Avaya Configuring BayStack and Business Policy Switches with the Preside Network Configuration System User's Manual
Contents
1. 4 In the Filter Group ID box enter IP Filter Group 5 In the Filter Group Type box select an entry for example choose Packet 6 In the Role Combination box select a roll combination 7 In the Order box enter 1 8 In the Action Index box enter a value Assigning mapping values Click Task list to return to the list of tasks Page 10 Palette Properties Basic Policy Statistics Index Filter Group ID Filte 2 Peer ae NOTE You cannot have spaces in the naming field This entry is a unique name to identify this target This entry is the filter group that will be associated with this policy This entry is the filter group you created in the IP Classification Group page IP Filter Group Table This entry is the unique Role Combination that you created NOTE Nortel Networks recommends that you consider an order numbering strategy for the values in the Order field as you configure policies The policies in the Policy Table are arranged in ascending order according to value in the Order column By establishing a policy ordering scheme in multiples of for example 10 Order 10 Order 20 Order 30 Order 40 and so on you are able to insert policies in the appropriate filter precedence location and still retain the precedence of the remaining policies NOTE Nortel Networks does not allow this action from NCS because to complete the configuration the switch must be reset If the switch2. is reset the SNMP connection to the switch is dropped In this case export of the configurations is interrupted Mapping Switch Console Interface commands to Preside NCS GUI properties If you are familiar with the BayStack Console Interface Cl use the following table to locate the Preside NCS properties that you want to configure To configure the properties on this Cl Screen IP Configuration Setup SNMP Configuration System Characteristics Switch Configuration gt VLAN Configuration menu gt VLAN Configuration Switch Configuration gt VLAN Configuration menu gt VLAN Port Configuration Switch Configuration gt VLAN Configuration menu gt VLAN Display by Port Switch Configuration gt Port Configuration Switch Configuration gt Multilink Trunk Configuration Switch Configuration gt IGMP Configuration Switch Configuration gt IGMP gt port Spanning Tree Configuration gt Spanning Tree Group Configuration Spanning Tree Configuration gt Display Spanning Tree VLAN Membership Software Download Switch Configuration gt EAPOL Switch Configuration gt MAC Address Security Click Task list to return to the list of tasks NORTEL NETWORKS Select this item in the Preside NCS navigation pane Switch Switch gt SNMP Switch Switch gt VLANs folder gt VLAN Switch gt port member of VLAN VLANs folder gt VLAN Switch gt port Switch gt MLT groups gt MLT VLAN gt IGMP
3. list of tasks NOTE Nortel Networks does not allow this action from NCS because to complete the configuration the switch must be reset If the switch is reset the SNMP connection to the switch is dropped In this case export of the configurations is interrupted Palette Properties IP Filter Table IP Filter Group Table Index Dest Addr Dest Addr Mask This address is used to match the destination IP address in the packet s IP header This is the IP address to match against the packet s source IP address For packets with a DSCP of 0x20 The DSCP value in the packet is ignored NOTE A DSCP of 0x20 equals 32 decimal When you select TCP you specify that only TCP packets be matched If you select RSVP all IP protocols are matched If you select Match All all IP protocols listed are matched Page 7 Maintaining policing statistics l l oe l Palette Pro erties You can configure the Business Policy Switch to maintain and display statistics on QoS policies Statistics are only maintained for policies created while this Basic Advanced feature is enabled Basic e Note Maintaining policy statistics uses additional filter resources in the Business Property Policy Switch With the policy statitics feature enabled you cannot configure as i many filters as when it is disabled Qos Policy Server Control 1 In the navigation pane expand the switch and select QoS icon ar ney aerate He
4. tab and IGMP tab on ports Switch gt port Switch gt STG Group gt Spanning Tree group Switch gt STG Group gt Spanning Tree group Switch Switch gt Port Switch MAC Security Copyright December 2001 Nortel Networks All rights reserved Printed in the USA The information in this document is subject to change without notice The statements configurations technical data and recommendations in this document are believed to be accurate and reliable but are presented without express or implied warranty Users must take full responsibility for their applications of any products specified in this document The information in this document is proprietary to Nortel Networks NA Inc and choose this Properties tab Basic Basic Import Export Basic VLAN Basic Basic Basic Basic IGMP Basic VLAN Image Download Wizard EAP Basic x 3 1 2 0 6 1 C
