Intel NetStructure 470 User Manual

3.97 Mb
Loading...

Switch 470 NetStructure ® Intel

Guide User

Intel® NetStructure

470 Switch

User Guide

Copyright © 2001, Intel Corporation. All rights reserved.

Intel Corporation, 5200 NE Elam Young Parkway, Hillsboro OR 97124-6497

Intel Corporation assumes no responsibility for errors or omissions in this manual. Nor does Intel make any commitment to update the information contained herein. Intel is a trademark or registered trademark of Intel Corporation or its subsidiaries in the United States and other countries.

*Other product and corporate names may be trademarks of other companies and are used only for explanation and to the owners’ benefit, without intent to infringe.

Second Edition

June 2001

A18558-002

C O N T E N T S ContentsIntel® Ne Structure 470T and 470F Switches User Guide

1 Setting up the Intel® NetStructure™ 470T and

470F Switches

 

Overview ..........................................................................

1

 

Management ....................................................................

1

 

Switch Features ...............................................................

2

 

LEDs ................................................................................

3

 

Connection Guidelines .....................................................

4

 

Straight-through vs. Crossover Cables ............................

4

2

Using the Intel® NetStructure™ 470T and 470F

 

Switches

 

 

Overview ..........................................................................

7

 

Sample Configuration ......................................................

8

 

Flow Control .....................................................................

9

 

Broadcast Storm Control ..................................................

9

 

Spanning Tree Protocol ...................................................

10

 

Tagged Frames................................................................

11

 

Priority Tagging ................................................................

11

 

Link Aggregation ..............................................................

12

 

Virtual LANs .....................................................................

13

 

GARP VLAN Registration Protocol (GVRP) .....................

17

 

Internet Group Management Protocol (IGMP) .................

18

3

Using Intel® Device View

 

 

Overview ..........................................................................

19

 

Installing Intel Device View ..............................................

20

 

Starting Intel Device View ................................................

21

 

Installing a New Switch ....................................................

22

 

Using the Device Tree .....................................................

22

 

Managing a Switch ...........................................................

25

 

Viewing RMON Information .............................................

25

i

C O N T E N T S

Intel® NetStructure 470T and 470F Switches User Guide

 

4 Using the Web Device Manager

 

 

Overview ..........................................................................

27

 

Accessing the Web Device Manager ...............................

28

 

Navigating the Web Device Manager ...............................

28

 

Using Management Screens ............................................

29

 

Configuring the Switch’s IP Settings ................................

31

 

Configuring a Port ............................................................

32

 

Managing User Accounts .................................................

33

 

Configuring VLANs ..........................................................

35

 

Link Aggregation ..............................................................

41

 

Static MAC Addresses .....................................................

41

 

Setting Up Priority Tagging ..............................................

43

 

Configuring Community Strings and Trap Receivers .......

44

 

Monitoring Switch Activity ................................................

45

 

Viewing/Changing Switch Information ..............................

46

 

Updating Switch Firmware ...............................................

47

 

Saving Configuration Changes and Logging Out .............

48

 

5 Using Local Management

 

 

Overview ..........................................................................

49

 

Accessing Management ...................................................

49

 

Logon Screen ..................................................................

50

 

Navigation ........................................................................

51

 

Main Menu (Top Screen) .................................................

52

 

Configure Device .............................................................

53

 

IP Settings .......................................................................

54

 

Port Settings ....................................................................

55

 

Flow Control .....................................................................

56

 

Priority ..............................................................................

56

 

Configure GBIC Ports (470T only) ...................................

57

 

Priority Tagging ................................................................

58

 

Switch Settings ................................................................

59

 

Configure Advanced Switch Settings ...............................

60

 

Configure Spanning Tree Protocol ...................................

61

 

Configure Spanning Tree for Ports ..................................

63

 

Forwarding and Filtering ..................................................

64

ii

C O N T E N T S

Intel® NetStructure 470T and 470F Switches User Guide

Configure IGMP Snooping ...............................................

65

Configure Static MAC Addresses.....................................

66

Configure Port Security ....................................................

67

Configure MAC Address Filtering.....................................

68

Configure Ethernet Multicast Filtering ..............................

69

Ethernet Multicast Filtering (Ports) ...................................

70

Port Mirroring ...................................................................

71

Link Aggregation ..............................................................

72

Broadcast Storm Control .................................................

73

Configure Management Menu .........................................

74

Community Strings & Trap Receivers ..............................

75

Administer User Accounts ................................................

76

Managing User Accounts .................................................

78

Define IP Access List .......................................................

80

Update Firmware and Config Files ...................................

81

Reset and Console Options .............................................

82

Configure VLAN Operation Mode ....................................

83

Port-based VLANs ...........................................................

84

Add a Port-based VLAN ...................................................

85

Edit/Delete a Port-based VLAN........................................

86

Change Port Membership in a VLAN ...............................

87

Configure 802.1Q VLANs ................................................

88

Add an IEEE 802.1Q VLAN

 

(Configure Port Membership) ..............................

89

Add an IEEE 802.1Q VLAN (Configure Port Tagging) .....

90

Configuring 802.1Q VLANs ..............................................

91

Edit/Delete an 802.1Q VLAN ...........................................

93

Edit an IEEE 802.1Q VLAN (Configure Membership) ......

94

Edit an IEEE 802.1Q VLAN (Configure Port Tagging) .....

95

Configure VLAN ID for Untagged Traffic ..........................

96

GVRP and Ingress Filter Settings ....................................

97

Configure a Protocol-based VLAN ...................................

98

Add a Protocol-based VLAN ............................................

99

Edit/Delete a Protocol-based VLAN .................................

100

Edit a Protocol-based VLAN (Configure Membership) .....

101

iii

C O N T E N T S

Intel® NetStructure 470T and 470F Switches User Guide

Monitor (Network Statistics) .............................................

