Home

User Manual - WideBand Corporation

Contents

1. Watchmen Control Network Management Unit ee ee Find Devices nMU Adminestsation Watchmen Control Update Control Topology Control VLAN Control LI Virtual Chassis Current Watchmen a Edit Watchmen Aggregate Failure Watchman Settings BCSC Discards Name Aggregate Fedure Heavy Traffic on Link Event Type LACP Churn v High Error Count Connecton Type Connect to All Ports in Department v Unstable Aggregate Connect to Department All Departments v Time interval 1 hour v L ii Seve Edts Add L Remove JL Restore Defaults J amp done intere Figure 6 The WideBand Watchmen can be created and modified on the Watchmen Control screen The following table describes the default watchmen on the WideBand nMU Watchman Name Description Aggregate Failure Checks every hour for links that are continually trying but failing to aggregate The IEEE 802 3ad standard calls this phenomenon a LACP Churn A common cause for LACP Churns is when more than two managed switches are connected through one cheap switch that just forwards the LACP packets In this situation aggregation cannot 10 BCSC Discards Checks every hour for 1000 or more discarded packets due to broadcast storms Broadcast storms occur when the network is saturated with broadcast traffic An undesired loop in the network is a common cause for these storms Data Not Mirrored Checks every 2 hours for any mirrored fs ix server that has lost Heavy Traffic on Link Checks every 30 minutes for an aver
2. d Network Management Unit Microsoft F e Fo Wem Footer Toss Hep Ou O 1020 Pwo iros O S 289 103 Adress E Nt 172 23 209 298 ve ws LLLI 1 NIIP Hosts Network Settings Customer Support Servico IP 17221210140 fslix Gold Server Mirror ID 00 18 4347 2548 Device identification Device Information Mane GoldServeri Device Uptimec 1 day 5 12 Deparment Storage Motel Mo OOLOSERVER Descnpbot Gold Server n Storage Closet LUN e Ser ce Mode standard EE a Figure 26 Device Control 42 Server Statistics On this screen you will see a count of all the bytes and all the packets that have been sent or received by a Gold Server on either network interface See Figure 27 This screen also keeps track of errors transmitting packets and the number of dropped packets F e E ve Footers Too Hep L3 Qu O DBA Pwo fro 0 3 8 103 Address ME tp 172 212 209 294 Name GoldServert fix Gold Server GoidiD 00 18 F3 57 25 99 Service IP 17221210140 fslix Mirror ID 00 19 F3 67 25 6E LAN Port Statistics TRANSMITTED RECEIVED Bytes vacsmitec cn mtertyce 90569818 Bytes recewed on interface 131363743 Pachets Yarsm jec on ntetace 511723 Packets receterd on intertace 1067964 Pathet ranse problems on maraca 0 Bad packets recemwed on intertace Y Tranarmid packets droppes 0 Recewed packets cropped b Mirroring Port Statistics TRANSMITTED RECEIVED Bries raremfie on mertoce 767469299886 Bytes record on int
3. technical support team to SSH into your server remotely and give direct support For security reasons only enable remote support when assistance is needed 56 Server Update Control Here you may change your server s update settings or start a manual update To receive updates the servers must be provided with correct gateway and DNS information as well as outbound TCP access to the internet through port 80 21 873 23 20 37 or 123 Updates are enabled by default icroseft Fe to Ves fota toch S p Om O DAO Pao ron O E D 9 03 AA WideBand AZ Update Control Netart Health Analyzer Name GoldServert ivl Gold ID 00 18 F 3 67 25 99 Service IP 17221210 140 fsiix Gold Server Mirror 1D 00 18 F3 67 25 5E Automatic Updates A F Enable Automatic Update Automatic Update Time X Shown itary units Save Update Setings Manually Update Gold Server Stet Update Figure 39 Update Control Screen Enable Automatic Update Select this field to receive daily updates for the Gold Server set Automatic Update Time The time in military units that the Gold Server will update at each day Start Update Run a Gold Server update on the primary unit right now 57 Server Backup Control Gold Servers support the optional off site backup service The off site copy of the data is sent 256 bit AES encrypted over the Internet This provides the user with a greater degree of protection for sensit
4. they may find This makes the WideBand nMU a constantly growing and improving product Connecting to the nMU Before the WideBand nMU can be used it must be configured with a password and correct IP settings This is done by connecting a keyboard and monitor to the front panel and following the instructions on the screen Once startup configuration is complete the management interface can be accessed through a standard browser By default DHCP is enabled on the nMU so it will learn a dynamic IP address if a DHCP server is present on the network The management interface can be accessed from any standard browser at the URL http xxx xxx xxx xxx where XXX XXX XXX XXX is the current IP address assigned to the nMU F WideBand Network Management Unit Microsoft Internet Explorer E a tj Fle Edt View Favortes Toos Me gt Om gt x 2D Ph Sure El itp r172 21 13 v ae WideBand AZ User Login Network Management Unit WideBand on the Web Online Technical Support Please Log In NMS User ID Password Network Management Unit Log in amp done O intere Figure 1 Users are required to supply a User ID and Password Once a user has successfully logged on a static IP address can also be assigned through the browser interface See the Network Interface Screen section User Login On the User Login screen you are required to supply a user ID and password See Figure 1 The WideBand nMU ships with
5. Primary Group The group that will be given ownership by default to files folders that are created by this user through SSH Group Membership List This list shows every group that the selected user is currently a member of on this Gold Server The group that is marked with Primary Group is set by the 46 Primary Group field in the Add Edit a User Section at center and cannot be modified through this list Manage Groups On Server This screen may be used to add or remove groups You may also manage group membership Met orig Corti al Metmorh Setimgs Name GoldServert fs ix Gold Server Gold ID 00 18 F3 67 25 99 Service IP 172 21 210 140 Mirror ID 00 18 F3 67 25 6E Existing Groups ee Add a New Group developers Delete Group Delete Group edere Settings for Group admin Select user Odresrstetor L4 ddUser Remove User Users la This Groap atrrerestrater As Pomar Group S Zaa Figure 31 Manage Groups Users in Group List This list shows every user that is currently a member of the selected group The users that are marked with As Primary Group are set by the Primary Group field for each user on the Manage Users screen and cannot be modified by this screen 47 Windows Networking On Server Here you may configure Windows networking options including the server s identity settings and global share parameters Next to the Apply Changes button there
6. _Off This link is not yet ready to send data Defaulted On No Partner is detected so default values are in use _Off A valid Partner is running on the other end of the link Expired On Partner has not responded for Timeout time and this link is getting ready to go to the default Partner values _Off A recent response from the Partner has been received For more information on Link Aggregation please see Link Aggregation under Department Topology Settings later in this manual Spanning Tree State Ethernet networks are normally susceptible to traffic loops Such loops occur when a user accidentally connects ports in such a way that data gets stuck in an endless path The loop will continue to collect traffic until it crashes the entire network with a packet storm To resolve this potentially serious problem IEEE developed the Spanning Tree Protocol IEEE 802 1D This protocol monitors each link and disables any that create loops This feature comes at the small cost of a 45 second delay that begins when the port links and continues until it starts passing data The purpose of this delay is to allow Spanning Tree to check for loops on the link before enabling it On the WideBand Professional Series Switches Spanning Tree is disabled by default Spanning Tree is also occasionally used for redundancy since multiple paths can be connected between two points If one path is lost the other will start working The Port Control screen displays several
7. designed to automatically configure the VLAN settings across the network based on the settings entered on the VLAN management screens The VLAN screens menu can be accessed through the VLAN Control button on the top banner 18 VLAN Definitions This screen is where every VLAN on the network is defined To create a new VLAN definition modify the Name VLAN ID and VLAN Index fields Then click the Save Edits button See Figure 11 A new entry will be added to the Current VLANS list as long as the VLAN ID is not already defined The following table describes the VLAN definition settings 3 WideBand Network Management Unit Microsoft Internet Explorer Fle Edt View Favortes Toos Hep OQ tos DO arh Sree El itp 172 21 1 3 Ee ses VLAN Definitions eel Find Devices nMU Ademinesti ation Watchmen Control Update Control Topology Control VLAN Control LI Virtual Chassis VLAN Guide 1 Add VLANs to the network with the VLAN Definitions screen Create one definition for each VLAN ID 2 Set which VLANs can see each other with the VLAN Overlaps screen 3 Configure what VLAN i assigned to every switch port on the VLAN End Points screen Every port i assigned to only one VLAN More specific end ports take precedence over less speci c end points 4 White the VLAN configuration to the switches using the Apply VLANs screen Current LAD A Add Edit VLANs Name ID BCSC Status Name Default VLAN 1 Default VLAN 1 1 Disabled
8. Frames Y Forward 15 Delay sec Information Extracted From 00 A0 8D 88 05 64 JUPITERLIGHT Note These settings are only valid for Departments with Aggregation Hash Settings Spanning Tree enabled Evaluation Bit xor Mode Polynomial Mode Disable L4 header filtering C Disable L3 header filtering Disable L2 header filtering C Save Department Settings 4 done interet Figure 10 The Topology Control screen contains settings that apply to multiple switches on the network 17 Link Aggregation Link Aggregation also known as Port Trunking is the ability to set up network ports on a device to work together as one higher bandwidth link The WideBand Professional Series Switches use the IEEE 802 3ad Link Aggregation Control Protocol LACP to automatically configure the ports in this manner This feature is enabled by default on the Professional Series Switches and up to 16 ports can be connected in one aggregate Refer to the Department Topology Settings section of this manual for information on controlling Link Aggregation Here are some important requirements that you must keep in mind while connecting multiple links for any aggregate e Every link must be running at the same speed e Full Duplex is required on every link in the aggregate e Link Aggregation must be enabled on both ends of the aggregate If any of these requirements is not met the links will not aggregate together which could create a network
9. The Network Settings screen is where the server hostname IP addresses subnet mask gateway and DNS information may be configured Fle t View Fevertes Took Help e Q x DO Pen Frm 5 0 D3 Dres 12 21 20 198 WideBand a Netan Heath Arabyser Name GoldServert fslix Gold Server Gold IC 00 18 F3 57 25 99 Service iP 172 21 210 140 Mirror ID 00 18 F3 67 25 5E Server Network Settings Server Host ane Gold Sereeri Serice iP Address 17221210 14 Gold IP Address 172 21 210 136 Manor P Address 17221210139 Subnet Mask 255 26600 Defaut Gateway 1722112 PamayONS 642106 11 8 cent ONS 64216 11 4 Seve Setings Dore Figure 29 Network Settings Screen Server Name A unique name that identifies this server on the network Service IP Address A static IP address that is shared between the Gold and Mirror units in the Gold Server set This is the IP address that should normally be used to communicate with the Gold Server set Gold IP Address A static IP address that is assigned to the Gold unit Mirror IP Address A static IP address that is assigned to the Mirror unit Subnet Mask The IP mask for all three IP addresses used by the Gold Server set Default Gateway The default IP gateway for the Gold Server set Primary DNS IP address of the primary DNS server for the Gold Server set Secondary DNS IP address of the secondary DNS server for the Gold Server set 45 Manage Users On Server
