3com Switch 7700 Configuration manual

http://www.3com.com/

Switch 7700

Configuration Guide

Published December 2003

Part No.10014298

3Com Corporation

350 Campus Drive

Marlborough, MA

01752-3064

in any form or by any means or used to make any derivative work (such as translation, transformation, or

adaptation) without written permission from 3Com Corporation.

3Com Corporation reserves the right to revise this documentation and to make changes in content from time

to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.

3Com Corporation provides this documentation without warranty, term, or condition of any kind, either

implied or expressed, including, but not limited to, the implied warranties, terms or conditions of

merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or

changes in the product(s) and/or the program(s) described in this documentation at any time.

If there is any software on removable media described in this documentation, it is furnished under a license

agreement included with the product as a separate document, in the hard copy documentation, or on the

removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,

please contact 3Com and a copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein

are provided to you subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense.

Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995)

or

as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are

provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited

rights only as provided in DFAR 252.227-7015 (Nov

1995) or FAR 52.227-14 (June 1987), whichever is

applicable. You agree not to remove or deface any portion of any legend provided on any licensed program

or documentation contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may

not be registered in other countries.

3Com, the 3Com logo, are registered trademarks of 3Com Corporation.

Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and

Windows NT are registered trademarks of Microsoft

Corporation. UNIX is a registered trademark in the United

States and other countries, licensed exclusively through X/Open Company, Ltd.

All other company and product names may be trademarks of the respective companies with which they are

associated.