102

Switch Overview ..............................................................

103

Port Traffic Statistics ........................................................

104

Port Error Statistics ..........................................................

106

Packet Analysis ................................................................

108

IGMP Snooping Status ....................................................

109

Browse Address Table .....................................................

110

VLAN and GVRP Status ..................................................

112

Tools ................................................................................

113

Switch Event Log .............................................................

114

Ping a Device ...................................................................

115

Upload Configuration Image File......................................

116

Save Settings ...................................................................

117

Appendix A: Technical Information

119

Index

139

Intel Customer Support

146

iv

1

Setting up the Intel®

NetStructure™ 470T

and 470F Switches

 

Overview

 

This guide provides information on configuring and managing the Intel®

 

NetStructure™ 470T and 470F Switches. It is organized into five chapters:

• Chapter 1 - Identifying and connecting the switch hardware

• Chapter 2 - Using the switch in a LAN; advanced features such as link aggregation and VLANs

• Chapter 3 - Using Intel Device View

• Chapter 4 - Using Web Device Manager

• Chapter 5 - Using Local Management

Management

Through the switch’s built-in management you can configure the device and monitor network health. You can use any combination of the following methods to manage the switch.

SNMP management applications like Intel Device View, LANDesk® Network Manager, HP OpenView*, and IBM Tivoli NetView* are tailored for Intel products and show a graphical representation of the device.

Onboard management allows control over the switch without using an SNMP application. The Web Device Manager provides a graphical interface while Local Management is a menu-driven interface.

Other SNMP-compliant applications can manage the switches if you

compile the switch’s MIB files into that application.

1

C H A P T E R 1

Intel® NetStructure™ 470T and 470F Switches User Guide

Switch Features

These are the major features of the 470 switches.

8-port 470F Switch (Product Code ES470F)

Status

LED

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Link/Activity LEDs

 

 

 

 

 

Serial

 

 

 

1000 Base-SX

 

 

 

 

 

 

 

 

 

 

 

Port

 

 

 

Port

 

 

 

 

 

6+2-port 470T Switch (Product Code ES470T)

Status

LED

Speed LEDs

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Link/Activity LEDs

 

Serial

1000 Base-T

GBIC Port

(top row)

(bottom row)

 

Port

Port

 

 

 

 

Back of 470 Switch

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

MAC

AC Power

Address

Plug

100/1000 Base-T auto-negotiates speed, duplex, and flow control—100Mbps or 1000Mbps per port

470F supports 1000SX, 1000LX, and 1000LH GBICs

Half-duplex and full-duplex flow control

Port settings can be configured manually through management

Access menu-driven Local Management through the serial port or a Telnet session

Access the graphical Web Device Manager through a Web browser

2

C H A P T E R 1 Setting Up the Intel® NetStructure™ 470T and 470F Switches

LEDs

The LEDs to the left of the ports indicate port status, individual port speed, and activity.

470F

Status

Link/Activity

Setup Switch 470

NOTE

After the switch is turned on, the Status LED blinks green once before the diagnostic mode starts.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Status

 

 

 

 

470T

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Speed

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Link/Activity

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

LED

State

Meaning

 

 

 

 

 

Status

Blinking green

Switch is performing diagnostics and booting.

 

 

 

 

 

(This lasts for 20–30 seconds.)

 

Solid green

Diagnostics have passed, the switch is ready.

 

Blinking green

Diagnostics have failed. (After the initial 20–

 

 

 

 

 

30 seconds, the LED continues blinking.)

 

 

 

 

 

Link/Activity

Solid green

Device linked.

 

Blinking green

Receiving activity on that port.

 

Off

No link detected.

 

 

 

 

 

Speed

Solid green

Device connected at 1000Mbps.

(470T only)

Off

Device connected at 100Mbps.

 

 

 

 

 

 

 

 

 

 

3

C H A P T E R 1

Intel® NetStructure™ 470T and 470F Switches User Guide

NOTE

Use certified Category 5 cables to connect 1000Mbps devices to the switch.

Connection Guidelines

General

The 470T switch is can auto-negotiate port duplex. It can operate at half-duplex or full-duplex at 100Mbps, and full-duplex at 1000Mbps. The switch matches the highest possible speed (up to 1000Mbps) of an attached device.

The 470F operates at full-duplex and at 1000Mbps.

Cabling

Use Category 5 unshielded, twisted-pair (CAT 5 UTP) cable to connect 1000Mbps or 100Mbps devices to the switch.

Limit the cable length between devices to 100 meters (330 feet) for copper wire.

Use a straight-through cable to connect the switch to a server or workstation.

To connect to another switch or hub, use a crossover cable.

Straight-through vs. Crossover Cables

Switch ports are wired MDI-X, so use a straight-through cable to connect to a workstation or server (network adapter cards are wired MDI). To connect to another MDI-X port, use a crossover cable. The following pin arrangements are for the switch’s Ethernet port and the typical RJ-45 connector. The wiring diagrams illustrate how to wire a straight-through and crossover cable for 100Mbps and 1000Mbps devices.

Straight-Through UTP cable (100Mbps)

Switch (MDI-X)

Adapter (MDI)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

4

C H A P T E R 1 Setting Up the Intel® NetStructure™ 470T and 470F Switches

Crossover UTP cable (100Mbps)

Switch (MDI-X) Hub (MDI-X)

Straight-Through UTP cable (1000Mbps)

Switch (MDI)

Switch (MDI)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Setup Switch 470

5

C H A P T E R 1

Intel® NetStructure™ 470T and 470F Switches User Guide

6

2

Using the Intel®

NetStructure™ 470T

and 470F Switches

Overview

Chapter 2 provides an overview for using the Intel® NetStructure™ 470T and 470F Switches within a network. This chapter covers switching features like flow control and spanning tree, and includes a discussion of the more advanced features such as link aggregation and the types of VLANs available on the switch.

