An Intel® product, when used in accordance with its associated documentation, is "Year 2000 Capable" when, upon
installation, it accurately stores, displays, processes, provides, and/or receives date data from, into, and between 1999
and 2000, and the twentieth and twenty-first centuries, including leap year calculations, provided that all other
technology used in combination with said product properly exchanges date data with it. Intel makes no representation
about individual components within the product should they be used independently from the product as a whole.
Intel Corporation assumes no responsibility for errors or omissions in this manual. Nor does Intel make any commitment to update the
information contained herein.
* Other product and corporate names may be trademarks of other companies and are used only for explanation and
to the owners’ benefit, without intent to infringe.
First Edition May 2000 A18558-001
470T-inside pages.p653/30/00, 10:40 AM1
CONTENTS
Intel® NetStructure
Contents
470T and 470F Switches User Guide
1.0 Setting up the Intel® NetStructure™
470T/F Switches1
Limitation de garantie du matériel (Europe) ...................... 117
Garanzia limitata sull’hardware (valida solo in Europa) ... 118
Beschränkte Hardwaregarantie (Nur für Europa) .............. 119
Garantía limitada de hardware (sólo para Europa) ............ 120
Index121
Intel Customer Support Last Page
iv
470-UG TOC.p653/31/00, 12:20 PM4
Setting up the Intel
®
1
NetStructure™
470T
and 470F Switches
Overview
This guide provides information on configuring and managing the Intel
NetStructure 470T and 470F Switches; it is organized into five chapters:
• Chapter 1 - Identifying and connecting the switch hardware.
• Chapter 2 - Using the switch in a LAN and advanced features such as
link aggregation and VLANs
• Chapter 3 - Using Intel Device View
• Chapter 4 - Using Web Device Manager
• Chapter 5 - Using Local Management
Management
Through the switch’s built-in management you can configure the device and
monitor network health. There are several methods for managing this
switch; you can use one method or any combination.
• SNMP management applications like Intel Device View, LANDesk®
Network Manager, or HP OpenView* are tailored for Intel products and
show a graphical representation of the device.
®
470T Ch1.p653/30/00, 5:49 PM1
• Onboard management allows control over the device without using an
SNMP application. The Web Device Manager provides a graphical
interface while Local Management is a menu-driven interface.
• Other SNMP-compliant applications can manage the 470 switches if
you compile the switch’s MIB files into that application.
1
CHAPTER 1
Status
LED
Intel® NetStructure
470T and 470F Switches User Guide
Switch Features
These are the major features of the 470 switches.
8-port 470F Switch (Product Code ES470F)
Link/Activity LEDs
Serial
Port
6+2-port 470T Switch (Product Code ES470T)
Status
LED
Speed LEDs
(top row)
Link/Activity LEDs
(bottom row)
Serial
Port
Back of 470 Switch
• 100/1000 Base-T auto-negotiates speed, duplex, and flow control—100Mbps or
1000Mbps
per port
• 470F supports 1000SX, 1000LX, and 1000LH GBICs
• Half- and full-duplex flow control
• Port settings can be configured manually through management
• Access menu-driven Local Management through the serial port or a Telnet session
• Access the graphical Web Device Manager through a Web browser
1000 Base-SX
Port
1000 Base-T
Port
MAC
Address
GBIC Port
AC Power
Plug
2
470T Ch1.p653/30/00, 5:49 PM2
CHAPTER 1
Setting Up the Intel
®
NetStructure
470T and 470F Switches
LEDs
The LEDs to the left of the ports indicate port status, individual port speed,
and port activity.
470F
Status
Link/Activity
470 Setup
NOTE
After the switch is first powered
on, the Status LED blinks green
once before the diagnostic mode
starts.
Status
470T
Speed
Link/Activity
LEDColorMeaning
StatusBlinking greenSwitch is performing diagnostics and booting.
(This lasts for 20–30 seconds.)
Solid greenDiagnostics have passed, the switch is ready.
Blinking greenDiagnostics have failed. (After the initial 20–
30 seconds, the LED will continue blinking if
diagnostics fail.)
Link/ActivitySolid greenDevice linked.
Blinking greenReceiving activity on that port.
OffNo link detected.
SpeedSolid greenDevice connected at 1000Mbps.
(470T only)OffDevice connected at 100Mbps.
470T Ch1.p653/30/00, 5:49 PM3
3
CHAPTER 1
Intel® NetStructure
470T and 470F Switches User Guide
Connection Guidelines
General
• The 470T switch is capable of auto-negotiating port duplex. It can
operate at half- or full-duplex at 100Mbps, and full duplex at
1000Mbps. The switch matches the highest possible speed of an
attached device.
• The 470F operates at full-duplex and at 1000Mbps.
Cabling
NOTE
If you do not use certified
Category 5 cables to connect
1000Mbps devices to the switch
you may get errors.
• Use Category 5 unshielded twisted-pair (CAT 5 UTP) cable when
connecting 1000Mbps or 100Mbps devices to the switch.
• Limit the cable length between devices to 100 meters (330 feet) for
copper wire.
• Use a straight-through cable to connect the switch to a server or
workstation.
• To connect to another switch or hub, use a crossover cable.
Straight-through vs. Crossover Cables
Switch ports are wired MDI-X, so use a straight-through cable to connect to
a workstation or server (network adapter cards are wired MDI). To connect
to another MDI-X port, use a crossover cable. Following pin arrangements
are for the switch’s Ethernet port and the typical RJ-45 connector. The
wiring diagrams illustrate how to wire a straight-through and crossover
cable for 100Mbps and 1000Mbps devices.
Straight-through UTP cable (100Mbps)
Switch (MDI-X) Adapter (MDI)
4
470T Ch1.p653/30/00, 5:49 PM4
CHAPTER 1
Setting Up the Intel
®
NetStructure
470T and 470F Switches
Crossover UTP cable (100Mbps)
Switch (MDI-X) Hub (MDI-X)
Straight-through UTP cable (1000Mbps)
Switch (MDI) Switch (MDI)
470 Setup
470T Ch1.p653/30/00, 5:49 PM5
5
CHAPTER 1
Intel® NetStructure
470T and 470F Switches User Guide
6
470T Ch1.p653/30/00, 5:49 PM6
Using the Intel
®
2
NetStructure™
470T
and 470F Switches
Overview
Chapter 2 is designed to provide an overview for using the Intel
NetStructure™ 470T and 470F Switches within a network. This chapter
covers switching features like flow control and spanning tree, and includes a
discussion of the more advanced features such as link aggregation and the
types of VLANs available on the switch.
If you are already familiar with switching technology you can skip ahead to
a particular section within the chapter. Here is a basic overview of the
chapter and the pages where you can find a particular topic:
• Sample Configuration page 8
• Flow Control page 9
• Spanning Tree Protocol page 9
• Tagged Frames page 10
• Priority Packet page 10
®
470T Ch2.p653/30/00, 5:54 PM7
• Link Aggregation page 11
• Virtual LANs page 12
• GVRP page 15
• IGMP Snooping page 16
7
CHAPTER 2
100Mbps
1000Mbps
Link Aggregation
group
Intel® NetStructure
470T and 470F Switches User Guide
Sample Configuration
The following example illustrates how the 470T and 470F switches can be
used in a network.
In this example, the 480T functions as the backbone of the network,
providing routing capability. The 470T and 470F switches provide gigabit
connectivity from the 480T to the 460T desktop switches via the 460s’
gigabit uplinks.
8
470T Ch2.p653/30/00, 5:54 PM8
CHAPTER 2
Using the Intel
®
NetStructure™
470T and 470F Switches
Flow Control
During times of heavy network activity, the switch’s port buffers can
receive too much traffic and fill up faster than the switch can send the
information. In cases like this, the switch tells the transmitting device to
wait so the information in the buffer can be sent. This traffic control
mechanism is called flow control.
The method of flow control depends on whether the port is set to full- or
half-duplex. If a port is operating at half-duplex, the switch sends a collision
(also called backpressure) which causes the transmitting device to wait. If
the port operates at full-duplex, the switch sends out an IEEE 802.3x
PAUSE frame. You can enable or disable flow control for each port on the
470 switches.
Spanning Tree Protocol
Spanning Tree Protocol, as referenced in the IEEE 802.1D specification, is a
protocol designed to prevent any loops within the network topology. A loop
can occur if there is more than one path for information to travel between
devices. The Spanning Tree Protocol works by determining the “cost” of a
connection. For example, if two devices are connected by two links,
Spanning Tree uses the connection with the lowest cost and blocks the
second connection.
Using the 470
470T Ch2.p653/30/00, 5:54 PM9
Spanning Tree prevents loops by allowing only one active path between any
two network devices at a time. However, you can also use this protocol to
establish redundant links between devices which can take over in the event
the primary link fails.
Backup Path from Client A to Server B:
Switch A –> Switch B –> Switch C
Primary Path from Client A to Server B: Switch A –> Switch C
In this example, Client A can communicate with Server B over two different
paths. The primary path is Path 1 because the cost of the connection between
switches A and C is lower than the cost between switches A, B and C. If the
primary path fails, then traffic is automatically sent over the backup path.
9
CHAPTER 2
Intel® NetStructure
470T and 470F Switches User Guide
Tagged Frames
The 802.1D (1998 Edition) and 802.1Q specifications published by the
IEEE (Institute of Electrical and Electronic Engineers) extended Ethernet
functionality to add tag information to Ethernet frames and propagate these
tagged frames between bridges. The tag can carry priority information,
VLAN information, or both and allows bridges to intelligently direct traffic
across the network.
Some devices don’t recognize the tagged Ethernet frames. These devices see
a frame that is too big, and then discard it. When operating 802.1Q (tagbased) VLANs, there is a way to configure the switch to work with these
untagged devices. For more information see “How to configure 802.1Q
VLANs” in Chapter 5.
Priority Packet
The IEEE 802.1D (1998 Edition) specification incorporates IEEE 802.1p
and defines information in the frame tag to indicate a priority level. When
these tagged packets are sent out on the network, the higher priority packets
are transferred first. Priority packet tagging (also known as Traffic Class
Expediting) is usually set on the LAN adapter in a PC or switch and works
with other elements of the network (switches, routers) to deliver packets
based on priority. The priority level can range from 0 (low) to 7 (high).
10
470T Ch2.p653/30/00, 5:54 PM10
The 470 switches can read the priority tags and forward traffic on a per port
basis. The switches have two priority queues per port and queue the packet
based on its priority level. For example, when a packet comes into a switch
with a high priority tag, the switch inserts the packet in its high-priority
queue.
