Before you begin 9
Text conventions 9
Related publications 11
How to get help11
New in this release13
Features 13
Introduction15
Using the Web-based user interface17
Setting up the Web-based user interface 18
Logging on to the Web-based user interface 19
Logging off from the Web-based user interface 19
Navigating the Web-based user interface 20
Initial configuration 22
Changing the administrator password 23
Adding system information 24
Setting the IP address24
3
Release 1.0 13
Menu and management pages 20
Configuration options 21
Setting the IP address manually 25
Setting the IP address automatically 25
BES50 basic configuration27
Configuring initial settings by using the Quick Start feature 27
Configuring user authentication29
Configuring user accounts 30
Configuring local and remote logon authentication 31
Configuring port security 32
Configuring event logging 33
Configuring the system logs 33
Configuring the remote logs35
Setting application filtering 36
Using the Nortel Business Ethernet Switch 50 Series
Setting the system clock 37
Setting daylight saving time37
BES50 advanced features configuration41
Configuring Simple Network Management Protocol 42
Sending an inform message to an SNMP version 2 host 42
Sending an inform message to an SNMP version 3 host 42
Setting community access strings 43
Specifying trap managers and trap types 43
Enabling SNMP service 46
Configuring SNMP version 3 management access 46
Setting the local engine ID46
Setting a remote engine ID 47
Setting SNMP version 3 views 48
Configuring SNMP version 3 users 49
Changing the assigned group for an SNMP version 3 user 50
Configuring remote SNMP version 3 users 51
Creating SNMP version 3 groups 52
Configuring ports and trunks55
Configuring interface connections 55
Creating trunk groups 56
Configuring a static trunk57
Enabling LACP on selected ports 58
Configuring LACP parameters 59
Setting broadcast storm thresholds 60
Configuring port mirroring 61
Configuring rate limits 62
Setting Power over Ethernet 63
Setting the switch power budget 63
Configuring port PoE power priorities64
Configuring Spanning Tree Algorithm65
Configuring STA switch settings (global settings) 65
Configuring STA settings for interfaces 67
Configuring IEEE 802.1Q VLANs 69
Assigning ports to VLANs 69
Enabling or disabling GVRP (global setting) 70
Setting up VLANs 70
Adding static members to VLANs (VLAN index)71
Adding static members to VLANs (port index) 72
Configuring VLAN behavior for interfaces73
Link Layer Discovery Protocol (LLDP) configuration 75
Configuring the LLDP 75
Configuring the LLDP interfaces 76
Using the Nortel Business Ethernet Switch 50 Series
This guide provides information about administering and configuring the
Nortel Business Ethernet Switch 50 (BES50) Series devices. This guide
describes the features of the following Nortel switches:
•
Nortel Business Ethernet Switch BES50GE-12T PWR Gigabit Ethernet
Switch
•
Nortel Business Ethernet Switch BES50GE-24T PWR Gigabit Ethernet
Switch
•
Nortel Business Ethernet Switch BES50FE-12T PWR Fast Ethernet
Switch
•
Nortel Business Ethernet Switch BES50FE-24T PWR Fast Ethernet
Switch
Before you begin
This guide is intended for network administrators who have the following
background:
9
•
basic knowledge of networks, Ethernet bridging, and IP routing
•
familiarity with networking concepts and terminology
•
basic knowledge of network topologies
Text conventions
This guide uses the following text conventions.
angle brackets (< >)Indicate that you choose the text to enter based on the description
inside the brackets. Do not type the brackets when you enter the
command. Example: If the command syntax is
ping <ip address>
you enter
ping 192.168.1.128
bold body text
Using the Nortel Business Ethernet Switch 50 Series
Indicates objects such as window names, dialog box names, and
icons, as well as user interface objects such as buttons, tabs,
and menu items.
SMB
NN47924-301 01.01 Standard
1.00 October 2006
10 Preface
braces ({})Indicate required elements in syntax descriptions where there is
more than one option. You must choose only one of the options.
