Home

Nortel Networks COMMISSIONING 8600 User's Manual

1. Common procedures using the NNCLI 131 Saving the configuration 131 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Copyright 2008 Nortel Networks Software license This section contains the Nortel Networks software license Nortel Networks Inc software license agreement This Software License Agreement License Agreement is between you the end user Customer and Nortel Networks Corporation and its subsidiaries and affiliates Nortel Networks PLEASE READ THE FOLLOWING CAREFULLY YOU MUST ACCEPT THESE LICENSE TERMS IN ORDER TO DOWNLOAD AND OR USE THE SOFTWARE USE OF THE SOFTWARE CONSTITUTES YOUR ACCEPTANCE OF THIS LICENSE AGREEMENT If you do not accept these terms and conditions return the Software unused and in the original shipping container within 30 days of purchase to obtain a credit for the full purchase price Software is owned or licensed by Nortel Networks its parent or one of its subsidiaries or affiliates and is copyrighted and licensed not sold Software consists of machine readable instructions its components data audio visual content such as images text recordings or pictures and related licensed materials including all whole or partial copies Nortel Networks grants you a license to use the Software only in the country where you acquired the Software You obtain no rights other than those granted to you und
2. Option Description O default_route Adds a default route to the system routing table after successful Internet Protocol Control Protocol IPCP negotiation Use the peer as the gateway After the PPP connection ends the system removes this entry Activates PPP driver debug mode escape_ chars lt value gt Configures the characters to escape on transmission to the value you specify ipcp_accept_local Accepts what the remote peer uses as the target local IP address even if the local IP address is specified ipcp_accept_remote Accepts what the remote peer uses as the IP address even if you specify the remote IP address ipcp_max_configure lt value gt Configures the maximum number of transmissions for IPCP configuration requests to the value you specify ipcp_max_failure lt value gt Configures the maximum number of IPCP configuration negative acknowledgements NAK to the value you specify ipcp_max_terminate lt value gt Configures the maximum number of transmissions for IPCP termination requests to the value you specify ipcp_restart lt value gt Configures the timeout in seconds for IPCP negotiation to the value you specify 1lcp_echo_ failure lt value gt Configures the maximum consecutive Link Control Protocol LCP echo failures to the value you specify lcp_echo_interval lt value gt Configures the interval in seconds between LCP echo requests to the value you specify lcp_max_configure lt
3. page 16 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 16 Commissioning fundamentals Terminal connection Connect the serial console interface an RS 232 port to a PC or terminal to monitor and configure the switch The port uses a DB 9 connector that operates as data terminal equipment DTE or data communication equipment DCE The default communication protocol settings for the console port are e 9600 baud e 8 data bits e 1 stop bit e No parity To use the console port you need the following equipment e A terminal or teletypewriter TTY compatible terminal or a portable computer with a serial port and terminal emulation software e An Underwriters Laboratories UL listed straight through or null modem RS 232 cable with a female DB 9 connector for the console port on the switch The other end of the cable must use a connector appropriate to the serial port on your computer or terminal Most computers or terminals use a male DB 25 connector You can find a null modem cable with the chassis You must shield the cable connected to the console port to comply with emissions regulations and requirements Modem connection You can access the switch through a modem connection to the Nortel Ethernet Routing Switch 8600 8691SF CPU or 8692SF CPU modules Nortel recommends that you use the default settings for the modem port for most modem installatio
4. 1 Change the system name by using the following command ERS 8610 5 config sys name ERS 8610 2 Configure the system contact by using the following command ERS 8610 5 config snmp server contact joe smith somecompany com 3 Configure the system location by using the following command ERS 8610 5 config snmp server location 12 Main St Vancouver BC End Configuring the time zone Configure the time zone to specify the time zone for your location and configure settings for Daylight Saving Time DST Prerequisites e You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Configure the time zone by using the following command boot config tz 2 Save the changed configuration to the boot cfg and pcmboot cfg files 3 Reboot the switch End Variable definitions Use the data in the following table to use the boot config tz command Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 90 Initial steps using the NNCLI dst end lt Mm n d hhmm MMddh_ Configures the ending date of DST You hmm gt can specify the time in one of two ways Mm n d hhmm specifies an hour on the nth occurrence of a weekday in a month For example M10 5 0 0200 means the fifth occurrence of Sunday in the tenth month October at 2 00 a m MMddhhmm specifies a month day hour and minute For example
5. 10310200 means October 31 at 2 00 a m dst name lt dstname gt Configures an abbreviated name for the local daylight saving time zone dstname is the name For example PDT is Pacific Daylight Time To configure this option to the default value use the default operator with the command dst offset lt minutes gt Configures the daylight saving adjustment in minutes The default is 60 minutes To configure this option to the default value use the default operator with the command dst start lt Mm n d hhmm MMd Configures the starting date of DST dhhmm gt Mm n d hhmm specifies an hour on the nth occurrence of a weekday in a month For example M10 5 0 0200 means the fifth occurrence of Sunday in the tenth month October at 2 00 a m MMddhhmm specifies a month day hour and minute For example 10310200 means October 31 at 2 00 a m Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Specifying the primary SF CPU 91 Variable name lt tz gt Configures an abbreviated name for the local time zone name tz is the name For example PST is Pacific Standard Time To configure this option to the default value use the default operator with the command offset from utc lt minutes gt Configures the time zone offset in minutes to subtract from Universal Coordinated Time UTC where positive numbers mean west of Greenwich and
6. Assigning static routes to the management interface page 97 e Configuring SNMP settings for Device Manager access page 99 Enabling the Web management interface page 101 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Assigning static routes to the management interface 97 Assigning an IP address to the management port Assign an IP address to the management port to use it for out of band OOB management The standby IP must be in the same subnet as the master IP Create a virtual management port in addition to the physical management ports on the switch management modules Procedure steps Step Action 1 In the main Device Manager window select the management port 2 From the Device Manager toolbar select Edit Mgmt Port The Mgmt Port dialog box appears with the Mgmt Port IP tab displayed 3 In the Addr box type the required IP address for the management port 4 In the Mask box type the subnet mask 5 Click Apply 6 Click Close 7 From the Device Manager toolbar select Edit Chassis The Chassis dialog box appears with the System tab displayed 8 In the VirtuallPAddr box enter the IP address you want to configure as the virtual address 9 In the VirtualNetMask box enter the subnet mask 10 Click Apply End Assigning static routes to the management interface Assign a static route to specify a gateway address rout
7. Please provide primary Description Indicates the name of the config file path primary configuration file flash config cfg Action Press Enter to accept the default flash config cfg or type a different file name for the primary configuration file To store your configuration file on the PCMCIA card use PCMCIA config cfg To specify the path to the file is optional Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring the switch with the setup utility 55 Table 9 Job aid Setup utility prompt descriptions cont d Please provide primary image file path flash p80a4100 img Please add system prompt ERS 8606 Please select CPU primary slot 5 6 5 Primary CPU mgmt port autonegotiation n y n speed 10 100 10 Do you want to enable automatic savetostandby mode n y n Description Indicates the name of the primary image file Action Press Enter to accept the default p80a4100 img or type a different file name for the primary image file To specify the path to the file is optional If your run time image resides on your PCMCIA card you must specify the path as PCMCIA filename Description Specifies the text for the prompt Action Press Enter to accept the default ERS 8610 or type a different string of up to 20 characters Description Indicates the slot number of the primary
8. The Nortel Ethernet Routing Switch 8600 includes a Web management interface you can use to monitor your switch through a Web browser from anywhere on your network The Web interface supports many of the same monitoring features as the Device Manager software For information about configuration requirements and instructions to install the help files to enable the Web server using Device Manager and to access the Web interface see Nortel Ethernet Routing Switch 8600 User Interface Fundamentals NN46205 308 Device Manager Device Manager is an SNMP based graphical user interface GUI tool designed to manage single devices To use Device Manager you must connect to a management station running Device Manager in one of the supported environments For information about Device Manager installation and startup see Nortel Ethernet Routing Switch 8600 User Interface Fundamentals NN46205 308 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks ioning fundamentals Copyright 2008 Nortel Networks 31 Commissioning Commissioning follows hardware installation The commissioning task includes all the initial procedures you must use to bring the Ethernet Routing Switch 8600 online and set up appropriate access for remote users Commissioning tasks The following work flow shows the sequence of tasks you perform to commission the Nortel Ethernet Routi
9. The value 11 0 0 0 255 0 0 0 represents the target subnet the value 10 127 231 1 represents the gateway used to point to the target subnet ATTENTION The config net mgmt route command uses the natural mask of the target subnet Therefore in the preceding example what you implement is the command config net mgmt route 13 0 0 010 125 2 1 Additionally this route does not appear in the routing table of the Nortel Ethernet Routing Switch 8600 If you configure a 13 x x x network for output using the I O modules the switch can experience connectivity issues Enabling remote access services Enable the remote access service to provide multiple methods of remote access Prerequisites e When you enable an rlogin flag you must configure an access policy to specify the user name of who can access the switch For more information about the access policy commands see Nortel Ethernet Routing Switch 8600 Security NN46205 601 e You must log on to the Global Configuration mode in the NNCLI Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Enabling the Web management interface 119 Procedure steps Step Action 1 Enable the access service by using the following command boot config flags lt access service gt See the following variable definitions table for more information 2 Save the boot configuration End Variable definitions Use the data in the
10. chassis to run in 128 K mode To run in 128 K mode the CPU module must be an 8691 or higher and the switch must use at least one 8600 module 128 K module ATTENTION If you enable M mode support and you use a mixed configuration of modules you disable the E modules and Pre E modules ATTENTION If you enable M mode support and you use a mixed configuration of modules you disable the E modules Action Enter y if you want the chassis to run in 128 K M mode Accept the default n if you want it to run in 32 K mode only Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 84 Initial steps using the NNCLI Table 13 Job aid Setup utility prompt descriptions cont d Do you want to enable Description Specifies if you want to enable enhanced operation mode enhanced operation mode Enhanced support n y n operation mode increases the maximum number of VLANs when you use MultiLink Trunking MLT 1980 and Split MLT SMLT 989 This mode requires 8600 E or M modules ATTENTION If you enable enhanced operation mode and you use a mixed configuration of modules you disable the Pre E modules Action Enter y to enable enhanced operation mode Accept the default n to not enable enhanced operation mode Do you want to enable CPU Description Specifies if you want to enable High Availability mode n CPU high availability HA mo
11. 1 Start the setup utility by using the following command install 2 Respond to the series of questions displayed on the screen Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 82 Initial steps using the NNCLI For more information about the prompted questions see Procedure job aid setup utility prompts page 82 3 Reboot the switch End Procedure job aid setup utility prompts The following table lists the questions prompted by the setup utility and provides a description for each Table 13 Job aid Setup utility prompt descriptions Please provide primary Description Indicates the name of the config file path primary configuration file flash config cfg Action Press Enter to accept the default flash config cfg or type a different file name for the primary configuration file To store your configuration file on the PCMCIA card use PCMCIA config cfg To specify the path to the file is optional Please provide primary Description Indicates the name of the image file path primary image file flash p80a4100 img Action Press Enter to accept the default p80a4100 img or type a different file name for the primary image file To specify the path to the file is optional If your run time image resides on your PCMCIA card you must specify the path as PCMCIA filename Please add system prompt Description Specifies the
12. 2008 Nortel Networks Configuring the remote host logon 111 password lt value gt Configures the password to enable FTP transfers value is the password up to 16 characters long After you configure this password only FTP is used for remote host logon ATTENTION This password must match the password for the FTP server or the FTP operation fails Also if you configure the password to a valid value then all copying to and from the network uses FTP instead of TFTP If the user name or password is incorrect copying over the network fails tftp debug Enables or disables debug mode on TFTP TFTPD If lt true false gt you enable debug mode debug messages appear on the management console screen The default is false tftp hash Enables or disables the TFTP hash bucket display lt true false gt The default is false tftp rexmit Configures the TFTP retransmission timeout The lt seconds gt default value is 2 seconds seconds is the number of seconds 1 2147483647 tftp timeout Configures the TFTP timeout The default value is 6 lt seconds gt seconds seconds is the number of seconds 1 120 user lt value gt Configures the remote user logon value is the user logon name up to 16 characters Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks n using the CLI Copyright 2008 Nortel Networks 113 Remote connection config
13. Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Changing passwords 65 Prerequisites e You must use an account with read write all privileges to change passwords For security the switch saves passwords to a hidden file The optional parameter password is the password associated with the user name or logon name Procedure steps Action Change a password by using the following command config cli password Variable definitions Use the data in the following table to use the config cli password command access level lt access level gt Permits or blocks this access lt enable disable gt level e access level is an integer from 2 8 e enable disable enables or disables the chosen level aging lt days gt Configures the time limit for passwords daysis the age out time as an integer from 1 365 default lockout time lt secs gt Changes the default lockout time after three invalid attempts secs is the lockout time in seconds and is in the 60 6500 range The default is 60 seconds Shows the level parameter settings and the next level directories Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 66 Initial steps using the CLI 11 lt username gt lt password gt Changes the Layer 1 read write logon or password username is the logon name pass
14. For example 10310200 means October 31 at 2 00 a m dst name lt dstname gt Configures an abbreviated name for the local daylight saving time zone dstname is the name For example PDT is Pacific Daylight Time Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring the date 63 dst offset lt minutes gt Configures the daylight saving adjustment in minutes The default is 60 minutes dst start lt Mm n d hhmm MMd_ Configures the starting date of daylight dhhmm gt saving time Mm n d hhmm specifies an hour on the nth occurrence of a weekday ina month For example M10 5 0 0200 means the fifth occurrence of Sunday in the tenth month October at 2 00 a m MMddhhmm specifies a month day hour and minute For example 10310200 means October 31 at 2 00 a m name lt tz gt Configures an abbreviated name for the local time zone name tz is the name For example PST is Pacific Standard Time offset from utc lt minutes gt Configures the time zone offset in minutes to subtract from Universal Coordinated Time UTC where positive numbers mean west of Greenwich and negative numbers mean east of Greenwich Configuring the date Configure the calendar time in the form of month day year hour minute and second Prerequisites e You must log on with the rwa credentials to use the command in this procedure Procedure ste
