Digisol DG-GS1526 User Manual

TM
DG-GS1526
L2 Gigabit Smart Switch
As our product undergoes continuous development the specifications are subject to change without prior notice
User Manual
V1.0
2010-10-20
TM
DG-GS1526 User Manual
COPYRIGHT
Copyright © 2010 by SNSL. All rights reserved. No part of this publication may be repro­duced, transmitted, transcribed, stored in a retrieval system, or translated into any lan­guage or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, without the prior written permission of SNSL.
SNSL makes no representati ons or wa rr anties, either expressed or implied, with respect to the contents hereof and specifically disclaims any warranties, merchantability or fitness for any particular purpose. Any software described in this manual is sold or licensed “as is”. Should the progr ams prov e defecti ve followi ng their pu rchase, the buy er (and not SNSL, its distributor, or its dealer) assumes the entire cost of all ne cessary servicing, repai r, and any incidental or consequential damages resulting from any defect in the software. Further, SNSL reserves the right to revise this publication and to make changes from time to time in the contents thereof without obligation to notify any person of such re vision or changes.
SNSL an abbreviation of Smartlink Network Systems Ltd.
U
SER
M
ANUAL
DG-GS1526 L2 GIGABIT SMART SWITCH
with 24 10/100/1000BASE-T (RJ-45) Ports, and 2 Gigabit SFP Slots
DG-GS1526
E102010-CS-R01
149100000108A
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment; consequently, it assumes a basic working knowledge of general switch functions, the Internet Protocol (IP), and Simple Network Management Protocol (SNMP) .
CONVENTIONS The fol lowing conventions are used throughout this guide to show
information:
N
OTE
:
Emphasizes important information or calls you r attention to related
features or instructions.
C
AUTION
damage the system or equipment.
W
ARNING
:
Alerts you to a potential hazard that could caus e loss of data, or
:
Alerts you to a potential hazard that cou l d cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch ,
including the physical and perf ormanc e-relate d characteristics, and how to install the switch:
The Installation Guide Also, as part of the switch’s software, there is an online web-based help
that describes all management related fe atures.
REVISION HISTORY This section summarizes the changes in each re vision of this guide.
OCTOBER 2010 REVISION
This is the first version of this guide. This gu ide is v alid for softwar e release v1.1.1.6.
– 5 –
A
BOUT THIS GUIDE
– 6 –
CONTENTS
ABOUT THIS GUIDE 5
ONTENTS 7
C
IGURES 11
F
ABLES 13
T
SECTION I GETTING STARTED 15
1INTRODUCTION 17
Key Features 17 Description of Software Features 18
Configuration Backup and Restore 18 Authentication 18 Port Configuration 18 Rate Limiting 18 Port Mirroring 18 Port Trunking 19 Storm Control 19 Static Addr esses 19 IEEE 802.1D Bridge 19 Store-and-Forward Switching 19 Spanning Tree Algorithm 19 Virtual LANs 20 Traffic Prioritization 20 Multicast Filtering 20
System Defaults 21
2INITIAL SWITCH CONFIGURATION 23
Connecti ng to th e S w i tc h 23
Setting an IP Address 23 Setting a Password 25
– 7 –
C
ONTENTS
Changing a PC’s IP Address 27
SECTION II WEB CONFIGURATION 29
3USING THE WEB INTERFACE 31
Connecting to the Web Interface 31 Navigating the Web Browser Interface 32
Home Page 32 Configuration Options 32 Panel Display 33 Main Menu 33
4SYSTEM SETTINGS 37
Displaying System Information 37 Setting a User Account 39 Setting an IP Address 40
Setting an IPv4 Address 40 Setting an IPv6 Address 41
5PORT SETTINGS 45
INK AGGREGATION 49
6L
General Link Aggregation Guidelines 49 Creating Trunk Groups 50 Configuring Trunk Settings 52 Configuring LACP 54
7CREATING VLANS 57
IEEE 802.1Q VLANs 57 Assigning Ports to VLANs 58 Configuring VLAN Attributes for Port Members 60
8 VLAN STACKING 61
