Out-of-Band Management

1. Type N on the Main Menu and the Network Management Configuration Menu is displayed, as shown in Figure 6-9.
   

Figure 6-9 : Network Management (SNMP) Configuration Menu

[R] READ community string

[W] WRITE community string

These menu items are used to modify the SNMP Agent's Get (Read) and Set (Write) community strings. Up to 32 characters may be entered.

A single backspace followed by a carriage return deletes the string. One of these prompts appears:

READ community string (32 characters max)        
Current ===> public
    New ===>
WRITE community string (32 characters max)
Current ===> private
    New ===>

Type the new community string at the prompt and press Return.

[1] 1st WRITE manager IP address

[2] 2nd WRITE manager IP address

[3] 3rd WRITE manager IP address

[4] 4th WRITE manager IP address

These menu items allow modifications to the Set Manager IP address table. Specify 0.0.0.0 to nullify an entry.

Type the IP address at the prompt and press Return. This prompt appears upon entering 1:

First WRITE manager IP address, in dotted quad format (nnn.nnn.nnn.nnn)        
Current setting ===> 192.9.200.201
    New setting ===>

Type the new IP address at the prompt and press Return.

Continue as necessary to add up to 4 Write managers.

[F] First TRAP community string

[A] First TRAP manager IP address

[S] Second TRAP community string

[B] Second TRAP manager IP address

[T] Third TRAP community string

[C] Third TRAP manager IP address

These options allow modifications to the Trap Manager table. Up to 3 Trap managers as well as their community strings can be set. The prompts are:

First TRAP community string (32 characters max)        
Current ===>
    New ===>

Type the trap community string at the prompt and press Return.

First TRAP manager IP address, in dotted quad format (nnn.nnn.nnn.nnn)        
Current setting ===> 192.9.200.201
    New setting ===>

Type the IP address at the prompt and press Return. Continue as necessary until you have entered all of the desired Trap manager addresses and community strings.

[U] Authentication trap generation allows the Catalyst 1700 to generate authenticationFailure traps. This prompt appears:

Authentication trap generation may be [E]nabled or [D]isabled        
Current setting ===> Enabled
    New setting ===>

Type E or D at the prompt and press Return.

[L] linkUp/linkDown trap generation allows the Catalyst 1700 to generate linkUp/linkDown traps. This prompt appears:

linkUp/linkDown trap generation may be [E]nabled or [D]isabled        
Current setting ===> Enabled
    New setting ===>

Type E or D at the prompt and press Return.

Configuring the Catalyst 1700 Ports

You can change the configuration for every port using the Ports Configuration Menu.

1. Type P on the Main Menu. The following prompt appears on the monitor.
   

Identify port: P1-P24[1-24], G25[G], F1[A], or F2[B]:        
Select [1 - 24, G, A, B]: \x7f 

Figure 6-10 : Ports Configuration Menu

[A] Address of station allows you to manually set or change the address of the port.

If the learning mode is set to Dynamic, the Catalyst 1700 will automatically learn the port address by reading the source of an incoming packet from the attached workstation.

When you set the learning mode to Secure, you can either manually enter an address or have the Catalyst 1700 dynamically learn the first address it receives. See the next menu entry, learning mode for further details.

This prompt appears on the monitor.

Address (6 hex octets: hh hh hh hh hh hh)        
Current ===> 00 C0 1D 1A 1A 1A
    New ===>

The input values 00 00 00 00 00 00 and FF FF FF FF FF FF are special.

00 00 00 00 00 00 sets the port learning mode to Dynamic learning.

FF FF FF FF FF FF places the port in Secure learning mode. The current address, if any, is secured. Otherwise, the next address learned is secured.

Enter the address at the prompt and press Return.

[L] Learning mode can also be used to change the Dynamic/Secure mode of the current port address. This prompt appears on the monitor.

Learning mode may be set to [S]ecure or [D]ynamic         
Current setting ===> Dynamic
    New setting ===>

Enter S or D at the prompt and press Return.

Setting a port to Dynamic learning unsecures the current address.

Setting the port to Secure activates the Secure mode for the current address if there is one; otherwise the next received address will be secured.

Once an address has been obtained, the Catalyst 1700 can suspend or disable the port if it receives any frame whose source address differs from this address.

[D] Description/name of port allows you to assign a descriptive name for a port. For example, port P3 may be given a name such as Hardware Engineering NetWare Server. This prompt appears:

Port name or description string (60 characters max)        
Current ===>
    New ===>

Enter the port name at the prompt and press Return.

[S] Status of port allows you to activate a port that has been suspended or disabled or to disable a port that is currently in an operational state. This prompt appears:

Port status may be set to [E]nabled or [D]isabled        
Current setting ===> Enabled
    New setting ===>

Enter E or D at the prompt and press Return.

[C] Connector type allows you to specify the active connector for the General Ethernet port. This prompt appears:

Port connector type may be set to [S]elf-sensing, [R]J45, [B]NC, or [A]UI        
Current setting ===> Self-sensing
    New setting ===>

Enter S, R, B, or A at the prompt and press Return.

