Information in this document is provided in connection with Intel® products. No license, express or implied, by estoppel or
otherwise, to any intellectual property rights is granted by this document. Except as provided in Intel's Terms and Conditions of Sale
for such products, Intel assumes no liability whatsoever, and Intel disclaims any express or implied warranty, relating to sale and/or
use of Intel products including liability or warranties relating to fitness for a particular purpose, merchantability, or infringement of
any patent, copyright or other intellectual property right. Intel products are not intended for use in medical, life saving, or life
sustaining applications.
Intel may make changes to specifications and product descriptions at any time, without notice.
Designers must not rely on the absence or characteristics of any features or instructions marked “reserved” or “undefined.” Intel
reserves these for future definition and shall have no responsibility whatsoever for conflicts or incompatibilities arising from future
changes to them.
The Intel® NetStructure™ ZT 8101 10/100 Ethernet Switch may contain design defects or errors known as errata that may cause
the product to deviate from published specifications. Current characterized errata are available on request.
This document and the software described in it are furnished under license and may only be used or copied in accordance with the
terms of the license. The information in this document is furnished for informational use only, is subject to change without notice,
and should not be construed as a commitment by Intel Corporation. Intel Corporation assumes no responsibility or liability for any
errors or inaccuracies that may appear in this document or any software that may be provided in association with this document.
Except as permitted by such license, no part of this document may be reproduced, stored in a retrieval system, or transmitted in
any form or by any means without the express written consent of Intel Corporation.
Contact your local Intel sales office or your distributor to obtain the latest specifications and before placing your product order.
Copies of documents which have an ordering number and are referenced in this document, or other I ntel literature may be obtaine d
by calling 1-800-548-4725 or by visiting Intel's website at http://www.intel.com.
Intel® and NetStructure™ are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and
other countries.
*Other names and brands may be claimed as the property of others.
January 2002001First release of this document
January 2003002Changes regarding SNMP, priority, Link Aggregation, GMRP.
9
Contents
10
Introduction1
The Intel® NetStructure™ ZT 8101 10/100 Ethernet Switch is a high performance managed
switch that supports both Layer 2 and Layer 3 features. For fast connection speeds and flexibility, it
has 24 10/100 Mbps Fast Ethernet ports and 2 gigabit Ethernet ports in a 6U CompactPCI* form
factor board. The in-chassis switch minimizes external wiring, thus improving density and
reliability.
You can manage the switch from a termi nal, with Teln et, from a We b browser, or through IPMI via
the Intel® NetStructure™ ZT 7101 Chassis Management Module. The ZT 8101 routes and
switches at full wire speed with its non-blocking architecture, and it has sophisticated multicast
protocols to limit unnecessary traffic. It provides an in-chas sis switch fabric that you can configure
to operate in a redundant configuration.
Highlights
• Full wire speed on all ports
• VLAN ID tagging and priority queues
• Link aggregation
• Port mirroring
• Packet filtering
• Multicast and broadcast storm control
• DHCP/BOOTP packet forwarding
• RIP (v1 and v2), DVMRP, PIM-DM
• Low port latency
• Hot-swappable board with LED indicator
Ethernet Features
Layer 2 Switching Functions
• 10BASE-T, 100BASE-TX, and 1000BASE-T port functions
— 22 10/100 Fast Ethernet ports to the mid-plane connectors
— 2 10/100 Fast Ethernet ports (RJ45) on the font panel
— 2 100/1000 Ethernet ports (RJ45) on the front panel
• Auto-negotiation function for speed (10 MB/100 MB/1000 MB), duplex (full/half), and flow-
control
• Back pressure flow control for half-duplex mode
• IEEE 802.3x compliant flow control for full-duplex mode
14Intel® NetStructure™ ZT 81 01 10/ 100 Ethernet Switc h Use r’s Man ual
Installation and Initial Setup2
This chapter provides installation and initial setup information for the switch .
Installing the Board
These instructions explain the mechanical aspects of installing a ZT 8101 board. The board should
be installed in a PICMG* 2.16-compliant fabric slot.
1. System power does not need to be off to insert a ZT 8101 board.
2. Prepare the board by opening the injector/ejector mechanisms.
Figure 1. Injector/Ejector Operations
3. Carefully align the edges of the board with the left and right card guides in the appropriate slot.
It may be helpful to look into the enclosure to verify correct alignment of the rails in the
guides.
