IP8800/S2200・IP8800/S2100・IP8800/SS1250・IP8800/SS1240トラブルシューティングガイド

Transcription

1 IP8800/S2200IP8800/S2100IP8800/SS1250 IP8800/SS1240 IP8800SS1240-T001-B0

2 IP8800/S2200IP8800/S2100IP8800/SS1250 IP8800/SS1240 Ethernet GSRP Microsoft Microsoft Corporation Windows Microsoft Corporation RSASecurID RSA Security Inc. Wake on LAN IBM Corp. MagicPacket Advanced Micro Devices,Inc. IP8800SS1240-T001-B0 Copyright(C) NEC Corporation 2008,2018. All rights reserved.

3 restore PoE S2200 S2100SS1240 Ashow tech-support IP8800/S2100 IP8800/S2100 IP8800/S2100 DHCP snooping 10 9 ppupdate restore SS1240 SS ppupdate IP8800/S2200 Ver.2.4 SS1240

4 restore PoE S2200 SS1240 Ver.2.4 SS1240 IP8800/S Ring Protocol 6 ppupdate restore Ver.2.3.A SS1240 Ver.2.3.A SS NTP Ashow tech-support 4 100BASE-FXSS1250/1000BASE-X IP8800/SS BASE-FX 3 Ring Protocol

5 2 restore IEEE802.1X Web MAC Wake on LAN OP-WOL LED

6

7 IP8800/S2200Ver.2.7OS-LT4 IP8800/S2100Ver.2.7OS-LT5 IP8800/SS1250Ver.2.7OS-LT3 IP8800/SS1240Ver.2.7OS-LT2 IP8800/S2200IP8800/S2100IP8800/SS1250IP8800/ SS1240 S2200 IP8800/S2200 S2100 IP8800/S2100 SS1250 IP8800/SS1250 SS1240 IP8800/SS1240 OS-LT5OS-LT4OS-LT3OS-LT2 OP-WOL OP-WOL OP-OTP OP-OTP URL URL I

8 AC Alternating Current ACK ACKnowledge ADSL Asymmetric Digital Subscriber Line ALG Application Level Gateway ANSI American National Standards Institute ARP Address Resolution Protocol AS Autonomous System AUX Auxiliary BGP Border Gateway Protocol BGP4 Border Gateway Protocol - version 4 BGP4+ Multiprotocol Extensions for Border Gateway Protocol - version 4 bit/s bits per second *bps BPDU Bridge Protocol Data Unit BRI Basic Rate Interface CC Continuity Check CDP Cisco Discovery Protocol CFM Connectivity Fault Management CIDR Classless Inter-Domain Routing CIR Committed Information Rate CIST Common and Internal Spanning Tree CLNP ConnectionLess Network Protocol CLNS ConnectionLess Network System CONS Connection Oriented Network System II

9 CRC Cyclic Redundancy Check CSMA/CD Carrier Sense Multiple Access with Collision Detection CSNP Complete Sequence Numbers PDU CST Common Spanning Tree DA Destination Address DC Direct Current DCE Data Circuit terminating Equipment DHCP Dynamic Host Configuration Protocol DIS Draft International Standard/Designated Intermediate System DNS Domain Name System DR Designated Router DSAP Destination Service Access Point DSCP Differentiated Services Code Point DTE Data Terminal Equipment DVMRP Distance Vector Multicast Routing Protocol Electronic Mail EAP Extensible Authentication Protocol EAPOL EAP Over LAN EFM Ethernet in the First Mile ES End System FAN Fan Unit FCS Frame Check Sequence FDB Filtering DataBase FQDN Fully Qualified Domain Name FTTH Fiber To The Home GBIC GigaBit Interface Converter GSRP Gigabit Switch Redundancy Protocol HMAC Keyed-Hashing for Message Authentication IANA Internet Assigned Numbers Authority ICMP Internet Control Message Protocol ICMPv6 Internet Control Message Protocol version 6 ID Identifier IEC International Electrotechnical Commission IEEE Institute of Electrical and Electronics Engineers, Inc. IETF the Internet Engineering Task Force IGMP Internet Group Management Protocol IP Internet Protocol IPCP IP Control Protocol IPv4 Internet Protocol version 4 IPv6 Internet Protocol version 6 IPV6CP IP Version 6 Control Protocol IPX Internetwork Packet Exchange ISO International Organization for Standardization ISP Internet Service Provider IST Internal Spanning Tree L2LD Layer 2 Loop Detection LAN Local Area Network LCP Link Control Protocol LED Light Emitting Diode LLC Logical Link Control LLDP Link Layer Discovery Protocol LLQ+3WFQ Low Latency Queueing + 3 Weighted Fair Queueing LSP Label Switched Path LSP Link State PDU LSR Label Switched Router MA Maintenance Association MAC Media Access Control MC Memory Card MD5 Message Digest 5 MDI Medium Dependent Interface MDI-X Medium Dependent Interface crossover MEP Maintenance association End Point MIB Management Information Base MIP Maintenance domain Intermediate Point MLD Multicast Listener Discovery MRU Maximum Receive Unit MSTI Multiple Spanning Tree Instance MSTP Multiple Spanning Tree Protocol MTU Maximum Transfer Unit NAK Not AcKnowledge NAS Network Access Server NAT Network Address Translation NCP Network Control Protocol NDP Neighbor Discovery Protocol III

