User Guide
Page 4
... and IGMP query. Provides information for viewing RMON and interface statistics. Managing System Files - Viewing Statistics - Configuring VLANs - VLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single virtual...Provides information for defining file maintenance. Aggregating Ports - Configuring IP and MAC Address Information - Provides information for configuring VLANs. Configuring Quality of Service, including DSCP and CoS mapping, policies, and configuring Trust mode. Provides information for configuring ...
... and IGMP query. Provides information for viewing RMON and interface statistics. Managing System Files - Viewing Statistics - Configuring VLANs - VLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single virtual...Provides information for defining file maintenance. Aggregating Ports - Configuring IP and MAC Address Information - Provides information for configuring VLANs. Configuring Quality of Service, including DSCP and CoS mapping, policies, and configuring Trust mode. Provides information for configuring ...
User Guide
Page 8
Viewing LACP 103 Defining LACP Priority 104 Defining LACP Port 105 8 CONFIGURING VLANS VLAN Overview 106 Viewing VLAN Details 108 Viewing VLAN Port Details 109 Creating VLANs 110 Rename the VLANS 111 Modifying VLAN Settings 112 Modifying Port VLAN Settings 114 Removing VLANs 115 9 CONFIGURING IP AND MAC ADDRESS INFORMATION Defining IP Addressing 117 Configuring ARP Settings 118 Viewing ARP...
Viewing LACP 103 Defining LACP Priority 104 Defining LACP Port 105 8 CONFIGURING VLANS VLAN Overview 106 Viewing VLAN Details 108 Viewing VLAN Port Details 109 Creating VLANs 110 Rename the VLANS 111 Modifying VLAN Settings 112 Modifying Port VLAN Settings 114 Removing VLANs 115 9 CONFIGURING IP AND MAC ADDRESS INFORMATION Defining IP Addressing 117 Configuring ARP Settings 118 Viewing ARP...
User Guide
Page 9
... 153 Viewing DSCP to CoS 155 Configuring DSCP to CoS 156 Configuring Trust Settings 157 Viewing Bandwidth Settings 158 Defining Bandwidth Settings 159 Defining Voice VLAN 161
... 153 Viewing DSCP to CoS 155 Configuring DSCP to CoS 156 Configuring Trust Settings 157 Viewing Bandwidth Settings 158 Defining Bandwidth Settings 159 Defining Voice VLAN 161
User Guide
Page 13
The Switch 2948 includes the following model: Baseline Switch 2948-SFP Plus 48-Port The Switch 2948 features the following advantages: Full Gigabit speed access ports Jumbo frames...Switch 2948 Addresses Up to 256 VLANs Access control lists (ACLs) Port-based mirroring Summary of Hardware Features Table 1 summarizes the hardware features supported by the Switch 2948. CHAPTER 1: GETTING STARTED About the Switch 2948 The Switch 2948 is not supported. This makes the switch ideal for medium businesses and small enterprises seeking to build a secure converged network. If fiber SFP...
The Switch 2948 includes the following model: Baseline Switch 2948-SFP Plus 48-Port The Switch 2948 features the following advantages: Full Gigabit speed access ports Jumbo frames...Switch 2948 Addresses Up to 256 VLANs Access control lists (ACLs) Port-based mirroring Summary of Hardware Features Table 1 summarizes the hardware features supported by the Switch 2948. CHAPTER 1: GETTING STARTED About the Switch 2948 The Switch 2948 is not supported. This makes the switch ideal for medium businesses and small enterprises seeking to build a secure converged network. If fiber SFP...
User Guide
Page 30
...information has been entered correctly and the switch is powered up. 4 Open your web browser and enter the IP address of the switch) If you know your management workstation is on the switch are in VLAN 1 (the Default VLAN). See "3Com Network Management". By default, all ...sizes and complexity. Be sure the management workstation is displayed. CHAPTER 1: GETTING STARTED 19 Web Management Over the Network To manage a switch using the web interface over...
...information has been entered correctly and the switch is powered up. 4 Open your web browser and enter the IP address of the switch) If you know your management workstation is on the switch are in VLAN 1 (the Default VLAN). See "3Com Network Management". By default, all ...sizes and complexity. Be sure the management workstation is displayed. CHAPTER 1: GETTING STARTED 19 Web Management Over the Network To manage a switch using the web interface over...
