLANs and normal VLANs can exist simultaneously within the same switch. Both individual ports and port trunks can be configured as downlink or uplink interfaces. Enabling Private VLANs Use the Private VLAN Status page to enable/disable the Private VLAN function.
  • Page 88 ONFIGURING THE WITCH Downlink ports and uplink ports can only be configured in certain groups. <<1-8>> <<9-16>> <<17-24>> <<25>> <<26>> For example, on the Web screen shown on the following page, only trunk 1 displays as a downlink interface. However, since ports 9 and 17 are members of trunk 1, ports 9-24 would all be configured as downlink ports.
  • Page 89 VLAN REATING Click Private VLAN/ Private VLAN Link Configuration, then select Uplink or Downlink to configure the ports as uplink or downlink ports. 2-61...
  • Page 90 ONFIGURING THE WITCH Command Line Interface This example shows trunk 1 being configured as a downlink interface. However, since ports 9 and 17 are members of trunk 1, ports 9-24 would all become downlink ports. Console(config)#pvlan Console(config)#pvlan up-link ethernet 1/25 down-link port-channel 1 Console(config)#end Console#show pvlan Private VLAN status: Enabled...

  • Page 91: Class Of Service Configuration

    Setting the Default Priority for Interfaces You can specify the default port priority for each interface on the switch. All untagged packets entering the switch are tagged with the specified default port priority, and then sorted into the appropriate priority queue at the output port.
  • Page 92 ONFIGURING THE WITCH Web Interface Click Priority/Trunk Priority or Port Priority. Modify the default priority for any interface, then click “Apply.” Command Line Interface This example assigns a default priority of 5 to port 3. Console(config)#interface ethernet 1/3 Console(config-if)#switchport priority default 5 2-64 3-69 3-125...

  • Page 93: Mapping Priority Classes To Egress Queues

    The priority levels recommended in the IEEE 802.1p standard for various network applications are shown in the following table. However, you can map the priority levels to the switch’s output queues in any way that benefits application traffic for your own network.
  • Page 94 Priority – CoS value. (Range: 0 to 7, where 7 is the highest priority.) • Traffic Class – Output queue buffer. (Range: 0 - 3, where 3 is the highest priority queue.) Web Interface Click Priority/Traffic Class. Assign CoS priorities to the switch’s four traffic class queues then click “Apply.” 2-66...

  • Page 95: Queue Scheduling

    The following example shows how to map CoS values 1 and 2 to switch output queue 0, CoS values 0 and 3 to switch output queue 1, CoS values 4 and 5 to switch output queue 2, and CoS values 6 and 7 to switch output queue 3.
  • Page 96 ONFIGURING THE WITCH Web Interface Click Priority/Queue Scheduling. Note: To change a table setting, select the entry in the WRR Setting Table and type the new weight in the Weight Value box, then click “Apply.” To reset the fields to their current value, click “Refresh.” Command Line Interface The following example shows how to assign weights of 10, 20, 30, and 40 to the CoS priority queues 1, 2, 3 and 4.

  • Page 97: Mapping Layer 3/4 Priorities To Cos Values

    Because different priority information may be contained in the traffic, this switch maps priority values to the output queues in the following manner: • The precedence for priority mapping is IP Port Priority, IP Precedence or DSCP Priority, and then Default Port Priority.

  • Page 98: Mapping Ip Precedence

    ONFIGURING THE WITCH Mapping IP Precedence The Type of Service (ToS) octet in the IPv4 header includes three precedence bits defining eight priority levels ranging from highest priority for network control packets to lowest priority for routine traffic. Bits 6 and 7 are used for network control, and the other bits for various application types.
  • Page 99 Class of Service Value field, and then click “Apply.” Note that the mapping of IP Precedence values to CoS values for any single port then applies to all ports on the switch. 2-71...
  • Page 100 ONFIGURING THE WITCH Command Line Interface The following example globally enables IP Precedence service on the switch, maps IP Precedence value 1 to CoS value 0, and then displays all the IP Precedence settings. Console(config)#map ip precedence Console(config)#interface ethernet 1/5...

  • Page 101: Mapping Dscp Priority

    Mapping DSCP Priority The DSCP is six bits wide, allowing coding for up to 64 different forwarding behaviors. The DSCP replaces the ToS bits, and it retains backward compatibility with the three precedence bits so that non-DSCP compliant, ToS-enabled devices, will not conflict with the DSCP mapping. Based on network policies, different kinds of traffic can be marked for different kinds of forwarding.
  • Page 102 ONFIGURING THE WITCH Web Interface Click Priority/IP Precedence/DSCP Priority Status, and select IP DSCP. Click IP DSCP Priority from the Priority menu. Select a DSCP priority value from the DSCP Priority Table by clicking on it with your cursor, enter a value in the Class of Service Value field, and then click “Apply.” 2-74...

  • Page 103: Mapping Ip Port Priority

    Command Line Interface The following example globally enables DSCP Priority service on the switch, maps DSCP value 1 to CoS value 0 on port 5, and then displays all the DSCP Priority settings for that port. Console(config)#map ip dscp Console(config)#interface ethernet 1/5...
  • Page 104 ONFIGURING THE WITCH Web Interface Click Priority/IP Priority Status and then select Enabled. Click IP Port Priority from the Priority menu. Select the port or trunk. To add an IP port, type the port number in the IP Port box and the new CoS value in the Class of Service box, then click “Apply.”...

  • Page 105: Copy Priority Settings

    Copy Priority Settings Use the Copy Settings page to copy priority settings from a one port or trunk to another port or trunk. Fields and Attributes • Source Interface – The port or trunk from which the priority settings are copied. •...

  • Page 106: Port Trunk Configuration

    Aggregation Control Protocol.) LACP configured ports will automatically negotiate a trunked link with LACP-configured ports on another device. You can configure any number of the ports on the switch as LACP, as long as they are not already configured as part of another trunk. If ports on another device are also configured as LACP, the switch and the other device will negotiate a trunk link between them.
  • Page 107 The ports on both ends of a trunk must be configured the same for speed, duplex mode, and flow control. • If the target switch has also enabled LACP on the connected ports, the trunk will be activated. • If more than four ports attached to the same target switch have LACP enabled, the additional ports will be placed in standby mode, and will only be enabled if one of the active links fails.
  • Page 108 ONFIGURING THE WITCH Command Line Interface This example creates trunk 1 with ports 25 and 26. Just connect these ports to two static trunk ports on another switch to form a trunk. Console(config)#interface port-channel 1 Console(config-if)#exit Console(config)#interface ethernet 1/25 Console(config-if)#channel-group 1...

  • Page 109: Configuring Snmp

    Member Ports: Eth1/11, Eth1/12, Console# Configuring SNMP The switch includes an onboard agent that continuously monitors the status of its hardware, as well as the traffic passing through its ports, based on the Simple Network Management Protocol (SNMP.) A network management station can access this information using software such as AccView.

  • Page 110: Setting Community Access Strings

    ONFIGURING THE WITCH Setting Community Access Strings You may configure up to five community strings authorized for management access. For security reasons, you should consider removing the default strings. Fields and Attributes • Community String – A community string acts as a password and permits access to the SNMP protocol.

  • Page 111: Specifying Trap Managers

    Specifying Trap Managers You can specify up to five management stations that will receive authentication failure messages and other trap messages from the switch. Command Usage • Enable or disable authentication messages via the Web Interface. • Enable or disable authentication messages, link-up-down messages, or all notification types via the CLI.

  • Page 112: Multicast Configuration

    Configuring IGMP Parameters You can configure the switch to forward multicast traffic intelligently. Based on the IGMP query and report messages, the switch forwards traffic only to the ports that request multicast traffic. This prevents the switch from broadcasting the traffic to all ports and possibly disrupting network performance.
  • Page 113 This is also referred to as IGMP Snooping. (Default: Disabled.) • Act as IGMP Querier – When enabled, the switch can serve as the Querier, which is responsible for asking hosts if they want to receive multicast traffic. (Default: Disabled.) •...
  • Page 114 IGMP Report Delay – Sets the time (in seconds) between receiving an IGMP Report for an IP multicast address on a port before the switch sends an IGMP Query out of that port and removes the entry from its list. (Default: 10 seconds, Range: 5 - 30.) •...