15. IP address even if you specify the remote IP address ipcp_ max configure lt value gt Configures the maximum number of transmissions for IPCP configuration requests to the value you specify Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Connecting amodem 51 Table 7 Job aid PPP file options cont d Option Description O ipcp_ max _ failure lt value gt Configures the maximum number of IPCP configuration negative acknowledgements NAK to the value you specify ipcp_ max terminate lt value gt Configures the maximum number of transmissions for IPCP termination requests to the value you specify ipcp_restart lt value gt Configures the timeout in seconds for IPCP negotiation to the value you specify 1lcp_echo_ failure lt value gt Configures the maximum consecutive Link Control Protocol LCP echo failures to the value you specify lcp_echo_interval lt value gt Configures the interval in seconds between LCP echo requests to the value you specify lcp_ max configure lt value gt Configures the maximum number of transmissions for LCP configuration requests to the value you specify lcp_ max _ failure lt value gt Configures the maximum number of LCP configuration NAKs to the value you specify lcp_max_terminate lt value gt Configures the maximum number of transmissions for LCP termination requests to the val
16. Layer 2 read write CLI account Specifies the password for the Layer 2 read write CLI account Activates the read write Layer 1 access level Specifies the user name for the Layer 1 read write CLI account Specifies the password for the Layer 1 read write CLI account Activates the read only CLI account level Specifies the user name for the read only CLI account Specifies the password for the read only CLI account Indicates the maximum number of concurrent Telnet sessions 0 8 Indicates the maximum number of concurrent Rlogin sessions 0 8 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 40 Initial steps using Device Manager Variable Timeout Indicates the number of seconds of inactivity for a Telnet or Rlogin session before automatic timeout and disconnect 30 65535 seconds NumAccessViolations Indicates the number of CLI access violations detected by the system This field is a read only field Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 41 Initial steps using the CLI The initial commissioning steps involve basic configuration settings Prerequisites to initial steps e You must install the hardware e You must install at least one cable to set up a remote connection to the switch e You must power up the switch Init
17. Step Copyright 2008 Nortel Networks Accessing the switch through the Web interface 125 Action Start your Web browser Type the switch IP address as the URL in the Web address field The Web logon page appears In the User Name and Password boxes type ro Click Log On The System page appears This page provides general information about the switch and its configuration parameters End Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 127 Common procedures using Device Manager The following section describes common procedures you use while commissioning the Nortel Ethernet Routing Switch 8600 Common procedure navigation e Saving the configuration page 127 Saving the configuration After you change the boot configuration you must save the changes to both the master and the standby management modules Save the configuration to a file to retain the configuration settings Procedure steps Step Action 1 From the main Device Manager window select Actions Save Boot Config to save the boot configuration 2 From the main Device Manager window select Actions Save Runtime Config to save the current configuration End Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 128 Common procedures using De Copyright 2008 Norte
18. e To use the console port you need the following equipment A terminal or teletypewriter TTY compatible terminal or a portable computer with a serial port and terminal emulation software An Underwriters Laboratories UL listed straight through or null modem RS 232 cable with a female DB 9 connector for the console port on the switch The other end of the cable must use a connector appropriate to the serial port on your computer or terminal Most computers or terminals use a male DB 25 connector You can find a null modem cable with the chassis e You must shield the cable connected to the console port to comply with emissions regulations and requirements Procedure steps Step Action 1 Configure the terminal protocol as follows e 9600 baud e 8 data bits e 1 stop bit e No parity 2 Connect the RS 232 cable to the console port 3 Connect the other end of the RS 232 cable to the terminal or computer serial port Turn on the terminal 5 Log on to the CLI End Connecting a modem Connect a modem to a Nortel Ethernet Routing Switch 8600 to establish a connection with the switch You can configure the modem port first using another type of connection such as a terminal connection to the CLI Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Prerequisites Connecting amodem 47 e You need a DTE to DCE cable straight or transmit cabl
19. following table to use the boot config flags command access service Specifies one of the following remote access service types to enable ftpd rlogind sshd telnetd tftpd Use the no operator to remove this configuration To configure this option to the default value use the default operator with the command Enabling the Web management interface Enable the Web management interface to provide management access to the switch using a Web browser Prerequisites e You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Enable the Web server by using the following command Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 120 Remote connection configuration using the NNCLI web server enable 2 Configure the access password by using the following command web server password lt ro gt lt username gt lt passwd gt End Variable definitions Use the data in the following table to use the web server command Sets web server default def display rows display row width enable Enables the Web interface help tftp Sets web server HTML directories http port Sets web server HTTP port password Sets web server password Configuring the remote host logon Configure the remote host logon to modify parameters for FTP and TFTP access Use the default parameters for TFTP transfers If you wa
20. gt Configures the operator logon to connect to the WSM For more information about the WSM see Nortel Ethernet Routing Switch 8600 Web Switching Module Fundamentals NN46205 314 password history lt number gt Specifies the number of previous passwords the switch stores You cannot reuse a password that is stored in the password history number uses a configurable range of 3 32 and the default is 3 ro lt username gt lt password gt Changes the read only logon or password username is the logon name e password is the password associated with the logon name rw lt username gt lt password gt Changes the read write logon or password username is the logon name e password is the password associated with the logon name rwa lt username gt lt password gt Changes the read write all logon or password username is the logon name e password is the password associated with the logon name slboper lt username gt Configures the server load balancing SLB operator logon to connect to the WSM For more information about the WSM see Nortel Ethernet Routing Switch 8600 Web Switching Module Fundamentals NN46205 314 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 68 Initial steps using the CLI slbadmin lt username gt Configures the SLB administrator logon to connect to the WSM For more information a
21. is 0 0 0 0 The switch assigns this value to any PC that connects through the modem port with configured TCP IP properties to obtain an IP address automatically If the client uses a static IP address the Nortel Ethernet Routing Switch 8600 accepts this address If you use Password Authentication Protocol PAP authentication you must ensure that the client uses the correct IP address To configure this option to the default value use the default operator with the command pppfile lt file gt Specifies the PPP configuration file to provide details for authentication and other options to include during the boot procedure of the switch The PPP filename is a string value of no more than 64 characters Identify the file in the format a b c d peer pcmcia flash lt file gt For more information about this file see Procedure job aid PPP file page 77 ATTENTION Do not specify a PPP filename with more than 64 characters To configure this option to the default value use the default operator with the command Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Connecting a modem 77 Shuts down and initializes the port slip compression slip rx compression Procedure job aid PPP file Enables or disables Transmission Control Protocol over IP TCP IP header compression for SLIP mode The default is false Use the no operator to remove
22. negative numbers mean east of Greenwich To configure this option to the default value use the default operator with the command Configuring the date Configure the calendar time in the form of month day year hour minute and second Prerequisites e You must log on to the Privileged EXEC mode in the NNCLI Procedure steps Action Configure the date by using the following command clock set lt MMddyyyyhhmmss gt Specifying the primary SF CPU Specify the primary SF CPU to determine which SF CPU you use as the master after the switch performs a full power cycle only When the SF CPU becomes the primary the master LED for the SF CPU is on Prerequisites e You must log on to at least Privileged EXEC mode to use the show command e You must log on to the Global Configuration mode in the NNCLI to use the configuration command in this procedure Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 92 Initial steps using the NNCLI Procedure steps Step Action 1 View the current setting for the primary SF CPU by using the following command show boot config master 2 Specify the slot of the primary SF CPU by using the following command boot config master lt cpu slot gt 3 Save the configuration to the boot cfg and pcmboot cfg files 4 Reboot the switch End Variable definitions Use the data in the following table to use the boot config
23. no_vjccomp Disables VJ connection ID compression pap_file lt file gt Obtains PAP secrets from the specified file You require this option if either peer requires PAP authentication If your users must use the same IP address the PAP and CHAP secret files must specify the same IP address for all users and it must match the peer ip setting on the modem port pap_max_authreq lt value gt Configures the maximum number of transmissions for PAP authentication requests to the value you specify pap_passwd lt password gt Configures the password for PAP authentication with the peer to the specified password Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Connecting amodem 53 Table 7 Job aid PPP file options cont d Option Description O pap_restart lt value gt Configures the timeout in seconds for PAP negotiation to the value you specify pap_user_name lt name gt Configures the user name for PAP authentication with the peer to the specified name passive_mode Configures passive mode PPP waits for the peer to connect after an initial connection attempt proxy_arp Adds an entry to the Address Resolution Protocol ARP table with the IP address of the peer and the Ethernet address of the local system remote_auth_name lt name gt Configures the remote name for authentication to the specified name require chap Requir
24. options Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 50 Initial steps using the CLI Table 7 Job aid PPP file options asyncmap lt value gt Configures the desired async map to the value you specify chap file lt file gt Obtains Challenge Handshake Authentication Protocol CHAP secrets from the specified file You require this option if either peer requires CHAP authentication If your users must use the same IP address the PAP and CHAP secret files must specify the same IP address for all users and it must match the peer ip setting on the modem port chap_interval lt value gt Configures the interval in seconds for the CHAP rechallenge to the value you specify chap_restart lt value gt Configures the timeout in seconds for CHAP negotiation to the value you specify mode default_route Adds a default route to the system routing table after successful Internet Protocol Control Protocol IPCP negotiation Use the peer as the gateway After the PPP connection ends the system removes this entry Activates PPP driver debug mode escape _chars lt value gt Configures the characters to escape on transmission to the value you specify ipcp_accept_local Accepts what the remote peer uses as the target local IP address even if the local IP address is specified ipcp_accept_remote Accepts what the remote peer uses as the
25. system identification Configuring the time zone Configuring the date Specifying the master SF CPU Changing passwords Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Job aid Roadmap of initial NNCLI commands 71 Initial commissioning navigation e Job aid Roadmap of initial NNCLI commands page 71 e Connecting a terminal page 73 e Connecting a modem page 74 e Configuring the switch with the setup utility page 81 e Configuring system identification page 87 e Configuring the time zone page 89 e Configuring the date page 91 e Specifying the primary SF CPU page 91 e Changing passwords page 92 Job aid Roadmap of initial NNCLI commands The following table lists the commands and the parameters you use to complete the procedures in this section The last two columns indicate which commands support the no and default forms of the command Table 10 Job aid Roadmap of initial NNCLI commands Command Parameter Privileged EXEC mode clock set lt MMddyyyyhhmmss gt show boot config master Global Configuration mode Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 72 Initial steps using the NNCLI Table 10 Job aid Roadmap of initial NNCLI commands cont d Command Parameter boot
26. the boot and run time configuration files Enter n if you do not want to save your changes Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 60 Initial steps using the CLI Configuring system identification Configure system identification to specify the system name contact person and location of the switch Procedure steps Step Action 1 Specify the system name by using the following command config sys set name lt prompt gt 2 Specify the name of the contact person for the switch by using the following command config sys set contact lt contact gt 3 Define the location for the system by using the following command config sys set location lt location gt End Variable definitions Use the data in the following table to use the config sys set command clipld topology ip lt id gt Sets the topology IP from the available CLIP id is the circless IP interface id in the range of 1 to 256 clock sync time lt minutes gt Configures the RTC to system clock synchronization time minutes is the RTC to System clock synchronization time in minutes in the range of 15 to 3600 contact lt contact gt Alters the system contact contact is the system contact The string length is in the range of 0 to 255 ecn compatibility lt enable dis Enables or disables ecn compatibility able gt feature force topology ip flag Sets flag to forc
27. this configuration To configure this option to the default value use the default operator with the command Enables or disables TCP IP header compression on the receive packet for SLIP mode The default is false Use the no operator to remove this configuration To configure this option to the default value use the default operator with the command Create the PPP file with one option on each line comment lines start with a pound sign The following table lists the recognized options Table 11 Job aid PPP file options asyncmap lt value gt Configures the desired async map to the value you specify chap _ file lt file gt chap_interval lt value gt chap_restart lt value gt Obtains Challenge Handshake Authentication Protocol CHAP secrets from the specified file You require this option if either peer requires CHAP authentication If your users must use the same IP address the PAP and CHAP secret files must specify the same IP address for all users and it must match the peer ip setting on the modem port Configures the interval in seconds for the CHAP rechallenge to the value you specify Configures the timeout in seconds for CHAP negotiation to the value you specify mode Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 78 Initial steps using the NNCLI Table 11 Job aid PPP file options cont d
28. this link to connect remotely to a switch through a standard dial up modem and the modem DTE port on the primary switch SF CPU You must configure the connection on both the remote client PC and the switch The following figure shows a standard PPP connection to the Nortel Ethernet Routing Switch 8600 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 18 Commissioning fundamentals Figure 1 PPP configuration topology Nortel Ethernet Routing Switch 8600 PBX modem 234 9108 as _ DTE to DCE cable Analog lines 234 9203 my ip 47 133 223 71 peer ip 47 133 223 200 When you configure the modem port on the switch to use PPP you must also specify a PPP file The PPP file is a text document which includes all additional PPP configuration parameters to include when the switch reboots Enter one configuration parameter on each line with any required values You can configure the connection to use the Challenge Handshake Authentication Protocol CHAP or the Password Authentication Protocol PAP Both protocols require a secrets file The secrets file is a text document which includes the list of all users authorized to use the modem port You must list one user on each line and include specific parameters The format for each user is client server password IP address The following list explains each option e client the name of the user This value is th
