SuperStack ® ® Switch 9000 SX User Guide http://www.3com.com/ Part No. DUA1699-0AAA02 100001-00 Rev. 02 Published April 1998...
Page 2
3Com Technologies reserves the right to revise this documentation and to make changes in content from 95052-8145 time to time without obligation on the part of 3Com Technologies to provide notification of such revision or change. 3Com Technologies provides this documentation without warranty of any kind, either implied or expressed, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose.
VCCI Statement Information To The User If this equipment does cause interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient the receiving antenna.
ONTENTS BOUT UIDE Introduction Terminology Finding Information in This Guide Conventions Command Syntax Symbols Line-Editing Commands Related Publications 9000 O WITCH VERVIEW About the Switch 9000 Summary of Features Port Connections Full Duplex Switch Operation Virtual LANs (VLANs) Priority Access Control Enabled (PACE) Spanning Tree Protocol (STP) IP Unicast Routing Network Configuration Example...
Page 6
NSTALLATION AND ETUP Following Safety Information Determining the Switch 9000 Location Configuration Rules for Gigabit Ethernet Installing the Switch 9000 Rack Mounting Free-Standing Stacking the Switch and Other Devices Connecting Equipment to the Console Port Powering-up the Switch Checking the Installation Power On Self-Test (POST) Logging on for the First Time CCESSING...
Page 8
Basic IP Commands 4-15 IP ARP Commands 4-16 IP Route Table Commands 4-17 ICMP Commands 4-17 4-18 RIP Commands 4-19 4-20 Logging Commands 4-21 4-22 Configuration and Image Commands 4-23 (VLAN IRTUAL Overview of Virtual LANs Benefits Types of VLANs Port-Based VLANs Expanding Port-Based VLANs Across Switches Tagged VLANs...
Page 9
Configuring FDB Entries FDB Configuration Example Displaying FDB Entries Removing FDB Entries (STP) PANNING ROTOCOL Overview of the Spanning Tree Protocol How STP Works Initialization Stabilization Reconfiguration Spanning Tree Domains Defaults STP Configurations STP Configurations to Avoid Creating STP Domains Enabling STP on the Switch 7-10 Configuring STP...
Page 10
TATUS ONITORING AND TATISTICS Status Monitoring Port Statistics Port Errors Switch Logging Local Logging Real-time Display Remote Logging Logging Commands 9-10 RMON 9-11 About RMON 9-11 About the RMON Groups 9-12 Statistics 9-12 History 9-12 Alarms 9-13 Events 9-13 Benefits of RMON 9-13 Improving Efficiency 9-13...
Page 11
Using the Command-Line Interface VLANs Routing ECHNICAL UPPORT Online Technical Services World Wide Web Site 3Com Bulletin Board Service Access by Analog Modem Access by Digital Modem 3ComFactsSM Automated Fax Service ® 3ComForum on CompuServe Online Service Support from Your Network Supplier...
This guide provides the required information to install and configure ® the Superstack II Switch 9000 SX (3C16990). This guide is intended for use by network administrators who are responsible for installing and setting up network equipment. It assumes a basic working knowledge of:...
BOUT UIDE Finding This table shows where to find specific information in this guide. Information in This Guide Task Location Learning concepts Chapter 1, “Switch 9000 Overview” Installing the Switch 9000 Chapter 2, “Installation and Setup” Appendix A, “Safety Information” Setting up user accounts Chapter 3, “Accessing The Switch”...
Conventions Conventions Table 1 and Table 2 list conventions that are used throughout this guide. Table 1 Notice Icons Icon Notice Type Alerts you to... Note Important features or instructions Caution Risk of personal injury, system damage, or loss of data Warning Risk of severe personal injury Table 2 Text Conventions...
BOUT UIDE Command Syntax You may see a variety of symbols shown as part of the command Symbols syntax. These symbols explain how to enter the command, and you do not type them as part of the command itself. Table 3 summarizes command syntax symbols.
SuperStack II Switch 9000 SX Quick Reference Guide. Part Number DQA1699-OAAA03. SuperStack II Switch 9000 SX Quick Installation Guide. Part Number DIA1699-OAAA02. SuperStack II Switch 9000 SX Release Note. Part Number DNA1699-OAAA03. 3Com’s home page can be found at the following web site: http://www.3com.com/...
9000 networks that can provide high-speed and high performance to serve the needs of today’s network users. ® Part of the 3Com SuperStack II range of products, the Switch 9000 provides switching between multiple Gigabit Ethernet ports. Summary of The Switch 9000 has the following features:...
Provides extra security Protocol-sensitive filtering for VLANs Recognition of the Priority Access Control Enabled (PACE) bit set by ® 3Com Etherlink adapters and the other devices that support PACE Responds to 802.3x flow-control messages Auto-negotiation to IEEE 802.3z for plug and play Load sharing Spanning Tree Protocol (IEEE 802.1d)
VLAN sales using a device that provides routing services. For more information on VLANs, refer to Chapter 5. Priority Access Control Enabled (PACE) The Switch recognizes the PACE bit set by 3Com Etherlink ® adapters and other devices supporting PACE. When enabled, traffic with these bits receives priority service from the Switch.
1: S 9000 O HAPTER WITCH VERVIEW Redundant paths are disabled when the main paths are operational. Redundant paths are enabled if the main traffic paths fail. For more information on STP, refer to Chapter 7. IP Unicast Routing The Switch 9000 can route IP traffic between the VLANs configured as virtual router interfaces.
Page 23
Network Configuration Example Figure 1-1 Switch 9000 used in a backbone configuration The Switch 3000 on each floor is provided with a Gigabit Ethernet full-duplex link to the Switch 9000. Using Gigabit Ethernet as a backbone technology removes bottlenecks by providing scalable bandwidth, low-latency, high-speed data switching.
1: S 9000 O HAPTER WITCH VERVIEW attached to the Switch 9000 providing improved performance to the Ethernet desktop. Switch 9000 Front Figure 1-2 shows the Switch 9000 front view. View Port status LEDs Unit status LEDs Status Packet Status Gigabit Ethernet ports Gigabit Ethernet ports Figure 1-2 Switch 9000 front view...