10 NET Network Entity Title NLA ID Next-Level Aggregation Identifier NPDU Network Protocol Data Unit NSAP Network Service Access Point NSSA Not So Stubby Area NTP Network Time Protocol OADP Octpower Auto Discovery Protocol OAM Operations,Administration,and Maintenance OSPF Open Shortest Path First OUI Organizationally Unique Identifier packet/s packets per second *pps PAD PADding PAE Port Access Entity PC Personal Computer PCI Protocol Control Information PDU Protocol Data Unit PICS Protocol Implementation Conformance Statement PID Protocol IDentifier PIM Protocol Independent Multicast PIM-DM Protocol Independent Multicast-Dense Mode PIM-SM Protocol Independent Multicast-Sparse Mode PIM-SSM Protocol Independent Multicast-Source Specific Multicast PoE Power over Ethernet PRI Primary Rate Interface PS Power Supply PSNP Partial Sequence Numbers PDU QoS Quality of Service RA Router Advertisement RADIUS Remote Authentication Dial In User Service RDI Remote Defect Indication REJ REJect RFC Request For Comments RIP Routing Information Protocol RIPng Routing Information Protocol next generation RMON Remote Network Monitoring MIB RPF Reverse Path Forwarding RQ ReQuest RSTP Rapid Spanning Tree Protocol SA Source Address SD Secure Digital SDH Synchronous Digital Hierarchy SDU Service Data Unit SEL NSAP SELector SFD Start Frame Delimiter SFP Small Form factor Pluggable SMTP Simple Mail Transfer Protocol SNAP Sub-Network Access Protocol SNMP Simple Network Management Protocol SNP Sequence Numbers PDU SNPA Subnetwork Point of Attachment SPF Shortest Path First SSAP Source Service Access Point STP Spanning Tree Protocol TA Terminal Adapter TACACS+ Terminal Access Controller Access Control System Plus TCP/IP Transmission Control Protocol/Internet Protocol TLA ID Top-Level Aggregation Identifier TLV Type, Length, and Value TOS Type Of Service TPID Tag Protocol Identifier TTL Time To Live UDLD Uni-Directional Link Detection UDP User Datagram Protocol ULR Uplink Redundant UPC Usage Parameter Control UPC-RED Usage Parameter Control - Random Early Detection VAA VLAN Access Agent VLAN Virtual LAN VRRP Virtual Router Redundancy Protocol WAN Wide Area Network WDM Wavelength Division Multiplexing WFQ Weighted Fair Queueing WRED Weighted Random Early Detection WS Work Station IV

11 WWW XFP World-Wide Web 10 gigabit small Form factor Pluggable kb( ) 1kB( )1MB( )1GB( )1TB( ) 1,024 1,024 1,024 1,024 V

12

13 I ID RADIUS MC RAMDISK ppupdate restore BASE-T/100BASE-TX SS1250SS BASE-T/100BASE-TX/1000BASE-T BASE-FXSS1250/1000BASE-X PoE S2200S2100SS VLAN Ring Protocol S2200SS1250SS i

14 3.5.4IGMP snooping MLD snooping IPv IEEE802.1X Web S2200SS1250SS MAC Wake on LAN OP-WOL DHCP snooping SNMP SNMP MIB SNMP LLDP NTP NTP IEEE802.3ah/UDLD IEEE802.3ah/UDLD inactive QoS QoS BPDU LED MC FTP Ashow tech-support 76 A.1show tech-support 76 ii

15 81 iii

16

17

18 IP8800/S2200IP8800/S2100IP8800/SS1250 IP8800/SS

19 LED 1-1LED IP8800/ SS T2C LED 1 PWR LED ON OFF 2 ST1 LED / / : LED OFF 3 ST2 LED 4 MC 5 ACC LED 6 CONSOLE CONSOLE RS-232C 7 LINK LED 1000BASE-T/1000BASE-X ST1 LED 8 T/R LED LED / 10BASE-T/100BASE-TX ST1 LED 10 RESET ( ) LED 3

20

21 ID ID MC RAMDISK ppupdate restore 10BASE-T/100BASE-TX 10BASE-T/100BASE-TX/ 1000BASE-T 100BASE-FXSS1250/ 1000BASE-X PoE S2200S2100 SS1240 VLAN Ring Protocol IGMP snooping MLD snooping RADIUS MC 3.3.3RAMDISK ppupdate restore BASE-T/100BASE-TX SS1250SS BASE-T/100BASE-TX/1000BASE-T BASE-FXSS1250/1000BASE-X 3.4.5PoE S2200S2100 SS VLAN Ring Protocol S2200 SS1250SS IGMP snooping 3.5.5MLD snooping 5

22 1. IPv IEEE802.1X 3.7.2Web S2200 SS1250SS MAC Wake on LAN OP-WOL DHCP snooping 3.8.1DHCP snooping SNMP MIB SNMP MIB LLDP SNMP LLDP NTP 3.12NTP IEEE802.3ah/UDLD inactive IEEE802.3ah/UDLD inactive QoS LED

23

24 OFF login 1. MC MC OFF ON 2. MC OFF ON 3. 3 PWR LED 1 PWR LED 4 ST1 LED 4 show tech-support 1. OFF ON 2. show critical-logging >show critical-logging 3. 5 ST1 LED 2ST1 LED LINK LED 6 ST1 LED 7 LINK LED(1000BASE-T/ 1000BASE-X 1-48 LED(10BASE-T/100BASE-TX 2ST1 LED LINK LED 1 PWR LED 2-2 PWR LED 1 OFF ON 8

25 OFF ON 3 AC100V AC90 127V AC200V AC V 2 ST1 LED LINK LED 2-3ST1 LED LINK LED 1 show logging >show logging SFP SFP

26

27 IPv SNMP NTP 3.13IEEE802.3ah/UDLD 3.14QoS

28 [CTRL N] password ID ID [CTRL N] ID IDoperator rename user ID ID [CTRL N] password 12

29 ST1 LED RS-232C bit/s 8bit 1bit 2 1. XON XOFF CtrlQ CtrlS 3 4 ID 1. line console speed CONSOLE(RS-232C) 9600bit/s 2. line console speed CONSOLE(RS-232C) bit/s CONSOLE(RS-232C) format flash 6 13

