HOTT 2014

Stratix 5700: Device Manager

2014 6.2

Stratix 5700: Device Manager

Training Lab Manual

DOCUMENT CONVENTIONS_____________________________________________________7
BEFORE YOU BEGIN STRATIX 5900________________________________________________9
LAB FILES 9
HARDWARE REQUIRED TO COMPLETE THESE LABS____________________________________9
LAB 1: CONFIGURING A NEW STRATIX 5700 WITH EXPRESS SETUP_________________________11
RESETTING THE SWITCH TO ITS DEFAULT, OUT-OF-BOX CONDITION_______________________12
CREATING TWO NEW VLANS REQUIRED FOR TODAYS LABS___________________________14
CREATING DHCP TABLES____________________________________________________15
CONFIGURING SMARTPORTS___________________________________________________19
INTERESTING NOTE:_________________________________________________________21
ASSIGNING PORTS TO VLANS_________________________________________________22
SWITCH VIRTUAL INTERFACE__________________________________________________24
FINAL CONFIGURATION_______________________________________________________28
LAB 2: OTHER NEW FEATURES____________________________________________________31

ROUTING IN THE STRATIX 8000 AND 5700 DEVICEMANAGER

_____________________31

CHANGING THE SDM PROFILE TO DEFAULT_______________________________________37

LAB 3: SAVING AND LOADING CONFIGURATIONS_______________________________________39

ADMIN / LOAD-SAVE

ADMIN/ RESTART-RESET

___________________________________________________39

________________________________________________44

LAB 4: OTHER NEW FEATURES____________________________________________________46

Network Address Translation Stratix -5700

V2014 6.2

Page 5 of 49

DEVICE MANAGEMENT: ADMIN / USERS

FILE MANAGEMENT:

SPANNING TREE:

____________________________________46

ADMIN / LICENSE UPGRADE

CONFIG / STP SETTINGS

HELP NEW LOOK AND FEEL

____________________________47

________________________________47

____________________________________________48

SPANNING TREE: CONFIG / STP SETTINGS / PORT FAST

SECURITY:

CONFIG / PORT SECURITY

________________________48

____________________________________49

Network Address Translation Stratix -5700

V2014 6.2

Page 6 of 49

Document Conventions
Throughout this workbook, we have used the following conventions to help guide you through the
lab materials.
This style or symbol:

Indicates:

Words shown in bold italics

(e.g., RSLogix 5000 or OK)

Any item or button that you must click on, or a menu name
from which you must choose an option or command. This will
be an actual name of an item that you see on your screen or
in an example.

Words shown in bold italics,

enclosed in single quotes
(e.g., 'Controller1')

An item that you must type in the specified field. This is

information that you must supply based on your application
(e.g., a variable).
Note: When you type the text in the field, remember that you
do not need to type the quotes; simply type the words that
are contained within them (e.g., Controller1).
The text that appears inside of this gray box is supplemental
information regarding the lab materials, but not information
that is required reading in order for you to complete the lab
exercises. The text that follows this symbol may provide you
with helpful hints that can make it easier for you to use this
product. Most often, authors use this Tip Text style for
important information they want their students to see.

Note: If the mouse button is not specified in the text, you should click on the left mouse button...

Network Address Translation Stratix -5700

V2014 6.2

Page 7 of 49

Before You Begin Stratix 5900

This set of labs contains material about the Stratix 5900
Lab Objective

Learn to use Device Manager and CLI to configure a new switch.

If you already have experience with an older version, learn to demonstrate what the
differences are in the new IOS - V15.2(1)EY1

Lab Files
No lab files are necessary to complete this lab as written. You will create the entire configuration
from scratch.

Hardware required to complete these labs

Classroom router configured for HOT Training

Stratix 5700, 10 Port NAT version, with V15.2(1)EY1 IOS

Software required to complete these labs

Google Chrome browser

PuTTY or another terminal emulator

End of Before You Begin Section

Network Address Translation Stratix -5700

V2014 6.2

Page 9 of 49

Network Address Translation Stratix -5700

V2014 6.2

Page 10 of 49

Lab 1: Configuring a new Stratix 5700 with Express

Setup
The Internetwork Operating System (IOS) or firmware of the Stratix 5700, 8000, and 8300 has been
updated. In the newest version, (May 2014) the Device Manager webpage has been changed as
well. Although the functionality is similar, and in some cases expanded, the look and feel is entirely
different.
This lab has two primary objectives:

Learn to use Device Manager and CLI to configure a new switch.

