Page 1 ® Part No. 801-00310-000 Published September 1996 Revision 01 ™ UPER TACK DMINISTRATION UIDE II S 2200 WITCH ONSOLE...
Page 2 95052-8145 © 3Com Corporation, 1996. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without permission from 3Com Corporation.
Page 3: Table Of Contents
How to Use This Guide 2 Conventions 3 Switch 2200 Documentation 4 Documentation Comments 5 NTRODUCTION UPER TACK About Switch 2200 Administration 1-1 Conﬁguration Tasks 1-1 OW TO SE THE Initial User Access 2-1 Levels of User Access 2-1 Administer Access Example 2-2...
Page 4 Administration Console Interface Parameters 2-10 Adjusting the Screen Height 2-10 Disabling the Reboot and Abort Keys 2-11 Remote Access Parameters 2-11 Preventing Disconnections 2-11 Enabling Timeout of Remote Sessions 2-12 Setting Timeout Interval for Remote Sessions 2-13 Running Scripts of Administration Console Tasks 2-13 Getting Help in the Administration Console 2-16 Online Help 2-16 Viewing More Levels of Menu Options 2-16...
Page 5 Setting Up SNMP on Your System 3-15 Displaying SNMP Settings 3-15 Conﬁguring Community Strings 3-15 Administering SNMP Trap Reporting 3-16 Displaying Trap Information 3-16 Conﬁguring Trap Reporting 3-17 Removing Trap Destinations 3-18 Flushing Trap Destinations 3-19 Setting Up SMT Event Proxying 3-19 DMINISTERING Displaying the System Conﬁguration 4-1 Setting Passwords 4-2...
Page 6 DMINISTERING Administering FDDI Stations 8-1 Displaying Station Information 8-2 Setting the Connection Policies 8-3 Setting Neighbor Notiﬁcation Timer 8-5 Enabling and Disabling Status Reporting 8-5 Administering FDDI Paths 8-6 Displaying Path Information 8-6 Setting tvxLowerBound 8-7 Setting tmaxLowerBound 8-8 Setting maxT-Req 8-9 Administering FDDI MACs 8-9 Displaying MAC Information 8-10 Setting the Frame Error Threshold 8-16...
Page 7 Administering STP Bridge Parameters 10-7 Enabling and Disabling STP on a Bridge 10-7 Setting the Bridge Priority 10-7 Setting the Bridge Maximum Age 10-8 Setting the Bridge Hello Time 10-9 Setting the Bridge Forward Delay 10-9 Setting the STP Group Address 10-10 DMINISTERING Displaying Bridge Port Information 11-1 Setting the Multicast Limit 11-7...
Page 8 Loading Packet Filters 12-22 Assigning Packet Filters to Ports 12-22 Unassigning Packet Filters from Ports 12-24 ONFIGURING ACKET ILTERS Using Groups in Packet Filters 13-1 Listing Groups 13-2 Displaying Groups 13-3 Creating New Groups 13-4 Deleting Groups 13-6 Adding Addresses and Ports to Groups 13-7 Removing Addresses or Ports from a Group 13-9 Loading Groups 13-11 PPENDIXES...
Page 9 ECHNICAL UPPORT Online Technical Services B-1 3Com Bulletin Board Service B-1 Access by Modem B-1 Access by ISDN B-2 World Wide Web Site B-2 3ComForum on CompuServe® B-2 3ComFactsSM Automated Fax Service B-3 Support from Your Network Supplier B-3 Support from 3Com B-4...
Page 10: About This Guide
Introduction The SuperStack™ II Switch 2200 Administration Console User Guide provides all the information you need to conﬁgure and manage your Switch 2200 once it is installed and the system is attached to the network. Prior to using this guide, you should have already installed and set up your system using the SuperStack™...
Page 11: How To Use This Guide
How to Use This guide is organized by types of tasks you may need to perform on the This Guide Switch 2200. The parts of the guide are described in Table 1. Table 1 Description of Guide Parts Part I: Introduction...
Page 12 Table 1 Description of Guide Parts (continued) Part IV: Bridging V: Appendixes Conventions Table 2 and Table 3 list icon and text conventions that are used throughout this guide. Table 2 Notice Icons Icon Contents Configuring bridge and bridge port parameters Administering the Spanning Tree Protocol bridge and bridge port parameters Displaying and configuring bridge port addresses...
Page 13 SuperStack™ II Switch 2200 Unpacking Instructions Describes how to unpack your Switch 2200. It also provides you with an inventory list of all the items that came with your system. (Shipped with system/Part No. 801-00312-000) SuperStack™...
Page 14: Documentation Comments
Command Quick Reference for the SuperStack™ II Switch 2200 Administration Console Contains all of the Administration Console intelligent switching commands for the Switch 2200 system. (Folded card; shipped with system/Part No. 801-00314-000) Documentation Your suggestions are very important to us: To help make Switch...
Page 15 NTRODUCTION Chapter 1 Overview of SuperStack™ II Switch 2200 Administration Chapter 2 How to Use the Administration Console...
Page 16: About Switch 2200 Administration
About Switch 2200 Administration The Switch 2200 software is installed at the factory in ﬂash memory on the system processor. Because this software boots from ﬂash memory automat- ically when you power on your system, the system is immediately ready for use in your network.
Page 17 For Details, See. . . page 2-13 page 4-1 SuperStack™ II Switch 2200 Software Installation and Release Notes page 5-2 page 2-12 page 4-2 page 3-20 page 4-3 page 4-3...
Page 18 Table 1-1 General System Commands (continued) Task Save, restore, or reset nonvolatile data in the system Provide a backup for nonvolatile data, restore nonvolatile data to the system, or reset nonvolatile data to defaults. Reboot the system Restart the system. Disconnects rlogin and telnet sessions. Table 1-2 System Management Setup Commands Task Configure the Console port baud rate...
Page 19 1: S ™ II S HAPTER UPER TACK Table 1-2 System Management Setup Commands (continued) Task Configure SNMP management Display current SNMP configurations and specify the type of authorization for SNMP management. Configure SNMP trap reporting Display SNMP trap reporting information, add or modify trap reporting destination configurations, remove trap destinations, flush all SNMP trap reporting destinations, and set up SMT event proxying.
Page 20 Table 1-3 Bridging Commands (continued) Task Configure Spanning Tree Protocol (STP) parameters for a bridge Enable or disable STP and set the bridge priority, the maximum age of stored configuration message information, the period between the generation of messages by a root bridge, the amount of time a bridge spends in the listening and learning states, and the group address.
Page 21 1: S ™ II S HAPTER UPER TACK Table 1-4 Ethernet Commands Task Display Ethernet port information Display label, status, and statistic information on Ethernet ports in a summarized or detailed format. Label an Ethernet port Assign a unique name to an Ethernet port. Useful for port identification when managing the system.
Page 22 Table 1-5 FDDI Commands Task Display FDDI information Display information about the system’s FDDI station, paths, MAC, and ports. MAC information is available in a summarized or detailed format. Set FDDI station parameters Set parameters for connection policies, the neighbor notification timer, and status reporting.
Page 23: Levels Of User Access
The Administration Console supports three password levels, allowing the Access network administrator to provide different levels of access for a range of Switch 2200 users. These access levels are described in Table 2-1. Table 2-1 Password Access Levels OW TO...
Page 24: Administer Access Example
2: H HAPTER OW TO SE THE Each time you access the Administration Console, the system prompts you for an access level and password, as shown here: Select access level (read, write, administer): Password: The passwords are stored in nonvolatile (NV) memory. You must enter the password correctly before you are allowed to continue.