30 3. 7 Tera Term Pro 8 3 AltB Tera Term Pro telnetftp PC WS ping 2 1. line vty ftp-server 2. line vty IP IP deny ID 5. TCP TCP XON XOFF CtrlQ CtrlS

31 RADIUS RADIUS 1 RADIUS ping RADIUS VLAN IP IP ping RADIUS 2 RADIUS radius-server hostradius-server retransmit radius-server timeout RADIUS ( ) RADIUS telnet RADIUS RADIUS telnet ftp RADIUS RADIUS RADIUS ( ) auto-log reload OFF/ON show tech-support 15

32 format flash Can t execute format flash Flash format complete. 2. Flash format complete MC MC 3-4MC 1 2 show ramdisk-file RAMDISK 1. MC is not inserted.mc MC 2. Can't access to MC by write protection.mc MC Lock 3. No enough space on device. MC del 4. Can t execute

33 3. 3 format mc 1. MC MC 2. Can t gain access to MC.MC MC MC MC format mc 3. Can t execute.mc MC MC MC format mc MC MC 3.3.3RAMDISK RAMDISK 3-5RAMDISK 1 2 show ramdisk RAMDISK 3 format flash Not enough space on device show ramdisk free del 2. 1MB 3. show critical-logging ramdisk RAMDISK 300kB 4. show tech-support ramdisk RAMDISK del format flash Flash format complete. 2. Flash format complete. 17

34 ppupdate ppupdate 3-6 ppupdate 1 2 show critical-logging 1. Can't update software. [ Hardware rev.x ] SS ppupdate ppupdate 3. FROM write fail [cnt=xxxxxxxx,size=xxxxxxxx,err=xxxxxxxx] ppupdate restore restore 1 IP8800/S2200,IP8800/S2100 restore 3-7 restore S2200S show critical-logging Restore operation failed. backup no-software restore no-software restore 2 FROM write fail [cnt=xxxxxxxx,size=xxxxxxxx,err=xxxxxxxx] restore 18

35 3. 2 IP8800/SS1250 restore 3-8 restore SS show critical-logging Restore operation failed. backup no-software restore no-software IP8800/SS1240 IP8800/SS1230 backup AX1230 IP8800/SS1250 restore 2 FROM write fail [cnt=xxxxxxxx,size=xxxxxxxx,err=xxxxxxxx] restore 3 IP8800/SS1240 restore 3-9 restore SS Restore operation failed. Ver.2.4 restore 3 backup no-software restore no-software IP8800/SS1250 IP8800/SS1230 backup AX1230 IP8800/SS1240 restore 2 2 show critical-logging FROM write fail [cnt=xxxxxxxx,size=xxxxxxxx,err=xxxxxxxx] restore 19

36 DHCP snooping 3.8.1DHCP snooping 20

37 show port show port 2 show running-config 3 show spanning-tree detail BPDUguard 4 show logging 5 show efmoam 6 show loop-detection 7 activate dis 2 inact 3 6 down 9 no shutdown shutdown no shutdown DownPortFastBPDUguard(BPDU received) BPDU BPDU BPDU 7 STORMPort<IF#> inactivated because of xxxx storm detection. show logging 7 Forced DownIEEE802.3ah/UDLD 3.13IEEE802.3ah/UDLD 7 Down(loop)L2 7 show spanning-tree Up PortFastBPDUguard(BPDU not received) show logging show efmoam Forced Down Down show loop-detection L2 Up 21

38 show channel-group 9 show logging ModeStaticMax Active Port (link-down mode) StateDetached StateDistributing show logging BASE-T/100BASE-TX SS1250 SS BASE-T/100BASE-TX BASE-T/100BASE-TX SS1250SS show interfaces Link down 2 show interfaces CRC errors Symbol errors 22

39 3. 3 show interfaces / / speed duplex speed duplex BASE-T/100BASE-TX/1000BASE-T 10BASE-T/100BASE-TX/1000BASE-T BASE-T/100BASE-TX/1000BASE-T 1 show interfaces Link down 2 show interfaces CRC errors Symbol errors 23

40 3. 3 show interfaces / / 4 show interfaces Long frames speed duplex speed duplex BASE-FXSS1250/1000BASE-X 100BASE-FXSS1250/1000BASE-X BASE-FXSS1250/1000BASE-X 1 show interfaces Link down (SFP) 24

41 3. 2 show interfaces CRC errors Symbol errors 3 show interfaces Long frames BASE-SX2 SFP RJ45 media-type 5 SS BASE-FX show interfaces detail / / SFP RJ45 speed, duplex media-type (SFP) 1000BASE-SX2 RJ BASE-X(SFP) SFP 1000BASE-SX2 media-type sfp rj45 UTPRJ45 speed100 duplexfull media-typesfp 25

42 PoE S2200S2100SS1240 PoE 3-14PoE 1 show power inline Status 2 shutdown 3 show power inline Threshold(W) Total Allocate(W) 4 activate power inline show power inline Status 5 activate power inline show power inline Status 6 show logging POE off 2 denied 3 faulty 4 inact 5 no shutdown Total Allocate(W) Threshold(W) off on faulty 6 off on 0/x Supplying power was stopped by the overload detection. PoE power inline PoE 0/x Supplying power was stopped by the thermal shutdown. PoE 26

43 3. 0/x Supplying power was stopped by the PD disorder (xxxx) (xxxx) MPS Absent Startup Failure Short Classification FailureS2200 Class show channel-group detail 2 show channel-group detail LACP passive passive active Actor Key Status Down Down Detached Down Attached Collecting Distributing 27

