MiLAN MIL-SM24T4DPA Management Manual

www.edge-core.com

MIL-SM24T4DPA

GIGABIT ETHERNET SWITCH

MANAGEMENT GUIDE

M

ANAGEMENT

G

UIDE

MIL-SM24T4DPA GIGABIT ETHERNET SWITCH

Layer 2 Switch

with 24 10/100/1000BASE-T (RJ-45) Ports,

and 4 Gigabit Combination Ports (RJ-45/SFP)

MIL-SM24T4DPA

E102009/AP-R01

149100000057A

– 3 –

ABOUT THIS GUIDE

PURPOSE This guide gives specific information on how to operate and use the

management functions of the switch.

AUDIENCE The guide is intended for use by network administrators who are

responsible for operating and maintaining network equipment;

consequently, it assumes a basic working knowledge of general switch

functions, the Internet Protocol (IP), and Simple Network Management

Protocol (SNMP).

CONVENTIONS The following conventions are used throughout this guide to show

information:

N

OTE

:

Emphasizes important information or calls your attention to related

features or instructions.

C

AUTION

:

Alerts you to a potential hazard that could cause loss of data, or

damage the system or equipment.

W

ARNING

:

Alerts you to a potential hazard that could cause personal injury.

RELATED PUBLICATIONS The following publication details the hardware features of the switch,

including the physical and performance-related characteristics, and how to

install the switch:

The Installation Guide

Also, as part of the switch’s software, there is an online web-based help

that describes all management related features.

REVISION HISTORY This section summarizes the changes in each revision of this guide.

JULY 2009 REVISION

This is the first version of this guide. This guide is valid for software release

v1.12.

