MS-7206
Modular Ethernet Switch System
Default Login Details
IP Address http://192.168.0.1
User Name admin
Password 1234
Firmware Version 3.85
Edition 1, 10/2009
www.zyxel.com
www.zyxel.com
Copyright © 2009
ZyXEL Communications Corporation
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the MM-7201. You
should have at least a basic knowledge of TCP/IP and Ethernet networking
concepts and topology.
Note: It is recommended you use the web configurator to configure the MM-7201.
Related Documentation
• MS-7206 Hardware Installation Guide
Hardware guide for the MS-7206 system, including the MS-7206S, MI -7248, MI -
7248PWR, MI-7248TF, MI-7526F, MF-7201, MP-7201, MPC-7202, MP-7202, and
MP-7203.
• Command Line Interface (CLI) Reference Guide
Line commands offer an alternative to the web configurator and in some cases
are necessary to configure advanced features.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
• Supporting Disc
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com
product certifications.
for additional support documentation and
Documentation Feedback
Send your comments, questions or suggestions to: techwriters@zyxel.com.tw
Thank you!
The Technical Writing Team , ZyXEL Communications Corp.,
6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan.
MS-7206 User’s Guide
3
About This User's Guide
Need More Help?
More help is available at www.zyx el.com.
• Download Library
Search for the latest product updates and documentation from this link. Read
the Tech Doc Overview to find out how to efficiently use the User Guide, Quick
Start Guide and Command Line Interface Reference Guide in order to better
understand how to use your product.
• Knowledge Base
If you have a specific question about your product, the answer may be here.
This is a collection of answers to previously asked questions about ZyXEL
products.
•Forum
This contains discussions on ZyXEL prod ucts. Learn from others who use ZyXEL
products and share your experiences as well.
Customer Support
Should problems arise that cannot be solved by the methods listed above, you
should conta ct your vendor. If you cannot contact your vendor, then contact a
ZyXEL office for the region in which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please
have the following informatio n ready when you contact an office.
• Product model and serial number.
•Warranty Information.
• Date that you received your device.
Brief description of the problem and the steps you took to solve it.
4
MS-7206 User’s Guide
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The MM-7201 may be referred to as the “MM-7201”, the “management card” or
the “product” in this User’s Guide.
• The “MS-7206 system” refers to the MS-7206 chassis and all the modules that
are in the MS-7206 chassis. It is also referred to as the “system” or the “switch”
in this User’s Guide.
• The “MS-7206 chassis” refers only to the main chassis of the MS-7206 system.
It does not include any interface modules or management cards.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example,
[ENTER] means the “enter” or “ret urn” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the
[ENTER] key. “Select” or “choose” means for you to use one of the predefined
choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For
example, Maintenance > Log > Log Setting means you first click
Maintenance in the navigation panel, then the Log sub menu and finally the
Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value.
For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may
denote “1000000” or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other
words”.
MS-7206 User’s Guide
5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The MS-7206
icon is not an exact representation of your device.
MS-7206 Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
6
MS-7206 User’s Guide
Safety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• ONLY qualified service personnel should service or disassemble this device.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED BY AN
INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO THE INSTRUCTIONS.
Dispose them at the applicable collection point for the recycling of electrical and
electronic equipment. For detailed information about recycling of this product, please
contact your local city office, your household waste disposal service or the store where
you purchased the product.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• The PoE (Power over Ethernet) devices that supply or receive power and their connected
Ethernet cables must all be completely indoors.
• Warning! T o a void risk of electric shock, remove only one card at a time and do not place
fingers or objects inside the chassis. Cover empty slots with slot covers.
Your product is marked with this symbol, which is known as the WEEE mark.
WEEE stands for Waste Electronics and Electrical Equipment. It means that
used electrical and electronic products should not be mixed with general
waste. Used electrical and electronic equipment should be treated separately
.
MS-7206 User’s Guide
7
Safety Warnings
8
MS-7206 User’s Guide
Contents Overview
Contents Overview
Introduction ............................................................................................................................23
Introducing the MM-7201 ........................................................................................................... 25
Hardware .................................................................................................................................29
Front Panel ................................................................................................................................ 31
Installing Cards .......................................................................................................................... 33
Basic .......................................................................................................................................37
The Web Configurator ............................................................................................................... 39
Initial Setup Example ................................................................................................................. 49
System Status and Port Statistics .................................... ..........................................................55
System Info .............. ............................................. ... .... ... ... ....................................................... 61
General Setup ............................................. .... ... ... ... .... ... ... ... .... ................................................ 65
Switch Setup ............. ... ... .... ... ............................................. ... .... ... ... ... ... .................................... 69
IP Setup .......................... .... ... ... ... .... ... ... ... ............................................. .... ... ... ... .... ... ................ 73
Slot Setup .................................................................................................................................. 77
Port Setup ................. ... ... .... ............................................. ... ... .... ... ... ... ....................................... 79
Advanced ................................................................................................................................83
VLAN ......................................................................................................................................... 85
Static MAC Forward Setup ...................................................................................................... 101
Filtering ..................................... .................................................... ........................................... 103
Spanning Tree Protocol ................... ... ... ... ... .... ........................................................................ 105
Bandwidth Control .... ... ... .... ... ... ... ............................................................................................ 127
Broadcast Storm Control ......................................................................................................... 131
Mirroring .................................................................................................................................. 133
Link Aggregation ................. .....................................................................................................135
Port Authentication ...... ... .... ... ..................................................................................................143
Port Security .................................... ... ... ... ............................................. .... ... ... ... .... ... ..............149
Classifier ................................... .................................................... ........................................... 155
Policy Rule ............................................................................................................................... 161
Queuing Method ...................................................................................................................... 169
VLAN Stacking ......................................................................................................................... 173
Multicast ..................................................................................................................................179
AAA ......................................................................................................................................... 195
IP Source Guard ...................................................................................................................... 207
Loop Guard ..................... .... ... ... ............................................. .... ... ... ... ... .... ... ... ... .... .................233
MS-7206 User’s Guide
9
Contents Overview
IP ............................................................................................................................................239
Static Route ............................................................................................................................. 241
RIP .......................................................................................................................................... 243
OSPF .............................. .................................................... ..................................................... 245
IGMP .......................................................................................................................................257
DVMRP ..................................... ....................... ...................... ....................... ........................... 259
Differentiated Services ........................................ ... ... .... ... ... ... .... ... ........................................... 263
DHCP ...................................................................................................................................... 271
VRRP .............................. .................... ................... .................... ................... ........................... 281
Manage ..................................................................................................................................291
Maintenance ............................................................................................................................ 293
Access Control ........................................................................................................................ 301
Diagnostic .................................... ....................................................... ..................................... 321
Syslog ....................................... .................................................... ........................................... 323
Cluster Management .......... ... ................................................ .... ... ... ........................................ 327
MAC Table ............................................................................................................................... 335
IP Table ............................... ... ... ............................................. .... ... ... ... ... .... ... ........................... 339
ARP Ta ble .............................. ... ............................................. .... ... ... ... ... .... ... ........................... 343
Routing Table ........................................................................................................................... 345
Configure Clone ....................................................................................................................... 347
Troubleshooting and Product Specifications ...................................................................351
Troubleshooting ..................................................... .................................................................. 353
Product Specifications ............................................................................................................. 357
Appendices and Index .........................................................................................................367
10
MS-7206 User’s Guide
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings ........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
Part I: Introduction................................................................................. 23
Chapter 1
Introducing the MM-7201........................................................................................................25
1.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 25
1.2 Ways to Manage the MM-7201 ........................................ .... ... ... ... ... .................................... 26
1.3 Good Habits for Managing the MM-7201 ............................................................................. 26
1.4 LEDs ......................... .... ............................................. ... ... .... ................................................ 27
Part II: Hardware .................................................................................... 29
Chapter 2
Front Panel..............................................................................................................................31
2.1 Front Panel ...................................... ... ... .............................................. ... ... ... .... ... ... .............31
2.2 Connections ..................................................... ... .... ... ... ... .... ................................................ 31
2.2.1 MGMT Port ....................... ... ............................................. ... ... .... ... ... ... .... ................... 31
2.2.2 CONSOLE Port ............................................. ... ... ... .... ... ... .......................................... 32
2.2.3 ALARM Port ........ ... ... ... .... ... ... ............................................. ... .... ... .............................32
Chapter 3
Installing Cards.......................................................................................................................33
3.1 Management Cards ...................................... ... ... .... ... ... ... .... ... ... .......................................... 33
3.1.1 Add a Management Card (System Is Off) .................................................................. 33
3.1.2 Add a Management Card (System Is On) .................................................................. 34
3.1.3 Remove a Management Card ....................... ............................................................. 34
3.2 Interface Modules ...................................... ... ... ... .... ... ... ... .... ................................................ 34
3.2.1 Add an Interface Module (System Is Off) ................................................................... 34
MS-7206 User’s Guide
11
Table of Contents
3.2.2 Add an Interface Module (System Is On) ................................................................... 34
3.2.3 Remove an Interface Module .............................. ....................................................... 36
Part III: Basic.......................................................................................... 37
Chapter 4
The Web Configurator............................................................................................................39
4.1 Introduction ......................... ... .... ... ... ... ............................................. .... ... ... ... .... ... ... .............39
4.2 System Login ....................................................................................................................39
4.3 The Status Screen .......................................................................................................... 40
4.3.1 Change Your Password .......................................................................................... 44
4.4 Saving Your Configuration ...................................................................................................44
4.5 Switch Lockout .......................................... ... ... ... .... ............................................. ... ... .......... 45
4.6 Resetting the Switch ............................... ... ... ... .............................................. ... ... ... ... ....... 45
4.7 Logging Out of the Web Configurator ..................................... ............................................. 46
4.8 Help ................................................... ... .... ... ... ............................................. .... ... ................47
Chapter 5
Initial Setup Example..............................................................................................................49
5.1 Configuring an IP Interface .................... .................................................... .......................... 49
5.2 Configuring DHCP Server Settings ..................................................................................... 50
5.3 Creating a VLAN ........... ... ... ... .... ... ... ............................................. ... .... ... ... ... ....................... 51
5.4 Setting Port VID ......................... ... ... ... ... .... ... ............................................. ... .... ... ... ... .......... 52
5.5 Enabling RIP ................. ... ... ... .............................................. ... ... ... ... .... ... ... ... .... ... ................53
Chapter 6
System Status and Port Statistics.........................................................................................55
6.1 Status ..................................... .... ... ............................................. ... ....................................... 55
6.1.1 Port Status ................................................. .... ... ... ... .... ................................................ 56
6.1.2 Port Details ................... .... ............................................. ... ... ... .... ................................ 57
Chapter 7
System Info .............................................................................................................................61
7.1 System Info ......... ... ... .... ............................................. ... ... .... ... ............................................. 61
7.1.1 Hardware Monitor ......................... .... ... ... ... ................................................................. 63
Chapter 8
General Setup..........................................................................................................................65
8.1 General Setup ............................................. ... ... .... ... ... ... .... ... ... .......................................... 65
Chapter 9
Switch Setup ...........................................................................................................................69
12
MS-7206 User’s Guide
Table of Contents
9.1 Switch Setup .......... ... .... ... ... ............................................. .... ... ... ... ... .... ................................ 69
Chapter 10
IP Setup....................................................................................................................................73
10.1 IP Interfaces ...................................................................................................................... 73
10.2 IP Setup .............................................................................................................................74
Chapter 11
Slot Setup................................................................................................................................77
11.1 Slot Setup ..........................................................................................................................77
Chapter 12
Port Setup................................................................................................................................79
12.1 Port Setup .......................................................................................................................... 79
Part IV: Advanced .................................................................................. 83
Chapter 13
VLAN........................................................................................................................................85
13.1 Introduction to VLANs ........................................................................................................85
13.2 Introduction to IEEE 802.1Q Tagged VLANs ................................................................ 85
13.2.1 Forwarding Tagged and Untagged Frames .............................. ... ... ... .... ... ... ... ... .......86
13.3 Automatic VLAN Registration ............................................................................................ 86
13.3.1 GARP ....................................................................................................................... 86
13.3.2 GVRP ....................................................................................................................... 87
13.4 Port VLAN Trunking ...........................................................................................................87
13.5 Static VLAN ....................................................................................................................... 88
13.6 VLAN Status ..................................................................................................................... 89
13.6.1 VLAN Detail .............................................................................................................. 89
13.6.2 Static VLAN .......................................................................................................... 91
13.6.3 VLAN Port Setting ................................................................................................ 93
13.7 Subnet Based VLANs .......................................................................................................94
13.8 Configuring Subnet Based VLAN .................................................................................... 95
13.9 Protocol Based VLANs .....................................................................................................97
13.10 Configuring Protocol Based VLAN ................................................................................ 98
13.11 Create an IP-based VLAN Example .............................................................................. 100
Chapter 14
Static MAC Forward Setup...................................................................................................101
14.1 Static MAC Forwarding ...............................................................................................101
MS-7206 User’s Guide
13
Table of Contents
Chapter 15
Filtering..................................................................................................................................103
15.1 Filtering ........................................................................................................................... 103
Chapter 16
Spanning Tree Protocol........................................................................................................105
16.1 STP/RSTP Overview ...................................................................................................... 105
16.1.1 STP Terminology ................................................................................................... 105
16.1.2 How STP Works .................................................................................................... 106
16.1.3 STP Port States .....................................................................................................107
16.1.4 Multiple RSTP ....................................................................................................... 107
16.1.5 Multiple STP ........................................................................................................... 108
16.2 Spanning Tree Protocol Status Screen .............................................................................111
16.3 Spanning Tree Configuration ...........................................................................................111
16.4 Rapid Spanning Tree Protocol .......................................................................................112
16.5 Rapid Spanning Tree Protocol Status .........................................................................114
16.6 Multiple Rapid Spanning Tree Protocol .........................................................................116
16.7 Multiple Rapid Spanning Tree Protocol Status ...........................................................118
16.8 Configure Multiple Spanning Tree Protocol .................................................................. 120
16.9 Multiple Spanning Tree Protocol Status ......................................................................123
Chapter 17
Bandwidth Control................................................................................................................127
17.1 CIR and PIR .................................................................................................................... 127
17.2 Bandwidth Control ...........................................................................................................127
Chapter 18
Broadcast Storm Control.....................................................................................................131
18.1 Broadcast Storm Control ................................................................................................. 131
Chapter 19
Mirroring................................................................................................................................133
