Extreme Networks Summit 300-48 Safety guide

Extreme Networks, Inc.
3585 Monroe Street
Santa Clara, California 95051
[phone]
http://www.extremenetworks.com
Summit 300-48 Switch
Software User Guide
Software Version 6.2a
Published: May 2004
Partnumber: 123007-00 Rev.02

2
Alpine, Altitude, BlackDiamond, EPICenter, Ethernet Everywhere, Extreme Ethernet Everywhere, Extreme Networks,
Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, GlobalPx Content Director, the Go Purple
Extreme Solution Partners Logo, ServiceWatch, Summit, the Summit7i Logo, and the Color Purple, among others, are
trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and other
countries. Other names and marks may be the property of their respective owners.
© 2004 Extreme Networks, Inc. All Rights Reserved. Specifications are subject to change without notice.

Summit 300-48 Switch Software User Guide 3
Contents
Preface
Introduction 17
Conventions 17
Related Publications 18
Chapter 1 ExtremeWare Overview
Summary of Features 19
Unified Access 20
Virtual LANs (VLANs) 20
Spanning Tree Protocol 20
Quality of Service 21
Load Sharing 21
ESRP-Aware Switches 21
Software Licensing 21
Security Licensing 22
Obtaining a Security License 22
Security Features Under License Control 22
Software Factory Defaults 22
Chapter 2 Accessing the Switch
Understanding the Command Syntax 25
Syntax Helper 26
Command Shortcuts 26
Summit 300-48 Switch Numerical Ranges 26
Names 27
Symbols 27
Line-Editing Keys 27
Command History 28
Common Commands 28

4Summit 300-48 Switch Software User Guide
Contents
Configuring Management Access 30
User Account 31
Administrator Account 31
Default Accounts 31
Creating a Management Account 32
Domain Name Service Client Services 33
Checking Basic Connectivity 34
Ping 34
Traceroute 34
Chapter 3 Managing the Switch
Overview 37
Using the Console Interface 38
Using Telnet 38
Connecting to Another Host Using Telnet 38
Configuring Switch IP Parameters 38
Disconnecting a Telnet Session 40
Controlling Telnet Access 41
Using Secure Shell 2 (SSH2) 41
Enabling SSH2 for Inbound Switch Access 41
Using SNMP 42
Accessing Switch Agents 42
Supported MIBs 43
Configuring SNMP Settings 43
Displaying SNMP Settings 44
Authenticating Users 45
RADIUS Client 45
Using ExtremeWare Vista 49
Controlling Web Access 49
Setting Up Your Browser 49
Accessing ExtremeWare Vista 50
Navigating ExtremeWare Vista 50
Saving Changes 52
Filtering Information 52
Do a GET When Configuring a VLAN 53
Sending Screen Output to Extreme Networks 53
Using the Simple Network Time Protocol 53
Configuring and Using SNTP 53
SNTP Configuration Commands 56
SNTP Example 56
Show Odometer Command 56

Summit 300-48 Switch Software User Guide 5
Contents
Chapter 4 Configuring Ports on a Switch
Port Numbering 57
Enabling and Disabling Switch Ports 57
Configuring Switch Port Speed and Duplex Setting 58
Switch Port Commands 58
Load Sharing on the Switch 59
Load-Sharing Algorithms 59
Configuring Switch Load Sharing 60
Load-Sharing Example 61
Verifying the Load-Sharing Configuration 61
Switch Port-Mirroring 61
Port-Mirroring Commands 62
Port-Mirroring Example 63
Extreme Discovery Protocol 63
EDP Commands 63
Chapter 5 Virtual LANs (VLANs)
Overview of Virtual LANs 65
Benefits 65
Types of VLANs 66
Port-Based VLANs 66
Tagged VLANs 68
VLAN Names 71
Default VLAN 71
Renaming a VLAN 72
Configuring VLANs on the Switch 72
VLAN Configuration Commands 72
VLAN Configuration Examples 73
Displaying VLAN Settings 73
Chapter 6 Wireless Networking
Overview of Wireless Networking 75
Summary of Wireless Features 76
Wireless Devices 76
Altitude 300-2d Detachable Antenna 77
Bridging 77
Managing the Altitude 300 78
Wireless Show Commands 78
Configuring RF Properties 79
Configuring RF Monitoring 80

