Troubleshooting.A-1

Troubleshooting Chart. A-1 Upgrading Firmware via the Serial Port. A-2

Pin Assignments.B-1

Console Port Pin Assignments. B-1 DB-9 Port Pin Assignments. B-1 Console Port to 9-Pin DTE Port on PC. B-2 Console Port to 25-Pin DTE Port on PC. B-2

Glossary Index

CHAPTER 1 ABOUT THIS GUIDE

Audience

This guide is for administrators with a working knowledge of network managemen and who are familiar with switching and networking concepts. Use this guide for the EdgeIron 24G, 4802CF, and 2402 CF. See pg 2-13 for features.

Nomenclature

This guide uses the following typographical conventions to show information:

Italic code

highlights the title of another publication and occasionally emphasizes a word or phrase. shows text that must be entered exactly as it appears in this guide. emphasizes an important fact or calls your attention to a dependency.

How to Get Help

If you need assistance, Foundry Networks is committed to ensuring that your investment in our products remains cost-effective by offering a variety of support options.
Foundry Networks Technical Support
Foundry Networks technical support will ensure that the fast and easy access that you have come to expect from your Foundry Networks products will be maintained.
February Foundry Networks, Inc. 1-1
EDGEIRON 24G USER GUIDE Web Access
Point your browser to the following URL: http://www.foundrynetworks.com. Navigate to Services/Technical Support. Click the Login button, then enter your user name and password to gain access to the Foundry support site.

E-mail Access

Technical requests can also be sent to the e-mail address: support@foundrynet.com

Telephone Access

1.877.TURBOCALL (887.2622): United States 1.408.586.1881: Outside the United States

Warranty Coverage

Contact Foundry Networks using any of the methods listed above for information about the standard and extended warranties.

Related Publications

Refer to the appropriate installation guide for instructions on how to install the switch.
CHAPTER 2 SWITCH MANAGEMENT

Connecting to the Switch

Configuration Options
The EdgeIron includes a built-in network management agent. The agent offers a variety of management options, including SNMP, RMON and a Web-based interface. A PC may also be connected directly to the switch for configuration and monitoring via a command line interface (CLI). Note: The IP address for this switch is assigned via DHCP by default. To change this address, see Setting an IP Address on page 2-6. The switchs HTTP Web agent allows you to configure switch parameters, monitor port connections, and display statistics graphically using a standard Web browser such as Netscape Navigator version 6.2 and higher or Microsoft IE version 5.0 and higher. The switchs Web management interface can be accessed from any computer attached to the network. The switchs management agent is based on SNMP (Simple Network Management Protocol). This SNMP agent permits the switch to be managed from any system in the network using management software. The CLI program can be accessed by a direct connection to the RS-232 serial console port on the switch, or remotely by a Telnet connection over the network.

Home Page

When your Web browser connects with the switchs Web agent, the home page is displayed as shown below. The home page displays the Main Menu on the left side of the screen and System Information on the right side. The Main Menu links are used to navigate to other menus, and display configuration parameters and statistics.
NAVIGATING THE WEB BROWSER INTERFACE
Configurable parameters have a dialog box or a drop-down list. Once a configuration change has been made on a page, be sure to click on the Apply or Apply Changes button to confirm the new setting. The following table summarizes the Web page configuration buttons.
Button Revert Refresh Apply Apply Changes Action Cancels specified values and restores current values prior to pressing Apply or Apply Changes. Immediately updates values for the current page. Sets specified values to the system. Sets specified values to the system.
Notes: 1. To ensure proper screen refresh, be sure that Internet Explorer 5.x is configured as follows: Under the menu Tools / Internet Options / General / Temporary Internet Files / Settings, the setting for item Check for newer versions of stored pages should be Every visit to the page. 2. When using Internet Explorer 5.0, you may have to manually refresh the screen after making configuration changes by pressing the browsers refresh button.

Panel Display

The Web agent displays an image of the switchs ports, indicating whether each link is up or down. Clicking on the image of a port opens the Port Configuration page as described on page 3-35.

MAIN MENU

Main Menu
Using the onboard Web agent, you can define system parameters, manage and control the switch, and all its ports, or monitor network conditions. The following table briefly describes the selections available from this program.
Menu System System Information IP Passwords Provides basic system description, including contact information Sets the IP address for management access 3-8 3-10 3-15 3-20 3-22 3-24 3-26 3-29 Description Page
Assigns a new password for the logon user name 3-13
Athentication Settings Configures RADIUS and TACACS+ authentication parameters HTTPS Settings SSH Settings Firmware Configuration Reset Bridge Extension Switch Information Port Port Information Trunk Information Port Configuration Trunk Configuration Displays port connection status Displays trunk connection status Configures port connection settings Configures trunk connection settings Configures secure HTTP settings. Configures Secure Shell settings. Manages code image files Manages switch configuration files Restarts the switch Shows the configuration for bridge extension commands; enables GVRP multicast protocol

Trunk LACP Configuration Trunk Configuration SNMP SNMP Configuration Configures community strings and related trap functions. SNMP IP Filtering IGMP IGMP Configuration Multicast Router Port Information Static Multicast Router Port Configuration IP Multicast Registration Table Enables multicast filtering; configures parameters for multicast query Displays the ports that are attached to a neighboring multicast router/switch for each VLAN ID 3-97 3-100 Configures IP filtering for SNMP access. 3-92 3-94 3-88 3-90
Assigns ports that are attached to a neighboring 3-101 multicast router/switch Displays all multicast groups active on this switch, including multicast IP addresses and VLAN ID 2003 Foundry Networks, Inc. 3-103
Menu IGMP Member Port Table Statistics Description Page
Indicates multicast addresses associated with the 3-102 selected VLAN Lists Ethernet and RMON port statistics 3-105
Displaying System Information
You can easily identify the system by providing a descriptive name, location and contact information.

