SNSL makes no representati ons or wa rr anties, either expressed or implied, with respect to
the contents hereof and specifically disclaims any warranties, merchantability or fitness for
any particular purpose. Any software described in this manual is sold or licensed “as is”.
Should the progr ams prov e defecti ve followi ng their pu rchase, the buy er (and not SNSL, its
distributor, or its dealer) assumes the entire cost of all ne cessary servicing, repai r, and any
incidental or consequential damages resulting from any defect in the software. Further,
SNSL reserves the right to revise this publication and to make changes from time to time in
the contents thereof without obligation to notify any person of such re vision or changes.
SNSL an abbreviation of Smartlink Network Systems Ltd.
U
SER
M
ANUAL
DG-GS1526 L2 GIGABIT SMART SWITCH
with 24 10/100/1000BASE-T (RJ-45) Ports,
and 2 Gigabit SFP Slots
DG-GS1526
E102010-CS-R01
149100000108A
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP) .
CONVENTIONS The fol lowing conventions are used throughout this guide to show
information:
N
OTE
:
Emphasizes important information or calls you r attention to related
features or instructions.
C
AUTION
damage the system or equipment.
W
ARNING
:
Alerts you to a potential hazard that could caus e loss of data, or
:
Alerts you to a potential hazard that cou l d cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch ,
including the physical and perf ormanc e-relate d characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related fe atures.
REVISION HISTORY This section summarizes the changes in each re vision of this guide.
OCTOBER 2010 REVISION
This is the first version of this guide. This gu ide is v alid for softwar e release
v1.1.1.6.
– 5 –
A
BOUT THIS GUIDE
– 6 –
CONTENTS
ABOUT THIS GUIDE 5
ONTENTS 7
C
IGURES 11
F
ABLES 13
T
SECTION IGETTING STARTED 15
1INTRODUCTION 17
Key Features 17
Description of Software Features 18
Configuration Backup and Restore 18
Authentication 18
Port Configuration 18
Rate Limiting 18
Port Mirroring 18
Port Trunking 19
Storm Control 19
Static Addr esses 19
IEEE 802.1D Bridge 19
Store-and-Forward Switching 19
Spanning Tree Algorithm 19
Virtual LANs 20
Traffic Prioritization 20
Multicast Filtering 20
System Defaults 21
2INITIAL SWITCH CONFIGURATION 23
Connecti ng to th e S w i tc h 23
Setting an IP Address 23
Setting a Password 25
– 7 –
C
ONTENTS
Changing a PC’s IP Address 27
SECTION IIWEB CONFIGURATION 29
3USINGTHE WEB INTERFACE 31
Connecting to the Web Interface 31
Navigating the Web Browser Interface 32
Home Page 32
Configuration Options 32
Panel Display 33
Main Menu 33
4SYSTEM SETTINGS 37
Displaying System Information 37
Setting a User Account 39
Setting an IP Address 40
Setting an IPv4 Address 40
Setting an IPv6 Address 41
5PORT SETTINGS 45
INK AGGREGATION 49
6L
General Link Aggregation Guidelines 49
Creating Trunk Groups 50
Configuring Trunk Settings 52
Configuring LACP 54
7CREATING VLANS 57
IEEE 802.1Q VLANs 57
Assigning Ports to VLANs 58
Configuring VLAN Attributes for Port Members 60
Software Features 127
Management Features 128
Standards 128
Management Information Bases 129
BTROUBLESHOOTING 131
Problems Accessing the Management Int erface 131
GLOSSARY 133
NDEX 139
I
– 10 –
FIGURES
Figure 1: Login Page24
Figure 2: Web Interface Home Page24
Figure 3: IP Settings Page25
Figure 4: User Accounts Page26
Figure 5: Home Page32
Figure 6: Front Panel Indicators33
Figure 7: System Information38
Figure 8: System Password39
Figure 32: Port Mirroring96
Figure 33: Port Security98
Figure 34: Bandwidth Control100
Figure 35: Jumbo Frame Setting101
Figure 36: Management Access Filter104
Figure 37: MAC Address Forwarding Table106
Figure 38: Static MAC Setting107
Figure 39: MAC Address Filtering108
Figure 40: 802.1X Setting111
Figure 41: 802.1X Port Setting112
Figure 42: IP Filter Setting114
Figure 43: Storm Control Settings115
Figure 44: Port Isolation Settings116
Figure 45: Defence Engine Setting117
Figure 46: Port Statistics120
Figure 47: Software Upgrade122
Figure 48: Restoring Factory Defaults122
Figure 49: Reboot Switch123
– 12 –
TABLES
Table 1: Key Features 17
Table 2: System Defaults 21
Table 3: Web Page Configuration Buttons 32
Table 4: Main Menu 33
Table 5: Recommended STP Path Cost Range 75
Table 6: Reco mmended STP Pat h Costs 75
Table 7: Default STP Path Costs 76
Table 8: Default Mapping of CoS Values to Egress Queues 82
Table 9: CoS Priority Levels 83
Table 10: LLDP System Capabilities 89
Table 11: Troubleshooting Chart 131
– 13 –
T
ABLES
– 14 –
S
ECTION
GETTING STARTED
This section provides an overview of the switch, and introduces some basic
concepts about network switches. It also describes the basic settings
required to access the management interface.
