Alcatel OmniStack 6300-24 User manual

Part No. 060191-10, Rev. B
April 2004
OmniStack®6300-24
Users Guide

An Alcatel service agreement brings your company the assurance of 7x24 no-excuses
technical support. You’ll also receive regular software updates to maintain and
maximize your Alcatel product’s features and functionality and on-site hardware
replacement through our global network of highly qualified service delivery partners.
Additionally, with 24-hour-a-day access to Alcatel’s Service and Support web page,
you’ll be able to view and update any case (open or closed) that you have reported to
Alcatel’s technical support, open a new case or access helpful release notes, technical
bulletins, and manuals. For more information on Alcatel’s Service Programs, see our
web page at www.ind.alcatel.com, call us at 1-800-995-2696, or email us at
[email protected].com.
This Manual documents OmniStack 6300-24 hardware and software.
The functionality described in this Manual is subject to change without notice.
Copyright©2004 by Alcatel Internetworking, Inc. All rights reserved. This document may not be
reproduced in whole or in part without the express written permission of Alcatel Internetworking,
Inc.
Alcatel®and the Alcatel logo are registered trademarks of Compagnie Financiére Alcatel, Paris,
France. OmniSwitch®and OmniStack®are registered trademarks of Alcatel Internetworking, Inc.
Omni Switch/Router™, SwitchExpertSM, the Xylan logo are trademarks of Alcatel Internetworking,
Inc. All other brand and product names are trademarks of their respective companies.
26801 West Agoura Road
Calabasas, CA 91301
[phone] FAX [phone]
[e-mail]
US Customer Support-[phone]
International Customer Support-[phone]
Internet-http://eservice.ind.alcatel.com

Warning
This equipment has been tested and found to comply with the limits for Class A digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio
frequency energy and, if not installed and used in accordance with the instructions in
this guide, may cause interference to radio communications. Operation of this equipment
in a residential area is likely to cause interference, in which case the user will be required
to correct the interference at his own expense.
The user is cautioned that changes and modifications made to the equipment without
approval of the manufacturer could void the user’s authority to operate this equipment.
It is suggested that the user use only shielded and grounded cables to ensure compliance
with FCC Rules.
This digital apparatus does not exceed the Class A limits for radio noise emissions from
digital apparatus set out in the radio interference regulations of the Canadian
department of communications.
Le present appareil numerique níemet pas de bruits radioelectriques depassant les
limites applicables aux appareils numeriques de la Class A prescrites dans le reglement
sur le brouillage radioelectrique edicte par le ministere des communications du Canada.

v
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-5
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings 2-6
Trap Receivers 2-7
Saving Configuration Settings 2-7
Managing System Files 2-8
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-2
Panel Display 3-3
Main Menu 3-3
Basic Configuration 3-8
Displaying System Information 3-8
Displaying Switch Hardware/Software Versions 3-10
Displaying Bridge Extension Capabilities 3-11
Setting the Switch’s IP Address 3-12
Manual Configuration 3-13
Using DHCP/BOOTP 3-14
Enabling Jumbo Frames 3-15
Managing Firmware 3-15
Downloading System Software from a Server 3-16
Saving or Restoring Configuration Settings 3-17
Downloading Configuration Settings from a Server 3-17
Console Port Settings 3-18

Contents
vi
Telnet Settings 3-21
Configuring Event Logging 3-23
System Logs 3-23
System Logs Configuration 3-24
Remote Logs Configuration 3-25
Sending Simple Mail Transfer Protocol Alerts 3-27
Resetting the System 3-29
Setting the System Clock 3-29
Configuring SNTP 3-30
Setting the Time Zone 3-31
Simple Network Management Protocol 3-31
Enabling SNMP 3-33
Setting Community Access Strings 3-33
Specifying Trap Managers and Trap Types 3-34
Configuring SNMPv3 Management Access 3-35
Setting an Engine ID 3-35
Configuring SNMPv3 Users 3-36
Configuring SNMPv3 Groups 3-38
Setting SNMPv3 Views 3-40
User Authentication 3-41
Configuring the Logon Password 3-41
Configuring Local/Remote Logon Authentication 3-42
Configuring HTTPS 3-45
Replacing the Default Secure-site Certificate 3-46
Configuring the Secure Shell 3-47
Generating the Host Key Pair 3-49
Configuring the SSH Server 3-51
Configuring Port Security 3-52
Configuring 802.1x Port Authentication 3-54
Displaying 802.1x Global Settings 3-55
Configuring 802.1x Global Settings 3-57
Configuring Port Authorization Mode 3-58
Displaying 802.1x Statistics 3-59
Access Control Lists 3-61
Configuring Access Control Lists 3-61
Setting the ACL Name and Type 3-62
Configuring a Standard IP ACL 3-62
Configuring an Extended IP ACL 3-63
Configuring a MAC ACL 3-66
Configuring ACL Masks 3-68
Specifying the Mask Type 3-68
Configuring an IP ACL Mask 3-69
Configuring a MAC ACL Mask 3-71
Binding a Port to an Access Control List 3-72
Filtering IP Addresses for Management Access 3-73