Command Attributes

System Name Name assigned to the switch system. Object ID MIB II object ID for switchs network management subsystem. Location Specifies the system location. Contact Administrator responsible for the system. System Up Time Length of time the management agent has been up. MAC Address* The physical layer address for the switch. Web server* Shows if management access via HTTP is enabled or disabled. Web server port* Shows the TCP port number used by the Web interface. Web secure server* Shows if management access via secure HTTP (HTTPS) is enabled or disabled.
2003 Foundry Networks, Inc. February 2003
Web secure server port* Shows the TCP port number used by the HTTPS server. POST result* Shows results of the power-on self-test

*: CLI Only

Web Click System/System Information. Specify the system name, location, and contact information for the system administrator, then click Apply. (This page also includes a Telnet button that allows you to access the Command Line Interface via Telnet.)
CLI Specify the hostname, location and contact information.
Console(config)#hostname Test Switch Console(config)#snmp-server location TPS - 3rd Floor Console(config)#snmp-server contact Chris Console#show system System description: Foundry Networks EdgeIron 24G System OID string: 1.3.6.1.4.1.1991.1.5.1.1.4.1.1 System information System Up time: 0 days, 2 hours, 4 minutes, and 7.13 seconds System Name : Test Switch System Location : TPS - 3rd Floor System Contact : Chris MAC address : 00-30-f1-47-58-3a Web server : enable Web server port : 80 Web secure server : enable Web secure server port : 443 POST result --- Performing Power-On Self Tests (POST) --UART Loopback Test. PASS Timer Test.. PASS DRAM Test.. PASS I2C Initialization. PASS Runtime Image Check.. PASS PCI Device Check.. PASS Switch Driver Initialization. PASS Switch Internal Loopback Test.. PASS ------------------- DONE -------------------Console# 4-27 4-61 4-60 4-47

Manual Configuration

Web Click System/IP. Specify the management interface, IP address and default gateway, then click Apply.
CLI Specify the management interface, IP address and default gateway.
Console#config Console(config)#interface vlan 1 Console(config-if)#ip address 10.2.13.30 255.255.255.0 Console(config-if)#exit Console(config)#ip default-gateway 192.168.1.254 Console(config)#

4-86 4-68 4-71

Using DHCP/BOOTP
If your network provides DHCP/BOOTP services, you can configure the switch to be dynamically configured by these services. Web Click System/IP. Specify the Management VLAN, set the IP Address Mode to DHCP or BOOTP. Then click Apply to save your changes. The switch will broadcast a request for IP configuration settings on the next power reset. Otherwise, you can click Restart DHCP to immediately request a new address. If you lose your management connection, use a console connection and enter show ip interface to determine the new switch address.

SECURITY

CLI Specify the management interface, and set the IP Address Mode to DHCP or BOOTP.
Console(config)#interface vlan 1 Console(config-if)#ip address dhcp Console(config-if)#end Console#ip dhcp restart Console#show ip interface IP address and netmask: 10.1.0.54 255.255.255.0 on VLAN 1, and address mode: User specified. Console# 4-86 4-68 4-70 4-71
Renewing DCHP DHCP may lease addresses to clients indefinitely or for a specific period of time. If the address expires or the switch is moved to another network segment, you will lose management access to the switch. In this case, you can reboot the switch or submit a client request to restart DHCP service. Web If the address assigned by DHCP is no longer functioning, you will not be able to renew the IP settings via the Web interface. You can only restart DHCP service via the Web interface if the current address is still available. CLI Enter the following command to restart DHCP service.
Console#ip dhcp restart 4-70

Security

Configuring the Logon Password
The guest only has read access for most configuration parameters. However, the administrator has write access for parameters governing the onboard agent. You should therefore assign a new administrator password as soon as possible, and store it in a safe place. (If for some reason your password is lost, you can reload the factory deafults file to restore the default passwords as described in Troubleshooting Chart on page A-1.)
February Foundry Networks, Inc. 3-13
The default guest name is guest with the password guest. The default administrator name is admin with the password admin. Note that user names can only be assigned via the CLI.
User Name* The name of the user. (Maximum length: 8 characters, case sensitive; maximum number of users: 16) Access Level* Specifies the user level. (Options: 0 - Normal, 15 - Privileged.) Password Specifies the user password. (Range: 0-8 characters plain text, case sensitive)

* CLI only.

Web Click System/Passwords. To change the password for the current user, enter the old password, then enter the new password, confirm it by entering it again, then click Apply.
CLI Assign a user name to access-level 15 (i.e., administrator), then specify the password.
Console(config)#username bob access-level 15 Console(config)#username bob password 0 smith Console(config)# 4-27
SECURITY Configuring RADIUS/TACACS Logon Authentication
You can configure this switch to authenticate users logging into the system for management access using local, RADIUS, or TACACS+ authentication methods. RADIUS and TACACS+ are logon authentication protocols that use software running on a central server to control access to RADIUS-aware or TACACS+-aware devices on the network. An authentication server contains a database of multiple user name/ password pairs with associated privilege levels for each user or group that require management access to a switch. Like RADIUS, Terminal Access Controller Access Control System Plus (TACACS+) is a system that uses a central server to control authentication for access to switches on the network. RADIUS uses UDP while TACACS+ uses TCP. UDP only offers best effort delivery, while TCP offers a connection-oriented transport. Also, note that RADIUS encrypts only the password in the access-request packet from the client to the server, while TACACS+ encrypts the entire body of the packet. Note: When setting up privilege levels on a RADIUS server, remember that level 0 allows guest (i.e., Normal Exec) access to the switch. Only level 15 allows administrator (i.e., Privileged Exec) access.

