AIfocus 3210 Ethernet Concentration Solution User s Guide

Transcription

1 AIfocus 3210 Ethernet Concentration Solution User s Guide Version 1.3x Part Number FOCUS3210UM Rev by Kentrox, Inc. All rights reserved.

2 Copyright 2008 by Kentrox, Inc. All Rights Reserved. The material discussed in this publication is the proprietary property of Kentrox, Inc. Kentrox retains all rights to reproduction and distribution of this publication. Kentrox is a registered trademark of Kentrox, Inc. Applied Innovation, Applied Innovation Inc., the AI logo, and other names are the intellectual property of Kentrox. All other product names are trademarks or registered trademarks of their respective owners. Information published here is current as of this document s date of publication, but is subject to change without notice. You may verify product information by contacting our headquarters in Oregon. Kentrox is an Equal Opportunity/Affirmative Action employer. Kentrox, Inc Innovation Dr. Dublin, Ohio USA Toll Free: (800) International: +1 (614) Fax: +1 (614) NW Tanasbourne Dr. Hillsboro, Oregon USA Toll Free: (800) Direct: (503)

3 About this Document This document explains how to install, configure, and operate the AIfocus 3210 Ethernet concentration solution. You should have a working knowledge of the following: Your network topology/system architecture AIswitch technology SNMP Port-based VLAN i

4 About this Document: Document Conventions Document Conventions Table 1 describes the text conventions used in this document. Table 1 Document Conventions Convention Screen Text, Menu Items, System Prompts, Messages and Reports Static Command Text Variable Command Text Meaning This style indicates configuration screen text, menu items, system prompts, messages, and reports. In a command statement, this style indicates text that should be entered exactly as shown at a command line. In a command statement, this style indicates user-specified text.... In a command statement, ellipses (...) signify that the preceding parameter can be repeated a number of times. [ ] [ ] In a command statement, square brackets indicate an optional parameter. Two or more parameters in square brackets with a vertical bar ( ) between them indicate a choice of optional parameters. { } In a command statement, two or more parameters in braces with a vertical bar ( ) between them indicate a choice of required parameters. Menus and Menu Commands Dialog Boxes, Tabs, Fields, Check Boxes, and Command Buttons Variable Field Text KEYS Labels This style indicates menu and menu commands. A vertical bar ( ) separates the menus from the submenus or menu commands. The vertical bar also indicates the order in which you should click the menus, submenus, and menu commands. This style indicates dialog boxes, tabs, fields, check boxes, and command buttons. This style indicates variable information you type in a dialog box field. Uppercase body text indicates keys on a keyboard, such as the TAB or ENTER keys. Keys used in combination are connected with a plus symbol (+). This style designates physical components on Kentrox products such as jumpers, switches, and cable connectors. ii

5 About this Document: Document Conventions Table 1 Document Conventions (Continued) Convention Note: Important: Tip: CAUTION: WARNING: LASER DANGER: Meaning Note messages emphasize or supplement important points of the main text. Important messages provide information that is essential to the completion of a task. Tip messages provide information that assists users in operating equipment more effectively. Caution messages indicate that failure to take a specified action could result in loss of data and/or harm to the software or hardware. Warning messages indicate that failure to take a specified action could result in physical harm to the user. Laser danger messages indicate that failure to take a specified action could result in eye damage or blindness to the user due to overexposure to invisible laser radiation. iii

6 About this Document: Cautions and Warnings Cautions and Warnings Electrostatic Discharge Caution CAUTION: Kentrox equipment and its peripherals contain electrostatic sensitive components. Proper handling, shipping, and storage precautions must be exercised: Ground Caution You must remove and install cards in a static-free environment. Wear an antistatic wrist strap that is plugged into the Kentrox equipment so you are grounded at the same point as the equipment. Do not remove cards from their antistatic plastic bags until you are ready to install them into the chassis. Immediately after you remove a card from the chassis, you must insert it into its antistatic bag. When the cards are not in use, keep them in their antistatic plastic bags. Do not ship or store cards near strong electrostatic, electromagnetic, or radioactive fields. CAUTION: For Kentrox equipment to operate safely and correctly, there must be a safety ground strap between the equipment ground bolts and the office ground. Proper Cooling Caution ENSURE PROPER COOLING CAUTION: When AIfocus 3210 is installed into an AI180 AIswitch series 180 chassis, the chassis must be equipped with the AIcool chassis cooling and Baffle-HS heat baffle with sensor assemblies. The AI180I AIswitch series 180 integrated chassis has a built-in fan and baffle assembly and does not require additional assemblies. iv

7 About this Document: Cautions and Warnings FCC Warning The Federal Communications Commission has set limits for emitted radio interference, and AIfocus 3210 is constructed with this electromagnetic interference (EMI) limitation in mind. AIfocus 3210 is classified under FCC regulations as a Class A device, that is, a device for use in commercial environments and not in residential areas. This device has been tested and shown to comply with the following FCC rule: Part 15 Subpart J. Operation of this equipment in a residential area may cause interference to radio and TV reception, requiring the user to take whatever steps are necessary to correct the interference. Information is available from the FCC describing possible corrective actions. To maintain low EMI levels, we suggest that you use only metal connectors and shielded cable grounded to the frame. Specifications are subject to change without notice. v

