You can manage an EX Series switch port from the Ports tab of the Devices page.
You can view the following details of a port on the Ports page:
General information: Admin status, link status, port mode, and VLAN IDs configured on the port.
Link Settings: Auto negotiation, flow control, MTU, Speed, and link mode.
To view the details of a port:
To view the general information and the link configuration of the port, select the port and click More > Details. Alternatively, right-click the port and click Details.
A panel, Detail for port name, displaying the port details, appears on the right side of the ports grid.
To view statistics of the port, click the port link.
The Port Overview pane appears displaying the following statistics of the port in graphical format for the past 1 hr, 8 hrs, 1 day, 1 week, and 1 month duration:
Port utilization—CPU utilized by the selected port (in terms of input and output) for the selected time span.
Packet transmitted through the port—Number of incoming (input) and outgoing (output) packets for the selected time span.
Number of Bytes transmitted through the port—MTU (in bytes) for incoming (input) and outgoing (output) packets for the selected time span.
Packet loss at the port—Packet loss in incoming (input) and outgoing (output) packets for the selected time span.
Errors on the port—Number of errors in the incoming (input) and outgoing (output) packets for the selected time span.
Click the Back to Device link to view to the Ports tab.
You enable a port to allow traffic through the port. When you enable a port, the Admin status of the port is changed to Up.
Note You can enable one or more ports at the same time.
To enable one or more ports:
A job to enable the ports is initiated.
After a port is enabled, the Admin Status is changed to Up.
Note The device is monitored once every five minutes. Therefore, it takes upto five minutes for the change in the Admin Status to reflect on the CSO GUI.
You disable a port to block traffic through the port. When you disable a port, the Admin status and Link status of the port are changed to Down.
Note You can disable one or more ports at the same time.
To disable one or more ports:
A job to disable the ports is initiated.
After a port is disabled, the Admin and Link statuses for the port are set to Down.
Note The device is monitored once every five minutes. Therefore, it takes upto five minutes for the change in the Admin Status and Link Status to reflect on the GUI.
A port profile defines the authentication settings for the port and other port parameters such as flow control, link mode, storm control, MAC limit, and so on. The behavior of the port is defined by the values for parameters defined in the port profile. You can deploy a port profile on one or more ports at the same time.
You must redeploy a port profile when:
the port profile that is assigned to a port is modified.
the authentication profile or firewall filter that is assigned to the port profile is modified.
When a port profile or a profile associated with the port profile is modified, the deployment status of the port is changed to Pending Deployment.
The changes made to the port profile or the associated authentication profile or firewall filter are applied on the ports only when you redeploy the modified port profile.
To deploy or redeploy a port profile on one or more switch ports:
The Deploy page appears.
Click Run now to deploy the port profile immediately.
Click Schedule at a later time to deploy the port profile later.
If you select this option, enter the date and time when you want to deploy in the Date and Time fields that appear.
If you select the Run now option, a job is created to deploy the profile immediately; otherwise, the job to deploy is created on the date and at the time that you scheduled.
When you deploy a port profile, the deployment status of the ports is set to Pending Deployment indicating that the profile is associated with the port. When the profile is in the process of being committed on the ports, the deployment status changes to In progress. If the deployment job completes successfully, the deployment status of the ports is set to Success and if the job fails, the deployment status is set to Failed.
Starting from Release 5.1.0, you can use CSO to configure and monitor the ports of the following EX Series switches: EX2300, EX3400, EX4300, EX4600, and EX4650
Note You can configure and monitor ports on both a physical device and members of a virtual chassis. You cannot configure and monitor EX4600 and EX4650 Series switches, if the switches are configured as a virtual chassis.
You can add the following profiles to CSO and deploy them on the switch to configure the switch and the switch ports:
Port profiles to define the behavior of a port. Port profiles allow you to provision multiple ports on a switch with the same set of attributes at the same time. A port profile includes the following:
Authentication profile (optional)
Firewall filters (Optiional)
Link settings
Storm control settings
Power over Ethernet (PoE) settings
Port security settings
Authentication profiles to implement network access control (NAC).
An authentication profile defines the authentication method, fallback options, and other settings such as number of retries, maximum number of authentication requests that can be allowed for a supplicant, authentication server timeout, and so on related to the communication between the switch and the supplicant (a user or device such as printer).
An authentication profile may or may not be referenced in a port profile. However, you can assign the authentication profile to a port when you configure the port manually.