Do not type the braces when you enter the command. Example:
If the command syntax is
show ip {alerts|routes}
you must enter either
show ip alerts
or
show ip routes
but not both.
brackets ([ ])Indicate optional elements in syntax descriptions. Do not type
the brackets when you enter the command. Example: If the
command syntax is
show ip interfaces [-alerts]
you can enter either
show ip interfaces
or
show ip interfaces -alerts
italic textIndicates variables in command syntax descriptions. Also
indicates new terms and book titles. Where a variable is two
or more words, the words are connected by an underscore.
Example: If the command syntax is
show at
<valid_route>, valid_route is one variable and you substitute one
value for it.
plain Courier text
Indicates command syntax and system output, for example,
prompts and system messages. Example:
Set Trap Monitor Filters
separator ( > )Shows menu paths.
Example: Protocols > IP identifies the IP command on the
Protocols menu.
vertical line ( | )Separates choices for command keywords and arguments. Enter
only one of the choices. Do not type the vertical line when you
enter the command. Example:
If the command syntax is
show ip {alerts|routes}
you enter either
show ip alerts
or
showiproutes
but not both.
Using the Nortel Business Ethernet Switch 50 Series
For more information about using the BES50 Series switch, see the
Quick Installation Guide for the Nortel Business Ethernet Switch 50
(NN47924-300).
You can print selected technical manuals and release notes for free, directly
from the Internet. Go to www.nortel.com. Find the product for which you
need documentation. Then locate the specific category and model or
version for your hardware or software product. Use Adobe Reader to open
the manuals and release notes, search for the sections you need, and print
them on most standard printers. Go to www.adobe.com to download a
free copy of Adobe Reader.
How to get help
If you purchased a service contract for your Nortel product from a distributor
or authorized reseller, contact the technical support staff for that distributor
or reseller for assistance.
If you purchased a Nortel serviceprogram,contact Nortel Technical Support.
The following information is available online:
How to get help11
•
contact information for Nortel Technical Support
•
information about the Nortel Technical Solutions Centers
•
information about the Express Routing Code (ERC) for your product
An ERC is available for many Nortel products and services. When you use
an ERC, your call is routed to a technical support person who specializes in
supporting that product or service. You can locate the ERC for your product
or service online.
The Nortel Support Web page is here:
www.nortel.com
Using the Nortel Business Ethernet Switch 50 Series
The BES50FE-12/24T PWR and BES50GE-12/24T PWR are high
performance Web-managed switches that deliver performance and
control to your network. The BES50FE-12/24T PWR provides 12/24
full-duplex 10/100BASE-TX ports and the BES50GE-12/24T PWR provides
12/24 full-duplex 1000BASE-T ports that significantly improve network
performance and boost throughput using switch features configured through
the Web-based user interface. With 24/48FE and 24/48GE of throughput
bandwidth, these switches provide the quickest solution to meeting the
growing demands on your network.
Navigation
•
To set up the Web-based user interface for use with the BES50, see
"Using the Web-based user interface" (page 17).
•
To set up the basic BES50 management features, see "BES50 basic
configuration" (page 27).
15
•
To set up advanced BES50 management features, see "BES50
advanced features configuration" (page 41).
•
To reset the system, to change the IP address, to view system details, or
to manage BES50 firmware, see "BES50 administration" (page 95).
•
For installation options other than those coveredby the Quick Installation
Guide for the Nortel Business Ethernet Switch 50 (NN47924-300), see
"BES50 installation options" (page 123).
•To learn about the basic BES50 management features, see "BES50
fundamentals" (page 125).
•
To learn about the advanced BES50 management features, see "BES50
advanced features fundamentals" (page 139).
•
For system defaults, specifications, compliances, and other reference
information related to the BES50, see "BES50 reference information"
(page 155).
Using the Nortel Business Ethernet Switch 50 Series
Use the information in this chapter to understand how to use the Web-based
user interfaceto view and configure information about the Business Ethernet
Switch (BES) 50 Series switch.
Prerequisites
•
To use the Web-based user interface, you need the following items:
— a computer connected to a network port that is a member of the
management Virtual Local Area Network (VLAN)
— Microsoft Internet Explorer 5.5 or later installed on the administration
computer
•
Prior to accessing the switch from a Web browser, perform the following
tasks:
— "Setting up the Web-based user interface" (page 18).
