Out-of-Band Management

This chapter describes how to configure and manage your network with the management console. Table 5-1 shows the default settings for many parameters and the menus you use to set them. The sections listed under the Management Console Menu column in Figure 5-1 appear in this chapter.

Connecting the Catalyst 2800 to a Terminal

When connected to a terminal or modem, the Catalyst 2800 must be configured to the same baud rate and character format as the terminal or modem. Although the Match Baud Rate option (autobaud) matches the baud rate when the Catalyst 2800 is answering an incoming call, the Catalyst 2800 does not change from its configured rate when it is dialing out. Also,
the Catalyst 2800 only matches a rate lower than its configured rate. When it completes a call and disconnects, the Catalyst 2800 always returns to the last configured baud rate.

Following are the default RS-232 characteristics for the Catalyst 2800:

• 9600 baud

• Eight data bits

• One stop bit

• Parity: none

These characteristics can be changed using the RS-232 Port Configuration Menu. If you are using SNMP, they can be changed with the objects listed in the "RS-232 MIB (RFC1317)" section in the "In-Band Management" chapter.

Using the Catalyst 2800 Management Console

The management console is a simple menu-driven system with the following characteristics:

• To select a menu, type the letter in square brackets that precedes or follows the selection. The selected menu is displayed immediately and there is no need to press Return.

• Pressing Return is required after entry of all parameters. When pressed at the beginning of a parameter entry, Return causes the attempt to be canceled and the menu redisplayed.

• Certain menus, such as the RS-232 Interface Configuration Menu, allow activation of the given parameters as a group.

• The values and statistics displayed are the current values in use by the Catalyst 2800, except when parameters are activated as a group.

• The information you type is not case sensitive, except when entered as a descriptive string that preserves case.

• The Backspace key works as expected; it erases the character previously typed. When pressed at the beginning of a parameter entry, Backspace causes the entry to be cleared.

• Type X to return to the previous panel. Type an X at the Main Menu to exit the management console and return to the command prompt.

You can use the management console locally or with a modem. The Catalyst 2800's autobaud function can automatically match your modem settings. See the "Connecting the Catalyst 2800 to a Terminal" section in this chapter for a description of this feature.

Logging on to the Catalyst 2800

Although you can assign a password to limit access to the management console, it is not required. Press Return to display the Main Menu.

Figure 5-1: Management Console Logon Screen

Main Menu

Select an option from the Main Menu by typing the letter in brackets next to it. You do not need to press Return.

Figure 5-2: Management Console Main Menu

Use the H key to display the online Help and to change the expertise level for online prompts. Type an X to return to the Logon Security Menu. The other options of this menu are presented sequentially in the following sections.

Configuration Menus

The first eleven options on the Main Menu are for configuring the Catalyst 2800.

Console Password

Display this panel by typing C on the Main Menu. Use it to change your password, set the number of password intrusions allowed, and define how long the management console remains silent after an intrusion.

Figure 5-3: Logon Password Menu

[P] Password intrusion threshold. Enter the number of failed password attempts allowed. After this number is reached, the management console becomes quiet for a user-defined amount of time before allowing the next logon. To change the threshold value, type the new setting next to the prompt and press Return.

[S] Silent time upon intrusion detection. Enter the number of minutes this management console is to wait before allowing logon after a password intrusion. You can specify from zero to 65,500 minutes. Enter zero for no silent time.

[M] Modify password. Enter a new password of four to eight characters. You can use any character found on the keyboard but case is not considered. If you have a current password, you'll have to enter it before it can be changed. Enter the new password. Verify the password by typing it a second time and then press Return.

System Configuration

Use the System Configuration Menu to define the Catalyst 2800 system-wide parameters and to reset the system. See the "Concepts" chapter for more details on switching modes and address violations.

Display this menu by typing S on the Main Menu.

Figure 5-4: System Configuration Menu

[N] Name of system. Enter a name for the system of up to 255 characters and press Return.

[C] Contact name. Use this option to enter the name of the person or organization responsible for managing the system. You can type up to 255 characters; press Return when finished.

[L] Location. The system location is an informal indication of where the Catalyst 2800 is located. You can type up to 255 characters. Type the location and press Return.

[D] Date/time. First change the date by typing new values at the prompt and pressing Return:

Current date/time ===> Fri Sep 24 07:21:05 1995
New date (mm-dd-yy) ===>

After you press Return, you'll be prompted to enter a new time. Type the time in the given format and press Return:

Current date/time ===> Fri Sep 24 07:21:05 1995
New date (mm-dd-yy) ===> Sat Sep 25 09:35:23 1995
New time (hh:mm:ss) ===>

[S] Switching mode. Set the Catalyst 2800 switching mode to one of the three available options. Read the "Switching Modes" section in the "Concepts" chapter for a complete description of their characteristics. Type the appropriate number and press Return.

[U] Use of store-and-forward for multicast. The store-and-forward switching mode is always used for broadcast frames. Enable this option to force store-and-forward mode for multicast frames. With this option set to disabled, multicast frames adhere to the Catalyst 2800 configured switching mode. Press Return when finished.

