LevelOne GSW-4876 User manual

LevelOne

User Manual

GSW-4876

48 GE + 2 GE SFP Web Smart Switch

Ver. 1.0

M

ANAGEMENT

G

UIDE

GSW-4876 WEB SMART SWITCH

Layer 2 Gigabit Ethernet Switch

with 48 10/100/1000BASE-T Ports (RJ-45)

and 2 Gigabit Combination (RJ-45/SFP) Ports

GSW-4876

E082012/ST-R01

– 5 –

ABOUT THIS GUIDE

PURPOSE This guide gives specific information on how to operate and use the

management functions of the switch.

AUDIENCE The guide is intended for use by network administrators who are

responsible for operating and maintaining network equipment;

consequently, it assumes a basic working knowledge of general switch

functions, the Internet Protocol (IP), and Simple Network Management

Protocol (SNMP).

CONVENTIONS The following conventions are used throughout this guide to show

information:

N

OTE

:

Emphasizes important information or calls your attention to related

features or instructions.

C

AUTION

:

Alerts you to a potential hazard that could cause loss of data, or

damage the system or equipment.

W

ARNING

:

Alerts you to a potential hazard that could cause personal injury.

RELATED PUBLICATIONS The following publication details the hardware features of the switch,

including the physical and performance-related characteristics, and how to

install the switch:

The Installation Guide

Also, as part of the switch’s software, there is an online web-based help

that describes all management related features.

REVISION HISTORY This section summarizes the changes in each revision of this guide.

AUGUST 2012 REVISION

This is the first version of this guide. This guide is valid for software release

v1.0.0.1.

