How it Works
3COM
Loading...
5500-SI
User Manual
686 pgs9.5 Mb0
Table of contents
Loading...

3COM 5500-SI User Manual

3Com® Switch 5500 Family
www.3Com.com Part Number: 10014922 Rev. AC Published: December 2006
Configuration Guide
Switch 5500-SI Switch 5500-EI Switch 5500G-EI
3Com Corporation 350 Campus Drive Marlborough, MA USA 01752-3064
Copyright © 2006, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate document, in the hard copy documentation, or on the removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein are provided to you subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense. Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered in other countries.
3Com and the 3Com logo are registered trademarks of 3Com Corporation.
Cisco is a registered trademark of Cisco Systems, Inc.
Funk RADIUS is a registered trademark of Funk Software, Inc.
Aegis is a registered trademark of Aegis Group PLC.
Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Novell and NetWare are registered trademarks of Novell, Inc. UNIX is a registered trademark in the United States and other countries, licensed exclusively through X/Open Company, Ltd.
IEEE and 802 are registered trademarks of the Institute of Electrical and Electronics Engineers, Inc.
All other company and product names may be trademarks of the respective companies with which they are associated.
ENVIRONMENTAL STATEMENT
It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we are committed to:
Establishing environmental performance standards that comply with national legislation and regulations.
Conserving energy, materials and natural resources in all operations.
Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental standards. Maximizing the recyclable and reusable content of all products.
Ensuring that all products can be recycled, reused and disposed of safely.
Ensuring that all products are labelled according to recognized environmental standards.
Improving our environmental record on a continual basis.
End of Life Statement
3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.
Regulated Materials Statement
3Com products do not contain any hazardous or ozone-depleting material.
Environmental Statement about the Documentation
The documentation for this product is printed on paper that comes from sustainable, managed forests; it is fully biodegradable and recyclable, and is completely chlorine-free. The varnish is environmentally-friendly, and the inks are vegetable-based with a low heavy-metal content.

