METRObility Optical Systems R821-1S User Manual
Radiance 10/100 Mbps
Services Line Card
10/100BASE
MAN FD PWR
1
C
O
N
S
O
L
E
RX
2
TX
RX
LK
SPD
LBK
DIS
RX
LK
Installation and User Guide
Model:
R821-1S
Radiance 10/100 Mbps Services Line Card
Line Card:
R821-1S ________ 10/100 Mbps RJ-45 to 100 Mbps SFP
Multimode Small Form-Factor Pluggable (SFP) Fiber Optic Transceiver:
O280-M2________ SFP Multimode LC (1310 nm, 17 dB) 2 km, without digital diagnostics
Singlemode SFP Fiber Optic Transceivers:
O281-40 ________ SFP Singlemode LC (1310 nm, 33.5 dB) 40 km
O281-80 ________ SFP Singlemode LC (1550 nm, 33.5 dB) 80 km
O283-20 ________ SFP Singlemode LC (1310 nm, 20.5 dB) 20 km
Bidirectional Wavelength Division Multiplexing (BWDM) SFP Fiber Optic Transceivers:
O383-20-31 _____ SFP BWDM SC (1310 nm/1550 nm, 19 dB) 20 km
O383-20-55 _____ SFP BWDM SC (1550 nm/1310 nm, 19 dB) 20 km
Coarse Wavelength Division Multiplexing (CWDM) SFP Fiber Optic Transceivers:
O483-80-47 _____ SFP CWDM LC (1470 nm, 33 dB) 80 km
O483-80-49 _____ SFP CWDM LC (1490 nm, 33 dB) 80 km
O483-80-51 _____ SFP CWDM LC (1510 nm, 33 dB) 80 km
O483-80-53 _____ SFP CWDM LC (1530 nm, 33 dB) 80 km
O483-80-55 _____ SFP CWDM LC (1550 nm, 33 dB) 80 km
O483-80-57 _____ SFP CWDM LC (1570 nm, 33 dB) 80 km
O483-80-59 _____ SFP CWDM LC (1590 nm, 33 dB) 80 km
O483-80-61 _____ SFP CWDM LC (1610 nm, 33 dB) 80 km
Accessory:
R800-CA ________ Console Cable
This publication is protected by the copyright laws of the United States and other countries, with all rights reserved. No part of
this publication may be reproduced, stored in a retrieval system, translated, transcribed, or transmitted, in any form, or by any
means manual, electric, electronic, electromagnetic, mechanical, chemical, optical or otherwise, without prior explicit written
permission of Metrobility Optical Systems, Inc.
Metrobility, Metrobility Optical Systems, and NetBeacon are registered trademarks, the Metrobility Optical Systems logo and
WebBeacon are trademarks of Metrobility Optical Systems, Inc. All other trademarks are the property of their respective owners.
The information contained in this document is assumed to be correct and current. The manufacturer is not responsible for errors
or omissions and reserves the right to change specifications at any time without notice.
© 2005 Metrobility Optical Systems, Inc. All rights reserved. Printed in USA.
Contents
Chapter 1: Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Chapter 2: Installation Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Safety Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
1. Unpack the Line Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2. Set the Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
3. Install the SFP Optics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
1
Copper Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Fiber Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
DIP Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
4. Install the Line Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
5. Connect to the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chapter 3: Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Default Software Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Managed Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
MIB-II . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Enterprise-Specific Objects . . . . . . . . . . . . . . . . . . . . . 23
Admin Only SNMP Objects . . . . . . . . . . . . . . . . . . . . . 23
Remote Management Statistics . . . . . . . . . . . . . . . . . . . . . . . 24
Setting a Secure Management Channel . . . . . . . . . . . . . . . . 25
Software Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
IP Addressing Management . . . . . . . . . . . . . . . . . . . . . 27
Copper Line Quality (CLQ) Tester . . . . . . . . . . . . . . . . 29
Far End Fault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Flow Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Contents
2
ICMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Loopback Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Port Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Port State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Rate Limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Traffic Prioritization . . . . . . . . . . . . . . . . . . . . . . . . . . .36
VLAN Tagging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42
Sensors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
Environmental Sensors . . . . . . . . . . . . . . . . . . . . . . . . 49
Upgrading the Operating System Software . . . . . . . . . . . . . 49
Chapter 4: CLI Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Notation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51
Complete List of Commands . . . . . . . . . . . . . . . . . . . . . . . . . 52
User Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52
Administrator Commands . . . . . . . . . . . . . . . . . . . . . . . 53
Root Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54
Clear Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
clear l2controlprotocol . . . . . . . . . . . . . . . . . . . . . . . . . 55
clear mgmtvlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
clear radiusserver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
clear snmpuser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
clear trapdestination . . . . . . . . . . . . . . . . . . . . . . . . . . .55
clear username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56
clear uservlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56
System Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
change password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57
exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58
logout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58
ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58
reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59
run config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59
Radiance 10/100 Mbps Services Line Card
3
Set Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
set console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
set dhcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
set download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
set dscp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
set fpga . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
set freeform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
set icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
set ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
set l2controlprotocol . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