Contents
vii
Port Configuration 3-75
Displaying Connection Status 3-75
Configuring Interface Connections 3-77
Creating Trunk Groups 3-79
Statically Configuring a Trunk 3-80
Enabling LACP on Selected Ports 3-81
Configuring LACP Parameters 3-83
Displaying LACP Port Counters 3-85
Displaying LACP Settings and Status for the Local Side 3-86
Displaying LACP Settings and Status for the Remote Side 3-88
Setting Broadcast Storm Thresholds 3-90
Configuring Port Mirroring 3-91
Configuring Rate Limits 3-92
Showing Port Statistics 3-93
Alcatel Mapping Adjacency Protocol (AMAP) 3-98
Configuring AMAP 3-98
Displaying AMAP Detected Devices 3-99
Address Table Settings 3-100
Setting Static Addresses 3-100
Displaying the Address Table 3-101
Changing the Aging Time 3-102
Spanning Tree Algorithm Configuration 3-103
Displaying Global Settings 3-104
Configuring Global Settings 3-107
Displaying Interface Settings 3-111
Configuring Interface Settings 3-114
Configuring Multiple Spanning Trees 3-116
Displaying Interface Settings for MSTP 3-119
Configuring Interface Settings for MSTP 3-121
VLAN Configuration 3-122
Overview 3-122
Assigning Ports to VLANs 3-123
Forwarding Tagged/Untagged Frames 3-125
Enabling or Disabling GVRP (Global Setting) 3-125
Displaying Basic VLAN Information 3-126
Displaying Current VLANs 3-127
Creating VLANs 3-129
Adding Static Members to VLANs (VLAN Index) 3-130
Adding Static Members to VLANs (Port Index) 3-132
Configuring VLAN Behavior for Interfaces 3-133
Configuring Private VLANs 3-135
Enabling Private VLANs 3-135
Configuring Uplink and Downlink Ports 3-136
Configuring Protocol-Based VLANs 3-136
Configuring Protocol Groups 3-137

Contents
viii
Mapping Protocols to VLANs 3-137
Class of Service Configuration 3-139
Setting the Default Priority for Interfaces 3-139
Mapping CoS Values to Egress Queues 3-141
Selecting the Queue Mode 3-143
Setting the Service Weight for Traffic Classes 3-143
Mapping Layer 3/4 Priorities to CoS Values 3-145
Selecting IP Precedence/DSCP Priority 3-145
Mapping IP Precedence 3-146
Mapping DSCP Priority 3-147
Mapping IP Port Priority 3-149
Mapping CoS Values to ACLs 3-150
Changing Priorities Based on ACL Rules 3-151
Quality of Service 3-153
Configuring Quality of Service Parameters 3-153
Configuring a Class Map 3-154
Creating QoS Policies 3-156
Attaching a Policy Map to Ingress and Egress Queues 3-159
Multicast Filtering 3-160
Layer 2 IGMP (Snooping and Query) 3-160
Configuring IGMP Snooping and Query Parameters 3-161
Displaying Interfaces Attached to a Multicast Router 3-162
Specifying Static Interfaces for a Multicast Router 3-163
Displaying Port Members of Multicast Services 3-164
Assigning Ports to Multicast Services 3-165
Configuring Domain Name Service 3-166
Configuring General DNS Server Parameters 3-167
Configuring Static DNS Host to Address Entries 3-169
Displaying the DNS Cache 3-171
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-1
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5

Contents
ix
Understanding Command Modes 4-5
Exec Commands 4-6
Configuration Commands 4-6
Command Line Processing 4-7
Command Groups 4-9
Line Commands 4-10
line 4-10
login 4-11
password 4-12
timeout login response 4-13
exec-timeout 4-14
password-thresh 4-14
silent-time 4-15
databits 4-16
parity 4-16
speed 4-17
stopbits 4-17
disconnect 4-18
show line 4-18
General Commands 4-19
enable 4-19
disable 4-20
configure 4-20
show history 4-21
reload 4-22
end 4-22
exit 4-22
quit 4-23
System Management Commands 4-23
Device Designation Commands 4-24
prompt 4-24
hostname 4-25
User Access Commands 4-25
username 4-25
enable password 4-26
IP Filter Commands 4-27
management 4-27
show management 4-28
Web Server Commands 4-29
ip http port 4-29
ip http server 4-30
ip http secure-server 4-30
ip http secure-port 4-31
Secure Shell Commands 4-32
ip ssh server 4-34

Contents
x
ip ssh timeout 4-35
ip ssh authentication-retries 4-36
ip ssh server-key size 4-36
delete public-key 4-37
ip ssh crypto host-key generate 4-37
ip ssh crypto zeroize 4-38
ip ssh save host-key 4-38
show ip ssh 4-39
show ssh 4-39
show public-key 4-40
Event Logging Commands 4-41
logging on 4-41
logging history 4-42
logging host 4-43
logging facility 4-43
logging trap 4-44
clear logging 4-44
show logging 4-45
SMTP Alert Commands 4-46
logging sendmail host 4-47
logging sendmail level 4-47
logging sendmail source-email 4-48
logging sendmail destination-email 4-48
logging sendmail 4-49
show logging sendmail 4-49
Time Commands 4-50
sntp client 4-50
sntp server 4-51
sntp poll 4-52
show sntp 4-52
clock timezone 4-53
calendar set 4-53
show calendar 4-54
System Status Commands 4-54
show startup-config 4-54
show running-config 4-57
show system 4-59
show users 4-60
show version 4-60
Frame Size Commands 4-61
jumbo frame 4-61
Flash/File Commands 4-62
copy 4-62
delete 4-64
dir 4-65