6Summit 300-48 Switch Software User Guide
Contents
AP Detection 81
Managing Wireless Clients 83
Performing Client Scanning 83
Collecting Client Information 85
Configuring Wireless Switch Properties 87
Configuring Country Codes 88
Configuring Wireless Ports 89
Configuring Wireless Interfaces 89
Force Disassociation 90
Event Logging and Reporting 91
Chapter 7 Unified Access Security
Overview of Security 93
User Access Security 94
Authentication 94
Encryption 96
Cipher Suites 96
Network Login 96
Web-Based and 802.1x Authentication 97
Campus and ISP Modes 99
Interoperability Requirements 99
Exclusions and Limitations 100
Configuring Network Login 100
Web-Based Authentication User Login Using Campus Mode 103
DHCP Server on the Switch 104
Displaying DHCP Information 104
Additional Configuration Details 104
Network Login Configuration Commands 105
Displaying Network Login Settings 106
Wireless Network Login Considerations 107
MAC RADIUS 107
Network Security Policies for Wireless Interfaces 107
Policy Design 107
Policy Examples 109
Policies and RADIUS Support 109
RADIUS Attributes 109
CLI Commands for Security on the Switch 111
Security Profile Commands 111
Secure Web Login Access 113
Creating Certificates and Private Key 114
Example Wireless Configuration Processes 115

Summit 300-48 Switch Software User Guide 7
Contents
Wireless Management Configuration Example 115
Security Configuration Examples 116
Profile Assignment Example 131
Chapter 8 Power Over Ethernet
Overview 133
Summary of PoE Features 133
Port Power Management 134
Port Power Operator Limit 134
Power Budget Management 134
Port Power Events 136
Load Sharing Power Supplies 137
Per-Port LEDs 139
Configuring Power Over Ethernet 139
Chapter 9 Forwarding Database (FDB)
Overview of the FDB 143
FDB Contents 143
FDB Entry Types 143
How FDB Entries Get Added 144
Associating a QoS Profile with an FDB Entry 144
Configuring FDB Entries 145
FDB Configuration Examples 146
Displaying FDB Entries 146
Chapter 10 Access Policies
Overview of Access Policies 147
Access Control Lists 147
Rate Limits 147
Using Access Control Lists 147
Access Masks 148
Access Lists 148
Rate Limits 149
How Access Control Lists Work 149
Access Mask Precedence Numbers 150
Specifying a Default Rule 150
The permit-established Keyword 151
Adding Access Mask, Access List, and Rate Limit Entries 151
Deleting Access Mask, Access List, and Rate Limit Entries 152
Verifying Access Control List Configurations 152
Access Control List Commands 152
Access Control List Examples 156

8Summit 300-48 Switch Software User Guide
Contents
Chapter 11 Quality of Service (QoS)
Overview of Policy-Based Quality of Service 161
Applications and Types of QoS 162
Voice Applications 162
Video Applications 162
Critical Database Applications 162
Web Browsing Applications 163
File Server Applications 163
Configuring QoS for a Port or VLAN 163
Tra ff i c G r o upi n g s 16 4
Access List Based Traffic Groupings 164
MAC-Based Traffic Groupings 165
Explicit Class of Service (802.1p and DiffServ) Traffic Groupings 166
Configuring DiffServ 168
Physical and Logical Groupings 170
Verifying Configuration and Performance 171
QoS Monitor 171
Displaying QoS Profile Information 172
Modifying a QoS Configuration 172
Traffic Rate-Limiting 172
Chapter 12 Status Monitoring and Statistics
Status Monitoring 173
Port Statistics 175
Port Errors 176
Port Monitoring Display Keys 177
Setting the System Recovery Level 177
Logging 178
Local Logging 179
Remote Logging 179
Logging Configuration Changes 180
Logging Commands 180
RMON 182
About RMON 182
RMON Features of the Switch 182
Configuring RMON 183
Event Actions 184
Chapter 13 Spanning Tree Protocol (STP)
Overview of the Spanning Tree Protocol 185

