Page 3
Enterasys Networks reserves the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Enterasys Networks to determine whether any such changes have been made.
Management Module (out-of-band), or by a Telnet connection over the network (in-band). The Management Module is based on SNMP (Simple Network Management Protocol). This SNMP agent permits a switch stack to be managed from any PC in the network using in-band management software.
Upon the failure or “hot” removal of the master Management Module within a stackable configuration, the following occurs: - A “Trap” is sent, a “Log event” is logged, the switch is re-booted and the backup Management Module takes over without loss of configuration settings.
Stacking Modules. The VH-STACK2 Stacking Module allows you to configure a closed-loop architecture that provides fault-tolerant operation of the stack. If a switch or stacking module fails, or if a stacking cable is disconnected, the entire stack will reboot and will subsequently resume normal operation and managment via the redundant stacking cable (closed loop).
Page 12
In-Band Network Connection The on-board configuration program can be accessed using Telnet from any computer attached to the network. The switch and stack can also be managed by any computer using a Web browser (Internet Explorer 4.0 or above, or Netscape Navigator 4.0 or above), or from a network comput using network management software.
Management Module over the network. These menus allow you to reconfigure the switch, as well as to monitor the status and performance of the switch or the attached stack. The menus have a layout similar to the sample Main Menu shown in Figure 2-1. The information is divided into the following parts: •...
The default user names are “admin” and “guest,” with no passwords. The administrator has Read/Write access, which allows you to read and modify switch information. The guest has Read Only access to the management program, which allows you to view switch information, but not modify any operating parameters.
Factory Defaults Table 2-1 lists the default settings for switch configuration parameters. Each parameter can be changed via the console menus or Telnet. Table 2-1. Factory Default Settings Parameter Multicast Filtering GMRP IGMP Multicast Filtering Port Configuration Flow Control Speed and Duplex...
Page 16
Parameter Terminal Baud Rate User Names Virtual LANs Acceptable VLAN Frame Type Configurable PVID Tagging GVRP Untagged VLAN Group Assignment VLAN Ingress Filtering VLAN Learning 8 VH-2402S2 User Interface Default Value Auto admin, guest Disabled False VH-2402S2...
Downloads new version of firmware to update your system (in-band). Saves the switch configuration to a file on a TFTP server. This file can be later downloaded to restore the configuration. VH-2402S2 User Interface 9...
Page 18
Configures default port priorities and queue assignments. Configures IGMP multicast filtering. Assigns ports that are attached to hosts who want to receive a specific multicast service. Displays the ports on the switch attached to a neighboring multicast router/switch for each VLAN ID. VH-2402S2...
Provides full address listing, as well as search and clear functions. Displays all the multicast groups active on this switch, including multicast IP addresses and corresponding VLAN IDs. Used to manually configure host MAC addresses in the unicast table.
Displaying System Information Use the System Information screen to display descriptive information about the switch, or for quick system identification as shown in the following figure and table. Vertical Horizon Stack Local Management System Description : Vertical Horizon Stack System Object ID...
Displaying Switch Version and Module Information Use the Switch Information screen to display hardware/firmware version numbers for the main board and agent module, as well as the power status and modules plugged into the system. Vertical Horizon Stack Local Management <OK>...
Displaying Stacking Information Use the Stacking Information screen to display information about the state of a closed-loop switch stack. Vertical Horizon Stack Local Management Current Stack State Former Stack State Parameter Description Current Stack State Indicates the current state of a redundant closed-loop stacking.
Downloads new version of firmware to update your Management Agent F/W Module system (in-band). Configuration Save & Saves the switch configuration to a file on a TFTP server. This file Restore can be later downloaded to restore the configuration. Management...
Use <TAB> or arrow keys to move. <Enter> to select. Figure 2-8. Network Configuration Parameter Description IP Configuration Screen used to set the bootup option, or configure the switch’s IP parameters. IP Connectivity Test Screen used to test IP connectivity to a (Ping) specified device. HTTP Configuration Screen used to enable the Web Agent.