A

BOUT

T

HIS

G

UIDE

– 6 –

– 7 –

CONTENTS

ABOUT THIS GUIDE 5

C

ONTENTS 7

F

IGURES 13

T

ABLES 19

SECTION I GETTING STARTED 21

1INTRODUCTION 23

Key Features 23

Description of Software Features 24

System Defaults 28

2INITIAL SWITCH CONFIGURATION 31

SECTION II WEB CONFIGURATION 33

3USING THE WEB INTERFACE 35

Navigating the Web Browser Interface 35

Home Page 35

Configuration Options 36

Panel Display 36

Main Menu 36

4CONFIGURING THE SWITCH 45

Configuring System Information 45

Setting an IP Address 46

Setting an IPv4 Address 46

Setting an IPv6 Address 48

Configuring NTP Service 50

Configuring the Time Zone and Daylight Savings Time 51

Configuring Remote Log Messages 53

C

ONTENTS

– 8 –

Configuring Power Reduction 55

Reducing Power to Idle Queue Circuits 55

Configuring Port Connections 56

Configuring Security 58

Configuring User Accounts 58

Configuring User Privilege Levels 60

Configuring The Authentication Method For Management Access 62

Configuring SSH 65

Configuring HTTPS 66

Filtering IP Addresses for Management Access 67

Using Simple Network Management Protocol 68

Remote Monitoring 79

Configuring Port Limit Controls 84

Configuring Authentication Through Network Access Servers 87

Filtering Traffic with Access Control Lists 98

Configuring DHCP Snooping 108

Configuring DHCP Relay and Option 82 Information 111

Configuring IP Source Guard 112

Configuring ARP Inspection 116

Specifying Authentication Servers 119

Creating Trunk Groups 121

Configuring Static Trunks 122

Configuring LACP 124

Configuring the Spanning Tree Algorithm 126

Configuring Global Settings for STA 128

Configuring Multiple Spanning Trees 132

Configuring Spanning Tree Bridge Priorities 134

Configuring

STP/RSTP/CIST Interfaces 135

Configuring MIST Interfaces 138

Multicast VLAN Registration 139

Configuring General MVR Settings 140

Configuring MVR Channel Settings 143

IGMP Snooping 144

Configuring Global and Port-Related Settings for IGMP Snooping 145

Configuring VLAN Settings for IGMP Snooping and Query 148

Configuring IGMP Filtering 150

C

ONTENTS

– 9 –

MLD Snooping 151

Configuring Global and Port-Related Settings for MLD Snooping 151

Configuring VLAN Settings for MLD Snooping and Query 154

Configuring MLD Filtering 157

Link Layer Discovery Protocol 157

Configuring LLDP Timing and TLVs 158

Configuring LLDP-MED TLVs 161

Configuring the MAC Address Table 166

IEEE 802.1Q VLANs 168

Assigning Ports to VLANs 169

Configuring VLAN Attributes for Port Members 170

Using Port Isolation 173

Configuring MAC-based VLANs 173

Protocol VLANs 175

Configuring Protocol VLAN Groups 175

Mapping Protocol Groups to Ports 177

Configuring IP Subnet-based VLANs 178

Managing VoIP Traffic 179

Configuring VoIP Traffic 180

Configuring Telephony OUI 182

Quality of Service 183

Configuring Port Classification 184

Configuring Port Policiers 185

Configuring Egress Port Scheduler 186

Configuring Egress Port Shaper 188

Configuring Port Remarking Mode 189

Configuring Port DSCP Translation and Rewriting 192

Configuring DSCP-based QoS Ingress Classification 193

Configuring DSCP Translation 194

Configuring DSCP Classification 195

Configuring QoS Control Lists 196

Configuring Storm Control 200

Configuring Random Early Detection 201

Using Congestion Management 203

Configuring Local Port Mirroring 204

Configuring Remote Port Mirroring 205

C

ONTENTS

– 10 –

Configuring UPnP 210

Configuring sFlow 211

5MONITORING THE SWITCH 215

Displaying Basic Information About the System 215

Displaying System Information 215

Displaying CPU Utilization 216

Displaying Log Messages 217

Displaying Log Details 219

Displaying Information About Ports 219

Displaying Port Status On the Front Panel 219

Displaying an Overview of Port Statistics 220

Displaying QoS Statistics 220

Displaying QCL Status 221

Displaying Detailed Port Statistics 222

Displaying Information About Security Settings 225

Displaying Access Management Statistics 225

Displaying Information About Switch Settings for Port Security 226

Displaying Information About Learned MAC Addresses 228

Displaying Port Status for Authentication Services 229

Displaying Port Statistics for 802.1X or Remote Authentication Service

230

Displaying ACL Status 234

Displaying Statistics for DHCP Snooping 236

Displaying DHCP Relay Statistics 237

Displaying MAC Address Bindings for ARP Packets 238

Displaying Entries in the IP Source Guard Table 239

Displaying Information on Authentication Servers 240

Displaying a List of Authentication Servers 240

Displaying Statistics for Configured Authentication Servers 241

Displaying Information on RMON 245

Displaying RMON Statistics 245

Displaying RMON Historical Samples 246

Displaying RMON Alarm Settings 247

Displaying RMON Event Settings 248