  • Page 115: Interfaces Attached To A Multicast Router

    DVMRP, to support IP multicasting across the Internet. These routers may be dynamically discovered by the switch or statically assigned to an interface on the switch. Displaying Interfaces Attached to a Multicast Router Fields and Attributes •...
  • Page 116 IGMP querier. Therefore, if the IGMP querier is a known multicast router/switch connected over the network to an interface (port or trunk) on your switch, you can manually configure that interface to join all the current multicast groups. This ensures that multicast traffic is passed to all appropriate interfaces within the switch.
  • Page 117 Interface – Activates the Port or Trunk scroll-down list. • VLAN ID – Selects the VLAN to propagate all multicast traffic coming from the attached multicast router/switch. • Port or Trunk – Specifies the interface attached to a multicast router.

  • Page 118: Displaying Port Members Of Multicast Services

    Multicast Group Port List – Ports propagating a multicast service; i.e., ports that belong to the indicated VLAN group. Web Interface Click IGMP/IP Multicast Registration Table. Select the VLAN ID and multicast IP address. The switch will display all the ports that are propagating this multicast service. 2-90...

  • Page 119: Adding Multicast Addresses To Vlans

    IGMP Query messages as described in “Port Trunk Configuration” on page 2-78. For applications that require tighter control, you may need to statically configure a multicast service on the switch. First add all the ports attached to participating hosts to a common VLAN, and then assign the multicast service to that VLAN group.

  • Page 120: Showing Device Statistics

    RMON MIB. Interfaces and Ethernet-like statistics display errors on the traffic passing through each port. This information can be used to identify potential problems with the switch (such as a faulty port or unusually heavy loading.) RMON statistics provide access to a broad range...
  • Page 121 HOWING EVICE TATISTICS passing through each port. All values displayed have been accumulated since the last system reboot, and are shown as counts per second. Statistics are refreshed every 60 seconds by default. Note: RMON groups 2, 3 and 9 can only be accessed using SNMP management software.
  • Page 122 ONFIGURING THE WITCH Command Line Interface This example shows statistics for port 13. Console#show interfaces counters ethernet 1/13 Ethernet 1/13 Iftable stats: Octets input: 868453, Octets output: 3492122 Unicast input: 7315, Unitcast output: 6658 Discard input: 0, Discard output: 0 Error input: 0, Error output: 0 Unknown protos input: 0, QLen output: 0 Extended iftable stats:...

  • Page 123: Rate Limit Configuration

    Rate Limit Configuration This function allows the network manager to control the maximum rate for traffic transmitted or received on a port. Rate limiting is configured on ports at the edge of a network to limit traffic into or out of the network. Traffic that falls within the rate limit is transmitted, while packets that exceed the acceptable amount of traffic are dropped.
  • Page 124 ONFIGURING THE WITCH Web Interface Click Rate Limit/Rate Limit Status to enable/disable this feature globally. Then click Rate Limit Port Configuration or Rate Limit Trunk Configuration to configure the rate limit for individual ports or trunks. Command Line Interface Use the rate-limit input command in Global configuration mode to turn on rate limit.

  • Page 125: Vdsl Configuration

    The VDSL Intelligent Switch uses VDSL-based technology for this connection. VDSL Global Configuration Assigns the same profile to each VDSL switch port. Details of these profiles are given in the table below. Profile Name...
  • Page 126 Profile Type – “Public” profiles are those that meet specific standards e.g., ETSI or ANSI. “Private” profiles do not meet these standards. The ports on a VDSL switch can be assigned the same or different private profiles. If a public profile is configured on the switch and you...

  • Page 127: Vdsl Port Configuration

    You can enable/disable a selected port, enable/disable Remote Digital Loopback (RDL), set the value for EFM flow control (the maximum speed of transmission of data from a specific switch VDSL port to the CPE), and configure an EFM profile for the selected port.
  • Page 128 • RDL – Check this box to enable Remote Digital Loopback (RDL.) RDL tests the link between the switch and the CPE by sending out, and returning data through the CPE, over the VDSL link (see “efm-rdl” on page 3-152.) (Default: Disabled.) •...

  • Page 129: Configuring A User-Specified Efm Profile

    Command Line Interface The following examples show how these features are configured in the CLI. This example disables VDSL port 1. Console (config)#interface ethernet 1/1 Console(config-if)#efm shutdown 3-151 Console(config-if)# The following example shows how to enable/disable RDL on VDSL port 1. Console (config)#interface ethernet 1/1 Console(config-if)#efm rdl Console(config-if)#no efm rdl...
  • Page 130 ONFIGURING THE WITCH • Downstream Rate – The rate at which data is transmitted from the switch to the CPE. • Upstream Rate – The rate at which data is transmitted from the CPE to the switch. • Interleave Depth – The interleave depth is a parameter that determines the degree of protection of the data signal against impulse noise provided by interleaving.

  • Page 131: Vdsl Port Link Status

    • Link – Shows the status of the VDSL link. • Link Fail Count – The number of times the switch has tried to re-establish the link with the CPE since the link went down. • SNR (dB) – The signal-to-noise ratio of the switch.
  • Page 132 ONFIGURING THE WITCH Web Interface Click VDSL/VDSL Port Link Status. 2-104...
  • Page 133 Command Line Interface The following example displays VDSL link current values on VDSL switch port 2. Console#show controller efm Ethernet 1/2 actual dsrserrs Downstream Reed-Solomon errors: 0 Console#show controller efm Ethernet 1/2 actual link Link status: Down Console#show controller efm Ethernet 1/2 actual rxpower Local receive power: 26.00 dBm/Hz...

  • Page 134: Displaying Vdsl Port Ethernet Statistics

    ONFIGURING THE WITCH Displaying VDSL Port Ethernet Statistics VDSL Port Ethernet Statistics displays key statistics for an interface. Web Interface Click VDSL/VDSL Port Ethernet Statistics. 2-106...
  • Page 135 Command Line Interface Use the show interfaces counters command. Example Console#show interfaces counters ethernet 1/11 Ethernet 1/11 Iftable stats: Octets input: 19648, Octets output: 714944 Unitcast input: 0, Unitcast output: 0 Discard input: 0, Discard output: 0 Error input: 0, Error output: 0 Unknown protos input: 0, QLen output: 0 Extended iftable stats: Multi-cast input: 0, Multi-cast output: 10524...
  • Page 136 ONFIGURING THE WITCH 2-108...

  • Page 137: Command Line Interface

    Using the Command Line Interface Accessing the CLI When accessing the management interface for the switch over a direct connection to the server’s console port, or via a Telnet connection, the switch can be managed by entering command keywords and parameters at the prompt.

  • Page 138: Telnet Connection

    10.1.0.1, consists of a network portion (10.1.0) and a host portion (1.) To access the switch through a Telnet session, you must first set the IP address for the switch, and set the default gateway if you are managing the switch from a different IP subnet.

  • Page 139: Entering Commands

    After you configure the switch with an IP address, you can open a Telnet session by performing these steps. 1. From the remote host, enter the Telnet command and the IP address of the device you want to access. 2. At the prompt, enter the user name and system password. The CLI will display the “Vty-0#”...

  • Page 140: Minimum Abbreviation

    OMMAND NTERFACE You can enter commands as follows: • To enter a simple command, enter the command keyword. • To enter multiple commands, enter each command in the required order. For example, to enable Privileged Exec command mode and display the startup configuration, enter: Console>enable Console#show startup-config •...

  • Page 141: Showing Commands

    Information of system users Display information about terminal lines version System hardware and software status vlan Switch VLAN Virtual Interface Console#show The command “show interfaces ?” displays the following information: Console>show interfaces ? counters Information of interfaces counters status...

  • Page 142: Partial Keyword Lookup

    OMMAND NTERFACE Partial Keyword Lookup If you terminate a partial keyword with a question mark, alternatives that match the initial letters are provided. (Remember not to leave a space between the command and question mark.) For example “s?” shows all the keywords starting with “s.”...

  • Page 143: Understanding Command Modes

    * You must be in Privileged Exec mode to access any of the configuration modes. Exec Commands When you open a new console session on the switch with the user name “guest,” the system enters Normal Exec command mode (or guest mode.) Only a limited number of commands are available in this mode.

  • Page 144: Configuration Commands

    Configuration commands are privileged level commands used to modify switch settings. These commands modify the running configuration only and are not saved when the switch is rebooted. To store the running configuration in nonvolatile storage, use the copy running-config startup-config command.

  • Page 145: Command Line Processing

    “Console(config)#” which indicates you have privileged level access to Global Configuration commands. Console#configure Console(config)# To enter Interface, Line Configuration, or VLAN mode you must enter the “interface ...,” “line...” or “vlan database” command while in Global Configuration mode. The system prompt will change to “Console(config-if)#,”...