IP Configuration Use the IP Configuration screen to set the bootup option, or configure the switch’s IP parameters. The screen shown below is described in the following table. Vertical Horizon Stack Local Management Network Configuration : IP Configuration : Unit: 1 <APPLY>...
Page 26
(BOOTP values can include the IP address, default gateway, and subnet mask.) Shows the IP address of the switch in the stack operating as Master. Shows the IP address of the switch in the stack operating as Backup Master.
IP Connectivity Test (Ping) Use the IP Connectivity Test to see if another site on the Internet can be reached. The screen shown below is described in the following table. Vertical Horizon Stack Local Management Network Configuration : IP Connectivity Test (Ping) IP Address : Test Times : 1 Success...
HTTP Configuration Use the HTTP Configuration screen to enable/disable the on-board Web agent, and to specify the TCP port that will provide HTTP service. The screen shown below is described in the following table. Vertical Horizon Stack Local Management Network Configuration : HTTP Configuration <APPLY>...
Configuring the Serial Port You can access the on-board configuration program by attaching a VT100 compatible device to the switch’s serial port. (For more information on connecting to this port, see “Required Connections” on page 3.) The communication parameters for this port can be accessed from the Serial Port Configuration screen shown below and described in the following table.
Network Management Station (NMS), can be used to access this information. Access rights to the on-board agent are controlled by community strings. To communicate with the switch, the NMS must first submit a valid community string for authentication. The options for configuring community strings and related trap functions are described in the following sections.
Configuring Community Names The following figure and table describe how to configure the community strings authorized for management access. Up to 5 community names may be entered. Vertical Horizon Stack Local Management SNMP Configuration : SNMP Communities public private <APPLY> Use <TAB>...
The following figure and table describe how to specify management stations that will receive authentication failure messages or other trap messages from the switch. Up to 5 trap managers may be entered. Vertical Horizon Stack Local Management SNMP Configuration : IP Trap Managers IP Address 10.1.0.9...
(If for some reason your password is lost, or you cannot gain access to the System Configuration Program, contact Enterasys Networks Technical Support for assistance.) The parameters shown on this screen are indicated in the following figure and table.
Using TFTP Protocol to Download Over the Network Use the TFTP Download menu to load software updates into the switch. The download file should be a VH-2402S2 file from Enterasys Networks; otherwise the agent will not accept it. The success of the download operation depends on the accessibility of the TFTP server and the quality of the network connection.
Use the Configuration Save & Restore menu to save the switch configuration settings to a file on a TFTP server. The file can be later downloaded to the switch to restore the switch’s settings. The success of the operation depends on the accessibility of the TFTP server and the quality of the network connection.
Configuring Management Access Use the Management Configuration menu to define which VLAN has management access to the switch. Parameters shown on this screen are indicated in the following figure and table. Vertical Horizon Stack Local Management <APPLY> Use <TAB> or arrow keys to move, <Space> to scroll options.
Port Configuration Sets communication parameters for ports. Port Information Displays current port settings and port status. Port Security Allows you to enable and configure port security for the switch. Configuration Port Trunking Specifies ports to group into aggregate trunks. Configuration...
Page 38
Assigns ports that are attached to hosts who want to receive a Configuration specific multicast service. Multicast Router Port Displays the ports on the switch attached to a neighboring Configuration multicast router/switch for each VLAN ID. * Not implemented in the current firmware release.
Configuring Port Parameters Use the Port Configuration menus to set or display communication parameters for any port or module on the switch. Vertical Horizon Stack Local Management Port Configuration : Flow Control mode of all ports : [Enable] Port Type...
Shows the flow control type in use. Flow control can eliminate frame loss by “blocking” traffic from end stations connected directly to the switch. Back pressure is used for half duplex and IEEE 802.3x for full duplex. Note that flow control should not be used if a port is connected to a hub.
Port Security Configuration Use the Port Security Configuration screen to enable and configure port security for the switch. Port Security allows you to configure each port with a list of MAC addresses of devices that are authorized to access the network through that port.