This section includ es these chapters:
◆ "Introduction" on page 17
◆ "Initial Switch Configuration" on page 23
I
– 15 –
S
ECTION
| Getting Started
– 16 –
1INTRODUCTION
This switch provides a broad range of features for Layer 2 switching. It
includes a management agent that allows you to configure the fe atures
listed in this manual. T he def aul t c onfigu r ation ca n be us ed for most o f the
features provided by this switch. Howev er, there are many options that you
should configure to maximize the switch’s performance for your particular
network envi ronment.
KEY FEATURES
Table 1: Key Features
FeatureDescription
Configuration Backup
and Restore
Backup to management station or TFTP server
AuthenticationWeb – user name/password, RADIUS
DHCP ClientSupported
Port ConfigurationSpeed, duplex mo de , fl ow control
Rate LimitingInput rate limiting per port
Port MirroringOne or more port s m irr or ed to single analy sis port
Port T r unkingSupports up to 8 trunks using either static or dynamic trunking
Storm ControlThrottling for broadcast, multicast, and unknown unicast storms
Address TableUp to 16K MAC addresses in the forwarding table, 1024 static MAC
IP Version 4 and 6Supports IPv4 and IPv6 addressing
IEEE 802.1D BridgeSupports dynamic data switching and addresses learning
Store-and-Forward
Switching
Spanning Tree Algorithm Supports Rapid Spann in g Tree Protocol (RSTP) , whic h in c lud e s
Virtual LANsUp to 256 using IEEE 802.1Q, port-based, and QinQ VLAN
Traffic PrioritizationQueue mode and Co S co n fi gur e d by port or DSCP
SNMP v1/2c - Community strings
Port – IEEE 802.1X, MAC address filtering
DHCP Snooping (with Option 82 relay information)
IP Filter
(LACP)
addresses
Supported to ensure wire-speed switching while eliminating bad
frames
STP backward compatible mode
Stacking
Multicast FilteringSupports IGMP sn ooping and query
– 17 –
C
HAPTER
Description of Software Features
1
| Introduction
DESCRIPTIONOF SOFTWARE FEATURES
The switch provides a wide range of advanced performance enhancing
features. Flow control eliminates the los s of packets due to bottlenecks
caused by port saturation. Storm suppression prevents broadcast,
multicast, and unknown unicast tr affic storms from engulfing the network.
Untagged (port-based) and tagged VLANs provide traffic security and
efficient use of network bandwidth. CoS priority queueing ensures the
minimum delay for moving real-time multimedia data across the network.
While multicast filtering provides support for real-time network
applications.
Some of the management features are brief l y described below.
CONFIGURATION
BACKUPAND
RESTORE
You can save the current co nfiguration settings to a file on the
management station (using the web interface) and later download this file
to restore the switch configuration settings.
AUTHENTICATION This switch authenticates management access via a web browser. User
names and passwords can be configured locally Port-based authentication
is also supported via the IEEE 802.1X protocol. This protocol uses
Extensible Authentication Protocol over LANs (EAPOL) to request user
credentials from the 802.1X client, and then uses the EAP between the
switch and the authentication server to verify the client’s right to access
the network via an authentication server (i.e., RADIUS server).