4. Taking care to keep the board aligned in the guides, slide the board in until the injector/ejector
mechanisms engage the retention bars.
5. Simultaneously push in the board and rotate the injector/ejector mechanisms to their closed
positions (rotate inward) to seat the backplane connectors. When the board is in place, it will
boot if the system power is on.
6. Make the desired connections at the faceplate and configure the board.
Power on
After the power switch is turned on, the LED indicators should respond as follows:
• All LED indicators will momentarily blink, which represents a reset of the system.
• The board status LED indicator will blink while the switch loads onboard software and
performs a self-test. After approximately 20 seconds, the LED will light again to indicate th e
switch is in a ready state.
• The hot-swap LED indicator will be off.
• The port LED indicators will be off if there is no Ethernet connection and on if there is an
Ethernet connection.
Uninstalling the Board
These instructions explain the mechanical aspects of removing a Intel® NetStructure™ ZT 8101
10/100 Ethernet Switch board from a system.
1. You do not need to turn off the system power to remove a ZT 8101 board.
2. Disconnect connections at the faceplate (Ethernet and serial ports).
3. The board should be in a “safe” state to be removed or data may be lost. Signal the syst em that
a board is about to be remo ved by parti ally unlatchin g the ejectors on the board to be remov ed.
Do not fully open the ejectors, as this levers the board out of the enclosure and prematurely
breaks its backplane connection.
4. Wait for the blue hot swap LED on the board's faceplate to light; this indicates that board
processes have finished and the board is safe to extract. If the hot swap LED fails to light after
30 seconds, re-latch the ejectors and unlatch them again. In this case, the board is safe to
extract (though the hot swap LED may not light).
5. Once the hot swap LED lights, open the injector/ejector mechanisms fully, rotating the handles
outward until the board disengages from the backplane (refer to “” on page 15).
6. Slide the board evenly out of the enclosure.
7. Install a replacement board or cover the empty slot with a filler panel to maintain the
enclosure's shielding and cooling performance.
Identifying External Components
This section describes the front panel and the LED indicators of the ZT 8101switch. The front
panel consists of LED indicators, a management serial port, a toggle button, two 10/100 Ethernet
ports, and two 100/1000 Ethernet ports.
16Intel® NetStructure™ ZT 81 01 10/ 100 Ethernet Switc h Use r’s Man ual
Figure 2. Front Panel
Installation and Initial Setup
Status LEDs
The two LEDs at the bottom of the font panel are status LEDs. The top LED indicates the overall
status of the board and the bottom LED indicates the hot swap status of the board.
OffNot powered.
GreenPowered and functioning normally.
Amber
Hot Swap LED
StatusMeaning
OffSwitch is active or in the process of shutting down; do not remove it.
BlueSafe to remo ve th e sw i tch.
Port LEDs
Attention needed due to one of the following conditions:
• Over temperature
• Power supplies exceeding voltage limits
• IPMB time outs
The LED array on the front panel displays inf ormati on abou t all the Ethe rnet l inks on t he bo ard. A
green/amber two-color LED is used for each of the 26 Ethernet port connections (24 10/100 + 2
Gigabit). A push-button switch just below the array toggles th e LED display from Link/Activity
mode to Link/Speed mode. The default LED mode is Link/Activity. When you depress the switch
button, the LEDs are in Link/Speed mode.
Link / Activity LED Mode
StatusMeaning
OffNo Ethernet connection.
Solid GreenGood connection, link present.
Blinking GreenPort is transmitting or receiving packets (activity is on going).
Port is not forwarding packets. The port has been disabled by management, an
address violation has occurred, or the port is being blocked by STP.
Solid Amber
Note: After a port is reconfigured, the port LED can remain amber for as long as
30 seconds while STP checks the switch for loop paths. When the STP checking
is completed, the port then resumes displaying its current connection status.
18Intel® NetStructure™ ZT 81 01 10/ 100 Ethernet Switc h Use r’s Man ual
Link / Speed LED Mode
Port TypeStatusMeaning
10/100Off10 Mb/s
Solid Green100 Mb/s
100/1000Solid Green100 Mb/s
Solid Amber1000 Mb/s
Getting Started with Management
The switch contains the following components:
• A CPU
• Memory for data storage
• Flash memory for configuration data, operational programs, and SNMP agent firmware.
