Page 3
Only qualified personnel should perform installation procedures. Enterasys Networks reserves the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Enterasys Networks to determine whether any such changes have been made.
1. MANAGEMENT OVERVIEW Configuration Options For advanced management capability, the Enterasys Networks’ Vertical Horizon VH-8G provides a menu-driven system configuration program. This program can be accessed by a direct connection to the serial port on the switch’s rear panel (out-of-band), or by a Telnet connection over the network (in-band).
In-Band Connections Prior to accessing the switch via a network connection, you must first configure it with a valid IP address, subnet mask, and default gateway using an out-of-band connection or the BootP protocol. Telnet Connection Prior to accessing the switch via an in-band Telnet connection, you must first configure it with a valid IP address, subnet mask, and default gateway using an out-of-band connection or BootP protocol.
These menus allow you to reconfigure the switch, as well as to monitor the status and performance of the switch. The menus have a layout similar to the sample Main Menu shown in Figure 2-1. The information is divided into the following parts: •...
The default user names are “admin” and “guest,” with no passwords. The administrator has Read/Write access, which allows you to read and modify switch information. The guest has Read Only access to the management program, which allows you to view switch information, but not modify any operating parameters.
Factory Defaults Table 2-1 lists the default settings for switch configuration parameters. Each parameter can be changed via the console menus or Telnet. Table 2-1. Factory Default Settings Parameter Multicast Filtering GMRP IGMP Multicast Filtering Port Configuration Flow Control Speed and Duplex...
Page 14
Parameter Virtual LANs Acceptable VLAN Frame Type Configurable PVID Tagging GVRP Untagged VLAN Group Assignment VLAN Ingress Filtering VLAN Learning 6 VH-8G User Interface Default Value Disabled False VH-8G...
Downloads new version of firmware to update your system (in-band). Saves the switch configuration to a file on a TFTP server. This file can be later downloaded to restore the configuration. Specifies if management access to the switch is available from all VLANs or restricted to one VLAN.
Page 16
GVRP protocol. Displays/configures port-specific VLAN settings, including PVID, ingress filtering, and 802.1Q trunks. Displays the ports on the switch attached to a neighboring multicast router/switch for each VLAN ID. Assigns ports that are attached to a neighboring multicast router/switch.
Shows hardware/firmware version numbers and power status of the switch. 9033640 Description Displays all the multicast groups active on this switch, including multicast IP addresses and corresponding VLAN IDs. Used to manually configure host MAC addresses in the unicast table.
Displaying System Information Use the System Information screen to display descriptive information about the switch, or for quick system identification as shown in the following figure and table. Vertical Horizon Local Management -- VH-8G System Description : Vertical Horizon VH-8G System Object ID : 1.3.6.1.4.1.5624.2.1.9...
Displaying Switch Version Use the Switch Information screen to display hardware/firmware version numbers for the switch, as well as the power status of the system. Vertical Horizon Local Management -- VH-8G Use <TAB> or arrow keys to move. <Enter> to select...
TFTP Download Downloads new version of firmware to update your system (in- band). Configuration Save & Saves the switch configuration to a file on a TFTP server. This file Restore can be later downloaded to restore the configuration. Management Specifies if management access to the switch is available from all Configuration VLANs or restricted to one VLAN.
Use <TAB> or arrow keys to move. <Enter> to select. Figure 2-7. Network Configuration Parameter Description IP Configuration Screen used to set the bootup option, or configure the switch’s IP parameters. IP Connectivity Test Screen used to test IP connectivity to a (Ping) specified device. HTTP Configuration Screen used to enable the Web server.
IP Configuration Use the IP Configuration screen to set the bootup option, or configure the switch’s IP parameters. The screen shown below is described in the following table. Vertical Horizon Local Management -- VH-8G Use <TAB> or arrow keys to move, other keys to make changes.
IP Connectivity Test (Ping) Use the IP Connectivity Test to see if another site on the Internet can be reached. The screen shown below is described in the following table. Vertical Horizon Local Management -- VH-8G Network Configuration: IP Connectivity Test (Ping) Use <TAB>...
HTTP Configuration Use the HTTP Configuration screen to enable/disable the on-board Web server, and to specify the TCP port that will provide HTTP service. The screen shown below is described in the following table. Vertical Horizon Local Management -- VH-8G <APPLY>...
Configuring the Serial Port You can access the on-board configuration program by attaching a VT100 compatible device to the switch’s serial port. (For more information on connecting to this port, see “Required Connections” on page 1.) The communication parameters for this port can be accessed from the Serial Port Configuration screen shown below and described in the following table.