Displaying Information on LACP 249

Displaying an Overview of LACP Groups 249

Displaying LACP Port Status 249

C

ONTENTS

– 11 –

Displaying LACP Port Statistics 250

Displaying Information on the Spanning Tree 251

Displaying Bridge Status for STA 251

Displaying Port Status for STA 254

Displaying Port Statistics for STA 255

Displaying MVR Information 256

Displaying MVR Statistics 256

Displaying MVR Group Information 257

Displaying MVR SFM Information 258

Showing IGMP Snooping Information 259

Showing IGMP Snooping Status 259

Showing IGMP Snooping Group Information 260

Showing IPv4 SFM Information 261

Showing MLD Snooping Information 262

Showing MLD Snooping Status 262

Showing MLD Snooping Group Information 263

Showing IPv6 SFM Information 264

Displaying LLDP Information 265

Displaying LLDP Neighbor Information 265

Displaying LLDP-MED Neighbor Information 266

Displaying LLDP Neighbor EEE Information 268

Displaying LLDP Port Statistics 270

Displaying the MAC Address Table 271

Displaying Information About VLANs 272

VLAN Membership 272

VLAN Port Status 273

Displaying Information About MAC-based VLANs 275

Displaying Information About Flow Sampling 276

6PERFORMING BASIC DIAGNOSTICS 279

Pinging an IPv4 or IPv6 Address 279

Running Cable Diagnostics 281

7PERFORMING SYSTEM MAINTENANCE 283

Restarting the Switch 283

Restoring Factory Defaults 284

Upgrading Firmware 284

Activating the Alternate Image 285

C

ONTENTS

– 12 –

Managing Configuration Files 286

Saving Configuration Settings 286

Restoring Configuration Settings 287

SECTION III APPENDICES 289

ASOFTWARE SPECIFICATIONS 291

Software Features 291

Management Features 292

Standards 293

Management Information Bases 293

BTROUBLESHOOTING 295

Problems Accessing the Management Interface 295

Using System Logs 296

CLICENSE INFORMATION 297

The GNU General Public License 297

GLOSSARY 301

I

NDEX 309

– 13 –

FIGURES

Figure 1: Home Page 35

Figure 2: Front Panel Indicators 36

Figure 3: System Information Configuration 45

Figure 4: IP Configuration 47

Figure 5: IPv6 Configuration 49

Figure 6: NTP Configuration 50

Figure 7: Time Zone and Daylight Savings Time Configuration 53

Figure 8: Configuring Settings for Remote Logging of Error Messages 54

Figure 9: Configuring EEE Power Reduction 56

Figure 10: Port Configuration 58

Figure 11: Showing User Accounts 60

Figure 12: Configuring User Accounts 60

Figure 13: Configuring Privilege Levels 62

Figure 14: Authentication Server Operation 63

Figure 15: Authentication Method for Management Access 64

Figure 16: SSH Configuration 65

Figure 17: HTTPS Configuration 67

Figure 18: Access Management Configuration 68

Figure 19: SNMP System Configuration 73

Figure 20: SNMPv3 Community Configuration 74

Figure 21: SNMPv3 User Configuration 76

Figure 22: SNMPv3 Group Configuration 77

Figure 23: SNMPv3 View Configuration 78

Figure 24: SNMPv3 Access Configuration 79

Figure 25: RMON Statistics Configuration 80

Figure 26: RMON History Configuration 81

Figure 27: RMON Alarm Configuration 83

Figure 28: RMON Event Configuration 84

Figure 29: Port Security Limit Control Configuration 87

Figure 30: Using Port Security 87

Figure 31: Network Access Server Configuration 98

F

IGURES

– 14 –

Figure 32: ACL Port Configuration 100

Figure 33: ACL Rate Limiter Configuration 101

Figure 34: Access Control List Configuration 108

Figure 35: DHCP Snooping Configuration 110

Figure 36: DHCP Relay Configuration 112

Figure 37: Configuring Global and Port-based Settings for IP Source Guard 114

Figure 38: Configuring Static Bindings for IP Source Guard 115

Figure 39: Configuring Global and Port Settings for ARP Inspection 117

Figure 40: Configuring Static Bindings for ARP Inspection 118

Figure 41: Authentication Configuration 120

Figure 42: Static Trunk Configuration 124

Figure 43: LACP Port Configuration 126

Figure 44: STP Root Ports and Designated Ports 127

Figure 45: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 127

Figure 46: Common Internal Spanning Tree, Common Spanning Tree, Internal

Spanning Tree 128

Figure 47: STA Bridge Configuration 131

Figure 48: Adding a VLAN to an MST Instance 133

Figure 49: Configuring STA Bridge Priorities 134

Figure 50: STP/RSTP/CIST Port Configuration 138

Figure 51: MSTI Port Configuration 139

Figure 52: MVR Concept 140

Figure 53: Configuring General MVR Settings 143

Figure 54: Configuring MVR Channel Settings 144

Figure 55: Configuring Global and Port-related Settings for IGMP Snooping 148

Figure 56: Configuring VLAN Settings for IGMP Snooping and Query 150

Figure 57: IGMP Snooping Port Group Filtering Configuration 151

Figure 58: Configuring Global and Port-related Settings for MLD Snooping 154

Figure 59: Configuring VLAN Settings for MLD Snooping and Query 156