Managing Firmware

You can upload/download firmware to or from a TFTP server. By saving runtime code to a file on a TFTP server, that file can later be downloaded to the switch to restore operation. You can also set the switch to use new firmware without overwriting the previous version.
TFTP Server IP Address The IP address of a TFTP server. Destination File Name File names are case-sensitive, should be from 1 to 31 characters, not contain slashes (\ or /), and the leading letter of the file name should not be a period (.). (Valid characters: A-Z, a-z, 0-9,., -, _)
Note: The maximum number of runtime code files is 2.
Downloading System Software from a Server
When downloading runtime code, you can specify the Destination File Name to replace the current image, or first download the file using a different name from the current runtime code file, and then set the new file as the startup file. Web Click System/Firmware. Enter the IP address of the TFTP server, enter the file name of the software to download, select a file on the switch to overwrite or specify a new file name, then click Transfer from Server.

MANAGING FIRMWARE

If you download specifying a new destination file name, select the new file from the drop-down box for the operation code used at startup, and then click Apply Changes. To start the new firmware, reboot the system.
CLI Enter the IP address of the TFTP server, select config or opcode file type, then enter the source and destination file names, set the new file to start up the system, and then restart the switch.
Console#copy tftp file TFTP server ip address: 10.1.0.99 Choose file type: 1. config: 2. opcode: <1-2>: 2 Source file name: v10.bix Destination file name: V10000 / Console#config Console(config)#boot system opcode: V10000 Console(config)#exit Console#reload 4-18

4-24 4-15

CONFIGURING THE SWITCH Saving or Restoring Configuration Settings
You can upload/download configuration settings to/from a TFTP server. The configuration file can be later downloaded to restore the switchs settings.
Note: The maximum number of user-defined configuration files is limited only by available Flash memory space. You can save the configuration file under a new file name and then set it as the startup file, or you can specify the current startup configuration file as the destination file to directly replace it. Note that the file Factory_Default_Config.cfg can be copied to the TFTP server, but cannot be used as a destination file name on the switch. Web Click System/Configuration. Enter the IP address of the TFTP server, enter the name of the file to download, select a file on the switch to overwrite or specify a new file name, and then click Transfer from Server.

Creating VLANs

Use The VLAN Static List to create or remove VLAN groups. To propagate information about VLAN groups used on this switch to external network devices, you must specify a VLAN ID for each of these groups.
Current Lists all the current VLAN groups created for this system. Up to 255 VLAN groups can be defined. VLAN 1 is the default untagged VLAN. New Allows you to specify the name and numeric identifier for a new VLAN group. (The VLAN name is only used for management on this system; it is not added to the VLAN tag.)
VLAN ID ID of configured VLAN (1-4094, no leading zeroes). Name Name of the VLAN (1 to 32 characters). Status Shows if this VLAN is enabled or disabled (Web). - Enable: VLAN is operational. - Disable: VLAN is suspended; i.e., does not pass packets. State Shows if this VLAN is enabled or disabled (CLI). - Active: VLAN is operational. - Suspend: VLAN is suspended; i.e., does not pass packets. Add Adds a new VLAN group to the current list. Remove Removes a VLAN group from the current list. If any port is assigned to this group as untagged, it will be reassigned to VLAN group 1 as untagged.
Web Click VLAN/VLAN Static List. Enter the VLAN ID and VLAN name, mark the Enable checkbox to activate the VLAN, and then click Add.
CLI This example creates a new VLAN.
Console(config)#vlan database Console(config-vlan)#vlan 5 name R&D media ethernet state active Console(config-vlan)# 4-123 4-124
Adding Interfaces Based on Membership Type
Use the VLAN Static Table to modify the settings for an existing VLAN. You can add or delete port members for a VLAN, disable or enable VLAN tagging for any port, or prevent a port from being automatically added to a VLAN via the GVRP protocol. (Note that VLAN 1 is the default untagged VLAN containing all ports on the switch, and cannot be modified via this page.) You can use the VLAN Static Table to assign ports to the specified VLAN group as an IEEE 802.1Q tagged port. Assign ports as tagged if they are connected to 802.1Q VLAN-compliant devices. If the port is connected to VLAN-unaware devices, frames will be passed to the untagged VLAN group this port has been assigned to under the VLAN Port Configuration page.
Port Port identifier. Trunk Trunk identifier. VLAN ID of configured VLAN (1-4094, no leading zeroes). Name Name of the VLAN (1 to 32 characters). Status Shows if this VLAN is enabled or disabled. - Enable: VLAN is operational. - Disable: VLAN is suspended; i.e., does not pass packets.

