Transition Networks SM8TAF2DPA User guide

U

SER

G

UIDE

SM8TAF2DPA

Management Guide

M

ANAGEMENT

G

UIDE

SM8TAF2DPA ADVANCED SMART 10-PORT GE POE SWITCH

Layer 2 Advanced Smart Switch

with 8 10/100/1000BASE-T (RJ-45) PoE Ports,

and 2 Gigabit SFP Ports

SM8TAF2DPA

E032012/ST-R01

XXXXXXXXXXXXX

– 3 –

ABOUT THIS GUIDE

PURPOSE This guide gives specific information on how to operate and use the

management functions of the switch.

AUDIENCE The guide is intended for use by network administrators who are

responsible for operating and maintaining network equipment;

consequently, it assumes a basic working knowledge of general switch

functions, the Internet Protocol (IP), and Simple Network Management

Protocol (SNMP).

CONVENTIONS The following conventions are used throughout this guide to show

information:

N

OTE

:

Emphasizes important information or calls your attention to related

features or instructions.

C

AUTION

:

Alerts you to a potential hazard that could cause loss of data, or

damage the system or equipment.

W

ARNING

:

Alerts you to a potential hazard that could cause personal injury.

RELATED PUBLICATIONS The following publication details the hardware features of the switch,

including the physical and performance-related characteristics, and how to

install the switch:

The Installation Guide

Also, as part of the switch’s software, there is an online web-based help

that describes all management related features.

REVISION HISTORY This section summarizes the changes in each revision of this guide.

APRIL 2012 REVISION

This is the first version of this guide. This guide is valid for software release

v1.0.0.5.

