Extreme Networks Summit 300-48 Safety guide

Extreme Networks, Inc.
3585 Monroe Street
Santa Clara, California 95051
[phone]
http://www.extremenetworks.com
Summit 300-48 Switch
Software User Guide
Software Version 6.2a
Published: September 2003
Part number: 123007-00 Rev. 01

2
©2003 Extreme Networks, Inc. All rights reserved. Extreme Networks, ExtremeWare, Alpine, and BlackDiamond are
registered trademarks of Extreme Networks, Inc. in the United States and certain other jurisdictions. ExtremeWare Vista,
ExtremeWorks, ExtremeAssist, ExtremeAssist1, ExtremeAssist2, PartnerAssist, Extreme Standby Router Protocol, ESRP,
SmartTraps, Summit, Summit1, Summit4, Summit4/FX, Summit7i, Summit24, Summit48, Summit Virtual Chassis,
SummitLink, SummitGbX, SummitRPS and the Extreme Networks logo are trademarks of Extreme Networks, Inc.,
which may be registered or pending registration in certain jurisdictions. The Extreme Turbodrive logo is a service mark
of Extreme Networks, which may be registered or pending registration in certain jurisdictions. Specifications are subject
to change without notice.
NetWare and Novell are registered trademarks of Novell, Inc. Merit is a registered trademark of Merit Network, Inc.
Solaris is a trademark of Sun Microsystems, Inc. F5, BIG/ip, and 3DNS are registered trademarks of F5 Networks, Inc.
see/IT is a trademark of F5 Networks, Inc.
“Data Fellows”, the triangle symbol, and Data Fellows product names and symbols/logos are
trademarks of Data Fellows.
F-Secure SSH is a registered trademark of Data Fellows.
All other registered trademarks, trademarks and service marks are property of their respective owners.
Authors: Julie Laccabue, Barbara Weinstein
Editor: Amy Guzules
Production: Julie Laccabue
Special Thanks: Collin Batey, Valerie Swisher, Richard Small

Summit 300-48 Switch Software User Guide 3
Contents
Preface
Introduction 15
Conventions 15
Related Publications 16
Chapter 1 ExtremeWare Overview
Summary of Features 17
Unified Access 18
Virtual LANs (VLANs) 18
Spanning Tree Protocol 18
Quality of Service 19
Load Sharing 19
ESRP-Aware Switches 19
Software Licensing 19
Security Licensing 20
Obtaining a Security License 20
Security Features Under License Control 20
Software Factory Defaults 20
Chapter 2 Accessing the Switch
Understanding the Command Syntax 23
Syntax Helper 24
Command Shortcuts 24
Summit 300-48 Switch Numerical Ranges 24
Names 25
Symbols 25
Line-Editing Keys 25
Command History 26
Common Commands 26

4Summit 300-48 Switch Software User Guide
Contents
Configuring Management Access 28
User Account 29
Administrator Account 29
Default Accounts 29
Creating a Management Account 30
Domain Name Service Client Services 31
Checking Basic Connectivity 32
Ping 32
Traceroute 32
Chapter 3 Managing the Switch
Overview 35
Using the Console Interface 36
Using Telnet 36
Connecting to Another Host Using Telnet 36
Configuring Switch IP Parameters 36
Disconnecting a Telnet Session 38
Controlling Telnet Access 39
Using Secure Shell 2 (SSH2) 39
Enabling SSH2 for Inbound Switch Access 39
Using SNMP 40
Accessing Switch Agents 40
Supported MIBs 41
Configuring SNMP Settings 41
Displaying SNMP Settings 42
Authenticating Users 43
RADIUS Client 43
Using ExtremeWare Vista 47
Controlling Web Access 47
Setting Up Your Browser 47
Accessing ExtremeWare Vista 48
Navigating ExtremeWare Vista 48
Saving Changes 50
Filtering Information 50
Do a GET When Configuring a VLAN 51
Sending Screen Output to Extreme Networks 51
Using the Simple Network Time Protocol 51
Configuring and Using SNTP 51
SNTP Configuration Commands 54
SNTP Example 54
Chapter 4 Configuring Ports on a Switch