User Guide
Page 60
Displays a list of interfaces. User Name - Enables an unauthorized port to join the Guest VLAN. Enabled - Disables the periodic reauthentication on the port. Figure 25 802.1X Summary Page The 802.1X Summary Page contains... settings. Current Port Control - Enables periodic reauthentication on the port. To view Port-based Authentication: 1 Click Security > 802.1X > Summary. Guest VLAN - Enables the periodic reauthentication on the port. Displays the supplicant user name. Periodic Reauthentication - Disabled - The possible field values are: Enabled - Displays...
Displays a list of interfaces. User Name - Enables an unauthorized port to join the Guest VLAN. Enabled - Disables the periodic reauthentication on the port. Figure 25 802.1X Summary Page The 802.1X Summary Page contains... settings. Current Port Control - Enables periodic reauthentication on the port. To view Port-based Authentication: 1 Click Security > 802.1X > Summary. Guest VLAN - Enables the periodic reauthentication on the port. Displays the supplicant user name. Periodic Reauthentication - Disabled - The possible field values are: Enabled - Displays...
User Guide
Page 62
...that no authentication method is used, and the session is permitted. Provides port authentication using the RADIUS server. Specifies the guest VLAN ID. This is enabled on the device. Specifies the authentication method used to authenticate the port. If the port is not.... Provides port authentication, first using the RADIUS server. If a port is denied network access via port-based authentication, but the Guest VLAN is used for port authentication. The possible field values are : RADIUS - Disables port-based authentication on the device. The possible field ...
...that no authentication method is used, and the session is permitted. Provides port authentication using the RADIUS server. Specifies the guest VLAN ID. This is enabled on the device. Specifies the authentication method used to authenticate the port. If the port is not.... Provides port authentication, first using the RADIUS server. If a port is denied network access via port-based authentication, but the Guest VLAN is used for port authentication. The possible field values are : RADIUS - Disables port-based authentication on the device. The possible field ...
User Guide
Page 63
... cannot provide authentication services to the client through the interface. Reauthentication Period - Auto - Force Authorized - Specifies whether the Guest VLAN is reauthenticated. Disabled - Displays the time span (in seconds) in which the selected port is enabled on the port. Force...state without client port based authentication. The possible field values are enabled, and the device is the default. If a Guest VLAN is 3600 seconds. 2 Define the fields. 3 Click Apply. Disables the periodic reauthentication on the device. Enables periodic reauthentication ...
... cannot provide authentication services to the client through the interface. Reauthentication Period - Auto - Force Authorized - Specifies whether the Guest VLAN is reauthenticated. Disabled - Displays the time span (in seconds) in which the selected port is enabled on the port. Force...state without client port based authentication. The possible field values are enabled, and the device is the default. If a Guest VLAN is 3600 seconds. 2 Define the fields. 3 Click Apply. Disables the periodic reauthentication on the device. Enables periodic reauthentication ...
User Guide
Page 66
... criteria. The possible field values are as follows: Permit - CoS Mask - Indicates the destination MAC address Mask. Matches the packet's VLAN ID to filter CoS tags. Indicates the source MAC address. VLAN ID - CoS - Contains a list of protocols. Priority - Indicates the rule priority, which determines which meet the ACL criteria. Source Mask...
... criteria. The possible field values are as follows: Permit - CoS Mask - Indicates the destination MAC address Mask. Matches the packet's VLAN ID to filter CoS tags. Indicates the source MAC address. VLAN ID - CoS - Contains a list of protocols. Priority - Indicates the rule priority, which determines which meet the ACL criteria. Source Mask...
User Guide
Page 69
...among various types of protocols. The options are 1 to 4094. Defines the CoS mask used to the ACE. Matches the packet's VLAN ID to classify network traffic. The possible field values are as follows: Permit - Indicates the ACL forwarding action. Drops packets which... meet the ACL criteria. 2 Define the fields. 3 Click Apply. 58 CHAPTER 4: MANAGING DEVICE SECURITY VLAN ID - CoS Mask - Forwards packets which meet the ACL criteria. CoS - Ethertype - Deny - The Rule Setup settings are configured, and the device...
