Cabletron Systems LANVIEWsecure User's Guide

Portable Management Applicationfor theSEHI-22/24 and SEHI-32/34User’s Guide® The Complete Networking Solution

Introduction to SPMA for the SEHI-22/24 and SEHI-32/341-4 Conventions Some windows within SPMA applications can be re-sized; those windows will displ

Conventions 1-5Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 Figure 1-2. The History Window Using the Mouse The UNIX mouse has three buttons

Introduction to SPMA for the SEHI-22/24 and SEHI-32/341-6 Getting Help Whenever possible, we will instruct you on which mouse button to employ; howev

SEHI Firmware 1-7Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 For additional information about Cabletron Systems products, visit our World

Introduction to SPMA for the SEHI-22/24 and SEHI-32/341-8 SEHI Firmware

2-1Chapter 2Using the SEHI Hub ViewNavigating through the Hub View, monitoring hub performance; managing the hubThe heart of the SPECTRUM Portable Man

Using the SEHI Hub View2-2 Using the Hub ViewNavigating Through the Hub ViewWithin the Hub View (Figure 2-1), you can click mouse buttons in different

Using the Hub View 2-3Using the SEHI Hub ViewUptimeThe time that the device has been running without interruption. The counter resets to 0 days 00:00:

Using the SEHI Hub View2-4 Using the Hub ViewClicking on the Device button displays the Device menu, Figure 2-2. Figure 2-2. SEHI Hub View Device Menu

Using the Hub View 2-5Using the SEHI Hub ViewIf you need to call Cabletron’s Technical Support about a problem with the Hub View application, you’ll n

Using the SEHI Hub View2-6 Using the Hub ViewFigure 2-4. Mousing Around a Ports DisplayHub View Port Color CodesThe Port Status boxes in the Hub View

Monitoring Hub Performance 2-7Using the SEHI Hub View• Blue indicates that the port has been disabled through management. • Yellow indicates that the

Using the SEHI Hub View2-8 Monitoring Hub Performance• Device, Module, and Port status descriptions. • Device, Module, and Port statistics, which prov

Monitoring Hub Performance 2-9Using the SEHI Hub ViewFor error type descriptions, see Checking Statistics, page 2-15.Frame SizesDisplays a percentage

Using the SEHI Hub View2-10 Monitoring Hub Performance• Active Ports displays either YES or NO for any active (green) port, indicating whether or not

Monitoring Hub Performance 2-11Using the SEHI Hub ViewDate and TimeDisplays the current date and time from the SEHI’s internal clock. Although the fiel

Using the SEHI Hub View2-12 Monitoring Hub Performance2. Press Enter or Return on the keyboard to save your changes.Active UsersDisplays the number of

Monitoring Hub Performance 2-13Using the SEHI Hub ViewChecking Port StatusYou can open a Port Status window (Figure 2-9) for any port in the SEHI-cont

Using the SEHI Hub View2-14 Monitoring Hub Performance• Inactive — The device at the other end of the cable is turned off, there is a break in the cab

Monitoring Hub Performance 2-15Using the SEHI Hub View• Multi-Mode Fiber: ST EPIM• Single-Mode Fiber: ST EPIMTopology TypeIndicates how the port is be

i Notice Cabletron Systems reserves the right to make changes in specifications and other information contained in this document without prior notice.

Using the SEHI Hub View2-16 Monitoring Hub PerformanceTo view device statistics at the Device, Module, or Port levels:1. Display the Device, Module, o

Monitoring Hub Performance 2-17Using the SEHI Hub ViewMulticast PacketsThe number of multicast packets received by this device, module, or port since

Using the SEHI Hub View2-18 Monitoring Hub Performance802.3 specifications, or a node on the net is transmitting without first listening for carrier sen

Monitoring Hub Performance 2-19Using the SEHI Hub Viewcounted as CRC errors had only CRC errors — they were of legal size (not runts or giants) and ha

Using the SEHI Hub View2-20 Managing the HubFigure 2-11. The Port Source Address ListTo view a port’s Source Address List:1. Display the Port menu by

Managing the Hub 2-21Using the SEHI Hub ViewFigure 2-12. SEHI Polling IntervalsSetting the Polling IntervalsTo set the polling intervals used by SPMA