Summit 300-48 Switch Software User Guide 5
Contents
Port Numbering 55
Enabling and Disabling Switch Ports 55
Configuring Switch Port Speed and Duplex Setting 56
Switch Port Commands 56
Load Sharing on the Switch 57
Load-Sharing Algorithms 57
Configuring Switch Load Sharing 58
Load-Sharing Example 59
Verifying the Load-Sharing Configuration 59
Switch Port-Mirroring 59
Port-Mirroring Commands 60
Port-Mirroring Example 61
Extreme Discovery Protocol 61
EDP Commands 61
Chapter 5 Virtual LANs (VLANs)
Overview of Virtual LANs 63
Benefits 63
Types of VLANs 64
Port-Based VLANs 64
Tagged VLANs 66
VLAN Names 69
Default VLAN 69
Renaming a VLAN 70
Configuring VLANs on the Switch 70
VLAN Configuration Commands 70
VLAN Configuration Examples 71
Displaying VLAN Settings 71
Chapter 6 Wireless Networking
Overview of Wireless Networking 73
Summary of Wireless Features 74
Wireless Devices 74
Bridging 75
Managing Wireless Ports 75
Configuring RF Properties 76
Configuring Wireless Switch Properties 78
Configuring Country Codes 78
Configuring Wireless Ports 79

6Summit 300-48 Switch Software User Guide
Contents
Configuring Wireless Port Interfaces 79
Managing Wireless Clients 80
Show Commands 80
Event Logging and Reporting 81
Chapter 7 Unified Access Security
Overview of Security 83
User Access Security 84
Authentication 84
Privacy 85
Cipher Suites 85
Network Security Policies 87
Policy Design 87
Policy Examples 88
Policies and RADIUS Support 88
RADIUS Attributes 88
CLI Commands for Security on the Switch 89
Security Profile Commands 89
Example Wireless Configuration Process 91
93
Chapter 8 Power Over Ethernet
Overview 95
Summary of PoE Features 95
Port Power Management 96
Port Power Operator Limit 96
Power Budget Management 96
Port Power Events 97
Per-Port LEDs 98
Configuring Power Over Ethernet 98
Chapter 9 Forwarding Database (FDB)
Overview of the FDB 103
FDB Contents 103
FDB Entry Types 103
How FDB Entries Get Added 104
Associating a QoS Profile with an FDB Entry 104
Configuring FDB Entries 105
FDB Configuration Examples 106
Displaying FDB Entries 106

Summit 300-48 Switch Software User Guide 7
Contents
Chapter 10 Access Policies
Overview of Access Policies 107
Access Control Lists 107
Rate Limits 107
Using Access Control Lists 107
Access Masks 108
Access Lists 108
Rate Limits 109
How Access Control Lists Work 109
Access Mask Precedence Numbers 110
Specifying a Default Rule 110
The permit-established Keyword 111
Adding Access Mask, Access List, and Rate Limit Entries 111
Deleting Access Mask, Access List, and Rate Limit Entries 112
Verifying Access Control List Configurations 112
Access Control List Commands 112
Access Control List Examples 116
Chapter 11 Quality of Service (QoS)
Overview of Policy-Based Quality of Service 121
Applications and Types of QoS 122
Voice Applications 122
Video Applications 122
Critical Database Applications 122
Web Browsing Applications 123
File Server Applications 123
Configuring QoS for a Port or VLAN 123
Traffic Groupings 124
Access List Based Traffic Groupings 124
MAC-Based Traffic Groupings 125
Explicit Class of Service (802.1p and DiffServ) Traffic Groupings 126
Configuring DiffServ 128
Physical and Logical Groupings 130
Verifying Configuration and Performance 131
QoS Monitor 131
Displaying QoS Profile Information 132
Modifying a QoS Configuration 132
Traffic Rate-Limiting 132
Chapter 12 Status Monitoring and Statistics
Status Monitoring 133

8Summit 300-48 Switch Software User Guide
Contents
Port Statistics 135
Port Errors 136
Port Monitoring Display Keys 137
Setting the System Recovery Level 137
Logging 138
Local Logging 139
Remote Logging 139
Logging Configuration Changes 140
Logging Commands 140
RMON 142
About RMON 142
RMON Features of the Switch 142
Configuring RMON 143
Event Actions 144
Chapter 13 Spanning Tree Protocol (STP)
Overview of the Spanning Tree Protocol 145
Spanning Tree Domains 145
Defaults 146
STPD BPDU Tunneling 146
STP Configurations 146
Configuring STP on the Switch 148
STP Configuration Example 151
Displaying STP Settings 151
Disabling and Resetting STP 152
Chapter 14 IP Unicast Routing
Overview of IP Unicast Routing 153
Router Interfaces 154
Populating the Routing Table 154
Proxy ARP 156
ARP-Incapable Devices 156
Proxy ARP Between Subnets 156
Relative Route Priorities 157
Configuring IP Unicast Routing 157
Verifying the IP Unicast Routing Configuration 158
IP Commands 158
Routing Configuration Example 162
Displaying Router Settings 163