Even though there are eight priority levels, the 470 switches can only put a
packet into one of the two queues. The switch maps levels 0-3 to the low
queue and levels 4-7 to the high queue. If a packet is untagged, the switch
can be set to use either the high or low queue for that port. The
470 switches preserve the priority level of the packet.
CHAPTER 2
Using the Intel
®
NetStructure™
470T and 470F Switches
Link Aggregation
Link aggregation allows you to combine from two to four (adjacent) ports
so that they function as a single high-speed link. For example, link
aggregation is useful when making connections between switches or
connecting servers to the switch.
Link aggregation, sometimes known as port trunking, is used to increase the
bandwidth to some devices. Link aggregation can also provide a redundant
link for fault tolerance. If one link in the aggregation fails, the switch
balances the traffic among the remaining links.
To aggregate ports, you must link an “anchor” port with an adjacent port.
The 470 switches support up to four link aggregation groups (anchor ports
1,3, 5, or 7). All aggregated ports must be the same speed.
Using the 470
Guidelines
• The switch treats aggregated links as a single port. This includes
spanning tree and VLAN configurations.
• For the 470F: Anchor ports 1, 3, and 5 can each have up to four
aggregated ports; anchor port 7 can have two.
• For the 470T: Anchor ports 1 and 3 can each have up to four aggregated
ports; anchor ports 5 and 7 can each have two.
• All ports share the same settings as the anchor port. You can change
anchor port settings, but you cannot configure other ports in the link.
• When a port is configured as a member of an aggregated link, it adopts
the configuration of the anchor port. When a port is no longer a member
of an aggregated link, the configuration is reset to the default settings
(auto-negotiate speed/duplex, flow control enabled).
• If a port is part of an aggregated link, it cannot be configured as the
target port for a port mirror. However, a port in an aggregated link can
serve as the source port for a port mirror.
• When connecting to another switch, connect anchor port to anchor port,
and member port to member port.
11
470T Ch2.p653/30/00, 5:54 PM11
CHAPTER 2
Intel® NetStructure
470T and 470F Switches User Guide
Virtual LANs
A Virtual LAN is a logical network grouping that allows you to isolate
network traffic so members of the VLAN receive traffic only from other
members. Creating a VLAN is the virtual equivalent of physically moving a
group of devices to a separate switch (creating a Layer 2 broadcast domain).
The advantage of VLANs is that you can reduce broadcast traffic for the
entire switch, and increase security, without changing the wiring of your
network.
The 470 switches support two types of VLANs:
• Port-based
• Tag-based (IEEE 802.1Q)
Port-based VLANs
This is the simplest and most common form of VLAN. In a port-based
VLAN, the system administrator assigns the switch’s ports to a specific
VLAN. For example, the system administrator can designate ports 1, 2, and
3 as part of the engineering VLAN and ports 5, 6, 7, and 8 as part of the
marketing VLAN. The advantage of port-based VLANs is that they are easy
to configure and all changes happen at the switch so they are transparent to
the users. The 470 switches support a maximum of four port-based VLANs.
A port can belong to only one VLAN at a time.
12
470T Ch2.p653/30/00, 5:55 PM12
If a user changes location, the system administrator reassigns the port to the
new VLAN. Another advantage is if a switch (or hub) is connected to a port
that is part of a VLAN, all devices connected to the switch are also part of
the VLAN. You cannot exclude an individual device on that switch from
becoming part of the VLAN.
CHAPTER 2
Using the Intel
®
NetStructure™
470T and 470F Switches
IEEE 802.1Q (tag)-based VLANs
The other type of VLAN supported by the 470 switches is based on the
IEEE 802.1Q specification. The specification provides a uniform way for
creating VLANs within a network and allows the creation of a VLAN that
can also span across the network. Until the release of the IEEE 802.1Q,
VLAN implementation had been vendor-specific, so it was not possible to
create a VLAN across devices from different vendors.
The 802.1Q VLAN works by using a tag added to the Ethernet frames. The
tag contains a VLAN Identifier (VID) that identifies the frame as belonging
to a specific VLAN. These tags allow switches that support the 802.1Q
specification to segregate traffic between devices and communicate a
device’s VLAN association across switches.
There are multiple advantages to implementing 802.1Q VLANs. First, it
helps to contain broadcast and multicast traffic across the switch thus
improving performance. Second, ports can belong to more than one VLAN.
Third, VLANs can span multiple switches that support the 802.1Q
specification. Finally, it can provide security and improve performance by
logically isolating users and grouping them together.
Using the 470
470T Ch2.p653/30/00, 5:55 PM13
A logical grouping may be mapped to a workgroup. For example, you can
create a VLAN that groups all the users from the engineering department. A
benefit of this logical grouping is that it improves performance by reducing
traffic that belongs to a different logical group (i.e. marketing), improves
security (engineering can’t see marketing), and eases moves since the user
doesn’t have to be physically located in the same group to participate in the
VLAN.
13
CHAPTER 2
Intel® NetStructure
470T and 470F Switches User Guide
Spanning Tree and VLANs
The 470 switches support the Spanning Tree Protocol across the entire
switch, not per VLAN. If a loop occurs in a VLAN the port is disabled and
all VLAN traffic over that port is blocked.
A good example of this is seen below. Both Switch 1 and Switch 2 have two
port-based VLANs configured. Crossover cables connect the ENG_VLAN
on Switch 1 to ENG_VLAN on and Switch 2. Crossover cables also connect
the MRKT_VLAN on Switch 1 to the MRKT_VLAN on Switch 2. When
Spanning Tree is enabled, the redundant link between the MRKT_VLANs is
blocked and those VLANs can no longer communicate.
14
470T Ch2.p653/30/00, 5:55 PM14
CHAPTER 2
Using the Intel
®
NetStructure™
470T and 470F Switches
GARP VLAN Registration Protocol (GVRP)
Since IEEE 802.1Q VLANs can span across the network, it poses a
challenge for network administrators to manage changes to the VLAN. The
GARP VLAN Registration Protocol (GVRP) provides a dynamic
mechanism for switches to share topology information and manage changes
with other switches. This prevents the network administrator from manually
propagating VLAN configuration information across switches.
GARP (Generic Attribute Registration Protocol) is defined by the IEEE
802.1D (1998 Edition) specification and is the mechanism used by switches
and end nodes (servers, PCs, etc.) to propagate configuration across the
network domain. GVRP uses GARP as a foundation to propagate VLAN
configuration to other switches. Devices that support GVRP transmit their
updates to a known multicast address that all GVRP-capable devices
monitor for information updates.
Sending GVRP messages between switches accomplishes the following
tasks:
• Dynamically adds or removes a port from participating in a VLAN
• Sends updates about the switch’s own VLAN configuration to
neighboring GVRP-capable devices.
• Integrates dynamic and static VLANs configurations within the same
switch. Static VLAN configurations are created by the user on the
switch for devices that don’t support GVRP.
It’s important to remember that dynamically created VLANs are not saved
in the switch’s memory. If the device that is sending out the GVRP updates
is removed, then the dynamic VLAN is removed.
When the switch is running 802.1Q VLANs Spanning Tree Protocol is
enabled for GVRP to work properly.
Using the 470
470T Ch2.p653/30/00, 5:55 PM15
15
CHAPTER 2
Intel® NetStructure
470T and 470F Switches User Guide
Internet Group Multicast Protocol (IGMP)
Under normal circumstances, multicast traffic is broadcast by the switch to
all ports. For multicast traffic based on TCP/IP using the IGMP protocol,
the switch can optimize the broadcasting of multicast traffic by forwarding
multicast traffic only to ports that require it.
IGMP Snooping is a feature that allows the switch to forward multicast
traffic intelligently. The switch “snoops” the IGMP query and report
messages and forwards traffic only to the ports that request the multicast
traffic. This prevents the switch from broadcasting the traffic to all ports
and possibly affecting network performance.
IGMP Snooping requires a router that learns about the presence of
multicast groups on its subnets and keeps track of group membership.
16
470T Ch2.p653/30/00, 5:55 PM16
Using Intel® Device
3
View 2.1
Overview
Intel® Device View allows you to manage Intel NetStructure™ 470T and
470F switches and other supported Intel networking devices on your
network.
Intel Device View provides these features:
• The ability to configure new network devices
• Graphical device manager for Intel switches, hubs, and routers
• Autodiscovery, which finds supported Intel devices on the network
• The Device Tree, which shows all the supported devices detected
on your network
• Remote Network Monitoring (RMON)
• Web or Windows* platform
• Plug-in to HP OpenView*, IBM Tivoli NetView*, and Intel
LANDesk
®
Network Manager
470T Ch3.p653/30/00, 9:04 AM17
• Other useful tools such as a TFTP server
17
CHAPTER 3
Intel® NetStructure™
470T and 470F Switches User Guide
Installing Intel Device View
Before you install Intel Device View, make sure your PC meets the system
requirements in the Intel
®
Device View User Guide, which is included on
the Intel Device View CD-ROM.
To install Intel Device View
1 Insert the Intel Device View CD-ROM in your computer’s CD-ROM
drive. The Intel Device View installation screen appears. If it doesn’t
appear, run autoplay.exe from the CD-ROM.
18
470T Ch3.p653/30/00, 9:04 AM18
2 Choose the version of Intel Device View you want to install.
• To install Intel Device View for use on this PC only, click Install
for Windows.
• To install Intel Device View on a Web server, click Install for
Web. You can access the Device View server from any PC on your
network with Internet Explorer* 4.0x or later.
• To install Intel network device support for HP OpenView, IBM
Tivoli NetView, or Intel LANDesk Network Manager, click Installas Plug-in. This option is not available if you don’t have
OpenView, LANDesk Network Manager, or NetView installed on
the PC.
3 Follow the on-screen instructions in the installation program.
CHAPTER 3
NOTE
These are the requirements if you
want to use the Web version of
Device View :
Web browser
Internet Explorer 4.0 or later
Intel Device View 2.1
Starting Intel Device View
Install either the Windows or Web version of Intel Device View.
Windows version
From your desktop, click Start and then point to Programs > Intel Device
View > Intel Device View - Windows. Intel Device View’s main screen
appears.
Web version
•From your desktop, click Start and then point to Programs > Intel
Device View > Intel Device View - Web. Intel Device View’s main
screen appears.
