You have purchased the XG series, a compact, layer 2 switch that achieves unsurpassed
standards of high throughput and low-latency performance.
This guide describes the XG series (XG0224 / XG0448 / XG2600) functions, installation procedures, configuration operations, and maintenance procedures and should be read and understood before you start using your XG series.
First edition: February 2011
This manual contains the technology regulated by "Foreign Exchange and Foreign Trade Control Law."
Therefore when this manual is exported or provided to a nonresident, the appropriate permission based on this law is
required.
Screenshots are used according to the guidelines provided by Microsoft Corporation.
Organization and Usage of This Manual ..........................................................................................................16
Target Readers and Required Knowledge ............................................................................................................... 16
Areas Covered ..........................................................................................................................................................16
Trademark Notification in This Manual .................................................................................................................. 17
How the Manuals for This Device Are Organized .................................................................................................. 18
End User's License Agreement .........................................................................................................................19
Chapter 1Features and Functions......................................................................... 22
1.1.310/100/1000BASE-T Port Specifications ................................................................................................ 28
1.1.4USB Port Specifications ...........................................................................................................................29
1.1.5Console Port Specifications ..................................................................................................................... 29
1.2.3System Maximum Values ........................................................................................................................34
Chapter 2Using the CLI .......................................................................................... 37
2.1Overview of the CLI ..............................................................................................................................38
2.1.1Operating Environment for the CLI ......................................................................................................... 38
2.1.2Command Modes and Mode Switching ................................................................................................... 39
2.2Using the CLI .........................................................................................................................................43
2.2.1Using the Shell Function ..........................................................................................................................43
2.2.1.1Command execution function ..................................................................................................43
2.2.1.2Entry editing function ..............................................................................................................43
2.2.1.3Command name autocomplete function ..................................................................................44
2.2.1.4Command argument autocomplete function ............................................................................ 46
2.2.1.5Abbreviated command entry function ......................................................................................46
2.2.1.6Command alias function .......................................................................................................... 46
2.2.1.7Configuration hierarchy function ............................................................................................. 47
2.2.1.8Time of command execution display function .........................................................................48
2.2.1.9Command history function ....................................................................................................... 48
2.2.1.10 List of shell key bindings ......................................................................................................... 52
2.2.2Error Messages Common to All Commands ........................................................................................... 53
2.2.3Characters that can be entered .................................................................................................................54
3.1Workflow for Initial Setup of the Device ..............................................................................................56
3.1.1Configure LAN Interface ......................................................................................................................... 57
3.1.2Telnet Connection via the LAN Interface (Optional) .............................................................................. 57
4.1.3Jumbo Frame Support ..............................................................................................................................63
4.1.4Flow Control ............................................................................................................................................63
4.1.5Storm Control ........................................................................................................................................... 63
4.1.6Egress Rate Control (XG2600 Only) ....................................................................................................... 64
4.3Link Down Relay ...................................................................................................................................66
4.4.1Configuring Link Aggregation ................................................................................................................. 68
4.4.2Frame Distribution Methods in Link Aggregation .................................................................................. 69
4.4.3The Number of Ports That Require Linkup ............................................................................................. 70
4.4.4Notes on Link Aggregation ......................................................................................................................70
4.5Spanning Tree Protocol (STP) ...............................................................................................................71
4.5.1Port Roles Based on Spanning Tree .........................................................................................................72
4.5.2Spanning Tree Protocol Port States ......................................................................................................... 72
4.5.3Configuring Spanning Tree ......................................................................................................................73
5.1.1.2ether use ................................................................................................................................... 91
5.1.1.3ether media ............................................................................................................................... 92
5.1.2MAC Information ..................................................................................................................................122
5.1.2.1ether mac storm ...................................................................................................................... 122
5.1.3STP Information ..................................................................................................................................... 124
5.1.3.1ether stp use ............................................................................................................................124
5.1.4LLDP Information .................................................................................................................................. 128
5.1.5Filter Information ...................................................................................................................................132
5.1.6QoS Information .................................................................................................................................... 137
5.1.7LACP Information ................................................................................................................................. 146
5.1.9ether SNMP Information ........................................................................................................................ 149
5.2LACP Information Settings .................................................................................................................152
5.2.1LACP Information ................................................................................................................................. 152
5.3.3Filter Information ...................................................................................................................................164
5.3.4QoS Information .................................................................................................................................... 173
5.4MAC Information ................................................................................................................................181
5.4.1MAC Information ..................................................................................................................................181
5.4.1.2mac age ..................................................................................................................................182
5.5LAN Information Settings ...................................................................................................................183
5.5.1IPv4 Related Information ....................................................................................................................... 183
5.5.1.2lan ip address ..........................................................................................................................184
5.5.1.3lan ip route ............................................................................................................................. 185
5.5.1.4lan ip filter .............................................................................................................................. 186
5.5.1.5lan ip filter move .................................................................................................................... 191
5.5.1.6lan ip dscp ..............................................................................................................................192
5.5.1.7lan ip dscp move .................................................................................................................... 196
5.5.1.8lan ip arp static .......................................................................................................................197
5.5.2IPv6 Related Information ....................................................................................................................... 198
5.5.2.1lan ip6 use ..............................................................................................................................198
5.5.7Management LAN port LLMNR Related Information .......................................................................... 214
5.5.7.1oob llmnr use .......................................................................................................................... 214
5.6IPv4 Related Information .....................................................................................................................215
5.6.1IPv4 Related Information ....................................................................................................................... 215
5.6.1.1ip arp age ................................................................................................................................ 215
5.7QoS Information Settings ....................................................................................................................216
5.7.1QoS Information .................................................................................................................................... 216
5.8STP Information ..................................................................................................................................217
5.8.1STP Information ..................................................................................................................................... 217
5.9LLDP Information Settings .................................................................................................................225
5.9.1LLDP Information .................................................................................................................................. 225
5.11Loop Detection Information Settings ..................................................................................................230
5.11.1Loop Detection Information ...................................................................................................................230
5.11.1.1 loopdetect use .........................................................................................................................230
5.12ACL Information Settings ...................................................................................................................233
5.12.1ACL Information .................................................................................................................................... 233
5.12.1.1 acl mac ...................................................................................................................................233
5.12.1.3 acl ip ....................................................................................................................................... 235
5.13AAA Information Settings ...................................................................................................................242
5.13.1Group ID Information ............................................................................................................................ 243
5.13.1.1 aaa name .................................................................................................................................243
5.13.2AAA User Information .......................................................................................................................... 244
5.13.2.1 aaa user id ............................................................................................................................... 244
5.13.2.2 aaa user password ................................................................................................................... 245
