Digisol DG-FS4510 User manual

MUSTANG 4000 SWITCH SERIES

DG-FS4510

MANAGEMENT GUIDE

V1.0

2012-07-12

As our products undergo continuous development the specifications are subject to change without prior notice

DG-FS4510 FAST ETHERNET SWITCH

Layer 2 Switch

with 8 10/100BASE-TX (RJ-45) Ports,

and 2 Gigabit Combination Ports (RJ-45/SFP)

DG-FS4510

E072012-R01

F1.1.4.9

A

BOUT

T

HIS

G

UIDE

– 3 –

ABOUT THIS GUIDE

PURPOSE This guide gives specific information on how to operate and use the

management functions of the switch.

AUDIENCE The guide is intended for use by network administrators who are

responsible for operating and maintaining network equipment;

consequently, it assumes a basic working knowledge of general switch

functions, the Internet Protocol (IP), and Simple Network Management

Protocol (SNMP).

CONVENTIONS The following conventions are used throughout this guide to show

information:

N

OTE

:

Emphasizes important information or calls your attention to related

features or instructions.

C

AUTION

:

Alerts you to a potential hazard that could cause loss of data, or

damage the system or equipment.

W

ARNING

:

Alerts you to a potential hazard that could cause personal injury.

RELATED PUBLICATIONS The following publication details the hardware features of the switch,

including the physical and performance-related characteristics, and how to

install the switch:

The Installation Guide

Also, as part of the switch’s software, there is an online web-based help

that describes all management related features.

REVISION HISTORY This section summarizes the changes in each revision of this guide.

JULY 2012 REVISION

This is the first version of this guide.