•To view Intel Device View from another PC on your network, type the
following URL. In the example shown below, the URL is entered into
the Address field for Internet Explorer.
http://servername/devview/main.htm
where servername is the IP address or name of the server where Intel
Device View is installed.
Intel Device View’s main screen appears.
Device View 2.1
Web Server
IIS 2.0 or later
Peer Web Services*
Netscape Enterprise* Web
Server 3.01 or later
470T Ch3.p653/30/00, 9:04 AM19
19
CHAPTER 3
Intel® NetStructure™
470T and 470F Switches User Guide
Installing a New Device
After you’ve installed a new switch on your network, you can use Intel
Device View’s Device Install Wizard to configure it for management.
To install and configure a new switch for
management
1 Start Intel Device View. The Device Install Wizard appears. If it
doesn’t appear, click Install from the Device menu or double-click the
appropriate MAC address in the Device Tree under Unconfigured
Devices. (The MAC address is located on the rear of the switch.)
2 On the Device Install Wizard - Start screen, click Next.
3 On the Device Install Wizard - MAC Address screen, click the MAC
address of the new switch and then click Next.
20
470T Ch3.p653/30/00, 9:04 AM20
4 Follow the instructions in the wizard to assign an IP address and a name
to the switch.
CHAPTER 3
Intel Device View 2.1
Using the Device Tree
After you start Intel Device View, the Device Discovery service begins
searching for supported Intel network devices on your network. As it
discovers devices, the Device Discovery service adds an icon for each
device to the Device Tree on the left side of the screen.
Different states of the 470 switches are represented by unique icons in the
Device Tree.
Device Tree icons
Device Tree root
Device View 2.1
Subnet
Intel Switch (if non-responding the icon is red)
Unconfigured Intel Switch
Group of Intel Switches
Intel Router
Intel Switch (Layer 3 capable)
Intel Stackable Hub
The Device Tree works much like Windows Explorer. To expand the root or
a subnet, click the (+) next to the icon. To collapse the view, click the (-)
next to the icon. Double-click a device icon to view the device image.
21
470T Ch3.p653/30/00, 9:04 AM21
CHAPTER 3
Intel® NetStructure™
470T and 470F Switches User Guide
To add a device to the Device Tree
Use this procedure if the device does not automatically appear after
installation.
1 Right-click anywhere on the Device Tree.
2 On the menu that appears, click Add Device.
3 In the Add Device dialog box, type the IP address of the switch you
want to add.
4 Fill in the other fields, as appropriate.
5 Click OK.
The new switch’s icon appears in the Device Tree.
To refresh the Device Tree
1 Right-click anywhere on the Device Tree.
2 On the menu that appears, click Refresh.
Refreshing the Device Tree updates it to show any newly discovered
devices and changes in device status.
To delete a device from the Device Tree
1 Right-click the device you want to remove from the Device Tree.
2 On the menu that appears, click Delete.
Deleting a device from the Device Tree does not affect the actual device.
22
470T Ch3.p653/30/00, 9:04 AM22
To find a device in the Device Tree
1 On the Device Tree, right-click anywhere.
2 On the menu that appears, click Find.
3 In the Find Device dialog box, type the IP address of the device you
want to find in the tree.
4 Click OK.
The device’s icon is highlighted in the Device Tree.
Losing contact with a device
If Intel Device View loses contact with a switch, it replaces the switch icon
with the non-responding switch icon, which is red.
CHAPTER 3
Intel Device View 2.1
If the non-responding switch icon appears, you cannot manage the device in
Intel Device View. If you’re unable to ping the device or start a Telnet
session, try accessing the switch’s Local Management.
Managing a Switch
To manage a 470T or 470F switch, double-click the switch icon in the
Device Tree. In the example shown below, the switch has been assigned an
IP address of 124.123.122.3.
The 470 Web Device Manager appears in the Intel Device View window.
Use the Web Device Manager as described in Chapter 4.
Device View 2.1
470T Ch3.p653/30/00, 9:04 AM23
For complete information on using Intel Device View, refer to the
program’s online help or see the User Guide on the Intel Device View
installation CD-ROM.
23
CHAPTER 3
Intel® NetStructure™
470T and 470F Switches User Guide
Viewing RMON information
The remote monitoring (RMON) specification extends SNMP functionality
to look at traffic patterns on the network instead of merely looking at the
traffic for an individual device. The following RMON groups are supported:
• Group 1 (Statistics): Monitors utilization and error statistics for each
network segment (100Mbps or 1000Mbps).
• Group 2 (History): Records periodic statistical samples from variables
available in the statistics group.
• Group 3 (Alarms): Allows you to set a sampling interval and alarm
thresholds for statistics. When a threshold is passed, the switch creates
an event. For example, you might set an alarm if switch utilization
exceeds 30%.
• Group 9 (Events): Provides notification and tells the switch what to do
when an event occurs on the network. Events can send a trap to a
receiving station or place an entry in the log table, or both. For example,
when the switch experiences an RMON Event, it sends out an alarm.
The switch also keeps a log that shows a list of the RMON Events and
RMON Alarms that have occurred on the switch.
24
To view RMON statistics
1 In the Device Tree, right-click the switch’s icon, then point to RMON.
2 Click the RMON option you want to view:
You can also access RMON features by using LANDesk Network Manager,
or an SNMP application that supports RMON such as OpenView. For more
information about using RMON to monitor the switch, refer to the Intel
Device View Help.
470T Ch3.p653/30/00, 9:04 AM24
Using the Web
4
Device Manager
The Web Device Manager, built into the Intel® NetStructure™ 470T and
470F Switches, lets you use a Web browser to manage and monitor the
switch. For example, you can use the Web Device Manager to configure the
switch or individual ports, or to monitor traffic statistics and utilization.
470T Ch4.p653/31/00, 9:15 AM25
For additional information about using this interface, see the Web Device
Manager Help.
25
CHAPTER 4
Intel® NetStructure™ 470T and 470F Switches User Guide
Accessing the Web Device Manager
1 In the Location or Address field of your Web browser type the IP
address of the switch. For example, to use the default IP address of the
switch, type 192.0.2.1 in the Location or Address field and then press
Enter.
NOTE
The default IP address assigned
to the switch is 192.0.2.1. To
access the switch with the
default IP address, your
workstation must be on the
192.0.2.0 subnet.
Alternatively, you can connect to
the switch using Local
Management and set an IP
address that is on your network.
Then you can access the Web
Device Manager using the new
IP address.
2 When prompted, type your user name and password. By default, no
user name or password is assigned. If you set a user name and password
using Local Management, enter those here.
3 Click OK. The Web Device Manager screen appears in your Web
browser.
26
470T Ch4.p653/31/00, 9:15 AM26
CHAPTER 4
Click a menu to view
available options.
Using the Web Device Manager
Navigating the Web Device Manager
1 On the left side of the Web Device Manager window, click a menu item
(such as Configure Device) to show the available options.
2 In the menu, click an option. The corresponding screen appears on the
right side of your Web browser window.
470T Ch4.p653/31/00, 9:15 AM27
Web Device Manager
3 To hide the options, click the menu item again.
27
CHAPTER 4
470F
Intel® NetStructure™ 470T and 470F Switches User Guide
Using Management Screens
After you select an option from the navigation menu, the corresponding
screen appears in the right side of the Web browser.
Switch faceplate graphic
A graphical representation of the switch’s faceplate appears at the top of the
screen.
28
470T
If the option you selected allows you to configure or monitor a specific port,
you can change to another port by clicking it on the faceplate graphic.
Port color on the faceplate graphic indicates the status of the port.
Port ColorMeaning
BluePort has a link at 1000Mbps.
GreenPort has a link at 100Mbps.
Magenta outlinePorts are in a link aggregation.
OrangePort is disabled.
GrayNo link.
Buttons
Each configuration screen includes four buttons on the bottom of the screen.
ButtonFunction
SubmitApplies the configuration settings on the current screen.
Note: If you do not save the settings to the switch’s flash
memory your changes will be lost when the switch is
rebooted.
ResetClears any changes you made on the current screen and
restores the currently applied settings.
DefaultApplies factory defaults for this screen’s settings. When
you log out, you can permanently save the new settings to
the switch. Otherwise, they are lost upon the next reboot.
HelpDisplays help for the current screen.
470T Ch4.p653/31/00, 9:16 AM28
CHAPTER 4
NOTE
If you change the flow control or
IP settings, you must reboot the
switch before the new settings
can take effect.
Using the Web Device Manager
Configuring the Switch’s IP Settings
Note: You must select Manual in the IP Assignment Method box before you
can change the IP settings.
1 Click the Configure Device menu and then click IP Settings. The IP
Settings screen appears on the right side of the Web Device Manager
window.
470T Ch4.p653/31/00, 9:16 AM29
2 To manually configure the IP settings, select Manual in the IP
Assignment Method box. Under “Change,” type the new IP address,
subnet mask, and default gateway. If you set up tag-based VLANs on
the switch, you can specify the VLAN where the switch’s SNMP
management agent will reside.
3 To apply the changes, click Submit.
4 Click Save and Reboot for the new settings to take effect. Rebooting the
switch temporarily interrupts network connectivity to the switch. Click
Reboot Later if you want to reboot the switch later. The new IP settings
will not take effect until the switch reboots.
29
Web Device Manager
CHAPTER 4
Intel® NetStructure™ 470T and 470F Switches User Guide
Configuring a Port
You can use the Web Device Manager to enable or disable a port, and to
change its speed, duplex, flow control, and priority settings.
To change port settings
1 Click the Configure Device menu and then click Port Settings. To
access the Port Settings screen for each port, click the port you want to
configure on the faceplate graphic.
NOTE
If you change the flow control or
IP settings, you must reboot the
switch before the new settings
can take effect.
30
470T Ch4.p653/31/00, 9:16 AM30
2 Click the options you want to change.
•Port State lets you enable or disable the port.
•Speed/Duplex lets you set port speed to Auto-Negotiate, 100Mbps,
or1000Mbps.
•Flow Control lets you enable or disable flow control.
•Priority (802.1P) lets you set the switch priority queue for packets
sent or received on this port.
3 Click Submit.
CHAPTER 4
NOTE
The accounts and passwords you
create with the Web Device
Manager are the same accounts
used to access Local
Management.
Using the Web Device Manager
Managing User Accounts
Create user accounts to give specific users read or write access to the switch
through the Web Device Manager and Local Management. You can create a
maximum of three accounts on the switch.
To create a user account
1 Click the Configure Management menu and then click User Accounts.
The first account you create must be an administrator.