A

BOUT

T

HIS

G

UIDE

– 4 –

– 5 –

CONTENTS

ABOUT THIS GUIDE 3

C

ONTENTS 5

F

IGURES 17

T

ABLES 20

SECTION I GETTING STARTED 22

1INTRODUCTION 23

Key Features 23

Description of Software Features 24

Configuration Backup and Restore 24

Authentication 24

Access Control Lists 25

Port Configuration 25

Rate Limiting 25

Port Mirroring 25

Port Trunking 25

Storm Control 25

Static Addresses 25

IEEE 802.1D Bridge 26

Store-and-Forward Switching 26

Spanning Tree Algorithm 26

Virtual LANs 27

Traffic Prioritization 27

Quality of Service 28

Multicast Filtering 28

System Defaults 29

2INITIAL SWITCH CONFIGURATION 31

Connecting to the Switch 31

Configuration Options 31

C

ONTENTS

– 6 –

Required Connections 32

Remote Connections 33

Basic Configuration 34

Setting Passwords 34

Setting an IP Address 34

Enabling SNMP Management Access 37

Managing System Files 41

Saving or Restoring Configuration Settings 41

SECTION II WEB CONFIGURATION 42

3USING THE WEB INTERFACE 43

Connecting to the Web Interface 43

Navigating the Web Browser Interface 44

Home Page 44

Configuration Options 44

Panel Display 45

Main Menu 45

4CONFIGURING THE SWITCH 49

Configuring System Information 49

Setting an IP Address 50

Setting an IPv4 Address 50

Setting an IPv6 Address 52

Setting the System Password 55

Filtering IP Addresses for Management Access 55

Configuring Port Connections 57

Configuring Authentication for Management Access and 802.1X 59

Creating Trunk Groups 63

Configuring Static Trunks 64

Configuring LACP 67

Configuring the Spanning Tree Algorithm 70

Configuring Global Settings for STA 71

Configuring Interface Settings for STA 72

Configuring 802.1X Port Authentication 75

Configuring HTTPS 80

Configuring SSH 82

C

ONTENTS

– 7 –

IGMP Snooping 83

Configuring IGMP Snooping and Query 84

Configuring IGMP Filtering 87

Configuring Link Layer Discovery Protocol 88

Configuring the MAC Address Table 91

IEEE 802.1Q VLANs 93

Assigning Ports to VLANs 94

Configuring VLAN Attributes for Port Members 95

Configuring Private VLANs 97

Using Port Isolation 98

Quality of Service 99

Configuring Port-Level Queue Settings 100

Configuring DSCP Remarking 101

Configuring QoS Control Lists 103

Configuring Rate Limiting 106

Configuring Storm Control 108

Access Control Lists 109

Assigning ACL Policies and Responses 109

Configuring Rate Limiters 110

Configuring Access Control Lists 112

Configuring Port Mirroring 120

Simple Network Management Protocol 122

Configuring SNMP System and Trap Settings 123

Setting SNMPv3 Community Access Strings 128

Configuring SNMPv3 Users 129

Configuring SNMPv3 Groups 130

Configuring SNMPv3 Views 131

Configuring SNMPv3 Group Access Rights 132

Configuring UPnP 133

Configuring DHCP Relay and Option 82 Information 135

5MONITORING THE SWITCH 137

Displaying Basic Information About the System 137

Displaying System Information 137

Displaying Log Messages 138

Displaying Log Details 140

Displaying Access Management Statistics 140

C

ONTENTS

– 8 –

Displaying Information About Ports 141

Displaying Port Status On the Front Panel 141

Displaying an Overview of Port Statistics 142

Displaying QoS Statistics 142

Displaying Detailed Port Statistics 143

Displaying Information on Authentication Servers 146

Displaying a List of Authentication Servers 146

Displaying Statistics for Configured Authentication Servers 147

Displaying Information on LACP 150

Displaying an Overview of LACP Groups 150

Displaying LACP Port Status 151

Displaying LACP Port Statistics 152

Displaying Information on the Spanning Tree 153

Displaying Bridge Status for STA 153

Displaying Port Status for STA 155

Displaying Port Statistics for STA 156

Displaying Port Security Information 157

Displaying Port Security Status 157

Displaying Port Security Statistics 158

Showing IGMP Snooping Information 161

Displaying LLDP Information 162

Displaying LLDP Neighbor Information 163

Displaying LLDP Port Statistics 164

Displaying DHCP Relay Statistics 165

Displaying the MAC Address Table 167

6PERFORMING BASIC DIAGNOSTICS 169

Pinging an IPv4 or IPv6 Address 169

Running Cable Diagnostics 170

7PERFORMING SYSTEM MAINTENANCE 172

Resetting the Switch 172

Restoring Factory Defaults 172

Upgrading Firmware 173

Registering the Product 174

Managing Configuration Files 174

Saving Configuration Settings 174

Restoring Configuration Settings 175

C

ONTENTS

– 9 –

SECTION III COMMAND LINE INTERFACE 176

8USING THE COMMAND LINE INTERFACE 178

Accessing the CLI 178

Console Connection 178

Telnet Connection 179

Entering Commands 180

Keywords and Arguments 180

Minimum Abbreviation 181

Getting Help on Commands 181

