Manuale d’uso / di manutenzione del prodotto 35160 del fabbricante Asante Technologies
Vai alla pagina of 88
IntraCore ® 35160 Series Layer 2 Gigabit Switches v .2.0 User ’ s Manual.
2 Quick Start Guide Follow the steps below to install the IntraCore s witch: 1. Open the box and che ck the contents. See Cha pter 1.3 Package Contents for a complete list of the items that are included with the IntraCore s witch. 2. Install the switch in an equipment or wa ll rack, or prepare it for desktop placement.
3 IntraCore 35160 Series Layer 2 Gigabit Switches v.2.0 User’s Manual Asanté Technologies, Inc. 821 Fox Lane San Jose, CA 95131 USA SALES 800-662-9686 Home/Office Solutions 800-303-9121 Enterpris e Solutions 408-435-8388 TECHNICAL SUPPORT 801-566-8991: W orldwide 801-566-3787: F ax www.
4 Table of Contents Quick Start Guide 2 Chapter 1. Introduction 6 1.1 Features 6 1.2 SwitchCore CXE2010 7 1.3 Package Contents 7 1.4 LEDs 7 1.5 Front and Back Panel Descriptio ns 9 1.6 Management and Config uration 9 Chapter 2. Hardware Installation and Setup 11 2.
5 6.3 Community Name and Securit y 74 6.4 The MIB Tree 74 Chapter 7. Switching Conc epts 76 7.1 VLANs 76 7.2 Spanning Tree Protocol 77 7.3 Full Duplex, Flow Control, and Auto- negotiation 78 Appendix A. Troublesh ooting 80 Appendix B. Features and Specificati ons 81 B.
6 Chapter 1. Introduction Thank you for purchasing the Asanté IntraCore 35160 Seri es Gigabit switch. These switches are a fam ily of multi-media and multi-protocol s witches capable of supporting La yer 2 Switching and La yer 4 Type of Service. They are designed t o offer industry-leading per formance at a ver y competitive cost of ownership.
7 • Supports multiple user names and Secur e Shell (SSH) • Port Mirroring/monitoring on Ingress only • Local and Global port managem ent 1.2 SwitchCore CXE2010 The IC35160 utilizes a state-of-the-art packet processor on its system board, which provid es 16 Gigabit Ethernet ports.
8 1.4.1 IC35160-T The IC35160-T has one power LED indicator, one (optional) emergenc y power LED, and two LED indicators for each of the 16 ports. See the table belo w for a complete LED description. LED Color Description Power Green Off Power is on. Power is off, or main power has failed.
9 1.5 Front and Back Panel Descriptions Refer to the following sections for detailed de scription s of the front and back panels of the IntraCore 3 5160 series switches.
10 1.6.1 Console Interface Users can access the switch in a more traditional way by connecting a PC or terminal to the consol e port or by telnet across the network. The menus are organiz ed in a manner sim ilar to the web-based interface. A detailed description can be fo und in Chapter 3 Configurati on .
11 Chapter 2. Hardware Installation and Setup The following guideli nes will help the user to easily i n stall the switch, and to ensur e that it has the proper power supply and environm ent. 2.1 Installation Overview Follow these steps to install the IntraCore switch: 1.
12 2.1.3 Power Requirements The electrical outlet should be located ne ar the swit ch and be easily accessible. It must also be proper ly grounded. Make sure the po wer source adheres to the following guidel ines: • Power: Auto Switching 110/240 VAC • Frequency range: 50/60 Hz • Maximum Input AC Current: 1.
13 2.3 GBIC Interfaces The GBIC Interface is the industry standard for Gigabit Ethernet Interfaces. Some of the benefits of GBIC include reducing the compo nents needed in a “spares” inventor y, being able to choose from a wide variet y of manufacturers with cross-vendor comp atibility, an d having competitive prices.
14 2.3.2 Removing a GBIC Caution : GBIC 1000T modules run hot under normal o perat ing conditions. When it has been remov ed from the system, place it on a heat-re sistant surface and all ow the m odule to cool before handlin g. Note : Unnecessary removals/insertio ns of a GBIC module will lead to premature failure of the GBIC.
15 2.6 Connecting to the Network The switch may be connected to an Ethernet network with the unit po wered on or off. Use the following procedure to make the net work connections: 1. Connect the network devices to the switch, following the cable guide lines outlined belo w.
16 2.6.2 Gigabit Ethernet Ports Cabling Procedures Cabling requirements for the optional h ardware module s depen d on the type of modu le install ed. Use the following guidelines to determine the p articul ar cabling requirements of the modul e(s): • 1000BaseSX GBIC: Cables with SC-type fiber connectors; 62.