Configuring IEEE 802.1Q Tunneling 61 VLAN Stacking Table 62 VLAN Stacking Settings 63
9IGMP SNOOPING 65
IGMP Snooping Introduction 65
– 8 –
C
ONTENTS
Multicast Entry Table 66 IGMP Snooping Setting 67
IGMP Global Setting 67 IGMP VLAN Setting 69
10 SPANNING TREE 71
Configuring the Spanning Tree Protocol 71 Configuring STP Global Settings 72 Configuring STP Port Settings 75
11 QUALITY OF SERVICE 79
QoS Introduction 79 Port-Based Priority 80 DSCP-Based Priority 81 Priority-to-Queue Mapping 82 Packet Scheduling 84
12 LINK LAYER DISCOVERY PROTOCOL 87
Configuring LLDP 87 LLDP Neighbors 89
13 SNMP SETTINGS 91
Simple Network Management Protocol 91 Setting SNMP System and Community Strings 92 Specifying SNMP Trap Receivers 93
14 PORT MIRRORING 95
ORT SECURITY 97
15 P
ANDWIDTH CONTROL 99
16 B
UMBO FRAME 101
17 J
18 M
ANAGEMENT ACCESS FILTER 103
19 MAC A
MAC Forwarding Table 105 Static MAC Addresses 106 MAC Address Filtering 107
20 802.1X SECURITY 109
Configuring 802.1X Authentication 109
DDRESS SECURITY 105
– 9 –
C
ONTENTS
802.1X Global Settings 110
802.1X Port Settings 111
21 GENERAL SECURITY SETTINGS 113
IP Filter Security 113 Storm Control Setting 114 Port Isolation 116 Defence Engine 117
22 PORT STATISTICS 119
23 M
ANAGEMENT TOOLS 121
HTTP Upgrade 121 Restoring Factory Defaults 122 Resetting the Switch 123
SECTION III APPENDICES 125
ASOFTWARE SPECIFICATIONS 127
Software Features 127 Management Features 128 Standards 128 Management Information Bases 129
BTROUBLESHOOTING 131
Problems Accessing the Management Int erface 131
GLOSSARY 133
NDEX 139
I
– 10 –
FIGURES
Figure 1: Login Page 24 Figure 2: Web Interface Home Page 24 Figure 3: IP Settings Page 25 Figure 4: User Accounts Page 26 Figure 5: Home Page 32 Figure 6: Front Panel Indicators 33 Figure 7: System Information 38 Figure 8: System Password 39
Figure 9: IPv4 Address Configuration 41 Figure 10: IPv6 Address Configuration 43 Figure 11: Port Configuration 47 Figure 12: Trunk Group Setting 51 Figure 13: Trunk Distribution Algorithm Setting 53 Figure 14: LACP Port Configuration 55 Figure 15: VLAN Membership Configuration 59 Figure 16: VLAN Port Configuration 60 Figure 17: VLAN Stacking Table 63 Figure 18: VLAN Stacking Settings 64 Figure 19: Multicast Entry Table 66 Figure 20: IGMP Snooping Global Settings 68 Figure 21: IGMP Snooping VLAN Settings 69 Figure 22: STP Global Setting 74 Figure 23: STP Port Setting 78 Figure 24: Port-Based Priority Setting 81 Figure 25: DSCP-Based Priority Setting 82 Figure 26: Priority-to-Queue Mapping 83 Figure 27: Packet Scheduling 85 Figure 28: LLDP Settings 88 Figure 29: LLDP Neighbors 90 Figure 30: SNMP Settings 93 Figure 31: SNMP Trap Receiver Settings 94
– 11 –
F
IGURES
Figure 32: Port Mirroring 96 Figure 33: Port Security 98 Figure 34: Bandwidth Control 100 Figure 35: Jumbo Frame Setting 101 Figure 36: Management Access Filter 104 Figure 37: MAC Address Forwarding Table 106 Figure 38: Static MAC Setting 107 Figure 39: MAC Address Filtering 108 Figure 40: 802.1X Setting 111 Figure 41: 802.1X Port Setting 112 Figure 42: IP Filter Setting 114 Figure 43: Storm Control Settings 115 Figure 44: Port Isolation Settings 116 Figure 45: Defence Engine Setting 117 Figure 46: Port Statistics 120 Figure 47: Software Upgrade 122 Figure 48: Restoring Factory Defaults 122 Figure 49: Reboot Switch 123
– 12 –
TABLES
Table 1: Key Features 17 Table 2: System Defaults 21 Table 3: Web Page Configuration Buttons 32 Table 4: Main Menu 33 Table 5: Recommended STP Path Cost Range 75 Table 6: Reco mmended STP Pat h Costs 75 Table 7: Default STP Path Costs 76 Table 8: Default Mapping of CoS Values to Egress Queues 82
Table 9: CoS Priority Levels 83 Table 10: LLDP System Capabilities 89 Table 11: Troubleshooting Chart 131
– 13 –
T
ABLES
– 14 –
S
ECTION
GETTING STARTED
This section provides an overview of the switch, and introduces some basic concepts about network switches. It also describes the basic settings required to access the management interface.