2 Click Add.
470T Ch4.p653/31/00, 9:16 AM31
3 In the User Name box, type a username.
The username can be up to fifteen characters long and is case-sensitive.
4 In the Password box, type a password.
The password can be up to fifteen characters long and is case-sensitive.
Asterisks (*) appear on the screen as you type the password.
5 In the Confirm Password box, type the same password.
6 In the Access Level box, click an access level. An administrator can
view all settings and make configuration changes. A user can only view
settings.
7 Click Submit.
Web Device Manager
31
CHAPTER 4
Intel® NetStructure™ 470T and 470F Switches User Guide
To delete a user account
1 Click the Configure Management menu and then click User Accounts.
2 In the User Accounts screen, click the account you want to delete.
3 Click Delete.
If you delete the account you used to log in for this session, you can still use
that account until you log out. If you delete the only user account on the
switch, log in again using the default of no username and no password.
32
470T Ch4.p653/31/00, 9:16 AM32
CHAPTER 4
Using the Web Device Manager
Configuring VLANs
Virtual LANs, or VLANs, provide a way to create a logical network
grouping without regard to physical location of the network nodes.
For more information about VLANs, refer to “Virtual LANs” in Chapter 2.
There are two main steps to set up a VLAN with the Web Device Manager:
• Set the switch’s VLAN operation mode.
• Configure the type of VLAN you selected.
NOTE
You can only have one operation
mode (either port-based or tagbased) active on the switch at a
time.
To set the switch’s VLAN Operation Mode
1 Click the Configure VLAN menu and then click VLAN Operation
Mode.
2 From the Current VLAN mode box, click the type of VLAN to set up.
You can set the 470 switches to use port-based or tag-based VLANs.
See “Virtual LANs” in Chapter 2 for more information about VLANs.
Web Device Manager
3 Click Submit.
4 The switch will automatically reboot. The 470 switches must be
rebooted whenever you change their VLAN operation mode.
After the switch restarts, you can configure the type of VLAN that you
selected.
470T Ch4.p653/31/00, 9:16 AM33
33
CHAPTER 4
Intel® NetStructure™ 470T and 470F Switches User Guide
Port-based VLAN
You configure a port-based VLAN by first creating the VLAN and then
adding participating ports. The switch can support up to four port-based
VLANs. However a port can be a member of only one VLAN; port-based
VLANs cannot overlap.
To configure a port-based VLAN
1 Click the Configure VLAN menu and then click Port-based VLAN.
2 Click Add to create a new VLAN, or select a VLAN and click Edit to
change its configuration.
34
3 If you are creating a new VLAN, type a name in the VLAN name box.
4 In the Available Ports box, click to select a port to add to the VLAN
and click Add.
5 After you finish adding ports, click Submit.
CHAPTER 4
Using the Web Device Manager
Tag-based VLAN
You configure a tag-based VLAN by configuring port membership and
ingress/egress rules. It is important to note whether the devices in your
VLAN support 802.1Q VLAN tags. If some of your devices don’t support
tagging, additional configuration may be necessary.
To configure a tag-based (IEEE 802.1Q) VLAN
1 Create a VLAN and assign member ports.
• Click the Configure VLAN menu and then click Tag-based (IEEE
802.1Q) VLAN.
• From the main Tag-based VLAN page, click Add to create a new
VLAN. To modify an existing VLAN, click the VLAN name and
click Modify.
• If you are creating a new VLAN, type a name and VID (from 2 to
4094) to identify it.
Web Device Manager
• To configure membership of a port to a VLAN, click the port in the
Available ports box and click Add. To remove a port, click the port in
the Member ports box and click Remove.
• The switch supports a maximum of 12 IGMP Snooping sessions to
manage broadcast traffic. If you want the VLAN to be part of an
IGMP Snooping session, select the Enable IGMP Snooping check
box.
• After you finish adding ports, click Next.
35
CHAPTER 4
Intel® NetStructure™ 470T and 470F Switches User Guide
2. Configure ports for egress (outbound) tagging.
• Ensure that the VLAN Name field displays the name of the port you
are configuring.
• Select Tag or Untag for each of the VLANs ports, to determine
whether or not the system will remove (untag) tags before sending
traffic out of each port.
3 Configure ports for handling untagged traffic.
• From the main Tag-based VLAN page, click Port Settings.
• On the Port Settings screen you can set port-specific behaviors for
processing VLAN traffic. To configure a specific port, click it on the
faceplate graphic. To configure the same setting across all ports, click
Configure All Ports.
36
CHAPTER 4
Using the Web Device Manager
Options include:
• Default Port VID: Sets the PVID that will be assigned to untagged
traffic on a given port. For example, if port 7’s default PVID is 100,
all untagged packets on port 7 will belong to VLAN 100. The default
setting for all ports is VID 1.
• GVRP: Allows automatic VLAN configuration between the switch
and nodes.
• Ingress filtering: Allows frames belonging to a specific VLAN to be
forwarded if the port belongs to the same VLAN. Disabling this
setting will cause all frames to be forwarded, regardless of the port's
VLAN membership.
After you change the settings, click Submit.
Web Device Manager
37
CHAPTER 4
NOTE
When configuring link
aggregation between two 470
switches, you must connect
anchor port to anchor port, and
member port to member port.
NOTE
Intel® NetStructure™ 470T and 470F Switches User Guide
Link Aggregation
Link aggregation lets you group up to four consecutive ports into a single
dedicated connection. This feature can expand bandwidth between devices
on the network, such as another switch or a server. The 470 switches
support a maximum of four link aggregation groups.
The anchor port is the base port in a link aggregation, and it is the only port
with configurable settings in the aggregation. All member ports in an
aggregation take on the settings of the anchor port.
Only consecutive ports, starting from the anchor port, can be grouped in a
link aggregation. For example, ports 1, 2, and 3 are a valid link aggregation;
ports 2, 4, and 7 are not.
On the Web Device Manager’s switch faceplate graphic, a link aggregation
is shown with its ports outlined in magenta (pink).
To create a link aggregation
1 Click the Configure Device menu, then click Link Aggregation.
Connectivity is momentarily
interrupted when you apply
changes.
38
2 Choose the anchor port. Anchor ports are listed by number in the left
column.
3 From the Port Width box, click the total number of ports (including the
anchor port) to include in the link aggregation.
4 Type a name for the aggregation.
5 Click Enable to make the group active.
6 Click Submit.
CHAPTER 4
Using the Web Device Manager
Static MAC Addresses
The switch has a static MAC address table that stores all the MAC
addresses that it learns from the network. The switch uses this table for
forwarding traffic to specific ports, so it does not broadcast traffic to every
port.
There are two ways to add addresses to the MAC address table:
•The switch can learn addresses from the network and add them
dynamically. Dynamic entries remain in the table only while the
associated node is active, and they are deleted if the node is inactive for
longer than a certain period of time (age-out time).
•You can manually add MAC addresses to the table. These are called
static addresses, because they remain in the table until you remove
them, even if the associated node is inactive or removed from the
network. Performance and security issues are two reasons for adding
static addresses.
To add a static MAC address to the address table
1 Click the Configure Device menu, then click Forwarding and Filtering.
NOTE
To view the switch’s address
table, click the Monitor menu,
click Advanced, and then click
MAC Address Table.
2 Click Static MAC Addresses.
3 Click Add.
Web Device Manager
4 In the MAC address box, type the MAC address of a device on the
network. Do not include hyphens.
5 In the Port Number box, click a port number.
6 If port-based or tag-based (IEEE 802.1Q) VLANs are set up on the
switch, static MAC addresses are associated with specific VLANs.
Type the VLAN name (port-based VLANs) or VID (tag-based VLANs)
to associate with the MAC address.
7 Click Add.
39
CHAPTER 4
NOTE
These are the traps supported by
the switch:
• Power to the switch was
cycled or reset.
• Link, speed, or other status
changes on a port.
• Spanning Tree topology
changes.
• Authentication failure.
Intel® NetStructure™ 470T and 470F Switches User Guide
Configuring Community Strings and
Trap Receivers
A trap receiver is a computer on the network that is running an SNMP
management application and receives messages sent by the switch. For
example, the switch can send a trap to the trap receiver when it detects a
change in port speed.
To specify a trap receiver
1 Click the Configure Management menu and then click Community
Strings and Traps.
40
3 In the IP Address box, type the IP address of the computer you want to
use as a trap receiver. You can specify up to four trap receivers.
4 From the Status box, click Enabled.
5 In the Community String box, type the trap receiver’s SNMP
application community string.
6 Click Submit.
CHAPTER 4
Using the Web Device Manager
Monitoring Switch Activity
The Web Device Manager lets you view traffic, utilization, and error
statistics for the switch and for individual ports. For more information on
statistics, see “Port Traffic Statistics,” “Port Error Statistics,” and “Packet
Analysis” in Chapter 5.
To view port statistics
1 Click the Monitor menu and then click Port Statistics.
2 From the row of options below the page heading, click the option you
want to view:
•Traffic
•Utilization Graph
•Errors
•Packet Analysis
Web Device Manager
41
CHAPTER 4
Intel® NetStructure™ 470T and 470F Switches User Guide
Viewing/Changing Switch Information
You can view general information about the switch, such as its MAC
address, firmware version, name, location, and contact person. Some of
these fields can be updated, others are read-only.
To view and configure switch settings
1 Click the Configure Device menu and then click Switch Settings.
42
2 The Switch, Location, and Contact fields allow you to provide
additional information about the switch. You can type up to 40
characters in each field. After modifying the settings, click Submit.
CHAPTER 4
Using the Web Device Manager
Updating Switch Firmware
The Update Firmware screen sets up the switch to update its firmware from
a TFTP server. The actual firmware update occurs while the switch is
rebooting.
To update the switch’s firmware
1 Click the Reset and Update menu and then click Update Firmware.
2 Select a mode from the Update Mode box.
• If the switch uses a network connection for downloading the new
firmware file from a TFTP server, click Network.
• If the switch uses a SLIP out-of-band connection (for example, a
serial port) for downloading the new firmware file, click SLIP.
3 In the TFTP Server Address box, type the IP address of the server that
hosts the file.
4 From the Firmware Update box, click Enabled.
5 In the Firmware File Name box, type the name of the firmware file.
6 Click Submit.
The next time the switch reboots it downloads and installs the new firmware
during the boot process. If you want to view this process, you must use a
terminal program and connect to the switch through the console port.