A

BOUT

T

HIS

G

UIDE

– 4 –

– 5 –

CONTENTS

ABOUT THIS GUIDE 3

CONTENTS 5

FIGURES 11

TABLES 15

SECTION I GETTING STARTED 17

1INTRODUCTION 19

Key Features 19

Description of Software Features 20

System Defaults 24

2INITIAL SWITCH CONFIGURATION 27

SECTION II WEB CONFIGURATION 29

3USING THE WEB INTERFACE 31

Navigating the Web Browser Interface 31

Home Page 31

Configuration Options 32

Panel Display 32

Main Menu 33

4CONFIGURING THE SWITCH 41

Configuring System Information 41

Setting an IP Address 42

Setting an IPv4 Address 42

Setting an IPv6 Address 44

Configuring NTP Service 46

Configuring Remote Log Messages 47

Configuring Power Reduction 48

Controlling LED Intensity 48

C

ONTENTS

– 6 –

Reducing Power to Idle Queue Circuits 50

Configuring Thermal Protection 51

Configuring Port Connections 52

Configuring Security 55

Configuring User Accounts 55

Configuring User Privilege Levels 57

Configuring The Authentication Method For Management Access 58

Configuring SSH 61

Configuring HTTPS 62

Filtering IP Addresses for Management Access 63

Using Simple Network Management Protocol 64

Configuring Port Limit Controls 75

Configuring Authentication Through Network Access Servers 77

Filtering Traffic with Access Control Lists 88

Configuring DHCP Snooping 98

Configuring DHCP Relay and Option 82 Information 101

Configuring IP Source Guard 102

Configuring ARP Inspection 106

Specifying Authentication Servers 109

Creating Trunk Groups 111

Configuring Static Trunks 112

Configuring LACP 114

Configuring the Spanning Tree Algorithm 116

Configuring Global Settings for STA 118

Configuring Multiple Spanning Trees 122

Configuring Spanning Tree Bridge Priorities 124

Configuring

STP/RSTP/CIST Interfaces 125

Configuring MIST Interfaces 128

Multicast VLAN Registration 130

IGMP Snooping 133

Configuring Global and Port-Related Settings for IGMP Snooping 133

Configuring VLAN Settings for IGMP Snooping and Query 136

Configuring IGMP Filtering 138

MLD Snooping 139

Configuring Global and Port-Related Settings for MLD Snooping 139

Configuring VLAN Settings for MLD Snooping and Query 142

C

ONTENTS

– 7 –

Configuring MLD Filtering 144

Link Layer Discovery Protocol 145

Configuring LLDP Timing and TLVs 145

Configuring LLDP-MED TLVs 148

Power over Ethernet 154

Configuring the MAC Address Table 157

IEEE 802.1Q VLANs 159

Assigning Ports to VLANs 160

Configuring VLAN Attributes for Port Members 161

Configuring Private VLANs 164

Using Port Isolation 165

Configuring MAC-based VLANs 166

Protocol VLANs 167

Configuring Protocol VLAN Groups 168

Mapping Protocol Groups to Ports 169

Managing VoIP Traffic 170

Configuring VoIP Traffic 171

Configuring Telephony OUI 173

Quality of Service 174

Configuring Port Classification 175

Configuring Egress Port Scheduler 177

Configuring Egress Port Shaper 180

Configuring Port Remarking Mode 180

Configuring Port DSCP Translation and Rewriting 183

Configuring DSCP-based QoS Ingress Classification 185

Configuring DSCP Translation 186

Configuring DSCP Classification 187

Configuring QoS Control Lists 188

Configuring Storm Control 192

Configuring Port Mirroring 193

Configuring UPnP 195

5MONITORING THE SWITCH 197

Displaying Basic Information About the System 197

Displaying System Information 197

Displaying CPU Utilization 198

Displaying Log Messages 199

C

ONTENTS

– 8 –

Displaying Log Details 200

Displaying Thermal Protection 201

Displaying Information About Ports 202

Displaying Port Status On the Front Panel 202

Displaying an Overview of Port Statistics 202

Displaying QoS Statistics 203

Displaying QCL Status 204

Displaying Detailed Port Statistics 205

Displaying Information About Security Settings 208

Displaying Access Management Statistics 208

Displaying Information About Switch Settings for Port Security 209

Displaying Information About Learned MAC Addresses 211

Displaying Port Status for Authentication Services 212

Displaying Port Statistics for 802.1X or Remote Authentication Service

213

Displaying ACL Status 217

Displaying Statistics for DHCP Snooping 219

Displaying DHCP Relay Statistics 220

Displaying MAC Address Bindings for ARP Packets 221

Displaying Entries in the IP Source Guard Table 222

Displaying Information on Authentication Servers 223

Displaying a List of Authentication Servers 223

Displaying Statistics for Configured Authentication Servers 224

Displaying Information on LACP 227

