Intel 470F - NetStructure Switch User manual

A18558-001
Intel®NetStructure™470 Switch User Guide
Intel®NetStructure™
470 Switch
User Guide
*A18558-001*
470TF-GD cover.p65 3/31/00, 11:13 AM1

Copyright © 2000, Intel Corporation. All rights reserved.
Intel Corporation, 5200 NE Elam Young Parkway, Hillsboro OR 97124-6497
Intel Corporation assumes no responsibility for errors or omissions in this manual. Nor does Intel make any commitment to update the
information contained herein.
* Other product and corporate names may be trademarks of other companies and are used only for explanation and
to the owners’ benefit, without intent to infringe.
First Edition May 2000 A18558-001
Year 2000 Capable
An Intel® product, when used in accordance with its associated documentation, is "Year 2000 Capable" when, upon
installation, it accurately stores, displays, processes, provides, and/or receives date data from, into, and between 1999
and 2000, and the twentieth and twenty-first centuries, including leap year calculations, provided that all other
technology used in combination with said product properly exchanges date data with it. Intel makes no representation
about individual components within the product should they be used independently from the product as a whole.
470T-inside pages.p65 3/30/00, 10:40 AM1

i
Intel® NetStructure 
 
 470T and 470F Switches User Guide CONTENTS
i
Contents
1.0 Setting up the Intel® NetStructure™
470T/F Switches 1
Overview ................................................................................... 1
Management .............................................................................. 1
Switch Features ......................................................................... 2
LEDs .......................................................................................... 3
Connection Guidelines .............................................................. 4
Straight-through vs. Crossover Cables ...................................... 4
2.0 Using the Intel® NetStructure™
470T/F Switches 7
Overview ................................................................................... 7
Sample Configuration ............................................................... 8
Flow Control ............................................................................. 9
Spanning Tree Protocol ............................................................. 9
Tagged Frames .......................................................................... 10
Priority Packet ........................................................................... 10
Link Aggregation ...................................................................... 11
Virtual LANs ............................................................................. 12
GARP VLAN Registration Protocol (GVRP) ........................... 15
Internet Group Multicast Protocol (IGMP) ............................... 16
3.0 Using Intel® Device View 2.1 17
Overview ................................................................................... 17
Installing Intel Device View ..................................................... 18
Starting Intel Device View ........................................................ 19
Installing a New Device ............................................................ 20
Using the Device Tree ............................................................... 21
Managing a Switch .................................................................... 23
Viewing RMON information .................................................... 24
470-UG TOC.p65 3/31/00, 12:20 PM1

ii
CONTENTS Intel®NetStructure 
 
 470T and 470F Switches User Guide
4.0 Using the Web Device Manager 25
Accessing the Web Device Manager ......................................... 26
Navigating the Web Device Manager ....................................... 27
Using Management Screens ...................................................... 28
Configuring the Switch’s IP Settings ........................................ 29
Configuring a Port ..................................................................... 30
Managing User Accounts .......................................................... 31
Configuring VLANs .................................................................. 33
Link Aggregation ...................................................................... 38
Static MAC Addresses .............................................................. 39
Configuring Community Strings and Trap Receivers ............... 40
Monitoring Switch Activity ...................................................... 41
Viewing/Changing Switch Information .................................... 42
Updating Switch Firmware ....................................................... 43
Saving Configuration Changes and Logging Out ..................... 44
5.0 Using Local Management 45
Overview ................................................................................... 45
Accessing Management ............................................................. 45
Logon Screen ............................................................................. 46
Navigation ................................................................................. 47
Configure Device ...................................................................... 49
IP Settings ................................................................................. 50
Port Settings .............................................................................. 51
Configure GBIC Ports (470T only) ........................................... 52
Switch Settings .......................................................................... 53
Configure Advanced Switch Settings ....................................... 54
Configure Spanning Tree Protocol ............................................ 55
Configure Spanning Tree for Ports ........................................... 57
Forwarding and Filtering ........................................................... 58
Configure IGMP Snooping ....................................................... 59
Configure Static MAC Addresses ............................................. 60
Configure Port Security ............................................................. 61
Configure MAC Address Filtering ............................................ 62
470-UG TOC.p65 3/31/00, 12:20 PM2

