Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Managing Ports on an EX Series Switch

 

You can manage an EX Series switch port from the Ports tab of the Devices page.

View Port Details

You can view the following details of a port on the Ports page:

  • General information: Admin status, link status, port mode, and VLAN IDs configured on the port.

  • Link Settings: Auto negotiation, flow control, MTU, Speed, and link mode.

To view the details of a port:

  1. Do one of the following:
    • To view the general information and the link configuration of the port, select the port and click More > Details. Alternatively, right-click the port and click Details.

      A panel, Detail for port name, displaying the port details, appears on the right side of the ports grid.

    • To view statistics of the port, click the port link.

      The Port Overview pane appears displaying the following statistics of the port in graphical format for the past 1 hr, 8 hrs, 1 day, 1 week, and 1 month duration:

      • Port utilization—CPU utilized by the selected port (in terms of input and output) for the selected time span.

      • Packet transmitted through the port—Number of incoming (input) and outgoing (output) packets for the selected time span.

      • Number of Bytes transmitted through the port—MTU (in bytes) for incoming (input) and outgoing (output) packets for the selected time span.

      • Packet loss at the port—Packet loss in incoming (input) and outgoing (output) packets for the selected time span.

      • Errors on the port—Number of errors in the incoming (input) and outgoing (output) packets for the selected time span.

    Click the Back to Device link to view to the Ports tab.

Enable Ports

You enable a port to allow traffic through the port. When you enable a port, the Admin status of the port is changed to Up.

Note

You can enable one or more ports at the same time.

To enable one or more ports:

  1. Select the ports and click More > Enable Port(s). Alternatively, right-click the ports and click Disable Port(s).

    A job to enable the ports is initiated.

After a port is enabled, the Admin Status is changed to Up.

Note

The device is monitored once every five minutes. Therefore, it takes upto five minutes for the change in the Admin Status to reflect on the CSO GUI.

Disable Ports

You disable a port to block traffic through the port. When you disable a port, the Admin status and Link status of the port are changed to Down.

Note

You can disable one or more ports at the same time.

To disable one or more ports:

  1. Select the ports and click More > Disable Port(s). Alternatively, right-click the port and click Disable Port(s)

    A job to disable the ports is initiated.

After a port is disabled, the Admin and Link statuses for the port are set to Down.

Note

The device is monitored once every five minutes. Therefore, it takes upto five minutes for the change in the Admin Status and Link Status to reflect on the GUI.

Deploy or Redeploy a Port Profile

A port profile defines the authentication settings for the port and other port parameters such as flow control, link mode, storm control, MAC limit, and so on. The behavior of the port is defined by the values for parameters defined in the port profile. You can deploy a port profile on one or more ports at the same time.

You must redeploy a port profile when:

  • the port profile that is assigned to a port is modified.

  • the authentication profile or firewall filter that is assigned to the port profile is modified.

When a port profile or a profile associated with the port profile is modified, the deployment status of the port is changed to Pending Deployment.

The changes made to the port profile or the associated authentication profile or firewall filter are applied on the ports only when you redeploy the modified port profile.

To deploy or redeploy a port profile on one or more switch ports:

  1. Select the port and click More > Deploy.

    The Deploy page appears.

  2. For the Type field, do one of the following:
    • Click Run now to deploy the port profile immediately.

    • Click Schedule at a later time to deploy the port profile later.

      If you select this option, enter the date and time when you want to deploy in the Date and Time fields that appear.

  3. Click OK.

    If you select the Run now option, a job is created to deploy the profile immediately; otherwise, the job to deploy is created on the date and at the time that you scheduled.

    When you deploy a port profile, the deployment status of the ports is set to Pending Deployment indicating that the profile is associated with the port. When the profile is in the process of being committed on the ports, the deployment status changes to In progress. If the deployment job completes successfully, the deployment status of the ports is set to Success and if the job fails, the deployment status is set to Failed.

Configure EX Series Switch Ports Overview

Starting from Release 5.1.0, you can use CSO to configure and monitor the ports of the following EX Series switches: EX2300, EX3400, EX4300, EX4600, and EX4650

Note

You can configure and monitor ports on both a physical device and members of a virtual chassis. You cannot configure and monitor EX4600 and EX4650 Series switches, if the switches are configured as a virtual chassis.

You can add the following profiles to CSO and deploy them on the switch to configure the switch and the switch ports:

  • Port profiles to define the behavior of a port. Port profiles allow you to provision multiple ports on a switch with the same set of attributes at the same time. A port profile includes the following:

    • Authentication profile (optional)

    • Firewall filters (Optiional)

    • Link settings

    • Storm control settings

    • Power over Ethernet (PoE) settings

    • Port security settings

  • Authentication profiles to implement network access control (NAC).

    An authentication profile defines the authentication method, fallback options, and other settings such as number of retries, maximum number of authentication requests that can be allowed for a supplicant, authentication server timeout, and so on related to the communication between the switch and the supplicant (a user or device such as printer).

    An authentication profile may or may not be referenced in a port profile. However, you can assign the authentication profile to a port when you configure the port manually.

  • Firewall filters to deny or permit network access to supplicants based on the filter terms.

    Firewall filters may or may not be referenced in a port profile. However, you can assign the firewall filters to a port when you configure the port manually.

  • Access profiles to define the list of RADIUS servers to be used for authentication.

    An access profile is deployed on a switch and is referenced by an authentication profile when dot1x authentication is configured on the switch port.

  • RADIUS server profiles to define the RADIUS server for authentication and accounting. You define the RADIUS server IP address, password, authorization ports, accounting ports, retry counts, and server timeout in this profile.

    A RADIUS server profile is referenced by an access profile and deployed on the switch through the access profile.

Configure Switch Ports

You can configure the ports either by using a port profile or manually.