A

BOUT

T

HIS

G

UIDE

– 4 –

C

ONTENTS

– 5 –

CONTENTS

ABOUT THIS GUIDE 3

C

ONTENTS 5

F

IGURES 31

T

ABLES 41

SECTION I GETTING STARTED 47

1INTRODUCTION 49

Key Features 49

Description of Software Features 50

Configuration Backup and Restore 50

Authentication 50

Access Control Lists 51

Port Configuration 51

Port Mirroring 51

Port Trunking 51

Rate Limiting 51

Storm Control 51

Static Addresses 51

IEEE 802.1D Bridge 52

Store-and-Forward Switching 52

Spanning Tree Algorithm 52

Virtual LANs 53

IEEE 802.1Q Tunneling (QinQ) 53

Traffic Prioritization 53

Quality of Service 54

Multicast Filtering 54

System Defaults 54

2INITIAL SWITCH CONFIGURATION 57

Connecting to the Switch 57

Configuration Options 57

C

ONTENTS

– 6 –

Required Connections 58

Remote Connections 59

Basic Configuration 60

Console Connection 60

Setting Passwords 60

Setting an IP Address 61

Enabling SNMP Management Access 69

Managing System Files 71

Saving or Restoring Configuration Settings 72

SECTION II WEB CONFIGURATION 75

3USING THE WEB INTERFACE 77

Connecting to the Web Interface 77

Navigating the Web Browser Interface 78

Home Page 78

Configuration Options 79

Panel Display 79

Main Menu 80

4BASIC MANAGEMENT TASKS 93

Displaying System Information 93

Displaying Hardware/Software Versions 94

Configuring Support for Jumbo Frames 96

Displaying Bridge Extension Capabilities 97

Managing System Files 98

Copying Files via FTP/TFTP or HTTP 98

Saving the Running Configuration to a Local File 100

Setting The Start-Up File 101

Showing System Files 102

Automatic Operation Code Upgrade 103

Setting the System Clock 107

Setting the Time Manually 107

Configuring SNTP 108

Specifying SNTP Time Servers 109

Setting the Time Zone 110

Console Port Settings 111

C

ONTENTS

– 7 –

Telnet Settings 113

Displaying CPU Utilization 114

Displaying Memory Utilization 115

Resetting the System 116

5INTERFACE CONFIGURATION 121

Port Configuration 121

Configuring by Port List 121

Configuring by Port Range 124

Displaying Connection Status 124

Configuring Local Port Mirroring 126

Configuring Remote Port Mirroring 128

Showing Port or Trunk Statistics 132

Performing Cable Diagnostics 136

Trunk Configuration 137

Configuring a Static Trunk 138

Configuring a Dynamic Trunk 141

Displaying LACP Port Counters 147

Displaying LACP Settings and Status for the Local Side 148

Displaying LACP Settings and Status for the Remote Side 150

Saving Power 152

Traffic Segmentation 154

Enabling Traffic Segmentation 154

Configuring Uplink and Downlink Ports 155

VLAN Trunking 156

6VLAN CONFIGURATION 159

IEEE 802.1Q VLANs 159

Configuring VLAN Groups 162

Adding Static Members to VLANs 164

Configuring Dynamic VLAN Registration 169

IEEE 802.1Q Tunneling 172

Enabling QinQ Tunneling on the Switch 176

Adding an Interface to a QinQ Tunnel 177

Protocol VLANs 178

Configuring Protocol VLAN Groups 179

Mapping Protocol Groups to Interfaces 181

Configuring IP Subnet VLANs 183

C

ONTENTS

– 8 –

Configuring MAC-based VLANs 185

Configuring VLAN Mirroring 187

7ADDRESS TABLE SETTINGS 189

Configuring MAC Address Learning 189

Setting Static Addresses 190

Changing the Aging Time 192

Displaying the Dynamic Address Table 193

Clearing the Dynamic Address Table 194

Configuring MAC Address Mirroring 195

8SPANNING TREE ALGORITHM 197

Overview 197

Configuring Loopback Detection 200

Configuring Global Settings for STA 201

Displaying Global Settings for STA 206

Configuring Interface Settings for STA 207

Displaying Interface Settings for STA 211

Configuring Multiple Spanning Trees 213

Configuring Interface Settings for MSTP 217

9RATE LIMIT CONFIGURATION 221

10 S

TORM CONTROL CONFIGURATION 223

11 C

LASS OF SERVICE 225

Layer 2 Queue Settings 225

Setting the Default Priority for Interfaces 225

Selecting the Queue Mode 226

Mapping CoS Values to Egress Queues 229

Layer 3/4 Priority Settings 232

Setting Priority Processing to DSCP or CoS 232

Mapping Ingress DSCP Values to Internal DSCP Values 233

Mapping CoS Priorities to Internal DSCP Values 236

12 QUALITY OF SERVICE 239

Overview 239

Configuring a Class Map 240

Creating QoS Policies 243