CONTENTS

ABOUT THIS GUIDE

Conventions 1

SYSTEM ACCESS

Product Overview 3

Function Features 3

Configuring the Switch 7700 4

Setting Terminal Parameters 5

Configuring Through Telnet 8

Configuring Through a Dial-up the Modem 11

Configuring the User Interface 12

Command Line Interface 20

Command Line View 20

Feature and Functions of the Command Line 24

PORT CONFIGURATION

Ethernet Port Overview 27

Ethernet Port Configuration 27

Set the VLAN VPN Feature 33

Display and Debug Ethernet Port 33

Ethernet Port Troubleshooting 35

Link Aggregation Configuration 35

Display and Debug Link Aggregation 35

Ethernet Link Aggregation Troubleshooting 36

VLAN CONFIGURATION

VLAN Overview 37

Configuring VLAN 37

Display and Debug VLAN 40

Configuring GARP/GVRP 41

Configuring GVRP 43

NETWORK PROTOCOL OPERATION

Configure IP Address 47

Subnet and Mask 47

Configure IP Address 48

Displaying and Debugging an IP Address 49

Troubleshooting an IP Address Configuration 49

ARP Configuration 50

Configure Static ARP 50

DHCP Relay 51

Configuring DHCP Relay 52

Displaying and Debugging DHCP Relay 53

Troubleshooting a DHCP Relay Configuration 55

IP Performance 56

Displaying and Debugging IP Performance 56

Troubleshooting IP Performance 57

ROUTING PROTOCOL OPERATION

IP Routing Protocol Overview 59

Route Selection through the Routing Table 60

Routing Management Policy 61

Static Routes 62

Configuring Static Routes 63

Display and Debug Static Route 65

Static Route Fault Diagnosis and Troubleshooting 66

RIP 67

Configuring RIP 68

Display and Debug RIP 75

RIP Fault Diagnosis and Troubleshooting 76

OSPF 76

Calculating OSPF Routes 76

OSPF Configuration 78

Display and Debug OSPF 94

OSPF Fault Diagnosis and Troubleshooting 98

IS-IS 99

Two-level Structure of IS-IS Routing Protocol 100

NSAP Structure of IS-IS Routing Protocol 101

IS-IS Routing Protocol Packets 102

Configuring Integrated IS-IS 102

Displaying and Debugging IS-IS 115

Typical Integrated IS-IS Configuration Example 115

BGP 117

Configuring BGP 118

Displaying and Debugging BGP 133

BGP Configuration Example 134

BGP Troubleshooting 141

IP Routing Policy 142

Routing Information Filters 142

Configuring an IP Routing Policy 143

Display and Debug the Routing Policy 148

Routing Policy Fault Diagnosis and Troubleshooting 149

Route Capacity 150

Route Capacity Limitation 150

Route Capacity Configuration 150

Displaying and Debugging Route Capacity 153

MULTICAST PROTOCOL

IP Multicast Overview 155

Multicast Addresses 156

IP Multicast Protocols 158

IP Multicast Packet Forwarding 159

Application of Multicast 160

GMRP 160

ConfigurING GMRP 160

Displaying and Debugging GMRP 161

IGMP Snooping 162

Configure IGMP Snooping 165

Display and debug IGMP Snooping 166

IGMP Snooping Configuration Example 166

TroubleshootinIGMP Snooping 167

Common Multicast Configuration 167

Common Multicast Configuration 168

Display and Debug Common Multicast Configuration 168

IGMP Configuration 169

IGMP Configuration 170

Display and Debug IGMP 172

PIM-DM Configuration 173

PIM-DM Configuration 174

Display and Debug PIM-DM 175

PIM-DM Configuration Example 176

PIM-SM Configuration 177

PIM-SM Operating Principle 177

Preparations before Configuring PIM-SM 178

PIM-SM Configuration 179

Display and Debug PIM-SM 182

QOS/ACL OPERATION

ACL Overview 187

ACL Supported by Ethernet Switch 188

Configuring ACL 189

Configuring the Time Range 189

Selecting the ACL Mode 189

Defining ACL 190

Activating ACL 192

Displaying and Debugging ACL 193

QoS Overview 194

Traffic 194

Configuring QoS 197

Displaying and Debugging QoS 200

User LogonACL Control Configuration 201

Configure ACL Control over the TELNET User 201

Configure ACL Control over SNMP Users 203

STP OPERATION

STP Overview 205

Designated Switch and Designated Port 205

Calculating the STP Algorithm 206

Generating the Configuration BPDU 206

Selecting the Optimum Configuration BPDU 207

Designating the Root Port 207

Configuring the BPDU Forwarding Mechanism 209

RSTP 209

Configuring RSTP 210

Displaying and Debugging RSTP 219

MSTP 222

MSTP Concepts 222

MSTP Principles 224

Configuring MSTP 224

Configuring the MST Region for a Switch 225

Specifying the Switch as Primary or Secondary Root Switch 226

Configuring the MSTP Running Mode 227

Configuring the Bridge Priority for a Switch 228

Configuring the Max Hops in an MST Region 228

Configuring the Switching Network Diameter 229

Configuring the Time Parameters of a Switch 229

Configuring the Max Transmission Speed on a Port 231

Configuring a Port as an Edge Port 232

Configuring the Path Cost of a Port 232

Configuring the Priority of a Port 233

Configuring the Port Connection with the Point-to-Point Link 234

Configuring the mCheck Variable of a Port 235

Configuring the Switch Security Function 235

Enabling MSTP on the Device 237

Enabling or Disabling MSTP on a Port 237

Displaying and Debugging MSTP 238

AAA AND RADIUS OPERATION

IEEE 802.1x 239

802.1x System Architecture 239

Configuring 802.1x 241

Displaying and Debugging 802.1x 245

Configuring the AAA and RADIUS Protocols 248

Configuring AAA 250

Configuring the RADIUS Protocol 253

