All rights reserved. No part of this publication may be reproduced without prior written
permission from Allied Telesyn.
Allied Telesyn International, Corp. reserves the right to make changes in specifications
and other information contained in this document without prior written notice. The
information provided herein is subject to change without notice. In no event shall Allied
Telesyn be liable for any incidental, special, indirect, or consequential damages
whatsoever, including but not limited to lost profits, arising out of or related to this
manual or the information contained herein, even if Allied Telesyn has been advised of,
known, or should have known, the possibility of such damages.
All trademarks are the property of their respective owners.
This software product contains an implementation of IPsec certified
and tested to meet ICSA Labs IPsec security standards. For more
information see http://www.icsa.net.
Contents
CHAPTER 1
CHAPTER 2
CHAPTER 3
Introduction
Why Read This User Guide? .............................................................................. 5
Where To Find More Information ...................................................................... 6
Technical support .............................................................................................. 6
What Can the Rapier Switch Do? ...................................................................... 7
Switching Features ..................................................................................... 7
Routing Features ........................................................................................ 8
Visit www.alliedtelesyn.co.nz for
the latest documentation, FAQ,
and support information
PrintedAcrobat PDF
Website
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Introduction5
Chapter 1
Introduction
Welcome to the Rapier Series Layer 3 Gigabit switch, combining wire speed
Layer 2 and Layer 3 IP switching, with a powerful multiprotocol routing
software suite.
Why Read This User Guide?
This User Guide describes how to get started accessing the switch’s Command
Line Interface (CLI) and its Graphical User Interface (GUI), and how to
configure the Layer 2 switching features. For more detailed descriptions of all
commands and display outputs see the Rapier Switch Software Reference. The
user guide is organised into the following chapters:
■
Chapter 1, Introduction introduces the Rapier switch and gives an overview
of the features of the Rapier switch and its documentation.
■
Chapter 2, Getting Started describes how to gain access to the switch’s
command line and graphical user interfaces.
■
Chapter 3, Operating the Switch introduces general operation, management
and support features, including user authentication, loading and installing
support files, and SNMP MIBs.
■
Chapter 4, Layer 2 Switching describes how to configure Layer 2 switching
features, including switch ports, VLANs and STP.
■
Chapter 5, Layer 3 Switching describes how to use Layer 3 switching over
VLANs, including IP, Novell IPX and AppleTalk. Full descriptions of the
switch’s support for these protocols is found in the Rapier Switch Software
Reference.
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
6Rapier Switch User Guide
Where To Find More Information
Before installing the switch and any expansion options, read the important
safety information in the Safety and Statutory Information booklet. Follow the
Quick Install Guides step-by-step instructions for physically installing the switch
and its expansion options. The Hardware References give detailed information
about the equipment hardware. Once you are familiar with the basic
operations of the switch, use the Software Reference for full command syntax
descriptions and for full descriptions of the switch’s routing features.
The latest versions of user documentation for the Rapier family of switches can
be downloaded from the on-line support site at
http://www.alliedtelesyn.co.nz/support/rapier
Rapier switch includes:
■
Rapier Switch Safety and Statutory Information
■
Rapier Switch Quick Install Guide
■
Rapier Switch Documentation and Tools CD-ROM, which includes the
following PDF documents:
•Rapier Switch Safety and Statutory Information
. The documentation set for the
•Rapier Switch Quick Install Guide,
•Rapier Switch Hardware Reference
•Rapier Switch Software Reference
•Rapier Uplink Module Quick Install Guide
•Rapier Uplink Module Hardware Reference
•Network Service Module Quick Install Guide
•Network Service Module Hardware Reference
•Port Interface Card Quick Install Guide
•Port Interface Card Hardware Reference
Technical support
For on-line support for your Rapier switch, see our on-line support page at
http://www.alliedtelesyn.co.nz/support/rapier
contact your authorised Allied Telesyn distributor or reseller.
This page will also contain the latest release of the switch software. The LOAD
command can be used to download software upgrades directly from the Allied
Telesyn Research web site to the switch’s FLASH memory. Use the SET
INSTALL command to enable the new software release (“Example: Install Soft-ware Upgrade for Rapier Switch” on page 24).
. If you require further assistance,
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Introduction7
What Can the Rapier Switch Do?
The Rapier switch software support for the Rapier Series switches and their
expansion options provides wirespeed Layer 2 switching, including support
for Virtual LANs, wirespeed Layer 3 IP switching, and Layer 3 multiprotocol
routing.