Summit 300-48 Switch Software User Guide 9
Contents
Resetting and Disabling Router Settings 163
Configuring DHCP/BOOTP Relay 164
Verifying the DHCP/BOOTP Relay Configuration 165
UDP-Forwarding 165
Configuring UDP-Forwarding 165
UDP-Forwarding Example 166
ICMP Packet Processing 166
UDP-Forwarding Commands 166
Appendix A Safety Information
Important Safety Information 169
Power 169
Power Cord 170
Connections 170
Lithium Battery 171
Appendix B Supported Standards
Appendix C Software Upgrade and Boot Options
Downloading a New Image 175
Rebooting the Switch 176
Saving Configuration Changes 176
Returning to Factory Defaults 176
Using TFTP to Upload the Configuration 177
Using TFTP to Download the Configuration 178
Downloading a Complete Configuration 178
Downloading an Incremental Configuration 178
Scheduled Incremental Configuration Download 178
Remember to Save 179
Upgrading and Accessing BootROM 179
Upgrading Bootloader 179
Accessing the Bootstrap CLI 179
Accessing the Bootloader CLI 180
Boot Option Commands 181
Appendix D Troubleshooting
LEDs 183
Using the Command-Line Interface 184
Port Configuration 185
VLANs 186
STP 187

10 Summit 300-48 Switch Software User Guide
Contents
Debug Tracing 187
TOP Command 187
Contacting Extreme Technical Support 187
Index
Index of Commands

Summit 300-48 Switch Software User Guide 11
Figures
1Example of a port-based VLAN on the Summit 300-48 switch 64
2Single port-based VLAN spanning two switches 65
3Two port-based VLANs spanning two switches 66
4Physical diagram of tagged and untagged traffic 68
5Logical diagram of tagged and untagged traffic 68
6Sample integrated wired and wireless network 74
7Permit-established access list example topology 116
8Access control list denies all TCP and UDP traffic 117
9Access list allows TCP traffic 118
10 Host A initiates a TCP session to host B 118
11 Permit-established access list filters out SYN packet to destination 119
12 ICMP packets are filtered out 119
13 Ethernet packet encapsulation 126
14 IP packet header encapsulation 128
15 Multiple Spanning Tree Domains 147
16 Tag-based STP configuration 148
17 Routing between VLANs 154
18 Unicast routing configuration example 162

12 Summit 300-48 Switch Software User Guide
Figures

Summit 300-48 Switch Software User Guide 13
Tables
1Notice Icons 15
2Text Conventions 16
3ExtremeWare Summit 300-48 Factory Defaults 20
4Command Syntax Symbols 25
5Line-Editing Keys 25
6Common Commands 26
7Default Accounts 29
8DNS Commands 31
9Ping Command Parameters 32
10 SNMP Configuration Commands 41
11 RADIUS Commands 43
12 Multiselect List Box Key Definitions 49
13 Greenwich Mean Time Offsets 52
14 SNTP Configuration Commands 54
15 Switch Port Commands 56
16 Switch Port-Mirroring Configuration Commands 60
17 EDP Commands 61
18 VLAN Configuration Commands 70
19 RF Configuration Commands 76
20 RF Profile Property Values 76
21 Switch-Level Wireless Configuration Commands 78
22 Switch-Level Configuration Property Values 78
23 Wireless Port Configuration Commands 79
24 Wireless Port Configuration Property Values 79
25 Wireless Port Interface Configuration Commands 80
26 Client Configuration Commands 80
27 Show Commands 80
28 Wi-Fi Security Cipher Suites 86
29 Authentication-Based Network Access Example 88
30 RADIUS Request Attributes 88
31 RADIUS Response Attributes 89
32 Vendor-Specific Attributes 89
33 Security Profile Commands 89

14 Summit 300-48 Switch Software User Guide
Tables
34 Security Profile Command Property Values 90
35 Per-Port LEDs 98
36 Power Over Ethernet Configuration Commands 98
37 PoE Show Commands 101
38 FDB Configuration Commands 105
39 Access Control List Configuration Commands 113
40 Traffic Type and QoS Guidelines 123
41 QoS Configuration Commands 123
42 Traffic Groupings by Precedence 124
43 802.1p Priority Value-to-QoS Profile to Hardware Queue Default Mapping 127
44 802.1p Configuration Commands 127
45 DiffServ Configuration Commands 128
46 Default Code Point-to-QoS Profile Mapping 129
47 Status Monitoring Commands 134
48 Port Monitoring Display Keys 137
49 Fault Levels Assigned by the Switch 138
50 Fault Log Subsystems 138
51 Logging Commands 140
52 Event Actions 144
53 STP Configuration Commands 149
54 STP Disable and Reset Commands 152
55 Relative Route Priorities 157
56 Basic IP Commands 158
57 Route Table Configuration Commands 159
58 ICMP Configuration Commands 160
59 Router Show Commands 163
60 Router Reset and Disable Commands 163
61 UDP-Forwarding Commands 166
62 Bootstrap Command Options 180
63 Bootloader Command Options 180
64 Boot Option Commands 181