[A] Action upon address violation. Use this option to define how the Catalyst 2800 will respond to address violations. Address violations occur when a secured port receives a source address statically assigned to another port, or when a secured port tries to learn an address that will exceed its defined maximum number of addresses. Type one of the following values at the prompt and press Return:

[G] Generate alert on address violation. Whether or not the Catalyst 2800 changes the port status when an address violation occurs, it can also send an SNMP alert to a management station. Select this option to enable or disable this feature. Type E or D at the prompt and press Return.

[M] Management console inactivity time-out. Use this option to define the length of time the management console can remain idle before it times out. After a time-out, you'll need to re-enter the password to use the application. The time-out period is set in seconds; a time-out of zero means the management console will never time-out. Enter zero or a number between 30 and 65,500 and press Return.

[R] Reset system. Use this command to reset the Catalyst 2800. All configured system parameters and static addresses will be retained; all dynamic addresses will be removed. Enter Y or N and press Return.

[F] Reset with factory defaults. Use this option to reset the Catalyst 2800 and return it to its factory settings. All static and dynamic addresses are removed, as is the IP address and all other configurations. Type a Y or N and press Return.

Network Management

This menu leads to menus for the following:

• IP Configuration

• SNMP Management

• Bridge and Spanning-Tree Protocol configuration.

Display this menu by typing N on the Main Menu.

Figure 5-5: Network Management Menu

IP Configuration

Before the Catalyst 2800 can be managed in-band, it must be configured with an IP address. Use the IP Configuration Menu to assign an IP address or use the BOOTP to assign one. You can also use this menu to assign subnet masks and to define a default gateway for the Catalyst 2800. When multiple VLANs are defined in the system, the IP Configuration Menu displays IP address and subnet mask settings for all defined VLANs. Examples of both situations are shown in Figure 5-6 and Figure 5-7.

Display this menu by typing N on the Main Menu and I on the IP Configuration Menu.

Figure 5-6: IP Configuration Menu without VLANs

IP Configuration Menu with VLANs

Identify VLAN: [1-4]:
Select [1-4]

Enter administrative IP address in dotted quad format 
(nnn.nnn.nnn.nnn):
Current setting ===> 0.  0.  0.  0 
New setting ===>

Enter IP subnet mask in dotted quad format (nnn.nnn.nnn.nnn):
Current setting ===> 0.  0.  0.  0  
New setting ===>

Type the address in dotted quad format(nnn.nnn.nnn.nnn):
Current setting ===> 0.  0.  0.  0  
New setting ===>

Network Management (SNMP) Configuration

SNMP management, based on the Catalyst 2800 Management Information Base, or MIB, allows you to define management stations authorized to set configuration parameters and receive certain traps. If you have set up virtual LANs, each VLAN, acting as a discrete bridge, contains its own bridge MIB information.

Up to four management stations can be defined to set MIB objects, and up to three stations can receive traps. If no management station is explicitly defined, any SNMP station can perform sets if the correct WRITE community string accompanies the request. Once a WRITE manager IP address is defined, however, only explicitly defined management stations can issue set operations on the switch.

You can use this panel to enable two traps and assign the management stations to receive them. Once a management station has been assigned, the Catalyst 2800 generates several other traps documented in the "Trap Clients and Traps" section in the "In-Band Management" chapter. All objects in the Catalyst 2800 MIB are documented in the Catalyst 2000 MIB Reference Manual. Catalyst 2800 SNMP support is described in the "In-Band Management" chapter.

Use the SNMP Management Menu to define the following:

• Which management stations can set Catalyst 2800 MIB objects

• The READ and WRITE community strings

• Which SNMP traps are enabled and which stations are to receive them

• The community strings that accompany traps sent by the Catalyst 2800

Display this menu by typing N on the Main Menu and S on the Network Management Menu.

Figure 5-8: Network Management (SNMP) Configuration Menu

[R] READ community string. Select this option to change the SNMP agent's Get community string. The Catalyst 2800 will automatically attach a number to the string you enter to create a unique string for each of the four possible VLANs. For example, if you enter the string FINANCE, it becomes the READ community string for VLAN1, and FINANCE2, FINANCE3, and FINANCE4 become the READ community strings for VLAN2, VLAN3, and VLAN4, respectively. Enter a string of up to 32 characters and press Return.

[W] WRITE community string. Select this option to define a WRITE community string for the Catalyst 2800. The Catalyst 2800 will automatically attach a number to the string you enter to create a unique string for each of the four possible VLANs. The example for entering a READ community string applies equally here. Enter a string of up to 32 characters and press Return.

[1] 1st WRITE manager IP address

[2] 2nd WRITE manager IP address

[3] 3rd WRITE manager IP address

[4] 4th WRITE manager IP address

Select one of these options to define the IP address of a station authorized to issue WRITE requests to the Catalyst 2800. To remove an entry, type 0.0.0.0. Type the IP address at the following prompt and press Return:

Enter First Write Manager IP address in dotted quad format (nnn.nnn.nnn.nnn):
Current setting ===> 0.  0.  0.  0  
New setting ===>

[F] First TRAP community string

[A] First manager IP address

[S] Second TRAP community string

[B] Second manager IP address

[T] Third TRAP community string

[C] Third TRAP manager IP address

A trap manager, or trap client, is a management workstation configured to receive and process traps. If a trap manager has not been defined, the Catalyst 2800 does not send any traps. Use these options to define up to three trap clients and their accompanying community strings. See the "Trap Clients and Traps" section in the "In-Band Management" chapter for more information.

