All rights reserved. No part of this manual, or any associated artwork, software, product, design or
design concept, may be copied, reproduced or stored, in whole or in part, in any form or by any means
mechanical, electronic, optical, photocopying, recording or any other wise, including translation to
another language or format, without the express written consent of Asanté Technologies, Inc.
Trademarks
Asanté Technologies and IntraCore are trademarks of Asanté Technologies, Inc. Ethernet is a registered
trademark of the Xerox Corporation. All brand names and products are trademarks or registered trademarks of their respective holders.
FCC Information
This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference and (2) this device must accept any interference received, including interference that may cause undesired operation.
Operation of this equipment in a residential area is likely to cause interference, in which case, the user,
at his or her own risk and expense, will be required to correct the interference.
LIMITED FIVE YEAR WARRANTY
Subject to the limitations and exclusions below, Asanté warrants to the original end user purchaser that
the covered products will be free from defects in title, materials and manufacturing workmanship for a
period of five years from the date of purchase. This warranty excludes fans, power supplies, non-integrated software and accessories. Asanté warrants that the fans and power supplies will be free from
defects in title, materials and manufacturing workmanship for one year from date of purchase. Asanté
warrants that non-integrated software included with its products will be free from defects in title, materials, and workmanship for a period of 90 days from date of purchase, and the Company will support
such software for the purpose for which it was intended for a period of 90 days from the date of purchase. This warranty expressly excludes problems arising due to compatibility with other vendors
products, or future compatibility due to third party software or driver updates.
To take advantage of this warranty, you must contact Asanté for a return materials authorization (RMA)
number. The RMA number must be clearly written on the outside of the returned package. Product
must be sent to Asanté postage paid. In the event of a defect, Asanté will repair or replace defective
product or components with new, refurbished or equivalent product or components as deemed appropriate by Asanté. The foregoing is your sole remedy, and Asanté's only obligation, with respect to any
defect or non-conformity. Asanté makes no warranty with respect to accessories (including but not limited to cables, brackets and fasteners) included with the covered product, nor to any discontinued product, i.e., product purchased more than thirty days after Asanté has removed such product from its price
list or discontinued shipments of such product.
This warranty is exclusive and is limited to the original end user purchaser only. This warranty shall not
apply to secondhand products or to products that have been subjected to abuse, misuse, abnormal electrical or environmental conditions, or any condition other than what can be considered normal use.
ASANTÉ MAKES NO OTHER WARRANTIES, EXPRESS, IMPLIED OR OTHERWISE, REGARDING THE
ASANTÉ PRODUCTS, EXCEPT TO THE EXTENT PROHIBITED BY APPLICABLE LAW, ALL WARRANTIES
OR CONDITIONS OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE ARE HEREBY DISCLAIMED. ASANTÉ’S LIABILITY ARISING FROM OR RELATING TO THE PURCHASE, USE OR INABILITY
TO USE THE PRODUCTS IS LIMITED TO A REFUND OF THE PURCHASE PRICE PAID. IN NO EVENT WILL
ASANTÉ BE LIABLE FOR INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES FOR THE
BREACH OF ANY EXPRESS OR IMPLIED WARRANTY, INCLUDING ECONOMIC LOSS, DAMAGE TO PROPERTY AND, TO THE EXTENT PERMITTED BY LAW, DAMAGES FOR PERSONAL INJURY, HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY (INCLUDING NEGLIGENCE). THESE LIMITATIONS SHALL
APPLY EVEN IF ASANTE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES OR IF THIS
WARRANTY IS FOUND TO FAIL OF ITS ESSENTIAL PURPOSE.
Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages or
limitations on how long an implied warranty lasts, so the above limitations or exclusions may not apply
to you. This warranty gives you specific legal rights, and you may have other rights, which vary from
jurisdiction to jurisdiction.
Late Events ............................................................................. B-4
Page v
Page 8
Page vi
Page 9
1
Introduction
This chapter introduces the IntraCore architecture, then gives a description
of the chassis and the various modules that can be installed in the IntraCore
8000. There are also tables of the key features, default settings, and
specifications of the IntraCore 8000, and explanations of the different LED
indicators used by the various modules.
IntraCore Architecture Overview
Asanté has developed the IntraCore™ Architecture to meet the needs of
multi-service networks that support all applications and data types. The
architecture is standards-based and provides
Gmulti-vendor inter-operability
Ga migration path from current systems
Ginvestment protection
With the IntraCore Architecture, Asanté has found innovative ways of
embracing industry standards and technology advances to create products
capable of meeting real world requirements for converged, multi-service
networks.
The overall design incorporates a family of tightly integrated ASICs,
designed as system building blocks. These building blocks enable the rapid
development of advanced networking systems that are timed to meet market
requirements. The architecture ensures consistent high performance as
systems scale their capacity and feature capability. This approach extends
the useful life of the system and protects customer investments.
The Core Switching Engine
The Core Switching Engine is the centerpiece for all IntraCore products.
Based on advanced silicon ASICs, the Core Switching Engine is a high
performance, non-blocking, multi-gigabit switching fabric with scalable
bandwidth capacity. The Core Switching Engine is data format independent
and can support either frame or cell based interfaces. This capability is
becoming increasingly important as enterprise (primarily frame-based) and
service provider (primarily cell-based) networks move closer together.
Page 1-1
Page 10
Introduction
Infrastructure Connectivity
The second key element of the architecture is Infrastructure Connectivity.
IntraCore specifies standards based, high performance, cost effective
technologies for connectivity among devices in the network.
In the LAN –
At the network edge, Layer 2 switched 10/100/1000 Ethernet meets the
requirements for high-speed connectivity of desktop computers and scalable,
cost effective data transmission for trunks to the network core.
In the network core, Layer 2/3+-switched 10/100/1000 Ethernet meets the
requirements for high speed, scalable, cost effective data transmission and
support for all multi-service data types. High performance servers can be
centrally located for added physical security.
Throughout the LAN, advanced queuing techniques combined with multiple
priority levels and support for industry standard 802.1Q and 802.1p enable
Quality of Service within the network.
In the MAN/WAN –
Long haul Gigabit Ethernet, ATM, and Packet over SONET meet the
requirements for all of the following:
Gscalable, cost effective data transmission
Gsupport for all multi-service data types
Gservice provider inter operability
Network Management, Security, Performance, and
Control
IntraCore includes a rich suite of features required for the effective
management, security, performance, and control of the network. The
following table illustrates the features and standards supported by the
IntraCore architecture.
Page 1-2
Page 11
The IntraCore Product Family
Feature
Web Browser ManagementSupported
SNMP, RMONSupportedSupportedSupported
Standard MIsSSupportedSupportedSupported
802.1P PrioritySupportedSupported
802.1Q VLAN TaggingSupportedSupportedSupported
802.1D – Spanning TreeSupportedSupportedSupported
IGMP V1, V2 SnoopingSupportedSupported
RSVP SnoopingSupportedSupported
GARP Multicast RegistrationSupportedSupported
Duplicate IP addr. detectionSupportedSupported
Station movement notificationSupportedSupported
IP to MAC address bindingSupportedSupported
Controlled management accessSupported
GVRP (Group VLAN Registration Protocol)
Manage-
ment
SupportedSupportedSupported
Security
Performance
Control
Advanced Port Configuration:
Broadcast & Multicast rate
limit & port priority
SupportedSupportedSupported
Table 1-1 Summary of IntraCore’s supported features
The IntraCore Product Family
The Asanté IntraCore architecture is the basis for a family of switching
system products in fixed, stackable and chassis form factors that allow
customers to integrate telephony, video and data applications. Initially, two
systems are offered that provide high performance, high port-count, Layer 2
switching. Additional configurations will be introduced to offer advanced
Layer 3 and above routing, traffic classification, advanced QoS, higher
bandwidth and port capacity. All systems will be consistent in their
Page 1-3
Page 12
Introduction
operation and management allowing customers to seamlessly deploy any
model in their network.
Edge Switches
Edge Switches provide the first point of connectivity to the network.
Connecting to an Enterprise Switch in the network core, Edge Switches
provide aggregation of traffic from desktop computers over high capacity
trunks. The initial product introduced in the Edge Switch category is the
IntraCore 8000.
The IntraCore 8000 is a stackable, high performance solution for enterprise
edge applications. Each stack supports up to 192 10/100Mbps switched
Ethernet connections for cost-effective high-density connectivity in wiring
closets. The system can operate as a stand-alone network or be used in
combination with IntraCore 8000 in the backbone.
Enterprise Switches
In the network core, Enterprise Switches are deployed to aggregate traffic
from wiring closets and provide high-speed connectivity to network servers.
Typically these switches are modular in form factor, and can be easily
upgraded or reconfigured. This flexibility provides for customized
configurations to meet a wide variety of requirements. The initial product
introduced in this category is the IntraCore 9000.
Page 1-4
Page 13
The IntraCore 8000
The IntraCore 8000
The IntraCore 8000 is a stackable, high performance solution for enterprise
edge applications. Each stack supports up to 192 10/100Mbps switched
Ethernet connections for cost-effective high-density connectivity in wiring
closets. The system can operate as a stand-alone network or be used in
combination with an IntraCore 8000 in the backbone.
Figure 1-1 IntraCore 8000 Front Panel
Expansion Modules
The following modules can be used to extend the capabilities of the
IntraCore 8000.
8-port 10/100 Switch Module
This module provides 8 ports supporting switched 100BaseTX or 10BaseT
per port. Each module occupies a single slot and has either 24 RJ-45
connectors or 2 RJ-21 connectors.
Figure 1-2 8-port 10/100 Switch Module
Page 1-5
Page 14
Introduction
Gigabit Ethernet Switch Module
This module provides a slot for a switched Gigabit Ethernet port. Each
module occupies a single slot and has a GBIC port that accepts Asanté or
third party GBIC interfaces. The following subsections describe the possible
GBIC interfaces.
Figure 1-3 Gigabit Ethernet Switch Module
1000Base SX GBIC
This module provides a GBIC interface with SC-type fiber connectors. The
interface supports 62.5 and 50 micron multimode fiber media. The 62.5
micron multimode fiber can be up to 275 meters long, and the 50 micron
multimode fiber can be up to 550 meters long.
1000BaseLX Long Haul GBIC
This module provides a GBIC interface for SC-type fiber connectors. The
interface supports 10 micron single mode fiber for distances up to 100
kilometers.
1000BaseLX GBIC
This module provides a GBIC interface for SC-type fiber connectors. The
interface supports 10 micron single mode fiber for distances up to 5
kilometers.
Page 1-6
Page 15
Features
Features
The following table lists the major features of the IntraCore 8000 switch.
Feature Description
Media FlexibilityExpansion module options include 8-port 10/100 Base-TX
High DensitySupports up to 192 10/100 switched Ethernet ports or up to 3
ASIC-Based Architecture
High Performance
16Gbps Backplane
Multiple Priority
Queues
Stackable Form Factor
with modular expansion options
Configuration Flexibility and Growth
switched Ethernet modules and single-port Gigabit Ethernet
modules with GBIC slots.
switched Gigabit Ethernet ports and 24 10/100 switched Ethernet ports in a single stacking unit. This saves space in crowded
equipment rooms.
ASIC-based packet processing provides wire speed performance on all interfaces.
The system supports current requirements for multi-service
voice, video, and data applications with bandwidth to spare.
The high-capacity backplane is designed so that it may be
scaled up to 80 Gbps, extending the useful life of the chassis.
The “application aware” system ensures that mission critical
applications get the bandwidth and priority they need, even
under heavy traffic conditions. When network congestion
occurs, low latency requirements are managed by the system.
Each stack unit supports three option slots that can be customized to meet customer configuration requirements. Unique
stacking design delivers scalable system bandwidth assuring
maximum system performance regardless of configuration.
Expansion modules can be mixed and matched in any configuration and quantity to meet design requirements. You can add
capacity whenever your business requires it.
GBIC Modules for
Gigabit Ethernet Media
Flexibility
Installation OptionsThe system can be rack-mounted to save space.
The two GBIC Gigabit Ethernet modules can be configured
with any combination of 1000SX, 1000LX or 1000LX (Long
Haul) GBIC interfaces. Either Asanté or third party GBIC interfaces can be used, and the interfaces can be “hot swapped.”
This means that GBIC interfaces can be re-deployed based on
the user’s applications.
Page 1-7
Page 16
Introduction
Feature (Cont.)Description (Cont.)
SecurityNode summary tracks MAC and IP addresses per device, for
Web Based Management
VLANsSupports up to 64 port-based VLANs (IEEE 802.1Q compliant)
Multicast ControlThe IntraCore 8000 supports standards based IGMP snooping
RMONThe administrator can use an RMON probe for in-depth traffic
Spanning Tree ProtocolSpanning Tree Protocol (STP) detects and eliminates data loops
Y2K complianceAll IntraCore 8000 modules are Y2K compliant.
multiple devices on each port. The Port Security feature provides per-port security, allowing the network manager to specify which MAC is authorized on each port. Only the device with
that MAC address is allowed to connect to that specific port.
Built-in Web-based interface is provided for chassis management, module management, port-level control, and monitoring.
The IntraCore 8000 can also be managed via Telnet, Console,
or third party SNMP console.
for security, logical network design, and the control of broadcast traffic. The 802.1Q standard specifies VLAN tagging for
trunking VLANs from switch to switch, or switch to router.