Displaying and Debugging the AAA and RADIUS Protocols 260

AAA and RADIUS Protocol Fault Diagnosis and Troubleshooting 261

RELIABILITY

VRRP Overview 263

Configuring VRRP 264

Enabling and Disabling Pinging the Virtual IP Address 264

Setting the Correspondence between Virtual IP and MAC Addresses 265

Adding and Deleting a Virtual IP Address 265

Configuring the Priority of Switches 266

Configuring Preemption and Delay for a Switch 266

Configuring Authentication Type and Authentication Key 267

Configuring the VRRP Timer 267

Configuring a Switch to Track an Interface 268

Displaying and Debugging VRRP 268

Troubleshooting VRRP 271

SYSTEM MANAGEMENT

File System Management 1

Directory Operation 1

File Operation 2

Storage Device Operation 2

Setting the Prompt Mode of the File System 2

Configuring File Management 3

FTP 4

TFTP 6

MAC Address Table Management 7

MAC Address Table Configuration 8

Display and Debug MAC Address Table 11

Device Management 12

Reboot Ethernet Switch 12

Designate the APP Adopted when Booting the Ethernet Switch Next Time 13

Display and Debug Device Management 14

System Maintenance and Debugging 14

Configuring System Basics 14

Display the State and Information of the System 15

System Debugging 16

Testing Tools for Network Connection 18

Logging Function 18

Displaying and Debugging the Syslog Function 23

SNMP 23

SNMP Versions and Supported MIB 24

Configure SNMP 25

Displaying and Debugging SNMP 30

RMON 31

Configure RMON 32

Displaying and Debugging RMON 34

NTP 35

Configuring NTP 36

Displaying and Debugging NTP 42

NTP Configuration Examples 43

ABOUT THIS GUIDE

This guide describes the 3Com

®

Switch 7700 and how to configure it in version

2.0 of the software.

Conventions Tabl e 1 and Table 2 list conventions that are used throughout this guide.

Table 1 Notice Icons

Table 2 Text Conventions

Icon Notice Type Description

Information note Information that describes important features or

instructions.

Caution Information that alerts you to potential loss of data

or potential damage to an application, system, or

device.

Warning Information that alerts you to potential personal

injury.

Convention Description

Screen displays This typeface represents information as it appears on the screen.

Keyboard key names If you must press two or more keys simultaneously, the key names are

linked with a plus sign (+), for example:

Press Ctrl+Alt+Del

The words “enter”

and type”

When you see the word “enter” in this guide, you must type

something, and then press Return or Enter. Do not press Return or

Enter when an instruction simply says “type.”

Words in italics Italics are used to:

Emphasize a point.

Denote a new term at the place where it is defined in the text.

Identify command variables.

Identify menu names, menu commands, and software button names.

Examples:

From the Help menu, select Contents.

Click OK.

Words in bold Boldface type is used to highlight command names. For example, “Use

the display user-interface command to...”

2 ABOUT THIS GUIDE

1

SYSTEM ACCESS

■ Product Overview

■ Configuring the Switch 7700

■ Setting Terminal Parameters

■ Command Line Interface

Product Overview The 3Com Switch 7700 is a large capacity, modularized wire speed

Layer

2/Layer 3 Ethernet switch. It is designed for IP metropolitan area networks

(MAN), large-sized enterprise network and campus network users.

The Switch 7700 has an integrated chassis structure. The chassis contains a card

area, fan area, power supply area, and a power distribution area. In the card area,

there are seven slots. Slot 0 is prepared specially for the switch Fabric module. The

other six slots are for interface modules. You can install different interface modules

for different networks and the slots support mixed a mixed set of modules.

The Switch 7700 supports the following services:

■ Internet broadband access

■ MAN, enterprise/campus networking

■ Multicast service and multicast routing functions and support audio and video

multicast service.

Function Features Tabl e 1 lists and describes the function features that the Switch 7700 supports.

Table 1 Function Features

Features Support

VLAN VLANs compliant with IEEE 802.1Q standard

Port-based VLAN

GARP VLAN Registration Protocol (GVRP)

STP protocol STP/RSTP, compliant with IEEE 802.1D/802.1w Standard

Flow control IEEE 802.3x flow control (full-duplex)

Back-pressure based flow control (half-duplex)

Broadcast Suppression Broadcast Suppression

Multicast GARP Multicast Registration Protocol (GMRP)

Internet Group Management Protocol (IGMP)

Protocol-Independent Multicast-Dense Mode (PIM-DM)

Protocol-Independent Multicast-Sparse Mode (PIM-SM)

4 CHAPTER 1: SYSTEM ACCESS

Configuring the

Switch 7700

On the Switch 7700, you can set up the configuration environment through the

console port. To set up the the local configuration environment:

1 Plug the DB-9 or DB-25 female plug of the console cable into the serial port of the

PC or the terminal where the switch is to be configured.

2 Connect the RJ-45 connector of the console cable to the console port of the

switch, as shown in

Figure 1.