Switching Features
The main Layer 2 features of the switch are:
■
High performance, non-blocking, wire-speed Layer 2 switching (“Layer 2
Switching Process” on page 43).
■
Packet Forwarding at wire speed (“The Forwarding Process” on page 45).
■
Store and Forward switching mode.
■
Autonegotiation of link speed and duplex mode for 10/100 Mbps speed on
all 100BASE TX ports (“Autonegotiation of Port Speed and Duplex Mode” on
page 29).
■
Autonegotiation of duplex mode for 10/100 and gigabit Ethernet ports
(“Autonegotiation of Port Speed and Duplex Mode” on page 29).
■
Automatic, configurable MAC address learning and ageing, supporting up
to 8191 MAC addresses per switch (“The Learning Process” on page 44).
■
Switch Filtering (“Layer 2 Filtering” on page 46).
■
Layer 3 Filtering (Switching chapter in Rapier Switch Software Reference).
■
Broadcast Storm Protection (“Packet Storm Protection” on page 32).
■
Virtual LANs defined by port membership (“Virtual LANs” on page 35).
■
Spanning Tree Protocol (“Spanning Tree Protocol (STP)” on page 49).
■
Priority tagging to support four QOS egress queues (“Quality of Service” on
page 48).
■
Port trunking to spread traffic over several links (“Port Trunking” on
page 30).
■
Port mirroring (“Port Mirroring” on page 33).
■
IGMP (Internet Group Management Protocol) snooping (“IGMP Snooping”
on page 56).
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
8Rapier Switch User Guide
Routing Features
In addition to Layer 2 and Layer 3 switching, the Rapier switch provides a
wide array of multiprotocol routing, security and network management
features.
IP routing is performed at wire-speed. Other Layer 3 routing is performed by the CPU,
and increasing the routing load on the CPU decrease its performance.
Some features require the addition of WAN interfaces via Network Service
Modules (NSMs) and Port Interface Cards (PICs) installed in the NSM bay on
the rear of the switch.
Features provided by the routing software suite include:
■
IP version 4 routing.
■
Network Address Translation (NAT) (not between switch ports)
■
Dynamic IP Address Assignment
■
IP Dynamic Filtering Firewall
■
IP Multihoming
■
IP RIP and IP RIPv2
■
DNS Relay
■
Demand IP
■
IP Filtering (not between switch ports)
■
IP Packet Prioritisation (not between switch ports)
■
Generic Routing Encapsulation (GRE)
■
Basic Rate and Primary Rate access to Integrated Services Digital Network
(ISDN) services, with dial-on-demand and channel aggregation.
■
Time Division Multiplexing (TDM) over G.703 links
■
Frame Relay
■
X.25
■
ARP, Proxy ARP and Inverse ARP address resolution protocols.
■
BACP (Bandwidth Allocation Control Protocol)
■
PPP Multilink
■
PPP over Ethernet (PPPoE)
■
Bandwidth on Demand
■
CLI, PAP and CHAP
■
Virtual Router Redundancy Protocol (VRRP) for fault tolerant internet
gateways (on NSM ports only)
■
IPsec
■
ISAKMP Key Management
■
Data Compression
■
Predictor Data Compression
■
STAC Data Compression
■
L2TP
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Introduction9
■
Telnet client and server.
■
A sophisticated and configurable event logging facility for monitoring and
alarm notification to single or multiple management centres.
■
Triggers for automatic and timed execution of commands in response to
events.
■
Scripting for automated configuration and centralised management of
configurations.
■
Dynamic Host Configuration Protocol (DHCP) for automatically assigning
IP addresses and other configuration information to PCs and other hosts
on TCP/IP networks.
■
Group management support for IP multicasting: IGMP version 2.
■
Support for the Simple Network Management Protocol (SNMP), standard
MIBs and the Allied Telesyn Enterprise MIB, enabling the switch to be
managed by a separate SNMP management station.
■
An HTTP client that allows files to be downloaded directly from a web
server to the switch’s FLASH memory, and an HTTP server that serves web
pages from FLASH.
For a complete description of the switch’s routing software, see the Rapier Switch Software Reference. Note that the Software Reference uses the word
“router” for the switch when it describes routing features.
Advanced Feature Licence AT-RPFL3Upgrade
If you purchased the advanced feature licence AT-RPFL3Upgrade, you can also
use the following features on your switch:
■
IP Multicast routing: DVMRP and PIM-Sparse Mode
■
IPX routing
■
Demand IPX
■
IPX/SPX Spoofing
■
IPX Filtering (not between switch ports)
■
AppleTalk routing
■
Resource Reservation Protocol (RSVP).