Page 25: Using Menus To Perform Tasks
Read Access If you have read access, the system menu contains only the display options Example shown here: Menu options: ------------------------------------------------------------------ display Only the display baseline option in the Type ‘q’ to return to the previous menu or ? for help. baseline menu -------------------------------------------------------------------------------- is available...
Page 26: Administration Console Menu Structure
2: H HAPTER OW TO SE THE Administration The following sections show the menu paths for performing tasks from the Console Menu top-level menu and provide a brief description of each top-level menu Structure option. See “Selecting Menu Options” on page 2-8 for instructions on actually using the menu system.
Page 27: Bridge Menu
FDDI Menu From the fddi menu, you can view information about and conﬁgure the FDDI station, paths, MAC, and ports. (See Figure 2-3.) For example, to enable the LLC service of the FDDI MAC, you enter fddi at the top-level menu, mac at the fddi menu, and then llcService at the mac menu.
Page 28 2: H HAPTER OW TO SE THE Top-Level Menu system ethernet fddi bridge snmp analyzer script logout Figure 2-4 Bridging Menu Hierarchy for Administer Access IP Menu From the ip menu, you can view information about and conﬁgure Internet Protocol (IP) interfaces and routes. You can also administer the Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP), and ping IP stations.
Page 29: Analyzer Menu
Analyzer Menu From the analyzer menu, you can selectively choose any Ethernet network segment attached to a Switch 2200 and monitor its activity using a network analyzer. (See Figure 2-7.) For example, to add analyzer ports, you enter analyzer at the top-level menu, and then add at the analyzer menu.
Page 30: Selecting Menu Options
2: H HAPTER OW TO SE THE Selecting Menu You select a menu option at the selection prompt by entering its name (or Options enough of the name to uniquely identify it within the particular menu). For example, to access the system menu from the top-level menu, you enter: Select a menu option: Select a menu option: Menu options are not case sensitive.
Page 31: Entering Values
Using Menus to Perform Tasks If you enter a command incorrectly, you receive a prompt telling you that what you entered was not valid or was ambiguous. You must re-enter the command from the point at which it became incorrect. Entering Values When you reach the level at which you perform a speciﬁc task, you are prompted for a value.
Page 32: Administration Console Interface Parameters
2-10 2: H HAPTER OW TO SE THE Administration You can change two Administration Console interface parameters: the Console Interface screen height and the functioning of the reboot and abort control keys. Parameters Adjusting the You can change the Administration Console’s screen height to increase or Screen Height decrease the space available for displaying information.
Page 33: Disabling The Reboot And Abort Keys
You can set parameters to prevent disconnections when another user remotely accesses the Administration Console, to enable the Switch 2200 to end remote sessions after a speciﬁed time period, and to specify the time interval before remote sessions are ended.
Page 34: Enabling Timeout Of Remote Sessions
Enabling Timeout You can conﬁgure the Switch 2200 to disconnect remote sessions after a of Remote Sessions user-speciﬁed time interval of no activity. By default, the telnet timeout is disabled. To enable or disable the telnet timeout:...
Page 35: Running Scripts Of Administration Console Tasks
Console Tasks a script. You can even script your entire system setup so that you can repeat the exact setup on another Switch 2200. You create scripts in an ASCII-based line editor, such as EMACS or vi. To run them from the Administration Console, you must access the directory where your scripts are stored.
Page 36 Setting up the Console port baud rate Setting the system name Assigning an IP address for management Checking the IP connection by pinging the Switch 2200 Enabling Spanning Tree on the system Setting up SNMP trap reporting...
Page 37 # This script performs some start-up configurations. # Set the Console serial port baud rate. system consoleSpeed # Set the system name system name Engineering Switch2200_4 # Assign an IP address to the Switch 2200. ip interface define 158.101.112.99 255.255.0.0 158.101.255.255 ip interface display...
Page 38: Getting Help In The Administration Console
2-16 2: H HAPTER OW TO SE THE Getting If you need assistance when using the Administration Console, it has online Help in the Help and an outlining feature, both of which can be accessed from any Administration menu level. These features are described in this section. Console Online Help The Administration Console online Help provides an overview of the...
Page 39: Exiting The Administration Console
Exiting the If you are using an rlogin session to access the system, exiting will terminate Administration the session. If you are accessing the system through the Console serial port, Console exiting returns you to the password prompt. To exit from the Administration Console: Top-Level Menu 1 Return to the top level of the Administration Console, if you are not already system...
Page 40 YSTEM Chapter 3 Conﬁguring Management Access to the System Chapter 4 Administering Your System Environment Chapter 5 Baselining Statistics Chapter 6 Saving, Restoring, and Resetting Nonvolatile Data EVEL UNCTIONS...
Page 42: Using A Serial Connection
This chapter describes how to conﬁgure management access to the SuperStack™ II Switch 2200 stackable switch through a serial connection or an IP interface. It also describes how to conﬁgure the Switch 2200 so that you can manage it using the Simple Network Management Protocol (SNMP).
Page 43: Setting Up The Console Serial Port
3: C HAPTER ONFIGURING In-band or By default, the Switch 2200 system provides in-band management through Out-of-band? its Ethernet and FDDI ports. In-band management, management using the same network that carries regular data trafﬁc, is often the most convenient and inexpensive way to access your system. If you are using a dedicated network for management data, then you are managing your network out-of-band.
Page 44: Setting Up An Ip Interface For Management
Setting Up an IP is a standard networking protocol used for communications among IP Interface for various networking devices. To access the system using TCP/IP or to manage Management the system using SNMP, you must set up IP for your system as described in this section.
Page 45: Displaying Interfaces
A single interface might contain several bridge ports. All of the ports corresponding to one interface share the same IP address, subnet mask, broadcast address, and cost. The Switch 2200 contains 17 ports: 1 FDDI and 16 Ethernet. Be sure that the port to which your management station is attached is included in an interface.
Page 46: Deﬁning An Interface
Deﬁning an interface deﬁnes the IP broadcast domain for frames sourced from the attached segment. To avoid unintentional ﬁltering of IP broadcasts, 3Com recommends that you include all ports. If you do not assign all ports to this interface, be sure that you include the port to which your network management station is attached.
Page 47: Modifying An Interface
3: C HAPTER ONFIGURING 3 Enter the subnet mask of the network to which the interface is to be connected. 4 Enter the broadcast address to be used on the interface. 5 Enter the cost value of the interface. 6 Enter the port(s) that you want to include in the interface. Separate nonconsecutive ports with commas (,).
Page 48: Removing An Interface
Removing an Interface You might want to remove an interface if you no longer need to communicate with IP on the ports associated with that interface. To remove an IP interface deﬁnition: Top-Level Menu system 1 From the top level of the Administration Console, enter: ethernet interface fddi...
Page 49: Displaying The Routing Table
In the following example, routes for the Switch 2200 are displayed. The script statistics default logout noDefault conﬁguration of RIP is indicated in the status display. Destination 158.101.4.0 158.101.3.0 158.101.2.0...
Page 50: Removing A Route
Defining a Static Route You might want to deﬁne a static route to transmit system trafﬁc, such as system pings or SNMP response, through a consistent route. Before you deﬁne static routes, you must deﬁne at least one IP interface. (See “Deﬁning an Interface”...
Page 51: Removing The Default Route
3-10 3: C HAPTER ONFIGURING Flushing a Route Flushing deletes all learned routes from the routing table. Top-Level Menu To ﬂush all learned routes, enter the following from the top level of the system ethernet interface Administration Console: fddi route display bridge static...
Page 52: Administering The Arp Cache
Administering The Switch 2200 uses the Address Resolution Protocol (ARP) to ﬁnd the the ARP Cache MAC addresses corresponding to the IP addresses of hosts and routers on the same subnets. An ARP cache is a table of known IP addresses and their corresponding MAC addresses.