8 About this Document: Customer Assistance Customer Assistance Kentrox offers technical support 24 hours a day, seven days a week. Before you contact Kentrox for assistance, please have the following information available: The type of hardware and software you are using The error number and exact wording of any messages that appeared on your screen What happened and what you were doing when the problem occurred How you tried to solve the problem Web Site Support Support is available 24 hours a day using our Web site at: Support support is available 24 hours a day. When you use support, please be sure to include the details of your problem within the . To contact Technical Support, send to: techsupport@aiinet.com Phone Support Phone support is available. When you call Kentrox for support, please be sure you are at your computer and have the details of your problem available. To contact Technical Support, call (866) Kentrox Product Documentation To order documentation, please contact your sales representative at (800) or +1 (614) You can also access and view the most current versions of Kentrox product documentation on our Web site at: vi

9 Table of Contents Chapter 1: Product Description AIfocus 3210 Description Functionality Features Software and Configuration Upload/Download User Accounts and User Permission Levels BOOTP and TFTP Clients RMON Spanning Tree Protocol MAC Address Learning Table MAC Address Filtering MAC Address Security User Selectable Port Modes VLAN Providing Port-Based Overlapping Remote and Local Configuration Diagnostic and Resource Monitoring Small Form Factor Pluggables System Architecture Technical Specifications Chapter 2: Hardware and Installation Front Panel Components Fiber Connector Guard Installation Front Panel Connectors Chapter 3: System Configuration Configuration System Starting a Menu Session Ending a Menu Session Menu Navigation Menu Names Selecting Menu Items Types of Menu Items Accessing the AI198 Menu System TOC-1

10 Table of Contents Connecting to the AIfocus Direct Cable Telnet AI198 Command Line Interface Session Timeouts Disconnecting from the AIfocus Standalone Configuration Standalone TACACS+ Server Configuration Downloading or Updating Software Chapter 4: System and Configuration Commands Command Set Overview User Permission Modes System Command Set add-account add-cf-entry add-lt-entry chg-account clrlog cold-reset date del-account del-cf-entry del-lt-entry del-tacacs-srv diag-mem exit find-lt-entry get-auth-type get-bootp get-cf-entry get-crash get-eth-stats get-local-port get-lt-entry get-par-file get-tacacs-srv get-tftp-server get-users help init-nvram log TOC-2

11 Table of Contents mac-security par-upld passwd set-auth-type set-bootp set-local-port set-par-file set-prt-label set-prt-mode set-prt-state set-tacacs-srv set-tftp-server sholog show staslc sync-flash update who IP Command Set arp get-gatew get-ip get-ip-conf get-mac ping set-gatew set-ip set-ip-conf STP Command Set get-st-bcfg get-st-pcfg get-st-syscfg get-stp set-br-fwdel set-br-hellot set-br-maxage set-br-prio set-prt-enb set-prt-pcost set-prt-prio set-stp SNMP Command Set TOC-3

12 Table of Contents add-trap del-trap get-auth get-comm get-traps set-auth set-comm VLAN Command Set del-prt-vlan del-vlan get-vlan set-prt-vlan set-prt-vmode set-vlan TOC-4

13 1 Product Description This chapter provides the overview, features and functionality, system architecture, and technical specification of the AIfocus 3210 Ethernet Concentration Solution. Guide to this Chapter AIfocus 3210 Description Functionality Features System Architecture Technical Specifications 1-1

14 Product Description: AIfocus 3210 Description AIfocus 3210 Description The AIfocus 3210 Ethernet Concentration Solution provides high speed Ethernet connectivity between network elements (NEs) and operational support systems (OSS) in a carrier s remote network site(s). The AIfocus 3210 enables 10/100/1000Base connectivity to and from a site where combinations of AIswitch chassis or AIscouts are locally and remotely deployed. The AIfocus 3210 consists of twelve 10/100Mbs ports and two 1000Mbs ports. Two front panel craft ports enable 10/100BaseT and RS-232 asynchronous port connectivity providing local access for diagnostic or configuration purposes. 1-2

15 Product Description: Functionality Functionality The AIfocus 3210 provides the following functionality: Twelve 10/100BaseT Auto-sensing Ethernet ports based on IEEE 802.3X standard Two Optical Interfaces, single mode and multi-mode, 1000Mbps up-link to enable dual AIfocus 3210 connectivity NEBS level 3 Certified FCC Part 15 Class A Spanning tree protocol (STP) based on IEEE 802.1D standard Virtual local area network (VLAN) providing port-based overlapping Custom media access control (MAC) filtering MAC address security BootP and trivial file transfer protocol (TFTP) clients for card initialization and initialization storage Multiple level security access MIB-II compatible and SNMP manageability including remote monitoring (RMON) (Groups 1, 2, 3, & 9) for performance monitoring Works in an AIswitch series chassis 180, 130, and as a standalone card 1-3

16 Product Description: Features Features The AIfocus 3210 supports the following features: Software and Configuration Upload/Download The AIfocus 3210 provides the ability to upload or download new firmware releases and configurations using FTP. User Accounts and User Permission Levels The AIfocus 3210 supports up to 50 user accounts with 3 different permission profiles (supervisor, management and status). BOOTP and TFTP Clients The AIfocus 3210 has the ability, when in standalone mode, to get initialization information from external server(s) and to store the initialization configuration to external server(s) using BOOTP and TFTP protocols. RMON The AIfocus 3210 supports RMON groups 1, 2, 3, and 9. Spanning Tree Protocol The AIfocus 3210 supports the common spanning tree protocol for all ports based on IEEE 802.1D standard. MAC Address Learning Table The AIfocus 3210 address learning table supports up to 16,384 MAC address entries. MAC Address Filtering The AIfocus 3210 supports MAC address filtering. MAC address filtering allows the user to specify one or more destination ports to which the system forwards packets having a particular destination MAC address. In addition, the user can specify one or more source ports to use in creating a blocking filter. A blocking filter will block packets destined for the filtered MAC address on all ports not specified in the source port mapping for the filter. MAC Address Security The AIfocus 3210 supports configurable MAC address security on the switch. MAC address security associates a list of MAC addresses with an Ethernet port and blocks the forwarding of traffic received on the port from MAC addresses not on the list. 1-4

