Linksys SFE2000 Reference Manual

Linksys SFE2000 Reference Manual

Fast ethernet switch
Hide thumbs Also See for SFE2000:
Table of Contents

Advertisement

SFE2000/SFE2000P Fast Ethernet
Switch Reference Guide
December 2006

Advertisement

Table of Contents
loading

Summary of Contents for Linksys SFE2000

  • Page 1 SFE2000/SFE2000P Fast Ethernet Switch Reference Guide December 2006...
  • Page 2: Document Revision History

    Specifications are subject to change without notice. Linksys, the Cisco Systems logo, the Linksys Logo, and the Linksys One logo are registered trademarks of Cisco Systems, Inc. All other trademarks mentioned in this document are the property of their respective owners.
  • Page 3: Table Of Contents

    Contents SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Contents Chapter 1: Getting Started ....1 Starting the Application Understanding the Interface Device Representation...
  • Page 4 Contents SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining MAC Based ACL Defining IP Based ACL Defining ACL Binding Defining DOS Prevention Global Settings Defining Martian Addresses Chapter 5: Configuring Device Interfaces ... . . 75...
  • Page 5 Contents SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 10: Configuring Spanning Tree ... . . 143 Defining STP on Interfaces Defining Interface Settings Defining Rapid Spanning Tree Defining Multiple Spanning Tree...
  • Page 6 Chapter 17: Managing Device Diagnostics ... . .255 Viewing Integrated Cable Tests Performing Optical Tests Configuring Port Mirroring Defining CPU Utilization Appendix A: Linksys One Contact Information ...263 Contents...
  • Page 7: Chapter 1: Getting Started

    Logging Off The Device Starting the Application This section contains information for starting the Linksys User Interface. Note By default, the IP address of the device is assigned dynamically. The IP address can be changed. It is recommended to configure the IP address statically, if the system is in stack mode, in order to prevent the user from disconnecting from the network in the event of master switchover.
  • Page 8 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Enter Network Password Page 3. Enter a user name and password. The default user name is "admin" The device is not configured with a default password, and can be configured without entering a password. Passwords are both case sensitive and alpha-numeric.
  • Page 9 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Embedded Web System Home Page Chapter 1:...
  • Page 10: Understanding The Interface

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Understanding the Interface The following table lists the interface components with their corresponding numbers: Interface Components Component Description The Tree View provides easy navigation through the configurable device Tree View features.The main branches expand to provide the subfeatures.
  • Page 11: Device Representation

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide This section provides the following additional information: • Device Representation — Provides an explanation of the Linksys user interface buttons, including both management buttons and task icons. • device Using the Linksys Management Buttons — Provides instructions for adding, modifying, and deleting parameters.
  • Page 12: Using The Linksys Management Buttons

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Using the Linksys Management Buttons Device Management buttons and icons provide an easy method of configuring device information, and include the following: Device Management Buttons Button Name Button Description Apply Applies changes to the device.
  • Page 13: Using Screen And Table Options

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Using Screen and Table Options Linksys contains screens and tables for configuring devices. This section contains the following topics: Appendix 1, "Adding Device Information" • • Appendix 1, "Modifying Device Information" • Appendix 1, "Deleting Device Information"...
  • Page 14: Deleting Device Information

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit Interface Priority 4. Define the fields. 5. Click Apply. The fields are modified, and the information is saved to the device. Deleting Device Information 1. Open the EWS page. 2. Select a table row.
  • Page 15: Resetting The Device

    3. Enter a user name and password to reconnect to the Web Interface, if the stack is not part of a full Linksys One system. If the stack is part of a Linksys One system, login is automatically done from the Service Router.
  • Page 16 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 1:...
  • Page 17: Chapter 2: Managing Device Information

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Managing Device Information This section provides information for defining both basic and advanced system information. This section contains the following topics: • Understanding the Device Zoom View • Defining General System Information •...
  • Page 18: Understanding The Device Zoom View

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Understanding the Device Zoom View The Zoom Page is the main window used for viewing the devices either in stand-alone mode or operating in a stack. To open the Zoom Page: 1. Click the System > System Management > Zoom. The Zoom Page opens:...
  • Page 19: Defining General System Information

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining General System Information SFE 2000P System Information The System Information page contains parameters for configuring general device information. SFE 2000P System Information Page The System Information page contains the following fields: •...
  • Page 20: Managing Stacks

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Base MAC Address — Displays the device MAC address. If the system is in stack mode, the Base MAC Address of the master unit is displayed. • Hardware Version — Displays the hardware version number. If the system is in stack mode, the hardware version of the master unit is displayed.
  • Page 21: Viewing Device Health

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Stack Management Page The Stack Management Page contains the following fields: • Master Election — Indicates the method of electing the master device. The possible values are: – Automatically — The master is selected automatically by software.
  • Page 22 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide 1. Click System > System Management > Health. The Health Page opens: Health Page The Health Page contains the following fields: • Unit No. — Indicates the unit number for which the device information is displayed.
  • Page 23: Chapter 3: Managing Power-Over-Ethernet Devices

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Managing Power-over-Ethernet Devices Power-over-Ethernet (PoE) provides power to devices over existing LAN cabling, without updating or modifying the network infrastructure. Power-over-Ethernet removes the necessity of placing network devices next to power sources. Power-over-Ethernet can be used in the following applications: •...
  • Page 24 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide PoE Settings Page The PoE Settings Page displays the currently configured PoE ports and contains the following information: • Port — Displays the selected port’s number. • Admin Status — Indicates whether PoE is enabled or disabled on the port. The possible values are: –...
  • Page 25 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Searching — Indicates that the device is currently searching for a powered device. Searching is the default PoE operational status. – Fault — Indicates that the device has detected a fault on the powered device. For example, the powered device memory could not be read.
  • Page 26 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide is running at 99% usage, and port 1 is prioritized as high, but port 3 is prioritized as low, port 1 is prioritized to receive power, and port 3 may be denied power. The possible field values are: –...
  • Page 27 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Searching — Indicates that the device is currently searching for a powered device. Searching is the default PoE operational status. – Fault — Indicates that the device has detected a fault on the powered device. For example, the powered device memory could not be read.
  • Page 28 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 3:...
  • Page 29: Chapter 4: Configuring Device Security

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring Device Security The Security Suite contains the following sections: • Passwords Management • Defining Authentication • Defining Access Method • Defining Traffic Control • Defining 802.1x • Defining Access Control • Defining DOS Prevention...
  • Page 30: Passwords Management

    Defining User Authentication Note By default, a single user name is defined, "admin", with no password. An additional user name/ password is configured for use in the Linksys One system. Defining User Authentication 1. Click Security Suite > Passwords Management > User Authentication. The User Authentication...
  • Page 31 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add Local User Page The Add Local User Page contains the following fields: • User Name — Displays the user name. • Password — Specifies the new password. The is not displayed. As it entered an "*" corresponding to each character is displayed in the field.
  • Page 32: Defining Authentication

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Authentication The Authentication section contains the following pages: • Defining Profiles • Mapping Profiles • Defining TACACS+ • Defining RADIUS Defining Profiles 1. Click Security Suite > Authentication > Profiles. The Profiles Page opens:...
  • Page 33 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – None — Indicates that no authentication method is used to authenticate the port. 2. Click the Add button. The Add Authentication Profile Page opens: Add Authentication Profile Page The Add Authentication Profile Page contains the following fields: •...
  • Page 34: Mapping Profiles

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Profile Name — Displays the Authentication profile name. • Authentication Methods — Defines the user authentication methods. The possible field values are: – Local — Authenticates the user at the device level. The device checks the user name and password for authentication.
  • Page 35: Defining Tacacs