If you are familiar with switching technology you can skip ahead to a particular section within the chapter. The following list shows where you can find particular topics:

Sample Configuration page 8

Flow Control page 9

Broadcast Storm Control page 10

Spanning Tree Protocol page 11

Tagged Frames page 12

Priority Tagging page 12

Link Aggregation page 13

Virtual LANs page 14

GVRP page 18

Internet Group Management Protocol (IGMP) Snooping page 18

7

C H A P T E R 2

Intel® NetStructure™ 470T and 470F Switches User Guide

Sample Configuration

The following example illustrates how the 470T and 470F switches can be used in a network.

In this example, the Intel NetStructure 480T Routing Switch is the backbone of the network, providing routing capability. The 470T and 470F switches provide gigabit connectivity from the 480T to the Intel Express 460T Standalone Switches through the 460T gigabit uplinks.

100Mbps

1000Mbps

Link Aggregation group

Intel® NetStructure™ 470T Switch

Intel Express 460T

Standalone Switches

Intel® NetStructure™ 470F Switch

Intel Express 460T

Standalone Switches

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Servers

Intel® NetStructure™ 480T Routing Switch

 

8

C H A P T E R 2

Using the Intel® NetStructure™ 470T and 470F Switches

Flow Control

During heavy network activity, the switch’s port buffers can receive too much traffic and fill up faster than the switch can send the information. In cases like this, the switch tells the transmitting device to wait until the information in the buffer can be sent. This traffic control mechanism is called flow control.

The method of flow control depends on whether the port is set to full-duplex or half-duplex.

If a port operates at half-duplex, the switch sends a collision (also called backpressure) that causes the transmitting device to wait.

If the port operates at full-duplex, the switch sends out an IEEE 802.3x PAUSE frame.

You can enable or disable flow control for each port on the 470 switch.

Broadcast Storm Control

You can use broadcast storm control to control the amount of broadcast traffic serviced by the switch. You can prevent broadcasts from taking an excessive amount of network resources and degrading network performance.

To control the amount of broadcast traffic, set an upper threshold percentage for each port. The upper threshold is the percentage of the port’s total bandwidth that is available for broadcast traffic. For example, if a port’s upper threshold percentage is 4%, broadcast traffic can take up to 4% of the port’s total bandwidth.

Switch 470 the Using

 

 

 

 

Broadcast traffic

Broadcast traffic

 

4%

 

 

 

dropped

resumed

 

Upper

 

 

 

 

 

% of

threshold

 

 

 

 

 

 

 

 

 

 

 

Broadcast

 

 

 

 

 

 

traffic on

 

 

 

 

 

 

the port

1%

 

 

 

 

 

 

Lower

 

 

 

 

 

 

threshold

 

 

 

 

 

 

 

40 s.

80 s.

120 s.

160 s.

 

Time

 

 

 

 

 

in seconds

 

 

 

 

9

C H A P T E R 2

Intel® NetStructure™ 470T and 470F Switches User Guide

The switch checks the amount of broadcast traffic on each port every 20 seconds. If the port detects that the amount of broadcast traffic exceeds the upper threshold on two subsequent checks, the port drops all broadcast traffic.

When broadcast traffic is dropped for storm control, the switch continues to check the amount of broadcast traffic on each port. For the port to begin accepting broadcast traffic again, the amount of broadcast traffic must fall below the lower threshold percentage. The lower threshold percentage, 1%, is a factory default. If broadcast traffic falls below the lower threshold percentage when the port is checked, the switch automatically resumes servicing broadcast traffic.

When broadcast traffic servicing resumes, the switch begins checking the amount of broadcast traffic against the upper threshold.

Spanning Tree Protocol

Spanning Tree Protocol, as described in the IEEE (Institute of Electrical and Electronic Engineers) 802.1D specification, is a protocol designed to prevent loops within the network topology. A loop can occur if there is more than one path for information to travel between devices. The Spanning Tree Protocol determines the “cost” of a connection. For example, if two devices are connected by two links, spanning tree uses the connection with the lowest cost and blocks the second connection.

Spanning tree prevents loops by allowing only one active path between any two network devices at a time. However, you can also use this protocol to establish redundant links between devices that can take over if the primary link fails.

Backup Path from Client A to Server B: Switch A –> Switch B –> Switch C

 

:

3

 

 

0

 

 

 

 

 

th

 

 

0

a

 

t:

1

 

P

 

 

 

 

 

 

s

 

 

 

 

o

 

 

 

 

C

 

 

 

Switch A

Switch B

 

 

P

 

a

C

th

:

o

2

s

t:

 

2

 

0

 

0

Path: 1

Switch C

 

Cost: 100

 

PC Client A

Server B

Primary Path from Client A to Server B: Switch A –> Switch C

10

C H A P T E R 2

Using the Intel® NetStructure™ 470T and 470F Switches

In this example, Client A can communicate with Server B over two different paths. The primary path is Path 1 because the cost of the connection between switches A and C is lower than the cost between switches A, B and C. If the primary path fails, traffic is automatically sent over the backup path.

Tagged Frames

The 802.1D (1998 Edition) and 802.1Q specifications published by the IEEE extended Ethernet functionality to add tag information to Ethernet frames and propagate these tagged frames between bridges. The tag can carry priority information, VLAN information, or both and allows bridges to intelligently direct traffic across the network.

Some devices don’t recognize the tagged Ethernet frames. These devices see a frame that is too big, and then discard it. When operating 802.1Q (tagbased) VLANs, you can configure the switch to work with untagged devices. For more information, see “How to configure 802.1Q VLANs” in Chapter 5.