  • Page 146: Command Groups

    3-10 Description Basic commands for entering privileged access mode, restarting the system, or quitting the CLI Manages code image or switch configuration files Controls system logs, system passwords, user name, browser management options, and a variety of other system information...
  • Page 147 Link Aggregation Control Protocol for port trunks VDSL Configures and displays communication parameters for VDSL and Ethernet ports on the switch and connected CPEs Rate Limit Controls the maximum rate for traffic transmitted or received on a port...

  • Page 148: General Commands

    OMMAND NTERFACE General Commands Command enable disable configure reload exit quit help Note: The access mode shown in the table is indicated by these abbreviations: NE (Normal Exec), PE (Privileged Exec), GC (Global Configuration), IC (Interface Configuration), LC (Line Configuration), VC (VLAN Database Configuration.) 3-12 Function Activates privileged mode...

  • Page 149: Enable

    enable Use this command to activate Privileged Exec mode. In privileged mode, additional commands are available, and certain commands display additional information. See “Understanding Command Modes” on page 3-7. Syntax enable [level] level - Privilege level to log in to the device. The device has two predefined privilege levels: 0: Normal Exec, 15: Privileged Exec.

  • Page 150: Disable

    Use this command to return to Normal Exec mode from privileged mode. In normal access mode, you can only display basic information on the switch’s configuration or VDSL/Ethernet statistics. To gain access to all commands, you must use the privileged mode. See “Understanding Command Modes”...

  • Page 151: Configure

    Use this command to activate Global Configuration mode. You must enter this mode to modify any settings on the switch. You must also enter Global Configuration mode prior to enabling some of the other configuration modes, including Interface Configuration, Line Configuration, and VLAN Database Configuration.

  • Page 152: Reload

    OMMAND NTERFACE Example In this example, the show history command lists the contents of the command history buffer: Console#show history Execution command history: 2 config 1 show history Configuration command history: 4 interface vlan 1 3 exit 2 interface vlan 1 1 end Console# The ! command repeats commands from the Execution command history...

  • Page 153: End

    Example This example shows how to reset the switch: Console#reload System will be restarted, continue <y/n>? y Use this command to return to Privileged Exec mode. Default Setting None Command Mode Global Configuration, Interface Configuration, Line Configuration, VLAN Database Configuration...

  • Page 154: Quit

    OMMAND NTERFACE Example This example shows how to return to the Privileged Exec mode from the Global Configuration mode, and then quit the CLI session: Console(config)#exit Console#exit Press ENTER to start session User Access Verification Username: quit Use this command to exit the configuration program. Default Setting None Command Mode...

  • Page 155: Flash/File Commands

    Flash memory and a TFTP server. When you save the system code or configuration settings to a file on a TFTP server, that file can later be downloaded to the switch to restore system operation. The success of the file transfer depends on the accessibility of the TFTP server and the quality of the network connection.
  • Page 156 OMMAND NTERFACE Syntax copy file {file | running-config | startup-config | tftp} copy running-config {file | startup-config | tftp} copy startup-config {file | running-config | tftp} copy tftp {file | running-config | startup-config} • file - Keyword that allows you to copy to/from a file. •...
  • Page 157 Example The following example shows how to upload the configuration settings to a file on the TFTP server: Console#copy file tftp Choose file type: 1. config: 2. opcode: <1-2>: 1 Source file name: startup TFTP server ip address: 10.1.0.99 Destination file name: startup.01 Console# Example The following example shows how to copy the running configuration to a...

  • Page 158: Delete

    OMMAND NTERFACE delete Use this command to delete a file or image. Syntax delete filename filename - Name of the configuration file or image name. Default Setting None Command Mode Privileged Exec Command Usage • If the file type is boot-ROM or is used for system startup, then this file cannot be deleted.

  • Page 159: Dir

    Use this command to display a list of files in Flash memory. Syntax dir [boot-rom | config | opcode [:filename]] The type of file or image to display includes: • boot-rom - Boot ROM • config - Configuration file • opcode - Name of the file or image. If this file exists but contains errors, information on this file cannot be shown.

  • Page 160: Whichboot

    OMMAND NTERFACE Example The following example shows how to display all file information: Console#dir -------------------------------- -------------- ------- ----------- Factory_Default_Config.cfg ------------------------------------------------------------------- Console# whichboot Use this command to display which files booted at the last boot. Default Setting None Command Mode Privileged Exec Example This example shows the information displayed by the whichboot command.

  • Page 161: Boot System

    boot system Use this command to specify the file or image used to start up the system. Syntax boot system {boot-rom |config | opcode}: filename The type of file or image to set as a default includes: - boot-rom - Boot ROM - config - Configuration file - opcode - Run-time operation code The colon (:) is required.

  • Page 162: System Management Commands

    Sets a password to control access to the privileged mode from the normal mode Specifies the port to be used by the Web browser interface Allows the switch to be monitored or configured from a browser Controls logging of error messages Limits syslog messages sent to the...

  • Page 163: Hostname

    - The name of this host. (Maximum length: 255 characters) Default Setting None Command Mode Global Configuration Example Console(config)#hostname SMC7724M/VSW Console(config)# YSTEM Function Shows all active console and Telnet sessions, including user name, idle time, and IP address of Telnet client...

  • Page 164: Username

    OMMAND NTERFACE username Use this command to require user name authentication at login. Use the no form to remove a user name. Syntax username name {access-level level | nopassword |password {0 | 7} password} no username name • name - The name of the user. •...

  • Page 165: Enable Password

    Command Usage The encrypted password is required for compatibility with legacy password settings (i.e., plain text or encrypted), when reading the configuration file during system bootup or when downloading the configuration file from a TFTP server. There is no need to manually configure encrypted passwords.

  • Page 166: Ip Http Port

    OMMAND NTERFACE Command Usage The encrypted password is for machine use only. To create an encrypted password, you must use an appropriate encryption algorithm. Example Console(config)#enable password level 15 0 admin Console(config)# Related Commands enable ip http port Use this command to specify the TCP port number used by the Web browser interface.

  • Page 167: Ip Http Server

    ip http server Use this command to allow this device to be monitored or configured from a browser. Use the no form to disable this function. Syntax ip http server no ip http server Default Setting Enabled Command Mode Global Configuration Example Console(config)#ip http server Console(config)#...

  • Page 168: Logging History

    OMMAND NTERFACE Command Usage The logging process controls error messages to be sent to SNMP trap receivers. You can use the logging history command to control the type of error messages that are stored in memory and sent to a specified SNMP trap receiver.

  • Page 169: Clear Logging

    Level Argument notifications informational debugging Default Setting Flash: errors (level 3 - 0) RAM: warnings (level 7 - 0) Command Mode Global Configuration Command Usage Sending syslog messages to the SNMP network management station occurs when you enable syslog traps with the snmp enable traps command.

  • Page 170: Show Logging

    OMMAND NTERFACE Default Setting None Command Mode Privileged Exec Example Console#clear logging Console# Related Commands show logging show logging Use this command to display the logging configuration for system and event messages. Syntax show logging {flash | ram} • flash - Event history stored in flash memory (i.e., permanent memory.) •...

  • Page 171: Show Startup-Config

    show startup-config Use this command to display the configuration file stored in nonvolatile memory that is used to start up the system. Default Setting None Command Mode Privileged Exec Example Console#show startup-config building startup-config, please wait... snmp-server community private rw snmp-server community public ro username admin access-level 15 username admin password 7 21232f297a57a5a743894a0e4a801fc3...

  • Page 172: Show Running-Config

    Example Console#show running-config building running-config, please wait... hostname VDSL Switch-VS2524 snmp-server community private rw snmp-server community public ro username admin access-level 15 username admin password 7 21232f297a57a5a743894a0e4a801fc3...

  • Page 173: Show System

    Default Setting None Command Mode Normal Exec, Privileged Exec Example Console#show system System description: SMC7724M/VSW Manager System OID string: 1.3.6.1.4.1.259.6.13.1 System information System Up time: 0 days, 0 hours, 55 minutes, and 54.91 seconds System Name System Location System Contact...

  • Page 174: Show Version

    OMMAND NTERFACE show version Use this command to display hardware and software version information for the system. Default Setting None Command Mode Normal Exec, Privileged Exec Example Console#show version Unit1 Serial number Service tag Hardware version Module A type Module B type Number of ports Main power status Redundant power status :not present...