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Optional Methods — Lists available authentication methods. – RADIUS — Remote Authorization Dial-In User Service (RADIUS) servers provide additional security for networks. – TACACS+ — Terminal Access Controller Access Control System (TACACS+) provides centralized security user access validation.
  • Page 36 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide TACACS+ Page The TACACS+ Page contains the following fields: • Source IP Address — Displays the device source IP address used for the TACACS+ session between the device and the TACACS+ server. •...
  • Page 37 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add TACACS+ Server Page The Add TACACS+ Server Page contains the following fields: • Host IP Address — Displays the TACACS+ Server IP address. • Priority — Displays the order in which the TACACS+ servers are used. The default is 0.
  • Page 38 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide TACACS+ Settings Page The TACACS+ Settings Page contains the following fields: • Host IP Address — Displays the TACACS+ Server IP address. • Priority — Displays the order in which the TACACS+ servers are used. The default is 0.
  • Page 39: Defining Radius

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining RADIUS Remote Authorization Dial-In User Service (RADIUS) servers provide additional security for networks. RADIUS servers provide a centralized authentication method for web access. The default parameters are user-defined, and are applied to newly defined RADIUS servers. If new default parameters are not defined, the system default values are applied to newly defined RADIUS servers.
  • Page 40 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Number of Retries — Defines the number of transmitted requests sent to RADIUS server before a failure occurs. The possible field values are 1 - 10. Three is the default value. •...
  • Page 41 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Number of Retries — Defines the number of transmitted requests sent to RADIUS server before a failure occurs. The possible field values are 1 - 10. Three is the default value. •...
  • Page 42 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit RADIUS Settings Page The Edit RADIUS Settings Page contains the following fields: • IP Address — Displays the RADIUS Server IP address. • Priority — The server priority. The possible values are 0-65535, where 1 is the highest value. The RADIUS Server priority is used to configure the server query order.
  • Page 43: Defining Access Method

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Access Method The access method section contains the following pages: • Defining Access Profiles • Defining Profile Rules Defining Access Profiles Access profiles are profiles and rules for accessing the device. Access to management functions can be limited to user groups.
  • Page 44 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Access Profiles Page The Access Profiles Page contains the following fields: • Access Profile Name — Defines the access profile name. The access profile name can contain up to 32 characters. • Current Active Access Profile — Defines the access profile currently active.
  • Page 45 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add Access Profile Page The Add Access Profile Page contains the following fields: • Access Profile Name — Defines the access profile name. The access profile name can contain up to 32 characters.
  • Page 46: Defining Profile Rules

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Port — Specifies the port on which the access profile is defined. – LAG — Specifies the LAG on which the access profile is defined. – VLAN — Specifies the VLAN on which the access profile is defined.
  • Page 47 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Profile Rules Page The Profile Rules Page contains the following fields: • Access Profile Name — Displays the access profile to which the rule is attached. • Priority — Defines the rule priority. When the packet is matched to a rule, user groups are either granted permission or denied device management access.
  • Page 48 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Secure Telnet (SSH) — Assigns SSH access to the rule. If selected, users accessing the device using Telnet meeting access profile criteria are permitted or denied access to the device. – HTTP — Assigns HTTP access to the rule. If selected, users accessing the device using HTTP meeting access profile criteria are permitted or denied access to the device.
  • Page 49 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Priority — Defines the rule priority. When the packet is matched to a rule, user groups are either granted permission or denied device management access. The rule number is essential to matching packets to rules, as packets are matched on a first-fit basis.
  • Page 50 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Modifying Profile Rules 1. Click Security Suite > Access Method > Profile Rules. The Profile Rules Page opens: 2. Click the Edit button. The Edit Profile Rule Page opens: Edit Profile Rule Page The Edit Profile Rule Page contains the following fields: •...
  • Page 51 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – SNMP — Assigns SNMP access to the rule. If selected, users accessing the device using SNMP meeting access profile criteria are permitted or denied access to the device. • Interface — Defines the interface on which the access profile is defined. The possible field values are: –...
  • Page 52: Defining Traffic Control

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Traffic Control The Traffic Control section contains the following pages: • Defining Storm Control • Defining Port Security Defining Storm Control Storm Control enables limiting the amount of Multicast and Broadcast frames accepted and forwarded by the device.
  • Page 53 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Copy From Entry Number — Indicates the row number from which storm control parameters are copied. • To Entry Number(s) — Indicates the row number to which storm control parameters are copied.
  • Page 54: Defining Port Security

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Broadcast Mode — Specifies the Broadcast mode currently enabled on the device. The possible field values are: – Multicast & Broadcast — Counts Broadcast and Multicast traffic together. – Broadcast Only — Counts only Broadcast traffic.
  • Page 55 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide To define port security: 1. Click Security Suite > Traffic Control > Port Security. The Port Security Page opens: Port Security Page The Port Security Page contains the following fields: • Ports — Indicates the port number on which port security is configured.
  • Page 56 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide In order to change the Learning Mode, the Lock Interface must be set to Unlocked. Once the mode is changed, the Lock Interface can be reinstated. • Max Entries — Specifies the number of MAC addresses that can be learned on the port. The Max Entries field is enabled only if Locked is selected in the Interface Status field.
  • Page 57 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Unchecked — Indicates the port is currently unlocked. This is the default value. – Checked — Indicates the port is currently locked. • Learning Mode — Defines the locked port type. The Learning Mode field is enabled only if Locked is selected in the Interface Status field.The possible field values are:...
  • Page 58: Defining 802.1X

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining 802.1x Port based authentication enables authenticating system users on a per-port basis via a external server. Only authenticated and approved system users can transmit and receive data. Ports are authenticated via the RADIUS server using the Extensible Authentication Protocol (EAP). Port Authentication includes: •...
  • Page 59: Defining 802.1X Properties

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining 802.1X Properties 1. Click Security Suite > 802.1X > Properties. The 802.1X Properties Page opens: 802.1X Properties Page The 802.1X Properties Page contains the following fields: • Port Based Authentication State — Indicates if Port Authentication is enabled on the device. The possible field values are: –...
  • Page 60: Defining Port Authentication

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Disable — Disables port-based authentication on the device. This is the default. • Guest VLAN ID — Displays the Guest VLAN ID. 2. Define the relevant fields. 3. Click Apply. The 802.1X properties are defined, and the device is updated.
  • Page 61 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Periodic Reauthentication — Permits immediate port reauthentication. • Reauthentication Period — Specifies the number of seconds in which the selected port is reauthenticated (Range: 300-4294967295). The field default is 3600 seconds. •...
  • Page 62 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Port Authentication Settings Page The Port Authentication Settings Page contains the following fields: • Port — Indicates the port name. • User Name — Displays the user name. • Current Port Control — Displays the current port authorization state.
  • Page 63: Defining Multiple Hosts

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Quiet Period — Specifies the number of seconds that the switch remains in the quiet state following a failed authentication exchange (Range: 0-65535). • Resending EAP — Specifies the number of seconds that the switch waits for a response to an EAP - request/identity frame, from the supplicant (client), before resending the request.
  • Page 64 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Unit Number — Displays the stacking member for which the Multiple Hosts parameters are displayed. • Port — Displays the port number for which advanced port-based authentication is enabled. • Multiple Hosts — Indicates whether multiple hosts are enabled. Multiple hosts must be enabled in order to either disable the ingress-filter, or to use port-lock security on the selected port.
  • Page 65 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Multiple Host Settings Page The Multiple Host Settings Page contains the following fields: • Port — Displays the port number for which advanced port-based authentication is enabled. • Enable Multiple Hosts — Indicates whether multiple hosts are enabled. Multiple hosts must be enabled in order to either disable the ingress-filter, or to use port-lock security on the selected port.
  • Page 66: Defining Authenticated Host

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Authenticated Host 1. Click Security Suite > 802.1X > Authenticated Host. The 802.1X Port Authentication Page opens: 802.1X Authenticated Host Page The 802.1X Authenticated Host Page contains the following fields: • Unit Number — Displays the stacking member for which the Authenticated Hosts parameters are displayed.
  • Page 67: Defining Access Control

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Access Control The Access Control section contains the following pages: • Defining MAC Based ACL • Defining IP Based ACL • Defining ACL Binding Defining MAC Based ACL The MAC Based ACL Page page allows a MAC- based ACL to be defined. ACEs can be added only if the ACL is not bound to an interface.
  • Page 68 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add MAC Based ACL Page The Add MAC Based ACL Page contains the following fields: • ACL Name — Displays the user-defined MAC based ACLs. • New Rule Priority — Indicates the ACE priority, which determines which ACE is matched to a packet on a first-match basis.
  • Page 69: Defining Ip Based Acl