iii
Intel®NetStructure 
 
 470T and 470F Switches User Guide CONTENTS
Configure Ethernet Multicast Filtering ..................................... 63
Ethernet Multicast Filtering (ports) ........................................... 64
Port Mirroring ........................................................................... 65
Link Aggregation ...................................................................... 66
Broadcast Storm Control ........................................................... 67
Community Strings & Trap Receivers ...................................... 69
Administer User Accounts ........................................................ 70
How to Manage User Accounts ................................................. 71
Update Firmware and Config Files ........................................... 73
Reset and Console Options ....................................................... 74
Configure VLAN Operation Mode ........................................... 75
Port-based VLANs .................................................................... 76
Add a Port-based VLAN ........................................................... 77
Edit/Delete a Port-based VLAN ................................................ 78
Change Port Membership in a VLAN ....................................... 79
Configure 802.1Q VLANs ........................................................ 80
Add an IEEE 802.1Q VLAN (Configure Port Membership) .... 81
Add an IEEE 802.1Q VLAN (Configure Port Tagging) ........... 82
Configure PVID for Untagged/Priority Traffic ......................... 83
How to configure 802.1Q VLANs ............................................ 84
Edit/Delete 802.1Q VLANs ...................................................... 86
Edit an IEEE 802.1Q VLAN (Configure Membership) ............ 87
Edit an IEEE 802.1Q VLAN (Configure Port Tagging) ........... 88
Configure VLAN ID for Untagged Traffic ............................... 89
GVRP and Ingress Filter Settings ............................................. 90
Switch Overview ....................................................................... 92
Port Traffic Statistics ................................................................. 93
Port Error Statistics ................................................................... 95
Packet Analysis ......................................................................... 97
IGMP Snooping Status .............................................................. 98
Browse Address Table .............................................................. 99
VLAN and GVRP Status ........................................................... 101
Tools .......................................................................................... 102
Switch Event Log ...................................................................... 103
Ping a Device............................................................................. 104
470-UG TOC.p65 3/31/00, 12:20 PM3

iv
CONTENTS Intel®NetStructure 
 
 470T and 470F Switches User Guide
Appendix: Technical Info 105
What is a Configuration File? ................................................... 105
Sample Configuration File ........................................................ 106
BOOT Menu .............................................................................. 108
List of Factory Defaults ............................................................. 109
Troubleshooting/FAQs .............................................................. 110
Locating MIB files .................................................................... 111
Regulatory Information ............................................................. 112
Warnings ................................................................................... 112
Limited Hardware Warranty ..................................................... 115
Limited Hardware Warranty (Europe only) .............................. 116
Limitation de garantie du matériel (Europe) ...................... 117
Garanzia limitata sull’hardware (valida solo in Europa) ... 118
Beschränkte Hardwaregarantie (Nur für Europa) .............. 119
Garantía limitada de hardware (sólo para Europa) ............ 120
Index 121
Intel Customer Support Last Page
470-UG TOC.p65 3/31/00, 12:20 PM4

Setting up the Intel®
NetStructure™ 470T
and 470F Switches
1
1
Overview
This guide provides information on configuring and managing the Intel®
NetStructure 470T and 470F Switches; it is organized into five chapters:
•Chapter 1 - Identifying and connecting the switch hardware.
•Chapter 2 - Using the switch in a LAN and advanced features such as
link aggregation and VLANs
•Chapter 3 - Using Intel Device View
•Chapter 4 - Using Web Device Manager
•Chapter 5 - Using Local Management
Management
Through the switch’s built-in management you can configure the device and
monitor network health. There are several methods for managing this
switch; you can use one method or any combination.
•SNMP management applications like Intel Device View, LANDesk®
Network Manager, or HP OpenView* are tailored for Intel products and
show a graphical representation of the device.
•Onboard management allows control over the device without using an
SNMP application. The Web Device Manager provides a graphical
interface while Local Management is a menu-driven interface.
•Other SNMP-compliant applications can manage the 470 switches if
you compile the switch’s MIB files into that application.
470T Ch1.p65 3/30/00, 5:49 PM1

2
CHAPTER 1 Intel ® NetStructure 
 
 470T and 470F Switches User Guide
Switch Features
These are the major features of the 470 switches.
• 100/1000 Base-T auto-negotiates speed, duplex, and flow control—100Mbps or
1000Mbps
per port
•470F supports 1000SX, 1000LX, and 1000LH GBICs
•Half- and full-duplex flow control
•Port settings can be configured manually through management
•Access menu-driven Local Management through the serial port or a Telnet session
•Access the graphical Web Device Manager through a Web browser
1000 Base-SX
Port
Status
LED
8-port 470F Switch (Product Code ES470F)
6+2-port 470T Switch (Product Code ES470T)
AC Power
Plug
Back of 470 Switch
GBIC Port
MAC
Address
Status
LED
Link/Activity LEDs
Link/Activity LEDs
(bottom row)
Speed LEDs
(top row)
Serial
Port
Serial
Port
1000 Base-T
Port
470T Ch1.p65 3/30/00, 5:49 PM2

