Alcatel OmniStack OS-LS-6224 User manual

Part No. 060202-10 , Rev. E
August 2009
Alcatel OS-LS-6200
User Guide
www.alcatel.com

An Alcatel service agreement brings your company the assurance of 7x24 no-excuses technical
support. You’ll also receive regular software updates to maintain and maximize your Alcatel
product’s features and functionality and on-site hardware replacement through our global network
of highly qualified service delivery partners. Additionally, with 24-hour-a-day access to Alcatel’s
Service and Support web page, you’ll be able to view andupdate any case (openor closed) that you
have reported to Alcatel’s technical support, open a new case or access helpful release notes,
technical bulletins, and manuals. For more information on Alcatel’sService Programs,see our web
page at www.ind.alcatel.com, call us at 1-800-995-2696, or email us at sup[email protected].
This Manual documents Alcatel 6200 hardware and software.
The functionality described in this Manual is subject to change without notice.
Copyright©2009 by Alcatel Internetworking, Inc. All rights reserved. This document may not be
reproduced in whole or in part without the express written permission of Alcatel Internetworking, Inc.
Alcatel®and the Alcatel logo are registered trademarks of Compagnie Financiére Alcatel, Paris, France.
OmniSwitch®and OmniStack®are registered trademarks of Alcatel Internetworking, Inc. Omni Switch/Router™,
SwitchExpertSM, the Xylan logo are trademarks of Alcatel Internetworking, Inc. All other brand and product names
are trademarks of their respective companies.
26801 West Agoura Road
Calabasas, CA 91301
[phone] FAX [phone]
[e-mail]
US Customer Support-[phone]
International Customer Support-[phone]
Internet-http://eservice.ind.alcatel.com

Warning
This equipment has been tested and found to comply with the limits for Class A digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio frequency energy and,
if not installed and used in accordance with the instructions in this guide, may cause interference to
radio communications. Operation of this equipment in a residential area is likely to cause interference,
in which case the user will be required to correct the interference at his own expense.
The user is cautioned that changes and modifications made to the equipment without
approval of the manufacturer could void the user’s authority to operate this equipment. It is suggested
that the user use only shielded and grounded cables to ensure compliance with FCC Rules.
This digital apparatus does not exceed the Class A limits for radio noise emissions from
digital apparatus set out in the radio interference regulations of the Canadian department of
communications.
Le present appareil numerique níemet pas de bruits radioelectriques depassant les limites applicables
aux appareils numeriques de la Class A prescrites dans le reglement sur le brouillage radioelectrique
edicte par le ministere des communications du Canada.
Utilice sólo adaptadores con las siguientes características eléctricas y que estén debidamente
certificados de acuerdo a la legislación vigente. El uso de otros adaptadores podría dañar el dispositivo
y anular la garantía además de provocar riesgos al usuario.
Adaptador:
Características de entrada: Características de salida:
OS-LS-6224P AC100/115/220/230V; 50/60Hz; 2.0/1.7/0.9/
0.9A; Clase I DC 12V, 4.0A; -50V, 3.6A
OS-LS-6248P AC100/115/220/230V; 50/60Hz; 4.0/3.4/1.8/
1.8A; Clase I DC 12V, 7.5A; -50V, 7.5A
OS-LS-6224 AC 100/115/220/230V; 50/60Hz; 0.4/0.4/0.2/
0.2A; Clase I DC 12V, 4.5A
OS-LS-6248 AC100/115/220/230V; 50/60Hz; 0.6/0.6/0.4/
0.4A; Clase I DC 12V, 4.5A
OS-LS-6224U AC 100/115/220/230V 50/60Hz 1.0/1.0/0.5/
0.5A Clase I DC 12V , 4.5A
Modelo: Marca comercial:
OS-LS-6224P OS-LS-62BP-P 3Y Power
OS-LS-6248P OS-LS-62BP-P Alcatel
OS-LS-6248 OS-LS-62BP-DC & OS-LS-62BP Accton & 3Y Power
OS-LS-6224 OS-LS-62BP-DC & OS-LS-62BP Accton & 3Y Power

Contents
iv
Contents
Chapter 1: Introduction 1
Key Features ........................................................................................................1
Description of Software Features .........................................................................3
System Defaults ....................................................................................................9
Chapter 2: Initial Configuration 13
General Configuration Information ......................................................................14
Auto-Negotiation 15
Device Port Default Settings 15
Booting the Switch ..............................................................................................16
Configuration Overview ......................................................................................18
Initial Configuration .............................................................................................18
Static IP Address and Subnet Mask 18
User Name 19
SNMP Community Strings 19
Advanced Configuration .....................................................................................21
Retrieving an IP Address From a DHCP Server 21
Receiving an IP Address From a BOOTP Server 22
Security Management and Password Configuration ...........................................23
Configuring Security Passwords Introduction 23
Configuring an Initial Console Password 24
Configuring an Initial Telnet Password 24
Configuring an Initial SSH password 24
Configuring an Initial HTTP Password 25
Configuring an initial HTTPS Password 25
Software Download and Reboot .........................................................................25
Software Download through XModem 25
Software Download Through TFTP Server 26
Boot Image Download 27
Startup Menu Functions ......................................................................................28
Chapter 3: Configuring the Switch 32
Using the Web Interface .....................................................................................32
Navigating the Web Browser Interface ...............................................................32
Home Page 32
Configuration Options 33
Panel Display 34
Main Menu 34
Managing Device Information .............................................................................35
Managing Stacking .............................................................................................36
Understanding the Stack Topology 37
Stacking Failover Topology 37