29. y Ht Ht Ht HE HE AE HE HE FE HE E AE HE HE HE HEH System Parameters EEEE HE HF HEHE HE HEIE HEHE HEHE HHHH H Please provide primary config file path flash SN1 cfg Please provide primary image file path flash p80a4100 img Please add system prompt ERS 8606 Please select CPU Master slot 5 6 5 Master CPU mgmt port autonegotiation n y n speed 10 100 10 you want to enable automatic savetostandby mode n y n you want to enable m mode support n y n you want to enable enhanced operation mode support n y n you want to enable CPU High Availability mode n y n you want to enable vlan optimization mode support n y n you want to enable r mode support n y n SSSI 1 Primary configuration file path flash SN1 cfg gt flash SN1 cfg 2 Primary image file path lash p80a4100 img gt flash p80a4100 img 3 CLI prompt ERS 8606 gt ERS 8606 4 Master CPU selection 5 gt 5 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 24 Commissioning fundamentals Figure 3 Setup utility example two Master CPU Mgmt port autonegotiation false gt false Master CPU Mgmt port speed 10 gt 10 Automatic save to Standby false gt false Support for M mode false gt false Support for enhanced operation mode false gt false High Availability mode false gt false Support for vlan optimizati
30. 1 121 tftp debug option 105 111 115 121 tftp hash command 105 111 115 121 tftp rexmit option 105 111 115 121 tftp timeout option 105 111 115 122 time zone commands 62 89 time configuring 37 timeout TFTP 111 122 transfers FTP 111 121 tz commands 62 89 primary command 64 91 Primary SF CPU and primary command 91 U prompt user option 105 111 115 122 root level 88 User Set Time tab 37 protocol settings terminal 46 74 V R virtual management port 97 106 116 remote host logon defining 110 120 remote logon username configuring 111 122 reset console 37 counters 37 hard 37 modem 37 soft 37 restart option 49 77 retransmission timeout TFTP 111 121 root level prompt 88 run time configuration saving 37 S setdate command 63 SF CPU switch control 37 sio mode option 48 76 slip compression option 49 77 slip rx compression option 49 77 soft reset 37 software version 35 system identification 60 System tab 34 T TCP IP header compression 49 77 terminal protocol configuring 46 74 terminal connecting 45 73 TFTP hash bucket display 111 121 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Nortel Ethernet Routing Switch 8600 Commissioning Copyright 2008 Nortel Networks All Rights Reserved Printed in Canada and the United States of America Release 5 0 Publication NN46205 319 Document stat
31. I by using the following command config bootconfig flags lt access service gt lt true false gt 2 Save the configuration 3 From the boot monitor CLI while the switch is booting press any key to interrupt the autoboot process Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Enabling the Web management interface 109 4 Enable or disable the access service by using the following command flags lt access service gt lt true false gt 5 Save the boot configuration End Variable definitions Use the data in the following table to use the flags command access service Specifies the type of remote access service as one of the following e ftpd rlogind telnetd tftpd sshd true false True enables the service False disables the service Enabling the Web management interface Start the Web management interface to provide management access to the switch using a Web browser For details about configuring the Web management interface see Nortel Ethernet Routing Switch User Interface Fundamentals NN46205 308 Procedure steps Step Action 1 Enable the Web server by using the following command config web server enable 2 Configure the access password by using the following command config web server password lt ro gt lt username gt lt password gt End Variable definitions Use the data in the following table to use the co
32. IP Address for mgmt virtual ip 0 0 0 0 0 0 0 0 First net mgmt route 172 16 0 0 10 127 231 1 Second net mgmt route 134 177 0 0 10 127 231 1 Third net mgmt route 10 0 0 0 10 127 231 1 Fourth net mgmt route 11 0 0 0 10 127 231 1 IP address of the default VLAN 0 0 0 0 0 0 0 0 1 Management port Ip Address for first CPU slot 10 127 231 15 255 255 255 0 gt 10 127 231 15 255 255 255 0 2 Management port Ip Address for second CPU slot 10 127 231 15 255 255 255 0 gt 10 127 231 15 255 255 255 0 3 Virtual management port Ip Address 0 0 0 0 0 0 0 0 gt 0 0 0 0 0 0 0 0 4 First static route for management port 172 16 0 0 10 127 231 1 gt 172 16 0 0 10 127 231 1 5 Second static route for management port 134 177 0 0 10 127 231 1 gt 134 177 0 0 10 127 231 1 6 Third static route for management port 10 0 0 0 10 127 231 1 gt 10 0 0 0 10 127 231 1 7 Fourth static route for management port 11 0 0 0 10 127 231 1 gt 11 0 0 0 10 127 231 1 8 IP address of the default VLAN 0 0 0 0 0 0 0 0 gt 0 0 0 0 0 0 0 0 Please type the line number you want to change OR 0 to save amp quit at this stage OR hit return to continue 1 Do you want to save the changes Saving the parameters will update the files flash boot cfg and flash SN1 cfg y n n WARNING The change made will take effect only after the configuration is saved and the full chassis is rebooted This feature is not applicabl
33. NMPv3 you can change passwords that are in encrypted format Procedure steps Step Action 1 From the Device Manager menu bar choose Security Control Path General The Control Path Security dialog box appears with the Port Lock tab visible 2 Click CLI The CLI tab appears 3 Specify the username and password for the appropriate access level 4 Click Apply End Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Variable definitions Changing passwords 39 Use the data in the following table to configure the CLI tab Variable RWAUserName RWAPassword RWeEnable RWUserName RWPassword RWLS3Enable RWL3UserName RWL3Password RWL2Enable RWL2UserName RWL2Password RWL1 Enable RWL1UserName RWL1Password ROEnable ROUserName ROPassword MaxTelnetSessions MaxRloginSessions Value Specifies the user name for the read write all CLI account Specifies the password for the read write all CLI account Activates the read write access level Specifies the user name for the read write CLI account Specifies the password for the read write CLI account Activates the read write Layer 3 access level Specifies the user name for the Layer 3 read write CLI account Specifies the password for the Layer 3 read write CLI account Activates the read write Layer 2 access level Specifies the user name for the
34. NORTEL Commissioning Release 5 0 Document Revision 01 01 www nortel com NN46205 319 323883 A Rev 01 Nortel Ethernet Routing Switch 8600 Release 5 0 Publication NN46205 319 Document status Standard Document release date 30 May 2008 Copyright 2008 Nortel Networks All Rights Reserved Printed in Canada and the United States of America LEGAL NOTICE While the information in this document is believed to be accurate and reliable except as otherwise expressly agreed to in writing NORTEL PROVIDES THIS DOCUMENT AS IS WITHOUT WARRANTY OR CONDITION OF ANY KIND EITHER EXPRESS OR IMPLIED The information and or products described in this document are subject to change without notice Nortel the Nortel logo and the Globemark are trademarks of Nortel Networks All other trademarks are the property of their respective owners ATTENTION For information about the software license read Software license in this guide Contents Software license New in this release Features 11 NNCLI 11 Other changes 11 Document changes 11 Introduction 13 Commissioning fundamentals System connections 15 Terminal connection 16 Modem connection 16 System logon 19 hsecure mode 20 Setup utility 21 Secure and nonsecure protocols 25 Password encryption 26 Management port 26 Static IP entry for the OOB network management interface 27 Web management 29 Device Manager 29 15 Commissioning Co
35. Networks 124 Commissioning verification Configures ping debug mode for IPvd datasize value Specifies the size of ping data sent in bytes for IPv4 16 4076 HostName ipv4address ipv6 addre Specifies the host name or IPv4 ss a b c d or IPv6 X X X X X X x x address string length 1 256 Specifies the interval between transmissions in seconds 1 60 Configures the continuous ping at the interval rate defined by the I parameter for IPv4 scopeid value Specifies the circuit ID for IPv6 1 9999 nnn oc the no answer timeout cn 3 in seconds 1 120 for IPv4 vrf lt value gt Specifies the virtual router and forwarder VRF name from 1 16 characters Using Telnet to log on to the device Use Telnet to log on to the device and remotely manage the switch Procedure steps Step Action 1 From a PC or terminal start a Telnet session by using the following command telnet lt ipv4 or ipv6 address gt 2 Enter the logon and password when prompted End Accessing the switch through the Web interface Monitor the switch through a Web browser from anywhere on your network The Web interface uses a 15 minute timeout period If no activity occurs for 15 minutes the system logs off the switch Web interface and you must re enter the password information Procedure steps Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks
36. S FILES OR DATA OR c DIRECT INDIRECT SPECIAL INCIDENTAL PUNITIVE OR CONSEQUENTIAL DAMAGES INCLUDING LOST PROFITS OR SAVINGS WHETHER IN CONTRACT TORT OR OTHERWISE INCLUDING NEGLIGENCE ARISING OUT OF YOUR USE OF THE SOFTWARE EVEN IF NORTEL NETWORKS ITS AGENTS OR SUPPLIERS HAVE BEEN ADVISED OF THEIR POSSIBILITY The forgoing limitations of remedies also apply to any developer and or supplier of the Software Such developer and or supplier is an intended beneficiary of this Section Some jurisdictions do not allow these limitations or exclusions and in such event they may not apply 4 General 1 If Customer is the United States Government the following paragraph shall apply All Nortel Networks Software available under this License Agreement is commercial computer software and commercial computer Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Nortel Networks Inc software license agreement 9 software documentation and in the event Software is licensed for or on behalf of the United States Government the respective rights to the software and software documentation are governed by Nortel Networks standard commercial license in accordance with U S Federal Regulations at 48 C F R Sections 12 212 for non DoD entities and 48 C F R 227 7202 for DoD entities 2 Customer may terminate the license at any time Nortel Networks may terminate th
37. The Chassis dialog box appears with the System tab displayed Click System Flags Select the EnableWebServer box Click Apply Click Close From the Device Manager menu bar select Security Control Path General Click Web Complete the ROUserName and ROPassword fields to specify the user name and password for access to the Web interface All Web pages are read only pages You use the other fields to specify the path and file name for the Web Help files and to assign the number of rows in the Web display OO a fF ND N End Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Copyright 2008 Nortel Networks 103 Remote connection configuration using the CLI This section contains the minimum information required to configure a management interface to set up a remote connection Remote connection configuration procedures The following task flow shows the sequence of procedures you perform to permit remote connections to the Nortel Ethernet Routing Switch 8600 To link to a procedure click the procedure title in Remote connection configuration navigation page 104 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 104 Remote connection configuration using the CLI Figure 11 Remote connection configuration procedures Remote connection co
38. a connector appropriate to the serial port on your computer or terminal Most computers or terminals use a male DB 25 connector You can find a null modem cable with the chassis e You must shield the cable connected to the console port to comply with emissions regulations and requirements Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 74 Initial steps using the NNCLI Procedure steps Step 1 Action Configure the terminal protocol as follows e 9600 baud e 8 data bits e 1 stop bit e No parity Connect the RS 232 cable to the console port Connect the other end of the RS 232 cable to the terminal or computer serial port Turn on the terminal Log on to the NNCLI End Connecting a modem Connect a modem to a Nortel Ethernet Routing Switch 8600 to establish a connection with the switch You can configure the modem port first using another type of connection such as a terminal connection to the NNCLI Prerequisites e You need a DTE to DCE cable straight or transmit cable to connect the Nortel Ethernet Routing Switch 8600 to the modem e You must configure your client dial up settings to establish the connection to the modem e You must log on to the Global Configuration mode in the NNCLI Procedure steps Step 1 Copyright 2008 Nortel Networks Action Configure port parameters based on the modem requirements b
39. ails tftp debug Enables or disables debug mode on TFTP TFTPD If you enable debug mode debug messages display on the management console screen The default is disabled Use the no operator to remove this configuration To configure this option to the default value use the default operator with the command tftp hash Enables or disables the TFTP hash bucket display The default is disabled Use the no operator to remove this configuration To configure this option to the default value use the default operator with the command tftp rexmit Configures the TFTP retransmission timeout The lt seconds gt default value is 2 seconds seconds is the number of seconds 1 120 To configure this option to the default value use the default operator with the command Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 122 Remote connection configuration using the NNCLI tftp timeout Configures the TFTP timeout The default value is 6 lt seconds gt seconds seconds is the number of seconds 1 120 To configure this option to the default value use the default operator with the command user lt value gt Configures the remote user logon value is the user logon name up to 16 characters To configure this option to the default value use the default operator with the command Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Sta
40. al steps using the NNCLI authentication trap Enables or disables generation of authentication traps contact lt word gt Identifies the contact person who manages the node To include blank spaces in the contact use quotation marks around the text Use the no operator to remove this configuration To configure this option to the default value use the default operator with the command The default is support nortelnetworks com Sets same SNMP and IP sender flag force trap sender Sets SNMP trap sender IP Sets SNMP v3 group access table host Specifies hosts to receive SNMP notifications location lt word gt Identifies the physical location of the node To include blank spaces in the location use quotation marks around the text Use the no operator to remove this configuration To configure this option to the default value use the default operator with the command The default is a Nortel address Specifies the SNMP log feature name lt word gt Configures the system or root level prompt name for the switch word is an ASCII string from 1 to 255 characters for example LabSC7 or Closet4 Creates new entry for notify filter table Creates or modifies SNMPv3 user a view Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring the time zone 89 Example of configuring system identification Procedure steps Step Action
41. ameters you use to complete the procedures in this section Table 6 Job aid Roadmap of initial CLI commands Command Parameter config bootconfig sio modem 8databits lt true false gt baud lt rate gt enable lt true false gt mode lt ascii slip ppp gt my ip lt ipaddr gt peer ip lt ipaddr gt pppfile lt file gt slip compression lt true false gt slip rx compression lt true false gt Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 44 Initial steps using the CLI Table 6 Job aid Roadmap of initial CLI commands cont d Command Parameter config bootconfig tz dst end lt Mm n d hhmm MMddhhmm gt dst name lt dstname gt dst offset lt minutes gt dst start lt Mm n d hhmm MMddhhmm gt info name lt tz gt offset from utc lt minutes gt config cli password access level lt access level gt lt enable disable gt aging lt days gt default lockout time lt secs gt info 11 lt username gt lt password gt 12 lt username gt lt password gt 13 lt username gt lt password gt 14admin lt username gt l4oper lt username gt lockout time lt HostAddress gt lt secs gt min passwd len lt integer gt oper lt username gt password history lt number gt ro lt username gt lt password gt rw lt username gt lt password gt rwa lt username gt lt password gt slboper lt use
42. ard 30 May 2008 Copyright 2008 Nortel Networks Configuring system identification 87 Table 13 Job aid Setup utility prompt descriptions cont d IP address of the default VLAN Description Specifies the IP address of the 0 0 0 0 0 0 0 0 default Virtual Local Area Network VLAN Action Type the IP address of the default VLAN Do you want to save the Description Saves your changes to the boot changes and run time configuration files Saving the parameters Action Enter y to save the boot and run time updates the files flash boot cfg configuration files Enter n if you do not want and flash dvmrp_pol cfg to save your changes y n Configuring system identification Configure system identification to specify the system name contact person and location of the switch Prerequisites e You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Change the system name by using the following command sys name lt word gt 2 Configure the system contact by using the following command snmp server contact lt word gt 3 Configure the system location by using the following command snmp server location lt word gt End Variable definitions Use the data in the following table to use system level command s Variable Value Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 88 Initi
43. ariable this box indicates the static route is active if you configure the switch with a local route or dynamic route Device Manager automatically determines the software version of the device you select Procedure steps Step Action 1 From the initial Device Manager window menu bar select Device Properties Devices A list of IP addresses for configured devices appears 2 Select the IP address for the device you want to edit 3 Click Edit The Device Manager Properties dialog box appears Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 30 May 2008 Copyright 2008 Nortel Networks Standard 100 Remote connection configuration using Device Manager 4 Select the properties you want to change and configure their values 5 Click OK End Variable definitions Use the data in the following table to configure the Properties dialog box Status Interval Interval you use to gather statistics and status information default is 20 seconds IfTraps Status Interval The interval in seconds you use to gather statistics and status information Configure this value if you select the Register for Traps box Hotswap Detect every The number of intervals at which Device Manager checks for module hot swaps Enable If you select this variable Device Manager polls the switch according to the settings you select prior to the Enable box Retry Count If Device Manager cannot transmit