Web Device Manager
43
CHAPTER 4
Intel® NetStructure™ 470T and 470F Switches User Guide
Saving Configuration Changes and
Logging Out
Each time you make configuration changes using the Web Device Manager,
the switch immediately uses the new settings. However, when you log out
of the Web Device Manager, you’ll be prompted to permanently save the
current configuration settings.
If you do not save the current configuration settings to the switch’s flash
memory, the settings are lost upon the next switch reboot.
To save changes and log out
1 Click Log Out from the menu.
44
2 Click Save Now to save the current configuration settings. The Web
browser window closes and you are successfully logged off of the Web
Device Manager.
If you click Do Not Save, all current configuration settings are lost the
next time the switch is rebooted.
Using Local
5
NOTE
You use the same user name and
password to log into Web Device
Manager and Local Management.
Management
Overview
Another way to configure the switch is through the Local Management
interface. Local Management provides the same functionality as the Web
Device Manager using a text-based interface.
Accessing Management
You can access Local Management in two different ways: by connecting
directly to the switch’s serial port, or through a Telnet session (using an
assigned IP address or the default: 192.0.2.1).
Using the serial port
1 Use the enclosed null modem cable to connect the serial port of your
PC to the serial port of the switch.
2 Start a terminal emulation program (such as HyperTerminal* in
By default, no username or password is assigned to the switch. Press
E twice to log on to the Local Manager. Usernames and passwords
can consist of any characters and can be up to fifteen characters in length.
Remember that usernames and passwords are also case-sensitive.
CHAPTER 5
Help text at the bottom of
the screen provides information on the selected
item.
Using Local Management
Local Management
Navigation
The console menus provide a basic interface for configuring switch options.
For navigation tips, see the text below the graphic.
Screen Legend
Use the W Z AS keys or the T and b keys to move between
screen fields.
<Manual>Angle brackets indicate a toggle field. Use the
z to toggle selections within the field. In this
example, the options change between Manual, DHCP,
and BOOTP.
[255.255.255.0] Brackets indicate an input field. Select the field with
the arrow keys and type the required information. By
default, Local Management is in overstrike mode,
which means it replaces existing characters as you
type.
SUBMITAny word in all caps is a button. Use the T key
or the W Z AS keys to select it and press E
to use it.
Intel® NetStructure™ 470T and 470F Switches User Guide
Main Menu (Top Screen)
Description
LOCATION
To return to the Main Menu at any
time, press c T.
The Main Menu is the starting point for all other Local Management
screens. Use the W Z arrow keys to select an option and press E to
display the screen.
Configure device: Accesses menus to assign an IP address to the switch,
change port settings, or configure advanced switch settings.
Configure management: Sets SNMP traps and trap monitoring stations,
administers user accounts, or updates the switch’s firmware.
Configure VLAN: Sets up and administers VLANs on the switch.
Monitoring: Accesses menus to monitor traffic and activity at the port or
switch level. These menus also provide information on network errors and
collisions.
Tools: Views the switch Trap/Event log, pings devices to check
connectivity, or saves the current switch configuration to an image file on a
server.
SAVE SETTINGS: Saves configuration changes to the switch’s flash
memory. Any changes not saved to memory are lost on the next reboot.
Switch Settings: Sets switch identification, location, and contact
information, and configures some advanced switch settings.
Spanning Tree Protocol: Configures Spanning Tree for the entire switch
or individual ports.
Forwarding and Filtering: Adds or removes entries, locks the switch’s
address table, enables IGMP snooping, and sets filters for specific MAC
addresses.
Port Mirroring: Sends a copy of data from one port to another for
monitoring and troubleshooting purposes.
Link Aggregation: Combines ports on the switch to increase bandwidth.
Broadcast Storm Control: Configures ports to drop excessive broadcast
traffic before it floods the network.
GBIC Port Settings (470T only): Enables and disables ports, configures
port speed, duplex, flow control, and priority.
49
CHAPTER 5
LOCATION
Main Menu
Configure Device
IP Settings
Intel® NetStructure™ 470T and 470F Switches User Guide
IP Settings
Description
Switch MAC address: Displays the unique hardware address assigned by
Intel.
Current settings: Displays the switch’s current IP configuration.
NOTE
The default IP address for the
switch is 192.0.2.1
New settings: Assigns a new IP configuration to the switch.
Assign IP: Indicates if the switch uses a BOOTP or DHCP server to
obtain an IP address dynamically, or if you assign an address manually.
IP address: Displays the IP configuration used by the switch. Use the
IP address shown here to access the switch through Telnet or a ping test.
Subnet mask: Matches the mask for other devices on the network.
Default gateway: Displays the IP address of the device that routes to
different networks—typically, a router or routing server. Set this option
to manage the switch remotely.
VLAN or VLAN ID (port-based or tag-based VLANs only): Specifies
a VLAN where the switch’s SNMP management agent will reside. This
option appears only when port-based and IEEE 802.1Q VLANs are
active on the switch.
SUBMIT: Submits the changes and returns you to the Configure Device
screen. You must save the changes to the switch’s flash memory (from the
Save Settings menu) and then reboot the switch for the new IP settings to
take effect.
CHAPTER 5
LOCATION
Main Menu
Configure Device
Port Settings
Using Local Management
Local Management
Port Settings
Description
Configure ports: Selects a range of ports to configure (press z).
State: Disables or enables ports (press z).
Speed/Duplex: Changes the speed and duplex of the port (press z).
You can set the port to auto-negotiate speed, or to 100Mbps or 1000Mbps
at half- or full-duplex. This field is view-only for the 470F.
Flow Ctrl (Control): Enables or disables flow control (press z).
This option is read-only if auto-negotiate is selected for Speed/Duplex.
Priority: Changes the settings (press z). The <Frame> setting reads
the packet’s 802.1p priority tag and handles it accordingly. The <Normal>
or <High > settings force the packet into one of two priority queues.
Forcing a packet into a queue does not retag the packet.
Link: Indicates the port’s current link status:
--: Indicates no device link or port is disabled.
100M/1000M: Indicates the port’s speed (470T only).
Full/Half: Indicates a device is connected at full- or half-duplex.
IEEE/BackP: Indicates the type of flow control, either IEEE PAUSE
frames or backpressure.
Partitioned: Indicates the port was disabled due to a partition error.
Source mirror/Target mirror: Indicates the port being mirrored and
where the data is being sent.
51
CHAPTER 5
LOCATION
Main Menu
Configure Device
Configure GBIC Ports
Intel® NetStructure™ 470T and 470F Switches User Guide
Configure GBIC Ports (470T only)
Description
Port 7- and 8-GBIC: Displays the type of GBIC installed on the switch.
State: Disables or enables ports (press z).
Speed/Duplex: The GBIC ports operate at 1000Mbps/full duplex only; this
Flow Ctrl (Control): Enables or disables flow control (press z).
Priority: Changes the settings (press z). The <Frame> setting reads
the packet’s 802.1 priority tag and handles it accordingly. The <Normal>
or <High > settings force the packet into one of two priority queues.
Forcing a packet into a queue does not retag the packet.
Link: Indicates the port’s current link status:
--: Indicates no device link or port is disabled.
1000M: Indicates the port’s speed.
Full: Indicates a device is connected at full-duplex.
IEEE/BackP: Indicates the type of flow control, either IEEE PAUSE
frames or backpressure.
Partitioned: Indicates port was disabled due to a partition error.
Source mirror/Target mirror: Indicates the port being mirrored and
where the data is being sent to.
CHAPTER 5
LOCATION
Main Menu
Configure Device
Switch Settings
Using Local Management
Local Management
Switch Settings
Description
Name: Assigns a name to the switch, up to 40 characters long.
Location: Assigns a location to the switch, up to 40 characters long.
Contact: Assigns a contact person or phone number to the switch, up to 40
characters long.
NOTE
Write down both the firmware
version and Boot PROM version
in case you need to contact Intel
Customer Support.
such as port auto-partition and Head of Line blocking.
53
CHAPTER 5
LOCATION
Main Menu
Configure Device
Switch Settings
Configure Advanced...
Intel® NetStructure™ 470T and 470F Switches User Guide
Configure Advanced Switch Settings
Description
Auto-partition capability on all ports: If this option is enabled, the
switch partitions the port when more than 61 collisions occur consecutively
while receiving data. The first time the switch receives a good packet it
then unpartitions the port. If a port is partitioned the switch can transmit
data over this port, but not receive data.
Head of Line (HOL) Blocking Prevention: If this option is enabled it
prevents the forwarding of data to a port that is blocked. Normally, when
the switch sends traffic out from a port, the data goes to the port’s transmit
queue and then is sent out. If the port’s transmit queue is already busy
trying to send out data then the switch will place the waiting traffic in the
buffer memory until the port is ready to send it out.
However, if the port’s transmit queue remains full, the switch will fill up
more of the buffer with traffic waiting to be sent on that port. HOL
blocking works on the assumption that it is better to drop the traffic waiting
in the buffer than to continue using more memory and impacting
performance across all the ports.
High-priority packet service ratio: This option lets you determine how
many high-priority packets are sent out by the switch before sending a lowpriority packet. For example, a ratio of 8 high:1 low means that the switch
will send out eight high-priority packets before sending out one lowpriority packet.
CHAPTER 5
LOCATION
Main Menu
Configure Device
Spanning Tree Protocol
Using Local Management
Local Management
Configure Spanning Tree Protocol
Description
The IEEE 802.1D Spanning Tree Protocol specification is designed to
prevent loops in a network by allowing only one active path between any
two network devices at a time.
Spanning Tree status: Enables or disables (press z) support for the
Spanning Tree Protocol, where the entire switch is a bridge for which you
can set spanning tree parameters. (Note: If you are running 802.1Q
VLANs, spanning tree must be enabled and is turned on automatically by
the switch.)
Topology changes: Displays the number of times the spanning tree has
changed its configuration.
Time since last change: Displays the elapsed time (since the last switch
reboot) since the spanning tree last changed its topology (the paths used to
get through the network).
Root MAC address, Root path cost, Root port: Display information used
by the root bridge in the same spanning tree as the switch.
Switch Priority: Determines priority. Type a number from 0 to 65535
(default is 32768). The device with the lowest number becomes the root
device (starting point for the spanning tree).
55
CHAPTER 5
Intel® NetStructure™ 470T and 470F Switches User Guide
Hello Time: Displays the time between transmissions of configuration
BPDUs (Bridge Protocol Data Units) when the switch is, or is attempting
to become, the root in the spanning tree. Type a number from 1 to 10
seconds (default is 2 seconds).