Type F and a trap manager community string of up to thirty-two characters and press Return.

Type A to define the IP address for the first trap manager. Type the IP address of the station and press Return at the next prompt:

Enter First Trap Manager IP address in dotted quad format nnn.nnn.nnn.nnn:
Current setting ===> 0.  0.  0.  0  
New setting ===>

Continue with further definitions as needed.

[U] Authentication trap generation. Select this option to enable or disable authentication traps that alert a management station of SNMP requests not accompanied by a valid community string. Even if this parameter is set, no trap can be generated if no trap manager addresses have been defined. Type E or D at the prompt and press Return.

[L] LinkUp/LinkDown trap generation. The Catalyst 2800 generates the LinkDown trap whenever a port changes to a suspended or disabled state due to the following:

• Spanning-Tree Protocol

• Secure address violation (address mismatch or duplication)

• Network connection error (loss of linkbeat or jabber error)

• Management intervention

The LinkUp trap is generated whenever a port changes to enabled state due to the following:

• Presence of linkbeat

• Spanning-Tree Protocol

• Management intervention

Select this option to enable or disable the LinkUp/LinkDown trap. Type an E or D at the prompt and press Return.

Once you have defined a management workstation to receive traps, the Catalyst 2800 will generate the traps in the following list by default. These traps are described in more detail in the "Trap Clients and Traps" section in the "In-Band Management" chapter.

• coldStart

• warmStart

• logonIntruder

• switchDiagnostic

• newRoot

• TopologyChange

• addressViolation

Spanning-Tree Configuration

Use this menu to display and configure the Spanning-Tree Protocol parameters defined for the Catalyst 2800. The menu consists of an Information section that represents parameters controlled by Spanning-Tree Protocol operation as influenced by other bridges on the network, and a Settings section that defines Spanning-Tree Protocol parameters that are global to this bridge. There is also an Actions section that allows you to scroll through the virtual LANs that are each considered a separate bridge by Spanning-Tree Protocol. For more information, read the "Spanning-Tree Protocol" section in the "Concepts" chapter.

Display this menu by typing N on the Main Menu and B on the Network Management Menu. The following prompt appears if all ports do not belong to VLAN1:

An 802.1d Bridge is associated with a VLAN. Identify VLAN [1-4], to which Bridge configuration applies.
Select [1-4]:

Type a VLAN to display the menu shown in Figure 5-9. If no VLANs have been configured, all ports belong to VLAN1.

Figure 5-9: Bridge-Spanning-Tree Configuration

[S] Spanning-Tree Algorithm and Protocol. Select this option to enable or disable the Spanning-Tree Protocol, an industry standard way to ensure a loop-free configuration in the bridge topology. When Spanning-Tree Protocol is enabled, redundant ports are kept in a standby (suspended) status and are automatically enabled when needed.

This parameter applies to all VLANs.

Type E or D at this prompt and press Return.

[B] Bridge priority. Select this option to force a bridge to be selected as the root bridge, or as a designated bridge. The bridge priority is a value used in determining the identity of the root bridge. The bridge with the lowest value has the highest priority and will be selected as the root. Type a value at the prompt and press Return:

Enter bridge priority value (0 to 65535)
Current setting ===> 32768 (8000 hex) 
New setting ===>

[M] Max age when operating as root. Use this option to define the time in seconds to be used as the max age interval when this Catalyst 2800 becomes the root bridge. After this period expires, other bridges will notice that the root has not sent a configuration message and a new root will be selected. The default value is 20 seconds. Type the new number at the prompt and press Return:

Enter Max Age value (6 to 40 seconds):
Current setting ===> 	20 second(s) 
New setting ===>

[H] Hello time when operating as root. Select this option to define the hello-time interval when this Catalyst 2800 becomes the root bridge. Valid values range from one to ten seconds; the default is two seconds. Type the new value at the prompt and press Return:

Enter Hello time value (1 to 10 seconds):
Current setting ===> 	2 second(s) 
New setting ===>

[F] Forward delay when operating as root. Select this option to define the time in seconds to be used as the forward delay interval when this Catalyst 2800 becomes the root bridge. Possible values are four to thirty seconds; the default value is fifteen seconds.

Type a number at the prompt and press Return.

Enter forward delay value (4 to 30 seconds):
Current setting ===> 		15 second(s) 
New setting ===>

[A] Address aging time. Use this option to define the time, in seconds, after which an unused dynamic address is automatically removed. During a topology change, ports are aged more quickly by using the forward-delay parameter. When the topology stabilizes, this value again takes effect.

Possible values range from 10 to 1,000,000 seconds (about eleven and one-half days). The default is 300 seconds or five minutes. This value applies for all dynamic addresses in the Catalyst 2800 address table. Enter a value at the prompt and press Return:

Enter aging time (10 to 1000000 seconds):
Current setting ===> 300 second(s) 
New setting ===>

[N] Next bridge [P] Previous bridge. Use these options to scroll through the virtual LANs on the Catalyst 2800.

[G] Goto bridge. Use this option to enter the number of the VLAN whose parameters you want to display. Type a number at the prompt and press Return.