19.1 Mirroring .......................................................................................................................... 133
Chapter 20
Link Aggregation ..................................................................................................................135
20.1 Link Aggregation Overview ........................ ....................... ...................... ....................... . 135
20.2 Dynamic Link Aggregation ..............................................................................................135
20.2.1 Link Aggregation ID ............................................................................................... 136
20.3 Link Aggregation Status ....................................................... .......................... .................137
20.4 Link Aggregation Setting ................................................................................................ 138
20.5 Link Aggregation Control Protocol ................................................................................. 140
14
MS-7206 User’s Guide
Table of Contents
Chapter 21
Port Authentication...............................................................................................................143
21.1 Port Authentication Overview ......................................................................................... 143
21.1.1 IEEE 802.1x Authentication ................................................................................... 143
21.1.2 MAC Authentication ............................................................................................... 144
21.2 Port Authentication .......................................................................................................... 145
21.2.1 802.1x .................................................................................................................146
21.2.2 MAC Authentication ................................................................ ... ... ... .... ... ... ... ... .... . 147
Chapter 22
Port Security..........................................................................................................................149
22.1 Port Security ................................................................................................................... 149
22.2 VLAN MAC Address Limit .............................................................................................. 152
Chapter 23
Classifier................................................................................................................................155
23.1 Packet Classifier and QoS ...............................................................................................155
23.2 Classifier .........................................................................................................................155
23.3 Classifier Example ...........................................................................................................159
Chapter 24
Policy Rule.............................................................................................................................161
24.1 Policy Rules Overview ....................................................................................................161
24.1.1 DiffServ .................................................................................................................. 161
24.1.2 DSCP and Per-Hop Behavior ................................................................................. 161
24.2 Configuring Policy Rules ................................................................................................. 162
24.3 Policy Example ................................................................................................................ 166
Chapter 25
Queuing Method....................................................................................................................169
25.1 Queuing Method Overview ............................................................................................. 169
25.1.1 Strictly Priority Queuing .......................................................................................... 169
25.1.2 Weighted Round Robin Scheduling (WRR) ........................................................... 169
25.1.3 Weighted Fair Queuing .......................................................................................... 170
25.2 Queuing Method .............................................................................................................. 171
Chapter 26
VLAN Stacking......................................................................................................................173
26.1 VLAN Stacking Overview ................................................................................................. 173
26.1.1 VLAN Stacking Example ........................................................................................ 173
26.2 VLAN Stacking Port Roles ................ ... .... ........................................................................ 174
26.3 VLAN Tag Format ....... .....................................................................................................175
26.3.1 Frame Format ........................................................................................................175
MS-7206 User’s Guide
15
Table of Contents
26.4 VLAN Stacking ................................................................................................................. 176
Chapter 27
Multicast ................................................................................................................................179
27.1 Multicast Overview ......................................................................................................... 179
27.1.1 IP Multicast Addresses ........................................................................................... 179
27.1.2 IGMP Filtering ........................................................................................................ 179
27.1.3 IGMP Snooping ..................................................................................................... 180
27.1.4 IGMP Snooping and VLANs ................................................................................... 180
27.2 Multicast Status .............................................................................................................. 180
27.3 Multicast Setting .............. ... .... ... ................................................ ... .... .............................. 181
27.4 IGMP Snooping VLAN .................................................................................................... 183
27.5 IGMP Filtering Profile ..................................................................................................... 185
27.6 MVR Overview ................................................................................................................. 186
27.6.1 Types of MVR Ports ............................................................................................... 187
27.6.2 MVR Modes ........................................................................................................... 187
27.6.3 How MVR Works .................................................................................................... 187
27.7 MVR ................................................................................................................................. 188
27.8 Group Configuration ........... .... ... ... ... ... .... ................................................ ... .... .................190
27.8.1 MVR Configuration Example ... ... .... ... ..................................................................... 192
Chapter 28
AAA........................................................................................................................................195
28.1 Authentication, Authorization and Accounting (AAA) ..................................................... 195
28.1.1 Local User Accounts .................. .... ... ... ... .... ... ................................................ ... .... . 196
28.1.2 RADIUS and TACACS+ ........................................................................................ 196
28.2 AAA Screens ................................................................................................................... 196
28.2.1 RADIUS Server Setup ........................................................................................ 197
28.2.2 TACACS+ Server Setup ..................................................................................... 199
28.2.3 AAA Setup ............................................................................................................. 201
28.2.4 Vendor Specific Attribute ........................................................................................ 204
28.2.5 Tunnel Protocol Attribute ........................................................................................ 205
Chapter 29
IP Source Guard ....................................................................................................................207
29.1 IP Source Guard Overview .............................................................................................. 207
29.1.1 DHCP Snooping Overview ..................................................................................... 208
29.1.2 ARP Inspection Overview ...................................................................................... 210
29.2 IP Source Guard ...............................................................................................................211
29.3 IP Source Guard Static Binding ....................................................................................... 212
29.4 DHCP Snooping .............................................................................................................. 215
29.5 DHCP Snooping Configure ...................... ........................................................................ 218
29.5.1 DHCP Snooping Port Configure ............................................................................. 220
16
MS-7206 User’s Guide
Table of Contents
29.5.2 DHCP Snooping VLAN Configure .......................................................................... 221
29.6 ARP Inspection Status .....................................................................................................223
29.6.1 ARP Inspection VLAN Status .................................................................................224
29.6.2 ARP Inspection Log Status .................................................................................... 225
29.7 ARP Inspection Configure ............................................................................................... 226
29.7.1 ARP Inspection Port Configure .............................................................................. 228
29.7.2 ARP Inspection VLAN Configure ........................................................................... 230
Chapter 30
Loop Guard............................................................................................................................233
30.1 Loop Guard Overview .....................................................................................................233
30.2 Loop Guard Setup ...........................................................................................................235
Part V: IP ............................................................................................... 239
Chapter 31
Static Route...........................................................................................................................241
31.1 Static Routing ................................................................................................................. 241
Chapter 32
RIP .........................................................................................................................................243
32.1 RIP ................................................................................................................................... 243
Chapter 33
OSPF......................................................................................................................................245
33.1 OSPF Overview .............................................................................................................. 245
33.1.1 OSPF Autonomous Systems and Areas . .... ... ... ... .... .............................................. 245
33.1.2 How OSPF Works ... ............................................. .... ... ... ... ... .... ... ........................... 246
33.1.3 Interfaces and Virtual Links .................................................................................... 246
33.1.4 OSPF and Router Elections ...................................................................................247
33.1.5 Configuring OSPF .................................................................................................247
33.2 OSPF Status ................................................................................................................. 248
33.3 OSPF Configuration .......................................................................................................250
33.4 OSPF Interface ............................................................................................................... 252
33.5 OSPF Virtual-Link ........................................................................................................... 255
Chapter 34
IGMP.......................................................................................................................................257
34.1 IGMP ............................................................................................................................... 257
Chapter 35
DVMRP...................................................................................................................................259
MS-7206 User’s Guide
17
Table of Contents
35.1 DVMRP Overview ............................................................................................................259
35.2 How DVMRP Works ... ... ... ... .... ... ... ... ... .... ... ... ... .... ................................................ ... ... .....259
35.2.1 DVMRP Terminology .............................................................................................260
35.3 DVMRP ............................................................................................................................ 260
35.3.1 DVMRP Configuration Error Messages ........................................... .... ... ... ... ........261
35.4 Default DVMRP Timer Values ........................................................................................ 262
Chapter 36
Differentiated Services.........................................................................................................263
36.1 DiffServ Overview ...........................................................................................................263
36.1.1 DSCP and Per-Hop Behavior ................................................................................ 263
36.1.2 DiffServ Network Example .................................................................................... 264
36.2 Two Rate Three Color Marker Traffic Policing ................................................................. 264
36.2.1 TRTCM-Color-blind Mode ...................................................................................... 265
36.2.2 TRTCM-Color-aware Mode ....................................................................................265
36.3 DiffServ ............................................................................................................................ 266
36.4 2-Rate 3 Color Marker ....................................................................................................267
36.5 DSCP Setting ................................................................................................................. 269
Chapter 37
DHCP......................................................................................................................................271
37.1 DHCP Overview ............................................................................................................. 271
37.1.1 DHCP modes ........................................................................................................271
37.1.2 DHCP Configuration Options ................................................................................. 271
37.2 DHCP Status ................................................................................................................... 272
37.3 DHCP Relay .................................................................................................................... 272
37.3.1 DHCP Relay Agent Information ............................................................................. 273
37.3.2 Configuring DHCP Global Relay ............................................................................ 274
37.3.3 Global DHCP Relay Configuration Example .......................................................... 275
37.4 Configuring DHCP VLAN Settings ................................................................................ 276
37.4.1 DHCP VLAN Setting Example ............................................................................... 278
Chapter 38
VRRP......................................................................................................................................281
38.1 VRRP Overview .............................................................................................................. 281
38.1.1 VRRP Parameters ................................................................................................. 282
38.2 VRRP Status ................................................................................................................... 283
38.2.1 VRRP Configuration ............................................................................................... 284
38.3 VRRP Configuration Examples ...................................................................................... 286
38.3.1 One Subnet Network Example ..............................................................................286
38.3.2 Two Subnets Example ........................................................................................... 288
18
MS-7206 User’s Guide
Table of Contents
Part VI: Manage.................................................................................... 291
Chapter 39
Maintenance..........................................................................................................................293
39.1 Maintenance .................................................................................................................... 293
39.1.1 Firmware Upgrade ................................................................................................. 294
39.1.2 Restore Configuration ............................................................................................ 296
39.1.3 Backup Configuration ........................ ....................................... .............................. 296
39.2 FTP Command Line ........................................................................................................ 297
39.2.1 Filename Conventions .......................................................................................... 297
39.2.2 FTP Command Line Procedure ............................................................................. 299
39.2.3 GUI-based FTP Clients .......................................................................................... 300
39.2.4 FTP Restrictions .................................................................................................... 300
Chapter 40
Access Control......................................................................................................................301
40.1 Access Control ................................................................................................................ 301
40.2 SNMP Overview .............................................................................................................. 301
40.2.1 SNMP v3 and Security ........................................................................................... 303
40.2.2 Supported MIBs ..................................................................................................... 303
40.2.3 SNMP Traps .......................................................................................................... 303
40.2.4 SNMP ..................................................................................................................... 308
40.2.5 Configuring SNMP Trap Group ...........................................................................310
40.3 Logins ...............................................................................................................................311
40.4 SSH Overview ................................................................................................................. 313
40.4.1 How SSH works ................... ... ... ............................................................................ 313
40.4.2 SSH Implementation on the Switch ........................................................................ 314
40.5 Introduction to HTTPS .....................................................................................................314
40.5.1 HTTPS Example ....................................................................................................315
40.6 Service Access Control ................................................................................................... 319
40.7 Remote Management ................................................................................................... 320
Chapter 41
Diagnostic..............................................................................................................................321
41.1 Diagnostic ....................................................................................................................... 321
Chapter 42
Syslog....................................................................................................................................323
42.1 Syslog Overview .............................................................................................................. 323
42.2 Syslog Setup ................................................................................................................... 324
42.2.1 Syslog Server Setup ............................................................................................. 325
MS-7206 User’s Guide
19
Table of Contents
Chapter 43
Cluster Management.............................................................................................................327
43.1 Cluster Management Status Overview ............................................................................ 327
43.2 Clustering Management Status ....................................................................................... 328
43.2.1 Cluster Member Switch Management ................................................................... 329
43.2.2 Uploading Firmware to a Cluster Member Switch ................................................ 330
43.3 Clustering Management Configuration ............................................................................ 332
Chapter 44
MAC Table..............................................................................................................................335
44.1 MAC Table Overview .......................................................................................................335
44.2 MAC Table ....................................................................................................................... 336
Chapter 45
IP Table ..................................................................................................................................339
45.1 IP Table Overview ............................................................................................................ 339
45.2 IP Table ............................................................................................................................340
Chapter 46
ARP Table..............................................................................................................................343
46.1 ARP Table Overview .......................................................................................................343
46.1.1 How ARP Works ......................................................... ... ... ... .... ... ... ........................ 343
46.2 ARP Table ........................................................................................................................ 344
Chapter 47
Routing Table........................................................................................................................345
47.1 Routing Table Status ........................................................................................................345
Chapter 48
Configure Clone....................................................................................................................347
48.1 Configure Clone ...............................................................................................................347
Part VII: Troubleshooting and Product Specifications..................... 351
Chapter 49
Troubleshooting....................................................................................................................353
49.1 Power, Hardware Connections, and LEDs .............................. ... ... .... ... ... ... .... ... ... ... ........353
49.2 MM-7201 Access and Login ............................................................................................ 354
Chapter 50
Product Specifications.........................................................................................................357
20
MS-7206 User’s Guide
Table of Contents
Part VIII: Appendices and Index ......................................................... 367
Appendix A IP Addresses and Subnetting ...........................................................................369
Appendix B Legal Information..............................................................................................381
Index.......................................................................................................................................385
MS-7206 User’s Guide
21
Table of Contents
22
MS-7206 User’s Guide
PART I
Introduction
Introducing the MM-7201 (25)
23
24
CHAPTER 1
Introducing the MM-7201
This chapter introduces the main applications and features of the MM-7201. It also
introduces the ways you can manage the MM-7201.