If you already have experience with an older version, this lab will help you see where the
changes are. Learn it in HOTT, not in front of a customer!

When the lab is complete, you will have configured it with several VLANs, DHCP Persistence, and
Smart Ports. Your configuration will be similar to this. Your VLANs and IP addresses will be
different, and will reflect your station number. The example shown here is for Station #42.

MAD = Multiport Automation Device

VDA = Virtual Desktop for Automation
SFA = Switch for Automation

Network Address Translation Stratix -5700

V2014 6.2

Page 11 of 49

Resetting the switch to its default, out-of-box condition

This is not really a new switch, so we need to reset it to its out-of-box condition. This is different
from the 8000/8300 method:
To reset the switch to its default conditions, make sure the switch is powered up and has
completed booting. No Ethernet cables should be plugged into the switch at this time.
Use a paperclip to hold the Express Setup button. After about 17 seconds, the Setup and EIP
Net LEDs will illuminate steady, red in color.
Release the paperclip when you see the two red-colored LEDs turn on. The switch will
complete its reboot in about 90 seconds. You know it is time to continue when the Setup LED
is flashing.
Briefly click the Express Setup button with the previously used Cisco reset tool.
The LED for Interface Fa1 will begin to flash green. Plug the green patch cable with yellow
tape (the lab PC) in to Fa1 on your Stratix 5700. The DHCP server in the switch will serve up
an address of 169.254.0.2 /29. The address of the switch (for now) is 169.254.0.1 /29.
Open Google Chrome and enter the address in to the URL box. Push Enter to navigate to the
switch.

The default user name is admin ,and the default password is switch

Network Address Translation Stratix -5700

V2014 6.2

Page 12 of 49

 You need to make your Express Setup look like the sample below. BUT, remember to substitute
your two digit station number for 42. DeviceManager forces you to select the Management
Interface VLAN now before any other VLANs are created. Your configuration here will be
temporary and changed later after you configure your own VLANs.

Log back in to the switch with your new user ID and Password of hott and the dashboard will
be displayed.

Network Address Translation Stratix -5700

V2014 6.2

Page 13 of 49

Creating VLANs required for todays labs

Select Configure / VLAN Management as shown below to access the VLAN management
screen.

Two VLANs are currently shown in the list. VLAN 1 is typically not used in actual
applications, and VLAN 1000 is a temporary Express Setup VLAN.

Click the
button to add three new VLANs. A 100, 200, and 700 series number will be
used in this lab.
You will be replacing 42 in the VLAN IDs with your two-digit station number. This
number is shown along the top of your computer monitor.

Network Address Translation Stratix -5700

V2014 6.2

Page 14 of 49

 Click OK and you will see your new 100 series VLAN added to the list.

Now add a 200 and 700 series VLAN in the same way, again replacing all 42s with your 2
digit station number, so that the final VLAN chart looks like this. All subnets are /24.

Creating DHCP Tables

The VLANs to complete the lab have been created. All of the devices in the classroom are set to
obtain an IP address automatically so you will need to create the DHCP persistence tables so that
IP addresses can be assigned. Using this feature for customer demos of Ethernet based hardware
will really simplify things. No static addresses are required.
Open the DHCP tools by clicking Configure/DHCP as shown.

Network Address Translation Stratix -5700

V2014 6.2

Page 15 of 49

DHCP Pools
DHCP pools are predefined lists of addresses that can be assigned to the ports.
Create the DHCP pool for your 100 series VLAN as shown. Notice the 100 series VLANs are
using the high numbers of the subnet. (Lower numbers may be used by other switches used in
other labs that run in the classroom.)

Next create your 200 series DHCP pool.

Create the 700 series DHCP pool.

Network Address Translation Stratix -5700
V2014 6.2

Page 16 of 49

 Make sure the completed pool table, includes your three VLANs.

Network Address Translation Stratix -5700

V2014 6.2

Page 17 of 49

Assigning Ports their Addresses

Select DHCP Persistence tab as shown above, and begin to fill in the table as shown below.

Network Address Translation Stratix -5700

V2014 6.2

Page 18 of 49

 When completed the table should look like this: (But yours will not have any 42s)

Network Address Translation Stratix -5700

V2014 6.2

Page 19 of 49

Configuring Smartports
Currently all of the hardware ports on the switch are using the None Smartport. You need to
optimize the switch with Multiport Automation Device and Virtual Desktop (computer) Smartports.
Open the Smartport configuration screen as shown.