17
— If required, configure the switch with a valid IP address, subnet mask,
and default gateway. (Default: 192.168.1.128/255.255.255.0/0.0.0.0)
See "Initial configuration" (page 22).
— Set a new password by using the Web-based user interface.
Web-based user interface access is password controlled. (Default
user name: nnadmin;default password : PlsChgMe!) See "Changing
the administrator password" (page 23).
ATTENTION
The Web pages of the Web-based user interface can load at different speeds
depending on which Web browser you use.
ATTENTION
Web browser capabilities, such as page bookmarking, refresh, and page forward
and page back, function as they would in any other Web site. However, these
capabilities do not enhance the functionality of the Web-based user interface.
Nortel recommends that you use only the navigation tools provided in the
management interface.
Using the Nortel Business Ethernet Switch 50 Series
"Setting up the Web-based user interface" (page 18)
•
"Logging on to the Web-based user interface" (page 19)
•
"Logging off from the Web-based user interface" (page 19)
•
"Navigating the Web-based user interface" (page 20)
•
"Initial configuration" (page 22)
•
"Changing the administrator password" (page 23)
•
"Adding system information" (page 24)
•
"Setting the IP address" (page 24)
Setting up the Web-based user interface
Nortel recommends that you follow the procedures in this section regarding
Web-based user interface prerequisites before you use the management
features of your switch for the first time.
Procedure steps
StepAction
1
Check that Java Runtime Environment (JRE) version 1.5.0_07-b03
or later is installed on your PC. Download the latest version from
www.java.com if required.
The menu on left side of the Web-based user interface may not appear if
the Java Runtime Environment (JRE) is not installed.
2
Ensure the software programs on your PC enable Java script and
Java applets. Refer to the corresponding software documentation for
instructions. Software programs include but are not limited to:
•
Web browser
•firewall
•
software that controls Java behavior
The menu on left side of the Web-based user interface may not appear if
Java script and Java applets are disabled.
ATTENTION
ATTENTION
3
Ensure the software programs on your PC enable Web browser
pop-up dialog boxes. Refer to the corresponding software
Using the Nortel Business Ethernet Switch 50 Series
From the main menu, choose Administration > LogOut.
SMB
Using the Nortel Business Ethernet Switch 50 Series
NN47924-301 01.01 Standard
1.00 October 2006
20 Using the Web-based user interface
2
3
Click Logout. A confirmation dialog box appears.
Click Ok to log off or click Cancel to cancel the request.
—End—
Navigating the Web-based user interface
When your Web browser connects with the switch Web agent, the home
page appears as shown in the figure "Home page" (page 20). The home
page displays the main menu on the left side of the screen and System
Information on the right side. Use the main menu links to navigate to other
menus and display configuration parameters and statistics.
Home page
The figure shows the home page for the BES50GE-12T-PWR 12-port
switch. Other than the number of fixed ports, there are no major differences
between the 12-port and 24-port switch user interface.
Menu and management pages
Using the onboard Web agent, you can define system parameters, manage
and control the switch and all its ports, or monitor network conditions. The
menu is the same for all pages. It contains a list of six main headings. To
navigate the Web-based user interface menu, click a menu title and then
click one of its options. When you click an option, the corresponding page
appears.
Using the Nortel Business Ethernet Switch 50 Series
The first five headings provide options for viewing and configuring switch
parameters. The Support heading provides options to open the online
Help file. Tools are provided in the menu to assist you in navigating the
Web-based user interface.
Menu icons
IconDescription
This icon identifies a menu title. Click on this icon to display
its options.
This icon identifies a menu title option. Click on this icon to
display the corresponding page.
This icon is linked to an action, for example, logout, reset, or
reset to system defaults.
When you click a menu option, the corresponding management page
appears. A page is composed of one or more items.
Management page items
Navigating the Web-based user interface 21
ItemDescription
Tables and input formsGray cells are read-only.
White cells are input fields.