Summit 300-48 Switch Software User Guide 9
Contents
Spanning Tree Domains 185
Defaults 186
STPD BPDU Tunneling 186
STP Configurations 186
Configuring STP on the Switch 188
STP Configuration Example 191
Displaying STP Settings 191
Disabling and Resetting STP 192
Chapter 14 IP Unicast Routing
Overview of IP Unicast Routing 193
Router Interfaces 194
Populating the Routing Table 194
Proxy ARP 196
ARP-Incapable Devices 196
Proxy ARP Between Subnets 196
Relative Route Priorities 197
Configuring IP Unicast Routing 197
Verifying the IP Unicast Routing Configuration 198
IP Commands 198
Routing Configuration Example 202
Displaying Router Settings 203
Resetting and Disabling Router Settings 203
Configuring DHCP/BOOTP Relay 204
Verifying the DHCP/BOOTP Relay Configuration 205
UDP-Forwarding 205
Configuring UDP-Forwarding 205
UDP-Forwarding Example 206
ICMP Packet Processing 206
UDP-Forwarding Commands 206
Appendix A Safety Information
Important Safety Information 209
Power 209
Power Cord 210
Connections 210
Lithium Battery 211
Appendix B Supported Standards

10 Summit 300-48 Switch Software User Guide
Contents
Appendix C Software Upgrade and Boot Options
Downloading a New Image 215
Rebooting the Switch 216
Saving Configuration Changes 216
Returning to Factory Defaults 216
Using TFTP to Upload the Configuration 217
Using TFTP to Download the Configuration 218
Downloading a Complete Configuration 218
Downloading an Incremental Configuration 218
Scheduled Incremental Configuration Download 218
Remember to Save 219
Upgrading and Accessing BootROM 219
Upgrading Bootloader 219
Accessing the Bootstrap CLI 219
Accessing the Bootloader CLI 220
Boot Option Commands 221
Appendix D Troubleshooting
LEDs 223
Using the Command-Line Interface 224
Port Configuration 225
VLANs 226
STP 227
Debug Tracing 227
Debug Trace for Wireless 227
TOP Command 228
Contacting Extreme Technical Support 228
Index
Index of Commands

Summit 300-48 Switch Software User Guide 11
Figures
1Example of a port-based VLAN on the Summit 300-48 switch 66
2Single port-based VLAN spanning two switches 67
3Two port-based VLANs spanning two switches 68
4Physical diagram of tagged and untagged traffic 70
5Logical diagram of tagged and untagged traffic 70
6Sample integrated wired and wireless network 76
7Permit-established access list example topology 156
8Access control list denies all TCP and UDP traffic 157
9Access list allows TCP traffic 158
10 Host A initiates a TCP session to host B 158
11 Permit-established access list filters out SYN packet to destination 159
12 ICMP packets are filtered out 159
13 Ethernet packet encapsulation 166
14 IP packet header encapsulation 168
15 Multiple Spanning Tree Domains 187
16 Tag-based STP configuration 188
17 Routing between VLANs 194
18 Unicast routing configuration example 202