Configuring Port Trunks Port trunks can be used to increase the bandwidth of a network connection or to ensure fault recovery. You can configure up five trunk connections (combining 2~4 ports into a fat pipe) between any two standalone switches, or up to 12 for an entire stack. However, before making any physical connections between devices, use the Trunk Configuration menu to specify the trunk on the devices at both ends.
Page 43
Use <TAB> or arrow keys to move, other keys to make changes. Figure 2-24. Port Trunking Configuration Parameter Description Trunk ID Configure up to five trunks per standalone switch, or up to 12 for an entire stack. Unit Specifies a switch unit in the stack (1~7). Port Select from 2~4 ports per trunk.
Address Table Configuration and Static Multicast Address Table Configuration.) Configurable This switch allows you to override the default PVID setting (Port PVID Tagging VLAN ID used in frame tags) and its egress status (VLAN-Tagged or Untagged) on each port. (Refer to Port Assignment VLAN Configuration.)
Page 45
As default this switch uses Shared VLAN Learning (SVL), whereby all ports share one VLAN filtering database. However, you can set the switch to use Independent VLAN Learning (IVL), where each port maintains its own filtering database. Note that when you change from one method to the other, the switch will automatically reset and the current VLAN configuration will be lost..
The Spanning Tree Algorithm can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices (that is, an STA-compliant switch, bridge or router) in your network to ensure that only one route exists between any two stations on the network.
Page 47
Parameter Default Spanning Tree Enabled Protocol Priority 32,768 Hello Time Max (Message) Age Forward Delay 9033820-03 Description Enable this parameter to participate in an STA compliant network. Device priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device.
Page 48
1000T, or GBIC port. Defines the priority for the use of a port in the STA algorithm. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the spanning tree.
Parameter Default FastForwarding ENABLED Viewing the Current Spanning Tree Configuration The Spanning Tree Information screen displays a summary of the STA information for the overall bridge or for a specific port or module. To make any changes to the parameters for the Spanning Tree, use the Spanning Tree Configuration menu.
The path cost from the root port on this switch to the root device. Root Port The number of the port on this switch that is closest to the root. This switch communicates with the root device through this port. If there is no root port, then this switch has been accepted as the root device of the spanning tree network.
Page 51
Displaying the Current STA for Ports or Modules The parameters shown in the following figure and table are for port or module STA Information (Port 1-12, Port 13-24, Port 25-32). Vertical Horizon Stack Local Management Spanning Tree Port Information : Port Type Status...
Page 52
A port on a network segment with no other STA-compliant bridging device is always forwarding. If two ports of a switch are connected to the same segment and there is no other STA device attached to this segment, the port with the smaller ID forwards packets and the other is blocked.
Using a Mirror Port for Analysis You can mirror traffic from any source port to a target port for real-time analysis. You can then attach a logic analyzer or RMON probe to the target port and study the traffic crossing the source port in a completely unobtrusive manner.
Configuring Broadcast Storm Control Use the Broadcast Storm Control Configuration screen to enable broadcast storm control for all ports in the switch stack, as shown below: Vertical Horizon Stack Local Management Broadcast Storm Control Configuration <APPLY> Use <TAB> or arrow keys to move, <Space> to scroll options.
Configuring Virtual LANs You can use the VLAN configuration menu to assign any port on the switch to any of up to 256 LAN groups. In conventional networks with routers, broadcast traffic is split up into separate domains. Switches do not inherently support broadcast domains.
Page 56
Parameter Description VLAN ID The ID for a new VLAN to be created, or the ID of an existing VLAN to be displayed. VLAN Name The name of a new VLAN to be created, or the name of an existing VLAN to be displayed. Status Allows a configured VLAN to be enabled or disabled.
Page 57
Egress Ports VLAN Configuration Use this screen to modify the settings for an existing VLAN. You can add/ delete port members for a VLAN from any unit in the stack. (Note that all ports can only belong to one untagged VLAN. This is set to VLAN 1 by default, but can be changed via the Port Assignment VLAN Configuration screen on page 48.) Vertical Horizon Stack Local Management...
