3Com® Baseline Switch 2924-PWR PlusUser Guide3CBLSG24PWR www.3Com.com Part Number 10016095 Rev. AA Published June 2007
Configuring Trust Settings ... 169Viewing Bandwidth Settings ...
100 CHAPTER 6: CONFIGURING PORTSTo view Port Settings: 1 Click Port > Administration > Summary. The Port Administration Summary Page opens:Figur
101 10M — Indicates the port is currently operating at 10 Mbps. 100M — Indicates the port is currently operating at 100 Mbps. 1000M — Indicates the
102 CHAPTER 6: CONFIGURING PORTSDefining Port SettingsThe Port Administration Setup Page allows network managers to configure port parameters for spec
103 10 — Indicates the port is currently operating at 10 Mbps. 100 — Indicates the port is currently operating at 100 Mbps. 1000 — Indicates the po
104 CHAPTER 6: CONFIGURING PORTSViewing Port Details The Port Detail Page displays the current port parameters for specific ports. Monitor users have
105 Speed — Displays the configured rate for the port. The port type determines what speed setting options are available. Port speeds can only be con
7AGGREGATING PORTSThis section contains information for configuring Link Aggregation, which optimizes port usage by linking a group of ports together
107Viewing Link AggregationThe Link Aggregation Summary Page displays port usage by linking a group of ports together to form a single LAG. Aggregatin
108 CHAPTER 7: AGGREGATING PORTSMonitor users have no access to this page.To create Link Aggregation:1 Click Port > Link Aggregation > Create. T
109Summary Group ID — Displays the Link Aggregated Group ID. The field range is 1-8. Type — Displays the type of link aggregation. The possible fiel
A 3COM NETWORK MANAGEMENT3Com Network Supervisor...2123Com Network Director ...
110 CHAPTER 7: AGGREGATING PORTSModifying Link AggregationThe Link Aggregation Modify Page optimizes port usage by linking a group of ports together t
111Deselected ports White — Not a member of any aggregation. Grey — Displays a member of an existing aggregation or VLAN. Summary Group ID — Displa
112 CHAPTER 7: AGGREGATING PORTSRemoving Link AggregationThe Link Aggregation Remove Page allows the network manager to remove group IDs containing me
113Viewing LACP LAG ports can contain different media types if the ports are operating at the same speed. Aggregated links can be set up manually or a
114 CHAPTER 7: AGGREGATING PORTSModifying LACP LAG ports can contain different media types if the ports are operating at the same speed. Aggregated li
1152 Define the fields.3 Click . The LACP Link Aggregation is modified, and the application is updated.
8CONFIGURING VLANSVLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single unit, rega
117Viewing VLAN Details The VLAN Detail Page provides information and global parameters on VLANs configured on the system. To view VLAN details:1 Clic
118 CHAPTER 8: CONFIGURING VLANSViewing VLAN Port DetailsThe VLAN Port Detail Page provides information on VLAN configured ports. To view VLAN Port de
119Creating VLANs The VLAN Setup Page allows the network administrator to create or rename VLANs.The monitor users have no access to this page.To crea
Upgrade ... 233Initialize ...
120 CHAPTER 8: CONFIGURING VLANSRename VLAN ID — Displays the VLAN ID selected from the above list. Name — Defines the new VLAN name. Rename — Rena
121Modifying VLAN SettingsThe Modify VLAN Page allows the network manager to rename VLANs and change VLAN membership.The monitor users have no access
122 CHAPTER 8: CONFIGURING VLANS Not A Member — Indicates the interface is not a member of the VLAN. Not available for selection — Indicates the int
123Modifying Port VLAN SettingsThe Modify VLAN Port Page allows the network manager to modify port VLAN settings.The monitor users have no access to t
124 CHAPTER 8: CONFIGURING VLANS2 Select a port.3 Select the port’s membership type.4 Enter the VLAN ID to be assigned to the port.5 Click . The VLAN
9CONFIGURING IP AND MAC ADDRESS INFORMATIONThis section contains information for defining IP interfaces, and includes the following sections: Defini
126 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATIONDefining IP Addressing The IP Setup Page contains fields for assigning an IP address. The Def
Configuring ARP Settings 127Configuring ARP SettingsThe Address Resolution Protocol (ARP) converts IP addresses into physical addresses, and maps the
128 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATIONViewing ARP Settings The ARP Settings Summary Page displays the current ARP settings.To view