Compatible with all 802.1Q equipment for easy integration into
existing networks.
and GMRP for control of multicast traffic generated by bandwidth-hungry applications such as video, ensuring maximum
application and network performance.
analysis, with support for four groups of RMON.
to prevent broadcast storms from overwhelming your network.
Page 1-8
Table 1-2 IntraCore 8000 Features
Page 17
Defaults and Specifications
Defaults and Specifications
The IntraCore 8000 is shipped with the following factory default settings
and specifications:
ConfigurationDefault Setting
Backplane Speed16Gbps/stack unit, up to 80Gbps in a 4 unit stack.
Switching MethodStore-and-forward
Forwarding Rates:
(64 byte packets)
Buffer Size4MB
MAC Address Table8K
Full-DuplexStandards based Auto-negotiation enabled
The following indicator lights are used on the various modules of the
IntraCore 8000.
LEDColor and Meaning
Stacking (to left of modules)
PowerGreen - Power is on when lit
Stack NumberSpecifies IntraCore 8000 Unit – #1 is bottom unit
Stack CPUSpecifies IntraCore 8000 unit with management CPU
Matrix Board PresentIndicates whether or not current unit has the Matrix
MII PresentIndicates whether or not a Media Independent Interface
8-port 10/100 Switch Module
Link/SpeedGreen - Connection and link have been made
Duplex/ActivityGreen -Full Duplex
Gigabit Switch Module
PowerGreen - Power is on when lit
LinkGreen - Connection and link have been made.
module for the other units in the stack
module has been installed in the current IntraCore 8000
unit
Amber - Half Duplex Blinking - Active
Table 1-4 LEDs and their meanings
Page 1-10
Figure 1-4 LEDs on face plate
Page 19
2
Installation and Setup
This chapter explains how to install, connect, and configure the IntraCore
8000 chassis and modules to work with your network. It also explains how
to set up your IntraCore 8000 for management, either from a console, via
telnet, via SNMP, or by using a Web browser.
Installation Guidelines
The following guidelines will help you prepare to install your IntraCore
8000 in such a way that it has the proper power supply and environment.
Power Requirements
The source electrical outlet should be installed near the IntraCore 8000 and
easily accessible. It must also be properly grounded.
Make sure the power source adheres to the following guidelines:
GVoltage range: 100 to 240 VAC
GFrequency range: 60/50 Hz
GMaximum current: 3.5 A per power supply at 110 volts
Environmental Requirements
The IntraCore 8000 must be installed in a clean, dry, dust-free area with
adequate air circulation to maintain the following environmental limits:
GTemperature: 0° to 40° C (32° to 104° F)104°
GRelative Humidity: 5% to 85% non-condensing
Avoid direct sunlight, heat sources, or areas with high levels of
electromagnetic interference.
Cooling and Airflow
Do not restrict air flow by covering or obstructing air vents on the sides of
the IntraCore 8000.
Page 2-1
Page 20
Installation and Setup
Installation Overview
The table below describes the steps needed to install the IntraCore 8000. The
steps that are optional are labeled “optional” and the steps that are required
are labeled “required.” The sections that follow explain each step in detail.
StepAction to Be Taken
1 (Required)
2 (Required)
3 (Optional)
4 (Optional)
5 (Required)
6 (Required)
7 (Required)
Open the box and check the contents. See the Package Contents sheet
for a complete list of the items included with your IntraCore 8000.
Install the IntraCore 8000 chassis in an equipment rack or wall rack,
or prepare it for desktop placement. See page 2-3.
Create a stack of up to four IntraCore 8000 switches. See page 2-5.
Install the port expansion modules you have purchased for your IntraCore 8000 and ensure each is properly seated and locked in place.
See page 2-7.
Connect the power supply. See page 2-9.
Connect network devices to the IntraCore 8000. See page 2-10.
Configure the IntraCore 8000 for management capabilities.
See page 2-11.
Table 2-1 Installation Overview
Page 2-2
Page 21
Chassis Installation/Placement
Chassis Installation/Placement
The IntraCore 8000 can be installed in a standard 19-inch equipment rack. It
can also be placed on a stable horizontal surface.
IImportant: The equipment rack or desk on which you
install your IntraCore 8000 must be secure and stable.
Equipment racks must be fastened to the floor; desks
must be resting on a flat, stable surface.
Installation in an Equipment Rack
To install the unit in an equipment rack, use the following procedure.
Safety Precautions for Rack Installation
IImportant!Before continuing, disconnect all cables
from the IntraCore 8000. Also, do not install any optional
modules you have purchased until the switch has been
installed in the rack.
Equipment Rack Guidelines
GuidelineSpecification
SizeWidth; 17.75 inches (45.09 cm).
StabilityRack must be bolted to the floor. Mount heavier units at the bottom of the
VentilationEnsure that the rack is installed in a room where the temperature remains
ClearanceIn addition to providing clearance for ventilation, ensure that there is ade-
Depth: 19.25 inches (48.9 cm) to 32 inches (81.3 cm).
rack. If the IntraCore 8000 is the only unit, mount it the bottom of the
rack..
below 40° C (104° F). Ensure also that there are no obstructions, such as
other equipment or cables, blocking airflow to or from the IntraCore 8000
vents.
quate clearance for servicing the modules of the IntraCore 8000 from the
front.
Table 2-2 Equipment Rack Guidelines
Page 2-3
Page 22
Installation and Setup
Equipment Rack Installation Procedure
To mount the IntraCore 8000 in an equipment rack:
1Place the IntraCore 8000 on a flat, stable surface.
2Locate a rack-mounting bracket (supplied) and place it
over the mounting holes on one side of the unit.
3Insert six screws (supplied) into the holes and tighten
with a Phillips screwdriver. Do not use fewer than six
screws for this mounting.
4For the other side of the unit, repeat the two previous
steps.
5Place the unit in the equipment rack.
6Secure the unit by screwing its mounting brackets to the
equipment rack. Use a minimum of four screws for this
purpose.
I Important! Make sure the unit is supported until all
the mounting screws for each bracket are secured to
the equipment rack. Failure to do so could cause the
unit to fall, resulting in personal injury or damage to
the unit, or both.
7Proceed to the section, “Installing Port Expansion Mod-
ules.”
Free-Standing/Desktop Placement
The IntraCore 8000 has four rubber feet on the bottom of the case that allow
for free-standing placement of the unit.
For free-standing/desktop placement:
1Attach the four rubber pads (supplied) to the bottom of
each corner of the IntraCore 8000 chassis.
2Place the unit on a flat surface with a minimum area of
17.1” x 13.5” (434.3 mm x 342.9 mm) and support capacity of 22 lbs (10 kg).
3Make sure there is enough ventilation space between the
IntraCore 8000 and surrounding objects.
Page 2-4
Page 23
Stacking Switches
Stacking Switches
Up to four IntraCore 8000 switches may be connected within a stack. In each
of the different configurations, bandwidth increases to meet the growth of
traffic.
Two Stack Configuration
If you wish to add a single switch to create a stack of two, take the following
steps.
1Mount the second switch in the rack above the first
switch, or place it on top of the first switch.
2Connect the 20-pin stacking cable provided by Asanté
from the Stack Connector module on the back of the first
switch to the Stack Connector module on the second
switch.
K Note: Do not use any cable but the IntraCore 8000
stacking cable supplied with your unit. If you need
additional cables, contact Asanté support (see Appendix A, “Technical Support,” for details).
Three or Four Stack Configuration
Before stacking three or four IntraCore 8000 switches, you must obtain a
Stack Matrix module from Asanté. IntraCore 8000 switches come equipped
with a single-port Stack Connector module. On one of the switches, the
Stack Connector module must be replaced with a 3-port Stack Matrix
module.
To create a stack of three or four IntraCore 8000 switches, use the following
procedure.
1In the original switch (bottom), remove the (single-port)
Stack Connector module from the back of the switch and
replace it with a (3-port) Stack Matrix module.
2Mount the other switches in the rack above the first one,
or place them on top of the first switch.
Page 2-5
Page 24
Installation and Setup
3Connect the Stack Matrix module on the first switch to
the Stack Connector modules on the other switches. Use
the 50-pin stacking cables provided by Asanté, as shown
in Figure 2-1.
K Note: Do not use any cable but the IntraCore 8000
stacking cable supplied with your unit. If you need
additional cables, contact Asanté support (see Appendix A, “Technical Support,” for details).
Figure 2-1 Four stack configuration
When you have cabled the switches together, proceed with network cabling,
as described in “Connecting to the Network” earlier in this chapter.
Page 2-6
Page 25
Installing Port Expansion Modules
Installing Port Expansion Modules
Up to three optional port expansion modules can be installed in the IntraCore
8000, in addition to a stack matrix module. (A stack matrix module is needed
only if more than two units are stacked together. See “Stacking Switches.”)
To install any combination of Gigabit Ethernet Switch (GBIC) modules and
8-port 10/100 Switch modules, use the following procedure.
IImportant: Make sure the IntraCore 8000 is properly
installed in an equipment rack or resting on a flat, stable
surface. Also make sure the power cord is disconnected
for initial installation.
1Remove the cover plate from the slot where you intend to
install the expansion module.
2Align the bottom of the expansion module with the rails
inside the IntraCore 8000 slot, as shown in Figure 2-2.
3Slide the module into the slot until it stops, then push the
module in gently until it seats with the connector.
Figure 2-2 Installing port expansion module
4Tighten the thumbscrews at the ends of the module’s face
plate. Use a straight-bladed screwdriver so the thumbscrews cannot be loosened by hand.
Installation of the module is complete. Repeat this procedure for each
module you have purchased.
IImportant: Do not remove modules from the IntraCore
8000 unless you are a qualified System Administrator.
Page 2-7
Page 26
Installation and Setup
Installing GBIC Interfaces
If you have installed Gigabit Ethernet switch modules, you must install
GBIC interfaces. Instructions for installing, removing, and maintaining
GBIC interfaces are provided in this section.
K
Note:GBICs are hot-swappable.
Installing a GBIC
To install a GBIC interface into a Gigabit Ethernet module:
1Remove the GBIC from its protective packaging.
2Grip the sides of the GBIC with your thumb and forefin-
ger, then insert the GBIC into the slot on the front of the
Gigabit Ethernet module.
3Slide the GBIC into the slot until you hear or feel a click.
The click indicates that the GBIC is locked into the slot.
4When you are ready to attach the fiber-optic cable,
remove the plugs from the GBIC and save them for future
use.
Removing a GBIC
To remove a GBIC interface from a Gigabit Ethernet module:
1Disconnect the fiber-optic cable from the GBIC SC-type
connector.
2Release the GBIC from the slot by simultaneously
squeezing the plastic tabs on both sides of the GBIC.
3Slide the GBIC out of the slot.
4Install the plugs in the GBIC optical bores, and place the
GBIC in protective packaging.
Page 2-8
Page 27
Connecting Power
GBIC Care and Handling
Follow these GBIC maintenance guidelines:
GUnnecessary removal and insertion of a GBIC can lead to its pre-
mature failure. A GBIC has a lifetime of 100 to 500 removals/
insertions.
GGBICs are static-sensitive. To prevent ESD damage, follow your
normal board and component handling procedures.
GGBICs are dust-sensitive. When the GBIC is stored or when a
fiber-optic cable is not plugged in, always keep plugs in the GBIC
optical bores.
GUse an alcohol swab or Kim-Wipe to clean the ferrules of the opti-
cal connector. The most common source of contaminants in the
optical bores is debris picked up from the optical connectors.
Connecting Power
To connect power to the IntraCore 8000, use the following procedure.
IImportant:Carefully review the power requirements on
page 2-1 before connecting power to the IntraCore 8000.
1Plug one end of the supplied power cord into the power
connector on the back of the unit.
2Plug the other end into a grounded AC outlet.
The front panel LEDs blink and the Power LED illuminates. The IntraCore 8000 is ready for connection to the
network.
I Important:If the power does not come on, refer to
Appendix A, “Troubleshooting.”
Page 2-9
Page 28
Installation and Setup
Connecting to the Network
The IntraCore 8000 unit may be connected to an Ethernet network, with the
unit powered either on or off. Use the following procedure to make your
network connections.
1Connect network devices to the IntraCore 8000, follow-
ing the cable guidelines outlined below.
2After the unit is connected to the network, it can be con-
figured for management capabilities. See “Configuring
for Management” later in this chapter.
10/100BaseX Ports Cabling Procedures
The 8 fixed ports on each 10/100 module allow for the connection of
10Base-T or 100Base-TX network devices. The ports are compatible with
IEEE 802.3 and 802.3u standards.
IImportant:The IntraCore 8000 must be located within
100 meters of its attached 10Base-T or 100Base-TX
devices.
Cabling requirements for the 2-port Gigabit Ethernet modules depend on
which type of GBIC interface has been installed. Use the following chart to
determine the cabling requirements for your GBIC.
Connecting ToCable Required
1000BaseSX GBICCables with SC-type fiber connectors: 62.5 micron multimode
1000BaseLX Long
Haul GBIC
1000BaseLX GBICCables with SC-type fiber connectors: 10 micron single mode
fiber media up to 275 meters long, or 50 micron multimode fiber
media up to 550 meters long.
Cables with SC-type fiber connectors: 10 micron single mode
fiber media up to 100 kilometers long.
fiber media up to 5 kilometers long.
Table 2-4 1000BaseX cabling requirements
Configuring for Management
To use the IntraCore 8000 as a managed switch, it must be configured with
an IP address. This can be accomplished in one of two ways:
Gautomatically using BootP (default)
Gmanually via the unit’s Console port
IImportant:For security reasons, you should also
change the SNMP community strings before putting the
IntraCore 8000 on your network. For instructions, see
“Changing Community Strings” on page 3-17.