  • Page 175: Radius Commands

    RADIUS-aware devices on the network. A RADIUS server contains a database of multiple user name/password pairs with associated privilege levels for each user or group that require management access to a switch using the console port, Telnet, or Web. Command...

  • Page 176: Radius-Server Host

    OMMAND NTERFACE • radius local - Use RADIUS server password first and local password next. • local radius - Use local password first and RADIUS server password next. Default Setting None Command Mode Global Configuration Example Console(config)#authentication login radius Console(config)# Related Commands enable password - for setting the local password radius-server host...

  • Page 177: Radius-Server Port

    radius-server port Use this command to set the RADIUS server network port. Use the no form to restore the default. Syntax radius-server port port_number no radius-server port port_number - RADIUS server UDP port used for authentication messages. (Range: 1-65535) Default Setting None Command Mode Global Configuration...

  • Page 178: Radius-Server Retransmit

    RADIUS server. Use the no form to restore the default. Syntax radius-server timeout number_of_seconds no radius-server timeout number_of_seconds - Number of seconds the switch waits for a reply before resending a request. (Range: 1-65535) Default Setting None...

  • Page 179: Show Radius-Server

    show radius-server Use this command to display the current settings for the RADIUS server. Default Setting None Command Mode Privileged Exec Example Console#show radius-server Server IP address: 10.1.0.99 Communication key with radius server: Server port number: 1812 Retransmit times: 2 Request timeout: 5 Console# RADIUS C...

  • Page 180: Snmp Commands

    OMMAND NTERFACE SNMP Commands Controls access to this switch from SNMP management stations, as well as the error types sent to trap managers. Command snmp-server community snmp-server contact snmp-server location snmp-server host snmp-server enable traps show snmp Note: The access mode shown in the table is indicated by these...

  • Page 181: Snmp-Server Community

    snmp-server community Use this command to define the community access string for the Simple Network Management Protocol. Use the no form to remove the specified community string. Syntax snmp-server community string [ro|rw] no snmp-server community string • string - Community string that acts like a password and permits access to the SNMP protocol.

  • Page 182: Snmp-Server Contact

    OMMAND NTERFACE snmp-server contact Use this command to set the system contact string. Use the no form to remove the system contact information. Syntax snmp-server contact string no snmp-server contact string - String that describes the system contact information. (Maximum length: 255 characters) Default Setting None Command Mode...

  • Page 183: Snmp-Server Host

    Command Usage If you do not enter an snmp-server host command, no notifications are sent. In order to configure the switch to send SNMP notifications, you must enter at least one snmp-server host command. To enable multiple hosts, you must issue a separate snmp-server host command for each host.

  • Page 184: Snmp-Server Enable Traps

    OMMAND NTERFACE The snmp-server host command is used in conjunction with the snmp-server enable traps command. Use the snmp-server enable traps command to specify which SNMP notifications are sent globally. For a host to receive notifications, at least one snmp-server enable traps command and the snmp-server host command for that host must be enabled.
  • Page 185 Command Usage If you do not enter an snmp-server enable traps command, no notifications controlled by this command are sent. In order to configure this device to send SNMP notifications, you must enter at least one snmp-server enable traps command. If you enter the command with no keywords, all notification types are enabled.

  • Page 186: L Ine I Nterface

    OMMAND NTERFACE Command Usage This command provides counter information for SNMP operations. Example Console#show snmp Authentication: enable Link-up-down: enable SNMP communities: 1. private, and the privilege is read-write 2. public, and the privilege is read-only 0 SNMP packets input 0 Bad SNMP version errors 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors...

  • Page 187: Ip Commands

    An IP address may be used for management access to the switch over your network. By default, the switch’s IP address is set via DHCP. If you wish to manually configure an IP address, you need to change the switch’s default settings (IP address 0.0.0.0 and netmask 255.0.0.0) so that they are...

  • Page 188: Ip Address

    OMMAND NTERFACE ip address Use this command to set the IP address for this device. Use the no form to restore the default IP address. Syntax ip address {ip-address netmask |bootp|dhcp} no ip address • ip-address - IP address • netmask - Network mask for the associated IP subnet. This mask identifies the host address bits used for routing to specific subnets.

  • Page 189: Ip Dhcp Restart

    VLAN 1.) This defines the management VLAN, the only VLAN through which you can gain management access to the switch. If you assign an IP address to any other VLAN, the new IP address overrides the original IP address and this becomes the new management VLAN.

  • Page 190: Ip Default-Gateway

    OMMAND NTERFACE Example In the following example, the device is reassigned the same address. Console(config)#interface vlan 1 Console(config-if)#ip address dhcp Console(config-if)#exit Console#ip dhcp restart Console#show ip interface IP interface vlan IP address and netmask: 10.1.0.54 255.255.255.0 on VLAN 1, and address mode: Dhcp. Console# Related Commands ip address...

  • Page 191: Show Ip Interface

    Default Setting All interfaces Command Mode Privileged Exec Command Usage This switch can only be assigned one IP address. This address is used for managing the switch. Example Console#show ip interface IP address and netmask: 10.1.0.54 255.255.255.0 on VLAN 1, and address mode: User specified.

  • Page 192: Ping

    • count - Number of packets to send. (Range: 1-16, default: 5) • The actual packet size will be eight bytes larger than the size specified because the switch adds header information. Default Setting This command has no default for the host.

  • Page 193: Related Commands

    • Normal response -The normal response occurs in one to ten seconds, depending on network traffic. • Destination does not respond - If the host does not respond, a “no answer from host” appears in ten seconds. • Destination unreachable - The gateway for this destination indicates that the destination is unreachable.

  • Page 194: Line Commands

    OMMAND NTERFACE Line Commands Access the on-board configuration program by attaching a VT100 compatible device to the server’s serial port. These commands are used to set communication parameters for the serial port or Telnet (i.e., a virtual terminal.) Command line login password exec-timeout...

  • Page 195: Line

    line Use this command to identify a specific line for configuration, and to process subsequent line configuration commands. Syntax line {console | vty} • console - Console terminal line. • vty - Virtual terminal for remote console access. Default Setting There is no default line.

  • Page 196: Password

    OMMAND NTERFACE Default Setting By default, virtual terminals require a password. If you do not set a password for a virtual terminal, it will respond to attempted connections by displaying an error message and closing the connection. Command Mode Line Configuration Command Usage If you specify login without the local option, authentication is based on the password specified with the password line configuration...

  • Page 197: Exec-Timeout

    Command Mode Line Configuration Command Usage • When a connection is started on a line with password protection, the system prompts for the password. If you enter the correct password, the system shows a prompt. You can use the password-thresh command to set the number of times a user can enter an incorrect password before the system terminates the line connection and returns the terminal to the idle state.

  • Page 198: Password-Thresh

    OMMAND NTERFACE Command Mode Line Configuration Command Usage • If there is user input within the exec-timeout interval, the current session will be maintained. If there is no user input within this time interval, the current session is terminated. • This command applies to both the local console and Telnet connections.

  • Page 199: Silent-Time

    the next logon attempt. Use the silent-time command to set this interval. • This command applies to both the local console and Telnet connections. Example To set the password threshold to five attempts, enter this command: Console(config-line)#password-thresh 5 Console(config-line)# Related Commands silent-time silent-time Use this command to set the amount of time the management console is...

  • Page 200: Databits

    OMMAND NTERFACE databits Use this command to set the number of data bits per character that are interpreted and generated by the console port. Use the no form to restore the default value. Syntax databits {7 | 8} no databits •...

  • Page 201: Parity

    parity Use this command to define generation of a parity bit. Use the no form to restore the default setting. Syntax parity {none | even | odd} no parity • none - No parity • even - Even parity • odd - Odd parity Default Setting No parity Command Mode...

  • Page 202: Stopbits

    OMMAND NTERFACE Default Setting 9600 bps Command Mode Line Configuration Command Usage Set the speed to match the baud rate of the device connected to the serial port. Some baud rates available on devices connected to the port might not be supported. The system indicates if the speed you selected is not supported.

  • Page 203: Show Line

    show line Use this command to display the terminal line’s parameters. Syntax show line [console | vty] • console - Console terminal line. • vty - Virtual terminal for remote console access. Default Setting Shows all lines Command Mode Normal Exec, Privileged Exec Example To show all lines, enter this command: Console#show line...

  • Page 204: Interface Commands

    OMMAND NTERFACE Interface Commands These commands are used to display or set communication parameters for an Ethernet port, aggregated link, or VLAN. Command interface description speed-duplex negotiation capabilities flowcontrol clear counters shutdown switchport broadcast show interfaces status show interfaces counters show interfaces switchport Note: The access mode shown in the table is indicated by these...