17 Product Description: Features User Selectable Port Modes The AIfocus 3210 allows the user to select the mode of the 10/100 Ethernet ports (speed and duplex). The user can set the individual ports to auto-negotiate or can explicitly specify the ports speed and duplex. This function is not available on the Gigabit port, that will always run in 1Gigabit full-duplex mode. VLAN Providing Port-Based Overlapping The AIfocus 3210 supports port-based VLAN (based on IEEE standard) with the ability to provide overlapping VLANs such that ports can be placed in multiple VLANs to create VLAN trunks. Remote and Local Configuration The AIfocus 3210 can be configured from the AI198 by accessing the AI198 menu system. The system is accessible via a Telnet session or by connecting a terminal into the front panel craft port. The AIfocus 3210 has a command line interface that can be accessed from the craft port and/or from a Telnet session. Diagnostic and Resource Monitoring Commands are available to view diagnostic data about existing connections and internal system information. Small Form Factor Pluggables The Gigabit ports support 850nm and 1310nm pluggable SFPs. 1-5

18 Product Description: System Architecture System Architecture The AIfocus 3210 provides two 1000BaseSx/Fx Gigabit Ethernet up-link ports that can be used to connect, or stack, to another AIfocus The AIfocus 3210 also provides twelve 10/100BaseT Ethernet ports for connectivity to multiple attached Ethernet switching devices such as network elements or a router for WAN connectivity. The AIfocus 3210 can be extended through the network by adding an AIwan E1/T1 Ethernet Extension Line Card which can extend the Ethernet connection via an E1 or T1 WAN interface. Refer to Figure 1-1 for an illustration of the AIfocus 3210 system architecture. AIfocus 3210 AIfocus 3210 AIfocus 3210 AIwan AIscout WAN 1Gb (1000Base-X) 1Gb (1000Base-X) T1 WAN Interface (10/100BaseT) Router (10/100BaseT) (10/100BaseT) Network Elements (10/100BaseT) (10BaseT) Network Element (10/100BaseT) Async Async Network Element Telnet Terminal Craft Terminal Craft Terminal Figure 1-1 AIfocus 3210 System Architecture 1-6

19 Product Description: Technical Specifications Technical Specifications Table 1-1 provides the technical specifications of the AIfocus Table 1-1 Technical Specifications Specification Description Ethernet Ports Twelve 10/100BaseT Ethernet ports Two 1000BaseSx/Fx Ethernet SFP ports One IRB port One 10/100BaseT Ethernet port for remote diagnostics or configuration Asynchronous Craft Port Installation Current Draw Power Consumption Provides local access for diagnostic or configuration purposes Requires one slot in an AIswitch chassis (can be hotswapped) 3.0 A, 5V 15W The gigabit Ethernet ports are compatible with SFP-850 or SFP-1310 modules. The SFP-850 module uses 50 or 62.5 micron multi-mode fiber. Table 1-2 describes the specifications of the SFP-850 module. Table 1-2 SFP-850 Specifications Specification Peak wavelength Spectral width of laser Minimum launch power Maximum launch power Minimum receive level Maximum receive level Description 840 nm minimum to 860 nm maximum 0.85 nm -10 dbm -4 dbm -17 dbm Note: The receive level is specified at a BER less than 1E dbm Note: The receive level is specified at a BER less than 1E

20 Product Description: Technical Specifications The SFP-1310 module uses multi-mode or single-mode fiber. Table 1-3 describes the specifications of the SFP-1310 module. Table 1-3 SFP-1310 Specifications Specification Peak wavelength Spectral width of laser Minimum launch power Maximum launch power Minimum receive level Maximum receive level Description 1270 nm minimum to 1355 nm maximum 4.0 nm -11 dbm -3 dbm -19 dbm Note: The receive level is specified at a BER less than -1E dbm Note: The receive level is specified at a BER less than -1E

21 2 Hardware and Installation This chapter provides information on the AIfocus 3210 hardware, front panel components, and installation procedures. LASER DANGER: The AIfocus 3210 uses Class IIIb laser devices. Invisible laser radiation is present when the optic connectors are open. Always avoid direct or scattered exposure to the beam when servicing or installing customer cables. Also avoid exposure from receive cables connected to any laser device. Guide to this Chapter Front Panel Components Installation 2-1

22 Hardware and Installation: Front Panel Components Front Panel Components The AIfocus 3210 has twelve 10/100BaseT and two 1000BaseSx/Fx Ethernet ports. The AIfocus 3210 also has a 10/100BaseT Ethernet and an RS-232 asynchronous craft port for local configuration. Refer to Figure 2-1 on page 2-3 for an illustration of the AIfocus 3210 front panel components and indicators. Fiber Connector Guard The AIfocus 3210 has 2-inch metal standoffs attached to the card s faceplate. These are used to attach the fiber connector guard, which is a clear plastic cover that surrounds and protects the fiber connectors. Slotted holes on the fiber connector guard allow you to attach and remove it without removing any of the standoffs. CAUTION: Use of controls or adjustments or performance of procedures other than those specified herein may result in hazardous radiation exposure. 2-2