5.13.2.3 aaa user user-role ...................................................................................................................246
5.13.3RADIUS Information Settings ...............................................................................................................247
5.13.3.1 aaa radius service ................................................................................................................... 247
5.14Password Information ..........................................................................................................................257
5.14.1password format ..................................................................................................................................... 257
5.14.2password admin set ................................................................................................................................ 258
5.14.3password user set ................................................................................................................................... 260
5.15Device Information Settings ................................................................................................................262
5.15.1SNMP Information ................................................................................................................................. 262
5.15.1.1 snmp service ...........................................................................................................................262
5.15.2System Log Information ........................................................................................................................ 280
5.15.2.1 syslog server address .............................................................................................................. 280
5.15.2.2 syslog server pri ..................................................................................................................... 281
5.15.2.3 syslog pri ................................................................................................................................282
5.15.3 Automatic Time Setting Information .................................................................................................... 286
5.15.3.1 time auto server ...................................................................................................................... 286
5.15.3.2 time auto interval ................................................................................................................... 287
5.15.3.3 time zone ................................................................................................................................ 287
5.15.3.4 time summer-time .................................................................................................................. 288
5.15.4ProxyDNS Information .......................................................................................................................... 290
5.15.5Host Database Information .................................................................................................................... 295
5.15.5.1 host name ...............................................................................................................................295
5.15.5.2 host ip address ........................................................................................................................295
5.15.6Schedule Information .............................................................................................................................297
5.15.6.1 schedule at ..............................................................................................................................297
5.16.1Login banner Information ...................................................................................................................... 328
5.17.1.2 su ............................................................................................................................................331
5.17.1.5 end ..........................................................................................................................................334
5.17.1.7 top ...........................................................................................................................................335
5.17.1.8 up ............................................................................................................................................335
5.17.4Command Alias ...................................................................................................................................... 349
5.17.4.1 alias ........................................................................................................................................349
5.17.4.2 show alias ............................................................................................................................... 350
5.17.4.3 clear alias ................................................................................................................................ 350
5.17.5.1 more .......................................................................................................................................351
5.18.1.9 show date ................................................................................................................................ 367
5.18.1.10 date ......................................................................................................................................... 367
5.19.3.2 save .........................................................................................................................................374
5.19.4.1 dir ...........................................................................................................................................379
5.19.4.5 format ..................................................................................................................................... 382
5.20Ethernet Counter, Log, Statistics, and Status Display and Clear Operation Commands ....................383
5.20.1Ethernet Counter, Log, Statistics, and Status Display Commands ........................................................383
5.20.1.1 show ether ..............................................................................................................................383
5.20.1.2 show ether brief ...................................................................................................................... 387
5.20.1.3 show ether statistics ...............................................................................................................389
5.20.1.4 show ether media-info ............................................................................................................ 408
5.20.1.5 show ether utilization .............................................................................................................410
5.20.1.6 show ether queue .................................................................................................................... 412
5.20.2Ethernet Counter, Log, and Statistics Clear Commands ........................................................................414
5.21USB connection Counter, Log, Statistics, and Status Display and Clear Operation Commands ........415
5.21.1USB connection Counter, Log, and Statistics Clear Commands ........................................................... 415
5.21.1.1 show usb hcd status ................................................................................................................415
5.21.1.2 show usb storage status .......................................................................................................... 416
5.22LACP Counter, Log, Statistics, and Status Display and Clear Operation Commands ........................419
5.22.1LACP Counter, Log, Statistics, and Status Display Commands ...........................................................419
5.22.1.1 show lacp ................................................................................................................................ 419
5.22.1.2 show lacp statistics .................................................................................................................421
5.22.2LACP Counter, Log, Statistics, and Status Clear Commands ............................................................... 422
5.25.1.1 show arp ................................................................................................................................. 428
5.40Login Information Operations and Display Commands ......................................................................523
5.40.1Login Information Display Commands ................................................................................................. 523
5.40.1.1 show users ..............................................................................................................................523
5.40.2Login Information Operation Commands .............................................................................................. 525
5.40.2.1 clear line ................................................................................................................................. 525
5.41Socket Status Display Commands .......................................................................................................526
5.41.1Socket Status Display Commands ......................................................................................................... 526
5.41.1.1 show socket ............................................................................................................................526
5.42Trace Show and Clear Operation Commands ......................................................................................529
5.42.1Trace Show Commands .........................................................................................................................529
5.42.1.1 show trace ssh ........................................................................................................................ 529
5.46I’m here Commands .............................................................................................................................536
5.46.1I’m here Commands ............................................................................................................................... 536
5.48Effect by "commit" Command Execution ...........................................................................................543
Chapter 6Managing the Device............................................................................ 547
6.1Verifying the Device Operations .........................................................................................................548
6.1.1Verifying Hardware Status ..................................................................................................................... 548
6.1.2Verifying System Status ......................................................................................................................... 556
6.3.1Updating Firmware Using FTP ..............................................................................................................568
6.3.2Updating Firmware Using CompactFlash card ...................................................................................... 570
6.3.3Updating Firmware Using USB memory ............................................................................................... 572
6.4Actions When Firmware Update Failes (Backup Firm Function) .......................................................574
6.4.1Preparing the Device ..............................................................................................................................574
6.4.2Updating the Firmware .......................................................................................................................... 576
6.5Extracting of Maintenance Information ...............................................................................................577
6.5.1Procedure for Extracting Maintenance Information when a System/Subsystem Failure Occurred ...... 577
A.1Trap List .................................................................................................................................................................581
Appendix BList of MIBs....................................................................................... 582
This section describes target readers, contents, notations, etc. of this guide.
Target Readers and Required Knowledge
This guide was written for administrators, who are in charge of network construction, maintenance, and management.
To use this guide, the following knowledge is required.
•Basic knowledge of networks, the Internet, and intranets
•Basic knowledge of system security
This guide omits explanations of network protocol terms.
Areas Covered
This guide to the XGseries is composed of the following chapters.
Chapter TitlesContents
Chapter 1 Features and FunctionsDescribes the features and functions.
Chapter 2 Using the CLIDescribes operating environment of CLI and how to operate CLI.
Chapter 3 InstallationDescribes the necessary installation procedures.
Chapter 4 Switch Functions and their
Configuration
Chapter 5 Command ReferenceDescribes how to use the commands.
Chapter 6 Managing the DeviceDescribes the management of the device.
Chapter 7 Troubleshooting Describes how to solve problems in the device.
Appendix A SNMP TrapsDescribes message format of SNMP traps.
Appendix B List of MIBsDescribes the list of MIBs supported by the SNMP agent
Describes how to use the console screen.
About the Symbols
The symbols used in this guide have the following meanings.
Hint
Precautions
Reference
AvailableModel
Warning
Caution
Indicates useful information for using this device.
Indicates precautions that must be taken when using this device.
Indicates additional information to complement operating instructions.
Note
Indicates related matters such as operation procedures, etc.
Indicates the available model name when using functions of this device.
Indicates warning matters related to the Product Liability (P.L.) Law. Please follow them
when using this device.
Indicates cautionary notes related to the Product Liability (P.L.) Law. Please follow them
when using this device.
16
XG Series User's Guide
Trademark Notification in This Manual
Microsoft, MS-DOS, Windows, Windows NT, Windows Server and Windows Vista are registered trademarks of the
Microsoft Corporation in the USA and other countries.
Adobe and Reader are trademarks or registered trademarks of Adobe Systems Incorporated in the USA and other countries.
Netscape is a trademark of Netscape Communications Corporation in the USA.
UNIX is a registered trademark of Open Group in the USA and other countries.
Other company names and product names in this manual are trademarks or registered trademarks of their respective companies.
Abbreviated Product Names
The product names used in this manual are abbreviated as follows.