Page 53: Flushing Arp Cache Entries
Once you have set up your IP interface, you might want to check to see if Station the Switch 2200 system can communicate with other systems over the IP network. To check, you can “ping” the IP address of your management station.
Page 54 Pinging uses the Internet Control Message Protocol (ICMP) echo facility to send an ICMP echo request packet to the IP station you specify. It then waits for an ICMP echo reply packet. Possible responses from pinging are: Alive No answer Network is unreachable.
Page 55: Displaying Ip Statistics
3-14 3: C HAPTER ONFIGURING Displaying IP The IP statistics you can view are described in Table 3-3. Statistics Table 3-3 IP Statistics Field inReceives forwDatagrams inDelivers outRequests outNoRoutes inHdrErrors inAddrErrors Top-Level Menu To display IP statistics, enter the following from the top level of the system Administration Console: ethernet...
Page 56: Conﬁguring Community Strings
Switch SNMP agent. The SNMP agent provides access to the collection of information about the Switch 2200. In addition, a Switch 2200 SNMP agent sends traps to an SNMP manager to report signiﬁcant events. Access to system information through SNMP is controlled by community strings.
Page 57: Administering Snmp Trap Reporting
3-16 3: C HAPTER ONFIGURING in the request matches the agent’s read-write community. Only the SNMP get and get-next requests are valid if the community string in the request matches the read-only community. When you set a community string, you can specify any value up to 48 Community string length characters long.
Page 58: Conﬁguring Trap Reporting
Here is an example display of the SNMP trap reporting information: Trap Descriptions: Trap #Description Trap Destinations Configured: Proxying of remote SMT events is disabled Conﬁguring Trap Reporting You can add new trap reporting destination conﬁgurations or you can modify an existing conﬁguration. You can deﬁne up to ten destination addresses and the set of traps that are sent to each destination address.
Page 59: Removing Trap Destinations
3-18 3: C HAPTER ONFIGURING 3 Enter the trap number(s). Separate a series of more than two trap numbers with a hyphen (-) and nonsequential trap numbers by commas. Enter the traps for the destination. The trap numbers you enter allow the trap speciﬁed by that number to be sent to the destination address when the corresponding event occurs.
Page 60: Setting Up Smt Event Proxying
Local SMT events are automatically reported by the SNMP agent in a Switch 2200 system. If you have a single Switch 2200 on your network and you have no other way to access FDDI information, then you should enable proxying of SMT events.
Page 61 3: C HAPTER ONFIGURING occurring locally on the one Switch 2200 and to those reported by other stations on the FDDI ring (including other Switch 2200s). Enable local SNMP traps and disable the proxying of remote SMT events on every Switch 2200 in your network. Local traps will be reported to the...
Page 62: Displaying The System Conﬁguration
The system conﬁguration display provides software and hardware revisions the System and warning messages for certain system conditions. Conﬁguration To display the conﬁguration of a Switch 2200, enter the following command from the top level of the Administration Console: Top-Level Menu system...
Page 63: Setting Passwords
4: A HAPTER DMINISTERING System temperature has exceeded the maximum level for normal operation Fan failure Power supply failure Setting The Administration Console supports three levels of password: one for Passwords browsing or viewing only (read), one for conﬁguring network parameters (write), and one for full system administration (administer).
Page 64: Changing The Date And Time
6 Repeat steps 1 through 5 for each level of password you want to conﬁgure. Setting the You should give the Switch 2200 an easily recognizable and unique name to System Name help you manage the system. For example, you might want to name the system according to its physical location (say, SS2200 ENGLAB).
Page 65: Rebooting The System
4: A HAPTER DMINISTERING Table 4-1 Date and Time Variables Format first mm second mm 4 Press [Return] when you want the system to start keeping the time that you entered. Example: Enter the new system time (mm/dd/yy hh:mm:ss xM): 09/30/96 10:00:00 AM Press RETURN at the exact time: Rebooting the...
Page 66: Displaying The Current Baseline
This chapter describes how baselining statistics work in the SuperStack™ II Switch 2200, and how to set, display, enable, or disable a baseline statistic. About Setting Normally, statistics for MACs and ports start compiling at system power-up. Baselines Baselining allows you to view statistics over the period of time since a baseline was set.
Page 67: Enabling Or Disabling Baselines
5: B HAPTER ASELINING Setting Baselines Setting a baseline resets the counters to zero. The accumulated totals since power up are maintained by the system. The baseline is time-stamped. Top-Level Menu To set a baseline, enter the following commands from the top level of the system Administration Console: display...
Page 68: About Working With Nonvolatile Data
This chapter describes the nonvolatile (NV) data in the SuperStack™ II Switch 2200 system and how to save, restore, and reset the data. About If you want to transfer NV data from one system to another, save the Working with system’s NV data and restore it as appropriate.
Page 69: Saving Nv Data
6: S HAPTER AVING ESTORING Saving NV Data When NV data is saved, it is written to a disk ﬁle on a host computer. The information can then be retrieved from the disk ﬁle when you use the restore command. To save NV data: Top-Level Menu 1 From the top level of the Administration Console, enter:...
Page 70: Restoring Nv Data
The failure message varies depending on the problem encountered while saving the NV data. At the end of the save, you are returned to the previous menu. Restoring When you restore system NV data, the software presents you with a NV Data proposal for how to restore the data.
Page 71 6: S HAPTER AVING ESTORING To restore the NV data: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet save system nvData restore softwareUpdate fddi restore baseline bridge You are prompted for information for restoring the NV data saved to a ﬁle. examine consoleSpeed reset...
Page 72: Examining A Saved Nv Data File
Examining a After saving NV data to a ﬁle, you can examine the header information of Saved NV Data that ﬁle. File To examine the ﬁle: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet save system nvData examine...
Page 73: Resetting Nv Data To Defaults
6: S HAPTER AVING ESTORING Resetting NV At times you may not want to restore the system NV data. Instead, you may Data to Defaults want to reset the values to the factory defaults so that you can start conﬁguring the system from the original settings. CAUTION: Resetting the NV data means that all NV memory is set back to the factory defaults.
Page 74 THERNET AND ARAMETERS Chapter 7 Administering Ethernet Ports Chapter 8 Administering FDDI Resources Chapter 9 Setting Up the System for Roving Analysis FDDI...
Page 76: Displaying Ethernet Port Information
This chapter describes how to: View Ethernet port information Conﬁgure Ethernet port labels Enable or disable an Ethernet port Displaying You can display either a summary of Ethernet port information or a detailed Ethernet Port report. When you display a summary of Ethernet port information, you view Information its label, status, and the most pertinent statistics about general port activity and port errors.
Page 77 7: A HAPTER DMINISTERING port port rxPeakByteRate rxPeakFrameRate port port port port port carrierSenseErr port port 10BaseT(RJ45) 10BaseT(RJ45) port THERNET ORTS rxFrames rxBytes 406430 36336795 242400 29275605 90484 58438 fcsErrs lengthErrs rxUnicasts rxMulticasts 365811 40619 242033 txFrameRate txByteRate txPeakFrameRate txQOverflows excessCollision excessDeferrals txDiscards collisions lateCollisions...
Page 78 Number of collisions detected on this port duplexMode Current duplex mode setting. Possible values are full, half, and not applicable (n/a). Duplex mode is not applicable on the Switch 2200. excessCollision Number of frames that could not be transmitted on this port...