BootP Configuration
The IntraCore 8000 is shipped with BootP support. If your network contains
a BootP server configured with available, valid IP addresses, BootP allows
the IntraCore 8000 to be configured automatically with an IP address when
the IntraCore 8000 is connected to the network and is powered on. Use the
following procedure to set up BootP.
IImportant:BootP configuration works only if the
IntraCore 8000 does not have an IP address assigned to it.
1Make sure your network has a BootP server configured
with a valid IP address entry for the IntraCore 8000.
Page 2-11
Page 30
Installation and Setup
2When the IntraCore 8000 is connected to the network and
is powered on, it automatically transmits a BootP request
across the network (up to 10 times) until it receives a
valid IP address from the BootP server.
3After an IP address is received, the IntraCore 8000 can be
managed via in-band access. For more information, see
Chapter 3, “Configuration.”
To verify that a valid IP address was received, try to ‘ping’ the IntraCore
8000. If you can access the IntraCore 8000, it is properly configured with an
IP address.
For more information on using BootP, see “Bootstrap Configuration” in
Chapter 3.
Connecting To a Console
To make the cable connection from a terminal to the console port of the
IntraCore 8000, use the following procedure.
1Using a straight-through RS-232 cable with a 9-pin male
D-subminiature plug at one end, connect a terminal or
workstation (PC or Macintosh) running a terminal emulator to the console port on the front of the IntraCore 8000.
2Make sure both units are powered on.
If using a PC with a terminal emulator, make sure it is
configured with the following terminal settings:
G Baud: 9600
G Data Bits: 8
G Parity: None
G Stop Bits: 1
G Flow Control: None
3Once connected, the Local Management Main Menu
appears on the terminal screen.
For further information on setting an IP address for configuration of a
terminal, or a PC running a VT100 terminal or emulator (such as
HyperTerminal, ProComm, or ZTerm), see “System IP Configuration” in
Chapter 3.
Page 2-12
Page 31
Management Options
Management Options
The IntraCore 8000 can be managed using any of the following methods:
MethodTyp eDescription
ConsoleOut-of-band
Tel net
(four sessions maximum)
HTTP ServerIn-band
SNMP-Based Network Management
Software
management
In-band
management
management
In-band
management
Local connection to the IntraCore 8000 via the console port
Remote connection over the network to the IntraCore
8000 via telnet session
Remote connection to the IntraCore 8000 via a Web
browser
Remote connection to the IntraCore 8000 via any
SNMP-based network management application
Table 2-5 Management Methods
The rest of this section describes how to connect to the IntraCore 8000 using
either out-of-band or in-band management.
Out-of-Band Management
Out-of-band network management allows you to configure, manage, and
monitor the IntraCore 8000 and all of the installed modules. You can
perform these functions by attaching a terminal (or a terminal emulator) to
the Console port on the management engine and using the menu-driven
Local Management Interface.
Out-of-band network management is guaranteed even when the in-band
Ethernet network is down.
To access the IntraCore 8000 Local Management Interface using out-of-band
management, first follow the procedure in “Connecting To a Console”
(above), then go on to the “Local Management Interface” section in
Chapter 3.
Page 2-13
Page 32
Installation and Setup
In-Band Management
In-band network management allows you to configure, manage, and monitor
the IntraCore 8000 over the Ethernet network.
You can perform these functions by accessing the IntraCore 8000 via any of
the following methods:
GBy connecting with a telnet program and using the Local Manage-
ment Interface.
GBy connecting with any World Wide Web browser, and using the
Web Management Interface.
GBy connecting with any SNMP-based network management appli-
cation and using its interface.
To manage the IntraCore 8000 via in-band management, use the following
procedure.
1Make sure the network to which the IntraCore 8000 is
connected is functioning.
2Make sure the IntraCore 8000 is configured with valid IP
information. See “Configuring for Management” earlier
in this chapter.
3Connect to the IntraCore 8000 via telnet, with a Web
browser, or with any SNMP-based network management
application.
Telnet
Use a network connection to any PC and enter the telnet command to
access the IntraCore 8000. The password prompt of the Local Management
Interface will appear. Go on to the “Local Management Interface” section in
Chapter 3.
K
Note: Almost all management screens using a telnet con-
nection are identical to those of the out-of-band console
interface. On the Main Menu, however, there will be a q
option for closing the connection to the IntraCore 8000.
Page 2-14
Page 33
Management Options
Web Browser
For information on managing the IntraCore 8000 with a Web browser, refer
to Chapter 5, “Web Browser Management.”
K
Note: The Web Browser interface to the IntraCore 8000 is
disabled by default.
SNMP-Based Management
For information on managing the IntraCore 8000 with SNMP-based
management software, refer to Chapter 4, “Advanced Management,” and
your SNMP software manual.
The Asanté private MIB for the IntraCore 8000 is available from the Asanté
ftp site, ftp.asante.com, or you can copy it from the Installation CD-ROM.
Access to Remote Network Monitoring (RMON) features is available only
by using an SNMP manager. See “SNMP and RMON Management” in
Chapter 4 for details.
Page 2-15
Page 34
Installation and Setup
Page 2-16
Page 35
3
Configuration
This chapter describes how to manage the IntraCore 8000 using the Local
Management Interface via an out-of-band console connection or an in-band
telnet connection.
This chapter contains the following sections:
GLocal Management Interface
GViewing General Information
GConfiguration Menu
GSystem Administration Configuration
GSystem IP Configuration
GBootstrap Configuration
GSNMP Configuration
GPort Configuration
GAdvanced Port Configuration
GGlobal Port Configuration
GUnicast Forwarding Database Configuration
GImage File Downloading Configuration
GStack Management
GSystem Reset Configuration
GViewing the System Log
GUser Interface Configuration
GViewing Statistics
Page 3-1
Page 36
Configuration
Local Management Interface
The IntraCore 8000 Local Management Interface is a menu-driven
application that allows you to configure, manage, and monitor the IntraCore
8000 and each of the ports in its different modules.
The Local Management Interface can be accessed via two methods:
GOut-of-band connection to the Console port
GIn-band connection via Telnet (four sessions maximum)
For instructions on how to connect to the IntraCore 8000, see “Management
Options” on page 2-13.
The rest of this chapter describes the Local Management Interface.
Logging In
When you connect to the Local Management Interface, the “Enter
Password” prompt appears. Enter your password, then press Return. The
Main Menu appears.
I Important: The default password is Asante. The pass-
word is case-sensitive; enter it exactly as shown. For
information on changing the password, see “Changing the
Password” on page 3-51.
Page 3-2
Page 37
Local Management Interface
Main Menu
After logging in, the Main Menu appears, as shown in Figure 3-1.
=================================================================
IntraCore 8000 Local Management System Version 1.02D
Compiled Date: Jun 23 2000 19:53:29
Asante Technologies, Inc.
Copyright (c) 1999 Asante Technologies, Inc.
=================================================================
Main Menu
<Cmd> <Description>
g G
c C
s S
q Return to previous menu
Command>
From the Main Menu, you can access three submenus:
GGeneral Information (see page 3-4)
eneral Information
onfiguration
tatistics
Figure 3-1 Local Management Main Menu
GConfiguration (see most of this chapter)
GStatistics (see page 4-1)
If you are using Telnet, a fourth option, for closing the connection, will also
be available.
Accessing a Submenu
To access a submenu, type the command letter that corresponds with the
option you need to use. For example, type g for General Information.
Exiting a Submenu
To exit a submenu, type q.
To exit a command line without changing the configuration setting (e.g., the
“Set Password” option in the User Interface Configuration Menu), press
ctrl-c.
Page 3-3
Page 38
Configuration
Viewing General Information
The General Information Screen displays the current operating information
of the IntraCore 8000, such as its name, IP address, and boot information.
To view General Information, type g from the Main Menu. A screen similar
to Figure 3-2 appears.
IntraCore 8000 General Information
System up for: 000days, 21hrs, 45mins, 45secs
Software Version
Bank 1 Image Version/Date: 1.10/Dec 7 1999 12:14:38 (Running)
Bank 2 Image Version/Date: 1.10/Dec 7 1999 11:54:14
System Information
Prom Image Ver/Date: 1.01/Sep 8 1999 15:59:14
DRAM Size: 4MB Flash Size: 2.0MB
EEPROM Size: 32KB Console Baud Rate: 9600 bps
Administration Information
System Name: Asante IntraCore Switch
System Location: ZLabs Head Office
System Contact: CLB
System MAC Address, IP Address, Subnet Mask and Router
MAC Address: 00:00:94:8E:F3:7B
IP Address: 192.168.54.240
Subnet Mask: 255.255.255.0
Router: 192.168.54.2
Bootstrap Configuration
Boot Load Mode: LOCAL
Press any key to continue...
Figure 3-2 General Information screen
KNote: The information displayed on this screen is read-
only.
To exit the General Information Screen, press any key on your keyboard.
Page 3-4
Page 39
Viewing General Information
Table 3-1 describes each parameter in the General Information screen.
SettingDescription
System Up TimeThe amount of time the system has been running since last reset
Bank 1 Image Version/
Date
Bank 2 Image Version/
Date
Prom Image Ver/DateThe version and compilation date of the PROM.
DRAM SizeThe size in megabytes (MB) of the unit’s Dynamic Random
EEPROM SizeThe size in megabytes (MB) of the unit’s EEPROM.
Flash SizeThe size, in MB, of the switch’s flash memory, or non-volatile
Console Baud RateThe current rate which data transfers to the console from the
System NameThe name assigned to the IntraCore for network purposes.
System LocationThe physical location of the IntraCore.
System ContactPerson responsible for configuration of the unit.
MAC AddressThe hardware address of the IntraCore 8000; this address can-
IP AddressThe unit’s IP (Internet Protocol) address.
or power on.
The version and compilation date of the runtime code that is
stored in Bank 1. (Running) indicates code is currently active.
The version and compilation date of the runtime code that is
stored in Bank 2.
Access Memory.
RAM.
IntraCore 8000.
not be changed
Subnet MaskThe IP subnet mask for the IntraCore 8000.
RouterThe IP address of the default gateway router to which the
switch belongs.
Boot Load ModeThe current method in use for loading the switch’s software.
Table 3-1 General Information settings
Page 3-5
Page 40
Configuration
Configuration Menu
The Configuration Menu allows you to manage and configure the IntraCore
8000 and each of its ports.
To access the Configuration Menu, type c from the Main Menu. The
Configuration Menu appears, as shown in Figure 3-3.
IntraCore 8000 Configuration Menu
<Cmd> <Description>
a System A
i System I
b B
n SN
p P
s S
d Unicast Forwarding D
t Securit
v V
c Multic
f F
k Stack
r System R
l System L
u U
q Return to previous Menu
dministration Configuration
P Configuration
ootstrap Configuration
MP Configuration
ort Configuration
panning Tree Configuration
y Management
LAN Management
ast Traffic Management
ile Downloading Configuration
management
eset Options
og
ser Interface Configuration
atabase Configuration
Command>
Figure 3-3 Configuration Menu
Accessing a Submenu
To access a submenu, type the command letter that corresponds with the
configuration option you need to use. For example, type a for the System
Administration Configuration Menu.
Configuration Menu Options
Table 3-2 describes each of the options in the Configuration Menu.
Menu Item Description
System Administration
Configuration
System IP ConfigurationDisplays and allows changing the IP Address of the IntraCore
Page 3-6
Displays and allows you to change the name, location, and contact information for the IntraCore 8000. See page 3-8.
8000. This address is for network access to the switch. See page
3-9.
Page 41
Configuration Menu
Menu Item (Cont.)Description (Cont.)
Bootstrap ConfigurationAllows you to change boot bank and method for loading switch
SNMP ConfigurationDisplays and allows you to change the SNMP (Simple Network
Port ConfigurationAllows you to configure manually each of the switch’s ports for
Spanning Tree Configuration
Unicast Forwarding
Database Configuration
Security Management Allows you to use various features such as Duplicate IP traps,
VLAN ManagementAllows you to set up virtual networks. See page 4-18.
Multicast Traffic Management
File Downloading Configuration
Stack ManagementThis feature is undocumented.
software, or change downloading parameters. See page 3-11.
Management Protocol) parameters of the IntraCore 8000; such
as read/write community strings. See page 3-16.
speed, connection, link mode, and auto-negotiation. Also displays overall port status. See page 3-19.
Displays and allows you to change Spanning Tree parameters, to
make sure you prevent loops in network paths. See page 4-1.
Allows you to display all of the forwarding database, or display
it by port or VLAN, either with or without showing IP
addresses. Also lets you search for MAC or IP addresses and
lets you set the age-out time for MAC addresses. See page 3-33.
for port security. See page 4-9.
Allows you to set up group transmission. See page 4-44.
Allows you to download an image file for the purpose of
upgrading the IntraCore 8000 software. See page 3-38.
System Reset OptionsAllows you to reset the switch by a “warm” reboot, or arrange
System LogAllows you to view a record of any major system events or
User Interface Configuration
Return to Previous MenuAllows you to exit the Configuration Menu and return to the
for an automatic reset (up to 24 hours) in advance. See page
3-45.
errors that have occurred on the IntraCore 8000. See page 3-47
Allows you to set the idle time-out period and password when
using console or telnet access. See page 3-49.
Main Menu.
Table 3-2 Configuration Menu Options
Most of the options for configuration are described in detail in the rest of this
chapter. The more advanced options are discussed in Chapter 4, “Advanced
Management.”