  • Page 205: Interface

    interface Use this command to configure an interface type and enter interface configuration mode. Syntax interface interface interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) • vlan vlan-id (Range: 1-4094) Default Setting None Command Mode...

  • Page 206: Speed-Duplex

    OMMAND NTERFACE Command Mode Interface Configuration (Ethernet, Port Channel) Example The following example adds a description to Ethernet port 25. Console(config)#interface ethernet 1/25 Console(config-if)#description RD-SW#3 Console(config-if)# speed-duplex Use this command to configure the speed and duplex mode of a given interface when auto-negotiation is disabled.

  • Page 207: Negotiation

    Example The following example configures port 5 to 100 Mbps, half-duplex operation. Console(config)#interface ethernet 1/5 Console(config-if)#speed-duplex 100half Console(config-if)#no negotiation Console(config-if)# Related Commands negotiation negotiation Use this command to enable auto-negotiation for a given interface. Use the no form to disable auto-negotiation. Syntax negotiation no negotiation...

  • Page 208: Capabilities

    OMMAND NTERFACE capabilities Use this command to advertise the port capabilities of a given interface during auto-negotiation. Use the no form with parameters to remove an advertised capability, or the no form without parameters to restore the default values Syntax capabilities {1000full | 100full | 100half | 10full | 10half | flowcontrol | symmetric} no port-capabilities [1000full | 100full | 100half | 10full | 10half |...

  • Page 209: Flowcontrol

    Command Usage • Flow control can eliminate frame loss by “blocking” traffic from end stations or segments connected directly to the switch when its buffers fill. When enabled, back pressure is used for half-duplex operation and IEEE 802.3x for full-duplex operation.

  • Page 210: Clear Counters

    OMMAND NTERFACE clear counters Use this command to clear statistics on an interface. Syntax clear counters interface interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) Default Setting None Command Mode Privileged Executive...

  • Page 211: Switchport Broadcast

    • When broadcast traffic exceeds the specified threshold, packets above that threshold are dropped. • This command can enable or disable broadcast storm control and set the threshold value for the selected interface. • However, this configuration then applies to the entire switch. NTERFACE OMMANDS 3-75...

  • Page 212: Show Interfaces Status

    OMMAND NTERFACE Example The following shows how to configure broadcast suppression at 1000 packets per second: Console(config)#interface ethernet 1/5 Console(config-if)#switchport broadcast packet-rate 1000 Console(config-if)# show interfaces status Use this command to display the status for an interface. Syntax show interfaces status interface interface •...

  • Page 213: Show Interfaces Counters

    show interfaces counters Use this command to display interface statistics. Syntax show interfaces counters interface interface - ethernet unit/port • unit - This is device 1. • port - Port number. Default Setting None Command Mode Normal Exec, Privileged Exec Example Console#show interfaces counters ethernet 1/11 Ethernet 1/11...

  • Page 214: Show Interfaces Switchport

    OMMAND NTERFACE show interfaces switchport Use this command to display advanced interface configuration settings. Syntax show interfaces switchport [interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) Default Setting Shows all interfaces.

  • Page 215: Address Table Commands

    Address Table Commands These commands are used to configure the address table for filtering specified addresses, displaying current entries, clearing the table, or setting the aging time. Command bridge address show bridge clear bridge bridge-group aging-time show bridge aging-time Note: The access mode shown in the table is indicated by these abbreviations: NE (Normal Exec), PE (Privileged Exec), GC (Global Configuration), IC (Interface Configuration), LC (Line Configuration), VC (VLAN Database Configuration.)

  • Page 216: Default Setting

    - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) • action - delete-on-reset - Assignment lasts until switch is reset. permanent - Assignment is permanent. Default Setting No static addresses are defined. The default mode is permanent.

  • Page 217: Show Bridge

    show bridge Use this command to view classes of entries in the bridge-forwarding database. Syntax show bridge bridge-group [interface] [address [mask]] [vlan vlan-id] [sort {address | vlan | interface}] • bridge-group - Bridge group index (bridge 1) • interface - ethernet unit/port - unit - This is device 1.

  • Page 218: Clear Bridge

    OMMAND NTERFACE clear bridge Use this command to remove any learned entries from the forwarding database and to clear the transmit and receive counts for any static or system configured entries. Syntax clear bridge [bridge-group] bridge-group - Bridge group index (bridge 1.) Default Setting None Command Mode...

  • Page 219: Show Bridge Group Aging-Time

    Example Console(config)#bridge-group 1 aging-time 300 Console(config)# show bridge group aging-time Use this command to show the aging time for entries in the address table. Syntax show bridge group bridge-group aging-time bridge-group - Bridge group index (bridge 1) Default Setting None Command Mode Privileged Exec Example...

  • Page 220: Port Security

    Interface Configuration (Ethernet) Command Usage • When port security is enabled, the selected port will stop learning MAC addresses. This prevents unauthorized access to the switch. The MAC addresses aefmady in the address table will be retained and will not age out.

  • Page 221: Spanning Tree Commands

    Spanning Tree Commands This section includes commands that configure STP for the overall switch, and commands that configure STP for the selected interface. Command bridge spanning-tree bridge forward-time bridge hello-time bridge max-age bridge priority bridge-group path-cost Configures the spanning tree path cost...

  • Page 222: Bridge Spanning-Tree

    The Spanning Tree Algorithm can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices (that is, an STA-compliant switch, bridge or router) in your...

  • Page 223: Bridge Forward-Time

    Use this command to configure the spanning tree bridge forward time globally for this switch. Use the no form to restore the default. Syntax bridge bridge-group forward-time seconds no bridge bridge-group forward-time • bridge-group - Bridge group index (bridge 1.) •...

  • Page 224: Bridge Hello-Time

    OMMAND NTERFACE bridge hello-time Use this command to configure the spanning tree bridge hello time globally for this switch. Use the no form to restore the default. Syntax bridge bridge-group hello-time time no bridge bridge-group hello-time • bridge-group - Bridge group index (bridge 1.) •...

  • Page 225: Bridge Max-Age

    Use this command to configure the spanning tree bridge maximum age globally for this switch. Use the no form to restore the default. Syntax bridge bridge-group max-age seconds no bridge bridge-group max-age • bridge-group - Bridge group index (bridge 1.) •...

  • Page 226: Bridge Priority

    OMMAND NTERFACE bridge priority Use this command to configure the spanning tree priority globally for this switch. Use the no form to restore the default. Syntax bridge bridge-group priority priority no bridge bridge-group priority • bridge-group - Bridge group index (bridge 1.) •...

  • Page 227: Bridge-Group Path-Cost

    bridge-group path-cost Use this command to configure the spanning tree path cost for the specified interface. Use the no form to restore the default. Syntax bridge-group bridge-group path-cost cost no bridge-group bridge-group path-cost • bridge-group - Bridge group index (bridge 1.) •...

  • Page 228: Bridge-Group Priority

    • This command defines the priority for the use of a port in the spanning-tree algorithm. If the path cost for all ports on a switch are the same, the port with the highest priority (that is, lowest value) will be configured as an active link in the spanning tree.

  • Page 229: Bridge-Group Portfast

    bridge-group portfast Use this command to set a port to fast forwarding. Use the no form to disable fast forwarding. Syntax bridge-group bridge-group portfast no bridge-group bridge-group portfast bridge-group - Bridge group index (bridge 1.) Default Setting Disabled Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage •...

  • Page 230: Show Bridge Group

    OMMAND NTERFACE show bridge group Use this command to show the spanning tree configuration. Syntax show bridge group bridge-group [interface] • bridge-group - Bridge group index (bridge 1.) • interface • ethernet unit/port - unit - This is device 1. - port - Port number.

  • Page 231: Vlan Commands

    VLAN Commands A VLAN is a group of ports that may be located anywhere in the network, but communicate as though they belong to the same physical segment. This section describes commands used to create VLAN groups, add port members, specify how VLAN tagging is used, and enable automatic VLAN registration for the selected interface.

  • Page 232: Vlan Database

    OMMAND NTERFACE Command Display VLAN Information show vlan show interfaces status vlan show interfaces switchport Note: The access mode shown in the table is indicated by these abbreviations: NE (Normal Exec), PE (Privileged Exec), GC (Global Configuration), IC (Interface Configuration), LC (Line Configuration), VC (VLAN Database Configuration.) vlan database Use this command to enter VLAN database mode.