Using the SEHI Hub View2-22 Managing the HubDevice General StatusThis polling interval controls how often the Hub View Front Panel Information — such

Managing the Hub 2-23Using the SEHI Hub View!CAUTIONWhen disabling all ports on a module, make sure you don’t disable the port through which your mana

Using the SEHI Hub View2-24 Managing the Hub

3-1Chapter 3Link/Seg TrapsWhat are Link and Segmentation traps; enabling and disabling these traps at the device, module, and port levelsAmong the tra

ii Restricted Rights Notice (Applicable to licenses to the United States Government only.) 1. Use, duplication, or disclosure by the Government is su

Link/Seg Traps3-2 What is a Link Trap?What is a Link Trap?Some Cabletron Ethernet repeater ports — including RJ45 twisted pair and fiber optic ports —

Enabling and Disabling Link/Seg Traps 3-3Link/Seg Trapsfrom the Hub View:1. Click on to display the Device menu. 2. Drag down to Link/Seg Traps and

Link/Seg Traps3-4 Enabling and Disabling Link/Seg TrapsConfiguring Link/Seg Traps for the RepeaterTo enable or disable Link and Segmentation traps for

Enabling and Disabling Link/Seg Traps 3-5Link/Seg TrapsFigure 3-3. The Module Traps Window3. In the Module Traps window, click mouse button 1 to selec

Link/Seg Traps3-6 Enabling and Disabling Link/Seg Traps2. Click mouse button 1 on ; the Port Traps window, Figure 3-4, will appear.Figure 3-4. The Po

4-1Chapter 4Repeater Redundancy This chapter describes how to configure and enable redundant circuits.Setting Network Circuit RedundancyThe redundancy

Repeater Redundancy4-2 Setting Network Circuit Redundancyspmarun r4red <IP address> <community name>The main Repeater Redundancy window, F

Setting Network Circuit Redundancy 4-3Repeater RedundancyFigure 4-2. The Channel X Redundancy Window2. If you want to change a circuit’s name or the

Repeater Redundancy4-4 Setting Network Circuit Redundancyof retries you can enter into this field is 0-16. Be sure to click on before exiting the win

Monitoring Redundancy 4-5Repeater Redundancydifferent port to be Primary or Active, the original Primary or Active port automatically resets to Backup

iii Contents Chapter 1 Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 Using the SEHI User’s Guide...

Repeater Redundancy4-6 Monitoring Redundancy1. In the All Circuits box, type in a new value in the Poll Interval field and click . Poll Interval is the

5-1Chapter 5Source AddressingDisplaying the Source Address list; setting the Ageing Time; selecting the Hash Type; effects of Source Address Locking;

Source Addressing5-2 Displaying the Source Address ListThe Repeater Source Address window, Figure 5-1, will appear.Figure 5-1. The Repeater Source Add

Displaying the Source Address List 5-3Source AddressingFigure 5-2. The Source Address List WindowThe Source Address List window displays addresses of

Source Addressing5-4 Setting the Hash TypeSetting the Ageing TimeThe source address list Ageing Time determines the minimum amount of time an inactive

Locking Source Addresses 5-5Source Addressing2. Click mouse button 1 on ; the Channel X Source Address List window, Figure 5-2 (page 5-3), will appea

Source Addressing5-6 Locking Source AddressesIn addition to activating the security measures as configured via the Security application, locking source

Configuring Source Address Traps 5-7Source Addressing• A port’s topology status (station or trunk) remains fixed while locking is in effect, even if the

Source Addressing5-8 Configuring Source Address Traps• PortTypeChanged traps are issued when a port’s topology status changes from station to trunk, or

Configuring Source Address Traps 5-9Source AddressingAs with device-level trap status, a status of Other for any module indicates that there is some co

Contentsiv Viewing and Configuring Link/Seg Traps for Ports ...3-5 Chapter 4 Repeater Redundancy Setting Network

Source Addressing5-10 Configuring Source Address TrapsFigure 5-3. The Module Source Address Traps WindowTo enable or disable port-level traps:1. In the

Finding a Source Address 5-11Source AddressingFigure 5-4. The Port Source Address Traps Window2. Click on the appropriate selection in the Trap Status

Source Addressing5-12 Finding a Source AddressTo find a source address:1. Click mouse button 1 on in the Source Address List window (Figure 5-2, page

Finding a Source Address 5-13Source AddressingFigure 5-6. Results of MAC Address Search4. Click on to exit the window.