44. bout the WSM see Nortel Ethernet Routing Switch 8600 Web Switching Module Fundamentals NN46205 314 ssladmin lt username gt Configures the ssladmin logon to connect to and configure the secure sockets layer SSL Acceleration Module SAM Resetting passwords Reset passwords to restore them to the factory default values Procedure steps Action From the boot monitor CLI reset passwords by using the following command reset passwd Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 69 Initial steps using the NNCLI The initial commissioning steps involve basic setting configuration Prerequisites to initial steps e You must install the hardware e You must install at least one cable to set up a remote connection to the switch e You must power up the switch Initial commissioning procedures The following task flow shows the sequence of procedures you perform for the initial commissioning steps To link to a procedure click on the procedure title in Initial commissioning navigation page 71 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 70 Initial steps using the NNCLI Figure 9 Initial commissioning procedures Initial steps Connecting a terminal Configuring the switch with the Setup Utility Connecting a modem Configuring
45. central processing unit CPU The slot can be 5 or 6 Action Press Enter to accept the default 5 or specify 6 Description Specifies if you want the primary CPU to use autonegotiation Action Enter n to accept the default or enter y to indicate that you want the primary CPU management port to use autonegotiation Description Specifies the line speed in Mb s Action Press Enter to accept the default 10 Mb s or specify 100 Mb s Description Specifies if you want the boot and run time configuration files to be saved on the backup CPU Action Enter y to save the boot and run time configuration files on the backup CPU Accept the default n to save boot and run time configuration files on the primary CPU Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 56 Initial steps using the CLI Table 9 Job aid Setup utility prompt descriptions cont d Do you want to enable m mode Description Specifies if you want the support n y n Do you want to enable enhanced operation mode support n y n chassis to run in 128 K mode To run in 128 K mode the CPU module must be an 8691 or higher and the switch must use at least one 8600 module 128 K module ATTENTION If you enable M mode support and you use a mixed configuration of modules you disable the E modules and Pre E modules ATTENTION If you enable M m
46. config tz dst end lt Mm n d hhmm MMddhhmm gt dst name lt dstname gt dst offset lt minutes gt dst start lt Mm n d hhmm MMddhhmm gt name lt tz gt offset from utc lt minutes gt cli password lt word gt lt access level gt password access level lt word gt aging time day lt 1 365 gt default lockout time lt 60 65000 gt lockout lt word gt time lt time gt min passwd len lt 10 20 gt password history lt 3 32 gt snmp server contact lt word gt D agent conformance enable authentication trap enable min secure semi secure very secure Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Connecting a terminal 73 Table 10 Job aid Roadmap of initial NNCLI commands cont d Command Parameter cee SSCS CE snee RS O re CSCS EE EE e a S CS Ce mo foret om a mr _ ee oo e Cm ms Gene aor _ Connecting a terminal Connect a terminal to the serial console interface to monitor and configure the switch Prerequisites e To use the console port you need the following equipment aterminal or teletypewriter TTY compatible terminal or a portable computer with a serial port and terminal emulation software an Underwriters Laboratories UL listed straight through or null modem RS 232 cable with a female DB 9 connector for the console port on the switch The other end of the cable must use
47. de Use CPU y n HA mode to recover switches with two CPUs quickly from a failure of one of the CPUs In HA mode hot standby you synchronize and configure the two CPUs in the same mode so they are compatible Action Specify y to enable CPU high availability HA mode Accept the default n to not enable CPU HA mode Do you want to enable Description Specifies if you want to enable vlan optimization mode support support for the VLAN optimization mode n y n Action Specify y to enable VLAN optimization mode support Accept the default n to not enable VLAN optimization mode support Do you want to enable r mode Description Specifies if you want to enable support n y n support for the R mode support Action Specify y to enable R mode support Accept the default n to not enable R mode support Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring the switch with the setup utility 85 Table 13 Job aid Setup utility prompt descriptions cont d Do you want to enable FTP n Description Specifies if you want users to y n access the switch by File transfer Protocol FTP Action Enter y to enable FTP for remote users Accept the default n to not enable FTP Do you want to enable Description Specifies if you want to access RLOGIN n y n the switch by Rlogin Action Enter y to enable Rlogi
48. default is 0 0 0 0 The switch assigns this value to any PC that connects through the modem port with configured TCP IP properties to obtain an IP address automatically If the client uses a static IP address the Nortel Ethernet Routing Switch 8600 accepts this address If you use Password Authentication Protocol PAP authentication you must ensure that the client uses the correct IP address pppfile lt file gt Specifies the PPP configuration file you must use to provide details for authentication and other options the switch includes during the boot process If you configure the port mode to PPP you must specify a PPP filename For more information about this file see Procedure job aid PPP file page 49 The PPP file name is a string value of no more than 64 characters Identify the file in the format a b c d peer pcmcia flash lt file gt ATTENTION Do not specify a PPP filename with more than 64 characters Shuts down and initializes the port slip compression lt true false gt Enables or disables Transmission Control Protocol over IP TCP IP header compression for SLIP mode The default is false slip rx compression Enables or disables TCP IP header lt true false gt compression on the receive packet for SLIP mode The default is false Procedure job aid PPP file Create the PPP file with one option on each line comment lines start with a pound sign The following table lists the available
49. e to connect the Nortel Ethernet Routing Switch 8600 to the modem e You must configure your client dial up settings to establish the connection to the modem Procedure steps Step 1 Copyright 2008 Nortel Networks Action In the run time CLI configure the modem port by using the following command config bootconfig sio modem Now you can enter options for this command level without retyping the first part of the command ATTENTION Nortel recommends that before you configure the Serial Line Internet Protocol SLIP or Point to Point Protocol PPP you familiarize yourself with these protocols Configure port parameters based on the modem requirements by using the following commands baud lt rate gt 8databits lt true false gt mode lt ascii slip ppp gt For information about the configuration requirements of your modem see the documentation shipped with the modem If you configure the port mode to slip use the following commands to configure other SLIP parameters slip compression lt true false gt slip rx compression lt true false gt If you configure the port mode to ppp use the following commands to configure other PPP parameters mtu lt bytes gt my ip lt ipaddr gt peer ip lt ipaddr gt pppfile lt file gt On the modem turn off echo mode and return code messaging Connect the modem to the modem port Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standa
50. e choice of lt true false gt topology IP true false Enables or disables Force Topology IP Flag global filter lt enable disable gt Enables global filter feature info Shows current level parameter settings and next level directories Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring system identification 61 location lt location gt Changes the system location max vlan resource reservation Enables MAX VLAN feature lt enable disable gt mgmt virtual ip lt ipaddr mask gt Configures mgmt virtual P ipaddr mask is the IP address and network mask a b c d x a b c d x x x x default mgmt virtual ipv lt ipv6addr pr Configures mgmt virtual efix len gt IPV6 ipv addr prefix len is the IPV6 address The string length ranges from 0 to 46 mroute stream limit Global mroute stream limit lt enable disable gt configuration enable disable enables or disables mroute stream limit mtu lt bytes gt Sets MTU with CRC to one of three values 1522 1950 and 9600 bytes is the MTU value in the range of 1522 to 9600 multicast resource reservatio Reserves MGIDs for IPMC n lt value gt use value is the number of MGIDs reserved for IPMC use in the range from 64 to 4083 name lt prompt gt Changes the system name prompt is the box or root level prompt The string length ranges from 0 to 255 portlock lt on off
51. e destination can appear in the table but access to such multiple entries depends on the network management protocol table access mechanisms Is route network mask with the destination address before the switch compares the mask to the value in the Dest box Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring SNMP settings for Device Manager access 99 NextHop Configures the IP address of the next hop of this route In the case of a route bound to an interface realized through a broadcast media the value of this box is the agent IP address on that interface NextHopVrfld Indicates the next hop VRF ID in interVRF static route configuration Metric Configures the primary routing metric for this route LocalNextHop Configuring SNMP settings for Device Manager access Use this procedure to configure important communication parameters such as the polling interval timeout and retry count You can configure these parameters before or after you open a device Indicates the route preference of this entry If you can use more than one route to forward IP traffic the switch uses the route with the highest preference The higher the number the higher the preference If you select this variable this box indicates the static route is active only if you configure the switch with a local route to the network If you do not select this v
52. e for the management interface You can specify up to four static routes for the management interface Procedure steps Step Action 1 From the Device Manager menu bar choose IP IP GlobalRouter vrf 0 The IP dialog box appears with the Globals tab displayed 2 Click Static Routes Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 98 Remote connection configuration using Device Manager The Static Routes tab appears 3 Click Insert The Insert Static Routes dialog box appears 4 Select the owner virtual router and forwarder VRF 5 In the Dest box type the IP address 6 In the Mask box type the mask 7 In the NextHop box type the IP address of the router through which you access the specified route 8 Select the next hop VRF ID if configuring an interVRF static route 9 In the Metric box type the HopOrMetric value 10 In the Preference box select the route preference 11 Select Enable 12 Select the LocalNextHop option if creating Layer 3 static routes 13 Click Insert The new route appears in the Static Routes tab End Variable definitions Use the data in the following table to configure the Insert Static Routes dialog box OwnerVrild Configures the owner VRF ID of the static route Configures the destination IP address of this route An entry with a value of 0 0 0 0 is the default route Multiple routes to a singl
53. e license if Customer fails to comply with the terms and conditions of this license In either event upon termination Customer must either return the Software to Nortel Networks or certify its destruction 3 Customer is responsible for payment of any taxes including personal property taxes resulting from Customer s use of the Software Customer agrees to comply with all applicable laws including all applicable export and import laws and regulations 4 Neither party may bring an action regardless of form more than two years after the cause of the action arose 5 The terms and conditions of this License Agreement form the complete and exclusive agreement between Customer and Nortel Networks 6 This License Agreement is governed by the laws of the country in which Customer acquires the Software If the Software is acquired in the United States then this License Agreement is governed by the laws of the state of New York Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Copyright 2008 Nortel Networks 11 New in this release The following sections detail what s new in Nortel Routing Switch 8600 Commissioning NN46205 319 for Release 5 0 e Features page 11 e Other changes page 11 Features See the following sections for information about feature changes e NNCLI page 11 NNCLI In Release 5 0 you can use
54. e logon name of the authorized user This value should be the name or ID of the user similar to a Windows or UNIX logon e server the name of the remote device which is often the dial in server Use an asterisk to indicate any server name is acceptable e password the password for the user e P address the IP address associated with the user The value for the IP address depends on the desired configuration of the modem If all users must use the same IP address you must specify the same IP address for all users in the file and it must be the same IP address that you configure as the peer ip for the modem port Configure the IP settings on the client to obtain an IP address automatically Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks System logon 19 If each user must use a different IP address list each user with a different IP address in the file Configure the client IP settings to use a static IP address that matches what you configure in the secrets file An example secrets file looks like the following long long 47 133 223 200 william william 47 133 223 200 System logon After the switch boot sequence is complete a Login prompt appears The following table shows the default values for logon and password for the console and Telnet sessions Table 2 Access levels and default logon values Access level Description Default Defaul
55. e to 8690SF CPU cards All non M modules will be taken off line if m mode is enabled WARNING The change made will take effect only after the configuration is saved and the full chassis is rebooted Secure and nonsecure protocols The following table describes the secure and nonsecure protocols the Nortel Ethernet Routing Switch 8600 supports Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 26 Commissioning fundamentals Table 5 Secure and nonsecure protocols for IPv4 Nonsecure protocols sheen Equivalent secure protocols pelaut P status 1 P status Secure SHell SSH v1 v2 Telnet Disabled Nortel recommends that you use Disabled SSHv2 instead of SSHv1 SNMPv3 SNMPv1 SNMPv2 Enabled You must load the DES AES image on Enabled the switch to use SNMPv3 Disabled Secure SHell SSH v1 v2 Disabled No equivalent ATTENTION HTTP Disabled Nortel recommends that you do not use this protocol due to the risk to the security of your network Password encryption Beginning in Release 4 1 the switch stores passwords in encrypted format and no longer in the configuration file ATTENTION If you load a configuration file saved prior to Release 3 7 6 saved passwords from the configuration file are not recognized If you boot the switch for the first time with the software Release 3 7 6 or higher image the switch resets the password to defau
56. emote connection configuration using Device Manager page 95 e Remote connection configuration using the CLI page 103 e Remote connection configuration using the NNCLI page 113 e Commissioning verification page 123 e Common procedures using Device Manager page 127 e Common procedures using the CLI page 129 e Common procedures using the NNCLI page 131 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 14 Copyright 2008 Nortel Networks 15 Commissioning fundamentals Commissioning follows hardware installation Commissioning includes the minimal but essential configuration steps to provide a default starting point configuration set up a management interface and establish basic security on the node For more information about configuring security see Nortel Ethernet Routing Switch 8600 Security NN46205 601 Navigation e System connections page 15 e System logon page 19 e Setup utility page 21 e Secure and nonsecure protocols page 25 e Password encryption page 26 e Management port page 26 e Web management page 29 e Device Manager page 29 System connections Connect to the Switch Fabric Central Processor Unit SF CPU serial ports using one of the following connections e Terminal connection page 16 e Modem connection
57. ent modules ATTENTION The virtual IP address feature is not supported in a switch with mixed Nortel Ethernet Routing Switch 8600 8190SM modules and 8691SF CPU modules Prerequisites e You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Assign an IP address to the management port by using the following command boot config net mgmt ip lt ipaddr gt lt mask gt lt value gt 2 Assign an IP address to a virtual management port by using the following command sys mgmt virtual ip lt ipaddr mask gt 3 Save the changes to the boot cfg and config cfg files End Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Assigning static routes to the management interface 117 Variable definitions Use the data in the following table to use the boot config net mgmt ip and sys mgmt virtual ip commands cpu slot lt value gt Specifies the Switch Fabric Central Processor Unit SF CPU module 8691SF CPU or 8692SF CPU slot 5 or slot 6 If you do not specify a slot number for the IP address the switch assigns the slot number to the currently active management module lt ipaddr gt lt mask gt Specifies the IP address and subnet mask of the management port for example 10 127 231 15 255 255 255 0 ATTENTION You cannot assign an address of 0 0 0 0 0 Assigning static routes to the management interface A