This section includ es these chapters:
"Introduction" on page 17
"Initial Switch Configuration" on page 23
I
– 15 –
S
ECTION
| Getting Started
– 16 –
1 INTRODUCTION
This switch provides a broad range of features for Layer 2 switching. It includes a management agent that allows you to configure the fe atures listed in this manual. T he def aul t c onfigu r ation ca n be us ed for most o f the features provided by this switch. Howev er, there are many options that you should configure to maximize the switch’s performance for your particular network envi ronment.
KEY FEATURES
Table 1: Key Features
Feature Description
Configuration Backup and Restore
Backup to management station or TFTP server
Authentication Web – user name/password, RADIUS
DHCP Client Supported Port Configuration Speed, duplex mo de , fl ow control Rate Limiting Input rate limiting per port Port Mirroring One or more port s m irr or ed to single analy sis port Port T r unking Supports up to 8 trunks using either static or dynamic trunking
Storm Control Throttling for broadcast, multicast, and unknown unicast storms Address Table Up to 16K MAC addresses in the forwarding table, 1024 static MAC
IP Version 4 and 6 Supports IPv4 and IPv6 addressing IEEE 802.1D Bridge Supports dynamic data switching and addresses learning Store-and-Forward
Switching Spanning Tree Algorithm Supports Rapid Spann in g Tree Protocol (RSTP) , whic h in c lud e s
Virtual LANs Up to 256 using IEEE 802.1Q, port-based, and QinQ VLAN
Traffic Prioritization Queue mode and Co S co n fi gur e d by port or DSCP
SNMP v1/2c - Community strings Port – IEEE 802.1X, MAC address filtering DHCP Snooping (with Option 82 relay information) IP Filter
(LACP)
addresses
Supported to ensure wire-speed switching while eliminating bad frames
STP backward compatible mode
Stacking
Multicast Filtering Supports IGMP sn ooping and query
– 17 –
C
HAPTER
Description of Software Features
1
| Introduction
DESCRIPTION OF SOFTWARE FEATURES
The switch provides a wide range of advanced performance enhancing features. Flow control eliminates the los s of packets due to bottlenecks caused by port saturation. Storm suppression prevents broadcast, multicast, and unknown unicast tr affic storms from engulfing the network. Untagged (port-based) and tagged VLANs provide traffic security and efficient use of network bandwidth. CoS priority queueing ensures the minimum delay for moving real-time multimedia data across the network. While multicast filtering provides support for real-time network applications.
Some of the management features are brief l y described below.
CONFIGURATION
BACKUP AND
RESTORE
You can save the current co nfiguration settings to a file on the management station (using the web interface) and later download this file to restore the switch configuration settings.
AUTHENTICATION This switch authenticates management access via a web browser. User
names and passwords can be configured locally Port-based authentication is also supported via the IEEE 802.1X protocol. This protocol uses Extensible Authentication Protocol over LANs (EAPOL) to request user credentials from the 802.1X client, and then uses the EAP between the switch and the authentication server to verify the client’s right to access the network via an authentication server (i.e., RADIUS server).
PORT CONFIGURATION Yo u can manually configure the speed and dup l ex mode, and flow control
used on specific ports, or use auto-negotiation to detect the connection settings used by the attached device. Use the full-du plex mode on ports whenever possible to double the throughput of switch connections. Flow control should also be enabled to control network traffic during periods of congestion and prev ent th e los s of packet s when p ort bu ffer thresholds are exceeded. The switch supports flow control based on the IEEE 802.3x standard (now incorporated in IEEE 802.3-2005).