Notes: 1. All systems on the subnet must support the same version. 2. Some attributes are only enabled for IGMPv2, including IGMP Report Delay and IGMP Query Timeout. Web Click IGMP/IGMP Configuration. Adjust the IGMP settings as required, and then click Apply. (The default settings are shown below.)
CLI This example modifies the settings for multicast filtering, and then displays the current status.
Console(config)#ip igmp snooping Console(config)#ip igmp snooping querier Console(config)#ip igmp snooping query-count 10 Console(config)#ip igmp snooping query-interval 100 Console(config)#ip igmp snooping query-max-response-time 20 Console(config)#ip igmp snooping query-time-out 300 Console(config)#ip igmp snooping version 2 Console(config)#exit Console#show ip igmp snooping Igmp Snooping Configuration ---------------------------------------------Service status : Enabled Querier status : Enabled Query count : 10 Query interval : 100 sec Query max response time : 20 sec Query time-out : 300 sec IGMP snooping version : Version 2 Console# 4-140 4-144 4-145 4-146 4-146 4-147 4-142 4-142
CONFIGURING THE SWITCH Interfaces Attached to a Multicast Router
Multicast routers use the information obtained from IGMP Query, along with a multicast routing protocol such as DVMRP, to support IP multicasting across the Internet. These routers may be dynamically discovered by the switch or statically assigned to an interface on the switch.
Displaying Interfaces Attached to a Multicast Router
Command Attributes VLAN ID ID of configured VLAN (1-4094). Multicast Router List Multicast routers dynamically discovered by this switch or those that are statically assigned to an interface on this switch.
Web Click IGMP/Multicast Router Port Information. Select the required VLAN ID from the scroll-down list to display the associated multicast routers.
CLI This example shows that Port 11 has been statically configured as a port attached to a multicast router.
Console#show ip igmp snooping mrouter vlan 1 VLAN M'cast Router Port Type ---- ------------------ ------1 Eth 1/11 Static 4-149
Specifying Interfaces Attached to a Multicast Router
Depending on your network connections, IGMP snooping may not always be able to locate the IGMP querier. Therefore, if the IGMP querier is a known multicast router/switch connected over the network to an interface (port or trunk) on your switch, you can manually configure that interface to join all the current multicast groups. This can ensure that multicast traffic is passed to all the appropriate interfaces within the switch. Command Attributes Interface Activates the Port or Trunk scroll down list. VLAN ID Selects the VLAN to propagate all multicast traffic coming from the attached multicast router/switch. Port or Trunk Specifies the interface attached to a multicast router.

Level Argument emergencies alerts critical errors warnings notifications informational debugging Level Description System unusable Critical conditions Error conditions Warning conditions Normal but significant condition Informational messages only Debugging messages Syslog Definition LOG_EMERG LOG_CRIT LOG_ERR LOG_WARNING LOG_NOTICE LOG_INFO LOG_DEBUG
Immediate action needed LOG_ALERT
Default Setting Flash: errors (level 3 - 0) RAM: warnings (level 7 - 0) Command Mode Global Configuration Command Usage The message level specified for Flash memory must be a higher priority (i.e., numerically lower) than that specified for RAM. Example
Console(config)#logging history ram 0 Console(config)#

logging host

Use this command to add a syslog server host IP address that will receive logging messages. Use the no form to remove a syslog server host. Syntax logging host host_ip_address no logging host host_ip_address host_ip_address - The IP address of a syslog server. Default Setting None Command Mode Global Configuration Command Usage By using this command more than once you can build up a list of host IP addresses. The maximum number of host IP addresses allowed is five.
Console(config)#logging host 10.1.0.3 Console(config)#

logging facility

Use this command to set the facility type for remote logging of syslog messages. Use the no form to return the type to the default. Syntax logging facility type no logging facility type type - A number that indicates the facility used by the syslog server to dispatch log messages to an appropriate service. (Range: 16-23) Default Setting 23 Command Mode Global Configuration Example
Console(config)#logging facility 19 Console(config)#
COMMAND LINE INTERFACE logging trap
Use this command to limit syslog messages saved to a remote server based on severity. Use the no form to return the remote logging of syslog messages to the default level. Syntax logging trap level no logging trap level level - One of the level arguments listed below. Messages sent include the selected level up through level 0.
Default Setting Level 3 - 0 Command Mode Global Configuration Example
Console(config)#logging trap 4 Console(config)#
SYSTEM MANAGEMENT COMMANDS clear logging
Use this command to clear messages from the log buffer. Syntax clear logging [flash | ram] flash - Event history stored in Flash memory (i.e., permanent memory). ram - Event history stored in temporary RAM (i.e., memory flushed on power reset). Default Setting None Command Mode Privileged Exec Example
Console#clear logging Console#
Related Commands show logging

show logging

Use this command to display the logging configuration for system and event messages. Syntax show logging {flash | ram | trap} flash - Event history stored in Flash memory (i.e., permanent memory). ram - Event history stored in temporary RAM (i.e., memory flushed on power reset). trap - Messages sent to remote syslog servers.

Related Commands show startup-config

show system

Use this command to display system information. Default Setting None Command Mode Normal Exec, Privileged Exec
Console#show system System description: EdgeIron 24G System OID string: 1.3.6.1.4.1.202.20.25 System information System Up time: 0 days, 1 hours, 23 minutes, and 44.61 seconds System Name : EdgeIron 24G switch System Location : Boston System Contact : Charles MAC address : 00-30-f1-47-58-3a Web server : enable Web server port : 80 POST result : UART Loopback Test..PASS Timer Test..PASS DRAM Test..PASS I2C Initialization..PASS Runtime Image Check..PASS PCI Device Check..PASS Switch Driver Initialization.PASS Switch Internal Loopback Test.PASS ------------------- DONE -------------------Console#

show users

Shows all active console and Telnet sessions, including user name, idle time, and IP address of Telnet client. Default Setting None Command Mode Normal Exec, Privileged Exec
Console#show users Username accounts: Username Privilege -------- --------guest 0 admin 15 Online users: Line Username Idle time (h:m:s) Remote IP addr. ----------- -------- ----------------- --------------* 0 console admin 0:00:vty 0 admin 0:04:37 10.1.0.19 Console#
Use this command to display hardware and software version information for the system. Default Setting None Command Mode Normal Exec, Privileged Exec Example
Console#show version Unit1 Serial number Service tag Hardware version Number of ports Main power status Redundant power status Agent(master) Unit id Loader version Boot rom version Operation code version Console#
:A217056372 :[NONE] :R0C :24 :up :not present :1 :1.0.0.0 :1.0.0.0 :1.0.1.4

Authentication Commands

You can configure the switch to authenticate users logging into the system for management access using local or authentication-server methods. Remote Authentication Dial-in User Service (RADIUS) and Terminal Access Controller Access Control System Plus (TACACS+) are logon authentication protocols that use software running on a central server to control access to RADIUS-aware or TACACS+-aware devices on the network. An authentication server contains a database of multiple user name/password pairs with associated privilege levels for each user or group that require management access to a switch.