IP routing Static route

Routing Information Protocol (RIP) V1/v2

Open Shortest Path First (OSPF)

DHCP Relay Dynamic Host Configuration Protocol (DHCP) Relay

Link aggregation Link aggregation

Security features Multi-level user management and password protect

802.1X authentication

Packet filtering

Reliability Virtual Redundancy Routing Protocol (VRRP)

Quality of Service (QoS) Traffic classification

Bandwidth control

Priority

Queues of different priority on the port

Queue scheduling: supports Strict Priority Queueing (SP)

Management Command line interface configuration

Configuration by the console port

Remote configuration by Telnet

Configuration through dialing the modem

SNMP

System log

Level alarms

Loading and update Load and upgrade software using the XModem protocol

Load and upgrade software using the File Transfer Protocol

(FTP) and Trivial File Transfer Protocol (TFTP)

Maintenance Output of the debugging information

PING and Tracert

Remote maintenance using Telnet and a modem

Table 1 Function Features

Features Support

Setting Terminal Parameters 5

Figure 1 Setting up the Local Configuration Environment Through the Console Port

Setting Terminal

Parameters

To set terminal parameters:

1 Start the PC and select Start > Programs > Accessories > Communications >

HyperTerminal.

2 The HyperTerminal window displays the Connection Description dialog box, as

shown in

Figure 2.

Figure 2 Set up the New Connection

3 Enter the name of the new connection in the Name field and click OK. The dialog

box, shown in

Figure 3 displays.

4 Select the serial port to be used from the Connect using dropdown menu.

RS-232 Serial port

Console cable

Console port

6 CHAPTER 1: SYSTEM ACCESS

Figure 3 Properties Dialog Box

5 Click OK. The Port Settings tab, shown in Figure 4, displays and you can set serial

port parameters. Set the following parameters:

■ Baud rate = 9600

■ Databit = 8

■ Parity check = none

■ Stopbit = 1

■ Flow control = none

Setting Terminal Parameters 7

Figure 4 Set Communication Parameters

6 Click OK. The HyperTerminal dialogue box displays, as shown in Figure 5.

7 Select Properties.

Figure 5 HyperTerminal Window

8 In the Properties dialog box, select the Settings tab, as shown in Figure 6.

9 Select VT100 in the Emulation dropdown menu.

10 Click OK.

8 CHAPTER 1: SYSTEM ACCESS

Figure 6 Settings Tab

Configuring Through

Teln et

After you have correctly configured the IP address of a VLAN interface for an

Ethernet switch through the console port (using the ip address command in

VLAN interface view), and added the port (that connects to a terminal) to this

VLAN (using the port command in VLAN view), you can telnet this Switch 7700

and configure it.

Connecting the PC to the Switch 7700

To connect the PC and Switch 7700 through Telnet:

1 Authenticate the Telnet user through the console port before the user logs in by

Tel net.

Note: By default, the password is required for authenticating the Telnet user to

log in the Ethernet switch. If a user logs in by Telnet without a password, the user

sees the message:

Password required, but none set.

2 Enter system view, return to user view by pressing Ctrl+Z.

<SW7700> system-view

[SW7700] user-interface vty 0 4

[SW7700-ui-vty0] set authentication password simple/cipher xxxx

(xxxx is the preset login password of Telnet user)

3 To set up the configuration environment, connect the Ethernet port of the PC to

that of the Ethernet switch through the LAN. See

Figure 7.

Setting Terminal Parameters 9

Figure 7 Setting up the Configuration Environment Through Telnet

4 Run Telnet on the PC by selecting Start > Run from the Windows desktop and

entering Telnet in the Open field, as shown in

Figure 8. Click OK.

Figure 8 Run Telnet

5 On the Connect dialog box, enter the IP address of the VLAN connected to the PC

port and set the terminal type to VT100, as shown in

Figure 9.

Figure 9 Connect Ethernet Switch by Telnet

The terminal displays User Access Verification and prompts you for the logon

password.

6 Enter the password,. The terminal displays the command line prompt (<SW7700>).

If the message, Too many users! appears, try to reconnect later. At most, 5

Telnet users are allowed to log on to the Switch 7700 Switch simultaneously.

7 Use the appropriate commands to configure the Ethernet switch or to monitor the

running state. Enter

? to get the immediate help. For details of specific commands,

refer to the chapters in this guide.