Page 79 7: A HAPTER DMINISTERING Table 7-1 Description of Fields for Ethernet Port Attributes (continued) Field portLabel portState portType requestedState rxByteRate rxBytes rxDiscards rxErrs rxFrameRate rxFrames rxInternalErrs rxMulticasts rxPeakByteRate rxPeakFrameRate Peak value of ethernetPortFrameReceiveRate for this port since the rxUnicasts txByteRate txBytes txDiscards txErrs...
Page 80 Table 7-1 Description of Fields for Ethernet Port Attributes (continued) Field Description txFrameRate Average number of frames transmitted per second by this port during the most recent sampling period. Sampling periods are 1 second long and are not configurable. txFrames The number of frames transmitted by this port txInternalErrs Number of frames discarded because of an internal error during...
Page 81 7: A HAPTER DMINISTERING All frames on the Ethernet network are received promiscuously by an Frame Processing and Ethernet Statistics Ethernet port. However, frames may be discarded for the following reasons: There is no buffer space available. The frame is in error. Figure 7-1 shows the order in which these discard tests are made.
Page 82 Frames are delivered to an Ethernet port by bridge and management applications. However, a frame may be discarded for the following reasons: The Ethernet port is disabled. There is no room on the transmit queue. An error occurred during frame transmission. Figure 7-2 shows the order in which these discard tests are made.
Page 83: Setting The Port State
7: A HAPTER DMINISTERING Labeling a Port Port labels serve as useful reference points and as an accurate means of identifying your ports for management. You may want to label your Ethernet ports so that you can easily identify the device speciﬁcally attached to each port (for example, LAN, workstation, or server).
Page 84: Administering Fddi Stations
This chapter, which covers advanced FDDI topics, is intended for users familiar with the FDDI MIB. Under normal operating conditions, you do not need to change the FDDI default settings. For more information about FDDI in the Switch 2200, see the SuperStack™ II Switch 2200 Operation Guide. Administering...
Page 85: Displaying Station Information
You are prompted for a station. The Switch 2200 has only one station, which statusReporting port snmp appears in brackets. analyzer script logout 2 Press [Return]. See the following example of station information: configuration Table 8-1 describes these statistics.
Page 86: Setting The Connection Policies
The Switch 2200 FDDI ports can be of type A or B. By default, all connections to the Switch 2200 FDDI ports are valid, except for M-M connections.
Page 87 You are prompted for a station. The Switch 2200 has one station, which statusReporting port snmp appears in brackets. analyzer script logout 2 Press Return. 3 Enter the value of the connection policy for that station.
Page 88: Enabling And Disabling Status Reporting
You are prompted for a station. The Switch 2200 has one station, which statusReporting port snmp appears in brackets. analyzer script logout 2 Press Return. 3 Enter the value of the T-notify timer for that station.
Page 89: Displaying Path Information
You are prompted for a station and path. The Switch 2200 has one station, maxTreq port snmp which appears in brackets. analyzer script logout 2 When prompted for the station, press Return.
Page 90: Setting Tvxlowerbound
3 Enter the path ( See the following example of path information: secondary secondary Table 8-3 describes these statistics. Table 8-3 Description of Fields for FDDI Path Attributes Field maxTReq ringLatency tmaxLowBound traceStatus tvxLowBound Setting The tvxLowerBound attribute speciﬁes the minimum time value of fddiMAC tvxLowerBound TvxValue that will be used by any MAC that is conﬁgured onto this path.
Page 91: Setting Tmaxlowerbound
You are prompted for a station, path, and value. The Switch 2200 has one maxTreq port snmp station, which appears in brackets. analyzer script logout 2 Press [Return]. 3 Enter the path ( 4 Enter the new minimum time value.
Page 92: Administering Fddi Macs
You are prompted for a station, path, and value. The Switch 2200 has one maxTreq port snmp station, which appears in brackets. analyzer script logout 2 Press [Return]. 3 Enter the path ( 4 Enter the new minimum time value.
Page 93: Displaying Mac Information
You are prompted for a MAC number. The Switch 2200 has only one MAC, logout which appears in brackets. 2 Press [Return]. The following example shows the summary display of FDDI MAC information:...
Page 94: Administering Fddi Macs
The following example shows the detail display of FDDI MAC information: rxFrames rxBytes 103666 23089968 rxPeakFrameRate rxPeakByteRate 10308 notCopiedCount notCopiedThresh 6550 errorCount frameErrThresh frameErrorRatio noRxBuffers tvxExpiredCount rxUnicasts rxMulticasts 34621 36158 txFrameRate txByteRate txPeakFrameRate 4511 txInternalErrs txQOverflows txMulticasts frameCount 280867 currentPath dupAddrTest primary passed...
Page 95 8-12 8: A HAPTER DMINISTERING Table 8-4 describes the information provided for the FDDI MAC. Table 8-4 Description of Fields for FDDI MAC Attributes Field currentPath downstream downstreamType dupAddrTest duplicateAddr errorCount Errors frameCount frameErrCond frameErrorRatio frameErrThresh lateCount llcAvailable llcService lostCount noRxBuffers notCopiedCond notCopiedCount...
Page 96 Table 8-4 Description of Fields for FDDI MAC Attributes (continued) Field Description oldDownstream Previous value of the MAC address of this MAC’s downstream neighbor oldUpstream Previous value of the MAC address of this MAC’s upstream neighbor ringOpCount Number of times that this MAC has entered the operational state from the nonoperational state rmtState State of the ring management as defined in SMT...
Page 97 8-14 8: A HAPTER DMINISTERING Table 8-4 Description of Fields for FDDI MAC Attributes (continued) Field tvxCapab tvxExpiredCount tvxValue txByteRate txBytes txDiscards txFrameRate txFrames txInternalErrs txMulticasts txPeakByteRate txPeakFrameRate txQOverflows txUnicasts upstream upstreamDupAddr Indicates whether the address upstream of this address is All frames on the FDDI network are received promiscuously by an FDDI Frame Processing and FDDI MAC Statistics...
Page 98 LLC service is disabled. This is an NSA Frame and the A-bit is set. Figure 8-1 shows the order in which these discard tests are made. Receive Frame. . . rxFrames Frames received from the Frames discarded because buffer noRxBuffers space errorCount Frames discarded because frame...
Page 99: Setting The Frame Error Threshold
1 From the top level of the Administration Console, enter: system station ethernet fddi mac frameErrorThreshold path fddi summary bridge detail You are prompted for a MAC number and new value. The Switch 2200 has port frameErrorThreshold snmp one MAC, which appears in brackets. notCopiedThreshold analyzer llcService script path logout 2 Press [Return].
Page 100: Setting The Not Copied Threshold
1 From the top level of the Administration Console, enter: system station ethernet fddi mac NotCopiedThreshold path fddi summary bridge detail You are prompted for a MAC number and new threshold value.The Switch port frameErrorThreshold snmp 2200 has one MAC, which appears in brackets. notCopiedThreshold analyzer llcService script path logout 2 Press [Return].
Page 101: Enabling And Disabling Llc Service
MAC, the MAC still participates in neighbor notiﬁcation and is visible to network management. To enable or disable LLC service for the MACs in the Switch 2200: Top-Level Menu 1 From the top level of the Administration Console, enter:...
Page 102: Displaying Port Information
Administering Within an FDDI station, the PHY and PMD entities make up a port. A port FDDI Ports (consisting of the PHY/PMD pair that connects to the ﬁber media) is located at both ends of a physical connection and determines the characteristics of that connection.
Page 103: Setting Leralarm
8-20 8: A HAPTER DMINISTERING Table 8-5 describes the type of information provided for an FDDI port. Table 8-5 Description of Fields for FDDI Port Attributes Field connectState currentPath ebErrorCond ebErrorCount lctFailCount lemCount lemRejectCount lerAlarm lerCondition lerCutoff lerEstimate lineState myType neighborType pcmState pcWithhold...