23 Hardware and Installation: Front Panel Components Component Description DC OK LED Indicates +5 Volts is present. FAULT DC OK G1 G2 DANGER - Invisible laser radiation when open. AVOID DIRECT EXPOSURE TO BEAM. The unit complies with 21 CFR, Subchapter J, Parts 1010 and 1040 LINK PORT12 PORT11 PORT 10 PORT 9 PORT 8 PORT 7 PORT 6 PORT 5 PORT 4 PORT 3 PORT 2 PORT 1 ASYNC ETHERNET CRAFT FAULT LED Laser Danger Text Port G1 & G2 SFP Connectors G1 & G2 Link LEDs Port 1 to 12 Connectors Port 1 to 12 Link LEDs ASYNC Craft Port ETHERNET Craft Port Ethernet Craft Port LINK LED Indicates card failure. DANGER - Invisible laser radiation when open. AVOID DIRECT EXPOSURE TO BEAM. The unit complies with 21 CFR, Subchapter J, Parts 1010 and Connects a fiberoptic cable to the 1000BaseSx/Fx Ethernet SFP ports. Indicates an active network link is established to the Gigabit SFP port. Connects an RJ45 cable to the 10/100BaseT Ethernet port. Indicates an active network link is established and flashes when data is being received. RS-232 asynchronous port for connecting a terminal for configuring the AIfocus 3210 and obtaining its status. 10/100BaseT port for connecting a terminal for configuring the AIfocus 3210 and obtaining its status. Indicates an active network link is established to the Ethernet craft port. LINK AIfocus 3210 Figure 2-1 AIfocus

24 Hardware and Installation: Installation Installation The AIfocus 3210 is installed in an AIswitch chassis. The AIfocus 3210 can be installed into a chassis that is powered up. CAUTION: The AIswitch and its peripherals contain electrostatic sensitive components. Exercise proper handling, shipping, and storage precautions. LASER DANGER: Invisible laser radiation when open. Avoid direct expose to beam. To install an AIfocus 3210 into an AIswitch chassis: 1. Align the AIfocus 3210 with the card guides on the chassis. 2. Carefully slide the card into the chassis until it fully seats into the backplane connector. 3. Tighten the two front panel retaining screws to secure the card to the chassis. 4. Observe the DC OK LED to ensure that DC powered is applied to the card. 5. Observe the FAULT LED to ensure that no card faults exist. Note: When the AIfocus 3210 is installed into a chassis that is subsequently powered up, or when the chassis is already powered up before card installation, the card automatically runs a set of self-test diagnostics. During the self-test diagnostics, the front panel LED indicators will blink. If the AIfocus 3210 passes the self-test diagnostics, the FAULT LED indicator is off, and the card enters into a normal operation state. If the AIfocus 3210 fails the self-test diagnostics, the FAULT LED indicator will remain lit, and the card enters a halt state, requiring replacement. Front Panel Connectors The AIfocus 3210 supports the following front panel connectors: 10/100BaseT Ethernet Port Craft Port SFP Port 2-4

25 Hardware and Installation: Installation 10/100BaseT Ethernet Port The AIfocus 3210 has thirteen 10/100BaseT Ethernet front panel connectors for Ethernet switching and craft terminal support. Refer to Table 2-1 for an illustration and pin assignments for this connector. Table 2-1 RJ45 10/100BaseT Front Panel Connector Description Pin Assignments Pin 1 Pin 8 Specification Pin Signal I/O 1 TD+ Output 2 TD- Output 3 RD+ Input 6 RD- Input 4,5,7,8 AC terminated to ground Note: The Ethernet ports support automatic MDI/MDIX specification as described in section of IEEE 802.3AB. Automatic MDI/MDIX eliminates the need for crossover cables for similar devices. This automatic feature is disabled when the port is forced to 10MB or 100MB mode. Table 2-1 above shows the MDIX pinout of the port when forced to either 10MB or 100MB mode. Refer to set-prt-mode on page 4-30 for the system command to configure the port speed and duplex mode of operation. 2-5

26 Hardware and Installation: Installation Craft Port The AIfocus 3210 has one asynchronous craft front panel connector. Refer to Table 2-2 for an illustration and pin assignments for this connector. Table 2-2 RJ45 Craft Port Connector Description Specification Pin Assignments Pin Signal I/O Pin 1 Pin 8 3 TD Output 6 RD Input 4 & 5 GND 1 & 8 Internally Tied Together 2 No Connection Note: Any pin assignment not referenced on a connector is not connected. SFP Port The AIfocus 3210 has two 1000BaseSxFx small form pluggable (SFP) fiberoptic front panel connectors. Refer to Table 2-3 for an illustration and pin assignments for this connector. Table 2-3 SFP 1000BaseSxFx Front Panel Connector Description Specification Pin Assignments Pin Signal I/O TX RX 1 TX Output 2 RX Input 2-6

27 3 System Configuration This chapter provides information on configuring the AIfocus 3210 by using the AI198 menu system. The AI198 must be running software version 2.00 or later. This menu system can be used only when the AIfocus 3210 is operating in the switch-mode (non-standalone mode) and is disabled. Guide to this Chapter Configuration System Menu Navigation Accessing the AI198 Menu System Connecting to the AIfocus 3210 Standalone Configuration TACACS+ Server Configuration Downloading or Updating Software 3-1