CONTENTS

CONTENTS
ABOUT THIS GUIDE
Organization of the Manual 21 Intended Readership 22 Conventions 22 Related Manuals 23
1 GETTING STARTED
Product Overview 25 XRN Overview 26
Major Technologies 26
Typical Networking Topology 26 Product Features 27 Logging in to the Switch 29
Setting up Configuration Environment through the Console Port 29
Setting up Configuration Environment through Telnet 31
Setting up Configuration Environment through a Dial-up Modem 33 Command Line Interface 37
Command Line View 37
Features and Functions of Command Line 40 User Interface Configuration 42
User Interface Configuration 43
Displaying and Debugging User Interface 49
3
2 ADDRESS MANAGEMENT CONFIGURATION
Introduction to Address Management 51 Configuring Address Management 51
Configuring a Port-Based Address Management IP Address Pool 51
Binding the MAC Address and IP Address of a Legal User to the Specified Port 51 Address Management Configuration Example 52
Port-Based Address Management IP Address Pool Configuration Example 52
Configuration Example of Binding the MAC Address and IP Address of a Legal
User 53
3 PORT OPERATION
Ethernet Port Configuration Introduction 55
Ethernet Port Configuration 55
EthernetPort Security Features 62
Displaying and Debugging Ethernet Port 66
4 CHAPTER : CONTENTS
Displaying Port Configuration Information in Brief 67
Ethernet Port Configuration Example 67
Ethernet Port Troubleshooting 68 Link Aggregation Configuration 68
Link Aggregation Configuration 71
Displaying and Debugging Link Aggregation 74
Link Aggregation Configuration Example 75 Global Broadcast Suppression Feature 76
Configuring Global Broadcast Suppression 76
Global Broadcast Suppression Configuration Example 76
Configuration procedure 76 Displaying Information About a Specified Optical Port 77
4 XRN CONFIGURATION
Introduction to XRN 79 Configuring an XRN Fabric 79
Specifying the Stacking VLAN of the Switch 80
Setting Unit IDs for Switches 80
Saving the Unit ID of Each Unit in the Fabric 81
Specifying the Fabric Port of the Switch 81
Setting Unit Names for Switches 81
Setting a Fabric Name for Switches 81
Setting an XRN Authentication Mode for Switches 82
Displaying and Debugging a Fabric 82 Fabric Configuration Example 82 RMON on XRN 83
Configuration Commands for RMON on XRN 84 Clustering on XRN 84 Peer Fabric Port Detection 84
Work Flow of the Peer Fabric Port Detection Function 84
Prompt Information and Solution 85 Multiple Fabric Port Candidates 86
5 DLDP CONFIGURATION
DLDP Overview 89
DLDP Fundamentals 90
Precautions During DLDP Configuration 93 DLDP Configuration 93
Resetting DLDP Status 94 DLDP Configuration Example 94
6 VLAN OPERATION
VLAN Configuration 97
VLAN Overview 97
Configuring a VLAN 97
Displaying and Debugging VLAN 99
VLAN Configuration Example One 99
VLAN Configuration Example Two 100
Protocol-Based VLAN Configuration 100
Configuring Protocol-Based VLANs 100
Displaying the Information about Protocol-Based VLANs 101 Voice VLAN Configuration 102
Voice VLAN Configuration 102
Displaying and Debugging of Voice VLAN 106
Voice VLAN Configuration Example 106 Creating VLANs in Batches 107 Voice VLAN Configuration 107
Configuring the Voice VLAN Function 108
Voice VLAN Displaying and Debugging 109
Voice VLAN Configuration Example 109
7 GVRP CONFIGURATION
Introduction to GVRP 111
GVRP Working Scheme 111
GVRP Packet Format 113
Protocol Specifications 113 GVRP Configuration 114
Configuration Prerequisite 114
Configuration Procedure 114
Configuration Example 115 Displaying GVRP 116
5
8 VLAN-VPN CONFIGURATION
VLAN-VPN Overview 117
Implementation of VLAN-VPN 117
Adjusting the TPID Values of VLAN-VPN Packet 118 VLAN-VPN Configuration 118
Configuration Prerequisites 118
Configuration procedure 118 Inner VLAN Tag Priority Replication Configuration 119
Configuration Prerequisites 119
Configuration procedure 119 TPID Adjusting Configuration 119
Configuration Prerequisites 119
Configuration Procedure 119 VLAN-VPN Configuration Example 120
Network requirements 120
Network diagram 120
Configuration Procedure 121
9 DHCP OVERVIEW
Introduction to DHCP 123 DHCP IP Address Assignment 124
IP Address Assignment Policy 124
DHCP IP Address Preferences 124
Sending Device Information through DHCP Option60 124
6 CHAPTER : CONTENTS
10 DHCP SERVER CONFIGURATION
Introduction to DHCP Server 125
Usage of DHCP Server 125
DHCP Fundamentals 125
DHCP Packet Processing Modes 127
DHCP Address Pool 127 Global Address Pool-Based DHCP Server Configuration 128
Configuration Overview 128
Enabling DHCP 128
Configuring Global Address Pool Mode on Interface(s) 129
Configuring How to Assign IP Addresses in a Global Address Pool 129
Configuring DNS Services for DHCP Clients 130
Configuring NetBIOS Services for DHCP Clients 131
Customizing DHCP Service 132
Configuring Gateway Addresses for DHCP Clients 132 Interface Address Pool-based DHCP Server Configuration 132
Configuration Overview 132
Enabling DHCP 133
Configuring to Assign the IP addresses of Local Interface-based address pools to DHCP
Clients 133
Configuring to Assign IP Addresses of Interface-based Address Pools to DHCP
Clients 133
Configuring DNS Services for DHCP Clients 135
Configuring NetBIOS Services for DHCP Clients 136
Customizing DHCP Service 137 DHCP Security Configuration 137
Prerequisites 137
Configuring Private DHCP Server Detecting 137
Configuring IP Address Detecting 137 Option 184 Supporting Configuration 138
Prerequisites 139
Configuring the Option 184 Supporting Function 139
Configuration Example 142 DHCP Server Displaying and Debugging 144 DHCP Server Configuration Example 144 Troubleshooting DHCP Server 146
11 DHCP RELAY CONFIGURATION
Introduction to DHCP Relay 147
Usage of DHCP Relay 147
DHCP Relay Fundamentals 147 DHCP Relay Configuration 148
DHCP Relay Configuration Tasks 148
Enabling DHCP 148
Configuring an Interface to Operate in DHCP Relay Mode 148 DHCP Relay Displaying 149 DHCP Relay Configuration Example 149 Troubleshooting DHCP Relay 150
12 VRRP CONFIGURATION
VRRP Overview 151
Virtual Router Overview 152
Introduction to Backup Group 153 VRRP Configuration 155
Configuring a Virtual Router IP address 155
Configuring Backup Group-Related Parameters 156 Displaying and Clearing VRRP Information 157 VRRP Configuration Example 157
Single-VRRP Backup Group Configuration Example 157
VRRP Tracking Interface Example 158
Multiple-VRRP Backup Group Configuration Example 160 Troubleshooting VRRP 162
13 MSTP CONFIGURATION
MSTP Overview 163
MSTP Protocol Data Unit 163
Basic MSTP Terminologies 164
Fundamentals of MSTP 166
MSTP Implementation on Switches 168 Root Bridge Configuration 168
Configuring an MST Region 169
Setting the Switch as the Root/Secondary Root Bridge 170
Setting the Bridge Priority of a Switch 171
Configuring MSTP Operation Mode 172
Configuring the Maximum Hop Count of an MST Region 172
Configuring the Diameter of a Switched Network 173
Configuring MSTP Time Parameters 173
Configuring the Timeout Time Factor 175
Configuring the Maximum Transmission Speed of a Port 175
Setting a Port as an Edge Port 176
Specifying whether a Port Connect to Point-to-Point Link 177
Enabling MSTP 179 Leaf Node Configuration 180
Prerequisites 180
Configuring an MST Region 180
Configuring MSTP Operation Mode 181
Configuring the Timeout Time Factor 181
Configuring the Maximum Transmission Speed of a Port 181
Setting a Port as an Edge Port 181
Configuring the Path Cost of a Port 181
Configuring the Priority of a Port 183
Configuring a Port to Connect to Point-to-Point Link 184
Enabling MSTP 184 mCheck Configuration 184
Prerequisites 184
Configuration Procedure 185
Configuration Example 185 Protection Functions Configuration 185