RATE LIMITING This feature controls the maxim u m rate for traffic tran smitted or received
on an interface. Rate limiting is configu red on interfaces at the edge of a network to limit traffic into or out of the network. Traffic that falls within the rate limit is trans mitted, while packets that exceed the acceptable amount of traffic are dropped.
PORT MIRRORING The switch can unobtru sively mirror tr affic from any po rt to a monitor port.
You can then attach a protocol analyzer or RMON probe to this port to perform traffic analysis and verify connection integrity.
– 18 –
C
HAPTER
Description of Software Features
1
| Introduction
PORT TRUNKING Ports can be combined into an aggregate connection. Trunks can be
manually set up or dynamically configured using Link Aggregation Control Protocol (LACP – IEEE 802.3-2005). The additional ports dramatically increase the throughput across any connection, and prov ide redundancy by taking over the load if a port in the trunk should fail. The s witch supports up to 8 trunks.
STORM CONTROL Broadcast, multicast and unknown unicast storm suppression prevents
traffic from overwhelming the network.When enabled on a port, the level of broadcast traffic passing through the port is restricted. If broadcast traffic rises above a pre-defined thres hold, it will be throttled until the level falls back beneath the threshold.
STATIC ADDRESSES A static address can be assigned to a specific interface on this switch.
Static addresses are bound to the assigned interface and wi ll not be moved. When a static address is seen on another interface, the address will be ignored and will not be written to the address table. Static addresses can be used to provide network security by restricting access for a known host to a specific port.
IEEE 802.1D BRIDGE The switch supports IEEE 802.1D transparent bridging. The address table
facilitates data switching by learning addresses, and then filte ring or forwarding traffic bas ed on this informati on. The addre ss table suppo rts up to 16K addresses.
STORE-AND-FORWARD
SWITCHING
SPANNING TREE
The switch copies each frame into its memory before forwarding them to another port. This ensures that all frames are a standard Ether net size and have been verified for accuracy with the cyclic redundancy check (CRC). This prevents bad frames from enter ing the network and wasting bandwidth.
To avoid dropping frames on congested ports, the switch provides 448 KB for frame buffering. Thi s buf fer can queue packets awaiting transmission on congested networks.
The switch supports these spanning tree protocols:
ALGORITHM
Spanning Tree Protocol (STP, IEEE 802.1D) – Supported by using the
STP backward compatible mode provided by RSTP. STP provides loop detection. When there are multiple physical paths between segments, this protocol will choose a single path and disable all others to ensure that only one route exists between any two stations on the networ k. This prevents the creation of network loops. However, if the chosen path should fail for any reason, an alternate path will be activated to maintain the connection.
– 19 –
C
HAPTER
Description of Software Features
1
| Introduction
Rapid Spanning Tree Protocol (RSTP, IEEE 802.1w) – This protocol
VIRTUAL LANS The switch supports up to 256 VLANs. A Virtual LAN is a collection of
network nodes that share the same collision domain regardless of their physical location or connection point in the network. The switch supports tagged VLANs based on the IEEE 802.1Q standard. Members of VLAN groups can be manually assigned to a specifi c set of VLANs. This allows the switch to restrict traffic to the VLAN groups to which a user has been assigned. By segmenting your network into VLANs, y ou can:
Eliminate broadcast storms which severely degrade performance in a
reduces the conver gence time for ne twork topo logy changes to about 3 to 5 seconds, compare d to 30 se co nd s or mor e fo r the olde r IEE E
802.1D STP standard. It is intended as a complete replacement for STP, but can still interoperate with switches running the older standard by automatically reconfiguring ports to STP-compliant mode if they detect STP protocol messages f rom attached devices.
flat network.
Simplify network management for node changes/moves by remotely
configuring VLAN membership for any port, rather than having to manually change the network conn ection.
Provide data security by restricting all traffic to the originating VLAN.
TRAFFIC
PRIORITIZATION
This switch prioritizes each packet based on the require d level of service, using eight priority queues with strict, W e ighted Fair Queuing, or W eig hted Round Robin Qu euing. It uses IEEE 802.1p and 802.1Q tags to prioritize incoming traffic based on input from the end-s tation application. These functions can data and best-effort data.