Product nameDescription in this manual
Microsoft® Windows® XP Professional operating systemWindows® XP
Microsoft® Windows® XP Home Edition operating system
Microsoft® Windows® Millennium Edition operating systemWindows® Me
Microsoft® Windows® 2000 Server Network operating systemWindows® 2000
Microsoft
Microsoft® Windows NT® Server network operating system Version 4.0Windows NT® 4.0
Microsoft® Windows NT® Workstation operating system Version 4.0
Microsoft® Windows Server® 2003, Standard EditionWindows Server® 2003
Microsoft® Windows Server® 2003 R2, Standard Edition
Microsoft® Windows Server® 2003, Enterprise Edition
Microsoft® Windows Server® 2003 R2, Enterprise Edition
Microsoft® Windows Server® 2003, Datacenter Edition
Microsoft® Windows Server® 2003 R2, Datacenter Edition
Microsoft® Windows Server® 2003, Web Edition
Microsoft® Windows Server® 2003, Standard x64 Edition
Microsoft® Windows Server® 2003 R2, Standard x64 Edition
Microsoft® Windows Server® 2003, Enterprise x64 Edition
Microsoft® Windows Server® 2003 R2, Enterprise x64 Edition
Microsoft® Windows Server® 2003, Enterprise Edition for Itanium-based systems
Microsoft® Windows Server® 2003, Datacenter x64 Edition
Microsoft® Windows Server® 2003 R2, Datacenter x64 Edition
Microsoft® Windows Vista® Ultimate operating system
Microsoft® Windows Vista® Business operating system
Microsoft® Windows Vista® Home Premium operating system
Microsoft® Windows Vista® Home Basic operating system
Microsoft® Windows Vista® Enterprise operating system
®
Windows® 2000 Professional operating system
Windows Vista
®
17
XG Series User's Guide
How the Manuals for This Device Are Organized
The following are XG series related manuals. Use these manuals as necessary.
Manual NameDescription
Safety and Installation GuideThis manual describes the safety and installation.
Hardware GuideDescribes the hardware of the XG.
User’s Guide (This manual)This manual describes a variety of operations and procedures, including the
installation and maintenance of the XG Series.
18
XG Series User's Guide
End User's License Agreement
#@(#)COPYRIGHT 8.2 (Berkeley) 3/21/94
All of the documentation and software included in the 4.4BSD and 4.4BSD-Lite Releases is copyrighted by The Regents of the
University of California.
Copyright 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights
reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following
conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in
the documentation and/or other materials provided with the distribution.
3. All advertising materials mentioning features or use of this software must display the following acknowledgement: This product
includes software developed by the University of California, Berkeley and its contributors.
4. Neither the name of the University nor the names of its contributors may be used to endorse or promote products derived from
this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR
CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
The Institute of Electrical and Electronics Engineers and the American National Standards Committee X3, on Information
Processing Systems have given us permission to reprint portions of their documentation.
In the following statement, the phrase "this text" refers to portions of the system documentation.
Portions of this text are reprinted and reproduced in electronic form in the second BSD Networking Software Release, from IEEE
Std 1003.1-1988, IEEE Standard Portable Operating System Interface for Computer Environments (POSIX), copyright C 1988 by
the Institute of Electrical and Electronics Engineers, Inc. In the event of any discrepancy between these versions and the original
IEEE Standard, the original IEEE Standard is the referee document.
In the following statement, the phrase "This material" refers to portions of the system documentation.
This material is reproduced with permission from American National Standards Committee X3, on Information Processing
Systems. Computer and Business Equipment Manufacturers Association (CBEMA), 311 First St., NW, Suite 500, Washington, DC
20001-2178. The developmental work of Programming Language C was completed by the X3J11 Technical Committee.
19
XG Series User's Guide
The views and conclusions contained in the software and documentation are those of the authors and should not be interpreted as
representing official policies, either expressed or implied, of the Regents of the University of California.
Redistribution and use in source and binary forms are permitted provided that the above copyright notice and this paragraph are
duplicated in all such forms and that any documentation, advertising materials, and other materials related to such distribution and
use acknowledge that the software was developed by the University of California, Berkeley. The name of the University may not
be used to endorse or promote products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR
PURPOSE.
Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All rights reserved.
License to copy and use this software is granted provided that it is identified as the "RSA Data Security, Inc. MD5 Message-Digest
Algorithm" in all material mentioning or referencing this software or this function.
License is also granted to make and use derivative works provided that such works are identified as "derived from the RSA Data
Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or referencing the derived work.
RSA Data Security, Inc. makes no representations concerning either the merchantability of this software or the suitability of this
software for any particular purpose. It is provided "as is" without express or implied warranty of any kind.
These notices must be retained in any copies of any part of this documentation and/or software.
Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) All rights reserved.
This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non-commercial use as long as the following conditions are aheared to. The following
conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL
documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson
(tjh@cryptsoft.com).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed.If this package is used in a
product, Eric Young should be given attribution as the author of the parts of the library used.This can be in the form of a textual
message at program startup or in documentation (online or textual) provided with the package.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following
conditions are met:
1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in
the documentation and/or other materials provided with the distribution.
20
XG Series User's Guide
3. All advertising materials mentioning features or use of this software must display the following acknowledgement:"This
product includes cryptographic software written by Eric Young (eay@cryptsoft.com)" The word 'cryptographic' can be left out if
the rouines from the library being used are not cryptographic related:-).
4. If you include any Windows specific code (or a derivative thereof) from the apps directory (application code) you must include
an acknowledgement:"This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Copyright (c) 1999 The OpenSSL Project. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following
conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in
the documentation and/or other materials provided with the distribution.
3. All advertising materials mentioning features or use of this software must display the following acknowledgment: "This product
includes software developed by the OpenSSL Project
for use in the OpenSSL Toolkit.
(
http://www.OpenSSL.org/)"
4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to endorse or promote products derived from this
software without prior written permission. For written permission, please contact licensing@OpenSSL.org.
5. Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior
written permission of the OpenSSL Project.
6. Redistributions of any form whatsoever must retain the following acknowledgment: "This product includes software developed
by the OpenSSL Project for use in the OpenSSL Toolkit
(
http://www.OpenSSL.org/)"
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY EXPRESSED OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS
CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
21
Chapter 1
Features and
Functions
This chapter describes the features and functions of the device.
Please use the most appropriate cable according to the environment of the installed place.
µm160MHz/km26
200MHz/km33
µm400MHz/km66
500MHz/km82
2000MHz/km300
26
Hardware Specifications
XG Series User's GuideChapter 1 Features and Functions
SFP+ Expansion Card
AvailableModel
itemspecification
Type nameSJ10GSFPZ
Interface (ETHER)
specificationsIEEE802.3ae (10GBASE-R Interface)
number of ports2
Baud rate (bps)10G
connectorSFP connector
XG0224 / XG0448
CX4 Expansion Card
AvailableModel
itemspecification
Type nameSJ10GCX4Z
Interface (ETHER)
specificationsIEEE802.3ak (10GBASE-CX4 Interface)
number of ports2
Baud rate (bps)10G
connector16pin, CX4connector
cable length (maximum)
(m)
XG0224 / XG0448
15
Compact Flash Card
AvailableModel
itemspecification
Capacity (MBytes)256
XG0224
Power Cable (100V)
AvailableModel
itemspecification
cable length (m)3
All models
27
Hardware Specifications
XG Series User's GuideChapter 1 Features and Functions
1.1.310/100/1000BASE-T Port Specifications
AvailableModel
8
1
connectorisRJ458pin
•XG0224 / XG0448
Pin numbering
1TD+RD+TP0+TP1+
2TD-RD-TP0-TP1-
3RD+TD+TP1+TP0+
4––TP2+TP3+
5––TP2-TP3-
6RD-TD-TP1-TP0-
7––TP3+TP2+
8––TP3-TP2-
All models
–: Not supported
Signal name
(XG0224: 1 to 24 port)
(XG0448: 1 to 48 port)
10/100BASE-TX1000BASE-T
MDIMDI-XMDIMDI-X
•XG2600
Pin numbering
1TD+
2TD-
3RD+
4–
5–
6RD-
7–
8–
–: Not supported
Signal name
10/100BASE-TX
MDI
28
Hardware Specifications
XG Series User's GuideChapter 1 Features and Functions
1.1.4USB Port Specifications
AvailableModel
1234
Pin numberingSignal name
1VBUS
2D-
3D+
4GND
XG0448 / XG2600
1.1.5Console Port Specifications
AvailableModel
8
1
All models
connectorisRJ458pin
Astraightcableisused.