12 Summit 300-48 Switch Software User Guide
Figures

Summit 300-48 Switch Software User Guide 13
Ta bl e s
1Notice Icons 17
2Text Conventions 18
3ExtremeWare Summit 300-48 Factory Defaults 22
4Command Syntax Symbols 27
5Line-Editing Keys 27
6Common Commands 28
7Default Accounts 31
8DNS Commands 33
9Ping Command Parameters 34
10 SNMP Configuration Commands 43
11 RADIUS Commands 45
12 Multiselect List Box Key Definitions 51
13 Greenwich Mean Time Offsets 54
14 SNTP Configuration Commands 56
15 Switch Port Commands 58
16 Switch Port-Mirroring Configuration Commands 62
17 EDP Commands 63
18 VLAN Configuration Commands 72
19 Wireless Port Antenna Command 77
20 Wireless Port Bridging Command 77
21 Wireless Show Commands 78
22 RF Configuration Commands 79
23 RF Profile Property Values 80
24 AP Scan Configuration Commands 81
25 AP Scan Results (Alphabetized) 82
26 Client Configuration Commands 83
27 Client Scan Commands 83
28 Client Scan Performance Results Per Wireless Interface 84
29 Client Scan Results 84
30 Client Current State Commands 85
31 Client Current State Details 85
32 Client Debugging Commands 86
33 Client Diagnostic and History Information 86

14 Summit 300-48 Switch Software User Guide
Ta b l e s
34 Client Aging Configuration Command 87
35 Switch-Level Wireless Configuration Commands 87
36 Switch-Level Configuration Property Values 87
37 Country Code Command 88
38 Country Codes 88
39 Wireless Port Configuration Commands 89
40 Wireless Port Configuration Property Values 89
41 Wireless interface Configuration Commands 90
42 Force Disassociation Command 90
43 Security Options 94
44 Wi-Fi Security Cipher Suites 96
45 VSA Definitions for Web-based and 802.1x Network Login 99
46 Network Login Configuration Commands 105
47 Authentication-Based Network Access Example 109
48 RADIUS Request Attributes 109
49 Vendor-Specific Attributes 110
50 Security Profile Commands 111
51 Security Profile Command Property Values 111
52 Security Configuration Options 112
53 HTTP and HTTPS Access Commands 113
54 Commands to Create Certificates and Private Key 114
55 Operator Commands for Port Power Budgeting 136
56 Power supplies 137
57 Power Parameter Restrictions 138
58 Power Supply Mode Commands 138
59 Per-Port LEDs 139
60 Power Over Ethernet Configuration Commands 139
61 PoE Show Commands 141
62 FDB Configuration Commands 145
63 Access Control List Configuration Commands 153
64 Traffic Type and QoS Guidelines 163
65 QoS Configuration Commands 163
66 Traffic Groupings by Precedence 164
67 802.1p Priority Value-to-QoS Profile to Hardware Queue Default Mapping 167
68 802.1p Configuration Commands 167
69 DiffServ Configuration Commands 168
70 Default Code Point-to-QoS Profile Mapping 169
71 Status Monitoring Commands 174
72 Port Monitoring Display Keys 177
73 Fault Levels Assigned by the Switch 178
74 Fault Log Subsystems 178
75 Logging Commands 180
76 Event Actions 184
77 STP Configuration Commands 189
78 STP Disable and Reset Commands 192
79 Relative Route Priorities 197

Summit 300-48 Switch Software User Guide 15
Ta b l e s
80 Basic IP Commands 198
81 Route Table Configuration Commands 199
82 ICMP Configuration Commands 200
83 Router Show Commands 203
84 Router Reset and Disable Commands 203
85 UDP-Forwarding Commands 206
86 Bootstrap Command Options 220
87 Bootloader Command Options 220
88 Boot Option Commands 221

16 Summit 300-48 Switch Software User Guide
Ta b l e s

Summit 300-48 Switch Software User Guide 17
Preface
This preface provides an overview of this guide, describes guide conventions, and lists other
publications that may be useful.
Introduction
This guide provides the required information to install the Summit™ 300-48 switch and configure the
ExtremeWare™software running on the Summit 300-48 switch.
This guide is intended for use by network administrators who are responsible for installing and setting
up network equipment. It assumes a basic working knowledge of:
•Local area networks (LANs)
•Ethernet concepts
•Ethernet switching and bridging concepts
•Routing concepts
•Internet Protocol (IP) concepts
•Simple Network Management Protocol (SNMP)
NOTE
If the information in the release notes shipped with your switch differs from the information in this guide,
follow the release notes.
Conventions
Table 1 and Table 2 list conventions that are used throughout this guide.
Table 1: Notice Icons
Icon Notice Type Alerts you to...
Note Important features or instructions.