Monitoring Configuration

The Catalyst 2800 allows you to route a copy of the incoming and outgoing traffic on a port to a monitor port for analysis and troubleshooting. Use this menu to do the following:

• Turn frame-capturing on and off

• Define those ports whose frames are to be captured

• Define the port the captured frames are to be sent to.

Frame capturing cannot take place until all three of these parameters have been set.

Display this panel by typing M on the Main Menu.

Figure 5-10: Monitoring Configuration Menu

[C] Capturing frames to the monitor. Select this option to enable/disable frame capturing. Type a letter at the prompt and press Return.

[M] Monitor port assignment. Use this option to define the port where captured frames are to be sent. Type a port number at the prompt and press Return.

[A] Add ports to capture list. Use this option to add ports to the capture list. Enter the numbers according to the example in the prompt and press Return.

[D] Delete ports from the capture list. Use this option to delete port numbers from the capture list. Enter the numbers in the list you want to delete and press Return.

Virtual LAN Configuration

This menu displays the virtual LANs defined for this Catalyst 2800. You can use it to enable overlapping VLANs and display the VLAN Configuration Menu. See the "Virtual LANs" section in the "Concepts" chapter for more information and some sample configurations.

Caution Spanning-Tree may not prevent network loops in overlapping VLANs.

Display this panel by typing V on the Main Menu.

Figure 5-11: Virtual LAN Menu

[O] Overlapping of VLANs permitted. Select this option to allow membership of a port in more than one VLAN. Type a letter at the prompt and press Return.

[C] Configure VLAN. This option displays the VLAN Configuration Menu shown in Figure 5-12.

VLAN Configuration

Use this menu to define up to four separate VLANs. Every port must belong to at least one VLAN. The Catalyst 2800 is shipped with all ports belonging to VLAN1; all other VLANs are empty. For more details about the nature of Catalyst 2800 VLANs, see the "Virtual LANs" section in the "Concepts" chapter.

Display this menu by typing V on the Main Menu and C, Configure VLAN, on the Virtual LAN Configuration Menu. Before the menu is displayed, you are prompted for which VLAN to display:

Identify VLAN: [1 - 4]
Select [1 - 4]: 

Type the number of the VLAN you want to display and press Return. Note that options [A] and [D] of this menu are displayed only if overlapping of ports is permitted.

Figure 5-12: VLAN Configuration Menu

Example: 1, 2, 3, 8-15, 26
Enter port numbers:

[A] Add member ports. Use this option to add a port to this VLAN. This feature does not remove the port from a VLAN to which it previously belonged. Use M, Move, to add a port and remove it from its previous VLAN. If overlapping membership is disabled, this option will not be available. Type the numbers according to the conventions and press Return:

Example: 1, 2, 3, 8-15, 26
Enter port numbers:

[D] Delete member ports. Use this option to delete member ports from this VLAN. Note that if a port belongs to only one VLAN, it should be moved rather than deleted. If you try to delete the port from its VLAN, the Catalyst 2800 will abort the deletion and issue an error message. If overlapping membership is disabled, this option will not be available.

Type the numbers according to the conventions and press Return:

Example: 1, 2, 3, 8-15, 26
Enter port numbers:

[N] Next VLAN [P] Previous VLAN. Use these options to scroll through the available VLANs.

[G] Goto VLAN. Select this option to enter a VLAN to display. Type a number at the prompt and press Return.

Multicast Registration

By default, all multicast frames are forwarded to all ports in a VLAN. You can, however, register multicast addresses so they are sent to only the ports you define. As these packets are then not forwarded to other ports, this reduces the amount of flooding performed by the Catalyst 2800. It also opens up the possibility of using multicast packets for dedicated groupcast applications such as broadcast video. For more information on this feature, see the "Flooding Controls" section in the "Concepts" chapter.

Display this panel by typing R on the Main Menu. The first line of the menu, shown in Figure 5-13, displays the number of registered multicast addresses.

Figure 5-13: Multicast Registration Menu

[R] Register a multicast address. Select this option to register a multicast address. You are prompted for both the address and the ports to which frames destined for this address are to be forwarded.

If you enter an invalid multicast address, the prompt will refresh itself so you can try again. Invalid addresses include nonmulticast addresses, the broadcast address, and reserved multicast addresses such as those used for Scanning-Tree Protocol.

When you enter a valid address, the following prompt is displayed:

Enter the destination port numbers (separated by commas or spaces)
e.g. 2,3,6,7,19,22
Default ports ===> All ports
    New ports ===> 

Type the port numbers and press Return. Typing errors will cause the prompt to be refreshed.

[L] List all registered multicast addresses. Use this option to list all registered multicast addresses that exist in the Catalyst 2800. Addresses are listed with the port or ports to which they are assigned. Addresses with an asterisk are subject to source port filtering. See the "Forwarding, Filtering, and Flooding" section in the "Concepts" chapter for more information.

[U] Unregister a multicast address. Select this option to delete registered multicast addresses. You cannot delete those multicast addresses that are not considered registered. Type the address at the prompt and press Return.

[E] Erase all registered multicast addresses. Select this option to remove all registered multicast addresses. Press Y at the prompt.

Port Configuration

Use this menu to display the status of a port or module, enter a port description, change the port's status, and define various Spanning-Tree Protocol parameters.