Summit 300-48 Switch Software User Guide 15
Preface
This preface provides an overview of this guide, describes guide conventions, and lists other
publications that may be useful.
Introduction
This guide provides the required information to install the Summit™ 300-48 switch and configure the
ExtremeWare™software running on the Summit 300-48 switch.
This guide is intended for use by network administrators who are responsible for installing and setting
up network equipment. It assumes a basic working knowledge of:
•Local area networks (LANs)
•Ethernet concepts
•Ethernet switching and bridging concepts
•Routing concepts
•Internet Protocol (IP) concepts
•Simple Network Management Protocol (SNMP)
NOTE
If the information in the release notes shipped with your switch differs from the information in this guide,
follow the release notes.
Conventions
Table 1 and Table 2 list conventions that are used throughout this guide.
Table 1: Notice Icons
Icon Notice Type Alerts you to...
Note Important features or instructions.

16 Summit 300-48 Switch Software User Guide
Preface
Related Publications
The publications related to this one are:
•ExtremeWare Release Notes
•Summit 300-48 Switch Release Notes
Documentation for Extreme Networks products is available on the World Wide Web at the following
location:
•http://www.extremenetworks.com/
Caution Risk of personal injury, system damage,
or loss of data.
Warning Risk of severe personal injury.
Table 2: Text Conventions
Convention Description
Screen displays This typeface indicates command syntax, or represents information
as it appears on the screen.
The words “enter”
and “type” When you see the word “enter” in this guide, you must type something, and then press the Return or Enter key. Do not press the
Return or Enter key when an instruction simply says “type.”
[Key] names Key names are written with brackets, such as [Return] or [Esc].
If you must press two or more keys simultaneously, the key names
are linked with a plus sign (+). Example:
Press [Ctrl]+[Alt]+[Del].
Words in italicized type Italics emphasize a point or denote new terms at the place where
they are defined in the text.
Table 1: Notice Icons (continued)
Icon Notice Type Alerts you to...

Summit 300-48 Switch Software User Guide 17
1ExtremeWare Overview
This chapter describes the following topics:
•Summary of Features on page 17
•Security Licensing on page 20
•Software Factory Defaults on page 20
ExtremeWare is the full-featured software operating system that is designed to run on the
Summit 300-48 switch. This section describes the supported ExtremeWare features for the Summit
300-48 switch.
Summary of Features
The Summit 300-48 switch supports the following ExtremeWare features:
•Unified Access support
•Virtual local area networks (VLANs) including support for IEEE 802.1Q and IEEE 802.1p
•Spanning Tree Protocol (STP) (IEEE 802.1D)
•Quality of Service (QoS) including support for IEEE 802.1p, MAC QoS, and four hardware queues
•Wire-speed Internet Protocol (IP) forwarding
•Extreme Standby Router Protocol (ESRP) - Aware support
•Diffserv support
•Access-policy support for routing protocols
•Access list support for packet filtering
•Access list support for rate-limiting
•Load sharing on multiple ports
•RADIUS client
•Console command-line interface (CLI) connection
•Telnet CLI connection

18 Summit 300-48 Switch Software User Guide
ExtremeWare Overview
•SSH2 connection
•Simple Network Management Protocol (SNMP) support
•Remote Monitoring (RMON)
•Traffic mirroring for ports
Unified Access
The Summit 300-48 supports the Unified Access architecture, enabling wired and wireless applications
across a completely integrated enterprise infrastructure. With the Altitude product line, the Summit
300-48 supports 802.11 WLAN connectivity. Provisioning of Unified Access is completely controlled by
the Summit 300-48.
Virtual LANs (VLANs)
ExtremeWare has a VLAN feature that enables you to construct your broadcast domains without being
restricted by physical connections. A VLAN is a group of location- and topology-independent devices
that communicate as if they were on the same physical local area network (LAN).
Implementing VLANs on your network has the following three advantages:
•They help to control broadcast traffic. If a device in VLAN Marketing transmits a broadcast frame,
only VLAN Marketing devices receive the frame.
•They provide extra security. Devices in VLAN Marketing can only communicate with devices on
VLAN Sales using routing services.
•They ease the change and movement of devices on networks.
NOTE
For more information on VLANs, see Chapter 5, “Virtual LANs (VLANs)”.
Spanning Tree Protocol
The Summit 300-48 supports the IEEE 802.1D Spanning Tree Protocol (STP), which is a bridge-based
mechanism for providing fault tolerance on networks. STP enables you to implement parallel paths for
network traffic, and ensure that:
•Redundant paths are disabled when the main paths are operational.
•Redundant paths are enabled if the main traffic paths fail.
A single spanning tree can span multiple VLANs.
NOTE
For more information on STP, see Chapter 13, “Spanning Tree Protocol (STP)”.