Configuring ARP Settings 129Defining ARP Settings The ARP Settings Setup Page allows network managers to define ARP parameters for specific interfaces
1GETTING STARTEDThis chapter contains introductory information about the 3Com® Baseline Switch 2924-PWR Plus (hereafter called the Switch) and how the
130 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATIONRemoving ARP EntriesThe ARP Settings Remove Page provides parameters for removing ARP entries
Configuring ARP Settings 131 MAC Address — Displays the station MAC address, which is associated in the ARP table with the IP address. Status — Dis
132 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATIONConfiguring Address TablesMAC addresses are stored in either the Static Address or the Dynami
Configuring Address Tables 133Viewing Address Table SettingsThe Address Table Summary Page displays the current MAC address table configuration.To vie
134 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION State — Displays the MAC address configuration method. Possible values are: Config Static
Configuring Address Tables 135 State — Filters the list of MAC addresses displayed according to the type of MAC address configuration. Possible value
136 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATIONAdding MAC Addresses to the Address TableThe Address Table Add Page allows the network manage
Configuring Address Tables 137 MAC Address — Displays the current MAC addresses listed in the MAC address table. VLAN ID — Displays the VLAN ID asso
138 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATIONDefining Aging Time The Address Table Setup Page allows the network manager to define the Add
Configuring Address Tables 139Removing Address Table Ports The Port Remove Page allows the network manager to remove ports from the Address Table.The
14 CHAPTER 1: GETTING STARTEDAbout the Switch 2924-PWRThe Switch 2924-PWR is a Gigabit Ethernet switching products that delivers flexible three-speed
140 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION State — Displays the MAC address configuration method. Possible values are: Config Static
Configuring Address Tables 141Removing MAC Addresses from the Address TableThe Address Table Remove Page allows the network manager to remove current
142 CHAPTER 9: CONFIGURING IP AND MAC ADDRESS INFORMATION Port Index — Indicates the port through which the address was learned. Aging Time — Indica
10CONFIGURING IGMP SNOOPINGThis section contains information for configuring IGMP Snooping.When IGMP Snooping is enabled globally, all IGMP packets ar
144 CHAPTER 10: CONFIGURING IGMP SNOOPINGDefining IGMP SnoopingThe IGMP Snooping Setup Page allows network managers to define IGMP Snooping parameters
145 Enable — Enables IGMP Snooping on the VLAN. VLAN — Displays the VLAN ID. Status — Displays the IGMP snooping status for the VLAN. The possible
11CONFIGURING SPANNING TREEThis section contains information for configuring STP. The Spanning Tree Protocol (STP) provides tree topography for any ar
147Viewing Spanning Tree The Spanning Tree Summary Page displays the current Spanning Tree parameters for all ports.To view Spanning Tree Summary:1 Cl
148 CHAPTER 11: CONFIGURING SPANNING TREE Root Guard — Indicates if the interface is acting as the root port of the switch. The possible field values
149 Path Cost — Indicates the port contribution to the root path cost. The path cost is adjusted to a higher or lower value, and is used to forward t
Front Panel Detail 15Front Panel Detail Figure 1 shows the front panel of the Switch 2924-PWR Plus 24-Port unitFigure 1 Switch 2924-PWR Plus 24-Port
150 CHAPTER 11: CONFIGURING SPANNING TREEDefining Spanning TreeNetwork administrators can assign STP settings to specific interfaces using the Spannin
151 BPDU Handling — Determines how BPDU packets are managed when STP is disabled on the port or device. BPDUs are used to transmit spanning tree info
152 CHAPTER 11: CONFIGURING SPANNING TREEDesignated Root Bridge ID — Identifies the Bridge priority and MAC address. Root Bridge ID — Identifies the
153Modifying Spanning TreeTheSpanning Tree Modify Page contains information for modifying Spanning Tree parameters.Monitor users have no access to thi
154 CHAPTER 11: CONFIGURING SPANNING TREE Enabled — Indicates fast link is enabled on the port. Auto — Enables the device to automatically establish
12CONFIGURING SNMPSimple Network Management Protocol (SNMP) provides a method for managing network devices. The device supports the following SNMP ver
