Questions[3com](server)

We have a network with a few switches. One of these is a 3com 4500, where there are many computers connected, a custom linux firewall and a wireless bridge. The port where the wireless bridge and the firewall are connected are in a separate VLAN, let's call it VLAN4. Port is in access mode, untagged. Everything else is in VLAN1, untagged.

When we disconnect the wireless bridge from the switch, connectivity is lost for a few seconds between random computers connected to the switch in VLAN1, then everything goes back to normal. During that period, our Nagios monitor displays many alerts regarding "DUPLICATE PACKETS FOUND".

We have isolated the firewall completely and it happens anyway, so it isn't the firewall.

Any ideas on why this happens?

I am trying to figure out why at our company the 3com 3101 or 3102 phones we use, when NEW out of box will not jump on the network and update, unless they are at a specific physical location.

For example, if I take a brand new phone, plug it in at Building "A", which happens to be physically where the main 3com VCX unit is also located, it will not program or get a DHCP. This building is also where all the servers and the main network stack of core switches is located (including the dhcp windows server).

If I bring the phone next door, to building "B", which has no servers, no dhcp server, etc. It jumps on fine. It has a network stack of it's own and has it's own ip subnet, but it all ties back to the main building "A".

So it really makes no sense - I would think if it had an issue, it would be the opposite, that it should not work on building B.

I know there are mac address entries in the configuration of the 3com super stack, one looks like a 3com entry, so not sure if that's part of it.

Any thoughts as to why a 3com voip phone would be able to get dhcp at the secondary location, but not at the main location, but then once it does and gets it's updates, etc. from the vcx, it's FINE, now you can bring it anywhere in the company and it will jump on fine?

I have 3com 4500 switch. I can got ram and CPU info with these:

1.3.6.1.4.1.43.45.1.6.1.1.1.3 - 1 Minute CPU AVG
1.3.6.1.4.1.43.45.1.6.1.1.1.4 - 5 Minute CPU AVG
1.3.6.1.4.1.43.45.1.6.1.1.1.2 - 5 Second CPU AVG
1.3.6.1.4.1.43.45.1.6.1.2.1.1.3 - Free Memory Remaining

But I could not find other information that I need, neither I could find MIB of 3com 4500.

I need:

• Bandwidth rating of ethernet interfaces
• Usage density of ethernet interfaces

And also some info from logs like:

• Collision
• Unexpected acts on ports

Can you give me some advices for these and from where can I find MIB of 3com 4500 switch?

I have inherited a 3com 5500G-EI without any configuration docs, and I need to reset it to factory defaults. What is the best procedure to do this?

Following the setup that I have for my Cisco devices, I got some basic level of functionality authenticating users that loggin to 3Com switches authenticated against a RADIUS server. Problem is that I can not get the user to obtain admin privileges. I'm using Microsoft's IAS service. According to 3Com documentation when configuring the access policy on IAS the value of 010600000003 have to be used to specify admin access level. That value have to be input in the Dial-in profile section:

010600000003 - indicates admin privileges  
010600000002 - manager  
010600000001 - monitor  
010600000000 - visitor  

Here is the configuration on the switch:

radius scheme system  
 server-type standard  
 primary authentication XXX.XXX.XXX.XXX  
 accounting optional  
 key authentication XXXXXX  
 key accounting XXXXXX  
#  
domain system  
 scheme radius-scheme system  
#  
local-user admin  
 service-type ssh telnet terminal  
 level 3  
local-user manager  
 service-type ssh telnet terminal  
 level 2  
local-user monitor  
 service-type ssh telnet terminal  
 level 1  

The configuration is working with the IAS server because I can check user login events with the Eventviewer tool.