58. er of previous passwords the switch stores You cannot reuse a password that is stored in the password history The default is 3 To configure this option to the default value use the default operator with the command Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 95 Remote connection configuration using Device Manager This section contains the minimum information required to configure a management interface for the purposes of setting up a remote connection Remote connection configuration procedures The following task flow shows the sequence of procedures you perform to permit remote connections to the Nortel Ethernet Routing Switch 8600 To link to a procedure click on the procedure title in Remote connection configuration navigation page 96 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 96 Remote connection configuration using Device Manager Figure 10 Remote connection configuration procedures Remote connection configuration Assigning an IP address to the management port Assigning static routes to the management interface Configuring SNMP settings for Device Manager access Enabling the Web management interface Remote connection configuration navigation e Assigning an IP address to the management port page 97 e
59. er this License Agreement You are responsible for the selection of the Software and for the installation of use of and results obtained from the Software 1 Licensed Use of Software Nortel Networks grants Customer a nonexclusive license to use a copy of the Software on only one machine at any one time or to the extent of the activation or authorized usage level whichever is applicable To the extent Software is furnished for use with designated hardware or Customer furnished equipment CFE Customer is granted a nonexclusive license to use Software only on such hardware or CFE as applicable Software contains trade secrets and Customer agrees to treat Software as confidential information using the same care and discretion Customer uses with its own similar information that it does not wish to disclose publish or disseminate Customer will ensure that anyone who uses the Software does so only in compliance with the terms Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 8 Software license of this Agreement Customer shall not a use copy modify transfer or distribute the Software except as expressly authorized b reverse assemble reverse compile reverse engineer or otherwise translate the Software c create derivative works or modifications unless expressly authorized or d sublicense rent or lease the Software Licensors of intellectual property to No
60. es CHAP authentication with peer Requires PAP authentication with peer silent_mode Configures silent mode PPP does not transmit LCP packets to initiate a connection until it receives a valid LCP packet from the peer vj_max_slots lt value gt Configures the maximum number of VJ compression header slots to the value you specify Table 8 Sample PPP file page 53 shows example contents from a PPP file Table 8 Sample PPP file passive_mode lcp_echo_interval 30 lcp_echo_failure 10 require_chap require_pap no_vj ipcp_accept_remote login Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 54 Initial steps using the CLI chap_file my chap pap_file my pap Configuring the switch with the setup utility Configure the switch with the setup utility to monitor system requirements and obtain the maximum system performance Procedure steps Step Action 1 Start the setup utility by using the following command install 2 Respond to the series of questions displayed on the screen For more information about the prompted questions see Procedure job aid setup utility prompts page 54 3 Reboot the switch End Procedure job aid setup utility prompts The following table lists the questions prompted by the setup utility and provides a description for each Table 9 Job aid Setup utility prompt descriptions
61. formation to save Possible values for this parameter are config bootconfig log trace clilog snmplog standby Saves the specified file name to the standby SF CPU in the following format for value lt value gt e filename pcmcia lt file gt e flash lt file gt file is a string of 1 99 characters verbose Saves the default and current configuration If you omit this parameter the command saves only parameters you change Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 131 Common procedures using the NNCLI The following section describes common procedures you use while commissioning the Nortel Ethernet Routing Switch 8600 Common procedure navigation e Saving the configuration page 131 Saving the configuration After you change the boot configuration you must save the changes to both the master and the standby management modules Save the configuration to a file to retain the configuration settings Prerequisites e You must log on to the Privileged EXEC mode in the NNCLI Procedure steps Step Action 1 Save to boot configuration by using the following command save bootconfig file lt word gt verbose standby lt word gt backup lt word gt mode lt cli nncli gt 2 Save the running configuration by using the following command save config file lt word gt verbose standby lt word g
62. gt Turns portlock on off sendAuthenticationTrap Sets authentication trap to true or lt true false gt false smlt on single cp lt enable disa Enables SMLT on Single CP feature ble gt timer lt value gt enable disable Enables or disable SMLT on single CP feature timer lt value gt is the timer value for SMLT on single CP feature timer in the range of 1 to 3 udp checksum lt enable disable gt Enables or disables UDP Checksum calculation Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 62 Initial steps using the CLI Configuring the time zone Set the time zone to specify the time zone for your location and configure settings for Daylight Saving Time DST Procedure steps Step Action 1 Configure the time zone by using the following command config bootconfig tz 2 Save the changed configuration to the boot cfg and pcmboot cfg files 3 Reboot the switch End Variable definitions Use the data in the following table to use the config bootconfig tz command dst end Configures the ending date of DST You lt Mm n d hhmm MMddhhmm gt can specify the time in one of two ways Mm n d hhmm specifies an hour on the nth occurrence of a weekday ina month For example M10 5 0 0200 means the fifth occurrence of Sunday in the tenth month October at 2 00 a m MMddhhmm specifies a month day hour and minute
63. he OOB network management port default IP assignment Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 28 Commissioning fundamentals Figure 5 OOB network management port default IP flowchart The switch uses the IP configuration specified in the pcmboot cfg and all other parameters and flags Boot configuration file pcmboot cfg present in PCMCIA If valid IP for management port present in boot configuration file Boot configuration file boot cfg present in flash Boot configuration file boot cfg present in PCMCIA Send BootP request to get management IP Assign the i z Use IP address Request following statisk configured in the q address for the 9 successful eisinanament port boot configuration 9 es file 192 168 168 24 IP address from BootP server based on MAC address of the OOB interface Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Device Manager 29 The switch first checks for the file pcmboot cfg in Personal Computer Memory Card International Association PCMCIA If not found the switch checks for the file boot cfg in flash ATTENTION If you use the boot configuration file from PCMCIA you must rename the file to pcmboot cfg The boot cfg file is no longer saved in PCMCIA The file is saved only in flash Web management
64. he physical location of this device VirtuallpAddr Configures the virtual IP address that is advertised by the primary SF CPU and stored in the switch configuration file and not the boot configuration file VirtualNetMask Configures the net mask of the virtual management IP address Virtuallpv6Address Configures the virtual IPv6 address that is advertised by the primary SF CPU and stored in the switch configuration file and not the boot configuration file VirtuallPv6Prefix Length Configures the length of the virtual IPv6 prefix entry DnsDomainName Configures the default domain for querying the DNS server LastChange Displays the time since the last configuration change Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 36 Initial steps using Device Manager LastVlanChange Displays the time since the last VLAN change LastStatisticsReset Displays the time since the statistics counters were last reset LastRunTimeConfigSave Displays the last run time configuration saved LastRunTimeConfigSaveToSlave Displays the last run time configuration saved to the standby device LastBootConfigSave Displays the last boot configuration saved LastBootConfigSaveOnSlave Displays the last boot configuration saved on the standby device DefaultRuntimeConfigFileName Displays the default Run time configuration file directory name DefaultBootConfigFileName Di
65. ial commissioning procedures The following task flow shows the sequence of procedures you perform for the initial commissioning steps To link to a procedure click the procedure title in Initial commissioning navigation page 43 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 42 Initial steps using the CLI Figure 8 Initial commissioning procedures Initial steps Connecting a terminal Configuring the switch with the Setup Utility Connecting a modem Configuring system identification Configuring the time zone Configuring the date Specifying the master SF CPU Changing passwords Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Job aid Roadmap of initial CLI commands 43 Initial commissioning navigation e Job aid Roadmap of initial CLI commands page 43 e Connecting a terminal page 45 e Connecting a modem page 46 e Configuring the switch with the setup utility page 54 e Configuring system identification page 60 e Configuring the time zone page 62 e Configuring the date page 63 e Specifying the primary SF CPU page 64 e Changing passwords page 64 e Resetting passwords page 68 Job aid Roadmap of initial CLI commands The following table lists the commands and the par
66. ifies the Switch Fabric Central Processor Unit SF CPU module 8691SF CPU or 8692SF CPU slot 5 or slot 6 If you do not specify a slot number for the IP address the switch assigns the slot number to the currently active management module ipaddr mask Specifies the IP address and subnet mask of the management port for example 10 127 231 15 255 255 255 0 You cannot assign an address of 0 0 0 0 0 Assigning static routes to the management interface Assign a static route to specify a gateway address route for the management interface You can specify up to four static routes for the management interface For more information about static routes see Nortel Ethernet Routing Switch 8600 Configuration IP Routing NN46205 523 Procedure steps Step Action 1 Specify a gateway address route by using the following command config bootconfig net mgmt route add lt netaddr mask gt lt gateway gt 2 Save the changes to the boot cfg and config cfg files End Variable definitions Use the data in the following table to use the config bootconfig net mgmt route add command gateway Configures the IP address of the default gateway netaddr mask Configures the IP address and mask of the destination network in the formats a b c d x a b c d x x x x default Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 108 Remote connection configurati
67. l Networks 129 Common procedures using the CLI The following section describes common procedures you use while commissioning the Nortel Ethernet Routing Switch 8600 Common procedure navigation e Saving the configuration page 129 Saving the configuration After you change the boot configuration you must save the changes to both the master and the standby management modules Save the configuration to a file to retain the configuration settings Procedure steps Action Save to configuration by using the following command save lt savetype gt file lt value gt verbose standby lt value gt backup lt value gt mode lt cli nncli gt Variable definitions Use the data in the following table to use the save command backup Saves the specified file name and identifies the file as a backup file value uses one of the following formats lt value gt e pcmcia lt file gt e flash lt file gt file is a string of 1 99 characters Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 130 Common procedures using the CLI file Specifies the file name in one of the following formats for value lt value gt a b c d lt file gt peer lt file gt pcmcia lt file gt flash lt file gt file is a string of 1 99 characters mode lt cli nncli gt Saves the configuration as CLI or NNCLI savetype Specifies what in
68. lt values and generates a log which indicates the changes For security reasons Nortel recommends that you configure the passwords to values other than the factory defaults Management port You must assign an IP address to the management port before you can use it for out of band OOB management In a switch with redundant 86910r 8692 modules each management port uses a specific IP address In addition you can create a virtual management port with an IP address available to the master management module The master management module replies to all management requests sent to the virtual IP address and to requests sent to the management port IP address If the master management module fails and the backup management module takes over the virtual management port IP address continues to provide management access to the switch Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Management port 27 The following lists provides configuration considerations e You can configure the standby IP to a subnet other than that of the master IP using Device Manager only Attempts to do so using CLI or NNCLI will generate a warning message e If you use Device Manager you can configure the standby IP to a different subnet than the master IP and you do not receive a warning message Static IP entry for the OOB network management interface The following figure shows t
69. master command Variable lt cpu slot gt Specifies the slot number for the primary SF CPU This variable can be 5 or 6 The default primary is slot 5 Changing passwords Configure new passwords for each access level or change the logon or password for the different access levels of the switch After you receive the Nortel Ethernet Routing Switch 8600 use default passwords to initially access the NNCLI If you use Simple Network Management Protocol version 3 SNMPVv3 you can change encrypted passwords Prerequisites e You must use an account with read write all privileges to change passwords For security the switch saves passwords to a hidden file e You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Change a password by using the following command cli password lt word gt lt access level gt Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Changing passwords 93 2 Configure password options by using the following command password access level lt word gt aging time day lt 1 365 gt default lockout time lt 60 65000 gt lockout lt word gt time lt time gt min passwd len lt 10 20 gt password history lt 3 32 gt End Variable definitions Use the data in the following table to use the password commands access level lt word gt Permits or blocks this access le
70. ment interface page 119 e Configuring the remote host logon page 120 Job aid Roadmap of remote connection NNCLI commands The following table lists the commands and the parameters you use to complete the procedures in this section The last two columns indicate which commands support the no and default forms of the command Table 15 Job aid Roadmap of remote connection NNCLI commands Command Parameter Sa ee SSS SSS SS Oe boot config host ftp debug tftp debug tftp hash tftp rexmit lt seconds gt tftp timeout lt seconds gt boot config net mgmt ip lt ipaddr gt lt value gt lt mask gt boot config net mgmt route lt netaddr m ask gt lt gateway gt sys mgmt virtual ip lt ipaddr mask gt Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 116 Remote connection configuration using the NNCLI Table 15 Job aid Roadmap of remote connection NNCLI commands cont d Command Parameter password lt rwa rw ro gt lt username gt lt passwd gt ete help tftp lt WORD 0 256 gt http port lt 1 49151 gt http port lt 1 49151 gt Assigning an IP address to the management port Assign an IP address to the management port to use it for out of band OOB management The standby IP must be in the same subnet as the master IP Create a virtual management port in addition to the physical management ports on the switch managem
71. mmissioning tasks 31 31 Initial steps using Device Manager Initial commissioning procedures 33 Editing system information 34 Configuring the date and time 37 Changing passwords 38 33 Initial steps using the CLI Initial commissioning procedures 41 Job aid Roadmap of initial CLIcommands 43 Connecting aterminal 45 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 41 Connecting a modem 46 Procedure job aid PPP file 49 Configuring the switch with the setup utility 54 Procedure job aid setup utility prompts 54 Configuring system identification 60 Configuring the time zone 62 Configuring the date 63 Specifying the primary SF CPU 64 Changing passwords 64 Resetting passwords 68 Initial steps using the NNCLI 69 Initial commissioning procedures 69 Job aid Roadmap of initial NNCLI commands 71 Connecting a terminal 73 Connecting a modem 74 Procedure job aid PPP file 77 Configuring the switch with the setup utility 81 Procedure job aid setup utility prompts 82 Configuring system identification 87 Example of configuring system identification 89 Configuring the time zone 89 Configuring the date 91 Specifying the primary SF CPU 91 Changing passwords 92 Remote connection configuration using Device Manager 95 Remote connection configuration procedures 95 Assigning an IP address to the management port 97 Assigning static routes t