These components allow you to manage and monitor the switch from either the board’s serial port
or the network itself. You can configure and manage the switch from these locations:
Installation and Initial Setup
• A terminal or a workstation running terminal emulation software and connected to the switch
via the RS-232 port.
• A workstation connected to the network and running Telnet.
• A workstation connected to the network and running a Web browser.
To access the switch via Telnet or a Web browser, you must assign the switch an appropriate IP
address for your network. To do this, you must access the switch using the RS-232 port via the
Local Console.
This section explains how to
• Set up access to the Local Console
• Configure the switch’s IP address
Once you complete these tasks, you can access the switch from any of the three locations. Since the
Local Console and the Telnet Console use the same interface, chapter 4 explains how to access the
switch using Telnet and then explains all the configuration and management options in this
interface. Chapter 5 explains the Web Console. Both the Web and the Telnet/Local interfaces
expose the same functionality. Chapter 3 describes some basic concepts that you should be familiar
with before configuring the switch.
Accessing the Local Console
The Local Console is a terminal or a workstation running a terminal emulation program that is
connected directly to the switch via the RS-232 serial port on the front of the switch. Such a
connection is referred to as an “Out-of-Band” connection because the console is connected to the
switch using a different circuit than the circuit used for normal network communications. The
Local Console can be used to set up and manage the switch even when the network is down.
The serial port on the front panel uses Cisco* cable kit (Order Number: ACS-DSBUASYN). This
kit includes a DB-25 terminal adapter, a DB-9 terminal adapter, and RJ-45 rollover cable. To build
this cable, see Appendix B, “Serial Cable”.
A terminal (such as a VT-100) or a computer running a terminal emulation program (such as
HyperTerminal, which is automatically installed with Windows*) is connected to this cable.
The serial port is set at the factory for the following configuration:
• Baud rate:9600
• Data width:8 bits
• Parity:None
• Stop bits:1
• Flow Control:None
Make sure the terminal or computer you are using to make this connection is configured to match
these settings.
If you are having problems making this connection on a computer, make sure the emulation is set
to VT-100. If you still don't see anything, press CTRL+R to refresh the screen.
To log in to the switch the first time
The usernames and passwords used to access the switch are case sensitive; therefore, “S” is not the
same as “s.”
When you first connect to the switch, you will be presented with a login screen.
1. Use the Arrow keys or the Tab key to move to the Username field. Leave the field blank and
press Enter. There is no initial username.
2. Move to the Password field. Leave the field blank and press Enter. There is no initial
password. The Main Menu appears.
The first created user automatically gets administrator privileges. One of your first configuration
tasks should be to create at least one Admin-level user for the switch to protect it from
unauthorized users.
Setting the IP Address
You use the Basic Network Setup menu to set the boot-up operation for obtaining an IP address or
to manually assign the IP address for the switch. The switch needs a valid IP address for your
network to access the switch via Telnet or the Web.
To configure the IP address
1. From the Main Menu, select Basic Network Setup and press Enter.
20Intel® NetStructure™ ZT 81 01 10/ 100 Ethernet Switc h Use r’s Man ual
Installation and Initial Setup
2. To configure the IP address, use the Arrow keys or the Tab key to modify the settings in the
New Switch IP Settings column.
ParameterDefaultDescription
Get IP FromManual
IP Address10.90.90.90Specifies the IP address assigned to the switch.
Subnet Mask255.0.0.0
Default Gateway0.0.0.0
VLAN Namedefault
Specifies the method for assigning the switch an IP address.
Use the spacebar to toggle to Manual, DHCP, or BOOTP.
Specifies the subnet mask assigned to the switch and to the
other devices on this segment of the network.
Specifies the IP address of the device that routes to different
networks. A gateway must be defined if the workstation you
are going to use for switch management is located on a
different IP segment than the switch.
Specifies the name of the VLAN that contains the
workstations that you will use to manage the switch. This
VLAN must already exist.
3. To configure a name and contact information for the switch, enter information in the following
fields.
ParameterDescription
Name
LocationSpecifies the physical location of the switch.
ContactSpecifies the name of the person responsible for the switch.
Specifies the name assigned to the switch. If you are installing multiple
switches, you should give each a unique name.