Switch 470 the Using

Priority Tagging

The IEEE 802.1D (1998 Edition) specification incorporates IEEE 802.1p and defines information in the frame tag to indicate a priority level. When these tagged packets are sent out on the network, the higher priority packets are transferred first. Priority tagging (also known as Traffic Class Expediting) is usually set on the LAN adapter in a PC or switch and works with other elements of the network (switches, routers) to deliver packets based on priority. The priority level can range from 0 (low) to 7 (high).

The 470 switches can read the priority tags and forward traffic on a per port basis. The switches have two priority queues per port and queue the packet based on its priority level. For example, when a packet comes into a switch with a high-priority tag, the switch inserts the packet in its high-priority queue.

11

C H A P T E R 2

Intel® NetStructure™ 470T and 470F Switches User Guide

Although there are eight priority levels, the 470 switches can only put a packet into one of the two queues. The switch maps levels 0-3 to the low queue and levels 4-7 to the high queue. If a packet is untagged, the switch can be set to use either the high or low queue for that port. The

470 switches preserve the priority level of the packet.

 

Express 460T

 

 

 

7

HIGH

 

 

6

 

 

5

 

 

 

4

 

Incoming

transmit

 

queue

Network

packet

 

 

for the

 

 

 

 

 

port

 

 

 

3

 

 

 

2

 

 

 

1

LOW

 

 

0

 

Note

When connecting to another switch, connect anchor port to anchor port and member port to member port.

Link Aggregation

Link aggregation allows you to combine from two to four (adjacent) ports so that they function as a single high-speed link. For example, link aggregation is useful when making connections between switches or connecting servers to the switch.

You can use link aggregation, also known as port trunking, to increase the bandwidth to some devices. Link aggregation can also provide a redundant link for fault tolerance. If one link in the aggregation fails, the switch balances the traffic among the remaining links.

To aggregate ports, you must link an “anchor” port with an adjacent port. The 470 switches support up to four link aggregation groups (anchor ports 1,3, 5, or 7). All aggregated ports must be the same speed.

12

C H A P T E R 2

Using the Intel® NetStructure™ 470T and 470F Switches

Guidelines

The switch treats aggregated links as a single port. This includes spanning tree and VLAN configurations.

For the 470F: Anchor ports 1, 3, and 5 can each have up to four aggregated ports; anchor port 7 can have two.

For the 470T: Anchor ports 1 and 3 can each have up to four aggregated ports; anchor ports 5 and 7 can each have two.

All ports share the same settings as the anchor port. You can change anchor port settings, but you cannot configure other ports in the link.

When a port is configured as a member of an aggregated link, it adopts the configuration of the anchor port. When a port is no longer a member of an aggregated link, the configuration is reset to the default settings (auto-negotiate speed/duplex, flow control enabled).

If a port is part of an aggregated link, it cannot be configured as the target port for a port mirror. However, a port in an aggregated link can serve as the source port for a port mirror.

When connecting to another switch, connect anchor port to anchor port, and member port to member port.

Virtual LANs

A Virtual LAN (VLAN) is a logical network grouping you can use to isolate network traffic so members of the VLAN receive traffic only from other members. Creating a VLAN is the virtual equivalent to physically moving a group of devices to a separate switch (creating a Layer 2 broadcast domain). With VLANs you can reduce broadcast traffic for the entire switch, and increase security, without changing the wiring of your network.

The 470 switches support three types of VLANs:

Port-based

Tag-based (IEEE 802.1Q)

Protocol-based

Switch 470 the Using

13

C H A P T E R 2

Intel® NetStructure™ 470T and 470F Switches User Guide

Port-based VLANs

Port-based VLANs are the simplest and most common form of VLAN. In a port-based VLAN, the system administrator assigns the ports to a specific VLAN. For example, the system administrator can designate ports 1, 2, and 3 as part of the engineering VLAN and ports 5, 6, 7, and 8 as part of the marketing VLAN. Port-based VLANs are easy to configure and all changes are transparent to the users because they take place at the switch. The 470 switches support a maximum of four port-based VLANs. A port can belong to only one port-based VLAN at a time.

If a user changes to another location, the system administrator reassigns the port to the new VLAN. If a switch (or hub) is connected to a port that is part of a VLAN, all devices connected to the switch are also part of the VLAN. You cannot prevent an individual device on that switch from becoming part of the VLAN.

Tag-based (IEEE 802.1Q) VLANs

The tag-based VLAN supported by the 470 switches is based on the IEEE 802.1Q specification. The specification provides a uniform way to create VLANs within a network and allows you to create a VLAN that can span across the network. Until the release of IEEE 802.1Q, it was not possible to create a VLAN across devices from different vendors.

14

C H A P T E R 2

Using the Intel® NetStructure™ 470T and 470F Switches

The 802.1Q VLAN works by using a tag added to the Ethernet frames. The tag contains a VLAN Identifier (VID) that identifies the frame as belonging to a specific VLAN. These tags allow switches that support the 802.1Q specification to segregate traffic between devices and communicate a device’s VLAN association across switches. The example below shows a 470F switch.

Intel® NetStructure470F Switch

Local

Console: 9600-8-N-1

 

Management

Flow Ctrl=None

Status

(EIA 232)

 

 

 

 

 

 

 

 

 

1

 

2

 

3

 

4

 

5

 

6

 

7

 

8

 

 

 

 

 

 

 

Link\Act

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

1

2

3

4

5

6

7

8

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

TX

RX

TX

RX

TX

RX

TX

RX

TX

RX

TX

RX

TX

RX

TX

RX

VLAN 1:

VLAN 2:

Engineering

Manufacturing

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

VLAN 1 computers

 

 

 

 

 

 

 

 

 

 

 

Server and Printer

 

 

 

 

can't see VLAN 2

 

 

 

 

 

 

 

 

 

 

 

are members of both

computers

 

 

 

 

 

 

 

 

 

 

 

VLANs

Switch 470 the Using

There are multiple advantages to implementing 802.1Q VLANs. First, it helps to contain broadcast and multicast traffic across the switch thus improving performance. Second, ports can belong to more than one VLAN. Third, VLANs can span multiple switches that support the 802.1Q specification. Finally, it can provide security and improve performance by logically isolating users and grouping them.