44 VLAN 2 VLAN 2 1 VLAN show vlan show vlan detail VLAN VLAN avlan VLAN VLAN(VLAN ID 1) VLAN ID 1 VLAN VLAN VLAN allowed vlan VLAN b VLAN VLAN show vlan # show vlan VLAN ID:100 Type:Protocol based Status:Up Protocol VLAN Information Name:ipv4 EtherType:0800,0806 LLC: Snap-EtherType: Learning:On Uplink-VLAN: Uplink-Block: Tag-Translation: c MAC VLAN MAC VLAN show vlan mac-vlan VLAN MAC MAC static MAC dot1xieee802.1x MAC web-authweb MAC mac-authmac MAC # show vlan mac-vlan VLAN ID:100 MAC Counts: e (static) 0012.e (static) 0012.e200.00:02 (static) 0012.e200.00:04 (dot1x) 28

45 3. show vlan mac-vlan 2 MAC VLAN * MAC # show vlan mac-vlan VLAN ID:500 MAC Counts: e200.aa01 (static) 0012.e200.aa03 (static) VLAN ID:600 MAC Counts:1 * 0012.e200.aa01 (dot1x) e200.aa02 (static) 0012.e200.aa04 (dot1x) show vlan detail Up Down 3.4 Forwarding Blocking Blocking VLANVLAN suspend CH STP dot1x IEEE802.1X ULR AXRPRing Protocol > show vlan 2048 detail Date 2008/10/29 03:21:25 UTC VLAN counts: 1 VLAN ID: 2048 Type: Port based Status: Up Port Information 0/3 Up Forwarding Untagged 0/4 Up Forwarding Untagged 0/5 Down - Untagged 0/6 Down - Untagged 3 MAC a MAC show mac-address-table MAC > show mac-address-table Date 2009/03/16 23:24:47 UTC Aging time : 300 MAC address VLAN Type Port-list Dynamic 0/ b.972f.e22b 2 Dot1x 0/ ef01.34f Static 0/ ef01.3d Static 0/30 000b.9727.ee WebAuth 0/ c6ce.e1c MacAuth 0/ e284.c Dynamic 0/ b.7887.a Dynamic 0/ e00.00fc 1024 Snoop 0/49-50 > 29

46 3. Type Type Dynamic MAC clear mac-address-table Type Static mac-address-table static Type Snoop 3.5.4IGMP snooping 3.5.5MLD snooping Type Dot1x 3.7.1IEEE802.1X Type WebAuth 3.7.2Web S2200SS1250SS1240 Type MacAuth 3.7.3MAC MAC 4 QoS QoS QoS QoS CIST MST CIST MST show spanning-tree Enable 2 Disable spanning-tree disable switchport backup 30

47 3. 2 show spanning-tree 3 show spanning-tree 3 4 Blocking Discarding 4 show spanning-tree statistics BPDU 5 show spanning-tree detail BPDU 6 BPDU BPDU 5 BPDU QoS BPDU QoS BPDU BPDU 3.5.3Ring Protocol S2200SS1250SS1240 Autonomous Extensible Ring Protocol Autonomous Extensible Ring Protocol 2 Ring Protocol Ring Protocol 31

48 Ring Protocol IP8800/SS1250IP8800/SS1240 IP Ring Protocol 1 show axrp Ring Protocol "Oper State" "enable" 2 "Oper State" "-" Ring Protocol "Oper State" "disable" Ring Protocol "Oper State" "Not Operating" Ring Protocol 2 show axrp "Mode" 3 3 show axrp VLAN 4 show axrp detail VLAN ID 5 show axrp detail VLAN VLAN ID "Ring Port" "Role/State" 4 "Control VLAN ID" VLAN ID 5 "VLAN ID" VLAN ID 6 32

49 3. 6 show vlan detail Ring Protocol VLAN 7 show axrp detail 8 show axrp detail VLAN ID VLAN 7 "transport-only" 8 "Control VLAN ID" VLAN ID 33

50 IGMP snooping IGMP snooping show logging 2 QoS QoS QoS QoS 34

51 3. 3 IGMP snooping show igmp-snooping IGMP (1)IGMP IGMP IP IGMP querying system: * (2)IGMP IGMP querying system: IGMP querying system: IGMP VLAN IP (1)VLAN IP IP Address: * (2)VLAN IP IP Address: IP Address: mrouter-port > show igmp-snooping 3253 Date 2008/11/14 15:59:14 UTC VLAN counts: 3 VLAN 3253: IP Address: /24 Querier: enable IGMP querying system: Port (4): 0/13-16 Mrouter-port: 0/13-16 Group counts: 5 4 show igmp-snooping group IPv4 IPv4 show igmp-snooping group > show igmp-snooping group 3253 Date 2008/11/14 16:02:03 UTC Total Groups: 15 VLAN counts: 3 VLAN 3253 Group counts: 5 Group Address MAC Address e00.000b Port-list: 0/ e00.000a Port-list: 0/13 IGMP IGMP querying system IP Address IGMP IGMP querying system IP Address 35

52 MLD snooping MLD snooping show logging 2 QoS QoS QoS QoS 36

53 3. 3 MLD snooping show mld-snooping MLD (1)MLD MLD IP MLD querying system: fe80::200:87ff:fe10:1959* (2)MLD MLD querying system: MLD ipv6 mld snooping source IP MLD querying system: (3) ipv6 mld snooping source IP IP Address: IP Address: mrouter-port > show mld-snooping 3001 Date 2008/11/14 17:21:51 UTC VLAN counts: 3 VLAN 3001: IP Address: Querier: enable MLD querying system: Querier version: v1 Port (1): 0/12 Mrouter-port: 0/12 Group counts: 1 4 show mld-snooping group IPv6 IPv6 show mld-snooping group > show mld-snooping group 3001 Date 2008/11/14 17:22:10 UTC Total Groups: 3 VLAN counts: 3 VLAN 3001 Group counts: 1 Group Address Version Mode ff80:0:0:0:0:0:99:a0a v1 - Port-list: 0/12 MAC Address a0a MLD MLD querying system IP Address MLD MLD querying system IP Address 37