1.1 Overview
The MM-7201 is the management card for the MS-7206 Ethernet chassis system.
The MM-7201 contains the configuration of the MS-7206 system and makes the
interface modules work together as one switch.
Install one or two MM-7201 in each MS-7206 chassis.
• If you install one MM-7201, the MS-7206 system has a switching capability of
96 Gbps full duplex, the equivalent of two MI-7248 interface modules .
• If you install two MM-7201s, the MS-7206 system has a switching capability of
192 Gbps full duplex, the equivalent of four MI-7248 interface modules. In
addition, the two MM-7201s provide switching and management redundancy. If
one MM-7201 becomes unavailable, the other one takes over.
The MS-7206 system is designed to be used in enterprise applications, such as the
one in the following example.
Figure 1 Applications: Enterprise
B
A
C
D
MS-7206 User’s Guide
25
Chapter 1 Introducing the MM-7201
In this example, the MS-7206 system is connected to three Gigabit Ethernet
switches A, B, and C and one router D.
•Switch A provides access to the servers in the data center. The MS-7206 system
uses link aggregation (trunking) to create a high-speed connection with switch
A.
•Switches B and C are connected to users in different departments via wired or
wireless networks. The MS-7206 system is connected to these switches using
fiber.
•Router D provides secure Internet access for the whole company. The MS-7206
system is connected to router D by a 10/100 Mbps copper connection.
In this configuration, the MS-7206 system provides high switching capacity, high
port density, and centralized management for the enterprise network.
1.2 Ways to Manage the MM-7201
Use any of the following methods to manage the MM-7201.
• Web Configurator. This is recommended for everyday management of the MM7201 using a (supported) web browser.
• Command Line Interface. Line commands are mostly used for troubleshooting
by service engineers. See the CLI Reference Guide.
• FTP. FTP is used for firmware upgrades and configuration backup/restore. See
Chapter 39 on page 293.
• SNMP. The device can be monitored by an SNMP manager. See Chapter 40 on
page 301.
1.3 Good Habits for Managing the MM-7201
Do the following things regularly to make the MM-7201 more secure and to
manage the MM-7201 more effectively.
• Change the password. Use a password that’s not easy to guess and that consists
of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
26
• Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the device becomes
unstable or even crashes. If you forget y our password, you will hav e to reset the
MM-7201 to its factory default settings. If you backed up an earlier
configuration file, you would not have to totally re-configure the MM-7201. You
could simply restore your last configuration.
MS-7206 User’s Guide
1.4 LEDs
Figure 2 LEDs
Table 1 LEDs
LED COLOR STATUS DESCRIPTION
PS Green On The MM-7201 is receiving power from one of the MS-7206
PoE Green On The MM-7201 is receiving power from a Power over
PWR Green On The MM-7201 is receiving power.
SYS Green On The MM-7201 is ready and running normally.
ALM Red On One or more fans are not working correctly, or the voltage
MASTER Green On The MM-7201 is the active management card in the MS-
10 Green On The MM-7201 has a 10 Mbps Ethernet connection on the
100 Green On The MM-7201 has a 100 Mbps Ethernet connection on the
Chapter 1 Introducing the MM-7201
power modules.
Off The MM-7201 is not receiving power from any of the MS-
7206 power modules.
Ethernet (PoE) injector.
Off The MM-7201 is not receiving power from a Power over
Ethernet (PoE) injector.
Off The MM-7201 is not receiving power.
Blinking The MM-7201 is starting up.
Off The MM-7201 is not ready or failed to start up correctly.
is outside tolerance at one or more sensors.
Off The fans are working correctly, and the voltage is within
tolerance at all sensors.
7206 system.
Off The MM-7201 is the standby management card in the MS-
7206 system.
MGMT port.
Off The MM-7201 does not have a 10 Mbps Ethernet
connection on the MGMT port.
MGMT port.
Off The MM-7201 does not have a 100 Mbps Ethernet
connection on the MGMT port.
MS-7206 User’s Guide
27
Chapter 1 Introducing the MM-7201
28
MS-7206 User’s Guide
Front Panel (31)
Installing Cards (33)
PART II
Hardware
29
30
CHAPTER 2
Front Panel
This chapter describes the front panel of and connections to the MM-7201.
2.1 Front Panel
This section introduces the ports on the front panel of the MM-7201. See Section
1.4 on page 27 for a description of LEDs.
Figure 3 Front Panel
Table 2 Front Panel
PORT DESCRIPTION
MGMT Use this RJ-45 port for local (out-of-band) management of the MM-7201.
CONSOLE Use this D-Sub 9-pin serial port for local (out-of-band) management of the
MM-7201. You can only use the command line interface (CLI).
ALARM Use this DB9 connector to connect to alarm output terminals on other
pieces of equipment or to an alarm input terminal on another piece of
equipment.
2.2 Connections
This section provides more information about the connections to each port on the
MM-7201.
2.2.1 MGMT Port
This Ethernet connection has the following characteristics:
• 10/100 Mbps.
• Auto-negotiating. The port can detect and adjust to the optimum Ethernet
speed and duplex mode (full duplex or half duplex) of the connected device.
MS-7206 User’s Guide
31
Chapter 2 Front Panel
• Auto-crossover or auto-MDI/MDI-X. The port automatically works with a
straight-through or crossover Ethernet cable.
2.2.2 CONSOLE Port
For local management through the command line interface (CLI), use a computer
with terminal emulation software configured to the following parameters:
• VT100 terminal emulation
• 9600 bps
• No parity, 8 data bits, 1 stop bit
• No flow control
Connect the male 9-pin end of the console cable to the CONSOLE port of the MM-
7201. Connect the female end to a serial port (COM1, COM2 or other COM port) of
your computer.
2.2.3 ALARM Port
The ALARM port has input pins and output pins.
A closed circuit on the ALARM input pins indicates an alarm. Pins 3 and 7 are
alarm input one. Pins 4 and 8 are alarm input two. Pins 5 and 9 are alarm input 3.
The MM-7201 signals an alarm when it detects an alarm on the ALARM input pins
or in the MS-7206 system (for example, the voltage or temperature is outside the
normal range). To signal an alarm, the MM-7201 opens the circuit for pins 1 and 6
(the common pin) and closes the circuit for pins 2 and 6.
Figure 4 ALARM Pins Layout
Pin 1
Pin 9
Pin 5
Pin 6
32
MS-7206 User’s Guide
CHAPTER 3
Installing Cards
This chapter describes how to add, remove, and hot-swap management cards and
interface modules in the system.
3.1 Management Cards
This section describes the steps required to add and remove management cards.
If you want to hot-swap management cards, fol low the steps below to remove the
existing management card and add the new management card.
Note: Be careful when you remove a management card from one MS-7206 system
and install it in a different MS-7206 system because it is possible that the two
MS-7206 systems will have the same MAC address.
In the MS-7206 system, the MAC address comes from the management card, not
the MS-7206 chassis. Each management card has a different MAC address. The
MS-7206 system copies the MAC address from the active management card when
the MS-7206 system starts up. The MS-7206 system keeps using this MAC
address, even if the standby management card takes over, until the system starts
up again. As a result, it is possible for two or more MS-7206 systems to have the
same MAC address at the same time if the same management card was active
when each of them last started up.
You can install management cards in slot 1 or slot 2.
3.1.1 Add a Management Card (System Is Off)
1 Insert the card in the MS-7206 chassis.
2 Turn on the system.
If you insert the management card in slot 1, it automat ically becomes the active
management card. If you insert the management card in slot 2, it becomes the
standby management card if there is another management card in slot 1.
MS-7206 User’s Guide
33
Chapter 3 Installing Cards
3.1.2 Add a Management Card (System Is On)
Insert the card in the MS-7206 chassis.
If there is another management card in the system, the new management card
automatically becomes the standby management card. If the firmware version of
the new management card is different than the firmware version of the existing
management card, the new management card does not function in the system.
3.1.3 Remove a Management Card
Remove the card from the MS-7206 chassis. If you remove the active
management card, the standby management card takes over.
3.2 Interface Modules
This section describes the steps required to add and remov e interface modules. If
you want to hot-swap interface modules, follow the steps below to remove the
existing interface module and add the new interface module.
You can install interface modules in slot 3, slot 4, slot 5, or slot 6.
3.2.1 Add an Interface Module (System Is Off)
1 Insert the card in the MS-7206 chassis.
2 Turn on the system.
The system automatically detects what type of interface module is installed. You
do not have to configure the Slot Setup screen.
3.2.2 Add an Interface Module (System Is On)
If the same type of interface module was previously installed in the sl ot, insert the
card in the MS-7206 chassis.
34
If a different type of interface module was previously installed in the slot or if no
interface module was previously installed in the slot, follow these steps.
MS-7206 User’s Guide
Chapter 3 Installing Cards
1 Open the Slot Setup screen, and uninstall the existing type of interface module in
the slot (if necessary).
Figure 5 Slot Setup (Uninstall)
2 Remove the interface module from the system (if necessary).
3 Insert the interface module in slot 3, slot 4, slot 5, or slot 6.
MS-7206 User’s Guide
35
Chapter 3 Installing Cards
4 Open the Slot Setup screen, and install the new type of interface module in the
slot.
Figure 6 Slot Setup (Install)
3.2.3 Remove an Interface Module
Remove the interface module from the MS-7206 chassis.
36
MS-7206 User’s Guide
PART III
Basic
The Web Configurator (39)
Initial Setup Example (49)
System Status and Port Statistics (55)
System Info (61)
General Setup (65)
Switch Setup (69)
IP Setup (73)
Slot Setup (77)
Port Setup (79)
37
38
CHAPTER 4
The Web Configurator
This section introduces the configuration and functions of the web configurator.
4.1 Introduction
The web configurator is an HTML-based management interface that allows easy
setup and management via Internet browser. Use Internet Explorer 6.0 and later
or Netscape Navigator 7.0 and later versions. The recommended screen resolution
is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from the system. W eb pop-up blocking is enab led
by default in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
4.2 System Login
1 Start your web browser.
2 Type “http://” and the IP address of the system (the default management IP
address is 192.168.0.1 through the MGMT port) in the Location or Address
field. Press [ENTER].
MS-7206 User’s Guide
39
Chapter 4 The Web Configurator
3 The login screen appears. The default username is admin and associated default
password is 1234.
Figure 7 Web Configurator: Login
You may configure the time in the General Setup screen. See Chapter 8 on p age
65.
4 Click OK to view the first web configurator screen.
4.3 The Status Screen
The Status screen is the first screen that displays when you access the web
configurator.
The following figure shows the navigating components of a web configurator
screen.
Figure 8 Web Configurator Home Screen (Status)
A
B
C
D
E
40
A - Click the menu items to open submenu links, and then click on a submenu link
to open the screen in the main window.
