User Manual
Page 4
... Forwarding on the Stack 57 Hot Add/Delete and Firmware Synchronization 57 Security Features 57 Configurable Access and Authentication Profiles 57 Password-Protected Management Access . . . . 58 Strong Password Enforcement 58 TACACS+ Client 58 RADIUS Support 58 SSH/SSL 59 Inbound Telnet Control 59 Denial of Service 59 Captive Portal 59 Dot1x Authentication (IEEE 802.1X 60 MAC-Based 802.1X Authentication 60 Dot1x Monitor Mode 60 MAC-Based Port Security 60 Access Control Lists (ACL 61 Time...
... Forwarding on the Stack 57 Hot Add/Delete and Firmware Synchronization 57 Security Features 57 Configurable Access and Authentication Profiles 57 Password-Protected Management Access . . . . 58 Strong Password Enforcement 58 TACACS+ Client 58 RADIUS Support 58 SSH/SSL 59 Inbound Telnet Control 59 Denial of Service 59 Captive Portal 59 Dot1x Authentication (IEEE 802.1X 60 MAC-Based 802.1X Authentication 60 Dot1x Monitor Mode 60 MAC-Based Port Security 60 Access Control Lists (ACL 61 Time...
User Manual
Page 56
... the PowerConnect M6348 PowerConnect 7000 Series switches and PowerConnect M6348 switches can contain any combination of switch models in the stack are connected together through the management interface (Web, CLI, or SNMP) of the same stack. 56 Switch Features Stacking Compatibility with a larger port count. Stacking Features For information about creating and maintaining a stack of switches, see "Managing a Switch Stack" on the new member is automatically upgraded to match the stack. Single IP Management When multiple switches are 48-port models. The stack can...
... the PowerConnect M6348 PowerConnect 7000 Series switches and PowerConnect M6348 switches can contain any combination of switch models in the stack are connected together through the management interface (Web, CLI, or SNMP) of the same stack. 56 Switch Features Stacking Compatibility with a larger port count. Stacking Features For information about creating and maintaining a stack of switches, see "Managing a Switch Stack" on the new member is automatically upgraded to match the stack. Single IP Management When multiple switches are 48-port models. The stack can...
User Manual
Page 58
.... RADIUS Support The switch has a Remote Authentication Dial In User Service (RADIUS) client and can also configure the switch to accept RADIUS-assigned VLANs. TACACS+ provides centralized security for all locally administered users. The strength of a password is the configuration of users accessing the switch. Using strong passwords lowers overall risk of a password in resisting guessing and brute-force attacks. Password-Protected Management Access Access to the Web, CLI, and SNMP management interfaces is password protected, and there are no default users...
.... RADIUS Support The switch has a Remote Authentication Dial In User Service (RADIUS) client and can also configure the switch to accept RADIUS-assigned VLANs. TACACS+ provides centralized security for all locally administered users. The strength of a password is the configuration of users accessing the switch. Using strong passwords lowers overall risk of a password in resisting guessing and brute-force attacks. Password-Protected Management Access Access to the Web, CLI, and SNMP management interfaces is password protected, and there are no default users...
User Manual
Page 61
... port, LAG, or VLAN interface. For information about configuring ACLs, see "Configuring Access Control Lists" on page 539. ACLs are used to reach network resources. Access Control Lists (ACL) Access Control Lists (ACLs) ensure that filters IP packets based on page 781. The source ID may either be source IP address or a source IP address source MAC address pair. For information about configuring IPSG, see "Configuring Access Control Lists" on page 539. The switch supports the following ALC types: • IPv4 ACLs • IPv6 ACLs • MAC ACLs...
... port, LAG, or VLAN interface. For information about configuring ACLs, see "Configuring Access Control Lists" on page 539. ACLs are used to reach network resources. Access Control Lists (ACL) Access Control Lists (ACLs) ensure that filters IP packets based on page 781. The source ID may either be source IP address or a source IP address source MAC address pair. For information about configuring IPSG, see "Configuring Access Control Lists" on page 539. The switch supports the following ALC types: • IPv4 ACLs • IPv6 ACLs • MAC ACLs...
User Manual
Page 63
... for power savings when the link is down, the PHY automatically goes down for power threshold, power priority, SNMP traps, and PoE legacy device support. The PoE Plus features do not apply to check link pulses. PoE can also be administratively enabled or disabled on a per -port basis. Power Utilization Reporting The switch displays the current power consumption of time and then wakes up to the other models in the PowerConnect 7000 Series...