Page 104: Setting Lercutoff
values so that you are only receiving alarms if your network is in poor health. The SMT Standard recommended value is 8. The lerAlarm value must be higher than the lerCutoff value so that the network manager will be alerted to a problem before the PHY (port) is actually removed from the network.
Page 105: Setting Port Labels
8-22 8: A HAPTER DMINISTERING To set the lerCutoff: Top-Level Menu 1 From the top level of the Administration Console, enter: system ethernet station fddi port lerCutoff fddi display path bridge lerAlarm You are prompted for a port number and an estimated link error rate value lerCutoff port snmp...
Page 106: Setting The Port Paths
Setting the In the Switch 2200 you can assign the A and B ports to either the primary or Port Paths the secondary path. To assign ports to paths: Top-Level Menu 1 From the top level of the Administration Console, enter:...
Page 107: About Roving Analysis
1 Select an Ethernet port to which you want to attach the network analyzer. 2 Select the Ethernet port that you want to monitor (either local or remote). If the port is remote, you must conﬁgure it from the Switch 2200 on which ETTING...
Page 108: Displaying The Roving Analysis Conﬁguration
Ethernet MAC address of the port to which the analyzer is attached YSTEM FOR OVING NALYSIS Port chosen for network analyzer Switch 2200 Ethernet ports Network Analyzer and from there monitor one Ethernet port at a time FDDI Local port Remote port...
Page 109: Adding An Analyzer Port
To display the roving analysis conﬁgurations, enter the following from the Top-Level Menu system top level of the Administration Console: display ethernet fddi remove bridge analyzer display start stop The conﬁgurations are displayed as shown in the following example: snmp analyzer script Ethernet ports configured as analyzer ports:...
Page 110: Removing An Analyzer Port
9: S HAPTER ETTING P THE Once the analyzer port is set, it is disabled from receiving or transmitting any other data. Instead, it transmits the data it receives from the monitored port to the network analyzer. If you have enabled Spanning Tree on this port, it is automatically disabled as long as the port is conﬁgured for the network analyzer.
Page 111: Starting Port Monitoring
After you have a local or remote port conﬁgured for the network analyzer, Monitoring you can start monitoring port activity. 3Com recommends that you ALWAYS conﬁgure the analyzer port before conﬁguring the monitored ports. To start monitoring a new port:...
Page 112: Stopping Port Monitoring
9: S HAPTER ETTING P THE You are then prompted for an FDDI port through which the data should be forwarded, as shown below: Select FDDI port (1-2): Once you successfully conﬁgure a port to monitor, all the data received and transmitted on the port is forwarded to the selected analyzer port, as well as processed normally.
Page 113: Bridging Parameters
RIDGING Chapter 10 Administering the Bridge Chapter 11 Administering Bridge Ports Chapter 12 Creating and Using Packet Filters Chapter 13 Conﬁguring Address and Port Groups to Use in Packet Filters ARAMETERS...
Page 114: Displaying Bridge Information
This chapter describes how to view the bridge setup and how to conﬁgure the following bridge-level parameters: IP fragmentation IPX snap translation Address threshold Address aging time Spanning Tree Protocol (STP) parameters For information about conﬁguring the bridge port, see Chapter 11. For information about creating packet ﬁlters for a bridge, see Chapter 12.
Page 115 10-2 10: A HAPTER DMINISTERING THE The following example shows a display of bridge information. 0000 000000000000 Each item in the bridge parameter list is described in Table 10-1. RIDGE stpState enabled topologyChangeCount topologyChangeFlag designatedRoot stpGroupAddress 01-80-c2-00-00-00 maxAge bridgeHelloTime bridgeFwdDelay forwardDelay rootCost agingTime...
Page 116 Table 10-1 Bridge Attributes Parameter Description addressCount Number of addresses in the bridge address table addrTableSize Maximum number of addresses that will fit in the bridge address table addrThreshold Reporting threshold for the total number of addresses known on this bridge. When this threshold is reached, the SNMP trap addressThresholdEvent is generated.
Page 117 10-4 10: A HAPTER DMINISTERING THE Table 10-1 Bridge Attributes (continued) Parameter maxAge mode peakAddrCount priority rootCost rootPort stpGroupAddress stpState timeSinceLast- TopologyChange topologyChange- Flag topologyChange- Count RIDGE Description The maximum age value at which the stored configuration message information is judged too old and discarded. This value is determined by the root bridge.
Page 118: Enabling And Disabling Ipx Snap Translation
IP fragmentation allows FDDI and Ethernet stations Fragmentation connected to the Switch 2200 to communicate using IP even if the FDDI stations are transmitting packets that would typically be too large to bridge. The default value is enabled.
Page 119: Setting The Address Threshold
10-6 10: A HAPTER DMINISTERING THE Setting the The address threshold for a bridge is the reporting threshold for the total Address number of Ethernet addresses known to the system. When this threshold is Threshold reached, the SNMP trap addressThresholdEvent is generated. The range of valid values for this parameter is between 1 and the address Address threshold values...
Page 120: Administering Stp Bridge Parameters
Parameters forward delay. For more information about how the Spanning Tree parameters interact at the bridge level to create a loopless network, see Chapter 5: Transparent Bridging in the SuperStack™ II Switch 2200 Operation Guide. Enabling and When Spanning Tree Protocol is disabled, the bridge does not participate in Disabling STP on a the Spanning Tree algorithm.
Page 121: Setting The Bridge Maximum Age
10-8 10: A HAPTER DMINISTERING THE To conﬁgure the STP bridge priority: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet bridge stpPriority ipFragmentation bridge ipxSnapTranslation addressThreshold snmp 2 Enter the priority value at the prompt. agingTime analyzer stpState...
Page 122: Setting The Bridge Forward Delay
Setting the Bridge Hello time is the period between the generation of conﬁguration messages Hello Time by a root bridge. If the probability of losing conﬁguration messages is high, shortening the time makes the protocol more robust. However, lengthening the time lowers the overhead of the algorithm. The recommended time is 2 seconds.
Page 123: Setting The Stp Group Address
10-10 10: A HAPTER DMINISTERING THE Setting the STP The STP group address is a single address that bridges listen to when Group Address receiving STP information. Each bridge on the network sends STP packets to the group address. Every bridge on the network receives STP packets sent to the group address, regardless of which bridge sent the packets.
Page 124: Displaying Bridge Port Information
This chapter describes how to view bridge port information and conﬁgure the following: Multicast packet threshold Spanning Tree Protocol (STP) parameters Bridge port addresses Displaying Bridge port information includes the STP conﬁgurations for the bridge port. Bridge Port You can display this information in both summary and detail formats. Information To display bridge information: Top-Level Menu...
Page 125 11-2 11: A HAPTER DMINISTERING The following example shows a bridge port summary display. port Ethernet Ethernet 12 port Ethernet Ethernet 12 The following example shows a bridge port detail display. Ethernet Ethernet 12 Ethernet Ethernet 12 Ethernet Ethernet 12 Ethernet Ethernet 12 Ethernet...
Page 126 Table 11-1 describes the type of information provided for the bridge port. Table 11-1 Bridge Port Attributes Parameter Description designatedBridge Identification of the designated bridge of the LAN to which the port is attached designatedCost Cost through this port to get to the root bridge. The designated cost of the root port is the same as the cost received in incoming BPDUs from the designated bridge for that LAN.
Page 127 11-4 11: A HAPTER DMINISTERING Table 11-1 Bridge Port Attributes (continued) Parameter rxFrames rxMcastExcDiscs rxMcastExceeds rxMcastFilters rxMcastLimit rxOtherDiscs rxSameSegDiscs rxSecurityDiscs (continued) RIDGE ORTS Description Number of frames that have been received by this port from its segment. A frame received on the interface corresponding to this port is only counted by this object if the frame is for a protocol being processed by the local bridging function, including bridge management frames.