10. This screen may be used to add edit and delete users You may also manage a user s group membership Pie ta e tevertes Toots Hb e Qu x 2 e JO sem Sy Fortes 5 B U 3 A ero 4172 21 201 19 WideBande Manage Users Name GoldServert fiyl Gold ID 00 18 F3 57 25 99 Service IP 17221210 140 fslix Gold Server Mirror 1D 00 18 3 67 25 6 Existing Users Add Edit a Uster c Manage Groups for User administrator Adi tec User Name dmn timc Select gosp dmn Users Real Name None Join Group JL Loewe Group User s Password Cortem Paseword Group Membership For User SSH Prvieged User ves O Ne semen Primary Group developers Dore eene Figure 30 Manage Users Screen User Name A unique user name that this user will use to log in User s Real Name The user s full name This field is optional and only used for your own future reference User s Password A password this user will need to know in order to prove his her identity When making changes to a current user this field can be left blank indicating that the password should not change Confirm Password This field must be the same as the User s Password field in order to save a new password SSH Privileged User SSH or Secure Shell access allows the user to open a fs ix shell connection To keep your Gold Server secure only give SSH privileges to users who need it such as developers and administrators
11. a Windows machine using iSCSl The first step is to install the SCSI Initiator which may be downloaded at the following URL http www microsoft com downloads details asox FamilyID 12cb3c1a 15d6 4585 b385 befd1319f825 amp DisplayLang en Next open the iSCSI Initiator go to the Discovery tab and click Add Enter your server s shared address in the window provided From the Targets tab click Log On From this window check Automatically restore this connection when the system boots and click the Advanced button Next check CHAP logon information and fill out the User name and Target secret fields with the iSCSI username and password you entered while configuring your servers Go to the Bound Volumes Devices tab click Bind All then click OK After this has been done go to Control Panel Administrative Tools Computer Management Storage Disk Management This will bring up the Write Signature and Upgrade Disk Wizard Click Next and select the checkbox beside the new disk then click Next Next Finish Create Volume Wizard ER Xj Next right click on the new disk and a s ormat Volume click on Create Volume From here You can customize the formatting of the partion most of the defaults are acceptable However you may choose to perform a Specily whether you want to format this volume quick format re label the drive or change other configuration settings When this is done you may begin C D
12. address will be completely disabled Note Once the configuration information has been entered into the Gold Server the Mirror Server will initialize automatically t will then sync the mirrored partition This will take several hours The Server may be used for storage during this period but will not operate at full speed Server Device Control After your servers have been configured you will be taken to the Device Control screen see Figure 26 If your servers are in standard mode you may also manage your servers directly by typing the shared IP address into your browser s address bar or by clicking on the blue IP address labeled as the Service IP Also shown here is the name assigned to your Gold Server as well as the department description service mode uptime and link status The gold highlighting on the Gold ID see Figure 26 indicates that the Gold unit is currently primary Clicking on the ID will take you to that unit s Device Control screen Note Several management screens are only available on the primary unit of a Gold Server even when it is in standard mode An attempt to access these screens on the secondary unit will result in an error In this case just click on the Device ID of the primary unit in the right hand side of the banner and try again From this screen you may choose to change the servers password and department or service mode You may also reboot the server or make it no longer managed by the nMU 41
13. configuration The Gold Server supports three security modes which define how the server will verify its Windows users Share Level When in share level mode the server will allow access to any user who knows a correct password This is the lowest level of security and is not recommended for most applications User Level When user level security is used each user must provide a correct username and password in order to access share data This is the preferred security mode when the Gold Server is not a part of an Active Directory Active Directory When a Microsoft Active Directory is present on the network The Gold Server can receive all of its user and group information from the directory server Also all user authentication will be done with Kerberos so passwords will not be sent across the network in plain text Active Directory Section Active Directory Domain The Microsoft Active Directory Domain the Gold Server should connect to Kerberos Realm The Kerberos realm that should be used for authentication This is normally the same as the domain but all upper case As an example for the AD domain example com the Kerberos realm would be EXAMPLE COM Bind User The Active Directory user to use when binding this server to the domain normally an administrative user Password The Kerberos password for the Bind User 49 Windows Shares On Server You may create Windows shares and allow users to store and access
14. continue See Figure 5 Once this information has been entered the nMU will automatically apply all of the department s current settings to the new device Refer to the Department Topology Settings section for more information on department settings x EZ 3 WideBand Network Management Unit Microsoft Internet Explorer CI t3 Fle Edt View Favortes Tools Mep Eid OQ tos x 2 A Dh Sree A tp ir172 21 1 3 v ae WideBand A Device Control Watchmen Control VLAN Control L3 Virtual Chassis Find Devices nMU Adminsst ation Update Control Topology Control Password and Department Device Name ALBRIGHT Device ID 00 A0 8D 40 05 E8 Password Cor rm Password Enter New Department IAS or Select Existing Department IAS v Set Management 48 done internet Figure 5 The nMU requires a password and department before it will manage a device Watchmen Control The WideBand Watchmen are periodic checks that run on the nMU to look for specific conditions that might occur When the condition is met for a watchman an event is generated and added to the Watchmen Log This log is then emailed to a list of recipients WideBand Watchmen are very useful for maintaining an up to date understanding of how a network is performing 3 WideBand Network Management Unit Microsoft Internet Explorer E E 3 Fle Edt View Favorkes Toos Melp r Qt da JO sexh Gress El hitp 172 21 1 v ae WideBand
15. describes the most common fields Field Name Description 2 Name Ihenamethat will be assigned to this watchman Event Type The type of event this watchman will generate See the Connect to Department Specifies the group of devices this watchman will apply to Only valid if both the Connect to Device and Connect to Port fields are GMD 2 ew eec oe s ee ee Do y Time Interval Indicates how often the watchman check will be performed 11 Watchmen Types The following table describes the different watchman types that are currently defined Watchman Type Description Error Counter Limit Adds up all of the counter errors for each port and compares that Exceeded u t0tal to the specified Number of Errors limit for the time interval Specific Counter Limit Looks for an exceeded limit for a specific counter on each port within E Exceeded thespecifiedtime interval 4 Bandwidth Utilization Checks for links that exceed a defined average bandwidth within the 2z Limit Exceeded specified time interval Aggregate Changed Looks for links that have changed aggregate status too many times m in the defined time interval 4 BCSC Discard Checks at the total number of packet discards within the time interval Exceeded due to broadcast storms on each device Ping Failed Makes sure a specified IP address is
16. files on your server over the network Name GoldServert fiy Serve Gold ID 00 18 F3 57 25 99 Service IP 172 21 210 140 fs X Gold f Mirror ID 00 18 F3 67 25 5E Windows Shares cc Settings for Windows Share Share Narre 2 Use Share Name for Folder Name Spec ty Folder Name Bask Permmesion User Hand Write E Comment SSH Access Rights User who owns Pis stare apache v Groug that pens fus share Wstusers Sm Famov a Manage Shave PrWeges Done Yterret Figure 33 Windows Shares Share Name The name that will be used to access this share on the network Folder Name The name of the folder that will contain all of the share data The folder will be created if it does not already exist Basic Permission Used to control what types of access this share will allow Allowing guest access opens the share to anyone The settings on this field can override any settings on the Share Privileges screen Comment A description of the share that Windows machines will see when browsing the network User who owns this share To control data access from SSH users files folders created within this share will be owned by this user Group that owns this share To control data access from SSH users files folders created within this share will be owned by this group 50 Share Privileges On Server User and Group Privileges sections allow you to select a user or a group and give them read only or read write privileges on the selec
17. not already in the Current Users list If an existing user ID is entered with a new password its password will be changed User Privileges All nMU users have read access to every device on the network by default The desired write privileges must be enabled for each user The WideBand nMU organizes write privileges by department Each device is added to a department when the nMU takes control of it See the Making Devices Managed by nMU section To give a user write access to a department do the following 1 Select the user name you wish to modify from the Current Users list on the left The settings for the user ID you selected should show in the Settings For User section 2 In the Select Department drop down box find the department you would like the user to be able to access and then click on the Add Dept Access button Note that if the nMU is not yet managing any devices no departments will be listed in the Select Department drop down box 3 The newly added department should be added to the User s Write Access Departments list on the right You can give a user access to a limited group of departments or alternatively you can give a user access to all departments Only users with access to all departments can modify VLAN settings or change the department assignment on switches and servers These privileges are limited in this way because these kinds of changes affect all departments Find A Device Screen When a user logs on
18. on this device 1 ed Aug 16 14 06 00 2006 Aggregate F allure event occurred for port 16 on device VENUSLIGHT 00 A0 D 50 04 50 LACP actor chum detected aggregation state will not stabilize on this device 2 WodAug 16 1506 00 2008 Aggregate Failure event occurred for port 16 on device VENUSLIGHT 00 A0 8D 50 04 50 LACP actor chum detected aggregation state will not stabilize on this device 3 WedAug 16 16 06 00 2006 Aggregate F ailure event occurred for port 16 on device VENUSLIGHT 00 A0 8D 50 04 50 LACP actor churn detected aggregation state will not stabilize on this device 4 WedAug 16 17 06 01 2006 Aggregate Failure event occurred for port 16 on device VENUSLIGHT 00 A0 8D 50 04 50 LACP actor churn detected aggregation state will not stabile on this device 5 Wed Aug 16 18 0601 2006 Aggregate F ailure event occurred for port 16 on device VENUSLIGHT 00 40 9D 50 04 50 v 4 oore Internet Figure 7 The Watchmen Logs screen maintains a list of every watchman event that has occurred Email Recipients The WideBand nMU will send watchmen event logs to every address specified in the list of recipients The default address is the following fsixsupport fsix com WideBand Corporation suggests that you leave the default address and just add any other addresses to the list That way technical support will have a better understanding of any issues that you might encounter Note Email addr