17 • Under the Settings tab, choose VT100 for Emulation mode • Select Terminal keys for Function, Arrow, and Ctrl key s. Be sure the setti ng is for Terminal keys, NOT Windows keys • Back under .
18 2.8 Changing the Password The default password ( which is As an t e , and is case-sensitive) ma y allow immediate access to ANYONE on the network. To protect the switch from unauthor ized changes to the conf igurati on, change the administrator’s password.
19 2.10 Simple Network Manage ment Protocol (SNMP) The SNMP Configuration Menu al lows the user to conf igure the unit’s read and write community strings, and to enable or disable authentic ation traps. This menu also allo ws the user to specify which of the network management stations will receive traps from the s witch.
20 Chapter 3. Configuration This chapter describes the log in procedure and config urati on of the switch via the console or teln et interfaces. For information on configuring the switch via the web browser, see Chapter 5 Web-Based Management . Note : The screens shown are from the IC35160-T .
21 3.1 General Information The General Information Screen displa ys the current system information of the switch, such as its name, IP address, and boot information. T he information displayed is read-only. To view General Information, type g from the Main Menu.
22 To access the Configuration M enu when you are logg ed in as root or readwrite , type c from the Main Menu. The Configuration Menu ap pears, as shown below (from a telnet session): IntraCore 35160-.
23 4. Press Enter . The system administration information chan ges take effect. 5. Type q to quit and return to the Configuration Menu. 3.4 System IP Configuration The System IP Configuration Menu d isplays, and allo ws the user to chang e, the information needed to access the switch over the network via in-band managem ent.
24 IntraCore 35160-T Basic Port Configuration Menu Port: [01] Port Name: <none> 1 8 9 16 ======== ======== Operating Status: -------- -++---+- Auto Negotiation: ******** ******** Speed/Duplex: g.
25 3.5.1 Enabling or Disabling a Port The enabling or disab ling of a port is a manual operatio n that can be used to isolate a network device that might be causing problems on the net work, or to prevent unauthorized use of a port or station. To enable or disable a port, u se the following procedure: 1.
26 3.6.1 Enabling or Disabling 802.3x Flow Control Use the following procedure to control traffic and av oid congestio n, such as during a shortage of buffer resources for the port. Flow control is accomplish ed by means of standar d PAUSE control frames for each port, independent of all others.
27 The new maximum packet length is sho wn on the Advanced Port Configuratio n Menu. 3.6.5 Global Port Configuration The Global Port Configur ation Menu allows the user to simultaneousl y change the configuration i nformation for all ports. To change the port configuration for all p orts, use the following procedure: 1.
28 Type d in the Configuration Menu. The Unicast For wardi ng Database Configur ation Menu appears, as shown below. IntraCore 35160-T Unicast Forwarding Database Configuration Menu Age-out Time: 300 sec.
29 3.7.2 Searching for a MAC Address The Unicast Forwarding Database can b e searched by MAC address or by IP address. T o search for a specific MAC or IP address, use the following procedure: 1. Access the Unicast Forwarding Database C onfiguration Menu by t yping d in the Configuration Menu.
30 3.10 Protocol Configuration To access the Protocol Confi guration Menu, enter the letter r from the Configuration Menu. Use the liste d command letters to configure Simple Net work Manag ement Protocol (SNMP) and Spanni ng Tree Protocol (STP).
31 Settings Description SNMP Read Community The string that defines access rights fo r reading SNMP data objects. The default is public . SNMP Write Community The string that defines access rights for writing SNMP data objects. The default is private .
32 Deleting a Trap Recei ver Use the following procedure to del ete a trap re ceiver that has bee n previously designate d: 1. Open the SNMP Config uration Menu by t yping n in the Configuration Menu. 2. Type d to Delete a Trap Receiver . A prompt for the entr y of the trap receiver appears.
33 Enabling and Disabling ST P The switch is shipped with Spanning Tree enabl ed on all ports by default. To enable or d isable STP on the switch, use the following procedur e: 1. Open the Spanning Tree Configur ation Menu by typing s i n the Protocol Configuration Menu.
34 3.11 Trunk Group Configuration The IC35160 supports link a ggregation (port trunking). T his feature is used to combine two or more links (ports) in order to increase the overall band width of t he link, thereby sharing or bala ncing the data load.
35 3.12 QoS Priority Queue Management Quality of Service (QoS) Priorit y Q ueue is a feature that allows the sw itch to prioritize packets, thereby ensuring that high-priorit y traffic is handled before low-priorit y traffic when there is congestion on the network.