PORT CONFIGURATION Yo u can manually configure the speed and dup l ex mode, and flow control
used on specific ports, or use auto-negotiation to detect the connection
settings used by the attached device. Use the full-du plex mode on ports
whenever possible to double the throughput of switch connections. Flow
control should also be enabled to control network traffic during periods of
congestion and prev ent th e los s of packet s when p ort bu ffer thresholds are
exceeded. The switch supports flow control based on the IEEE 802.3x
standard (now incorporated in IEEE 802.3-2005).
RATE LIMITING This feature controls the maxim u m rate for traffic tran smitted or received
on an interface. Rate limiting is configu red on interfaces at the edge of a
network to limit traffic into or out of the network. Traffic that falls within
the rate limit is trans mitted, while packets that exceed the acceptable
amount of traffic are dropped.
PORT MIRRORING The switch can unobtru sively mirror tr affic from any po rt to a monitor port.
You can then attach a protocol analyzer or RMON probe to this port to
perform traffic analysis and verify connection integrity.
– 18 –
C
HAPTER
Description of Software Features
1
| Introduction
PORT TRUNKING Ports can be combined into an aggregate connection. Trunks can be
manually set up or dynamically configured using Link Aggregation Control
Protocol (LACP – IEEE 802.3-2005). The additional ports dramatically
increase the throughput across any connection, and prov ide redundancy by
taking over the load if a port in the trunk should fail. The s witch supports
up to 8 trunks.
STORM CONTROL Broadcast, multicast and unknown unicast storm suppression prevents
traffic from overwhelming the network.When enabled on a port, the level of
broadcast traffic passing through the port is restricted. If broadcast traffic
rises above a pre-defined thres hold, it will be throttled until the level falls
back beneath the threshold.
STATIC ADDRESSES A static address can be assigned to a specific interface on this switch.
Static addresses are bound to the assigned interface and wi ll not be
moved. When a static address is seen on another interface, the address will
be ignored and will not be written to the address table. Static addresses
can be used to provide network security by restricting access for a known
host to a specific port.
IEEE 802.1D BRIDGE The switch supports IEEE 802.1D transparent bridging. The address table
facilitates data switching by learning addresses, and then filte ring or
forwarding traffic bas ed on this informati on. The addre ss table suppo rts up
to 16K addresses.
STORE-AND-FORWARD
SWITCHING
SPANNING TREE
The switch copies each frame into its memory before forwarding them to
another port. This ensures that all frames are a standard Ether net size and
have been verified for accuracy with the cyclic redundancy check (CRC).
This prevents bad frames from enter ing the network and wasting
bandwidth.
To avoid dropping frames on congested ports, the switch provides 448 KB
for frame buffering. Thi s buf fer can queue packets awaiting transmission
on congested networks.
The switch supports these spanning tree protocols:
ALGORITHM
◆ Spanning Tree Protocol (STP, IEEE 802.1D) – Supported by using the
STP backward compatible mode provided by RSTP. STP provides loop
detection. When there are multiple physical paths between segments,
this protocol will choose a single path and disable all others to ensure
that only one route exists between any two stations on the networ k.
This prevents the creation of network loops. However, if the chosen
path should fail for any reason, an alternate path will be activated to
maintain the connection.
– 19 –
C
HAPTER
Description of Software Features
1
| Introduction
◆ Rapid Spanning Tree Protocol (RSTP, IEEE 802.1w) – This protocol
VIRTUAL LANS The switch supports up to 256 VLANs. A Virtual LAN is a collection of
network nodes that share the same collision domain regardless of their
physical location or connection point in the network. The switch supports
tagged VLANs based on the IEEE 802.1Q standard. Members of VLAN
groups can be manually assigned to a specifi c set of VLANs. This allows the
switch to restrict traffic to the VLAN groups to which a user has been
assigned. By segmenting your network into VLANs, y ou can:
◆ Eliminate broadcast storms which severely degrade performance in a
reduces the conver gence time for ne twork topo logy changes to about 3
to 5 seconds, compare d to 30 se co nd s or mor e fo r the olde r IEE E
802.1D STP standard. It is intended as a complete replacement for STP,
but can still interoperate with switches running the older standard by
automatically reconfiguring ports to STP-compliant mode if they detect
STP protocol messages f rom attached devices.
flat network.