Example To set the password threshold to five attempts, enter this command:
Console(config-line)#password-thresh 5 Console(config-line)#
Related Commands silent-time

silent-time

Use this command to set the amount of time the management console is inaccessible after the number of unsuccessful logon attempts exceeds the threshold set by the password-thresh command. Use the no form to remove the silent time value. Syntax silent-time seconds no silent-time seconds - The number of seconds to disable console response. (Range: 0-65535; 0: no silent-time) Default Setting The default value is no silent-time. Command Mode Line Configuration Command Usage If the password threshold was not set with the password-thresh command, silent-time begins after the default value of three failed logon attempts.
Example To set the silent time to 60 seconds, enter this command:
Console(config-line)#silent-time 60 Console(config-line)#
Related Commands password-thresh

databits

Use this command to set the number of data bits per character that are interpreted and generated by the console port. Use the no form to restore the default value. Syntax databits {7 | 8} no databits 7 - Seven data bits per character. 8 - Eight data bits per character. Default Setting 8 data bits per character Command Mode Line Configuration Command Usage The databits command can be used to mask the high bit on input from devices that generate 7 data bits with parity. If parity is being generated, specify 7 data bits per character. If no parity is required, specify 8 data bits per character.
Example To specify 7 data bits, enter this command:
Console(config-line)#databits 7 Console(config-line)#

Related Commands parity

parity
Use this command to define generation of a parity bit. Use the no form to restore the default setting. Syntax parity {none | even | odd} no parity none - No parity even - Even parity odd - Odd parity Default Setting No parity Command Mode Line Configuration Command Usage Communication protocols provided by devices such as terminals and modems often require a specific parity bit setting. Example To specify no parity, enter this command:

Console(config)#mac-address-table static 00-e0-29-94-34-de ethernet 1/1 vlan 1 delete-on-reset Console(config)#

show mac-address-table

Use this command to view classes of entries in the bridge-forwarding database. Syntax show mac-address-table [address mac-address [mask]] [interface interface] [vlan vlan-id] [sort {address | vlan | interface}] mac-address - MAC address. mask - Bits to match in the address. interface ethernet unit/port - unit - This is device 1. - port - Port number. port-channel channel-id (Range: 1-4)
vlan-id - VLAN ID (Range: 1-4094) sort - Sort by address, vlan or interface. Default Setting None Command Mode Privileged Exec Command Usage The MAC Address Table contains the MAC addresses associated with each interface. Note that the Type field may include the following types: - Learned - dynamic address entries - Permanent - static entry - Delete-on-reset - static entry to be deleted when system is reset The mask should be hexadecimal numbers (representing an equivalent bit mask) in the form xx-xx-xx-xx-xx-xx that is applied to the specified MAC address. Enter hexadecimal numbers, where an equivalent binary bit 0 means to match a bit and 1 means to ignore a bit. For example, a mask of 00-00-00-00-00-00 means an exact match, and a mask of FF-FF-FF-FF-FF-FF means any. The maximum number of address entries is 8191. Example
Console#show mac-address-table Interface Mac Address Vlan Type --------- ----------------- ---- ----------------Eth 1/ 1 00-e0-29-94-34-de 1 Delete-on-reset Console#
COMMAND LINE INTERFACE clear mac-address-table dynamic
Use this command to remove any learned entries from the forwarding database and to clear the transmit and receive counts for any static or system configured entries. Default Setting None Command Mode Privileged Exec Example
Console#clear mac-address-table dynamic Console#
mac-address-table aging-time
Use this command to set the aging time for entries in the address table. Use the no form to restore the default aging time. Syntax mac-address-table aging-time seconds no mac-address-table aging-time seconds - Time is number of seconds (17-2184). Default Setting 300 seconds Command Mode Global Configuration Command Usage The aging time is used to age out dynamically learned forwarding information.

Command Usage You can mirror traffic from any source port to a destination port for real-time analysis. You can then attach a logic analyzer or RMON probe to the destination port and study the traffic crossing the source port in a completely unobtrusive manner. The destination port is set by specifying an Ethernet interface. The source and destination port speeds should match, otherwise traffic may be dropped from the source port. You can create only one port mirror session. The source and destination ports have to be either both in the port range 1-12 or both in the port range 13-24. Example The following example configures the switch to mirror all packets from port 6 to port 11:
Console(config)#interface ethernet 1/11 Console(config-if)#port monitor ethernet 1/6 both Console(config-if)#
Related Commands show port monitor

show port monitor

Use this command to display mirror information. Syntax show port monitor [interface] interface ethernet unit/port (source port) - unit - Switch (unit 1). - port - Port number.
Default Setting Shows all sessions. Command Mode Privileged Exec Command Usage This command displays the currently configured source port, destination port, and mirror mode (i.e., RX, TX, RX/TX). Example The following shows mirroring configured from port 6 to port 11:
Console(config)#interface ethernet 1/11 Console(config-if)#port monitor ethernet 1/6 Console(config-if)#end Console#show port monitor Port Mirroring ------------------------------------Destination port(listen port):Eth1/1 Source port(monitored port) :Eth1/6 Mode :RX/TX Console#
Related Commands port monitor