Display this menu by typing P on the Main Menu. The following prompt is displayed:

Identify port: 1 to 25,[A1],[B1]
Select [1 - 25, A1, B1]:	

The menu displayed will vary depending on whether it is a 10Base-T port or an expansion slot with a 100Base-TX, 100Base-FX, or FDDI module installed.

Figure 5-14: Port Configuration Menu for Expansion Slots

The following terms are used to describe the status of the port:

[D] Description/name of port. Use this option to assign a name to the port. This could be Engineering Segment or any 60-character string. Type the port name at the prompt and press Return.

[T] Type of connector (port 25 only). Select this option to define the connector type for port 25. Type one of the following values and press Return:

S Self-sense: The Catalyst 2800 determines which connector to use

R RJ-45 connector

A AUI connector

[S] Status of port. Use this option to enable a disabled port or disable a port in an operational state. If the port is an expansion slot with a multiport repeater, you can use this option to enable or disable one repeater port while leaving the others unaffected. To enable or disable all ports of a module, use the module status parameter. The operational states a port can have are listed under the next menu option, Module status. Type E or D at the prompt and press Return.

[M] Module status. Use this option to enable a module that has been disabled, or disable a module that is currently in an enabled operational state. If the module is a multiport repeater, this parameter affects all the repeater ports. Attempts to enable a module which is disabled due to a hardware failure will not succeed, and the module will automatically return to a disabled state. Type E or D at the prompt and press Return.

The status indication shown on this panel will be one of the following:

[F] Full duplex. Select this option to enable or disable full-duplex transmission on 100-Mbps ports. Full duplex is simultaneous transmission in both directions yielding an aggregate bandwidth of 200 Mbps. As both ends must be configured for full duplex, the port cannot be connected to a repeater. A likely scenario would be to connect a 1-port 100Base-TX or 100Base-FX module to a server with a 100Base-TX adapter 2 configured for full-duplex. You could also connect it to another Catalyst 2800 or other 100Base-T switch or router configured for full-duplex operation. Type an E or a D at the prompt and press Return.

[I] Port priority. Use this option to define which port is to remain enabled by Scanning-Tree Protocol if two ports form a loop. Type a number from 0 to 255 and press Return at the prompt.

[C] Path cost. Use this option to define the Scanning-Tree Protocol path cost of the port. It is inversely proportional to the LAN speed of the network interface at the port. A high path cost means the port has low bandwidth and should not be used if possible.The default is 1000/LAN-speed-in-Mbps. The path cost of 100-Mbps ports is thus 10, and 10-Mbps ports is 100. Enter a value at the prompt and press Return. This option also affects which port is to remain enabled by Spanning-Tree Protocol if two Catalyst 2800 connections form a loop.

[A] Port addressing. Select this option to display the Port Addressing Menu.

[V] View port statistics. Select this option to display the Detailed Port Statistics Menu.

[N] Next port [P] Previous port. Use these options to scroll back and forth between ports, displaying each port's characteristics.

[G] Goto port. Select this option to display the prompt. Type one of the values and press Return.

FDDI Port Configuration

The following options are available for FDDI modules and are in addition to the other port configuration menu options discussed in the "Port Configuration" section in this chapter.

Display this panel by typing P on the Main Menu and the letter of an expansion slot containing a Catalyst 2800 FDDI module.

Ring Status. This field indicates whether the module is successfully attached to the ring or not. The two possible values are operational and non-operational.

[L] Novell SNAP frame translation. Use this option to define how you want to translate Novell SNAP FDDI frames. For more information about the translation options, refer to the Catalyst 2800 Modules User Guide. Type the number associated with your choice at the prompt and press Return.

Figure 5-15: Port Configuration for FDDI

[U] Unmatched SNAP frame destination. This option appears only when the user has selected Automatic as the SNAP translation format. You use it to select which FDDI-to-Ethernet translation to use for packets whose destinations cannot be determined from the Novell SNAP translation table. Type the number associated with your choice at the prompt and press Return.

[R] Reset FDDI module. Use this option to reset the Catalyst 2800 FDDI module. Type Y or N at the prompt and press Return.

[F] Reset FDDI with factory defaults. Select this option to restore the factory default settings on the Catalyst 2800 FDDI module. The module will be reset, and the new settings take effect immediately. Type Y or N at the prompt and press Return.

[1] Basic FDDI settings. Display the Basic FDDI Settings Menu described in the "Basic FDDI Settings" section in this chapter.

[2] Secondary FDDI settings. Display the Secondary FDDI Menu described in the "Secondary FDDI Settings" section in this chapter.

Port Addressing

Use this menu to configure address security of a port and define static unicast and multicast addresses. You can use this menu to specify how a port filters and forwards unmatched unicast addresses and non-registered multicast addresses. Although multicast address registrations are configured elsewhere, you can use this menu to specify additional source-port filtering on the multicast addresses. For more information on these features, see the "Flooding Controls" section in the "Concepts" chapter.

Display this menu by typing A on the Main Menu and responding to the prompt with the port number.

Figure 5-16: Port Addressing Menu

[S] Addressing security. Use this option to secure a port. Alerts may be generated when secured ports attempt to learn new addresses and its address table is full. The port may be disabled or suspended due to such address violations. See the "Securing Ports" section in the "Concepts" chapter for more information. Type an E or D at the prompt and press Return.