Max Age: Displays the maximum time that information from a
configuration BPDU is used by the switch before it is discarded. Type a
number from 6 to 40 seconds (default is 20 seconds).
Forward Delay: Displays the amount of time between port states when the
spanning tree is changing its status from blocking to forwarding. Type a
number from 4 to 30 seconds (default is 15 seconds).
CONFIGURE SPANNING TREE FOR PORTS: Takes you to the
screen where you can set Spanning Tree values for individual ports.
Cost: Forwards information to Spanning Tree, which determines alternate
routes in the network to forward traffic. Type a number from 1 to 65535
(default is 10). The higher the cost of a port, the lower the chance of this
port being used to forward traffic. When possible, assign a port a low cost
if it is connected to a fast network segment.
Priority: Sets the port’s priority in the Spanning Tree. Type a number from
0 to 65535. The higher the value, the lower the chance of this port being
used as the root port. If two ports on the switch have the same priority
value, the spanning tree uses the port with the lowest number. For example,
the spanning tree would choose port 1 over port 4 if they both had the same
priority setting. The default for this field is 128.
57
CHAPTER 5
LOCATION
Main Menu
Configure Device
Forwarding and Filtering
Intel® NetStructure™ 470T and 470F Switches User Guide
Forwarding and Filtering
Description
Lock address table: Determines if the table learns new MAC addresses
(press z). <Yes> prevents the switch from learning new MAC
addresses. Any existing addresses that the switch has learned remain in the
address table.
MAC address aging: Sets the time period (in seconds) at which the switch
scans its MAC address table to determine the age of entries.
Configure IGMP snooping: Sets Internet Group Management Protocols
(IGMP) options for multimedia applications, such as desktop video
conferencing, that use IP multicast addresses.
Configure static MAC addresses: Allows permanent mapping between a
network device and a port.
Configure port security: Configures the switch to only allow the
transmission of authorized traffic over a particular port(s).
Configure MAC address filtering: Allows the switch to drop traffic
based on MAC source or destination addresses.
Configure Ethernet multicast filtering: Blocks or forwards traffic over
each port for Ethernet (MAC-based) multicast groups.
CHAPTER 5
LOCATION
Main Menu
Configure Device
Forwarding and Filtering
IGMP Snooping
Using Local Management
Local Management
Configure IGMP Snooping
Description
IGMP Snooping (Internet Group Management Protocol) is a feature that
allows the switch to forward multicast traffic intelligently. The switch
“snoops” the IGMP query and report messages and forwards traffic only to
the ports that request the multicast traffic. This prevents the switch from
broadcasting the traffic to all ports and possibly affecting network
performance.
IGMP requires a router that learns about the presence of multicast groups
on its subnets and keeps track of group membership. It is important to
remember that multicasting is not connection oriented, so data is delivered
to the requesting hosts on a best-effort level of service.
VLAN Name (port-based or tag-based VLANs only): Displays the
VLAN for which IGMP snooping is enabled. You can also enable IGMP
snooping for a VLAN in the Configure VLAN section.
IGMP Snooping state: Enables or disables IGMP Snooping (press
z).
IGMP Snooping age-out timer: Indicates the amount of time (in seconds)
the switch waits to receive IGMP queries. The default time is 300 seconds.
A query allows the server to determine which network hosts are (or want to
be) part of the IP multicast group, and are configured and ready to receive
traffic for the given application.
59
CHAPTER 5
LOCATION
Main Menu
Configure Device
Forwarding and Filtering
Configure Permanent...
Intel® NetStructure™ 470T and 470F Switches User Guide
Configure Static MAC Addresses
Description
Static MAC addresses are MAC addresses that remain in the switch’s
address table, whether or not the device is physically connected to the
switch. After you define a static MAC address, it remains in the switch’s
address table until you remove it.
Enter MAC: Indicates the MAC address you want to permanently add to
the address table.
NOTE
If tag-based or port-based VLANs
are currently active, you must
assign each static MAC address to
a specific VLAN.
VLAN or VLAN ID: Indicates VLAN or VLAN ID. When VLANs are
active on the switch you can define static MAC addresses for each VLAN.
If port-based VLANs are active press z to select a VLAN. If tagbased VLANs are active, type the VLAN ID that the static MAC address
will be assigned.
Select Port: Selects a port on the switch to which the switch forwards
traffic (press z).
ADD/DELETE: Adds or removes a MAC address from the switch’s table.
CHAPTER 5
LOCATION
Main Menu
Configure Device
Forwarding and Filtering
Configure Port Security
NOTE
You must first configure port
security and then configure a
static MAC address.
If you locked the address table on
the Forwarding and Filtering
screen, you must return to the
screen and unlock the table
before making changes to the
Port Security screen.
Using Local Management
Local Management
Configure Port Security
Description
Port security prevents unauthorized access of a port by “securing” a list of
specific MAC addresses to a port. If the switch sees a MAC address that is
not on the secured list, it discards the packet.
To set port security from Local Management
1 From the Configure Device screen, select Forwarding and Filtering.
2 From this menu, select Configure Port Security.
3 Select a port you want to secure. Press z in the Learning field to
disable the port’s ability to learn new MAC addresses.
4 Press q to move up a level and select the Configure Static MAC
Addresses screen.
5 Define a list of MAC addresses and assign them to the same port you
secured in the Port Security screen.
To turn off port security
1 From the Configure Device screen, select Forwarding and Filtering.
Select Configure Port Security from this menu.
2 Select the port on which you want to disable security. Press z in
the Learning field to disable security and enable the port to learn new
MAC addresses.
Intel® NetStructure™ 470T and 470F Switches User Guide
Configure MAC Address Filtering
Description
MAC address filtering allows the switch to drop unwanted packets. The
switch will drop any packets when it sees the specified MAC address in
either the source address or destination address. For example, if your
network is congested because of high utilization from a specific MAC
address, you can filter all packets transmitted from that address and restore
network flow, while you troubleshoot the problem.
NOTE
If tag-based (IEEE 802.1Q) or
port-based VLANs are currently
active, you must assign each MAC
address filter to a specific VLAN.
Enter MAC: Indicates the MAC address you want to filter.
VLAN/VLAN ID: Indicates VLAN or VLAN ID. If VLANs are active on
the switch, you can set MAC address filtering on a per VLAN basis. For
port-based VLANs, press z to select the name of the VLAN. For
tag-based VLANs, type the VLAN ID.
ADD/DELETE: Adds or removes a MAC address from the switch’s table.
CHAPTER 5
LOCATION
Main Menu
Configure Device
Forwarding and Filtering
Configure Ethernet...
Using Local Management
Local Management
Configure Ethernet Multicast Filtering
Description
Ethernet multicast filters allow you to define which ports can receive
multicast traffic from a specific multicast MAC address.
VLAN/VLAN ID: Indicates VLAN or VLAN ID. If VLANs are active on
the switch you can set Ethernet Multicast filtering on a per VLAN basis.
For port-based VLANs, press z to select the name of VLAN. For
tag-based VLANs, type the VLAN ID in the Multicast address field.
NOTE
If tag-based (IEEE 802.1Q) or
port-based VLANs are currently
active, you must assign each
multicast filter to a specific VLAN.
1 On the Configure Ethernet Multicast Filter screen, use the arrow
keys to select an address from the list on the right side of the screen.
Press E.
2 Determine which ports can receive the multicast traffic by using
z to set Forward or Block for each port.
3 Select APPLY CHANGES and press E. This activates the
changes to the multicast filter and returns you to the previous screen.
CHAPTER 5
LOCATION
Main Menu
Configure Device
Port Mirroring
Using Local Management
Local Management
Port Mirroring
Description
Port mirroring is a useful diagnostic tool because it allows you to send a
copy of the good Ethernet frames transmitted or received on one port to
another port. On the second port you can attach a protocol analyzer to
capture and analyze the data without interfering with the client on the
original port.
NOTE
Do not mirror traffic to a target
port that is connected to a
network device other than a
protocol analyzer. The device’s
behavior may be unpredictable.
Source Port: Indicates the port whose traffic you want to mirror (pressz).
Target Port: Selects a port to receive the mirrored traffic (press z).
If you are using a protocol analyzer, connect it to this port.
State: Enables or disables port’s mirror (press z).
65
CHAPTER 5
LOCATION
Main Menu
Configure Device
Link Aggregation
Intel® NetStructure™ 470T and 470F Switches User Guide
Link Aggregation
Description
Link aggregation is a way of combining ports on the switch to increase the
available bandwidth and provide redundant links. All ports in the
aggregated link take on the characteristics of the anchor port. This means if
you set the anchor port to 1000Mbps full duplex (470T only), all the ports
aggregated to that anchor port will share the same setting. You can set a
maximum of four aggregated groups on the switch.
NOTE
All custom settings for a port
(including VLAN membership) are
lost when you add that port to a
link aggregation.
When configuring link aggregation between two 470 switches,
you must connect anchor port to
anchor port, and member port to
member port.
Anchor Port: Displays the first port in the link aggregation.
Width: Sets the total number of (consecutive) member ports in the
aggregated link (press z). The minimum number of ports for an
aggregated link is two, and the maximum is four. The link aggregation
width includes the anchor port.
Aggregation Group Name: Assigns a name to the aggregated links for
management or identification purposes.
Status: Enables or disables the aggregated link (press z).
CHAPTER 5
LOCATION
Main Menu
Configure Device
Broadcast Storm Control
Using Local Management
Local Management
Broadcast Storm Control
Description
This feature allows you to filter out broadcasts from faulty devices and
prevent them from degrading network performance.
Setting: Enables or disables broadcast storm control on each port (press
z).
Upper Threshold: Sets the threshold of broadcast traffic on a port (shown
as a percentage of the port’s total bandwidth) that activates broadcast storm
control. Type a value from 1-20%. The default value is 20%. When the
amount of broadcast traffic on the port exceeds the upper threshold, the
port drops all broadcast traffic. When broadcast traffic falls below the
threshold the switch automatically starts forwarding broadcast traffic again.
67
CHAPTER 5
LOCATION
Main Menu
Configure Management
Intel® NetStructure™ 470T and 470F Switches User Guide
Configure Management Menu
Description
Configure community strings and trap receivers: Assigns the switch’s
community strings and sets trap receiving stations.
Administer user accounts: Configures user accounts. You can add or
delete users, update passwords, and change a user’s access levels.