Network Management Station (NMS), can be used to access this information. Access rights to the switch are controlled by community strings. To communicate with the switch, the NMS must first submit a valid community string for authentication. The options for configuring community strings and related trap functions are described in the following sections.
Configuring Community Names The following figure and table describe how to configure the community strings authorized for management access. Up to 5 community names may be entered. Vertical Horizon Local Management -- VH-8G 1. public 2. private <APPLY> Use <TAB> or arrow keys to move, other keys to make changes. Figure 2-13.
Configuring IP Trap Managers The following figure and table describe how to specify management stations that will receive authentication failure messages or other trap messages from the switch. Up to 5 trap managers may be entered. Vertical Horizon Local Management -- VH-8G <APPLY>...
ADMIN (Administrator) and GUEST, but you can set up to five different user names and passwords. Only Administrators have write access for parameters governing the switch. You should therefore assign a user name and password to the default Administrator as soon as possible, and store it in a safe place.
Downloading System Software Using TFTP Protocol to Download Over the Network Use the TFTP Download menu to load software updates into the switch. The download file should be an VH-8G file from Enterasys; otherwise the switch will not accept it. The success of the download operation depends on the accessibility of the TFTP server and the quality of the network connection.
Use the Configuration Save & Restore menu to save the switch configuration settings to a file on a TFTP server. The file can be later downloaded to the switch to restore the switch’s settings. The success of the operation depends on the accessibility of the TFTP server and the quality of the network connection.
Configuring Management Access Use the Management Configuration menu to define which VLAN has management access to the switch. Parameters shown on this screen are indicated in the following figure and table. Vertical Horizon Local Management -- VH-8G Management VLAN VLAN <APPLY>...
Sets communication parameters for ports. Port Information Displays current port settings and port status. Spanning Tree Configures the switch, its ports and modules to participate in a Configuration local Spanning Tree. Spanning Tree Displays the current Spanning Tree configuration for the switch, Information its ports and modules.
Page 34
Assigns ports that are attached to hosts who want to receive a Configuration specific multicast service. Port Security Allows you to enable and configure port security for the switch. Configuration * Not implemented in the current firmware release. 26 VH-8G User Interface...
Used to enable or disable flow control. Flow control can eliminate frame loss by “blocking” traffic from end stations or segments connected directly to the switch when its buffers fill. Back pressure is used for half duplex and IEEE 802.3x for full duplex.
FlowControl InUse Shows the flow control type in use. Flow control can eliminate frame loss by “blocking” traffic from end stations connected directly to the switch. Back pressure is used for half duplex and IEEE 802.3x for full duplex. Speed and Displays the current port speed and duplex mode used.
The Spanning Tree Algorithm can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices (that is, an STA-compliant switch, bridge or router) in your network to ensure that only one route exists between any two stations on the network.
Page 38
Parameter Default Spanning Tree Enabled Protocol Priority 32,768 Hello Time Max (Message) Age Forward Delay 30 VH-8G User Interface Description Enable this parameter to participate in an STA compliant network. Device priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device.
Shows the port type as 1000SX (1000Base-SX). Defines the priority for the use of a port in the STA algorithm. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the spanning tree.
Parameter Default FastForwarding ENABLED Viewing the Current Spanning Tree Configuration The Spanning Tree Information screen displays a summary of the STA information for the overall bridge or for a specific port. To make any changes to the parameters for the Spanning Tree, use the Spanning Tree Configuration menu.
The path cost from the root port on this switch to the root device. Root Port The number of the port on this switch that is closest to the root. This switch communicates with the root device through this port. If there is no root port, then this switch has been accepted as the root device of the spanning tree network.
Displaying the Current STA for Ports The parameters shown in the following figure and table are for port STA Information. Vertical Horizon Local Management -- VH-8G Port Type ------------------------------------------------------------------------------------------------------- 1000SX 1000SX 1000SX 1000SX 1000SX 1000SX 1000SX 1000SX Use <TAB> or arrows keys to move. <Enter> to select. Figure 2-27.
Page 43
A port on a network segment with no other STA-compliant bridging device is always forwarding. If two ports of a switch are connected to the same segment and there is no other STA device attached to this segment, the port with the smaller ID forwards packets and the other is blocked.
Using a Mirror Port for Analysis You can mirror traffic from any source port to a target port for real-time analysis. You can then attach a logic analyzer or RMON probe to the target port and study the traffic crossing the source port in a completely unobtrusive manner.