set l3capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
set logicalservicesloopback . . . . . . . . . . . . . . . . . . . . . 63
set loopback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
set mgmtvlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
set oamcontrol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
set oamerrframe . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
set oamerrframeperiod . . . . . . . . . . . . . . . . . . . . . . . . . 65
set oamerrframesecs . . . . . . . . . . . . . . . . . . . . . . . . . . 65
set oamerrsymperiod . . . . . . . . . . . . . . . . . . . . . . . . . . 66
set oamloopback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
set os . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
set pbits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
set port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
set precedence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
set priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
set pvid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
set qinq . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
set radiusauthentication . . . . . . . . . . . . . . . . . . . . . . . . 70
set radiusretransmit . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
set radiusserver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
set radiustimeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
set ratelimit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
set snmpcommunity . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
set snmpuser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
set snmpv1v2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
set switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
set systeminformation . . . . . . . . . . . . . . . . . . . . . . . . . 72
Contents
4
set trapcontrol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73
set trapdestination . . . . . . . . . . . . . . . . . . . . . . . . . . . .73
set username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .74
set uservlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .74
Show Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75
show cablestatus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
show console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75
show dhcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
show download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76
show fpga . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76
show icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76
show ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
show l2controlprotocol . . . . . . . . . . . . . . . . . . . . . . . . .77
show l3capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
show logicalservicesloopback . . . . . . . . . . . . . . . . . . . 78
show mgmtvlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78
show oamcontrol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
show oameventlog . . . . . . . . . . . . . . . . . . . . . . . . . . . .80
show oamevents . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82
show oamloopback . . . . . . . . . . . . . . . . . . . . . . . . . . .83
show oampeer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
show oamstatistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
show os . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
show port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
show portstatistics . . . . . . . . . . . . . . . . . . . . . . . . . . . .88
show pvid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89
show radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
show ratelimit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90
show rmonportstatistics . . . . . . . . . . . . . . . . . . . . . . . . 90
show sensors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .91
show serviceclasses . . . . . . . . . . . . . . . . . . . . . . . . . .92
show snmpcommunity . . . . . . . . . . . . . . . . . . . . . . . . . 93
show snmpuser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
show snmpv1v2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94
show switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94
show systeminfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
show trapcontrol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95
Radiance 10/100 Mbps Services Line Card
show trapdestinations . . . . . . . . . . . . . . . . . . . . . . . . . 95
show usernames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
show uservlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Chapter 5: User Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97
LED Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Default Hardware Switch Settings . . . . . . . . . . . . . . . . . . . . . 98
Link Loss Return (LLR) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Link Loss Carry Forward (LLCF) . . . . . . . . . . . . . . . . . . . . . 100
Traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Changing the SFP Transceiver . . . . . . . . . . . . . . . . . . . . . . 102
Topology Solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Standards-Based Multi-Service Delivery . . . . . . . . . . 103
Basic Remote Management as a NID . . . . . . . . . . . . 103
802.3ah-Based Enhanced Remote Management . . . 104
Future 802.3ah-Based Remote Management . . . . . . 104
5
RADIUS Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Abbreviations and Acronyms . . . . . . . . . . . . . . . . . . . . . . . 108
Product Safety and Compliance Statements . . . . . . . . . . . 111
Warranty and Servicing . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Chapter 6: Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117
Contents
6
Radiance 10/100 Mbps Services Line Card
Chapter 1: Overview
Designed to support the new IEEE 802.3ah standard, Metrobility’s
Radiance R821 10/100 Mbps Services Line Card is a manageable twoport copper-to-fiber device capable of remote communications with an
off-site unit. A third console port provides a connection for direct
management of the R821. Using an in-band management channel, two
Radiance services line cards in a back-to-back configuration can
communicate without a separate IP address at the remote end. Because
an IP address is not needed at every access point, this solution ideally
suits large metro access service deployments.
When paired with Metrobility’s NetBeacon
services line card provides the highest level of manageability with a userfriendly graphical interface. NetBeacon delivers non-intrusive RMON
Group 1 statistics, errored symbol and frame event notifications, and
real-time information on power and temperature, along with Dying Gasp
capabilities.