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Permit — Forwards packets which meet the ACL criteria. – Deny — Drops packets which meet the ACL criteria. – Shutdown — Drops packet that meet the ACL criteria, and disables the port to which the packet was addressed.
  • Page 70 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide IP Based ACL Page The IP Based ACL Page contains the following fields: • ACL Name — Displays the user-defined IP based ACLs. • Remove ACL — Deletes the selected ACL. • Rule Priority — Indicates the rule priority, which determines which rule is matched to a packet on a first-match basis.
  • Page 71 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – L2IP — Matches the packet to Layer 2 Internet Protocol (L2IP). – ISIS — Indicates that the Intermediate System to Intermediate System (ISIS) protocol is used to classify network flows. • Flag Set — Sets the indicated TCP flag that can be triggered.
  • Page 72 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add IP Based ACL Page The Add IP Based ACL Page contains the following fields: • ACL Name — Displays the user-defined IP based ACLs. • New Rule Priority — Indicates the rule priority, which determines which rule is matched to a packet on a first-match basis.
  • Page 73 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Match IP Precedence — Matches the packet IP Precedence value to the ACE. Either the DSCP value or the IP Precedence value is used to match packets to ACLs. The possible field range is 0-7.
  • Page 74 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide are as • ICMP — Indicates if ICMP packets are permitted on the network. The possible field values follows: • ICMP Code — Indicates and ICMP message code for filtering ICMP packets. ICMP packets that are filtered by ICMP message type can also be filtered by the ICMP message code.
  • Page 75 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add IP Based Rule Page The Add IP Based Rule Page contains the following fields: • ACL Name — Displays the user-defined IP based ACLs. • New Rule Priority — Indicates the rule priority, which determines which rule is matched to a packet on a first-match basis.
  • Page 76: Defining Acl Binding

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Match IP Precedence — Matches the packet IP Precedence value to the ACE. Either the DSCP value or the IP Precedence value is used to match packets to ACLs. The possible field range is 0-7.
  • Page 77: Defining Dos Prevention

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • LAGs — Displays the LAGs bound by the ACL. • Of Unit — Displays the stacking member for which the ACL binding parameters are displayed. • Interface — Indicates the interface to which the ACL is bound.
  • Page 78 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Global Settings Page The Global Settings Page contains the following fields: • Security Suite Status — Indicates if DOS security is enabled on the device. The possible field values are: • Enable — Enables DOS security.
  • Page 79: Defining Martian Addresses

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Martian Addresses 1. Click Security Suite > Dos Prevention > Martian Addresses. The Martian Addresses Page opens: Martian Addresses Page The Martian Addresses Page contains the following fields: • IP Address — Displays the IP addresses for which DOS attack is enabled.
  • Page 80 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – 192.0.2.0/24, 224.0.0.0/4 – 240.0.0.0/4 (except 255.255.255.255/32) • IP Address — Enter the IP addresses for which DOS attack is enabled. • Mask — Enter the Mask for which DOS attack is enabled.
  • Page 81: Chapter 5: Configuring Device Interfaces

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring Device Interfaces This section contains information for configuring ports and contains the following topic: • Defining Port Settings • Defining LAG Management • Defining LAG Settings • Configuring LACP Defining Port Settings...
  • Page 82 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Port Type — Displays the port type. The possible field values are: — – Copper/ComboF/ComboC Indicates the port has a copper port connection. – Fiber — Indicates the port has a fiber optic port connection.
  • Page 83 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit Port Settings Page The Edit Port Settings Page contains the following fields: • Port — Displays the port number. • Description — Displays the device port ID. • Port Type — Displays the port type. The possible field values are: –...
  • Page 84 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Full — Indicates that the interface supports transmission between the device and the client in both directions simultaneously. – Half — Indicates that the interface supports transmission between the device and the client in only one direction at a time.
  • Page 85 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • MDI/MDIX — Displays the Media Dependent Interface (MDI)/Media Dependent Interface with Crossover (MDIX) status on the port. Hubs and switches are deliberately wired opposite the way end stations are wired, so that when a hub or switch is connected to an end station, a straight through Ethernet cable can be used, and the pairs are matched up properly.
  • Page 86: Defining Lag Management

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining LAG Management Link Aggregation optimizes port usage by linking a group of ports together to form a single LAG. Aggregating ports multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy.
  • Page 87 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Lag Management Page The Lag Management Page contains the following fields. • LAG — Displays the LAG number. • Name — Displays the LAG name. • Link State — Displays the link operational status.
  • Page 88: Defining Lag Settings

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit LAG Membership Page The Edit LAG Membership Page contains the following fields. • LAG — Displays the LAG number. • LAG Name — Displays the LAG name. • LACP — Indicates that LACP is enable on the LAG.
  • Page 89 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Lag Settings Page The Lag Settings Page contains the following fields: • Copy from Entry Number — Copies the LAG information from the selected port. • To Entry Number(s) — Indicates the ports to which the port QoS information is copied.
  • Page 90 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Lag Configuration Settings The Lag Configuration Settings contains the following fields: • LAG — Displays the LAG Id number. • Description — Displays the user-defined port name. • LAG Type — The port types that comprise the LAG.
  • Page 91: Configuring Lacp

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – 10 Full — Indicates that the LAG is advertising a 10 mbps speed and full Duplex mode setting. – 100 Half —Indicates that the LAG is advertising a 100 mbps speed and half Duplex mode setting.
  • Page 92 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide LACP Page The LACP Page contains fields for configuring LACP LAGs. • LACP System Priority — Indicates the global LACP priority value. The possible range is 1- 65535. The default value is 1.
  • Page 93 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide LACP Parameter Settings Page The LACP Parameter Settings Page contains the following fields: • Port — Defines the port number to which timeout and priority values are assigned. • LACP Port Priority — Defines the LACP priority value for the port. The field range is 1-65535.
  • Page 94 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 5:...
  • Page 95: Chapter 6: Configuring Vlans

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring VLANs VLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single unit, regardless of the physical LAN segment to which they are attached.
  • Page 96: Defining Vlan Properties

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining VLAN Properties The VLAN Properties Page provides information and global parameters for configuring and working with VLANs. 1. Click Bridging > VLAN Management > Properties. The Properties Page opens. Properties Page The Properties Page contains the following fields: •...
  • Page 97 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add VLAN Page The Add VLAN Page allows network administrators to define and configure new VLANs, contains the following fields: • VLAN ID — Displays the VLAN ID. • VLAN Name — Displays the user-defined VLAN name.
  • Page 98: Defining Vlan Membership

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining VLAN Membership The VLAN Membership Page contains a table that maps VLAN parameters to ports. Ports are assigned VLAN membership by toggling through the Port Control settings. Click Bridging > VLAN Management > Membership. The VLAN Membership Page opens:...
  • Page 99 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Untagged — Indicates the interface is an untagged VLAN member. Packets forwarded by the interface are untagged. – Tagged — Indicates the interface is a tagged member of a VLAN. All packets forwarded by the interface are tagged.
  • Page 100: Defining Interface Settings

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Interface Settings The VLAN Interface Setting Page provides parameters for managing ports that are part of a VLAN. The port default VLAN ID (PVID) is configured on the VLAN Port Settings page. All untagged packets arriving to the device are tagged by the ports PVID.
  • Page 101 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Trunk — The port belongs to VLANs in which all ports are tagged (except for an optional single native VLAN). • PVID — Assigns a VLAN ID to untagged packets. The possible values are 2 to 4094. VLAN 4095 is defined as per standard and industry practice as the discard VLAN.
  • Page 102 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • PVID — Assigns a VLAN ID to untagged packets. The possible values are 2 to 4094. VLAN 4095 is defined as per standard and industry practice as the discard VLAN. Packets classified to the Discard VLAN are dropped.
  • Page 103: Configuring Gvrp Settings