  • Page 233: Vlan

    Example Console(config)#vlan database Console(config-vlan)# Related Commands show vlan vlan Use this command to configure a VLAN. Use the no form to restore the default settings or delete a VLAN. Syntax vlan vlan-id [name vlan-name] media ethernet [state {active | suspend}] no vlan vlan-id [name | state] •...

  • Page 234: Interface Vlan

    OMMAND NTERFACE Example The following example adds a VLAN, using vlan-id 105 and name RD5. The VLAN is activated by default. Console(config)#vlan database Console(config-vlan)#vlan 105 name RD5 media ethernet Console(config-vlan)# Related Commands show vlan interface vlan Use this command to enter interface configuration mode for VLANs, and configure a physical interface.

  • Page 235: Switchport Mode

    switchport mode Use this command to configure the VLAN membership mode for a port. Use the no form to restore the default. Syntax switchport mode {trunk | hybrid} no switchport mode • trunk - Specifies a port as an end-point for a VLAN trunk. A trunk is a direct link between two switches, so the port transmits and receives tagged frames that identify the source VLAN.

  • Page 236: Switchport Acceptable-Frame-Types

    OMMAND NTERFACE switchport acceptable-frame-types Use this command to configure the acceptable frame types for a port. Use the no form to restore the default. Syntax switchport acceptable-frame-types {all | tagged} no switchport acceptable-frame-types • all - The port passes all frames, tagged or untagged. •...

  • Page 237: Switchport Native Vlan

    Default Setting Disabled Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage • If ingress filtering is enabled, incoming frames for VLANs which do not include this ingress port in their member set will be discarded at the ingress port. •...

  • Page 238: Switchport Allowed Vlan

    OMMAND NTERFACE Command Usage • If the switchport mode is set to trunk, the PVID will be inserted into all untagged frames sent from a tagged port. • If ingress filtering in disabled, all untagged frames received on this port will be assigned to the VLAN indicated by the PVID. Example The following example shows how to set the PVID for port 1 to VLAN 3:...

  • Page 239: Switchport Forbidden Vlan

    Example The following example shows how to add VLANs 1, 2, 5, and 6 to the allowed list as tagged VLANs for port 1: Console(config)#interface ethernet 1/1 Console(config-if)#switchport allowed vlan add 1,2,5,6 tagged Console(config-if)# switchport forbidden vlan Use this command to configure forbidden VLANs. Use the no form to remove the list of forbidden VLANs.

  • Page 240: Show Vlan

    OMMAND NTERFACE show vlan Use this command to show VLAN information. Syntax show vlan [id vlan-id | name vlan-name] • id - Keyword to be followed by the VLAN ID. • vlan-id - ID of the configured VLAN. (Range: 1-4094, no leading zeroes) •...

  • Page 241: Pvlan Commands

    PVLAN Commands pvlan Use this command in global configuration mode to enable a Private VLAN. Once enabled, use the pvlan up-link - down-link command to configure the PVLAN. Use the no form of the command to disable it. Syntax pvlan pvlan up-link interface-list down-link interface-list no pvlan •...
  • Page 242 OMMAND NTERFACE Private VLANs and normal VLANs can exist simultaneously within the same switch. The members of private VLANs can only consist of certain groups. The port groups permitted include: For the 24-Line VDSL Switch: <<1-8>> <<9-16>> <<17-24>> <<25>> <<26>>...

  • Page 243: Show Pvlan

    show pvlan Use this command in privileged configuration mode to display the configured private VLANs. Syntax show pvlan Command Mode Privileged exec Example Console#show pvlan Private VLAN status: Enabled Up-link port: Ethernet 1/25 Down-link port: Trunk 1 Console# PVLAN C OMMANDS 3-107...

  • Page 244: Gvrp And Bridge Extension Commands

    VLAN information in order to automatically register VLAN members on interfaces across the network. This section describes how to enable GVRP for individual interfaces and globally for the switch, as well as how to display default configuration settings for the Bridge Extension MIB.

  • Page 245: Switchport Gvrp

    switchport gvrp Use this command to enable GVRP for a port. Use the no form to disable Syntax switchport gvrp no switchport gvrp Default Setting Enabled Command Mode Interface Configuration (Ethernet, Port Channel) Example Console(config)#interface ethernet 1/1 Console(config-if)#switchport gvrp Console(config-if)# show gvrp configuration Use this command to show if GVRP is enabled.

  • Page 246: Garp Timer

    OMMAND NTERFACE Example Console#show gvrp configuration Whole system: GVRP configuration: Enabled Eth 1/ 1: Gvrp configuration: Enabled Eth 1/ 2: Gvrp configuration: Enabled garp timer Use this command to set the values for the join, leave and leaveall timers. Use the no form to restore the timers’ default values. Syntax garp timer {join | leave | leaveall} timer_value no garp timer {join | leave | leaveall}...

  • Page 247: Show Garp Timer

    • Timer values must meet the following restrictions: - leave >= (2 x join) - leaveall > leave Note: Set GVRP timers on all Layer 2 devices connected in the same network to the same values. Otherwise, GVRP will not operate successfully.

  • Page 248: Bridge-Ext Gvrp

    GVRP defines a way for switches to exchange VLAN information in order to register VLAN members on ports across the network. This function should be enabled to permit automatic VLAN registration, and to support VLANs which extend beyond the local switch. Example Console(config)#bridge-ext gvrp...

  • Page 249: Show Bridge-Ext

    show bridge-ext Use this command to show the configuration for bridge extension commands. Default Setting None Command Mode Privileged Exec Example Console#show bridge-ext Max support vlan numbers: 255 Max support vlan ID: 4094 Extended multicast filtering services: No Static entry individual port: Yes VLAN learning: IVL Configurable PVID tagging: Yes Local VLAN capable: No...

  • Page 250: Igmp Snooping Commands

    OMMAND NTERFACE IGMP Snooping Commands This switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts that want to receive a specific multicast service. It identifies the ports containing hosts requesting a service and sends data out to those ports only. It then propagates the service request up to any neighboring multicast switch/router to ensure that it will continue to receive the multicast service.

  • Page 251: Ip Igmp Snooping

    NE (Normal Exec), PE (Privileged Exec), GC (Global Configuration), IC (Interface Configuration), LC (Line Configuration), VC (VLAN Database Configuration.) ip igmp snooping Use this command to enable IGMP snooping on this switch. Use the no form to disable it. Syntax ip igmp snooping...

  • Page 252: Ip Igmp Snooping Version

    OMMAND NTERFACE no ip igmp snooping vlan vlan-id static ip-address interface • vlan-id - VLAN ID (Range: 1-4094) • ip-address - IP address for multicast group • interface • ethernet unit/port - unit - This is device 1. - port - Port number. •...

  • Page 253: Show Ip Igmp Snooping

    • All systems on the subnet must support the same version. If there are legacy devices in your network that only support Version 1, you will also have to configure this switch to use Version 1. • Some commands are only enabled for IGMPv2, including ip igmp query-max-response-time and ip igmp query-timeout.

  • Page 254: Ip Igmp Snooping Querier

    VLAN M'cast IP addr. Member ports Type ---- --------------- ------------ ------- 224.1.2.3 Console# ip igmp snooping querier Use this command to enable the switch as an IGMP snooping querier. Use the no form to disable it. Syntax ip igmp snooping querier no ip igmp snooping querier...

  • Page 255: Ip Igmp Snooping Query-Count

    Command Usage If enabled, the switch will serve as querier if elected. The querier is responsible for asking hosts if they want to receive multicast traffic. Example Console(config)#ip igmp snooping querier Console(config)# ip igmp snooping query-count Use this command to configure the query count. Use the no form to restore the default.

  • Page 256: Ip Igmp Snooping Query-Max-Response-Time

    Global Configuration Command Usage • The switch must be using IGMPv2 for this command to take effect. • The command sets the time the switch waits after receiving an IGMP report (for an IP multicast address) on a port before it sends an IGMP Query out that port and then removes the entry from its list.

  • Page 257: Ip Igmp Snooping Query-Time-Out

    Default Setting 300 seconds Command Mode Global Configuration Command Usage • The switch must be using IGMPv2 for this command to take effect. Example The following shows how to configure the default timeout to 300 seconds: Console(config)#ip igmp snooping query-time-out 300...

  • Page 258: Ip Igmp Snooping Vlan Mrouter

    IGMP querier. Therefore, if the IGMP querier is a known multicast router/switch connected over the network to an interface (port or trunk) on your switch, you can manually configure that interface to join all the current multicast groups.