... for power savings when the link is down, the PHY automatically goes down for power threshold, power priority, SNMP traps, and PoE legacy device support. The PoE Plus features do not apply to check link pulses. PoE can also be administratively enabled or disabled on a per -port basis. Power Utilization Reporting The switch displays the current power consumption of time and then wakes up to the other models in the PowerConnect 7000 Series...
User Manual
Page 77
... from broadcasting the traffic to forward multicast traffic intelligently on each relevant port are queued and scheduled for egress on page 703. This affects how the packets in establishing iSCSI sessions and connections. MAC Multicast Support Multicast service is destined to a host group. Switch Features 77 Layer 2 Multicast Features For information about configuring iSCSI settings, see "Configuring L2 Multicast Features" on the destination port. In Layer 2 multicast services, a single frame addressed to a specific multicast address is a feature that...
... from broadcasting the traffic to forward multicast traffic intelligently on each relevant port are queued and scheduled for egress on page 703. This affects how the packets in establishing iSCSI sessions and connections. MAC Multicast Support Multicast service is destined to a host group. Switch Features 77 Layer 2 Multicast Features For information about configuring iSCSI settings, see "Configuring L2 Multicast Features" on the destination port. In Layer 2 multicast services, a single frame addressed to a specific multicast address is a feature that...
User Manual
Page 90
... ports of PoE. This means you can set the LED to blink to help identify the switch within a rack or room full of -rack switches and include two internal, replaceable, AC power supplies for the switch. Ventilation System Three fans cool the PowerConnect 7024, PowerConnect 7024F, and PowerConnect 7048. For information about how to enable the switch locator feature, see "Using the Device View Switch Locator Feature" on page 102. 90 Hardware Overview Each power supply...
... ports of PoE. This means you can set the LED to blink to help identify the switch within a rack or room full of -rack switches and include two internal, replaceable, AC power supplies for the switch. Ventilation System Three fans cool the PowerConnect 7024, PowerConnect 7024F, and PowerConnect 7048. For information about how to enable the switch locator feature, see "Using the Device View Switch Locator Feature" on page 102. 90 Hardware Overview Each power supply...
User Manual
Page 104
... bits - 1 • Flow control - NOTE: By default, no authentication is required for example, COM 1) to connect to the console. 3 Configure the management station serial port with the following settings: • Data rate - 9600 baud. • Data format - 8 data bits • Parity - All CLI commands can be used over a Telnet session. NOTE: SSH, which is 23. You can also initiate a Telnet session from the Web Interface" on page 279. 104 Using the Command-Line Interface 2 Start the terminal emulator, such...
... bits - 1 • Flow control - NOTE: By default, no authentication is required for example, COM 1) to connect to the console. 3 Configure the management station serial port with the following settings: • Data rate - 9600 baud. • Data format - 8 data bits • Parity - All CLI commands can be used over a Telnet session. NOTE: SSH, which is 23. You can also initiate a Telnet session from the Web Interface" on page 279. 104 Using the Command-Line Interface 2 Start the terminal emulator, such...
User Manual
Page 143
... consecutive MAC addresses. Table 8-1. If the backup unit assumes control due to a master unit failure or warm restart, the backup unit continues to use the original master unit's MAC addresses. Applications that the loss of interfaces with a ring topology (or other units, then both parts of switches uses the MAC addresses assigned to the master unit. IP address, network mask, default gateway on each VLAN Neighbor cache entries Connections List of a single stack link...
... consecutive MAC addresses. Table 8-1. If the backup unit assumes control due to a master unit failure or warm restart, the backup unit continues to use the original master unit's MAC addresses. Applications that the loss of interfaces with a ring topology (or other units, then both parts of switches uses the MAC addresses assigned to the master unit. IP address, network mask, default gateway on each VLAN Neighbor cache entries Connections List of a single stack link...
User Manual
Page 155
... stack member. Command configure switch current_ID renumber new_ID stack movemanagement from_unit to_unit standby unit set description unit member unit SID nsf exit boot auto-copy-sw Purpose Enter Global Configuration mode. Managing the Stack (CLI) This section provides information about the commands you use to manage the stack and view information about these commands, see the PowerConnect 7000 Series CLI Reference Guide. The switch unit ID • SID - The valid range is cleared when the units reset...