Here is the output of the DISPLAY RADIUS command at the switch:

 [4500]disp radius

------------------------------------------------------------------

SchemeName  =system                           Index=0    Type=standard  
Primary Auth IP  =XXX.XXX.XXX.XXX  Port=1645   State=active  
Primary Acct IP  =127.0.0.1        Port=1646   State=active  
Second  Auth IP  =0.0.0.0          Port=1812   State=block  
Second  Acct IP  =0.0.0.0          Port=1813   State=block  
Auth Server Encryption Key= XXXXXX  
Acct Server Encryption Key= XXXXXX  
Accounting method = optional  
TimeOutValue(in second)=3 RetryTimes=3 RealtimeACCT(in minute)=12  
Permitted send realtime PKT failed counts       =5  
Retry sending times of noresponse acct-stop-PKT =500  
Quiet-interval(min)                             =5  
Username format                                 =without-domain  
Data flow unit                                  =Byte  
Packet unit                                     =1  


------------------------------------------------------------------

Total 1 RADIUS scheme(s). 1 listed  

Here is the output of the DISPLAY DOMAIN and DISPLAY CONNECTION commands after users log into the switch:

[4500]display domain  
0  Domain = system  
   State = Active  
   RADIUS Scheme = system  
   Access-limit = Disable  
   Domain User Template:  
   Idle-cut = Disable  
   Self-service = Disable  
   Messenger Time = Disable  

Default Domain Name: system  
Total 1 domain(s).1 listed.  


[4500]display connection  
Index=0   ,Username=admin@system  
 IP=0.0.0.0  

Index=2   ,Username=user@system  
 IP=xxx.xxx.xxx.xxx  

 On Unit 1:Total 2 connections matched, 2 listed.  
 Total 2 connections matched, 2 listed.  
[4500]  

Here is the DISP RADIUS STATISTICS:

[4500]  
%Apr  2 00:23:39:957 2000 4500 SHELL/5/LOGIN:- 1 - ecajigas(xxx.xxx.xxx.xxx) in un                                 it1 logindisp radius stat  
state statistic(total=1048):  
     DEAD=1046     AuthProc=0        AuthSucc=0  
AcctStart=0         RLTSend=0         RLTWait=2  
 AcctStop=0          OnLine=2            Stop=0  
 StateErr=0  

Received and Sent packets statistic:
Unit 1........................................
Sent PKT total  :4        Received PKT total:1  
Resend Times     Resend total  
1                1  
2                1  
Total            2  
RADIUS received packets statistic:  
Code= 2,Num=1       ,Err=0  
Code= 3,Num=0       ,Err=0  
Code= 5,Num=0       ,Err=0  
Code=11,Num=0       ,Err=0  

Running statistic:  
RADIUS received messages statistic:  
Normal auth request             , Num=1       , Err=0       , Succ=1  
EAP auth request                , Num=0       , Err=0       , Succ=0  
Account request                 , Num=1       , Err=0       , Succ=1  
Account off request             , Num=0       , Err=0       , Succ=0  
PKT auth timeout                , Num=0       , Err=0       , Succ=0  
PKT acct_timeout                , Num=3       , Err=1       , Succ=2  
Realtime Account timer          , Num=0       , Err=0       , Succ=0  
PKT response                    , Num=1       , Err=0       , Succ=1  
EAP reauth_request              , Num=0       , Err=0       , Succ=0  
PORTAL access                   , Num=0       , Err=0       , Succ=0  
Update ack                      , Num=0       , Err=0       , Succ=0  
PORTAL access ack               , Num=0       , Err=0       , Succ=0  
Session ctrl pkt                , Num=0       , Err=0       , Succ=0  
RADIUS sent messages statistic:  
Auth accept                     , Num=0  
Auth reject                     , Num=0  
EAP auth replying               , Num=0  
Account success                 , Num=0  
Account failure                 , Num=0  
Cut req                         , Num=0  
RecError_MSG_sum:0        SndMSG_Fail_sum :0  
Timer_Err       :0        Alloc_Mem_Err   :0  
State Mismatch  :0        Other_Error     :0  

No-response-acct-stop packet =0  
Discarded No-response-acct-stop packet for buffer overflow =0  

The other problem is that when the RADIUS server is not available I can not log in to the switch. The switch have 3 local accounts but none of them works. How can I specify the switch to use the local accounts in case that the RADIUS service is not available?