28 System Configuration: Configuration System Configuration System Starting a Menu Session To access the AI198 menu system perform the following steps. 1. Log into the AI At the command prompt (>), enter menu. The Main Menu appears. >menu 01+Configure options affecting the system as a whole 02+Create, delete, or modify a destination name 03+Display all destination names 04+Configure cards 05+Set or remove connection restrictions based on port numbers 06+Display all connection restrictions 07+Configure slot density 08+Configure the alias translation table 09+Display the list of alias translation entries Main Menu 21 Exit the menu system Enter item number and optional ",value" then push <CR> key Ending a Menu Session After completing work within the AI198 menu system, follow these steps to close the menu session. 1. In the Main Menu, enter 21. This returns you to the command prompt. 2. At the command prompt, enter logoff. Note: You can also log off by entering lo, bye, or logout. 3-2

29 System Configuration: Menu Navigation Menu Navigation Menu Names All menus following the Main Menu have a numerical name at the top right corner of the menu. This numerical name displays your location within the menu system. Each digit in the name represents a menu item that was previously selected. For example, menu 4.2 indicates that menu item 4 was selected and then menu item 2 was selected. Selecting Menu Items Each menu contains a list of numbered menu items that represent parameters the system manager can configure. In general, to make a selection, type the number of the desired menu item and press ENTER. For some menu items more data is required. When entering a menu item number it is not necessary to include leading zeros. For example, you can enter 2 instead of 02; both ways will work. Types of Menu Items The following four types of menu items are available: Submenus Toggle Menu Items Data Menu Items Menu Item Functions Submenus Submenus take you deeper into the menu hierarchy. They provide additional menus for configuring the system. Menu items that display submenus have a plus sign (+) next to their menu item number. In this example, menu item 02 will display a submenu. 02+Configure as AIfocus network interface card Some submenus ask you to make a selection from a list and then redisplay the previous menu showing your selection. Other submenus have their own submenus that request additional information. After saving your entries the top-level menu reappears. Toggle Menu Items Toggle menu items show two or more values that can be selected for a parameter. Toggle menu items have an asterisk (*) next to their menu item number. To select a value, type the menu item number and press ENTER. Each time you type the menu item number and press ENTER you toggle to the next selection. 3-3

30 System Configuration: Menu Navigation In this example, menu item 05 is a toggle menu item. 04 The card's description is *Card is included when * is used with STPSLC, DISABL, or ENABL ON For menu item 06*TCP Default Window Size, you can toggle between 200, 512, 1024, and For menu item 07*TCP Send Ahead, you can toggle between ON and OFF. Data Menu Items Data menu items request text entries (such as destination names and card descriptions) or numeric values (such as port numbers and IP addresses). To enter information in a data menu item, type the menu item number followed by a comma, the configuration information, and press ENTER. To change what you have typed, use the BACKSPACE key to backup to the desired position in the text and retype the changes. However, once you press the ENTER key, changes can be made only by selecting that menu item and reentering the data. In this example the menu item requests a baseport number. 01 The baseport of the card to edit is To enter a baseport of 32, enter: 1,32 The menu reappears showing the baseport number that you entered. 01 The baseport of the card to edit is To change configuration data that has been entered for a menu item, type the menu item number followed by a comma, then enter the new data. Menu Item Functions Menu item functions appear at the bottom of each menu. Most menus have only the last two menu items. This sample screen displays the menu items and Table 3-1 on page 3-5 provides a description of each menu item. 17 Display first page 18 Next page 19 Delete entry 20 Save the changes made 21 Exit this menu with no changes Enter item number and optional ",value" then push <CR> key 3-4

31 System Configuration: Menu Navigation Table 3-1 Menu Item Descriptions Menu Item Description 17 Displays the first page of information. 18 Displays additional pages of information. 19 Deletes an entry. 20 Saves the data you have entered and redisplays the previous related menu. Configuration entries take effect only after they are saved. 21 Exits a menu without saving the entries you just made. All items on the menu return to the previously configured values. 3-5

32 System Configuration: Accessing the AI198 Menu System Accessing the AI198 Menu System To access the AI198 menu system for configuring the AIfocus 3210, do the following: 1. Log into the AI198 (must be running software version 2.00 or higher). 2. At the system prompt (>), enter menu. The Main Menu appears. >menu 01+Configure options affecting the system as a whole 02+Create, delete, or modify a destination name 03+Display all destination names 04+Configure cards 05+Set or remove connection restrictions based on port numbers 06+Display all connection restrictions 07+Configure slot density 08+Configure the alias translation table 09+Display the list of alias translation entries Main Menu 21 Exit the menu system Enter item number and optional ",value" then push <CR> key 3. From the Main Menu, enter 4. Menu 4 appears. >4 Menu 4 01 The baseport of the card to edit is Configure as Empty Slot 03 The card's destination name is ******** 04 The card's description is *Card is included when * is used with STPSLC, DISABL, or ENABL ON 18+Card initialization strings 20 Save the changes made 21 Exit this menu with no changes Enter item number and optional ",value" then push <CR> key 4. For menu item 01 The baseport of the card to edit is, enter the baseport number of the AIfocus 3210 (for example 1,96). 3-6