–: Not supported
Pin numberingSignal namein / outContent
1–– –
2ERoutdata terminal ready
3TDoutsend data
4GND–ground
5GND–ground
6RDinreceive data
7–– –
8–––
29
Hardware Specifications
XG Series User's GuideChapter 1 Features and Functions
1.2Software Specifications
This section explains the software specifications for the device.
1.2.1Software Specifications
❍: Supported, –: Not supported
Item
Forwarding Mode
VLAN
Port VLAN
Tag VLAN
Protocol VLAN
Link Down Relay
Link aggregation
Static
LACP
Back up port
STP
STP
MSTP
RSTP
LLDP
LLMNR
QoS
QoS sending algorithm
strict
DRR––
WRR
Assign the priority to the queue
CoS
IPv4 TOS (ip precedence)
IPv6 TC
IPv4 DSCP
IPv6 DSCP
XG0224XG0448XG2600
Store and
Forward
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍❍
❍❍❍
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
Features
Store and
Forward
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
Selectable
❍
–
❍
(with the use of
ACL (*1))
–
❍
(with the use of
ACL (*1))
–
30
Software Specifications
XG Series User's GuideChapter 1 Features and Functions
Item
XG0224XG0448XG2600
Features
Rewrite the priority
COS (user priority)
IPv4 TOS (ip precedence)
IPv4 DSCP
IPv6 DSCP
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍
(with the use of
ACL)
(with the use of
(with the use of
Security
IP/MAC filtering❍❍❍ (*1)
Log in password
❍❍❍
Application filtering (per application server)❍❍❍
IPv4 filter
IPv6 filter
RADIUS client
Loop detection
Broadcast/multicast storm control
MAC table flash
Port mirroring
ether L3 watch
❍
(with the use of
ACL)
❍
(with the use of
ACL)
❍❍❍
❍❍❍
❍❍❍
❍❍
❍❍❍
❍❍❍
❍
(with the use of
ACL)
❍
(with the use of
ACL)
(with the use of
Output rate control––
Routing
IPv4
Static
❍❍❍
Multicast
IGMP snoop (v1, v2)
❍❍❍
ProxyDNS
DNS server
DNS relaying
URL filtering
SNMP Agent (v1, v2c, v3)
❍❍❍
❍❍❍
❍❍❍
❍❍❍
Means of configuration
telnet
ssh
Serial (CLI)
WWW browser (Web UI)
❍❍❍
❍❍❍
❍❍❍
❍❍❍
–
❍
ACL (*1))
❍
ACL (*1))
–
❍
ACL)
–
–
❍
31
Software Specifications
XG Series User's GuideChapter 1 Features and Functions
Item
Logging
System logging
Error logging
Automated time adjustment
Scheduling
Compact flash
USB memory–
XG0224XG0448XG2600
❍❍❍
❍❍❍
❍❍❍
❍❍❍
❍
*1) For the packets which applied MAC/IP filter, QoS function with the use of ACL become void.
1.2.2Initial Values
Item
Port information
ETHER port
Copper/Fiber
Full/half duplex
MDI/MDI-X
Flow control
VLANVID 1 (no tag)–
Protocol VLAN
Predefined protocolIPv4, IPv6, FNA
Link aggregation
Load balancing algorithmtx MAC address XOR rx MAC address
Back up port
Port selection schemeMaster ports preferred
STP information
STP operating modeSTP usedDisabled
LLDPDisabledUsed
LLMNREnabled (lan 0,vlan1)Disabled Enabled
Loop detectionDisabled
Broadcast/Multicast storm controlDisabled
Egress Rate Control–Disabled
IGMP snoopDisabled
1-2021-2425-261-4445-4849-521-26
XG0224XG0448XG2600
–
Auto-detect–Auto-detect–
Auto-detect–Auto-detect––
Auto-
detect
––
tx: OFF, rx: ON
Features
Auto-
detect
Features
––
❍❍
–: Not supported
Manage
ment port
10/
10Gbps
–
(Fixed)
Full-
duplex
(Fixed)
100Mbps
(Auto-
detect)
Auto-
detect
MDI
(Fixed)
tx: OFF
(Fixed)
rx: ON
(Fixed)
32
Software Specifications
XG Series User's GuideChapter 1 Features and Functions
Features
oob Interface
(Management
port):enable IPv6,
IP interface
Item
XG0224XG0448XG2600
lan0 Interface:enable IPv6, enable LLMNR
enable LLMNR
RADIUS clientDisabled
Password information
User nameadmin
PasswordNone
ACL informationNone
ProxyDNS informationNone
SNMPDisabled
telnet/SSH auto logoff5 min.
Console auto logoff8 hour
Web browser auto logoff10min (Fixed)
System log information
Sending to the ServerDisabled
Facility23 (local7)
Priorityerror, warn, info
Securityproxydns
Automatically current time SetDisabled
Schedule informationNone
Host database informationNone
Compact flash dumpDisabled–
USB memory dump–Disabled–
33
Software Specifications
XG Series User's GuideChapter 1 Features and Functions
1.2.3System Maximum Values
–: Not supported
(*4)
(*5)
(*6)
(*6)
(*6)
(*6)
(*7)
(*7)
Features
64 (per device)
(*8)
–
–
64 (per device)
(*8)
64 (per device)
(*8)
64 (per device)
(*8)
–
–
Item
Bridge information
# of blocks registered (*1)160003200016000
# of static blocks registered400
VLAN definition
# of VLANs (*2)4094
# of Protocol VLANunlimited16 VLAN
User defined Protocol VLAN8
Link aggregation
# of member ports810
# of groups132610
Back up ports
# of groups132613
STP information
# of MSTP instances16
# of neighbor LLDP device information (*3)26+36452+72826+364
MAC filters
IPv4
IPv6
Rewrite the priority
IPv4
COS (user priority)128 (per device)
IPv4 TOS (ip precedence)128 (per device)
IPv4 DSCP128 (per device)
Assign the priority to the queue128 (per device)
IPv6
IPv6 DSCP128 (per device)
Assign the priority to the queue128 (per device)
MAC table Flushing
# of address group4–
# of VLAN for every address group50–
IGMP snoop
# of multicast group addresses registered2002000
Port mirroring
Tar g e t p o rt1tx: 1, rx: 1 (*9)
XG0224XG0448XG2600
128 (per device)
128 (per device)
34
Software Specifications
XG Series User's GuideChapter 1 Features and Functions
(*4)
(*5)
(*6)
(*7)
Features
64 (per device)
(*8)
–
64 (per device)
(*8)
–
Item
# of ARPs registered8000
static200–
# of IPv4 interfaces100100 (*10)
# of IPv6 interfaces100100 (*10)
RA information (IPv6)
# of interface receiving RA2
# of Default Router for every interface4
# of IPv6 prefix for every interface4
# of Neighbor Cache entry8000
Routing table (IPv4)
# of routes registered200
# of static routes registered200
Routing table (IPv6)
# of routes registered200
# of RA routes registered1
# of static routes registered200
IP filtering information
IPv4128 (per device)
IPv6128 (per device)
DSCP rewrite information
IPv4128 (per device)
IPv6128 (per device)
# of ACL definitions800300
# of host database definitions100
AAA information
# of groups10
# of defined authenticated users1000
# of defined RADIUS servers4
ProxyDNS50
SNMP information
# of max. SNMP managers registered8
# of simultaneously connected telnet/ssh/WWW browser clients (*11)8
System logging
# of displayed system log records1024 or more
Max. # of system log servers registered3
Automated time adjustment
Max. # of SNTP servers registered4
# of schedules defined20
Application filtering information (per application server)30
XG0224XG0448XG2600
*1) Includes own entries of the device and static entries.