B, C, D, E - These are quick links which allow you to perform certain tasks no
matter which screen you are currently working in.
MS-7206 User’s Guide
B - Click this link to save your configuration into the MM-7201’s nonvolatile
memory. Nonvolatile memory is the configuration of your MM-7201 that stays the
same even if the MM-7201’s power is turned off.
C - Click this link to go to the status page of the system.
D - Click this link to log out of the web config urator.
E - Click this link to display web help pages. The help pages provide descriptions
for all of the configuration screens.
In the navigation panel, click a main link to reveal a list of submenu links.
Table 3 Navigation Panel Menu Overview
BASIC SETTING
ADVANCED
APPLICATION
Chapter 4 The Web Configurator
IP APPLICATION MANAGEMENT
The following table describes the links in the navigation panel.
Table 4 Navigation Panel Menu Description
LINK DESCRIPTION
Basic Setting
System Info Look at basic information about the MM-7201 and to monitor the system
General Setup Configure the system name, login precedence, time, and other general
Switch Setup Configure MAC address learning, declaration timeout values for GARP,
MS-7206 User’s Guide
hardware, including temperature, fan speed, voltage, and power.
settings for the system.
and priority queues. You can also control whether or not the switch
handles bridge control protocols, such as STP.
41
Chapter 4 The Web Configurator
Table 4 Navigation Panel Menu Description (continued)
LINK DESCRIPTION
IP Setup Configure the default gateway, DNS server, management IP address,
and IP domains.
Slot Setup Control the power to the each slot or to change what type of card is in
the slot without restarting the system.
Port Setup Configure basic port settings, such as speed, duplex, and flow control.
You can also configure the default 802.1p priority and the way bridge
protocol data units (BPDU) are handled.
Advanced
Application
VLAN Configure VLAN settings.
Static MAC
Forwarding
Filtering Set up filtering rules.
Spanning Tree
Protocol
Bandwidth
Control
Broadcast
Storm Control
Mirroring Copy (“mirror”) traffic from one or more ports to a specified monitor
Link
Aggregation
Port
Authentication
Port Security Activate MAC address learning and set the maximum number of MAC
Classifier Configure classifiers for traffic. After you configure the classifier, you can
Policy Rule Configure policy rules for classified traffic.
Queuing
Method
VLAN Stacking Add an outer VLAN tag to the inner IEEE 802.1Q tagged frames that
Multicast Configure various multicast features and create multicast VLANs.
AAA Configure authentication, authorization and accounting services via
IP Source
Guard
Configure static MAC addresses for a port. These static MAC addresses
do not age out.
Configure RSTP/MRSTP to prevent network loops.
Specify the guaranteed bandwidth and maximum bandwidth for
incoming traffic on a port and to specify the maximum bandwidth for
outgoing traffic on a port.
Limit the number of broadcast, multicast and destination lookup failure
(DLF) packets the switch receives per second on the ports.
port. You can examine the traffic on the monitor port without interfering
with regular traffic flow.
Logically aggregate physical links to form one logical, higher-bandwidth
link.
Activate 802.1x authentication and configure the RADIUS server.
addresses to learn on a port.
specify actions (“policies”) for traffic that matches the rules.
Configure queuing methods to handle network congestion.
enter the network. If a service provider assigns an outer VLAN tag for
each customer, the service provider’s customers can assign their own
inner VLAN tags without creating overlapping VLANs in the service
provider’s network.
external servers. The external servers can be either RADIUS (Remote
Authentication Dial-In User Service) or TACACS+ (Terminal Access
Controller Access-Control System Plus).
Configure filtering of unauthorized DHCP and ARP packets in your
network.
42
MS-7206 User’s Guide
Chapter 4 The Web Configurator
Table 4 Navigation Panel Menu Description (continued)
LINK DESCRIPTION
Loop Guard Configure protection against network loops that occur on the edge of
your network.
IP Application
Static Routing Tell the switch how to forward IP traffic when you configure the TCP/IP
parameters manually.
RIP RIP (Routing Information Protocol) allows a routing device to exchange
routing information with other routers. Use this to configure RIP on the
switch.
OSPF OSPF (Open Shortest Path First) is a link-state protocol designed to
distribute routing information within an autonomous system (AS). An
autonomous system is a collection of networks using a common routing
protocol to exchange routing information. Use this to configure OSPF on
the switch.
IGMP IGMP (Internet Group Multicast Protocol) is a session-layer protocol used
to establish membership in a multicast group. It is not used to carry user
data. Use this to configure IGMP on the switch.
DVMRP DVMRP (Distance Vector Multicast Routing Protocol) is a protocol used
for routing multicast data within an autonomous system (AS). Use this
to configure DVMRP on the switch when you wish it to act as a multicast
router (“mrouter”).
DiffServ Use this to enable DiffServ, configure marking rules and set DSCP-to-
IEEE802.1p mappings.
DHCP DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132)
allows individual computers to obtain TCP/IP configuration at start-up
from a server. Use this screen to configure the switch as a DHCP server
or a DHCP relay.
VRRP Virtual Router Redundancy Protocol (VRRP), defined in RFC 2338, allows
you to create redundant backup gateways to ensure that the default
gateway of a host is always available. Use this to configure VRRP on the
switch.
Management
Maintenance Use this to manage firmware and configuration files, to reset a slot, or to
reboot the whole switch.
Access Control Use this to configure SNMP, administrator accounts, and remote
management.
Diagnostic Use this to check system logs, ping IP addresses or perform port tests.
Syslog Use this to configure the switch’s log settings and syslog server.
Cluster
Management
MAC Table Use this to look at the MAC addresses, VLAN IDs, and ports of devices
IP Table Use this to look at the IP addresses, VLAN IDs, and ports of devices
ARP Table Use this to look at the MAC addresses – IP address resolution table.
Use this to manage switches through one switch, called the cluster
manager. The switches must be directly connected and be in the same
VLAN group so as to be able to communicate with one another.
connected to the switch.
connected to the switch.
MS-7206 User’s Guide
43
Chapter 4 The Web Configurator
Table 4 Navigation Panel Menu Description (continued)
LINK DESCRIPTION
Routing Table Use this to look at the routing table.
Configure
Clone
Use this to copy attributes of one port or slot to other ports or slots.
4.3.1 Change Your Password
After you log in for the first time, it is recommended you change the default
administrator password. Click Management > Access Control > Logins to
display the next screen.
Figure 9 Change Administrator Login Password
4.4 Saving Your Configuration
When you are done modifying the settings in a screen, click Apply to save your
changes back to the run-time memory. Settings in the run-time memory are lost
when the MM-7201’s power is turned off.
Click the Save link in the upper right hand corner of the web configur ator to save
your configuration to nonvolatile memory. Nonvolatile memory refers to the MM7201’s storage that remains even if the MM-7201’s power is turned off.
Note: Use the Save link when you are done with a configuration session.
44
MS-7206 User’s Guide
4.5 Switch Lockout
You could block yourself (and all others) from using in-band-management
(managing through the data ports on the interface modules) if you do one of the
following:
1 Delete the management VLAN (default is VLAN 1).
2 Delete all port-based VLANs wit h the CPU port as a member. The “CPU port” is the
management port of the switch.
3 Filter all traffic to the CPU port.
4 Disable all ports.
5 Misconfigure the text configuration file.
6 Forget the password and/or IP address.
Chapter 4 The Web Configurator
7 Prevent all services from accessing the switch.
8 Change a service port number but forget it.
Note: Be careful not to lock yourself and others out of the switch. If you do lock
yourself out, try using out-of-band management (via the management port or
console port) to configure the MM-7201.
4.6 Resetting the Switch
If you (and others) forget the administrator password or are no longer able to
access the MM-7201 (using in-band or out-of-band management), you need to
reload the factory-default configuration file.
Uploading the factory-default configuration file replaces the current configuration
file with the factory-default configuration file. This means that you will lose all
previous configurations and the speed of the console port will be reset to the
default values in Section 2.2.2 on page 32. The password will also be reset to
“1234” and the IP address to 192.168.0.1.
To upload the configuration file, do the following:
1 Connect to the console port using a computer with terminal emulation software.
See Section 2.2.2 on page 32 for details.
MS-7206 User’s Guide
45
Chapter 4 The Web Configurator
2 Disconnect and reconnect the system’s power to begin a session. When you
reconnect the power, you will see the initial sc reen.
3 When you see the message “Press any key to enter Debug Mode within 3
seconds ...” press any key to enter debug mode.
4 Type atlc after the “Enter Debug Mode” message.
5 Wait for the “Starting XMODEM upload” message before activating XMODEM
upload on your terminal.
6 After a configuration file upload, type atgo to restart the MM-7201.
Figure 10 Resetting the MM-7201: Via the Console Port
Bootbase Version: V0.8 | 03/14/2006
RAM:Size = 64 Mbytes
FLASH: Intel 32M
ZyNOS Version: V3.85(ABX.0)b8 | 06/21/2009
Press any key to enter debug mode within 3 seconds.
....................
Enter Debug Mode
MM-7201> atlc
Starting XMODEM upload (CRC mode)....
CCCCCCCCCCCCCCCC
Total 393216 bytes received.
Erasing..
................................................................
OK
MM-7201> atgo
The switch is now reinitialized with a default configuration file including the d efault
password of “1234”.
4.7 Logging Out of the Web Configurator
Click Logout in a screen to exit the web configurator. Y ou have to log in with your
password again after you log out. This is recommended after you finish a
management session for security reasons.
Figure 11 Web Configurator: Logout Screen
46
MS-7206 User’s Guide
4.8 Help
The web configurator’s online help has descriptions of individual screens and some
supplementary information.
Click the Help link from a web configurator screen to view an online help
description of that screen.
Chapter 4 The Web Configurator
MS-7206 User’s Guide
47
Chapter 4 The Web Configurator
48
MS-7206 User’s Guide
CHAPTER 5
Initial Setup Example
This chapter explains how to complete the following steps for an example
network.
• Configure an IP interface
• Configure DHCP server settings
• Create a VLAN
• Set port VLAN ID
•Enable RIP
5.1 Configuring an IP Interface
On a layer-3 switch, an IP interface (also known as an IP routing domain) is not
bound to a physical port. The default out-of-band IP address of the switch is
192.168.0.1 with a subnet mask of 255.255.255.0. The default in-band IP address
of the switch is 192.168.1.1 with a subnet mask of 255.255.255.0.
In the example network, since the RD (VLAN 1) network is already in the same IP
interface as the switch, you don’t need to create an IP interface for it. However, if
you want to have the Sales (VLAN 2) network on a different routing domain, you
need to create a new IP interface. This allows the switch to route traffic between
the RD and Sales networks.
Figure 12 Initial Setup Network Example: IP Interface
MS-7206 User’s Guide
49
Chapter 5 Initial Setup Example
1 Connect your computer to the out-of -band MGMT port that is used only for
management. Make sure your computer is in the same subnet as the MGMT port.
2 Open your web browser and enter http://192.168.0.1 (the default MGMT port IP
address) in the address bar to access the web configurator. See Section 4.2 on
page 39 for more information.
3 Click Basic Setting > IP Setup.
4 Configure the related fields in the
IP Setup screen. For the Sales
network,
Enter 192.168.2.1 in the IP Address field.
Enter 255.255.255.0 in the IP Subnet Mask field.
In the VID field, enter 2, the ID of the VLAN group to which you want this IP
interface to belong. This is the same as the VLAN ID you configure in the Static
VLAN screen later (Section 5.3 on page 51).
5 Click Add to save the setti ngs to the run-time memory. Settings in the run-time
memory are lost when the MM-7201’s power is turned off.
5.2 Configuring DHCP Server Settings
You can set the switch to assign network information (such as t he IP address, DNS
server, etc.) to DHCP clients on the network. For the example network, configure
two DHCP client pools on the switch for the DHCP clients in the RD and Sales
networks.
50
MS-7206 User’s Guide
1 Click IP Application > DHCP >
VLAN.
2 In the DHCP VLAN Setting
screen, specify the ID of the VLAN
to which the DHCP clients belong,
set the DHCP status to Server,
configure the starting IP address
pool, subnet mask, default
gateway address and the DNS
server address(es).
3 Click Add to save the setti ngs to
the run-time memory. Settings in
the run-time memory are lost
when the MM-7201’s power is
turned off.
Chapter 5 Initial Setup Example
5.3 Creating a VLAN
VLANs confine broadcast frames to the VLAN group in which the port(s) belongs.
You can do this with port-based VLAN or tagged static VLAN with fixed port
members. In this example, you want to configure port 1 in slot 3 as a member of
VLAN 2.
Figure 13 Initial Setup Network Example: VLAN
1 Click Advanced Application > VLAN > Static VLAN.
Slot 3, Port 1
MS-7206 User’s Guide
51
Chapter 5 Initial Setup Example
2 In the Static VLAN screen, select
ACTIVE, enter a descriptive name
in the Name field and enter 2 in
the VLAN Group ID field for the
VLAN2 network.