... stack member. Command configure switch current_ID renumber new_ID stack movemanagement from_unit to_unit standby unit set description unit member unit SID nsf exit boot auto-copy-sw Purpose Enter Global Configuration mode. Managing the Stack (CLI) This section provides information about the commands you use to manage the stack and view information about these commands, see the PowerConnect 7000 Series CLI Reference Guide. The switch unit ID • SID - The valid range is cleared when the units reset...
User Manual
Page 170
... more in-band ports, LAGs, or VLANs to limit management access by using Telnet and specify the port to access the switch management interface. The database contains a username with the list. Line and Enable passwords Passwords to allow only authorized users to access the switch through the CLI interface (console, Telnet, and SSH) and to validate switch management access for example, Telnet or HTTP) and/or source IP address. TACACS+ Configure the switch to use . For information about one or more remote RADIUS servers to the switch by method...
... more in-band ports, LAGs, or VLANs to limit management access by using Telnet and specify the port to access the switch management interface. The database contains a username with the list. Line and Enable passwords Passwords to allow only authorized users to access the switch through the CLI interface (console, Telnet, and SSH) and to validate switch management access for example, Telnet or HTTP) and/or source IP address. TACACS+ Configure the switch to use . For information about one or more remote RADIUS servers to the switch by method...
User Manual
Page 178
... number consecutive passwords before reuse, and limiting the number of allowed consecutive login attempts are configured. Management Security Default Values Management Security Default Feature Management Access No access profiles are disabled. 178 Controlling Management Access Table 9-2 describes the default settings for the management access features. In addition to controlling access to the management interface, the switch can use RADIUS or the local user database to the network. Port-based access control specifies whether devices that are connected to the switch ports...
... number consecutive passwords before reuse, and limiting the number of allowed consecutive login attempts are configured. Management Security Default Values Management Security Default Feature Management Access No access profiles are disabled. 178 Controlling Management Access Table 9-2 describes the default settings for the management access features. In addition to controlling access to the management interface, the switch can use RADIUS or the local user database to the network. Port-based access control specifies whether devices that are connected to the switch ports...
User Manual
Page 539
... updates, and decide which types of traffic are a collection of the ACL types. The ACL forwards or blocks the traffic based on the rules. This chapter also describes how to configure time ranges that provide security by blocking unauthorized users and allowing authorized users to any physical port, port-channel (LAG), or VLAN routing port. The PowerConnect 7000 Series switches support ACL configuration in this chapter include: • ACL Overview • Configuring ACLs (Web) • Configuring ACLs (CLI) • ACL Configuration Examples ACL Overview Access Control Lists (ACLs...
... updates, and decide which types of traffic are a collection of the ACL types. The ACL forwards or blocks the traffic based on the rules. This chapter also describes how to configure time ranges that provide security by blocking unauthorized users and allowing authorized users to any physical port, port-channel (LAG), or VLAN routing port. The PowerConnect 7000 Series switches support ACL configuration in this chapter include: • ACL Overview • Configuring ACLs (Web) • Configuring ACLs (CLI) • ACL Configuration Examples ACL Overview Access Control Lists (ACLs...
User Manual
Page 688
... operate in the hardware. A LAN storm is incompatible with higher speed switches by a single port. used . 688 Configuring Port-Based Traffic Control Enabling the flow control feature allows PowerConnect 7000 Series switches to communicate with head of packet is Storm Control? Flow control is the result of an excessive number of broadcast, multicast, or unknown unicast messages simultaneously transmitted across a network by requesting that type of line (HOL) blocking prevention mode. The actual rate of ingress traffic required to...
... operate in the hardware. A LAN storm is incompatible with higher speed switches by a single port. used . 688 Configuring Port-Based Traffic Control Enabling the flow control feature allows PowerConnect 7000 Series switches to communicate with head of packet is Storm Control? Flow control is the result of an excessive number of broadcast, multicast, or unknown unicast messages simultaneously transmitted across a network by requesting that type of line (HOL) blocking prevention mode. The actual rate of ingress traffic required to...
Getting Started Guide
Page 7
... on your User Documentation CD, or check the Dell Support website at support.dell.com for the latest updates on documentation and firmware. For information about the Dell PowerConnect 7000 Series switches, including how to configure and monitor switch features, see the User's Configuration Guide, which is a top-of-rack switch. The difference between the PC7048R and PC7048R-RA models is the air-flow direction. Introduction This document provides basic information about how to install a switch and perform...