Page 3-7
Page 42
Configuration
System Administration Configuration
The System Administration Configuration Menu displays and allows you to
change the IntraCore 8000’s name, location, and contact information.
To access the System Administration Configuration Menu, type a in the
Configuration Menu. A screen similar to Figure 3-4 appears.
IntraCore 8000 System Admin. Configuration Menu
System Name: Asante IntraCore Switch
System Location: ZLabs Main Office
System Contact: CLB
<Cmd> <Description>
n Set System N
l Set System L
c Set System C
q Return to Previous Menu
Command>
Figure 3-4 System Administration Configuration Menu
Current Settings
The following table describes each setting on the System Administration
Configuration Menu.
ame
ocation
ontact Information
SettingDescription
System NameThe name of the IntraCore 8000 (up to 64 characters, including
System LocationPlace where you have installed the IntraCore 8000 (up to 64
System ContactThe name of the person or entity responsible for the IntraCore
spaces).
characters, including spaces).
8000 (up to 64 characters, including spaces).
Table 3-3 System Administration settings
Changing System Administration Info
To change the name, location, or contact information for the IntraCore 8000,
use the following procedure.
Page 3-8
Page 43
System IP Configuration
1Open the System Administration Configuration Menu by
typing a in the Configuration Menu.
2Type the command letter of the item to be changed in the
System Administration Configuration Menu.
3At the prompt, type the information you want to change.
See Table 3-3 for a description of each parameter.
K Note: Each parameter is limited to 64 characters,
including spaces.
To cancel a selected option, press ctrl-c at the command
prompt.
4Press Return.
The IntraCore 8000 system administration information
changes take effect.
5Type q to quit and return to the Configuration Menu.
System IP Configuration
The System IP Configuration Menu displays and allows you to change the
information needed to access the IntraCore 8000 over the network via inband management.
To access the System IP Configuration Menu, type i in the Configuration
Menu. A screen similar to Figure 3-5 appears.
IntraCore 8000 System IP Configuration Menu
System MAC Address: 00:00:92:CC:BB:AA
System IP Address: 192.168.54.240
System Subnet Mask: 255.255.255.0
System Default Router: 192.168.54.2
<Cmd> <Description>
i Set I
m Set Subnet M
r Set Default R
n Set Domain N
q Return to Previous Menu
Command>
P Address
ask
outer
ame Server
Figure 3-5 System IP Configuration Menu
IImportant: By default, each address is set to 0.0.0.0.
Page 3-9
Page 44
Configuration
Current Settings
Table 3-4 describes each setting on the System IP Configuration Menu.
SettingDescription
System IP AddressThe IP (Internet Protocol) address of the IntraCore 8000.
System Subnet MaskThe filter that determines how the IntraCore 8000 IP address is
System Default RouterThe IP address of the default router for the IntraCore 8000.
split into network and host portions.
Table 3-4 System IP settings
Changing System IP Information
To change the IP address, subnet mask, or default router of the IntraCore
8000, use the following procedure.
1Open the System IP Configuration Menu by typing i in
the Configuration Menu.
2Type the command letter of the option you want to
change.
3Type the new address at the prompt.
See Table 3-4 for a description of each address.
I Important: Follow the format:
number.number.number.number
To cancel a change, press ctrl-c at the command prompt.
4Press Return.
The IP setting change for the IntraCore 8000 takes effect.
5Type q to quit and return to the Configuration Menu.
Page 3-10
Page 45
Bootstrap Configuration
Bootstrap Configuration
The Bootstrap Configuration Menu displays (and allows you to change) the
bootstrap parameters used for loading the software for the IntraCore 8000 at
startup, and for downloading a new version of software when one is issued.
To access the Bootstrap Configuration Menu, type b in the Configuration
Menu. If the Load Mode is set to Local, a screen similar to Figure 3-6
appears.
IntraCore 8000 Bootstrap Configuration Menu
Bank 1 Image Version/Date: 1.00B/May 3 1999 10:00:07 (Running)
Bank 2 Image Version/Date: 1.00G/May 5 1999 17:32:18
Load Mode: Local
Boot Bank: 2
<Cmd> <Description>
r Set Load Mode to R
a Toggle Boot Ba
q Return to previous menu
Command>
nk
EMOTE
Figure 3-6 Local Bootstrap Configuration Menu
When the IntraCore 8000 is powered on, it loads its software via one of two
methods: locally (via its internal flash memory, which is the default setting)
or remotely over the network.
IImportant: The default Load Mode setting for the
IntraCore 8000 is Local.
Image Banks
The IntraCore 8000 has two banks to store its runtime software. The banks
are referred to as bank 1 and bank 2.
Either of these banks may be the Boot Bank, which is the bank from which
the runtime code will be loaded the next time the IntraCore 8000 is booted.
When downloading new runtime image codes, you may specify either of the
two banks as the Destination Bank in which the new code will be loaded.
Page 3-11
Page 46
Configuration
Loading Software Locally
The IntraCore 8000 will always boot locally unless you set it to boot load
remotely. It would then download the new image code and reset to load
locally.
1Open the Bootstrap Configuration Menu by typing b in
the Configuration Menu.
2Type a in the Bootstrap Configuration Menu if you need
to toggle the Boot Bank setting for the next boot. Typically, you will want to set the boot bank to be the one on
which the latest version of the Image resides.
The IntraCore 8000 is set to load software locally from its flash memory.
This occurs whenever the unit is powered on or reset.
Page 3-12
Page 47
Bootstrap Configuration
Loading Software Remotely
To set the IntraCore 8000 to download its software over the network from a
remote server, use the following procedure.
1Open the Local Bootstrap Configuration Menu by typing
b in Configuration Menu.
2Open the Remote Bootstrap Configuration Menu by typ-
ing r in the Local Bootstrap Configuration Menu. The
menu appears, as shown in Figure 3-7.
IntraCore 8000 Bootstrap Configuration Menu
Bank 1 Image Version/Date: 1.10J/Dec 7 1999 12:14:38 (Running)
Bank 2 Image Version/Date: 1.00G/May 5 1999 17:32:18
<Cmd> <Description>
b Set Boot Mode to B
t Set Boot Mode to T
l Set Load Mode to L
s Set Boot S
f Set Boot F
c Set Remote Boot Retry C
a Toggle Boot Ba
q Return to Previous Menu
Command>
erver IP Address
ile Name
nk
OOTP-TFTP
FTP only
OCAL
ount
Figure 3-7 Remote Bootstrap Configuration Menu
Page 3-13
Page 48
Configuration
Current Settings
Table 3-5 explains each setting on the Remote Bootstrap Configuration
Menu.
Setting Description
Running Image Version/
Date
Load ModeThe current method for loading software for the IntraCore 8000.
Boot ModeThe method for requesting the image file from the network.
The version and compilation date of runtime code that is currently running on the IntraCore 8000.
Remote — Loads the image file from a server on the network.
Local — Executes the software image file from the IntraCore
8000’s internal flash memory (default setting; the IntraCore
8000 automatically reverts to this setting after downloading a
new software file).
This option is available only if you have selected Remote Load
Mode.
BootP-TFTP — Sets the IntraCore 8000 to request an IP
address from a BootP server AND to download the software’s
image file through TFTP (Trivial File Transfer Protocol).
IImportant: To use this option, the IntraCore
8000 IP address must be set to 0.0.0.0.
TFTP ONLY — Sets the IntraCore 8000 to only download the
software image file through TFTP.
IImportant: To use this option, the switch must
already have an assigned IP address and the Load
Mode must be set to Remote.
Boot Server IPThe Internet Protocol (IP) address of the TFTP server providing
the TFTP capabilities on your network. Not Available if Boot
Mode is BootP-TFTP.
Boot File NameThe name of the file you are going to request for download. Not
Retry CountNumber of attempts the IntraCore 8000 makes to download the
Boot BankNumber of the destination bank for the image file you are
available if boot mode is BootP/TFTP.
image file if errors occur. The default is 5.
downloading (1 or 2).
Table 3-5 Bootstrap Settings
Page 3-14
Page 49
Bootstrap Configuration
3Type b to set the Boot Mode to BootP-TFTP, or type t to
set Boot Mode to TFTP only. If you choose BootP-TFTP
mode, the options for setting the IP Address of the TFTP
server and the Boot File Name become unavailable; in
this case, skip Steps 4-7 and go on to Step 8.
4Type s in the Bootstrap Configuration Menu, to select the
option Set Boot Server IP Address.
5At the prompt, type the IP address of the remote boot
server that contains the switch’s software image file.
Then press Return. The Bootstrap Configuration Menu
appears.
6Type f to select the option Set Boot File Name.
7Type the software’s file name/network path at the prompt.
8Press Return.
K Note: If you decide to use Local Load Mode rather
than Remote, type l. The Local Bootstrap Configuration Menu appears, as shown in Figure 3-6.
The IntraCore 8000 is now set to download its software remotely from the
network. This will occur the next time the unit is powered on or reset.
Page 3-15
Page 50
Configuration
SNMP Configuration
The SNMP Configuration Menu allows you to configure the unit’s read and
write community strings, and to enable or disable authentication traps. This
menu also allows you to specify which of your network management
stations will receive traps from the IntraCore 8000.
The s option in the Configuration Menu displays the SNMP (Simple
Network Management Protocol) Configuration Menu, as shown in Figure 3-
8.
For further details on using SNMP and RMON for remote management of
your network, see Chapter 4, “Advanced Management.”
IImportant: Be sure to change the SNMP community
strings in order to prevent unauthorized access to management information.
Table 3-6 describes each setting on the SNMP Configuration Menu.
SettingDescription
SNMP Read Community
SNMP Write Community
Trap AuthenticationThe status of the SNMP agent for authentication trap genera-
SNMP Trap ReceiversThe IP addresses of the network management stations that can
The string that defines access rights for reading SNMP data
objects. The default is public.
The string that defines access rights for writing SNMP data
objects. The default is private.
tion.
The default is disabled.
receive traps from the IntraCore 8000. Normally, these
addresses are the same as your network management software
systems’ IP addresses.
IImportant: A maximum of four trap receivers
is allowed.
Table 3-6 SNMP Settings
Changing Community Strings
To change the IntraCore 8000 community strings, use the following
procedure.
1Open the SNMP Configuration Menu by typing n in the
Configuration Menu.
2To change the read community string, type r. To change
the write community string, type w.
3At the prompt, type a new community string.
For a description of read and write community strings,
see Table 3-6.
To cancel a selected option, press ctrl-c at the command
prompt.
4Press Return. The new string takes effect.
5Type q to quit and return to the Configuration Menu.
Page 3-17
Page 52
Configuration
Enabling Authentication Traps
The IntraCore 8000 can be set to generate authentication traps.
Authentication traps are messages sent across the network to an SNMP
network management station. They alert you when someone attempts to read
or change data without the proper community string.
To set the IntraCore 8000 to generate traps, use the following procedure.
1Open the SNMP Configuration Menu by typing n in the
Configuration Menu.
2To toggle trap authentication to Enabled, type a.
To cancel the change, press ctrl-c at the command
prompt.
3Press Return. The new setting takes effect.
4Type q to quit and return to the Configuration Menu.
Adding or Updating a Trap Receiver
Trap receivers are network management stations designated to receive traps
from the IntraCore 8000.
IImportant: The maximum number of trap receivers that
can be set is four.
To add or update a trap receiver entry, use the following procedure.
1Open the SNMP Configuration Menu by typing n in the
Configuration Menu.
2Type a to Add a Trap Receiver. An IP prompt appears.
3Type the new or updated IP address of the network man-
agement station you want to receive traps, then press
Return.
To cancel an entry, press ctrl-c at the command prompt.
4Type the trap receiver’s community string at the prompt
for it, then press Return again.
The trap receiver entry is added or updated. Type q to
return to the Configuration Menu.
Page 3-18
Page 53
Port Configuration
Deleting a Trap Receiver
Use the following procedure to delete a trap receiver you have previously
designated.
1Open the SNMP Configuration Menu by typing n in the
Configuration Menu.
2Type d to Delete a Trap Receiver. A prompt for the entry
of the trap receiver appears.
3Enter the number of the entry you want to delete (1,2,3,
or 4) and press Return.
The trap receiver is deleted from the SNMP Trap Receivers list.
Port Configuration
The Port Configuration Menu allows you to manually configure each of the
IntraCore 8000’s ports for port speed, duplex, and auto-negotiation. It also
provides an overview of the entire IntraCore 8000 system’s port operating
status.
To access the Port Configuration Menu, type p in the Configuration Menu. A
System Module Map screen similar to Figure 3-9 appears.
Choose the module for which you want to see a Port Configuration Menu. If,
for example, you chose slot 1, you would see a screen similar to Figure 3-10.
Port Status: Enabled Link Status: Up (RJ45-TX)
Auto-Neg: Enabled[ABCD] Link Speed: 100 Mbps (Half Duplex)
<Cmd> <Description>
h H
t Toggle Port St
u Toggle Au
l Toggle 10M/100M bps L
d Toggle Half/Full D
o Modify Auto
r R
a A
g G
q Return to Previous Menu
Command>
Select m
elp for legends
estart Auto-Negotiation
dvanced Port Configuration
lobal Port Configuration
odule Next module Prev module Select port Next port Prev port
atus Enable/Disable
to-Negotiation/Manual
-Negotiation Advertisement
ink Speed
uplex
Figure 3-10 Port Configuration Menu for 10/100BaseTX modules
Page 3-20
Page 55
Port Configuration
Viewing Legends for Configuration Settings
To see legends explaining the symbols used for both the Basic and Global
Port Configuration Menu settings, type h. A screen appears, as shown in
Figure 3-11.