◆ Simplify network management for node changes/moves by remotely
configuring VLAN membership for any port, rather than having to
manually change the network conn ection.
◆ Provide data security by restricting all traffic to the originating VLAN.
TRAFFIC
PRIORITIZATION
This switch prioritizes each packet based on the require d level of service,
using eight priority queues with strict, W e ighted Fair Queuing, or W eig hted
Round Robin Qu euing. It uses IEEE 802.1p and 802.1Q tags to prioritize
incoming traffic based on input from the end-s tation application. These
functions can
data and best-effort data.
This switch also supports several common methods of prioritizing layer 3/4
traffic to meet app lication re quiremen ts . Traffic can be prioriti ze d based on
the priority bits i n the IP fr ame’s Type of Service (ToS) octet or the number
of the TCP/UDP port. When these services are enabled, the priorities are
mapped to a Class of Service value by the switch, and the traf fic th en sent
to the corresponding output queue.
be used to provide independent priorities for delay-sensitive
MULTICAST FILTERING Specific multicast traffic can be assigned to its own VLAN to ensure that it
does not interfere with normal networ k traffic and to guarantee real-time
delivery by setting the required priority level for the designated VLAN. The
switch uses IGMP Snooping and Query to manage multicast group
registration.
– 20 –
SYSTEM DEFAULTS
C
HAPTER
The following table lists some of the basic system defaults.
Table 2: System Defaults
FunctionParameterDefault
AuthenticationUser Nameadmin
Passwordadmin
802.1X Port AuthenticationDisabled
Port SecurityDisabled
IP FilteringDi sab le d
Web ManagementHTTP ServerEnabled
HTTP Port Number80
SNMPSNMP AgentDisabled
1
| Introduction
System Defaults
Community Strin gs“public” (read only)
Port ConfigurationAdmin StatusEnabled
Auto-negotiationEnabled
Flow ControlDisabled
Rate LimitingInput and output limitsDisabled
Port TrunkingStatic TrunksNone
This chapter includes information on connecting to the switch and basic
configuratio n procedures .
The switch inclu d es a bu il t-in network management agent. The ag e n t
offers a web-based management interface, and it also supports
management through SNMP (Simple Network Management Protoc ol).
The switch’s web management interfac e allo ws you to conf igu r e swit ch
parameters, monitor port conne ctions, and display statistics using a
standard web browser such as Internet Explorer 5.x or above, Netscape
6.2 or above, and Mozilla Firefox 2.0 or above. The web management
interface can be accessed from any computer attached to the network.
CONNECTINGTOTHE SWITCH
SETTINGAN IP
DDRESS
A
To make use of the management features of your switch, you must first
configure it with an IP address that is compatible with the network it is
being installed in. This should be done before you permanently install the
switch in the network.
N
OTE
:
By default, the IPv4 address for this switch is set to 192.168.1.1
with subnet mask 255.255.255.0.
Follow this procedure:
1. Place your switch close to the PC that you intend to us e for
configuration. It helps if you can see the front pane l of the switch while
working on your PC.
2. Connect the Ethernet port of your PC to any port on the front panel of
your switch. C o nnect p o w er to the switch a nd verify that you h a ve a
link by checking the front-panel LE Ds.
3. Check that your PC has an IP address on the same subnet as the
switch. The default IP address of the switch is 192.168.1.1 and the
subnet mask is 255.255.255.0, so the PC and switch are on the same
subnet if they both have addresses that start 192.168.1.x. If the PC
and switch are not o n the same su bnet, y ou must manual ly set the PC ’ s
IP address to 192.168.1.x (where “x” is any number from 2 to 255). If
– 23 –
C
HAPTER
Connecting to the Switch
2
| Initial Switch Configuration
you are unfamiliar with this process, see “Changing a PC’s IP Address”
on page 27.
4. Open your web browser and enter the address http://192.168.1.1. If
your PC is properly configured, you will see the login page of your
switch. If you do not see the login page, repeat step 3.
Figure 1: Login Page
5. Enter the default user name “admin” and password “admin,” then click
the OK button to access the web interf ace home page.