54 3. 3.6IPv IPv IP IP IP

55 show critical-logging show ip interface Up Down 3. Down Up ping ping 3. ping ping 4. ping 5 ARP ping 2. ping 3. ping ping 39

56 3. 4. ping 5 ARP ping ARP show ip arp ARP 3. ARP 6 4. ARP IP 6 IPv show ip route 3. 7QoS 7 QoS QoS QoS QoS 40

57 IEEE802.1X IEEE802.1X 3-20IEEE802.1X 1 show dot1x IEEE802.1X 2 show dot1x statistics EAPOL 3 show dot1x statistics RADIUS System 802.1X : DisableDot1x doesn't seem to be running IEEE802.1X dot1x system-auth-control System 802.1X : Enable 2 [EAPOL frames] RxTotal 0 EAPOL RxInvalid RxLenErr 0 EAPOL EAPOL show dot1x logging Invalid EAPOL frame received EAPOL Supplicant 3 [EAPoverRADIUS frames] TxTotal 0 RADIUS aaa authentication dot1x default group radius dot1x radius-server host radius-server host MAC mac-address-table static MAC mac-address-table static mac-address VLAN MAC mac-address aaa authentication network default group radius 4 4 show dot1x statistics RADIUS [EAPoverRADIUS frames] RxTotal 0 RADIUS RADIUS RADIUS 5 41

58 3. 5 show dot1x logging RADIUS 6 show dot1x logging Invalid EAP over RADIUS frames received RADIUS RADIUS Failed to connect to RADIUS serverradius RADIUS 6 RADIUS authentication failed (1) ID (2) ID The number of supplicants on the switch is full supplicant The number of supplicants on the interface is full supplicant Failed to authenticate the supplicant because it could not be registered to mac-address-table. MAC VLAN ( ) Failed to assign VLAN. RADIUS VLAN Failed to authenticate the supplicant because it could not be registered to MAC VLAN. H/W MAC VLAN VLAN 7 RADIUS 7 show dot1x logging VLAN Failed to assign VLAN (Reason:xxxxx) (Reason:xxxxx) (Reason: No Tunnel-Type Attribute) VLAN RADIUS Tunnel-Type RADIUS RADIUS Tunnel-Type (Reason: Tunnel-Type Attribute is not VLAN(13) VLAN RADIUS Tunnel-Type (13) RADIUS RADIUS Tunnel-Type VLAN(13) 42

59 3. (Reason: No Tunnel-Medium-Type Attribute) VLAN RADIUS Tunnel-Medium-Type RADIUS RADIUS Tunnel-Medium-Type (Reason: Tunnel-Medium-Type Attribute is not IEEE802(6)) VLAN Tunnel-Medium-Type IEEE802(6) Tunnel-Medium-Type Tag Tunnel-Type Tag RADIUS RADIUS Tunnel-Medium-Type Tag (Reason: No Tunnel-Private-Group-ID Attribute) VLAN RADIUS RADIUS Tunnel-Private-Group-ID RADIUS RADIUS Tunnel-Private-Group-ID (Reason: Invalid Tunnel-Private-Group-ID Attribute) VLAN RADIUS Tunnel-Private-Group-ID RADIUS RADIUS Tunnel-Private-Group-ID VLAN ID RADIUS VLAN VLAN name 2 (Reason: The port doesn't belong to VLAN) RADIUS Tunnel-Private-Group-ID VLAN ID RADIUS RADIUS Tunnel-Private-Group-ID VLAN ID switchport mac vlan 1 VLAN ID RADIUS VLAN VLAN name 2 (Reason: The VLAN ID is not set to radius-vlan) VLAN RADIUS RADIUS Tunnel-Private-Group-ID VLAN ID VLAN RADIUS RADIUS Tunnel-Private-Group-ID VLAN ID VLAN dot1x vlan dynamic radius-vlan VLAN ID RADIUS VLAN VLAN name 2 43

60 3. RADIUS 8 NAP IPv4 IPv4 RADIUS RADIUS Filter-ID IPv4 1 switchport mac vlan vlan mac-based RADIUS VLAN ID 2 name VLAN RADIUS VLAN VLAN VLAN VLAN VLAN ID RADIUS VLAN VLAN VLAN ID IEEE802.1X VLAN IEEE802.1X 1 VLAN clear dot1x auth-state 44

61 Web S2200SS1250SS1240 Web 3-22Web 1 2 URL 3 VLAN VLAN Web IP URL 4 IPv4 5 show web-authentication user ID 2 5 RADIUS 7 URL URL Web IP Web VLAN VLAN VLAN IP ip address VLAN VLAN 3 9 VLAN VLAN Web IP web-authentication ip address URL web-authentication redirect enable URL VLAN VLAN VLAN IP ip address 4 VLAN VLAN IPv4 IPv4 IPv4 IPv4 IP deny ip IPv4 IP any 10 ID set web-authentication user ID VLAN ID commit web-authentication 6 45

62 show web-authentication statistics RADIUS 8 RADIUS ID set web-authentication passwd remove web-authentication user ID set web-authentication user ID VLAN ID commit web-authentication 10 "[RADIUS frames]" "TxTotal" "0" aaa authentication web-authentication default web-authentication radius-server host radius-server host 8 ID RADIUS VLAN RADIUS NAS-Identifier VLAN ID VLAN ID VLAN RADIUS VLAN ID switchport mac vlan 1 VLAN ID RADIUS VLAN VLAN name 2 RADIUS VLAN ID web-authentication vlan switchport mac vlan VLAN ID RADIUS VLAN VLAN name show logging "HTTP server initialization failed." 10 show web-authentication statistics Web 11 web-authentication system-auth-control 12 show web-authentication logging SSL 鍵 鍵 10 Web web-authentication system-auth-control 12 LOGIN Login succeeded Login update succeeded RADIUS Web DB 46