19. 0 Mbps Average Rx Mbps 0 02 Mbps Unitast Ok 2618301 Unicast Ok 3597128 Multicast Ok 92259 Multicast Ok 1198991 Broadcast Ok 4604078 Broadcast Ok 35178 Deferred 0 Short but OK 0 Collisions 0 Short wi CRC Bad 0 Single collision 0 Normal wf integral lengh wiCRC Bad 0 Multiple collisions 0 Normal wio integral length wf CRC Bad 0 16 Consecutive collisions or more 0 Long but OK 0 Later collisions 0 Long wf CRC Bad 0 lt 65 byte packets 4643736 lt 65 byte packets 76649 65 127 byte packets 2071786 65 127 byte packets 1384937 128 255 byte packets 415317 128 25 byte packets 1394759 256 51 1 byte packets 150458 256 511 byte packets 9677 512 1023 byte packets 2376 512 1023 byte packets 7192 22 done Internet Figure 23 The Port Statistics screen shows 39 counters plus the average transmit and receive bandwidths of one port Clearing Statistics At the top of the screen there is a button for clearing the Statistics Clear Device Stats Clicking on Clear Device Stats will zero out all the statistics for all of the ports on the device Cable Test Screen The nMU in conjunction with the WideBand Professional Series Switches supports cable testing on all gigabit copper ports This cable test includes the following features Ability to detect any shorts or cuts in each pair Ability to detect any serious impedance mismatch on each pair Ability to detect any polarity mismatch on each pair Calculates the distance to point of failure on the wir
20. 1 VLAN ID BCSC Enable Add Save Remove 2 intere Figure 11 The VLAN Definitions screen contains a list of every VLAN on the network Field Name Description A logical name assigned to this VLAN BCSC Enabled Check this box to enable broadcast storm control for this VLAN VLAN Overlaps VLAN overlaps are one way to let VLANs see each other One common example of a situation where overlaps are useful is when departments that are separated from each other need to use the same Internet gateway In this example the department VLANs should overlap the Internet VLAN but not each other 19 VLANs that overlap each other share the same L2 broadcast domain So using VLANs with overlaps will not lower the broadcast traffic across the overlap A Layer 3 switch is required to route between two VLANs to completely separate the broadcast traffic Fm F WideBand Network Management Unit Microsoft Internet Explorer 10 fx Fle Edt View Favores Toos Melb p Otx gt x Da Ph Sued E hitp r172 21 1 v Bo WideBand Al VLAN Overlaps Network Management Unit Find Devices nMU Adminsstiabion Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis VLAN Guide 1 Add VLANs to the network with the VLAN Definitions screen Create one definition for each VLAN ID 2 Set which VLANs can see each other with the VLAN Overlaps screen 3 Configure what VLAN is assigned to every switch port on the VLAN End Po
21. 100 Mbps Ethernet devices only use pairs 1 2 and 3 6 Therefore it is normal to see cable test errors on pairs 4 5 and 7 8 when the link partner does not support gigabit A shorted pair implies that the copper wires within the pair are connected to each other Please notice the detected distance to error Some wiring information could not be resolved because a stable gigabit link was not established Colors in the diagram assume a properly wired type A CAT 5 cable is being tested The pair colors on the wire might 48 Done intere Figure 24 Cable Test Screen Name Description Pair Num Pin numbers for the wires in this pair _ Pair Diagram A graphic that describes this pair s status Distance to Fault Estimated distance to the cable failure if any Warning While a cable is being tested the link will momentarily stop passing data Therefore it is important to verify that temporary loss of service is acceptable on the link before starting the cable test Remember that this momentary down time is much less than what you would experience if you had to connect a hardware tester 38 Note Some of the older WideBand switches do not support the full cable test and cannot be upgraded in the field Also cable testing is not supported on switch ports that do not support gigabit For more information on what your switches support please contact customer support MAC Table Every Ethernet switch must build an
22. 47 Windows Networking On Server cccceesceseseeeeceseeeeeaeeseaeeeeaeeseaeeseaeeeesaeseaeeesaaeseaeeseaeeseaeeseaeeseaeeseaeesseeeesiaeeeseeenaas 48 Windows Shares On Server icon ii tiec eee ce eite sete reve De da Doa avi HE e Ce ae Faune recae ve o ee nens 50 share Privileges Oni Server ie tede iie ed rece tete Hb te Oed es eee Ere fo edP RD d e ter tarta 51 Server Time Control sis uideri nnde retta dt door eb daa td de resta e rtp dao ot dee pi d 52 HTTP Eosts Oft A 53 Server HTTPS Gontrol 2 ride reete Ri 54 Customer Support For Serve adn RR in te a aS 56 Server Update Goritrol niches erre cde pen tete dp 57 ServeriBackup GOnllol a ecu Pie Qu Trete ta dit Por RU Fe Ver ta aceti ag ez As 58 SCSI Configuration er aid rrollo De HP OH DEUM 59 Power Requirements 4 eter Deen tna 60 Customer Service and Support esssssssssissssesesseeeeenee nennen nenne nnnsen nene e nnn en tenens nitentes enne nnn enne 61 Introduction The WideBand Network Management Unit nMU is a hardware module that can manage all of the WideBand switches on a network Such management includes advanced VLAN configuration watchmen monitoring and automatic firmware updates The purpose of the nMU is to improve the management experience of the network manager With automatic daily updates new features are being added continually WideBand Corporation encourages customers to submit any suggestions and report any bugs
23. EAJCdxtfeixU fqt A 5Eag abDXXQKfxOJeCTXof 1oZX 5bay EN CERTIFICATI PEQUES lt gt 2 Ml O re Figure 37 HTTPS Control Screen Enable HTTPS Checked if Secure HTTP will be supported on this Gold Server Allow SSLv2 Checked if less secure but more common SSLv2 is allowed for HTTPS communication Otherwise only TLS is allowed Base Folder Name of the folder that contains all of the HTML and PX files for HTTPS Owner Group Group that will have SSH access to the files in this folder Save Save and apply changes to the HTTPS host 54 Common Name Domain or IP address of this Gold Server Important If this doesn t match what the browser is expecting the browser will warn the user that the certificate is not valid State Province Full name of your State or Province Do not abbreviate this name Country Country name shown as a two letter code RSA Key Size Size of the RSA key that will be used 2048 bits is more secure but 1024 bits is more commonly supported by older browsers Make CSR Create a new Certificate Signing Request Make New Secret Generate a new RSA secret Warning The old RSA secret will be lost and any signed certificate for that secret will become worthless Certificate Buffer Certificate that is used by browsers to verify this Gold Server CSR Buffer Certificate Signing Request that can be given to a certificate authority Create Self Signed Certificate Replace the cur
24. Spanning Tree settings for each port These settings are described in the following table Setting Description STP State This port s Spanning Tree State Blocking To stop a loop Spanning Tree is preventing this Port from passing data Listening Preparing to participate in frame relay Learning Learning MAC addresses but data is not forwarding Forwarding Participating in frame relay Normal Operation Disabled Spanning Tree is disabled on this port or port is not linked Designated Root The unique Bridge Identifier of the Bridge assumed to be the Root by this port The unique Bridge Identifier of the Bridge that this port uses to reach the Root 35 Forward A counter of how many times this port has advanced to the Forwarding Transitions State Port Statistics The Port Statistics screen displays the quick view Current Status bar described above and provides 39 RMON statistics for each port After clicking on Port Statistics on the Menu Bar to access the statistics for a given port click on the port number on the Current Status bar The port s statistics will appear in the fields below the bar as shown in Figure 23 The statistics displayed in the Port Statistics screen reflect how efficiently data is being transferred through each port and provide information to help determine what is causing any delays that might be observed Move the mouse over the name of any counter to get a more detailed descriptio
25. WideBand v CORPORATION nMIU WideBand Network Management Unit User Manual Table of Contents age 4 Connecting to the nMI x nete m OMM Cu Eid 4 ITA EE 5 Network Interface Screens ic ia Ie etas tte C redet eL edad oer Reese sre tee eto eb dI ir oil a 5 Manage Users SCfeen a oin esee bacc debi 6 Addirig Sets iunii EE EORR HR EORR IE p Pa abedis i ina tim uiis 7 User anale 7 Find ADevice Screeti ue ag Uie tile ute i tee Me rs Metis 8 Searching fori D VICES Lc tii a 8 Making Devices Managed by nMU ooocococonicccconoccccnnncnnnnnnnnccn narran 9 Watchmen Gontrol s riis tiem te DER ne EO Rea E e DEBA T PERRA esters 10 Adding Watchmen S e ertet idet du eee rei eee mde ced ce eet ted 11 li renis EE 12 Watchmen Log reacia acia om iia Tete an deae 13 Email Recipients RID RC T 13 Update Control Screen niet inertiae rep iv ed e ra Ve A Tei due Eee ei 14 Auto Updates 3 drca AA A A e e E Ee Dee tie eee e ETE Pe e t ete eid 14 Upgrade Unmanaged Switches 2 dante e trii ences ou eoe eura s anao aea eaae va De iaa 15 Manually Update Switches aterert iie pe Lec a Aisi date 15 Manually Update MU cocida 16 Ls ove AGnni m E 16 Network Spanning Tree RMEEEM he 16 Department Topology Settings viiri yetasan cane eee atin cree Pte ct Pr dede e Rd e ege aga naa 16 Link Aggregation e
26. age of 500 or more Mbps on any Link If a gigabit link is averaging at 500Mbps it is almost surely peaking at a much higher bandwidth In this case putting in another encon K sen hourdor 16000 er more Gacket ears chan Rid oir any link Bad cables or busy links running in half duplex mode are common causes of high error rates Errors on one link can Network Congestion Checks every 20 minutes for 10 million or more pause packets This would indicate the packet buffers on the switches are full due to Server is Constantly Checks every hour for fs ix servers unable to keep up with client Busy requests This may occasionally happen when Gold Severs are H synchronizing for the first time Storage Disk is Full Checks every 24 hours for fs ix servers that have less than 10 Unstable Aggregate Checks every hour for an aggregated link that changes its state 30 or more times If a link is unstable for any reason its performance will be greatly derogated Adding Watchmen A new watchman will be created when the Save Edits Add button is pressed if the name in the Name field is not the same as any of the names in the Current Watchmen list If the name is already in the Current Watchmen list then that watchman will be modified There are several different types of watchmen that can be created The appropriate configuration fields will show and hide on the page depending on the type of watchman you create The following table
27. ches using the Apply VLANs screen Apply VLANs Restore Defaults VLANS are not currenty being applied Stet Restore Now VLAN Report There ase no Report entres Ested intere Figure 14 The nMU can apply VLAN settings in the background while you continue to use the management interface After all of the other VLAN screens have been configured go to the Apply VLANS screen to write the new configurations to the network See Figure 14 To begin applying the new VLAN settings click the Start button While the VLANs are configured in the background you may continue to work on the nMU The VLAN Report will show the status of the configuration as it runs The report will also show details of where the endpoints connected and what switches needed VLAN configuration changes 22 Layer 3 Virtual Chassis The nMU can configure a group of WideBand Layer 3 switches to work together as one more powerful L3 switch This group of switches is known as a L3 Virtual Chassis When a packet is routed through a Virtual Chassis the TTL is decremented only once only one router hop The L3 Virtual Chassis can be very useful for simplifying management of an Ethernet network with multiple L3 switches All L3 switches within the L3 Virtual Chassis must be connected to each other ether directly or through another switch that is part of the Chassis For example the L3 switches cannot be connected together with a L2 switch in the middl