Page 128 Table 11-1 Bridge Port Attributes (continued) Parameter Description state Spanning Tree state (blocking, listening, learning, forwarding, disabled) in which the port is currently operating: Blocking: The bridge continues to run the Spanning Tree algorithm on that port, but the bridge does not receive data packets from the port, learn locations of station addresses from it, or forward packets onto it.
Page 129 Frame Processing and Bridge Port Statistics explicitly directed to the Switch 2200 are delivered to the corresponding bridge port. A frame is then either forwarded to another bridge port or discarded. A frame might be discarded for the following reasons: The destination station is on the same segment as the source station.
Page 130: Setting The Multicast Limit
You can assign a multicast packet ﬁrewall threshold to a bridge port on the Multicast Limit Switch 2200 to limit the forwarding rate of multicast trafﬁc originating on the Ethernet segment connected to the port. For more information about the multicast packet ﬁrewall, see Chapter 7: Bridging Extensions in the SuperStack™...
Page 131: Administering Stp Bridge Port Parameters
For more information about how Spanning Tree parameters interact at the bridge-port level, see Chapter 5: Transparent Bridging in the SuperStack™ II Switch 2200 Operation Guide. Enabling and You can enable and disable the Spanning Tree Protocol for any port in the Disabling STP system.
Page 132: Setting The Port Path Cost
The following example shows values being set for more than one port: Ethernet port 4 - Enter new value (disabled,enabled) [enabled]: Ethernet port 5 - Enter new value (disabled,enabled) [enabled]: Setting the Port You can set the path cost for a bridge port. The path cost is the cost to be Path Cost added to the root cost ﬁeld in a conﬁguration message received on this port.
Page 133: Setting The Port Priority
11-10 11: A HAPTER DMINISTERING Setting the Port The STP port priority inﬂuences the choice of port when the bridge has two Priority ports connected to the same LAN, creating a loop. The port with the lowest port priority will be the one used by the Spanning Tree Protocol. Port priority is a 1-octet value.
Page 134: Administering Port Addresses
Administering You can administer the MAC addresses of stations connected to Ethernet Port Addresses and FDDI ports on the Switch 2200. Listing Addresses You can display MAC addresses currently associated with the selected ports. Each address type (static or dynamic), assigned port, and age are also listed.
Page 135: Adding New Addresses
11-12 11: A HAPTER DMINISTERING Adding New When you assign new MAC addresses to the selected ports, these addresses Addresses are added as statically conﬁgured addresses. A statically conﬁgured address is never aged and can never be learned on a different Ethernet port. To add a MAC address: 1 From the top level of the Administration Console, enter: Top-Level Menu...
Page 136: Flushing Dynamic Addresses
Flushing All You can ﬂush all static and dynamic MAC addresses from the selected Addresses port(s). Static MAC addresses are those that you speciﬁed using the add menu option. Dynamic MAC addresses are those that were automatically learned by the bridge. To ﬂush all addresses: Top-Level Menu 1 From the top level of the Administration Console, enter:...
Page 137 11-14 11: A HAPTER DMINISTERING To freeze all dynamic addresses: Top-Level Menu 1 From the top level of the Administration Console, enter: system display ethernet bridge port address freeze ipFragmentation summary fddi list detail ipxSnapTranslation bridge You are prompted for the port type. addressThreshold multicastLimit remove...
Page 138: About Packet Filtering
About Independently conﬁgurable packet ﬁltering is provided for the various Packet Filtering packet processing paths on each Ethernet port of a Switch 2200. The packet processing paths are deﬁned in Table 12-1. Table 12-1 Packet Processing Paths When you create a packet ﬁlter, you can assign it to the transmit or the receive path of each port, or to both paths.
Page 139: Listing Packet Filters
12-2 12: C HAPTER REATING AND Listing Packet When you list the packet ﬁlters for the system, the ﬁlter identiﬁcation, ﬁlter Filters name (if any), and ﬁlter assignments are displayed. Top-Level Menu To list the currently deﬁned packet ﬁlters, enter the following from the top system list level of the Administration Console:...
Page 140: Displaying Packet Filters
ﬁlter language. This language allows you to construct complex logical expressions. After writing a packet ﬁlter deﬁnition, you load it into a Switch 2200 and the corresponding port assignments are preserved in the nonvolatile memory (NVRAM) of the system. This ensures that the packet ﬁlter conﬁguration for each system is saved across system reboots and power failures.
Page 141: How The Packet Filter Language Works
12-4 12: C HAPTER REATING AND SING ACKET ILTERS Concepts for Writing Before writing a packet ﬁlter, you should understand thsee basic concepts: a Filter How the packet ﬁlter language works The basic elements of a packet ﬁlter How to implement sequential tests in a packet ﬁlter The pre-processed and run-time storage requirements How the Packet Filter Language Works You deﬁne packet ﬁlters using a simple, stack-oriented language.
Page 142 Table 12-2 describes the instructions and stacks of a packet ﬁlter. Table 12-2 Packet Filter Instructions and Stacks — Descriptions and Guidelines Element Descriptions and Guidelines Instructions Each instruction in a packet filter definition must be on a separate line in the packet filter definition file.
Page 143: Basic Elements Of A Packet Filter
12-6 12: C HAPTER REATING AND SING ACKET ILTERS Basic Elements of a Packet Filter Before creating a packet ﬁlter, you must decide which part of the packet you want to ﬁlter. You can ﬁlter Ethernet packets by the destination address, source address, type/length, or some part of the data.
Page 144 The Ethernet and FDDI packet ﬁelds in Figure 12-1 are used as operands in the packet ﬁlter. The two simplest operands are described in Table 12-3. Table 12-3 Packet Filter Operands Operand Description packet field A field in the packet that can reside at any offset. The size of the field can be 1, 2, 4, or 6 bytes.
Page 145: Implementing Sequential Tests In A Packet Filter
12-8 12: C HAPTER REATING AND Implementing Sequential Tests in a Packet Filter Filter language expressions are normally evaluated to completion — a packet is accepted if the value remaining on the top of the stack is non-zero. Frequently, however, a single test is insufﬁcient to ﬁlter packets effectively.
Page 146: Preprocessed And Run-Time Storage
ﬁlter deﬁnition. When assigned to a port, the packet ﬁlter is converted from the stored format to a run-time format to optimize the performance of the ﬁlter. Each SuperStack™ II Switch 2200 system is limited to a maximum of 16 packet ﬁlter programs.
Page 147: Procedure For Writing A Filter
12-10 12: C HAPTER REATING AND For run-time storage of packet ﬁlter programs, each Switch 2200 system Run-time storage of packet ﬁlters provides a maximum of 8192 bytes. There is no explicit system or per-packet-ﬁlter overhead; however, performance considerations can result in unused areas of the run-time storage.
Page 148: Examples Of Creating Filters
Your network contains market data feed servers that receive time-critical ﬁnancial data needed for trading ﬂoor applications. At the center of the trading ﬂoor networks is a Switch 2200 system that is being used to switch Ethernet trafﬁc and to concentrate the market data feed servers onto the FDDI departmental backbone.
Page 149: Packet Filter Solution
12-12 12: C HAPTER REATING AND Packet Filter Solution The solution described here is to create a highly sophisticated packet ﬁlter that prevents only the broadcast packets from the market data servers from being forwarded onto the segments that are not part of an active trading ﬂoor.