18 Summit 300-48 Switch Software User Guide
Preface
Related Publications
The publications related to this one are:
•ExtremeWare Release Notes
•Summit 300-48 Switch Release Notes
Documentation for Extreme Networks products is available on the World Wide Web at the following
location:
•http://www.extremenetworks.com/
Caution Risk of personal injury, system damage,
or loss of data.
Warning Risk of severe personal injury.
Table 2: Tex t C o nve n t i o n s
Convention Description
Screen displays This typeface indicates command syntax, or represents information
as it appears on the screen.
The words “enter”
and “type”
When you see the word “enter” in this guide, you must type
something, and then press the Return or Enter key. Do not press the
Return or Enter key when an instruction simply says “type.”
[Key] names Key names are written with brackets, such as [Return] or [Esc].
If you must press two or more keys simultaneously, the key names
are linked with a plus sign (+). Example:
Press [Ctrl]+[Alt]+[Del].
Words in italicized type Italics emphasize a point or denote new terms at the place where
they are defined in the text.
Table 1: Notice Icons (continued)
Icon Notice Type Alerts you to...

Summit 300-48 Switch Software User Guide 19
1ExtremeWare Overview
This chapter describes the following topics:
•Summary of Features on page 19
•Security Licensing on page 22
•Software Factory Defaults on page 22
ExtremeWare is the full-featured software operating system that is designed to run on the
Summit 300-48 switch. This section describes the supported ExtremeWare features for the Summit
300-48 switch.
Summary of Features
The Summit 300-48 switch supports the following ExtremeWare features:
•Unified Access support
•Virtual local area networks (VLANs) including support for IEEE 802.1Q and IEEE 802.1p
•Spanning Tree Protocol (STP) (IEEE 802.1D)
•Quality of Service (QoS) including support for IEEE 802.1p, MAC QoS, and four hardware queues
•Wire-speed Internet Protocol (IP) forwarding
•Extreme Standby Router Protocol (ESRP) - Aware support
•Diffserv support
•Access-policy support for routing protocols
•Access list support for packet filtering
•Access list support for rate-limiting
•Load sharing on multiple ports
•RADIUS client
•Console command-line interface (CLI) connection
•Telnet CLI connection

20 Summit 300-48 Switch Software User Guide
ExtremeWare Overview
•SSH2 connection
•Simple Network Management Protocol (SNMP) support
•Remote Monitoring (RMON)
•Traffic mirroring for ports
Unified Access
The Summit 300-48 supports the Unified Access architecture, enabling wired and wireless applications
across a completely integrated enterprise infrastructure. With the Altitude product line, the Summit
300-48 supports 802.11 WLAN connectivity. Provisioning of Unified Access is completely controlled by
the Summit 300-48.
Virtual LANs (VLANs)
ExtremeWare has a VLAN feature that enables you to construct your broadcast domains without being
restricted by physical connections. A VLAN is a group of location- and topology-independent devices
that communicate as if they were on the same physical local area network (LAN).
Implementing VLANs on your network has the following three advantages:
•They help to control broadcast traffic. If a device in VLAN Marketing transmits a broadcast frame,
only VLAN Marketing devices receive the frame.
•They provide extra security. Devices in VLAN Marketing can only communicate with devices on
VLAN Sales using routing services.
•They ease the change and movement of devices on networks.
NOTE
For more information on VLANs, see Chapter 5, “Virtual LANs (VLANs)”.
Spanning Tree Protocol
The Summit 300-48 supports the IEEE 802.1D Spanning Tree Protocol (STP), which is a bridge-based
mechanism for providing fault tolerance on networks. STP enables you to implement parallel paths for
network traffic, and ensure that:
•Redundant paths are disabled when the main paths are operational.
•Redundant paths are enabled if the main traffic paths fail.
A single spanning tree can span multiple VLANs.
NOTE
For more information on STP, see Chapter 13, “Spanning Tree Protocol (STP)”.