4. Highlight APPLY and press Enter.
5. Press Escape to return to the Main Menu.
6. To save your changes to NV-RAM, highlight Save Changes and press Enter.
To continue configuring the switch, see chapter 4 for information on this interface. See chapter 5
for information about using the Web Console.
Upgrading Firmware through Zmodem
Generally, TFTP is the first choice to use to upgrade firmware. The Telnet Console and the Web
Console both have options for upgrad i ng the fi rmware us i ng a TFT P ser ver (see chapt ers 4 and 5).
However, you can also use Zmodem to upgrade the firmware from the serial port. The switch can
hold only one image of the firmware.
Note:If FLASH becomes corrupted because you lose power when upgrading the firmware, you must use
Zmodem to fix the problem.
To upgrade the firmware using Zmodem
1. Obtain the runtime firmware.
2. Using Windows HyperTerminal*, log in to the switch through the serial port.
3. From the Main Menu, select Reboot and press Enter.
4. When the power on self test message appears, press the # key and wait for the following
message:
Please change your baud rate to 115200 for the Zmodem upgrade, or
press CTRL+C to go to the BOOT Menu.
If you press CTRL+C, you can configure the baud rate to a different value.
5. Change HyperTerminal’s baud rate to 115200.
6. Use t he Send File function of HyperTerminal to upgrade the firmware.
When the download is completed, Zmodem will display a message indicating that it is done
and then a message about loading the Runtime image.
7. Change the baud rate of HyperTerminal back to 9600 bps.
8. Disconnect and reconnect.
9. Log in to the switch.
10. From the main menu, select Switch Information and press Enter. Verify the firmware
version.
22Intel® NetStructure™ ZT 81 01 10/ 100 Ethernet Switc h Use r’s Man ual
Switch Management and Operating
Concepts3
This chapter describes many of the concepts you need to understand to configure and manage the
switch. It also describes many of the features available for managing the switch. The instructions
for configuring the switch are in chapter 4 (Telnet Console) and chapter 5 (Web Console).
Managing the Switch
The Intel® NetStructure™ ZT 8101 10/100 Ethernet Switch switch has three methods for
configuring switch parameters and viewing switch status and statistics:
• Serial—The switch’s serial port on the front panel allows a terminal or a PC running terminal
emulation software to be connected to the switch and configure the switch. It uses the same
application that is used over Telnet. The serial port is usually used only for initial set up, such
as configuring the switch’s IP address, or when the network is down. It can also be used to
upgrade the switch’s firmware with Zmodem.
• Telnet—The switch's embedded Telnet server allows users from remote systems, which are
running a Telnet application over TCP/IP, to log in to the switch, configure it, and view the
status of and statistics from the ports. The current implementation allow eight 8 Telnet sessions
to be active at the same time.
• Web—The switch's embedded Web server allows users from remote systems, which are
running a Web browser, to log in to the switch, configure it, and view the status of and
statistics from the ports. The current implementation allows five HTTP sessions to be active at
the same time.
The switch also contains the following utilities:
• Ping—The Ping utility invokes the ICMP echo request and echo reply messages. A host sends
an ICMP echo request message to a specified destination. Any computer th at receives an ech o
request formulates an echo reply and transmits it to the original sender. The echo request and
associated reply can be used to test whether a destination is reachable and responding.
• TFTP—The TFTP protocol is used to transfer fil es without any kind of authe nticatio n. It runs
on top of UDP, using timeout and retransmission to ensure that data arrives. The switch's TFTP
client allows users to copy files from, and to, a remote system that is running the TFTP server
protocol. The TFTP client allows only one user to access it and transfer files.
You can use the TFTP client to do the following:
— Download firmware.
— Download or upload a switch configuration file.
— Upload the switch's history log.
Some TFTP servers cannot determine when a transaction is aborted. In these cases, you must
reboot the switch, which restarts the TFTP server and re-initializes the TFTP transaction.
• Switch diagnostics—The PROM loader automatically ru ns memory diagnostics each time the
• Reset to factory defaults—The switch includes an option that allows you to reset the
configuration to the factory defaults. You can select to reset the IP address or save your
configured IP address.
Switch IP and MAC Addresses
Each switch must be assigned its own IP Address. The switch's default IP address is 10.90.90.90.
You can change the default switch IP address to meet the specification of your networking address
scheme.
The switch is also assigned a unique MAC address by the factory. You cannot change this MAC
address.