Partial Keyword Lookup 182

Using Command History 183

Command Line Processing 183

CLI Command Groups 184

9SYSTEM COMMANDS 186

system configuration 187

system reboot 187

system restore default 188

system contact 188

system name 188

system location 189

system password 189

system timezone 190

system log 190

system access configuration 191

system access mode 191

system access add 192

system access ipv6 add 193

system access delete 194

system access lookup 194

system access clear 194

system access statistics 194

10 IP COMMANDS 196

ip configuration 196

ip dhcp 197

ip setup 198

C

ONTENTS

– 10 –

ip ping 199

ip dns 200

ip dns_proxy 200

ip sntp 201

ip ipv6 autoconfig 201

ip ipv6 setup 202

ip ipv6 ping6 203

ip ipv6 sntp 204

11 AUTHENTICATION COMMANDS 206

auth configuration 206

auth timeout 207

auth deadtime 208

auth radius 208

auth acct_radius 209

auth tacacs+ 211

auth client 212

auth statistics 213

12 PORT COMMANDS 216

port configuration 216

port state 218

port mode 218

port flow control 219

port maxframe 220

port power 220

port excessive 221

port statistics 222

port veriphy 223

port numbers 224

13 LINK AGGREGATION COMMANDS 225

aggr configuration 226

aggr add 227

aggr delete 227

aggr lookup 228

aggr mode 228

14 LACP COMMANDS 230

lacp configuration 232

C

ONTENTS

– 11 –

lacp mode 232

lacp key 233

lacp role 233

lacp status 234

lacp statistics 234

15 RSTP COMMANDS 236

rstp configuration 237

rstp sysprio 237

rstp age 238

rstp delay 238

rstp txhold 239

rstp version 239

rstp mode 240

rstp cost 240

rstp priority 242

rstp edge 242

rstp autoedge 243

rstp p2p 244

rstp status 244

rstp statistics 245

rstp mcheck 245

16 IEEE 802.1X COMMANDS 247

dot1x configuration 247

dot1x mode 249

dot1x state 249

dot1x authenticate 250

dot1x reauthentication 251

dot1x period 252

dot1x timeout 252

dot1x clients 252

dot1x agetime 253

dot1x holdtime 254

dot1x statistics 254

17 IGMP COMMANDS 256

igmp configuration 256

igmp mode 258

C

ONTENTS

– 12 –

igmp state 258

igmp querier 259

igmp fastleave 260

igmp leave proxy 261

igmp throttling 261

igmp filtering 262

igmp router 263

igmp flooding 263

igmp groups 264

igmp status 264

18 LLDP COMMANDS 265

lldp configuration 265

lldp mode 266

lldp optional_tlv 266

lldp interval 267

lldp hold 268

lldp delay 268

lldp reinit 269

lldp info 269

lldp statistics 270

lldp cdp_aware 271

19 MAC COMMANDS 272

mac configuration 272

mac add 273

mac delete 273

mac lookup 274

mac agetime 274

mac learning 274

mac dump 275

mac statistics 276

mac flush 276

20 VLAN COMMANDS 277

vlan configuration 277

vlan aware 278

vlan pvid 279

vlan frametype 279

C

ONTENTS

– 13 –

vlan ingressfilter 280

vlan qinq 280

vlan add 281

vlan delete 281

vlan lookup 282

21 PVLAN COMMANDS 283

pvlan configuration 283

pvlan add 284

pvlan delete 284

pvlan lookup 285

pvlan isolate 285

22 QOS COMMANDS 286

qos configuration 287

qos default 287

qos tagprio 288

qos qcl port 288

qos qcl add 289

qos qcl delete 290

qos qcl lookup 291

qos mode 291

qos weight 292

qos rate limiter 292

qos shaper 293

qos storm unicast 294

qos storm multicast 294

qos storm broadcast 295

qos dscp remarking 295

qos dscp queue mapping 296

23 ACL COMMANDS 297

acl configuration 297

acl action 298

acl policy 299

acl rate 299

acl add 300

acl delete 303

acl lookup 303

C

ONTENTS

– 14 –

acl clear 304

24 MIRROR COMMANDS 305

mirror configuration 305

mirror port 305

mirror mode 306

25 CONFIG COMMANDS 307

config save 307

config load 308

26 SNMP COMMANDS 309

snmp configuration 310

snmp mode 311

snmp version 312

snmp read community 312

snmp write community 313

snmp trap mode 313

snmp trap version 314

snmp trap community 314

snmp trap destination 315

snmp trap ipv6 destination 315

snmp trap authentication failure 315

snmp trap link-up 316

snmp trap inform mode 316

snmp trap inform timeout 317

snmp trap inform retry times 317

snmp trap probe security engine id 318

snmp trap security engine id 318

snmp trap security name 319

snmp engine id 319

snmp community add 320

snmp community delete 320

snmp community lookup 321

snmp user add 321

snmp user delete 322

snmp user changekey 323

snmp user lookup 323

snmp group add 324

C

ONTENTS

– 15 –

snmp group delete 325

snmp group lookup 325

snmp view add 326

snmp view delete 326

snmp view lookup 327

snmp access add 327

snmp access delete 328

snmp access lookup 328

27 HTTPS COMMANDS 330

https configuration 330

https mode 330

https redirect 331

28 SSH COMMANDS 333

ssh configuration 333

ssh mode 333

29 UPNP COMMANDS 335

upnp configuration 335

upnp mode 335

upnp ttl 336