Page 58
VLAN Forbidden Ports Configuration Use this screen to prevent a port from being automatically added to a VLAN via the GVRP protocol. (Note that GVRP is not implemented in the current firmware release.) Vertical Horizon Stack Local Management GVRP VLAN Configuration: VLAN Forbidden Ports Indexed by : VID VLAN ID...
Current Number of 802.1Q VLANs Configured : 2 Figure 2-38. 802.1Q VLAN Base Information Parameter Description VLAN Version The VLAN version used by this switch as specified in the IEEE Number 802.1Q standard. MAX VLAN ID Maximum VLAN ID recognized by this switch.
The ID for the VLAN currently displayed. Creation Time The value of sysUpTime (System Up Time) when this VLAN was created. Status Shows how this VLAN was added to the switch: Dynamic GVRP: Automatically learned via GVRP. Permanent: Unit Stack unit.
802.1Q VLAN Static Table Configuration Use this screen to create a new VLAN or modify the settings for an existing VLAN. You can add/delete port members for a VLAN from any unit in the stack, or prevent a port from being automatically added to a VLAN via the GVRP protocol.
Page 62
For example, the following screen displays settings for VLAN 2, which includes tagged ports 1-6, and forbidden port 12. (Note that the dashed lines show that there are no switch units in this system other than Unit 1.) Vertical Horizon Stack Local Management...
Configuring Traffic Classes IEEE 802.1p defines up to 8 separate traffic classes. This switch supports Quality of Service (QoS) by using two priority queues, with strict priority queuing for each port. You can use the 802.1P Configuration menu to configure the default priority for each port, or to display the mapping for the traffic classes as described in the following sections.
Default priority can be set to any value from 0~7, where 0~3 Priority specifies the low priority queue and 4~7 specifies the high priority queue. Number of Egress Indicates that this switch supports two priority output queues. Traffic Classes 56 VH-2402S2 User Interface Unit 1 Port 1-12 Default Ingress...
802.1P Port Traffic Class Information This switch provides two priority levels with strict priority queuing for port egress. This means that any frames with a default or user priority from 0~3 are sent to the low priority queue “0” while those from 4~7 are sent to the high priority queue “1”...
This switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts who want to receive a specific multicast service. The switch looks up the IP Multicast Group used for this service and adds any port which received a similar request to that group. It then propagates the service request on to any neighboring multicast switch/router to ensure that it will continue to receive the multicast service.
Configuring IGMP This protocol allows a host to inform its local switch/router that it wants to receive transmissions addressed to a specific multicast group. You can use the IGMP Configuration screen to configure multicast filtering shown below: Vertical Horizon Stack Local Management...
Member Port List as being attached to a IGMP host. Static IGMP Member A list of the switch ports that have been manually configured as Port List being attached to a IGMP host. The VLAN ID number used to sort the list.
The switch ports that have been automatically listed as being List attached to a neighboring multicast router/switch. Static Router Port List The switch ports that have been manually listed as being attached to a neighboring multicast router/switch. Indexed by Indicates if the VLAN ID or VLAN Name is used to display the VLAN.
Displays detailed statistical information for the selected port such as packet type and frame size counters. Unicast Provides full listing of all unicast addresses stored in the switch, Address Table as well as sort, search and clear functions. Multicast Address Displays the ports that belong to each GMRP Muticast group.
Port Statistics display key statistics from the Ethernet-like MIB for each port. Error statistics on the traffic passing through each port are displayed. This information can be used to identify potential problems with the switch (such as a faulty port or unusually heavy loading). The values displayed have been accumulated since the last system reboot.
Parameter Description Internal Mac The number of frames for which transmission failed due to an Transmit Errors* internal MAC sublayer transmit error. Carrier Sense Errors* The number of times that the carrier sense condition was lost or never asserted when attempting to transmit a frame. Frames Too Long The number of frames received that exceed the maximum permitted frame size.