Configuring Port Trunks Port trunks can be used to increase the bandwidth of a network connection or to ensure fault recovery. You can configure up to four trunk connections (combining 2~4 ports into a fat pipe) between any two VH-8G switches.
Page 46
Use <TAB> or arrow keys to move, other keys to make changes. Figure 2-29. Port Trunking Configuration Parameter Description Trunk ID Configure up to four trunks per switch (ID of 1~4). Port Select from 2~4 ports per trunk. [Show] Displays trunk settings, where the first trunk listed is specified by “Sorted by Trunk ID.”...
This switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts who want to receive a specific multicast service. The switch looks up the IP Multicast Group used for this service and adds any port which received a similar request to that group. It then propagates the service request on to any neighboring multicast switch/router to ensure that it will continue to receive the multicast service.
Configuring IGMP This protocol allows a host to inform its local switch/router that it wants to receive transmissions addressed to a specific multicast group. You can use the IGMP Configuration screen to configure multicast filtering shown below: Vertical Horizon Local Management -- VH-8G <APPLY>...
Configuring Broadcast Storm Control Use the Broadcast Storm Control Configuration screen to enable broadcast storm control for any port on the switch, as shown below: Vertical Horizon Local Management -- VH-8G Broadcast Storm Control Configuration : Port 1 - 8...
Parameter Description Bridge Capability Extended Multicast Indicates that the switch does not support the filtering of individual Filtering Services multicast addresses based on GMRP (GARP Multicast Registration Protocol). Note that this function is not implemented for the current firmware release.
Page 51
As default this switch uses Shared VLAN Learning (SVL), whereby all ports share one VLAN filtering database. However, you can set the switch to use Independent VLAN Learning (IVL), where each port maintains its own filtering database. Note that when you change from one method to the other, the switch will automatically reset and the current VLAN configuration will be lost.
Configuring Traffic Classes IEEE 802.1p defines up to 8 separate traffic classes. This switch supports Quality of Service (QoS) by using two priority queues, with weighted fair queuing for each port. You can use the 802.1P Configuration menu to configure the default priority for each port, or to display the mapping for the traffic classes as described in the following sections.
Default priority can be set to any value from 0~7, where 0~3 Priority specifies the low priority queue and 4~7 specifies the high priority queue. Number of Egress Indicates that this switch supports two priority output queues. Traffic Classes 9033640 Port Default Ingress...
802.1P Port Traffic Class Information This switch provides two priority levels with weighted fair queuing for port egress. This means that any frames with a default or user priority from 0~3 are sent to the low priority queue “0” while those from 4~7 are sent to the high priority queue “1”...
Configuring Virtual LANs You can use the VLAN configuration menu to assign any port on the switch to any of up to 256 LAN groups. In conventional networks with routers, broadcast traffic is split up into separate domains. Switches do not inherently support broadcast domains.
The value of sysUpTime (System Up Time) when this VLAN was created. Status Shows how this VLAN was added to the switch: Dynamic GVRP: Automatically learned via GVRP. Permanent: Current Egress Ports Shows the ports which have been added to the displayed VLAN group, where “1”...
802.1Q VLAN Static Table Configuration Use this screen to create a new VLAN or modify the settings for an existing VLAN. You can add/delete port members for a VLAN, or prevent a port from being automatically added to a VLAN via the GVRP protocol. (Also, note that all ports can only belong to one untagged VLAN.
Page 58
For example, the following screen displays settings for VLAN 2, which includes tagged ports 1-4, and forbidden port 8. Vertical Horizon Local Management -- VH-8GVH-8G Egress Ports 11110000 Untagged Ports 00000000 <APPLY> Use <TAB> or arrow keys to move, other keys to make changes. Figure 2-39.
Page 59
Port Assignment VLAN Configuration Use this screen to configure port-specific settings for IEEE 802.1Q VLAN features. Vertical Horizon Local Management -- VH-8G ------------------------------------------------------------------- Port ID : 1 <APPLY> Use <TAB> or arrow keys to move, <Space> to scroll options. Figure 2-40. Port Assignment VLAN Configuration Parameter Description PVID...
The switch ports that have been automatically listed as being List attached to a neighboring multicast router/switch. Static Router Port List The switch ports that have been manually listed as being attached to a neighboring multicast router/switch. Sorted by VID The VLAN ID number used to sort the list.
Figure 2-42. Static Multicast Router Port Configuration Parameter Description Static Multicast A list of the switch ports that have been manually configured as Router Port List being attached to a neighboring multicast router/switch. Sorted by VID The VLAN ID number used to sort the list.