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring GVRP Settings GARP VLAN Registration Protocol (GVRP) is specifically provided for automatic distribution of VLAN membership information among VLAN-aware bridges. GVRP allows VLAN-aware bridges to automatically learn VLANs to bridge ports mapping, without having to individually configure each bridge and register VLAN membership.
  • Page 104 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Interface — Displays the interface on which GVRP is enabled. • GVRP State — Indicates if GVRP is enabled on the interface. The possible field values are: – Enabled — Enables GVRP on the selected interface.
  • Page 105 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Enabled — Enables GVRP on the selected interface. – Disabled — Disables GVRP on the selected interface. • Dynamic VLAN Creation — Indicates if Dynamic VLAN creation is enabled on the interface. The possible field values are: –...
  • Page 106: Protocol Group

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Protocol Group The Protocol Group Page contains information defining protocol names and the VLAN Ethernet type. Interfaces can be classified as a specific protocol based interface. NOTE: This setting is relevant only in Layer 2 mode.
  • Page 107 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add Protocol Group Page The Add Protocol Group Page provides information for configuring new VLAN protocol groups. The Add Protocol Group Page contains the following fields. • Frame Type — Displays the packet type. Possible field values are Ethernet, RFC1042, and LLC Other.
  • Page 108: Protocol Port

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Frame Type — Displays the packet type. Possible field values are Ethernet, RFC1042, and LLC Other. • Protocol Value — Displays the User-defined protocol value. • Group ID (Hex) — Defines the Protocol group ID to which the interface is added.
  • Page 109 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide The Add Protocol Port to VLAN Page provides information for editing protocol port configurations. Add Protocol Port to VLAN Page The Add Protocol Port to VLAN Page contains the following fields. • Interface — Port or LAG number added to a protocol group.
  • Page 110 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 6:...
  • Page 111: Chapter 7: Configuring Ip Information

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring IP Information This section provides information for defining device IP addresses, and includes the following topics: • Domain Name System • Configuring Layer 2 • Configuring Layer 3 Chapter 7:...
  • Page 112: Domain Name System

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Domain Name System Domain Name System (DNS) converts user-defined domain names into IP addresses. Each time a domain name is assigned, the DNS service translates the name into a numeric IP address. For example, www.ipexample.com is translated into 192.87.56.2.
  • Page 113 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Type — Displays the IP address type. The possible field values are: – Dynamic — The IP address is dynamically created. – Static — The IP address is a static IP address.
  • Page 114: Host Mapping

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Host Mapping The Host Mapping Page provides information for defining DNS Host Mapping. The DNS Host Mapping Page page contains the following fields. 1. Click System > System Management > Domain Name System > Host Mapping. The Host...
  • Page 115 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add DNS Host Page The Add DNS Host page contains the following fields: • Host Name — Displays a user-defined default domain name. When defined, the default domain name is applied to all unqualified host names. The Host Name field can contain up to 158 characters.
  • Page 116: Configuring Layer 2

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring Layer 2 The IP address and default gateway can be either dynamically or statically configured. In Layer 2, a static IP address is configured on the VLAN Management Properties Page. The Management VLAN is set to VLAN 100 by default, but can be modified.
  • Page 117: Arp

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide IP Interface Page The IP Interface Page contains the following fields: • Get Dynamic IP from DHCP Server — Retrieves the IP addresses using DHCP. • Static IP Address — Displays the currently configured IP address. IP addresses are either configured on the Default VLAN or are user-defined.
  • Page 118 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide corresponding IP address. The ARP table can be filled in statically by the user. When a static ARP entry is defined, a permanent entry is put in the table, which the system uses to translate IP addresses to MAC addresses.
  • Page 119 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • MAC Address — Indicates the station MAC address, which is associated in the ARP table with the IP address. • Status — Indicates the ARP Table entry status. Possible field values are: –...
  • Page 120 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide ARP Settings Page The ARP Settings Page contains the following fields: • Interface — Indicates the interface connected to the device. • IP Address — Indicates the station IP address, which is associated with the MAC address filled in below.
  • Page 121: Configuring Layer 3

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring Layer 3 In Layer 3 mode, multiple IP addresses can be configured on ports, LAGs or VLANS. This provides greater network flexibility than Layer 2 mode where only a single IP address is configured on ports, LAGs or VLANs.
  • Page 122 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide IP Interface Page The IP Interface Page contains the following fields. • IP Address — Defines the system IP address. • Mask — Displays the currently configured IP address mask. • Interface — Indicates the interface connected to the device.
  • Page 123 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add IP Interface Page The Add IP Interface Page contains the following fields. • Interface — Defines the system IP address. • Source IP Address — Defines the source IP Address. • Static IP Address — Defines the system IP address.
  • Page 124: Arp Proxy

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide IP Interface Settings Page IP Interface Settings The IP Interface Settings Page contains the following fields: • IP Address — Defines the system IP address. • Network Mask — Displays the currently configured IP address mask.
  • Page 125: Udp Relay

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide ARP Proxy Page The ARP Proxy Page contains the following field. • ARP Proxy — Enables the device to respond to ARP requests for located nodes. If disabled, the device responds with its own MAC address.
  • Page 126 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide UDP Relay Page The UDP Relay Page contains the following fields: • Source IP Interface — Indicates the input IP interface that relays UDP packets. If this field is 255.255.255.255, UDP packets from all interfaces are relayed. The following address ranges are –...
  • Page 127 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide UDP Port Number UDP Port Number Acronym Application NICNAME Who is DOMAIN Domain Name Serve Trivial File Transfer SUNRPC Sun Microsystems Rpc Network Time Network Tim NetBiosNameService NT Server to StationConnections NetBiosDatagramService NT Server to StationConnections...
  • Page 128: Dhcp Relay

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – 127.0.0.0 to 127.255.255.255. • UDP Destination Port— Indicate the destination UDP port ID number of the relayed UDP packets. The following table lists UDP Port allocations • Destination Address— The IP interface that receives UDP packet relays. If this field is 0.0.0.0, UDP packets are discarded.
  • Page 129: Arp

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add DHCP Server Page The Add DHCP Server Page contains the following field: • DHCP Server —Adds a DHCP Server to the DHCP Relay Table. The DHCP servers act as a DHCP relay if the parameter is not equal to 0.0.0.0. DHCP requests are relayed only if their SEC field is greater or equal to the threshold value.
  • Page 130 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide ARP Page The ARP Page contains the following fields. • ARP Entry Age Out — Defines the amount of time (seconds) that pass between ARP requests about an ARP table entry. After this period, the entry is deleted from the table. The range is 1 - 40000000, where zero indicates that entries are never cleared from the cache.
  • Page 131 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Static — Indicates the ARP entry is a static entry. Add ARP button. The ARP Settings Page opens: Click on the ARP Settings Page The ARP Settings Page contains the following fields: •...
  • Page 132: Defining Ip Routing

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide ARP Settings Page The ARP Settings Page contains the following fields: • Interface — Indicates the interface connected to the device. • IP Address — Indicates the station IP address, which is associated with the MAC address filled in below.
  • Page 133 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide IP Routing Page The IP Routing Page contains the following fields: • Dest. IP Address — Defines the destination IP address. • Prefix Length —Defines the IP route prefix for the destination IP. The prefix length must be preceded by a forward slash (/).
  • Page 134 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide IP Static Route Page The IP Static Route Page contains the following fields: • Destination IP Address — Defines the destination IP address. • Prefix Length —Defines the IP route prefix for the destination IP. The prefix length must be preceded by a forward slash (/).
  • Page 135: Chapter 8: Defining Address Tables

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Address Tables MAC addresses are stored in either the Static Address or the Dynamic Address databases. A packet addressed to a destination stored in one of the databases is forwarded immediately to the port. The Dynamic Address Table can be sorted by interface, VLAN, and MAC Address.
  • Page 136: Defining Static Addresses

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Static Addresses A static address can be assigned to a specific interface on this switch. Static addresses are bound to the assigned interface and cannot be moved. When a static address is seen on another interface, the address will be ignored and will not be written to the address table.
  • Page 137 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide 2. Click the Add button. The Add Static MAC Address Page opens: Add Static MAC Address Page The Add Static MAC Address Page contains the following fields: • Unit Number — Indicates the stacking member for which the Static address is defined.
  • Page 138: Defining Dynamic Addresses