Contents
v
Stacking Members and Unit ID 37
Removing and Replacing Stacking Members 38
Exchanging Stacking Members 39
Switching between the Stacking Master and the Secondary Master 39
Configuring Stacking 40
Resetting the Stack 41
Managing System Logs ......................................................................................42
Enabling System Logs 42
Viewing Memory Logs 44
Viewing the Device FLASH Logs 46
Remote Log Configuration 47
Configuring SNTP ..............................................................................................50
Polling for Unicast Time Information 50
Polling for Anycast Time Information 50
Polling For Broadcast Time Information 51
Defining SNTP Global Settings 51
Defining SNTP Authentication 52
Defining SNTP Servers 53
Defining SNTP Interface Settings 54
Configuring System Time ...................................................................................55
Configuring Daylight Savings Time 56
Managing System Files ......................................................................................60
Downloading System Files 61
Uploading System Files 63
Copying Files 64
Active Image 65
TCAM Resources ...............................................................................................66
Configuring Interfaces ........................................................................................68
Configuring Interface Connections 68
Creating Trunks (LAGs) 71
Configuring LACP 72
Displaying Port Statistics ....................................................................................74
Interface Statistics 74
Etherlike Statistics 76
Configuring IP Information ..................................................................................78
Defining IP Addresses 79
Defining Default Gateways 80
Configuring DHCP 81
Configuring ARP 82
Configuring Domain Name Service ....................................................................83
Configuring General DNS Server Parameters 85
Configuring Static DNS Host to Address Entries 86
Configuring SNMP ..............................................................................................87
Enabling SNMP 88
Defining SNMP Users 89

Contents
vi
Defining SNMP Group Profiles 91
Defining SNMP Views 92
Defining SNMP Communities 94
Defining SNMP Notification Recipients 95
Defining SNMP Notification Global Parameters 97
Defining SNMP Notification Filters 99
Configuring User Authentication .......................................................................100
Defining Local Users Passwords 100
Defining Line Passwords 101
Defining Enable Passwords 102
Configuring Authentication Methods .................................................................103
Defining Access Profiles 103
Defining Profile Rules 106
Defining Authentication Profiles 108
Mapping Authentication Methods 110
Defining TACACS+ Methods 112
Defining RADIUS Settings 113
Managing RMON Statistics ...............................................................................116
Viewing RMON Statistics 116
Defining RMON History Control 118
Viewing the RMON History Table 119
Defining RMON Events Control 122
Viewing the RMON Events Logs 123
Defining RMON Alarms 124
Alcatel Mapping Adjacency Protocol (AMAP) ...................................................126
Configuring AMAP 126
Viewing Adjacent Devices 128
Configuring LLDP .............................................................................................129
Defining LLDP Port Settings 130
Defining Media Endpoint Discovery Network Policy 131
Defining LLDP MED Port Settings 132
Viewing the LLDP Neighbor Information 133
Viewing Neighbor Information Details 134
Managing Power-over-Ethernet Devices ..........................................................137
Defining PoE System Information 137
Defining PoE Interfaces 138
Device Diagnostic Tests ...................................................................................140
Configuring Port Mirroring 140
Viewing Integrated Cable Tests 142
Viewing Optical Transceivers 143
Viewing Device Health 145
Configuring Traffic Control ................................................................................147
Enabling Storm Control 147
Configuring Port Security 148
802.1X Port-Based Authentication ....................................................................151

Contents
vii
Advanced Port-Based Authentication 152
Defining Network Authentication Properties 152
Defining Port Authentication 155
Modify Port Authentication Page 156
Configuring Multiple Hosts 158
Defining Authentication Hosts 160
Viewing EAP Statistics 162
Defining Access Control Lists ...........................................................................165
Configuring Access Control Lists 165
Binding Device Security ACLs 166
Defining IP Based Access Control Lists 167
Defining MAC Based Access Control Lists 169
DHCP Snooping ...............................................................................................171
DHCP Snooping Properties 172
Defining DHCP Snooping on VLANs 173
Defining Trusted Interfaces 174
Binding Addresses to the DHCP Snooping Database 175
Configuring Option 82 ......................................................................................176
Dynamic ARP Inspection ..................................................................................177
ARP Inspection Properties 178
ARP Inspection Trusted Interface Settings 179
Defining ARP Inspection List 180
Assigning ARP Inspection VLAN Settings 181
IP Source Guard ...............................................................................................182
Configuring IP Source Guard Properties 183
Defining IP Source Guard Interface Settings 183
Adding Interfaces to the IP Source Guard Database 184
Defining the Forwarding Database ...................................................................186
Defining Static Forwarding Database Entries 186
Defining Dynamic Forwarding Database Entries 188
Configuring Spanning Tree ..............................................................................189
Defining Spanning Tree 191
Defining STP on Interfaces 193
Defining Rapid Spanning Tree 196
Defining Multiple Spanning Tree 198
Defining MSTP Instance Settings 199
Defining MSTP Interface Settings 200
Configuring VLANs ...........................................................................................202
Assigning Ports to VLANs 203
Tagged/Untagged VLANs 205
Displaying Basic VLAN Information 205
Defining VLAN Membership 207
Defining VLAN Interface Settings 209
Defining Customer Mapping for Multicast TV 210
Mapping CPE VLANs 211