A logical grouping can be mapped to a workgroup. For example, you can create a VLAN that groups all the users from the engineering department. Benefits of this logical grouping are: it improves performance by reducing traffic that belongs to a different logical group (e.g. marketing), improves security (engineering can’t see marketing), and eases moves because the user doesn’t have to be physically located in the same group to participate in the VLAN.

15

C H A P T E R 2

Intel® NetStructure™ 470T and 470F Switches User Guide

Protocol-based VLANs

In a protocol-based VLAN, traffic is bridged through specified ports based on its protocol. Any packet using a different protocol is dropped as it enters the switch. This type of VLAN allows you to use a common protocol to communicate, yet prevents any packets that are not using the specified protocol, from entering the switch.

For example, you can attach a LAN using NetBEUI traffic to port 1 on the switch, and attach a LAN using IPX traffic to port 2 on the switch. Then, attach a router connected to the Internet, to port 8. Create an IP VLAN that incorportates ports 1, 2, and 8. The NetBEUI traffic on port 1is not passed to ports 2 or 8. The IPX traffic on port 2 is not passed to ports 1 or 8. However, computers using the IP protocol can talk freely to ports 1, 2, and 8. This allows the computers to connect to the Internet, yet not be bombarded with traffic that they do not need to see.

The 470 switches support a maximum of four protocol-based VLANs, and they can be either IP, IPX, NetBEUI, or all three combined. Each port can be a member of only one protocol-based VLAN. The example below shows a 470F switch.

Protocol-based VLANs can help optimize network traffic patterns because protocol-specific broadcast messages are sent only to computers that use that protocol. For example, if a NetBEUI VLAN is created, only NetBEUI traffic is allowed to pass through the VLAN.

16

C H A P T E R 2

Using the Intel® NetStructure™ 470T and 470F Switches

Spanning Tree Protocol and VLANs

The 470 switches support the Spanning Tree Protocol across the entire switch, not across each VLAN. If VLANs create a redundant link between two switches and both of those switches have the Spanning Tree Protocol enabled, one of the VLANs is disabled.

The following diagram shows an example. Both Switch 1 and Switch 2 have two port-based VLANs configured. Crossover cables connect the ENG_VLAN on Switch 1 to ENG_VLAN on and Switch 2. Crossover cables also connect the MKT_VLAN on Switch 1 to the MKT_VLAN on Switch 2. When spanning tree is enabled on both switches, the redundant link between the MKT_VLANs is blocked and those VLANs can no longer communicate. The example below shows 470F switches.

Switch 470 the Using

GARP VLAN Registration Protocol (GVRP)

Because tag-based (IEEE 802.1Q) VLANs can span across the network, it poses a challenge for network administrators to manage changes to the VLAN. The GARP VLAN Registration Protocol (GVRP) provides a dynamic mechanism for switches to share topology information and manage changes with other switches. This saves the network administrator from having to manually propagate VLAN configuration information across switches.

17

C H A P T E R 2

Intel® NetStructure™ 470T and 470F Switches User Guide

Note

Dynamically created VLANs are not saved in the switch’s memory. If the device sending out the GVRP updates is removed, the dynamic VLAN is removed.

GARP (Generic Attribute Registration Protocol) is defined by the IEEE 802.1D (1998 Edition) specification and is the mechanism used by switches and end nodes (servers, PCs, and so on) to propagate configuration across the network domain. GVRP uses GARP as a foundation to propagate VLAN configuration to other switches. Devices that support GVRP transmit their updates to a known multicast address that all GVRP-capable devices monitor for information updates.

Sending GVRP messages between switches accomplishes the following tasks:

Dynamically adds or removes a port from participating in a VLAN

Sends updates about the switch’s own VLAN configuration to neighboring GVRP-capable devices.

Integrates dynamic and static VLAN configurations within the same switch. For devices that don’t support GVRP, static VLAN configurations are created by the user on the switch.

When the switch is running 802.1Q VLANs, Spanning Tree Protocol is enabled for GVRP to work properly.

Internet Group Management Protocol (IGMP)

Normally, multicast traffic is broadcast by the switch to all ports. For multicast traffic based on TCP/IP using the IGMP protocol, the switch can optimize the broadcasting of multicast traffic by forwarding multicast traffic only to ports that require it.

IGMP Snooping is a feature that allows the switch to forward multicast traffic intelligently. The switch “snoops” the IGMP query and report messages and forwards traffic only to the ports that request the multicast traffic. This prevents the switch from broadcasting the traffic to all ports and possibly affecting network performance.

IGMP Snooping requires a router that detects multicast groups on its subnets and keeps track of group membership.

18

3 UsingView Intel® Device

Overview

Intel® Device View allows you to manage Intel NetStructure™ 470T and 470F switches and other supported Intel networking devices on your network.

Intel Device View provides these features:

The ability to configure new network devices

A graphical device manager for Intel switches, hubs, and routers

Autodiscovery, which finds supported Intel devices on the network

The Device Tree, which shows all the supported devices detected on your network

Support for Remote Monitoring (RMON)

Web or Windows* platform

Plug-in to HP OpenView*, IBM Tivoli* NetView*, and Intel LANDesk® Network Manager

Other useful tools such as a TFTP server

19

C H A P T E R 3

Intel® NetStructure™ 470T and 470F Switches User Guide

Installing Intel Device View

Before you install Intel Device View, make sure your PC meets the system requirements in the Intel® Device View User Guide, which is included on the Intel Device View CD-ROM.

To install Intel Device View

1Insert the Intel Device View CD-ROM into your computer’s CD-ROM drive. The Intel Device View installation screen appears. If it doesn’t appear, run autoplay.exe from the CD-ROM.