Switch 9000 Front View LEDs Table 1-2 describes the LED behavior on the Switch 9000. Table 1-2 Switch 9000 LEDs Color Indicates Port Status LEDs Packet Yellow Frames are being transmitted/received on this port. No activity on this port. Status Green Link is present;...
1: S 9000 O HAPTER WITCH VERVIEW Switch 9000 Rear Figure 1-3 shows the Switch 9000 rear view. View Power socket and fuse Console port 3C16990 MADE IN USA MAIN ASSEMBLY SERIAL NUMBER MAC ADDRESS Figure 1-3 Switch 9000 rear view The rear panel has the following features: Power Socket The Switch 9000 automatically adjusts to the supply voltage.
Factory Defaults Factory Defaults Table 1-3 shows the factory defaults for the Switch 9000 features. Table 1-3 Switch 9000 Factory Defaults Item Default Setting Port status Enabled on all ports Default user account admin with no password and user with no password Console port configuration 9600 baud, eight data bits, one stop bit, no...
NSTALLATION AND ETUP This chapter describes the following: How to decide where to install the Switch 9000 Gigabit Ethernet configuration rules How to install the Switch in a rack or free-standing How to connect equipment to the console port How to check the installation using the Power On Self-Test (POST) Following Safety Before installing or removing any components of the Switch, or before Information...
2: I HAPTER NSTALLATION AND ETUP Water or moisture cannot enter the case of the unit. Temperature must be within the range of 0 to 40 degrees Celsius. Air-flow around the unit and through the vents in the side of the case is not restricted.
Installing the Switch 9000 Figure 2-1 Fitting the mounting bracket 5 Repeat the three previous steps for the other side of the Switch. 6 Refer to the instructions that shipped with your rack, runners, shelf or tray to complete the installation of the Switch into the mounting rack. CAUTION: When using rack mounting runners, a shelf, or a tray, make sure that the ventilation holes on the side of the Switch are not obstructed.
2: I HAPTER NSTALLATION AND ETUP Stacking the Switch Up to four units can be placed on top of one another. If mixing Switch and Other Devices 9000, Switch 3000 FX, Switch 1000, Switch 1200, and other ® SuperStack II hubs, the smaller units must be positioned at the top using rubber feet.
Page 33
Connecting Equipment to the Console Port Figure 2-2 shows the pin-outs for a 9-pin to RS-232 25-pin null modem cable. Switch 9000 PC/Terminal Cable connector: 9-pin female Cable connector: 25-pin male/female Screen Shell Screen Ground Ground Figure 2-2 Null modem cable pin-outs Figure 2-3 shows the pin-outs for a 9-pin to 9-pin PC-AT serial null modem cable.
2: I HAPTER NSTALLATION AND ETUP Powering-up the To power-up the Switch, follow these steps: Switch 1 Connect the power cable to the Switch. 2 Connect the power cable to the wall outlet 3 Turn the on/off Switch to the on position. Checking the After turning on power to the Switch 9000, the device performs a Installation...
Page 35
Logging on for the First Time 5 Assign an IP address and subnetwork mask for VLAN default. The example below assigns an IP address of 123.45.67.8 and a subnetwork mask of 255.255.255.0. config vlan default ipaddress 123.45.67.8 255.255.255.0 Your changes take effect immediately. 6 Save your configuration changes so that they will be in effect after the next Switch reboot, by typing save...
CCESSING WITCH This chapter describes the following information that you can use to begin managing the Switch 9000: Security access level overview Configuring the Switch for management Switch management methods Configuring SNMP CAUTION: In order for configuration changes to be retained through a Switch power cycle or reboot, you must issue a SAVE command after you have made the change.
3: A HAPTER CCESSING WITCH Administrator Access An administrator-level account can view and change all Switch Level parameters, add and delete users, and change the password associated with any account name. The administrator can disconnect a Telnet management session. If this happens, the user is notified that the session has been terminated.
Security Access Levels 4 Enter the new password at the prompt. 5 Re-enter the new password at the prompt. 6 Save your changes by typing save Creating a The Switch can have a total of three management accounts. You can Management use the default names (admin and user), or you can create new names Account...
3: A HAPTER CCESSING WITCH 3 Enter the new password at the prompt. 4 Re-enter the new password at the prompt. 5 Save your changes by typing save If you forget your password contact your local technical support representative, who will advise on your next course of action. Viewing Switch Accounts To view the accounts that have been created, you must have administrator privileges.
Using Telnet Using the Console The command-line interface built into the Switch is accessible by way Interface of the 9-pin, RS-232 console port located on the rear of the unit. For more information on the console port pin-outs, refer to Chapter 2. Once the connection is established, you will see the system prompt and you may log on.
3: A HAPTER CCESSING WITCH You can enable BOOTP on a per-VLAN basis by using the following command: enable bootp vlan [<name> | all] Manually Configuring the IP Settings If you are using IP without a BOOTP server, you must enter the IP parameters for the Switch in order for the SNMP Network Manager or Telnet software to communicate with the device.
Using Telnet 4 At the password prompt, enter the password and press [Return]. When you have successfully logged on to the Switch, the command-line prompt displays the name of the Switch in its prompt. 5 Assign an IP address and subnetwork mask for the default VLAN by using the following command config vlan <name>...
Each Network Manager provides its own user interface to the ® management facilities. 3Com’s Transcend range of Network Managers all have facilities for managing the Switch. The following sections describe how to get started if you want to use an SNMP manager.
Using SNMP Accessing Switch In order to have access to the SNMP agent residing in the Switch, at Agents least one VLAN on the Switch must have an IP address assigned to it. For more information on assigning an IP address, refer to “Manually Configuring the IP Settings,”...
3-10 3: A HAPTER CCESSING WITCH Table 3-3 Supported Traps (continued) Trap Description Falling alarm Indicates that an RMON alarm entry has crossed its falling threshold. Fan fail Indicates that one or more of the cooling fans inside the device has failed. A Fan okay trap will be issued once the fan has attained normal operation.
Using SNMP 3-11 Table 3-4 SNMP Configuration Commands Command Description config vlan <name> ipaddress <ip_address> {<mask>} Configures an IP address for the VLAN. This is required in order to use an SNMP manager. enable snmp access Allows you to turn on SNMP support for the Switch.