3
Setting Up the Intel ® NetStructure 
 
 470T and 470F Switches CHAPTER 1
470 Setup
LEDs
The LEDs to the left of the ports indicate port status, individual port speed,
and port activity.
LED Color Meaning
Status Blinking green Switch is performing diagnostics and booting.
(This lasts for 20–30 seconds.)
Solid green Diagnostics have passed, the switch is ready.
Blinking green Diagnostics have failed. (After the initial 20–
30 seconds, the LED will continue blinking if
diagnostics fail.)
Link/Activity Solid green Device linked.
Blinking green Receiving activity on that port.
Off No link detected.
Speed Solid green Device connected at 1000Mbps.
(470T only) Off Device connected at 100Mbps.
470F
Link/Activity
470T
Status
Status
Link/Activity
Speed
NOTE
After the switch is first powered
on, the Status LED blinks green
once before the diagnostic mode
starts.
470T Ch1.p65 3/30/00, 5:49 PM3

4
CHAPTER 1 Intel ® NetStructure 
 
 470T and 470F Switches User Guide
Connection Guidelines
General
•The 470T switch is capable of auto-negotiating port duplex. It can
operate at half- or full-duplex at 100Mbps, and full duplex at
1000Mbps. The switch matches the highest possible speed of an
attached device.
•The 470F operates at full-duplex and at 1000Mbps.
Cabling
•Use Category 5 unshielded twisted-pair (CAT 5 UTP) cable when
connecting 1000Mbps or 100Mbps devices to the switch.
•Limit the cable length between devices to 100 meters (330 feet) for
copper wire.
•Use a straight-through cable to connect the switch to a server or
workstation.
•To connect to another switch or hub, use a crossover cable.
Straight-through vs. Crossover Cables
Switch ports are wired MDI-X, so use a straight-through cable to connect to
a workstation or server (network adapter cards are wired MDI). To connect
to another MDI-X port, use a crossover cable. Following pin arrangements
are for the switch’s Ethernet port and the typical RJ-45 connector. The
wiring diagrams illustrate how to wire a straight-through and crossover
cable for 100Mbps and 1000Mbps devices.
Straight-through UTP cable (100Mbps)
Switch (MDI-X) Adapter (MDI)
NOTE
If you do not use certified
Category 5 cables to connect
1000Mbps devices to the switch
you may get errors.
470T Ch1.p65 3/30/00, 5:49 PM4

5
Setting Up the Intel ® NetStructure 
 
 470T and 470F Switches CHAPTER 1
470 Setup
Crossover UTP cable (100Mbps)
Switch (MDI-X) Hub (MDI-X)
Straight-through UTP cable (1000Mbps)
Switch (MDI) Switch (MDI)
470T Ch1.p65 3/30/00, 5:49 PM5

6
CHAPTER 1 Intel ® NetStructure 
 
 470T and 470F Switches User Guide
470T Ch1.p65 3/30/00, 5:49 PM6

Using the Intel®
NetStructure™ 470T
and 470F Switches
2
7
Overview
Chapter 2 is designed to provide an overview for using the Intel®
NetStructure™ 470T and 470F Switches within a network. This chapter
covers switching features like flow control and spanning tree, and includes a
discussion of the more advanced features such as link aggregation and the
types of VLANs available on the switch.
If you are already familiar with switching technology you can skip ahead to
a particular section within the chapter. Here is a basic overview of the
chapter and the pages where you can find a particular topic:
•Sample Configuration page 8
•Flow Control page 9
•Spanning Tree Protocol page 9
•Tagged Frames page 10
•Priority Packet page 10
•Link Aggregation page 11
•Virtual LANs page 12
•GVRP page 15
•IGMP Snooping page 16
470T Ch2.p65 3/30/00, 5:54 PM7

8
CHAPTER 2 Intel ® NetStructure 
 
 470T and 470F Switches User Guide
Sample Configuration
The following example illustrates how the 470T and 470F switches can be
used in a network.
In this example, the 480T functions as the backbone of the network,
providing routing capability. The 470T and 470F switches provide gigabit
connectivity from the 480T to the 460T desktop switches via the 460s’
gigabit uplinks.
100Mbps
1000Mbps
Link Aggregation
group
470T Ch2.p65 3/30/00, 5:54 PM8