*2) Includes system use of VLANs (number of ether ports + 1).
35
Software Specifications
XG Series User's GuideChapter 1 Features and Functions
*3) First, the maximum number of neighbor LLDP device information is 15 times of the number of total ports including
1G and 10G. (XG0224: 390, XG0448: 780, XG2600: 390)
Second, each port including 1G and 10G must have at least one LLDP information. (XG0224: 26, XG0448: 52,
XG2600: 26)
The remaining number of neighbor LLDP device information can be distributed to any ports. (XG0224: 364,
XG0448: 728, XG2600: 364)
*4) Total number of MAC filter (IPv4) and IPv4 filter definitions.
*5) Total number of MAC filter (IPv6) and IPv6 filter definitions.
*6) Total number of Rewrite the priority (IPv4) and IPv4 DSCP rewrite definitions.
*7) Total number of Rewrite the priority (IPv6) and IPv6 DSCP rewrite definitions.
*8) The total number of MAC filter, IPv4 filter, MAC QoS and IPv4 DSCP rewrite definitions may be reduced as the
number of ACL rules increase.
*9) Same port can't be used as a target port for tx and for rx.
*10) Includes Management Port Interface (oob).
*11) 4 sessions for Telnet, 1session fot WWW (http), 1session for console, 1session for ftp, 1session for ssh (sftp).
36
Software Specifications
Chapter 2
Using the CLI
This chapter describes how to use the command line interface (CLI) to operate the device.
This section describes how to use the command line interface (CLI) for the XG Series.
2.1.1Operating Environment for the CLI
There are two ways to access the device to run commands.
•Serial connection
Connect to the serial port of the device using RS232C cable via RJ45conversion cable.
The available terminal emulation type is VT100.
When initially connecting a terminal to the device, configure the serial port on the client side as shown below.
ItemSetting value
Baud rate9600 bps
Character size8 bit
ParityNone
Stop bits1 bit
Flow controlNone
EmulationVT100
Character setASCII
Line feed codeTransmission: CR (carriage return) only
Reception: LF is added
•Remote connection via LAN port
Connect a terminal or host computer using a telnet client to the management LAN port of the device TCP port of 23
Is used for the default telnet connection
The following tables list the factory defaults.
Management-LAN [XG2600] and LAN Interface initial settings
ItemSetting value
IP addressNone (must be set before using the LAN interface)
Subnet addressNone (must be set before using the LAN interface)
Telnet server initial settings
ItemSetting value
Use telnetEnable
Port number23 (TCP)
EmulationVT100/VT200/xterm
BackSpace keyDelete
Character setASCII
To use the remote connection via the management-LAN port, use the "oob ip" command to configure the managementLAN port for the device as below. [XG2600]
XG2600(config)# oob ip 192.168.1.1/24 3
XG2600(config)# commit
XG2600(config)# save
To use the remote connection via the LAN port 1, use the "lan ip" command to configure the management-LAN port
38
Overview of the CLI
XG Series User's GuideChapter 2 Using the CLI
for the device as below.
XG2600(config)# ether 1 vlan untag 1
XG2600(config)# lan 0 vlan 1
XG2600(config)# lan 0 ip 192.168.1.1/24 3
XG2600(config)# commit
XG2600(config)# save
A VT100, VT200, or xterm can be used as a terminal.
2.1.2Command Modes and Mode Switching
The following table shows a hierarchy of command modes and mode switching.
2.1.2.1Command Operation Procedure
The flow of system operation via command execution is as follows:
1) Login to the device.
2) Run an operation command to manage system operations.
3) Run a configure command to move to configuration mode.
4) Run a configuration command to set candidate configuration (candidate-config).
5) Run a commit command to apply the candidate configuration as a running configuration (running-config).
6) Run a save command to save the candidate configuration as a startup configuration (startup-config).
7) Run an exit or similar command to return to operation mode.
8) Repeat steps 2) through 7)
9) Run an exit command to log out.
Reference
Login
username
admin
" Login to the device" (pg.40), "2.1.2.2 Executable commands" (pg.42)
Operationmode
user
exit
exit
Operationcommand
User
class
admin/su
exit/!
Runningconfiguration
(running-config)
Admin
class
reset/Reconnectpower
configure
exit/!/end/quit
commit
load
Configurationmode
Admin
class
Operationcommand
Configurationcommand
Candidateconfiguration
(candidate-config)
save
load
Startupconfiguration
(startup-config)
39
Overview of the CLI
XG Series User's GuideChapter 2 Using the CLI
Login to the device
When you connect to the device via a console port, telnet, or ssh connection (*1), a login prompt like the following one
appears:
Login:Enter user name (*1)
Password:Enter password.
<WARNING> weak admin’s password:set the password (*2)
#Commands can be run. (*3)
By entering the user name and password, you can run commands.
Only the administrator can log into the system for the first time. For the first time, enter "admin" for the user name, and
press ENTER for the password.
*1) For ssh connections, "Login:" does not appear. Specify the user name at the ssh client.
*2) This message warns you that system security is weak because the password is not set. This message will not appear
after you set a password with 8 or more alphanumeric characters and symbols.
*3) The model name is also shown in the prompt by default. When a prompt character string is configured, the configured
prompt is displayed.
User name and password
The user name and password are different for the administrator and general users.
•User name
The username for the administrator is "admin" and the user name for the general user is "user" (fixed user names).
By using a password aaa command and specifying use of AAA user information (aaa user id command) or RADIUS
server user information as the login user information, you can add user names as an administrator or general user.
•Password
No password is configured by default. Be sure to configure the password when you log into the system for the first
time. Use the password admin set command to configure the administrator password and the password user set
command to configure the general user password. When configuring password aaa command settings, set the
administrator and user passwords in the AAA user information stored in the system (aaa user password command) or in
the user information for the RADIUS server.
Reference
"5.14 Password Information" (pg.257)
40
Overview of the CLI
XG Series User's GuideChapter 2 Using the CLI
Privilege classes (admin class and user class)
Two privilege classes are available; admin class (login as admin) and user class (login as user).
•admin class
All commands can be run.
However, admin commands and su commands cannot be run because it is not necessary to run them in admin class.
•user class
Only a portion of operation commands can be run. Configuration commands cannot be run. You can run an admin
command to transfer to admin class.
If a password aaa command has been used to specify use of the AAA user information (aaa user id command) or RADIUS
server user information as the login user information, the user name privilege class is determined as follows:
•When using RADIUS server
Determined according to the Filter-ID attribute information configured in the RADIUS server.
RADIUS attribute (number)Setting
Filter-ID (11)For admin class: ”administrator”
For user class: ”user”
•When using user information on the device
Determined according to aaa user user-role command settings.
Use modes (operation mode and configuration mode)
Two use modes are available; operation mode and configuration mode.
•Operation mode
Only operation commands can be run.
•Configuration mode
Both configuration commands and operation commands can be run.
The use mode immediately after logging into the system is operation mode.
The table below displays user names and corresponding passwords, as well as privilege class and use mode after login.
Login user
name
adminNone
userNot set
*) To log into the system as user, configure password information for the user.