156 CHAPTER 12: CONFIGURING SNMPDefining SNMP CommunitiesAccess rights are managed by defining communities in the SNMP Communities Setup Page. When th
157 Insert New Community — Enables adding an SNMP community.SNMP Management Management Station— Defines the management station IP address for which
158 CHAPTER 12: CONFIGURING SNMPRemoving SNMP CommunitiesThe SNMP Communities Remove Page allows the system manager to remove SNMP Communities.Monitor
159 Access Mode — Displays the access rights of the community. The possible field values are: Read Only — Management access is restricted to read-o
16 CHAPTER 1: GETTING STARTEDLED Status IndicatorsThe 2924-PWR SFP Plus 24-Port Ethernet switch provides LED indicators on the front panel for your co
160 CHAPTER 12: CONFIGURING SNMPThe SNMP Traps Setup Page contains the following fields: Recipients IP Address — Defines the IP address to which the
161The SNMP Traps Remove Page contains the following fields: Checkbox (unnamed) — When checked, selects an SNMP trap for removal. The top checkbox i
13CONFIGURING QUALITY OF SERVICEQuality of Service (QoS) provides the ability to implement QoS and priority queuing within a network. For example, cer
163Viewing CoS Settings The CoS Summary Page displays CoS default settings assigned to ports.To view CoS Settings:1 Click Device > QoS > CoS >
164 CHAPTER 13: CONFIGURING QUALITY OF SERVICEDefining CoS The CoS Setup Page contains information for enabling QoS globally. Monitor users have no ac
165Viewing CoS to Queue The CoS to Queue Summary Page contains a table that displays the CoS values mapped to traffic queues.To view CoS Values to Que
166 CHAPTER 13: CONFIGURING QUALITY OF SERVICETo configure CoS values to queues: 1 Click Device > QoS > CoS to Queue > Setup. The CoS to Queu
167Viewing DSCP to Queue The DSCP to Queue Summary Page contains fields for mapping DSCP settings to traffic queues. For example, a packet with a DSCP
168 CHAPTER 13: CONFIGURING QUALITY OF SERVICEConfiguring DSCP QueueThe DSCP to Queue Setup Page contains fields for mapping DSCP settings to traffic
169Configuring Trust SettingsThe Trust Setup Page contains information for enabling trust on the device.To enable Trust: 1 Click Device > QoS >
System Specifications 17System SpecificationsTable 3 contains the system specifications of the 2924-PWR series switch. Additional specifications can b
170 CHAPTER 13: CONFIGURING QUALITY OF SERVICEViewing Bandwidth SettingsThe Bandwidth Summary Page displays bandwidth settings for a specified interfa
171Egress Shaping Rates Status — Indicates the egress traffic shaping status for the interface. The possible field values are: Enable — Egress traf
172 CHAPTER 13: CONFIGURING QUALITY OF SERVICEDefining BandwidthSettingsThe Bandwidth Setup Page allows network managers to define the bandwidth setti
173Egress Shaping Rate Enable Egress Shaping Rate — Enables setting Egress Shaping Rates. Committed Information Rate (CIR) — Defines the CIR for the
174 CHAPTER 13: CONFIGURING QUALITY OF SERVICEDefining Voice VLANVoice VLAN allows network administrators to enhance VoIP service by configuring ports
Defining Voice VLAN 175Viewing Voice VLANs The Voice VLAN Summary Page contains information about the Voice VLAN currently enabled on the device, incl
176 CHAPTER 13: CONFIGURING QUALITY OF SERVICE Ports in the Voice VLAN — Displays the ports which are included in the Voice VLAN. The possible values
Defining Voice VLAN 177 Voice VLAN Aging Time — Defines the amount of time after the last IP phone's OUI is aged out for a specific port. The Vo
178 CHAPTER 13: CONFIGURING QUALITY OF SERVICEThe Voice VLAN Port Setup Page contains the following fields: Voice VLAN Port Mode — Specifies the Voi
Defining Voice VLAN 179Viewing Voice VLAN Port DefinitionsThe Voice VLAN Port Details Page displays the Voice VLAN port settings for specific ports. T
18 CHAPTER 1: GETTING STARTEDInstalling the SwitchThis section contains information that you need to install and set up your 3Com switch.WARNING: Safe
180 CHAPTER 13: CONFIGURING QUALITY OF SERVICETo view Voice VLAN Port Detail Settings:1 Click Device > QoS > VoIP Traffic Setting > Port Deta
Defining Voice VLAN 181To view Voice VLAN OUI Settings:1 Click Device > QoS > VoIP Traffic Setting > OUI Summary. The Voice VLAN OUI Summary
182 CHAPTER 13: CONFIGURING QUALITY OF SERVICEModifying OUI Definitions The Voice VLAN OUI Modify Page allows network administrators to add new OUIs o
Defining Voice VLAN 1832 Enter an OUI in the Telephony OUI field. 3 Enter an OUI description in the Description field. 4 Click to define a new OUI,