See “Enable AT-RPFL3Upgrade Feature Licence” on page 13.
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
10Rapier Switch User Guide
Optional Features
Some additional features in the switch software may require special feature
licences and passwords.
■
SecureShell Remote Management
■
Nemesis stateful inspection firewall
■
Firewall SMTP Application Gateway
■
Triple DES encryption
■
Support for Public Key Infrastructure.
Passwords must be ordered from your local distributor or reseller. You must specify the
special features to be licenced and the serial number(s) of the switch(s) on which the
special feature licences are to be enabled.
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Getting Started11
Chapter 2
Getting Started
The Rapier switch is supplied with default settings which allow it to operate
immediately as a switch, without any configuration. Even if this is all you want
to use the switch for, you should still gain access to the switch configuration, if
only to change the manager password to prevent unauthorised access.
To take advantage of the full range of advanced Layer 2 switching features, the
switch configuration must be changed. Layer 3 routing capabilities may also
require detailed configuration. The switch has both a Command Line Interface
(CLI) and a Graphical User Interface (GUI) for configuration and management.
Before you can use the GUI, you will need to login to the switch and use its CLI
to allocate an IP address.
Simple Switching
If all you want the switch to do is switch traffic on your LAN, you need not
perform any configuration. Simply power up the switch and connect devices to
the switch ports. Switch learning is enabled by default, and all valid packets
will be forwarded (“Layer 2 Switching Process” on page 43).
Command Line Interface
To use the command line interface (CLI) for configuring the switch, the first
thing you need to do after physically installing the switch is to start a terminal
session to access the switch (see Table 1 and the Rapier Switch Quick Install Guide).
To start a terminal session, do one of the following:
■
Connect a VT100-compatible terminal to the RS-232 Terminal Port, set the
communications parameters on the terminal (Table 1 on page 12), and
press [Enter] a few times until the switch’s login prompt appears; or
■
Connect the COM port of a PC running terminal emulation software such
as Windows Terminal or HyperTerminal to the RS-232 Terminal Port, set
the communications parameters on the terminal emulation software
(Table 1 on page 12), and press [Enter] a few times until the switch’s login
prompt appears.
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
12Rapier Switch User Guide
Table 1: Parameters for terminal communication
ParameterValue
Baud rate9600
Data bits8
ParityNone
Stop bits1
Flow controlHardware
Logging In
A user accessing the switch from a terminal or PC connected to the front panel
RS-232 terminal port (asyn0), or via a Telnet connection, must enter a login
name and password to gain access to the command prompt. When the switch
is supplied, it has a manager account with an initial password friend. Enter your
login name at the login prompt:
Enter your login name at the login prompt:
login: manager
Enter the password at the password prompt:
password: friend
This password should be changed to prevent unauthorised access to the
switch, using the command:
SET PASSWORD
Make sure you remember the new password you create, as a lost password
cannot be retrieved, and would mean losing access for configuring and
monitoring the switch.
Giving the Switch an IP Address
Once you have logged into the manager account you will be able to enter
commands from this document and from the Rapier Switch Software Reference.
Add an IP interface over the default VLAN (vlan1) and assign it an IP address
(e.g. 192.168.1.1), using the command:
ADD IP INTERFACE=vlan1 IPADDRESS=192.168.1.1
Once the switch is configured with an IP address, the command line interface
can also be accessed by using Telnet to the switch from an IP host.
Entering Commands
The switch is controlled with commands described in this document and in the
Rapier Switch Software Reference. While the keywords in commands are not case
sensitive, the values entered for some parameters are. The switch supports
command line editing and recall (Table 2 on page 13).
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Getting Started13
Table 2: Command line editing functions and keystrokes
FunctionVT100-compatible Keystroke
Move cursor within command line←, →
Delete character to left of cursor[Delete] or [Backspace]
Toggle between insert/overstrike[Ctrl/O]
Clear command line[Ctrl/U]
Recall previous command↑ or [Ctrl/B]
Recall next command↓ or [Ctrl/F]
Display command history[Ctrl/C] or
SHOW ASYN HISTORY
Clear command historyRESET ASYN HISTORY
Recall matching command[Tab] or [Ctrl/I]
Enabling the GUI
To enable the GUI, an IP address must be assigned to a switch interface, and
the GUI must be enabled, using the CLI. Use the command:
ENABLE GUI
Manager account privileges are required to enable the switch GUI, but manager
privileges are not required to use the GUI once it is enabled. Therefore, managers should
ensure the physical security of the switch.