Default password
information
(blank) (Hit ENTER)
(login not possible [*])
Password configuration
command
password admin setadmin classOperation mode
password user setuser classOperation mode
Login privilege
class
Login use mode
41
Overview of the CLI
XG Series User's GuideChapter 2 Using the CLI
2.1.2.2Executable commands
Command execution is restricted according to the following conditions:
•Command type
•Privilege class
•Use mode
Reference
" Privilege classes (admin class and user class)" (pg.41),
" Use modes (operation mode and configuration mode)" (pg.41)
Command type (operation commands and configuration commands)
Two command types are available; operation commands and configuration commands.
Since the use mode after logging into the system is operation mode, you can only run operation commands.
By running a configure command, the use mode changes to configuration mode and you will be able to run configuration
commands as well as operation commands.
However, since you cannot run a configure command in user class, run an admin command to change to admin class before
running the configure command.
The following table lists command types and functions.
Command typeCommand function
Operation commandDisplay and manipulate device status, operation status, and
network status, display or delete stored information, etc.
Configuration commandOperating information settings and network configuration,
etc.
The following table lists commands and operations.
CommandOperation
Configuration commandSets to candidate configuration (candidate-config).
These are basically not reflected in running operations; however, as in password
information configuration, there are commands to reflect settings immediately.
commit commandThe candidate configuration is reflected in the running configuration (running-
config) and active operations change.
Reference
Reference
save commandSaves candidate configuration to startup configuration (startup-config).
Run reset command or reconnect
power
show candidate-config commandDisplays candidate configuration settings.
show running-config commandDisplays active configuration settings.
show startup-config commandDisplays startup configuration settings.
delete commandDeletes configuration settings.
Applies candidate configuration to the running configuration.
"5.48 Effect by "commit" Command Execution" (pg.543)
Precautions
If you run a reset command or reconnect power without first running a save command, the running configuration and
candidate configuration will return to the state they were in before running a configuration command.
42
Overview of the CLI
XG Series User's GuideChapter 2 Using the CLI
2.2Using the CLI
2.2.1Using the Shell Function
The shell function supports the following features in order to assist command entry:
•Command execution function
•Entry editing function
•Command name autocomplete function
•Command argument autocomplete function
•Abbreviated command entry function
•Command alias function
•Configuration hierarchy function
•Time of command execution display function
•Command history function
The following describes each function.
2.2.1.1Command execution function
The command execution function allows you to enter a command string and hit ENTER or RETURN to run the command.
You can enter ASCII characters, EUC kanji, or Shift JIS kanji characters for the command string.
To enter a kanji character, specify its code using a terminal charset command.
The maximum length of a command string is 1,022 characters (including the prompt string) for ASCII characters. A single
kanji character is equivalent to two ASCII characters.
2.2.1.2Entry editing function
The entry editing function allows you to move the cursor, insert or delete characters, and delete, cut, and paste words
within an entered command string.
Refer to "2.2.1.10 List of shell key bindings" (pg.52) for keys used with the entry editing function.
The entry editing function uses the VT100 terminal escape sequence to move the cursor and perform other functions.
When cursor movement or other functions do not work correctly, check that the terminal software being used supports
VT100 terminal emulation. In addition, if the screen display is not set to 24 lines and 80 columns, use the terminal window
command to configure the screen correctly.
Reference
"2.2.1.10 List of shell key bindings" (pg.52)
43
Using the CLI
XG Series User's GuideChapter 2 Using the CLI
2.2.1.3Command name autocomplete function
The command name autocomplete function allows you to display a list of command names without entering anything by
pressing the TAB key or CTRL + I. In addition, if you press the TAB key or CTRL + I after entering part of a command,
the command string will be automatically completed. Automatically completed character strings differ depending on
conditions.
The following table details autocomplete operations for entered characters.
Command name beginning with entered charactersOperation
When nothing is enteredA list of all command names is displayed.
When a single command appliesThe applicable command name is automatically completed
along with a single blank character.
When multiple commands apply, with the same string
following the entered characters
When multiple commands apply, with different strings
following the entered characters
When no command appliesNothing is displayed.
When you use autocomplete without entering anything, a list of commands with the command-type lines shown below is
displayed.
The identical character string portion is completed.
A list of possible commands is displayed.
•--Exec commandsOperation commands and alias commands
•-- Exec commands (config mode)-Operation commands and aliases for configuration mode
•--Config commands-Configuration commands
•--Config commands (current directory)-Configuration command arguments (when the configuration hierarchy function is enabled and you are not in the top
hierarchy)
The command name autocomplete function works differently according to the number of times you hit the TAB key or
CTRL + I.
The table below lists the autocomplete operation for each number of times the TAB key or CTRL + I are hit.
Note that descriptions are displayed in Japanese (kanji characters). If they are not displayed correctly, use a terminal
charset command to specify a kanji character code which is displayed correctly.
Number of times the TAB
key or CTRL + I are hit
One timeA list of command names is displayed or the entered command string is automatically
completed.
Two timesCommand and argument names corresponding to the use mode and their descriptions are
displayed.
In operation mode, the operation command names and descriptions, and the names of
commands registered using an alias command as well as their registration content are
displayed.
In configuration mode when the configuration hierarchy function is disabled, the
configuration command names and their descriptions are displayed.
In configuration mode, when the configuration hierarchy function is enabled and you are at
the top hierarchy level, the configuration command names and descriptions are displayed.
In configuration mode, when the configuration hierarchy function is enabled and you are not
at the top hierarchy level, the command argument names available for the current hierarchy
level and their descriptions are displayed.
Operation
44
Using the CLI
XG Series User's GuideChapter 2 Using the CLI
Number of times the TAB
key or CTRL + I are hit
Operation
Three timesCommand forms are displayed.
In operation mode, simplified command forms are displayed.
In configuration mode, when the configuration hierarchy function is disabled, simplified
command forms are displayed.
In configuration mode, when the configuration hierarchy function is enabled and you are at
the top hierarchy level, simplified command forms are displayed.
In configuration mode, when the configuration hierarchy function is enabled and you are not
at the top hierarchy, command forms for the current hierarchy level and simplified command
forms are displayed.
Four timesReturns to the operation for hitting the TAB key or CTRL + I one time.
45
Using the CLI
XG Series User's GuideChapter 2 Using the CLI
2.2.1.4Command argument autocomplete function
While entering configuration command arguments, the command argument autocomplete function allows you to display a
list of arguments and candidate arguments without entering anything by pressing the TAB key or CTRL + I. In addition, if
you press the TAB key or CTRL + I after entering part of an argument, the remaining character string will be automatically
completed.
The argument autocomplete function works differently according to the number of times you hit the TAB key or CTRL + I.
The table below lists the autocomplete operation for each number of times the TAB key or CTRL + I are hit.
Note that descriptions are displayed in Japanese (kanji characters). If they are not displayed correctly, use a terminal
charset command to specify a kanji character code which is displayed correctly.
Number of times the TAB
key or CTRL + I are hit
One timeA list of arguments and argument candidates is displayed or the entered argument
string is autocompleted.
This works in the same way as command name autocomplete.
Two timesDescriptions of arguments and argument candidates are displayed.
Three timesThe command syntax following the current argument is displayed.
Four timesReturns to the operation for hitting the TAB key or CTRL + I one time.
For some command arguments, you can specify multiple arguments separated by a comma (,), or specify a range of values
Note
delimited by a hyphen (-). The argument autocomplete function assumes that all arguments allow specifying multiple arguments
and value range, and if you autocomplete an argument after entering "," or "-", all the argument candidates will be given.