33 System Configuration: Accessing the AI198 Menu System 5. In Menu 4, enter 2. Menu 4.2 appears. >2 Menu Configure as Empty Slot 02+Configure as AI183/AI185 standard 4/16 port card 03+Configure as AI193/194 Ethernet card with slot expansion of Configure as AI192/196 X.25 network card with slot expansion of Configure as ASP or Advanced Smart Line Card with slot expansion of Configure as AI196-I network card with LocalView 07 Configure as AI2524 Router card 08 Configure as AI294 Ethernet Switch card 09+Configure as AI196-I network interface card with menu support 10 Configure as Independent Smart Line Card 11+Configure as AI296 network interface card 12+Configure as AI192/196 with full menu support and slot expansion of Configure as AI285 network interface card 14+Configure as AI232 network interface card 15 Configure as AI Modem 16 Configure as AIFlex Fiber LAN Extender Card 17 Configure as AI120 Card 18 Configure as AIE1 Card 19 Configure as AITC Card 20 Next Page 21 Exit this menu with no changes Enter item number and optional ",value" then push <CR> key 6. In Menu 4.2, enter 20. Page two of Menu appears. >20 01 Configure as AIfocus Ethernet Switch Line Card 02+Configure as AIWAN E1 Ethernet Extension Line Card 03+Configure as AIWAN T1 Ethernet Extension Line Card Menu 4.2 pg 2 20 Previous Page 21 Exit this menu with no changes Enter item number and optional ",value" then push <CR> key 7. In Menu , enter 1. The AIfocus Ethernet Switch Line Card configuration menu appears. 3-7

34 System Configuration: Connecting to the AIfocus 3210 Connecting to the AIfocus 3210 You can connect to the AIfocus 3210 using one of the following four methods: Via a direct cable to the AIfocus 3210 to the RS-232 asynchronous port. Via a direct cable to the AIfocus 3210 to the Ethernet craft port. Opening a Telnet session and connect directly to the AIfocus 3210 (after an IP address has been configured). Using the AI198 command line interface (in CLC/switch mode only). Direct Cable Connect one end of a craft port cable (CAB213) into a terminal or a PC running emulation software. Connect the other end to the AIfocus 3210 RJ45 connector labeled async. Complete the following to connect to the AIfocus 3210 via a direct cable through the craft port. 1. Set the VT100 terminal or terminal emulator to the desired settings and press ENTER. The login banner appears.. _ / Applied Innovation Inc. _ / _ _ Login: 2. Enter ai or your personal login. The system prompts you to enter a password. Password: 3. Enter ai or your personal password. The AIfocus 3210 prompt appears. Telnet Complete the following to open a Telnet session and connect to the AIfocus Note: Before you can telnet to the AIfocus 3210, you must assign an IP address to it. Refer to set-ip on page 4-42 for information on configuring IP addresses. 1. Telnet to the IP address of the AIfocus

35 System Configuration: Connecting to the AIfocus 3210 The login banner appears.. _ / Applied Innovation Inc. _ / _ _ Login: 2. Enter ai or your personal login. The system prompts you to enter a password. Password: 3. Enter ai or your personal password. The AIfocus 3210 prompt appears. AI198 Command Line Interface You can use the AI198 command line interface to issue the status level commands described in Chapter 4: System and Configuration Commands. For more information on using the AI198 command line interface, refer to the current AI198 System Manager/User s Guide. Note: You can only use this method if the AIfocus 3210 is in an AIswitch. You cannot use this method if you are configuring the AIfocus 3210 as a standalone unit. All users, regardless of their permission profile, can only execute commands associated with the status permission mode when using the AI198 command line interface. To execute supervisor or manager commands, log into the AIfocus 3210 using a direct cable connection or through a Telnet session. winslc Use the following format to issue the commands described in this manual via the winslc command. 3-9

36 System Configuration: Connecting to the AIfocus 3210 winslc baseport command parameters Parameters baseport command parameters Indicates the baseport of the target interface card. Represents window transaction commands (not commands from the command prompt). Represents window transaction command parameters. Session Timeouts Refer to Table 3-2 for session timeout information on a Telnet, craft port, or FTP connection. Table 3-2 Connection Session Timeout Information Telnet Craft Port FTP One-minute timeout on the login and password prompts Three login attempts before the connection is torn down Shell connections have a 10-minute timeout before the connection is torn down One-minute timeout on the password prompt before the system returns you to the login prompt No restrictions on number of login attempts Shell connections have a 10-minute timeout before the system returns you to the login prompt 10-minute timeout on the login and password prompts Three login attempts before the connection is torn down Shell connections have a 10-minute timeout before the connection is torn down Disconnecting from the AIfocus 3210 If directly connected via the craft port or connected through a Telnet session do the following: Enter exit at the AIfocus 3210 prompt. 3-10

37 System Configuration: Standalone Configuration Standalone Configuration This section describes the steps you need to complete before you can configure an AIfocus 3210 as a standalone unit. Standalone If you plan to configure the AIfocus 3210 as a standalone unit, you must first establish a connection to the AIfocus 3210 using a Telnet session or by connecting a terminal into the front panel craft port. Note: The following commands can only be used if the AIfocus 3210 is set up as a standalone unit. You will not be able to use these commands if the AIfocus 3210 is in an AIswitch: \ add-account add-trap del-trap del-account chg-account get-users passwd 3-11