3 Select Slot 3 in the drop-down box
above the port list.
Note: The VLAN Group ID field in this screen and the VID field in the IP Setup
screen (Section 5.1 on page 49) refer to the same VLAN ID.
4 Since the VLAN2 network is connected to port 1 in slot 3, select Fixed to
configure port 1 to be a permanent member of the VLAN only.
5 To ensure that VLAN-unaware devices (such as computers and hubs) can receive
frames properly, clear the TX Tagging check box to set the switch to remove
VLAN tags before sending.
6 Click Add to save the setti ngs to the run-time memory. Settings in the run-time
memory are lost when the MM-7201’s power is turned off.
5.4 Setting Port VID
Use PVID to add a tag to incoming untagged frames received on that port so that
the frames are forwarded to the VLAN group that the tag defines. In the example
network, configure 2 as the port VID on port 1 in slot 3 so that any untagged
frames received on that port get sent to VLAN 2.
Figure 14 Initial Setup Network Example: Port VID
Slot 3, Port 1, PVID 2
52
MS-7206 User’s Guide
1 Click Advanced Application >
VLAN > VLAN Port Setting.
2 Select Slot 3 in the drop-down
box above the port list.
3 Enter 2 in the PVID field for port
1.
4 Click Apply to save your changes
back to the run-time memory.
Settings in the run-time memory
are lost when the MM-7201’s power is turned off.
5.5 Enabling RIP
To exchange routing information with other routing devices across different
routing domains, enable RIP (Routing Information Protocol) in the RIP screen.
Chapter 5 Initial Setup Example
1 Click IP Application and RIP in the navigation panel.
2 Select Both in the Direction
field to set the switch to
broadcast and receive routing
information.
3 In the Version field, select
RIP-1 for the RIP packet
format that is universa lly
supported.
4 Click Apply to save your changes back to the run-time memory. Settings in the
run-time memory are lost when the MM-7201’s power is turned off.
MS-7206 User’s Guide
53
Chapter 5 Initial Setup Example
54
MS-7206 User’s Guide
CHAPTER 6
System Status and Port
Statistics
This chapter describes the system status (web configurator home page), port
status, and port details screens.
6.1 Status
Use this screen to look at a summary of each slot and whatever card may be in
each slot. To view the summary, click Status in any web configurator screen.
Figure 15 Status
The following table describes the labels in this screen.
Table 5 Status
LABEL DESCRIPTION
Slot This identifies the slot. Click a slot number to look at the status of each
port in the slot.
Name This is the model name of the card in the slot. It is blank if there is no
card in the slot.
Status This field displays the status of the card in the slot. Possible values are:
active: The card is ready.
standby: The card is the backup management card.
MS-7206 User’s Guide
55
Chapter 6 System Status and Port Statistics
Table 5 Status (continued)
LABEL DESCRIPTION
Up Time This field shows the total amount of time in hours, minutes and seconds
the card has been up in the slot.
F/W Version This field displays the version number of the card's current firmware
including the date created.
6.1.1 Port Status
Use this screen to look at the status of each port in the selected slot. Y ou can also
clear the port counters for each port in the slot. To open this screen, click Status
in any web configurator screen, and then click the number of the slot.
Figure 16 Port Status
The following table describes the labels in this screen.
Table 6 Port Status
LABEL DESCRIPTION
Port This field displays the slot number and the port number. Click a port
number to look at detailed statistics for a specific port. See Section 6.1.2
on page 57.
Name This is the name assigned to this port. You can configure this in the Port
Setup screen. See Chapter 12 on page 79.
Link This field displays the speed (either 10M for 10 Mbps, 100M for 100 Mbps,
1000M for 1000 Mbps, or 10G for 10-Gigabit) and the duplex (F for full
duplex or H for half). It shows Down if there is no connection. You can
configure some of these settings in the Port Setup screen. See Chapter 12
on page 79.
State If STP (Spanning Tree Protocol) is enabled, this field displays the STP state
of the port. If STP is disabled, this field displays FORWARDING if the link
is up, otherwise, it displays STOP. See Chapter 16 on page 105 for more
information about STP.
PD This field displays the current amount of power consumed by devices
(powered devices, or PD) that use Po wer o v er E thern et (PoE) to get power
from the switch on this port.
56
MS-7206 User’s Guide
Chapter 6 System Status and Port Statistics
Table 6 Port Status (continued)
LABEL DESCRIPTION
LACP This fields displays whether LACP (Link Aggregation Control Protocol) is
Enabled or Disabled on the port. See Chapter 20 on page 135 for more
information about LACP.
TxPkts This field shows the number of frames transmitted on this port.
RxPkts This field shows the number of frames received on this port.
Errors This field shows the number of errors received on this port.
Tx KB/s This field shows the number of kilobytes per second transmitted on this
port.
Rx KB/s This field shows the number of kilobytes per second received on this port.
Up Time This field shows the total amount of time in hours, minutes and seconds
the port has been up.
Any Select this, and click Clear Counter to reset all the port counters for this
slot.
Port Select this, enter a specific port number, and click Clear Counter to reset
the port counters for the specified port.
Clear
Counter
Click this to clear the port counters for the specified port(s).
6.1.2 Port Details
Use this screen to look at detailed statistics for a specific port. You can clear the
statistics that are based on counters in the Port Status screen. See Section 6.1.1
MS-7206 User’s Guide
57
Chapter 6 System Status and Port Statistics
on page 56. T o open this screen, click Status in any web configurator screen, then
click the number of the slot, and finally click the number of the port.
Figure 17 Port Details
58
The following table describes the labels in this screen.
Table 7 Port Details
LABEL DESCRIPTION
Port Info
Port NO This field displays the slot number and the port number.
MS-7206 User’s Guide
Chapter 6 System Status and Port Statistics
Table 7 Port Details (continued)
LABEL DESCRIPTION
Name This is the name assigned to this port. You can configure this in the Port
Setup screen. See Chapter 12 on page 79.
Link This field displays the speed (either 10M for 10 Mbps, 100M for 100 Mbps,
1000M for 1000 Mbps, or 10G for 10-Gigabit) and the duplex (F for full
duplex or H for half). It shows Down if there is no connection. You can
configure some of these settings in the Port Setup screen. See Chapter 12
on page 79.
Status If STP (Spanning Tree Protocol) is enabled, this field displays the STP state
of the port. If STP is disabled, this field displays FORWARDING if the link
is up, otherwise, it displays STOP. See Chapter 16 on page 105 for more
information about STP.
PD
PowerConsu
mption
PD
MaxCurrent
PD
MaxPower
LACP This fields displays whether LACP (Link Aggregation Control Protocol) is
TxPkts This field shows the number of frames transmitted on this port.
RxPkts This field shows the number of frames received on this port.
Errors This field shows the number of errors received on this port.
Tx KBs/s This field shows the number of kilobytes per second transmitted on this
Rx KBs/s This field shows the number of kilobytes per second received on this port.
Up Time This field shows the total amount of time in hours, minutes and seconds
TX Packet
TX Packets This field shows the number of frames transmitted on this port.
Multicast This field shows the number of multicast frames transmitted on this port.
Broadcast This field shows the number of broadcast frames transmitted on this port.
Pause This field shows the number of pause frames transmitted on this port.
RX Packet
RX Packets This field shows the number of frames received on this port.
Multicast This field shows the number of multicast frames received on this port.
Broadcast This field shows the number of broadcast frames received on this port.
Pause This field shows the number of pause frames received on this port.
Control This field shows the number of control frames received on this port.
TX Collision
This field displays the current amount of power consumed by devices
(powered devices, or PD) that use Po wer o v er E thern et (PoE) to get power
from the switch on this port.
This field displays the maximum a mount of current drawn by devices
(powered devices, or PD) that use Po wer o v er E thern et (PoE) to get power
from the switch on this port.
This field displays the maximum amount of power consumed by devices
(powered devices, or PD) that use Po wer o v er E thern et (PoE) to get power
from the switch on this port.
Enabled or Disabled on the port. See Chapter 20 on page 135 for more
information about LACP.
port.
the port has been up.
MS-7206 User’s Guide
59
Chapter 6 System Status and Port Statistics
Table 7 Port Details (continued)
LABEL DESCRIPTION
Single This field shows the number of times one collision occurred before a frame
could be transmitted successfully on this port.
Multiple This field shows the number of times 2-15 collisions occurred before a
frame could be transmitted successfully on this port.
Excessive This field shows the number of times 16 collisions occurred while the switch
tried to transmit a frame on this port. In th is case, the switch gav e up , and
the frame was not transmitted.
Late This field shows the number of times a collision occurred after the switch
had already transmitted the 512th bit of the frame.
Error Packet
RX CRC This field displays the number of frames received on this port that had a
Cyclic Redundancy Check (CRC) error.
Length This field displays the number of fram es received on this port that were too
long.
Runt This field displays the number of frames received on this port that were too
short.
Distribution
64 This field shows the number of frames received and transmitted (including
bad frames) that were 64 octets in length (this includes FCS octets but
excludes framing bits).
65 to 127 This field shows the number of frames received and transmitted (including
bad frames) that were 65 to 127 octets in length (this includes FCS octets
but excludes framing bits).
128 to 255 This field shows the number of frames received and transmitted (including
bad frames) that were 128 to 255 octets in length (this includes FCS octets
but excludes framing bits).
256 to 511 This field shows the number of frames received and transmitted (including
bad frames) that were 256 to 511 octets in length (this includes FCS octets
but excludes framing bits).
512 to 1023 This field shows the number of frames received and transmitted (including
bad frames) that were 512 to 1023 octets in length (this includes FCS
octets but excludes framing bits).
1024 to
1518
Giant This field shows the number of frames received and transmitted (including
This field shows the number of frames received and transmitted (including
bad frames) that were 1024 to 1518 octets in length (this includes FCS
octets but excludes framing bits).
bad frames) that were 1519 or more octets in length (this includes FCS
octets but excludes framing bits).
60
MS-7206 User’s Guide
CHAPTER 7
System Info
7.1 System Info
Use this screen to look at basic information about the MM-7201 and to monitor the
system hardware, including temperature, fan speed, voltage, and power. To open
this screen, click Basic Setting > System Info.
Figure 18 System Info
MS-7206 User’s Guide
61
Chapter 7 System Info
The following table describes the labels in this screen.
Table 8 System Info
LABEL DESCRIPTION
System
Name
ZyNOS F/W
Version
Ethernet
Address
Hardware
Status
Slot This field displays the slots that have a card installed in them. Click a slot
Name This field displays the type of card in the slot.
Voltage This field displays the voltage status in the card.
This field displays the descriptive name of the MM-7201 for identification
purposes. Click Basic Setting > General Setup to change this. See
Chapter 8 on page 65.
This field displays the version number of the MM-7201's current firmware
including the date created. Click Management > Maintenance >
Firmware Upgrade to change this. See Chapter 39 on page 293.
This field displays the Ethernet MAC (Media Access Control) address of the
MS-7206 system. The MS-7206 system copies the MAC address from the
active management card when the MS-7206 system starts up. The MS7206 system keeps using this MAC address, even if the standby
management card takes over, until the system starts up again.
number to look at more detail about the card’s hardware. See Section
7.1.1 on page 63.
Normal: The voltage is within allowable range.
Error: The voltage is outside the allowable range at one or more sensors.
Temperature This field displays the temperature status in the card.
Normal: The temperature is below the threshold.
Error: The temperature is above the threshold at one or more sensors.
PoE Status
Total Power
(W)
Consuming
Power (W)
Remaining
Power (W)
Power
Source
Status
Power1
Power2
FAN Status
This field displays the total amount of power available from a Power over
Ethernet (PoE) injector.
This field displays the amount of power from a PoE injector the system is
using.
This field displays the amount of power from a PoE injector the system is
not using.
This field displays the status of each power module in the system.
Present: There is a power module in this slot, and it is working properly.
Absent: There is no power module in this slot, or the power module is not
working properly.
62
MS-7206 User’s Guide
Chapter 7 System Info
Table 8 System Info (continued)
LABEL DESCRIPTION
Fan Speed
(RPM)
Current This field displays this fan's current speed in Revolutions Per Minute (RPM).
MAX This field displays this fan's maximum speed measured in Revolutions Per
MIN This field displays this fan's minimum speed measured in Revolutions Per
Threshold This field displays the minimum speed at which a normal fan should work.
Status This field displays the overall status of the fan.
A properly functioning fan is an essential component (along with a
sufficiently ventilated, cool operating environment) in order for the system
to stay within the temperature threshold. Each fan has a sensor that is
capable of detecting and reporting if the fan speed falls below the
threshold shown.
Minute (RPM).
Minute (RPM).