5. the switch and select ports to participate in the VLAN Create shortcuts from the ports to the VLAN Copy the ports and paste them as shortcuts on the VLAN In the navigation pane select the VLAN ports In the Properties tab configure the VLAN port properties Click the VLAN tab to display the VLAN port properties Click Task list to return to the list of tasks Palette Properties Property Value 2 Operational Status Administration Status Enabled T Port speed Autonegotiate T NOTE Use the device VLANs folder to create VLANs and to configure VLAN ports The system VLANs folder shows the VLANs configured on all devices in the database Palette Properties Gp Business Policy Switch 2000 VLANs GD Business Policy Switch 2000 MAC SA based VLAP ED Business Policy Switch 2000 Portbased VLAN GED Business Policy Switch 2000 Protaco based YLA Palette Properties Basic IGMP Property ID Mame VLON Default Property Value VLAN State NVLSYL Page 3 Configuring spanning tree groups STGs You can configure from one to eight spanning tree groups 1 2 In the navigation pane expand the switch and expand the Spanning Tree Protocol Group To add an STG open the Palette tab and drag the Spanning Tree Group icon to the Spanning Tree Protocol Group in the navigation pane To configure basic STG settings click on the STG icon and open the Basic tab At a mi
6. they do not support Trivial File Transfer Protocol TFTP or serial import and export 2 Use the Configuration Data Palette to create new standalone switch and stack configurations The Palette lists switch templates by product group Adding stack units and media dependent adapters MDAs NOTE You can add switch units to a stack and MDAs to a unit configuration using Preside NCS Then export that configuration to a stack or unit to which you added the corresponding hardware Alternatively you can install the new unit or MDA in the stack or unit and re import the configuration through Preside NCS Re import will then discover the newly installed unit or MDA It is recommended that you follow this latter method because it is less error prone 1 In the navigation pane select the switch stack Select the unit type that is to be added to the stack from the Palette tab 2 Click the Paste button or double click the unit type that is to be added to 3 the stack 4 Select the newly created unit in the navigation pane and adjust the unit number in the Basic tab in the Properties area 5 Select the newly created unit in the navigation pane and then select the MDA type that is to be added to the new switch unit from the Palette tab Click the Paste button or double click the MDA type that is to be added to the switch Expand the added unit in the navigation pane and then expand the MDA Configure Basic VLAN STP and IGMP paramete
7. Configuring BayStack and Business Policy Switches with the Preside Network Configuration System This card summarizes how to get started using the Preside Network Configuration System Preside NCS to configure the BayStack and Business Policy Switches BPS in your network This document is intended for network engineers who have some familiarity with Nortel Networks Layer 2 switches The Business Policy Switch 2000 requires version 1 2 software The BayStack 350 410 and 450 switches require versions 1 3 3 1 software Task list The following summarizes an example of the configuration tasks you can complete using Preside NCS e Configuring the switch IP address e Importing or creating a switch configuration e Adding stack units and media dependent adapters MDAs e Configuring ports e Configuring VLANs e Configuring spanning tree groups STGs e Configuring an Simple Network Management Protocol SNMP trap receiver e Configuring an Extensible Authentication Protocol over LAN EAP e Configuring media access control MAC security e Configuring QoS parameters Creating interface groups Accepting default mapping values Setting up filters Maintaining policing statistics Allowing or denying packet reordering Configuring actions Configuring meters Configuring policies Assigning mapping values If you
8. are familiar with the BayStack Console Interface Cl see the Mapping Switch Console Interface commands to Preside NCS GUI properties table to locate the Preside NCS properties that you want to configure Each of the above tasks is explained in more detail in the procedures that follow Configuring the switch IP address NOTE If you have a properly configured BootP server in your network it detects the switch IP address automatically you do not need to configure the IP address 1 Connect a serial console and apply power to the switch After the Nortel Networks logo screen appears press Ctrl Y to access the Console Interface Cl 2 At the Cl Main Menu choose IP Configuration Setup 3 Type the in band IP address or stack IP address subnet mask and default For a standalone switch you enter the in band IP gateway of the switch address For a stack configuration you enter the stack Press Return after each entry IP address Click Task list to return to the list of tasks Page 1 Importing or creating a switch configuration You can import existing configurations to the Preside NCS database directly from the switch or you can create configurations off line 1 Use the Configuration menu Import commands to import configuration data directly from a switch To import data you specify the switch IP address and community string NOTE BayStack and Business Policy Switch devices use SNMP to transfer configuration data