63 3. VLAN VLAN web-authentication port Web Web 1 switchport mac vlan vlan mac-based RADIUS VLAN ID 2 name VLAN RADIUS VLAN VLAN VLAN VLAN VLAN ID RADIUS VLAN VLAN VLAN ID Web 3-23Web 1 Web Web aaa authentication web-authentication default group radius web-authentication auto-logout web-authentication max-timer web-authentication system-auth-control VLAN web-authentication port web-authentication static-vlan max-user authentication arp-relay authentication ip access-group web-authentication redirect enable web-authentication redirect-mode VLAN web-authentication port web-authentication max-user authentication arp-relay authentication ip access-group web-authentication redirect enable web-authentication redirect-mode web-authentication max-user web-authentication vlan 47

64 3. 2 VLAN IP VLAN VLAN IP VLAN VLAN IP VLAN VLAN 3 DHCP DHCP 1DHCP 4 QoS QoS QoS 5 IPv4 VLAN VLAN authentication ip access-group ip access-list extended 6 ARP VLAN VLAN ARP authentication arp-relay 1 DHCP DHCP DHCP IP IP bdqos a DHCP IP DHCP IP network ip dhcp pool DHCP IP ip dhcp 48

65 3. excluded-address DHCP DHCP b IP show ip interface up down 3.4 c L3 ping DHCP L3 ping ping ping HUB d QoS QoS QoS QoS e (a) (e)

66 MAC MAC 3-24MAC 1 2 RADIUS show mac-authentication mac-address MAC VLAN ID MAC set mac-authentication mac-address MAC VLAN ID commit mac-authentication VLAN mac-authentication vlan-check MAC VLAN ID VLAN MAC VLAN ID VLAN VLAN RADIUS MAC RADIUS ID MAC RADIUS ID MAC MAC MAC mac-authentication id-format mac-authentication password VLAN RADIUS NAS-Identifier VLAN ID VLAN ID mac-authentication vlan-check ID mac-authentication vlan-check VLAN ID VLAN RADIUS VLAN ID switchport mac vlan 1 VLAN ID RADIUS VLAN VLAN name 2 50

67 3. RADIUS VLAN ID mac-authentication vlan switchport mac vlan VLAN ID RADIUS VLAN VLAN name show mac-authentication statistics RADIUS "[RADIUS frames]" "TxTotal" "0" aaa authentication mac-authentication default mac-authentication radius-server host radius-server host VLAN VLAN IPv4 6 show mac-authentication statistics MAC 7 mac-authentication system-auth-control 8 show mac-authentication logging VLAN VLAN IPv4 IPv4 IPv4 IPv4 IP any 6 MAC 7 8 mac-authentication system-auth-control 8 LOGIN Login failed : xxxxxxxxxxx RADIUS MAC DB VLAN VLAN mac-authentication port MAC MAC 1 switchport mac vlan vlan mac-based RADIUS VLAN ID 51

68 3. 2 name VLAN RADIUS VLAN VLAN VLAN VLAN VLAN ID RADIUS VLAN VLAN VLAN ID MAC 3-25MAC 1 MAC MAC aaa authentication mac-authentication default group radius mac-authentication access-group mac-authentication auto-logout mac-authentication id-format mac-authentication interface mac-authentication max-timer mac-authentication password mac-authentication system-auth-control VLAN mac-authentication port mac-authentication static-vlan max-user mac-authentication vlan-check authentication arp-relay authentication ip access-group VLAN mac-authentication port mac-authentication max-user authentication arp-relay authentication ip access-group mac-authentication max-user mac-authentication vlan 2 VLAN VLAN VLAN IP VLAN VLAN IP VLAN VLAN 3 QoS QoS QoS 52

69 3. 4 IPv4 VLAN VLAN authentication ip access-group ip access-list extended 5 ARP VLAN VLAN ARP authentication arp-relay Wake on LAN OP-WOL Wake on LAN DBWOL DB DBWOL DB 3-26 Wake on LAN 1 Wake on LAN 2 URL 3 show wol-authentication user 4 show wol 5 show wol-authentication user ID detail 2 3 Not available. 5 6 URL URL URL IP Wake on LAN VLAN IP set wol-authentication user ID remove wol-authentication user set wol-authentication user ID commit wol-authentication 4 32 WOL DB show wol-device name set wol-authentication permit commit wol-authentication 53

70 3. 6 show wol-device name WOL DB 7 show wol-device name Alive 8 IP 9 show running-config VLAN MAC VLAN set wol-device macset wol-device vlan commit wol-device 7 no-check set wol-device alive set wol-device ip IP commit wol-device IP DHCP dhcp DHCP snooping IP IP 8 DHCP dhcp DHCP snooping IP IP set wol-device ip commit wol-device IP 9 VLAN IP IP 54

71 DHCP snooping 1 DHCP DHCP snooping DHCP 3-27DHCP 1 show ip dhcp snooping binding IP MAC 2 DHCP DHCP 4 2 DHCP trust untrust trust DHCP untrust trust untrust 3 3 DHCP IP 4 OFF/ON IP Windows ipconfig /release ipconfig /renew VLAN 2 DHCP snooping 55

72 3. a show ip dhcp snooping binding Agent URL " " Last succeeded time : Last succeeded time : 3 2 show running-config 3 ST1 LED show logging 4 ST1 LED show logging ip dhcp snooping database url flash 3 ip dhcp snooping database url flash ST1 LED It was not able to store binding database in flash. MC 1. ip dhcp snooping database url MC 2. save 3. MC save backup MC backup 3 ip dhcp snooping database url mc MC 4. restore backup 5. ip dhcp snooping database url MC 6. save 7. MC Vol.2 56