If you select Self-sensing, Catalyst 1700 will determine the active connector type automatically.

If this option is selected for any port other than the General Ethernet port, this message will appear:

The connector type for this port may not be changed.        

Press any key to continue.

[E] Erase station address allows you to remove an address from a port. If the address cleared was on a secure port, the next received address will be secured. This prompt appears:

Proceed with erasing address, [Y]es or [N]o?        

Enter Y or N at the prompt and press Return. If you type Y, the port will transition into Unaddressed addressing status, and the Ports Configuration Menu screen will be redisplayed.

[N] Next port

[P] Previous port

These menu options display the menus for ports numerically preceding or following the current port selection. The Ports Configuration Menu will appear displaying the new port's information. These actions as well as Go to port allow you to cycle through the ports quickly and conveniently.

[G] Go to port allows you to enter another port number to display that port's configuration menu. This prompt is displayed:

Identify port:  P1-P24[1-24], G25[G],         F1[A], or F2[B]:          
Select: [1 - 24, G, A, B]:

Enter the port number at the prompt and press Return.

Setting Up Monitoring and Security

You can set port monitoring and Secure learning mode using the Monitoring and Security Configuration Menu.

1. Type M on the Main Menu and the Monitoring and Security Configuration Menu is displayed on the monitor, as shown in Figure 6-11.
   

Figure 6-11 : Monitoring and Security Menu

[C] Capturing frames to the monitor allows you to enable or disable the monitoring of frames received from ports you've added to the list to be captured.

Actual monitoring takes place only if all of the following 3 conditions have been met:

• this capturing enable/disable state is set
  

• the identity of a port to which monitored frames are sent has been set
  

• a non-empty Capture List exists
  

This prompt appears:

Capturing frames to the Monitor may be [E]nabled or [D]isabled        
Current setting ===> Disabled
    New setting ===>

Enter E or D at the prompt and press Return.

When monitoring is enabled, the Catalyst 1700 reverts to Store-and-Forward switching mode, regardless of the switching mode selected in the System Configuration Menu. Refer to "Catalyst 1700 Concepts Overview" for an explanation of monitoring ports.

[M] Monitor port assignment supplies the second piece of information, the identity of the port serving as the monitor port. This prompt appears:

Identify port: P1-P24 [1-24], G25[G], F1[A], F2[B], or [N]one:        
Select [1 - 24, G, A, B, N]: \x7f 

Enter the port number at the prompt and press Return.

[A] Add a port to capture list

[R] Remove a port from capture list

You can add and remove ports to and from the Capture List, and complete the third piece of information. This prompt appears:

Identify port: P1-P24 [1-24], G25[G], F1[A], F2[B]:        
Select [1 - 24, G, A, B]:

Enter the port number at the prompt and press Return.

[E] Exclude all ports from capture list

[I] Include all ports in capture list

You can quickly remove or add all ports from/to the Capture List by typing E or I at the prompt and then pressing Return.

[S] Set secure learning mode on all ports sets all ports to Secure Learning Mode. This menu action ensures that all ports that currently have valid addresses will now have these addresses secured.

For Unaddressed ports, the next address received on each port will be secured. This prompt appears:

All ports set to Secure learning mode.        
Press any key to continue.

Press any key to continue.

[D] Set dynamic learning mode on all ports. This prompt appears:

All ports set to dynamic learning mode.        
Press any key to continue

Press any key to continue.

[U] Unaddress all ports This allows you to remove all port addresses. If the address received was on a secure port, the next received address will be secured. This prompt appears:

Proceed with unaddressing all ports, [Y]es or [N]o?        

Type Y to unaddress all ports.

Press any key to continue.        

Press any key to continue.

Management Menus

The last four options on the Management Console Main Menu (depicted in Figure 6-3) allow you to display Catalyst 1700 management statistics. These options are described in the following sections.

Displaying Address Status

The Address Status Report Menu reports port learning mode information, addresses, and operational status, as shown in Figure 6-12.

Figure 6-12 : Address Status Report

Unaddressed indicates that an address has not been set or learned for the port. The network port is the only port that has multiple addresses and is shown with Network. See the next page for more details.

A secure port is identified by the designation SEC. The port status is either Enabled, Suspended or Disabled. The letters in parentheses following a Suspended (Sus) or Disabled (Dis) designation provide information on the cause of the inactive state:

• (LB) Link Beat
  

• (JAB) jabber
  

• (DUP) address duplication violation
  

• (MIS) address mismatch violation
  

• (MAN) manually disabled by management intervention.
  

You can press the X key to return to the Main Menu.

Displaying Port Statistics

The Detailed Port Statistics Menu reports frame transmit and receive statistics as shown in Figure 6-13. The report displays per port information, so you must enter the desired port at the following prompt:

Identify port: P1-P24[1-24], G25[G], F1[A], or F2[B]:        
Select [1 - 24, G, A, B]:

Enter the port number at the prompt and press Return.

Figure 6-13 : Detailed Port Statistics

You can cycle through and view the statistics of other ports using the N (Next port), P (Previous port), or G (Go to port) key. Typing X takes you back to the Main Menu.