Normal: This fan is functioning above the minimum speed.
Error: This fan is functioning below the minimum speed.
7.1.1 Hardware Monitor
Use this screen to look at more detail about a card’s hardware. To open this
screen, click Basic Setting > System Info, and then click the slot number in
which the card is installed .
Figure 19 Hardware Monitor
The following table describes the labels in this screen.
Table 9 Hardware Monitor
LABEL DESCRIPTION
System Info Click this to return to the System Info screen. See Figure 18 on page 61.
Slot This field displays the slot number in which the card is located.
Temperature
Unit
MS-7206 User’s Guide
The card has temperature sensors that are capable of detecting and
reporting if the temperature rises above the threshold. You may choose
the temperature unit (Centigrade or Fahrenheit) in this field.
63
Chapter 7 System Info
Table 9 Hardware Monitor (continued)
LABEL DESCRIPTION
T emperatur e The number is the slot number in which the card is located. MAC, PHY and
Current This shows the current temperature in degrees at this sensor.
MAX This field displays the maximum temperature measured at this sensor.
MIN This field displays the minimum temperature measured at this sensor.
Threshold This field displays the upper temperature limit at this sensor.
Status This field displays the status of each sensor.
Voltage(V) The number is the slot number in which the card is located. The power
Current This is the current voltage reading.
MAX This field displays the maximum voltage measured at this point.
MIN This field displays the minimum voltage measured at this point.
Threshold This field displays the percentage tolerance of the voltage with which the
Status This field displays the status of each sensor.
BOARD refer to the location of the temperature sensors on the card’s
printed circuit board.
Normal: The temperature is below the threshold.
Error: The temperature is above the threshold.
supply for each voltage has a sensor that is capable of detecting and
reporting if the voltage falls out of the tolerance range.
card still works.
Normal: The voltage is within allowable range.
Error: The voltage is outside the allowable range at one or more sensors.
64
MS-7206 User’s Guide
CHAPTER 8
General Setup
8.1 General Setup
Use this screen to configure the system name, login precedence, time, and other
general settings for the system. To open this screen, click Basic Setting >
General Setup.
Figure 20 General Setup
The following table describes the labels in this screen.
Table 10 General Setup
LABEL DESCRIPTION
System Name Choose a descriptive name for identification purposes. This name
Location Enter the geographic location of your switch. You can use up to 32
MS-7206 User’s Guide
consists of up to 64 printable characters; spaces are allowed.
printable English keyboard characters; spaces are allowed.
65
Chapter 8 General Setup
Table 10 General Setup (continued)
LABEL DESCRIPTION
Contact
Person's Name
Use Time
Server when
Bootup
Enter the name of the person in charge of this switch. You can use up to
32 printable English keyboard characters; spaces are allowed.
Enter the time service protocol that your timeserver uses. Not all time
servers support all protocols, so you may have to use trial and error to
find a protocol that works. The main differences between them are the
time format.
The MM-7201 requests time and date settings from the time server in
the following circumstances:
• When the MM-7201 starts up.
• In 24-hour intervals after starting.
• When you click Apply in this screen.
When you select the Daytime (RFC 867) format, the switch displays
the day, month, year and time with no time zone adjustment. When you
use this format it is recommended that you use a Daytime timeserver
within your geographical time zone.
Time (RFC-868) format displays a 4-byte integer giving the total
number of seconds since 1970/1/1 at 0:0:0.
NTP (RFC-1305) is similar to Time (RFC-868).
None is the default value. Enter the time manually. When you enter the
time settings manually, the MM-7201 uses the new setting when you
click Apply. Each time you turn on the switch, the time and date will be
reset to 1970-1-1 0:0.
Time Server IP
Address
Current Time This field displays the time you open this menu (or refresh the menu).
New Time
(hh:mm:ss)
Current Date This field displays the date you open this menu.
New Date
(yyyy-mm-dd)
Time Zone Select the time difference between UTC (Universal Time Coordinated,
Daylight
Saving Time
Enter the IP address of your timeserver. The switch searches for the
timeserver for up to 60 seconds. If you select a timeserver that is
unreachable, then this screen will appear locked for 60 seconds. Please
wait.
Enter the new time in hour, minute and second format. The new time
then appears in the Current Time field after you click Apply.
Enter the new date in year, month and day format. The new date then
appears in the Current Date field after you click Apply.
formerly known as GMT, Greenwich Mean Time) and your time zone
from the drop-down list box.
Daylight saving is a period from late spring to early fall when many
countries set their clocks ahead of normal local time by one hour to give
more daytime light in the evening.
Select this option if you use Daylight Saving Time.
66
MS-7206 User’s Guide
Chapter 8 General Setup
Table 10 General Setup (continued)
LABEL DESCRIPTION
Start Date Configure the day and time when Daylight Saving Time starts if you
selected Daylight Saving Time. The time is displayed in the 24 hour
format. Here are a coupl e o f ex am ples:
Daylight Saving Time starts in most parts of the United States on the
second Sunday of March. Each time zone in the United States starts
using Daylight Saving Time at 2 A.M. local time. So in the United States
you would select Second, Sunday, March and 2:00.
Daylight Saving Time starts in the European Union on the last Sunday of
March. All of the time zones in the European Union start using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, March and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
End Date Configure the day and time when Daylight Saving Time ends if you
selected Daylight Saving Time. The time field uses the 24 hour
format. Here are a coupl e o f ex am ples:
Daylight Saving Time ends in the United States on the first Sunday of
November. Each time zone in the United States stops using Daylight
Saving Time at 2 A.M. local time. So in the United States you would
select First, Sunday, November and 2:00.
Daylight Saving Time ends in the European Union on the last Sunday of
October. All of the time zones in the European Union stop using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, October and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
Apply Click Apply to save your changes to the switch’s run-time memory. The
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Cancel Click Cancel to reset the fields.
MS-7206 User’s Guide
67
Chapter 8 General Setup
68
MS-7206 User’s Guide
CHAPTER 9
Switch Setup
9.1 Switch Setup
Use this screen to configure MAC address learning, declaration timeout values for
GARP, and priority queues. You can also control whether or not the switch handles
bridge control protocols, such as STP. To open this screen, click Basic Setting >
Switch Setup.
Figure 21 Switch Setup
The following table describes the labels in this screen.
Table 11 Switch Setup
LABEL DESCRIPTION
Bridge Control
Protocol
Transparency
MAC Address
Learning
MS-7206 User’s Guide
Select Active to allow the switch to handle bridging control protocols
(STP for example). You also need to define how to treat a BPDU in the
Port Setup screen.
MAC address learning reduces outgoing traffic broadcasts. For MAC
address learning to occur on a port, the port must be active.
69
Chapter 9 Switch Setup
Table 11 Switch Setup (continued)
LABEL DESCRIPTION
Aging Time Enter a time from 10 to 3000 seconds. This is how long all dynamically
GARP Timer: Switches join VLANs by making a declaration. A declaration is made by
Join Timer Join Timer sets the duration of the Join Period timer for GVRP in
Leave Timer Leave Time sets the duration of the Leave Period timer for GVRP in
Leave All
Timer
Priority Queue
Assignment
learned MAC addresses remain in the MAC address table before they age
out (and must be relearned).
issuing a Join message using GARP. Declarations are withdrawn by
issuing a Leave message. A Leave All message terminates all
registrations. GARP timers set declaration timeout values. See Chapter
13 on page 85 for more information.
milliseconds. Each port has a Join Period timer. The allowed Join Time
range is between 100 and 65535 milliseconds; the default is 200
milliseconds. See the chapter on VLAN setup for more background
information.
milliseconds. Each port has a single Leave Period timer. Leave Time
must be two times larger than Join Timer; the default is 600
milliseconds.
Leave All Timer sets the duration of the Leave All P eriod timer for GVRP in
milliseconds. Each port has a single Leave All Period timer. Leave All
Timer must be larger than Leave Timer.
Use this section to configure the priority level-to-physical queue
mapping.
IEEE 802.1p defines up to eight separate traffic types by inserting a tag
into a MAC-layer frame that contains bits to define class of service.
Frames without an explicit priority tag are given the default priority of the
ingress port. See Chapter 12 on page 79 to configure the default priority.
The switch has eight physical queues that you can map to the 8 priority
levels. On the switch, traffic assigned to higher index queues gets
through faster while traffic in lower index queues is dropped if the
network is congested.
Priority Level The following descriptions are based on the traffic types defined in the
IEEE 802.1d standard (which incorporates the 802.1p).
level7 Typically used for network control traffic such as router configuration
messages.
level6 Typically used for v oice traffic that is especially sensitive to jitter (jitter is
the variations in delay).
level5 Typically used for video that consumes high bandwidth and is sensitiv e to
jitter.
level4 Typically used for controlled load, latency-sensitive traffic such as SNA
(Systems Network Architecture) transactions.
level3 Typically used for “excellent effort” or better than best effort and would
include important business traffic that can tolerate some delay.
level2 This is for “spare bandwidth”.
level1 This is typically used for non-critical “background” traffic such as bulk
transfers that are allowed but that should not affect other applications
and users.
level0 Typically used for best-effort traffic.
70
MS-7206 User’s Guide
Chapter 9 Switch Setup
Table 11 Switch Setup (continued)
LABEL DESCRIPTION
Apply Click Apply to save your changes to the switch’s run-time memory. The
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the non-
volatile memory when you are done configuring.
Cancel Click Cancel to reset the fields.
MS-7206 User’s Guide
71
Chapter 9 Switch Setup
72
MS-7206 User’s Guide
CHAPTER 10
IP Setup
This chapter introduces IP interfaces and then describes the IP Setup screen.
10.1 IP Interfaces
The switch needs an IP address for it to be managed over the network. The factory
default IP address is 192.168.0.1. The subnet mask specifies the network number
portion of an IP address. The factory default subnet mask is 255.255.255.0.
On the switch, as a layer-3 device, an IP address is not bound to any physical
ports. Since each IP address on the switch must be in a separate subnet, the
configured IP address is also known as IP interface (or routing domain). In
addition, this allows routing between subnets based on the IP address without
additional routers.
You can configure multiple routing domains on the same VLAN as long as the IP
address ranges for the domains do not overlap. To change the IP address of the
switch in a routing domain, simply add a new routing domain entry with a
different IP address in the same subnet.
MS-7206 User’s Guide
73
Chapter 10 IP Setup
10.2 IP Setup
Use this screen to configure the default gateway, DNS server, management IP
address, and IP domains. To open this screen, click Basic Setting > IP Setup.
Figure 22 IP Setup
74
The following table describes the labels in this screen.
Table 12 IP Setup
LABEL DESCRIPTION
Default
Gateway
Domain
Name Server
Enter the IP address of the default outgoing gateway in dotted decimal
notation, for example 192.168.0.254.
DNS (Domain Name System) is for mapping a domain name to its
corresponding IP address and vice versa. Enter a domain name server IP
address in order to be able to use a domain name instead of an IP address.
MS-7206 User’s Guide
Chapter 10 IP Setup
Table 12 IP Setup (continued)
LABEL DESCRIPTION
Default
Management
Management
IP Address
IP
Address
IP Subnet
Mask
Default
Gateway
Apply Click Apply to save your changes to the switch’s run-time memory. The
Cancel Click Cancel to reset the fields to your previous configuration.
IP Interface Use these fields to create or edit IP routing domains on the switch.
IP
Address
IP Subnet
Mask
VID Enter the VLAN identification number to which an IP routing domain
Add Click Add to save your changes to the switch’s run-time memory. The
Cancel Click Cancel to reset the fields to your previous configuration.
Index This field displays the index number of an entry.
IP Address This field displays IP address of the switch in the IP domain.
Subnet Mask This field displays the subnet mask of the switch in the IP domain.
VID This field displays the VLAN identification number of the IP domain on the
Delete Click Delete to remove the selected entry from the summary table.
Specify which traffic flow (In-Band or Out-of-band) the switch is to send
packets originating from itself (such as SNMP traps) or packets with
unknown source.
Select Out-of-band to have the switch send the packets to the
management port labelled MGMT. This means that device(s) connected to
the other port(s) do not receive these packets.
Select In-Band to have the switch send the pack ets to all ports except the
management port (labelled MGMT) to which connected device(s) do not
receive these packets.
Use these fields to set the settings for the out-of-band management port.
Enter the out-of-band management IP address of your switch in dotted
decimal notation. For example, 192.168.0.1.
Enter the IP subnet mask of your switch in dotted decimal notation for
example 255.255.255.0.
Enter the IP address of the default outgoing gateway in dotted decimal
notation, for example 192.168.0.254
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Enter the IP address of your switch in dotted decimal notation for example
192.168.1.1. This is the IP address of the switch in an IP routing domain.
Enter the IP subnet mask of an IP routing domain in dotted decimal
notation. For example, 255.255.255.0.
belongs.
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
switch.