28. d Packets Seve Edes Add Remove 2 done intere Figure 13 The endpoints define how the VLANs on the network will be applied to each switch 21 SADAAAALAALAAAALAAPAAPAAAPALA AP 8 Ps APPA PAPA Pg 8 78 8 08 8 78 88 8 8 f P8 SS SL SASS SS SSS ESSE SP SEIS PSS SSS SS 8S Warning When managing the VLAN endpoints make sure that your workstation will lt s still be on the same VLAN as the nMU Otherwise when the new VLAN settings are lt applied your PC will lose connection with the nMU INESIS lt lt lt WANDS SSS SSS SPS SPSS PSS PPP PSD SS NINNI NINNI NINNIN NINNI 8 0 8 8 87 8 0 8 7 8 8 7 8 0 8 7 8 0 8 7 8 0 8 7 8 8 7 8 0 8 0 8 08 78 8 0 8 0 8 0 8 0 8 Apply VLANs 3 WideBand Network Management Unit Microsoft Internet Explorer E G 163 F e Edt View Favortes Tools Mep p Q O NAO Pseh ue E nto 172 21 1 J v Boa Apply VLANs L3 Virtual Chassis VLAN Control Topology Control Find Devices Watchmen Control Update Control nMU Adminestiabion VLAN Guide 1 Add VLANs to the network with the VLAN Definitions screen Create one definition for each VLAN ID 2 Set which VLANs can see each other with the VLAN Overlaps screen 3 Configure what VLAN is assigned to every switch port on the VLAN End Points screen Every port is assigned to only one VLAN More specific end ports take precedence over less speci n end points 4 Write the VLAN configuration to the swit
29. d maintain a MAC address forwarding table This table is used to determine what port the incoming traffic should be forwarded to An entry in the table is created every time a packet with a new source MAC address is received in the switch Each table entry keeps track of the following information about that packet e The source MAC address of the packet a unique six byte value assigned to the Ethernet MAC which generated the packet e What port number the packet was received on e The VLAN ID that was assigned to the packet e Whether or not the received packet had a VLAN tag 3 WideBand Network Management Unit Microsoft Internet Explorer Fle Edt View Fawkes Tools Heb Q 2D Ph Gres dEl tp r172 21 1 Ee WideBand AZ MAC Table Network Management Unit Ar Find Devices nMU Ademinestiabon Watchmen Control Update Control Topology Control VLAN Control LI Virtual Chassis Device Control Port Control Port Statistics Cable Test MAC Table nannnnnnauoonDadmmodmandan ID 00 A0 8D 50 05 60 Search For Search By MACID v Search MAC D Port Number VLAN 10 Tag Status 83 MAC Addresses found 00 00 AA 88 C 1 45 3 1 0 00 01 80 5F 35 DF 3 1 0 00 01 80 5F 35 EC 3 1 0 00 04 2E 01 CF 48 3 1 0 00 04 2E 01 D1 42 3 1 0 00 04 2E 01 E7 63 3 1 0 00 04 2E 01 E7 6D 3 1 0 00 04 2E 01 EB 58 3 1 0 00 04 2E 01 EB 60 3 1 0 SOSA IRM em 73 a 1 n hd 22 Dore intere Figure 25 The MAC Table screen shows the MAC addresses that have been lear
30. dd Seve Remove 4 Done intere Figure 15 There is up to one VLAN Router Port for each VLAN 23 The following table describes what fields can be configured for each VLAN on the network Field Name Description Name The name that will be assigned to this VLAN Router Port Static Routes Static routes are needed for the L3 Virtual Chassis to communicate with other routers on the network One common example of another router is an Internet gateway The following table lists the fields that must be set for each static route Field Name Description Route Name The name that you will used to identify this static route 3 WideBand Network Management Unit Microsoft Internet Explorer Fle Edt View Favortes Toos Hep OQ tos X z jp Pret Gress dE hitp i172 21 1 3 3 Do WideBand AZ Static Routes Find Devices nMU Ademinesti abion Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis Routing Guide 1 Configure VLANs on the network with the VLAN Control screens 2 Add a VLAN Router Port on every routing VLAN using the VLAN Router Port screen 3 Create the appropriate static routes for the network with the Static Routes screen 4 Write the new L3 Virtual Chassis settings to the switches using the Apply L3 Chassis screen Static Routes e M sma Add Edit Static Routes There are no Static autes st There are no Static Rout
31. e Measures skew in nano seconds between the pairs Generates cable length estimation 37 When the Cable Test screen is selected in the menu the nMU will start testing the cable connected to the currently selected port Once the test is complete the Cable Test screen will show the wiring information for that port as shown in Figure 24 Interactive notes are displayed at the bottom of the screen based on the test results These notes can be very helpful for understanding what the results mean The following table describes the fields in the pair status diagram 3 WideBand Network Management Unit Microsoft Internet Explorer C 153 Fie Edt View Favertes Toos Heb Z Qt gt aO Pah Sue A itp i172 21 1 Ee WideBand AZ Cable Test Network Management Unit Find Devices Topology Control VLAN Control L3 Virtual Chassis Watchmen Control Update Control nMU Ademinestialon Device Control Port Control Post Statistics Cable Test MAC Table Name JUPITERLIGHT Port 13 T D 00 4020 59 054 Agg None MADADA D D D ee Connected To Not Connected Connected ID None Test Complete Estimated Cable Length Unknown Pair Num Estimated Lengt Pair Diagram Pair Status Skew Distance to Fault 1 2 Unknown passed NA NA 3 6 Unknown Pa NA NA 2 zzz MA 4 5 Unknown ew Shorted NA 221 feet 67 meters eee 7 8 Unknown Shorted NA 223 feet 68 meters Test Result Comments 10
32. e of the chassis VLAN Router Ports Instead of having physical router ports like conventional routers the L3 Virtual Chassis has VLAN router ports each of which connects to a VLAN through every switch in the chassis This powerful architecture makes it possible to easily add redundancy to a L3 network using the Spanning Tree protocol Since the VLAN router ports connect to VLANs they don t have to depend on any one L3 switch If one L3 switch goes down another L3 switch that is redundantly connected on the same VLAN can automatically take over x9 F WideBand Network Management Unit Microsoft Internet Explorer ac 3 Fle Edt View Favortes Tools Melp r Q ta gt 2 Ph Wed dEl hero 11172 21 1 3 Ee WideBand A VLAN Router Ports Network Management Unit M Find Devices L3 Virtual Chassis VLAN Control Topology Control nMU Adminsst ation Watchmen Cortrol Update Control Routing Guide 1 Configure VLANs on the network with the VLAN Control screens 2 Add a VLAN Router Port on every routing VLAN using the VLAN Router Port screen 3 Create the appropriate static routes for the network with the Static Routes screen 4 White the new L3 Virtual Chassis settings to the switches using the Apply L3 Chassis screen Current Router Ports M Add Edit VRPs There are no Router Ports Ested Name VRP VLAN Detoult VLAN 1 v VRP IP Address VRP IP Mask A
33. econfiguring the switch Always be sure to follow any changes by pressing the Save Changes button Note The WideBand Professional Series Switches are not as secure with SNMP enabled regardless of what value is set to the community names If you are not planning to use SNMP in the near future we recommend that you keep it disabled by unselecting the Enable SNMP Management check box 29 3 WideBand Network Management Unit Microsoft Internet Explorer Fle Edt View Favortes Tools Melp OQ O NAO Pah Gres E dEl tp 172 21 1 v Bo WideBande 9 Device Control Network Management Unit Find Devices nMU Adminsst ation Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis Namo BUZLIGHT 2000 000000000000 ID 00 A0 8D 50 05 60 Device Identification Device Information Name BUZUGHT Device Uptime 13 days 21 hrs 2 min 125 sec Contact Model No WB1650MPRO Location aria a A Model 2 16 Gig ts Department IAS ription Managed Layer 2 gabit Copper port Description IP Management Settings Seve Changes IP Address Enabled O Device IP Address 10 80 5 96 Enable SNMP Management v Password Department Restore Defaults Y Make Unmanaged Read Only SNMP Community public Note Restore Defaus will not clear Name and Department settings Read Write SNMP Community private Save Changes 48 one WD Internet Figure 21 The Device Control screen is the central for managing individ
34. erface 105150213953 Pachets raramidos on mertace 176474757 Packets receded on interface 3200047 Packet ranse problems en etertace e Bad packets recemed on interface e Transm packets dropped o Recewed packets cropped Id LA ed c 1 Figure 27 Statistics 43 Server Mirroring Control The Data Mirroring Status section allows you to monitor the status of both units in the Gold Server set This section also allows you to change which unit has control over the shared resources start a manual sync or attempt a reconnect The Network Connectivity Validation section allows you to add or remove IP addresses that your servers will ping to test their network connectivity Fie ES ve Fevotes Took Help p Qe O 02 s rm O 0 DS LI Vetus Chassis Matai si aare NIIP Hosts Update Control Customer Support Hechup Contr ot Name GoldServert fiyl rver Gold ID 00 18 F3 57 25 99 Service IP 172 21 210 140 flix Gold Se Mirror ID 00 18 F347 256E Data Mirroring Status Running in Primary Mode Connected Rurain3 in Secondary Mode ee EA Data on the Servers is currently synchronized Manual Synchronization Sian Manual Sync From Primary Y Make Miror Primary Network Connectivity Validation E diit Monto Name E dit Node IP Using Ping Nodes in somal eperabon De Gold Server f always have One urd in d set Add Node j Remove Node nnnag as Pamary Only the pemary ust wil respond to requests on the shared P addres
35. ert n Gold ID 00 18 F3 57 25 99 Service IP 17221210 140 fsiix Gold Server Mirror ID 00 18 F3 67 25 6 Time Control Current Da o 03 14 67 Time 134813 Time Zone US Canada Corel v Set Cunt Dota Time Network Time Protocol NTP m amp s Disabled Don sync system tee w NIP Server 0 pool tp org The Notwcek Tine Protocol NTF can be wand to automaticaly keap tho Golf Server system timo accurate This is done by pte E Sa HH Load BTE pene The defaut NTP server poo is D pool ntp org You may also agecty your own ace conver Seve NTP Setings Manual Sync Last Manual NTP Sync 14 Mar 1348 12 system time set bom NTP server 76 169 237 141 offset 0 001466 sec l Sync Now C Figure 35 Time Control Screen Current Date The current date should be entered in the format mm dd yy Time The current time should be entered in the format hh mm ss use military units Time Zone Select the time zone that is closest to your area NTP Status Enable NTP to get periodic synchronization of the system time NTP Server Specify what NTP server shall be used for time synchronizations Sync Now Run a manual NTP time sync with the selected NTP server 52 HTTP Hosts On Server Here you may configure different virtual hosts Virtual hosts enable you to have multiple HTTP domains on a single machine TI Fle to Wes Fete Toot Help O O 02 Jure E 94 B LJ 3 LLLI 172 21 200 19 WideBand A HTTP Hos
36. es listed Route Name Destination IP Destnation IP Mask Gabrway IP Add Seve Remove BB Cone internet Figure 16 Static Routes 24 Apply Routing After the L3 Virtual Chassis screens have been configured the settings must be applied to the switches on the network Press the Start button to begin applying the settings When the nMU has finished writing the settings be sure to review the Routing Heport to make sure there were no errors or warnings You may also want to select a Base Device for your L3 Virtual Chassis The base device is the L3 switch that every switch in the chassis must be connected to ether directly or through another WideBand L3 switch Also you can enable Active L3 Chassis Management When this is enabled the nMU will periodically apply the routing settings to make sure nothing needs to change This is only useful if the network is being physically reconfigured often 3 WideBand Network Management Unit Microsoft Internet Explorer a LJ 163 Fle Edt View Favortes Took Heb T Qs x DH Ph Qhi A hitp 172 21 1 3 Be WideBand 9 Apply Routing Network Management Unit Find Devices nMU Adminsst ation Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis Routing Guide 1 Configure VLANs on the network with the VLAN Control screens 2 Add a VLAN Router Port on every routing VLAN using the VLAN Router Port screen 3 Create the appropriate static route