73 3. b MC 3-29 MC 1 show ip dhcp snooping binding Agent URL " " 2 Last succeeded time : 3 Last succeeded time : 3 2 show running-config 3 show logging ip dhcp snooping database url mc 3 ip dhcp snooping database url mc < > It was not able to store binding database in mc.<retry> <reason> MC <reason> MC file is not inserted.mc MC MC MC 5 <reason> Can't access to MC by write protection. MC MC Lock 5 <reason> MC file is not writing. 4 4 show mc MC 5 backup show mc-file M del 5 backup ip dhcp snooping database url mc MC 6 57

74 3. 6 format mc MC 5 Can't gain access to MCMC MC MC MC format mc Can't executemc MC MC MC format mc MC MC Vol.2 3 DHCP snooping a show ip dhcp snooping binding 2 show running-config 3 show logging Agent URL " " 2 Last succeeded time 3 ip dhcp snooping database url flash 3 ip dhcp snooping database url flash It was not able to restore binding database from flash. DHCP IP Windows ipconfig/release ipconfig/renew 58

75 3. b MC 3-31 MC 1 show ip dhcp snooping binding 2 show running-config 3 show logging Agent URL " " 2 Last succeeded time 3 ip dhcp snooping database url mc 3 ip dhcp snooping database url mc < > It was not able to restore binding database from mc.<retry><reason> MC <reason> MC is not inserted.mc MC MC MC 4 <reason> MC file is not found. MC ip dhcp snooping database url mc MC MC 4 <reason> MC 4 4 <reason> MC file is not reading.mc MC DHCP IP Windows ipconfig/release ipconfig/renew 59

76 show switchport backup 2 show running-config 3 4 show switchport backup Status show switchport backup Status 3 4 link debounce ( Blocking Preemption Delay " " switchport backup interface Preemption Limit select switchport backup interface Down 5 ListeningLearning MAC VLAN 60

77 3. 8 MAC MAC MAC VLAN VLAN VLAN 9 9 show switchport backup mac-address-table update statistics "Transmission over flows" MAC MAC 1,024 MAC VLAN VLAN VLAN MAC 61

78 SNMP SNMP MIB SNMPv1 SNMPv2c show running-config SNMP IP snmp-server community SNMP # show running-config ip access-list standard SNMPMNG permit host snmp-server community "NETWORK" ro SNMPMNG # SNMP SNMPv1 SNMPv2c show running-config SNMP snmp-server host SNMP # show running-config snmp-server host traps "event-monitor" snmp # 62

79 LLDP LLDP 3-33LLDP 1 show lldp LLDP Status Enabled 2 LLDP is not configuredlldp LLDP 2 show lldp 3 LLDP LLDP 3 show lldp statistics Tx Rx 1 3 Tx Discard 4 4 show lldp 5 show lldp Link Up 5 Link Down 3.4 Neighbor Counts QoS QoS QoS 63

80 NTP NTP NTP 3-34NTP 1 show clock 2 2 show ntp-client NTP 3 NTP IPv4 NTP Execute History Status Timeout Error 3 NTP IPv4 ping 64

81 IEEE802.3ah/UDLD IEEE802.3ah/UDLD inactive IEEE802.3ah/UDLD inactive 3-35IEEE802.3ah/UDLD 1 show efmoam IEEE802.3ah/UDLD inactive 2 IEEE802.3ah/OAM 3 show efmoam statistics Thrashings 4 5 show efmoam 6 QoS Link status "Down" 2 IEEE802.3ah/OAM IEEE802.3ah/OAM 3 Thrashings Thrashings 4 HUB 5 udld-detection-count udld-detection-count 6 QoS IEEE802.3ah/UDLD slow-protocol QoS 7 7 IEEE802.3ah/OAMIEEE802.3ah OAM IEEE802.3ah/UDLDIEEE802.3ah/OAM 65

82 QoS QoS QoS QoS show access-filter QoS show qos queueing "discard packets" 3. 66

83 BPDU BPDU BPDU spanning-tree bpdufilter 67

84 LED LED LED 1. show system Brightness mode off LED economy SS1250SS1240 LED 2. show power-control schedule schedule-power-control port-led enable system port-led enable 2 LED 3 MC LED 4 RS-232C LED show system Brightness mode normal LED system port-led trigger system port-led trigger interface show system Brightness mode normal LED system port-led trigger system port-led trigger mc MC MC show system Brightness mode normal LED system port-led trigger system port-led trigger console 68

85 SS1250SS1240 telnet schedule-power-control time-range action disable action enable 2 SS1250SS SS1250SS1240 save RESET LED set power-control schedule enable 69

86 show environment temperature-logging 1. OFF/ON 2. 70

87 MC 4.3FTP 71

88 show tech-support show tech-support RAMDISK MC FTP RAMDISK MC FTP 4-1show tech-support RAMDISK # show tech-support ramdisk showtech.txt MC 4.2MC FTP 4.3FTP show tech-support ramdisk RAMDISK 72

89 4. 4.2MC RAMDISK MC MC MC 4-2MC MC show ramdisk-file (showtech.txt) > show ramdisk-file Date 2008/11/13 10:19:31 UTC File Date Size Name 2008/11/13 10:15 1,265 showtech.txt > show mc >show mc Date 2008/11/13 10:19:51 UTC MC : enable Manufacture ID : used 5,750,272 byte free 120,160,256 byte total 125,910,528 byte > copyshowtech.txtmc > copy ramdisk showtech.txt mc showtech.txt MC > show mc-file Date 2008/11/13 10:20:53 UTC File Date Size Name 2008/11/13 10:20 1,265 showtech.txt > 73

90 4. 4.3FTP RAMDISK FTP FTP FTP VLAN IP PC Windows PC PC "C:\TEMP" ( IP ) 4-3FTP FTPPCFTP C:\TEMP>ftp PC(FTP) Connected to AX1200 FTP server ready User ( :(none)): operator 331 Password required Password: 230 User logged in ftp> asc 200 Type set to A, ASCII mode ftp> get showteck.txt 200 Port set okay 150 Opening ASCII mode data connection 226 Transfer complete ftp:xxxxxx bytes sent in xx.x Seconds (xx.xx Kbytes/sec) ftp> bye 221 Byesee you later C:\TEMP> PC(FTP) 74