Contents
viii
Defining VLAN Groups .....................................................................................212
Configuring MAC Based VLAN Groups 212
Configuring Subnet Based VLAN Groups 213
Configuring Protocol Based VLAN Groups 214
Mapping Groups to VLANs 215
Defining GARP 216
Defining GVRP 217
Viewing GVRP Statistics 219
Multicast Filtering .............................................................................................222
Defining IGMP Snooping 222
Specifying Static Interfaces for a Multicast Group 225
Displaying Interfaces Attached to a Multicast Router 227
Configuring Multicast TV 228
Defining Multicast TV Membership 229
Configuring Triple Play .....................................................................................230
Configuring Quality of Service ..........................................................................231
Access Control Lists 232
Mapping to Queues 233
QoS Modes 234
Enabling QoS 235
Defining Global Queue Settings 236
Defining Bandwidth Settings 237
Configuring VLAN Rate Limit 239
Mapping CoS Values to Queues 240
Mapping DSCP Values to Queues 241
Defining Basic QoS Settings 242
Defining QoS DSCP Rewriting Settings 243
Defining QoS DSCP Mapping Settings 244
Defining QoS Class Maps 245
Defining Policies 246
Defining Tail Drop 247
Viewing the Policy Table 248
Adding a Policy 249
Viewing Policy Bindings 250
Configuring Loopback Detection .......................................................................252
Loopback Detection Overview 252
Configuring Loopback Detection Globally 254
Defining Loopback Detection Interface Settings 255
Modify Loopback Detection Interface Settings Page 256
Chapter 4: Command Line Interface 258
Using the Command Line Interface ..................................................................258
Accessing the CLI 258
Console Connection 258

Contents
ix
Telnet Connection 258
Entering Commands .........................................................................................260
Keywords and Arguments 260
Minimum Abbreviation 260
Command Completion 260
Getting Help on Commands 260
Partial Keyword Lookup 262
Negating the Effect of Commands 262
Using Command History 262
Understanding Command Modes 262
Exec Commands 263
Configuration Commands 264
Command Line Processing 265
Command Groups ............................................................................................266
802.1x Commands ...........................................................................................268
aaa authentication dot1x 269
dot1x system-auth-control 270
dot1x port-control 271
dot1x re-authentication 272
dot1x timeout re-authperiod 273
dot1x re-authenticate 274
dot1x timeout quiet-period 274
dot1x timeout tx-period 275
dot1x max-req 276
dot1x timeout supp-timeout 277
dot1x timeout server-timeout 278
show dot1x 279
show dot1x users 282
show dot1x statistics 284
ADVANCED FEATURES 286
dot1x auth-not-req 286
dot1x multiple-hosts 286
dot1x single-host-violation 287
dot1x guest-vlan 288
dot1x guest-vlan enable 289
dot1x mac-authentication 290
show dot1x advanced 290
AAA Commands ...............................................................................................293
aaa authentication login 293
aaa authentication enable 295
login authentication 296
enable authentication 297
ip http authentication 298
ip https authentication 299
show authentication methods 299

Contents
x
password 301
enable password 301
username 302
show users accounts 303
ACL Commands ...............................................................................................305
ip-access-list 305
permit (ip) 306
deny (IP) 309
mac access-list 311
permit (MAC) 312
deny (MAC) 313
service-acl 315
show access-lists 315
show interfaces access-lists 316
Address Table Commands ...............................................................................318
bridge address 319
bridge multicast filtering 320
bridge multicast address 321
bridge multicast forbidden address 322
bridge multicast forward-all 323
bridge multicast forbidden forward-all 324
bridge aging-time 325
clear bridge 325
port security 326
port security mode 326
port security max 327
port security routed secure-address 328
show bridge address-table 329
show bridge address-table static 330
show bridge address-table count 330
show bridge multicast address-table 331
show bridge multicast address-table static 333
show bridge multicast filtering 333
show ports security 334
show ports security addresses 336
LLDP Commands .............................................................................................338
lldp optional-tlv 338
lldp med enable 339
lldp med network-policy (global) 340
lldp med network-policy (interface) 340
lldp med location 341
clear lldp rx 342
show lldp configuration 342
show lldp med configuration 343
show lldp local 344