36 To assign a Priority Group to an interface, t ype p in the QoS Priority Queue Management Menu to acces s the Priority Group Configuration Menu. Onl y one list can be assigned per interface. T ype g to set the Priority Group, or type the corresponding command letter to select another task.
37 3.13 User Interface Configuration To access the User Interface Conf iguration Menu, enter the letter u from the Configuration Menu. Use the listed command letters to configure us er interfaces (SSH, Telnet, and HTTP server), UI timeout, passwords, add/delete access hosts, and access control.
38 The new SSH/Telnet UI Time Out is reflected in the Us er Interface Confi guration Menu. After configuring the desired time-outs, type q to return to the previous menu. 3.13.3 Change Password Use this option to change the pass word that the user must enter when they log in.
39 3.13.6 Enabling or Disabling the Web Server The current HTTP Server Status is show n in the User Interf ace Configuration. Important! For security, the web server is disabled by default. It cannot be enabled if SSH is currently enabled. One or the other must be left disabled.
40 3.14.1 Port Mirroring Port Mirroring allows the user to configure the s witch to copy all traffic associated with one port (the Monitor Port) to a Mirror Port on the switch. The user can conn ect the Mirror Port to a network analyzer or RMON probe for packet analysis.
41 3.14.2 System Clock Select o from the System Utility Menu to access the System Clock Configuration Menu. Use the command letters to set the date and time. IntraCore 35160-T System Clock Configuration Menu System up since: 07/16/2003 Wed. 03:57:59pm Current date/time: 07/24/2003 Thu.
42 Scheduling a Sy stem Reset The user can schedule the s witch to automatically pe rform a reset from one second up to 24 hours (86,400 seconds) in advance. To schedule a reset, use the following proc edure: 1. Open the System Reset Menu by typing r in the System Utility Menu.
43 3. Type n to display the next page of System Log information, or type q to quit. Clearing the System Log Use the following procedure to clear a ll entries from the current System Log: 1. Open the System Log Menu by typing l in the System Utility Menu.
44 3.14.6 TFTP File Transfers The software image file must be downloaded from a se rver on the network that is running a TFT P server application. IntraCore 35160-T TFTP File Downloading Menu Bank 1 Image Version/Date: 1.20B/Jun 17 2003 20:41:25 (Running) Bank 2 Image Version/Date: 1.
45 3.14.7 PING Utility Type p on the System Utility Menu to ent er an IP address to Ping. IntraCore 35160-T System Utility Menu <Cmd> <Description> m Port Mirroring Configuration o System .
46 Chapter 4. Advanced Management This chapter deals with the advanced ma nagement of the switch, via the console mode or telnet connec tion. See Chapter 5 Web-Base d Management for information on managing the switch through the web browser.
47 4.2 Security Management To access the Security Management Menu, t ype t in the Configuration Menu. Use the listed command letters to configure port security, duplicate IP detecti on and trap, and stati on movement trap, or to display the duplicated IP list and reset all secur ity parameters to factory default.
48 1. From the Configuration Menu, type t to access the Security Management Menu. 2. Type l to display the duplicated IP list. A screen appears, similar to the foll owing screen. +---------------+-----------------+--+-----------------+--+ | IP Address | Owner MAC | P| Spoofer MAC | P| +---------------+-----------------+--+-----------------+--+ xxx.
49 Configuring Port Ne w Node Detection Trap The port new node detection trap secur ity measure (als o c alled “port security trap”) ensures that when any new device is connected to the secured port, an alert will be sent to the designated trap receiver.
50 By default, security levels 2 and 3 are both disabled. Configuring Sec urity Level 2 or Lev el 3 To set security level 2 (port lock ) or level 3 (intruder lock) on a port: 1. From the Configuration Menu, type t to access the Security Management Menu.
51 Note: The IC35160 802.1X implementation supports following clients: Windows XP (Microsoft) Windows 2000 + SP4 (Microsoft) The IC35160 802.1X implementation supp orts following RADIUS servers: Internet Authen tication Service (Microsoft) The IEEE 802.
52 IntraCore 35160-T 802.1X Configuration Menu 802.1X Awareness : Enabled SystemAuthControl : Disabled 1 8 9 16 Port Control: -------- -------- -: Force Authenticated M: Auto Mode (Multiple Host) U: Force UnAuthenticated S: Auto Mode (Single Host) F: First Come, First Serve (Single Host) <Cmd> <Description> x Toggle 802.