®
Element Manager, the
7
Other advanced management features and diagnostics include Metrobility’s patent-pending Logical Services Loopback (LSL), rate limiting,
traffic prioritization into four service class levels, Q-in-Q double tagging,
PVID support, built-in copper line quality (CLQ) testing on the copper
port, integral temperature and transmit/receive optical power monitoring
on the fiber port, Link Loss Carry Forward (LLCF), Link Loss Return
(LLR), and Far End Fault (FEF). Rate limiting of user data allows control
over traffic speed and volume, thus maximizing bandwidth efficiency.
LSL, CLQ, LLCF, LLR, and FEF assist in testing and troubleshooting
remote connections.
Additional features include management access control which protects
the system and network connections from denial of service attacks from
the user’s network. By default, management access control automatically
discards unauthorized traffic received over the access port, making the
device impervious to all traffic conditions and traffic patterns. Access
control is also provided by reserving the 0x000 VLAN for use with
management. This management VLAN can be made unavailable to
users by changing the VLAN ID.
Overview
8
Two versions of the operational software, the FPGA firmware, and
configuration files can be stored on the services line card. New
embedded software can be downloaded easily in the field as upgrades
become available.
The 10/100 Mbps services line card can be managed as an independent
network interface device (NID) with its own IP address. As a NID at the
CPE demarcation point, the services line card responds to SNMP
requests addressed to unicast and subnet broadcast addresses by delivering information on its health and status as well as its network
connection. SNMP provides Internet-standard management and can be
used for surveillance and fault management.
The versatile R821-1S provides a 10/100BASE-T port (Port 1) and a
small form-factor pluggable (SFP) port (Port 2) with numerous
wavelength and distance options. Typically, Port 1 is designated as the
access port and Port 2 as the network port. To simplify device configuration, a third console port is provided for direct access to the services
line card’s management agent.
Both Ethernet interfaces on the services line card support VLAN doubletagging, baby giant frames (up to 1532 bytes untagged and 1536 bytes
tagged), and auto-negotiation. When auto-negotiation is enabled, the
copper port auto-detects MDI-II/MDI-X
1
. Both ports also support flow
control (forced collisions in half duplex and PAUSE frames in full duplex).
1.When forcing 10 or 100 Mbps, a crossover cable may be needed.
Radiance 10/100 Mbps Services Line Card
Port 1
Port 0
(Console Port)
Port 2
10/100BASE
MAN FD PWR
1
C
O
N
S
O
L
E
RX
2
TX
R821-1S
RX
LK
SPD
LBK
DIS
RX
LK
Key Features
Copper Port
The Radiance services line card provides the following key features:
10/100 Mbps support.
•
Auto-negotiation or manual duplex and speed selection.
•
Automatic MDI-II/MDI-X conversion when auto-negotiation is enabled.
•
•
Half- and full-duplex flow control.
•
Link Loss Return (LLR) and Link Loss Carry Forward (LLCF) to aid in
troubleshooting.
9
Fiber Port
Hardware
Small form-factor pluggable (SFP) transceivers with support for
•
distances up to 80 km.
•
Support for bidirectional wavelength division multiplexing (BWDM) with
SC connectors and 1550/1310 nm wavelengths.
•
Support for coarse wavelength division multiplexing (CWDM) with
wavelengths from 1470 to 1610 nm.
Built-in optical power and temperature meters that enables proactive
•
maintenance by eliminating the need to disable the fiber link for testing.
•
Link Loss Return (LLR) with Auto-Recovery, Link Loss Carry Forward
(LLCF), and Far End Fault (FEF) to aid in troubleshooting.
Flow control support.
•
Hot swappable board and optics.
•
•
Copper to fiber media conversion.
•
Compliance with applicable sections of IEEE 802.3-2002.
•
Full signal retiming, reshaping, and reamplification (3 Rs).
•
Supports a maximum transmission unit size of 1536 bytes for all
frames.
Transparency to user data traffic, including single and double VLAN-
•
tagged Ethernet frames.
•
Console port for direct device communication.
Overview
10
Software
802.3ah OAM support for remote management including:
•
•
Loopback
•
Events
•
Dying Gasp
•
Active or passive modes
•
802.3ah with Metrobility vendor extensions for in-band management.
Remote Quality of Line (QoL) Monitoring (RMON) Group 1 statistics.
•
Real-time monitoring of services line card’s temperature and power.
•
Logical Services Loopback functionality to test non-intrusively for
•
proper connectivity and link integrity.
•
Independent rate limiting on each port.
•
Port interface statistics.
•
Far End Fault detection and notification.
Manageable with Metrobility’s NetBeacon and WebBeacon™ element
•
management software.