Attaching a Policy Map to a Port 253

13 VOIP TRAFFIC CONFIGURATION 255

Overview 255

C

ONTENTS

– 9 –

Configuring VoIP Traffic 255

Configuring Telephony OUI 257

Configuring VoIP Traffic Ports 258

14 SECURITY MEASURES 261

AAA Authorization and Accounting 262

Configuring Local/Remote Logon Authentication 263

Configuring Remote Logon Authentication Servers 264

Configuring AAA Accounting 268

Configuring AAA Authorization 273

Configuring User Accounts 276

Web Authentication 278

Configuring Global Settings for Web Authentication 278

Configuring Interface Settings for Web Authentication 279

Network Access (MAC Address Authentication) 281

Configuring Global Settings for Network Access 283

Configuring Network Access for Ports 284

Configuring Port Link Detection 286

Configuring a MAC Address Filter 287

Displaying Secure MAC Address Information 289

Configuring HTTPS 290

Configuring Global Settings for HTTPS 290

Replacing the Default Secure-site Certificate 292

Configuring the Secure Shell 293

Configuring the SSH Server 296

Generating the Host Key Pair 297

Importing User Public Keys 299

Access Control Lists 301

Setting A Time Range 302

Showing TCAM Utilizaiton 305

Setting the ACL Name and Type 306

Configuring a Standard IPv4 ACL 308

Configuring an Extended IPv4 ACL 309

Configuring a MAC ACL 312

Configuring an ARP ACL 314

Binding a Port to an Access Control List 316

ARP Inspection 317

C

ONTENTS

– 10 –

Configuring Global Settings for ARP Inspection 318

Configuring VLAN Settings for ARP Inspection 320

Configuring Interface Settings for ARP Inspection 322

Displaying ARP Inspection Statistics 323

Displaying the ARP Inspection Log 324

Filtering IP Addresses for Management Access 325

Configuring Port Security 327

Configuring 802.1X Port Authentication 329

Configuring 802.1X Global Settings 330

Configuring Port Authenticator Settings for 802.1X 332

Configuring Port Supplicant Settings for 802.1X 336

Displaying 802.1X Statistics 338

IP Source Guard 341

Configuring Ports for IP Source Guard 341

Configuring Static Bindings for IP Source Guard 343

Displaying Information for Dynamic IP Source Guard Bindings 345

DHCP Snooping 346

DHCP Snooping Configuration 349

DHCP Snooping VLAN Configuration 350

Configuring Ports for DHCP Snooping 351

Displaying DHCP Snooping Binding Information 352

15 BASIC ADMINISTRATION PROTOCOLS 355

Configuring Event Logging 355

System Log Configuration 355

Remote Log Configuration 357

Sending Simple Mail Transfer Protocol Alerts 359

Link Layer Discovery Protocol 360

Setting LLDP Timing Attributes 360

Configuring LLDP Interface Attributes 362

Displaying LLDP Local Device Information 365

Displaying LLDP Remote Port Information 367

Displaying Device Statistics 372

Simple Network Management Protocol 374

Configuring Global Settings for SNMP 377

Setting the Local Engine ID 378

Specifying a Remote Engine ID 379

C

ONTENTS

– 11 –

Setting SNMPv3 Views 380

Configuring SNMPv3 Groups 383

Setting Community Access Strings 387

Configuring Local SNMPv3 Users 389

Configuring Remote SNMPv3 Users 391

Specifying Trap Managers 394

Remote Monitoring 398

Configuring RMON Alarms 399

Configuring RMON Events 402

Configuring RMON History Samples 404

Configuring RMON Statistical Samples 407

Switch Clustering 410

Configuring General Settings for Clusters 410

Cluster Member Configuration 412

Managing Cluster Members 413

16 IP CONFIGURATION 415

Using the Ping Function 415

Setting the Switch’s IP Address (IP Version 4) 416

Setting the Switch’s IP Address (IP Version 6) 419

Configuring the IPv6 Default Gateway 420

Configuring IPv6 Interface Settings 421

Configuring an IPv6 Address 424

Showing IPv6 Addresses 426

Showing the IPv6 Neighbor Cache 428

Showing IPv6 Statistics 430

Showing the MTU for Responding Destinations 435

17 IP SERVICES 437

Configuring General DNS Service Parameters 437

Configuring a List of Domain Names 438

Configuring a List of Name Servers 440

Configuring Static DNS Host to Address Entries 441

Displaying the DNS Cache 443

18 MULTICAST FILTERING 445

Overview 445

Layer 2 IGMP (Snooping and Query) 446

Configuring IGMP Snooping and Query Parameters 448

C

ONTENTS