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Dynamic Addresses The Dynamic Address Table contains the MAC addresses learned by monitoring the source address for traffic entering the switch. When the destination address for inbound traffic is found in the database, the packets intended for that address are forwarded directly to the associated port.
  • Page 139 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • MAC Address — Specifies the MAC address for which the table is queried. • VLAN ID — Specifies the VLAN ID for which the table is queried. • Address Table Sort Key — Specifies the means by which the Dynamic MAC Address Table is sorted.
  • Page 140 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 8:...
  • Page 141: Chapter 9: Configuring Multicast Forwarding

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring Multicast Forwarding The Multicast section contains the following pages: • IGMP Snooping • Defining Multicast Bridging Groups • Defining Multicast Forwarding IGMP Snooping When IGMP Snooping is enabled globally, all IGMP packets are forwarded to the CPU. The CPU analyzes the incoming packets and determines: •...
  • Page 142 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide IGMP Snooping Page The IGMP Snooping Page contains the following fields: • Enable IGMP Snooping Status — Indicates if IGMP Snooping is enabled on the device. IGMP Snooping can be enabled only if Bridge Multicast Filtering is enabled. The possible field values are: –...
  • Page 143 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide occurs, the switch notifies the Multicast device to stop sending traffic The Leave Timeout value is either user-defined, or an immediate leave value. The default timeout is 10 seconds. 2. Define the relevant fields.
  • Page 144: Defining Multicast Bridging Groups

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Leave Timeout — Indicates the amount of time the host waits, after requesting to leave the IGMP group and not receiving a Join message from another station, before timing out. If a Leave Timeout occurs, the switch notifies the Multicast device to stop sending traffic The Leave Timeout value is either user-defined, or an immediate leave value.
  • Page 145 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Unchecked — Disables IGMP Snooping on the device. • VLAN ID — Specifies the VLAN ID. • Bridge Multicast Address — Identifies the Multicast group MAC address/IP address. • Ports — Indicates the port number on which Multicast service is configured.
  • Page 146 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit Multicast Group Page The Edit Multicast Group Page contains the following fields: • VLAN ID — Displays the VLAN ID. • Bridge Multicast IP Address — Displays the IP address attached to the Multicast Group.
  • Page 147: Defining Multicast Forwarding

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Multicast Forwarding The Multicast Forward Page contains fields for attaching ports or LAGs to a device that is attached to a neighboring Multicast router/switch. Once IGMP Snooping is enabled, Multicast packets are forwarded to the appropriate port or VLAN.
  • Page 148 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Excluded — The port is not part of a Multicast group. – Dynamic — Attaches the port to the Multicast group as dynamic member. Multicast Forwarding Modifying 1. Click Bridging > Multicast > Forward. The Multicast Forward Page opens: 2.
  • Page 149: Chapter 10: Configuring Spanning Tree

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring Spanning Tree The Spanning Tree Protocol (STP) provides tree topography for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops. Loops occur when alternate routes exist between hosts. Loops in an extended network can cause bridges to forward traffic indefinitely, resulting in increased traffic and reducing network efficiency.
  • Page 150: Defining Stp On Interfaces

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining STP on Interfaces The STP Properties Page contains parameters for enabling STP on the device. The STP Properties Page is divided into three areas, Global Settings, Bridge Settings. and Designated Root. 1. Click Bridging > Spanning Tree > Properties. The STP Properties Page opens:...
  • Page 151 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • BPDU Handling — Determines how BPDU packets are managed when STP is disabled on the port/ device. BPDUs are used to transmit spanning tree information. The possible field values are: – Filtering — Filters BPDU packets when spanning tree is disabled on an interface. This is the default value.
  • Page 152: Defining Interface Settings

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide 3. Click Apply. STP is enabled, and the device is updated. Defining Interface Settings Network administrators can assign STP settings to specific interfaces using the STP Interface Settings Page. To assign STP settings to an interface: 1.
  • Page 153 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide optimizes the STP protocol convergence. STP convergence can take 30-60 seconds in large networks. • Root Guard — Prevents devices outside the network core from being assigned the spanning tree root. • Port State — Displays the current STP state of a port. If enabled, the port state determines what forwarding action is taken on traffic.
  • Page 154 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Designated Cost — Indicates the cost of the port participating in the STP topology. Ports with a lower cost are less likely to be blocked if STP detects loops. • Forward Transitions — Indicates the number of times the port has changed from the Blocking state to Forwarding state.
  • Page 155 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide optimizes the STP protocol convergence. STP convergence can take 30-60 seconds in large networks. • Enable Root Guard — Enable the prevention of a devices outside the network core from being assigned the spanning tree root.
  • Page 156: Defining Rapid Spanning Tree

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Rapid Spanning Tree While the classic spanning tree prevents Layer 2 forwarding loops in a general network topology, convergence can take between 30-60 seconds. This time may delay detecting possible loops, and propagating status topology changes.
  • Page 157 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Alternate — Provides an alternate path to the root switch from the root interface. – Backup — Provides a backup path to the designated port path toward the Spanning Tree leaves. Backup ports occur only when two ports are connected in a loop by a point-to-point link.
  • Page 158 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit Rapid Spanning Tree Page The Edit Rapid Spanning Tree Page contains the following fields: • Interface — Displays the port or LAG on which Rapid STP is enabled. • Role — Indicates the port role assigned by the STP algorithm in order to provide to STP paths. The possible field values are: –...
  • Page 159 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Disable — Indicates that RSTP is disabled on the port. • Point-to-Point Admin Status — Indicates if a point-to-point links is established, or permits the device to establish a point-to-point link. The possible field values are: –...
  • Page 160: Defining Multiple Spanning Tree

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Multiple Spanning Tree MSTP provides differing load balancing scenarios. For example, while port A is blocked in one STP instance, the same port is placed in the Forwarding State in another STP instance. The MSTP Properties page contains information for defining global MSTP settings, including region names, MSTP revisions, and maximum hops.
  • Page 161: Defining Mstp Properties

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining MSTP Properties The MSTP Properties Page contains information for defining global MSTP settings, including region names, MSTP revisions, and maximum hops. To define MSTP: 1. Click Bridging > Spanning Tree > MSTP > Properties. The MSTP Properties Page opens:...
  • Page 162: Instance To Vlan

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Instance to VLAN The VLAN screen enables mapping VLANs to MSTP Instances. 1. Click Bridging > Spanning Tree > MSTP > Instance to VLAN. The Instance to VLAN Page opens: Instance to VLAN Page The Instance to VLAN Page contains the following fields: •...
  • Page 163: Interface Settings

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide MSTP Instance Settings Page The MSTP Instance Settings Page contains the following fields: • Instance ID — Defines the VLAN group to which the interface is assigned. • Included VLAN — Maps the selected VLAN to the selected instance. Each VLAN belongs to one instance.
  • Page 164 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide 1. Click Bridging > Spanning Tree > MSTP > Interface Settings. The MSTP Interface Settings Page opens: MSTP Interface Settings Page The MSTP Instance Settings Page contains the following fields: • Instance ID — Lists the MSTP instances configured on the device. Possible field range is 0-15.
  • Page 165 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Boundary Port — Indicates the port is a boundary port. A Boundary port attaches MST bridges to LAN in an outlying region. If the port is a boundary port, it also indicates whether the device on the other side of the link is working in RSTP or STP mode –...
  • Page 166 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Interface State — Indicates whether the port is enabled or disabled in the specific instance. 2. Click the Interface Table button. The Interface Table Page opens: Interface Table Page The Interface Table Page contains the following fields: •...
  • Page 167 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Rapid STP — Indicates that Rapid STP is enabled on the device. – Multiple STP — Indicates that Multiple STP is enabled on the device. • Type — Indicates if the port is a point-to-point port, or a port connected to a hub. The possible field values are: –...
  • Page 168 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 10:...
  • Page 169: Chapter 11: Configuring Snmp

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring SNMP The Simple Network Management Protocol (SNMP) provides a method for managing network devices. The device supports the following SNMP versions: SNMP v1 and v2 SNMP agents maintain a list of variables that are used to manage the device. The variables are defined in the Management Information Base (MIB).
  • Page 170: Configuring Snmp Security