Network Address Translation Stratix -5700

V2014 6.2

Page 20 of 49

A feature of the new version of IOS is the ability to select multiple ports to receive the
same Smartport setting. Select Fa1/2, 4, 6, and 8 and you can manage them together.

Click

to assign the Smartport Roles.

Select the role as Multiport Automation Device.

Click Submit.

Network Address Translation Stratix -5700

V2014 6.2

Page 21 of 49

 Now, check the boxes and edit Fa1/3, Fa1/5, and Fa1/7. Edit as shown below.

Click submit to save your work.

Interesting Note:

The Access Vlan is where you would

The Access Vlan is where you would
expect to associate this port with a
expect to associate this port with a
particular VLAN but in the current
particular VLAN but in the current
version you cannot set the Access
version you cannot set the Access
Vlan here.
Vlan here.

Network Address Translation Stratix -5700

V2014 6.2

Page 22 of 49

Assigning Ports to VLANs

Navigate to the Port Settings page as shown below.

Network Address Translation Stratix -5700

V2014 6.2

Page 23 of 49

Assigning Physical ports to VLANs

In this section, you will edit the Physical Port Table will look like this. This is where you
assign ports to VLANs in the new Device Manager. Use this as your guide as you complete
this section. To learn how to edit, see the next step.

To start making required edits to the table above, click the Fa1/2 radio button, then click
to open the edit dialog.

Open the Edit Physical Port configuration box one at a time for ports Fa1/2, 3, 4, 5, 6,7,8 using
the completed page with the yellow highlighting above to make the edits. Remember to replace
42 with your two-digit station number.

You have completed most of the required configuration for the 5700 to work with the remaining labs.

Network Address Translation Stratix -5700

V2014 6.2

Page 24 of 49

Switch Virtual Interface

Each of the VLANs configured on this switch has an address associated with it. The addresses are
known as the VLAN Interfaces. These addresses are used for the DHCP server. Additionally, you
can manage the switch using any of those addresses as long as your computer is on the same
VLAN. However, if you want to route to a management address of the switch from a different VLAN
then a Default Gateway is needed. Of all the VLAN interfaces on a Layer 2 switch only one is
routable; the Switch Virtual Interface, or SVI. The switch has only one default gateway.
When you first started to configure this switch using Express Setup, we left the Default Gateway
blank. We need to change that so the switch can be managed remotely.
Obtaining a new address
You are still communicating on the temporary VLAN 1000 connected to Fa1/1. You have configured
DHCP for some other VLANs. Lets see if it works.
Remove the green with yellow Ethernet cable from the switch. The computer will lose its
address in a moment.
Plug the green with yellow Ethernet cable in to port Fa1/3, directly below where it was
previously connected. In a few seconds, you will notice the LED corresponding to this port
begin to blink green, indicating that communications has been established.
Using ipconfig, verify that your computer has received an address on YOUR 100 series
VLAN. Great! Your DHCP settings are working.

Open Google Chrome and go to 172.16.1NN.129 replacing the Ns, of course, with your two
digit station number. This was the address that you defined for your 100 series VLAN when
you filled this table out previously.

Network Address Translation Stratix -5700

V2014 6.2

Page 25 of 49

 Open the Express Setup page as shown below.

Enter the Default Gateway for the switch, which completes the configuration of the VLAN 142
SVI. (Yours of course.is not 42!)

Dont forget to save your changes to flash memory by clicking the Submit button.

Network Address Translation Stratix -5700

V2014 6.2

Page 26 of 49

Remember this screen? Its the DHCP table you filled in earlier.

Verifying the configuration of your 100 series VLAN

Plug the L45 ENBT into Port Fa1/4 of the 5700 using the yellow Ethernet cable. Cycle power
to the L45 and in a minute, you should see the ENBT acquire and address of 172.16.142.137.
You can check Port Fa1/2 as well.

Verifying the configuration of your 200 series VLAN

Now move the PC (green with yellow tape Ethernet cable) to Fa1/5. Verify that it acquires
an address of 172.22.242.3. (Yours, of course, will not be 42.)
Move the yellow cable (the L45) from port Fa1/4 to Fa1/6.
Cycle power to the CompactLogix by opening the door on the power supply and operating the
toggle switch. It should acquire and address of 172.22.242.4.

Network Address Translation Stratix -5700

V2014 6.2

Page 27 of 49

 Your PC has an address on the 200 series VLAN (172.22.2NN.3). Log in to the switch using its
address of 172.22.2NN.2. Note that this page always shows the address you used to log in.