2Choose the version of Intel Device View you want to install.

To install Intel Device View for use on this PC only, click Install for Windows.

To install Intel Device View on a Web server, click Install for Web. You can access the Device View server from any PC on your network with Internet Explorer* 4.0x or later.

To install Intel network device support for HP OpenView, IBM Tivoli NetView, or Intel LANDesk Network Manager, click Install as Plug-in. This option is available if you have OpenView, NetView, or LANDesk Network Manager installed on the PC.

3Follow the instructions in on the installation screens.

20

C H A P T E R 3 Intel Device View

NOTE

These are the requirements if you want to use the Web version of Device View :

Web browser

Internet Explorer 4.0 or later

Web Server

IIS* 2.0 or later

Peer Web Services*

Netscape Enterprise* Web Server 3.01 or later

Starting Intel Device View

Install either the Windows or Web version of Intel Device View.

Windows* version

On your desktop, click Start and then point to Programs > Intel Device View > Intel Device View - Windows to go to the Intel Device View main screen.

Web version

On your desktop, click Start and then point to Programs > Intel Device View > Intel Device View - Web to go to the Intel Device View main screen.

To view Intel Device View from another PC on your network, type the following URL. In the following example, the URL is entered in the Address field for Internet Explorer.

http://servername/devview/main.htm

where servername is the IP address or name of the server where Intel Device View is installed.

Intel Device View’s main screen appears.

Intel®

View Device

21

C H A P T E R 3

Intel® NetStructure™ 470T and 470F Switches User Guide

Installing a New Switch

After you install a new switch on your network, you can use the Intel Device View Device Install Wizard to configure it for management.

To install and configure a new switch for management

1Start Intel Device View. The Device Install Wizard appears. If it doesn’t appear, click Install from the Device menu or double-click the appropriate MAC address in the Device Tree under Unconfigured Devices. (The MAC address is located on the rear of the switch.)

2On the Device Install Wizard - Start screen, click Next.

3On the Device Install Wizard - MAC Address screen, click the MAC address of the new switch, and then click Next.

4Follow the instructions in the wizard to assign an IP address and a name to the switch.

Using the Device Tree

After you start Intel Device View, the Device Discovery service begins searching for supported Intel network devices on your network. As it discovers devices, the Device Discovery service adds an icon for each device to the Device Tree on the left side of the screen.

22

C H A P T E R 3 Intel Device View

Different states of the 470 switches are represented by icons in the Device Tree.

Device Tree icons

Device Tree root

Subnet

Intel Switch (if non-responding the icon is red)

Unconfigured Intel Switch

Group of Intel Switches

Intel Router

Intel Switch (Layer 3 capable)

Intel Stackable Hub

To expand the root or a subnet, click the (+) next to the icon. To collapse the view, click the (-) next to the icon. Double-click a device icon to view the device image.

To add a device to the Device Tree

Use this procedure if the device does not automatically appear after installation.

1Right-click anywhere on the Device Tree.

2On the menu that appears, click Add Device.

3In the Add Device dialog box, type the IP address of the switch you want to add.

4Fill in the other fields, as appropriate.

5Click OK.

The icon for the new switch appears in the Device Tree.

Intel®

View Device

23

C H A P T E R 3

Intel® NetStructure™ 470T and 470F Switches User Guide

To refresh the Device Tree

Refreshing the Device Tree updates it to show any newly discovered devices and changes in device status.

1Right-click anywhere on the Device Tree.

2On the menu that appears, click Refresh.

To delete a device from the Device Tree

1Right-click the device you want to remove from the Device Tree.

2On the menu that appears, click Delete.

Deleting a device from the Device Tree does not remove the device from the network.

To find a device in the Device Tree

1On the Device Tree, right-click anywhere.

2On the menu that appears, click Find.

3In the Find Device dialog box, type the IP address of the device you want to find in the tree.

4Click OK.

The device icon is highlighted in the Device Tree.

Losing contact with a switch

If Intel Device View loses contact with a switch, the color of the switch icon changes to red, to indicated that the switch is not responding.

If the non-responding switch icon appears, you cannot manage the device in Intel Device View. If you’re unable to ping the device or start a Telnet session, try accessing the switch’s Local Management.

24

C H A P T E R 3 Intel Device View

Managing a Switch

To manage a 470T or 470F switch, double-click the switch icon in the Device Tree. In the example following, the switch has been assigned an IP address of 124.123.122.3.

The 470 switch Web Device Manager appears in the Intel Device View window. For information about using the Web Device Manager, see Ch. 4.

Intel®

View Device

For information about using Intel Device View, see the Help or the User

Guide on the Intel Device View installation CD-ROM.

Viewing RMON Information

The Remote Monitoring (RMON) specification extends SNMP functionality to look at traffic patterns on the network instead of looking only at the traffic for an individual device. The following RMON groups are supported:

25

C H A P T E R 3

Intel® NetStructure™ 470T and 470F Switches User Guide

Group 1 (Statistics): Monitors utilization and error statistics for each network segment (100Mbps or 1000Mbps).

Group 2 (History): Records periodic statistical samples from variables available in the statistics group.

Group 3 (Alarms): Allows you to set a sampling interval and alarm thresholds for statistics. When a threshold is passed, the switch creates an event. For example, you might set an alarm if utilization exceeds 30%.

Group 9 (Events): Provides notification and tells the switch what to do when an event occurs on the network. Events can send a trap to a receiving station or place an entry in the log table, or both. For example, when the switch experiences an RMON Event, it sends out an alarm.

The switch also keeps a log that shows a list of the RMON Events and

RMON Alarms that have occurred on the switch.

To view RMON statistics

1In the Device Tree, right-click the switch’s icon, and then point to RMON.

2Click the RMON option you want to view.