Software Licensing
Summit 300-48 Switch Software User Guide 19
Quality of Service
ExtremeWare has Quality of Service (QoS) features that support IEEE 802.1p, MAC QoS, and four
queues. These features enable you to specify service levels for different traffic groups. By default, all
traffic is assigned the “normal” QoS policy profile. If needed, you can create other QoS policies and
rate-limiting access control lists and apply them to different traffic types so that they have different
maximum bandwidth, and priority.
NOTE
For more information on Quality of Service, see Chapter 11, “Quality of Service (QoS)”.
Load Sharing
Load sharing allows you to increase bandwidth and resiliency by using a group of ports to carry traffic
in parallel between systems. The sharing algorithm allows the switch to use multiple ports as a single
logical port. For example, VLANs see the load-sharing group as a single virtual port. The algorithm also
guarantees packet sequencing between clients.
NOTE
For information on load sharing, see Chapter 4, “Configuring Ports on a Switch”.
ESRP-Aware Switches
Extreme switches that are not running ESRP, but are connected on a network that has other Extreme
switches running ESRP are ESRP-aware. When ESRP-aware switches are attached to ESRP-enabled
switches, the ESRP-aware switches reliably perform fail-over and fail-back scenarios in the prescribed
recovery times. No configuration of this feature is necessary.
If Extreme switches running ESRP are connected to layer 2 switches that are not manufactured by
Extreme Networks (or Extreme switches that are not running ExtremeWare 4.0 or above), the fail-over
times seen for traffic local to the segment may appear longer, depending on the application involved
and the FDB timer used by the other vendor’s layer 2 switch. As such, ESRP can be used with layer 2
switches from other vendors, but the recovery times vary.
The VLANs associated with the ports connecting an ESRP-aware switch to an ESRP-enabled switch
must be configured using an 802.1Q tag on the connecting port, or, if only a single VLAN is involved, as
untagged using the protocol filter any. ESRP will not function correctly if the ESRP-aware switch
interconnection port is configured for a protocol-sensitive VLAN using untagged traffic.
Software Licensing
Summit 300-48 switches support Advanced Edge licensing.

20 Summit 300-48 Switch Software User Guide
ExtremeWare Overview
Security Licensing
Certain additional ExtremeWare security features, such as the use of Secure Shell (SSH2) encryption,
may be under United States export restriction control. Extreme Networks ships these security features in
a disabled state. You can obtain information on enabling these features at no charge from Extreme
Networks.
Obtaining a Security License
To obtain information on enabling features that require export restriction, access the Extreme Networks
Support website at:
http://www.extremenetworks.com/go/security.htm
Fill out a contact form to indicate compliance or noncompliance with the export restrictions. If you are
in compliance, you will be given information that will allow you to enable security features.
Security Features Under License Control
ExtremeWare version 6.0 and above supports the SSH2 protocol. SSH2 allows the encryption of session
data. The encryption methods used are under U.S. export restriction control.
Software Factory Defaults
Table 3 shows factory defaults for Summit 300-48 ExtremeWare features.
Table 3: ExtremeWare Summit 300-48 Factory Defaults
Item Default Setting
Serial or Telnet user account admin with no password and user with no password
Telnet Enabled
SSH2 Disabled
SNMP Enabled
SNMP read community string public
SNMP write community string private
RMON Disabled
BOOTP Disabled on the default VLAN (default)
QoS All traffic is part of the default queue
802.1p priority Recognition enabled
802.3x flow control Enabled on Gigabit Ethernet ports
Virtual LANs Two VLANs predefined. VLAN named default contains all
ports and belongs to the STPD named s0.
802.1Q tagging All packets are untagged on the default VLAN (default).
Spanning Tree Protocol Disabled for the switch; enabled for each port in the STPD.
Forwarding database aging period 300 seconds (5 minutes)
IP Routing Disabled