Port Trunking Commands

Ports can be statically grouped into an aggregate link to increase the bandwidth of a network connection or to ensure fault recovery. Or you can use the Link Aggregation Control Protocol (LACP) to automatically negotiate a trunk link between this switch and another network device. For static trunks, the switches have to be compatible with the Cisco EtherChannel standard. For dynamic trunks, the switches have to comply with LACP. This switch supports up to six trunks. For example, a trunk consisting of two 1000 Mbps ports can support an aggregate bandwidth of 4 Gbps when operating at full duplex.

EDGEIRON 2402CF, 4802CF, 24G AND 48G
L a y e r 2 Sw i t c h e s
Foundry Networks EdgeIron 2402CF, EdgeIron 4802CF, EdgeIron 24G, and EdgeIron 48G deliver a cost-effective solution for the enterprise wiring closet, small backbone, server
Features/ Benefits Highlights
farm, and desktop applications for high-performance local area networks. The EdgeIron family of 10/100 and 10/100/1000 switches delivers interface flexibility, wire-speed performance, superior port density, and a complete, standard Layer 2 feature set to address the mid-range needs of enterprise users. The EdgeIron products come in a 1-RU form factor, enabling seamless installation within a wiring closet,distribution,and data center.The EdgeIron products include combo Gigabit Ethernet ports that allow for RJ-45 (copper) or mini-GBIC (fiber) uplink installations. EdgeIron 2402CF, 4802CF, 24G, and 48G support mini-GBIC optics, such as SX for multimode fiber, LX for single-mode fiber, or LHA for single-mode fiber that can

t t t t

Cost-effective solution for high-performance LAN environments in a 1-RU form factor Wire-speed performance,auto-sensing,and auto MDI/MDIX on all ports Combo Gigabit Ethernet ports to deliver integrated RJ-45 (Copper) or mini-GBIC (fiber) for uplink installation,giving greater flexibility and cost savings for wiring closet installations Support for jumbo frames of up to 9,000 bytes within the EdgeIron 24G and 48G,ideal for high-end server connectivity and network attached file servers Complete,standard layer 2 features that includes the following:
IEEE 802.1q and 802.1p (Class of Service) with 4 hardware queues per port to enable prioritization of mission-critical applications Per-VLAN Spanning Tree (PVST) for broadcast isolation 802.3ad for automatic link aggregation and 802.1x for port security 802.1w Rapid Spanning Tree Protocol for superior network reliability Support for Generic VLAN Registration Protocol (GVRP) Internet Group Management Protocol (IGMP) Snooping

reach up to 70Km.

Robust Quality-of-Service features,including Class of Service (802.1p) mapping to Type of Service or DiffServ and support for priority queuing algorithm such as Weighted Round Robin and Strict Low latency as low as 10s,ideal for advanced applications like VoIP and video conferencing over IP Extensive management and monitoring features,including an industry-standard CLI,secure web-based GUI,integrated SNMP agent with mini-RMON and Secure Shell for secured and encrypted management access Backed by Foundrys Global Customer Service and Worldwide 1 Sales Organization

EdgeIron 2402CF

The EdgeIron 2402CF features 24 10/100 RJ-45 ports and 2 combo GbE RJ-45/mini-GBIC slots in a 1-RU form factor, ideal for wiring closet installation.The EdgeIron 2402CF comes with switching performance of up to 8.8Gbps and forwarding rate performance of up to 6.6Mpps.

EdgeIron 4802CF

The EdgeIron 4802CF features 48 10/100 RJ-45 ports and 2 combo GbE RJ-45/mini-GBIC slots in a 1-RU form factor, ideal for higher-density wiring closet installation.The EdgeIron 4802CF comes with a switching performance of up to 13.6Gbps and forwarding rate performance of up to 10.2Mpps.

EdgeIron 24G

The EdgeIron 24G features 20 10/100/1000 RJ-45 ports and 4 combo GbE RJ-45/mini-GBIC slots in a 1-RU form factor, ideal for wiring closet,distribution,and data center installation. The EdgeIron 24G supports jumbo frames, making it an ideal solution for server connectivity and network attached file servers. The EdgeIron 24G comes with switching performance of up to 48Gbps and forwarding rate performance of up to 35.7Mpps.

EdgeIron 48G

The EdgeIron 48G features 44 10/100/1000 RJ-45 ports and 4 combo GbE RJ-45/mini-GBIC slots in a 1-RU form factor, ideal for wiring closet, distribution, and data center installation. The EdgeIron 48G supports jumbo frames, making it an ideal solution for high-density server connectivity and network attached file servers.The EdgeIron 48G comes with switching performance of 80Gbps and forwarding rate performance of up to 60Mpps.
EdgeIron Product Family Key Features and Benefits
Performance, Scalability and Security
Enterprise networks require cost-effective performance, scalability, and high density to support mission-critical business applications and rapid network expansion. With wire-speed switching performance,255 activeVLANs (eachVLAN ID value may range up to 4,096), the EdgeIron family provides best-inclass performance and capacity. Enterprise network managers, who demands security, can rely on the port-security feature that comes with the EdgeIron 2402CF, 4802CF, 24G, and 48G. Enterprise network managers can restrict access to their network by allowing only secured hosts (using the MAC addresses) to a port.Additional security actions such as disabling a port can be activated when a port-security violation occurs,thus proactively eliminating security violations. Each EdgeIron ships with a complete, standards-based Layer 2 feature set, including 802.1Q VLANs, 802.1p-based Class of Service (CoS),802.1D single SpanningTree Protocol,PerVLAN Spanning Tree (PVST), 802.1w Rapid Spanning Tree Protocol, 802.3x-based flow control, BootP, TFTP, Generic VLAN Registration Protocol (GVRP),Generic Multicast Registration Protocol (GMRP), Internet Group Management Protocol (IGMP) Snooping, and port mirroring.With support for CoS mapping to Type of Service (ToS) and DiffServ Control Points (DSCP),the EdgeIron delivers critical Quality of Service (QoS) features for next-generation applications such as Voice over IP and streaming audio or video.