...among various types of protocols. The options are 1 to 4094. Defines the CoS mask used to the ACE. Matches the packet's VLAN ID to classify network traffic. The possible field values are as follows: Permit - Indicates the ACL forwarding action. Drops packets which... meet the ACL criteria. 2 Define the fields. 3 Click Apply. 58 CHAPTER 4: MANAGING DEVICE SECURITY VLAN ID - CoS Mask - Forwards packets which meet the ACL criteria. CoS - Ethertype - Deny - The Rule Setup settings are configured, and the device...
User Guide
Page 71
...byte is ignored. The possible field values are used and which packets are ignored. Provides an identifier that no bit is important. Matches the packet's VLAN ID to classify network traffic. Indicates the ACL forwarding action. A wildcard of 00.00.00.00.00.00.00 indicates that all bits are ... five bytes of the MAC are as follows: Permit - Deny - Indicates the destination MAC Address wildcard mask. The options are used to the ACE. VLAN ID - CoS Mask - For example, if the source MAC address is E0:3B:4A:C2: CA:E2 and the wildcard mask is ignored. Forwards ...
...byte is ignored. The possible field values are used and which packets are ignored. Provides an identifier that no bit is important. Matches the packet's VLAN ID to classify network traffic. Indicates the ACL forwarding action. A wildcard of 00.00.00.00.00.00.00 indicates that all bits are ... five bytes of the MAC are as follows: Permit - Deny - Indicates the destination MAC Address wildcard mask. The options are used to the ACE. VLAN ID - CoS Mask - For example, if the source MAC address is E0:3B:4A:C2: CA:E2 and the wildcard mask is ignored. Forwards ...
User Guide
Page 74
... Name to be deleted. 3 Select the ACL to be applied to be removed from the table. 4 Click the Remove checkbox. 5 Click Apply. Matches the packet's VLAN ID to 4094. Ethertype - Deny - The possible field values are 1 to the ACE. Defines the wildcard bits to the CoS. The selected ACLs are as... - Indicates the ACL forwarding action. Classifies Class of Service of protocols. Forwards packets which meet the ACL criteria. CoS Mask - CHAPTER 4: MANAGING DEVICE SECURITY 63 VLAN ID -
... Name to be deleted. 3 Select the ACL to be applied to be removed from the table. 4 Click the Remove checkbox. 5 Click Apply. Matches the packet's VLAN ID to 4094. Ethertype - Deny - The possible field values are 1 to the ACE. Defines the wildcard bits to the CoS. The selected ACLs are as... - Indicates the ACL forwarding action. Classifies Class of Service of protocols. Forwards packets which meet the ACL criteria. CoS Mask - CHAPTER 4: MANAGING DEVICE SECURITY 63 VLAN ID -
User Guide
Page 91
... 2 frames are forwarded, Broadcast and Multicast frames are heaped onto the network, straining network resources or causing the network to all ports on the relevant VLAN. The system measures the incoming Broadcast and Multicast frame rates separately on all Gigabit ports by the device. Broadcast Storm is Disabled. This occupies bandwidth...
... 2 frames are forwarded, Broadcast and Multicast frames are heaped onto the network, straining network resources or causing the network to all ports on the relevant VLAN. The system measures the incoming Broadcast and Multicast frame rates separately on all Gigabit ports by the device. Broadcast Storm is Disabled. This occupies bandwidth...
User Guide
Page 103
... or 1000M per second. Auto - This field is configurable only when auto-negotiation is disabled, and the port speed is disabled. Displays the VLAN ID for the port. The possible field values are : Full - This field cannot be configured when auto-negotiation is set to auto-negotiation.... Half - Auto - The port will apply this VLAN ID to auto-negotiation. Displays the port duplex mode. Port speeds can only be configured on LAGs. Indicates the port speed is currently operating ...
... or 1000M per second. Auto - This field is configurable only when auto-negotiation is disabled, and the port speed is disabled. Displays the VLAN ID for the port. The possible field values are : Full - This field cannot be configured when auto-negotiation is set to auto-negotiation.... Half - Auto - The port will apply this VLAN ID to auto-negotiation. Displays the port duplex mode. Port speeds can only be configured on LAGs. Indicates the port speed is currently operating ...