You can also access RMON features using LANDesk Network Manager, or an SNMP application that supports RMON such as HP OpenView or IBM Tivoli NetView. For more information about using RMON to monitor the switch, see the Intel Device View Help.

26

4

Using the Web

Device Manager

NOTE

You can use Internet Explorer* or Navigator* to access the Web Device Manager.

Overview

With the Web Device Manager, which is built into the Intel® NetStructure™ 470T and 470F Switches, you can use a Web browser to manage and monitor the switch. For example, you can use the Web Device Manager to configure the switch or individual ports, or to monitor traffic statistics and utilization.

For more information about using this interface, see the Web Device Manager Help.

27

C H A P T E R 4

Intel® NetStructure™ 470T and 470F Switches User Guide

NOTE

The default IP address for the switch is 192.0.2.1. To access the switch with the default IP address, your workstation must be on the 192.0.2.0 subnet.

Or, you can connect to the switch using Local Management (through the serial port) and set an IP address that is on your network. Then you can access the Web Device Manager using the new IP address.

Accessing the Web Device Manager

1In the Location or Address field of your Web browser type the IP address of the switch. For example, to use the default IP address of the switch, type 192.0.2.1 and then press Enter.

2When prompted, type your user name and password. By default, no user name or password is assigned. If you previously set a user name and password using Local Management, enter them here.

3Click OK. The Web Device Manager window appears in your Web browser.

Navigating the Web Device Manager

1On the left side of the Web Device Manager window, click a menu item (such as Configure Device) to show the available options.

28

C H A P T E R 4 Using the Web Device Manager

Click a menu to view available options.

2In the menu, click an option. The corresponding screen appears on the right side of your Web Device Manager window.

3To hide the options, click the menu item again.

470F

470T

Using Management Screens

After you select an option from the navigation menu, the corresponding screen appears on the right side of the Web Device Manager window.

Switch faceplate graphic

A graphical representation of the switch’s faceplate appears at the top of the screen.

Manager Device Web

29

C H A P T E R 4

Intel® NetStructure™ 470T and 470F Switches User Guide

If the option you selected allows you to configure or monitor a specific port, you can change to another port by clicking it on the faceplate graphic.

Port color on the faceplate graphic indicates the status of the port.

Port Color

Meaning

Blue

Port has a link at 1000Mbps.

Green

Port has a link at 100Mbps.

Magenta outline

Ports are in a link aggregation.

Orange

Port is disabled.

Gray

No link.

 

 

Buttons

Each configuration screen includes four buttons on the bottom of the screen.

Button

Function

Submit

Applies the configuration settings on the current screen.

 

Note: If you do not save the settings to the switch’s flash

 

memory your changes are lost when the switch is rebooted.

Reset

Clears any changes you made on the current screen and

 

restores the currently applied settings.

Default

Applies factory defaults for this screen’s settings. When

 

you log out, you can permanently save the new settings to

 

the switch. Otherwise, they are lost upon the next reboot.

Help

Displays Help for the current screen.

 

 

30

C H A P T E R 4 Using the Web Device Manager

NOTE

If you change the flow control or IP settings, you must reboot the switch before the new settings can take effect.

Configuring the Switch’s IP Settings

Note: You must select Manual in the IP Assignment Method box before you can change the IP settings.

1Click the Configure Device menu, and then click IP Settings. The IP Settings screen appears on the right side of the Web Device Manager window.

2To manually configure the IP settings, select Manual in the IP Assignment Method box.

3Under “Change,” type the new IP address, subnet mask, and default gateway. If you set up tag-based (IEEE 802.1Q) VLANs on the switch, you can specify the VLAN where the switch’s SNMP management agent resides.

4To apply the changes, click Submit.

5Click Save and Reboot for the new settings to take effect. Rebooting the switch temporarily interrupts network connectivity to the switch. Click Reboot Later if you want to reboot the switch later. The new IP settings do not take effect until the switch reboots.

Manager Device Web

31

C H A P T E R 4

Intel® NetStructure™ 470T and 470F Switches User Guide

NOTE

If you change the flow control or IP settings, you must reboot the switch before the new settings can take effect.

Configuring a Port

You can use the Web Device Manager to enable or disable a port, and to change its speed, duplex, flow control, and priority settings.

To change port settings

1Click the Configure Device menu, and then click Port Settings. To access the Port Settings for a port, click the port you want to configure on the faceplate graphic.

2In the boxes, click the options you want to change:

Port State lets you enable or disable the port.

Speed/Duplex lets you set port speed and duplex.

Flow Control lets you enable or disable flow control.

Priority Queue (802.1p) lets you set the switch priority queue for packets sent or received on this port.

3Click Submit.

32

C H A P T E R 4 Using the Web Device Manager

NOTE

The accounts and passwords you create with the Web Device Manager are the same accounts used to access Local Management.

Managing User Accounts

Create user accounts to give specific users read or write access to the switch through the Web Device Manager and Local Management. You can create a maximum of three accounts on the switch.

To create a user account

1Click the Configure Management menu and then click User Accounts. The first account you create must be an administrator.

2 Click Add.

3In the User Name box, type a user name.

The username can be up to 15 characters long and is case sensitive.

4In the Password box, type a password.

The password can be up to 15 characters long and is case sensitive. Asterisks (*) appear in the box as you type the password.

5In the Confirm Password box, type the same password.

Manager Device Web

33

C H A P T E R 4

Intel® NetStructure™ 470T and 470F Switches User Guide

6In the Access Level box, click an access level. An administrator can view all settings and make configuration changes. A user can only view settings.

7Click Submit.

To delete a user account

1Click the Configure Management menu, and then click User Accounts.

2In the User Accounts box, click the account you want to delete.

3Click Delete.

If you delete the account you used to log in for this session, you can continue to use that account until you log out. If you delete the only user account on the switch, log in again using the default of no user name and no password.