This switch also supports several common methods of prioritizing layer 3/4 traffic to meet app lication re quiremen ts . Traffic can be prioriti ze d based on the priority bits i n the IP fr ame’s Type of Service (ToS) octet or the number of the TCP/UDP port. When these services are enabled, the priorities are mapped to a Class of Service value by the switch, and the traf fic th en sent to the corresponding output queue.
be used to provide independent priorities for delay-sensitive
MULTICAST FILTERING Specific multicast traffic can be assigned to its own VLAN to ensure that it
does not interfere with normal networ k traffic and to guarantee real-time delivery by setting the required priority level for the designated VLAN. The switch uses IGMP Snooping and Query to manage multicast group registration.
– 20 –
SYSTEM DEFAULTS
C
HAPTER
The following table lists some of the basic system defaults.
Table 2: System Defaults
Function Parameter Default
Authentication User Name admin
Password admin
802.1X Port Authentication Disabled Port Security Disabled IP Filtering Di sab le d
Web Management HTTP Server Enabled
HTTP Port Number 80
SNMP SNMP Agent Disabled
1
| Introduction
System Defaults
Community Strin gs “public” (read only)
Port Configuration Admin Status Enabled
Auto-negotiation Enabled
Flow Control Disabled Rate Limiting Input and output limits Disabled Port Trunking Static Trunks None
LACP (all ports) Disabled Storm Protection Status Broadcast: disabled
Spanning Tree Algorithm Status Enabled, RSTP
Edge Port Enabled Virtual LANs Default VLAN 1
PVID 1 Traffic Prioritization Ingress Port Priority 0
Queue Mode We ighted Fai r Queuing
Weighted Fair Queuing Queue: 1 2 3 4 5 6 7 8
“private” (read/write)
Multicast: disabled Unknown unicast: disabled
(Defaults: RSTP standard)
Weight: 1 2 3 4 5 6 7 8
IP Settings IP Address 192.168.1.1
Multicast Filtering IGMP Snooping Snooping: Disabled
IP DSCP Priority Disabled
Subnet Mask 255.255.255.0
Default Gateway 0.0.0.0
DHCP Client: Disabled
Querier: Disabled
– 21 –
C
HAPTER
1
| Introduction
System Defaults
– 22 –
2 INITIAL SWITCH CONFIGURATION
This chapter includes information on connecting to the switch and basic configuratio n procedures .
The switch inclu d es a bu il t-in network management agent. The ag e n t offers a web-based management interface, and it also supports management through SNMP (Simple Network Management Protoc ol).
The switch’s web management interfac e allo ws you to conf igu r e swit ch parameters, monitor port conne ctions, and display statistics using a standard web browser such as Internet Explorer 5.x or above, Netscape
6.2 or above, and Mozilla Firefox 2.0 or above. The web management interface can be accessed from any computer attached to the network.
CONNECTING TO THE SWITCH
SETTING AN IP
DDRESS
A
To make use of the management features of your switch, you must first configure it with an IP address that is compatible with the network it is being installed in. This should be done before you permanently install the switch in the network.
N
OTE
:
By default, the IPv4 address for this switch is set to 192.168.1.1
with subnet mask 255.255.255.0.
Follow this procedure:
1. Place your switch close to the PC that you intend to us e for
configuration. It helps if you can see the front pane l of the switch while working on your PC.
2. Connect the Ethernet port of your PC to any port on the front panel of
your switch. C o nnect p o w er to the switch a nd verify that you h a ve a link by checking the front-panel LE Ds.
3. Check that your PC has an IP address on the same subnet as the
switch. The default IP address of the switch is 192.168.1.1 and the subnet mask is 255.255.255.0, so the PC and switch are on the same subnet if they both have addresses that start 192.168.1.x. If the PC and switch are not o n the same su bnet, y ou must manual ly set the PC ’ s IP address to 192.168.1.x (where “x” is any number from 2 to 255). If
– 23 –
C
HAPTER
Connecting to the Switch
2
| Initial Switch Configuration
you are unfamiliar with this process, see “Changing a PC’s IP Address”
on page 27.