7
8 CHAPTER : CONTENTS
Introduction to the Protection Functions 185
Prerequisites 186
Configuring BPDU Protection 187
Configuring Root Protection 187
Configuring Loop Prevention 188
Configuring TC-BPDU Attack Prevention 188 BPDU Tunnel Configuration 188
Introduction to BPDU Tunnel 188
Configuring BPDU Tunnel 189 Displaying and Debugging MSTP 190 MSTP Configuration Example 190 BPDU Tunnel Configuration Example 192
14 CENTRALIZED MAC ADDRESS AUTHENTICATION CONFIGURATION
Introduction to Centralized MAC Address Authentication 195 Centralized MAC Address Authentication Configuration 196
Enabling Global/Port-based Centralized MAC Address Authentication 196
Configuring an ISP Domain for MAC Address Authentication Users 196
Setting Centralized MAC Address Authentication Timers 196
Displaying and Debugging Centralized MAC Address Authentication 197
Centralized MAC Address Authentication Configuration Example 197
15 SSH TERMINAL SERVICES
SSH Terminal Services 199
Introduction to SSH 199
SSH Server Configuration 201
SSH Client Configuration 205
Displaying SSH Configuration 205
SSH Server Configuration Example 206
SSH Client Configuration Example 207
SSH Keygen Program 209 SFTP Service 210
SFTP Overview 210
SFTP Server Configuration 210
SFTP Client Configuration 211
SFTP Configuration Example 213
16 IP ROUTING PROTOCOL OPERATION
IP Routing Protocol Overview 217
Selecting Routes Through the Routing Table 218
Routing Management Policy 219 Static Routes 220
Configuring Static Routes 221
Example: Typical Static Route Configuration 223
Troubleshooting Static Routes 224 RIP 224
Configuring RIP 225
Traffic Sharing Across RIP Interfaces 233
Displaying and Debugging RIP 233
Example: Typical RIP Configuration 233
Troubleshooting RIP 234 OSPF Configuration 235
Calculating OSPF Routes 235
Basic Concepts Related to OSPF 236
Configuring OSPF 237
Displaying and Debugging OSPF 253
254 Example: Configuring DR Election Based on OSPF Priority 254 Example: Configuring OSPF Virtual Link 256 Troubleshooting OSPF 257
IP Routing Policy 258
Configuring an IP Routing Policy 259 Forwarding Layer 3 Broadcast Packets 263 Displaying and Debugging the Routing Policy 264 Typical IP Routing Policy Configuration Example 264 Troubleshooting Routing Protocols 265
Route Capacity Configuration 265
Limiting Route Capacity 266 Route Capacity Configuration 266 Displaying and Debugging Route Capacity 267
9
17 NETWORK PROTOCOL OPERATION
IP Address Configuration 269
IP Address Overview 269 Configuring IP Address 271 Displaying and Debugging IP Address 272 IP Address Configuration Example 273 Troubleshooting IP Address Configuration 273
ARP Configuration 273
Configuring ARP 274
Introduction to Gratuitous ARP 275
Gratuitous ARP Packet Learning Configuration 276 Resilient ARP Configuration 277
277 Displaying and Debugging Resilient ARP Configuration 278 Resilient ARP Configuration Example 278
BOOTP Client Configuration 279
Overview of BOOTP Client 279 BOOTP Client Configuration 280 Debugging BOOTP Client 280
DHCP Configuration 280
Overview of DHCP 280 Option 82 supporting 283 DHCP Client Configuration 285 DHCP Relay Configuration 286 Enabling DHCP 286 Configuring DHCP Relay Security 287
10 CHAPTER : CONTENTS
Option 82 Supporting Configuration 288 Prerequisites 288 Enabling Option 82 Supporting on a DHCP Relay 288 Option 82 Supporting Configuration Example 289 Introduction to DHCP Snooping 290 DHCP Snooping Configuration 291 Configuration Example 292
Introduction to DHCP Accounting 292
Structure of the DHCP Accounting Packets 292 DHCP Accounting Fundamentals 294 DHCP Accounting Configuration 294 Displaying and Debugging DHCP Configuration 296 DHCP Relay Configuration Example One 297 DHCP Relay Configuration Example Two 298 Troubleshooting DHCP Relay Configuration 299
Access Management Configuration 299
Access Management Overview 299 Configuring Access Management 299 Displaying and Debugging Access Management 301 Access Management Configuration Example 302 Access Management using the Web 302
UDP Helper Configuration 303
Overview of UDP Helper 303 UDP Helper Configuration 303 Displaying and Debugging UDP Helper Configuration 305 UDP Helper Configuration Example 305
IP Performance Configuration 305
Displaying and debugging IP Performance 306 Troubleshooting IP Performance 307
18 MULTICAST PROTOCOL
IP Multicast Overview 309
Multicast Addresses 310 IP Multicast Protocols 312 Forwarding IP Multicast Packets 313 Applying Multicast 314
IGMP Snooping 314
Configuring IGMP Snooping 317 Enabling IGMP Fast Leave Processing 318 Configuring IGMP Snooping Filter ACL 319 Configuring the Maximum Number of Multicast Groups on a Port 319 Configuring Multicast VLAN 320 Displaying and Debugging IGMP Snooping 321 Configuration Example—Enable IGMP Snooping 322 IGMP Snooping Fault Diagnosis and Troubleshooting 322
Common Multicast Configuration 323
Enabling Multicast 323 Configuring the Number Limit of Multicast Routing Entries 323 Multicast MAC Address Entry Configuration 324
Displaying Multicast MAC Address Configuration 324 Multicast Source Deny Configuration 325 Clearing MFC Forwarding Entries or Statistics Information 325 Clearing Route Entries From The Core Multicast Routing Table 325 Displaying and Debugging Common Multicast Configuration 326
Internet Group Management Protocol (IGMP) 326
Configuring IGMP 328 Displaying and debugging IGMP 333
PIM-DM Overview 333
Configuring PIM-DM 335 Displaying and Debugging PIM-DM 338 PIM-DM Configuration Example 338
PIM-SM Overview 339
PIM-SM Operating Principle 340 Preparations before Configuring PIM-SM 341 Configuring PIM-SM 341 Displaying and Debugging PIM-SM 346 PIM-SM Configuration Example 346
349
11
19 ACL CONFIGURATION
Brief Introduction to ACL 351
ACL Supported by the Switch 352 Configuring ACL 352 Defining ACL 353 Activating ACL 355 Displaying and Debugging ACL 356 Advanced ACL Configuration Example 356 Basic ACL Configuration Example 357 Link ACL Configuration Example 358
QoS Configuration 359
QoS Configuration 361 Setting Port Priority 361 Configuring the Priority for Protocol Packets 361 Setting Port Mirroring 362 Configuring Traffic Mirroring 362 Setting Traffic Limit 364 Setting Line Limit 365 Relabeling Priority Level 365 Configuring Traffic Statistics 365 Configuring WRED Operation 366 Configuring Control Over Telnet 366 Displaying and Debugging QoS Configuration 369 QoS Configuration Example 369 Port Mirroring Configuration Example 370 Priority Relabeling Configuration Example 371
QoS Profile Configuration 372
Configuring QoS Profile 372 Configuring Profile Application Mode 373
12 CHAPTER : CONTENTS
Applying QoS Profile to the Port 374 QoS Profile Configuration Example 374
ACL Control Configuration 376
Configuring ACL for Telnet Users 376 Defining ACL 376 Importing ACL 377 Configuration Example 377 Configuring ACL for SNMP Users 377 Configuration Example 379 Configuring ACL Control over the HTTP Users 379 Defining ACL 379 Calling ACL to Control HTTP Users 379 Configuration Example 380
20 CONFIGURATION FOR QOS FEATURES
RSPAN Features 381
Configuration Prerequisite 382 Configuration Procedures in the Source Switch 383 Configuration Procedures in the Intermediate Switch 383 Configuration Procedures in the Source Switch 384 Configuration Example 384
Features of Traffic Statistics 386 Improving the Depth First Order of ACL Matching 386 Displaying Information of the display acl command 387 Subdividing DSCP while Defining ACL Rules 387 The Synchronization Feature of Queue Scheduling for Aggregation Ports 388 Configuring Control Over Telnet 388