72. mt route 0 0 0 0 0 0 0 0 Third net mgmt route 0 0 0 0 0 0 0 0 Fourth net mgmt route 0 0 0 0 0 0 0 0 IP address of the default VLAN 0 0 0 0 0 0 0 0 Do you want to save the changes Saving the parameters updates the files flash boot cfg and flash dvmrp_pol cfg y n Description Specifies the IP address of the first network management route static route from the network management port to a device in the network Action Type the network and gateway IP address of the first network management route Description Specifies the IP address of the second network management route Action Type the IP address of the second network management route static route from the network management port to a device in the network Description Specifies the IP address of the third network management route Action Type the IP address of the third network management route static route from the network management port to a device in the network Description Specifies the IP address of the fourth network management route Action Type an IP address of the fourth network management route static route from the network management port to a device in the network Description Specifies the IP address of the default Virtual Local Area Network VLAN Action Type the IP address of the default VLAN Description Saves your changes to the boot and run time configuration files Action Enter y to save
73. n for remote users Accept the default n to not enable Rlogin Do you want to enable Description Specifies if you want to access TELNET n y n the switch by Telnet Action Enter y to enable Telnet Accept the default n to not enable Telnet Do you want to enable TFTP Description Specifies if you want to access n y n the switch by Trivial FTP TFTP Action Enter y to enable TFTP Accept the default n to not enable TFTP Do you want to enable WEB Description Specifies if you want to enable server service n y n Web server service Use the Web server service to monitor statistics for the switch with your Web browser Action Enter y to enable Web server service Accept the default n to not enable Web server service IP Address for mgmt port in Description Indicates the IP address for the first CPU Slot 192 168 168 16 management port in the CPU slot you specify 8 255 255 2 55 0 Action Type the IP address of the management port in the first CPU slot IP Address for mgmt port in Description Indicates the IP address for the second CPU Slot 192 168 168 management port in the CPU slot you specify 169 255 255 255 0 Action Type the IP address of the management port in the second CPU slot Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 86 Initial steps using the NNCLI Table 13 Job aid Setup utility p
74. ndard 30 May 2008 Copyright 2008 Nortel Networks 123 Commissioning verification This section contains information about how to verify your commissioning procedures result in a functional switch Commissioning verification navigation e Pinging an IP device page 123 e Using Telnet to log on to the device page 124 e Accessing the switch through the Web interface page 124 Pinging an IP device Ping a device to test the connection between the Nortel Ethernet Routing Switch 8600 and another network device After you ping a device the switch sends an Internet Control Message Protocol ICMP packet to the target device If the device receives the packet it sends a ping reply After the switch receives the reply a message appears indicating you can reach the specified IP address If the switch does not receive a reply the message indicates the address is not responding Procedure steps Action Ping an IP network connection by using the following command ping lt HostName ipv4address ipv6address gt scopeid lt value gt datasize lt value gt count lt value gt s I lt value gt t lt value gt d vrf lt value gt Variable definitions Use the data in the following table to use the ping command count value Specifies the number of times to ping for IPv4 1 9999 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel
75. net Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 106 Remote connection configuration using the CLI Table 14 Job aid Roadmap of remote connection CLI commands cont d Assigning an IP address to the management port Assign an IP address to the management port to use it for out of band OOB management The standby IP must be in the same subnet as the master IP Create a virtual management port in addition to the physical management ports on the switch management modules ATTENTION The virtual IP address feature is not supported in a switch with mixed Nortel Ethernet Routing Switch 8600 8190SM modules and 8691SF CPU modules Procedure steps Step Action 1 Assign an IP address to the management port by using the following command config bootconfig net mgmt ip lt ipaddr mask gt cpu slot lt value gt 2 Assign an IP address to a virtual management port by using the following command config sys set mgmt virtual ip lt ipaddr mask gt 3 Save the changes to the boot cfg and config cfg files End Variable definitions Use the data in the following table to use the config bootconfig net mgmt ip and config sys set mgmt virtual ip commands Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Assigning static routes to the management interface 107 cpu slot lt value gt Spec
76. nfig web server command Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 110 Remote connection configuration using the CLI Variable enable Enables the Ethernet Routing Switch Web interface password lt ro gt lt username gt lt password gt Configures passwords for access to the Web interface username is the user logon name up to 20 characters password is the password associated with the logon name up to 20 characters Configuring the remote host logon Configure the remote host logon to modify parameters for FTP and TFTP access Use the default parameters for TFTP transfers If you want to use FTP as the transfer mechanism you need to change the password to a valid value Procedure steps Step Action 1 Define conditions for the remote host logon by using the following command config bootconfig host 2 Save the changed configuration to the boot cfg and pcmboot cfg files 3 Reboot the switch End Variable definitions Use the data in the following table to use the config bootconfig host command ftp debug Enables or disables debug mode on FTP If you lt true false gt enable debug mode debug messages appear on the management console screen The default is false Displays the current remote host logon settings Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright
77. nfiguration Assigning an IP address to the management port Assigning static routes to the management interface Enabling remote access services Enabling the Web management interface Configuring the remote host logon Remote connection configuration navigation Job aid Roadmap of remote connection CLI commands page 105 Assigning an IP address to the management port page 106 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Job aid Roadmap of remote connection CLI commands 105 e Assigning static routes to the management interface page 107 e Enabling remote access services page 108 Enabling the Web management interface page 109 e Configuring the remote host logon page 110 Job aid Roadmap of remote connection CLI commands The following table lists the commands and the parameters you use to complete the procedures in this section Table 14 Job aid Roadmap of remote connection CLI commands config bootconfig host ftp debug lt true false gt tftp debug lt true false gt tftp hash lt true false gt tftp rexmit lt seconds gt tftp timeout lt seconds gt config bootconfig net mgmt ip cpu slot lt value gt lt ipaddr mask gt config bootconfig net mgmt route add lt netaddr mask gt lt gateway gt config sys set mgmt virtual ip lt ipaddr mask gt Nortel Ether
78. ng Switch 8600 To link to a task go to Commissioning navigation page 32 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 32 Commissioning Figure 6 Commissioning tasks Commissioning Initial steps Remote connection configuration Commissioning verification Commissioning navigation e Initial steps using Device Manager page 33 e Initial steps using the CLI page 41 e Initial steps using the NNCLI page 69 e Remote connection configuration using Device Manager page 95 e Remote connection configuration using the CLI page 103 e Remote connection configuration using the NNCLI page 113 e Commissioning verification page 123 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 33 Initial steps using Device Manager The initial commissioning steps involve basic setting configuration Prerequisites to initial steps e You must install the hardware e You must install at least one cable to set up a remote connection to the switch e You must power up the switch Initial commissioning procedures The following task flow shows the sequence of procedures you perform for the initial commissioning steps To link to a procedure click the procedure title in Initial commissioning navigation page 34 Nortel E
79. nnect after an initial connection attempt proxy_arp Adds an entry to the Address Resolution Protocol ARP table with the IP address of the peer and the Ethernet address of the local system remote_auth_name lt name gt Configures the remote name for authentication to the specified name require chap Requires CHAP authentication with peer Requires PAP authentication with peer Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring the switch with the setup utility 81 Table 11 Job aid PPP file options cont d Option Description O silent_mode Configures silent mode PPP does not transmit LCP packets to initiate a connection until it receives a valid LCP packet from the peer vj_max_slots lt value gt Configures the maximum number of VJ compression header slots to the value you specify Table 12 Sample PPP file page 81 shows example contents from a PPP file Table 12 Sample PPP file passive_mode lcp_echo_interval 30 lcp_echo_failure 10 require_chap require_pap no_vj ipcp_accept_remote login chap_file my_chap pap_file my_pap Configuring the switch with the setup utility Configure the switch with the setup utility to monitor system requirements and obtain the maximum system performance Prerequisites e You must log on to the Privileged EXEC mode in the NNCLI Procedure steps Step Action
80. ns To set up modem access you must use a DTE to DCE cable straight or transmit cable to connect the Nortel Ethernet Routing Switch 8600 to the modem The following table shows the DTE to DCE pin assignments Table 1 DTE to DCE straight through pin assignments DCE DB 9 DCE DB 25 pin number pin number Received data 2 RXD Transmitted data 3 TXD Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Table 1 System connections 17 DTE to DCE straight through pin assignments coni d Data terminal ready DTR Ground GND Data set ready DSR Request to send RTS Clear to send CTS DCE DB 9 DCE DB 25 number pn number The default communication protocol settings for the modem port are e 9600 baud e 8 data bits e 1 stop bit e No parity Because the modem port receives DSR and CTS signals before transmitting control lines are required in the cables The modem port supports no inbound flow control The port does not turn on and turn off control lines to indicate the input buffer is full To connect a modem to a Nortel Ethernet Routing Switch 8600 you can configure the modem port first using another type of connection to the command line interface CLI or Nortel Command Line Interface NNCLI PPP modem connection You can establish a PPP Point to Point Protocol link over serial asynchronous lines PC clients use
81. nt to use FTP as the transfer mechanism you must change the password to a valid value Prerequisites e You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Define conditions for the remote host logon by using the following command boot config host 2 Save the changed configuration to the boot cfg and pcmboot cfg files Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring the remote host logon 121 3 Reboot the switch End Variable definitions Use the data in the following table to use the boot config host command ftp debug Enables or disables debug mode on FTP If you enable debug mode debug messages appear on the management console screen The default is disabled Use the no operator to later remove this configuration To configure this option to the default value use the default operator with the command password lt value gt Configures the password to enable FTP transfers value is the password up to 16 characters long After you configure this password only FTP is used for remote host logon ATTENTION This password must match the password for the FTP server or the FTP operation fails Also if you configure the password to a valid value then all copying to and from the network uses FTP instead of TFTP If the user name or password is incorrect copying over the network f
82. o CPUs in the same mode so they are compatible Action Specify y to enable CPU high availability HA mode Accept the default n to not enable CPU HA mode Description Specifies if you want to enable support for the VLAN optimization mode Action Specify y to enable VLAN optimization mode support Accept the default n to not enable VLAN optimization mode support Description Specifies if you want to enable support for the R mode support Action Specify y to enable R mode support Accept the default n to not enable R mode support Description Specifies if you want users to access the switch by File transfer Protocol FTP Action Enter y to enable FTP for remote users Accept the default n to not enable FTP Description Specifies if you want to access the switch by Rlogin Action Enter y to enable Rlogin for remote users Accept the default n to not enable Rlogin Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 58 Initial steps using the CLI Table 9 Job aid Setup utility prompt descriptions cont d Do you want to enable TELNET n y n Do you want to enable TFTP n y n Do you want to enable WEB server service n y n IP Address for mgmt port in first CPU Slot 192 168 168 16 8 255 255 2 55 0 IP Address for mgmt port in second CPU Slot 192 168 168 169 255 255 255 0 IP Addres
83. o the management interface 97 Configuring SNMP settings for Device Manager access 99 Enabling the Web management interface 101 Remote connection configuration using the CLI 103 Remote connection configuration procedures 103 Job aid Roadmap of remote connection CLI commands 105 Assigning an IP address to the management port 106 Assigning static routes to the management interface 107 Example of assigning a static route to the management interface 108 Enabling remote access services 108 Enabling the Web management interface 109 Configuring the remote host logon 110 Remote connection configuration using the NNCLI 113 Remote connection configuration procedures 113 Job aid Roadmap of remote connection NNCLI commands 115 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Assigning an IP address to the management port 116 Assigning static routes to the management interface 117 Example of assigning a static route to the management interface 118 Enabling remote access services 118 Enabling the Web management interface 119 Configuring the remote host logon 120 Commissioning verification 123 Pinging an IP device 123 Using Telnet to log on to the device 124 Accessing the switch through the Web interface 124 Common procedures using Device Manager 127 Saving the configuration 127 Common procedures using the CLI 129 Saving the configuration 129
84. ode support and you use a mixed configuration of modules you disable the E modules Action Enter y if you want the chassis to run in 128 K M mode Accept the default n if you want it to run in 32 K mode only Description Specifies if you want to enable enhanced operation mode Enhanced operation mode increases the maximum number of VLANs when you use MultiLink Trunking MLT 1980 and Split MLT SMLT 989 This mode requires 8600 E or M modules ATTENTION If you enable enhanced operation mode and you use a mixed configuration of modules you disable the Pre E modules Action Enter y to enable enhanced operation mode Accept the default n to not enable enhanced operation mode Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Table 9 Configuring the switch with the setup utility 57 Job aid Setup utility prompt descriptions cont d Do you want to enable CPU High Availability mode n y n Do you want to enable vlan optimization mode support n y n Do you want to enable r mode support n y n Do you want to enable FTP n y n Do you want to enable RLOGIN n y n Description Specifies if you want to enable CPU high availability HA mode Use CPU HA mode to recover switches with two CPUs quickly from a failure of one of the CPUs In HA mode hot standby you synchronize and configure the tw
85. on mode false gt false Support for R mode false gt false Please type the line number you want to change OR 0 to save amp quit at this stage OR hit return to continue 1 Syncing autoneg HA CPU change will be applied at the end of this session only if you choose to save configuration F tH GE SH aE HE HE at HE HUE System Services EHE HEHE HE a aE HEHE E HE HE HE a EH you want to enable FTP n y n y you want to enable RLOGIN n y n y you want to enable TELNET n y n y you want to enable TFTP n y n y you want to enable WEB server service n y n y FTP server service true gt true RLOGIN server service false gt true TELNET server service true gt true TFTP server service true gt true WEB server service false gt true Do Do Do Do Do 1 2 3 4 5 Please type the line number you want to change OR 0 to save amp quit at this stage OR hit return to continue 1 HF HF HF HF HE HE HE Ha a HE HE aE FE HE HEHE HEHEHE E IP Network connectivity EEE HF HF HE GE AE HE HF HE HE HE HE FE HE FE HE HE HE HEHEHE H Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Secure and nonsecure protocols 25 Figure 4 Setup utility example three IP Address for mgmt port in first CPU Slot 10 127 231 15 255 255 255 0 IP Address for mgmt port in second CPU Slot 10 127 231 15 255 255 255 0