9. d Page 5 Configuring the security table 1 In the Security Table tab of the MAC Address Security pane do the following a Click Add row icon b Enter the source MAC address 2 In the navigational pane expand MAC Address Security 3 Expand a unit for example Unit 1 4 Do the following a Right click a port b Select Copy from the popup menu c Right click Entry S1 d In the popup menu click Paste As Shortcut 5 In the Security Table tab of the MAC Address Security pane enter the allowed source 6 To use the Learn by Port feature do the following a In the navigational pane expand MAC Address Security b Click Learn by Port c Inthe Properties tab select the Current Learning Mode property value Expand a unit for example Unit 1 Right click a port Select Copy from the popup menu Right click Entry 1 In the popup menu click Paste As Shortcut samo oe 7 In the popup menu click Paste As Shortcut Click Task list to return to the list of tasks Page 6 NOTE You manually assign ports Port 1 Port 24 to an entry S1 532 You enter the allowed source as an entry For example S1 Palette Properties Basic Security Table MAC Address Allowed Source 0 0C 8E 34 45 71 F 81 Ps For example Port 1 a gt MAC Address Security ay Entre 51 ale Unit 1 TON OOTS Foti P ID 1 For example S1 Palette Properties Basic Current Learnin
10. el Reset O05 Policy Agent to Default No 2 In the Properties tab click the Basic tab QoS Policy Agent Retry Timer z 3 In the Maintain Policing Statistics box choose either Enable or Disable Allow Packet Reordering Yes Maintain Policing Statistics Yes Allowing or denying packet reordering l eas P P rti Support for certain per hop behaviors requires that packets within a flow not be M Properties reordered when transmitted You can choose either of two options for packet Basic nl reordering e Yes Allows full flexibility of assigning packet to egress queue Property e No Agent verifies that in profile and out of profile actions associated with the flow do not cause packets from same flow to be assigned to different egress queues Qos Policy Agent State Qos Policy Server Control In the navigation pane expand the switch and select QoS icon Reset Go5 Policy Agent to Default 005 Policy Agent Retry Timer Allow Packet Reordering 3 In the Allow Packet Reordering box choose either Enable or Disable Maintain Policing Statistics 2 In the Properties tab click the Basic tab Setting up filter groups J P J P Palette Properties 1 In the navigation pane expand the switch and select QoS gt IP 7 Classification z IP Filter Table IP Filter Group Table 2 Click the IP Table Filter tab index Filter Group ID i ff 3 In the Filter Group ID box enter a label for example Packet NOTE Do
11. g Mode Enabled T Property Value _4 Learn by Part at a nitt 1 10100T Port 2 P ID 1 Creating interface groups NOTE Nortel Networks does not allow this action from NCS because to complete the configuration the switch must be reset If the switch is reset the SNMP connection to the switch is dropped In this case export of the configurations is interrupted Accepting default mapping values To manually configure the mapping among 802 1p priority values priority and DSCP mapping you must use with the following QoS Advanced pages Assigning 802 1p priority queue assignment Verifying DSCP mapping Assigning 802 1p user priority mapping Verifying DSCP queue assignments Setting up filters 1 2 8 9 In the navigation pane expand the switch and select QoS gt IP Classification Click the IP Table Filter tab In the Indices box enter the value For the destination network address do the following a Inthe Dest Addr box type the destination network address b Inthe Dest Addr Mask box type the subnet mask For the source network address do the following a Inthe Src Addr box type the source network address b In the Src Addr Mask box type the source network subnet mask In the DSCP field do one of the following a Enter 0x20 b Choose Ignore In the Protocol field choose TCP In the Destination L4 box enter 0 In the Source L4 box enter 0 Click Task list to return to the