Figure 2: Web Interface Home Page
– 24 –
C
HAPTER
2
| Initial Switch Configuration
Connecting t o the Switch
6. From the menu, click on System, then IP Settings. On the IP Address
Setting page, enter the new IP address, Subnet Mask and Gateway IP
Address for the switch, then click on the Apply button.
N
OTE
:
The switch also s upp o rts dyn am ic IP v4 addr es s as signment through
DHCP (Dynamic Host Configuration Protocol). The switch sends IPv4
configuration requests to DHCP servers on the network.
N
OTE
:
The switch also supports IPv6 addressing. By default the switch
automatically generates a unique IPv6 host address based on the local
subnet address prefix received in router advertisement messages. Fo r
more information, see “Setting an IPv6 Address” on page 41.
Figure 3: IP Settings Page
SETTINGA PASSWORD No other configuration changes are required at this stage, but before
logging out it is recommended that you change the default administrator’s
user name and password for access to the switch, record them, and put
them in a safe place.
User names can consist of up to 16 alphanumeric characters, and
passwords can be up to 8 characters . Bo th user names and passwords are
case sensitive.
To prevent unauthorized access to the switch, set a password as follows:
1. On the menu, click System and then User Account.
– 25 –
C
HAPTER
Connecting to the Switch
2
| Initial Switch Configuration
Figure 4: User Accounts Page
2. In the New Username field, define an administrator user name.
3. In the New Password field, define an administrator password.
4. Confirm the new password setting in the Retype Password field.
5. Click the Apply button.
– 26 –
CHANGINGA PC’S IP ADDRESS
To change the IP address of a Windows 2000 PC:
1. Click Start, Settings, then Network and Dial-up Connections.
2. For the IP address you want to change, right-click the network
connection icon, and then click Properties.
3. In the list of components used by this connection on Ge neral tab, sele ct
Internet Protocol (TCP/IP), and then click the Properties button.
4. In the Internet Protocol (TCP/IP) Propertie s dialo g box, click to select
Use the following IP address. Then type your intended IP address,
Subnet mask, and Default gateway in the prov ided text boxes.
5. Click OK to save the changes.
C
HAPTER
2
| Initial Switch Configuration
Changing a PC’s IP Address
To change the IP address of a Windows XP PC:
1. Click Start, Control Panel, then Network Connections.
2. For the IP address you want to change, right-click the network
connection icon, and then click Properties.
3. In the list of components used by this connection on Ge neral tab, sele ct
Internet Protocol (TCP/IP), and then click the Properties button.
4. In the Internet Protocol (TCP/IP) Propertie s dialo g box, click to select
Use the following IP address. Then type your intended IP address,
Subnet mask, and Default gateway in the prov ided text boxes
5. Click OK to save the changes.
N
OTE
:
For users o f systems ot her th an Windows 2000 or Windows XP, refer
to your system documentation for info rmation on changing the PC’s IP
address.
– 27 –
C
HAPTER
2
| Initial Switch Configuration
Changing a PC’s IP Address
– 28 –
S
ECTION
WEB CONFIGURATION
This section describes the basic switch features , along with a detailed
description of how to conf igure each feature via a web browser.
This section includ es these chapters:
◆ "Using the Web Interface" on page 31
◆ "System Settings" on page 37
◆ "Port Settings" on page 45
◆ "Link Aggregation" on page 49
II
◆ "Creating VLANs" on page 57
◆ "VLAN Stacking" on page 61
◆ "IGMP Snooping" on page 65
◆ "Spanning Tree" on page 71
◆ "Quality of Service" on page 79
◆ "Link Layer Discover y Pro toc ol" on page 87
◆ "SNMP Settings" on page 91
◆ "Port Mirroring" on page 95
◆ "Port Security" on page 97
◆ "Bandwidth Control" on page 99
◆ "Jumbo Frame" on page 101
◆ "Management Access Filter" on page 103
◆ "MAC Address Security" on page 105
◆ "802.1X Security" on page 109
– 29 –
S
ECTION
| Web Configuration
◆ "General Security Settings" on page 113
◆ "Port Statistics" on page 119
◆ "Management Tools" on page 121
– 30 –
Loading...
+ 112 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.