Member Port List as being attached to a IGMP host. Static IGMP Member A list of the switch ports that have been manually configured as Port List being attached to a IGMP host. The VLAN ID number used to sort the list.
Port Security Configuration Use the Port Security Configuration screen to enable and configure port security for the switch. Port security allows you to configure each port with a list of MAC addresses of devices that are authorized to access the network through that port.
Displays detailed statistical information for the selected port such as packet type and frame size counters. Unicast Provides full listing of all unicast addresses stored in the switch, Address Table as well as sort, search and clear functions. Multicast Address Displays the ports that belong to each GMRP Muticast group.
Port Statistics display key statistics from the Ethernet-like MIB for each port. Error statistics on the traffic passing through each port are displayed. This information can be used to identify potential problems with the switch (such as a faulty port or unusually heavy loading). The values displayed have been accumulated since the last system reboot.
Parameter Description Carrier Sense Errors* The number of times that the carrier sense condition was lost or never asserted when attempting to transmit a frame. Frames Too Long The number of frames received that exceed the maximum permitted frame size. Internal Mac The number of frames for which reception failed due to an internal Receive Errors*...
Page 67
Parameter Description Drop Events The total number of events in which packets were dropped due to lack of resources. Received Bytes Total number of bytes of data received on the network. This statistic can be used as a reasonable indication of Ethernet utilization.
Displaying the Unicast Address Table The Address Table contains the MAC addresses and VLAN identifier associated with each port (that is, the source port associated with the address and VLAN), sorted by MAC address or VLAN ID. You can search for a specific address, clear the entire address table, or information associated with a specific address, or set the aging time for deleting inactive entries.
Displaying the IP Multicast Registration Table Use the IP Multicast Registration Table to display all the multicast groups active on this switch, including multicast IP addresses and the corresponding VLAN ID. ----------------------------------------------------------------------------------- Sorted by : VID + Multicast IP Multicast IP : 224.0.0.2 [Show] Use <TAB>...
Use the Static Unicast Address Table Configuration screen to manually configure host MAC addresses in the unicast table. You can use this screen to associate a MAC address with a specific VLAN ID and switch port as shown below. Vertical Horizon Local Management -- VH-8G...
Resetting the System Select the System Restart Menu under the Main Menu to reset the switch. The reset screen includes options as shown in the following figure and table. Vertical Horizon Local Management -- VH-8G Restart Option : POST Reload Factory Defaults...
Setting password protection for the switch to prevent unauthorized access to console menus • Assigning an IP address for the switch if you plan to manage the switch using SNMP, or if you use Telnet to access the switch •...
If you forget your password, contact your Enterasys Networks Support Representative. You are automatically logged out from the console menus based on the Lock-out Time setting in the Console Login Configuration Menu.
If you see a DOWN status for a connected port, plug the cable into another port on the switch or try another cable. Connecting via Telnet You can connect to the VH-8G switch from a remote location using the Telnet application. This application allows you to establish in-band access to the console menus.
The VH-8G switch can send SNMP messages called traps to SNMP management stations when an important event occurs with the switch. The switch allows up to five destinations to be configured for these trap messages to be sent. To configure SNMP access for the switch, do the following: Select Management Setup Menu from the Main Menu.
When Port Mirroring is enabled, one port becomes a monitor port for any other port on the switch. Note that the source and target ports must be configured within the same VLAN and be operating at the duplex mode.
Downloading Via the Serial Port A serial download is the easiest method to upgrade the VH-8G switch software, requiring the least amount of equipment and configuration. To download switch software via the serial port, do the following: With the console port connected, reset the switch by powering the switch off and then on.
Downloading Via TFTP To perform a TFTP download, you must first configure the VH-8G switch. This consists of programming the switch with an IP address, if this has not already been done, and entering the IP address of the TFTP server and the name of the upgrade file.
This protocol allows redundant connections to be created between LAN segments for purposes of fault tolerance. Two or more physical paths between different segments can be created through the switch, with the Spanning Tree Protocol choosing a single path at any given time and disabling all others.
Under Forbidden Egress Ports, enter a “1” to prevent a port from being automatically added to this VLAN via GVRP. Note that you can enable or disable GVRP for the switch from the Extended Bridge Configuration screen on the Device Control Menu.
Configuring Port Operation You can configure switch ports for operational parameters such as auto- negotiation, duplex mode, and flow control. The 1000Base-SX fiber ports always operate at 1000Mbps speed. Therefore, this parameter is not configurable. To configure port operation, do the following: Select Device Control Menu from the Main Menu.