91 Ashow tech-support 75

92 Ashow tech-support Ashow tech-support A.1show tech-support show tech-support "OAN" OAN show tech-support " " A-1 1 show clock 2 show version 3 show system 4 show environment FAN/ / 5 show environment temperature-logging 6 show running-config 7 show startup-config 8 show sessions 9 show radius-server RADIUS 10 show radius-server statistics RADIUS 11 show radius-server statistics summary RADIUS 12 show ntp-client NTP 13 show power-control port 14 show power-control schedule 15 show mc-file MC 16 show ramdisk-file RAMDISK 17 show mc MC 18 show ramdisk RAMDISK 19 show critical-logging summary 20 show critical-logging 21 show logging 22 show cpu (days/hours) CPU 76

93 Ashow tech-support 23 show cpu (minutes/seconds) CPU 24 show memory summary 25 show interfaces 26 show port 27 show port statistics 28 show port protocol 29 show port transceiver 30 show power inline PoE 31 show channel-group summary 32 show channel-group detail 33 show channel-group statistics 34 show channel-group statistics lacp LACP 35 show mac-address-table MAC 36 show mac-address-table learning-counter MAC 37 show vlan summary VLAN 38 show vlan detail VLAN 39 show vlan mac-vlan MAC VLAN 40 show spanning-tree detail 41 show spanning-tree port-count 42 show spanning-tree statistics 43 show axrp detail Ring Protocol 44 show ip dhcp snooping DHCP snooping 45 show ip dhcp snooping binding DHCP snooping 46 show ip dhcp snooping statistics DHCP snooping 47 show ip arp inspection statistics ARP 48 show igmp-snooping IGMP snooping 49 show igmp-snooping group IGMP snooping 50 show igmp-snooping statistics IGMP snooping 51 show mld-snooping MLD snooping 52 show mld-snooping group MLD snooping 53 show mld-snooping statistics MLD snooping 54 show ip interface IP 55 show ip arp ARP 56 show ip route 57 show access-filter 58 show qos-flow QoS 59 show qos queueing 77

94 Ashow tech-support 60 show authentication fail-list 2 61 show authentication logging 2 62 show dot1x detail IEEE802.1X 63 show dot1x statistics IEEE802.1X 64 show dot1x logging IEEE802.1X 65 show web-authentication Web 66 show web-authentication html-files detail Web 67 show web-authentication user edit Web DB 68 show web-authentication user commit Web DB 69 show web-authentication login select-option detail 70 show web-authentication login summary port 71 show web-authentication login summary vlan Web Web Web VLAN 72 show web-authentication logging Web 73 show web-authentication statistics Web 74 show ip dhcp binding DHCP 75 show ip dhcp conflict DHCP IP 76 show ip dhcp server statistics DHCP 77 show mac-authentication MAC 78 show mac-authentication login select-option detail 79 show mac-authentication login summary port 80 show mac-authentication login summary vlan MAC MAC MAC VLAN 81 show mac-authentication logging MAC 82 show mac-authentication statistics MAC 83 show mac-authentication mac-address edit MAC DB 84 show mac-authentication mac-address commit MAC DB 85 show authentication multi-step 86 show wol Wake on LAN 87 show wol-authentication user edit Wake on LAN DB 88 show wol-authentication user commit Wake on LAN DB 89 show wol-device name edit Wake on LAN DB 90 show wol-device name commit Wake on LAN DB 78

95 Ashow tech-support 91 show license 92 show gsrp aware GSRP aware 93 show switchport backup 94 show switchport backup statistics 95 show switchport backup mac-address-table update 96 show switchport backup mac-address-table update statistics MAC MAC 97 show efmoam IEEE802.3ah/OAM 98 show efmoam statistics IEEE802.3ah/OAM 99 show storm-control detail 100 show loop-detection L2 101 show loop-detection logging L2 102 show loop-detection statistics L2 103 show cfm CFM 104 show cfm summary CFM MP CFM 105 show cfm remote-mep CFM MEP 106 show cfm remote-mep detail CFM MEP 107 show cfm fault CFM CC 108 show cfm fault detail CFM CC 109 show cfm l2traceroute-db CFM Linktrace 110 show cfm l2traceroute-db detail CFM Linktrace 111 show cfm statistics CFM 112 show lldp detail LLDP 113 show lldp statistics LLDP 114 show auto-config OANAUTOCONF 115 show auto-config neighbor OANAUTOCONF 116 show config-lock-status OAN 117 show netconf OANNETCONF 118 show netconf denied-host OAN 119 show software-update user OAN 120 show on-api webauth-html-file user OANWeb HTML 121 show on-api energy-saving user OAN 122 show access-redirect logging Web 79

96 Ashow tech-support 123 show access-redirect statistics Web 124 Detail Information 80

97 100BASE-FXSS1250/1000BASE-X 24 10BASE-T/100BASE-TX SS1250SS BASE-T/100BASE-TX/1000BASE-T 23 D DHCP snooping 55 F FTP 74 I IEEE802.1X 41 IEEE802.3ah/UDLD inactive 65 IEEE802.3ah/UDLD 65 IGMP snooping 34 IPv4 38 L LED 68 LLDP 63 M MAC 50 MC 16 MC 73 MLD snooping 36 N NTP 64 NTP 64 P PoE S2200SS R RADIUS 15 RAMDISK 17 Ring Protocol 31 S show tech-support 76 SNMP 62 SNMP MIB 62 SNMP 62 V VLAN 2 28 W Web ppupdate 18 restore

98 ID 12 Wake on LAN IPv QoS 66 QoS BPDU 67 82