– 12 –

Specifying Static Interfaces for a Multicast Router 451

Assigning Interfaces to Multicast Services 453

Setting IGMP Snooping Status per Interface 455

Displaying Multicast Groups Discovered by IGMP Snooping 461

Filtering and Throttling IGMP Groups 462

Enabling IGMP Filtering and Throttling 462

Configuring IGMP Filter Profiles 463

Configuring IGMP Filtering and Throttling for Interfaces 465

Multicast VLAN Registration 467

Configuring Global MVR Settings 468

Configuring MVR Interface Status 469

Assigning Static Multicast Groups to Interfaces 471

Displaying MVR Receiver Groups 473

SECTION III COMMAND LINE INTERFACE 475

19 USING THE COMMAND LINE INTERFACE 477

Accessing the CLI 477

Console Connection 477

Telnet Connection 478

Entering Commands 479

Keywords and Arguments 479

Minimum Abbreviation 479

Getting Help on Commands 480

Partial Keyword Lookup 481

Negating the Effect of Commands 481

Using Command History 481

Understanding Command Modes 482

Exec Commands 482

Configuration Commands 483

Command Line Processing 485

CLI Command Groups 486

20 GENERAL COMMANDS 489

prompt 489

reload (Global Configuration) 490

enable 491

C

ONTENTS

– 13 –

quit 492

show history 492

configure 493

disable 494

reload (Privileged Exec) 494

show reload 495

end 495

exit 495

21 SYSTEM MANAGEMENT COMMANDS 497

Device Designation 497

hostname 498

Banner Information 498

banner configure 499

banner configure company 500

banner configure dc-power-info 501

banner configure department 501

banner configure equipment-info 502

banner configure equipment-location 503

banner configure ip-lan 503

banner configure lp-number 504

banner configure manager-info 505

banner configure mux 505

banner configure note 506

show banner 507

System Status 507

show access-list tcam-utilization 508

show memory 508

show process cpu 508

show running-config 509

show startup-config 510

show system 511

show users 511

show version 512

Frame Size 513

jumbo frame 513

File Management 514

C

ONTENTS

– 14 –

boot system 515

copy 516

delete 519

dir 519

whichboot 520

upgrade opcode auto 521

upgrade opcode path 522

Line 524

line 524

databits 525

exec-timeout 526

login 526

parity 527

password 528

password-thresh 529

silent-time 530

speed 530

stopbits 531

timeout login response 531

disconnect 532

show line 533

Event Logging 533

logging facility 534

logging history 535

logging host 536

logging on 536

logging trap 537

clear log 537

show log 538

show logging 539

SMTP Alerts 540

logging sendmail 541

logging sendmail host 541

logging sendmail level 542

logging sendmail destination-email 542

logging sendmail source-email 543

C

ONTENTS

– 15 –

show logging sendmail 543

Time 544

sntp client 544

sntp poll 545

sntp server 546

show sntp 546

clock timezone 547

calendar set 548

show calendar 548

Time Range 549

time-range 549

absolute 550

periodic 550

show time-range 551

Switch Clustering 552

cluster 553

cluster commander 553

cluster ip-pool 554

cluster member 555

rcommand 555

show cluster 556

show cluster members 556

show cluster candidates 557

22 SNMP COMMANDS 559

snmp-server 560

snmp-server community 561

snmp-server contact 561

snmp-server location 562

show snmp 562

snmp-server enable traps 563

snmp-server host 564

snmp-server engine-id 567

snmp-server group 568

snmp-server user 569

snmp-server view 570

show snmp engine-id 571

C

ONTENTS

– 16 –

show snmp group 572

show snmp user 573

show snmp view 574

nlm 574

snmp-server notify-filter 575

show nlm oper-status 576

show snmp notify-filter 577

23 REMOTE MONITORING COMMANDS 579

rmon alarm 580

rmon event 581

rmon collection history 582

rmon collection stats 583

show rmon alarm 584

show rmon event 584

show rmon history 584

show rmon statistics 585

24 AUTHENTICATION COMMANDS 587

User Accounts 587

enable password 588

username 589

Authentication Sequence 590

authentication enable 590

authentication login 591

RADIUS Client 592

radius-server acct-port 592

radius-server auth-port 593

radius-server host 593

radius-server key 594

radius-server retransmit 594

radius-server timeout 595

show radius-server 595

TACACS+ Client 596