Go to the Express Setup page as shown.

Note that the Default Gateway is still on the 100 VLAN. Only one VLAN can have a Default
Gateway, which is the SVI. If you were to change the Default Gateway address here, then the
200 series VLAN would be the SVI instead of the 100 VLAN. DO NOT CHANGE THE
GATEWAY!

Network Address Translation Stratix -5700

V2014 6.2

Page 28 of 49

Final Configuration
The last thing we need to do is to configure a switch port to communicate to the room central
Stratix 8300, and of course, physically connect the two switches. You have configured three VLANs
on your switch, and the HOTT team has already configured those same VLANs on the central 8300.

Until you create a trunk between your 5700 and the central 8300 your station is isolated from the
rest of the room. The 8300 is the router for your three VLANs, and the VLANs at the other stations
in the room.
Creating the Switch for Automation Smartport, and Defining the Native VLAN
First we need to create VLAN 99. All HOTT classrooms (wellmost of the classrooms) use VLAN
99 as the Native VLAN, which is the non-encapsulated VLAN on the wire.
Open the VLAN Management page.

Network Address Translation Stratix -5700

V2014 6.2

Page 29 of 49

 You need to add VLAN 99 in the VLAN table so it looks like this. You know what to do, because
you did it before. Notice that an IP address is not required for this VLAN.

Go to the Smartports page, as you did earlier.

Configure a Switch for Automation Smartport for Gi1 so the completed table looks like this:

Network Address Translation Stratix -5700

V2014 6.2

Page 30 of 49

 Test the connection to the Central 8300 in the room by pinging a PC located at another lab
station in the room. (This may require you to talk to the person next to youor across the
room, and ask their IP address.) If it works it proves that both switches are connected, and
that the 8300 is routing between the stations. Make sure the black cable with the wire
marker is connected to the GE WAN port.

You should be able to communicate with

You should be able to communicate with
the other station using any valid address.
the other station using any valid address.
Just make sure there is a device on the
Just make sure there is a device on the
network that actually has the address
network that actually has the address
you are trying to ping!
you are trying to ping!

The configuration required for the following labs is complete.

Network Address Translation Stratix -5700

V2014 6.2

Page 31 of 49

Lab 2: Other new features

Lets take a look at some of the other new features. You should not make any changes, but you can
look at where you need to go to make the necessary changes.
Open the Configure sub menu.

Routing in the Stratix 8000 and 5700 DeviceManager

You will remember that enabling routing in the Stratix 8000 and Stratix 5700 is a three step process.
Previously you needed to use CLI for these steps.
I.

Set the SDM (Switch Database Management) Template to Routing.

II. Turn routing on. (When using CLI to enable routing its ip routing.)
III. Create static routes. Only needed if this router is going to connect to another router.
These steps have been added to the new Device Manager.

Network Address Translation Stratix -5700

V2014 6.2

Page 32 of 49

Setting the SDM Template

Select Routing from the Configure drop down menu.

Hmmmmmmm. Everything is
Hmmmmmmm. Everything is
greyed out! Before you can
greyed out! Before you can
turn routing on you need to
turn routing on you need to
change the SDM Profile.
change the SDM Profile.
And you cant do it here.
And you cant do it here.

Go to the Admin/SDM Template page.

Select the Lanbase Routing template, as shown, and click Submit.

Network Address Translation Stratix -5700

V2014 6.2

Page 33 of 49

 OK. The switch needs to reboot after rearranging the switch database management template.
In about 90 seconds the switch will be ready to continue. The easiest way to know the reload is
complete is to watch the LED for port FA3. If it shows activity, you are ready to continue.
You will need to re-establish communications with the switch. So click the reload icon.

Network Address Translation Stratix -5700

V2014 6.2

Page 34 of 49

Exploring the Routing Config Screens

Go to the Configure/Routing screen.

In the Routing screenshot below, Inter-VLAN routing,

also known as Connected Routes is configured by the
Enable Routing checkbox. If there is only one router in
the system, that is all that is required.
Routing will take place between VLANs connected to the
switch, as long as all of the VLANs have addresses on
this switch and the end devices all use those addresses
as their Default Gateways.

The Routing page shown below should be open, and you will notice that the switch current
default gateway is shown in the Gateway field.

Network Address Translation Stratix -5700

V2014 6.2

Page 35 of 49

 Check the Enable Routing box, and Submit, and watch what happens on your screen.