Page 150 The pseudocode translates into the following packet ﬁlter: Name “IP XNS ticker bcast filter” pushField.w pushLiteral.w 0x0600 pushLiteral.w 0x76c pushField.w pushLiteral.w 0x0898 pushField.w pushField.w pushLiteral.w 0x0800 pushLiteral.w 0x76c pushField.w pushLiteral.w 0x0898 pushField.w Creating Packet Filters # Assign this filter in the multicast path # of a port only--this is very important # XNS FILTERING SECTION # get the type field of the packet and...
Page 151 It is important to distinguish the function of each ﬁlter when it is loaded onto a Switch 2200 that has more than one ﬁlter stored in memory. Naming is also useful for archiving ﬁlters on an ftp server so that the ﬁlters can be saved and loaded on one or more Switch 2200 systems.
Page 152 4 Enter executable instruction #3: # if the two values on the top of the stack are equal, # then return a non-zero value Packet Filter Two. This ﬁlter is designed to accept packets within the socket range of 0x76c and 0x898. These steps show how to create this ﬁlter: 1 Name the ﬁlter: “Socket range filter”...
Page 153 12-16 12: C HAPTER REATING AND Combining a Subset of the Filters. The next ﬁlter accepts IP packets with a socket range of 0x76c (1900) and 0x898 (2200). The ﬁlter combines packet ﬁlters one and two, modifying them for IP. These steps show how to create this ﬁlter.
Page 154: Using The Built-In Line Editor
Console. Using an ASCII-based text editor allows you to create multiple copies of the packet ﬁlter deﬁnition, which you can then copy onto one or more Switch 2200 systems from a networked workstation. This method also allows you to archive copies of ﬁlter deﬁnitions.
Page 155 12-18 12: C HAPTER REATING AND The maximum length of a packet ﬁlter deﬁnition is 4096 bytes. The editor assumes a terminal capability no higher than a glass tty (that is, it does not assume an addressable screen). You can place any ASCII printable character into the editing buffer at the cursor position.
Page 156 Table 12-6 Packet Filter Editor Commands Command Keys Description List buffer Ctrl+l Displays each of the lines in the editing buffer and then redisplays the line currently being edited Next Line Ctrl+n Moves cursor to next line; positions cursor at start of line Previous Line Ctrl+p Moves cursor to previous line;...
Page 157: Editing, Checking And Saving Packet Filters
ﬁlter is error-free. You can also edit a packet ﬁlter using an ASCII-based text editor such as EMACS or vi. You can then use ftp to send the ﬁlter text to the Switch 2200 system from a networked workstation.
Page 158 To edit a packet ﬁlter using the Switch 2200 system line editor: Top-Level Menu 1 From the top level of the Administration Console, enter: system list display ethernet display bridge packetFilter edit ipFragmentation fddi create ipxSnapTranslation bridge delete addressThreshold 2 Enter the packet ﬁlter id number.
Page 159: Assigning Packet Filters To Ports
4 Enter your user name. 5 Enter your password. The packet ﬁlter is loaded onto the Switch 2200. Any syntax errors in the packet ﬁlter deﬁnition are reported to you at this time. See Appendix A: Packet Filter Opcodes, Examples, and Syntax Errors for a description of these errors.
Page 160 it meets the forwarding criteria. A packet that does not meet the forwarding criteria deﬁned in the ﬁlter is discarded. To assign a packet ﬁlter: Top-Level Menu 1 From the top level of the Administration Console, enter: system list display ethernet display bridge packetFilter assign...
Page 161: Unassigning Packet Filters From Ports
12-24 12: C HAPTER REATING AND Unassigning To unassign a packet ﬁlter from one or more ports, the packet ﬁlter must Packet Filters have been previously assigned to at least one port. from Ports To unassign a packet ﬁlter: Top-Level Menu 1 From the top level of the Administration Console, enter: system list...
Page 162: Using Groups In Packet Filters
You can use address groups (a list of MAC addresses) and port groups (a list Packet Filters of Switch 2200 Ethernet and FDDI ports) as ﬁltering criteria in a packet ﬁlter. For more information about address and port group concepts, see Chapter 7: User-deﬁned Packet Filtering in the SuperStack™...
Page 163: Listing Groups
Add and remove addresses and ports to or from a group Listing Groups You can list the address and port groups currently deﬁned for your Switch 2200 system. The group id, group name (if any), and group mask are displayed.
Page 164: Displaying Groups
In this example, three address groups are deﬁned in the system. The ﬁrst Address group example address group has an id of 1 and the name Accounting. This group uses an address group mask of 1 (the bit set in the mask) . Address Groups Address Group 1 - Accounting Address Group 2 - Development...
Page 165: Creating New Groups
13-4 13: C HAPTER ONFIGURING members of the group. The name of the address group in this example is Development, and the group has ﬁve members. Select address group to be displayed [1-n]: In this example, port group 2 is displayed. The port group id and the name Port group example (if any) are displayed, followed by the ports that are members of the group.
Page 166 Enter the ports in this syntax: < Ethernet | E | FDDI | F > [port] < port number > As you enter each address or port, the system attempts to add it to the group. If the address or port you enter is already a member of the group, the system displays a message, as shown next, and the address or port is ignored.
Page 167: Deleting Groups
13-6 13: C HAPTER ONFIGURING In this example, a new port group is created and loaded on the system. The Port group example bit in the port group mask for the group is 12 and the name of the group is Education.
Page 168: Adding Addresses And Ports To Groups
(See “Creating New Groups” on page 13-4.) An address may be in multiple address groups. An address group for the Switch 2200 system supports a maximum of 8192 Address group size addresses in both 802.1d Bridging mode and Express switching mode.
Page 169 13-8 13: C HAPTER ONFIGURING Enter the ports in this syntax: < Ethernet | E | FDDI | F > [port] < port number > As you enter each address or port, the system attempts to add it to the group.
Page 170: Removing Addresses Or Ports From A Group
This example shows a port successfully added to the Manufacturing port Port group example group. Select port group to be modified [1-4]: Adding ports to group 2 - Manufacturing Enter the ports to be added - type q to return to the menu: Port: Port: Removing...
Page 171 13-10 13: C HAPTER ONFIGURING As you enter addresses and ports, the system attempts to remove them from the group. If the address or port is not found in the group, a warning message is displayed, as shown here: Warning: Specified address was not a member of the address group.
Page 172: Loading Groups
Loading Groups 13-11 Loading Groups There is no explicit menu item to load address and port groups that are deﬁned in a ﬁle on a remote host. However, you can “load” groups by creating a script on a remote host (which includes your address or port group) and then running that script.
Page 173 13-12 13: C HAPTER ONFIGURING DDRESS AND ROUPS TO SE IN ACKET ILTERS...
Page 174 PPENDIXES Appendix A Packet Filter Opcodes, Examples, and Sytax Errors Appendix B Technical Support...
Page 175: Opcodes
This appendix: Describes the speciﬁc opcodes you can use when creating a packet ﬁlter Provides numerous examples of commonly used packet ﬁlters Describes the possible syntax errors you might receive when loading a packet ﬁlter For information on creating and using packet ﬁlters, see Chapter 12. Opcodes Opcodes are instructions used in packet ﬁlter deﬁnitions.
Page 176 A: P PPENDIX ACKET ILTER pushField.size <offset> Description: Pushes a field from the target packet onto the stack. Packet data starting at <offset> is copied onto the stack. The most significant byte of the field is the byte at the specified offset. The number of bytes pushed is determined by the size field of the instruction.
Page 177 Opcodes pushTop Description: Pushes the current top of the stack onto the stack (that is, it reads the top of the stack and pushes the value onto the stack). The size of the push is determined by the size of the contents of the stack. Storage Needed: 1 byte pushSAGM...