Cancel Click Cancel to clear the Delete check boxes.
MS-7206 User’s Guide
Note: Deleting all IP subnets locks you out from the switch.
75
Chapter 10 IP Setup
76
MS-7206 User’s Guide
CHAPTER 11
Slot Setup
11.1 Slot Setup
Use this screen to control the power to the each slot or to change what type of
card is in the slot without restarting the system. To open this screen, click Basic
Setting > Slot Setup.
Figure 23 Slot Setup
MS-7206 User’s Guide
77
Chapter 11 Slot Setup
The following table describes the labels in this screen.
Table 13 Slot Setup
LABEL DESCRIPTION
Shutdown Use this section to control the power to each slot.
Slot This field displays the number of each slot in the system.
Shutdown Select this to turn off the power to the slot. Clear this to turn on the power
Apply Click Apply to save your changes to the switch’s run-time memory. The
Cancel Click Cancel to reset the fields.
Install Use this section to change what type of card is in the slot without
Slot Select the slot number into which you have installed a new card.
Card Type Select the type of card you have installed in the slot. If you select the
Add Click Add to save your changes to the switch’s run-time memory. The
Cancel Click Cancel to reset the fields to your previous configuration.
Slot This field displays the number of each slot into which you have installed a
Card Type This field displays the type of card you have installed in the slot.
Uninstall Select this and click Apply to uninstall the card in the slot.
Apply Click Apply to save your changes to the switch’s run-time memory. The
Cancel Click Cancel to reset the fields.
to the slot.
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
restarting the system. Follow this procedure.
• In this section, uninstall the old type of card.
• Remove the old card from the slot, if necessary.
• Insert the new card into the slot, if necessary.
• In this section, install the new type of card.
wrong type of card, the MM-7201 automatically stops the interface card,
and the slot is out of service.
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
card. The system automatically installs any cards that are in the system
when the system boots up.
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
78
MS-7206 User’s Guide
CHAPTER 12
Port Setup
12.1 Port Setup
Use this screen to configure basic port settings, such as speed, duplex, and flow
control. You can also configure the default 802.1p priority and the way bridge
protocol data units (BPDU) are handled. To open this screen, click Basic Setting
> Port Setup.
Figure 24 Port Setup
The following table describes the labels in this screen.
Table 14 Port Setup
LABEL DESCRIPTION
Slot Select the slot at whose settings you want to look.
Port This field displays the slot number and port number.
* Settings in this row apply to all ports.
Active Select this check box to enable a port. The factory default for all ports is
MS-7206 User’s Guide
Use this row only if you want to make some settings the same fo r all ports.
Use this row first to set the common settings and then make adjustments
on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
make them.
enabled. A port must be enabled for data transmission to occur.
79
Chapter 12 Port Setup
Table 14 Port Setup (continued)
LABEL DESCRIPTION
Name Enter a descriptive name that identifies this port. You can enter up to 64
T ype This field displays 1000M or 10/100/1000M for Gigabit connections and
Speed/
Duplex
Flow Control A concentration of traffic on a port decreases port bandwidth and
alpha-numerical characters.
Note: Due to space limitation, the port name may be truncated in
some web configurator screens.
10G for 10-Gigabit connections.
Select the speed and the duplex mode of the Ethernet connection on this
port. Choices are Auto, 10M/Half Duplex, 10M/Full Duplex, 100M/
Half Duplex, 100M/Full Duplex, 1000M/Full Duplex, and 10G/Full
Duplex.
Selecting Auto (auto-negotiation) allows one port to negotiate with a peer
port automatically to obtain the connection speed and duplex mode that
both ends support. When auto-negotiation is turned on, a port on the
switch negotiates with the peer automatically to determine the connection
speed and duplex mode. If the peer port does not support auto-negotiation
or turns off this feature, the switch determines the connection speed by
detecting the signal on the cable and using half duplex mode. When the
switch’s auto-negotiation is turned off, a port uses the pre-configured
speed and duplex mode when making a connection, thus requiring you to
make sure that the settings of the peer port are the same in order to
connect.
overflows buffer memory causing packet discards and frame losses. Flow
Control is used to regulate transmission of signals to match the bandwidth
of the receiving port.
802.1p
Priority
BPDU
Control
The switch uses IEEE802.3x flow control in full duplex mode and
backpressure flow control in half duplex mode.
IEEE802.3x flow control is used in full duplex mode to send a pause signal
to the sending port, causing it to temporarily stop sending signals when
the receiving port memory buffers fill.
Back Pressure flow control is typically used in half duplex mode to send a
"collision" signal to the sending port (mimicking a state of packet collision)
causing the sending port to temporarily stop sending signals and resend
later. Select Flow Control to enable it.
This priority value is added to incoming frames without a (802.1p) priority
tag.
Configure the way to treat BPDUs received on this port. You must activate
bridging control protocol transparency in the Switch Setup screen first.
Select Peer to process any BPDU (Bridge Protocol Data Units) received on
this port.
Select Tunnel to forward BPDUs received on this port.
Select Discard to drop any BPDU received on this port.
Select Network to process a BPDU with no VLAN tag and forward a tagged
BPDU.
80
MS-7206 User’s Guide
Chapter 12 Port Setup
Table 14 Port Setup (continued)
LABEL DESCRIPTION
PD This field only applies to Power over Ethernet (PoE) modules. Select this to
provide power to connected powered devices (PD) that use PoE to get
power from the switch on this port.
Apply Click Apply to save your changes to the switch’s run-time memory. The
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Cancel Click Cancel to reset the fields.
MS-7206 User’s Guide
81
Chapter 12 Port Setup
82
MS-7206 User’s Guide
PART IV
Advanced
VLAN (85)
Static MAC Forward Setup (101)
Filtering (103)
Spanning Tree Protocol (105)
Bandwidth Control (127)
Broadcast Storm Control (131)
Mirroring (133)
Link Aggregation (135)
Port Authentication (143)
Port Security (149)
Classifier (155)
Policy Rule (161)
Queuing Method (169)
VLAN Stacking (173)
Multicast (179)
AAA (195)
IP Source Guard (207)
Loop Guard (233)
83
84
CHAPTER 13
VLAN
This chapter introduces VLANs and then describes the screens you use to
configure VLAN settings.
13.1 Introduction to VLANs
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Devices on a logical network belong to one group. A
device can belong to more than one group. With VLAN, a device cannot directly
talk to or hear from devices that are not in the same group(s); the traffic must
first go through a router.
In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents one
subscriber from accessing the netw ork resources of another on the same LAN,
thus a user will not see the printers and hard disks of another user in the same
building.
VLAN also increases network performance by limiting broadcasts to a smaller and
more manageable logical broadcast domain. In traditional switched environments,
all broadcast packets go to each and every individual port. Wit h VLAN, all
broadcasts are confined to a specific broadcast domain.
Note: VLAN is unidirectional; it only governs outgoing traffic.
13.2 Introduction to IEEE 802.1Q T agged VLANs
A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the switch
on which they were created. The VLANs can be created statically by hand or
dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN
and provides the information that switches need to process the frame across the
network. A tagged frame is four bytes longer than an untagged frame and
contains two bytes of TPID (Tag Protocol Identifier , residing within the type/length
MS-7206 User’s Guide
85
Chapter 13 VLAN
field of the Ethernet frame) and two bytes of TCI (Tag Control Information, starts
after the source address field of the Ethernet frame).
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for
Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then
that frame should not be forwarded as it is to an untagged port. The remaining
twelve bits define the VLAN ID, giving a possible maximum number of 4,096
VLANs. Note that user priority and VLAN ID are independent of each other. A
frame with VID (VLAN Identifier) of null (0) is called a pr iority frame, meaning that
only the priority level is significant and the default VID of the ingress port is given
as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify
priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN
configurations are 4,094.
TPID
2 Bytes
User Priority
3 Bits
CFI
1 Bit
VLAN ID
12 bits
13.2.1 Forwarding Tagged and Untagged Frames
Each port on the switch is capable of passing tagged or untagged frames. To
forward a frame from an 802.1Q VLAN-a ware switch to an 802.1Q VLAN-unaware
switch, the switch first decides where to forward the frame and then strips off the
VLAN tag. To forward a frame from an 802.1Q VLAN-unaware switch to an 802.1Q
VLAN-aware switch, the switch first decides where to forw ard the fr ame, and then
inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is
VLAN 1 for all ports, but this can be changed.
A broadcast frame (or a multicast frame for a multicast group that is known by the
system) is duplicated only on ports that are members of the VID (except the
ingress port itself), thus confining the broadcast to a specific domain.
13.3 Automatic VLAN Registration
GARP and GVRP are the protocols used to automatically register VLAN
membership across switches.
13.3.1 GARP
GARP (Generic Attribute Registration Protocol) allows network switches to register
and de-register attribute values with other GARP participants within a bridged
LAN. GARP is a protocol that provides a generic mechanism for protocols that
serve a more specific application, for example, GVRP.
86
MS-7206 User’s Guide
Switches join VLANs by making a declaration. A declaration is made by issuing a
Join message using GARP. Declarations are withdrawn by issuing a Leave
message. A Leave All message terminates all registrations. GARP timers set
declaration timeout values.
13.3.2 GVRP
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a
way for switches to register necessary VLAN members on ports across the
network. Enable this function to permit VLANs groups beyond the local switch.
Please refer to the following table for common IEEE 802.1Q VLAN terminology.
Table 15 IEEE 802.1Q VLAN Terminology
VLAN
PARAMETER
VLAN Type Permanent VLAN This is a static VLAN created manually.
VLAN
Administrative
Control
VLAN Tag Control Tagged Ports belonging to the specified VLAN tag all
VLAN Port Port VID This is the VLAN ID assigned to untagged frames
Chapter 13 VLAN
TERM DESCRIPTION
Dynamic VLAN This is a VLAN configured by a GVRP registration/
deregistration process.
Registration Fixed Fixed registration ports are permanent VLAN
members.
Registration
Forbidden
Normal
Registration
Untagged Ports belonging to the specified VLAN don't tag all
Acceptable Frame
Type
Ingress filtering If set, the switch discards incoming frames for
Ports with registration forbidden are forbidden to
join the specified VLAN.
Ports dynamically join a VLAN using GVRP.
outgoing frames transmitted.
outgoing frames transmitted.
that this port received.
You may choose to accept both tagged and
untagged incoming frames, just tagged incoming
frames or just untagged incoming frames on a
port.
VLANs that do not have this port as a member
13.4 Port VLAN Trunking
Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN
groups to pass through that port. This is useful if you w ant to set up VL AN groups
on end devices without having to configure the same VLAN groups on
intermediary devices.
MS-7206 User’s Guide
87
Chapter 13 VLAN
Refer to the following figure. Suppose you want to create VLAN groups 1 and 2
(V1 and V2) on devices A and B. Without VLAN Trunking, you must configure
VLAN groups 1 and 2 on all intermediary switches C, D and E; otherwise they will
drop frames with unknown VLAN group tags. However, with VLAN Trunking
enabled on a port(s) in each intermediary switch you only need to create VLAN
groups in the end devices (A and B). C, D and E automatically allow frames with
VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to
pass through their VLAN trunking port(s).
Figure 25 Port VLAN Trunking
13.5 Static VLAN
Use a static VLAN to decide whether an incoming frame on a port should be
• sent to a VLAN group as normal depending on its VLAN tag.
• sent to a group whether it has a VLAN tag or not.
• blocked from a VLAN group regardless of its VLAN tag.
You can also tag all outgoing frames (that were previously untagged) from a port
with the specified VID.
88
MS-7206 User’s Guide
13.6 VLAN Status
Use this screen to look at the current status of VLANs in the system. See Section
13.2 on page 85 for background information about VLAN. To open this screen,
click Advanced Application > VLAN.
Figure 26 VLAN Status
Chapter 13 VLAN
The following table describes the labels in this screen.
Table 16 VLAN Status
LABEL DESCRIPTION
The Number
of VLAN
Index This is the VLAN index number. Click on an index number to look at
VID This is the VLAN identification number that was configured in the Static
Elapsed Time This field shows how long it has been since a normal VLAN was registered
Status This field shows how this VLAN was added to the switch.
Change Pages Click Previous or Next to show the previous/next screen if all status
This is the number of VLANs configured on the switch.
detailed port settings for the VLAN.
VLAN screen.
or a static VLAN was set up.
Dynamic: The VLAN was added using GVRP.
Static: The VLAN was added as a permanent entry.
Other: The VLAN was added another way, such as Multicast VLAN
Registration (MVR).
information cannot be seen in one screen.
13.6.1 VLAN Detail
Use this screen to look at detailed port settings for a VLAN. See Section 13.2 on
page 85 for background information about VLAN. To open this screen, click
MS-7206 User’s Guide
89
Chapter 13 VLAN
Advanced Application > VLAN, and then click on the index number of the
VLAN.