3-12 3: A HAPTER CCESSING WITCH Authorized SNMP station list SNMP trap receiver list Logon statistics Resetting and To reset or disable SNMP settings, use the commands in Table 3-5. Disabling SNMP Table 3-5 SNMP Reset and Disable Commands Command Description disable snmp access Allows you to disable SNMP on the Switch.
Configuring Ports 3-13 Options for the ping command are described in Table 3-6. Table 3-6 Ping Command Parameters Parameter Description continuous Allows you to specify ICMP echo messages to be sent continuously. size <n> Allows you to specify the size of the packet. Traceroute The traceroute command allows you to trace the routed path between the Switch and a destination endstation.
3-14 3: A HAPTER CCESSING WITCH To configure the Switch to autonegotiate, use the following command: config port <portlist> auto on Port Commands Table 3-7 describes port commands. Table 3-7 Port Commands Command Description Allows you to enable 802.3z autonegotiation. config port <portlist>...
Load Sharing 3-15 Load sharing is most useful in cases where the traffic transmitted from the Switch to the load-sharing group is sourced from an equal or greater number of ports on the Switch. For example, traffic transmitted to a 2-port load-sharing group should originate from a minimum of two other ports on the same Switch.
3-16 3: A HAPTER CCESSING WITCH The following example defines a load-sharing group that contains ports 4 through 7, and uses the first port in the group as the master logical port 4: enable sharing 4 grouping 4-7 In this example, logical port 4 represents physical ports 4 through 7. When using load sharing, you should always reference the master logical port of the load-sharing group (port 4 in the previous example) when configuring or viewing VLANs.
OMMANDS This chapter contains a description of each command-line interface command for the Switch 9000. It also provides the following information related to Switch 9000 commands: Command syntax Line editing commands Command history substitution If an asterisk (*) appears in front of the command-line prompt, it indicates that you have outstanding configuration changes that have not been saved.
4: C HAPTER OMMANDS If the command does not include a parameter, skip to Step 3. If the command requires more information, or if you want to include optional parameters, continue to Step 2a. a If the command has additional parameters include them after the command name.
Understanding the Command Syntax config vlan engineering add port 1-3,6 could use the following shortcut: config engineering add port 1-3, 6 Numerical Ranges Commands that require you to enter one or more port numbers use the parameter, in the syntax. A portlist can be a range of <portlist>, numbers, for example: port 1-3...
4: C HAPTER OMMANDS Table 4-1 Command Syntax Symbols (continued) Symbol Description vertical bar | Separates mutually exclusive items in a list, one of which must be entered. For example, in the syntax config snmp community [read | write] <string> you must specify either the read or write community string in the command.
Command History Substitution Command History The Switch 9000 “remembers” the last 50 commands you enter. You Substitution can display a list of these commands by using the following command: history Common Table 4-3 describes common commands used to manage the Switch. Commands Commands specific to a particular feature are described in the other chapters of this guide.
4: C HAPTER OMMANDS Table 4-3 Common Commands (continued) Command Description Allows you to reset all Switch parameters (with the unconfig switch {all} exception of defined VLANs and IP addresses) to the factory defaults. If you specify the keyword “all”, the IP addresses are reset as well.
Switch 9000 Commands General Switch Table 4-4 describes general Switch commands. Commands Table 4-4 General Switch Commands Command Description Displays the current Switch information, including: show switch sysName, sysLocation, sysContact MAC address current date and time, and system uptime operating environment (temperature, fans, and power supply status) NVRAM image information (primary/secondary image, date, time, size, version)
4: C HAPTER OMMANDS Table 4-4 General Switch Commands (continued) Command Description config devicemode [bridging | iprouting] Allows you to configure the operating mode of the Switch. Specify: bridging — Layer 2 bridging functions only iprouting — Bridging and IP unicast routing functions If this command is used to change the operating mode of the Switch 9000 once it is up and running, it causes...
Switch 9000 Commands Switch Management Table 4-6 describes Switch management commands Commands Table 4-6 Switch Management Commands Command Description Displays network management configuration and show management statics including enable/disable states for Telnet and SNMP, SNMP community strings, authorized SNMP station list, SNMP trap receiver list, and logon statistics. Displays the currently active Telnet and console show session sessions communicating with the Switch.
4-10 4: C HAPTER OMMANDS Table 4-6 Switch Management Commands (continued) Command Description Allows you to configure the name of the system config snmp syscontact <string> contact. A maximum of 32 characters is allowed Allows you to configure the name of the Switch. The config snmp sysname <string>...
Switch 9000 Commands 4-11 Protocol Commands Table 4-8 describes protocol commands. Table 4-8 Protocol Commands Command Description Allows you to display protocol-related information, show protocol {<protocol_name> | all} including: Protocol name List of protocol fields List of VLANs that use this protocol Allows you to create a user-defined protocol.
4-12 4: C HAPTER OMMANDS Table 4-9 FDB Commands (continued) Command Description Allows you to create a permanent FDB entry. Specify create fdbentry <mac_address> vlan <name> the following: <portlist> mac_address — device MAC address, using colon separated bytes name — VLAN associated with MAC address portlist —...
Port Commands 4-13 Table 4-10 Port Commands Command Description Allows you to enable one or more ports. enable port <portlist> Allows you to disable one or more ports. disable port <portlist> PACE Commands Table 4-11 describes PACE commands. Table 4-11 PACE Commands Command Description Allows you to enable recognition of the PACE bit.
Page 66
4-14 4: C HAPTER OMMANDS Table 4-12 STP Commands (continued) Command Description Allows you to specify the time (in seconds) that the config stpd <stpd_name> forwarddelay ports on this STPD spend in the listening and learning <value> states when the Switch is the Root Bridge. The range is 4 through 30.
Port Commands 4-15 Basic IP Commands Table 4-13 describes basic IP commands. Table 4-13 Basic IP Commands Command Description Displays configuration information for one or more show ipconfig {vlan [<name> | all]} VLANs, including the following: IP address, subnet mask IP forwarding information BOOTP configuration VLAN name, VLANid...
4-16 4: C HAPTER OMMANDS Table 4-13 Basic IP Commands (continued) Command Description Allows you to disable the generation and processing disable bootp vlan [<name> | all] of BOOTP packets. Allows you to enable the BOOTP relay function on enable bootprelay the router.