Includes Complete Standard Layer 2 Feature Set
Ease of Management Cost-Effective Solution
With an easy-to-use, industry-standard Command Line The EdgeIron 2402CF, 4802CF, 24G, and 48G are ideal for providing cost-effective, high-performance connectivity in a variety of network deployments.The EdgeIron 4802CF is well suited to wiring closet deployments where high-density 10/100 is required. Key applications for the EdgeIron 24G and 48G include high-performance server aggregation, high-speed workgroup backbone upgrades, and Gigabit over Copper to the desktop for power users. Foundry Networks offers a complete line of complementary Layer 2/3 stackable and chassis products for the edge and the core of the enterprise,including the FastIron enterprise product family, that can be deployed in conjunction with the EdgeIron 2402CF, 4802CF, 24G, and 48G to create a complete, robust, scalable, and world-class high-performance network. Interface (CLI), Telnet based interface, Web based GUI, and RADIUS-based authentication,the EdgeIron is easy and secure to configure, deploy and maintain. Foundrys full-function IronView Network Manager empowers network operators to seamlessly control software and configuration updates for any Foundry product from a central station,dramatically simplifying network provisioning, diagnostics and resolution, thus reducing the total cost of ownership of installing and maintaining a world-class network infrastructure.
Building Enterprise Networks Using the EdgeIron
Enterprise Wiring Closet and Distribution
The EdgeIron 2402CF and 4802CF,which come with 2 Gigabit Ethernet over Copper ports as uplinks, are well suited for enterprise wiring closet deployments and can be immediately connected to an EdgeIron 24G, which can be used within the distribution layer.With this solution and the EdgeIrons 1RU size, network managers can easily collapse several EdgeIron 2402CF and 4802CF switches into an EdgeIron 24G and a 48G to deliver a high-density wiring closet solution. Furthermore, the EdgeIron 24G and the 48G supports up to 4 mini-GBIC ports allows network managers to easily connect the distribution back to the enterprise backbone using SX, LX, or LHB optics, enabling distances of up to 300m, 5Km, or 120Km, respectively. This solution delivers a cost-effective and efficient aggregation of wiring closets within an enterprise network.

Building #1

First Floor Second Floor First Floor

Building #2

Second Floor

VLAN 100

VLAN 200

Wiring Closet

EdgeIron 4802CF EdgeIron 2402CF

Distribution Layer

EdgeIron 24G EdgeIron 48G

Enterprise Backbone

FastIron 800 FastIron 800

Legend

Gigabit Links Dual GbE Trunk Links

Enterprise Data Center

The EdgeIron 24G and the 48G are well suited for use within the enterprise data center.The EdgeIron 24G and the 48G, which comes with 24 GoC and 48 GoC, respectively, enables network managers to easily connect high-end servers with Gigabit Ethernet over Copper (GoC) ports. Both the EdgeIron 24G and the 48G comes with 4-port combo mini-GBIC slots, which can be populated with SX, LX, or an LHB optic to connect the data center back to the enterprise core at distances up to 300m, 5Km, or 120Km, respectively. This solution delivers a cost-effective and flexible solution for data center networking requirements.
Enterprise Backbone OSPF VRRP

FastIron 800

Data Center
Servers with Gigabit Ethernet over Copper

Dual GbE Trunk Links

Gigabit Copper to the Desktop
Today, laptops and desktop computers are being equipped with 10/100/1000 Base-T Ethernet ports because the cost of adding this feature is negligible. Foundrys EdgeIron 24G and 48G delivers a cost-effective solution for enterprise network managers wanting to future-proof their network to support 10/100/1000 Base-T Ethernet ports.The EdgeIron 24G and the 48G comes with the ability to auto-sense 10/100/1000 Base-T, eliminating the need to manually configure the speed of every switch port used for host connectivity.
EdgeIron 48G EdgeIron 24G
Dual GbE Trunk Links Quad GbE Trunk Links
A wiring closet with several EdgeIron 24G and 48G connected to a FastIron 3208RGC, equipped with 32-ports of Gigabit Ethernet over Copper and 8 mini-GBIC slots, delivers a highdensity and a cost-effective solution for future-proofing a wiring closet to support hosts with 10/100/1000 Base-T
Ethernet ports.With the FastIron 3208RGC and its additional 8 mini-GBIC slots, network managers can ensure redundant and high-speed connectivity of wiring closets to the enterprise backbone.