53 Setting Timers To set the timing parameters, type t in the 802.1X Configuration Menu. After changin g any of the parameters listed below, the change will be not ed in the top of the menu screen. IntraCore 35160-T 802.1X Constant Configuration Menu Quiet-period <0.
54 Setting RADIUS Parameters To enter the802.1X RADIUS Conf igurati on Menu, type r in the 802. 1X Co nfiguration Menu. Use the command letters to configure the corresponding va lues for the RADIUS se rver on your network. IntraCore 35160-T 802.1X RADIUS Configuration Menu Radius Server IP : 192.
55 4.3 VLAN Management A virtual LAN, or VLAN, is a logical gro uping that allows st ations to communicate as if they we re physically connected to a single LAN, indep endent of the actual physi cal configuration of a net work. The IntraCore 35160 supports port-based VLANs, in comp liance with the IEEE 802.
56 IntraCore 35160-T VLAN Management Menu VLAN Version: 1 VLAN Type: Port Based Max. Supported VLAN ID: 4094 Max. Supported VLANs: 1024 Number of VLANs Configured: 64 Number of Active VLANs: 64 <Cm.
57 Removing a VLAN To remove the VLAN, from the VLAN Group Static Configuration Menu, t ype r . Enabling and Disabling Managemen t Access The IntraCore 35160 support s configurable manageme nt access for VLANs.
58 4.3.4 Configuring VLAN Port Attributes To configure port attributes, type p in the VLAN Management Menu (or l in the VLAN Group Static Configuration Menu). T his accesses the VLAN port conf iguration menu, shown belo w. Navigate to the port to configure by typing a comm and ( s , n , or p ), as shown at the bottom of the screen.
59 untagged frames received by the port are dr opped and the source address of the untagged frames is not learned. Incoming tagged frames are for warded to the VLAN whos e VID is included in the tag header of the frame.
60 4.3.6 Displaying a VLAN Port Summary To view a unit port VLAN summary, type v in the Configurati on Menu to access the VLAN Management Menu, then type a to access the Port VLAN Attribute Summar y. A screen similar to the one following will appear. To view the summary for other units, type a command as sho wn at the bottom of the screen.
61 IGMP Communication on a LAN (bet ween the end stations and the routers) is manage d by the Internet Group Management Protocol (IGMP). For co mplete information a bout IGMP, see RFC 1112, “Host Extensions...” and RFC 2236, “Internet Gr oup Management Protocol, Version 2” < ftp://ftp.
62 Advanced IGMP Configuration To enable or disable transmitti ng query packets, set the query interval, or to enable or d isable IGMP Proxy Report Forward, type v in the IP Multicast Traffic Management Menu.
63 4.4.2 IP Multicast Forwarding Database Configuration The Multicast Forwarding Da tabase lists addresses of mult icast groups, and assigns them to specific VLANs. It also lists the ports within a VLAN that can receive traffic from the multicast address.
64 Chapter 5. Web-Based Management This chapter describes how to manage the switch by means of a Web browser, using Web pages to monitor and configure the switch. Most of the options and functi ons provid ed by Web browser management ar e similar to those of the Local Manageme nt Interface.
65 The Web Browser Management Overvie w page contains a sidebar with 9 management option buttons, and a view of the IntraCore front panel that displays re al-time switch operatin g information, as well as contact information for Asanté Technologies, Inc.
66 The page has six sections, which are list ed at the top of the pag e. To view another section, click a link at the top of the page or scroll down. 5.3 Port Config (Port Configuration) Button This button opens the Port Configurat io n page, which provides a compr ehensive overvie w of the status of each port on the IntraCore, as shown belo w.
67 5.4 Span Tree (Spanning Tree) Button This button opens the Spanni ng Tree Protocol (S TP) Configurati on page, which sho ws the STP Configuration of the switch, as sho wn below.
68 5.5 SNMP Button This button displays the SNMP (Simple N etwor k Management Protocol) page, as shown belo w. See SNMP Configuration in Chapter 3 for an expl anation of SNMP settings.
69 To see the MAC and IP addresses, the activit y stat us, and the VLAN ID for the devices connected to a particular port, click the port’s num ber in the top tabl e. Use the Search boxes to search for either an IP or MAC address on the switch. 5.7 VLAN Button This button opens the VLAN Groups page, as sho wn on the following screen.
70 5.7.2 Port Configuration To configure the VLAN ports, click on the VLAN Ports link at the top of the VLAN Groups page. Click on the port number to go to the VLAN Port configuration page, as sh own on the follo wing screen.