Figure 60: MLD Snooping Port Group Filtering Configuration 157

Figure 61: LLDP Configuration 160

Figure 62: LLDP-MED Configuration 166

Figure 63: MAC Address Table Configuration 168

Figure 64: VLAN Membership Configuration 170

Figure 65: VLAN Port Configuration 172

Figure 66: Port Isolation Configuration 173

Figure 67: Configuring MAC-Based VLANs 174

F

IGURES

– 15 –

Figure 68: Configuring Protocol VLANs 176

Figure 69: Assigning Ports to Protocol VLANs 178

Figure 70: Assigning Ports to an IP Subnet-based VLAN 179

Figure 71: Configuring Global and Port Settings for a Voice VLAN 182

Figure 72: Configuring an OUI Telephony List 183

Figure 73: Configuring Ingress Port QoS Classification 184

Figure 74: Configuring Ingress Port Policing 185

Figure 75: Displaying Egress Port Schedulers 187

Figure 76: Configuring Egress Port Schedulers and Shapers 188

Figure 77: Displaying Egress Port Shapers 189

Figure 78: Displaying Port Tag Remarking Mode 190

Figure 79: Configuring Port Tag Remarking Mode 191

Figure 80: Configuring Port DSCP Translation and Rewriting 193

Figure 81: Configuring DSCP-based QoS Ingress Classification 194

Figure 82: Configuring DSCP Translation and Re-mapping 195

Figure 83: Mapping DSCP to CoS Values 196

Figure 84: QoS Control List Configuration 200

Figure 85: Storm Control Configuration 201

Figure 86: WRED Drop Probability 202

Figure 87: Weighted Random Early Detection Configuration 203

Figure 88: Congestion Management 204

Figure 89: Mirror Configuration 205

Figure 90: Configuring Remote Port Mirroring 206

Figure 91: Mirror Configuration (Source) 208

Figure 92: Mirror Configuration (Intermediate) 209

Figure 93: Mirror Configuration (Destination) 209

Figure 94: UPnP Configuration 211

Figure 95: sFlow Configuration 214

Figure 96: System Information 216

Figure 97: CPU Load 217

Figure 98: System Log Information 218

Figure 99: Detailed System Log Information 219

Figure 100: Port State Overview 219

Figure 101: Port Statistics Overview 220

Figure 102: Queueing Counters 221

Figure 103: QoS Control List Status 222

F

IGURES

– 16 –

Figure 104: Detailed Port Statistics 224

Figure 105: Access Management Statistics 225

Figure 106: Port Security Switch Status 227

Figure 107: Port Security Port Status 228

Figure 108: Network Access Server Switch Status 230

Figure 109: NAS Statistics for Specified Port 234

Figure 110: ACL Status 235

Figure 111: DHCP Snooping Statistics 237

Figure 112: DHCP Relay Statistics 238

Figure 113: Dynamic ARP Inspection Table 239

Figure 114: Dynamic IP Source Guard Table 239

Figure 115: RADIUS Overview 240

Figure 116: RADIUS Details 244

Figure 117: RMON Statistics 246

Figure 118: RMON History Overview 247

Figure 119: RMON Alarm Overview 248

Figure 120: RMON Event Overview 248

Figure 121: LACP System Status 249

Figure 122: LACP Port Status 250

Figure 123: LACP Port Statistics 251

Figure 124: Spanning Tree Bridge Status 253

Figure 125: Spanning Tree Detailed Bridge Status 254

Figure 126: Spanning Tree Port Status 255

Figure 127: Spanning Tree Port Statistics 256

Figure 128: MVR Statistics 257

Figure 129: MVR Group Information 258

Figure 130: MVR SFM Information 258

Figure 131: IGMP Snooping Status 260

Figure 132: IGMP Snooping Group Information 260

Figure 133: IPv4 SFM Information 261

Figure 134: MLD Snooping Status 263

Figure 135: MLD Snooping Group Information 263

Figure 136: IPv6 SFM Information 264

Figure 137: LLDP Neighbor Information 266

Figure 138: LLDP-MED Neighbor Information 268

Figure 139: LLDP Neighbor EEE Information 269

F

IGURES

– 17 –

Figure 140: LLDP Port Statistics (no header) 271

Figure 141: MAC Address Table 272

Figure 142: Showing VLAN Members 273

Figure 143: Showing VLAN Port Status 274

Figure 144: Showing MAC-based VLAN Membership Status 275

Figure 145: Showing sFlow Statistics 277

Figure 146: ICMP Ping 280

Figure 147: VeriPHY Cable Diagnostics 281

Figure 148: Restart Device 283

Figure 149: Factory Defaults 284

Figure 150: Software Upload 285

Figure 151: Software Image Selection 285

Figure 152: Configuration Save 286

Figure 153: Configuration Upload 287

F

IGURES

– 18 –

– 19 –

TABLES

Table 1: Key Features 23

Table 2: System Defaults 28

Table 3: Web Page Configuration Buttons 36

Table 4: Main Menu 36

Table 5: HTTPS System Support 66

Table 6: SNMP Security Models and Levels 69

Table 7: Dynamic QoS Profiles 91

Table 8: QCE Modification Buttons 102

Table 9: Recommended STA Path Cost Range 135

Table 10: Recommended STA Path Costs 136

Table 11: Default STA Path Costs 136

Table 12: QCE Modification Buttons 197

Table 13: System Capabilities 265

Table 14: Troubleshooting Chart 295

T

ABLES

– 20 –

Page is loading ...

LevelOne GSW-4876 User manual

LevelOne GSW-4876 User manual

Related papers

Other documents