37. esses should be separated by a comma 13 Update Control Screen This screen can be accessed through the Update Control button on the top banner All of the manual and automatic updates po by the nMU are configured here Auto Update s Upgrade Unmanaged Switches h 00 A0 ED 62 00 40 Verrsshiohvt iode Swirhes n Auto Update Shoe tme in m me urit Stert Upgrade Manually Update nMU a Manually Update Switches Stet nM Update elect Depatment Al Departments Sian Sach Update Done O vene Figure 8 The Update Control screen is where all of the nMU update settings are configured Auto Updates The WideBand nMU is configured by default to download new updates over the Internet every night This automatic update is enabled or disabled with the Enable Auto Update check box See Figure 8 The nMU update optionally includes updating all of the WideBand Professional Switches on the network to the latest firmware This is normally a good idea but since the switches will momentarily stop forwarding traffic during an upgrade this feature is disabled by default Check the nclude Switches in Auto Update check box to enable this feature In order for the update to be successful the nMU must have access to the Internet Refer to the nMU IP Configuration section of this manual The Auto Update Time is shown in military units and describes when the nMU is planning its next automatic update Remember to save an
38. he IP settings that must be configured correctly Field Name Description Server Name Host name that can be used to access the nMU through a browser SMTP Server An optional SMTP server can be used for outgoing emails reports Subnet Mask Subnet mask of the IP network nMU is running on Manage Users Screen The Manage Users screen Figure 3 can only be accessed by the administrator user and is where all nMU users are added and controlled PEZ F WideBand Network Management Unit Microsoft Internet Explorer 0 163 Fle Edt View Favortes Tools Melb r Om x 2 Ph Bred El hitp i 172 21 1 v ae WideBande Manage Users Pd Network Management Unit Find Devices nMU Adminssts ation Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis Current Users Settings for User administrator AddiChange User User s Write Access Departments administrator view All Departments Use drmirestretor User Passw Confirm Password Add Change User Remove User Manage Departments Select Department All Departments v Add Dept Access Remove Dept Access 2 done Interret Figure 3 Use Manage Users to add users and their privileges Adding Users To add a user just enter a new user ID and password in the User ID and User Password fields Then click the Add Change User button A new user will be added only if the user name you specified was
39. hown in Figure 22 each port has an nput Mirror and an Output Mirror field So each Monitored Port can have two Mirror Ports When the Mirrored Port is the same as the Monitored Port the Mirroring function is disabled In Figure 22 both the Input and the Output Mirror are disabled Be sure to save all changes before closing the screen by clicking on Submit Port Mirroring 33 Link Aggregation Settings Link Aggregation also known as Port Trunking is the ability to set up multiple network ports on a device to work together as one higher bandwidth link The WideBand Professional Series Switches use the IEEE 802 3ad Link Aggregation Control Protocol LACP to automatically configure the ports in this manner This feature is enabled by default on the Professional Series Switches and up to 16 ports can be connected in one aggregate When managing LACP keep in mind that the switch we are currently managing is referred to as the Actor while the device at the other end of the aggregate is referred to as the Partner This means that if we were to go manage the device on the other end these names would reverse The Port Control screen displays two boxes with different Link Aggregation settings These are the Actor and Partner boxes These both relate to a single port on the switch which can be selected by clicking on the port in the Current Status bar at the top of the screen These boxes are described with more detail in the following tables Actor Bo
40. ints screen Every port i assigned to only one VLAN More specific end ports take precedence over less speci c end points 4 White the VLAN configuration to the switches using the Apply VLANs screen Current VLAN Overlaps Add Edit VLAN Overlaps There are no Overlaps listed Overlap Name First VLAN Default VLAN 1 v Second VLAN Default VLAN 1 v Add Save Remove 2 Internet Figure 12 VLAN Overlaps VLAN End Points End points define what VLAN is assigned to each port see Figure 13 Every endpoint can apply to a single port or to a group of ports It is often very useful to assign the same VLAN to several ports all as one group The WideBand nMU will automatically connect all endpoints with the same VLAN ID using IEEE 802 1Q explicit VLAN tagging When more than one endpoint connect to the same port the endpoint with the more specific connection type takes precedence For example an endpoint connected to a specific port takes precedence over an endpoint that connects to every port on that device If two endpoints with the same connection type but different VLAN IDs apply to the same port they will cause a conflict and one of them will not be used 20 The following table describes the configuration options for each endpoint Field Name Description Name The name that will be assigned to this endpoint Connect to Department Specifies the department this endpoint will apply to Only valid i the Connect t
41. ion of each port light relates to the link indicators on the switch as expressed in the following table Light Font Color Meaning No light displayed Grey Port is not linked Green light displayed Yellow Port is linked and is running at 10 100 Mbps Blue light displayed Yellow Port is linked and is running at 1 Gbps 31 3 WideBand Network Management Unit Microsoft Internet Explorer Fle Edt View Favortes Toos Melb Ou gt x Dn Ph Gre El het ff172 21 1 9 Ee Port Control Find Devices nMU Administration Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis Device Control Part Control Port Statistics Cable Test MAC Table Name BUZLIGHT Port 1 NEN EN ENN aa R Connected To Unknown ID 00 A08D 50 05 60 Agg 1 Connected ID 00 E0 81 32 07 B4 Current Link Status Link Control Port Mirroring Link Speed 1000 Force Max Speed O Input Mirror 1 Full Duplex On Duplex On E acl Flow Controt On Max Speed 1000Mbps EON Media Type Copper eee ieee ane Link Aggregation Settings Spanning Tree State Actor Partner STP State Disabled Current Aggregation 1 Partner Port 1 Path Cost 0 Actor Chum O Partner System ID 00 E0 81 32 07 B4 Designated Root 32768 00A08D500560 Transitions to Current 1 Partner Chum 0 Dessgnated Cost 0 Actor Stete Partner State Designated Bridge 32768 00A08D500560 KA Designated Pon 1 Activity On Collecting On Activity On Collecting On Forward Transitions Time
42. is a link to a help page for Active Directory Configuration This screen gives six steps to help you join your Gold Server to your Active Directory Name GoldServert fs ix Gold Server Gold 00 18 F3 487 25 99 Service IP 172 21 210 140 Mirror ID 00 18 F3 67 25 58E Windows Networking Corectory Conmextor Stati Not Connected te an Acton Directory Dore Yeerret Figure 32 Windows Networking Windows Networking Section Server Name A unique name that identifies this server on the network Workgroup The Windows Networking Workgroup this server is a part of Description A description of this server that will be seen by other Windows machines when browsing the network WINS or Windows Internet Naming Service is used to automatically learn what NetBIOS names belong to what IP addresses on the Windows network The Gold Server can act in one of three different WINS modes e None prevents the Gold Server from participating in WINS communications e Client allows the Gold Server to learn WINS information e Server lets the Gold Server learn and supply WINS information to other machines 48 WINS Server This field specifies a specific WINS Server that should be used Max Reported Disk Size Some older versions of Windows cannot handle shares of large sizes This field can be used to fool those legacy operating systems into supporting a large share Choosing a security type is an important part of
43. ite de e tte pe ORE DH RI RR ERI EGER igang test aa a adacdabasiadesbacd senses 18 EACP Hash Gohflg tatioris 3 5 rro dopado cinc 18 VLAN Management Screens ssesssessessseeee eene nnne nnne nnn en nns enne sentes enne nt res enne senes enne nnne nennen entere nennen 18 VLAN Definition S sao C Naai 19 VEAN OVetlapS 3 2220 Ait teet ei c tra anede tle corta Pv e act die cete rede 19 MEAN End Polnts 5 iini op e EHE RP Ra ipee m be OR RENI DUM Rd 20 lee NI EE 22 Layer 3 Virtual Chassis ico ci A tei eeu e ie Re gh ruit ce d 23 MLAN sto Vilgo at M 23 Static Routes pene emnt eui i EI 24 Apply Routing e rh ero ER EHE EE REEF RETE ER D E R a KE IRE RE ERR PURI ERAS 25 nMU Network Scanner iret nee ee Ue Gin ede De ere Ier Ue e Le dde DEC eroe de re eene deos 26 WideBand Switch Management ooooccncccnncccnoncnononononcnnnonononcnnnn nn eene nennen entere nns aSa inns nn res ennt senten rester enne nns 29 Device Gontrol est EE 29 Device Identilication 2 ir E e RR E e ER ERE IE CERAM Eee o a ae Peter s 29 IP Management Settings viii nie eoe e necp eb e roe Ve re id cheese ede e never seer 29 SNMP Gomnm nities coord Cae ceperat ite re ee e Ee deep eee ede eed eei eed 29 Change Password and Department sssssssssssssseesseeeene enne anrea iaaii grai a sentent nr snnt enne enne adne 30 Restore Detaults 4
44. ive data The Off Site Backup Service insures your critical data is protected and readily accessible in the event of theft fire or natural disaster Backup settings such as off site backup time and speed are configured on the Backup Control Screen You may register for the Off Site Backup Service by clicking on the Register for backup services button or by going to http support wband com T Wideltand Network Management Unit Microsoft Fe C Ves PFerrtes toch Mp e Q x DOD rn ree amp B LJ 3 A ero 172 23 208 18 MideBande Backup Control Netowort Health Analyser Name GoldServert TN Gold ID 00 18 F 3 57 26 99 Service IP 17221210 140 fslix Gold Server Mirror ID 00 18 F3 67 25 6E Offsite Backup Configuration Enable Day Of Backups Daty Of elie Rackup Time 00 3 mower on mertan rete Manu upicat speed for ofeno backups Otsobyes sec w Regater tos backup sere as Save Backup Semngs Backup Status Stan Backup Backup Secewss Sart 134175 bytes Wed Mae 14 08 01 43 COT 2007 at 9816 91 byte sec Dore Figure 40 Backup Control Screen Enable Daily Offsite Backups Select this field to backup data offsite daily for the Gold Server set Daily Offsite Backup Time The time in military units when the Gold Server s daily offsite backup will occur Start Backup Begin an offsite backup right now 58 SCSI Configuration The Gold Servers can be configured as a local drive on
45. loop You may want Spanning Tree enabled just in case that ever happens LACP Hash Configurations For multiple port aggregates a hash is used to determine the port on which each packet is to be sent Normally the default hash configuration will work fine but the WideBand Professional Series Switches allow extensive hash management control In some cases changes to the hash can more evenly distribute the traffic load on the aggregated links greatly improving performance Changing the hash settings is done for each department individually Refer to the Department Topology Settings of this manual for more information on changing the hash settings VLAN Management Screens Switches do not inherently support broadcast domains which can lead to broadcast storms in large networks that handle a lot of traffic such as NetBuei or IPX In conventional networks with routers broadcast traffic is split up into separate domains to confine this traffic to the originating group and provide a much cleaner network environment Instead of using physically separate subnets that are linked by traditionally slow routers the WideBand Professional Series Switch can create segregated broadcast domains based on easily configurable VLANs and then link these VLANs as required with wire speed routing An IEEE 802 1Q VLAN is a group of ports that can be located anywhere in the network but communicate as though they belong to the same physical segment The WideBand nMU is