Port Commands 4-17 IP Route Table Table 4-15 describes IP route table commands. Commands Table 4-15 IP Route Table Commands Command Description Allows you to display the contents of the IP routing show iproute {vlan {<name> | all | table. permanent | <ipaddress>...
Page 70
4-18 4: C HAPTER OMMANDS Table 4-16 ICMP Commands (continued) Command Description Allows you to enable the modification of route table enable icmp useredirects information when an ICMP redirect message is received. The default setting is disabled. Allows you to disable the changing of routing table disable icmp useredirects information when an ICMP redirect message is received.
Port Commands 4-19 RIP Commands Table 4-17 describes the commands used to configure the RIP protocol. Table 4-17 RIP Commands Command Description Displays RIP configuration and statistics for one or more show rip {vlan <name> | all} VLANs. Display includes the state for RIP settings, and interface states.
Page 72
4-20 4: C HAPTER OMMANDS Table 4-17 RIP Commands (continued) Command Description Allows you to enable the advertisement of static enable rip exportstatic routes using RIP. The default setting is enabled. Allows you to disable the filtering of static routes. disable rip exportstatic Allows you to change the periodic RIP update timer.
Port Commands 4-21 Logging Commands Table 4-18 describes Switch logging commands. Table 4-18 Logging Commands Command Description Displays the log configuration, including the syslog show log config host IP address, the priority level of messages being logged locally, and the priority level of messages being sent to the syslog host.
Page 74
4-22 4: C HAPTER OMMANDS Table 4-18 Logging Commands (continued) Command Description Allows you to configure the syslog host address and config syslog <ipaddress> <facility> filter messages sent to the syslog host. Options include: {<priority>} {<subsystem>} ipaddress — The IP address of the syslog host. facility —...
Port Commands 4-23 Configuration and Table 4-19 describes configuration and image commands Image Commands Table 4-19 Configuration and Image Commands Command Description Allows you to save the current configuration of the save {config} {primary | secondary} Switch to NVRAM. You can specify the primary or secondary configuration area.
(VLAN IRTUAL Setting up Virtual Local Area Networks (VLANs) on the Switch 9000 eases many time-consuming tasks of network administration while increasing efficiency in network operations. This chapter describes the VLAN concepts and explains how to implement VLANs on the Switch 9000. Overview of Virtual A VLAN is a group of location- and topology-independent devices, for LANs...
5: V (VLAN HAPTER IRTUAL It helps to control traffic. With traditional networks, congestion can be caused by broadcast traffic that is directed to all network devices, regardless of whether they require it. VLANs increase the efficiency of your network because each VLAN can be set up to contain only those devices that need to communicate with each other.
Page 79
Overview of Virtual LANs For example, in Figure 5-1, the VLANs are configured as followings: Ports 1, 2, and 5 are part of VLAN Marketing Ports 3, 4, and 6 are part of VLAN Sales Ports 7 and 8 are part of VLAN Finance Marketing Finance Sales...
5: V (VLAN HAPTER IRTUAL Expanding Port-Based VLANs Across Switches To create a port-based VLAN that spans two Switches you must do two things: Assign the port on each Switch to the VLAN. Cable the two Switches together using one port on each Switch per VLAN.
Page 81
Overview of Virtual LANs Figure 5-3 illustrates two VLANs spanning two Switches. On Switch 1, ports 1–4 are part of VLAN Accounting; ports 5–8 are part of VLAN Engineering. On Switch 2, ports 1–4 are part of VLAN Accounting; ports 5–8 are part of VLAN Engineering. VLAN Accounting spans Switch 1 and Switch 2 by way of a connection between Switch 1 port 2 and Switch 2 port 4.
5: V (VLAN HAPTER IRTUAL Tagged VLANs The Switch 9000 uses the IEEE 802.1Q D4 draft standard for rules associated with VLAN tagging. Tagging is a process that inserts a marker (called a tag) into the Ethernet frame. The tag contains the identification number of a specific VLAN, called the VLANid.
Page 83
Overview of Virtual LANs Figure 5-4 illustrates the physical view of a network that uses tagged and untagged traffic. Switch 1 = Marketing = Sales 802.1Q = Tagged port Tagged server Switch 2 Figure 5-4 Physical diagram of tagged and untagged traffic Figure 5-5 shows a logical diagram of the same network.
5: V (VLAN HAPTER IRTUAL In Figure 5-4 and Figure 5-5: The trunk port on each Switch carries traffic for both VLAN Marketing and VLAN Sales. The trunk port on each Switch is tagged. The server connected to port 1 on Switch 1 has a NIC that supports 802.1Q tagging.
Overview of Virtual LANs The IP traffic has been divided into two IP subnets, 192.207.35.0 and 192.207.36.0. The subnets are internally routed by the Switch 9000. The subnets are assigned different VLAN names, Finance and Personnel, respectively. The remainder of the traffic belongs to the VLAN named MyCompany.
5-10 5: V (VLAN HAPTER IRTUAL Defining Protocol Filters If necessary, you can define a customized protocol filter based on EtherType, LLC, and/or SNAP. Up to six filters may be part of a protocol filter. To define a protocol filter, do the following: Create a protocol using the following command: create protocol <protocol_name>...
Configuring VLANs on the Switch 9000 5-11 The Default VLAN The Switch 9000 ships with one default VLAN that has the following properties: The VLAN name is default. It contains all the ports on a new or initialized Switch. The default VLAN is untagged, and has no VLANid or protocol filter assigned.
5-12 5: V (VLAN HAPTER IRTUAL Table 5-1 describes the commands used to configure a VLAN. Table 5-1 VLAN Configuration Commands Command Description Allows you to create a named VLAN. create vlan <name> Allows you to create a user-defined protocol. create protocol <protocol_name>...
Displaying VLAN Settings 5-13 The following example creates a tag-based VLAN named video. It assigns the VLANid 1000. Ports 4–8 are added as tagged ports to the VLAN. create vlan video config video tag 1000 config video add port 4-8 tagged The following example creates a VLAN named Sales , with the VLANid 120.
5-14 5: V (VLAN HAPTER IRTUAL Status for each port Enabled/disabled Tagged/untagged Protocol information IP address STPD information Sample output from this command is as follows: 3C16990:7 # sh vlan all VLAN "Default" created by user Tagging: 802.1Q Tag 1 192.207.37.214/255.255.255.0 STPD: Domain "s0"...