In addition, you can also set an IP address for a gateway router. This becomes necessary when the
network management station is located on a different IP network from the switch, making it
necessary for management packets to go through a router to reach the network manager, and vice
versa.
For security, you can list the IP addresses of the network management stations that you want to
manage the switch. If you list IP addresses, only those workstations have access; all others will be
denied.
You can also configure a VLAN for the network that the management stations are on, and then
configure the switch for this VLAN.
Port Configurations
By default, the switch is configured to use auto-negotiation to determine each port's speed and
duplex setting. The user can modify this and configure a port to use a specified configuration. The
Ethernet ports have the following characteristics:
Ethernet Por tLink SpeedDuplex
Fast Ethernet (10/100)10/100 MbpsHalf, Full
Gigabit Ethernet100 MbpsHalf, Full
Gigabit Ethernet1000 MbpsFull
Flow Control
All ports have a traffic limit because they have a limited buffer space to receive incoming frames.
Upon reaching the limit, a port either starts dropping pack ets or triggers flow con trol. The ZT 8 101
switch uses the following methods for flow control:
• 802.3x flow control—The switch sends PAUSE frames, which request remote ports to delay
sending packets for a period of time. The sending ports suspend further frame transmission
until the specified time period has elapsed.
• 802.3x compliant flow control —The switch does not send PAUSE frames, but it does
respond to them.
24Intel® NetStructure™ ZT 81 01 10/ 100 Ethernet Switc h Use r’s Man ual
Switch Management and Operating Concepts
• Back pressure—The switch fakes a collision and then transmits a jam sequence to ensure all
stations are notified of the “collision.” This causes the sending ports to trigger their back-off
routines and reduces the amount of traffic on the port.
The port type and duplex mode determine which type of flow control is used. The following table
lists the port types and their flow control methods.
Port TypeDuplex ModeFlow Control
Fast Ethernet (10/100)HalfBack pressure
Fast Ethernet (10/100)Full802.3x compliant
Gigabit EthernetFull802.3x
Port Security and MAC Address Learning
For security purposes, you can disable MAC address learning on one or more ports. When MAC
address learning is disabled, a port uses the first packet received as a permanent address and
accepts broadcast traffic and packets from only that one MAC address. New addresses will not be
learned.
The default value for each port is learning enabled.
SNMP
The switch has an embedded Simple Network Management Protocol (SNMP) agent which is
compliant with SNMP v1 and SNMP v2c. This agent monitors the status of the board's hardware
and the traffic passing t h roug h i ts por ts. A co mpu ter at t ached to t he network, called a management
station, can access this information. The switch uses the following features to control access to its
information:
• Community strings-You can configure up to four community strings so that only authorized
management stations can access the agent. You can set each string to grant either read only or
read/write access.
• IP address-You can restrict access to specified IP addresses. You can enter up to three IP
addresses which restricts access to these specified management stations.
You can also specify which management agents receive the trap messages generated by the SNMP
agent. These trap messages are status messages that alert you of events such as authentication
failure, STP topology changes, and link status changes on the port.
The following events will generate an SNMP trap on the ZT 8101 switch:
SNMP Trap Events (Sheet 1 of 2)
TypeLog Message
DeviceSystem Startup
DevicePort 1 link up speed 100Mbps full duplex
DevicePort 1 link down
ManagementSuccessful login through Console (Username: Edward)
ManagementConsole session timeout (Username: Edward)
ManagementLogin failed for user Edward through Console
ManagementSuccessful login through Telnet (Username: Edward)
ManagementTelnet session timeout (Usernam e: Edward)
ManagementLogin failed for user Edward through telnet
ManagementConfiguration saved to flash (Username: Edward)
ManagementUpgrade firmware successfully (Username: Edward)
ManagementUpgrade firmware unsuccessfully! (Username: Edward)
ManagementDownload configuration successfully (Username: Edward)
ManagementDownload configuration unsuccessfully! (Username: Edward)
Spanning TreeTopology Change
Spanning TreeNew Root
Spanning TreeSpanning tree protocol is enabled
Spanning TreeSpanning tree protocol is disabled
SecurityPossible spoofing attack from 00-80-C8-11-22-33 port 1
BOOTP/DHCP Relay
BOOTP and DHCP allow stations to obtain boot and TCP/IP information dynam ically. The relay
agent allows them to obtain this information when the BOOTP/DHCP server is not on the same IP
interface as the end station. You can configure the switch so that the messages are forwarded from
one interface to the appropriate server on another interface.