Enable AT-RPFL3Upgrade Feature Licence
If you have purchased an advanced feature upgrade licence it must be enabled
before you can use the advanced routing features. You will need the password
provided by your authorised Allied Telesyn distributor or reseller. The
advanced upgrade licence and password are different from the standard
software release licence and password. The licence cannot be transferred from
one switch to another.
The password for a special feature licence is a string of at least 16 hexadecimal
characters, and encodes the special feature or features covered by the license,
and the switch serial number. The password information is stored in the
switch’s FLASH memory.
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
To enable or disable the AT-RPFL3Upgrade use the commands:
ENABLE FEATURE=AT-RPFL3Upgrade PASSWORD=password
DISABLE FEATURE=AT-RPFL3Upgrade
Other features on the switch, such as Firewall, Remote Secure Shell and Triple
DES encryption, and support for Public Key Infrastructure may also need
special feature licences. To list the current special feature licences use the
command:
SHOW FEATURE[={featurename|index}]
14Rapier Switch User Guide
Passwords must be ordered from your local distributor or reseller. You must specify the
special features to be licenced and the serial number(s) of the switch(s) on which the
special feature licences are to be enabled.
Graphical User Interface
The switch includes a built-in web browser based GUI for configuring and
monitoring the switch. Before you can access the GUI, it must be enabled using
the CLI (“Command Line Interface” on page 11). You need a web browser to
access the GUI. If you do not have one installed on your PC, install Netscape
Communicator or Microsoft Internet Explorer from the Rapier Switch Documentation & Tools CD-ROM. Some features may still need to be configured
using the CLI. GUI pages may differ slightly from those shown below,
depending on the web browser and software version you are using.
Starting the GUI
Point your web browser at the IP address you have assigned to the switch, for
example, http://192.168.1.1. The authentication window appears (Figure 1).
The “Enter Network Password dialog” allows only authorised users with the
correct password to access the switch. (The appearance of this dialog may
differ depending on the browser you use.)
Figure 1: Enter Network Password dialog
Enter the username manager and the password friend. The GUI Main
■
Screen opens (Figure 2).
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Getting Started15
Figure 2: Rapier 24 Welcome page
Save this page as a bookmark in your web browser, so that you can easily
■
find it again.
Navigating
While using the Rapier GUI, use the buttons on the pages to navigate, not the
browser’s Back and Forward buttons, to ensure that configuration information
is stored correctly.
The GUI is made up of Configuration pages, Monitoring pages and a
Troubleshooting page. Click on a menu item on the left to select the
Configuration, Monitoring or Troubleshooting pages.
Using help mode
Clicking Help opens help mode pages which show any help text available for
the current configuration page. Navigate through help mode pages in the same
way as navigating through the configuration pages. To return to the
configuration page corresponding to your current help mode page, click Exit
Help.
Configuring
Once in the Configuration page, select the type of configuration you want to
change. Tabs on the resulting pages allow you to modify a range of features.
Ports affected by the configuration are selected by clicking on a port in the port
map. To apply configuration changes selected or entered on a page, click
Apply. This saves the configuration in the switch’s memory, so that it affects its
current functioning, and updates the configuration file in FLASH memory
(“Configuration Scripts” on page 19).
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
To restore default settings on a configuration page, click Defaults to show the
defaults, then click Apply to apply the default settings shown.
16Rapier Switch User Guide
Monitoring
In the Monitoring page, select the kind of monitoring you want to display. A
pop-up display page locks the base page from which it was opened. Click OK
to close the pop-up window and return to its base window.
Troubleshooting
Web pages can sometimes become frozen if they are not navigated correctly.
They can be unlocked by restarting the web browser.
In the Troubleshooting page you can enter any command from the Rapier Switch Software Reference. The command is executed on the switch, and any
output is displayed in the Troubleshooting page.
Exiting
To leave the Rapier GUI, click the Exit button on any page. You will need to log
in again next time you access the switch GUI.
Changing your password
If you have not yet changed the initial manager password, you should do this
now. To change the password, click System. In the System configuration page,
enter a new password in the password field for the manager account. Click
Apply to save this change. This is the password you will use the next time you
log in to the switch as manager. Make sure you remember the new password, as
there is no way to retrieve it if it is lost.