Legends for port status: Legends for port speed & duplex:
X - Absent f - 10 Mbps & full duplex
- - Link down F - 100 Mbps & full duplex
D - Disabled by Mgmt Action h - 10 Mbps & half duplex
d - Disabled by Security Violation H - 100 Mbps & half duplex
B - Blocking G - 1000 Mbps & full duplex
S - Listening
R - Learning Legends for port priority:
+ - Forwarding (The range is from 0 to 7)
0 - priority 0 (lowest)
Legends for Enable/Disable State: 1 - priority 1
- - Disabled 2 - priority 2
* - Enabled 3 - priority 3
4 - priority 4
Legends for Auto-Negotiation Advertisement: 5 - priority 5
6 - priority 6
A - 100Base-TX full duplex mode 7 - priority 7 (highest)
B - 100Base-TX half duplex mode
C - 10Base-T full duplex mode
D - 10Base-T half duplex mode
Press any key to continue...
Figure 3-11 Legends for all Port Configuration Menus
Page 3-21
Page 56
Configuration
Current Port Settings
The current module and port for which statistics are displayed is shown in
the top right corner of the Port Configuration Menu. Table 3-7 describes
each setting on the Port Configuration Menu.
SettingDescription
Module NumberThe number of the module of which the selected port is a mem-
Module TypeCode for the type of module: 24-100TX, or 2-GBIC: See
Port NumberThe number of the port for which parameters are shown.
Operating StatusThis field displays status symbols for each of the current mod-
Auto NegotiationThis field displays disabled/enabled symbols for each of the
Link Speed/DuplexThis field displays speed/duplex setting symbols for each of the
Port StatusTells whether the selected port is enabled or disabled.
Link StatusTells whether the selected port’s link is up or down. ‘Up’ indi-
Auto-NegTells whether auto-negotiation is enabled or disabled for the
Link SpeedTells the speed and duplex mode of the port’s current link.
ber.
Figure 3-9 for the full names of each module type.
ule’s ports. For details, see the legend in Figure 3-11.
current ports. For details, see the legend in Figure 3-11.
current ports. For details, see the legend in Figure 3-11.
cates a network device is connected to the port. ‘Down’ indicates that either a device isn’t connected or that the device is
powered down. The port’s link speed and duplex mode are in
parentheses.
selected port, and for which modes, A, B, C, or D. For details,
see the legend in Figure 3-11.
Table 3-7 Port Configuration Menu settings
Enabling or Disabling a Port
The enabling or disabling of a port is a manual operation that can be used to
isolate network devices possibly causing problems on the network or to
prevent unauthorized use of a port or station.
To enable or disable a port, use the following procedure.
Page 3-22
Page 57
Port Configuration
1Access the Port Configuration Menu by typing p in the
Configuration Menu.
2Choose a module in the System Module Map.
3To select the port you want to enable or disable, type s, n,
or p in the Basic Port Configuration Menu.
4To toggle the port’s connection to either enabled or dis-
abled status, type t.
The port’s status is changed immediately, and it is reflected in the Port
Configuration Menu’s Port Status indication and the Operating Status
symbol for the port.
Configuring Auto-Negotiation
Auto-negotiation is a feature of the Fast Ethernet standard that enables two
devices on a common segment to communicate their transmission speed
capabilities. This feature allows the devices to determine and use their
highest common speed and best communication parameters.
IImportant: By default, all of the ports are set to Auto
Negotiation, as shown in Figure 3-10.
To enable auto-negotiation, or return to manual-setting mode, use the
following procedure.
1Access the Port Configuration Menu by typing p in the
Configuration Menu.
2Choose a module in the System Module Map.
3To select the port for which you want to set the auto-
negotiation mode, in the Basic Port Configuration Menu,
type
s, n, or p.
4To toggle the port’s auto-negotiation mode to Enabled or
to return it to Manual, type u.
The Auto Negotiation status changes immediately, and is displayed on the
Auto Negotiation line near the top of the Port Configuration Menu.
IImportant: If you change the status of the port from Man-
ual to Enabled you must type r to restart auto-negotiation.
Page 3-23
Page 58
Configuration
Configuring a Port Manually
If you have changed the Auto Negotiation status of a port to Manual, as
described in the previous section, you can toggle the link speed from
10Mbps to 100Mbps and back, and toggle the port from half to full duplex
and back.
Toggling Port Link Speed
Use the following procedure to toggle the port’s link speed.
1Access the Port Configuration Menu by typing p in the
Configuration Menu.
2Choose a module in the System Module Map.
3To select the port for which you want to set the link
speed, in the Basic Port Configuration Menu, type s, n, or
p.
4To toggle the port’s link speed, type l.
The link speed is changed immediately, and the change is reflected in the
Link Speed line near the top of the Port Configuration Menu.
Toggling Half to Full Duplex
Half duplex mode allows transmission in two directions on the same
channel, but only in one direction at a time. Full duplex mode allows
transmission in two directions on the same channel at the same time.
IImportant: To use full duplex mode, the device to which
the port is connected must support and be configured for
duplex mode.
Use the following procedure to change the duplex mode setting for a port
that is in Manual status.
1Access the Port Configuration Menu by typing p in the
Configuration Menu.
2Choose a module in the System Module Map.
3To select the port for which you want to set the duplex
mode, in the Basic Port Configuration Menu, type s, n,
or p.
4To toggle the port’s duplex mode, type d.
Page 3-24
Page 59
Port Configuration
The duplex mode is changed immediately, and the change is reflected in the
Link Speed/Duplex line near the top of the Port Configuration Menu.
Configuring 1000BaseX Ports
Because 1000BaseX ports are always in full duplex mode, the only
configuration option for 1000BaseX ports is enabling and disabling the port.
To access the Port Configuration Menu for 1000BaseX ports, type p in the
Configuration Menu. The System Module Map appears, as shown in
Figure 3-9. Enter the number of a module with 1000BaseX ports (such as
module 2 in the map shown in Figure 3-9). The Port Configuration Menu
for 1000BaseX ports appears, as shown in Figure 3-12.
IntraCore 8000 Basic Port Configuration Menu Module Type: (2-GBIC)
Module: [1] Port: [1]
Port 1 Port 2
=========== ===========
Operating Status: SX-LinkUp (Forwarding) SX-LinkDown
Port Status: Enabled Link Status: Up [1000Mbps-Full]
<Cmd> <Description>
h H
t Toggle Port St
a A
g G
q Return to Previous Menu
Command>
Select m
elp for legends
dvanced Port Configuration
lobal Port Configuration
odule Next module Prev module Select port Next port Prev port
atus Enable/Disable
Figure 3-12 Port Configuration Menu for 1000BaseX ports
For a description of the current settings shown in the top portion of the
screen, see “Current Port Settings” on page 3-22.
Page 3-25
Page 60
Configuration
Enabling or Disabling a Port
Enabling or disabling a port is a manual operation. You can enable or disable
a port to isolate network devices that may be causing problems on the
network or to prevent unauthorized use of a port or station.
To enable or disable a port, use the following procedure.
1Access the Port Configuration Menu by typing p in the
Configuration Menu.
2Choose a module in the System Module Map.
3In the Basic Port Configuration Menu, use s, n, or p to
select the port you want to enable or disable.
4Type t to toggle the port’s connection to either enabled or
disabled status, as desired.
The port’s status is changed immediately, and it is reflected in the Port
Configuration Menu’s Port Status indication and the Operating Status
symbol for the port.
Page 3-26
Page 61
Advanced Port Configuration
Advanced Port Configuration
The Advanced Port Configuration Menu allows you to control the port
broadcast and multicast rate, to enable or disable 802.3x flow control, and to
set the default priority of the port.
To access the Advanced Port Configuration Menu, from the Configuration
Menu, type p to access the System Module Map, then select the module you
want to configure. From the Port Configuration Menu, type a. The Advanced
Port Configuration Menu appears for either 10/100BaseTX or 1000BaseX,
as shown in Figure 3-13 and Figure 3-14.
802.3x Flow Control: Enabled
Port Default Priority: 1
<Cmd> <Description>
h H
r Set Max. Broadcast/Multicast R
f Toggle 802.3x Flow Control Enable/Disable
i Set Port Default Pri
q Return to Previous Menu
Command>
Select m
elp for legends
ority
odule Next module Prev module Select port Next port Prev port
ate
Figure 3-13 Advanced Port Configuration Menu - 10/100BaseTX port
For a legend of the symbols used for the flow control and port priority table,
type h and you will see the screen displayed in Figure 3-11.
Page 3-27
Page 62
Configuration
Advanced 1000BaseX Port Configuration
IntraCore 8000 Basic Port Configuration Menu Module Type: (2-GBIC)
Module: [1]
Port: [1] Port 1 Port 2
=========== ===========
Flow Ctrl: SX-LinkUp (Forwarding) SX-LinkDown
Priority: 1 1
Max. Broadcast Rate: N/A
Max. Multicast Rate: N/A
802.3x Flow Control: Enabled
Port Default Priority: 1
<Cmd> <Description>
h H
r Set Max. Broadcast/Multicast R
f Toggle 802.3x Flow Control Enable/Disable
i Set Port Default Pri
q Return to Previous Menu
Command>
Select m
elp for legends
ate
ority
odule Next module Prev module Select port Next port Prev port
Figure 3-14 Advanced Port Configuration Menu - 1000BaseX port
The following subsections explain the configuration options in the
Advanced Port Configuration Menu for 10/100BaseTX and 1000BaseX
ports.
Page 3-28
Page 63
Advanced Port Configuration
Current Settings
The settings shown in the top portion of the Advanced Port Configuration
Menu are described in Table 3-8.
SettingDescription
Module NumberThe number of the module of which the selected port is a mem-
Module TypeCode for the type of module: 24-100TX, 2-GBIC, or 8-100FX.
Operating StatusThis field displays status symbols for each of the current mod-
Flow ControlThe status of flow control for the current port.When enabled, it
PriorityThe priority ranking for the port regarding data transmission
Max. Broadcast RateThe maximum number of packets per second that can be broad-
Max. Multicast RateThe maximum number of packets that can be multicast to all or
Table 3-8 Advanced Port Configuration Menu settings
ber.
See Figure 3-9 for the full names of each module type.
ule’s ports. For details, see the legend in Figure 3-11.
allows you to control traffic and avoid congestion, such as when
the port is receiving too much traffic for the available buffer
resources.
during periods of peak or heavy on the traffic. Ports with higher
priority take precedence when there is traffic congestion.
cast by the current port to the network
selected ports on the network by the current port.
Setting the Maximum Broadcast or Multicast Rate
Use the following procedure to set a limit on how many packets may be
either broadcast or multicast from the current port.
1Access the Port Configuration Menu by typing p in the
Configuration Menu.
2Choose a module in the System Module Map.
3In the Basic Port Configuration Menu, type a to open the
Advanced Port Configuration Menu.
Page 3-29
Page 64
Configuration
4Use s, n, or p to select the port for which you want to set
the broadcast or multicast rate.
5Type r to set the maximum broadcast or multicast rate for
the selected port.
6Enter the rate for broadcast or multicast and press Return.
The new maximum rate is displayed on the Advanced Port Configuration
Menu.
Enabling or Disabling 802.3x Flow Control
Use the following procedure to control traffic and avoid congestion, such as
when there is a shortage of buffer resources for the port. Flow control is
accomplished by means of standard PAUSE control frames for each port,
independent of all others. Before you can enable flow control for a port, that
port must be configured to operate in Full Duplex mode.
If you enable flow control on a port, and that port runs short of buffer
resources, the port will transmit PAUSE frames. When it receives them, the
link partner obeys these PAUSE frames. When the low-resource situation is
relieved, the port sends out PAUSE frames with zero time values. This ends
the pause staste that was imposed on the end-station.
To enable flow control, first access the Port Configuration Menu by typing p
in the Configuration Menu, then take the following steps.
1Choose a module in the System Module Map.
2In the Basic Port Configuration Menu, type a to open the
Advanced Port Configuration Menu.
3To select the port for which you want to enable or disable
flow control, type s, n, or p.
4To toggle flow control for the selected port, type f.
In the Advanced Port Configuration Menu, the Flow Control symbol for the
selected port reflects its change in state, as does the 802.3x Flow Control
setting.
IImportant: When using this method of flow control,
the link partner must be configured to recognize PAUSE
frames.
Page 3-30
Page 65
Global Port Configuration
Setting Port Default Priority
Use the following procedure to set the priority for a port. This priority setting
determines the order in which the port forwards packets. Each port is
associated with a traffic class: zero (0) is the lowest, and the default priority
level. Seven (7) is the highest priority level.
1Access the Port Configuration Menu by typing p in the
Configuration Menu.
2Choose a module in the System Module Map.
3In the Basic Port Configuration Menu, type a to open the
Advanced Port Configuration Menu.
4Use s, n, or p to select the port for which you want to set
the default priority.
5Type i to set the priority for the selected port.
6Enter the priority, from 0 to 7, and press Return.
The new default priority is shown on the Advanced Port Configuration
Menu.
Global Port Configuration
The Global Port Configuration Menu allows you to simultaneously change
the configuration information for all ports in a module.
To change the port configuration for all ports in a module, use the following
procedure.
1From the Configuration Menu, type p to access the Port
Configuration Menu. A System Module Map appears,
similar to Figure 3-9 on page 3-19.