14MANAGING SYSTEM FILES The configuration file structure consists of the following configuration files: Startup Configuration File — Contains the com
185This section contains information for defining File maintenance and includes both configuration file management as well as device access. This sect
186 CHAPTER 14: MANAGING SYSTEM FILESBacking Up System FilesThe Backup Page permits network managers to backup the system configuration to a TFTP or H
187Restoring Files The Restore Page restores files from the TFTP or HTTP server. The monitor users have no access to this page.To restore System files
188 CHAPTER 14: MANAGING SYSTEM FILESRestore the Software ImageThe Restore Image Page permits network managers to retrieve the device software. The mo
189Activating Image Files The Active Image Page allows network managers to select and reset the Image files.To upload System files: 1 Click Administra
Setting Up for Management 19Setting Up for ManagementTo make full use of the features offered by your switch, and to change and monitor the way it wor
15MANAGING POWER OVER ETHERNET DEVICESPower over Ethernet (PoE) provides power to devices over existing LAN cabling, without updating or modifying the
191Viewing PoE Settings The Port PoE Summary Page displays system PoE information on the device and attached ports, monitoring the current power usage
192 CHAPTER 15: MANAGING POWER OVER ETHERNET DEVICES Power Used(watts) — Indicates the actual amount of power currently used by the device. The field
193Defining PoE Settings The Port PoE Setup Page allows users to configure ports for PoE. To configure Port PoE Settings: 1 Click Port > PoE > S
194 CHAPTER 15: MANAGING POWER OVER ETHERNET DEVICES Guarantee Power Summary — Displays guaranteed and total PoE power: Total PoE Available — The to
16MANAGING SYSTEM LOGSThis section provides information for managing system logs. The system logs enable viewing device events in real time, and recor
196 CHAPTER 16: MANAGING SYSTEM LOGSViewing Logs The Logging Display Page contains all system logs in a chronological order that are saved in RAM (Cac
197Configuring Logging The Logging Setup Page contains fields for defining which events are recorded to which logs. It contains fields for enabling lo
198 CHAPTER 16: MANAGING SYSTEM LOGSThe Logging Setup Page contains the following fields: Enable Local Logging — Specifies if device local logs for C
199 Enable Syslogging — Specifies if device syslogs for Cache and servers are enabled. Severity level — Specifies the minimum severity level for whi
3Com Corporation 350 Campus Drive Marlborough, MA 01752-3064Copyright © 2007, 3Com Corporation. All rights reserved. No part of this documentation ma
20 CHAPTER 1: GETTING STARTEDFigure 2 Web Interface Management over the NetworkRefer to “Setting Up Web Interface Management” on page 27.SNMP Manage
17VIEWING STATISTICSThis section contains information for viewing port statistics, and contains the following topics: Viewing Port Statistics
201Viewing Port StatisticsThe Port Statistics Summary Page contains fields for viewing information about device utilization and errors that occurred o
202 CHAPTER 17: VIEWING STATISTICS Received Bytes (Octets) — Displays the number of octets received on the interface since the device was last refres
203 Frames of 128 to 255 Bytes — Displays the number of 128 to 255 byte frames received on the interface since the device was last refreshed. Frames
18MANAGING DEVICE DIAGNOSTICSThis section contains information for viewing and configuring port and cable diagnostics, and includes the following topi
Configuring Port Mirroring 205Configuring Port MirroringPort mirroring monitors and mirrors network traffic by forwarding copies of incoming and outgo
206 CHAPTER 18: MANAGING DEVICE DIAGNOSTICSDefining Port MirroringThe Port Mirroring Setup Page contains parameters for configuring port mirroring.The
Configuring Port Mirroring 207 Select port — Selects the port for mirroring or monitoring. A port unavailable for mirroring is colored grey. Summary
208 CHAPTER 18: MANAGING DEVICE DIAGNOSTICSRemoving Port MirroringThe Port Mirroring Remove Page permits the network manager to terminate port mirrori
Viewing Cable Diagnostics 209Viewing Cable DiagnosticsThe Cable Diagnostics Summary Page contains fields for viewing tests on copper cables. Cable tes
Switch Setup Overview 21Figure 4 Initial Switch Setup and Management Flow DiagramCAUTION To protect your switch from unauthorized access, you must c