•
Interoperable with Metrobility’s SNMP, CLI, TFTP, and telnet access
mechanisms.
•
Compatibility with industry-standard SNMP-based management applications.
Ability to accept and process ARP messages, and respond to ARP
•
requests and replies.
•
Storage for two versions of the operating system and FPGA firmware
as well as two separate configuration files.
Static and dynamic ARP entry provisioning, and the ability to use ARP
•
to resolve IP-to-MAC associations when static associations are
unavailable.
Ping support for network path connectivity testing.
•
Field-programmable for upgrading management software.
•
DHCP client support.
•
A unique unicast MAC address for Logical Services Loopback.
•
Radiance 10/100 Mbps Services Line Card
Support for SNMPv1 and SNMPv2c community based profiles and
•
views for read-only, read-write, and administrative access.
•
SNMPv3 support for increased network management security.
Provides user authentication and authorization along with data
encryption.
Transparent MAC-layer forwarding and filtering. (No Spanning Tree)
•
•
Ability to stack and unstack VLAN tags based on the bridge port over
which an Ethernet frame is received or transmitted. (Q-in-Q VLAN
tagging.)
Static ARP and IP address entries.
•
Class of Service (CoS) using four priority queues.
•
•
Traffic prioritization based on p-bits in the VLAN header, DSCP bits in
IP frames, or the default port priority.
•
PVID tagging.
Traffic filtering and forwarding to provide access control security.
•
Copper line quality (CLQ) diagnostic tester that identifies various faults
•
(open circuit, short circuit, impedance mismatch) and indicates the
distance to the fault from the device.
11
•
Support for 16 user VLANs and one management VLAN.
Management support for up to two remote units off each port if the
•
services line card is under proxy management via the R502-M.
• RADIUS client support to protect sensitive network information by
restricting access to authorized users only.
Overview
12
Radiance 10/100 Mbps Services Line Card
Chapter 2: Installation Guide
Safety Warning
Electrostatic Discharge Warning
Electrostatic discharge precautions should be taken when handling any
!
line card. Proper grounding is recommended (i.e., wear a wrist strap).
1. Unpack the Line Card
Your order has been provided with the safest possible packaging, but
shipping damage does occasionally occur. Inspect your line card
carefully. If you discover any shipping damage, notify your carrier and
follow their instructions for damage and claims. Save the original
shipping carton if return or storage of the card is necessary.
13
2. Set the Switches
A bank of six DIP switches is located on the back of the card. These
switches allow you to select from several modes of operation that only
affect the access port (Port 1). Functional switches are clearly marked on
the card’s circuit board. Refer to the following table for the proper setting
of the DIP switches.
When setting DIP switches, the UP position is when the lever of the DIP
switch is pushed away from the circuit board. The DOWN position is
when the lever is pushed toward the board.
Default Switch Settings
UP
DOWN
12345
SPD1
AN1
DUP1
6
Installation Guide
14
Table 1: DIP Switches
Switch
Label
AN1
SPD1
DUP1
Position Description
UP (default)
DOWN
UP (default) Port 1 is set to 100 Mbps when AN1 is disabled.
DOWN Port 1 is set to 10 Mbps when AN1 is disabled.
UP (default) Port 1 is set to full duplex when AN1 is disabled.
DOWN Port 1 is set to half duplex when AN1 is disabled.
Auto-negotiation is enabled. Port 1 advertises 10/100
Mbps half/full duplex capability to its link partner.
Auto-negotiation is disabled. The SPD1 and DUP1
switches determine the speed and duplex for Port 1.
DIP Switches Auto-Negotiation (AN1)
AN1 is the auto-negotiation switch for Port 1. When auto-negotiation is
enabled, the port advertises 10/100 Mbps and half/full duplex capability
to its link partner. When auto-negotiation is disabled, the speed and
duplex for Port 1 are set through the SPD1 and DUP1 switches.
Note: Speed and duplex are dependent upon auto-negotiation. If AN1 is
enabled, the SPD1 and DUP1 switches will be ignored.
Speed (SPD1)
The speed switch applies to Port 1 and is effective only when autonegotiation (AN1) is disabled. Port 1 is set to 100 Mbps when SPD1 is
up, and 10 Mbps when SPD1 is down.
Duplex (DUP1)
The duplex switch applies to Port 1 and is effective only when autonegotiation (AN1) is disabled. Port 1 is set to full duplex when DUP1 is
up, and half duplex when DUP1 is down.
3. Install the SFP Optics
The R821-1S requires one small form-factor pluggable (SFP) optic.
Optics are shipped separately.
Radiance 10/100 Mbps Services Line Card
15
Before installing the SFP module, make sure the bail latch is closed, as
shown below. Do NOT open the bail.