71 Port Ingress Filtering From the drop-down menu, select Disabled or Enabled . See Chapter 4 Advanced Man agement for more information. Tag/Untag Port Egress T ype Click Tag Port Egress Type to set the port to send tagged frames for an y given VLAN. Click Untag Port Egress Type to set the port to send untagged frames.
72 To access the configuration pages for individ ual ports, click on the respective port number in the left-ha nd column. Select the Security Level from the drop-down menu (None, 1-New node trap, 2-Intruder lock p ort, and 3-Intruder lock MAC).
73 Chapter 6. SNMP Management The IntraCore 35160 s witch can be managed using a Simp le Network Management Prot ocol (SNMP) compatible management station running pl atforms su ch as HP OpenView or MG Soft’s MIB Browser.
74 6.3 Community Name and Security SNMP v.1 was not designed to be a secure protoco l. There is no true password, althou gh the string known as a community string does serve some of the same purpos es. SNMP-aware devices, such as this switch, often ship with well-known community strings.
75 6.4.2 MIB Groups Supported The following MIB-II groups are supported: • The System group – General information about the manag ed system, such as contact information and system name • The Int.
76 Chapter 7. Switching Concepts A bridge is a hardware device used to connect multiple n etworks into one big net work. However, when a bridge receives a broadcast from one i nterface, it will fo rward the frame to all interfaces and flood the wire, easily over whelming the network.
77 7.1.3 Port VLAN ID To allow untagged packets to participate in a VLAN, a Port VLAN ID (PVID) must be assigned in the relevant port(s). Each port on the switch has a default PVID of 1 (the default VLAN) and will receive both tagg ed and untagged frames.
78 Forward Delay After a recalculation of the spanning tree, the For war d Delay parameter regulates the dela y before each port begins transmitting traffic. If a port begins forwarding tr affic too soo n (before a new root bridge has b een selected), the network can be adversely affected.
79 7.3.2 Flow Control With a link operating at a high data rate, a switch ma y experience occas ional limitations in the buffer space used to store Ethernet frames before fo rwarding them. In this situation, if the sendin g station continues to send frames, the switch will have no option but to disca rd the frames.
80 Appendix A. Troubleshooting In the unlikely event the s witch does not operate proper ly, follow the troubl eshooting tips below. If more help is needed, contact Asanté’s technical support at support@asante.com . Problem Possible Solutions The Power LED is not lit.
81 Appendix B. Features and Specifications The sections below list the featur es and product specificati ons for the IntraCore 35160 Series Gigabit Ethernet switches.
82 Environmental Range Operating Temperat ur e: 32º to 104º F (0º to 40º C) Relative Humidit y: 10% to 90% non-condensin g Power: Auto-switching, 110-240 VAC, 50/60 Hz; ground ed IEC cord Redundant DC Power: 12VDC Auto-switching from main 110/240 VAC for emergency backup Standards Compliance IEEE: IEEE 802.
83 Appendix C. FCC Complian ce and Warranty Statements FCC Compliance Statement This equipment has bee n tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules.
84 and used. If Asanté receives notice of such defect s during the warrant y period, Asanté will replace software media that does not execute its programming instructions due to such defects. 3. Asanté does not warrant that t he operation of Asanté produ cts will be uninterrupted or error free.
85 Appendix D. Console Port Pin Outs The console port is used to connect with a terminal usi ng a serial modem RS-232C cable (available from Radio Shack’s website, www.radioshack.com , catalog # 2 6-117). The setting is 9600-N 81. The table belo w lists the pin outs.
86 Appendix E. Online Warranty Registration Before calling Asanté Technical Sup port, please register the switch online at www.asante.com/suppor t/registration.html . By d oing so, you’ll be entitled to special offers, up-to-date information, and important product bulleti ns.
87 Appendix F. BootP Configuration The switch is shipped with BootP support. If the net work co ntains a BootP server configured with available, valid IP addresses, BootP allows the switch to be c onfigured automatic ally with an IP address when it is connected to the network and is po wered on.
88 Loading Software Remotely To set the switch to download its soft ware over the network from a remote server, use the following procedure: 1. Open the Local Bootstrap Configurati on Menu by typing b in System Utility Menu. 2. Open the Remote Bootstrap Configuration Menu by typing r in the Loc al Bootstrap Configur ation Menu.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Asante Technologies 35160 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Asante Technologies 35160 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Asante Technologies 35160 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Asante Technologies 35160 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Asante Technologies 35160, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Asante Technologies 35160.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Asante Technologies 35160. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Asante Technologies 35160 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