9
Using the Intel ® NetStructure™ 470T and 470F Switches CHAPTER 2
Using the 470
Flow Control
During times of heavy network activity, the switch’s port buffers can
receive too much traffic and fill up faster than the switch can send the
information. In cases like this, the switch tells the transmitting device to
wait so the information in the buffer can be sent. This traffic control
mechanism is called flow control.
The method of flow control depends on whether the port is set to full- or
half-duplex. If a port is operating at half-duplex, the switch sends a collision
(also called backpressure) which causes the transmitting device to wait. If
the port operates at full-duplex, the switch sends out an IEEE 802.3x
PAUSE frame. You can enable or disable flow control for each port on the
470 switches.
Spanning Tree Protocol
Spanning Tree Protocol, as referenced in the IEEE 802.1D specification, is a
protocol designed to prevent any loops within the network topology. A loop
can occur if there is more than one path for information to travel between
devices. The Spanning Tree Protocol works by determining the “cost”of a
connection. For example, if two devices are connected by two links,
Spanning Tree uses the connection with the lowest cost and blocks the
second connection.
Spanning Tree prevents loops by allowing only one active path between any
two network devices at a time. However, you can also use this protocol to
establish redundant links between devices which can take over in the event
the primary link fails.
In this example, Client A can communicate with Server B over two different
paths. The primary path is Path 1 because the cost of the connection between
switches A and C is lower than the cost between switches A, B and C. If the
primary path fails, then traffic is automatically sent over the backup path.
Backup Path from Client A to Server B:
Switch A –> Switch B –> Switch C
Primary Path from Client A to Server B: Switch A –> Switch C
470T Ch2.p65 3/30/00, 5:54 PM9

10
CHAPTER 2 Intel ® NetStructure 
 
 470T and 470F Switches User Guide
Tagged Frames
The 802.1D (1998 Edition) and 802.1Q specifications published by the
IEEE (Institute of Electrical and Electronic Engineers) extended Ethernet
functionality to add tag information to Ethernet frames and propagate these
tagged frames between bridges. The tag can carry priority information,
VLAN information, or both and allows bridges to intelligently direct traffic
across the network.
Some devices don’t recognize the tagged Ethernet frames. These devices see
a frame that is too big, and then discard it. When operating 802.1Q (tag-
based) VLANs, there is a way to configure the switch to work with these
untagged devices. For more information see “How to configure 802.1Q
VLANs”in Chapter 5.
Priority Packet
The IEEE 802.1D (1998 Edition) specification incorporates IEEE 802.1p
and defines information in the frame tag to indicate a priority level. When
these tagged packets are sent out on the network, the higher priority packets
are transferred first. Priority packet tagging (also known as Traffic Class
Expediting) is usually set on the LAN adapter in a PC or switch and works
with other elements of the network (switches, routers) to deliver packets
based on priority. The priority level can range from 0 (low) to 7 (high).
The 470 switches can read the priority tags and forward traffic on a per port
basis. The switches have two priority queues per port and queue the packet
based on its priority level. For example, when a packet comes into a switch
with a high priority tag, the switch inserts the packet in its high-priority
queue.
Even though there are eight priority levels, the 470 switches can only put a
packet into one of the two queues. The switch maps levels 0-3 to the low
queue and levels 4-7 to the high queue. If a packet is untagged, the switch
can be set to use either the high or low queue for that port. The
470 switches preserve the priority level of the packet.
470T Ch2.p65 3/30/00, 5:54 PM10

11
Using the Intel ® NetStructure™ 470T and 470F Switches CHAPTER 2
Using the 470
Link Aggregation
Link aggregation allows you to combine from two to four (adjacent) ports
so that they function as a single high-speed link. For example, link
aggregation is useful when making connections between switches or
connecting servers to the switch.
Link aggregation, sometimes known as port trunking, is used to increase the
bandwidth to some devices. Link aggregation can also provide a redundant
link for fault tolerance. If one link in the aggregation fails, the switch
balances the traffic among the remaining links.
To aggregate ports, you must link an “anchor”port with an adjacent port.
The 470 switches support up to four link aggregation groups (anchor ports
1,3, 5, or 7). All aggregated ports must be the same speed.
Guidelines
•The switch treats aggregated links as a single port. This includes
spanning tree and VLAN configurations.
•For the 470F: Anchor ports 1, 3, and 5 can each have up to four
aggregated ports; anchor port 7 can have two.
•For the 470T: Anchor ports 1 and 3 can each have up to four aggregated
ports; anchor ports 5 and 7 can each have two.
•All ports share the same settings as the anchor port. You can change
anchor port settings, but you cannot configure other ports in the link.
•When a port is configured as a member of an aggregated link, it adopts
the configuration of the anchor port. When a port is no longer a member
of an aggregated link, the configuration is reset to the default settings
(auto-negotiate speed/duplex, flow control enabled).
•If a port is part of an aggregated link, it cannot be configured as the
target port for a port mirror. However, a port in an aggregated link can
serve as the source port for a port mirror.
•When connecting to another switch, connect anchor port to anchor port,
and member port to member port.
470T Ch2.p65 3/30/00, 5:54 PM11