Update firmware and configuration files: Configures the switch’s
internal software and specifies the location of configuration files.
Reset and console options: Reboots the switch or changes the settings on
the serial port. You can also use this menu to set the switch back to its
factory defaults.
CHAPTER 5
LOCATION
Main Menu
Configure Management
Community Strings and . . .
Using Local Management
Community Strings & Trap Receivers
Description
Use this screen to send alerts to PCs with SNMP management applications
(such as Intel
Current read community: Sets a password for viewing (not changing)
the switch configuration. The string you define here must match the
read community string defined in the SNMP application. The default
read community string is “public.”
Current write community: Sets a password for viewing and changing
the switch configuration. The string you define here must match the
write community string defined in the SNMP application. The default
write community string is “private.”
Trap receiving stations: When an event occurs, the switch automatically
alerts the SNMP management application by sending a trap to the SNMP
management stations (for example, PCs) defined here.
Station IP address: Displays the IP addresses of PCs with SNMP
®
applications (such as Intel Device View or LANDesk
Network
Manager) installed.
State: Enables or disables sending of traps to the specified trap
receiver.
Community string: Specifies a string for the trap that matches the
community string defined in the SNMP management application. If you
don’t define one, the default is “public.”
69
CHAPTER 5
LOCATION
Main Menu
Configure Management
Administer User Accounts
Intel® NetStructure™ 470T and 470F Switches User Guide
Administer User Accounts
Description
Add Users/Change Passwords
Username: By default, no username is assigned. Usernames can
consist of any character and can be up to fifteen characters long. You
can define three usernames.
Old Password: Used when changing the password of a current user. If
this is a new account, you can skip to the New Password field. By
default, no password is assigned.
New password: Sets a new password for accessing Local
Management. The one you specify here is used the next time you reset
the switch or log out and log in on Local and Web Management.
Passwords are case-sensitive and can be up to fifteen characters long.
Confirm new password: Verifies the entry in the New password
field.
Access Level: Establishes a user’s access rights (press z).
Administrators can make any changes to Local Management. All other
users (categorized under Normal user) can view information but cannot
make changes. To change a user’s access rights, see Modify User
Accounts.
APPLY CHANGES: Saves changes when adding users or changing
passwords.
CHAPTER 5
Using Local Management
Modify User Accounts
Access Level: Changes access rights for the user (press z).
Delete: Deletes an account (press z to change the value to
<Yes>). The default value is <No>.
APPLY CHANGES: Saves changes when modifying or deleting user
accounts.
How to Manage User Accounts
System Administrators can create up to three user accounts for managing
the switch. You can also change the access rights for current users and
delete user accounts. Make sure you always set up at least one
Administrator account.
To create a user account
1 From the Main Menu, select Configure Management and press
E . Under this menu, select Administer User Accounts and press
E .
2 On the User Accounts screen, type the name of the new user in the
Username field and press E .
3 Since this is a new user, press T
and go to the New password field.
4 Type the password for the new user and press E . Passwords are
case-sensitive and can be up to fifteen characters long.
5 To confirm the new password, retype it in the Confirm new password
field. Press E .
6 Select the access rights for the new user by pressing z .
7 To save the information, press T to select SAVE CHANGES
(below the Confirm new password field) and press E . The new
account appears in the list under Modify User Accounts.
Reset switch settings to factory defaults: Clears any IP address or
current changes and resets the switch back to its factory defaults. All
counters are cleared and the switch starts sending BOOTP requests.
Serial Port Settings
Port Setting: Configures the switch’s serial port for out-of-band (SLIP)
management. Press z to toggle the field from <Console> to
<SLIP>. Settings take effect on the next reboot.
Console Timeout: Logs out a user after a period of inactivity. Settings
are from 0-60 minutes in 15-minute increments. A setting of <Never>
means no timeout. The default is 60 minutes.
CHAPTER 5
LOCATION
Main Menu
Configure VLAN
(if switch is in Default Mode)
Using Local Management
Local Management
Configure VLAN Operation Mode
Description
This screen allows you to activate or change the type of VLAN operating
on the switch. If there are no VLANs active on the switch, this is the first
screen displayed when you select Configure VLAN from the Main Menu.
By default, VLANs are not active on the NetStructure™ 470 switches so
they must be turned on before you can start configuring them.
NOTE
The first time you configure the
switch, the system takes you
directly to the Configure VLAN
Operation Mode screen.
The 470 switches support only a single type of VLAN operating at a time.
However, you can have multiple VLANs of the same type.
Select the type of VLAN: Changes the type of VLAN on the switch (press
z). The 470 switches support two types of VLANs: port-based and
IEEE 802.1Q (tag-based) VLANs.
APPLY: Activates the changes to the VLAN and reboots the switch.
Note: To change between VLAN types the switch must be rebooted.
To change VLAN modes
1 From the Main Menu, select Configure VLAN.
2 From the Configure VLAN menu, select VLAN Operation Mode.
3 Press z to change the type of VLAN on the switch. Press
E.
4 Select the APPLY button and press E. This reboots the switch
and changes the VLAN mode.
75
CHAPTER 5
LOCATION
Main Menu
Configure VLAN
Intel® NetStructure™ 470T and 470F Switches User Guide
Port-based VLANs
Description
Port-based VLANs are the simplest type of VLAN. A port-based VLAN
allows you to create multiple VLANs each with its own broadcast domain
and member ports.
For example, if port 3 is in VLAN_1 and port 5 is in VLAN_2 the two
ports cannot communicate with each other even though they are part of the
same switch. Ports can only be a member of a single port-based VLAN.
Any port that is not a member of a user-defined VLAN is a member of the
DEFAULT_VLAN.
VLAN operation mode: Changes the type of VLAN operating on the
switch, or disables VLANs entirely.
Add a port-based VLAN: Creates a port-based VLAN and adds ports to
the VLAN.
Edit/delete a port-based VLAN: Selects a VLAN to change port
membership in the VLAN, or removes a VLAN from the switch.
CHAPTER 5
LOCATION
Main Menu
Configure VLAN
Add a Port-based VLAN
Using Local Management
Local Management
Add a Port-based VLAN
Description
VLAN Name: Assigns a name to the VLAN. Names can consist of any
character (no spaces) and be up to 12 characters long. After a VLAN is
created the name cannot be changed. If you want to change the name you
need to delete the VLAN, create a new one, and assign the ports to the new
VLAN.
Port: Allows you to select the port you want in the VLAN.
Member: Allows you to determine which ports are part of the VLAN
being created. Ports can be members of only one port-based VLAN. Press
z to toggle the field for the following options:
<Yes> The port is a member of the VLAN.
<No > The port is not a member of the VLAN.
–The port is part of an aggregated link; the anchor port
determines membership in a VLAN.
N/AIf this is displayed it means the port is already participating in
another VLAN, or, for the 470T, that a GBIC slot is open.
Ports can belong to only one port-based VLAN.
APPLY: Creates the VLAN and activates the settings.
77
CHAPTER 5
Intel® NetStructure™ 470T and 470F Switches User Guide
To create a port-based VLAN
1 From the Main Menu, select Configure VLAN.
Note: Make sure the switch’s current VLAN operation mode is set to
port-based VLAN. If another type of VLAN is running, refer to
“Configure VLAN Operation Mode” in Chapter 5 to change the VLAN
operation mode.
2 Select Add a Port-based VLAN and press E.
3 Type a name for the new VLAN and press E.
4 Select ports to add to the VLAN and use zto toggle the
Member field to Yes.
5 Select the APPLY button and press E.
Edit/Delete a Port-based VLAN
LOCATION
Main Menu
Configure VLAN
Edit/Delete a Port-based VLAN
Edit VLAN
NOTE
The DEFAULT_VLAN cannot be
deleted from the switch.
78
Description
Action: Allows you to specify whether to delete a VLAN or to change its
port membership. Press z to toggle between <Edit> or <Delete>,
then use T or S to select a VLAN, and press
E E
press
E again to confirm deletion.
E E
VLAN Name: Displays the name of an available port-based VLAN.
Ports: Displays the total number of member ports in the specified VLAN.
This screen is very similar to the VLAN creation screen. You can change
the membership status of ports within the VLAN but you cannot change
the name of the VLAN.
VLAN Name: Displays the name of the VLAN you are configuring.
Port: Displays the port numbers; select the port you want to include in or
eliminate from the VLAN.
Member: Determines which ports are part of the current VLAN. Ports can
be members of only one port-based VLAN. Press z to toggle the
field for the following options:
<Yes> The port is a member of the VLAN.
<No > The port is not a member of the VLAN.
–The port is part of a aggregated link.
N/AIf this is displayed it means the port is already participating in
another VLAN. Ports can belong to only one VLAN.
APPLY: Activates the settings.
79
CHAPTER 5
LOCATION
Main Menu
Configure VLAN
Intel® NetStructure™ 470T and 470F Switches User Guide
Configure 802.1Q VLANs
Description
VLAN Operation Mode: Changes the type of VLAN operating on the
switch, or disables VLANs entirely.
Create an IEEE 802.1Q VLAN: Creates a new 802.1Q VLAN and adds
ports to the VLAN.
Edit/Delete an IEEE 802.1Q VLAN: Changes port membership of an
existing VLAN or removes a VLAN from the switch.
Configure VLAN ID for untagged devices (PVID): Assigns a VLAN to
inbound packets without a VID.
GVRP and ingress filter settings: Sets port-level options for dynamic
VLAN creation and packet filtering by the VLAN.
CHAPTER 5
Using Local Management
Local Management
Add an IEEE 802.1Q VLAN (Configure
Port Membership)
LOCATION
Main Menu
Configure VLAN
Create an 802.1Q VLAN
NOTE
A ‘+’ next to the Member toggle
indicates that port is a member of
more than one VLAN.
Description
VLAN Name: Assigns a name to the VLAN. The name can consist of any
character (no spaces) and be up to 12 characters long. After a VLAN is
created the name cannot be changed.
VLAN ID: Assigns a unique ID number for the VLAN. This number is
used to identify all packets belonging to that VLAN. Type a number from 2
to 4094. The DEFAULT_VLAN (created when you select a VLAN mode)
has a VID of 1.
Allow IGMP Snooping: Indicates if the switch performs IGMP snooping
on this VLAN (press z). There are a maximum of 12 IGMP
snooping sessions allowed.
Member: Identifies which ports are part of the VLAN being created. Press
z to toggle the field for the following options:
<Yes> The port is a member of the VLAN.
<No > The port is not a member of the VLAN.