Figure 27 VLAN Detail
The following table describes the labels in this screen.
Table 17 VLAN Detail
LABEL DESCRIPTION
VLAN Status Click this to go to the VLAN Status screen.
VID This is the VLAN identification number that was configured in the Static
VLAN screen.
Slot This is the number of each slot with a card in it.
Port Number This column displays the ports that may participate in a VLAN. A tagged
port is marked as T, an untagged port is marked as U and ports not
participating in a VLAN are marked as “–“.
Elapsed Time This field shows how long it has been since a normal VLAN was registered
or a static VLAN was set up.
Status This field shows how this VLAN was added to the switch.
Dynamic: The VLAN was added using GVRP.
Static: The VLAN was added as a permanent entry.
Other: The VLAN was added another way, such as Multicast VLAN
Registration (MVR).
90
MS-7206 User’s Guide
13.6.2 Static VLAN
Use this screen to look at and configure 802.1Q VLAN parameters for the switch.
See Section 13.2 on page 85 for background informatio n about VLAN. To open this
screen, click Advanced Application > VLAN > Static VLAN.
Figure 28 Static VLAN
Chapter 13 VLAN
The following table describes the related labels in this screen.
Table 18 Static VLAN
LABEL DESCRIPTION
ACTIVE Select this check box to activate the VLAN settings.
Name Enter a descriptive name for the VLAN group for identification purposes.
VLAN Group IDEnter the VLAN ID for this static entry; the valid range is between 1 and
Slot Select the slot at whose settings you want to look.
Port This field displays the slot number and port number.
MS-7206 User’s Guide
4094.
91
Chapter 13 VLAN
Table 18 Static VLAN (continued)
LABEL DESCRIPTION
* Settings in this row apply to all ports.
Control Select Normal for the port to dynamically join this VLAN group using
Tagging Select TX Tagging if you want the port to tag all outgoing frames
Add Click Add to save your changes to the switch’s run-time memory. The
Cancel Click Cancel to reset the fields.
Clear Click Clear to start configuring the screen again.
VID This field displays the ID number of the VLAN group. Click the number to
Active This field indicates whether the VLAN settings are enabled (Yes) or
Name This field displays the descriptive name for this VLAN group.
Delete Click Delete to remove the selected entry from the summary table.
Cancel Click Cancel to clear the Delete check boxes.
Use this row only if you want to make some settings the same for all
ports. Use this row first to set the common settings and then make
adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
make them.
GVRP. This is the default selection.
Select Fixed for the port to be a permanent member of this VLAN group.
Select Forbidden if you want to prohibit the port from joining this VLAN
group.
transmitted with this VLAN Group ID.
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
edit the VLAN settings.
disabled (No).
92
MS-7206 User’s Guide
13.6.3 VLAN Port Setting
Use this screen to configure the static VLAN (IEEE 802.1Q) settings on a port. See
Section 13.2 on page 85 for background information about VLAN. To open this
screen, click Advanced Application > VLAN > VLAN Port Setting.
Figure 29 VLAN Port Setting
Chapter 13 VLAN
The following table describes the labels in this screen.
Table 19 VLAN Port Setting
LABEL DESCRIPTION
GVRP GVRP (GARP VLAN Registration Protocol) is a registration protocol that
Slot Select the slot at whose settings you want to look.
Port This field displays the slot number and port number.
MS-7206 User’s Guide
defines a way for switches to register necessary VLAN members on
ports across the network.
Select this check box to permit VLAN groups beyond the local switch.
93
Chapter 13 VLAN
Table 19 VLAN Port Setting (continued)
LABEL DESCRIPTION
* Settings in this row apply to all ports.
Ingress Check If this check box is selected for a port, the MM-7201 discards incoming
PVID Enter a number between 1 and 4094 as the port VLAN ID.
GVRP Select this check box to allow GVRP on this port.
Acceptable
Frame Type
Use this row only if you want to make some settings the same for all
ports. Use this row first to set the common settings and then make
adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the port s as soon as yo u
make them.
frames for VLANs that do not include this port in its member set.
Clear this check box to disable ingress filtering.
Specify the type of frames allowed on a port. Choices are All, Tag O nly
and Untag Only.
Select All from the drop-down list box to accept all untagged or tagged
frames on this port. This is the default setting.
Select Tag Only to accept only tagged frames on this port. All untagged
frames will be dropped.
Select Untag Only to accept only untagged frames on this port. All
tagged frames will be dropped.
VLAN Trunking Enable VLAN Trunk ing on ports connected to other switches or routers
(but not ports directly connected to end users) to allow frames
belonging to unknown VLAN groups to pass through the switch.
Apply Click Apply to save your changes to the switch’s run-time memory. The
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Cancel Click Cancel to reset the fields.
13.7 Subnet Based VLANs
Subnet based VLANs allow you to group traffic into logical VLANs based on the
source IP subnet you specify. When a frame is received on a port, the switch
checks if a tag is added already and the IP subnet it came from. The untagged
packets from the same IP subnet are then pl aced in the same subnet based VLAN.
One advantage of using subnet based VLANs is that priority can be assigned to
traffic from the same IP subnet.
94
For example, an ISP (Internet Services Provider) may divide different types of
services it provides to customers into different IP subnets. Traffic for voice
services is designated for IP subnet 172.16.1.0/24, video for 192.168.1.0/24 and
MS-7206 User’s Guide
Chapter 13 VLAN
data for 10.1.1.0/24. The switch can then be configured to group incoming traffic
based on the source IP subnet of incoming frames.
You configure a subnet based VLAN with priority 6 and VID of 100 for traffic
received from IP subnet 172.16.1.0/24 (voice services). You also have a subnet
based VLAN with priority 5 and VID of 200 for traffic received from IP subnet
192.168.1.0/24 (video services). Lastly, you configure VLAN with priority 3 and
VID of 300 for traffic received from IP subnet 10.1.1.0/24 (data services). All
untagged incoming frames will be classified based on their source IP subnet and
prioritized accordingly. That is video services receive the highest priority and data
the lowest.
Figure 30 Subnet Based VLAN Application Example
Tagged Frames
Untagged
Frames
172.16.1.0/24
VID = 100
192.168.1.0/24
VID = 200
10.1.1.0/24
VID = 300
13.8 Configuring Subnet Based VLAN
Click Subnet Based VLAN in the VLAN Port Setting screen to display the
configuration screen as shown.
MS-7206 User’s Guide
95
Chapter 13 VLAN
Note: Subnet based VLAN applies to un-tagged packets and is applicable only when
Figure 31 Subnet Based VLAN
you use IEEE 802.1Q tagged VLAN.
The following table describes the labels in this screen.
Table 20 Subnet Based VLAN Setup
LABEL DESCRIPTION
Active Check this box to activate this subnet based VLANs on the switch.
DHCP-Vlan
Override
Apply Click Apply to save your changes to the switch’s run-time memory. The
Active Check this box to activate the IP subnet VLAN you are creating or editing.
Name Enter up to 32 alpha numeric characters to identify this subnet based
IP Enter the IP address of the subnet for which you want to configure this
When DHCP snooping is enabled, DHCP clients can renew their IP address
through the DHCP VLAN or via another DHCP server on the subnet based
VLAN.
Select this to force the DHCP clients in this IP subnet to obtain their IP
addresses through the DHCP VLAN.
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
VLAN.
subnet based VLAN.
96
MS-7206 User’s Guide
Chapter 13 VLAN
Table 20 Subnet Based VLAN Setup (continued)
LABEL DESCRIPTION
Mask-Bits Enter the bit number of the subnet mask. To find the bit number, convert
the subnet mask to binary format and add all the 1’s together. Take
“255.255.255.0” for example. 255 converts to eight 1s in binary. There are
three 255s, so add three eights together and you get the bit number (24).
VID Enter the ID of a VLAN with which the untagged frames from the IP subnet
specified in this subnet based VLAN are tagged. This must be an existing
VLAN which you defined in the Advanced Applications > VLAN screens.
Priority Select the priority level that the switch assigns to frames belonging to this
VLAN.
Add Click Add to save your changes to the switch’s run-time memory. The
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the non-
volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Index This is the index number identifying this subnet based VLAN. Click on any
of these numbers to edit an existing subnet based VLAN.
Active This field shows whether the subnet based VLAN is active or not.
Name This field shows the name the subnet based VLAN.
IP This field shows the IP address of the subnet for this subnet based VLAN.
Mask-Bits This field shows the subnet mask in bit number format for this subnet
based VLAN.
VID This field shows the VLAN ID of the frames which belong to this subnet
based VLAN.
Priority This field shows the priority which is assigned to frames belonging to this
subnet based VLAN.
Delete Click this to delete the subnet based VLANs which you marked for deletion.
Cancel Click Cancel to begin configuring this screen afresh.
13.9 Protocol Based VLANs
Protocol based VLANs allow you to group traffic into logical VLANs based on the
protocol you specify. When an upstream frame is received on a port (configured
for a protocol based VLAN), the switch checks if a tag is added already and its
protocol. The untagged packets of the same protocol are then placed in the same
protocol based VLAN. One advantage of using protocol based VLANs is that priorit y
can be assigned to traffic of the same protocol.
For example, port 1, 2, 3 and 4 belong to static VLAN 100, and port 4, 5, 6, 7
belong to static VLAN 120. You configure a protocol based VLAN A with priority 3
for ARP traffic received on port 1, 2 and 3. You also have a protocol based VLAN B
with priority 2 for Apple Talk traffic received on port 6 and 7. All upstream ARP
traffic from port 1, 2 and 3 will be grouped together, and all upstream Apple Talk
MS-7206 User’s Guide
97
Chapter 13 VLAN
traffic from port 6 and 7 will be in another group and have higher priority than ARP
traffic, when they go through the uplink port to a backbone switch C.
Figure 32 Protocol Based VLAN Application Example
C
A
B
13.10 Configuring Protocol Based VLAN
Click Protocol Based VLAN in the VLAN Port Setting screen to display the
configuration screen as shown.
Note: Protocol-based VLAN applies to un-tagged pa ckets and is applicable only when
you use IEEE 802.1Q tagged VLAN.
Figure 33 Protocol Based VLAN
98
MS-7206 User’s Guide
Chapter 13 VLAN
The following table describes the labels in this screen.
Table 21 Protocol Based VLAN
LABEL DESCRIPTION
Active Check this box to activate this protocol based VLAN.
Port Select the slot and enter the number of the port to be included in this
protocol based VLAN.
This port must belong to a static VLAN in order to participate in a protocol
based VLAN. See Chapter 13 on page 85 for more details on setting up
VLANs.
Name Enter up to 32 alpha numeric characters to identify this protocol based
VLAN.
Ethernet-
type
Use the drop down list box to select a predefined protocol to be included in
this protocol based VLAN or select Others and type the protocol number in
hexadecimal notation. For example the IP protocol in hexadecimal notation
is 0800, and Novell IPX protocol is 8137.
Note: Protocols in the hexadecimal number range of 0x0000 to 0x05ff
are not allowed to be used for protocol based VLANs.
VID Enter the ID of a VLAN to which the port belongs. This must be an existing
VLAN which you defined in the Advanced Application > VLAN screens.
Priority Select the priority level that the switch will assign to frames belonging to
this VLAN.
Add Click Add to save your changes to the switch’s run-time memory. The
switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the non-
volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Index This is the index number identifying this protocol based VLAN. Click on any
of these numbers to edit an existing protocol based VLAN.
Active This field shows whether the protocol based VLAN is active or not.
Port This field shows which port belongs to this protocol based VLAN.
Name This field shows the name the protocol based VLAN.
Ethernet-
Type
VID This field shows the VLAN ID of the port.
Priority This field shows the priority which is assigned to frames belonging to this
Delete Click this to delete the protocol based VLANs which you marked for
Cancel Click Cancel to begin configuring this screen afresh.
This field shows which Ethernet protocol is part of this protocol based
VLAN.
protocol based VLAN.
deletion.
MS-7206 User’s Guide
99
Chapter 13 VLAN
13.11 Create an IP-based VLAN Example
This example shows you how to create an IP VLAN which includes ports 1, 4 and
8. Follow these steps:
1 Activate this protocol based VLAN.
2 Select the slot number and type the port number you want to include in this
protocol based VLAN. Type 1.
3 Give this protocol-based VLAN a descriptive name. Type IP-VLAN.
4 Select the protocol. Leave the default value IP.
5 Type the VLAN ID of an existing VLAN. In our example we already created a static
VLAN with an ID of 5. Type 5.
6 Leave the priority set to 0 and click Add.
Figure 34 Protocol Based VLAN Configuration Example
To add more ports to this protocol based VLAN.
100
1 Click the index number of the protocol based VLAN entry. Click 1
2 Change the value in the Port field to the next port you want to add.
3 Click Add.
MS-7206 User’s Guide
Loading...