DNS Relay
The Domain Name System (DNS) is used to map names to IP addresses. DNS relay enables the
switch to act as a DNS cache or proxy. It forwards DNS requests to DNS servers only if it can’t
resolve the name from its cache.
If you enable DNS relay on the switch, you can specify a primary and secondary DNS server to
forward requests that the switch cannot resolve. You can also specify that requests destined for
specific DNS servers should be first serviced by looking in the switch’s table.
Packet Forwarding
The switch maintains a forwarding table. This table contains the relationship between a destination
MAC or IP address and the Ethernet port or gateway router the destination resides on. This
information is used to forward packets. Th is reduces the traf fic conges tion on the network , because
packets, instead of being transmitted to all ports, are transmitted to the destination port onl y. For
example, if Port 1 receives a packet destined for a station on Port 2, the switch transmits that packet
through Port 2 only, and transmits nothing through the other ports. This process is referred to as
“learning” the network topology.
26Intel® NetStructure™ ZT 81 01 10/ 100 Ethernet Switc h Use r’s Man ual
You can configure forwarding rules for the following:
• MAC address aging
• MAC address forwarding
• IP address to a specified gateway
• IP address to a specified MAC address
MAC Address Aging Time
The aging time affects the learning process of the switch. Dynamic forwarding table entries, which
are made up of the source and destination MAC addresses and their associated port numbers, are
deleted from the table if they are not accessed within the aging time.
The aging time can be 300—1,000,000 seconds with a default value of 300 seconds. A very long
aging time can result in dynamic forwarding table entries that are out-of-date or no longer exist.
This may cause incorrect packet forwarding decisions by the switch.
If the aging time is too short, however, many entries may be aged out too soon. This will result in a
high percentage of received packets whose source addresses cannot be found in the forwarding
table, in which case the switch will broadcast the packet to all ports, negating many of the benefits
of having a switch.
Switch Management and Operating Concepts
Static forwarding entries are not affected by the aging time.
The switch has 8 KB for MAC address caching, which a llows the switch to cache ov er 8,000 MAC
addresses.
MAC Address Forwarding
The switch allows you to configure how unicast and multicast packets are forwarded.
• For unicast packets, you specify the MAC address and then either select the port that they will
be forwarded to or have them dropped (called “BlackHole”).
• For multicast packets, you specify the MAC address and then select the ports they can be
forwarded to.
Storm Control
You can also set thres hold s to contr ol broadcast and multicast storms. When the threshold is
exceeded, the switch drops the multicast or broadcast traffic. When traffic levels drop below the
threshold, the switch resumes forwarding the traffic again.
The thresholds are applied to all Ethernet ports and cannot be set for indivi dual ports. The threshold
specifies in thousands the number of broadcast or multicast packets per second a port can receive
before triggering a storm control response. The possible range is 0 K— 255 K packets per second.
This threshold can be configured to apply to broadcast packets, to multicast packets, or to both.
You can also set thresholds for the amount of traffic a port can handle before triggering flow
control. The flow control threshold sets the limit for the maximum amount of memory a port can
use to hold packets. When a port reaches this limit, the port sends a signal to slow down the packets
coming in:
• Ports in half-duplex mode assert a jamming signal.
• Ports in full-duplex mode send PAUSE frames.
You can set the flow control thresholds for individual ports and then monitor the status.
IP Forwarding
You can configure how packets are forwarded, based on their IP address, by co nfiguring entries for
the ARP table and the routing table.
ARP Table
The ARP table maintains the mappings from Internet addresses (IP) to hardware addresses (MAC).
There are two types of ARP entries: dynamic and static.
When a static ARP entry is added to the switch's ARP table, the switch does not send an ARP
query to the configured IP address. This allows the switch to connect to devices that have not
implemented ARP.
The ARP table has the following characteristics:
• Static entries have higher precedence than dynamic entries. Therefore, a static entry will not be
overwritten by a dynamic entry.
• The aging time for dynamic entries is 20 minutes. This value is not configurable.
• The table can be up to 2 KB in size.
• Up to 32 static entries are allowed in the table.