4. Open your web browser and enter the address http://192.168.1.1. If
your PC is properly configured, you will see the login page of your switch. If you do not see the login page, repeat step 3.
Figure 1: Login Page
5. Enter the default user name “admin” and password “admin,” then click
the OK button to access the web interf ace home page.
Figure 2: Web Interface Home Page
– 24 –
C
HAPTER
2
| Initial Switch Configuration
Connecting t o the Switch
6. From the menu, click on System, then IP Settings. On the IP Address
Setting page, enter the new IP address, Subnet Mask and Gateway IP Address for the switch, then click on the Apply button.
N
OTE
:
The switch also s upp o rts dyn am ic IP v4 addr es s as signment through DHCP (Dynamic Host Configuration Protocol). The switch sends IPv4 configuration requests to DHCP servers on the network.
N
OTE
:
The switch also supports IPv6 addressing. By default the switch automatically generates a unique IPv6 host address based on the local subnet address prefix received in router advertisement messages. Fo r more information, see “Setting an IPv6 Address” on page 41.
Figure 3: IP Settings Page
SETTING A PASSWORD No other configuration changes are required at this stage, but before
logging out it is recommended that you change the default administrator’s user name and password for access to the switch, record them, and put them in a safe place.
User names can consist of up to 16 alphanumeric characters, and passwords can be up to 8 characters . Bo th user names and passwords are case sensitive.
To prevent unauthorized access to the switch, set a password as follows:
1. On the menu, click System and then User Account.
– 25 –
C
HAPTER
Connecting to the Switch
2
| Initial Switch Configuration
Figure 4: User Accounts Page
2. In the New Username field, define an administrator user name.
3. In the New Password field, define an administrator password.
4. Confirm the new password setting in the Retype Password field.
5. Click the Apply button.
– 26 –
CHANGING A PC’S IP ADDRESS
To change the IP address of a Windows 2000 PC:
1. Click Start, Settings, then Network and Dial-up Connections.
2. For the IP address you want to change, right-click the network
connection icon, and then click Properties.
3. In the list of components used by this connection on Ge neral tab, sele ct
Internet Protocol (TCP/IP), and then click the Properties button.
4. In the Internet Protocol (TCP/IP) Propertie s dialo g box, click to select
Use the following IP address. Then type your intended IP address, Subnet mask, and Default gateway in the prov ided text boxes.
5. Click OK to save the changes.
C
HAPTER
2
| Initial Switch Configuration
Changing a PC’s IP Address
To change the IP address of a Windows XP PC:
1. Click Start, Control Panel, then Network Connections.
2. For the IP address you want to change, right-click the network
connection icon, and then click Properties.
3. In the list of components used by this connection on Ge neral tab, sele ct
Internet Protocol (TCP/IP), and then click the Properties button.
4. In the Internet Protocol (TCP/IP) Propertie s dialo g box, click to select
Use the following IP address. Then type your intended IP address, Subnet mask, and Default gateway in the prov ided text boxes
5. Click OK to save the changes.
N
OTE
:
For users o f systems ot her th an Windows 2000 or Windows XP, refer to your system documentation for info rmation on changing the PC’s IP address.
– 27 –
C
HAPTER
2
| Initial Switch Configuration
Changing a PC’s IP Address
– 28 –
S
ECTION
WEB CONFIGURATION
This section describes the basic switch features , along with a detailed description of how to conf igure each feature via a web browser.
This section includ es these chapters:
"Using the Web Interface" on page 31
"System Settings" on page 37
"Port Settings" on page 45
"Link Aggregation" on page 49
II
"Creating VLANs" on page 57
"VLAN Stacking" on page 61
"IGMP Snooping" on page 65
"Spanning Tree" on page 71
"Quality of Service" on page 79
"Link Layer Discover y Pro toc ol" on page 87
"SNMP Settings" on page 91
"Port Mirroring" on page 95
"Port Security" on page 97
"Bandwidth Control" on page 99
"Jumbo Frame" on page 101
"Management Access Filter" on page 103
"MAC Address Security" on page 105
"802.1X Security" on page 109
– 29 –
S
ECTION
| Web Configuration
"General Security Settings" on page 113
"Port Statistics" on page 119
"Management Tools" on page 121
– 30 –
Loading...
+ 112 hidden pages