Displaying an Overview of LACP Groups 227

Displaying LACP Port Status 228

Displaying LACP Port Statistics 229

Displaying Information on the Spanning Tree 230

Displaying Bridge Status for STA 230

Displaying Port Status for STA 232

Displaying Port Statistics for STA 233

Displaying MVR Information 234

Displaying MVR Statistics 234

Displaying MVR Group Information 235

Showing IGMP Snooping Information 236

Showing IGMP Snooping Status 236

Showing IGMP Snooping Group Information 237

C

ONTENTS

– 9 –

Showing IPv4 SSM Information 238

Showing MLD Snooping Information 239

Showing MLD Snooping Status 239

Showing MLD Snooping Group Information 240

Showing IPv6 SSM Information 241

Displaying LLDP Information 242

Displaying LLDP Neighbor Information 242

Displaying LLDP-MED Neighbor Information 243

Displaying LLDP Neighbor PoE Information 245

Displaying LLDP Neighbor EEE Information 246

Displaying LLDP Port Statistics 247

Displaying PoE Status 249

Displaying the MAC Address Table 250

Displaying Information About VLANs 251

VLAN Membership 251

VLAN Port Status 252

Displaying Information About MAC-based VLANs 253

6PERFORMING BASIC DIAGNOSTICS 255

Pinging an IPv4 or IPv6 Address 255

Running Cable Diagnostics 256

7PERFORMING SYSTEM MAINTENANCE 259

Restarting the Switch 259

Restoring Factory Defaults 260

Upgrading Firmware 260

Managing Configuration Files 261

Saving Configuration Settings 261

Restoring Configuration Settings 262

SECTION III APPENDICES 263

ASOFTWARE SPECIFICATIONS 265

Software Features 265

Management Features 266

Standards 267

Management Information Bases 267

C

ONTENTS

– 10 –

BTROUBLESHOOTING 269

Problems Accessing the Management Interface 269

Using System Logs 270

CLICENSE INFORMATION 271

The GNU General Public License 271

GLOSSARY 275

INDEX 283

– 11 –

FIGURES

Figure 1: Home Page 31

Figure 2: Front Panel Indicators 32

Figure 3: System Information Configuration 42

Figure 4: IP Configuration 44

Figure 5: IPv6 Configuration 46

Figure 6: NTP Configuration 47

Figure 7: Configuring Settings for Remote Logging of Error Messages 48

Figure 8: Configuring LED Power Reduction 49

Figure 9: Configuring EEE Power Reduction 51

Figure 10: Configuring Thermal Protection 52

Figure 11: Port Configuration 54

Figure 12: Showing User Accounts 56

Figure 13: Configuring User Accounts 57

Figure 14: Configuring Privilege Levels 58

Figure 15: Authentication Server Operation 59

Figure 16: Authentication Method for Management Access 60

Figure 17: SSH Configuration 61

Figure 18: HTTPS Configuration 63

Figure 19: Access Management Configuration 64

Figure 20: SNMP System Configuration 69

Figure 21: SNMPv3 Community Configuration 70

Figure 22: SNMPv3 User Configuration 71

Figure 23: SNMPv3 Group Configuration 73

Figure 24: SNMPv3 View Configuration 74

Figure 25: SNMPv3 Access Configuration 75

Figure 26: Port Limit Control Configuration 77

Figure 27: Using Port Security 78

Figure 28: Network Access Server Configuration 88

Figure 29: ACL Port Configuration 90

Figure 30: ACL Rate Limiter Configuration 91

Figure 31: Access Control List Configuration 98

F

IGURES

– 12 –

Figure 32: DHCP Snooping Configuration 101

Figure 33: DHCP Relay Configuration 102

Figure 34: Configuring Global and Port-based Settings for IP Source Guard 104

Figure 35: Configuring Static Bindings for IP Source Guard 106

Figure 36: Configuring Global and Port Settings for ARP Inspection 108

Figure 37: Configuring Static Bindings for ARP Inspection 109

Figure 38: Authentication Configuration 110

Figure 39: Static Trunk Configuration 114

Figure 40: LACP Port Configuration 116

Figure 41: STP Root Ports and Designated Ports 117

Figure 42: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 117

Figure 43: Common Internal Spanning Tree, Common Spanning Tree, Internal

Spanning Tree118

Figure 44: STA Bridge Configuration 121

Figure 45: Adding a VLAN to an MST Instance 123

Figure 46: Configuring STA Bridge Priorities 124

Figure 47: STP/RSTP/CIST Port Configuration 128

Figure 48: MSTI Port Configuration 129

Figure 49: MVR Concept 130

Figure 50: Configuring MVR 132

Figure 51: Configuring Global and Port-related Settings for IGMP Snooping 136

Figure 52: Configuring VLAN Settings for IGMP Snooping and Query 138

Figure 53: IGMP Snooping Port Group Filtering Configuration 139

Figure 54: Configuring Global and Port-related Settings for MLD Snooping 142