38 System Configuration: TACACS+ Server Configuration TACACS+ Server Configuration For all craft port, telnet, and FTP sessions, TACACS+ (terminal access controller access control system plus) will be implemented to allow username and password information to be stored on a separate server and authenticated remotely. Use the following commands listed in Chapter 4: System and Configuration Commands to configure and view TACACS+ settings and status. del-tacacs-srv get-auth-type get-tacacs-srv set-auth-type set-tacacs-srv Important: TACACS+ server settings have no effect on operation when AIfocus 3210 is not running in standalone mode. 3-12

39 System Configuration: Downloading or Updating Software Downloading or Updating Software 1. Open an FTP session and transfer the configuration (.cfg) file or the firmware (.img) file to the AIfocus Note: The.cfg file is an ASCII file containing configuration information. The.img file is a binary file containing the firmware. The Transfer complete message appears. 2. Log into the AIfocus Refer to the Connecting to the AIfocus 3210 on page At the AIfocus 3210 prompt, enter cold-reset. The following message appears: Are you certain you wish to reset this card? Y/N 4. Enter Y. The Resetting the Card!!! message appears. 5. Reconnect to the AIfocus 3210 to access the login prompt. Refer to the Connecting to the AIfocus 3210 section of this chapter. Note: Enter show version to verify the version of new or updated software. 3-13

40 System Configuration: Downloading or Updating Software 3-14

41 4 System and Configuration Commands This chapter provides a description and format for each AIfocus 3210 system and configuration command. The system commands enable you to perform administrative and maintenance tasks and functions. The configuration commands enable you to configure the AIfocus 3210 operating parameters. Guide to this Chapter Command Set Overview System Command Set IP Command Set STP Command Set SNMP Command Set VLAN Command Set 4-1

42 System and Configuration Commands: Command Set Overview Command Set Overview The AIfocus 3210 supports the following command set: System Command Set IP Command Set STP Command Set SNMP Command Set all Commands in AIfocus Command Group: all add-account get-bootp get-vlan set-par-file add-cf-entry get-cf-entry help set-prt-enb add-lt-entry get-comm init-nvram set-prt-label add-trap get-crash log set-prt-mode arp get-eth-stats mac-security set-prt-pcost chg-account get-gatew par-upld set-prt-prio clrlog get-ip passwd set-prt-state cold-reset get-ip-conf ping set-prt-vlan date get-local-port set-auth set-prt-vmode del-account get-lt-entry set-bootp set-stp del-cf-entry get-mac set-br-fwdel set-tftp-server del-lt-entry get-par-file set-br-hellot set-vlan del-prt-vlan get-st-bcfg set-br-maxage sholog del-trap get-st-pcfg set-br-prio show del-vlan get-st-syscfg set-comm staslc diag-mem get-stp set-gatew sync-flash exit get-tftp-server set-ip update find-lt-entry get-traps set-ip-conf who get-auth get-users set-local-port User Permission Modes User permission modes are used to determine who can use specific commands. The three user permission modes are: Status Supervisor Management 4-2

43 System and Configuration Commands: Command Set Overview Status users can only use commands that have a status user permission profile. Management users can use commands that have either a status or a management user permission profile. Supervisor users can use commands that have all three user permission profiles. Note: All users, regardless of their permission profile, can only execute commands associated with the status permission mode when using the AI198 command line interface. To execute supervisor or management commands, log into the AIfocus 3210 using a direct cable connection or through a Telnet session. You can modify the user accounts by using the add-account, del-account, and chgaccount commands described in this chapter. Table 4-1 lists all the AIfocus 3210 commands and their user permission modes. Table 4-1 Default User Permission Modes Command Name Command Set User Permission Mode add-account system supervisor add-cf-entry system management add-lt-entry system management add-trap snmp management arp ip status chg-account system supervisor clrlog system management cold-reset system management date system status del-account system supervisor del-cf-entry system management del-lt-entry system management del-prt-vlan vlan management del-trap snmp management del-vlan vlan management diag-mem system status 4-3

44 System and Configuration Commands: Command Set Overview Table 4-1 Default User Permission Modes (Continued) Command Name Command Set User Permission Mode exit system status find-lt-entry system status get-auth snmp status get-bootp system status get-cf-entry system status get-comm system status get-crash system status get-eth-stats system status get-gatew system status get-ip system status get-ip-conf system status get-local-port system status get-lt-entry system status get-mac ip status get-par-file system status get-st-bcfg stp status get-stp stp status get-st-pcfg stp status get-st-syscfg stp status get-tftp-server system status get-traps snmp status get-users system supervisor get-vlan vlan status help system status init-nvram system management 4-4

45 System and Configuration Commands: Command Set Overview Table 4-1 Default User Permission Modes (Continued) Command Name Command Set User Permission Mode log system status mac-security system management par-upld system management passwd system status ping ip status set-auth snmp management set-bootp system management set-br-fwdel stp management set-br-hellot stp management set-br-maxage stp management set-br-prio stp management set-comm snmp management set-gatew ip supervisor set-ip ip supervisor set-ip-conf ip supervisor set-local-port system status set-par-file system management set-prt-enb stp management set-prt-label system management set-prt-mode system management set-prt-pcost stp management set-prt-prio stp management set-prt-state system management set-prt-vlan vlan management set-prt-vmode vlan management 4-5

46 System and Configuration Commands: Command Set Overview Table 4-1 Default User Permission Modes (Continued) Command Name Command Set User Permission Mode set-stp stp management set-tftp-server system management set-vlan vlan management sholog system status show system status staslc system status sync-flash system management update system status who system status 4-6