Page 73
Parameter Description Drop Events The total number of events in which packets were dropped due to lack of resources. Received Bytes Total number of bytes of data received on the network. This statistic can be used as a reasonable indication of Ethernet utilization.
The number of static addresses in the table. The MAC address of a node. The VLAN(s) associated with this address or port. Unit Switch unit in the stack (1~7). Port The port whose address table includes this MAC address. Status...
Displaying the IP Multicast Registration Table Use the IP Multicast Registration Table to display all the multicast groups active on this switch, including multicast IP addresses and the corresponding VLAN ID. Vertical Horizon Stack Local Management IGMP groups counter : 0...
Use the Static Unicast Address Table Configuration screen to manually configure host MAC addresses in the unicast table. You can use this screen to associate a MAC address with a specific VLAN ID and switch port as shown below. Vertical Horizon Stack Local Management...
Retains the user names and passwords defined in the Console Authentication Login Configuration menu. Logging Off the System Use the Exit command under the Main Menu to exit the configuration program and terminate communications with the switch for the current session. 9033820-03 System Restart Menu : YES...
Setting password protection for the switch to prevent unauthorized access to console menus • Assigning an IP address for the switch if you plan to manage the switch using SNMP, or if you use Telnet to access the switch •...
If you forget your password, contact your Enterasys Networks Support Representative. You are automatically logged out from the console menus based on the Lock-out Time setting in the Console Login Configuration Menu.
If you see a DOWN status for a connected port, plug the cable into another port on the switch or try another cable. Connecting via Telnet You can connect to the VH-2402S2 switch from a remote location using the Telnet application. This application allows you to establish in-band access to the console menus.
The VH-2402S2 switch can send SNMP messages called traps to SNMP management stations when an important event occurs with the switch. The switch allows up to five destinations to be configured for these trap messages to be sent. To configure SNMP access for the switch, do the following: Select Management Setup Menu from the Main Menu.
TFTP protocol. A TFTP download is much faster than a serial download, requiring only a few seconds, and can be used to upgrade a switch that is not physically proximate. The disadvantage is that this method requires a TFTP server and additional setup.
To download new software via the serial port, do the following: With the console port connected, reset the switch by powering the switch off and then on. After the power-on hardware and software tests are complete, the system initialization screen displays the following message:.
To perform a TFTP download, you must first configure the VH-2402S2 switch. This consists of setting an IP address, if this has not already been done, and entering the IP address of the TFTP server and the name of the upgrade file.
LAN segments for purposes of fault tolerance. Two or more physical paths between different segments can be created through the switch, with the Spanning Tree Protocol choosing a single path at any given time and disabling all others. If the chosen path fails for any reason, a disabled alternative is activated, thereby maintaining the connection.
During periods of congestion, Class of Service settings ensure that traffic which has been assigned high priority is forwarded through the switch ahead of normal priority traffic. For further information, see Appendix C, “Class of Service”...
Note that the default for all ingress ports is zero. Configuring Port Operation You can configure switch ports for operational parameters such as auto- negotiation, duplex mode, port speed and flow control. The 100Base-FX fiber ports always operate in full duplex mode and 100Mbps speed.
MAC addresses in the forwarding table: • Dynamic MAC addresses, which are dynamically learned and removed by the switch based on a time period defined using the Aging Time option. • Static MAC addresses, which are entered manually, stored in nonvolatile memory and automatically placed in the address table.
A BootP server must be operating on the network and be properly configured for this option to work. When this option is enabled, the switch tries to obtain an IP address from the BootP server.
Select up to four ports to configure as one trunk. You can configure up to five trunks per switch unit. The ports used in a trunk must all be of the same media type (RJ-45, 100 Mbps fiber, or 1000 Mbps fiber).
Saving and Restoring the Switch Configuration After completing your switch configuration, you can save all the settings to a file on a TFTP server. This file can be later downloaded to the switch to restore the switch’s settings. To save a configuration file to a TFTP sever, do the following: From the console interface Main Menu, select Management Setup Menu and then Configuration Save &...