A default static route is automatically configured for you; however, you need to make sure that
this is actually the route you want. The Next Hop Router address must be the address of a
routed interface (not a switchport) on another router. In this case the other router is the Central
8300 in the corner of the classroom.
Editing the default static route
Check the box and edit the route as shown. Use your simple, single digit station address (no
leading zero) for the third octet.

Network Address Translation Stratix -5700

V2014 6.2

Page 36 of 49

Now watch what happens when you click Save. The Gateway address of the switch is
changed to agree with the Next Hop Router address. This is helpful if there is just one static
route, but on the 8300 in the corner, there are at least 30 static routes to get to all the
VLANs at all the stations in the room.

Deleting your routing configuration: Required for the remaining HOTT labs today
Delete the static route, uncheck the Enable Routing, then Submit.

OK. Thats what we want to do.

Network Address Translation Stratix -5700

V2014 6.2

Page 37 of 49

Make sure your screen looks like this, that the static routes are deleted, and routing is not
enabled.

Changing the SDM Profile to Default

Go to Admin / SDM Template and set the template to Default.

Network Address Translation Stratix -5700

V2014 6.2

Page 38 of 49

Network Address Translation Stratix -5700

V2014 6.2

Page 39 of 49

Lab 3: Saving and Loading configurations

Admin / Load-Save
This is a very interesting and important addition. It was not possible with earlier versions of the
IOS to save switch configurations to your PC with Device Manager; although, CNA (Cisco Network
Assistant) does this very well.
Notice the
and
terminology. This is from an IT-centric viewpoint. Upload
means to send a configuration to the switch, from the PC, and download means to transfer
the file to the PC from the switch. If you are used to working with automation, this might seem
backwardso think before you click!

Network Address Translation Stratix -5700

V2014 6.2

Page 40 of 49

Downloading config.text
Config.text is the text file in the switch that you edit with CLI or Device Manager.
Vlan.dat holds the VLAN information.
Click on
to download it to the lab PC. Depending on your browser, where it appears
may look different. With Chrome, you will see it at the bottom of the screen, as shown here.

Right click on the file name to Show in folder.

Network Address Translation Stratix -5700

V2014 6.2

Page 41 of 49

 Right click on the file name in the folder to open it with WordPad.

Network Address Translation Stratix -5700

V2014 6.2

Page 42 of 49

 When the file opens, scroll through the text file and you will see the complete configuration for
your switch. Being able to save this file in this way allows you save multiple configurations from
within Device Manager.

Editing and uploading the config.text file

Now that you have the file you can make CAREFUL edits to the configuration.
Just for fun, lets make an easy edit that will not destroy any of the hard work you have invested in
this switch. We will simply make a small change to the name of your switch, then upload and run it
with the new name.
Edit the hostname, appending your name as shown.

Network Address Translation Stratix -5700

V2014 6.2

Page 43 of 49

 Save the file in the LabFiles folder as config.text.

Uploading the new config.text to the switch.

To upload, go to Admin Load/Save.
Choose the file, and upload.

Network Address Translation Stratix -5700

V2014 6.2

Page 44 of 49

Admin/ Restart-Reset
Copying config.text to the running configuration of the switch.
When the Upload is complete go to to to Admin Restart/Reset and Restart the switch without
saving the running config. This will copy the config.text to the startup file.

To prove that you actually changed the name of the switch go to the Dashboard and you will see
that your HostName has been updated.

Network Address Translation Stratix -5700

V2014 6.2

Page 45 of 49

Lab 4: Other new features

Heres a quick review of some of the other new features. You can open each configuration
screen with the shown menu prompt and look around, but dont make any changes unless
directed to.

Device Management: Admin / Users

Interesting, but you cant change the privilege level.

Network Address Translation Stratix -5700

V2014 6.2

Page 46 of 49

File Management:

Admin / License Upgrade

This window currently does not have a function and may be removed in a new release.

Spanning Tree:

Config / STP Settings

The ability to change the STP mode with Device Manager is new. Default is still MSTP.

Network Address Translation Stratix -5700

V2014 6.2

Page 47 of 49

Help new look and feel

This might be a good time to check out the new help screens, which are very thorough.

Spanning Tree: Config / STP Settings / Port Fast

Device Manager now supports individual settings for Port Fast. Previously, this was only determined
by the SmartPort assignment.

Network Address Translation Stratix -5700

V2014 6.2

Page 48 of 49

Security: Config / Port Security

End of Stratix 5700 Configuration Labs

Network Address Translation Stratix -5700

V2014 6.2

Page 49 of 49