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring SNMP Security The Security section contains the following pages: • Defining Engine ID • Defining SNMP Views • Defining SNMP Users • Define SNMP Groups • Defining SNMP Communities Defining Engine ID The Engine ID Page provides information for defining the device engine ID.
  • Page 171: Defining Snmp Views

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide that the Engine ID is unique for the administrative domain. This prevents two devices in a network from having the same Engine ID. • Use Default — Uses the device generated Engine ID. The default Engine ID is based on the device MAC address and is defined per standard as: –...
  • Page 172 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – DefaultSuper — Displays the default SNMP view for administrator views. • Object ID Subtree — Indicates the device feature OID included or excluded in the selected SNMP view. The options to select the Subtree are as follows: –...
  • Page 173: Defining Snmp Users

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide 3. Define the relevant fields. 4. Click Apply. The SNMP views are defined, and the device is updated. Defining SNMP Users The SNMP Users Page provides information for creating SNMP groups, and assigning SNMP access control privileges to SNMP groups.
  • Page 174 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add SNMP Group Membership Page The Add SNMP Group Membership Page provides information for assigning SNMP access control privileges to SNMP groups. The Add SNMP Group Membership Page contains the following fields. •...
  • Page 175: Define Snmp Groups

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Each byte in hexadecimal character strings is two hexadecimal digits. Each byte can be separated by a period or a colon. • Privacy Key — Defines the Privacy Key (LSB). If only authentication is required, 20 bytes are defined.
  • Page 176 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – SNMPv3 — SNMPv3 is defined for the group. • Security Level — Defines the security level attached to the group. Security levels apply to SNMPv3 only. The possible field values are: –...
  • Page 177: Defining Snmp Communities

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Default — Defines the default group access rights. – DefaultSuper — Defines the default group access rights for administrator. Modifying SNMP Group Profile Settings 1. Click System > SNMP > Security > Groups. The SNMP Groups Profile Page opens: 2.
  • Page 178 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide SNMP Communities Page The SNMP Communities Page is divided into the following tables: • SNMP Communities Basic Table • SNMP Communities Advanced Table The SNMP Communities Basic Table area contains the following fields: •...
  • Page 179 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide 2. Click the Add button. The Add SNMP Community Page opens. Add SNMP Community Page The Add SNMP Community Page allows network managers to define and configure new SNMP communities. The Add SNMP Community Page contains the following fields: •...
  • Page 180 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit SNMP Community Page The Edit SNMP Community Page contains the following fields: • SNMP Management — Defines the management station IP address for which the advanced SNMP community is defined. • Community String — Defines the password used to authenticate the management station to the device.
  • Page 181: Defining Trap Management

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Trap Management The Defining Trap Management section contains the following pages: • Defining Trap Settings • Configuring Station Management • Defining SNMP Filter Settings Defining Trap Settings 1. Click System > SNMP > Security > Trap Management > Trap Settings. The Trap Settings Page...
  • Page 182: Configuring Station Management

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Enable — Enables the device to send authentication failure notifications. – Disable — Disables the device from sending authentication failure notifications. Configuring Station Management 1. Click System > SNMP > Security > Trap Management > Station Management. The Station...
  • Page 183 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – SNMP V2 — Indicates SNMP Version 2 traps are sent. • UDP Port — Displays the UDP port used to send notifications. The default is 162. • Filter Name — Indicates if the SNMP filter for which the SNMP Notification filter is defined.
  • Page 184 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add SNMP Notification Recipient Page The Add SNMP Notification Recipient Page contains information for defining filters that determine whether traps are sent to specific users, and the trap type sent. SNMP notification filters provide the following services: •...
  • Page 185 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Notification Version — Determines the trap type. The possible field values are: – SNMP V1 — Indicates SNMP Version 1 traps are sent. – SNMP V2 — Indicates SNMP Version 2 traps are sent.
  • Page 186 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide SNMP Notification Receiver Page The SNMP Notification Receiver Page contains the following fields: • Recipients IP — Indicates the IP address to whom the traps are sent. • Notification Type — Defines the notification sent. The possible field values are: –...
  • Page 187 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • User Name — Defines the user to whom SNMP notifications are sent. • Security Level — (SNMP v3) Defines the means by which the packet is authenticated. The possible field values are: –...
  • Page 188: Defining Snmp Filter Settings

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining SNMP Filter Settings The Filter Settings Page permits filtering traps based on OIDs. Each OID is linked to a device feature or a feature aspect. The Filter Settings Page also allows network managers to filter notifications.
  • Page 189 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Included — Sends OID traps or informs. 2. Click the Add button. The Add SNMP Notification Filter Page opens: Add SNMP Notification Filter Page The Add SNMP Notification Filter Page contains the following fields: •...
  • Page 190 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 11:...
  • Page 191: Chapter 12: Configuring Quality Of Service

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring Quality of Service Network traffic is usually unpredictable, and the only basic assurance that can be offered is best effort traffic delivery. To overcome this challenge, Quality of Service (QoS) is applied throughout the network.
  • Page 192: Defining General Settings

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Defining General Settings • Defining Advanced Mode • Defining QoS Basic Mode The section also contains the following pages: • Configuring Policy Table Defining General Settings The QoS General Settings section contains the following pages: •...
  • Page 193: Defining Cos

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining CoS The CoS Page contains fields for enabling or disabling CoS. In addition, the Trust mode can be selected. The Trust mode relies on predefined fields within the packet to determine the egress queue settings.
  • Page 194: Defining Queue

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Checked — Restores the factory QoS default settings to ports. – Unchecked— Maintains the current QoS settings. Modifying Interface Priorities 1. Click Quality of Service > General > CoS. The CoS Page opens: 2.
  • Page 195 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Queue Page The Queue Page contains the following fields: • Strict Priority — Indicates that traffic scheduling for the selected queue is based strictly on the queue priority. • WRR — Indicates that traffic scheduling for the selected queue is based strictly on the WRR.
  • Page 196: Mapping Cos To Queue

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Mapping CoS to Queue 1. Click Quality of Service > General > CoS to Queue. The Cos to Queue Page opens: Cos to Queue Page The Cos to Queue Page contains the following fields: •...
  • Page 197: Mapping Dscp To Queue

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Mapping DSCP to Queue The DSCP to Queue Page enables mapping DSCP values to specific queues. To map DCSP to Queues: 1. Click Quality of Service > General > DSCP to Queue. The DSCP to Queue Page opens:...
  • Page 198 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Bandwidth Page The Bandwidth Page contains the following fields: • Port — Indicates the port for which the bandwidth settings are displayed. • LAG — Indicates the LAG for which the bandwidth settings are displayed.
  • Page 199 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide 2. Click the Edit button. The Edit Bandwidth Page opens: Edit Bandwidth Page The Edit Bandwidth Page contains the following fields: • Interface — Indicates the interface for which the queue shaping information is displayed. The possible field values are: –...
  • Page 200: Defining Advanced Mode

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining Advanced Mode Advanced QoS mode provides rules for specifying flow classification and assigning rule actions that relate to bandwidth management. The rules are defined in classification control lists (CCL). CCLs are set according to the classification defined in the ACL, and they cannot be defined until a valid ACL is defined.
  • Page 201: Defining Class Mapping

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide DSCP Mapping Page The DSCP Mapping Page contains the following fields: • DSCP In — Indicates the Differentiated Services Code Point value in the incoming packet. • DSCP Out — Indicates the Differentiated Services Code Point value in the outgoing packet.
  • Page 202 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Class Mapping Page The Class Mapping Page contains the following fields: • Class Map Name — Selects an existing Class Map by name. • ACL1 — Contains a list of the user-defined ACLs.
  • Page 203: Defining Aggregate Policer