46. n at the bottom of the screen A few words of explanation might also be helpful e Unicast Packets are packets that are addressed to go to a single specified destination e Multicast Packets are packets addressed in such a way that anyone who tunes in may receive them much like an AM Radio signal is broadcast to that group of people who have AM Radio receivers e Broadcast Packets are packets addressed to go to every device connected to the network e CRC Errors refer to errors in the checksum that is done to ensure that an error free packet has been received e According to the Ethernet Standard when a collision occurs the Ethernet network will retry as many as 16 times to resend the packet If the system cannot get the data through in 16 attempts it will stop trying 36 3 WideBand Network Management Unit Microsoft Internet Explorer Fle Edt View Favortes Tools Melp Q O DB sm Sed El itp 172 21 1 3 v Bo WideBand nl Port Statistics Network Management Unit Find Devices nMU Admeestsation Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis Device Control Pot Control Port Statistics Cable Test MAC Table Name BUZLIGHT Port 5 NEN k ENNELY Connected To Unknown ID 00 A08D 50 05 60 Agg 1 Connected ID 00 E0 81 32 07 B4 Cleer Device Stats Time Since Reset 13 days 21 hrs 3 min 34 sec TRANSMITTED RECEIVED Average Tx Mbps 0 0
47. nde 94 Update Control Network Management Unit Find Devices nMU Adminsst ation Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis Updating Switches in All Department HH Cancel Device ID 00 A0 8D 88 05 64 Status PASSED Firmware check completed successfully Device ID 00 A0 8D 50 04 50 Status Switch is already up to date Running firmware check Device ID 00 A0 8D 50 05 60 Status Pending Device ID 00 A0 8D 78 00 00 Status Pending 48 Opening page http 172 21 1 3 c9 bin vision cg Internet Figure 9 The firmware update status is reported for each switch in the department 15 Manually Update nMU Manually updating the WideBand nMU does the same thing as the Auto Update but it runs immediately instead of waiting until the middle of the night Clicking the Start nMU Update button initiates a manual nMU update A description of the latest downloaded nMU updates can be viewed by clicking the nMU Revision History button Topology Control A click on the Topology Control link in the top banner opens the Topology Control screen see Figure 10 This is where we can configure settings that affect the general flow of traffic across the LAN This screen is divided into two sections the first section Network Spanning Tree Settings applies to every switch on the network while the other section Department Topology Set tings applies to individual departments Netw
48. ned by a switch 39 The switch determines where to send each packet by finding the packet s destination MAC address in the table and using that entry to know what port leads to the destination MAC If there is no entry with the same MAC address and VLAN as the packet then the switch must flood the packet to every port that might lead to the destination MAC every port which is a member of the packet s VLAN WideBand Professional Series Switches can maintain up to 8k MAC address entries in all layer 2 models and up to 32k in layer 3 models Entries that are not used for a few minutes age out and are deleted to make room for new entries MAC Address Tables in the WideBand Professional Series Switches can be viewed on the MAC Adaress Tables screen shown in Figure 25 Viewing this table can be useful for debugging and network monitoring It also provides the ability to see where any Ethernet MAC on the network is in relation to the managed switch Searching for Addresses The WideBand nMU has a powerful search engine for finding the MAC Address you are looking for The list of addresses can be searched and sorted by any of the following criteria e MAC ID A six byte MAC address that is assigned to a device on the network e Port Number Port number that the MAC ID was received on e VLAN VLAN number that the MAC ID was received on e Tag Status VLAN tag status for the MAC table entry The Search feature includes built in wild ca
49. o Device Connect to Port and Connect to MAC pty y to the VLANs are applied the nMU will search the network for the specified MAC address and assign the endpoint to the port with that MAC address connected VLAN Tagged Packets Checked if the endpoint will transmit packets VLAN tagged F WideBand Network Management Unit Microsoft Internet Explorer E E ta Fie Edt View Favertes Toos Hep e Om gt x DH Preah Sued dEl hetp 172 21 1 9 Ee WideBand AZ VLAN End Points Find Devices nMU Adminssts ation Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis VLAN Guide 1 Add VLANs to the network with the VLAN Definitions screen Create one definition for each VLAN ID 2 Set which VLANs can see each other with the VLAN Overlaps screen 3 Configure what VLAN is assigned to every switch port on the VLAN End Points screen Every port is assigned to only one VLAN More specific end points take precedence over less specific end points 4 White the VLAN configuration to the switches using the Apply VLANs screen Current End Points Add Edit End Points Name j VLAN Priotity Name Detauk Endpoint Default Endpoint Default VLAN 1 0 NMU Management Default VLAN 1 0 Type Connect to All Ports in Department v Connect to Department All Departments v End Point VLAN Deteult VLAN 1 v IEEE 02 1p Prionty 0 7 0 Lowest Priority M VLAN Tagge
50. o not fcemat this volume Format this volume as follows A Fomating using your servers imac Me vf You may refer to your operating Allocation unit size Delak system s documentation for more information on formatting and Volume labet New Volume configuring your drives Iv Perfoem a Quick Format Enable fle and folder compression lt Back we Cancel Figure 41 Creating a Volume 59 Power Requirements Model Number Power Specification WBNMUPRO 115V 230V 50Hz 60Hz 8A 5A Installation The WideBand nMU has no serviceable parts inside This equipment must be connected to a controlled power circuit offering short circuit and Overcurrent protection Electromagnetic Compatibility The WideBand nMU is certified with the following standards FCC CISPR Class A O Note This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at thi
51. one default user already in place The default user is administrator with a password that you must set through the startup configuration utility This user cannot be removed and is needed to add and control normal users Network Interface Screen The Network Interface screen is where the IP settings for each Ethernet Interface on the nMU are configured You must be logged in as administrator to access this screen 3 WideBand Network Management Unit Microsoft Internet Explorer E fx Fle Edt View Faworktes Tools Heb b Qt c x DO sed Sued El hitp 4r172 21 1 v Bo WideBand AZ Network Interface Network Management Unit Find Devices nMU Adminsstration Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis nMU Network Settings NMU Name nmu N10004 Primary ONS 151 1648 201 Secondary ONS 151 16418 Interface Settings Interface ID IP Address Gateway Subnet Mask DHCP etho 1722113 255 255 0 0 Disabled v Interface ID IP Address Gateway Subnet Mask DHCP eth1 66 142 226 21 66 142 226 22 255 255 255 248 Disabled v Save Settings 48 Done Internet Figure 2 nMU Network Interface settings may only be edited by the administrator user It is often desirable to assign a static IP address to the WideBand nMU It s also important to make sure the nMU has valid IP settings to connect to the Internet This is needed to send email reports and download the latest updates The following table describes t
52. ork Spanning Tree Spanning Tree Protocol IEEE 802 1D is used to automatically disable loops in the network Refer to the Spanning Tree State section for more information on this protocol The Spanning Tree protocol works by choosing one switch on the network to be the root and all the other switches find the shortest path to that root This being the case the root switch should be as close as possible to the heart of the network to increase traffic efficiency The following table describes the settings that control the Spanning Tree Root of the network Field Name Description Designated Root ID of the device that is currently acting as root Note that this field is only valid if the department it was extracted from has Spanning Tree enabled Suggest Root ID of a device the nMU will attempt to make into the root Hello Time Time interval between the generation of Configuration BPDUs if the switch is the Root In seconds Maximum Time A timeout value to be used by all Bridges in the Bridged LAN if the switch is the Root in seconds Forward Delay A timeout value to be used by all Bridges in the Bridged LAN if the switch is the Root in seconds Before any new settings can take effect the Save Network Settings button must be pressed which will load a screen that reports the configuration update status of each device When the nMU suggests a new root to the network it will often take several seconds for that root to be recognized acros
53. ou will find six scanning options Option Name Description Scan Name The name can be used to help identify this report on the Scan Reports screen Safe Checks Only run the safe vulnerability checks during Network Scans Run a Security Scan Stat Scan Scan Complete Scan ran from Wed Mar 28 135522 2007 to Wed Mar 28 13 57 24 2007 lage iD Target Sa 172212108 Scan Completed on Wed Mar 28 13 57 24 2007 gore 9 Figure 19 Security Scan 27 Exporting a Report Every Network Scan generates a vulnerability report and is given a unique Report ID On the Scan Reports screen you may click on any report and view delete or export it This screen also allows you to search existing reports by the Report ID the Targets specified or by the number of holes warnings or notes found during the scanning process Reports can be exported to any of the following formats html xml nsr or nbe The exported file is then sent to any email addresses specified 1 apology control Export Report 1173828505 Export to Yee HTML PhyperText Markup Language Back View Repon Delete Repot ee ee ooo Figure 20 Export Report Updating your Network Scanner In order to update your Network Scanner you will need to register There is a button on the Security Scan page that will take you to a page with information about the different kinds of updates you can receive Once you have registered enter your registration code in
54. out On Distributing Om Timeout Of Distributing On Aggregation On Defauted Off Aggregation On Defauted Of Synchronization On Expired Off Syncheorazation On Expred Off 2 done Internet Figure 22 The Port Control screen shows the link configuration for a single port ona managed device From the Device Control Port Control and MAC Table screens clicking on any port on the Current Status bar will bring up the Port Control screen for that port From the Port Statistics screen clicking on a port will bring up the Port Statistics screen for that port Current Link Status Next on the Port Control screen is more detailed information about each port The Current Link Status portion of the screen indicates whether the port is linked and provides details about the current link Remember that the current link details will be determined by the link information of both the port and the link partner at the other end of the wire These details are listed and explained in the following table Name Description Full Duplex Link Duplex status of this port On indicates Full Duplex Send and receive data simultaneously Best Performance 32 Flow Control Flow Control status on link On Flow Control is enabled on both sides of the link Best Performance Off Flow Control is disabled on one or both sides of the link Link Control The Link Control portion of the Port Control screen allows the user to set new link information for each of the por
55. r e oec eee ibat do e oe eate ene 31 M ke Unmanaged by nMU 5 iret a Hee REIR naaa aa aa SEARA Annapa Raad Saeka eb arita eiii 31 Port GOntf Ol A EEEE ETES AE EOM 31 C rrent Elk Status ertt recte ire ED De a etam ir AA o oed 32 MI Servo C 33 Port MirrOrlng tite de edet RE E Ge Re FR HEU us Gre eMe Del os 33 Link Aggregation Settings tic recte tete ene Le HE eiTe e De eH Hen e dede e bcn eee eae ad 34 Actor Box Data I aia 34 Partner Box Data terrere iia 34 Aggregation State Bilsin aeaiia anreisen iacaa Ite exerit Aoc sae EE TRULY eroe MdL aah 34 Spanning Tree Staters ie cem aO DER dp e nier ad ne eeagehveloaeees 35 Port StatiStiCS ES 36 ClearingiStatisticS evene en eate OS Rt Es 37 Cable Test SCIGer ionic rore ee ende dee EP DO A it ET 37 MAG Table a RU DER meinte a im EAE 39 Searching for Addresses eerte comete recederet ARS 40 fs ix Server Management uincere eere ee ee dee reet a da veda laa eines 40 Gold Server Initial Configuration eere repe iia 40 Server Device Control er renna en iene eevee gebe ere Ae ee pr E pua rg Pedo die eee en Men eg to 41 Server StatistiGs eee REM A RUD ene nie dne Us 43 Server Mirroring Control iniri cemere ice A hyve sees av er Ee a xe E ERR Re de aue e Red 44 Server Network Settings conocia nata tede based 45 Manage Users ON Server zu tati ts te 46 Manage Groups ON ever itae n P WEE EE uH aai e E SE