86. on using the CLI Example of assigning a static route to the management interface Procedure steps Action If you locate a management station on the network of 11 0 0 0 255 0 0 0 and the next hop to that network from the management interface is 10 127 231 1 enter the following command to configure the management port config bootconfig net mgmt route add 11 0 0 0 255 0 0 0 10 127 231 1 The value 11 0 0 0 255 0 0 0 represents the target subnet the value 10 127 231 1 represents the gateway you use to point to the target subnet ATTENTION The config bootconfig net mgmt route add command uses the natural mask of the target subnet Therefore in the preceding example what you implement is the command config bootconfig net mgmt route add 13 0 0 010 125 2 1 Additionally this route does not appear in the routing table of the Nortel Ethernet Routing Switch 8600 If you configure a 13 x x x network for output using the I O modules the switch can experience connectivity issues Enabling remote access services Enable the remote access service to provide multiple methods of remote access Prerequisites e When you enable an rlogin flag you must configure an access policy and specify the user name of who can access the switch For more information about the access policy commands see Nortel Ethernet Routing Switch 8600 Security NN46205 601 Procedure steps Step Action 1 Enable or disable the access service in the run time CL
87. polling information at start up the number of times Device Manager retransmits polling information Timeout Length of the retry for each polling waiting period If you access the device through a slow link you can increase the timeout interval and change the retransmission strategy to superlinear Trace If you select this variable you can perform trace routes Register for Traps If you select this variable Device Manager registers a trap Listen for Traps If you select this variable Device Manager monitors for a trap Max Traps in Log The specified number of traps that can exist in the trap log The default is 500 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Enabling the Web management interface 101 Trap Port The number of the port where the switch captures trap messages The default is 162 Listen for Syslogs If you select this variable Device Manager monitors for syslogs Confirm row deletion If you select this variable Device Manager sends a message after you delete a system table row Default Read Community The default Read Community type Default Write Community The default Write Community type Enabling the Web management interface Start the Web management interface to provide management access to the switch using a Web browser Procedure steps Step Action 1 From the Device Manager menu bar select Edit Chassis
88. ps Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 64 Initial steps using the CLI Action Configure the date by using the following command config setdate lt MMddyyyyhhmmss gt Specifying the primary SF CPU Specify the primary SF CPU to determine which SF CPU you use as the primary after the switch performs a full power cycle only When the SF CPU becomes the primary the master LED for the SF CPU is on Procedure steps Step Action 1 View the current setting for the primary SF CPU by using the following command show bootconfig master 2 Specify the slot of the primary SF CPU by using the following command config bootconfig master lt cpu slot gt 3 Save the configuration to the boot cfg and pcmboot cfg files 4 Reboot the switch End Variable definitions Use the data in the following table to use the config bootconfig master command Variable lt cpu slot gt Specifies the slot number for the primary SF CPU This variable can be 5 or 6 The default primary is slot 5 Changing passwords Configure new passwords for each access level or change the logon or password for the different access levels of the switch After you receive the Nortel Ethernet Routing Switch 8600 use default passwords to initially access the CLI If you use Simple Network Management Protocol version 3 SNMPv3 you can change encrypted passwords Nortel
89. rating modes see Nortel Ethernet Routing Switch 8600 Administration NN46205 605 The setup utility prompts you through the configuration process by asking a series of questions Answer each question or accept the default by pressing Enter Each question shows the default in brackets and the acceptable parameter options in parenthesis After you run the setup utility reboot the switch The following figures show sample output from the setup utility This example uses the default values Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Setup utility 23 Figure 2 Setup utility example one ERS 8606 5 ERS 8606 5 install EEE HE FE FE FE GE HEFE HE HE HE HE FE HE FE E FE GE HE FE FE FE FE HE FE HE HE HE HE FE FE FE GE FE FE PE HE FE PE HE HE HE FE HE FE GE FE FE HE FE HE HE HE HE HE H Welcome to ERS 8000 setup utility You are about to configure initial configuration of the switch Part of the data will be stored in the file flash boot cfg and part will be stored in runtime configuration file Please reboot the switch after initial configuration Several of these commands do not require a reboot and can be applied dynamically through CLI EEEE HF HF HE HE HE FE HE E FE HE HE PE FE FE FE HE HE HE HE HE FE FE E HE HE PE FE FE HE E HE HE FE FE HE HE HE HE HE FE HE FE HE E HE FE FE FE FE HE HE AE AE HE FE GE HE HE HEHEHEH Do you want to continue y n
90. rd 30 May 2008 48 Initial steps using the CLI 7 Save the boot configuration 8 Reboot the switch End Variable definitions Use the data in the following table to use the config bootconfig sio command 8databits lt true false gt Specifies either 8 true or 7 false data bits for each byte for software to interpret The default is false baud lt rate gt Configures the baud rate for the port The default is 9600 enable lt true false gt Enables or disables the port The default is true info Displays information about the specified port mode lt ascii slip ppp gt Configures the communication mode for the serial port The default is American Standard Code for Information Interchange ASCIl If you are configuring the modem port you can configure the port to use the SLIP or the PPP communication mode mtu lt bytes gt Configures the size of the maximum transmission unit for a PPP link 0 2048 The default is zero my ip lt ipaddr gt Configures the IP address for the server side the Nortel Ethernet Routing Switch 8600 of the point to point link The default is 0 0 0 0 Nortel recommends that you use the current IP address for the management port Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Connecting a modem 49 peer ip lt ipaddr gt Configures the peer PC IP address on the point to point link The
91. re enforces the 10 character rule for all passwords After you upgrade from a previous release if the password does not contain at least 10 characters you must change your password to the mandatory character length This password must contain a minimum of two uppercase characters two lowercase characters two numbers and two special characters Default passwords and community strings If the switch boots in hsecure mode as a default factory setting and you have not configured a password the default passwords are changed to respect this rule The following table describes the default passwords Table 3 Default setting passwords use CT NE The following table describes the default community strings Table 4 Default community strings New community string publiconly Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Setup utility 21 Table 4 Default community strings cont d UseriD nwona s Aging enforcement When you enable the hsecure flag you can configure a duration after which you must change your password You configure the duration by using the aging parameter For SNMP and FTP after a password expires access is denied Before you access the system you must change a community string to a new string consisting of more than eight characters Consider the following after you enable the hsecure flag e You cannot enable
92. remove this configuration To configure this option to the default value use the default operator with the command baud lt rate gt Configures the baud rate for the port The default is 9600 To configure this option to the default value use the default operator with the command Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 76 Initial steps using the NNCLI mode lt ascii slip ppp gt Configures the communication mode for the serial port The default is American Standard Code for Information Interchange ASCII If you are configuring the modem port you can configure the port to use either the SLIP or the PPP communication mode To configure this option to the default value use the default operator with the command mtu lt bytes gt Configures the size of the maximum transmission unit for a PPP link 0 2048 The default is 0 To configure this option to the default value use the default operator with the command my ip lt ipaddr gt Configures the IP address for the server side the Nortel Ethernet Routing Switch 8600 of the point to point link The default is 0 0 0 0 Nortel recommends that you use the current IP address for the management port To configure this option to the default value use the default operator with the command peer ip lt ipaddr gt Configures the peer PC IP address on the point to point link The default
93. rial 46 74 CLI commands setdate 63 commands setdate 63 configuring the time 37 connection testing 123 connector modem 16 Console port connecting 45 73 RS 232 port 16 console reset 37 counters reset 37 D daylight saving time configuring 90 Daylight Saving Time configuring 62 defaults logon names and passwords 19 Device Manager configuring properties 99 dst end option 44 62 72 90 dst name option 44 62 72 90 dst offset option 44 63 72 90 dst start option 44 63 72 90 F file transfers FTP 111 121 FTP transfers 111 121 133 ftp debug option 105 110 115 121 H hard reset 37 hash bucket window TFTP 111 121 host commands boot monitor CLI 110 120 host password option 105 111 115 121 identification parameters system 60 IP address assigning 97 106 116 L logon names default 19 Management port 116 master SF CPU and master command 64 modem connecting 16 modem reset 37 mtu option 48 76 my ip option 48 76 NNCLI commands boot config sio modem 74 configuring the date 91 O offset time zone 63 91 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard Copyright 2008 Nortel Networks 30 May 2008 134 offset from utc option 44 63 72 91 P password commands 38 64 92 passwords default 19 peer ip option 49 76 pin assignments Modem port 16 point to point link 48 76 pppfile option 49 76 TFTP retransmission timeout 11
94. rname gt slbadmin lt username gt ssladmin lt username gt config setdate lt MMddyyyyhhmmss gt Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Connecting a terminal 45 Table 6 Job aid Roadmap of initial CLI commands cont d config sys set contact lt contact gt clock sync time lt minutes gt contact lt contact gt ecn compatibility lt enable disable gt force topology ip flag lt true false gt global filter lt enable disable gt info location lt location gt max vlan resource reservation lt enable disable gt mgmt virtual ip lt ipaddr mask gt mgmt virtual ipv6 lt ipv6addr prefix len gt mroute stream limit lt enable disable gt mtu lt bytes gt multicast resource reservation lt value gt name lt prompt gt portlock lt on off gt sendAuthenticationTrap lt true false gt smlt on single cp lt enable disable gt timer lt value topology lt on off gt udp checksum lt enable disable gt udpsrc by vip lt enable disable gt vlan bysrcmac lt enable disable gt wsm direct mode lt enable disable gt Connecting a terminal Connect a terminal to the serial console interface to monitor and configure the switch Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 46 Initial steps using the CLI Prerequisites
95. rompt descriptions cont d IP Address for mgmt virtual ip 0 0 0 0 0 0 0 0 First net mgmt route 0 0 0 0 0 0 0 0 Second net mgmt route 0 0 0 0 0 0 0 0 Third net mgmt route 0 0 0 0 0 0 0 0 Fourth net mgmt route 0 0 0 0 0 0 0 0 Description Indicates the IP address for the virtual management port Action Type the IP address of the virtual management port Accept the default 0 0 0 0 0 0 0 0 to not specify an IP address Description Specifies the IP address of the first network management route static route from the network management port to a device in the network Action Type the network and gateway IP address of the first network management route Description Specifies the IP address of the second network management route Action Type the IP address of the second network management route static route from the network management port to a device in the network Description Specifies the IP address of the third network management route Action Type the IP address of the third network management route static route from the network management port to a device in the network Description Specifies the IP address of the fourth network management route Action Type an IP address of the fourth network management route static route from the network management port to a device in the network Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Stand
96. rtel Networks are beneficiaries of this provision Upon termination or breach of the license by Customer or in the event designated hardware or CFE is no longer in use Customer will promptly return the Software to Nortel Networks or certify its destruction Nortel Networks may audit by remote polling or other reasonable means to determine Customer s Software activation or usage levels If suppliers of third party software included in Software require Nortel Networks to include additional or different terms Customer agrees to abide by such terms provided by Nortel Networks with respect to such third party software 2 Warranty Except as may be otherwise expressly agreed to in writing between Nortel Networks and Customer Software is provided AS IS without any warranties conditions of any kind NORTEL NETWORKS DISCLAIMS ALL WARRANTIES CONDITIONS FOR THE SOFTWARE EITHER EXPRESS OR IMPLIED INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OF NON INFRINGEMENT Nortel Networks is not obligated to provide support of any kind for the Software Some jurisdictions do not allow exclusion of implied warranties and in such event the above exclusions may not apply 3 Limitation of Remedies INNO EVENT SHALL NORTEL NETWORKS OR ITS AGENTS OR SUPPLIERS BE LIABLE FOR ANY OF THE FOLLOWING a DAMAGES BASED ON ANY THIRD PARTY CLAIM b LOSS OF OR DAMAGE TO CUSTOMER S RECORD
97. s for mgmt virtual ip 0 0 0 0 0 0 0 0 Description Specifies if you want to access the switch by Telnet Action Enter y to enable Telnet Accept the default n to not enable Telnet Description Specifies if you want to access the switch by Trivial FTP TFTP Action Enter y to enable TFTP Accept the default n to not enable TFTP Description Specifies if you want to enable Web server service Use the Web server service to monitor statistics for the switch with your Web browser Action Enter y to enable Web server service Accept the default n to not enable Web server service Description Indicates the IP address for the management port in the CPU slot you specify Action Type the IP address of the management port in the first CPU slot Description Indicates the IP address for the management port in the CPU slot you specify Action Type the IP address of the management port in the second CPU slot Description Indicates the IP address for the virtual management port Action Type the IP address of the virtual management port Accept the default 0 0 0 0 0 0 0 0 to not specify an IP address Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring the switch with the setup utility 59 Table 9 Job aid Setup utility prompt descriptions cont d First net mgmt route 0 0 0 0 0 0 0 0 Second net mg
98. splays the default boot configuration file directory name ConfigFileName Specifies the name of a new configuration file ActionGroup1 Can be one of the following actions e resetCounters resets all statistic counters e checkSwinFlash checks the software in flash e saveRuntimeConfigT oSlave saves the current run time configuration to the standby SF CPU e saveTONVRAM saves the current run time configuration to nonvolatile RAM NVRAM e checkSwinPcmcia checks the software in PCMCIA e saveBootConfig saves the current boot configuration e saveToStandbyNVRAM saves the current run time configuration to the standby NVRAM e saveRuntimeConfig saves the current run time configuration Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring the date and time 37 saveSlaveBootConfig saves the current boot configuration to the standby SF CPU loadLicense loads a software license file to enable features resetistStatCounters resets the IST statistic counters resetLspStats resets the LSP ActionGroup2 Can be one of the following actions e statistics ActionGroup3 flushlpRouteTblflushes IP routes from the routing table ActionGroup4 Can be one of the following actions hardReset resets the device and runs power on tests softReset resets the device without running power on tests cpuSwitchOver swi
99. ssign a static route to specify a gateway address route for the management interface You can specify up to four static routes for the management interface For more information about static routes see Nortel Ethernet Routing Switch 8600 Configuration OSPF and RIP NN46205 522 Prerequisites e You must log on to the Global Configuration mode in the NNCLI Procedure steps Step Action 1 Specify a gateway address route by using the following command boot config net mgmt route lt netaddr mask gt lt gateway gt 2 Save the changes to the boot cfg and config cfg files End Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 118 Remote connection configuration using the NNCLI Variable definitions Use the data in the following table to use the boot config net mgmt route command gateway Configures the IP address of the default gateway netaddr mask Configures the IP address and mask of the destination network in the formats a b c d x a b c d x x x x default Example of assigning a static route to the management interface Procedure steps Action If you locate a management station on the network of 11 0 0 0 255 0 0 0 and the next hop to that network from the management interface is 10 127 231 1 enter the following command to configure the management port ERS 8606 5 config boot config net mgmt route 11 0 0 0 255 0 0 010 127 231 1