Page 93
To restore a switch configuration from a file on a TFTP server, do the following: From the console interface Main Menu, select Management Setup Menu and then Configuration Save & Restore. Select Download Server IP under the section Configuration Download.
Page 94
86 Configuring & Monitoring the Switch VH-2402S2...
Managed entities supporting SNMP typically contain software, which runs locally on the device and is referred to as an agent. In Figure 4-1, software running on a VH-2402S2 switch functions as an agent, monitoring and controlling the functionality of the switch.
RFC 1213 provides management of system-level parameters, including TCP/IP protocol-related statistics, IP addressing, and interface statistics for each switch port. MIB-II is the standard MIB defined by RFC 1213. All agent devices operating SNMP are required to support at least part of MIB-II.
Enterasys Networks Proprietary MIB Extensions Areas of switch functionality not covered by the standard RFC MIBs are specified in the Enterasys Networks private MIB. This MIB definition is specified separately from MIB-II. Areas covered in this MIB include various system, switch, and port level information.
Protocol (STP) by performing the following functions: • Creates a single spanning tree from any arrangement of switching or bridging elements. The term “switch” is used as an equivalent to “bridge” in this document. • Compensates automatically for the failure, removal, or addition of any device in an active data path.
If the connection between A and B goes down, the link between A and C becomes active, thereby establishing a path between A and B through switch C. Additionally, if the connection between B and C goes down, the link between A and C becomes active, establishing a path between B and C through switch A.
Several configuration parameters control the operation of the Spanning Tree Protocol. Table A-1 describes the parameters and lists the VH-2402S2 switch default settings for each parameter. You can cause serious network performance degradation if you do not fully understand Spanning Tree concepts. Be sure to consult personnel experienced with this process prior to configuring Spanning Tree parameters.
Spanning Tree Protocol Operation When the Spanning Tree Protocol is enabled for the first time or when there is a change in the network topology, such as a failure or the addition or removal of a component, the Spanning Tree Protocol automatically sets up the active topology of the current network.
Page 103
There are five (5) states that the ports can be in for spanning tree: • Blocking: A port in this state does not participate in the transmission of frames, thus preventing duplication arising through multiple paths existing in the active topology of the bridged LAN. •...
IP addresses or IP subnets. VLANs inherently provide a high level of network security, since traffic must pass through a Layer 3 switch or a router to reach a different VLAN.
VLAN operation on the VH-2402S2 switch is enabled by default. Therefore, all frames are transferred internally through a switch with a VLAN tag. This tag may already be on the frame entering the switch, or added to the frame by the switch. VLAN information already existing on frames entering the switch is automatically handled by the switch.
To forward a frame from a VLAN-aware device to a VLAN-unaware device, the switch first decides where to forward the frame, and then strips off the VLAN tag. However, to forward a frame from a VLAN-unaware device to a VLAN-aware device, the switch first decides where to forward the frame, and then inserts a VLAN tag reflecting this port’s default VID.
The VH-2402S2 switch only supports 256 VLANs with VLAN IDs ranging from 1 to 2048, but the IEEE 802.1Q VLAN standard allows for VLAN IDs from 1 to 4094. Therefore, if a switch is attached to endstations that issue VLAN registration requests, it will have to forward unknown VLAN tags.
• normal As traffic enters the switch, it is assigned to one of the two priority levels according to information located in the 802.1Q header tag of the frame (see Appendix B, “Virtual LANs”) or according to the incoming port number.
Page 110
Figure C-1 shows priority queuing operating within a switch. Frames entering the switch through ports 1 and 4 are tagged as normal traffic and placed in a normal priority queue on the outbound port. Frames entering through ports 2 and 5 are tagged as high priority traffic and placed in a high priority queue on the outbound port.
A router, or multicast-enabled switch, can periodically ask their hosts if they want to receive multicast traffic. If there is more than one router/ switch on the LAN performing IP multicasting, one of these devices is elected “querier” and assumes the responsibility of querying the LAN for group members.
Need help?
Do you have a question about the Vertical Horizon VH-2402S2 and is the answer not in the manual?
Questions and answers