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Preferred ACL — Indicates if packets are first matched to an IP based ACL or a MAC based ACL. The possible field values are: – IP Based ACLs — Matches packets to IP based ACLs first, then matches packets to MAC based ACLs.
  • Page 204 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Aggregate Policer Name— Specifies the Aggregate Policer Name • Ingress Committed Information Rate (CIR) — Defines the CIR in bits per second. This field is only relevant when the Police value is Single.
  • Page 205 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Modifying QoS Aggregate Policer 1. Click Quality of Service > Advanced > Aggregate Policer. The Aggregate Policer Page opens: 2. Click the Edit Button. The Edit QoS Aggregate Policer Page opens: Edit QoS Aggregate Policer Page The Edit QoS Aggregate Policer Page contains the following fields.
  • Page 206: Configuring Policy Table

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring Policy Table 1. Click Quality of Service > Advanced > Policy Table. The Policy Table Page opens: Policy Table Page The Policy Table Page contains the following fields: • Policy Name— Displays the user-defined policy name.
  • Page 207 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Action — Defines the action attached to the rule. The possible field values are: – Trust CoS-DSCP — Enables Trust Mode for the class. This command is used to distinguish the QoS trust behavior for given traffic. When a given type is trusted, the QoS mechanism maps a packet to a queue using the received or default value and the relevant map, as defined on the QoS Settings.
  • Page 208 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit QoS Policy Profile Page The Edit QoS Policy Profile Page contains the following fields. • New Policy Name— Displays the user-defined policy name. • Class Map — Displays the user-defined name of the class map.
  • Page 209: Defining Policy Binding

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Ingress Committed Burst Size (CBS) — Defines the CBS in bytes per second. This field is only relevant when the Police value is Single. • Exceed Action — Action assigned to incoming packets exceeding the CIR. This field is only relevant when the Police value is Single.
  • Page 210 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add QoS Policy Binding Page The Add QoS Policy Binding Page contains the following fields. • Interface — Displays the interface to which the entry refers. • Policy Name — Displays a Policy name configured to the interface.
  • Page 211: Defining Qos Basic Mode

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining QoS Basic Mode 1. Click Quality of Service > Basic Mode. The Basic Mode Page opens: Basic Mode Page The Basic Mode Page contains the following fields: • Trust Mode — Displays the trust mode. If a packet’s CoS tag and DSCP tag, and TCP/UDP mapping are mapped to different queues, the Trust Mode determines the queue to which the packet is assigned.
  • Page 212 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide DSCP Mapping Page The DSCP Mapping Page enables mapping DSCP values from incoming packets to DSCP values in outgoing packets. The DSCP Mapping Page contains the following fields: • DSCP In — Indicates the Differentiated Services Code Point value in the incoming packet.
  • Page 213: Chapter 13: Managing System Files

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Managing System Files File Management Overview The configuration file structure consists of the following configuration files: • Startup Configuration File — Contains the commands required to reconfigure the device to the same settings as when the device is powered down or rebooted. The Startup file is created by copying the configuration commands from the Running Configuration file or the Backup Configuration file.
  • Page 214: Firmware Upgrade

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Firmware Upgrade 1. Click Admin > File Management > Firmware Upgrade. The Firmware Upgrade Page opens: Firmware Upgrade Page The Firmware Upgrade Page contains the following fields: • Upgrade — Specifies the firmware upgrade is an upgrade function.
  • Page 215: Save Configuration

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Save Configuration 1. Click Admin > File Management > Save Configuration. The Save Configuration Page opens: Save Configuration Page The Save Configuration Page contains the following fields: • Upgrade — Specifies the firmware upgrade is an upgrade function.
  • Page 216: Copy Files

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Copy Files All software images on the stack must be identical to ensure proper operation of the stack. There are two different ways to update images across the stack: • Image can be updated prior to connecting a unit to the stack. (This is the recommended method.) •...
  • Page 217: Active Image

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Copy Files Page The Copy Files Page contains the following fields: • Restore Configuration Factory Defaults — Resets the Configuration file to the factory defaults. The factory defaults are reset after the device is reset. When not selected, the device maintains the current Configuration file.
  • Page 218 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Active Image Page The Active Image Page contains the following fields: • Unit No. — Indicates the unit number for which the Image file is selected. • Active Image — Indicates the Image file which is currently active on the unit.
  • Page 219: Chapter 14: Managing System Logs

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Managing System Logs The System Logs enable viewing device events in real time, and recording the events for later usage. System Logs record and manage events and report errors or informational messages. Event messages have a unique format, as per the SYSLOG protocols recommended message format for all error reporting.
  • Page 220 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Log Settings Page The Log Settings Page contains the following fields: • Enable Logging — Indicates if device global logs for Console, Memory Logs, and Log Flash. • Severity — The following are the available severity logs: –...
  • Page 221: Viewing The Device Memory Logs

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide 2. Define the relevant fields. 3. Click Apply. The global log parameters are set, and the device is updated. Viewing the Device Memory Logs The Memory Log Page contains all system logs in a chronological order that are saved in RAM (Cache).
  • Page 222: Viewing The Flash Logs

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide 2. Click the Clear Logs button. The message logs are cleared. Viewing the Flash Logs The Flash Page contains information about log entries saved to the Log File in FLASH, including the time the log was generated, the log severity, and a description of the log message. The Message Log is available after reboot.
  • Page 223: Viewing Remote Logs

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Viewing Remote Logs The Remote Log Servers Page contains information for viewing and configuring the Remote Log Servers. New log servers can be defined, and the log severity sent to each server. 1. Click Admin > Logs > Remote Log Servers. The Remote Log Servers Page opens:...
  • Page 224 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add Syslog Server Page The Add Syslog Server Page contains information for viewing and configuring the Remote Log Servers. New log servers can be defined, and the log severity sent to each server.
  • Page 225 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Syslog Server Settings Page The Syslog Server Settings Page contains the following fields: • Server — Specifies the server to which logs can be sent. • UDP Port (1-65535) — Defines the UDP port to which the server logs are sent. The possible range is 1 to 65535.
  • Page 226 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 14:...
  • Page 227: Chapter 15: Configuring System Time

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring System Time The device supports the Simple Network Time Protocol (SNTP). SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. The device operates only as an SNTP client, and cannot provide time services to other systems.
  • Page 228: Defining System Time

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining System Time The System Time Page contains fields for defining system time parameters for both the local hardware clock, and the external SNTP clock. If the system time is kept using an external SNTP clock, and the external SNTP clock fails, the system time reverts to the local hardware clock.
  • Page 229 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Daylight Savings — Enables the Daylight Savings Time (DST) on the device based on the devices location. The possible field values are: – USA — The device switches to DST at 2 a.m. on the first Sunday of April, and reverts to standard time 2 a.m.
  • Page 230: Defining Sntp Settings

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide – Time — The time at which DST begins every year. The field format is Hour:Minute, for example, 02:10. • To — Indicates the recurring time that DST ends each year. For example, DST ends locally every fourth Friday in October at 5:00 am.
  • Page 231 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Enable SNTP Broadcast — Enables polling the selected SNTP Server for system time information, when enabled. • SNTP Server — Indicates the user-defined SNTP server IP address. Up to eight SNTP servers can be defined •...
  • Page 232: Defining Sntp Authentication

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add SNTP Server Page The Add SNTP Server Page contains the following fields: • SNTP Server — Defines user-defined SNTP server IP address. • Enable Poll Interval — Indicates whether or not the device polls the selected SNTP server for system time information.
  • Page 233 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide SNTP Authentication Page The SNTP Authentication Page contains the following fields: • Enable SNTP Authentication — Indicates if authenticating an SNTP session between the device and an SNTP server is enabled on the device. The possible field values are: –...
  • Page 234 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add SNTP Authentication Page The Add SNTP Authentication Page contains the following fields: • Encryption Key ID — Defines the Key Identification used to authenticate the SNTP server and device. The field value is up to 4294967295 characters.
  • Page 235: Chapter 16: Viewing Statistics

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Viewing Statistics This section provides device statistics for RMON, interfaces, GVRP, EAP, and Etherlike statistics. This section contains the following topics: • Viewing Ethernet Statistics • Managing RMON Statistics Viewing Ethernet Statistics The Ethernet section contains the following pages: •...
  • Page 236 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Interface Page The Interface Page contains the following fields: The General Information area contains the following fields: • Interface — Indicates the device for which statistics are displayed. The possible field values are: –...
  • Page 237: Resetting Interface Statistics Counters