Configuration Preparation 388 Controlling Telnet using Source IP 389 Controlling Telnet using Source IP and Destination IP 389 Controlling Telnet using Source MAC 390 Configuration Example 390
21 802.1X CONFIGURATION
IEEE 802.1x Overview 391
802.1x System Architecture 391
802.1x Authentication Process 392 Implementing 802.1x on the Switch 393
Configuring 802.1x 393
Enabling/Disabling 802.1x 393 Setting the Port Access Control Mode 394 Setting the Port Access Control Method 394 Checking the Users that Log on the Switch using Proxy 394 Setting the User Number on a Port 395 Setting the Authentication in DHCP Environment 395 Configuring the Authentication Method for 802.1x User 395
802.1x PEAP Configuration 395 Setting the Maximum Times of Authentication Request Message
Retransmission 397
Configuring Timers 398 Enabling/Disabling a Quiet-Period Timer 399
802.1x Client Version Checking Configuration 399 Enabling the 802.1x Client Version Checking Function 399 Configuring the Maximum Number of Retires to Send Version Checking Request
Packets 399 Configuring the Version Checking Timer 400
802.1x Client Version Checking Configuration Example 400 Guest VLAN Configuration 400 Guest VLAN Configuration 401 Configure Guest VLAN in Ethernet port view 401 Guest VLAN Configuration Example 401 The 802.1x Trusted MAC Address Synchronization Function 402
802.1x Supplicant System Checking 402 Displaying and Debugging 802.1x 403 Auto QoS 403
802.1x Configuration Example 403
Centralized MAC Address Authentication 405
Centralized MAC Address Authentication Configuration 406 Enabling MAC Address Authentication Both Globally and On the Port 406 Configuring Centralized MAC Address Authentication Mode 406 Configuring the User Name and Password for Fixed Mode 407 Configuring Domain Name Used by the MAC Address Authentication User 407 Configuring Centralized MAC Address Authentication Timers 407 Displaying and Debugging Centralized MAC Address Authentication 408 Auto VLAN 408 Configuration Example of Centralized MAC Address Authentication 408
AAA and RADIUS Protocol Configuration 409
RADIUS Protocol Overview 409 Implementing AAA/RADIUS on the Ethernet Switch 410 Configuring AAA 410 Creating/Deleting an ISP Domain 411 Configuring Relevant Attributes of the ISP Domain 411
AAA Separation 413
Configuring Separate AAA Schemes 414 Configuration Example for Separate AAA Schemes 414 Enabling/Disabling the Messenger Alert 415 Configuring Self-Service Server URL 416
Dynamic VLAN Assignment 417
Configuring Dynamic VLAN Assignment 417 Configuration Example for Dynamic VLAN Assignment 417 Creating a Local User 418 Setting Attributes of the Local User 419 Disconnecting a User by Force 420 Configuring the RADIUS Protocol 420 Creating/Deleting a RADIUS Scheme 421 Configuring RADIUS Authentication/
Authorization Servers 421 Configuring RADIUS Accounting Servers and the Related Attributes 422
User Re-authentication at Reboot 424
13
14 CHAPTER : CONTENTS
Configuring User Re-authentication at Reboot 425 Configuration Example for User Re-authentication at Reboot 425 Setting the RADIUS Packet Encryption Key 425 Tag VLAN Assignment on Trunk/Hybrid Port Supported by 802.1x
Authentication 426 Identifier Authentication Method Attribute in RADIUS 426 Setting Retransmission Times of RADIUS Request Packet 426 Setting the Supported Type of the RADIUS Server 426 Setting the RADIUS Server State 427 Setting the Username Format Transmitted to the RADIUS Server 427 Setting the Unit of Data Flow that Transmitted to the RADIUS Server 428 Configuring the Local RADIUS Authentication Server 428 Configuring Source Address for RADIUS Packets Sent by NAS 428 Setting the Timers of the RADIUS Server 429 Displaying and Debugging AAA and RADIUS Protocol 430 AAA and RADIUS Protocol Configuration Example 431 Configuring the Switch 5500 433 AAA and RADIUS Protocol Fault Diagnosis and Troubleshooting 435 Problem Diagnosis 436 3Com-User-Access-Level 436
22 FILE SYSTEM MANAGEMENT
File System Overview 437
Directory Operation 438
File Attribute Configuration 438
File Attribute Configuration 439
File Operation 440
Storage Device Operation 440 Setting the Prompt Mode of the File System 441
Configuring File Management 441
Displaying the Current-configuration and Saved-configuration of the Switch 441 Saving the Current-configuration 442 Erasing Configuration Files from Flash Memory 442 Configuring the Name of the Configuration File used for the Next Startup. 442
Configuration File Backup and Restoration 443
Configuration Preparation 443
FTP Overview 443
Enabling/Disabling FTP Server 444 Configuring Source IP Address for FTP Serve and Client 444 Configuring the FTP Server Authentication and Authorization 445 Configuring the Running Parameters of FTP Server 445 Displaying and Debugging FTP Server 446 Displaying the Source IP Address Configuration 446 Introduction to FTP Client 446 FTP Server Configuration Example 448
TFTP Overview 449
Downloading Files by means of TFTP 450 Uploading Files by means of TFTP 450 TFTP Client Configuration Example 450
MAC Address Table Management 451
MAC Address Table Configuration 452 Displaying MAC Address Table 454 MAC Address Table Management Display Example 454 MAC Address Table Management Configuration Example 455
Device Management 456
Device Management Configuration 456 Device Management Configuration Example 457
System Maintenance and Debugging 459
Setting the Daylight Saving Time 459
459
Telneting with Specified Source IP Address/Source Interface IP Address 459
460
Basic System Configuration 460
Terminating the FTP Connection of a Specified User 461 Restarting the Switch 461 Displaying the State and Information of the System 461
System Debugging 462
Testing Tools for Network Connection 464
ping 464 tracert 464
Introduction to Remote-ping 465 Remote-ping Configuration 466
Introduction to Remote-ping Configuration 466 Configuring Remote-ping 466 Configuration Example 467
Logging Function 468
Introduction to Info-center 468 Info-Center Configuration 471 Sending the Information to Loghost 474 Sending the Information to Control Terminal 476 Sending the Information to Telnet Terminal or Dumb Terminal 478 Sending the Information to the Log Buffer 480 Sending the Information to the Trap Buffer 481 Sending the Information to SNMP Network Management 482 Configuring Synchronous Information Output Function 485 Configuration Examples of Sending Log to Unix Loghost 485 Configuration Examples for Sending Log to Linux Loghost 486 Configuration Examples of Sending Log to Control Terminal 488
RMON Configuration 489
Configuring RMON 489 Displaying and Debugging RMON 491 RMON Configuration Example 492
NTP Overview 492 NTP Configuration 494
Configuring NTP Operating Mode 494 Displaying and Debugging NTP 499
Typical NTP Configuration Examples 499
Configure NTP Server 499 NTP peer Configuration 501
15
16 CHAPTER : CONTENTS
Configure NTP Broadcast Mode 502 Configure NTP Multicast Mode 504 Configure Authentication-enabled NTP Server Mode 505
SSH Terminal Services 506
Configuring SSH Server 507 Setting System Protocol 507 Configuring SSH Client 510 SSH Configuration Example 515
File System Configuration 516
Introduction to File System 516 File System Configuration 517
FTP Lighting Configuration 518
Introduction to FTP 518 FTP Lighting Procedure 518
TFTP Lighting Configuration 520
TFTP Lighting Procedure 521
23 PORT TRACKING CONFIGURATION
Introduction to the Port Tracking Function 523 Port Tracking Configuration 523
Configuring the Port Tracking Function 523 Port Tracking Configuration Example 523
24 DYNAMICALLY APPLY ACL BY RADIUS SERVER CONFIGURATION
Introduction to Dynamically Apply ACL by RADIUS Server 525 Introduction to Dynamically Apply ACL by RADIUS Server Configurations 525 Configuration Example 526