210 CHAPTER 18: MANAGING DEVICE DIAGNOSTICS Cable Fault Distance — Indicates the distance in meters from the port where the cable error occurred. La
Viewing Cable Diagnostics 211To test cab l e s :1 Click Monitoring > Cable Diagnostics > Diagnostics. The Diagnostics Page opens:Figure 104 Di
A3COM NETWORK MANAGEMENT3Com has a range of network management applications to address networks of all sizes and complexity, from small and medium bus
3Com Network Director 2133Com Network Director3Com Network Director (3ND) is a standalone application that allows you to carry out key management and
214 APPENDIX A: 3COM NETWORK MANAGEMENT3Com Enterprise Management Suite 3Com Enterprise Management Suite (EMS) delivers comprehensive management that
BDEVICE SPECIFICATIONS AND FEATURESRelated Standards The 3Com® Baseline Switch 2924-PWR Plus has been designed to the following standards: Environment
216 APPENDIX B: DEVICE SPECIFICATIONS AND FEATURESElectricalSwitch Features This section describes the device features. The system supports the follo
Switch Features 217Command Line Interface The Command Line Interface (CLI) is an interface using a serial connection that allows basic features to be
218 APPENDIX B: DEVICE SPECIFICATIONS AND FEATURESLACP LACP uses peer exchanges across links to determine, on an ongoing basis, the aggregation capabi
Switch Features 219Power over Ethernet Provides power to devices over LAN connection.RADIUS Clients RADIUS is a client/server-based protocol. A RADIUS
22 CHAPTER 1: GETTING STARTEDIP Configuration The switch’s IP configuration is determined automatically using DHCP, or manually using values you assig
220 APPENDIX B: DEVICE SPECIFICATIONS AND FEATURESVLAN Support VLANs are collections of switching ports that comprise a single broadcast domain. Packe
CPIN-OUTSNull Modem Cable RJ-45 to RS-232 25-pin PC-AT Serial Cable RJ-45 to 9-pinScreenTxDRxDGroundRTSCTSDSRDCDDTRScreenRxDTxDGroundRTSDTRCTSDSRDCDSh
222 APPENDIX C: PIN-OUTSModem Cable RJ-45 to RS-232 25-pinEthernet Port RJ-45 Pin Assignments10/100 and 1000BASE-T RJ-45 connections.Tab le 10 Pin a
Ethernet Port RJ-45 Pin Assignments 223Tab le 11 Pin assignmentsPin Number 10/100 1000Ports configured as MDIX1 Receive Data + Bidirectional Data B+
DTROUBLESHOOTINGThis section describes problems that may arise when installing the and how to resolve these issue. This section includes the following
Troubleshooting Solutions 225Problems Possible Cause SolutionCannot connect to management using RS-232 serial connectionBe sure the terminal emulator
226 APPENDIX D: TROUBLESHOOTINGNo connection and the port LED is offIncorrect ethernet cable, e.g., crossed rather than straight cable, or vice versa,
E3COM CLI REFERENCE GUIDEThis section describes using the Command Line Interface (CLI) to manage the device. The device is managed through the CLI fro
228 APPENDIX E: 3COM CLI REFERENCE GUIDE3 Press Enter. The Password prompt displays: The Login information is verified, and displays the following CLI
CLI Commands 229? The ? command displays a list of CLI commands on the device.Syntax?Default ConfigurationThis command has no default configuration.Us
Using the Command Line Interface (CLI) 23 Your DHCP server does not allow you to allocate static IP addresses. (Static IP addresses are necessary to
230 APPENDIX E: 3COM CLI REFERENCE GUIDEPing The Ping command sends ICMP echo request packets to another node on the network.Syntaxping [IP address |
CLI Commands 231Summary The Summary command displays the current IP configuration and software versions running on the device. It is intended for devi
232 APPENDIX E: 3COM CLI REFERENCE GUIDEipSetup The ipSetup command allows the user to define an IP address on the device either manually or via a DH
CLI Commands 233Upgrade The Upgrade command starts a system download and thereby allowing a system upgrade.Syntaxupgrade [TFTP Server IP Address|Desti
234 APPENDIX E: 3COM CLI REFERENCE GUIDEInitialize The Initialize command resets the device configuration to factory defaults, including the IP config
CLI Commands 235Reboot The Reboot command simulates a power cycle of the device. SyntaxrebootDefault ConfigurationThis command has no default configu
236 APPENDIX E: 3COM CLI REFERENCE GUIDELogout The Logout command terminates the CLI session.SyntaxlogoutDefault ConfigurationThis command has no def
CLI Commands 237Password The Password command changes the user’s password.SyntaxpasswordDefault ConfigurationThis command has no default configuration
FGLOSSARYAccess Control List (ACL)ACLs can limit network traffic and restrict access to certain users or devices by checking each packet for certain I