upnp advertising duration 337

30 DHCP COMMANDS 338

dhcp relay configuration 338

dhcp relay mode 338

dhcp relay server 339

dhcp relay information mode 339

dhcp relay information policy 340

dhcp relay statistics 340

31 FIRMWARE COMMANDS 342

firmware load 342

firmware ipv6 load 343

SECTION IV APPENDICES 345

ASOFTWARE SPECIFICATIONS 346

Software Features 346

Management Features 347

C

ONTENTS

– 16 –

Standards 348

Management Information Bases 348

BTROUBLESHOOTING 350

Problems Accessing the Management Interface 350

Using System Logs 351

GLOSSARY 352

I

NDEX 359

– 17 –

FIGURES

Figure 1: Home Page 44

Figure 2: Front Panel Indicators 45

Figure 3: System Information Configuration 50

Figure 4: IP & Time Configuration 52

Figure 5: IPv6 & Time Configuration 54

Figure 6: System Password 55

Figure 7: Access Management Configuration 56

Figure 8: Port Configuration 58

Figure 9: Authentication Configuration 62

Figure 10: Static Trunk Configuration 66

Figure 11: LACP Port Configuration 69

Figure 12: RSTP System Configuration 72

Figure 13: RSTP Port Configuration 74

Figure 14: Port Security Configuration 80

Figure 15: HTTPS Configuration 81

Figure 16: SSH Configuration 83

Figure 17: IGMP Snooping Configuration 87

Figure 18: IGMP Snooping Port Group Filtering Configuration 88

Figure 19: LLDP Configuration 91

Figure 20: MAC Address Table Configuration 93

Figure 21: VLAN Membership Configuration 95

Figure 22: VLAN Port Configuration 97

Figure 23: Private VLAN Membership Configuration 98

Figure 24: Port Isolation Configuration 99

Figure 25: Port QoS Configuration 101

Figure 26: DSCP Remarking Configuration 103

Figure 27: QoS Control List Configuration 105

Figure 28: Rate Limit Configuration 107

Figure 29: Storm Control Configuration 109

Figure 30: ACL Port Configuration 110

Figure 31: ACL Rate Limiter Configuration 111

F

IGURES

– 18 –

Figure 32: Access Control List Configuration 119

Figure 33: Mirror Configuration 121

Figure 34: SNMP System Configuration 127

Figure 35: SNMPv3 Communities Configuration 128

Figure 36: SNMPv3 Users Configuration 130

Figure 37: SNMPv3 Group Configuration 131

Figure 38: SNMPv3 View Configuration 132

Figure 39: SNMPv3 Access Configuration 133

Figure 40: UPnP Configuration 135

Figure 41: DHCP Relay Configuration 136

Figure 42: System Information 138

Figure 43: System Log Information 139

Figure 44: Detailed System Log Information 140

Figure 45: Access Management Statistics 141

Figure 46: Port State Overview 141

Figure 47: Port Statistics Overview 142

Figure 48: Queuing Counters 143

Figure 49: Detailed Port Statistics 145

Figure 50: RADIUS Overview 146

Figure 51: RADIUS Details 150

Figure 52: LACP System Status 151

Figure 53: LACP Port Status 152

Figure 54: LACP Port Statistics 153

Figure 55: Spanning Tree Bridge Status 155

Figure 56: Spanning Tree Port Status 156

Figure 57: Spanning Tree Port Statistics 157

Figure 58: Port Security Status 158

Figure 59: Port Security Statistics 161

Figure 60: IGMP Snooping Status 162

Figure 61: LLDP Neighbor Information 164

Figure 62: LLDP Port Statistics 165

Figure 63: DHCP Relay Statistics 167

Figure 64: MAC Address Table 168

Figure 65: ICMP Ping 170

Figure 66: VeriPHY Cable Diagnostics 171

Figure 67: Reset Device 172

F

IGURES

– 19 –

Figure 68: Factory Defaults 173

Figure 69: Software Upload 173

Figure 70: Register Product 174

Figure 71: Configuration Save 175

Figure 72: Configuration Upload 175

– 20 –

TABLES

Table 1: Key Features 23

Table 2: System Defaults 29

Table 3: Web Page Configuration Buttons 44

Table 4: Main Menu 45

Table 5: Recommended STA Path Cost Range 73

Table 6: Recommended STA Path Costs 73

Table 7: Default STA Path Costs 73

Table 8: HTTPS System Support 81

Table 9: QCE Modification Buttons 104

Table 10: Mapping CoS Values to Egress Queues 104

Table 11: QCE Modification Buttons 113

Table 12: SNMP Security Models and Levels 123

Table 13: System Capabilities 163

Table 14: Keystroke Commands 183

Table 15: Command Group Index 184

Table 16: System Commands 186

Table 17: IP Commands 196

Table 18: Authentication Commands 206

Table 19: Port Commands 216

Table 20: Port Configuration 216

Table 21: Link Aggregation Commands 225

Table 22: LACP Commands 230

Table 23: RSTP Commands 236

Table 24: Recommended STA Path Cost Range 241

Table 25: Recommended STA Path Costs 241

Table 26: Default STA Path Costs 241

Table 27: IEEE 802.1X Commands 247

Table 28: 802.1X Configuration 248

Table 29: IGMP Commands 256

Table 30: IGMP Configuration 257

Table 31: LLDP Commands 265

Page is loading ...

MiLAN MIL-SM24T4DPA Management Manual

Related papers

Other documents