56. rds allowing you to enter partial words etc and find multiple MAC Addresses with similar criteria Entering a blank field as the criteria will return a list of all the MAC Addresses in the table fs ix Server Management Gold Server Initial Configuration When a Gold Server needs to be configured for the first time it will not be managed by the nMU and its name will be fsix followed by its serial number From the Find Devices screen make it managed by clicking on it Note The password you assign here will be the administrator password After assigning a password and department you see the Gold Server configuration screen Here you must provide your company name an email address and three IP addresses one for the Gold unit one for the Mirror and another that will be shared by the servers which you will use to access these servers You will also need to supply the subnet mask gateway and DNS information Lastly you will need to specify the mode you would like your servers to operate in e Standard mode will allow you to use your servers as a network fileserver or a web server e n iSCSI mode your Gold Server will act as a local drive This is especially useful for applications that will not work using network mapped drives 40 When in iSCSI mode several of the screens shown in the Server Administration section will not be accessible when managing the server through the nMU and management via the servers shared IP
57. rent certificate with a self signed certificate This will be functionally secure but browsers will warn that this certificate is not signed by a trusted certificate authority Save Cert Save the current certificate buffer text 55 Customer Support For Server Included on the server is a small database of information about your company and the server itself The purpose of this database is to provide you with important information about the server and provide personalized customer support From this screen you are also able to activate or deactivate remote support When remote support is enabled fs ix Customer Support representatives are able to log into your servers for advanced troubleshooting if you encounter problems TT Device Control LLL LJ Name GoldServert fiy Gold ID 00 18F3487 25 99 Service iP 172 21 210 140 fsiix Gold Server Mirror ID 00 18 F3 67 25 58E Customer Service Information Server Serisi No FDO090901 perno Oyster x Version 812 Last Update 09 20 07 2007 03 14 Customer Contact Information Opa Tee Moodie Name Last Name Aovess Address 2 CN tate Postal Code cutter Remote Support Remete Suppot is Disabled Dore tere Figure 38 Customer Support Screen Customer Contact Information This information is used by fs ix support to provide better service to Gold Server customers Enable Remote Support Enabling remote support opens a connection that will allow the fs ix
58. responding to PING requests Error Counter Adds up all of the counter errors without collisions for each port and Exceeded w o COL compares that total to the specified Number of Errors limit for the ti Data Mirroring Failure Data Disk Full A fs ix server has less than the specified number of gigabytes free on its data disks Performance Max Out__A fs ix server is unable to keep up with client requests 1 Security One or more security holes or warnings are found on the scan Vulnerabilities Found targets 12 Watchmen Log Screen All of the WideBand Watchmen events are recorded in the Watchmen Log Every thirty minutes if there are any new events the log is emailed to a list of recipients Clicking the Clear Log button will erase all current events in the log 3 WideBand Network Management Unit Microsoft Internet Explorer a 153 Fle Edt View Favortes Toos Mep Qs O DAD Ph Grew e AE itp r172 21 1 v rr WideBand 7 Watchmen Logs Network Management Unit ee ee v Find Devices nMU Adminetts ation Watchmen Control Update Control Topology Control VLAN Control L3 Virtual Chassis Watchmen Email Recipients fsixsupport fsix com _ Seve Changes Watchmen Logs ClearLog 0 Ved Aug 16 13 06 00 2006 Aggregate Failure event occurred for port 16 on device VENUSLIGHT 00 40 8D 50 04 50 LACP actor churn detected aggregation state will not stabilize
59. s Data writes to the Parnary unt will aiso be writen to the Secondary unt as long as the connection between the boxes is up Node Mime Node P Address ane pst i The primary roll i designated to the un that can successfully ICMP gxewar o 722112 r left Multiple erines wth the same vede a node is reachable f one of heosing good ping nodes can mprove the serece imafab ty pronded by the Gold Serer Ping nodes should normally be devices on the tetwork that are known t be st or router Also is oten geo close to the cents who access Ccommectity status more comeci y The defaut gateway for the Gold Seres is automaticaly aided as ping node a Done Yibernet Figure 28 Mirroring Control Screen Start Manual Sync Starts a resynchronization of all of the data from one unit to the other in the Gold Server set It is not possible to start a sync to the unit running as primary Also this synchronization process can take up to several hours and should only be done if necessary The shared data will be available during a data sync but performance will be lower than normal until the sync is complete The following buttons only show when they apply e Connect Button Make this unit start attempting to connect to its peer again e Make Gold Primary Force the shared IP address and services over to the Gold unit e Make Mirror Primary Force the shared IP address and services over to the Mirror unit 44 Server Network Settings
60. s for the network with the Static Routes screen 4 Write the new L3 Virtual Chassis settings to the switches using the Apply L3 Chassis screen Apply Routing Layer 3 Settings Routing i not currently being applied Base Device 00 A0 8D 78 00 00 SUNBRIGHT v L t j C Actwe L3 Chassis Managemera _ Seve J Routing Report There ase no Report entres lated 4 done Internet Figure 17 Apply Routing 25 nMU Network Scanner The Network Scanner is a quick and comprehensive method of scanning your network for security vulnerabilities There are two main components to the Network Scanner the Quick Scan and the Security Scan The Quick Scanner The Quick Scanner is an easy way of discovering which IP addresses are currently being used on your network The report it generates gives as much information as the scanner was able to retrieve This may include not only the IP address but also the target s hostname MAC address and the registered name for that MAC address i e the motherboard manufacturer AD resu72 21 209 274 e Eje we n Device rad Run a Quick Scan an Target Stan Scan States No Scan n Progress Quick Scan Results Thee aro no resuts do dpi E dee rre Figure 18 Quick Scan 26 Running a Security Scan The Security Scan can be used to search for security vulnerabilities on the network All the options and configurations available for the Network Scanner are located on the Security Scan screen Here y
61. s own expense Any changes or modifications made by the user which are not expressly approved by WideBand Corporation for compliance could void the user s authority to operate the equipment CE Mark O o EN55022 1998 EN55024 1998 IEC 60950 1 60 Customer Service and Support You may contact Customer Support in any of the following ways Phone toll free 888 220 4020 Email techsupport wband com USPS WideBand Corporation 401 West Grand Gallatin MO 64640 1133 Customer Support Hours Mon Thu 7 a m to 7 p m Central Time Fri 7 a m to 5 p m Central Time Copyright 2002 7 WideBand Corporation All rights reserved V02 17 61
62. s the entire LAN Department Topology Settings The following table describes the settings that can be configured for each department Field Name Description Spanning Tree Enabled Enables Spanning Tree for this department Resolves data 16 The rate at which learned MAC addresses will age out of g forward Evaluation Mode Select either Bit XOR or Polynomial hashing algorithm Refer to the LACP Hash Configurations section Disable L3 header filtering Disables use of IP IPX address in hashing function amp Disable L2 header filtering Disables use of MAC address in hashing function Any changes that are made these fields must be applied to every switch in the department by selecting the Save Department Settings 3 WideBand Network Management Unit Microsoft Internet Explorer Fle Edt View Favortes Took Melb Ot gt x 2D Ph Sued dEl ftpi172 21 1 3 Y ae Topology Control Find Devices nMU Adminsst ation Watchmen Control Update Control Topology Control VLAN Control LI Virtual Chassis Network Spanning Tree Settings Department Topology Settings Qesnat t o0 A0 97 89 05 64 JUPITERLIGHT Select Department DIFF Y 00 i 2 00 A0 80 89 05 64 JUPITERLIGHT Spanning Tree Enabled O9 Hello Time 2 sec Link Aggregaton Enabled vi Macrnum 20 MAC Table Aging Time 5 minutes v lt sec 1270 Age Max Valid Packet Size 32704 bytes Lerge Jumbo
63. simply forgets the device s password and none of the management settings on the device are changed Therefore in order to manage the device over the network again you will need to manually remember what password was assigned to it See Making Devices Managed by nMU Port Control On the Port Control screen you will be able to do the following Get a quick look at the status of every port View current link status details for each port Configure link status details for each port View and configure Port Mirroring status for each port View Link Aggregation status for each port View the Spanning Tree state of each port At the top of the Port Control display you will find the name and ID of the device the number of the port whose information is currently being displayed and a Current Status bar Also to the right of the current status bar is information about the device this port is connected to You will find the Current Status bar at the top of several management screens It is used to display the basic status of every port on the currently selected device Since it updates every time you enter any of the four Device Control screens Device Control Port Control Port Statistics and MAC Table the Current Status bar is a good way to see what ports are linked at any given moment Click on the menu link to any of these screens or click on any of the port numbers on the Current Status bar itself to update it immediately The color representat
64. t button This will allow HTTPS communication but browsers may warn the user that the certificate wasn t signed by a trusted authority To prevent this create a Certificate Signing Request or CSR and submit it to a commercial Certificate Authority who may in turn send you a valid certificate to paste into your Current Certificate buffer and click Save TD Widetiand Network Management Unit Micros fie t Ves Ferrtes Took Help Oa xj a Y J sewn Sy Fortes gt 5 EJ 3 HTTPS Control Name GoldServert fiw Gold ID 00 18 F 347 25 99 Service IP 172 21 210 140 fs ix Gold Server Mirror ID 00 18 F3 57 25 5E CIR 4f 0 Create Certificate Signing Request Enable HTTPS iv Common Name Mei B State amp rowece R Fok Base Folder Senta Owner Group earn v Departmert Sow J morn RGA by Goo 1024 Mako CSR Make New Secret A Certificate Signing Request BEGIN CERTIFICATI PIGIN CERTIFICATE BEQUEST NIIEJICCAw gAvIDAg1JAX 1sUlqDrwEAO NIICrjCCAZTCAQAwaTETEBIGAlUECHNLSTK UXNOaV5rEQswCQTDYQOCEw Y2VOQIEvhNiaINb5Vy phic je wixte Lut ust EwL 3 10m eam VPLpbSto hide oBEUB1NUPCO Q zvat m Sver aiv parES t f2bJQYP1RNGOw6 D AE1PLOz G3eIdTulJF GKgQTQ Ybp 2UPiPIpUgMPmecO4 wizERMTYiNOESUhcNNTCwRI ulz ELBANG pas WEBBNCVV META CL TCvt O2 hSNIaloEx SDwsCAwE AQCORySTme9LhVmsPEq m NRKLoKHaPx04 StoKOXtcPav9qg x ust gRGERYA 399 Ru