Source Addressing5-14 Finding a Source Address

6-1Chapter 6SecurityLaunching the Security application; LANVIEWSECURE defined; configuring security; enabling security and traps at the repeater, hub, a

Security6-2 What is LANVIEWsecure?from the command line (stand-alone mode):1. From the appropriate directory, type spmarun r4sec <IP address> &l

What is LANVIEWsecure? 6-3Securitysecure port, and can be configured to secure both station and trunk ports; eavesdropper protection scrambles the data

Security6-4 What is LANVIEWsecure?Configurable violation responseBefore LANVIEW SECURE, any locked port which experienced a violation was shut down aut

What is LANVIEWsecure? 6-5SecurityForced non-secure statusWith the original version of LANVIEWSECURE, all ports except those which had been forced to

1-1 Chapter 1 Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 How to use the SEHI User’s Guide; manual conventions; contacting Cabletron Techn

Security6-6 Configuring Securityintruder will be to issue a trap after the first violation; all packets, regardless of source address, will be allowed t

Configuring Security 6-7SecurityFigure 6-2. Channel A Port Security WindowThe top portion of the window contains a list box which displays each port co

Security6-8 Configuring Securityfrom the selected ports: a trap will be sent after the first violation, but all packets, regardless of source address, w

Configuring Security 6-9SecurityFigure 6-3. The Addresses Window3. On the left side of the window, the Learned Addresses list box will display all sour

Security6-10 Configuring SecurityFigure 6-4. Add MAC Address Windowd. Enter the desired MAC address in an xx:xx:xx:xx:xx:xx format, then click on . A

Configuring Security 6-11Security4. Click to select the Reset Learned Addresses option. A confirmation window will appear; click on to reset addresses

Security6-12 Enabling Security and TrapsEnabling Security and TrapsYou can enable or disable all applicable protections by locking or unlocking ports

Enabling Security and Traps 6-13SecurityRepeater-level Security and TrapsLocking ports at the repeater, or channel, level applies all applicable secur

Security6-14 Enabling Security and TrapsFigure 6-5. Channel A Security Window3. In the Security Mode field, click mouse button 1 on the appropriate sel

Enabling Security and Traps 6-15Securitydisplayed in the list box; a repeater whose ports have different Security Mode or Trap settings will display a

Introduction to SPMA for the SEHI-22/24 and SEHI-32/341-2 Using the SEHI User’s Guide applications can be accessed from the icon menu (if you are usi

Security6-16 Enabling Security and Traps1. In the Repeater Security window, click to selected the desired repeater interface, or channel, in the scrol

Enabling Security and Traps 6-17Security5. Click on the appropriate selection in the Send Trap field to Enable or Disable traps for the selected port(s

Security6-18 Enabling Security and Traps

A-1Appendix ASEHI MIB StructureSEHI management information base configurationIETF MIB SupportIn addition to its proprietary features, the SEHI-22/24 an

SEHI MIB StructureA-2 SEHI MIB Structurecommunity names; the Chassis MGR community names are the same as those assigned via Local Management.SEHI LIMT

SEHI MIB Structure A-3SEHI MIB StructureNewer versions of devices with this component-based MIB architecture have been simplified somewhat; these devic

SEHI MIB StructureA-4 SEHI MIB Structure

Index-1IndexAactive port 4-4Active Users 2-12, 2-14, 2-20Add Circuit Address 4-4Admin Status 2-9Admin/Link Status 2-9Ageing Time 5-3, 5-4Ageing Timer

IndexIndex-2Info window 2-5intruder protection 6-2IP Address 2-3IP Services A-2LLANVIEWsecure 6-2on non-secure MIMs 6-5learnModeChange trap 6-12learnS

Index-3IndexSet Trap Status For 3-5, 3-6, 5-9, 5-10Setting Network Circuit Redundancy 4-1Source Address 2-4Source Address List 5-1source address locki

Conventions 1-3Introduction to SPMA for the SEHI-22/24 and SEHI-32/34 What’s NOT in the SEHI User’s Guide . . . The following standard SPMA tools ar

IndexIndex-4