2Select the module that you want to configure globally.
The Basic Port Configuration Menu appears, similar to
Figure 3-10 on page 3-20.
K Note: Your configuration choices will change the
settings of all the ports in the module you select. The
configuration of ports in other modules will be unaffected.
3From the Basic Port Configuration Menu, type g. The
Global Port Configuration Menu appears, for either
Page 3-31
Page 66
Configuration
10/100BaseTX ports or 1000BaseX ports, as shown in
Figure 3-15 and Figure 3-16.
<Cmd> <Description>
h H
t Select Global Ports St
u Select Global Au
l Select Global 10M/100M bps L
d Select Global Half/Full D
o Modify Global Auto
r Set Global Max. Broadcast/Multicast R
f Toggle Global 802.3x F
i Set Global Port Devault Pri
q Return to Previous Menu
Command>
Select m
elp for legends
odule Next module Prev module
atus Enable/Disable
to-Negotiation/Manual
uplex
-Negotiation Advertisement
low Control Enable/Disable
ink Speed
ate
ority
Figure 3-15 Global Port Configuration Menu - 10/100BaseTX ports
IntraCore 8000 Global Port Configuration Menu Module Type: (2-GBIC)
Module: [1]
Port 1 Port 2
=========== ===========
Operating Status: SX-Enabled SX-Enabled
Flow Ctrl: Disabled Disabled
Priority: 1 0
<Cmd> <Description>
h H
t Select Global Port St
r Set Global Max. Broadcast/Multicast R
f Toggle Global 802.3x Flow Control Enable/Disable
i Set Global Port Default Pri
q Return to Previous Menu
elp for legends
atus Enable/Disable
ate
ority
Command>
Select m
Page 3-32
odule Next module Prev module
Figure 3-16 Global Port Configuration Menu - 1000BaseX ports
Page 67
Unicast Forwarding Database Configuration
Follow the procedures in the “Port Configuration” and “Advanced Port
Configuration” sections of this chapter.
Unicast Forwarding Database Configuration
The Unicast Forwarding Database Configuration Menu allows you to view
and search for addresses in the IntraCore 8000’s MAC Forwarding Table. It
also provides options for displaying MAC addresses and IP/MAC binding
by individual port or by VLAN.
The MAC Forwarding Table is a table of node addresses that the IntraCore
8000 automatically builds by “learning.” It performs this task by monitoring
the packets that pass through the IntraCore 8000, checking the source and
destination addresses, and then recording the source address information in
the table.
The IntraCore 8000 uses the information in this table to decide whether a
frame should be forwarded to a particular destination port or “flooded” to all
ports other than the received port. Each entry consists of three parts: the
MAC address of the device, the port number on which it was received, and
the VLAN number.
KNote: The MAC address table can hold a maximum of
8,192 entries.
When you type d in the Configuration Menu, the Unicast Forwarding
Database Configuration Menu appears, as shown in Figure 3-17.
IntraCore 8000 Unicast Forwarding Database Configuration Menu
Age-out Time: 300 sec.
MAC Address Count: 33
IP Address Count: 21
<Cmd> <Description>
a Display A
p Display Forwarding Database By P
v Display Forwarding Database by V
m Search for M
i Search for I
t Set Age-Out T
q Return to Previous Menu
Command>
Figure 3-17 Unicast Forwarding Database Configuration Menu
ll Forwarding Database With/Without IP
AC Address
P Address
ime
ort With/Without IP
LAN With/Without IP
Page 3-33
Page 68
Configuration
Current Settings
Table 3-9 explains each setting on the Forwarding Database Configuration
Menu.
SettingDescription
Age-out TimeThe number of seconds that addresses are retained in the table.
MAC Address CountThe number of entries currently in the MAC Address Table.
IP Address CountThe number of entries in the MAC Address Table that contain a
Table 3-9 Forwarding Database Configuration Menu settings
The default is 300 seconds. The range is from 10 to 1,000,000.
corresponding IP address.
Displaying the Forwarding Database
Use the following procedure to view the Unicast Forwarding Database table.
1Open the Unicast Forwarding Database Configuration
Menu by typing d in the Configuration Menu.
2Type either a, p, or v, depending on the range of MAC
addresses you want to view.
Typ e a to display the MAC addresses of all ports on the
IntraCore 8000.
Type p to specify a port, then see the MAC addresses for
that port only.
Type v to specify a VLAN, then see the MAC addresses
for the member ports of that VLAN only.
3At the prompt which appears, type y to see IP addresses
in the display or type n to see the display without IP
addresses, then press Return. The selected display
appears.
Examples of the Unicast Forwarding Database table are shown in Figure 318 (all ports, without IP displayed) and Figure 3-19 (one port, without IP
displayed).
KNote: When the IP addresses are displayed, the age and
priority are not displayed, as shown in Figure 3-19.
Page 3-34
Page 69
Unicast Forwarding Database Configuration
The Typ e field refers to the type of MAC address. The Type setting may be:
GS —þstatic (set by management, and will not age out)
GD — dynamic (learned by the switch; will be aged out)
GM — multiple (associated with multiple IP addresses, as in the
case of a router)
GI — Self (the IntraCore 8000’s MAC address)
The Pri field refers to the priority setting for the port.
The Age field indicates the amount of time remaining before an entry ages
out.
Entry Type : ( D = Dynamic , S = Static , I = Self )
+------+----+----+-----------------+---------+-----+----------+
|Module|Port|Type| MAC Address | VLAN ID | Pri | Age |
+------+----+----+-----------------+---------+-----+----------+
1 6 D 00:00:94:75:2A:21 0001 0 252
1 6 D 00:00:94:9A:BF:54 0001 0 300
1 6 D 00:00:94:B4:66:48 0001 0 276
1 6 D 00:00:94:B4:7A:8D 0001 0 292
1 6 D 00:00:94:B5:1B:B1 0001 0 284
- -- I 00:00:94:DD:75:01 0001 0 - 1 6 D 00:10:4B:36:91:AC 0001 0 300
1 6 D 00:A0:24:9A:1E:4E 0001 0 284
1 6 D 00:A0:CC:2C:57:29 0001 0 260
1 6 D 00:E0:52:01:44:46 0001 0 300
1 6 D 00:00:94:5D:E2:8D 0001 0 276
1 6 D 00:00:94:10:E3:12 0001 0 246
1 6 D 08:00:20:72:A0:1C 0001 0 81
1 6 D 00:00:94:7B:02:C0 0001 0 291
1 6 D 00:00:94:75:34:DE 0001 0 3
1 6 D 00:00:94:75:31:DB 0001 0 21
1 6 D 00:A0:CC:2C:60:CB 0001 0 144
1 6 D 00:00:94:9A:2F:1C 0001 0 150
1 6 D 00:00:94:75:2F:CF 0001 0 297
ext, Previous, or Quit
Press N
Figure 3-18 Unicast Forwarding Database, all ports, without IP displayed
In the forwarding database for all ports, the first screen shows the entries for
devices connected to the first module’s ports. If you scroll through the
database, you can see the entries for each port of each module. For example,
in
Figure 3-18, some MAC addresses for devices connected to port 6 of module
1 are shown.
Page 3-35
Page 70
Configuration
Module: [1] Port: [6]
Entry Type [T]: (D = Dynamic, S = Static, M = Multiple, I = Self)
+-+-+-+-----------------+----------------+
|M|P|T| MAC Address | IP |
+-+-+-+-----------------+----------------+
1 6 D 00:00:94:10:80:1D 199.35.192.185
1 6 D 00:E0:52:01:44:46 199.35.192.189
1 6 D 00:00:94:A2:DE:56 199.35.192.181
1 6 D 00:00:94:7A:CF:48 199.35.192.188
1 6 D 00:00:94:92:F1:A8 199.35.192.182
- - I 00:00:94:8E:F2:CC 199.35.192.187
1 6 D 00:00:94:5D:E0:41 199.35.192.183
1 6 D 00:00:94:5D:E1:9E 199.35.192.186
1 6 D 08:00:20:80:5E:9C 199.35.192.184
1 6 D 00:00:94:5D:E2:15 199.35.192.195
1 6 D 00:00:94:5D:E2:8D 199.35.192.199
1 6 D 00:00:94:10:E3:12 199.35.192.191
1 6 D 08:00:20:72:A0:1C 199.35.192.198
1 6 D 00:00:94:7B:02:C0 199.35.192.192
1 6 D 00:00:94:75:34:DE 199.35.192.197
1 6 D 00:00:94:75:31:DB 199.35.192.193
1 6 D 00:A0:CC:2C:60:CB 199.35.192.196
1 6 D 00:00:94:9A:2F:1C 199.35.192.194
1 6 D 00:00:94:75:2F:CF 199.35.192.175
Press N
ext, Previous, or Quit
Figure 3-19 Unicast Forwarding Database for a single port, with IP displayed
The Unicast Forwarding Database display for a single port shows only the
entries for the devices connected to the selected port, as you can see in
Figure 3-19.
Searching for a MAC Address
The Unicast Forwarding Database can be searched by MAC address or by IP
address. To search for a specific MAC or IP address, use the following
procedure.
1Access the Unicast Forwarding Database Configuration
Menu by typing d in the Configuration Menu.
2Type m to search for a MAC address.
Type i to search for an IP address.
3Type the MAC or IP address at the prompt.
4Press return.
Page 3-36
Page 71
Unicast Forwarding Database Configuration
If the address is located, it is displayed, with its associated information, as
shown in Figure 3-20. If the address is not located, a message appears,
stating this.
The MAC Address Search Summary
==============================
Module: 1
Port: 6
Type: Dynamic
Age: 200
Priority: 0
MAC Address: 00:00:94:11:12:13
IP Address: 192.168.54.111
press any key to continue...
Figure 3-20 MAC Address Search summary
The Search Summary screen tells the location of the MAC or IP address, the
module, port, and the Domain Name. Configuration information, such as the
type, age, and priority are also displayed.
Setting the MAC Address Age-Out Time
This option sets the Age-Out Time for the MAC Forwarding Table.
The Age-Out Time is the number of seconds that addresses remain in the
table after being learned by the IntraCore 8000. The default is 300 seconds.
Use the following procedure to set the MAC address Age-Out Time.
1Access the Unicast Forwarding Database Configuration
Menu by typing d in the Configuration Menu.
2Type t to set the MAC Address Age-Out Time.
3Enter the new Age-Out time (in seconds) at the prompt.
4Press Return.
The MAC Address Age-Out Time is changed and is displayed at the top of
the Unicast Forwarding Database Configuration Menu.
Page 3-37
Page 72
Configuration
Image File Downloading Configuration
The Image File Downloading Configuration Menu allows you to upgrade
your IntraCore 8000 system easily, using either TFTP or X/Y/Z modem
protocol.
Type f in the Configuration Menu to see the Image File Downloading
Configuration Menu, as shown in Figure 3-21.
IntraCore 8000 Image File Downloading Configuration Menu
<Cmd> <Description>
t T
x X
q Return to Previous Menu
Command>
Figure 3-21 Image File Downloading Configuration Menu
From the Image File Downloading Configuration Menu, select the
downloading protocol. Type t to download the image file via TFTP or type x
to download using the X/Y/Z modem protocol. The two subsections that
follow describe downloading by each of the two protocols.
When Asanté issues a new version of software for the IntraCore 8000, you
can obtain it from the Asanté World Wide Web site or by contacting Asanté
Technical Support (see Appendix A, “Technical Support,” for details).
To download a new image file in-band through TFTP, type t in the Image
File Downloading Configuration Menu (option g in the Configuration
Menu).
A screen similar to Figure 3-22 appears.
IntraCore 8000 TFTP File Downloading Menu
Bank 1 Image Version/Date 1.00T/May 07 1999 11:34:46
Bank 2 Image Version/Date 1.00U/Jul 29 1999 15:55:34 (Running)
<Cmd> <Description>
s Set S
f Set F
d D
b Download and Reb
r Set R
a Toggle Destination Ba
q Return to Previous Menu
Command>
erver IP Address
ile Name
ownload Image File to Destination Bank
etry count
oot from the Image File
nk
Figure 3-22 TFTP Image File Downloading Menu
Current Settings
Page 3-39
Page 74
Configuration
Table 3-10 describes each setting on the TFTP Image Downloading Menu.
SettingDescription
Bank 1 Image Version/
Date
Bank 2 Image Version/
Date
Server IPIP address of network server containing software image file.
File NameThe software image file’s name and network path.
Retry CountNumber of attempts the switch will make to download image
Destination BankNumber of the memory bank where the image file will down-
The version number and compilation date of runtime code that
is stored in memory bank 1 on the IntraCore 8000.
The version number and compilation date of runtime code that
is stored in memory bank 2 on the IntraCore 8000. The (Running) designation indicates that the runtime code is currently
running on this bank.
file.
load.
Table 3-10 TFTP Image Download Menu settings
Page 3-40
Page 75
Image File Downloading Configuration
Performing a Software Upgrade at Runtime
The software image file must be downloaded from a server on your network
that is running a TFTP server application.
IImportant: Make sure the IntraCore 8000 is configured
with an IP address. For details, see “Changing System IP
Information” earlier in this chapter.
To upgrade the IntraCore 8000 software via TFTP, use the following
procedure.
1Access the TFTP Image File Downloading Configuration
Menu by typing t in the Image File Downloading Configuration Menu.
2Type s to set the image server IP address.
3At the prompt, enter the IP address of the server contain-
ing the image file, then press Return.