Check boxesEnable or disable a selection by selecting or clearing a check
box. When a check mark appears in the box, that selection is
enabled. You disable a selection by clearing the check box.
Icons and buttonsIcons and buttons perform an action concerning the displayed
page or the switch. Some pages include a button that opens
another page or updates the values shown on the current
page. Some pages include icons that initiate an action, such as
reformatting the current displayed data as a bar or pie chart.
Configuration options
Configurable parameters have a dialog box or a drop-down list. After you
make a configuration change on a page, be sure to click the Submit button
to confirm the new setting. The following table summarizes some of the
common configuration buttons that appear throughout the Web-based user
interface pages.
Web Page configuration buttons
ButtonAction
SubmitSaves specified values to the system.
ReloadRefreshes the page with current values.
Using the Nortel Business Ethernet Switch 50 Series
AddAdds the selected parameter to the configuration.
DeleteDeletes the selected parameter from the configuration.
RemoveRemoves the selected parameter from the configuration.
HelpLinks directly to Web Help.
ATTENTION
To ensure proper screen refresh, in the Internet Explorer menu, choose Tools >
Internet Options >General > Temporary Internet Files > Settings and select
Every visit to the page as the setting for Check for newer versions of stored
pages.
Initial configuration
Use this procedure to configure an IP address for the switch.
To use the BES50 management features, you must first configure the
BES50 with an IP address that is compatible with the network where it
is being installed. For simplicity, configure the IP address before you
permanently install the switch.
Procedure steps
StepAction
1
2
3
4
5
6
Place your switch close to the PC that you will use to configure it.
It helps if you can see the front panel of the switch while you work
on your PC.
Connect the Ethernet port of your PC to any port on the front panel
of your switch.
Insert the power adapter into the DC power socket in front of the
switch.
Plug the other end of the power adapter into a grounded, 3-pin
socket, AC power source.
Check the front-panel LEDs as the device powers on to confirm that
the PWR LED is green. If not, check that the power cable is correctly
plugged in.
If the PC IP address is different from the switch but is on the same
subnet, go to the next step. (For example, if the PC and switch both
have addresses that start with 192.168.1.x.) Otherwise, manually
set the IP address for the PC. See "Changing a PC IP address"
(page 96).
Using the Nortel Business Ethernet Switch 50 Series
From the main menu, choose Administration > Security > UserAccounts.
In the Change Password table, enter the user name for the account
whose password you want to change.
Type in the new password and retype the new password in the
Confirm Password field.
Click Change Password.
—End—
SMB
Using the Nortel Business Ethernet Switch 50 Series
NN47924-301 01.01 Standard
1.00 October 2006
24 Using the Web-based user interface
Adding system information
Use the System page to provide a descriptive name, location, and contact
information for the system.
Procedure steps
StepAction
1From the main menu, choose Configuration > System.
2
3
Type a contact name, system name, and system location information.
Click Submit.
—End—
Variable definitions
VariableValue
System DescriptionDescription of the switch.
System Object IDThis read-only parameter is the Management Information Base
(MIB) II object ID for the switch network management subsystem.
System Up TimeLength of time the management agent has been operational.
System ContactAdministrator responsible for the system.
System NameName assigned to the switch system.
LocationThe system location.
Setting the IP address
You can use an IP address to manage access to the switch over your
network. By default, the switch uses Dynamic Host Configuration Protocol
(DHCP) to assign IP settings to the management VLAN. (Default: VLAN
1.) If you want to manually configure IP settings, the IP address and subnet
mask must be compatible with your network. You may also need to establish
a default gateway between the switch and management stations that exist
on another network segment.
You can manually configure a specific IP address or direct the device to
obtain an address from a Bootstrap Protocol (BOOTP) or DHCP server.
Valid IP addresses consist of four decimal numbers, 0 to 255, separated by
periods. This is the only format that the Web-based user interface accepts.
Navigation
•
"Setting the IP address manually" (page 25)
•
"Setting the IP address automatically" (page 25)
Using the Nortel Business Ethernet Switch 50 Series
Use the IP Configuration page to set the IP address manually.