Figure 55: Configuring VLAN Settings for MLD Snooping and Query 144

Figure 56: MLD Snooping Port Group Filtering Configuration 145

Figure 57: LLDP Configuration 148

Figure 58: LLDP-MED Configuration 154

Figure 59: Configuring PoE Settings 157

Figure 60: MAC Address Table Configuration 159

Figure 61: VLAN Membership Configuration 161

Figure 62: VLAN Port Configuration 163

Figure 63: Private VLAN Membership Configuration 165

Figure 64: Port Isolation Configuration 165

Figure 65: Configuring MAC-Based VLANs 167

Figure 66: Configuring Protocol VLANs 169

Figure 67: Assigning Ports to Protocol VLANs 170

F

IGURES

– 13 –

Figure 68: Configuring Global and Port Settings for a Voice VLAN 173

Figure 69: Configuring an OUI Telephony List 174

Figure 70: Configuring Ingress Port QoS Classification 176

Figure 71: Configuring Ingress Port Tag Classification 177

Figure 72: Displaying Egress Port Schedulers 179

Figure 73: Configuring Egress Port Schedulers and Shapers 179

Figure 74: Displaying Egress Port Shapers 180

Figure 75: Displaying Port Tag Remarking Mode 182

Figure 76: Configuring Port Tag Remarking Mode 183

Figure 77: Configuring Port DSCP Translation and Rewriting 185

Figure 78: Configuring DSCP-based QoS Ingress Classification 186

Figure 79: Configuring DSCP Translation and Re-mapping 187

Figure 80: Mapping DSCP to CoS/DPL Values 188

Figure 81: QoS Control List Configuration 192

Figure 82: Storm Control Configuration 193

Figure 83: Mirror Configuration 194

Figure 84: UPnP Configuration 196

Figure 85: System Information 198

Figure 86: CPU Load 199

Figure 87: System Log Information 200

Figure 88: Detailed System Log Information 200

Figure 89: Thermal Protection Status 201

Figure 90: Port State Overview 202

Figure 91: Port Statistics Overview 203

Figure 92: Queueing Counters 203

Figure 93: QoS Control List Status 205

Figure 94: Detailed Port Statistics 207

Figure 95: Access Management Statistics 208

Figure 96: Port Security Switch Status 210

Figure 97: Port Security Port Status 211

Figure 98: Network Access Server Switch Status 213

Figure 99: NAS Statistics for Specified Port 217

Figure 100: ACL Status 218

Figure 101: DHCP Snooping Statistics 220

Figure 102: DHCP Relay Statistics 221

Figure 103: Dynamic ARP Inspection Table 222

F

IGURES

– 14 –

Figure 104: Dynamic IP Source Guard Table 222

Figure 105: RADIUS Overview 223

Figure 106: RADIUS Details 227

Figure 107: LACP System Status 228

Figure 108: LACP Port Status 229

Figure 109: LACP Port Statistics 229

Figure 110: Spanning Tree Bridge Status 232

Figure 111: Spanning Tree Detailed Bridge Status 232

Figure 112: Spanning Tree Port Status 233

Figure 113: Spanning Tree Port Statistics 234

Figure 114: MVR Statistics 235

Figure 115: MVR Group Information 236

Figure 116: IGMP Snooping Status 237

Figure 117: IGMP Snooping Group Information 238

Figure 118: IPv4 SSM Information 239

Figure 119: MLD Snooping Status 240

Figure 120: MLD Snooping Group Information 241

Figure 121: IPv6 SSM Information 241

Figure 122: LLDP Neighbor Information 243

Figure 123: LLDP-MED Neighbor Information 245

Figure 124: LLDP Neighbor PoE Information 246

Figure 125: LLDP Neighbor EEE Information 247

Figure 126: LLDP Port Statistics 249

Figure 127: Power over Ethernet Status 250

Figure 128: MAC Address Table 251

Figure 129: Showing VLAN Members 252

Figure 130: Showing VLAN Port Status 253

Figure 131: Showing MAC-based VLAN Configuration 254

Figure 132: ICMP Ping 256

Figure 133: VeriPHY Cable Diagnostics 257

Figure 134: Restart Device 259

Figure 135: Factory Defaults 260

Figure 136: Software Upload 261

Figure 137: Configuration Download 261

Figure 138: Configuration Upload 262

– 15 –

TABLES

Table 1: Key Features 19

Table 2: System Defaults 24

Table 3: Web Page Configuration Buttons 32

Table 4: Main Menu 33

Table 5: HTTPS System Support 62

Table 6: SNMP Security Models and Levels 65

Table 7: Dynamic QoS Profiles 81

Table 8: QCE Modification Buttons 92

Table 9: Recommended STA Path Cost Range 125

Table 10: Recommended STA Path Costs 126

Table 11: Default STA Path Costs 126

Table 12: QCE Modification Buttons 189

Table 13: System Capabilities 242

Table 14: Troubleshooting Chart 269

T

ABLES

– 16 –

– 17 –

S

ECTION

I

GETTING STARTED

This section provides an overview of the switch, and introduces some basic

concepts about network switches. It also describes the basic settings

required to access the management interface.