4Type f to set the image file name.
5At the prompt, enter the image file’s name and path, then
press Return.
6Type r to set the retry count.
7At the prompt, enter the number of attempts the IntraCore
8000 will make to download the image file, then press
Return.
8Select the Destination Image Bank by using the a option.
In a typical situation, you will want to select the Bank on
which the software is not currently running, as shown in
Figure 3-22.
9To download the image file to the destination bank, type
d. This option allows you to change the boot bank at a
later time or to use the System Reset Configuration to
schedule a reset, at which time the new software will be
run.
OR
To download the image file and reset the switch, type b.
This option immediately boots the IntraCore 8000 with
the new version of software.
Page 3-41
Page 76
Configuration
10 Type q to return to the Image File Downloading Menu.
Serial Downloading Configuration
The X/Y/Z Modem Image File Downloading Menu lets you download a new
software image file for the IntraCore 8000 without interrupting the current
operation.
To download a new image through the IntraCore 8000 management
module’s serial (console) port, type x in the Image File Downloading
Configuration Menu. The X/Y/Z Modem Image File Downloading Menu
appears, as shown in Figure 3-23.
IntraCore 8000 X/Y/ZMODEM Image File Downloading Menu
Bank 1 Image Version/Date 1.00T/May 07 1999 11:34:46
Bank 2 Image Version/Date 1.00U/Jul 29 1999 15:55:34 (Running)
<Cmd> <Description>
x Set download protocol to X
y Set download protocol to Y
z Set download protocol to Z
c C
d D
b Download and B
a Toggle Destination Ba
q Return to Previous Menu
Command>
hange Baud Rate Setting
ownload Image File
oot Image File
MODEM
MODEM
MODEM
nk
Page 3-42
Figure 3-23 X/Y/Z Modem Image File Downloading Menu
Page 77
Image File Downloading Configuration
Current Settings
Table 3-11 describes the settings shown in the X/Y/Z Modem Image File
Downloading Menu.
SettingDescription
Bank 1 Image Version/
Date
Bank 2 Image Version/
Date
Download ProtocolCurrent setting of the IntraCore 8000’s serial download proto-
Current Baud RateTransmission rate for the IntraCore 8000’s serial port.
Destination BankNumber of the memory bank where the image file will down-
The version number and compilation date of runtime code that
is stored in memory Bank 1 on the IntraCore 8000.
The version number and compilation date of runtime code that
is stored in memory Bank 2 on the IntraCore 8000.The (Running) designation indicates that the runtime code is currently
running on this Bank.
col.
load.
Performing a Software Upgrade
Use the following procedure to upgrade the IntraCore 8000 software through
its serial (console) port.
1In the Image File Download Configuration Menu, type x
to open the X/Y/Z Modem Image File Downloading
Menu.
2Type x, y, or z to select the corresponding modem proto-
col.
K Note: For information about these protocols, see the
manual for your communications software.
3Type c to select the console baud rate. The Baud Rate Set-
ting Menu appears, as shown in Figure 3-24. The maximum baud rate currently supported is 57,600 bps.
Page 3-43
Page 78
Configuration
Current Baud Rate: 9600 bps
Please select one from the following baud rate settings, or
press any other key to quit:
WARNING: The user must use the same baud rate setting of the terminal
after he/she confirms to change the baud rate setting of the
console in order to work correctly.
<Cmd> <Description>
a Set Baud Rate to 1200 bps
b Set Baud Rate to 2400 bps
c Set Baud Rate to 4800 bps
d Set Baud Rate to 9600 bps
e Set Baud Rate to 19200 bps
f Set Baud Rate to 38400 bps
g Set Baud Rate to 57600 bps
Choice>
Figure 3-24 Baud Rate Menu
4Select one of the options in the above screen to select the
required baud rate, and confirm it by typing y.
K Note: The baud rate default for console management
is 9600 bps; in most cases the default will match the
rate for the connected terminal. If you change the
baud rate for the console port, the screen will display
gartbled data unless the connected terminal is set to
the same rate.
5Type a to select the Destination Bank.
6To download the image file, use any serial communica-
tions software such as Procomm Plus, HyperTerminal,
ZTerm, etc. For file transfer instructions, follow the
instruction manual of the serial communications software.
K Note: The terminal on which the serial communica-
tions software is running must have the same baud
rate as the IntraCore 8000 management module console. The connection from the terminal to the switch
console port must be an RS232C straight-through
cable.
Page 3-44
Page 79
System Reset Configuration
7Typ e d to download to the selected destination bank or b
to download and reset.
8Typ e q to return to the previous menu after performing a
successful download.
System Reset Configuration
The System Reset Configuration Menu allows you to reset the IntraCore
8000 by performing a “warm” reboot. It also allows you to schedule a reset
up to 24 hours in advance.
To reset the IntraCore 8000, type r in the Configuration Menu. A screen
similar to Figure 3-25 appears.
IntraCore 8000 System Reset Configuration Menu
Reset Status: Stop
Reset Type: Normal
Reset Countdown: 1 sec.
<Cmd> <Description>
s S
c C
r R
d Reset Switch to Factory D
i Reset Switch to Factory Default except I
q Return to Previous Menu
Command>
chedule Reset Time
ancel Reset
eset System
efault
P and Bootstrap
Figure 3-25 System Reset Configuration Menu
Page 3-45
Page 80
Configuration
Current Options
Table 3-12 describes the settings shown in the System Reset Configuration
Menu.
OptionDescription
Schedule Reset TimeNumber of seconds until the scheduled reset.
Cancel ResetStops the scheduled reset.
Reset SwitchPerforms a warm reboot to reset the IntraCore 8000 immedi-
Reset Switch to Factory
Default
Reset Switch to Factory
Default except IP &
Bootstrap
Table 3-12 System Reset Configuration options
ately.
Resets the IntraCore 8000 to the original factory settings.
Resets the IntraCore 8000 to the original factory settings without modifying the IP and Bootstrap configuration.
Resetting the IntraCore 8000
To reset the IntraCore 8000, use the following procedure.
1Open the System Reset Menu by typing r in the Configu-
ration Menu.
2Type r, d or i. Typing r resets the IntraCore 8000. Typing
d resets the IntraCore 8000 to the factory default. Typing i
resets the IntraCore 8000 to the factory default without
affecting its IP and Bootstrap configuration.
3Type y to confirm the reset or type n to cancel the reset.
K Note: During the scheduled reset operation, you can
see the reset countdown decrement by refreshing the
screen.
Page 3-46
Page 81
Viewing the System Log
Scheduling a System Reset
You can schedule the IntraCore 8000 to automatically perform a reset from
one second up to 24 hours (86,400 seconds) in advance.
To schedule a reset, use the following procedure.
1Open the System Reset Menu by typing r in the Configu-
ration Menu.
2Type s to schedule a reset time (within the specified
range).
3Enter the number of seconds the IntraCore 8000 will wait
before it automatically resets.
I Important: The maximum number of seconds that can
be entered is 86,400 (24 hours).
4Press Return.
The IntraCore 8000 will reset automatically after the number of seconds you
specified.
Viewing the System Log
The IntraCore 8000 system log records and displays any major system
events on the switch, such as fatal errors, plugging in or removing a module,
etc.
To view the system log, use the following procedure.
1Type l in the Configuration Menu. The System Log Menu
appears, as shown in Figure 3-26.
Page 3-47
Page 82
Configuration
IntraCore 8000 System Log Menu
<Cmd> <Description>
l Display System L
c C
q Return to previous menu
Command>
lear System Log
og
Figure 3-26 System Log Menu
2Type d to display the current system log, as shown in
Figure 3-27.
IntraCore 8000 System Log Summary
====================================================================
No. D: H: M: S Event
1. 000:00:00:00 Reset NVDB sections to factory default
2. 000:00:00:07 Spanning Tree Task Disabled
3. 000:00:32:53 Spanning Tree Task Enabled
4. 000:00:33:45 Spanning Tree Task Disabled
5. 000:00:41:11 Spanning Tree Task Enabled
6. 000:00:00:00 Reset NVDB section 0 to factory default
7. 000:00:32:51 Spanning Tree Task Disabled
8. 000:00:33:08 Spanning Tree Task Enabled
uit Next Page
Q
Figure 3-27 System Log Summary
The system log displays any major system events that
have occurred on the IntraCore 8000. If no major events
have occurred, “System up” messages are displayed.
K Note: The system log holds a maximum of 64 entries.
3Press any key to display the next page of System Log
information.
Clearing the System Log
Use the following procedure to clear all entries from the current System Log.
1Open the System Log Menu by typing l in the Configura-
tion Menu.
Page 3-48
Page 83
User Interface Configuration
2Type c to clear the current System Log.
New entries will begin to accrue as events occur.
User Interface Configuration
The User Interface Configuration Menu lets you set the idle time-out periods
for both the console and telnet user interfaces, change the password used for
logging in to the Local Management Interface, and enable or disable the Web
server.
To display the User Interface Configuration Menu, as shown in Figure 3-28,
type u in the Configuration Menu.
IntraCore 8000 User Interface Configuration Menu
Console UI Idle Time Out 5 min
Telnet UI Idle Time Out 5 min
HTTP Server Status: ENABLED
Telnet Session Status:
Session Status Source IP
1 Active 192.168.54.240
2 Inactive <none>
3 Inactive <none>
4 Inactive <none>
<Cmnd> <Description>
c Set C
t Set T
p Change Administrator P
o TO
q Return to previous menu
Command>
onsole UI Time Out
elnet UI Time Out
ggle to Enable/Disable HTTP Server
assword
Figure 3-28 User Interface Configuration Menu
Current Settings
Table 3-13 describes the settings in the User Interface Configuration Menu.
SettingDescription
Console UI Idle Timeout
Telnet UI Idle Time-outDuration of time the console will remain idle before closing the
Duration of time the console will remain idle before returning
to the Main Menu.
Telnet connection.
Page 3-49
Page 84
Configuration
SettingDescription
HTTP Server StatusEnabled or Disabled.
Telnet Session StatusInactive or Active, depending on whether session is in progress.
Telnet Session Source IPThe IP address of the device being used for telnet management.
Table 3-13 UI Time-out Settings
Page 3-50
Page 85
User Interface Configuration
Setting Console Idle Time-out Period
Use the following procedure to set the console idle time-out.
1Type c in the User Interface Configuration Menu.
A prompt for the number of minutes is displayed.
2Enter the desired idle time-out in minutes.
K Note: The default time-out is 5 minutes. Range for
time-out is 0-60 minutes (0 indicates no time-out).
To exit without making any changes, press ctrl-c.
3Press Return.
The new Console IU Idle Time Out is reflected in the User Interface
Configuration Menu.
Setting Telnet Idle Time-out Period
Use the following procedure to change the Telnet Time-out.
1Type t in the User Interface Configuration Menu.
A prompt for the number of minutes is displayed.
2Enter the desired idle time-out in minutes.
K Note: The default time-out is 5 minutes. Range for
time-out is 1-60. To exit without changes, press ctrl-c.
3Press Return.
The new Telnet UI Idle Time Out is reflected in the User Interface
Configuration Menu.
After you have configured the desired time-outs, type q to return to the
previous menu.
Changing the Password
Use this option to change the password that the user must enter when they
log in to the Local Management Interface or the Web server interface.
IImportant: The factory default password is Asante. The
password is case-sensitive.
Page 3-51
Page 86
Configuration
To change the current Local Management Interface or Web-based Interface
password, use the following procedure.
1Type p in the User Interface Configuration Menu.
2Type the password you have been using at the prompt.
3Type a new password at the “Enter Current Password”
prompt.
I Important: The password is case-sensitive. The pass-
word can be up to a maximum of 20 characters in
length. The password characters can be any ASCII
code.
4Press Return.
5Type the new password again at the confirmation pass-
word prompt.
To cancel the change in password, type ctrl-c.
6Press Return.
The password change takes effect.
7Type q to return to the Configuration Menu.
You will now need to enter the new password each time you log in to the
Configuration Menu.
Enabling or Disabling the Web Server
The current HTTP Server Status is shown in the User Interface
Configuration. For security, the web server is disabled by default.
Use the following procedure to toggle the status of the HTTP server:
GType o in the User Interface Configuration Menu.
Viewing Statistics
Viewing statistics on a regular basis allows you to evaluate your network’s
performance. You can view current statistics for the IntraCore 8000 on a perport basis and can change your view of those statistics and the counters
displayed in it.
To view statistics use the following procedure.
Page 3-52
Page 87
Viewing Statistics
1Type s in the Local Management Interface Main Menu.
The System Module Map is displayed, as shown in
Figure 3-29.
<Cmd> <Description> <Cmd> <Description> <Cmd> <Description>
r since reset x next module n next port
t stop refresh v prev module p prev port
q quit g select module s select port
Command>
Figure 3-30 Port Statistics Counters since system up
3Use the s command to select a port for which you want to
see the counters, or use n and p to find the port.
4Use the g command to select a different module (group)
in which you want to select a port, or use x and v to find
the module.
5Type t to stop the periodic updating of the counters, so
you can record what they are at that time.
6Type r to see a display of the same counters, but accrued
since the last reset of the counters, as shown in Figure 3-
31.
Page 3-54
Page 89
Viewing Statistics
IntraCore 8000 Port Statistics Counters Module: 2 Port: 1
<Cmd> <Description> <Cmd> <Description> <Cmd> <Description>
u since system up x next module n next port
t stop refresh v prev module p prev port
q quit g select module s select port
Command>
Figure 3-31 Port Statistics Counters since reset
7Type r to in the “since reset” screen reset the statistics
counters so you can see them accrue again from zero.