[U] Flood unknown unicasts. When a frame with an unrecognized unicast destination address is received on any port, the default action is to forward the packet to all enabled ports. Use this option to inhibit the forwarding of unknown unicasts to this port. Type E or D at the prompt and press Return.

[M] Flood unregistered multicasts. When a frame with an unregistered multicast destination address is received on any port, the default action is to forward the packet to all enabled ports. Use this option to inhibit the forwarding of unregistered multicast addresses to this port. Type E or D at the prompt and press Return.

[A] Add a static address. Use this option to add a static unicast address to the port's address table. If the address table is already full, an error message is generated. If there is room in the table, type a unicast address and press Return.

[D] Define a restricted static address. Packets with static addresses are usually accepted from any source port. A restricted static address, which corresponds to source port filtering in 802.1d, is accompanied by a list of ports that are allowed to send frames to this address and port. Type the unicast or multicast address and press Return.

You are then prompted for the port numbers allowed to send to this address. Type the port numbers at the prompt and press Return. The Catalyst 2800 checks the list of ports for typing errors and, if there are any, redisplays the prompt.

[L] List addresses. Select this option to list all dynamic and static addresses that belong to this port. The Catalyst 2800 displays up to 15 addresses per screen; static addresses are listed first.

[E] Erase an address. Use this option to erase a dynamic or static address assigned to the current port. Type the address at the prompt and press Return.

[R] Remove all addresses. Select this option to remove all dynamic and static addresses currently associated with the port. Type Y or N at the confirmation prompt and press Return.

[C] Configure port. Select this option to display the Port Menu.

[V] View port statistics. Select this option to display the Detailed Port Statistics Menu.

[N] Next port [P] Previous port. Use these options to scroll back and forth between ports, displaying each port's characteristics.

[G] Goto port. Select this option to display the prompt:

Identify port: 1 to 25[1-25], [A1], [B1]
Select [1 - 25, A, B]:	

Type one of the values and press Return to display the port.

Port Statistics Report

This display-only panel shows frame transmit and receive statistics captured by the
Catalyst 2800. The statistics and errors are displayed on a per-port basis and vary according to the installed Catalyst 2800 module. Figure 5-17 is a statistics report for an installed 100Base-T module. Figure 5-18 is a statistics report for an installed FDDI module. Press the Spacebar to update the statistics.

Display the panel by typing D on the Main Menu, or V on the Port Menu or Port Addressing Menu.

Figure 5-17: Detailed Port Statistics Report

Detailed FDDI Port Statistics

For more information on responding to the errors found here, see the "Troubleshooting" chapter. The following definitions of the types of errors found on this panel are taken from RFC 1398:

[A] Port addressing. Display the Port Addressing Menu.

[C] Port configuration. Display the Port Menu.

[R] Reset port statistics. Select this option if you want to clear this port's statistics. Type Y at the prompt and press Return.

To update the screen press the Spacebar. You can scroll through port statistics using the Return key or the following keys:

[N] Next port
[P] Previous port
[G] Goto port

Firmware Configuration

Use this menu to display the firmware version currently in use by the Catalyst 2800 and to perform firmware upgrades. You can also upgrade the firmware for Catalyst 2800 FDDI modules and download diagnostic software for use by customer support.

Upgrading Catalyst 2800 firmware is performed by downloading an upgrade file directly into Flash memory. When new firmware is downloaded, the Catalyst 2800 resets, and the new firmware begins executing immediately. To avoid writing over itself, the Catalyst 2800 must be executing out of EPROM for the firmware to be upgraded. Catalyst 2800 FDDI is always executing out of its own Flash memory, and this restriction does not apply.

Display this menu by typing F on the Main Menu.

Figure 5-19: Firmware Configuration Menu

Upgrading Catalyst 2800 Firmware with a TFTP Server

Step 1 Select option S and enter the IP address of the server where the upgrade file is located.

Step 2 Select option F and enter the name of the firmware-upgrade file.

Step 3 Make sure the Catalyst 2800 can reach the TFTP server. Select option T to initiate the TFTP transfer; the Catalyst 2800 contacts the server to get the upgrade file.

Upgrading Catalyst 2800 Firmware with a TFTP Client

Step 1 On the TFTP client workstation, establish a TFTP session with the IP address assigned to the Catalyst 2800.

Step 2 Ensure that the TFTP client is in binary transfer mode.

Step 3 At the command line type put and the filename.

Step 4 Verify the upgrade is in progress by checking the System Information section of the Firmware Upgrade Menu. The status line should read: in-progress.

Step 5 When the transfer is complete, the Catalyst 2800 resets and begins using the new firmware.

Upgrading Catalyst 2800 Firmware with XMODEM

This procedure is largely dependent on the modem software you're using.

Step 1 Select option U. If the firmware is currently running from EPROM, you are prompted to continue.

Step 2 When the first XMODEM request appears, use the appropriate command to start the transfer.

Step 3 The Catalyst 2800 resets after a successful transfer, the newly downloaded firmware begins to reset, and the Logon Security Menu is displayed.