This section includes these chapters:

◆"Introduction" on page 19

◆"Initial Switch Configuration" on page 27

S

ECTION

I

| Getting Started

– 18 –

– 19 –

1INTRODUCTION

This switch provides a broad range of features for Layer 2 switching. It

includes a management agent that allows you to configure the features

listed in this manual. The default configuration can be used for most of the

features provided by this switch. However, there are many options that you

should configure to maximize the switch’s performance for your particular

network environment.

KEY FEATURES

Table 1: Key Features

Feature Description

Configuration Backup

and Restore

Backup to management station using Web

Authentication Telnet, Web – user name/password, RADIUS, TACACS+

Web – HTTPS

Tel ne t – SS H

SNMP v1/2c - Community strings

SNMP version 3 – MD5 or SHA password

Port – IEEE 802.1X, MAC address filtering

General Security

Measures

Private VLANs

Port Authentication

Port Security

DHCP Snooping (with Option 82 relay information)

IP Source Guard

Access Control Lists Supports up to 256 rules

DHCP Client

DNS Client and Proxy service

Port Configuration Speed, duplex mode, flow control, MTU, response to excessive

collisions, power saving mode

Rate Limiting Input rate limiting per port (manual setting or ACL)

Port Mirroring 1 sessions, up to 10 source port to one analysis port per session

Port Trunking Supports up to 5 trunks – static or dynamic trunking (LACP)

Congestion Control Throttling for broadcast, multicast, unknown unicast storms

Address Table 8K MAC addresses in the forwarding table, 1000 static MAC

addresses, 1K L2 IGMP multicast groups and 128 MVR groups

IP Version 4 and 6 Supports IPv4 and IPv6 addressing, management, and QoS

IEEE 802.1D Bridge Supports dynamic data switching and addresses learning

Store-and-Forward

Switching

Supported to ensure wire-speed switching while eliminating bad

frames

C

HAPTER

1

| Introduction

Description of Software Features

– 20 –

DESCRIPTION OF SOFTWARE FEATURES

The switch provides a wide range of advanced performance enhancing

features. Flow control eliminates the loss of packets due to bottlenecks

caused by port saturation. Storm suppression prevents broadcast,

multicast, and unknown unicast traffic storms from engulfing the network.

Untagged (port-based), tagged, and protocol-based VLANs provide traffic

security and efficient use of network bandwidth. CoS priority queueing

ensures the minimum delay for moving real-time multimedia data across

the network. While multicast filtering provides support for real-time

network applications.

Some of the management features are briefly described below.

CONFIGURATION

BACKUP AND

RESTORE

You can save the current configuration settings to a file on the

management station (using the web interface) or a TFTP server (using the

console interface through Telnet), and later download this file to restore

the switch configuration settings.

AUTHENTICATION This switch authenticates management access via a web browser. User

names and passwords can be configured locally or can be verified via a

remote authentication server (i.e., RADIUS or TACACS+). Port-based

authentication is also supported via the IEEE 802.1X protocol. This protocol

uses Extensible Authentication Protocol over LANs (EAPOL) to request user

credentials from the 802.1X client, and then uses the EAP between the

switch and the authentication server to verify the client’s right to access

the network via an authentication server (i.e., RADIUS or TACACS+

server).

Other authentication options include HTTPS for secure management access

via the web, SSH for secure management access over a Telnet-equivalent

connection, SNMP Version 3, IP address filtering for SNMP/Telnet/web

management access, and MAC address filtering for port access.

Spanning Tree Algorithm Supports standard STP, Rapid Spanning Tree Protocol (RSTP), and

Multiple Spanning Trees (MSTP)

Virtual LANs Up to 4K using IEEE 802.1Q, port-based, protocol-based, private

VLANs, and voice VLANs, and QinQ tunnel

Traffic Prioritization Queue mode and CoS configured by Ethernet type, VLAN ID, TCP/

UDP port, DSCP, ToS bit, VLAN tag priority, or port

Qualify of Service Supports Differentiated Services (DiffServ), and DSCP remarking

Link Layer Discovery

Protocol

Used to discover basic information about neighboring devices

Multicast Filtering Supports IGMP snooping and query, MLD snooping, and Multicast

VLAN Registration

Table 1: Key Features (Continued)

Feature Description

Page is loading ...

Transition Networks SM8TAF2DPA User guide

Transition Networks SM8TAF2DPA User guide

Other documents