Operation
2.2.1.5Abbreviated command entry function
The abbreviated command entry function allows you to run a command with its name and argument entered only partway.
For each command name and command argument entered, the command name autocomplete and command argument
autocomplete are performed and the command is executed. When there are multiple candidates, enter characters until
candidates are narrowed to one, and then execute the command. If you execute the command while there are still multiple
candidates, the command is not autocompleted and an error occurs.
2.2.1.6Command alias function
The command alias function allows you to register a command name and its argument(s) as a single command.
Use the alias command to register, delete, and display command aliases.
Note that commands registered with a command alias cannot be autocompleted by the abbreviated command entry
function, and you must enter the complete command name and arguments when registering them.When a command alias is
registered correctly, it will be included for command name and argument autocomplete.
46
Using the CLI
XG Series User's GuideChapter 2 Using the CLI
2.2.1.7Configuration hierarchy function
The configuration hierarchy function interprets common portions of executed configuration command names and
arguments as a hierarchy level, and allows you to move between hierarchy levels.
When you execute a configuration command and the command completes successfully, in general the portion from the
command name to the argument two arguments before an argument specifying a variable value becomes a hierarchy level.
This may differ depending on the command.
Ex.)
(argument with variable value)
(configure)# lan 0 ip
(Move hierarchy level to the argument two before the variable value argument)
(configure-lan-0-ip)#
Even in cases where an error occurs because the number of arguments is less than required, the configuration hierarchy
function assumes the entered command name and arguments to be a hierarchy level. Depending on the command, even if
arguments are incorrect the configuration hierarchy function may judge that there are not enough arguments and interpret
the entry as a hierarchy level. The portion assumed to be a hierarchy level is displayed at the command prompt. However,
if you have used a terminal prompt command to change the entry prompt string to exclude the configuration hierarchy, it is
not displayed.
After moving to a hierarchy level, you can only enter command arguments following the current level to execute the
command. When the number of arguments is still not enough, a further hierarchy level is displayed. When you have
omitted an optional argument, without moving to another hierarchy level the command is executed correctly, following
which you will move to a higher hierarchy level. Be sure to enter optional arguments as a group. To execute a command
other than at the hierarchy level you have moved to, enter it beginning with the command name.
However, in a hierarchy level for an argument which allows for arbitrary character strings, any strings other than the
commands below will be entered as configuration command arguments. To enter one of the following commands as an
argument for a configuration command, move to a higher level, and then enter so that strings matching these commands
are the second argument or following.
(configure)# acl 0 ip(Moves to another level because there are not enough arguments.)
(configure-acl-0-ip)# any(Moves to another level because there are not enough arguments.)
(configure-acl-0-ip-any)# any (Moves to higher level because command can complete successfully
without specifying an optional argument.)
(configure-acl-0)#
If you run the show command with no arguments after moving hierarchy levels, a list of configuration commands for that
level and following is displayed.
You can move to a higher hierarchy level or to the top level using an up command or top command respectively.
The configuration hierarchy function is disabled by default. Even when it has been enabled, this function is disabled after
you log out of the system. In this case, no message is displayed to indicate that the function has been disabled.
The following explains how to enable and disable the configuration hierarchy function.
•To enable the configuration hierarchy function: Press CTRL + O in configuration mode.
The following message is displayed and the configuration hierarchy function is enabled. Information which has been
partially entered will not be discarded.
<NOTICE> The configuration directory mode is enabled. To disable, type Ctrl+G.
47
Using the CLI
XG Series User's GuideChapter 2 Using the CLI
•To disable the configuration hierarchy function: Press CTRL + G.
The following message is displayed and the configuration hierarchy function is disabled. Information which has been
partially entered will be discarded.
<NOTICE> The configuration directory mode is disabled.
A command execution example is shown below.
z Command
# configure
(config)# lan 0 ip address 192.168.1.1/24 3(Run configuration command.)
(config-lan-0-ip)#(Hierarchy level is displayed at the command prompt.)
(config-lan-0-ip)# show(Display configuration following the current level.)
address 192.168.1.1/24 3
service server
info address 192.168.1.100/24 32
(config-lan-0-ip)# save
(config-lan-0-ip)# top(Move to the top level.)
(config)#
(Change to configuration mode.)
(Enter the command name and run the command.)
2.2.1.8Time of command execution display function
The time of command execution display function allows you to display the time when the execution of a command starts.
This function is useful when a command execution log is being recorded during operations.
To enable the time of command execution display function, use the terminal timestamp command.
Although you can check command execution time with the show logging command, execution time is only displayed for
commands recorded in the command execution history. You can also use the terminal prompt command to display the date
and time in the prompt string However, this is not the time when a command was executed but the time when the prompt
was displayed.
2.2.1.9Command history function
The command history function allows you to record command execution history and re-execute commands using this
history. You can also redisplay commands and replace commands in the history.
You can set the number of lines in the command history using a terminal logging command.
You can also press CTRL + P and CTRL + N to sequentially display the command history items, and re-execute or re-edit and
Note
execute a displayed command.
Reference
The following explains how to re-execute and redisplay commands.
You can use the history specifier and display specifier together with command character string replacement.
"2.2.1.10 List of shell key bindings" (pg.52)
48
Using the CLI
XG Series User's GuideChapter 2 Using the CLI
Re-executing commands
You can enter a history specifier at the beginning of the command string to re-execute the command. The command will be
executed after the command string for re-execution is displayed. In addition, command history and history numbers can be
viewed with the history command. Note that you can enter the history specifier only once at the beginning of the command
line. Any history specifiers entered thereafter will be treated as normal characters.
History specifierOperation
!!Re-execute the last command run.
! history numberRe-execute the command with the specified history number.
!-number in history Re-execute the command run the specified number of commands before in the history.
Ex.) !-3 (The third command from the newest in the history is re-executed.)
! stringThe last run command beginning with the specified string is re-executed.
Ex.) !net (The last run command beginning with "net" is re-executed.)
When you enter a string following the history specifier, it will be added to end of the command string invoked from the
history.
The following shows an example.
z Command
# show ip route
(The execution results of show ip route are displayed.)
!! all(Add "all" to the last command and execute it.)
#
show ip route all(Display the command string to re-execute.)
(The execution results of show ip route all are displayed.)
Redisplaying commands
You can redisplay a previously run command by entering a display specifier (:p) following a history specifier. Note that the
displayed command is not re-executed yet.
Since the displayed command string is recorded as a new command history item, you can re-execute it by entering !! after
checking the command string.
Display specifierOperation
:pRedisplays a command.
Ex.) !net:p (The last run command beginning with "net" is redisplayed.)
When you enter a string following the display specifier, it will be added to end of the command string invoked from the
history.
A command execution example is shown below.
z Command
# show ip route
(The execution results of show ip route are displayed.)
# !!:p all(Add "all" to the last command executed and display it.)
show ip route al(Display the command string.)
# !!(Re-execute the previous command.)
show ip route all(Display the command string to re-execute.)
(The execution results of show ip route all are displayed.)
49
Using the CLI
XG Series User's GuideChapter 2 Using the CLI
Replacing the last command string
By entering a replacement specifier (^), replacement target string, and replacement string at the beginning of a command
string, you can re-execute the last command with the specified string replaced with a new string.
If no replacement string is specified, the target string will be deleted.
The table below lists specifiers and operations. (A: replacement target string, B: replacement string, C: additional string)
CommandOperation
^A^B^Replace A with B and execute the command string.
^A^B^:pReplace A with B and display the command string.