MAC addresses in the forwarding table: • Dynamic MAC addresses, which are dynamically learned and removed by the switch based on a time period defined using the Aging Time option. • Static MAC addresses, which are entered manually, stored in nonvolatile memory and automatically placed in the address table.
A BootP server must be operating on the network and be properly configured for this option to work. When this option is enabled, the switch tries to obtain an IP address from the BootP server.
Configuring Port Trunks You can configure up to four port trunks on the VH-8G switch. Each trunk can combine up to four ports into an aggregate connection with up to 8Gbps of bandwidth when operating at full duplex. Besides balancing the load across each port in the trunk, the additional ports provide redundancy by taking over the load if another port in the trunk should fail.
Page 86
78 Configuring & Monitoring the Switch VH-8G...
Managed entities supporting SNMP typically contain software, which runs locally on the device and is referred to as an agent. In Figure 4-1, software in an VH-8G switch functions as an agent, monitoring and controlling the functionality of the switch.
RFC 1213 provides management of system-level parameters, including TCP/IP protocol-related statistics, IP addressing, and interface statistics for each switch port. MIB-II is the standard MIB defined by RFC 1213. All agent devices operating SNMP are required to support at least part of MIB-II.
RFC 1643 (Ethernet-Like MIB) RFC 1643 provides management and monitoring for the Ethernet-specific aspects of each port on the switch. This is the Ethernet-specific statistics subgroup of the MIB-II Transmission group. This group provides a set of statistics related to Ethernet’s physical level operation. Specifically, error and collision-related statistics are presented.
Compiling MIB Extensions: Enterasys Website The MIBs supported by the VH-8G switch must be compiled into the SNMP network management platform before the switch can be managed. The supported MIBs are available using Enterasys’s website at: http://www.enterasys.com...
Spanning Tree Protocol in a Network Figure A-1 illustrates the use of an VH-8G switch to establish an effective Spanning Tree configuration. Switches A, B and C are connected together in a redundant topology (more than one path between two points).
Several configuration parameters control the operation of the Spanning Tree Protocol. Table A-1 describes the parameters and lists the VH-8G switch default settings for each parameter. You can cause serious network performance degradation if you do not fully understand Spanning Tree concepts. Be sure to consult personnel experienced with this process prior to configuring Spanning Tree parameters.
Spanning Tree Protocol Operation When the Spanning Tree Protocol is enabled for the first time or when there is a change in the network topology, such as a failure or the addition or removal of a component, the Spanning Tree Protocol automatically sets up the active topology of the current network.
Page 95
There are five (5) states that the ports can be in for spanning tree: • Blocking: A port in this state does not participate in the transmission of frames, thus preventing duplication arising through multiple paths existing in the active topology of the bridged LAN. •...
IP addresses or IP subnets. VLANs inherently provide a high level of network security, since traffic must pass through a Layer 3 switch or a router to reach a different VLAN.
VLAN operation on the VH-8G is enabled by default. Therefore, all frames are transferred internally through the switch with a VLAN tag. This tag may already be on the frame entering the switch, or added to the frame by the switch. VLAN information already existing on frames entering the switch is automatically handled by the switch.
To forward a frame from a VLAN-aware device to a VLAN-unaware device, the switch first decides where to forward the frame, and then strips off the VLAN tag. However, to forward a frame from a VLAN-unaware device to a VLAN-aware device, the switch first decides where to forward the frame, and then inserts a VLAN tag reflecting this port’s default VID.
Forwarding Traffic with Unknown VLAN Tags This switch only supports 256 VLANs with VLAN IDs ranging from 1 to 2048, but the IEEE 802.1Q VLAN standard allows for VLAN IDs from 1 to 4094. Therefore, if this switch is attached to endstations that issue VLAN registration requests, it will have to forward unknown VLAN tags.
• normal As traffic enters the switch, it is assigned to one of the two priority levels according to information located in the 802.1Q header tag of the frame (see Appendix B, “Virtual LANs”) or according to the incoming port number.
Page 102
Figure C-1 shows priority queuing operating within a switch. Frames entering the switch through ports 1 and 4 are tagged as normal traffic and placed in a normal priority queue on the outbound port. Frames entering through ports 2 and 5 are tagged as high priority traffic and placed in a high priority queue on the outbound port.
A router, or multicast-enabled switch, can periodically ask their hosts is they want to receive multicast traffic. If there is more than one router/ switch on the LAN performing IP multicasting, one of these devices is elected “querier” and assumes the responsibility of querying the LAN for group members.