Router Ports
Router ports allow multicast packets to be propagated throu gho ut the network. Router ports can be
either static or dynamic. Static router ports are special routes that you manually enter into the
switch’s routing table. Usually it is a port that has a router attached to it, and the router has a
connection to a WAN or to the Internet. Static router ports should be used sparingly, because when
a network failure occurs, they do not change. However, they can reduce network traffic by
eliminating the need for a routing protocol on a local network. For exampl e, a local network, whi ch
has only one link to the network, is an ideal candidate for a static route. You can also use them to
restrict the transmission path a datagram must follow, based on the datagram's destination address.
You can add up to 32 stati c entries in to the routing table.
Dynamic router ports are added by the switch. The switch monitors each port for UDP multicast
packets and IGMP multicast group membership reports. When these packets are detected on a port,
that port is dynamically assigned as a router port.
28Intel® NetStructure™ ZT 81 01 10/ 100 Ethernet Switc h Use r’s Man ual
Priority
Switch Management and Operating Concepts
The ZT 8101 switch allows you to assign specific levels of priority to traffic traversing the switch.
Setting priority allows you to protect bandwidth for important nodes on your network. Traffic in
the switch can be prioritized any of the following ways:
• MAC Address
• TCP/IP address
• Physical Port
• 802.1p Priority Bits
Frames that match the user defined criteria are given a priority tag. The switch supports four
hardware priority levels per egress port, so the eight levels (0-7) of priority are mapped to four
hardware queues (0-3) as listed in the table below.
Priority in FramesPriority Queue of ASIC
0-10
2-31
4-52
6-73
Note:0 is the lowest priority, 7 is the highest priority
After an Ethernet frame has been prio ritized, the switch forwards the Ethernet fram e using the strict
priority-based scheduling algorithm. With this algorithm, any frames residing in a higher priority
queue are always transmitted first. Only when these queues are empty are frames in lower priority
queues transmitted.
It is important to note that this function does not overwrite the existing priority tag on the frame by
default. Instead, the class of service only affects packets inside the switch. The frame retains the
original priority tag value on the egress port.
The switch is capable of overwriting and setting a new priority value in the frame on egress, but
will only do this if User Priority Regeneration is configured on the switch to do so. When User
Priority Regeneration is enabled, the 802.1p priority information th at is set f or the egress frame is
defined by user.
Prioritization Methods
• MAC Address— Allows frames to be prioritized based on whether the MAC address is:
— Source only
— Destination only
— Source or Destination
• IP Address— Allows packets to be prioritized based on whether the IP address is:
• Physical port— Set Priority level for all ingress frames on a physical port
• 802.1p—802.1p priority bits are part of an IEEE 802.1Q VLAN tagged Eth ernet frame. Wh en
a frame arrives at the switch, the 802.1p prior ity field is examined and is mapped to a hardware
queue. By default, 802.1p priority information is not replaced or manipulated, and the
information observed on ingress is preserved when transmitting the frame.
Filtering
A filtering database is used to segment the network and control communication between segments.
It can also filter packets off the network for intrusion control. Static filtering entries can be made by
MAC or IP addresses.
Each port on the switch is a unique collision domain, and the switch filters (discards) packets
whose destination lies on the same port as where it originated. This keeps local packets from
disrupting communications on other parts of the network.
The switch does some filtering automatically:
• Dynamic filtering—The switch automatically learns and ages MAC addresses and their
location on the network. Filtering occurs to keep local traffic confined to its segment.
• Filtering done by the Sp anning Tree Protocol—STP filters packets based on topology,
ensuring that signal loops don't occur.
• Filtering done for VLAN integrity—The switch filters packets from a member of a VLAN
(VLAN 2, for example) destined for a device on another VLAN (VLAN 3).
You can also manually configure the switch to dr op packets from sp ecified MAC an d IP addr esses .
Whenever a switch encounters a packet originating from, or destined to, a MAC address or an IP
address entered into the filter table, the switch discards the packet.
MAC Address Filtering
When filtering by MAC address, you have two opt ions:
• Static—This option allows you to specify which port handles the packets from the specified
MAC address.
• BlackHole—This option allows you to have the switch drop the packets from, or to, a
specified MAC address.
IP Address Filtering
When filtering by IP address, you have three options. You can have the switch drop the packet
based on where the IP address appears in the
• Source
• Destination
• Source and destination
30Intel® NetStructure™ ZT 81 01 10/ 100 Ethernet Switc h Use r’s Man ual
Loading...
+ 110 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.