Technical Specification

Properties
10/100 Base-T Ports 1000 Base-T Ports 10/100/1000 Base-T Ports Mini-GBIC Slots Switching Performance (Gbps) Forwarding Rate (Mpps) Maximum Number of MAC Addresses Physical Dimensions (HxWxD) Weight Power Consumption (Watt)

8.8 6.6 8,000 1.7" x 17.37" x 9" (4.3 x 44 x 22.8 cm) 7 lbs (3.18 Kg) 24W Max

13.6 10.2 8,000

48 35.7 32,000

16,000

1.7" x 17.37" x 12.76" 1.7" x 17.37" x 13.9" 1.7" x 17.37" x 13.9" (4.3 x 44 x 32.4 cm) (4.3 x 44 x 35.3 cm) (4.3 x 44 x 35.3 cm) 9.5 lbs (4.36 Kg) 48W Max 9.5 lbs (4.36 Kg) 48W Max 9.5 lbs (4.36 Kg) 48W Max
Technical Specification (Common)

Network Interface

- 10BASE-T:RJ-45 UTP Cat.3,4,5 - 100BASE-TX:RJ-45 UTP Cat.5 - 1000BASE-T:RJ-45 UTP Cat.5

Power Supply

- Internal,auto-ranging transformer: 90 to 260VAC,47 to 63 Hz - Redundant DC input

Management Features

- In-Band Management - Telnet,Web-based HTTPS,or SNMP (v1 and v2c) - Out-of-Band Management - RS-232 DB-9 console port - Software Loading - Secure Shell v 1.5

Maximum Current

- 0.5A @ 110VAC,0.7 A @ 240VAC

MTBF MIB Support

- 6 years (estimated) MIB II (RFC 1213) Bridging MIB (RFC 1493) Ethernet-like MIB (RFC 1643) SNMP (RFC 1157) ARP (RFC826) IEGMP (RFC1157) IGMP (RFC1112) Bridge MIB (RFC 1493), RADIUS (RFC2618)
Unicast and Multicast Latency Performance (EIF2402CF, EIF4802CF, and EIF24G)
- Under 10s for Unicast port to port Latency - 650 700s Multicast Join - 6.5 7s Multicast Leave

Switch Features

- Spanning Tree Protocol and 802.1w - Flow Control (802.3x) - Full and Half Duplex;Auto MDI/MDIX - VLAN Support,Up to 256VLANs; port-based or with 802.1QVLAN tagging - GVRP for automaticVLAN learning - Quality of Service (802.1p) - Supports four levels of priority and weighted fair queuing - Broadcast storm control - Link Aggregation (802.3ad) - Port Mirroring

Temperature

- Operating:0 50C - Storage:-40 70C

RMON Support (RFC 1757)

- Groups 1,2,3,9 (Statistics,History, Alarm,Event)

Humidity

- 10% to 90% (non-condensing)

AC Input

- 100 to 240V,50-60 Hz

Standards

- IEEE 802.3 10BASE-T specification - IEEE 802.3u 100BASE-TX specification - IEEE 802.3ab 1000BASE-T specification - IEEE 802.3ad - IEEE 802.3z 1000BASE-X specification - 1000BASE-X (SX,LX,and LHA mini GBIC optic for LC connectors) - 1000BASE-T (RJ-45) - IEEE 802.1w Rapid Spanning Tree Protocol
- IEEE 802.3x full duplex on 10BASE-T,100BASE-T,and 1000BASE-T ports - IEEE 802.1D Spanning Tree Protocol - IEEE 802.1p CoS prioritization - IEEE 802.1QVLAN - IEEE 802.1x for Port Security
Electromagnetic Compatibility

CE mark EN55022 (1997) Class A. EN55024 (1998) EN61000-4-2/3/4/5/6/11 EN61000-2-2 Class A. EN61000-2-3 FCC Class A VCCI Class A CISPR Class A

ISO and Compliances

- IEC 8802.3 - CE Mark

Safety

- CSA/NRTL (UL1950,CSA 22.2.950) - TUV/GS (EN60950)

Ordering Information

Part Number
EIF2402CF EIF4802CF EIF24G EIF48G E1MG-SX E1MG-LX E1MG-LHB

Description

24 10/100 Base-T (RJ-45) ports and 2 combo Gigabit Ethernet RJ-45/mini-GBIC ports 48 10/100 Base-T (RJ-45) ports and 2 combo Gigabit Ethernet RJ-45/mini-GBIC ports 24 10/100/1000 Base-T (RJ-45) ports and 4 combo Gigabit Ethernet RJ-45/ mini-GBIC ports 48 10/100/1000 Base-T (RJ-45) ports and 4 combo Gigabit Ethernet RJ-45/ mini-GBIC ports 1000BaseSX mini-GBIC optic MMF,LC connector 1000BaseLX mini-GBIC optic SMF,LC connector 1000BaseLHA mini-GBIC optic SMF,LC connector
Foundry Networks, Inc. Corporate Headquarters 2100 Gold Street P.O.Box 649100 San Jose,CA 95164-9100
U.S.and Canada Toll-free: 1-888-TURBOLAN (887-2652) Tel:+1 408.586.1700 Fax:+1 408.586.1900 info@foundrynet.com www.foundrynetworks.com
Although Foundry has attempted to provide accurate information in these materials, Foundry assumes no legal responsibility for the accuracy or completeness of the information.More specific information is available on request from Foundry.Please note that Foundrys product information does not constitute or contain any guarantee,warranty or legal binding representation,unless expressly identified as such in duly signed writing.
2004 Foundry Networks, Inc.All Rights Reserved. Foundry Networks, BigIron, FastIron, NetIron, ServerIron, IronPoint, Terathon, JetCore, EdgeIron, IronView, JetScope, IronShield, MetroLink, IronWare,TrafficWorks, Power of Performance and the Iron family of marks are trademarks or registered trademarks of Foundry Networks, Inc. in the United States and other countries.All others are trademarks of their respective owners. DS-020/Rev2/03-03