Workstation

WorkstationServer

Ethernet port

PC (for configuring

the switch through Telnet)

10 CHAPTER 1: SYSTEM ACCESS

Note: When configuring the Ethernet switch by Telnet, do not modify the IP

address of it unless necessary, for the modification might terminate the Telnet

connection. By default, after logging on, a Telnet user can access the commands

at Level 0.

Connecting Two Switch 7700 Systems

After you have correctly configured IP address of a VLAN interface for an Ethernet

Switch through the console port (using the ip address command in VLAN

interface view), and have added the port (that connects to a terminal) to this VLAN

(using the port command in VLAN view), you can telnet the Switch 7700 to

another Switch 7700 to carry out the configuration, as shown in

Figure 10. The

local end is the Telnet client and the peer is the Telnet server. If the two switches

are located on the same LAN, their IP addressed should be configured on the same

segment or have a route between them.

After you telnet to an Ethernet switch, you can run the telnet command to log in

and configure another Ethernet switch.

Figure 10 Provide Telnet Client Service

1 Authenticate the Telnet user through the console port on the Telnet Server

(Ethernet switch) before login.

Note: By default, the password is required for authenticating the Telnet user to

log in the Ethernet switch. If a user logs into Telnet without password, the system

displays the following message:

Password required, but none set.

2 Enter system view, return to user view by pressing Ctrl+Z.

<SW7700> system-view

[SW7700] user-interface vty 0

[SW7700-ui-vty0] set authentication password simple/cipher xxxx

(xxxx is the preset login password of Telnet user)

3 Log in to the Telnet client (Switch 7700). For the login process, see “Connecting

the PC to the Switch 7700”.

4 Perform the following operations on the Telnet client:

<SW7700> telnet xxxx

(xxxx can be the hostname or IP address of the Telnet Server. If it is the hostname,

the switch shall have the static resolution function.)

5 Enter the preset login password. The Switch 7700 prompt (<SW7700>) displays. If

the message,

Too many users! displays, try to connect later.

6 Use the appropriate commands to configure the Switch 7700 or view its running

state. Enter

? to get the immediate help. For details on a specific command, refer

to the appropriate chapter in this guide.

PC

Telnet client

Telnet server

Setting Terminal Parameters 11

Configuring Through a

Dial-up the Modem

To configure your router through a dial-up modem:

1 Authenticate the modem user through the console port of the Switch 7700 before

the user logs in to the switch through a dial-up modem.

Note: By default, the password is required for authenticating the modem user to

log in to the Switch 7700. If a user logs in through the modem without a

password, the user sees the message,

Password required, but none set.

a Enter system view, return user view with Ctrl+Z.

<SW7700> system-view

[SW7700] user-interface aux 0

[SW7700-ui-aux0] set authentication password simple/cipher xxxx

(xxxx is the preset login password of the Modem user.)

b Using the modem command, you can configure the console port as in modem

mode.

[SW7700-ui-aux0] modem

2 To set up the remote configuration environment, connect the modems to a PC (or

a terminal) serial port and to the Switch 7700 console port, as shown in

Set Up

Remote Configuration Environment.

Figure 11 Set Up Remote Configuration Environment

3 Dial for a connection to the switch, using the terminal emulator and modem on

the remote end. Dial the telephone number of the modem connected to the

Ethernet switch. See

Figure 12 and Figure 13.

Console port

Remote telephone:

555-5555

Modem

PST

Telephone line

Modem serial port line

12 CHAPTER 1: SYSTEM ACCESS

Figure 12 Set the Dialed Number

Figure 13 Dial the Remote PC

4 Enter the preset login password on the remote terminal emulator and wait for the

<SW7700> prompt.

5 Use the appropriate commands to configure the Switch 7700 or view its running

state. Enter

? to get the immediate help. For details on a specific command, refer

to the appropriate chapter in this guide.

Note: By default, after login, a modem user can access the commands at Level 0.

Configuring the User

Interface

User interface configuration is another way to configure and manage port data.

The Switch 7700 supports the following configuration methods:

■ Local configuration through the console port

■ Remote configuration through Telnet on the Ethernet port

Page is loading ...

3com Switch 7700 Configuration manual

3com Switch 7700 Configuration manual

Related papers

Other documents