... on your User Documentation CD, or check the Dell Support website at support.dell.com for the latest updates on documentation and firmware. For information about the Dell PowerConnect 7000 Series switches, including how to configure and monitor switch features, see the User's Configuration Guide, which is a top-of-rack switch. The difference between the PC7048R and PC7048R-RA models is the air-flow direction. Introduction This document provides basic information about how to install a switch and perform...
Getting Started Guide
Page 21
No Loading Program from Flash to perform the initial configuration after the switch is unpacked and mounted. Installation and Configuration Flow Chart Connect Power and Console Power On Yes Choose Option 2 Boot Menu (Special Functions) Reboot Enter Boot Menu? No Manual Initial Configuration Yes Easy Setup Wizard Configuration Advanced Configuration Getting Started Guide 19 Starting and Configuring the Switch The following flow chart provides an overview of the steps you use to RAM Enter Wizard? Figure 1-13.
No Loading Program from Flash to perform the initial configuration after the switch is unpacked and mounted. Installation and Configuration Flow Chart Connect Power and Console Power On Yes Choose Option 2 Boot Menu (Special Functions) Reboot Enter Boot Menu? No Manual Initial Configuration Yes Easy Setup Wizard Configuration Advanced Configuration Getting Started Guide 19 Starting and Configuring the Switch The following flow chart provides an overview of the steps you use to RAM Enter Wizard? Figure 1-13.
Getting Started Guide
Page 25
... CLI Reference Guide. After the initial configuration, you can invoke the Boot menu after the first part of a VT100 terminal or terminal equivalent. Before setting up the initial configuration of the switch, obtain the following assumptions: • The PowerConnect switch was established, and the Dell Easy Setup Wizard prompt appears on the screen of the POST is turned on the following information from the alreadyconnected console port or remotely...
... CLI Reference Guide. After the initial configuration, you can invoke the Boot menu after the first part of a VT100 terminal or terminal equivalent. Before setting up the initial configuration of the switch, obtain the following assumptions: • The PowerConnect switch was established, and the Dell Easy Setup Wizard prompt appears on the screen of the POST is turned on the following information from the alreadyconnected console port or remotely...
Getting Started Guide
Page 29
... default access level is used to login to setup your initial privilege (Level 15) user account. You may setup other management interfaces to add additional management system information later. Please enter the IP address of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from any Management Station. [0.0.0.0]: 10.1.2.100 Step 2: Now we need to the CLI and Web interface. To setup the SNMP management account you return to configure security access for the SNMP management interface. To add a management...
... default access level is used to login to setup your initial privilege (Level 15) user account. You may setup other management interfaces to add additional management system information later. Please enter the IP address of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from any Management Station. [0.0.0.0]: 10.1.2.100 Step 2: Now we need to the CLI and Web interface. To setup the SNMP management account you return to configure security access for the SNMP management interface. To add a management...
Getting Started Guide
Page 296
... interface. Setup the default gateway if IP address is used to login to the CLI and Web interface. Please enter the IP address of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from the network DHCP server. [192.168.2.1]: dhcp 294 Guía de introducción For more information on setting up user accounts and changing privilege levels, see the user documentation. Setup the IP address for the Management Interface. . Would you can use these IP addresses to access the CLI, Web interface, or SNMP interface...
... interface. Setup the default gateway if IP address is used to login to the CLI and Web interface. Please enter the IP address of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from the network DHCP server. [192.168.2.1]: dhcp 294 Guía de introducción For more information on setting up user accounts and changing privilege levels, see the user documentation. Setup the IP address for the Management Interface. . Would you can use these IP addresses to access the CLI, Web interface, or SNMP interface...
Getting Started Guide
Page 331
..., IP addresses are setup on setting up user accounts and changing privilege levels, see the user documentation. To access the switch through any Management Interface you like to access the CLI, Web interface, or SNMP interface of the switch. You may setup other accounts and change privilege levels later. Setup the default gateway if IP address is used to login to setup your initial privilege (Level 15) user account. This account is manually configured on both routing and OOB interface. For more...
..., IP addresses are setup on setting up user accounts and changing privilege levels, see the user documentation. To access the switch through any Management Interface you like to access the CLI, Web interface, or SNMP interface of the switch. You may setup other accounts and change privilege levels later. Setup the default gateway if IP address is used to login to setup your initial privilege (Level 15) user account. This account is manually configured on both routing and OOB interface. For more...