239Extensible Authentication Protocol over LAN (EAPOL) EAPOL is a client authentication protocol used by this switch to verify the network access righ
24 CHAPTER 1: GETTING STARTEDConnecting the Workstation to the Switch1 Connect the workstation to the console port using the console cable as shown in
240 APPENDIX F: GLOSSARYInternet Control Message Protocol (ICMP)A network layer protocol that reports errors in processing IP packets. ICMP is also us
241Multicast Switching A process whereby the switch filters incoming multicast frames for services for which no attached host has registered, or forwa
242 APPENDIX F: GLOSSARYRemote Authentication Dial-in User Service (RADIUS)RADIUS is a logon authentication protocol that uses software running on a c
243IP-like services. UDP packets are delivered just like IP packets – connection-less datagrams that may be discarded before reaching their targets. U
GOBTAINING SUPPORT FOR YOUR 3COM PRODUCTS3Com offers product registration, case management, and repair services through eSupport.3com.com. You must ha
Access Software Downloads 245Contact your authorized 3Com reseller or 3Com for additional product and support information. See the table of access num
246 APPENDIX G: OBTAINING SUPPORT FOR YOUR 3COM PRODUCTSTo send a product directly to 3Com for repair, you must first obtain a return materials author
Contact Us 247You can also obtain support in this region using this URL: http://emea.3com.com/support/email.htmlYou can also obtain non-urgent support
REGULATORY NOTICESFCC STATEMENT This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 o
Using the Command Line Interface (CLI) 251 Connect to the switch Console port as described in “Connecting to the Console Port” page 23.2 The command l
26 CHAPTER 1: GETTING STARTED5 Enter Summary to view a summary of allocated IP addresses. The following is an example of the display from the Summary
Setting Up Web Interface Management 27Setting Up Web Interface ManagementThis section describes how you can set up web interface management over the n
28 CHAPTER 1: GETTING STARTEDWeb Management Over the NetworkTo manage a switch using the web interface over an IP network: 1 Be sure that you know you
Default Users and Passwords 29Default Users and PasswordsIf you intend to manage the switch or to change the default passwords, you must log in with a
ABOUT THIS GUIDEThis guide provides information about the Web user interface for the 3Com® Baseline Switch 2924-PWR Plus. The Web interface is a netwo
2USING THE 3COM WEB INTERFACEThis section provides an introduction to the user interface, and includes the following topics: Starting the 3Com Web I
Starting the 3Com Web Interface 31Starting the 3Com Web Interface This section includes the following topics: Multi-Session Web Connections Accessin
32 CHAPTER 2: USING THE 3COM WEB INTERFACEAccessing the 3Com Web InterfaceThis section contains information on starting the 3Com Web interface.To acce
Understanding the 3Com Web Interface 33Figure 7 3Com Web Interface Home PageUnderstanding the 3Com Web InterfaceThe 3Com Web Interface Home Page con
34 CHAPTER 2: USING THE 3COM WEB INTERFACEFigure 8 Web Interface ComponentsThe following table lists the user interface components with their corre
Understanding the 3Com Web Interface 35Device RepresentationThe 3Com Web Interface Home Page contains a graphical panel representation of the device t
36 CHAPTER 2: USING THE 3COM WEB INTERFACEUsing Screen and Table OptionsThe 3Com Web interface contains screens and tables for configuring devices. Th
Using Screen and Table Options 37Adding Configuration InformationUser-defined information can be added to specific 3Com Web Interface pages, by openin
38 CHAPTER 2: USING THE 3COM WEB INTERFACEModifying Configuration Information1 Click Administration > System Access > Modify. The System Access
Using Screen and Table Options 39Removing Configuration Information1 Click Administration > System Access > Remove. The System Access Remove Pag
4 ABOUT THIS GUIDE Configuring VLANs — Provides information for configuring VLANs. VLANs are logical subgroups with a Local Area Network (LAN) which
40 CHAPTER 2: USING THE 3COM WEB INTERFACESaving the ConfigurationConfiguration changes are only saved to the device once the user saves the changes t
Resetting the Device 41Resetting the DeviceThe Reset Page enables resetting the device from a remote location. To prevent the current configuration fr