Firewall filters to deny or permit network access to supplicants based on the filter terms.
Firewall filters may or may not be referenced in a port profile. However, you can assign the firewall filters to a port when you configure the port manually.
Access profiles to define the list of RADIUS servers to be used for authentication.
An access profile is deployed on a switch and is referenced by an authentication profile when dot1x authentication is configured on the switch port.
RADIUS server profiles to define the RADIUS server for authentication and accounting. You define the RADIUS server IP address, password, authorization ports, accounting ports, retry counts, and server timeout in this profile.
A RADIUS server profile is referenced by an access profile and deployed on the switch through the access profile.
You can configure the ports either by using a port profile or manually.
By using a port profile, you can configure multiple ports of the switch at the same time.
To configure the ports by using a port profile:
To configure a port manually:
Note If you want to configure 802.1x authentication or apply firewall filters on a port while configuring the port manually, ensure that the authentication profile and the firewall filters are already configured.
The Devices page appears.
The switch page appears.
The Edit Port Configuration page appears.
When you deploy a port profile, the deployment status of the ports is set to Pending Deployment indicating that the profile is assigned to the ports. When the profile is in the process of being committed on the ports, the deployment status changes to In Progress. If the deployment job completes successfully, the deployment status of the ports is set to Success and if the job fails, the deployment status is set to Failed.
After you configure a switch port, you can allow traffic through the switch ports and start monitoring the port.
The life cycle of a port profile is as follows:
Add a port profile to CSO.
Assign the port profile to a port.
When you assign the port profile, the deployment status of the port is set to Pending Deployment indicating that the profile is assigned to the port.
Deploy the port profile on a port.
During the deployment, that is when the configuration is committed on the port, the deployment status is changed to In Progress. If the deployment job completes successfully, the deployment status of the port is set to Success; otherwise, the deployment status is set to Failed.
Edit the port profile.
When you edit the port profile or any profile associated with the port profile, the deployment status of the port profile is set to Pending Deployment.
Redeploy the port profile for the changes to reflected in the port configuration.
During the redeployment, the deployment status of the port is changed to In Progress. If the deployment job completes successfully, the deployment status of the port is set to Success; otherwise, the deployment status is set to Failed.
Dissociate the port profile.
Delete the port profile.
You can edit the configuration of a port either by using a port profile or manually.
If a profile is already deployed, edit the profile, and then redeploy for the changes to take effect.
When using a port profile to edit ports, you can:
assign a port profile or modify the profile assigned to the port
modify the VLANs assigned to the port
To edit the configuration of one or more ports:
The Edit Port(s) page appears.
For Options, select one of the following:
To edit the port configuration by using a port profile:
The Port Profile drop down list and an option to select VLAN appears.
If the port is configured as a trunk port in the port profile, assign multiple VLANs by selecting the VLANs in the Available column and clicking the right-arrow to move them to the Selected column.
If the port is configured as an access port in the port profile, assign a single VLAN by selecting the VLAN in the Available column and clicking the right-arrow to move it to the Selected column.
To edit the port configuration manually:
The port parameters such as port mode, link mode, flow control appear.
Deployment options appear.
Click Run now to save the edited configuration in CSO and commit the edited configuration on the switch.
Click Schedule at a later time to schedule a time to commit the edited configuration on the switch.
If you select the Schedule at later time option, enter the date and time when you want to deploy, in the fields that appear when you select the option.
A summary of all the port profile parameter appears.
If you select the Run now option, a job is created to deploy the profile at once; otherwise, the job to deploy is created on the date and at the time that you scheduled.
During the deployment (that is when the deploy is executing), the Deployment status of the port is set to Pending Deployment, on the Ports tab of the Devices page.
If the deployment job completes successfully:
A message appears on the top of the Ports page indicating that the deployment is successful.
Deployment Status of the port is set to Deployed.
The Port Profile column displays:
the profile name when a port profile is used for editing.
Manually Configured when the configuration is manually edited.
You can dissociate a profile from a port when you want to delete the profile or assign another profile to the port. The dissociate action removes the association between the port profile and one or more ports in CSO. You must perform the Deploy action on the ports from which the port profile was dissociated to remove the configuration deployed on the port and move the ports back to the default state.
To dissociate a profile from a port:
The Dissociate Port Configuration dialog box appears.
After the port profile is dissociated successfully, the Deployment Status on the Ports tab of the Devices page changes to Pending Deployment.
The port profile is dissociated from the port and the port is returned to the factory default settings.