By using a port profile, you can configure multiple ports of the switch at the same time.

To configure the ports by using a port profile:

  1. (Optional) Create an authentication profile. See Add Authentication Profiles for details.
  2. (Optional) Create a firewall filter. See Add Firewall Filters for details.
  3. Create a port profile. See Add Port Profiles for details.
  4. Assign and deploy the port profile on one or more switch ports. See Edit Configuration of Ports for details.
  5. Deploy the port profile on the switch ports. See Deploy or Redeploy a Port Profile for details.

To configure a port manually:

Note

If you want to configure 802.1x authentication or apply firewall filters on a port while configuring the port manually, ensure that the authentication profile and the firewall filters are already configured.

  1. In the customer portal, select Resources > Devices.

    The Devices page appears.

  2. Click the switch for which you want to configure ports.

    The switch page appears.

  3. On the Ports tab, select the ports that you want to configure and click More > Edit Configuration.

    The Edit Port Configuration page appears.

  4. Edit the port parameters and deploy the configuration on the port. Refer to the instructions in the Edit Configuration of Ports topic for completing and deploying the port configuration.

When you deploy a port profile, the deployment status of the ports is set to Pending Deployment indicating that the profile is assigned to the ports. When the profile is in the process of being committed on the ports, the deployment status changes to In Progress. If the deployment job completes successfully, the deployment status of the ports is set to Success and if the job fails, the deployment status is set to Failed.

WHAT'S NEXT

After you configure a switch port, you can allow traffic through the switch ports and start monitoring the port.

Life Cycle of a Port Profile

The life cycle of a port profile is as follows:

  1. Add a port profile to CSO.

  2. Assign the port profile to a port.

    When you assign the port profile, the deployment status of the port is set to Pending Deployment indicating that the profile is assigned to the port.

  3. Deploy the port profile on a port.

    During the deployment, that is when the configuration is committed on the port, the deployment status is changed to In Progress. If the deployment job completes successfully, the deployment status of the port is set to Success; otherwise, the deployment status is set to Failed.

  4. Edit the port profile.

    When you edit the port profile or any profile associated with the port profile, the deployment status of the port profile is set to Pending Deployment.

  5. Redeploy the port profile for the changes to reflected in the port configuration.

    During the redeployment, the deployment status of the port is changed to In Progress. If the deployment job completes successfully, the deployment status of the port is set to Success; otherwise, the deployment status is set to Failed.

  6. Dissociate the port profile.

  7. Delete the port profile.

Edit Configuration of Ports

You can edit the configuration of a port either by using a port profile or manually.

If a profile is already deployed, edit the profile, and then redeploy for the changes to take effect.

When using a port profile to edit ports, you can:

  • assign a port profile or modify the profile assigned to the port

  • modify the VLANs assigned to the port

To edit the configuration of one or more ports:

  1. Select one or more ports and click More > Edit Configuration. Alternatively, right-click the ports and click Edit Configuration.

    The Edit Port(s) page appears.

  2. Do one of the following:

    For Options, select one of the following:

    • To edit the port configuration by using a port profile:

      1. Click Use Port Profile.

        The Port Profile drop down list and an option to select VLAN appears.

      2. Select a port profile that you want to assign to the port from the Port Profile drop down list.
      3. In the VLAN field:
        • If the port is configured as a trunk port in the port profile, assign multiple VLANs by selecting the VLANs in the Available column and clicking the right-arrow to move them to the Selected column.

        • If the port is configured as an access port in the port profile, assign a single VLAN by selecting the VLAN in the Available column and clicking the right-arrow to move it to the Selected column.

    • To edit the port configuration manually:

      1. Click Manually edit port configurations.

        The port parameters such as port mode, link mode, flow control appear.

      2. Edit the parameters by referring to Port Profile Settings.
  3. Click Next.

    Deployment options appear.

  4. (Optional) Select the Do not deploy option if you want to only save the edited configuration in CSO, but not push and commit the configuration to the switch.
  5. For the Type field, do one of the following:
    • Click Run now to save the edited configuration in CSO and commit the edited configuration on the switch.

    • Click Schedule at a later time to schedule a time to commit the edited configuration on the switch.

      If you select the Schedule at later time option, enter the date and time when you want to deploy, in the fields that appear when you select the option.

  6. Click Next.

    A summary of all the port profile parameter appears.

  7. (Optional) Click Edit to revisit the settings and make further changes.
  8. Click OK.

    If you select the Run now option, a job is created to deploy the profile at once; otherwise, the job to deploy is created on the date and at the time that you scheduled.

    During the deployment (that is when the deploy is executing), the Deployment status of the port is set to Pending Deployment, on the Ports tab of the Devices page.

    If the deployment job completes successfully:

    • A message appears on the top of the Ports page indicating that the deployment is successful.

    • Deployment Status of the port is set to Deployed.

    • The Port Profile column displays:

      • the profile name when a port profile is used for editing.

      • Manually Configured when the configuration is manually edited.

Dissociate a Profile from a Port

You can dissociate a profile from a port when you want to delete the profile or assign another profile to the port. The dissociate action removes the association between the port profile and one or more ports in CSO. You must perform the Deploy action on the ports from which the port profile was dissociated to remove the configuration deployed on the port and move the ports back to the default state.

To dissociate a profile from a port:

  1. Select the ports and click More > Dissociate Profile. Alternatively, right-click the port and click Dissociate Profile.

    The Dissociate Port Configuration dialog box appears.

  2. Click OK to dissociate the port profile.

    After the port profile is dissociated successfully, the Deployment Status on the Ports tab of the Devices page changes to Pending Deployment.

  3. Select the port and click More > Deploy to commit the configuration on the switch.

    The port profile is dissociated from the port and the port is returned to the factory default settings.