65. ted share Note When in share level security mode set on the Windows Networking screen all users within a given share will have the same privileges Ple tA Ves Ferrtes Tod Help e Q P x 26 j sem Fyrre 2 B HS Address E Pato 172 21 200 1084 uds gt Mirong Cortret Wetworh Settings Gold ID 00483872599 Mirror ID 00 18 F3 67 25 5E Name GoldServert Service iP 172 21 210 140 fs ix Gold Server Select a Different Share esshwe User Privileges for testshare Group Privileges for testshare Achd a User Selecta user o ade S menmiaior Add Read Only User Add Rend Winte User Note The setting in Basic Permission held on Windows mni n ae t rt Remove a User Cinste Read Only Users Read Write Users Figure 34 You may grant share access by user or by group Add a Group Selecta group to adi admin s Add Reat Oriy Grosp Add Fuend Wrte Group Note The setting in Basic Permisseon keki o6 Windows Shares scaron nay force adi groups to Read Only or Read Wrte access Remove a Group Remove Group RentOnty Groupa Read Write Groups 51 Server Time Control Here you can set the time date and time zone to match your area You may also run a manual sync or enable NTP to sync the correct time automatically Fe Cm Ves Ferrtes Toc Help Qu 0 Si fs Pwo Yew 2 59 Time Control LOL IS 1 Network Settings Name GoldServ
66. to the appropriate field on the Security Scan page This will run an update on your Network Scanner and updates will run automatically from then on 28 WideBand Switch Management Device Control When a switch that is controlled by the nMU is selected from the Device List the Device Control screen for that switch is loaded See Figure 21 Device Identification Every switch can be assigned a Name Contact Location and Description Modifications to these fields are saved when the Save Changes button below them is pressed The Department field is displayed here but can only be modified by using the Password Department button also found on this screen See the Change Password and Department section IP Management Settings Every managed WideBand switch can be assigned a management IP address This address can optionally be used for SNMP management SNMP Communities SNMP communities are like passwords to authenticate any management entity The management entity must know the community name in order to have access to any of the SNMP management features The WideBand Professional Series Switches support the two following communities e Read only Community e Read write Community This separation can be useful to allow public read access to the switch but limit write access to authorized users only It is strongly recommended that you change the Head write community immediately Otherwise any unauthorized user will be capable of r
67. to the nMU the first screen that opens is the Find A Device screen see Figure 4 This screen lists every device that the nMU was able to find on the network The following color coding is used in the Device List e Gray Denotes devices that are managed but are not controlled by the nMU e Off White Denotes devices that are un managed and are not controlled by the nMU e Blue Denotes devices that are managed and controlled by the nMU e Green Denotes devices that are unmanaged but still controlled by the nMU 3 WideBand Network Management Unit Microsoft Internet Explorer Fle Edt View Favortes Took Melb Om x a G seh red El itp 172 21 1 v ae WideBand a Find a Device nMU Adminestiabion Watchmen Control Topology Control VLAN Control LI Virtual Chassis Update Control Find Devices mE Search For Search By Neme v Search Results Found 21 Devices 172 21 199 252 00 04 2E 01 EC 69 FSIXSERVER Unknown Managed Not Controlled by NMU Network Scanner ALBRIGHT 00 A0 8D 40 05 E8 24T4GMPRO IAS Managed Not Controlled by NMU BUZUGHT 00 A0 8D 50 05 60 WBIBGMPRO lAS Managed Controlled by NMU Dev Box 00 01 80 5F 76 06 FSIXSERVER Acellus Lab Managed Not Controlled by NMU Development Server Dev Box 00 11 11 44 89 6C FSIXSERVER Acellus Lab Managed Not Controlled by NMU Development Server fsix DPOD0087 00 04 2E 01 E7 6D FSIXSERVER Unknown Managed Not Controlled by NMU fsi
68. ts Netant Heath Arabyser Name GoldServert Tm Gold ID 00 18 F 3 57 25 99 Service iP 172 21 210 140 fs ix Gold Server Mirror ID 00 18 F3 67 25 5E HTTP HO E L Settings for HTTP Domain Deman Nama Use Domain Name for Base Folder Name Specify Base Folder Name Normal Made Redirect to HTTPS SSM Access Rights Group Mat Gens Tres hast odma e Make Windows Share Sove Remove Done Figure 36 HTTP Hosts Screen Domain Name The domain name this virtual host will respond to Base Folder Name of the folder that contains all of the HTML and PX files for this virtual host Redirect to HTTPS All requests to this virtual host s domain will be redirected to the HTTPS host Group that owns this host Group that will have SSH access to the files in this virtual host Save Save and apply changes to this HTTP virtual host Remove Delete this virtual host from the Gold Server Make Windows Share Configure a Windows share to access files within this virtual host The new share will automatically be created but the Share Privileges screen must be used to set up its privileges 53 Server HTTPS Control Using HTTPS you may view data over a secure connection to a server This screen allows you to configure the Gold Server s HTTPS settings The simplest way to secure HTTP communication with the Gold Server is to fill out the Create Certificate Signing Request form and click the Make New Secre
69. ts as described in the following table Setting Options Description Force Max Speed Checked Force link settings auto negation is disabled so all settings must be entered manually Duplex On Checked Full Duplex Send and receive data simultaneously Best Performance vertise a max speed o only on gigabit ports Control Unchecked Don t support Flow Control Make sure that any changes you make are saved to the device by clicking the Submit Link Settings button before closing the screen or clicking on any other submit buttons on this screen If any of the new settings would cause the nMU to lose its ability to communicate with the device the nMU will detect the error and revert back to the former settings This is a feature built into the WideBand Management Protocol to protect the user from an accidental management lockout However it is possible to disable the port through which your computer is connected to the nMU In this case you would have to move your computer s connection to a port that has not been disabled in order to use the same computer to continue managing the network Port Mirroring Port Mirroring is a powerful tool used for monitoring and debugging the network It works by duplicating all network traffic moving in or out of one port called the Monitored Port to another port called the Mirror Port This allows the network administrator to monitor any port s traffic during normal operation As s
70. ual devices on the network Change Password and Department The Password Department button leads to the Change Password and Department screen See Change Password and Department which allows you to change the selected switch s department membership After you have entered a new password and department the nMU will apply the correct department settings to the switch Note that only users with write access to all departments can change the password and department of a switch 30 Restore Defaults In some cases it is useful to clear out any management settings on the switch and start over with the factory defaults This can be accomplished by clicking the Restore Defaults button Warning Restoring factory defaults will cause all configuration data to be lost If gt the current configurations are required for proper communication with the switch like lt specific VLAN settings the switch may become inaccessible over the network S VVICIVIVCCIESCINENCEENENENESENENENENENENESEENENENCENENESENENENENENENESE SENENENENENESENENENENENENESENENENENSENENESENENENCNENENESE ENENENCENENESENENENENEN Note Restoring factory defaults will not clear the Device Identification settings Make Unmanaged by nMU The nMU will periodically read statistics and status information from every switch it is managing The Make Unmanaged button can be used to discontinue the nMU management for the selected switch When the nMU stops managing a device it
71. x DPO00087 00 04 2E 01 EA F2 FSIXSERVER Unknown Managed Not Controlled by NMU fsix DPO00103 00 04 2E 01 D1 42 FSIXSERVER Unknown Managed Not Controlled by NMU fsix DP000103 00 04 2E 01 E7 63 FSIXSERVER Unknown Managed Not Controlled by NMU done intere Figure 4 The Find a Device screen displays all devices found with blue gray off white and green highlights indicating management and nMU control status Searching for Devices The WideBand nMU has a powerful search engine for finding the device on the network you are looking for The List of switches can be searched and sorted by any of the following criteria e Name The name added to the switch for human friendly identification Serial No Same as the switch MAC address which is unique for every switch Model A short description of the type and number of ports the switch has Description A user defined description of the device Department The department this device is a member of The Search feature includes built in wild cards allowing you to enter partial words etc and find multiple devices with similar criteria Entering a blank field as the criteria will return a list of all devices Making Devices Managed by nMU The WideBand nMU can only manage devices that it has learned a password and department for When a device is selected from the Device List that is not managed by the nMU a password and department must be supplied before management of that device can
72. x Data Field Name Description Current Aggregation The ID of the aggregate which this port is currently a member of The aggregate ID is the same as the lowest numbered port in the aggregate All ports that are in the same aggregate as the selected 9 Actor State This port s current Aggregation State described with more detail in the Aggregation State Bits table below Partner Box Data Field Name Description El Partner port Port number on the Partner to which we are connected A Partner Churn occurs when the Partner aggregation status fails to MEC 2110 P Partner State Partner s current Aggregation State described with more detail in the Aggregation State Bits table below Aggregation State Bits Bit Name Status Description Activity On Running in Active LACP mode always sends LACPDUs Off Running in Passive LACP mode only sends LACPDUs when a Partner is detected Timeout On Using Short Timeout 3 seconds Off Using Long Timeout 90 seconds 34 Aggregation On This link is considered Aggregate able ready to trunk _Off This link is considered ndividual will never join a trunk Synchronization On Link is in sync and is a member of a valid aggregate _Off Link is out of sync reconfiguring aggregation Collecting On Traffic received on this link will be accepted _Off Traffic from this link will be discarded Distributing On This link is ready to send data
73. y changes you make to the Auto Update settings by clicking the Set Auto Update button 14 Upgrade Unmanaged Switches Most WideBand Professional Series Switches that are unmanaged can be upgraded to managed with the purchase of a management Token Token s may be obtained via the web at http www wband com proswitch or through your WideBand Reseller To locate the WideBand Authorized Resellers nearest you contact the WideBand Sales Office at 888 663 3050 Once you have the Token ready to use select the unmanaged switch to be upgraded from the Select Switch list box Note that the switch must be controlled by the nMU in order to perform an upgrade See the Making Devices Managed by nMU section Enter your valid Token in the Enter Token field and click on the Start Upgrade button to start the upgrade Manually Update Switches The WideBand nMU will perform switch firmware updates on groups of switches at a time Each department is a separate group To start a group update choose a department in the Select Department list box and click Start Switch Update button see Figure 8 This will load a screen that reports the update status of every switch in the selected department see Figure 9 Only a firmware check will be performed on the switches that are already up to date 3 WideBand Network Management Unit Microsoft Internet Explorer Fle Edt Vew Favortes Tools Melb Om gt x 2m Ph Grek dl uto 172 21 1 Ee WideBa

Download Pdf Manuals

Related Search

Related Contents

Product Specifications  Gracias por comprar un Sony Ericsson T700. Comuníquese con  baixar manual    Instruction Manual  Nokia 808 Cell Phone User Manual  SERVICE MANUAL  

Copyright © All rights reserved. Failed to retrieve file