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Multicast Packets — Displays the number of good Multicast packets received on the interface since the device was last refreshed. • Broadcast Packets — Displays the number of good broadcast packets received on the interface since the device was last refreshed.
  • Page 238 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Etherlike Page The Etherlike Page contains interface statistics. The Etherlike Page contains the following fields: • Interface — Indicates the device for which statistics are displayed. The possible field values are: – Port — Defines the specific port for which Etherlike statistics are displayed.
  • Page 239: Resetting Etherlike Statistics Counters

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Excessive Collisions — Displays the number of excessive collisions received on the selected interface. • Oversize Packets — Displays the number of oversized packets (over 1518 octets) received on the interface since the device was last refreshed.
  • Page 240 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide GVRP Page The GVRP Page contains device statistics for GVRP. The GVRP Page is divided into two areas, GVRP Statistics Table and GVRP Error Statistics Table. The following fields are relevant for both tables: •...
  • Page 241: Resetting Gvrp Statistics Counters

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Leave Empty — Displays the device GVRP Leave Empty statistics. • Join In — Displays the device GVRP Join In statistics. • Leave In — Displays the device GVRP Leave in statistics.
  • Page 242 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide EAP Page The EAP Page contains information about EAP packets received on a specific port. The EAP Page page contains the following fields: • Unit Number — Indicates the stacking member for which the EAP statistics are displayed.
  • Page 243 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Respond Frames Receive — Indicates the number of EAP Resp/Id frames that have been received on the port. • Request ID Frames Transmit — Indicates the number of EAP Req/Id frames transmitted via the port.
  • Page 244: Managing Rmon Statistics

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Managing RMON Statistics The RMON section contains the following pages: • Viewing RMON Statistics • Configuring RMON History • Configuring RMON Events • Viewing the RMON Events Logs Chapter 16:...
  • Page 245: Viewing Rmon Statistics

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Viewing RMON Statistics The RMON Statistics Page contains fields for viewing information about device utilization and errors that occurred on the device. To view the RMON statistics: 1. Click Statistics > RMON > Statistics. The RMON Statistics Page opens:...
  • Page 246: Resetting Rmon Statistics Counters

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Received Bytes (Octets) — Displays the number of octets received on the interface since the device was last refreshed. This number includes bad packets and FCS octets, but excludes framing bits. •...
  • Page 247: Configuring Rmon History

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Configuring RMON History This section contains the following topics: • Defining RMON History Control • Viewing the RMON History Table Defining RMON History Control The RMON History Control Page contains information about samples of data taken from ports. For example, the samples may include interface definitions or polling periods.
  • Page 248 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Sampling Interval — Indicates in seconds the time that samplings are taken from the ports. The field range is 1-3600. The default is 1800 seconds (equal to 30 minutes). • Sampling Requested — Displays the number of samples to be saved. The field range is 1-65535.
  • Page 249 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Modify History Control Settings 1. Click Statistics > RMON > History. The RMON History Control Page opens. 2. Click the Edit button. The History Control Settings Page opens: History Control Settings Page The History Control Settings Page contains the following fields: •...
  • Page 250: Viewing The Rmon History Table

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Viewing the RMON History Table 1. Click Statistics > RMON > History. The RMON History Control Page opens: 2. Click the History Table button. The RMON History Table Page opens: RMON History Table Page The RMON History Table Page contains the following fields: •...
  • Page 251: Configuring Rmon Events

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • CRC Align Errors — Displays the number of CRC and Align errors that have occurred on the interface since the device was last refreshed. • Undersize Packets — Displays the number of undersized packets (less than 64 octets) received on the interface since the device was last refreshed.
  • Page 252 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide RMON Events Page The RMON Events Page contains fields for defining RMON events. The RMON RMON Events Page page contains the following fields: • Event Entry — Displays the event. • Community — Displays the community to which the event belongs.
  • Page 253 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Add RMON Events Page The Add RMON Events Page contains the following fields: • Event Entry — Displays the event. • Community — Displays the community to which the event belongs. • Description — Displays the user-defined event description.
  • Page 254: Viewing The Rmon Events Logs

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Modify Event Control Settings Page The Modify Event Control Settings Page contains the following fields: • Event Entry — Displays the event. • Community — Displays the community to which the event belongs.
  • Page 255: Defining Rmon Alarms

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Events Page The Events Page contains the following fields: • Event — Displays the RMON Events Log entry number. • Log No.— Displays the log number. • Log Time — Displays the time when the log entry was entered.
  • Page 256 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide RMON Alarms Page The RMON Alarms Page contains the following fields: • Alarm Entry — Indicates a specific alarm. • Counter Name — Displays the selected MIB variable. • Interface — Displays the interface for which RMON statistics are displayed. The possible field v values are: –...
  • Page 257 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Rising Event — Selects an event which is defined in the Events table that triggers the rising threshold alarm. The Events Table is displayed in the RMON Events page. • Falling Threshold — Displays the falling counter value that triggers the falling threshold alarm.
  • Page 258 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Sample Type — Defines the sampling method for the selected variable and comparing the value against the thresholds. The possible field values are: – Delta — Subtracts the last sampled value from the current value. The difference in the values is compared to the threshold.
  • Page 259 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit RMON Alarms Page The Edit RMON Alarms Page contains the following fields: • Alarm Entry — Indicates a specific alarm. • Interface — Displays the interface for which RMON statistics are displayed. The possible field v values are: –...
  • Page 260 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Falling Threshold — Displays the falling counter value that triggers the falling threshold alarm. The falling threshold is graphically presented on top of the graph bars. Each monitored variable is designated a color.
  • Page 261: Chapter 17: Managing Device Diagnostics

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Managing Device Diagnostics This section contains information for configuring port mirroring, running cable tests, and viewing device operational information, and includes the following topics: • Viewing Integrated Cable Tests • Performing Optical Tests •...
  • Page 262 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Port — Specifies port to which the cable is connected. • Test Result — Displays the cable test results. Possible values are: – No Cable — Indicates that a cable is not connected to the port.
  • Page 263: Performing Optical Tests

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Cable length — Displays the cable length. • Channel — Displays the cable’s channel. • Polarity — Automatic polarity detection and correction permits on all RJ-45 ports for automatic adjustment of wiring errors.
  • Page 264: Configuring Port Mirroring

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Current — Displays the current at which the cable is operating. • Output Power — Indicates the rate at which the output power is transmitted. • Input Power — Indicates the rate at which the input power is transmitted.
  • Page 265 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide • Destination Port — Defines the port to which traffic is mirrored. • Type — Indicates the port mode configuration for port mirroring. The possible field values are: – RxOnly — Defines the port mirroring on receiving ports. This is the default value.
  • Page 266 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Edit Port Mirroring Page The Edit Port Mirroring Page contains the following fields: • Source Port — Defines the port to which traffic is mirrored. • Type — Indicates the port mode configuration for port mirroring. The possible field values are: –...
  • Page 267: Defining Cpu Utilization

    Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Defining CPU Utilization The CPU Utilization Page contains information about the system’s CPU utilization. CPU Utilization Page The CPU Utilization Page contains the following fields: • CPU Utilization — Displays CPU resource utilization information. The possible field values are: –...
  • Page 268 Chapter SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide Chapter 17:...
  • Page 269: Appendix A: Linksys One Contact Information

    Need to contact Linksys One? Visit us online for information on the latest products and updates to your existing products at: http:// www.linksys.com/international If you experience problems with any Linksys product, you can e-mail us at: In Europe E-mail Address Austria support.at@linksys.com...
  • Page 270 Appendix SFE2000/SFE2000P Gigabit Ethernet Switch Reference Guide In Europe E-mail Address United Kingdom support.uk@linksys.com Outside of Europe E-mail Address Asia Pacific asiasupport@linksys.com (English only) Latin America support.portuguese@linksys.com or support.spanish@linksys.com Middle East & Africa support.mea@linksys.com (English only) South Africa support.ze@linksys.com (English only) support.ae@linksys.com (English only)

This manual is also suitable for:

Sfe2000pSge2000Sge2000p

Table of Contents