42 CHAPTER 2: USING THE 3COM WEB INTERFACE3 Click . The device is reset, and a prompt for a user name and password is displayed. Figure 16 User Nam
Restoring Factory Defaults 43Restoring Factory DefaultsThe Restore option appears on the Reset Page. The Restore option restores device factory defaul
44 CHAPTER 2: USING THE 3COM WEB INTERFACELogging Off the Device To log off the device:1 Click . The Logout Page opens. 2 The following message appea
3VIEWING BASIC SETTINGSThis section contains information for viewing basic settings. The 3Com Web Interface Home Page presents a device summary sectio
46 CHAPTER 3: VIEWING BASIC SETTINGSViewing Device SettingsThe Device Summary Page displays parameters for viewing general device information, includi
47 System Object ID — Displays the vendor’s authoritative identification of the network management subsystem contained in the entity. MAC Address —
48 CHAPTER 3: VIEWING BASIC SETTINGSViewing Color Keys The Color Key Page provides information regarding the RJ45 or SFP port status on the device. Th
4MANAGING DEVICE SECURITYThe Management Security section provides information for configuring system access, defining RADIUS authentication, port-base
Intended Audience 5Intended Audience This guide is intended for network administrators familiar with IT concepts and terminology.If release notes are
50 CHAPTER 4: MANAGING DEVICE SECURITYConfiguring System AccessNetwork administrators can define users, passwords, and access levels for users using t
Configuring System Access 51Viewing System Access SettingsThe System Access Summary Page displays the current users and access levels defined on the d
52 CHAPTER 4: MANAGING DEVICE SECURITYDefining System AccessThe System Access Setup Page allows network administrators to define users, passwords, and
Configuring System Access 53Modifying System AccessThe System Access Modify Page allows network administrators to modify users, passwords, and access
54 CHAPTER 4: MANAGING DEVICE SECURITYRemoving System AccessThe System Access Remove Page allows network administrators to remove users from the Syste
Defining RADIUS Clients 55Defining RADIUS ClientsRemote Authorization Dial-In User Service (RADIUS) servers provide additional security for networks.
56 CHAPTER 4: MANAGING DEVICE SECURITY Authentication Port — Defines the authentication port. The authentication port is used to verify the RADIUS se
Defining Port-Based Authentication (802.1X) 57Defining Port-Based Authentication (802.1X)Port-based authentication authenticates users on a per-port b
58 CHAPTER 4: MANAGING DEVICE SECURITYViewing 802.1X AuthenticationThe 802.1X Summary Page allows the network administrator to view port-based authent
Defining Port-Based Authentication (802.1X) 59 Current Port Control — Displays the current port authorization state. Guest VLAN — Indicates whether
CONTENTSABOUT THIS GUIDEUser Guide Overview ... 3Intended Audience...
60 CHAPTER 4: MANAGING DEVICE SECURITYDefining 802.1X AuthenticationThe 802.1X Setup Page contains information for configuring 802.1X global settings
Defining Port-Based Authentication (802.1X) 61 Enable Guest VLAN — Provides limited network access to authorized ports. If a port is denied network a
62 CHAPTER 4: MANAGING DEVICE SECURITYDefining Access Control ListsAccess Control Lists (ACLs) allow network managers to define classification actions
Defining Access Control Lists 63Viewing MAC Based ACLsThe MAC Based ACL Summary Page displays information regarding MAC Based ACLs configured on the d
64 CHAPTER 4: MANAGING DEVICE SECURITY Ethertype — Provides an identifier that differentiates between various types of protocols. Action — Indicates
Defining Access Control Lists 65 Selection ACL — Selects an existing MAC-based ACL to which rules are to be added. Create ACL — Defines a new user-d
66 CHAPTER 4: MANAGING DEVICE SECURITY Ethertype — Provides an identifier that differentiates between various types of protocols. Action — Specifies
Defining Access Control Lists 67Modifying MAC Based ACLsThe MAC Based ACL Modify Page allows the network administrator to modify an existing MAC-based
68 CHAPTER 4: MANAGING DEVICE SECURITYFor example, if the source MAC address is E0:3B:4A:C2:CA:E2 and the wildcard mask is 00:00:00:00:00:FF, the firs
Defining Access Control Lists 69Removing MAC Based ACLsThe MAC Based ACL Remove Page allows the user to remove MAC-based ACLs or MAC-based ACL rules.M
2 USING THE 3COM WEB INTERFACEStarting the 3Com Web Interface ...31Multi-Session Web Connect
70 CHAPTER 4: MANAGING DEVICE SECURITY CoS Mask — Displays the wildcard mask bits to be applied to the CoS. Ethertype — Provides an identifier that