12
CHAPTER 2 Intel ® NetStructure 
 
 470T and 470F Switches User Guide
Virtual LANs
A Virtual LAN is a logical network grouping that allows you to isolate
network traffic so members of the VLAN receive traffic only from other
members. Creating a VLAN is the virtual equivalent of physically moving a
group of devices to a separate switch (creating a Layer 2 broadcast domain).
The advantage of VLANs is that you can reduce broadcast traffic for the
entire switch, and increase security, without changing the wiring of your
network.
The 470 switches support two types of VLANs:
•Port-based
•Tag-based (IEEE 802.1Q)
Port-based VLANs
This is the simplest and most common form of VLAN. In a port-based
VLAN, the system administrator assigns the switch’s ports to a specific
VLAN. For example, the system administrator can designate ports 1, 2, and
3 as part of the engineering VLAN and ports 5, 6, 7, and 8 as part of the
marketing VLAN. The advantage of port-based VLANs is that they are easy
to configure and all changes happen at the switch so they are transparent to
the users. The 470 switches support a maximum of four port-based VLANs.
A port can belong to only one VLAN at a time.
If a user changes location, the system administrator reassigns the port to the
new VLAN. Another advantage is if a switch (or hub) is connected to a port
that is part of a VLAN, all devices connected to the switch are also part of
the VLAN. You cannot exclude an individual device on that switch from
becoming part of the VLAN.
470T Ch2.p65 3/30/00, 5:55 PM12

13
Using the Intel ® NetStructure™ 470T and 470F Switches CHAPTER 2
Using the 470
IEEE 802.1Q (tag)-based VLANs
The other type of VLAN supported by the 470 switches is based on the
IEEE 802.1Q specification. The specification provides a uniform way for
creating VLANs within a network and allows the creation of a VLAN that
can also span across the network. Until the release of the IEEE 802.1Q,
VLAN implementation had been vendor-specific, so it was not possible to
create a VLAN across devices from different vendors.
The 802.1Q VLAN works by using a tag added to the Ethernet frames. The
tag contains a VLAN Identifier (VID) that identifies the frame as belonging
to a specific VLAN. These tags allow switches that support the 802.1Q
specification to segregate traffic between devices and communicate a
device’s VLAN association across switches.
There are multiple advantages to implementing 802.1Q VLANs. First, it
helps to contain broadcast and multicast traffic across the switch thus
improving performance. Second, ports can belong to more than one VLAN.
Third, VLANs can span multiple switches that support the 802.1Q
specification. Finally, it can provide security and improve performance by
logically isolating users and grouping them together.
A logical grouping may be mapped to a workgroup. For example, you can
create a VLAN that groups all the users from the engineering department. A
benefit of this logical grouping is that it improves performance by reducing
traffic that belongs to a different logical group (i.e. marketing), improves
security (engineering can’t see marketing), and eases moves since the user
doesn’t have to be physically located in the same group to participate in the
VLAN.
470T Ch2.p65 3/30/00, 5:55 PM13

14
CHAPTER 2 Intel ® NetStructure 
 
 470T and 470F Switches User Guide
Spanning Tree and VLANs
The 470 switches support the Spanning Tree Protocol across the entire
switch, not per VLAN. If a loop occurs in a VLAN the port is disabled and
all VLAN traffic over that port is blocked.
A good example of this is seen below. Both Switch 1 and Switch 2 have two
port-based VLANs configured. Crossover cables connect the ENG_VLAN
on Switch 1 to ENG_VLAN on and Switch 2. Crossover cables also connect
the MRKT_VLAN on Switch 1 to the MRKT_VLAN on Switch 2. When
Spanning Tree is enabled, the redundant link between the MRKT_VLANs is
blocked and those VLANs can no longer communicate.
470T Ch2.p65 3/30/00, 5:55 PM14