tacacs-server 596

tacacs-server host 597

tacacs-server key 597

tacacs-server port 598

C

ONTENTS

– 17 –

show tacacs-server 598

AAA 599

aaa accounting commands 599

aaa accounting dot1x 600

aaa accounting exec 601

aaa accounting update 602

aaa authorization exec 603

aaa group server 604

server 604

accounting dot1x 605

accounting exec 605

authorization exec 606

show accounting 606

Web Server 607

ip http port 608

ip http server 608

ip http secure-server 609

ip http secure-port 610

Telnet Server 611

ip telnet max-sessions 611

ip telnet port 612

ip telnet server 612

show ip telnet 613

Secure Shell 613

ip ssh authentication-retries 616

ip ssh server 616

ip ssh server-key size 617

ip ssh timeout 618

delete public-key 618

ip ssh crypto host-key generate 619

ip ssh crypto zeroize 620

ip ssh save host-key 620

show ip ssh 621

show public-key 621

show ssh 622

802.1X Port Authentication 623

C

ONTENTS

– 18 –

dot1x default 624

dot1x eapol-pass-through 624

dot1x system-auth-control 625

dot1x intrusion-action 625

dot1x max-req 626

dot1x operation-mode 626

dot1x port-control 627

dot1x re-authentication 628

dot1x timeout quiet-period 628

dot1x timeout re-authperiod 629

dot1x timeout supp-timeout 629

dot1x timeout tx-period 630

dot1x re-authenticate 630

dot1x identity profile 631

dot1x max-start 632

dot1x pae supplicant 632

dot1x timeout auth-period 633

dot1x timeout held-period 633

dot1x timeout start-period 634

show dot1x 634

Management IP Filter 637

management 637

show management 638

25 GENERAL SECURITY MEASURES 641

Port Security 642

mac-learning 642

port security 643

Network Access (MAC Address Authentication) 645

network-access aging 646

network-access mac-filter 646

mac-authentication reauth-time 647

network-access dynamic-qos 648

network-access dynamic-vlan 649

network-access guest-vlan 649

network-access link-detection 650

network-access link-detection link-down 651

C

ONTENTS

– 19 –

network-access link-detection link-up 651

network-access link-detection link-up-down 652

network-access max-mac-count 652

network-access mode mac-authentication 653

network-access port-mac-filter 654

mac-authentication intrusion-action 655

mac-authentication max-mac-count 655

show network-access 656

show network-access mac-address-table 657

show network-access mac-filter 658

Web Authentication 658

web-auth login-attempts 659

web-auth quiet-period 660

web-auth session-timeout 660

web-auth system-auth-control 661

web-auth 661

web-auth re-authenticate (Port) 662

web-auth re-authenticate (IP) 662

show web-auth 663

show web-auth interface 663

show web-auth summary 664

DHCP Snooping 664

ip dhcp snooping 665

ip dhcp snooping database flash 667

ip dhcp snooping information option 667

ip dhcp snooping information policy 668

ip dhcp snooping verify mac-address 669

ip dhcp snooping vlan 669

ip dhcp snooping trust 670

clear ip dhcp snooping database flash 671

show ip dhcp snooping 672

show ip dhcp snooping binding 672

IP Source Guard 673

ip source-guard binding 673

ip source-guard 674

show ip source-guard 676

C

ONTENTS

– 20 –

show ip source-guard binding 676

ARP Inspection 677

ip arp inspection 678

ip arp inspection filter 679

ip arp inspection log-buffer logs 680

ip arp inspection validate 681

ip arp inspection vlan 681

ip arp inspection limit 682

ip arp inspection trust 683

show ip arp inspection configuration 684

show ip arp inspection interface 684

show ip arp inspection log 685

show ip arp inspection statistics 685

show ip arp inspection vlan 685

26 ACCESS CONTROL LISTS 687

IPv4 ACLs 687

access-list ip 688

permit, deny (Standard IP ACL) 689

permit, deny (Extended IPv4 ACL) 690

ip access-group 692

show ip access-group 693

show ip access-list 693

MAC ACLs 694

access-list mac 694

permit, deny

(MAC ACL) 695

mac access-group 697

show mac access-group 698

show mac access-list 698

ARP ACLs 699

access-list arp 699

permit, deny (ARP ACL) 700

show arp access-list 701

ACL Information 702

show access-group 702

show access-list 702

27 INTERFACE COMMANDS 703

Page is loading ...

Digisol DG-FS4510 User manual

Related papers

Other documents