Page 178 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS pushSPGM Description: Pushes the source port group mask (SPGM) onto the top of the stack. The SPGM is a bitmap representing the groups to which the source port of a packet belongs.
Page 179 Opcodes ne (not equal) Description: Pops two values from the stack and compares them. If they are not equal, a byte containing the value non-zero is pushed onto the stack; otherwise, a byte containing 0 is pushed. The size of the operands is determined by the contents of the stack.
Page 180 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS gt (greater than) Description: Pops two values from the stack and performs an unsigned comparison. If the first is greater than the second, a byte containing the value non-zero is pushed onto the stack;...
Page 181 Opcodes or (bit-wise OR) Description: Pops two values from the stack and pushes the bit-wise OR of these values back onto the stack. The size of the operands and the result are determined by the contents of the stack. Storage Needed: 1 byte xor (bit-wise exclusive-OR) Description:...
Page 182 A: P PPENDIX ACKET ILTER PCODES XAMPLES YNTAX RRORS reject Description: Conditionally rejects the packet being examined. A byte is popped from the stack. If it is non-zero, the packet is rejected and evaluation of the filter ends immediately; otherwise, filter evaluation continues with the next instruction. Storage Needed: 1 byte shiftl (shift left)
Page 183: Destination Address Filter
Packet Filter The following examples of using the packet ﬁlter language start with basic Examples packet ﬁlter concepts. Destination This ﬁlter operates on the destination address ﬁeld of a frame. It Address Filter allows packets to be forwarded that are destined for stations with an Organizationally Unique Identiﬁer (OUI) of 08-00-02.
Page 184: Ethernet Type Ipx And Multicast Filter
A-10 A: P PPENDIX ACKET ILTER Type Filter This ﬁlter operates on the type ﬁeld of a frame. It allows packets to be forwarded that are IP frames. To customize this ﬁlter to another type value, change the literal value loaded in the name pushField.w pushLiteral.w...
Page 185: Source Address And Type Filter
Source Address and This ﬁlter operates on the source address and type ﬁelds of a frame. It Type Filter allows XNS packets to be forwarded that are from stations with an OUI of 08-00-02. To customize this ﬁlter to another OUI value, change the literal value loaded in the last padded with an additional 00 to ﬁll out the literal to 4 bytes.
Page 186: Address Group Filter
A-12 A: P PPENDIX ACKET ILTER Address Group This ﬁlter accepts only frames whose source and destination address are in Filter the same group. name pushSAGM pushDAGM destination pushLiteral.l Port Group Filter This ﬁlter discards all frames sourced from a port in either group three or eight.
Page 187: Common Syntax Errors
Common Syntax When a packet ﬁlter deﬁnition is loaded, the deﬁnition is checked for syntax Errors errors. The syntax errors and their causes are listed in Table A-1. Table A-1 Possible Syntax Errors When Loading Packet Filters Syntax Error Opcode not found Unknown opcode Operands are not the same size...
Page 188 A-14 A: P PPENDIX ACKET ILTER Table A-1 Possible Syntax Errors When Loading Packet Filters (continued) Syntax Error Invalid characters in number Number is too large Missing open quote on string String is too long Missing close quote on string Multiple name statements in program...
Page 189: Online Technical Services
3Com provides easy access to technical support information through a variety of services. This appendix describes these services. Online Technical 3Com offers worldwide product support seven days a week, 24 hours a day, Services through the following online systems: 3Com Bulletin Board Service (3ComBBS) World Wide Web site 3ComForum on CompuServe®...
Page 190: Comforum On Compuserve®
56 Kbps. To access 3ComBBS using ISDN, dial the following number: (408) 654 2703 World Wide Web Site Access the latest networking information on 3Com’s World Wide Web site by entering our URL into your Internet browser: http://www.3Com.com/ This service features news and information about 3Com products, customer service and support, 3Com’s latest news releases, selected articles from...
Page 191: Support From Your Network Supplier
Support from If additional assistance is required, contact your network supplier. Many Your Network suppliers are authorized 3Com service partners who are qualiﬁed to provide Supplier a variety of services, including network planning, installation, hardware maintenance, application training, and support services.
Page 192: Returning Products For Repair
3Com support contracts are available from 3Com. In the U.S. and Canada, call (800) 876-3266 for customer service. If you are outside the U.S. and Canada, contact your local 3Com sales ofﬁce to ﬁnd your authorized service provider: Country Australia (Sydney) (61) (2) 9937 5000...
Page 193 NDEX Numerics 3Com Bulletin Board Service (3ComBBS) B-1 3Com sales ofﬁces B-4 3ComFacts B-3 3ComForum B-2 abort at prompts 2-9 enabling CTL+C 2-11 accept opcode 12-8, A-7 access levels 2-1 address adding static 11-12 aging time 10-6 ﬁlters A-9 ﬂushing 11-13...
Page 194 (DAGM) 13-1 destination IP address in routing table 3-7 destination port group mask (DPGM) 13-1 direct, route status 3-8 documentation for the Switch 2200 system 4 editor for packet ﬁlters 12-17 for scripts 2-13 EMACS editor 2-13, 12-17 eq opcode A-4...
Page 195 portState 7-8 station MAC addresses 11-11 Ethernet address and restoring NV data 6-3 for the monitored port 9-5 Ethernet port analyzer attached 9-3 displaying information 7-1 label 7-4 labeling 7-8 setting state (on-line or off-line) 7-8 static MAC addresses 11-12 statistics 7-3 fan, warning 4-2 fax service B-3...
Page 196 NDEX Internet Control Message Protocol. See ICMP address translation 3-11 ARP cache 3-11 interface 3-3 management access 3-1 menus 2-6 pinging 3-12 RIP mode 3-12 route table 3-8 routes 3-7 statistics, displaying 3-14 IP address and restoring NV data 6-3 conﬁguring 3-5 for IP interface 3-3 in routing table 3-7...
Page 197 ﬁlters 12-1 multicast limit conﬁguring 11-7 deﬁned 11-7 name opcode A-1 naming the Switch 2200 4-3 ne opcode A-5 neighbor notiﬁcation and LLC Service 8-18 network monitoring. See roving analysis and analyzer network supplier support B-3...
Page 198 NDEX path cost deﬁned 11-9 setting 11-9 path. See FDDI path and backplane paths and FDDI ports 8-19 ping IP station 3-12 and FDDI ports 8-19 port See also FDDI port bridging priority 11-10 for analyzer 9-3 including in IP interface 3-4 label 8-20 maximum number in group 13-7 path cost 11-9...
Page 199 SAGM (source address group mask) 13-1 screen height adjusting 2-10 scripts for the Administration Console examples 2-15 running 2-13 serial port (console) for management 3-1 rebooting the system 4-4 setting baud rate 3-2 Service Access Points (SAPs) and packet ﬁlters 12-4 shiftl opcode A-8 shiftr opcode A-8 SMT (Station Management)
Page 200 ﬂushing addresses 3-19 T-Req 8-9 tvxLowerBound deﬁned 8-7 setting 8-8 UNIX and terminal emulation with Switch 2200 3-1 vi editor 2-13, 12-17 warning messages for system 4-1 wrapped ring 8-6 write access example 2-2 in packet ﬁlter 12-12, 12-14, A-11...

This manual is also suitable for:

Superstack ii 2200

3Com SUPERSTACK 2200 User Manual

Table of Contents

Table of Contents

Quick Links

Chapters

Need help?

Questions and answers

Related Manuals for 3Com SUPERSTACK 2200

Summary of Contents for 3Com SUPERSTACK 2200

This manual is also suitable for:

Table of Contents