  • Page 259: Show Ip Igmp Snooping Mrouter

    show ip igmp snooping mrouter Use this command to display information on statically configured and dynamically learned multicast router ports. Syntax show ip igmp snooping mrouter [vlan vlan-id] vlan-id - VLAN ID (Range: 1-4094) Default Setting Displays multicast router ports for all configured VLANs. Command Mode Privileged Exec Example...

  • Page 260: Priority Commands

    Priority Commands The commands described in this section allow you to specify which data packets have greater precedence when traffic is buffered in the switch due to congestion. This switch supports CoS with four priority queues for each port. Data packets in a port’s high-priority queue will be transmitted before those in the lower-priority queues.

  • Page 261: Switchport Priority Default

    The priority is a number from 0 to 7. Seven is the highest priority. Default Setting The priority is not set, and the default value for untagged frames received on the interface is zero. The switch is not instructed what to do with the priority. Command Mode...

  • Page 262: Queue Bandwidth

    IEEE 802.1Q VLAN tagged frame, the IEEE 802.1p User Priority bits will be used. • This switch provides four priority queues for each port. It is configured to use Weighted Round Robin, which can viewed with the queue bandwidth command.

  • Page 263: Queue Cos-Map

    Command Usage WRR allows bandwidth sharing at the egress port by defining scheduling weights. Example The following example shows how to assign WRR weights of 1, 3, 5 and 7 to the CoS priority queues 0, 1, 2 and 3: Console(config)#queue bandwidth 1 3 5 7 Console(config)# Related Commands...

  • Page 264: Priority Queue

    OMMAND NTERFACE Default Setting This switch supports Class of Service by using four priority queues, with Weighted Round Robin queuing for each port. Up to 8 separate traffic classes are defined in IEEE 802.1p. The default priority levels are assigned according to recommendations in the IEEE 802.1p standard as shown in the following table.

  • Page 265: Show Queue Bandwidth

    show queue bandwidth Use this command to display the Weighted Round Robin (WRR) bandwidth allocation for the four class of service (CoS) priority queues. Default Setting None Command Mode Privileged Exec Example Console#show queue bandwidth Queue ID Weight -------- ------ Console# show queue cos-map Use this command to show the class of service priority map.

  • Page 266: Map Ip Port (Global Configuration)

    OMMAND NTERFACE Example Console#show queue cos-map ethernet 1/11 Information of Eth 1/11 Queue ID Traffic class -------- ------------- Console# map ip port (Global Configuration) Use this command to enable IP port mapping (i.e., class of service mapping for TCP/UDP sockets.) Use the no form to disable IP port mapping.

  • Page 267: Map Ip Port (Interface Configuration)

    map ip port (Interface Configuration) Use this command to set IP port priority (i.e., TCP/UDP port priority.) Use the no form to remove a specific setting. Syntax map ip port port-number cos cos-value no map ip port port-number • port-number - 16-bit TCP/UDP port number. (Range: 0-65535) •...

  • Page 268: Map Ip Precedence (Interface Configuration)

    OMMAND NTERFACE Command Usage • The precedence for priority mapping is IP Port, IP Precedence or IP DSCP, and default switchport priority. • IP Precedence and IP DSCP cannot both be enabled. Enabling one of these priority types will automatically disable the other type. Example The following example shows how to enable IP precedence mapping globally:...

  • Page 269: Map Ip Dscp (Global Configuration)

    Command Usage The precedence for priority mapping is IP Port, IP Precedence or IP DSCP, and default switchport priority. Example The following example shows how to map IP precedence value 1 to CoS value 0: Console(config)#interface ethernet 1/5 Console(config-if)#map ip precedence 1 cos 0 Console(config-if)# map ip dscp (Global Configuration) Use this command to enable IP DSCP mapping (i.e., Differentiated...

  • Page 270: Map Ip Dscp (Interface Configuration)

    OMMAND NTERFACE map ip dscp (Interface Configuration) Use this command to set IP DSCP priority (i.e., Differentiated Services Code Point priority.) Use the no form to restore the default table. Syntax map ip dscp dscp-value cos cos-value no map ip dscp •...

  • Page 271: Show Map Ip Port

    show map ip port Use this command to show the IP port priority map. Syntax show map ip port [interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) Default Setting None Command Mode...

  • Page 272: Show Map Ip Precedence

    OMMAND NTERFACE show map ip precedence Use this command to show the IP precedence priority map. Syntax show map ip precedence [interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) Default Setting None Command Mode...

  • Page 273: Show Map Ip Dscp

    show map ip dscp Use this command to show the IP DSCP priority map. Syntax show map ip dscp [interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Range: 1-6) Default Setting None Command Mode...

  • Page 274: Mirror Port Commands

    [rx | tx | both] no port monitor interface • interface - ethernet unit/port (source port) - unit - Switch (unit 1.) - port - Port number. • rx - Mirror received packets. • tx - Mirror transmitted packets.
  • Page 275 • The destination port is set by specifying an Ethernet interface. Example The following example configures the switch to mirror all packets from port 6 to port 11: Console(config)#interface ethernet 1/11 Console(config-if)#port monitor ethernet 1/6 both...

  • Page 276: Show Port Monitor

    Use this command to display mirror information. Syntax show port monitor [interface] interface - ethernet unit/port (source port) • unit - Switch (unit 1.) • port - Port number. Default Setting Shows all sessions Command Mode Privileged Exec...

  • Page 277: Port Trunking Commands

    Link Aggregation Control Protocol (LACP) to automatically negotiate a trunk link between this switch and another network device. You can configure trunks between switches of the same type. This switch supports up to six trunks. The uplink ports can be trunked together and the VDSL ports can be trunked together.

  • Page 278: Interface Port-Channel

    OMMAND NTERFACE interface port-channel Use this command to configure a trunk and enter interface configuration mode for the trunk. Use the no form of this command to delete a trunk. syntax interface port-channel port-channel-number interface port-channel port-channel-number port-channel-number - Trunk index Default Setting No trunks configured Command Mode...

  • Page 279: Show Interfaces Status Port-Channel

    Command Usage • The uplink ports can be trunked together. • The VDSL ports can be trunked together. • All links in a trunk must operate at the same data rate and duplex mode. Example The following example creates trunk 1 and then adds port 11: Console(config)#interface port-channel 1 Console(config-if)#exit Console(config)#interface ethernet 1/11...

  • Page 280: Lacp

    • You can configure one trunk group, containing up to four ports as a dynamic LACP trunk. • The ports on both ends of a trunk must be configured the same for speed, duplex mode, and flow control. • If the target switch has also enabled LACP on the connected ports, the 3-144...
  • Page 281 • If more than four ports attached to the same target switch have LACP enabled, the additional ports will be placed in standby mode, and will only be enabled if one of the active links fails.

  • Page 282: Vdsl Commands

    NTERFACE VDSL Commands These commands are used to to configure and display communication parameters for VDSL and Ethernet ports on the switch and connected CPEs. Note: The term EFM used in this section stands for Ethernet in the First Mile. The “first mile” is the connection between business and residential users and the public network.

  • Page 283: Efm Profile Global

    Command Mode Global Configuration Function Displays information about the EFM profiles available on the switch, and how they are assigned to the VDSL ports. Displays the VDSL link statistics and profile information on a specific VDSL port Displays the connected CPE ethernet mode. PE...
  • Page 284 OMMAND NTERFACE Command Usage Assigns the same profile to each VDSL switch port. Details of these profiles are given in the table below: Profile Name default efm-5 efm-10 efm-15 public-ansi public-etsi efm-5 LL efm-10 LL efm-15 LL public-ansiLL public-etsiLL efm-15-3LL...

  • Page 285: Efm Profile

    Console(config)#efm profile global public-ansi Console(config)# Related Commands efm profile efm profile Use this command to assign profiles for speed to a specific VDSL port on the switch. Syntax efm profile profile name profile name - Name of the profile. Default Setting None...

  • Page 286: Efm Define User-Profile

    [interleave depth] • profile number – user-specified profiles can be user-1 or user-2 • downstream rate – Rate of data transmission from the switch to the CPE. (Range 1 Mbps - 15 Mbps) • upstream rate - Rate of data transmission from the CPE to the switch.

  • Page 287: Efm Reset

    Use this command to reset the switch VDSL chipset or, if a CPE is connected, the CPE VDSL chipset. Syntax efm reset {local | remote} • local - Resets the VDSL chipset for an EFM port. • remote - Resets the CPE side VDSL chipset of an EFM port.