100. t backup lt word gt mode cli nncli End Variable definitions Use the data in the following table to use the save bootconfig and save config commands Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 132 Common procedures using the NNCLI backup lt word gt Saves the specified file name and identifies the file as a backup file word uses one of the following formats a b c d lt file gt peer lt file gt pcmcia lt file gt flash lt file gt file is a string of 1 99 characters file lt word gt Specifies the file name in one of the following formats for word a b c d lt file gt peer lt file gt pcmcia lt file gt flash lt file gt file is a string of 1 99 characters mode lt cli nncli gt Saves the boot configuration in CLI or NNCLI format standby lt word gt Saves the specified file name to the standby SF CPU in the following format for word e filename pcmcia lt file gt e flash lt file gt file is a string of 1 99 characters verbose Saves the default and current configuration If you omit this parameter the command saves only parameters you change Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Index B baud option 48 75 baud rate configuring 48 75 boot configuration saving 37 C cable se
101. t ogon password Read only Permits view only configuration and status information Is equivalent to Simple Network Management Protocol SNMP read only community access Layer 1 read write View most switch configuration and status information and change physical port settings Layer 2 read write View and change configuration and status information for Layer 2 bridging and switching functions Layer 3 read write View and change configuration and 8600 switches only status information for Layer 2 and Layer 3 routing functions Read write View and change configuration and status information across the switch You cannot change security and password settings This access level is equivalent to SNMP read write community access Read write all Permits all the rights of Read Write access and the ability to change security settings including the CLI and Web based management user names and passwords and the SNMP community strings Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 20 Commissioning fundamentals hsecure mode The Nortel Ethernet Routing Switch 8600 supports a flag called high secure hsecure hsecure introduces the following behaviors for the password 10 character enforcement aging time limitation of failed logon attempts and a protection mechanism to filter certain IP addresses After you enable the hsecure flag the softwa
102. t value gt Configures the netmask value for negotiation to the value you specify no mra _mru Disables MRU negotiation Disables PAP authentication with the peer Disables protocol field compression no_vj Disables Van Jacobson VJ compression VJ compression reduces the regular 40 byte TCP IP header to 3 or 8 bytes Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 80 Initial steps using the NNCLI Table 11 Job aid PPP file options cont d no_vjccomp Disables VJ connection ID compression pap_file lt file gt Obtains PAP secrets from the specified file You require this option if either peer requires PAP authentication If your users must use the same IP address the PAP and CHAP secret files must specify the same IP address for all users and it must match the peer ip setting on the modem port pap_max_authreq lt value gt Configures the maximum number of transmissions for PAP authentication requests to the value you specify pap_passwd lt password gt Configures the password for PAP authentication with the peer to the specified password pap_restart lt value gt Configures the timeout in seconds for PAP negotiation to the value you specify pap_user_name lt name gt Configures the user name for PAP authentication with the peer to the specified name passive_mode Configures passive mode PPP waits for the peer to co
103. tch control from one SF CPU to another resetConsole reinitializes the hardware UART drivers Use only if the console or modem connection is hung resetModem reinitializes the UART drivers on the modem port Use only if the console or modem connection is hung Displays a message after you click Apply Configuring the date and time Use the User Set Time tab to configure the date and time Procedure steps Step Action 1 In the Device Manager window select the chassis 2 From the Device Manager menu bar choose Edit Chassis The Chassis dialog box appears with the System tab displayed 3 Click User Set Time Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 38 Initial steps using Device Manager The User Set Time tab appears 4 Type the correct details 5 Click Apply End Variable definitions Use the data in the following table to configure the User Set Time tab Configures the year integer 1998 2097 Configures the month integer 1 12 Configures the day integer 1 31 Configures the hour integer 0 23 Changing passwords Configure new passwords for each access level or change the logon or password for the different access levels of the switch After you receive the Nortel Ethernet Routing Switch 8600 use default passwords to initially access the CLI If you use Simple Network Management Protocol version 3 S
104. text for the ERS 8606 prompt Action Press Enter to accept the default ERS 8610 or type a different string of up to 20 characters Please select CPU primary slot Description Indicates the slot number of the 5 6 5 primary central processing unit CPU The slot can be 5 or 6 Action Press Enter to accept the default 5 or specify 6 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Configuring the switch with the setup utility 83 Table 13 Job aid Setup utility prompt descriptions cont d Primary CPU mgmt port autonegotiation n y n speed 10 100 10 Do you want to enable automatic savetostandby mode n y n Do you want to enable m mode support n y n Description Specifies if you want the primary CPU to use autonegotiation Action Enter n to accept the default or enter y to indicate that you want the primary CPU management port to use autonegotiation Description Specifies the line speed in Mb s Action Press Enter to accept the default 10 Mb s or specify 100 Mb s Description Specifies if you want the boot and run time configuration files to be saved on the backup CPU Action Enter y to save the boot and run time configuration files on the backup CPU Accept the default n to save boot and run time configuration files on the primary CPU Description Specifies if you want the
105. the Web server e You cannot enable the SSH password authentication Filtering mechanism Beginning with Release 4 1 incorrect IP source addresses as network or broadcast addresses are filtered at the virtual router interface For example V1 has the network address 192 168 168 0 24 This change is valid for all IP subnets not only for 24 as mentioned in the example Source addresses 192 168 168 0 and 192 168 168 255 are discarded You can filter addresses only if you enable the hsecure mode Setup utility To optimize the function of the Nortel Ethernet Routing Switch 8600 you can obtain a list of hardware modules Because the latest modules provide advanced features they work in certain operation modes that previous modules do not support The setup utility monitors system requirements and obtains the highest system performance Use the setup utility to configure your switch by responding to a series of on screen questions The setup utility saves the information in the boot and run time configuration files The saved information and files ensure Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 22 Commissioning fundamentals the switch reboots in the desired operating mode The setup utility also provides error and warning messages to advise you of the ramifications of certain hardware and software configurations For information about the supported ope
106. the new Nortel Command Line Interface NNCLI to configure the switch For more information about the NNCLI see the following sections e Initial steps using the NNCLI page 69 e Remote connection configuration using the NNCLI page 113 e Common procedures using the NNCLI page 131 Other changes See the following sections for information about changes that are not feature related e Document changes page 11 Document changes Much of the content in this document is previously released as Getting Started 313189 F All document titles in the Nortel Ethernet Routing Switch 8600 suite are changed For more information see Nortel Ethernet Routing Switch 8600 Documentation Roadmap NN46205 103 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 12 New in this release This document is restructured to align with Nortel Customer Documentation Standards NCDS Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 13 Introduction This guide provides procedures to commission the Nortel Ethernet Routing Switch 8600 Navigation e Commissioning fundamentals page 15 e Commissioning page 31 e Initial steps using Device Manager page 33 e Initial steps using the CLI page 41 e Initial steps using the NNCLI page 69 e R
107. thernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 34 Initial steps using Device Manager Figure 7 Initial commissioning procedures Initial steps Editing system information Configuring the date and time Changing passwords Initial commissioning navigation Editing system information page 34 e Configuring the date and time page 37 e Changing passwords page 38 Editing system information You can edit system information such as the contact person the name of the device and the location Procedure steps Step Action 1 On the Device Manager menu bar choose Edit Chassis Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Editing system information 35 The Chassis dialog box appears with the System tab displayed Type the contact information Type the system name Type the location information Click Apply Click Close O a fF WO ND End Variable definitions Use the data in the following table to configure the System tab sysDescr Shows the system assigned name and the software version sysUpTime Shows the time since the system last started sysContact Configures the contact information in this case an e mail address for the Nortel support group sysName Configures the name of this device sysLocation Configures t
108. ue you specify lcp_restart lt value gt Configures the timeout in seconds for the LCP negotiation to the value you specify local_auth_name lt name gt Configures the local name for authentication to the specified name login Uses the logon password database for Password Authentication Protocol PAP peer authentication max_challenge lt value gt Configures the maximum number of transmissions for CHAP challenge requests to the value you specify mru lt value gt Configures the maximum receive unit MRU size for negotiation to the value you specify Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 52 Initial steps using the CLI Table 7 Job aid PPP file options cont d Option Description O mtu lt value gt Configures the maximum transmission unit MTU size for negotiation to the value you specify netmask lt value gt Configures the netmask value for negotiation to the value you specify Disables address control compression Does not request or allow options no_chap Disallows CHAP authentication with peer no_ip Disables IP address negotiation in IPCP Disables magic number negotiation Disables MRU negotiation Disables PAP authentication with the peer Disables protocol field compression Disables Van Jacobson VJ compression VJ compression reduces the regular 40 byte TCP IP header to 3 or 8 bytes
109. uration using the NNCLI This section contains the minimum information to configure a management interface to set up a remote connection Remote connection configuration procedures The following task flow shows the sequence of procedures you perform to permit remote connections to the Nortel Ethernet Routing Switch 8600 To link to a procedure click the procedure title in Remote connection configuration navigation page 114 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 114 Remote connection configuration using the NNCLI Figure 12 Remote connection configuration procedures Remote connection configuration Assigning an IP address to the management port Assigning static routes to the management interface Enabling remote access services Enabling the Web management interface Configuring the remote host logon Remote connection configuration navigation e Job aid Roadmap of remote connection NNCLI commands page 115 Assigning an IP address to the management port page 116 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Job aid Roadmap of remote connection NNCLI commands 115 e Assigning static routes to the management interface page 117 e Enabling remote access services page 118 Enabling the Web manage
110. us Standard Document revision 01 01 Document release date 30 May 2008 To provide feedback or to report a problem in this document go to www nortel com documentfeedback www nortel com LEGAL NOTICE While the information in this document is believed to be accurate and reliable except as otherwise expressly agreed to in writing NORTEL PROVIDES THIS DOCUMENT AS IS WITHOUT WARRANTY OR CONDITION OF ANY KIND EITHER EXPRESS OR IMPLIED The information and or products described in this document are subject to change without notice Nortel the Nortel logo and the Globemark are trademarks of Nortel Networks All other trademarks are the property of their respective owners ATTENTION For information about the software license read Software license in this guide NORTEL
111. value gt Configures the maximum number of transmissions for LCP configuration requests to the value you specify lcp_max_failure lt value gt Configures the maximum number of LCP configuration NAKs to the value you specify Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Connecting amodem 79 Table 11 Job aid PPP file options cont d Option Description O lcp_ max terminate lt value gt Configures the maximum number of transmissions for LCP termination requests to the value you specify lcp_restart lt value gt Configures the timeout in seconds for the LCP negotiation to the value you specify local_auth_name lt name gt Configures the local name for authentication to the specified name login Uses the logon password database for Password Authentication Protocol PAP peer authentication max_challenge lt value gt Configures the maximum number of transmissions for CHAP challenge requests to the value you specify mru lt value gt Configures the maximum receive unit MRU size for negotiation to the value you specify mtu lt value gt Configures the maximum transmission unit MTU size for negotiation to the value you specify Disables address control compression no_chap Disallows CHAP authentication with peer no_ip Disables IP address negotiation in w nomna Disables magic number negotiation netmask l
112. vel The available access level values are l4admin l4oper layeri lt word gt layer2 layer3 lt word gt oper read only lt word gt read write lt word gt read write all lt word gt slbadmin slboper ssladmin lt word gt represents the new password with 0 20 characters For information about the Web Switching Module WSM see Nortel Ethernet Routing Switch 8600 Web Switching Module Fundamentals NN46205 314 aging time day lt 1 365 gt Configures the expiration period for passwords in days from 1 365 Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks 94 Initial steps using the NNCLI default lockout time Changes the default lockout time after lt 60 65000 gt three invalid attempts Configures the lockout time in seconds and is in the 60 65000 range The default is 60 seconds To configure this option to the default value use the default operator with the command lockout lt word gt time lt time gt Configures the host lockout time e word is the host IP address in the format a b c d time is the lockout out time in seconds in the 60 65000 range The default is 60 seconds min passwd len lt 10 20 gt Configures the minimum length for passwords in high secure mode To configure this option to the default value use the default operator with the command password history lt 3 32 gt Specifies the numb
113. word is the password associated with the logon name 12 lt username gt lt password gt Changes the Layer 2 read write logon or password username is the logon name 13 lt username gt lt password gt Changes the Layer 3 read write logon and or password applies only to the Nortel Ethernet Routing Switch 8600 username is the logon name password is the password associated with the logon name 14admin lt username gt Configures the Layer 4 administrator logon to connect to the Web Switching Module WSM For more information about the WSM see Nortel Ethernet Routing Switch 8600 Web Switching Module Fundamentals NN46205 314 14oper lt username gt Configures the Layer 4 operator logon to connect to the WSM For more information about the WSM see Nortel Ethernet Routing Switch 8600 Web Switching Module Fundamentals NN46205 314 lockout time lt HostAddress gt lt secs gt Configures the host lockout time HostAddress is the host IP address in the format a b c d secs is the lockout time limit in seconds for passwords lockout in the 60 65000 range The default is 60 seconds Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Copyright 2008 Nortel Networks Changing passwords 67 min passwd len lt integer gt Configures the minimum length for passwords in high secure mode integer is in a minimum range of 10 20 oper lt username
114. y using the following command boot config sio modem 8databits baud lt rate gt mode lt ascii slip ppp gt For information about the configuration requirements of your modem see the documentation shipped with the modem Nortel Ethernet Routing Switch 8600 Commissioning NN46205 319 01 01 Standard 30 May 2008 Connecting amodem 75 ATTENTION Nortel recommends that before you configure the Serial Line Internet Protocol SLIP or the Point to Point Protocol PPP you familiarize yourself with these protocols 2 If you configure the port mode to slip use the following command to configure other SLIP parameters boot config sio modem slip compression slip rx comp ression 3 If you configure the port mode to ppp use the following commands to configure other PPP parameters boot config sio modem mtu lt bytes gt my ip lt ipaddr gt peer ip lt ipaddr gt pppfile lt file gt On the modem turn off echo mode and return code messaging Connect the modem to the modem port Save the boot configuration N oO fF Optionally shutdown and reinitialize the port by using the following command boot config sio modem restart 8 Reboot the switch End Variable definitions Use the data in the following table to use the boot config sio command 8databits Specifies either 8 enabled or 7 disabled data bits for each byte for software to interpret The default is disabled Use the no operator to

Nortel Networks COMMISSIONING 8600 User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents