ZXC10-MSCVLR Dual-Network Structure Operation Guide (V04.01)

8/6/2019 ZXC10-MSCVLR Dual-Network Structure Operation Guide (V04.01)

1/33

ZXC10-MSCVLR

Dual-network Structure

Operation Guide (V04.01)

ZTE Corporation


2/33

Dual-network Structure Operation Guide (V1.2)

Modification Records

Version No. Completion Date Drafter Updated Contents

Version 1 Apr 15th, 2004 Wang Aiming First drafting

2 of 33


3/33


Content

1 Regard Ethernet Switch as a Host ...................................................................................................4

2 Guidance to this Operation Guide ...................................................................................................42.1 Cisco Catalyst Switch ...........................................................................................................4

2.2 HP Procurve Switch ..............................................................................................................4

2.2.1 Initial configuration of HP 2524 Switch using command line ...............................4

2.2.2 HP 2524 Switch configuration using Web browser ...............................................5

3 Configuration of Ethernet Switch as the Host ..............................................................................25

3.1 Switch naming .....................................................................................................................25

3.1.1 Cisco Catalyst IOS Switch .......................................................................................25

3.2 Configure IP address and default gateway of Switch ........................................................26

3.2.1 Cisco Catalyst IOS Switch IP address .....................................................................26

3.2.2 Cisco Catalyst IOS Switch default gateway ............................................................26

3.3 Configure user name and password for accessing Switch .................................................26

3.3.1 Cisco Catalyst IOS Switch ......................................................................................26

3.4 Configure prompts and warnings for accessing Switch ....................................................26


3.5 Check and Record Switch OS version ...............................................................................27

3.6 Record logs of Switch .........................................................................................................27

3.7 Security settings ..................................................................................................................28

3.7.1 Configure timeout period for exit upon idling .........................................................28

3.7.2 Authorize the network node permitted to access Switch ........................................283.7.3 Unnecessary services provided by Switch ..............................................................28

4 Port Configuration of Ethernet Switch .........................................................................................28

4.1 Host port configuration ......................................................................................................28


4.2 Security port configuration ................................................................................................29

4.2.1 Security port to filter MAC address ........................................................................29

4.2.2 Close the spanning-tree protocol on the port ...........................................................30

4.2.3 Limit the maximum flow of the security port .........................................................31

4.3 Bridging port configuration between Switches in dual-network structure ........................31

4.4 Configuration of ports reserved for expansion ...................................................................32

4.5 Last step of the configuration ............................................................................................32

5 Maintaining Operation ..................................................................................................................32

5.1 How to recover the password of Switch ............................................................................32

5.2 Upgrade Switch OS .............................................................................................................32

3 of 33


4/33


1 Regard Ethernet Switch as a Host

First of all, a 2-layer Ethernet Switch is also regarded as a network host:

Host name

IP address legally allocated

User account and password

2 Guidance to this Operation Guide

2.1 Cisco Catalyst Switch

The following Cisco Catalyst IOS adopts the working mode of Privilege EXEC mode, namely

under the prompt.

Interworking#

Users will return back to this mode after any operation completes.

As Catalyst 2950 is most-commonly used, the operation steps can all be applied to Catalyst 2950

unless noted specially. For Catalyst 2900XL and Catalyst 3550, only the differences are illustratedif not applicable; otherwise, they can be applied the same as well.

2.2 HP Procurve Switch

Fig. 1 Front Panel of HP Procurve 2524 Switch

2.2.1 Initial configuration of HP 2524 Switch using command line1) Connect the PC serial port via the console port of HP 2524 (i.e., DB-9 interface of RS-

232):

Fig. 2 Serial Port Configuration of PC Terminal Emulator

Its recommended to universally accept the default port configuration of HP 2524 Switch.Console/Serial Link configuration

4 of 33


5/33


Terminal emulating type

Terminal Type [VT100] : VT100

Adopting Baud Rate of the self-sensing line

Baud Rate [Speed Sense] : speed-sense

Flow control modeFlow Control [XON/XOFF] : XON/XOFF

Session Inactivity Time (min) [0] : 0

2) Enter command line interface CLI:

HP ProCurve Switch 2524>

enable Enter the Manager Exec context.

exit Return to the previous context or terminate current

console/telnet session if you are in the Operator context

level.

link-test Test the connection to a MAC address on the LAN.

logout Terminate this console/telnet session.

menu Change console user interface to menu system.

ping Send IP Ping requests to a device on the network.

show Display switch operation information.

!Enter configurable working mode

HP ProCurve Switch 2524> enable

HP ProCurve Switch 2524#

3) Configure IP address of Switch

!

HP ProCurve Switch 2524# config t

HP ProCurve Switch 2524(config)# vlan 1

HP ProCurve Switch 2524(vlan-1)# ip addr192.168.1.110 255.255.255.0

HP ProCurve Switch 2524(vlan-1)# end

HP ProCurve Switch 2524# write memory

HP ProCurve Switch 2524#

ip.txt

2.2.2 HP 2524 Switch configuration using Web browser

2.2.2.1 Prerequisite of using GUI

2.2.2.1.1 Web browser requirements

Requirements on the Web browser are:

1. Support java (Java Permissions)

2. Support Java applets

5 of 33


6/33


Usually WINDOWS IE browser 5.0 or above are used, and the default browser settings are

all supported. If the IE browser cannot work normally, please check whether the above two

items are configured correctly.

2.2.2.1.2 IP network connectivity

When using HTTP-based Web browser, it must be assured that IP layer is connected, and

normal response is returned when pinging the IP of Switch:

C:\>ping 192.168.1.110

Pinging 192.168.1.110 with 32 bytes of data:

Reply from 192.168.1.110: bytes=32 time=8ms TTL=64




Ping statistics for 192.168.1.110:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 2ms, Maximum = 8ms, Average = 4ms

C:\>

2.2.2.2 Composition of Web browser of HP 2524 Switch

Top menu, or Tab item:

1. Identity General system information of Switch

2. Status Status display of Switch

3. Configuration Configuration interface of Switch

4. Security Account, password and access control configurations of Switch

5. Diagnostics GUI of ping command

6. Support

Click the corresponding tab to switch to different interfaces.

Refer to the corresponding configurations for tab items of submenu or below.

6 of 33


7/33


Fig. 3 Web Management Interface of HP 2524 Switch

2.2.2.3 Configure the host of accessible Switch

Generally, the host of accessible Switch is specified as the operation and maintenance

console such as 170.

7 of 33


8/33


Fig. 4 Settings of Switch Access Control

Steps:

1) Add the IP address in decimal format separated by dot, e.g. 192.168.1.171;

2) Select and add an IP mask, which is 255.255.255.255 for a single host;

3) Select the Access Level: grant all permissions to Manager, and View

permission to Operator.

4) Add, replace or delete corresponding addresses. Click Add to add a new

authorized IP.

2.2.2.4 Configure the account and password of Switch

Its required that the following accounts and corresponding passwords shall be configured:

1. admin: Account for HP Switch configuration and management

2. oper: Account for HP Switch routine operation and maintenance

8 of 33


9/33


Fig. 5 Configure the Account and Password of Switch

Step:

1) Add account oper, password and confirm password;

2) Add account admin, password and confirm password;

3) To make the changes take effect, click .

After the account takes effect, the password verification interface prompts when accessing

the Web interface of Switch.

9 of 33


10/33


Fig. 6 Login Interface under Windows XP

Fig. 7 Login Interface under Windows 9.X/2000

If the input account or password is incorrect, the following output are prompted:

Fig. 8 Error Prompt for Incorrect Account or Password

10 of 33


11/33


2.2.2.5 Switch naming

Fig. 9 Switch Naming

Steps:

1) Add the Switch name: ZX-010-013-110;

2) Add the location information: BeiJing Unicom;


After the changes take effect, you can view the information as displayed below:

Fig. 10 Display of Switch System Information

11 of 33


12/33


2.2.2.6 Configure default gateway of Switch

Fig. 11 Configure the Default Gateway of Switch

Steps:

1) Add the default gateway address: 192.168.1.1;


After the changes take effect, you can view the information as displayed below:

12 of 33

Please dontmodify!


13/33


Fig. 12 Display of Default Gateway Configuration

2.2.2.7 OS version of Switch

Refer to item 5 displayed in Fig. 10.

Version: revision F.04.08, ROM F.02.01 (/sw/code/build/info(f01))

The OS version used in this example is F.04.08.

13 of 33


14/33


2.2.2.8 Log configuration of Switch

Fig. 13 Log Configuration of Switch

Steps:

1) Select the option: High Sensitivity;


2.2.2.9 Host port configuration

1. Configuration of a single port, taking Port 10 as an example:

14 of 33


15/33


Fig. 14 Port Configuration

15 of 33

Select and

double-click


16/33


Fig. 15 Configure a Single Port

Steps:

1) Select whether to enable or disable this port;

2) Select the port rate, simplex/duplex mode: to use the MDIX feature, usually

configure this item as [auto]. Selectable options include: auto-10 (10M self-

adaptable), 10-ful (10M full duplex), 10-half (10M half duplex), 100-ful (100M

full duplex), 100-half (100M half duplex), auto (10M self-adaptable);

3) This feature is set to be closed: select [disable];

4) Broadcast control configuration: can only be configured as 1;


2. Configuration of multiple ports:

16 of 33

Port No


17/33


Fig. 16 Select to Configure Multiple Ports

Steps:

1) Select the ports;

2) Click .

The results are displayed as:

17 of 33

Press and click themouse to select


18/33


Fig. 17 Configure Multiple Ports

2.2.2.10 Configuration of the security port

Take port 10 as an example:

18 of 33

Select all ports


19/33


2.2.2.10.1 Disable the port

Fig. 18 Disable the port

Steps:

1) Select the port;

2) Click .

The results are displayed as:

19 of 33

Click the mouse

to select


20/33


Fig. 19 The Port is Disabled.

2.2.2.10.2 Configure the authorized MAC address

Fig. 20 Configure the Authorized MAC Address-1

Steps:

20 of 33

The port is

disabled.


21/33


1) Select the Learn Mode [Static];

2) Limit the number of addresses: select from 1-8;

3) Select the response to unauthorized access: none (discard only), send-alarm (send

the alarm), send-disable (send the alarm and disable the port). Select [None].

4) Click .The results are displayed as:

Fig. 21 Configure the Authorized Address-2

Steps:

1) Input the valid MAC address: 000bcd-0434fd. Note that its different from the 00-

0b-cd-04-34-fd address format under Windows;

2) Click to add the information and make it take effect immediately.

21 of 33


22/33


2.2.2.10.3 Check the unauthorized access

Fig. 22 Checking the unauthorized access

2.2.2.11 Bridging port configuration between Switches in dual-network structure

The configuration can only be set via CLI, and viewed via Web browser interface.

22 of 33

Recording the unauthorized

MAC address


23/33


Fig. 23 Before FEC Configuration

Steps:

1) The connection between the two Switches must be disconnected first;

2) In the CLI of one Switch, execute the following operation and the file

trunks.txt:

ZX-010-013-111# config t

ZX-010-013-111(config)# trunk e 1-3 trk1 fec

ZX-010-013-111(config)# end

ZX-010-013-111#

3) In the CLI of another Switch, execute the following operation:

ZX-010-013-110# config t

ZX-010-013-110(config)# trunk e 1-3 trk1 fec

ZX-010-013-110(config)# end

ZX-010-013-110#

23 of 33

Configurations ofport 1-3


24/33


4) Check the configuration:

ZX-010-013-110# show trunks

Load Balancing

Port | Name Type | Group Type

---- + -------------------------------- --------- + ----- -----

1 | not assigned 10/100TX | Trk1 FEC



ZX-010-013-111# show trunks

Load Balancing

Port | Name Type | Group Type

---- + -------------------------------- --------- + ----- -----




ZX-010-013-111#

5) Make the connection between two Switches.

The configuration results can be viewed via Web interface:

24 of 33


25/33


Fig. 24 After FEC Configuration

3 Configuration of Ethernet Switch as the Host

3.1 Switch naming

3.1.1 Cisco Catalyst IOS Switch

3.1.1.1 Operation command

1. Configuration command:

! For expansion Switch, replace the words below in blue with Expansion.

configure termin

hostname Interworking

exit

2. Return command:

!

configure termin

hostname new_name

exit3. Checking and testing configuration command:

25 of 33

Configurations of port1-3 have changed.


26/33


3.2 Configure IP address and default gateway of Switch

3.2.1 Cisco Catalyst IOS Switch IP address


! Configure IP address (Replace the words below in blue with IP address actually allocated)

interface vlan 1

ip addre 192.168.1.10 255.255.255.0

no shutdown

exit

2. Return command Cancel the configuration:

3. Checking and testing configuration command:

3.2.2 Cisco Catalyst IOS Switch default gateway

Configure the default gateway if there is.


! Replace the words below in blue with the actual gateway address

ip default-gateway 192.168.1.100

2. Return command Cancel the configuration

!

no ip default-gateway 192.168.1.100

3. Checking and testing configuration command

3.3 Configure user name and password for accessing Switch



! The password as configured here are encrypted and stored.

enable secret Configured password

service password-encryption

username oper privilege 4 password User name and password for routine O&M

username admin privilege 15 secret Configure the account password2. Return command Cancel the configuration


3.4 Configure prompts and warnings for accessing Switch


1. Configuration command

!Login prompt

banner login #

26 of 33


27/33


Any unauthorized accesses and configuration changes may

result in severe civil and criminal penalties,

and will be prosecuted!

Copyright 2003 ZTE Corporation, All rights reserved.

#

!Daily messages

banner motd #

Wellcome to ZTE Catalyst 2950 switch.

#


!

no banner login

no banner motd


3.5 Check and Record Switch OS version1. Configuration command

!

show version |

Output

3.6 Record logs of Switch

1. Configuration command

! To record syslogreplace with the actual IP address of the log server

service sequence-numbers

service timestamps log datetime

logging 192.168.1.111


!

no logging 192.168.1.111


27 of 33


28/33


3.7 Security settings

3.7.1 Configure timeout period for exit upon idling

! Configure the timeout period as 50

line vty 0 15

exec-timeout 5 0

exit

!

Return command Cancel the configuration

3.7.2 Authorize the network node permitted to access Switch

! Only the specified host is allowed to manage Switch over the network

config t

access-list 1 permit 192.168.1.170

line vty 0 15

access-class 1 in

exit


!

config t

line vty 0 15

no access-class 1 in

exit

3.7.3 Unnecessary services provided by Switch

! Disable the IP address looking up according to computer name

no ip domain-lookup

! Disable the log outputting to the console

no logging console

! Disable CDP protocol on all ports

no cdp run

! Disable HTTP service

no ip http serverReturn command Cancel the configuration

!

logging console

cdp run

4 Port Configuration of Ethernet Switch

4.1 Host port configuration


! Select the host port number

28 of 33


29/33


interface fa0/10

! Describe the server object connected to the port

description Port 10 connected to billing host of Server Farm.

! Enable the fast port function of the port

spanning-tree portfast! Control of the broadcast flow

storm-control broadcast level 1.00 0.50

no storm-control action shutdown

no storm-control action trap

!

exit

Catalyst 2900XL configuration command

! Select the host port number

interface fa0/10

! Describe the server object connected to the port

description Port 10 connected to billing host of Server Farm.

! Enable the fast port function of the port

spanning-tree portfast

! Control of the broadcast flow

port storm-control Broadcast ACTION filter

port storm-control broadcast threshold rising 300 falling 200

!exit

4.2 Security port configuration

4.2.1 Security port to filter MAC address

!

config t

! Select and temporarily close the port

interface fa0/24

description Security Port for external access.

shutdown

! Access to the port must be in static mode.

switchport mode access

!Number of MAC addresses of the authorized hosts

switchport port-security maximum 1

! Discard unauthorized data packets

switchport port-security violation protect

! Retrieve MAC address of the specified host, converting 00-00-39-6B-05-32 into

0000.396B.0532

29 of 33


30/33


switchport port-security mac-address 0000.396B.0532

! If there are MAC addresses of several hosts, repeat the above input.

.

! Enable the port

no shutdown!

Catalyst 3550 configuration command

!

config t

! Select and temporarily close the port

interface fa0/24

description Security Port for external access.

shutdown

! Access to the port must be in static mode.

switchport mode access

! Enable the security port

switchport port-security

!Number of MAC addresses of the authorized hosts

switchport port-security maximum 1

! Discard unauthorized data packets

switchport port-security violation protect

! Retrieve MAC address of the specified host, convert 00-00-39-6B-05-32 into

0000.396B.0532switchport port-security mac-address 0000.396B.0532

! If there are MAC addresses of several hosts, repeat the above input.

.

! Enable the port

no shutdown

!


! Close port-security

interface fa0/24

no switchport port-security

exit

4.2.2 Close the spanning-tree protocol on the port

!shutdown spanning-tree on interface

int fa0/24

spanning-tree bpdufilter enable

spanning-tree bpduguard enable

exit


30 of 33


31/33


!startupspanning-tree on interface

int fa0/24

spanning-tree bpdufilter disable

spanning-tree bpduguard disable

exit

4.2.3 Limit the maximum flow of the security port

config t

int fa0/24

storm-control unicast level 1 0.5

exit

4.3 Bridging port configuration between Switches in dual-network structure

! Configure FEC channel, selecting the ID from 1-6

interface port-channel 1

description FEC Channel

exit

interface range fa0/1 -3

speed 100

duplex full

channel-group 1 mode desirable

exit

Catalyst 2900XL configuration command

! Configure FEC channel, selecting the ID from 1-6

interface fa0/1


port group 1

port group 1 distribution destination

speed 100

duplex full

exit

interface fa0/2


port group 1


speed 100

duplex full

exit

interface fa0/3


31 of 33


32/33


port group 1


speed 100

duplex full

exit


4.4 Configuration of ports reserved for expansion

!Name and close the port

int fa0/17

description Reserved for expandability

shutdown

exit


Retrieve the Switch OS version information

!

show version | include VERSION

Check and test the configuration

4.5 Last step of the configuration

! Save the configuration

copy running-config startup-config

5 Maintaining Operation

5.1 How to recover the password of Switch

Catalyst 2950Password Recov

5.2 Upgrade Switch OS

"Cisco Switch

Catalyst2950 IO

32 of 33


33/33


ZXC10-MSCVLR Dual-Network Structure Operation Guide (V04.01)

Documents

Transcript of ZXC10-MSCVLR Dual-Network Structure Operation Guide (V04.01)