Identifying the Source of Catalyst 2800 Firmware

Under the heading System Information you can see the past and current state of the
Catalyst 2800 firmware. The EPROM heading reflects the factory-installed firmware; the Flash heading shows the version number of the most recent Catalyst 2800 upgrade and when it was installed; option [C] displays the current firmware source; the station address displays the station used for the upgrade. If a terminal was used, it will say serial terminal. Also displayed is the status of the most recent upgrade: valid, in-progress, or invalid.

Upgrading FDDI Firmware with a TFTP Server

The options you use in this procedure depend on the expansion slot containing the
Catalyst 2800 FDDI module.

Step 1 Select option S and enter the IP address of the server where the upgrade file is located.

Step 2 Select option F and enter the name of the firmware-upgrade file.

Step 3 Select option 3 (for the A slot) or 4 (for the B slot) to initiate the TFTP transfer; the Catalyst 2800 contacts the server to get the upgrade file.

Upgrading FDDI Firmware with a TFTP Client

Step 1 On the TFTP client workstation, establish a TFTP session with the IP address assigned to the Catalyst 2800.

Step 2 Ensure that the TFTP client is in binary transfer mode.

Step 3 At the command line type put and the filename. If there are two FDDI modules installed, the following rules are applied:

• If the firmware in one of the FDDI modules is invalid, it is upgraded.

• If the new firmware has a higher version number than the firmware in slot A, then upgrade slot A.

• If slot A already has the new firmware, or a higher version, then upgrade slot B.

Step 4 Verify the upgrade is in progress by checking the System Information section of the Firmware Upgrade Menu. The status line should read: in-progress.

Step 5 When the transfer is complete, the FDDI module resets and begins using the new firmware.

Upgrading FDDI Firmware with XMODEM

This procedure is dependent on the modem software you're using.

Step 1 Select option 1 for the expansion slot A or 2 for expansion slot B.

Step 2 When the first XMODEM request appears, use the appropriate command to start the transfer.

Step 3 FDDI resets after a successful transfer.

[C] Current system firmware source. The source of the currently executing Catalyst 2800 firmware, EPROM or Flash, is displayed at the top of the menu. The Catalyst 2800 must be executing out of EPROM for the Catalyst 2800 firmware to be upgraded. Type E or F at the prompt and Return to change the source. If you press Return without typing a letter, or after clearing an entry with Backspace, the setting is not changed and the previous menu is displayed.

[S] Server: IP address or TFTP server. Type the IP address of the TFTP server where a Catalyst 2800 upgrade file is located.

[F] Filename for firmware upgrades. Type the name of the firmware upgrade file to be downloaded and press Return. The file should be on a TFTP server.

[A] Accept upgrade transfer from other hosts. You have the option of accepting, or not, upgrades from TFTP clients on the network. Use this option to enable or disable this function and press Return.

[1] FDDI XMODEM upgrade

[2] FDDI TFTP upgrade

[U] System XMODEM upgrade. Select this option to upgrade the firmware using a modem. If the Catalyst 2800 firmware is currently running from EPROM, you are prompted to continue. Type Y to begin the transfer or N to return to the Firmware Upgrade Menu. The next prompt is:

Please initiate XMODEM transfer.
Awaiting transfer . . . C

C is the first XMODEM/CR protocol request. Use the appropriate application-specific command to start the transfer. Upon successful completion of the transfer, the Catalyst 2800 resets and the newly downloaded firmware begins to execute. The Logon Security Menu is displayed.

[T] System TFTP upgrade. Use this option to upgrade the firmware from a TFTP server. The address of the server and the name of the file must already be set.

[D] Download test subsystem (XMODEM). This option is reserved for use by the customer support group and is used to download diagnostic software.

RS-232 Interface Configuration

Use this menu to define the RS-232 port's physical characteristics--baud rate, stop bits and the like--and call-features such as the time delay between outgoing calls. Note that the changes you make to parameters under the heading Group Settings are not invoked until you press G. Press C to cancel the session and return to the previous settings.

Display this panel by typing I on the Main Menu.

Figure 5-20: RS-232 Port Configuration Menu

[D] Data bits. Type the data bits value for the serial port and press Return. Valid values are 7 and 8.

[S] Stop bits. Type the stop-bits value for the serial port and press Return.

[P] Parity settings. Change the parity settings for the serial port and press Return.

[M] Match remote baud rate. Select this feature to enable the RS-232 port to automatically match the baud rate of an incoming call. The Catalyst 2800 only matches a baud rate lower than its configured baud rate. After the call, the Catalyst 2800 reverts to its configured rate.

[A] Auto answer. Select this feature to enable the auto-answer feature. Type E or D at the prompt and press Return.

[N] Number for dial-out connection. Enter the phone number the Catalyst 2800 is configured to use when dialing out. This number is dialed when the Catalyst 2800 is configured to communicate with a remote terminal upon power-up or reset. If the dial-out is unsuccessful and auto-answer is enabled, the Catalyst 2800 will cease dialing and await incoming calls.

Up to 48 characters can be entered. Use the Backspace followed by Return to delete the number. Using the format required by your modem, type the number at the prompt and press Return.

[T] Time delay between attempts. Type the amount of time in seconds between dial-out attempts and press Return. Zero disables retry.