Network requirements 526 Network diagram 526 Configuration procedure 527 Configuration on the switch 529
25 AUTO DETECT CONFIGURATION
Introduction to the Auto Detect Function 531
Configuring the auto detect function 531 Auto Detect Configuration Example 531
Auto Detect Implementation 532 Auto Detect Implementation in Static Routing 533
Configuring the Auto Detect Function for a Static Route 533 Configuration Example 533
Auto Detect Implementation in VRRP 534
Configuring the Auto Detect Function for VRRP 534 Configuration Example 534
Auto Detect Implementation in VLAN Interface Backup 536
Configuring the Auto Detect Function for VLAN Interface Backup 536 Configuration Example 536
26 RSTP CONFIGURATION
STP Overview 539
Implement STP 539 Configuration BPDU Forwarding Mechanism in STP 543 Implement RSTP on the Switch 543
RSTP Configuration 544
Enable/Disable RSTP on a Switch 547 Enable/Disable RSTP on a Port 547 Configure RSTP Operating Mode 548 Configure the STP-Ignore attribute of VLANs on a Switch 548 Set Priority of a Specified Bridge 549 Specify the Switch as Primary or Secondary Root Bridge 549 Set Forward Delay of a Specified Bridge 550 Set Hello Time of the Specified Bridge 550 Set Max Age of the Specified Bridge 550 Set Timeout Factor of the Bridge 551 Specifying the Maximum Transmission Rate of STP Packets on a Port 551 Set Specified Port to be an EdgePort 552 Specifying the Path Cost on a Port 552 Set the Priority of a Specified Port 553 Configure a Specified Port to be Connected to Point-to-Point Link 553 Set mCheck of the Specified Port 554 Configure the Switch Security Function 554 Display and Debug RSTP 556
RSTP Configuration Example 556
17
27 POE PROFILE CONFIGURATION
Introduction to PoE Profile 559 PoE Profile Configuration 559
PoE Profile Configuration Tasks 559 PoE Profile Configuration Example 560
28 SNMP CONFIGURATION
SNMP Configuration Introduction 563
SNMP Versions and Supported MIB 563 Configure SNMP 565 Enabling/Disabling SNMP Agent to Send Trap 566 Setting the Destination Address of Trap 566 Setting Lifetime of Trap Message 567 Setting SNMP System Information 567 Setting the Engine ID of a Local or Remote Device 567 Setting/Deleting an SNMP Group 567 Setting the Source Address of Trap 568 Adding/Deleting a User to/from an SNMP Group 568 Creating/Updating View Information or Deleting a View 568 Setting the Size of SNMP Packet Sent/Received by an Agent 568 Enabling/Disabling a Port Transmitting Trap Information SNMP Agent 569 Disabling SNMP Agent 569
18 CHAPTER : CONTENTS
Network Management Operation Logging Configuration 569 Displaying and Debugging SNMP 570 SNMP Configuration Example 570 Reading Usmusr Table Configuration Example 571
29 SOURCE IP ADDRESS CONFIGURATION
Configuring Source IP Address for Service Packets 573 Displaying the Source IP Address Configuration 574
30 PASSWORD CONTROL CONFIGURATION OPERATIONS
Introduction to Password Control Configuration 575 Password Control Configuration 576
Configuration Prerequisites 576 Configuration Tasks 576 Configuring Password Aging 577 Configuring the Limitation of Minimum Password Length 578 Configuring History Password Recording 579 Configuring a User Login Password in Encryption Mode 580 Configuring Login Attempts Limitation and Failure Processing Mode 580 Configuring the Timeout Time for Users to be authenticated 581
Displaying Password Control 581 Password Control Configuration Example 582
31 MSDP CONFIGURATION
Introduction to MSDP 585
MSDP Working Mechanism 587
Configuring MSDP Basic Functions 590
Configuration Prerequisites 590 Configuring MSDP Basic Functions 591
Configuring Connection Between MSDP Peers 591
Configuration Prerequisites 591 Configuring Description Information for MSDP Peers 592 Configuring Anycast RP Application 592 Configuring an MSDP Mesh Group 592 Configuring MSDP Peer Connection Control 593
Configuring SA Message Transmission 593
Configuration Prerequisites 593 Configuring the Transmission and Filtering of SA Request Messages 594 Configuring a Rule for Filtering the Multicast Sources of SA Messages 594 Configuring a Rule for Filtering Received and Forwarded SA Messages 595 Configuring SA Message Cache 595
Displaying and Debugging MSDP Configuration 596 MSDP Configuration Example 596
Configuration Example of Anycast RP Application 596
Troubleshooting MSDP Configuration 599
MSDP Peer Always in the Down State 599 No SA Entry in the SA Cache of the Router 599
32 CLUSTERING
Clustering Overview 601
Switch Roles 602 Introduction to NDP 603 Introduction to NTDP 603 Introduction to Cluster Roles 604
Management Device Configuration 605
Enabling System and Port NDP 605 Configuring NDP Parameters 605 Enabling System and Port NTDP 605 Configuring NTDP Parameters 605 Configuring Cluster Parameters 606 Configuring Internal-External Interaction 607 NM Interface for Cluster Management Configuration 607
Member Device Configuration 608
Enabling System and Port NDP 608 Enabling System and Port NTDP 608 Specifying the cluster FTP/TFTP server 608
Configuring Cluster Parameters 609 Displaying and Maintaining Cluster Configurations 609 Clustering Configuration Example 610
NM Interface for Cluster Management Configuration Example 612
19
33 HWTACACS CONFIGURATION
Configuring HWTACACS 615
HWTACACS configuration tasks 615 Creating a HWTACAS Scheme 616 Configuring HWTACACS Authentication Servers 617 Configuring HWTACACS Accounting Servers and the Related Attributes 617 Configuring Source Address for HWTACACS Packets Sent by NAS 618 Setting a Key for Securing the Communication with TACACS Server 618 Setting the Username Format Acceptable to the TACACS Server 618 Setting the Unit of Data Flows Destined for the TACACS Server 619 Setting Timers Regarding TACACS Server 619
Displaying and Debugging HWTACACS Protocol 620 HWTACACS Protocol Configuration Example 621
Configuring the FTP/Telnet User Authentication at a Remote TACACS Server 621
A PASSWORD RECOVERY PROCESS
Introduction 623 CLI Commands Controlling Bootrom Access 623 Bootrom Interface 624
Displaying all Files in Flash 624 Skipping the Current Configuration File 625 Bootrom Passwords 625 Bootrom Password Recovery 626
20 CHAPTER : CONTENTS
B RADIUS SERVER AND RADIUS CLIENT SETUP
Setting Up A RADIUS Server 627
Configuring Microsoft IAS RADIUS 627 Configuring Funk RADIUS 652 Configuring FreeRADIUS 656
Setting Up the RADIUS Client 658
Windows 2000 built-in client 658 Windows XP built-in client 658 Aegis Client Installation 659
C AUTHENTICATING THE SWITCH 5500 WITH CISCO SECURE ACS
Cisco Secure ACS (TACACS+) and the 3Com Switch 5500 661 Setting Up the Cisco Secure ACS (TACACS+) server 661
Adding a 3Com Switch 5500 as a RADIUS client 662 Adding a User for Network Login 664 Adding a User for Switch Login 665
D 3COM XRN
What is XRN? 672
Supported Switches 672
XRN Terminology 672 Benefits of XRN 673 XRN Features 673
Distributed Device Management (DDM) 673 Distributed Resilient Routing (DRR) 673 Distributed Link Aggregation (DLA) 674
How to Implement XRN—Overview 676 Important Considerations and Recommendations 676
Recommendations for Achieving Maximum Resilience 677
Unit ID Numbering Mechanism 678
678
Network Example using XRN 678
XRN Distributed Fabric Network 678
Recovering your XRN Network 680
Unit Failure 680 Interconnect Failure 680
How XRN Interacts with other 3Com Switches 680 How XRN Interacts with other Features 681
VLANs 681 Legacy Aggregated Links 682 STP/RSTP 683 Resilient Links 683
How a Failure affects the Distributed Fabric 684
Loss of a Switch within the XRN Distributed Fabric 684 Loss of the Fabric Interconnect 685