  • Page 288: Efm Rdl

    Default Setting Command Mode Interface Configuration Command Usage Remote Digital Loopback (RDL) tests the link between the switch and the CPE by sending out, and returning data through the CPE, over the VDSL link. 3-152...

  • Page 289: Efm Flow-Control

    Console(config-if)#no efm rdl Console(config-if)# efm flow-control Use this command to configure the maximum speed of transmission of data from a specific switch VDSL port to the CPE. Syntax efm flow-control flow-control-value flow-control-value - from 0 to the maximum transmission rate available.

  • Page 290: Show Controllers Ethernet-Controller

    OMMAND NTERFACE show controllers ethernet-controller Use this command to display the Ethernet link transmit and receive statistics for a specific VDSL port, or for all the VDSL ports on the switch and the connected CPE. Syntax show controllers ethernet-controller interface-id...
  • Page 291 Command Usage Using this command without specifying a VDSL port displays the Ethernet link statistics of all ports on the switch and on the connected CPE devices. The output shows the statistics collected by the VDSL chipset on the switch, and the statistics collected by the VDSL chipset on the CPE.

  • Page 292: Show Controllers Efm Interface-Id Actual

    Privileged EXEC Command Usage SNR and Reed-Solomon error information displays the quality of the VDSL link. • The SNR represents the upper limit of received signal to noise ratio that the switch will handle before disconnecting from the remote CPE. 3-156...

  • Page 293: Show Controllers Efm Interface-Id Admin

    Example The following example displays the current values of the VDSL link on VDSL switch port 2. Console#show controller efm Ethernet 1/2 actual dsrserrs Downstream Reed-Solomon errors: 0 Console#show controller efm Ethernet 1/2 actual link...

  • Page 294: Show Controllers Efm Profile

    Use this command to to display information about the Ethernet in the First Mile (EFM) profiles available on the switch, and how they are assigned to the VDSL ports. Syntax show controllers efm profile {mapping | names} •...
  • Page 295 Command Usage See the table under “VDSL Commands” on page 3-146 for the EFM profiles shipped with the switch, and for their upstream and downstream data rates. Examples This example shows sample output from the show controllers efm profile mapping command.

  • Page 296: Show Controllers Efm Status

    VDSL ports. • The SNR represents the upper limit of received signal to noise ratio that the switch will handle before disconnecting from the remote CPE. • The Reed-Solomon errors show the number of errors detected...
  • Page 297 the VDSL ports. Reed-Solomon errors are the result of noise exceeding the noise margin. Note: The Reed-Solomon errors are reset each time the show controllers efm status link command is performed. • The interleaver prevents loss of Ethernet data packets. The interleaver columns display the interleaver block size for both directions of data.

  • Page 298: Show Controllers Efm Remote Ethernet Mode

    OMMAND NTERFACE show controllers efm remote ethernet mode Use this command to display the connected CPE Ethernet mode. Syntax show controllers efm remote ethernet mode interface-id interface-id – ID of the VDSL port. Default Setting None Command Mode Privileged EXEC Command Usage To obtain the Ethernet mode from CPE side VDSL chip Examples...

  • Page 299: Rate Limit Commands

    Rate Limit Commands This function allows the network manager to control the maximum rate for traffic transmitted or received on a port. Rate limiting is configured on ports at the edge of a network to limit traffic into or out of the network. Traffic that falls within the rate limit is transmitted, while packets that exceed the acceptable amount of traffic are dropped.

  • Page 300: Rate-Limit (Interface)

    OMMAND NTERFACE rate-limit (interface) Use this command in Interface Configuration mode to configure the rate limit on data received on a specific port. Use the no form of this command to return to the default settings. Note that the maximum data rate for VDSL ports depends on the physical link and the selected efm profile (see page 3-147.) Syntax...

  • Page 301: Troubleshooting

    VLAN access to the switch (default is VLAN 1). • Check that you have a valid network connection to the switch and that the port you are using has not been disabled. • Check network cabling between the management station and the switch.

  • Page 302: Upgrading Firmware Via The Serial Port

    2-17). Downloading large runtime code files via TFTP is normally much faster than downloading via the switch’s serial port. You can upgrade switch firmware by connecting a PC directly to the serial Console port on the switch’s front panel and using VT100 terminal emulation software that supports the XModem protocol (see “Required...

  • Page 303: Download Procedure

    PC system. The “Xmodem file send” window displays the progress of the download procedure. Note: The download file must be an SMC7724M/VSW binary software file from SMC. PGRADING IRMWARE VIA THE...
  • Page 304 Startup File menu option. 13. When you have finished downloading code files, use the [C]hange Baudrate menu option to change the baud rate of the switch’s serial connection back to 9600 baud. 14. Set your PC’s terminal emulation software baud rate back to 9600 baud.

  • Page 305: Console Port Pin Assignments

    Console Port Pin Assignments The DB-9 serial port on the switch’s rear panel is used to connect to the switch for out-of-band console configuration. The onboard menu-driven configuration program can be accessed from a terminal, or a PC running a terminal emulation program.

  • Page 306: Console Port To 9-Pin Dte Port On Pc

    SSIGNMENTS Console Port to 9-Pin DTE Port on PC Switch’s 9-Pin Serial Port 2 RXD 3 TXD 5 SGND No other pins are used. Console Port to 25-Pin DTE Port on PC Switch’s 9-Pin Serial Port 2 RXD 3 TXD 5 SGND No other pins are used.
  • Page 307 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3, 4, or 5 UTP cable. 100BASE-TX IEEE 802.3u specification for 100 Mbps Fast Ethernet over two pairs of Category 5 UTP cable. 100BASE-FX IEEE 802.3u specification for 100 Mbps Fast Ethernet over two strands of 50/125 or 62.5/125 micron core fiber cable.

  • Page 308: Fast Ethernet

    LOSSARY Bandwidth The difference between the highest and lowest frequencies available for network signals. Also synonymous with wire speed, the actual speed of the data transmission along the cable. Collision A condition in which packets transmitted over the cable interfere with each other. Their interference makes both signals unintelligible.

  • Page 309: Gigabit Ethernet

    FTTH Fibre To The Home: a network where an optical fibre runs to the subscriber's premises or home. Gigabit Ethernet A 1000 Mbps network communication system based on Ethernet and the CSMA/CD access method. Full Duplex Transmission method that allows two network devices to transmit and receive concurrently, effectively doubling the bandwidth of that link.

  • Page 310: Network Diameter

    LOSSARY LAN Segment Separate LAN or collision domain. Light emitting diode used for monitoring a device or network condition. Local Area Network (LAN) A group of interconnected computer and support devices. Main Distribution Frame (MDF) The termination equipment where outside telephone lines connect to a building or site Media Access Control (MAC) A portion of the networking protocol that governs access to the transmission...

  • Page 311: Switched Ports

    Splitter A filter to separate DSL signals from POTS signals to prevent mutual interference. Straight-through Port An RJ-45 port which does not cross the receive and transmit signals internally (MDI) so it can be connected with straight-through twisted-pair cable to any device having a crossover port (MDI-X).
  • Page 312 LOSSARY Glossary-6...
  • Page 313 address table 2-33 BOOTP 2-12 for IP configuration 1-4 broadcast storm, threshold 2-30 Class of Service configuring 2-63 queue mapping 2-63 community string 2-82 configuration settings, saving or restoring 2-18 connections Web browser 1-1 console port pin assignments B-1 default priority, ingress port 2-63 default settings 1-13 DHCP 2-12 downloading software 2-17...
  • Page 314 Protocol) management 1-1 software downloads 2-17 software version, displaying 2-24 Spanning Tree Protocol 2-37 startup files displaying 2-17 setting 2-17 statistics, switch 2-92 system software downloading from server 2-17 Index-2 trap manager 2-83 troubleshooting A-1 trunk configuration 2-78 upgrading software 2-17...
  • Page 316 Russia: PRC: Taiwan: Asia Pacific: Korea: Japan: Australia: India: If you are looking for further contact information, please visit www.smc.com or www.smc-europe.com. 38 Tesla Irvine, CA 92618 Phone: (949) 679-8000 (800) SMC-4-YOU; 34-93-477-4935; 44 (0) 118 974 8700; 33 (0) 41 38 32 32;...

This manual is also suitable for:

7500a/vcp7712fsmt7712gt7724tTigeraccess smc7724m/vsw

Table of Contents