47 System and Configuration Commands: System Command Set System Command Set This section describes the system command set supported by the AIfocus system Commands in AIfocus Command Group: system add-account exit get-users set-prt-mode add-cf-entry find-lt-entry help set-prt-state add-lt-entry get-auth-type init-nvram set-tacacs-srv chg-account get-bootp log set-tftp-server clrlog get-cf-entry mac-security sholog cold-reset get-crash par-upld show date get-eth-stats passwd staslc del-account get-local-port set-auth-type sync-flash del-cf-entry get-lt-entry set-bootp update del-lt-entry get-par-file set-local-port who del-tacacs-srv get-tacacs-srv set-par-file diag-mem get-tftp-server set-prt-label add-account This command adds a user account to the AIfocus When you initiate this command, the system prompts you to enter a new user name and a password. Note: This command is only valid when you are configuring the AIfocus 3210 as a standalone unit. add-account user_level Parameter user_level Indicates the permission mode to assign to the user account you are adding. Valid values are stat, supv, and mgmt. add-account supv Enter User Name: test Enter Password: User account for test has been added. 4-7

48 System and Configuration Commands: System Command Set add-cf-entry This command creates or changes a custom filter. A custom filter specifies one or more destination ports where the system forwards frames of a particular destination MAC address. You can create or change up to 48 custom filters. Note: Adding or changing a custom filter may require several seconds to complete before a completion message is displayed. During this processing time the completion message may be superseded by other messages. If this happens, Log messages have been missed on this session. Use <sholog> to view system log appears. You can check the log to confirm that the configuration update was stored. add-cf-entry {mac} {lock-on lock-off perm} {dports} [sports] Parameters mac lock-on lock-off perm dports Indicates the MAC address. Enter the value as a 6-byte, hexadecimal sequence, separated by either hyphens (-) or colons (:). Indicates that the custom filter entry will exist after the aging timer expires. The entry disappears after a reset occurs. Indicates that the custom filter entry will exist only until the aging timer expires. (The timer is controlled by the AIfocus 3200 and defaults to 5 minutes.) Indicates that the custom filter entry will be stored in NVRAM. It exists after the aging timer expires and after a reset occurs. It disappears after you enter init-nvram and reboot. While it exists in NVRAM, you can view the custom filter entry using the AIswitch menu Defines the ports where frames matching the filter will be sent. The following value/port correspondences exist: Values 1 to 12 correspond to Ethernet ports 1 to 12. Value 13 corresponds to the IRB. Value 14 corresponds to the Ethernet craft port. Values 15 and 16 correspond to Gigabit port 1 (G1) and Gigabit port 2 (G2) respectively. Individual values and values ranges are separated with commas and dashes (for example, 1-4,9,11,13-16). 4-8

49 System and Configuration Commands: System Command Set sports Defines a set of source ports to which the filter applies. If the source port list is not present, the custom filter will apply to all ports on the switch. If the source port list is present, the custom filter will: Forward packets to destination ports if those packets match the filter and are received on a port within the source port list. Block packets that match the filter, but that are received on a port that is not within the source port list. Note: If there is extensive traffic going to the filter, do not use a source port list. Doing so will negatively affect performance. The following value/port correspondences exist: Values 1 to 12 correspond to Ethernet ports 1 to 12. Value 13 corresponds to the IRB. Value 14 corresponds to the Ethernet craft port. Values 15 and 16 correspond to Gigabit port 1 (G1) and Gigabit port 2 (G2) respectively. Individual values and value ranges are separated with commas and dashes (for example, 1-4,9,11,13-16). The following example creates a custom filter specifying that frames with the specified destination MAC address (10:10:10:10:10:10) will be forwarded to: Ethernet ports 1 to 3 The IRB Gigabit port 2 (G2). The custom filter will exist after the aging timer expires. It will also remain after a reset. add-cf-entry 10:10:10:10:10:10 perm 1-3,13,16 Custom entry for 10:10:10:10:10:10 has been added. 4-9

50 System and Configuration Commands: System Command Set add-lt-entry This command adds an entry to the address table. add-lt-entry {mac} {lock-on lock-off perm} {port} Parameters mac lock-on lock-off port perm Indicates the MAC address for the entry to add to the address table. Indicates the entry will be deleted only upon a reset being initiated and not set to age. Indicates the learning table entry will exist only until the aging timer expires. (The timer is controlled by the AIfocus 3210 and defaults to 5 minutes.) Indicates the port whose address table should be updated with this entry. Indicates the entry is saved into non-volatile storage. add-lt-entry 00:40:72:00:d2:01 lock-off 4 adding entry 00:40:72:00:d2:01 - ok. chg-account This command changes a user account on the AIfocus When you initiate this command, the system prompts you to enter a new password and a new permission level. Note: This command is only valid when you are configuring the AIfocus 3210 as a standalone unit. chg-account logon_name Parameter logon_name Indicates the logon name of the account. 4-10

51 System and Configuration Commands: System Command Set chg-account test Enter new password: Enter new permission level: supv Account for test has been changed. clrlog This command erases the contents of the system log residing in NVRAM. The log can store up to 64 messages. (You can view the log contents using the sholog command.) clrlog cold-reset This command resets the AIfocus cold-reset cold-reset Are you certain you wish to reset this card? Y/N n Aborting reset command! date This command sets or displays the date and time. This command, with specific arguments, configures the date and time. date [mm/dd/yyyy] [hh:mm:ss] Parameters mm/dd/yyyy hh:mm:ss Configures the date. Configures the time. 4-11