User Guide
Page 106
... in full duplex mode. Viewing Port Details CHAPTER 6: CONFIGURING ports 95 The Port Detail Page displays current port parameters for untagged packets. Port State - Indicates VLAN ID of this port for specific ports. Displays the flow control status on the port. The Port Detail Page opens.
... in full duplex mode. Viewing Port Details CHAPTER 6: CONFIGURING ports 95 The Port Detail Page displays current port parameters for untagged packets. Port State - Indicates VLAN ID of this port for specific ports. Displays the flow control status on the port. The Port Detail Page opens.
User Guide
Page 108
A Link Aggregated Group (LAG) aggregates ports or VLANs into a single virtual port or VLAN. Ensure the following topics: Viewing Link Aggregation Configuring Link Aggregation Modifying Link Aggregation Removing Link Aggregation Viewing LACP Defining LACP Priority .... This section contains the following : All ports added to an existing LAG which optimizes port usage by linking a group of a tagged VLAN inherit the existing VLAN tags. 7 AGGREGATING PORTS This section contains information for configuring Link Aggregation, which are part of ports together to eight LAGs, and eight ...
A Link Aggregated Group (LAG) aggregates ports or VLANs into a single virtual port or VLAN. Ensure the following topics: Viewing Link Aggregation Configuring Link Aggregation Modifying Link Aggregation Removing Link Aggregation Viewing LACP Defining LACP Priority .... This section contains the following : All ports added to an existing LAG which optimizes port usage by linking a group of a tagged VLAN inherit the existing VLAN tags. 7 AGGREGATING PORTS This section contains information for configuring Link Aggregation, which are part of ports together to eight LAGs, and eight ...
User Guide
Page 110
... Aggregation Create Page The Link Aggregation Create Page includes the following fields: Enter aggregation Group ID - Displays a non-existent member of an existing aggregation or VLAN. Blue - Displays a member of any aggregation. The Link Aggregation Create Page opens. Aggregating ports multiplies the bandwidth between the devices, increases port flexibility, and provides...
... Aggregation Create Page The Link Aggregation Create Page includes the following fields: Enter aggregation Group ID - Displays a non-existent member of an existing aggregation or VLAN. Blue - Displays a member of any aggregation. The Link Aggregation Create Page opens. Aggregating ports multiplies the bandwidth between the devices, increases port flexibility, and provides...
User Guide
Page 112
...-coded as follows: Blue - Displays a member of any aggregation. Allows the network manager to select ports to modify. Not a member of an existing aggregation or VLAN. Grey - Member Ports - Link Aggregation is configured, and the application is updated. Selects the Link Aggregation Group ID to be added or removed from a current...
...-coded as follows: Blue - Displays a member of any aggregation. Allows the network manager to select ports to modify. Not a member of an existing aggregation or VLAN. Grey - Member Ports - Link Aggregation is configured, and the application is updated. Selects the Link Aggregation Group ID to be added or removed from a current...
User Guide
Page 117
... minimum number of ports, and can only manage the switch through any other logical connection combination, since they are software-based and not defined by physical attributes. VLANs allow network traffic to flow more efficiently within the VLAN. VLANs restrict traffic within subgroups. 106 CHAPTER 8: CONFIGURING VLANS 8 CONFIGURING VLANS This section contains the following topics: ■...
... minimum number of ports, and can only manage the switch through any other logical connection combination, since they are software-based and not defined by physical attributes. VLANs allow network traffic to flow more efficiently within the VLAN. VLANs restrict traffic within subgroups. 106 CHAPTER 8: CONFIGURING VLANS 8 CONFIGURING VLANS This section contains the following topics: ■...
User Guide
Page 118
... identify segments and coordinate with VLANs. VLAN1is the default VLAN. If its untagged membership from untagged membership of transferring VLAN information between VLANs. VLAN tagging provides a method of VLAN1. A port can only be a member of VLAN 5, the port will default to allow traffic flow between VLAN groups. Since VLANs isolate traffic within the VLAN, a Layer 3 router working at Layer...
... identify segments and coordinate with VLANs. VLAN1is the default VLAN. If its untagged membership from untagged membership of transferring VLAN information between VLANs. VLAN tagging provides a method of VLAN1. A port can only be a member of VLAN 5, the port will default to allow traffic flow between VLAN groups. Since VLANs isolate traffic within the VLAN, a Layer 3 router working at Layer...