Procedure steps
StepAction
Setting the IP address25
1
2
From the main menu, choose Configuration > IP.
Select the VLAN through which the management station is attached.
3In the IP Address Mode box, select Static .
4
5
6
Type the IP address, subnet mask, and gateway IP address.
Click Submit.
To save the changes, close the Web-based user interface and start a
new session by using the new IP address.
Setting the IP address automatically
Use the IP Configuration page to set the IP address dynamically and to
request an IP address from the DHCP server.
Prerequisites
•
To configure the switch dynamically, the network must provide DHCP
or BOOTP services.
—End—
Procedure steps to set the IP address automatically
StepAction
1
2
3
4
From the main menu, choose Configuration > IP.
Select the VLAN through which the management station is attached.
In the IP Address Mode box, select DHCP or BOOTP.
Click Submit to save the setting and get the new IP address from
the DHCP server.
The switch broadcasts a request for IP configuration settings on
each power reset.
—End—
Using the Nortel Business Ethernet Switch 50 Series
Procedure steps to manually request an IP address from the DHCP
server
StepAction
1
2
From the main menu, choose Configuration > IP.
Click Restart DHCP to immediately request a new address.
The switch broadcasts a request for IP configuration settings on
each power reset.
—End—
Variable definitions
VariableValue
Management VLANID of the configured VLAN (Range: 1 to 4094).
This is the only VLAN through which you can gain management
access to the switch. By default, all ports on the switch
are members of VLAN 1, so a management station can be
connected to any port on the switch. However, if other VLANs
are configured and you change the management VLAN, you
can lose management access to the switch. In this case,
reconnect the management station to a port that is a member
of the management VLAN.
IP Address ModeSelect the configuration method.
If you select DHCP or BOOTP, the IP address does not function
until a reply is received from the server. The switch periodically
broadcasts a request for an IP address.
IP AddressFor Static IP Address Mode, enter the IP address of the
management access VLAN interface.
Valid IP addresses consist of four numbers, 0 to 255, separated
by periods. (Default: 192.168.1.128)
Subnet MaskFor Static IP Address Mode, enter the host address bits used
for routing to specific subnets. (Default: 255.255.255.0)
Gateway IP addressFor Static IP Address Mode, enter the IP address of the
gateway router between this device and management stations
that exist on other network segments. (Default: 0.0.0.0)
MAC AddressThe MAC address of this switch.
Restart DHCPRequests a new IP address from the DHCP server.
Using the Nortel Business Ethernet Switch 50 Series
Use the procedures in this chapter to manage the basic configuration of
your Business Ethernet Switch (BES) 50 Series switch.
Navigation
•
"Configuring initial settings by using the Quick Start feature" (page 27)
•
"Configuring user authentication " (page 29)
•
"Configuring event logging" (page 33)
•
"Setting application filtering" (page 36)
•
"Configuring the system clock" (page 36)
Configuring initial settings by using the Quick Start feature
Use the Quick Start page to quickly set up BES50 features including IP
configuration, Simple Network Management Protocol (SNMP) community,
and trap managers.
27
Procedure steps
StepAction
1
2Enter and select the data for IP configuration, SNMP community and
From the main menu, choose Administration > Quick Start.
trap managers as required by your site.
Click Submit.
—End—
SMB
Using the Nortel Business Ethernet Switch 50 Series
NN47924-301 01.01 Standard
1.00 October 2006
28 BES50 basic configuration
Variable definitions
VariableValue
IP Configuration
Management VLANID of the configured Virtual Local Area Network (VLAN) (Range:
1 to 4094).
This is the only VLAN through which you can gain management
access to the switch. By default, all ports on the switch
are members of VLAN 1, so a management station can be
connected to any port on the switch. However, if other VLANs are
configured and you change the management VLAN, you can lose
management access to the switch. In this case, reconnect the
management station to a port that is a member of the management
VLAN.
IP Address ModeSelect the configuration method.
If you select Dynamic Host Configuration Protocol (DHCP) or
Bootstrap Protocol (BOOTP), the IP address does not function
until a reply is received from the server. The switch periodically
broadcasts a request for an IP address.