12. nimum you must configure the STG ID so that all STG IDs are unique To add VLANs to an STG click on the STG icon in the Spanning Tree Protocol Group and open the VLAN tab On the VLAN tab click the plus sign to add a new VLAN and enter the VLAN ID To remove a VLAN from an STG right click a VLAN Members number on the VLAN tab and choose Delete You cannot remove the default VLAN from STG 1 To enable or disable an STG click on the STG and open the State tab For the State property choose either Enable or Disable Configuring a multilink trunk MLT You can configure from one through six multilink trunk MLT groups 1 oOo oa A QQ N In the navigation pane expand the switch and select two three or four Ethernet ports Create shortcuts from the ports to one of the six MLT templates Copy the ports and then paste them as shortcuts on the MLT In the navigation pane select the MLT In the Properties tab type a descriptive name to identify the trunk From the Status list choose Enabled Configuring an Simple Network Management Protocol SNMP trap receiver 1 In the navigation pane expand the switch and select SNMP 2 In the Properties tab click the green plus sign to add an item to the Trap Receivers table 3 Enter the IP address and community string for each trap receiver Click Task list to return to the list of tasks Page 4 Palette Properties Basic VLAN State Prope
13. not leave spaces in your naming entry This unique identification label distinguishes this filter group from other filter groups In the Filter Order box enter a number for example 1 This number establishes the evaluation order of filters 4 in the group 5 Define the Layer 2 filter 6 Define the Layer 2 filter group Click Task list to return to the list of tasks Page 8 Configuring actions 1 In the navigation pane expand the switch and select QoS gt Action table 2 Click the Properties tab In the Index box enter Generic 4 In the Drop box choose True or False In the Update DSCP field enter 47 OX2F 6 In the Set Drop Precedence box select Use Defaults 7 In the Update Priority box select Priority 1 Configuring meters 1 In the navigation pane expand the switch and select QoS gt Meter Table 2 Click the Properties tab 3 Enter the properties values Click Task list to return to the list of tasks alette Properties 7 Basic Index Transmit Orop Frame Update I g Transmit Ignore This entry changes the DSCP value to the decimal value 47 in the match packet Priority 1 specifies a low priority Properties z Basic Index Data Specification Committed 0 Ho Meter Data Y Page 9 Configuring policies 1 In the navigation pane expand the switch and select QoS gt Policy Table 2 Click the Properties tab 3 In the Index box enter IPpolicy
14. rs in the Properties tab 6 T 8 Select a port under the MDA object in the navigation pane 9 as appropriate Click Task list to return to the list of tasks Page 2 Palette Properties Ge 225 BayStack 450 Product Group 3 Business Policy Switch 2000 Product Group T Centillian 1000 Series Switches Folder or Domain amp Fe q MortelBay Routers Ee E Passport 1000 Series Switches 6 E Passport 8000 Series Switches 8 Script Configuring ports By default all unconfigured ports are untagged links in the default port based VLAN VLAN 1 participate in normal learning STP and autonegotiate line speed 1 2 In the navigation pane expand the standalone switch stack unit or MDA to select switch ports In the Properties tab choose the Basic VLAN STP IGMP EAP or MAC Security tab NOTE Selecting multiple ports Ctrl Click or Shift Click and then modifying parameters from the Properties tab changes those parameters for all selected ports Configuring VLANs You can configure port based protocol based or MAC source address VLANs 1 In the navigation pane select the device In the Palette tab expand the Business Policy Switch 2000 VLANs folder and double click on the port based protocol based or MAC source address SA based VLAN type In the navigation pane select the new VLAN In the Properties tab type a descriptive name to identify the VLAN In the navigation pane expand
15. rty ID Designated Root Root Port Root Path Cost Hello Time Maximum Age Time p Forward Delay Bridge Priority Bridge Hello Time Bridge Maximum A 20 Bridge Forward Delay 5 Palette Properties Basic Property Value MLT Trunk 1 Property Status MLT f Disabled x Palette Properties Basic a Property Value Read Only Community String public Read Write Community String Trap Receivers IP Address Community String 0 34 17 10 21 public t Property Value Authentication Trap Enabled x Configuring an Extensible Authentication Protocol over LAN EAP 1 In the navigation pane expand the switch and select EAP 2 In the Properties tab click the Administrative State Value Configuring media access control MAC security 1 In the navigation pane expand the switch and select MAC Address Security 2 In the Basic tab of the MAC Address Security pane click the MAC Security Value 3 Enter the property values 4 Perform the steps in Configuring the security table next Click Task list to return to the list of tasks Palette Properties Basic Property Value Administrative State Disabled Palette Properties Property Value Mac Security Disabled Partition Port on Intrusion Detected Disabled Partition Time DA Filtering on Intrusion Detected Disabled Generate SNMP Trap on Intrusion Disable
Download Pdf Manuals
Related Search