Deleting and Resetting VLANs 5-15 Sample output from this command is as follows: show protocol all Protocol Name Type Value ----------------- ---- ----- etype 0x0806 etype 0x0800 etype 0x8137 netbios 0xf0f0 decnet etype 0x6004 etype 0x6003 This show command displays protocol information, including the following: Protocol name List of protocol fields...
WITCH ORWARDING (FDB) ATABASE This chapter describes the contents of the Switch forwarding database (FDB), how the FDB works, and how to configure the FDB. Overview of the The Switch 9000 maintains a database of all addresses received on all of its ports.
6: S (FDB) HAPTER WITCH ORWARDING ATABASE Permanent entries — Permanent entries are retained in the database if the Switch is reset or a power off/on cycle occurs. The system administrator must make entries permanent. A permanent entry can either be a unicast or multicast MAC address. All entries entered by way of the command-line interface are stored as permanent.
Configuring FDB Entries Configuring FDB To configure entries in the FDB, use the commands listed in Table 6-1. Entries Table 6-1 FDB Configuration Commands Command Description Allows you to create a permanent FDB entry. Specify the create fdbentry <mac_address> vlan following: <name>...
6: S (FDB) HAPTER WITCH ORWARDING ATABASE portlist — displays the entries for one or more ports permanent — displays all permanent entries The following sample output shows the information displayed when you request output for all FDB entries: show fdb Hash Vlan Flags...
(STP) PANNING ROTOCOL Using the Spanning Tree Protocol (STP) functionality of the Switch 9000 makes your network more fault tolerant. The following sections describe STP concepts, and how STP features are supported by the Switch. STP is a part of the 802.1d bridge specification defined by the IEEE Computer Society.
Page 98
7: S (STP) HAPTER PANNING ROTOCOL Figure 7-1 Network with an illegal topology This configuration is illegal because it creates loops that cause the network to overload. However, STP allows you to use this configuration because STP detects duplicate paths and immediately prevents (or blocks) one of them from forwarding traffic.
Overview of the Spanning Tree Protocol If the link through Bridge C fails, as shown in Figure 7-3, the STP system reconfigures the network so that traffic from segment 2 flows through Bridge B. Figure 7-3 Traffic flowing through Bridge B How STP Works STP has the following three stages of operation: Initialization...
7: S (STP) HAPTER PANNING ROTOCOL The Root Bridge generates BPDUs on all ports at a regular interval known as the Hello Time. All other bridges in the network have a Root Port. This is the port that costs the least in getting to the Root Bridge, and it is used for receiving the BPDUs initiated by the Root Bridge.
Spanning Tree Domains Within any given STPD, all VLANs belonging to it use the same spanning tree. Care must be taken to ensure that STPD instances within a single Switch do not see each other in the same broadcast domain. This could happen if, for example, another external bridge is used to connect VLANs belonging to separate STPDs.
7: S (STP) HAPTER PANNING ROTOCOL STP Configurations When you assign VLANs to an STPD, pay careful attention to the STP configuration and its effect on the forwarding of VLAN traffic. Figure 7-4 illustrates a network that uses VLAN tagging for trunk connections.
Page 103
STP Configurations When the Switches in this configuration start up, STP configures each STP domain such that there are no active loops in the topology. STP could configure the topology in a number of ways to make it loop-free. In Figure 7-4, the connection between Switch A and Switch B is put into blocking state, and the connection between Switch Y and Switch Z is put into blocking state.
7: S (STP) HAPTER PANNING ROTOCOL STP Configurations Within a single STPD, you must be careful when configuing your to Avoid VLANs. The following figures illustrate networks that have been incorrectly set up so that the STP configuration disables the ability of the Switches to forward VLAN traffic.
Creating STP Domains Figure 7-6 shows a similar configuration in which the VLANs are all port-based. The trunk connections between the Switches require one trunk port per Switch for each VLAN. Marketing & Sales Marketing, Sales & Engineering Marketing Sales Switch 1 Switch 3 Switch 2...
7-10 7: S (STP) HAPTER PANNING ROTOCOL Enabling STP on To enable STP for one or more STP domains on your Switch, use the the Switch following command at the administrator prompt: enable stpd [<stpd_name> | all] Configuring STP You can configure the following STP parameters for each STPD on the Switch: Hello Time Forward Delay...
Page 107
Configuring STP 7-11 Table 7-1 STP Configuration Commands (continued) Command Description Allows you to remove one or all VLANs from an STPD. If config stpd <stpd_name> delete vlan all is specified, the association between the STPD and [<name> | all] VLAN is removed, but both still exist.
7-12 7: S (STP) HAPTER PANNING ROTOCOL Configuration The following example creates and enables an STPD named Example Backbone_st. It assigns the Manufacturing VLAN to the STPD. It disables STP on ports 1 through 3, and port 4. create stpd backbone_st config stpd backbone_st add vlan manufacturing enable stpd backbone_st disable stpd backbone_st port 1-3,4...
Page 109
Displaying STP Settings 7-13 Sample output from the command is as follows: 3C16990:28 # sh stpd s0 po 5-8 Stpd: s0 Port: 8 PortId: 8008 Stp: ENABLED Path Cost: 4 Port State: FORWARDING Topology Change Ack: FALSE Port Priority: 128 Designated Root: 80:00:08:00:4e:2c:13:00 Designated Cost: 0 Designated Bridge: 80:00:08:00:4e:2c:13:00 Designated Port Id: 8008...
7-14 7: S (STP) HAPTER PANNING ROTOCOL Disabling and To disable STP or return STP settings to their defaults, use the Resetting STP commands listed in Table 7-2. Table 7-2 STP Disable and Reset Commands Command Description Allows you to remove an STPD. An STPD can only be delete stpd <stpd_name>...
IP U NICAST OUTING This chapter describes how to configure IP routing on the Switch 9000. It assumes that you are already familiar with IP unicast routing. If not, refer to the following publications for additional information: RFC 1058 — Routing Information Protocol RFC 1256 —...
8: IP U HAPTER NICAST OUTING the router interface for Finance is assigned the IP address 192.206.35.1. Personnel belongs to the IP network 192.207.36.0; its router interface is assigned IP address 192.207.36.1. Traffic within each VLAN is switched using the Ethernet MAC addresses. Traffic between the two VLANs is routed using the IP addresses.
Overview of IP Unicast Routing Dynamic Routes Dynamic routes are typically learned by way of RIP. Routers using RIP exchange information in their routing tables in the form of RIP advertisements. Using dynamic routes, the routing table contains only networks that are reachable. Dynamic routes are aged out of the table when a RIP update for the network is not received for a period of time.
8: IP U HAPTER NICAST OUTING Configuring IP This section describes the commands associated with configuring IP Unicast Routing unicast routing on the Switch 9000. Configuring routing involves the following steps: Verify the Switch operating mode is set to , by using the iprouting following command: show switch...
Verifying the IP Unicast Routing Configuration Verifying the IP Use the command to display the current configuration show iproute Unicast Routing of IP unicast routing for the Switch, and for each VLAN. The show Configuration command displays the currently configured routes, including iproute how each route was learned.
Page 116
8: IP U HAPTER NICAST OUTING Table 8-1 describes the commands used to configure basic IP settings on the Switch. Table 8-1 Basic IP Commands Command Description Enables the generation and processing of enable bootp {vlan <name> | all} BOOTP packets on a VLAN to obtain an IP address for the VLAN from a BOOTP server.
Page 117
Configuring DHCP/BOOTP Relay Table 8-1 Basic IP Commands (continued) Command Description Removes the dynamic entries in the IP clear ipfdb [<ipaddress> | vlan <name> | all] forwarding database. Table 8-2 describes the commands used to configure the IP route table. Table 8-2 Route Table Configuration Commands Command Description...
Page 118
8: IP U HAPTER NICAST OUTING Table 8-3 RIP Configuration Commands (continued) Command Description Enables the split horizon algorithm for RIP. Default setting is enable rip splithorizon enabled. Enables triggered updates. Triggered updates are a enable rip triggerupdate mechanism for immediately notifying a router’s neighbors when the router adds or deletes routes, or changes the metric of a route.
Page 119
Configuring DHCP/BOOTP Relay Table 8-3 RIP Configuration Commands (continued) Command Description Disables split horizon. disable rip splithorizon Disables poison reverse. disable rip poisonreverse Disables triggered updates disable rip triggerupdate Disables the filtering of static routes. disable rip exportstatic Resets all RIP parameters to the default VLAN. Does not unconfig rip {vlan <name>...
8-10 8: IP U HAPTER NICAST OUTING Table 8-4 ICMP Configuration Commands (continued) Command Description Resets all router advertisement settings to the default values. unconfig irdp Disables the generation of ICMP redirects on one or more disable icmp redirects {vlan <name> | VLANs.
Page 121
Routing Configuration Example 8-11 192.207.35.1 192.207.36.1 My Company 192.207.35.0 192.207.36.0 Finance Personnel NetBIOS NetBIOS NetBIOS NetBIOS = IP traffic = NetBIOS traffic Figure 8-2 Unicast Routing Configuration Example In this configuration, all IP traffic from stations connected to ports 1 and 3 have access to the router by way of the VLAN Finance.
8-12 8: IP U HAPTER NICAST OUTING Displaying Router To display settings for various IP routing components, use the Settings commands listed in Table 8-5. Table 8-5 Router Show Commands Command Description Displays configuration information for one or more VLANs, show ip config {vlan <name>...
Resetting and Disabling Router Settings 8-13 Table 8-5 Router Show Commands (continued) Command Description Displays RIP-specific statistics. Statistics include the show rip stat {vlan <name> | all} following per interface: Packets transmitted Packets received Bad packets received Bad routes received Number of RIP peers Peer information Resetting and...
Page 124
8-14 8: IP U HAPTER NICAST OUTING Table 8-6 Router Reset and Disable Commands (continued) Command Description Disables RIP for one or more VLANs. When RIP is disabled, the disable rip {vlan <name> | all} parameters are not reset to their defaults, and the states are not cleared.
Page 125
TATUS ONITORING AND TATISTICS This chapter describes how to view the current operating status of the Switch, how to display information in the Switch log, and how to take advantage of the RMON capabilities available in the Switch. Viewing statistics on a regular basis allows you to: Monitor how well your network is performing Monitor emerging trends and notice problems arising before they cause major network faults...
9: S HAPTER TATUS ONITORING AND TATISTICS Table 9-1 Switch Monitoring Commands (continued) Command Description show ip config {vlan <name> | all} Displays configuration information for one or more VLANs, including the following: IP address, subnet mask IP forwarding information BOOTP configuration VLAN name, VLANid Displays the current Address Resolution Protocol (ARP) cache...
Status Monitoring Table 9-1 Switch Monitoring Commands (continued) Command Description Displays collision statistics for each port. show port <portlist> collisions Displays state, link status, speed, and autonegotiation setting show port <portlist> config for each port. Displays error information for one or more ports. show port <portlist>...
9: S HAPTER TATUS ONITORING AND TATISTICS Table 9-1 Switch Monitoring Commands (continued) Command Description show stpd <stpd_name> port <portlist> Displays port-specific STP information, including STP port configuration and state. Displays the current Switch information, including: show switch sysName, sysLocation, sysContact MAC address current time and date, and system uptime operating environment (temperature, fans, and power...
Page 129
Port Statistics The following port statistic information is collected by the Switch: Link Status — The current status of the link. Options are: Ready — The port is ready to accept a link. Active — The link is present at this port. Transmit Packet Count (Tx Pkt Count) —...
9: S HAPTER TATUS ONITORING AND TATISTICS Port Errors The Switch 9000 keeps track of errors for each port. To view port error, type show port <portlist> errors The following port error information is collected by the Switch: Link Status — The current status of the link. Options are: Ready —...
Switch Logging Receive Jabber Frames (RX Jab) — The total number of frames received by the port that were of longer than the support maximum length and had a Cyclic Redundancy Check (CRC) error. Receive Alignment Errors (RX Align) — The total number of frames received by the port that occurs if a frame has a CRC error and does not contain an integral number of octets.
9: S HAPTER TATUS ONITORING AND TATISTICS Table 9-3 Fault Log Subsystems Subsystem Description Brdg Bridge-related functionality. Examples include low table space and queue overflow. SNMP SNMP information. Examples include community string violations. Telnet Information related to Telnet logon and configuration performed by way of a Telnet session.
Switch Logging If priority is not specified, only messages of critical priority are displayed. If the subsystem is not specified, all subsystems are displayed. If you enable the log display on a terminal connected to the console port, your settings will remain in effect even after your console session is ended (unless you explicitly disable the log display).
9-10 9: S HAPTER TATUS ONITORING AND TATISTICS Logging Commands The commands described in Table 9-4 allow you to do the following: Configure logging options Reset logging options Display the log Clear the log Table 9-4 Logging Commands Command Description Allows you to configure the real-time log display.
RMON features supported by the Switch 9000. You can only use the RMON features of the Switch if you have an RMON management application, such as the RMON application supplied with 3Com’s Transcend® Enterprise Manager. About RMON RMON is the common abbreviation for the Remote Monitoring Management Information Base (MIB) system defined by the Internet...
9-12 9: S HAPTER TATUS ONITORING AND TATISTICS A typical RMON setup consists of the following two components: The RMON probe — An intelligent, remotely controlled device or software agent that continually collects statistics about a LAN segment or VLAN. The probe transfers the information to a management workstation on request or when a predefined threshold is crossed.
RMON 9-13 Alarms The Alarms group provides a versatile, general mechanism for setting threshold and sampling intervals to generate events on any MIB variable. Alarms inform you of a network performance problem and they can trigger automated action responses through the Events group. Events Effective use of the Events group saves you time.
RMON requires one probe per LAN segment, and stand-alone RMON Switch probes have traditionally been expensive. Therefore, 3Com’s approach has been to build an inexpensive RMON probe into the agent of each Switch. This allows RMON to be widely deployed around the network without costing more than traditional network management.
RMON 9-15 When using the RMON features of the Switch, you should note the following: After the default sessions are created, they have no special status. You can delete or change them as required. The greater the number of RMON sessions, the greater the burden on the management resources of the Switch.
Page 140
9-16 9: S HAPTER TATUS ONITORING AND TATISTICS...
OFTWARE PGRADE AND PTIONS This chapter describes the procedure for upgrading the Switch software image. It also covers how to save and load a primary and secondary configuration file on the Switch. Upgrading the The image file contains the executable code that runs on the Switch Software 9000.
10-2 10: S HAPTER OFTWARE PGRADE AND PTIONS You can select which image the Switch will load on the next reboot by using the following command: use image {primary | secondary} If you do not specify which image to use, the Switch automatically loads the primary image.
Boot Option Commands 10-3 Returning to Factory To return the Switch configuration to factory defaults, use the following Defaults command: unconfig switch This command resets the entire configuration, with the exception of user accounts and passwords that have been configured. To reset all parameters, use the following command: unconfig switch all Boot Option...
Page 144
10-4 10: S HAPTER OFTWARE PGRADE AND PTIONS...
AFETY NFORMATION You must read the following safety information before carrying out any installation or removal of components, or any maintenance procedures on the Switch 9000. Important Safety Information WARNING: Warnings contain directions that you must follow for your personal safety. Follow all instructions carefully Please read the following safety information thoroughly before installing the Switch 9000.
A: S PPENDIX AFETY NFORMATION This unit operates under SELV (Safety Extra Low Voltage) conditions according to IEC 950. The conditions are only maintained if the equipment to which it is connected also operates under SELV conditions. The appliance coupler (the connector to the unit and not the wall plug) must have a configuration for mating with an EN60320/IEC320 appliance inlet.
Important Safety Information If the power cord plug is unsuitable and must be replaced, you may find other codings for the respective connections. Connect the power supply wires for the unit according to the following scheme: Brown wire to the Live (Line) plug terminal which may be marked with the letter ‘L’...
A: S PPENDIX AFETY NFORMATION Lithium Battery Replace the lithium battery with the same or equivalent type, as recommended by the manufacturer. WARNING: There is a danger of explosion if the battery is incorrectly replaced. Dispose of used batteries according to the manufacturers instructions.
L’information de Sécurité Importante Pour réduire les risques d'incendie ou de choc électrique, installez ce groupe sous abri dans une zone dont la température et l'humidité sont régulées et qui ne contient pas de produits contaminateurs conductifs. Power Pour garantir le respect des normes internationales de sécurité, utilisez uniquement l'adaptateur électrique remis avec cet appareil.
A: S PPENDIX AFETY NFORMATION Cordon électrique Il doit être agréé dans le pays d'utilisation : Etats-Unis et Le cordon doit avoir reçu l'homologation des UL Canada et un certificat de la CSA Le cordon souple doit respecter, à titre minimum, les spécifications suivantes : calibre 18 AWG type SV ou 5J...
L’information de Sécurité Importante porte-fusibles. Pour ce groupe, vous devez uniquement utiliser des fusibles réalisés par le même constructeur et offrant le même pouvoir de coupure et respectant le même type que le fusible d'origine. Refermez le porte-fusibles. Fuse Pour respecter les normes européennes de sécurité, il ne faut pas monter un fusible de rechange sur l'admission de cet appareil.
A: S PPENDIX AFETY NFORMATION les batteries au lithium ne figurent pas sur la liste EPA des déchets dangereux. Par conséquent, vous pouvez en général vous en débarrasser comme s'il s'agissait d'un déchet normal. si vous souhaitez vous débarrasser de quantités importantes, contactez un service local de gestion des déchets.
Wichtige Sicherheitsinformationen Das Gerät muß an eine geerdete Steckdose angeschlossen werden, die die europäischen Sicherheitsnormen erfüllt. Das Gerät nicht an eine Wechselstromsteckdose anschließen, die nicht geerdet ist. Die Netzsteckdose muß in der Nähe des Geräts und leicht zugänglich sein. Die Stromversorgung des Geräts kann nur durch Herausziehen des Gerätenetzkabels aus der Netzsteckdose unterbrochen werden.
A-10 A: S PPENDIX AFETY NFORMATION Fuse Zur Erfüllung europäischer Sicherheitsnormen darf keine Ersatzsicherung am Geräteeingang angebracht werden. Es dürfen nur Sicherungen vom gleichen Hersteller, der gleichen Marke und Art mit dem Gerät verwendet werden. Faseroptikanschlüsse Niemals mit einem Vergrößerungsgerät ein Übertragungs-LED/Laser - Optische Sicherheit betrachten, während dieses eingeschaltet ist.
Wichtige Sicherheitsinformationen A-11 Lithiumbatterie Die Lithiumbatterie nach den Empfehlungen des Herstellers durch eine Batterie des gleichen oder eines gleichwertigen Typs ersetzen. WARNHINWEIS: Wird die Batterie falsch ersetzt, besteht Explosionsgefahr. Verbrauchte Batterien nach den Angaben des Herstellers entsorgen. Batterien nicht in Wasser eintauchen oder verbrennen. Die Entsorgungsbestimmungen sind je nach Land verschieden.
ECHNICAL PECIFICATIONS Physical Dimensions Height: 3.5 inches x Width: 17.32 inches x Depth: 17.32 inches Weight: 22 pounds Environmental Requirements Operating Temperature 0 to 40˚ C Storage Temperature -10 to 70 ˚ C Operating Humidity 10% to 95% relative humidity, noncondensing Standards EN60068 (IEC68) Safety...
ROUBLESHOOTING If you encounter problems when using the Switch, this Appendix may be helpful. If you have a problem which is not listed here or in the release notes, please contact your local technical support representative. LEDs Power LED does not light: Check that the power cable is firmly connected to the device and to the supply outlet.
C: T PPENDIX ROUBLESHOOTING Both sides if the gigabit link must be enabled or disabled. It the two are different, typically the side with auto-negotiation disabled will have the link LED list, and the side with auto-negotiation enabled will not list. The default configuration for a gigabit port is auto-negotiation enabled.
Page 161
Using the Command-Line Interface Traps are not received by the SNMP Network Manager: Check that the SNMP Network Manager's IP address and community string are correctly configured and that the IP address of the Trap Receiver is configured properly on the Switch. The SNMP Network Manager or Telnet workstation can no longer access the device: Check that Telnet access or SNMP access is enabled.
C: T PPENDIX ROUBLESHOOTING You forget your password and cannot log on: If you are not an administrator, another user having administrator access level can log on, delete your user name, and create a new user name for you, with a new password. Alternatively, another user having administrator access level can log in and initialize the device.
Using the Command-Line Interface VLAN Names: There are restrictions on VLAN names. They cannot contain white spaces and cannot start with a numeric value unless you use quotation marks around the name. If a name contains white spaces or starts with a numeric, you must use quotation marks whenever referring to the VLAN name.
C: T PPENDIX ROUBLESHOOTING The Switch keeps aging out endstation entries in the Switch Forwarding Database (FDB): Reduce the number of topology changes by disabling STP on those Switches that do not use redundant paths. Specify that the endstation entries are static or permanent. Routing The Switch sees RIP updates but other routers don’t: Ensure that the RIP transmit and receive modes are appropriate for the...
For the very latest, we recommend that you access 3Com Corporation’s World Wide Web site as described below. Online Technical 3Com offers worldwide product support 24 hours a day, 7 days a Services week, through the following online systems:...
3Com Corporation’s interactive fax service, 3ComFacts, provides data Automated Fax sheets, technical articles, diagrams, and troubleshooting instructions on Service 3Com products 24 hours a day, 7 days a week. Call 3ComFacts using your Touch-Tone telephone using one of these international access numbers: Country...
3ComForum on 3ComForum is a CompuServe-based service containing patches, CompuServe ® software, drivers, and technical articles about all 3Com products, as Online Service well as a messaging section for peer support. To use 3ComForum, you need a CompuServe account. To use 3ComForum: 1 Log on to CompuServe.
Support from 3Com If you are unable to receive support from your network supplier, technical support contracts are available from 3Com. Contact your local 3Com sales office to find your authorized service provider using one of these numbers: Regional Sales Office...
Returning Products for Repair Returning Products Before you send a product directly to 3Com for repair, you must first be for Repair obtain a Return Materials Authorization (RMA) number. Products sent to 3Com without RMA numbers will be returned to the sender unopened, at the sender’s expense.
Page 171
LOSSARY ageing The automatic removal of dynamic entries from the Switch Database that have timed-out and are no longer valid. Address Resolution Protocol. The protocol used to dynamically bind high-level IP addresses to low-level hardware addresses. ARP is used only across a single physical network and is limited to networks that support hardware broadcasts.
Page 172
LOSSARY CSMA/CD Carrier Sense Multiple Access/Collision Detection that is a channel access method used by Ethernet and IEEE 802.3 standards in which devices transmit only after finding the data channel clear for some period of time. When two devices transmit simultaneously, a collision occurs and the colliding devices delay their retransmissions for a random amount of time.
Page 173
Non-volatile RAM. NVRAM retains its contents when the Switch is powered off. PACE Priority Access Control Enabled that is 3Com’s innovative technology to work in conjunction with a switch in order to control the latency and jitter associated with the transmission of multimedia traffic over Ethernet and Fast Ethernet.
Page 174
Trivial File Transfer Protocol that allows the transfer of files (such as software upgrades) from a remote device using the Switch’s local management capabilities. Transcend 3Com’s umbrella management system used to manage all of 3Com’s networking solutions. trap A message sent by an SNMP agent to an authorized trap receiver (usually a network management station) to indicate the occurrence of a significant event, such as an error condition or a threshold that has...
Page 177
LEDs World Wide Web positioning rack mounting rear view size stacking with other devices weight syslog host technical support 3Com URL bulletin board service fax service network suppliers product repair using CompuServe Telnet disconnecting a session using 10-1 TFTP server...
Page 179
ARRANTY ARDWARE 3Com warrants its hardware products to be free from defects in workmanship and materials, under normal use and service, for the following lengths of time from the date of purchase from 3Com or its Authorized Reseller: Network adapters...
Page 180
IMITATION OF IABILITY TO THE FULL EXTENT ALLOWED BY LAW, 3COM ALSO EXCLUDES FOR ITSELF AND ITS SUPPLIERS ANY LIABILITY, WHETHER BASED IN CONTRACT OR TORT (INCLUDING NEGLIGENCE), FOR INCIDENTAL, CONSEQUENTIAL, INDIRECT, SPECIAL, OR PUNITIVE DAMAGES OF ANY KIND, OR FOR LOSS OF REVENUE...