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Operating the Switch17
Chapter 3
Operating the Switch
This chapter introduces general operation, management and support features,
including user authentication, loading and installing support files, and SNMP
MIBs. For more information see Chapter 1, Operation in the Rapier Switch
Software Reference.
User Privileges
The command processor supports three levels of privilege, USER, MANAGER,
and SECURITY OFFICER, distinguished by the prompt displayed by the
command processor when it is ready to receive commands. A USER level
prompt looks like:
>
while a MANAGER prompt looks like:
Manager >
and a SECURITY OFFICER prompt looks like:
SecOff >
See Chapter 1, Operation in the Rapier Switch Software Reference for more
information about creating new accounts with user, manager and security
officer privileges.
File Subsystem
FLASH memory is structured like a file subsystem. Files can be saved,
renamed, listed and deleted. Release files, online help files, configuration
scripts and other scripts are all stored as files in FLASH memory. Names must
have DOS format, with a filename of up to eight characters and an extension of
three characters.
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
To display the files in FLASH, use the command:
SHOW FILE
18Rapier Switch User Guide
Figure 3: Example output from the SHOW FILE command.
The Locks field indicates the number of concurrent processes using the file.
The switch automatically compacts FLASH memory when a maximum
threshold of deleted files is reached. Compaction frees space for new files by
discarding garbage. A message will appear when FLASH compaction has been
activated. Another message appears when FLASH compaction is complete.
While FLASH is compacting, do not restart the switch or use any commands
that affect the FLASH file subsystem. Do not restart the switch, or create, edit,
load, rename or delete any files until a message confirms that FLASH file
compaction is completed. Interrupting flash compaction may result in damage
to files.
Online CLI Help
Online help is available for all switch commands in the CLI. Typing a question
mark “?” at the end of a partially completed command displays a list of the
parameters that may follow the current command line, with the minimum
abbreviations in uppercase letters. The current command line is then redisplayed, ready for further input.
An online help facility provides more detailed help information via the
command:
HELP [topic]
If a topic is not specified, a list of available topics is displayed. The HELP
command displays information from the system help file stored in FLASH
memory. The help file used by the HELP command must be defined using the
command:
SET HELP=helpfile
The current help file and other system information can be displayed with the
command:
SHOW SYSTEM
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Operating the Switch19
Figure 4: Example of output from the SHOW SYSTEM command
Switch System Status Time 14:29:17 Date 12-Sep-2000.
Board ID Bay Board Name Rev Serial number
At boot the switch executes the commands in the boot script to configure the
switch. A boot script is a sequence of standard commands that the switch
executes at start-up. The default boot script is called
alternative script file can be defined as the boot script using the command:
SET CONFIG=filename
A configuration file is a script made up of the same commands as are used in
the CLI. It can be edited manually using the switch’s built in editor (“Editor” on
page 20), or uploaded to a PC and edited using any text editor using the
UPLOAD command (Chapter 1, Operation in the Rapier Switch Software Reference.
boot.cfg
, but an
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Saving Configuration Entered with the GUI
Configuration changes applied using the GUI automatically update the
configuration script specified in the SET CONFIG command.
20Rapier Switch User Guide
Saving Configuration Entered with the CLI
Subsequent commands entered from the command line or executed from a
script affect only the dynamic configuration in memory, which is not retained
over a power cycle. Changes are not automatically stored in nonvolatile
memory. When the switch is restarted the configuration will be restored to that
defined by the boot script, or if the switch was restarted using the RESTART
command, any script specified in the RESTART command.
To retain any configuration changes made after boot across a restart or power
cycle, save the modified configuration as a script file, using the command:
CREATE CONFIG=filename
The configuration file created by the GUI or the CREATE CONFIG command records
passwords in encrypted form, not in cleartext.
Editor
The switch has a built-in full-screen text editor for editing script files stored on
the switch file subsystem. Scripts can be run manually, or run when a trigger
automatically activates on some specified events in the switch. See “Triggers”
on page 58, and the Trigger Facility chapter in the Rapier Switch Software Reference. To access the editor, use the command:
EDIT [filename]
The file name is optional as a file can be loaded, or a new file can be created
from within the editor itself (Figure 5 on page 20).
Figure 5: The editor screen layout.
The editor uses VT100 command sequences and should only be used with a
VT100-compatible terminal, terminal emulation program or Telnet client.
To display editor Help at any time while in the editor press [Ctrl/K,H]; that is,
hold down the Ctrl key and press in turn the K key then the H key.
Rapier Switch Software Release 2.2.1
C613-02013-00 Rev A
Loading...
+ 46 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.