IP AddressFor Static IP Address Mode, enter the IP address of the
management access VLAN interface.
Valid IP addresses consist of four numbers, 0 to 255, separated
by periods. (Default: 192.168.1.128)
Subnet MaskFor Static IP Address Mode, enter the host address bits used for
routing to specific subnets. (Default: 255.255.255.0)
Gateway IP addressFor Static IP Address Mode, enter the IP address of the gateway
router between this device and management stations that exist on
other network segments. (Default: 0.0.0.0)
MAC AddressThe MAC address of this switch.
SNMP Community:
SNMP Community CapabilityThe number of community strings supported by the BES50.
CurrentList of currently configured community strings.
Community StringType the name of the community string. The name acts like a
password and permits access to the SNMP protocol.
Default strings: PlsChgMe!RO (read-only access), PlsChgMe!RW
(read/write access). Range: 1 to 32 characters, case-sensitive.
Access ModeSelect the access rights for the community string:
•
Read-Only—Authorized management stations can only
retrieve Management Information Base (MIB) objects.
•
Read/Write—Authorized management stations can retrieve
and modify MIB objects.
Trap Managers:
Using the Nortel Business Ethernet Switch 50 Series
Trap Manager CapabilityThe number of trap managers supported by the BES50.
CurrentList of currently configured trap managers.
Trap Manager IP AddressType the IP address of a new management station to receive
notification messages.
Trap Manager Community
String
Specify a valid community string for the new trap manager entry.
(Range: 1 to 32 characters, case-sensitive)
ATTENTION
Nortel recommends that you define this string in the SNMP
Configuratino page for version 1 or 2c clients, or define a
corresponding user name in the SNMPv3 Users page for
version 3 clients.
Trap UDP PortThe UDP port number used by the trap manager.
Trap VersionSelect the SNMP version. (Default: 1)
Trap Security LevelFor trap version 3, specify one of the following security levels.
(Default: noAuthNoPriv)
•
noAuthNoPriv—SNMP communications do not use
authentication or encryption.
•
AuthNoPriv—SNMP communications use authentication, but
the data is not encrypted (only available for the SNMPv3
security model).
•
AuthPriv—SNMP communications use both authentication
and encryption (only available for the SNMPv3 security
model).
Trap InformFor version 2c and 3 hosts, notifications are sent as inform
messages. (Default: traps are used)
•Timeout—The number of seconds to wait for an
acknowledgment before resending an inform message.
(Range: 0 to 2147483647 centiseconds)
•
Retry times—The maximum number of times to resend an
inform message if the recipient does not acknowledge receipt.
(Range: 0 to 255)
Configuring user authentication
Use the procedures in this section to restrict management access to the
switch and to provide secure network access.
Navigation
•
Use "Configuring user accounts" (page 30) to manually configure
management access rights for users.
Using the Nortel Business Ethernet Switch 50 Series
Use "Configuring local and remote logon authentication" (page 31) to
remotely configure users access rights.
•
Use "Configuringportsecurity" (page 32) to Configure secure addresses
for individual ports.
•Use "Configuring 802.1X port authentication" (page 87) to control
access to specific ports.
Configuring user accounts
Use the User Accounts page to manually configure management access
rights for users.
The administrator has write access for all parameters governing the onboard
agent. Assign a new administrator password as soon as possible, and store
it in a safe place.
See "Changing the administrator password" (page 23).
Procedure steps
StepAction
1
From the main menu, choose Administration > Security > User
Accounts.
2To configure a new user account, enter the user name, access level,
and password. (The default administrator name is nnadmin with
the password PlsChgMe!.)
3
Click Add.
ATTENTION
To change the password for a specific user, enter the user name and new
password, and then confirm the password by entering it again.
—End—
Variable definitions
VariableValue
Account ListThe current list of user accounts and associated access levels.
(Default user name: nnadmin; default password: PlsChgMe!)
New Account
User NameEnter the name of the user. (Maximum length: 8 characters;
maximum number of users: 16)
Using the Nortel Business Ethernet Switch 50 Series