ABOUT THIS GUIDE

Organization of the Manual

This guide provides information about configuring your network using the
®
commands supported on the 3Com
Switch 5500 Family.
The descriptions in this guide apply to the Switch 5500-SI and Switch 5500-EI. Differences between the models are noted in the text.
The Switch 5500 Family Configuration Guide consists of the following chapters:
■ Getting Started—Details the main features and configurations of the Switch
5500.
■ Address Management—Details how to configure the switch on which the
Address Manage (AM) feature is enabled.
■ Port Operation—Details how to configure Ethernet port and link aggregation.
■ XRN Fabric—Details how to configure an XRN fabric.
■ DLDP—Drtails overview and fundamentals for Device Link Detection Protocol.
■ VLAN Operation—Details how to configure VLANs.
■ GVRP Configuration—Details GARP VLAN Registration Protocol
configuration.
■ VLAN-VPN—Details configuration information to create VLAN-VPNs.
■ DHCP—Details Dynamic Host Configuration Protocol.
■ Reliability—Details Virtual Router Redundancy Protocol (VRRP).
■ MSTP—Details Multiple spanning tree protocol.
■ Centralized MAC address authentication—Details Centralized MAC
address authentication configuration.
■ SSH—Details Secure Shell authentication.
■ IP Routing Protocol Operation—Details how to configure routing protocols.
■ Network Protocol Operation—Details how to configure network protocols.
■ Multicast Protocol—Details how to configure multicast protocols.
■ ACL Configuration—Details how to configure QoS/ACL.
■ QoS—Detais Quality of Service
■ RSTP Configuration—Details how to configure RSTP.
■ 802.1x Configuration—Details how to configure 802.1x.
■ File System Management—Details how to configure file system
management.
■ Port Tracking—Details Port Tracking Configuration.
22 ABOUT THIS GUIDE
■ ACL by RADIUS—Details ACL by RADUIS Configuration.
■ Auto Detect—Details Auto Detect Configuration.
■ RSTP—Details Spanning Tree Protocol Configuration.
■ PoE—Details PoE profile Configuration.
■ SNMP—Details Simple Network Management Protocol Configuration.
■ Source IP Address—Details Source IP Address Configuration for the FTP client
and server .
■ Password Control—Details Password Control Configuration.
■ MSDP—Details MSDP Configuration.
■ Clustering—Details Clustering Configuration.
■ HWTACACS—Details HWTACACS Configuration.