[I] Initialization string for modem. Change the initialization string to match your modem requirements. Up to forty-eight characters can be entered. A single Backspace followed by Return deletes the current string and restores the default string E0V1M1 for Hayes-compatible modems.

Type the new string at the prompt and press Return.

[C] Cancel and restore previous group settings. Select this option to undo any new values entered for the baud rate, data bits, stop bits and parity setting. Values are restored to those last saved.

[G] Activate group settings. This option activates the setting you have entered for baud rate, data bits, stops bits, and parity settings. After selecting this option, configure the attached terminal to match the new settings. Enter Y or N at the prompt.

Usage Summaries

Use this menu to display network statistics in the form of summary displays showing all ports. Press U on the Main Menu to display this menu. These statistics are read only; press the Return key or the Spacebar to refresh them at any time.

Figure 5-21: Usage Summary Menu

Port Status Report

This panel summarizes the status of all ports as defined on the Ports Menu. Definitions of these terms can be found under the "Port Configuration" section in this chapter.

Display this panel by typing U on the Main Menu and P on the Usage Summary Menu.

Figure 5-22: Port Status Report

Module Status Report

This panel displays the status of the installed modules. Definitions of these terms can be found under the "Port Configuration" section in this chapter.

Display this panel by typing U on the Main Menu and P on the Usage Summary Menu.

Figure 5-23: Module Status Report

Port Addressing Report

This panel displays the port's address mode, dynamic or static, and how many addresses have been assigned to the port.

Display this panel by typing U on the Main Menu and A on the Usage Summary Menu.

Figure 5-24: Port Addressing Report

Exception Statistics Report

The Exception Statistics Report Menu displays the number of receive errors, transmit errors, and security violations for each port. Display this panel by typing U on the Main Menu and E on the Usage Summary Menu.

Figure 5-25: Exception Statistics Report

The figures displayed are actually totals of various kinds of errors:

[R] Reset all statistics. Select this option to reset all statistics to zero. Type a letter at the confirmation prompt and press Return.

Utilization Statistics Report

This panel displays the frame-count statistics generated by the Catalyst 2800. Display this panel by typing U on the Main Menu and U on the Usage Summary Menu.

Figure 5-26: Utilization Statistics Report

Column headings have the following meanings:

[R] Reset all statistics. Select this option to reset all statistics to zero. Type a letter at the confirmation prompt and press Return.

Bandwidth Usage Report

Use this menu to display the peak bandwidth of the network during a given period of time. The Catalyst 2800 displays a list of the last twelve recordings of maximum bandwidth, in Mbps, according to a time interval you set. Display this panel by typing U on the Main Menu and B on the Usage Summary Menu.

Figure 5-27: Bandwidth Usage Report

[T] Capture time interval. Use this option to define the time interval during which data is collected to calculate bandwidth usage.

[C] Clear table. Select this option to clear the bandwidth table. Respond to the confirmation prompt and press Return.

[R] Reset current entry. This option sets the current table entry to zero and allows new information to be recorded. The current table entry is marked by an asterisk (*). Respond to the confirmation prompt and press Return.

Basic FDDI Settings

This screen displays most of the FDDI settings but does not allow you to set any parameters. Each parameter is described below.

Display this menu by entering 1 on the Port Configuration Menu.

Figure 5-28: Basic FDDI Settings

[2] Secondary FDDI settings. Display the menu described in the "Secondary FDDI Settings" section in this chapter.

[C] Configure port. Display the menu described in the "Port Configuration" section in this chapter.

[A] Port addressing. Display the menu described in the "Port Addressing" section in this chapter.

[V] View port statistics. Display the port statistics report described in the "Port Statistics Report" section in this chapter.

[X] Exit to Main Menu.

MAC and SMT Information

Port Information

Secondary FDDI Settings

This screen contains some of the less common FDDI settings. You can change three of the parameters; all others are display only.

Display this panel by entering 2 on the Port Configuration Menu.

Figure 5-29: Secondary FDDI Settings

[N] Notification timer value. Use this option to assign a new value to fddimibSMTTNotify.

[U] Use authorization string. This selection allows the user to enable or disable authorization checking for the SMT entity. When this item is selected, the following prompt is displayed:

When the authorization string checking is enabled, the Catalyst 2800 
FDDI module will use the current authorization string to verify SMT 
requests from remote stations. This value is disabled by default.
Current ==> 30
    New ==>
Authorization string checking may be [E]nabled or [D]isabled
Current setting ==> Disabled
    	New setting ==>

[S] Authorization string. This selection allows the user to assign a new authorization string value. The authorization string is from 0 to 32 bytes in length; the length must be a multiple of 4 bytes. When this item is selected, the following prompt is displayed:

The authorization string is used in the verification of SMT requests. The length of the authorization string must be a multiple of 4 bytes.
Input the new authorization string.
Current ==> mgmtpswd
    New ==>

[1] Basic FDDI settings. Display the menu described in the "Basic FDDI Settings" section in this chapter.

[C] Configure port. Display the menu described in the "Port Configuration" section in this chapter.

[A] Port addressing. Display the menu described in the "Port Addressing" section in this chapter.

[V] View port statistics. Display the port statistics report described in the "Port Statistics Report" section in this chapter.

[X] Exit to Main Menu.

MAC and SMT Information