SFP
CLOSED
BAIL LATCH
POSITION
SFP
DO NOT
OPEN
BAIL LATCH
To install the optics, align the SFP module so the receiver (▲) is
positioned above the transmitter (▼). For a BWDM module, align it so the
visible part of the circuit board located at the back of the module is to the
right. The SFP’s circuit board should be on the same side as the LEDs.
Slide the module into the empty slot. Push the SFP firmly in place.
SPD
C
O
LBK
N
S
O
DIS
L
E
RX
2LKRX
TX
LK
RXTX
Important: The Radiance services line card is designed and tested to
operate using only Metrobility-supplied SFP transceivers. Safety, performance, and reliability are guaranteed only when Metrobility transceivers
are used. Installing unspecified parts may damage the product and
will void the unit’s warranty.
4. Install the Line Card
The Radiance services line card offers the ease of plug-and-play installation and is hot-swappable. The card must be firmly secured to the
chassis before network connections are made. Follow the simple steps
outlined below to install your line card.
• Grasp the card by the front panel as shown.
Installation Guide
16
Card Guide
TX
RX
2
O
CON
S
E
L
LBK
DIS
LK
RX
10/100BASE
1
MAN FD PWR
SPD
RX
LK
• Insert the card into a slot in the chassis. Make sure that the top and
bottom edges of the board are aligned with the card guides in the
chassis. Do not force the card into the chassis unnecessarily. It should
slide in easily and evenly.
• Slide the card in until the top and bottom edges of the front panel are
flush and even with the edges of the chassis.
• To secure the card to the chassis, turn the thumbscrew clockwise until
it is snug. The card is now properly installed and ready for connection
to the network.venly.
5. Connect to the Network
To connect the line card to the network, remove the dust plug from the
SFP transceiver and insert the cables into the appropriate connectors as
illustrated below. Make sure the card is secured to the chassis before
making network connections.
Radiance 10/100 Mbps Services Line Card
17
TX
RX
O
CON
S
E
L
2
SPD
LK
LBK
DIS
RX
10/100BASE
1
MAN FD PWR
RX
LK
Twisted-Pair Interface
The twisted-pair port provides a shielded RJ-45 connector that supports
a maximum segment length of 100 meters.
Fiber Optic Interface
For maximum flexibility in designing or expanding your network, the fiber
port supports any of the following Metrobility-supplied small form-factor
pluggable (SFP) transceivers. Each transceiver provides as a set of LC
or SC connectors. The maximum distance and cable type supported by
the SFP transceivers is as follows:
Model #
O280-M2 . . . . . . . . . . . . . 2 km . . . . . . . . . . . . . . .MM
. . . . . . . . . . Distance . . . . . . . . Fiber Type
O281-40. . . . . . . . . . . . . 40 km . . . . . . . . . . . . . . . SM
O281-80. . . . . . . . . . . . . 80 km . . . . . . . . . . . . . . . SM
O283-20. . . . . . . . . . . . . 20 km . . . . . . . . . . . . . . . SM
O383-20-xx . . . . . . . . . . 20 km . . . . . . . .SM (BWDM)
O483-80-xx . . . . . . . . . . 80 km . . . . . . . SM (CWDM)
Important: The distances noted are for reference purposes only. The
most important factor to achieve the desired distance is the optical power
budget. Metrobility specifications indicate the typical transmit power
budget. The actual distance is a function of the fiber type and quality, the
number and quality of splices, the type and quality of connectors, the
transmission loss, and other physical characteristics.
Installation Guide
18
When making fiber optic connections, make sure that the transmit (TX)
optical fiber of the services line card connects to the receive (RX) optical
fiber of the connected device, and that the transmit (TX) optical fiber of
the remote device connects to the receive (RX) optical fiber of the
services line card.
BWDM Interface
The bidirectional wavelength division multiplexed (BWDM) transceiver
provides one singlemode SC connector that supports a maximum
segment length of 20 km. BWDM transceivers must always be used in
complementary pairs. That is, the O383-20-13 must be connected to the
O383-20-55.
The O383-20-31 transmits data at a wavelength of 1310 nm and
receives at 1550 nm. Correspondingly, the O383-20-55 transmits data at
1550 nm and receives at 1310 nm.
R821 with
O383-20-31
10/100BASE
MAN FD PWR
RX
1
LK
SPD
C
O
N
S
LBK
O
L
E
DIS
RX
2
AT
TX
TX 1310 nm
RX 1550 nm
TX 1550 nm
RX 1310 nm
R821 with
O383-20-55
10/100BASE
MAN FD PWR
RX
1
LK
SPD
C
O
N
S
LBK
O
L
E
DIS
RX
2
AT
TX
TX
up to 20 km
Use the link (LK) LEDs on the front panel of the card to verify correct
segment connectivity. As you insert the cable into each port, the LK LED
will be lit if the following conditions are met:
• Power is being applied to the chassis.
• There is an active device connected to the other end of the cable, and
it is sending idle link signals.
• All connections are secure and the cables are undamaged.
• Both ends of the cable are set to the same auto-negotiation state. To
maximize device compatibility, the R821 is shipped with auto-negotiation enabled on both ports. If necessary, disable auto-negotiation and
set full duplex on the fiber port of the remote device to establish link.
Radiance 10/100 Mbps Services Line Card
19
For information on replacing the SFP transceiver, refer to “Changing the
SFP Transceiver” on page 102 in the User Guide section.
Console Port (optional)
Follow the instructions in this section if you are using a console cable
(R800-CA) to communicate directly with the R821.
Remove the dust plug from the console port. Using the R800-CA nullmodem console cable, connect the console port on the R821 to the serial
port on your PC. The cable provides a 3C plug for insertion into the
console port jack on the line card and a female DB9 connector to
connect to the PC’s DB9 port.
TX
RX
O
CON
S
E
L
2
SPD
LK
LBK
DIS
RX
LK
10/100BASE
1
MAN FD PWR
Note: Do not remove the dust plug from the console port until you are
ready to connect the console cable to the port. When you remove the
console cable, please replace the port’s dust plug.
The PC terminal session default parameters are as follows:
57,600 baud / 8 bits / 1 stop bit / no parity / no flow control
Note: All console port settings, excluding flow control, can be modified
using the set console command.
Following power-up, the boot image is automatically executed. It starts
by performing a system initialization, followed by diagnostic tests. After
diagnostics are completed successfully, a login prompt appears on the
console screen. If necessary, press <Enter> to get the login prompt.
Installation Guide
20
If the diagnostics are unsuccessful, a failure message will appear.
When device configuration is complete, disconnect the console cable
and reinsert the dust plug.
If the console port session remains idle for 10 minutes, the connection
will automatically time out.
Radiance 10/100 Mbps Services Line Card
Chapter 3: Management
This section contains information regarding the management and
software configuration options available on the Radiance 10/100 Mbps
services line card.
Default Software Settings
Access Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Port 1
CLI Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Enabled
DHCP Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Enabled
DHCP Server Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 0.0.0.0
DHCP Max Retries Before Timeout . . . . . . . . . . . . . . . . . 3 (28 seconds)
DSCP Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disabled
DSCP Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Expedited Forwarding
21
Far End Fault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disabled
Flow Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disabled
Forwarding Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Transparent
ICMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . All Enabled
IP Address (zeroconf) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .169.254.x.x
Layer 2 Control Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . All Forwarded
Layer 3 Capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Enabled
Logical Services Loopback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disabled
Loopback Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disabled
Loopback Timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30 seconds
Management Access . . . . . . Enabled (Ports 0 and 2); Disabled (Port 1)
Management VLAN identifier . . . . . . . . . . . . . . . . . . . . . . . . 0 (Disabled)
Network Mask . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255.255.0.0
OAM Admin State . . . . . . . . . . . . . . . Disabled (Port 1); Enabled (Port 2)
OAM Mode . . . . . . . . . . . . . . . . . . . . . . . Passive (Port 1); Active (Port 2)
Management
22
P-bits Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disabled
P-bits Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .Provider Bridge
Port Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Enabled
Port Priority Queue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 0
Port State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Enabled
PVID (native VLAN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Precedence (high-low) . . . . . . . . . . . . . . . . . . . . . . . . .p-bits, DSCP, port
RADIUS Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disabled
RADIUS Retransmit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
RADIUS Timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5 seconds
Rate Limiting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disabled
SNMP Access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Enabled
SNMP Administrative Community String. . . . . . . . . . . . . . . . . . . . . admin
SNMP Read-Only Community String . . . . . . . . . . . . . . . . . . . . . . . public
SNMP Read-Write Community String. . . . . . . . . . . . . . . . . . . . . . .private
Trap Destination Community String . . . . . . . . . . . . . . . . . . . . . . . . public
Trap Destination IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 0.0.0.0
Trap Destination UDP Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162
User VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disabled
Managed Objects
MIB-II The Radiance 10/100 Mbps services line card supports the following
standard Management Information Base (MIB-II) managed object
groups, pertaining only to the end-station traffic. Objects from within
these MIB groups are accessible by and available to SNMP-based
management stations over UDP/IP.
• System (end-station only)
• Interfaces (end-station and data interface)
• IpNetToMedia (end-station only)
Radiance 10/100 Mbps Services Line Card
• IP (end-station only)
• ICMP (end-station only)
• TCP (end-station only)
• UDP (end-station only)
• SNMP (end-station only)
• AT (end-station only)
23
EnterpriseSpecific
Objects
Admin Only SNMP Objects
Metrobility-specific managed objects provide control of the following
objects:
• End-station IP addressing information
• SNMP access communities
• Up to 4 SNMP trap destination addresses and communities
• Download server addresses
• Download management software
• Interface control (enable/disable)
• Input/output laser levels
• Management VLAN
• Management port
The Metrobility enterprise ID number is 10527.
The following SNMP objects can only be read or written by the admin
community string:
• mosDownloadServerUsername
• mosDownloadServerPassword
• mosAdminROComm
• mosAdminRWComm
• mosAdminADMINComm
• mosAdminTrapDestComm
Additionally, the following Trap Destination Table objects can be set only
when using the admin community string:
Management
24
• mosAdminTrapDestIP
• mosAdminTrapDestPort
• mosAdminTrapDestComm
Remote Management Statistics
Through software, you can view Remote Monitoring (RMON) statistics
for the Radiance 10/100 Mbps services line card.
Each port on the card supports the complete RMON Group 1 statistics
outlined in RFC 2819 and RFC 3273.
RFC 2819
etherStatsOctets etherStatsPkts
etherStatsBroadcastPkts etherStatsMulticastPkts
etherStatsCRCAlignErrors etherStatsUndersizePkts
etherStatsFragments etherStatsJabbers
etherStatsCollisions etherStatsPkts64Octets
etherStatsPkts65to127Octets etherStatsPkts128to255Octets
etherStatsPkts256to511Octets etherStatsPkts512to1023Octets
etherStatsPkts1024to1518Octets etherStatsOversizePkts
etherStatsDropEvents
RFC 3273
etherStatsHighCapacityOverflowPkts
etherStatsHighCapacityPkts
etherStatsHighCapacityOverflowOctets
etherStatsHighCapacityOctets
etherStatsHighCapacityOverflowPkts64Octets
etherStatsHighCapacityPkts64Octets
etherStatsHighCapacityOverflowPkts65to127Octets
etherStatsHighCapacityPkts65to127Octets
etherStatsHighCapacityOverflowPkts128to255Octets
etherStatsHighCapacityPkts128to255Octets
etherStatsHighCapacityOverflowPkts256to511Octets
etherStatsHighCapacityPkts256to511Octets
etherStatsHighCapacityOverflowPkts512to1023Octets
etherStatsHighCapacityPkts512to1023Octets
etherStatsHighCapacityOverflowPkts1024to1518Octets
etherStatsHighCapacityPkts1024to1518Octets
Radiance 10/100 Mbps Services Line Card
Setting a Secure Management Channel
By default, the R821’s VLAN identifier (VID) is 0, which indicates no
internal management VLAN. In this state, the card forwards all untagged
SNMP traffic through both ports, as illustrated below. No security is
provided, which means any device connected to any port can make
configuration changes to the R821.
R821 Services Line Card
Management Agent
Management Channel
untagged SNMP traffic untagged SNMP traffic
25
Network Port
Console Port
Access Port
Through software, you can create a secure management channel by
assigning it a new management VID
2
. The most secure configuration is
to have only one port (typically, the network port) enabled for
management. This is the recommended configuration, and it allows you
to restrict access to the card’s management agent, thus preventing
unauthorized modifications and other misuses.
The following table describes the available management options along
with the security vulnerabilities associated with each configuration.
Table 2: R821 Management Options and Vulnerabilities
Configuration Configuration Description Vulnerabilities
A management VLAN ID is assigned
Management
VLAN
(single port)
No
Management
VLAN
(single port)
Management
VLAN
(both ports)
2.Valid management VLAN IDs are in the range 1 to 4094.
to one of the ports. Only frames that
contain this VID and are from the
specified port are allowed access to
the R821 management agent.
One port is configured for
management. Any device connected
to this port can manage the R821.
A management VLAN ID is specified.
Any frame that contains the VID,
regardless of its source, is allowed to
access the R821 management agent.
None
User could respond to
ARP request and steal
R821’s IP address.
Denial of service due to
misuse of unicast MAC
address.
Management
26
Table 2: R821 Management Options and Vulnerabilities (Continued)
Configuration Configuration Description Vulnerabilities
No
Management
VLAN
(both ports)
DEFAULT
SETTING
No security. Any device connected to
either port can manage the R821.
User could respond to
ARP and steal IP
address.
Once a management VID has been configured, set it back to 0 to disable
VLAN management.
The R821 transparently passes reserved multicast protocols such as
IEEE 802.3ad, BPDU, GMRP, and GVRP. Transporting these protocols,
however, can introduce additional possibilities for denial-of-service
attacks including traffic volume from:
• MAC addresses 01-80-C2-00-00-00 through 01-80-C2-00-00-10
— BPDU
— 802.3 slow protocols (LACP, Marker and OAM)
• GMRP and GVRP
The following table describes the misuses that could cause denial of
service when using reserved multicast protocols along with the various
management configurations.
Table 3: R821 Management Vulnerabilities When Using Reserved
Multicast Protocols
Configuration Vulnerabilities
Management
VLAN (single port)
with reserved
multicast
No Management
VLAN (single port)
Management
VLAN (both ports)
with reserved
multicast
No Management
VLAN (both ports)
with reserved
multicast
Denial of service through misuse of reserved multicast
address or 01-80-C2-00-00-02.
User could respond to ARP and steal R821’s IP address.
Denial of service through misuse of reserved multicast or
unicast MAC address.
Denial of service through misuse of reserved multicast,
unicast, or 01-80-C2-00-00-02 MAC address. User could
respond to ARP and steal the IP address.
Radiance 10/100 Mbps Services Line Card
Software Settings
Several functions and settings on the Radiance services line card can be
modified only through software commands. This section describes the
card’s management features including IP addressing management.
27
IP Addressing Management
You can configure the R821 to obtain its IP addressing information (IP
address, network mask, and default gateway) through any of the
following means:
• DHCP assignment
• Manual configuration
• Default value
DHCP Assignment
By default, the R821 has DHCP enabled for obtaining its IP addressing
information. When DHCP is enabled, the R821 enters a discovery mode
to locate a DHCP server. The card makes up to three
resolve its IP addressing information. If any of the attempts is successful,
the card will use the information assigned by the DHCP server. The card
will also save the DHCP server’s IP address along with the address
lease time. Once the IP addressing information is acquired, the R821
preserves it in memory and renews it continuously. However, the
addressing information is not preserved across power cycles. If the card
is reset or loses power, it will enter the discovery mode again and
attempt to obtain new IP addressing information.
When DHCP is disabled, the R821 uses its last known IP addressing
information (i.e., the address that was used to issue the command to
disable DHCP). After the R821 successfully acquires its addressing information, through whatever means, Metrobility recommends disabling
DHCP to ensure that the card always uses this information. IP
addressing information is retained across power cycles when DHCP is
disabled.
3
attempts to
3.The max number of retires is configurable. The retry count starts at 4 seconds and doubles for each ad-
ditional retry (1 = 4 seconds, 2 = 12 seconds, 3 = 28 seconds, 4 = 60 seconds, 5 = 124 seconds)
Management
28
Manual Configuration
Regardless of the DHCP setting, IP addressing information can be
assigned manually. When manually entering the IP addressing information via SNMP, you must also apply the changes by setting mosAdminApplyIPChanges to 1 in the METROBILITY-ADMIN-MIB. The R821 will
verify that the information you entered is valid and begin using the new
values if there are no problems. If for any reason there is a conflict, the
R821 will send a generic SNMP error.
Saving the IP information across power cycles depends on the DHCP
setting:
• If DHCP is disabled, the new address will be stored and preserved. If
you want to save the addressing information through resets and power
cycles, make sure DHCP is disabled after the information is entered
successfully.
• If DHCP is enabled, the R821 will enter the discovery mode at each
power cycle and attempt to obtain new IP addressing information. The
manually configured information will be maintained across a power
cycle only until a DHCP server assigns it a new IP address, or until
someone manually enters the IP addressing information again.
Default Value
To return the R821’s IP address, network mask, and gateway back their
factory default values, use the reset command and specify the default
option. Resetting the board using this method forces all software settings
back to their original values.
Start-up Failure
During the initial discovery mode, if a DHCP server is not found within
the timeout period
information using Zero Configuration Networking (zeroconf) for local
intra-subnet communication. Once the default address is generated, the
R821 enters a probing phase to verify that the address is unique. If the
address is identical to one previously claimed by another device, the
R821 will generate a new address repeatedly until it is successful. The
default zeroconf IP address is in the 169.254.0.0 network, the network
mask is 255.255.0.0, and the gateway address is 0.0.0.0.
4.The timeout period depends on the number of retries. The timeout period is configurable from 4 sec-
onds (# of retries = 1) up to 124 seconds (number of retries = 5).
Radiance 10/100 Mbps Services Line Card
4
, the R821 will generate its own default IP addressing
Loading...