Intended Readership The manual is intended for the following readers:

■ Network administrators
■ Network engineers
■ Users who are familiar with the basics of networking

Conventions This manual uses the following conventions:

Tab le 1 Icons
Icon Notice Type Description
Information note Information that describes important features or instructions.
Caution Information that alerts you to potential loss of data or potential
Warning Information that alerts you to potential personal injury.
Tab le 2 Text conventions
Convention Description
Screen displays This typeface represents text as it appears on the screen.
Keyboard key names If you must press two or more keys simultaneously, the key names are
linked with a plus sign (+), for example:
Press Ctrl+Alt+Del
The words “enter” and type”
When you see the word “enter” in this guide, you must type something, and then press Return or Enter. Do not press Return or Enter when an instruction simply says “type.”
Fixed command text
This typeface indicates the fixed part of a command text. You must type the command, or this part of the command, exactly as shown, and press Return or Enter when you are ready to enter the command.
Example: The command display history-command must be entered exactly as shown.
damage to an application, system, or device.

Related Manuals 23

Tab l e 2 Text conventions (continued)
Convention Description
Variable command text
{ x | y | ... } Alternative items, one of which must be entered, are grouped in braces
[ ]
This typeface indicates the variable part of a command text. You must type a value here, and press Return or Enter when you are ready to enter the command.
Example: in the command super level, a value in the range 0 to 3 must be entered in the position indicated by level
and separated by vertical bars. You must select and enter one of the items. Example: in the command flow-control {hardware | none |
software}, the braces and the vertical bars combined indicate that you must enter one of the parameters. Enter either hardware, or none, or software.
Items shown in square brackets [ ] are optional.
Example 1: in the command indicate that the parameter with or without this parameter.
Example 2: in the command user-interface [type] first-number [last-number] the square brackets indicate that the parameters [type] and [last-number] are both optional. You can enter a value in place of one, both or neither of these parameters.
Alternative items, one of which can optionally be entered, are grouped in square brackets and separated by vertical bars.
display users [all], the square brackets
all is optional. You can enter the command
Example 3: in the command header
text, the square brackets indicate that the parameters shell, incoming and login
one of the parameters is allowed.
are all optional. The vertical bars indicate that only
[shell | incoming | login]
Related Manuals The 3Com Switch 5500 Family Getting Started Guide provides information about
installation.
The 3Com Switch 5500 Family Command Reference Guide provides all the information you need to use the configuration commands.
24 ABOUT THIS GUIDE

GETTING STARTED

1
This chapter covers the following topics:

■ Product Overview

■ XRN Overview
■ Product Features
■ Logging in to the Switch
■ Command Line Interface
■ User Interface Configuration
Product Overview The Switch 5500 Family are Layer 3 switching products supporting expandable resilient
networking (XRN). The Switch 5500 can be one of two series: Switch 5500-SI or the Switch 5500-EI. The Switch 5500 family supports simple routing, basic service features, and basic XRN; the Switch 5500 family supports rather complex routing protocols, abundant service features and enhanced XRN. Besides saving user cost otherwise invested on module rack-type switches, the Switch 5500 family with XRN also offer excellent network availability, upgrade ability, performance, and power network control capacity.
Table 3 lists the models in the Switch 5500 family:
Tab le 3 Models in the Switch 5500 family
Model
5500-SI 28-Port
5500-SI 52-Port
5500-EI 28-Port
5500-EI 52-Port
5500-EI PWR 28-Port
5500-EI PWR 52-Port
5500-EI 28-Port FX
5500G-EI 24-Port
5500G-EI 48-Port
5500G-EI PWR 24-Port
Power supply unit (PSU)
AC-input, DC-input
AC-input, DC-input
AC-input, DC-input
AC-input, DC-input
AC-input, DC-input
AC-input, DC-input
AC-input, DC-input
AC-input, DC-input
AC-input, DC-input
AC-input, DC-input
Number of service ports
Number of 100 Mbps ports
28 24 10/100 Mbps 4 SFP 1
52 48 10/100 Mbps 4 SFP 1
28 24 10/100 Mbps 4 SFP 1
52 48 10/100 Mbps 4 SFP 1
28
52
28
24 — 20 10/100/1000
48 — 44 10/100/1000
24 — 20 10/100/1000
24 10/100 Mbps
48 10/100 Mbps
24 100 Mbps
Number of 1000 Mbps uplink ports
4 SFP 1
4 SFP 1
2 10/100/1000 plus2 SFP
Mbps plus 4 10/100/1000 or SFP
Mbps plus 4 10/100/1000 or SFP
Mbps plus 4 10/100/1000 or SFP
Console port
1
1
1
1
26 CHAPTER 1: GETTING STARTED
Tab le 3 Models in the Switch 5500 family (continued)
Model
5500G-EI PWR 48-Port
5500G-EI 24-Port SFP
Power supply unit (PSU)
AC-input, DC-input
AC-input, DC-input
Number of service ports
48 — 44 10/100/1000
24 — 20 10/100/1000
Number of 100 Mbps ports
Number of 1000 Mbps uplink ports
Mbps plus 4 10/100/1000 or SFP
Mbps plus 4 10/100/1000 or SFP
Console port
1
1
The Switch 5500 family supports the following services:
■ Internet broadband access
■ MAN (metropolitan area network), enterprise/campus networking
■ Multicast service, multicast routing, and audio and video multicast service.