34

C H A P T E R 4 Using the Web Device Manager

Configuring VLANs

VLANs provide a way to create a logical network grouping without regard to physical location of the network nodes.

For more information about VLANs, see “Virtual LANs” in Chapter 2.

There are two main steps to set up a VLAN with the Web Device Manager:

Set the switch’s VLAN operation mode.

Configure the type of VLAN you selected.

To set the switch’s VLAN operation mode

NOTE

1

Click the Configure VLAN menu, and then click VLAN Operation

You can only have one operation

 

Mode.

mode active on the switch at a

 

 

time.

2

In the Current VLAN mode box, click the type of VLAN to set up.

3Click Submit.

4The switch automatically reboots. The 470 switches are rebooted whenever you change their VLAN operation mode.

After the switch reboots, you can configure the type of VLAN that you selected.

Manager Device Web

35

C H A P T E R 4

Intel® NetStructure™ 470T and 470F Switches User Guide

Port-based VLAN

You configure a port-based VLAN by creating the VLAN and then adding participating ports. The switch can support up to four port-based VLANs. However a port can be a member of only one VLAN; port-based VLANs cannot overlap.

To configure a port-based VLAN

1Click the Configure VLAN menu, and then click Port-based VLAN.

2Click Add to create a new VLAN, or select a VLAN and click Edit to change its configuration.

3If you are creating a new VLAN, type a name in the VLAN Name box.

4In the Available Ports box, click a port to add to the VLAN, and then click Add.

5When you finish adding ports, click Submit.

36

C H A P T E R 4 Using the Web Device Manager

NOTE

When creating a VLAN that includes ports on more than one switch, set the same VID on each switch.

Tag-based VLAN

You configure a tag-based VLAN by configuring port membership and ingress/egress rules. Note: If some of your devices don’t support 802.1Q tags, additional configuration may be necessary.

To configure a tag-based (IEEE 802.1Q) VLAN

1Create a VLAN and assign member ports.

Click the Configure VLAN menu, and then click Tag-based (IEEE 802.1Q) VLAN.

From the main Tag-based VLAN page, click Add to create a new VLAN. To modify an existing VLAN, click the VLAN name, and click Modify.

If you are creating a new VLAN, type a name and VID (from 2 to 4094) to identify it.

To configure membership of a port to a VLAN, click the port in the Available ports box and click Add. To remove a port, click the port in the Member ports box and click Remove.

The switch supports a maximum of 12 IGMP Snooping sessions to manage broadcast traffic. If you want the VLAN to be part of an IGMP Snooping session, select the Enable IGMP Snooping check box.

When you finish adding ports, click Next.

Manager Device Web

37

C H A P T E R 4

Intel® NetStructure™ 470T and 470F Switches User Guide

2Configure ports for egress (outbound) tagging.

Ensure that the VLAN Name field displays the name of the port you are configuring.

For each of the VLANs ports select Tag or Untag. This determines whether or not the system will remove (untag) tags before sending traffic out of each port.

3Configure ports for handling untagged traffic.

On the main Tag-based VLAN page, click Port Settings.

On the Port Settings screen you can set port-specific behaviors for processing VLAN traffic. To configure a specific port, click it on the faceplate graphic. To configure the same setting across all ports, click Configure All Ports.

38

C H A P T E R 4 Using the Web Device Manager

Options include:

Default Port VID: Sets the PVID to be assigned to untagged traffic on a given port. For example, if port 7’s default PVID is 100, all untagged packets on port 7 belong to VLAN 100. The default setting for all ports is VID 1.

GVRP: Allows automatic VLAN configuration between the switch and nodes.

Ingress Filtering: Allows frames belonging to a specific VLAN to be forwarded if the port belongs to the same VLAN. Disabling this setting will cause all frames to be forwarded, regardless of the port's VLAN membership.

4 When you finish changing the settings, click Submit.

Manager Device Web

39

C H A P T E R 4

Intel® NetStructure™ 470T and 470F Switches User Guide

Protocol-based VLAN

You configure a protocol-based VLAN by creating the VLAN and then adding participating ports. The switch supports up to three protocol-based VLANs: IP, IPX, and NetBEUI. However, each port can be a member of only one VLAN; protocol-based VLANs cannot overlap.

To configure a protocol-based VLAN

1Click the Configure VLAN menu, and then click Protocol-based VLAN.

2Click Add to create a new VLAN, or select an existing VLAN and click Edit to change its configuration.

3If you are creating a new VLAN, type a name in the VLAN Name box and select a protocol from the Protocol list.

4In the Available Ports box, click a port to add to the VLAN, and then click Add.

5When you finish adding ports, click Done.

40

C H A P T E R 4 Using the Web Device Manager

NOTE

When configuring link aggregation between two 470 switches, you must connect anchor port to anchor port, and member port to member port.

NOTE

Connectivity is momentarily interrupted when you submit changes.

Link Aggregation

On the Web Device Manager’s switch faceplate graphic, a link aggregation is shown with its ports outlined in magenta (pink).

To create a link aggregation

1 Click the Configure Device menu, and then click Link Aggregation.

2Choose the anchor port. Anchor ports are listed by port number in the left column.

3In the Port Width box, click the number of ports (including the anchor port) to include in the link aggregation.

4In the Aggregation Group Name box, type a name for the aggregation.

5Click Enable to activate the group.

6Click Submit.

Static MAC Addresses

The switch has a MAC address table that stores all the MAC addresses that it learns from the network. The switch refers to this table forwarding traffic to specific ports, so it does not broadcast traffic to every port.

There are two ways to add addresses to the MAC address table:

The switch can learn addresses from the network and add them dynamically. Dynamic entries remain in the table only while the associated node is active, and are deleted if the node is inactive for longer than a certain period of time (age-out time).

Manager Device Web

41

+ 108 hidden pages