8Type q to quit either statistics screen and return to the
Local Management Interface Main Menu.
For definitions of the counters, see Appendix B, “MIB Statistics.”
Page 3-55
Page 90
Configuration
Page 3-56
Page 91
4
Advanced Management
This chapter describes advanced topics for management of the IntraCore
8000:
GSpanning Tree Protocol
GSNMP and RMON Management
GSecurity Management
GVLAN Management
GMulticast Management
Spanning Tree Protocol
The Spanning Tree Protocol (STP) is a part of the IEEE 802.1D standard that
provides for redundancy in a bridged LAN by allowing multiple links
between points in the LAN.
Without the use of STP, multiple links in a bridged network will result in
bridging loops, which allow excess broadcast traffic that can bring down an
entire network.
Overview
The Spanning Tree Protocol reduces a network with multiple, redundant
connections to one in which all points are connected (the protocol spans the
network), but in which there is only one path between any two points (the
paths are branched, as in a tree).
For example, in a large network with multiple paths, the same message will
be broadcast over the network through multiple paths, resulting in a great
amount of extra network traffic, and possibly, network downtime. This
“closed path” or “bridged loop” among the networks can also start an
unending packet-passing process.
IImportant: To explain STP more effectively, the IntraC-
ore 8000 is described as a bridge for this section of the
manual.
Page 4-1
Page 92
Advanced Management
How It Works
All bridges on the network communicate with each other using special
packets called Bridge Protocol Data Units (BPDUs). The information
exchanged in the BPDUs enables bridges on the network to:
GElect a single bridge to be the root bridge.
GCalculate the shortest path from each bridge to the root.
GSelect a designated bridge on each segment, which lies closest to
the root and forwards traffic to the root.
GSelect a port on each bridge to forward traffic to the root.
GSelect the ports on each bridge that forward traffic, and place the
redundant ports in blocking state.
Enabling and Disabling STP
The IntraCore 8000 is shipped with spanning tree enabled on all ports by
default. To enable or disable STP on your IntraCore 8000, use the following
procedure.
1Type c to open the Configuration Menu.
2Open the Spanning Tree Configuration Menu by typing s
in the Configuration Menu. See Figure 4-1.
3Type t to toggle STP to enabled or disabled.
4If you select disabled, you are prompted to confirm the
change.
The STP status is changed. The status is displayed near
the top of the Spanning Tree Configuration Menu.
Page 4-2
Page 93
Spanning Tree Protocol
Configuring Spanning Tree Parameters
To view the Spanning Tree Configuration Menu, as shown in Figure 4-1,
type s in the Configuration Menu.
Hello Time: 2 Sec. Bridge Hello Time: 2 Sec.
Maximum Age: 20 Sec Bridge Maximum Age: 20 Sec.
Forward Delay: 15 Sec. Bridge Forward Delay: 15 Sec.
<Cmd> <Description>
t T
i Set Bridge Pri
h Set Bridge H
a Set Bridge Maximum A
d Set Bridge Forward D
p Spanning Tree P
q Return to Previous Menu
Command>
oggle STP Enable/Disable
ority
ello Time
ge
elay
ort Configuration
Figure 4-1 Spanning Tree Configuration Menu
Spanning Tree Parameters
The operation of the spanning tree algorithm is governed by several
parameters. You should attempt to set these parameters only if you have
experience with the 802.1D specification.
Bridge Priority
Setting the Bridge Priority to a low value will make it more likely that the
current bridge will become the root bridge. If the current bridge is located
physically near the center of your network, you may wish to decrease the
Bridge Priority from its default value of 0x8000. If the current bridge is near
the edge of your network, it is best to leave the value of the Bridge Priority at
its default.
Hello Time
This is the time period between BPDUs transmitted by each bridge.
Page 4-3
Page 94
Advanced Management
Maximum Age
Each bridge should receive regular configuration BPDUs from the direction
of the root bridge. If the maximum age timer expires before the bridge
receives another BPDU, it assumes that a change in the topology has
occurred, and it begins recalculating the spanning tree.
Forward Delay
After a recalculation of the spanning tree, the Forward Delay parameter
regulates the delay before each port begins transmitting traffic. If a port
begins forwarding traffic too soon, the network can be adversely affected.
The permitted range of the Forward Delay is 4 to 30 seconds.
KNote: The Hello Time, Maximum Age, and Forward
Delay are constrained by the following formula:
(Hello Time + 1) <= Maximum Age <= 2 x (Forward Delay -1)
In general, reducing the values of these timers will make
the spanning tree react faster when the topology changes,
but may cause temporary loops as the tree stabilizes in a
new configuration. Lengthening the timers will make the
tree react more slowly to changes in configuration but
will make an unintended reconfiguration less likely. All
of the bridges in the tree must agree on the values of these
timers, so each bridge uses the ones advertised by the
root.
Port Priority
If two ports are connected to the same segment, changing the Port Priority
increases or decreases the probability that either port will be chosen for
inclusion in the tree.
Page 4-4
Page 95
Spanning Tree Protocol
Current STP Settings
The following settings are displayed in the Spanning Tree Configuration
Menu, as shown in Figure 4-1.
SettingDescription
STP StatusWhether spanning tree protocol is currently enabled or disabled.
Bridge IDThe Bridge Identifier of this bridge. The first part of the Bridge
Designated RootThe Bridge Identifier of the bridge that is currently the root
Root PortThe port this bridge will use to forward traffic to the root. If this
Root Path CostThe cost as calculated by the spanning tree for messages to
Hello TimeThe value of the timer currently being used by the bridge.
Maximum AgeThe value of the maximum age timer currently being used.
Forward DelayThe value of the forward delay timer currently being used.
Bridge Hello TimeThe value that will be used by the spanning tree if this bridge
Bridge Maximum AgeThe value that will be used by the spanning tree if this bridge
Bridge Forward DelayThe value that will be used by the spanning tree if this bridge
ID is the Bridge Priority. (If the Bridge ID is shown as 8000
000094EE5080, the 8000 is the Bridge Priority. The remainder
is the MAC address of this bridge, which cannot be changed.).
bridge for the spanning tree.
bridge is the root, the root port will be 0.
reach the root. If this bridge is the root, the cost will be 0.
becomes the root bridge.
becomes the root bridge.
becomes the root bridge.
Table 4-1 Spanning Tree Configuration settings
Page 4-5
Page 96
Advanced Management
Spanning Tree Port Configuration
To set the Port Priority and Port Path Cost values for STP, access the
Spanning Tree Port Configuration Menu shown in Figure 4-2 by typing p in
the Spanning Tree Configuration Menu.
IntraCore 8000 Spanning Tree Port Config. Menu Module Type: (24-100TX)
Module: [1]
Port: [1]
Port Speed: 100 Mbps
Port Status: Enabled
Port State: Forwarding
Port MAC Address: 00:00:93:8F:E3:7C
Port Priority: 0x80
Port Path Cost: 10
<Cmd> <Description>
i Set Port Pri
c Set Port Path C
q Return to Previous Menu
Command>
Select m
odule Next module Prev module Select port Next port Prev port
ority
ost
Figure 4-2 Spanning Tree Port Configuration Menu
Setting Port Priority and Path Cost
The port priority is a bridge spanning tree parameter that ranks each port.
When two or more ports have the same path cost, the STP selects the path
with the highest priority (lowest numerical value). By changing the priority
of a port, you can make it more or less likely to become the root port. The
default value is 128, and the range is 0-255.
Port path cost is the bridge spanning tree parameter that assigns a cost factor
to the port. The lower the assigned port path cost, the more likely the port is
to be accessed. The default port path cost value is a result of the equation:
path cost = 1000/LAN speed (in Mbps)
Thus, for 10Mbps ports, the assigned default port path cost is 100. For
100Mbps ports, the default port path cost is 10. And for 1000Mbps ports,
the assigned default port path cost is 1. The range is 1 to 65,535.
Page 4-6
Page 97
SNMP and RMON Management
Use the following procedure to set the STP Port Priority and Path Cost
values.
1Access the Spanning Tree Port Configuration Menu by
typing p in the Spanning Tree Configuration Menu.
2Use the m, x, and v commands to select the module with
the port you want to configure.
3Use the s, n, and p commands to select the port you want
to configure.
4Type i to set the Port Priority.
Type c to set the Port Path Cost.
5Enter a value for the setting you are making.
6Press Return.
The new Port Priority or Port Path Cost is displayed in the Spanning Tree
Port Configuration Menu.
SNMP and RMON Management
The Simple Network Management Protocol (SNMP) may be used to manage
the IntraCore 8000. The SNMP agent supports database objects that are
defined in the following management information bases (MIBs):
GMIB II (RFC 1213)
GBridge MIB (RFC 1493)
GRMON (RFC 1757) 4 groups - Ethernet Statistics, Ethernet His-
tory, Alarm, and Events (See next section for details)
GPrivate Asanté 9000 MIB
Any SNMP-based network management application can be used to manage
the IntraCore 8000. For information on management of switches, refer to
your SNMP software manual.
For details on console-based SNMP settings, see “SNMP Configuration” in
Chapter 3.
Page 4-7
Page 98
Advanced Management
RMON Management
Remote Network Monitoring (RMON) allows the network manager to
gather data on the network’s traffic for future retrieval. RMON is an Internet
Standard defined in RFC1757.
Using RMON, a network monitor (also called a probe) listens to traffic on
the network and gathers statistics that may be retrieved later by a network
management station using SNMP, as described in the previous section.
The four groups of RMON that are supported by the IntraCore 8000 are
described in the following sub-sections.
The IntraCore 8000 switches provide control of the RMON groups only
through SNMP. For information on controlling RMON groups, please refer
to the documentation for your SNMP management application.
For more information about RMON, please see RFC1757, “Remote
Network Monitoring Management Information Base,” available from the
FTP site listed in Appendix A.
Ethernet Statistics Group
The Ethernet statistics group contains statistics measured on each port of the
IntraCore 8000. These are cumulative counters that start at zero each time
the IntraCore 8000 is reset. The Statistics Group is automatically
implemented by the IntraCore 8000.
Ethernet History Group
The Ethernet history group records periodic statistical samples from ports on
the IntraCore 8000 and stores them for later retrieval. A network manager
can use the data to analyze how network traffic has varied over a period of
time.
Alarm Group
The alarm group takes periodic statistical samples from variables in the
IntraCore 8000 and compares them to previously configured thresholds. If
the monitored variable crosses a threshold, an event is generated.
Event Group
The event group controls the generation and notification of events from the
IntraCore 8000. The alarm and event groups together allow the network
manager to configure RMON so that if a particular statistic (such as the
number of bad frames) goes higher than a certain level, the IntraCore 8000
will send a trap to its configured trap receivers, notifying the manager of the
Page 4-8
Page 99
Security Management
event. For information on configuring trap receivers, see “SNMP
Configuration” in Chapter 3.
Security Management
The IntraCore 8000’s security management options are summarized in
Tabl e 4-2.
Security OptionDescriptionAction
Duplicated IP Detection (Monitoring)
Duplicated IP TrapSends trap with MAC
Station Movement TrapDetects the movement of any
Port New Node TrapDetects the connection of any
Port Trusted MAC
Address
Port Intruder Detection
Trap
Port LockDisallows traffic from MAC
Detects the use of a single IP
address by two stations.
end station from one port to
another.
new device to the secured
port.
Creates a set of port-trusted
MAC addresses for use by
other security measures.
Disallows traffic from MAC
addresses not belonging to
the port trusted MAC address
set. Station movement is also
disallowed.
addresses that do not belong
to the port trusted MAC
address set. Station movement is also disallowed.
Detects and logs MAC
addresses of both stations and
the ports they accessed.
addresses of both stations and
the ports they accessed.
Sends trap with the station’s
MAC address and IP address
(if available) and the switch’s
port numbers.
Sends trap with the new
node’s MAC address and IP
address (if available) and the
port to which they are connected.
None.
Sends trap with intruder’s
MAC address.
Disables the port if an
intruder is detected. Sends
trap with the port number, and
the intruder’s MAC address,
VLAN ID, and IP address (if
available).
Table 4-2 Security Management Options
Page 4-9
Page 100
Advanced Management
To access the Security Management Menu, type t in the Configuration
Menu.
A screen similar to Figure 4-3 appears.
IntraCore 8000 Security Management Menu
Duplicated-IP Monitoring Status: Enable
Duplicated-IP Trap Status: Enable
Station Movement Trap Status: Disable
<Cmd> <Description>
p Port Security Configuration
d Toggle Duplicated-IP Detection Enable/Disable
i Toggle Duplicated-IP Trap Enable/Disable
l Display Duplicated-IP List
s Toggle Station Movement Trap Enable/Disable
r Reset All Security Configuration to Factory Default
q Return to previous menu
Command> p
Figure 4-3 Security Management Menu
Current Settings
The following settings are displayed in the Security Management Menu
screen.
SettingDescription
Duplicated IP Monitoring Status
Duplicated IP Trap StatusWhether duplicated IP trap is currently enabled or dis-
Station Movement Trap StatusWhether station movement trap is currently enabled or
Whether duplicated IP monitoring (detection) is currently enabled or disabled.
abled.
disabled.
Table 4-3 Security Traps
IImportant! For any traps (alerts) to be sent, you must des-
ignate one or more devices as trap receivers. See “SNMP
Configuration” in Chapter 3.
Page 4-10
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.