XRN Overview With the XRN (eXpandable Resilient Networking) feature, you can connect several

devices into a combined device and manage them as a single unit. The combined device is called the Fabric, while the member devices are units. With XRN you can:
■ Manage multiple devices in centralized manner, with low management cost.
■ Extend the number of ports and switching capacity just by adding devices. You can
decide which equipment to purchase as needed, and better protect your existing investment while upgrading the network.
■ Provide backup between multiple devices to improve reliability and to eliminate
single points of failure.

Major Technologies XRN includes three technologies: distributed device management (DDM), distributed

link aggregation (DLA), and distributed resilient route (DRR).
■ DDM: Users can treat the Fabric as a single device. They can manage the Fabric
through any port or IP address connected into the Fabric, and from any unit in the fabric.
■ DRR: The multiple units of a Fabric route and forward packets as a single unit, and
provide uniform VLAN interfaces, routing table and L3 forwarding table, so the Fabric is regarded as a single Layer 3 switch. Failure of one of the units will not affect routing protocol and data forwarding.
■ DLA: Users can aggregate multiple ports of several different units in a Fabric into a
group, for centralized management within the Fabric. Trans-unit link aggregation can bring convenient aggregation setting and effectively reduce single points of failure.
The Switch 5500-SI supports basic XRN, that is DDM and DLA; the Switch 5500-EI supports enhanced XRN, including DDM, DRR, and DLA.
Typical Networking
Topology
Typical XRN networking topology is as shown in Figure 1. Switches of the same type (that is, units) form a Fabric. As a core switch, the Fabric can be downlinked to workgroup switches through several aggregation links, and uplinked to the server group also through several aggregation links.
Figure 1 Networking Topology with XRN
Unit 2
Unit 1
Unit3
Unit 4
Fabric
Server
Core
switches
Workgroup
switches
Desktop
PCs

Product Features 27

Product Features Table 4 describes the features:
Tab le 4 Function Features
Features Description
Port 802.1D Learning
Static MAC (unicast/multicast)
Jumbo Frame (9k) (EI models only)
Unidirectional Link Detection (UDLD)
VLAN VLAN compliant with IEEE 802.1Q Standard
Port-based VLAN
Protocol Based VLAN, compliant with IEEE 802.1v Standard (EI models only)
Voice VLAN
8021.Q in Q Double Tagged VLAN Support (EI models only)
STP protocol Spanning Tree Protocol (STP) / Rapid Spanning Tree Protocol
Flow control IEEE 802.3 flow control (full-duplex)
Traffic Suppression Broadcast/Unicast/Multicast Suppression
(RSTP), compliant with IEEE 802.1D/IEEE802.1w Standard
Multiple Spanning Tree Protocol (MSTP), compliant with IEEE
802.1s Standard
BPDU Guard
Spanning Tree Root Guard
Back-pressure based flow control (half-duplex)
28 CHAPTER 1: GETTING STARTED
Tab le 4 Function Features (continued)
Features Description
Multicast Internet Group Management Protocol (IGMP) Snooping
Multicast VLAN Registration (MVR)
Internet Group Management Protocol (IGMP) (EI
Protocol-Independent Multicast-Dense Mode (PIM-DM) (EI models only)
Protocol-Independent Multicast-Sparse Mode (PIM-SM) (EI models only)
Mulitcast Source Discovery Protocol (MSDP) (EI models only)
IP routing Static route
RIP V1/v2
OSPF (EI models only)
IP routing policy
Forwarding IP layer 3 broadcast packets
DHCP (Dynamic Host Configuration Protocol) Client
DHCP Server (EI models only)
DHCP Options 60, 82 and 184
DHCP Relay
UDP Relay
Link aggregation Link aggregation
Link Aggregation Control Protocol (LACP), compliant with IEEE
802.3ad Standard
Mirror Mirror based on the traffic classification
Port-based mirror
VLAN-based mirror
Remote mirroring
Security features Multi-level user management and password protect
802.1X Network Login
MAC Based Network Login
Mixed 802.1X and MAC Based Network Login
RADIUS and TACACS+ Authentication, Authorization and Accounting
PAP, CHAP, EAP-MD5,TLS,TTLS and PEAP Authenticating
Packet filtering
Quality of Service (QoS) Traffic classification
Bandwidth control
Priority
Queues of different priority on the port
Queue scheduling: supports Strict Priority Queuing (SP), Weighted Round Robin (WRR), WFQ, SP+WFQ, and SP+WRR
QoS profile management manner
models only)
Logging in to the Switch 29
Console port
Console cable
Tab le 4 Function Features (continued)
Features Description
Management and Maintenance
Loading and updates Loading and upgrading of software through the XModem
Command line interface configuration
Configuration through console port
Remote configuration through Telnet or SSH
Configuration through dialing the Modem
SNMP v1/2c/3
System log
Level alarms
Output of debugging information
Ping and Tracert
Remote maintenance with Telnet, Modem and SSHv2
protocol
Loading and upgrading of software through File Transfer Protocol (FTP) , Trivial File Transfer Protocol (TFTP) and Secure File Transfer Protocol (SFTP)

Logging in to the Switch

Setting up
Configuration
Environment through
the Console Port
This section describes how to log in to the switch.
Perform the following procedure to set up the configuration environment through the console port.
1 To set up the local configuration environment, connect the serial port of a PC (or a
terminal) to the console port of the Switch with the console cable (see Figure 2).
Figure 2 Setting up the Local Configuration Environment through the Console Port
2 Run terminal emulator (such as Terminal on Windows 3X or the Hyper Terminal on
Windows 9X) on the PC. Set the terminal communication parameters as follows:
■ Baud rate = 19200
■ Databit = 8
■ Parity check = none
■ Stopbit = 1
■ Flow control = none
■ Terminal type = VT100
30 CHAPTER 1: GETTING STARTED
Figure 3 Setting up a New Connection
Figure 4 Configuring the Port for Connection
Loading...
+ 656 hidden pages
Buy Points How it Works FAQ Contact Us Questions and Suggestions Privacy Policy Cookie Policy Terms of Use