Defining Access Control Lists 71Viewing IP Based ACLsThe IP Based ACL Summary Page displays information regarding IP-based ACLs configured on the devi
72 CHAPTER 4: MANAGING DEVICE SECURITY ICMP Code — Indicates the ICMP message code for filtering ICMP packets. ICMP packets that are filtered by ICMP
Defining Access Control Lists 73Monitor users have no access to this page.To configure IP-based ACLs: Click Device > ACL > IP Based ACL > Set
74 CHAPTER 4: MANAGING DEVICE SECURITY Source Port — Defines the source port that is used for matched packets. Enabled only when TCP or UDP are selec
Defining Access Control Lists 75 ICMP Code — If checked, enables specifying an ICMP message code for filtering ICMP packets. ICMP packets that are fi
76 CHAPTER 4: MANAGING DEVICE SECURITYwildcard mask matches all IP addresses in the range 149.36.184.0 to 149.36.184.255. A wildcard mask must not con
Defining Access Control Lists 77Modifying IP Based ACLsThe IP Based ACL Modify Page allows the network administrator to modify IP Based ACL rules.To m
78 CHAPTER 4: MANAGING DEVICE SECURITY Select from List — Selects a protocol from a list by which packets are matched to the rule. Protocol ID — Add
Defining Access Control Lists 79 ICMP — If checked, enables filtering ICMP packets for an ICMP message type. The possible values are: Select from Li
Viewing ACL Binding ... 83Configuring ACL Binding ...
80 CHAPTER 4: MANAGING DEVICE SECURITY Match IP Precedence — Matches the packet IP Precedence value to the rule. Either the DSCP value or the IP Prec
Defining Access Control Lists 81Figure 34 IP Based ACL Remove PageThe IP Based ACL Remove Page contains the following fields: ACL Name — Selects
82 CHAPTER 4: MANAGING DEVICE SECURITY Source Address — Indicates the source IP address. Source Mask — Indicates the source IP address mask. Destin
Defining Access Control Lists 83Viewing ACL Binding The ACL Binding Summary Page displays the user-defined ACLs mapped to the interfaces.To view ACL B
84 CHAPTER 4: MANAGING DEVICE SECURITYConfiguring ACL BindingThe ACL Binding Setup Page allows the network administrator to bind specific ports to MAC
Defining Access Control Lists 85Removing ACL BindingThe ACL Binding Remove Page allows the network administrator to remove user-defined ACLs from a se
86 CHAPTER 4: MANAGING DEVICE SECURITYEnabling Broadcast StormBroadcast Storm limits the amount of Multicast and Broadcast frames accepted and forward
Enabling Broadcast Storm 87Monitor users have no access to this page.To define Broadcast Storm Traffic:1 Click Device > Broadcast Storm > Setup.
5MANAGING SYSTEM INFORMATIONThis section contains information for configuring general system information, and includes the following: Viewing System
89Viewing System DescriptionThe Device View Page displays parameters for configuring general device information, including the system name, location,
9 CONFIGURING IP AND MAC ADDRESS INFORMATIONDefining IP Addressing ... 126Configurin
90 CHAPTER 5: MANAGING SYSTEM INFORMATION MAC Address — Displays the device MAC address. System Up Time — Displays the amount of time since the most
91Defining System SettingsThe following section allows system administrators to configure advanced system settings. The section includes the following
92 CHAPTER 5: MANAGING SYSTEM INFORMATIONConfiguring System NameThe System Name Page allows the Network Administrator to provide a user-defined system
93Configuring System TimeThe System Time Setup Page contains fields for defining system time parameters for the local hardware clock. Daylight Savings
94 CHAPTER 5: MANAGING SYSTEM INFORMATION Daylight Saving — Enables setting automatic Daylight Savings Time (DST) on the device, either on a non-recu
95 Minutes — The minute of the hour at which DST ends. The field range is 0-59. Month — The month of the year in which DST ends. The field range is
96 CHAPTER 5: MANAGING SYSTEM INFORMATIONSaving the Device ConfigurationThe Save Configuration Page allows the latest device configuration to be saved
97Resetting the Device The Reset Page enables resetting the device from a remote location. To prevent the current configuration from being lost, save
6CONFIGURING PORTSThis section contains information for configuring Port Settings, and includes the following sections: Viewing Port Settings Defini
99Viewing Port Settings The Port Administration Summary Page permits the network manager to view the current ports configuration. When configuring the
Comments to this Manuals