–The port is part of an aggregated link.
NEXT: Forwards you to the Add an IEEE 802.1Q VLAN (Configure Port
Tagging) screen.
PREV: Returns you to the Add an IEEE 802.1Q VLAN (Configure Port
Membership) screen.
DONE: Returns you to the Configure 802.1Q VLANs screen.
CHAPTER 5
Using Local Management
Local Management
Configure PVID for Untagged/Priority
Traffic
LOCATION
Main Menu
Configure VLAN
Configure PVID for...
Description
This screen allows the switch to manage incoming packets that do not
contain IEEE 802.1Q VLAN tags or priority tagged traffic (packets with a
VID of zero). This is for ingress traffic; it does not apply to outbound
traffic.
Untagged traffic is normally assigned to VLAN 1 (the DEFAULT_VLAN),
which includes all ports on the switch. However, if you want to send
untagged traffic on a specific port other than the default VLAN, you can
assign a different PVID.
For example, if you set a port’s PVID to 5, all untagged traffic on the port
is assigned to VID 5.
PVID: Sets the PVID for untagged devices. This is used for incoming
traffic from an untagged device.
Intel® NetStructure™ 470T and 470F Switches User Guide
How to configure 802.1Q VLANs
NOTE
It is important to determine which
devices on your network support
tag-based VLANs and which do
not, before you start this
procedure.
Setting up an 802.1Q VLAN is a two-step process. The first step is to create
a VLAN on the switch. The second step requires you to make sure that
tagging is set up properly for your attached devices. For those devices that
don’t support tagging an extra configuration step is required.
Step 1: Create an 802.1Q VLAN and add ports
1 From the Main Menu, select Configure VLAN.
Note: Make sure the switch’s current VLAN operation mode is set to
IEEE 802.1Q VLAN. Refer to “Configure VLAN Operation Mode” in
Chapter 5 to change the VLAN operation mode.
2 Select Create an IEEE 802.1Q VLAN and press E.
3 Type a name for the new VLAN (no spaces) and press E.
4 Type a VLAN ID and press E. The ID number can be any
number from 2 to 4094.
5 Determine if you want to allow IGMP Snooping on this VLAN. This is
important since the switch can support more 802.1Q VLANs than the
maximum of 12 IGMP Snooping sessions available.
6 Select ports to add to the VLAN. Use z to toggle the
If the device on a particular port does not support tags, configure that port as
untagged. Configuring a device as untagged ensures that the switch removes
tags from packets before they leave the switch for the device. If you
configure a port as untagged, proceed to step 3 (Configure VLAN for
untagged devices) when you are finished with step 2.
1 Press z to select Tag or Untag for each port that is a member of
the VLAN.
2 Select the DONE button and press E.
If you configured any of the ports in the VLAN as Untagged, proceed to
step 3 to configure ports for untagged devices and associate those ports with
a PVID (port VLAN ID).
CHAPTER 5
Using Local Management
Local Management
Step 3: Configure VLAN for untagged devices
Even if the device attached to the switch doesn’t support 802.1Q tags it is
still possible for the device to participate in the VLAN. When
communicating with untagged devices the switch performs two functions:
First, it determines how to forward untagged traffic. For untagged
traffic, the switch assigns a default VID to the incoming traffic from the
untagged device. Normally, all untagged traffic received on the switch is
assigned a VLAN ID=1 or the DEFAULT_VLAN. You can change this
PVID to the VID of the VLAN you want the port to use.
Second, it strips 802.1Q tags before sending traffic to the untagged
device. When the switch needs to send traffic from a port to an untagged
device, it strips the 802.1Q tag, otherwise the untagged device may not
understand how to process the VID tag.
Use the following steps to add a untagged device to a 802.1Q VLAN.
1 Ensure that the port is a member of the VLAN. Refer to the procedure
in step 1 to add a port to a 802.1Q VLAN.
2 From the Configure VLAN menu, select Configure VLAN ID for
Untagged Devices and press E.
3 Select the port where the untagged device is connected. For example,
port 7.
4 Type the VID of the VLAN you want the port to belong to and press
E. This is the same ID number you entered in step 1.
5 Select APPLY and press E to activate the changes.
By specifying a VID you set the switch to assign a particular VID to any
incoming traffic it receives on that port.
85
CHAPTER 5
LOCATION
Main Menu
Configure VLAN
Edit/Delete an 802.1Q VLAN
Intel® NetStructure™ 470T and 470F Switches User Guide
Edit/Delete 802.1Q VLANs
Description
Use this screen to select a VLAN to edit the port membership in the VLAN
or delete the VLAN entirely from the switch.
Action: Specifies whether you want to edit or delete a VLAN. Press
z to toggle between <Edit> and <Delete>, and then select a VLAN
from the list and press
VLAN Name: Displays the name of the VLAN you are configuring.
VLAN ID: Displays the unique number assigned to identify this 802.1Q
VLAN.
CHAPTER 5
Using Local Management
Local Management
Edit an IEEE 802.1Q VLAN (Configure
Membership)
LOCATION
Main Menu
Configure VLAN
Edit/Delete IEEE 802.1Q VLAN
NOTE
A ‘+’ next to the Member toggle
indicates that port is a member of
more than one VLAN.
Description
This screen allows you to identify which ports are members of the VLAN.
VLAN Name: Displays the name of the VLAN you are editing or deleting.
VLAN ID: Displays the ID number of the VLAN. This number identifies
all packets belonging to that VLAN.
Allow IGMP Snooping: Identifies whether the switch performs IGMP
snooping on this VLAN (press z). There are a maximum of 12
IGMP snooping sessions allowed.
Member: Determines which ports are part of the VLAN being created.
Press z to toggle the field for the following options:
<Yes> The port is a member of the VLAN.
<No > The port is not a member of the VLAN.
–The port is part of an aggregated link.
NEXT: Forwards you to the Edit an IEEE 802.1Q VLAN (Configure Port
Tagging) screen, where you can set egress tags (for outbound traffic).
This screen allows the switch to manage incoming packets that do not
contain IEEE 802.1Q VLAN tags or priority tagged traffic (packets with a
VID of zero). This is an ingress rule only; it does not apply to outbound
traffic.
Untagged traffic is normally assigned to VLAN 1 (the DEFAULT_VLAN),
which includes all ports on the switch. However, if you want to send
untagged traffic on a specific port other than the default VLAN, you can
assign a different PVID.
For example, if you set a port’s PVID to 5, all untagged traffic on the port
will be assigned to VID 5.
PVID: Identifies the VID of an existing 802.1Q VLAN where you want to
send untagged traffic.
<Enabled>: The switch monitors traffic on this port for GVRP requests
from network nodes. If a GVRP-enabled device sends a request to this
port, the switch creates a VLAN dynamically and adds the requesting
device to the new VLAN. This is the default setting.
<Disabled>: The switch ignores GVRP requests in incoming packets
on this port.
Ingress Filtering: Allows the switch to filter incoming packets based on
VLAN membership. Use z to toggle the action for each port.
Options are:
<Enabled>: Incoming packets belonging to a specific VLAN are
forwarded only if the port belongs to that VLAN. This is the default
setting.
<Disabled>: All packets coming into the port are forwarded, regardless
of the port’s VLAN membership.
CHAPTER 5
LOCATION
Main Menu
Monitoring
Using Local Management
Local Management
Monitor (Network Statistics)
Description
Switch overview: Displays an overview of all ports on the switch.
Port traffic statistics: Displays port traffic statistics and utilization.
Port error statistics: Displays port error statistics.
Packet analysis: Displays traffic per port by packet size and type.
IGMP Snooping Status: Displays active IP multicast groups detected by
the switch.
Browse address table: Displays the entries in the switch’s address table by
port or MAC address.
VLAN and GVRP Status: Displays status for static and dynamic tagbased (IEEE 802.1Q) VLANs. This option is available only when the
switch is running 802.1Q VLANs.
91
CHAPTER 5
LOCATION
Main Menu
Monitoring
Switch Overview
Intel® NetStructure™ 470T and 470F Switches User Guide
Switch Overview
Description
This screen provides a quick overview of activity on the switch. The screen
displays the traffic sent and received for each port on the switch and the
percent utilization for that port.
Update interval: Selects the time period between updates (press z).
For example, an update interval of 5 sec. means Local Management
collects and displays information from the switch every five seconds.
Tx/sec or Rx/Sec: Displays the current rate of good frames that were
transmitted or received by the port.
% Utilization: Displays the percentage of Ethernet bandwidth (100Mbps
or 1000Mbps) used by the device attached to that port.
CHAPTER 5
LOCATION
Main Menu
Monitoring
Port Traffic Statistics
Using Local Management
Local Management
Port Traffic Statistics
Description
Select Port: Selects the range of ports to view. Statistics are displayed four
ports at a time. Press z to toggle between port numbers. The
example shows ports 1-4.
Update Interval: Selects the time period between updates (press z).
For example, an update interval of 5 sec. means Local Management collects
and displays information from the switch every five seconds.
Speed/Duplex: Displays the current connection status of the port.
% Utilization: Displays the percentage of Ethernet bandwidth (100Mbps
or 1000Mbps) used by the device attached to that port.
Bytes Received: Displays the number of bytes (octets) contained in errorfree frames. This includes octets in unicast, broadcast, or multicast frames
and packets whose destination address is mapped to the receiving port. It
also includes octets in packets dropped because of full buffers, spanning
tree, disabled ports, no link, or empty distribution list.
Bytes Sent: Displays the number of error-free bytes (octets) sent over this
port.
93
CHAPTER 5
Intel® NetStructure™ 470T and 470F Switches User Guide
Frames Received: Displays the number of frames detected without errors.
This includes unicast, broadcast, or multicast frames and frames whose
destination address is mapped to the receiving port. It also includes frames
dropped because of full buffers, spanning tree, disabled ports, no link, or
empty distribution list.
Frames Sent: Displays the number of frames sent over this port without
errors.
Total Bytes Recv (Received): Displays the number of bytes (octets)
contained in all frames received by this port. This counter reflects all bytes
received on the port. This includes bytes contained in frames that contain
errors, dropped frames, frames whose destination address is mapped to the
receiving port, and frames that were not forwarded through the switch.
Total Frames Recv (Received): Displays the number of all frames
received on the port. This includes frames that contain errors, dropped
frames, frames whose destination address is mapped to the receiving port,
and frames that were not forwarded through the switch.
Last Seen MAC: Displays the MAC address of the last device that sent
packets over this port.