^A^B^CReplace A with B, add C to the command string, and execute it.
^A^B^:pCReplace A with B, add C to the command string, and display it.
^A^^Delete A and execute the command string.
^A^^:pDelete A and display the command string.
^A^^CDelete A, add C to the command string, and execute it.
^A^^:pCDelete A, add C to the command string, and display it.
A command execution example is shown below.
z Command
# show running-config lan 0 ip address
(Display the IP address for lan 0.)
# ^addr^rout^:p(Replace addr with rout and display the command string.)
show running-config lan 0 ip routess
# ^ess^e^(replace ess with e and execute the command string.)
show running-config lan 0 ip route(Display the command and execute it.)
(Display the static route information for lan 0.)
50
Using the CLI
XG Series User's GuideChapter 2 Using the CLI
Replacing command strings
By entering a single-replacement specifier (:s) or all-replacement specifier (:gs) following a history specifier and
replacement specifier, you can replace the target string and re-execute the command string.
A single-replacement specifier replaces the first matching string only, while an all-replacement specifier replaces all
matching strings.
The replacement target string and replacement string are specified as with string replacement for the preceding command;
however, arbitrary characters (@, #, %, &, ~, =, _, etc.) may be used as delimiters. You can successively enter a singlereplacement specifier, all-replacement specifier, and display specifier.
The table below lists specifiers and operations. This example uses "/" as a delimiter.
:s/A/B/Replace only the first instance of A with B and execute the command string.
:ps/A/B/Replace only the first instance of A with B and display the command string.
:s/A/B/CReplace only the first instance of A with B, add C to the command string, and execute it.
:ps/A/B/CReplace only the first instance of A with B, add C to the command string, and display it.
:gs/A/B/Replace all instances of A with B and execute the command string.
:pgs/A/B/Replace all instances of A with B and display the command string.
:gs/A/B/CReplace all instances of A with B, add C to the command string, and execute it.
:pgs/A/B/CReplace all instances of A with B, add C to the command string, and display it.
:s/A//Delete only the first instance of A and execute the command string.
:ps/A//Delete only the first instance of A and display the command string.
:s/A//CDelete only the first instance of A, add C to the command string, and execute it.
:ps/A//CDelete only the first instance of A, add C to the command string, and display it.
:gs/A//Delete all instances of A and execute the command string.
:pgs/A//Delete all instances of A and display the command string.
:gs/A//CDelete all instances of A, add C to the command string, and execute it.
:pgs/A//CDelete all instances of A, add C to the command string, and display it.
:s/A1/B1/:gs/A2/B2/:pReplace only the first instance of A1 with B1, replace all instances of A2 with B2, and display the
command string.
A command execution example is shown below.
z Command
# lan 0 ip address 192.168.0.1/24 3
# !!:gs/0/1/:p(Replace all instances of 0 with 1 and display the command string.)
lan 1 ip address 192.168.1.1/24 3
# !!(Re-execute the last command to run.)
lan 1 ip address 192.168.1.1/24 3
When entering a command with the command history function, you can omit the last delimiter (/, ^, etc.) at the end of the
Note
command line. However, when the last delimiter is omitted, you cannot specify a display specifier (:p), additional history
specifier, or additional string.
51
Using the CLI
XG Series User's GuideChapter 2 Using the CLI
2.2.1.10 List of shell key bindings
The following table shows the key bindings for using the shell.
Key combination
(note)
Ctrl+AMoves the cursor to the top.
Ctrl+B← (Note)Moves the cursor to the left by one character.
Ctrl+CInterrupts input.
Ctrl+DDeletes one character if any are input.
Ctrl+EMoves the cursor to the end.
Ctrl+F→ (Note)Moves the cursor to the right by one character.
Ctrl+GDisables the configuration hierarchy function.
Command and option separators are recognized as one or more space characters (ASCII code: 0x20).
Don't enclose a parameter in quotes (") but for instructions to use quotes (") to contain a blank space.
The commands are case-sensitive.
54
Using the CLI
Chapter 3
Installation
This chapter describes the installation procedures for the device.
Reference
Refer to "chapter 2 Using the CLI" (pg.37) for details on using the CLI.
Refer to "chapter 5 Command Reference" (pg.85) for details on commands.
This section describes the procedures to setup the device.
1) Prepare a terminal
Prepare a terminal for the initial configuration.
2) "Besic Setting Up"
Connect the device and terminal with an RS232C cable. The band rate setting is 9,600 bps.
To configure the Device basically, carry out the following procedure.
CommandTa sk
Login:admin
Password:
XG2600# configureSwitch to Configuration mode.
XG2600(config)# sysname HOST-NAMESet the device name (HOST-NAME).
XG2600(config)# time zone -0500Set time zone.
XG2600(config)# date YYYY/MM/DD.hh:mm:ssSet date and time.
XG2600(config)# password admin set
Password:
Retype password:
XG2600(config)# saveSave the configuration.
XG2600(config)# resetReset the device.
Login to the device from the serial terminal. The user name is
"admin". The default password is not set.
Set the password for user "admin".
Type password .
Retype password.
3) Turn on the device to start the system.
Turn on the terminal and the device to start the system.
4) "Configure LAN Interface"
The initial setting of the LAN interface is for only IPv6 link-local address.
To use the following functions, set up the LAN interface:
- Telnet connection
- SNMP manager connection
- System log transmission
- Time synchronization using an NTP/SNTP server
- Configuration file upload/download
- Firmware update
- Collection of maintenance information
5) "Telnet Connection via the LAN Interface (Optional)"
The initial setting of the Telnet connection via the management LAN interface is disabled.
Enable telnet connection if necessary.
6) "SNMP Configuration (Optional)"
Initially, the SNMP agent configuration is not set.
Set the SNMP configuration as needed.
7) This is the end of the preparation procedure
Proceed with configuring the switch.
56
Workflow for Initial Setup of the Device
XG Series User's GuideChapter 3 Installation
3.1.1Configure LAN Interface
The initial setting of the LAN interface is for only IPv6 link-local address.
To use the following functions, configure the LAN interface.
•Telnet connection
•SNMP manager connection
•System log transmission
•Time synchronization using an NTP/SNTP server
•Configuration file upload/download
•Firmware update
•Collection of maintenance information
To configure the LAN interface, carry out the following procedure.
CommandTa sk
Login:admin
Password:
XG2600# configureSwitch to Configuration mode.
XG2600(config)# oob ip address A.B.C.D/M 3Set the IP address, subnet, and default gateway of the LAN interface
XG2600(config)# lan 0 ip address A.B.C.D/M 3
XG2600(config)# lan 0 vlan 1
XG2600(config)# proxydns domain 0 any * any
static A.B.C.D
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
Login to the device from the serial terminal. The user name is
"admin". Type the password for uset "admin".
for management port. (XG2600 only)
Set the IP address, subnet, and default gateway of the LAN interface
for VLAN ID 1.
(Optional)
Set up DNS servers.
3.1.2Telnet Connection via the LAN Interface (Optional)
The "Telnet server function" is initially enabled.
The telnet session timeout period is initially 5 minutes.
To change the telnet session timeout period, carry out the following procedure in "admin" Operation mode.
CommandTa sk
XG2600# configureSwitch to Configuration mode.
XG2600(config)# telnetinfo autologout 30mSet the Telnet session timeout period (30 minutes).
If the Telnet session timeout period expires the telne connection is
terminated.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
57
Workflow for Initial Setup of the Device
XG Series User's GuideChapter 3 Installation
3.1.3SNMP Configuration (Optional)
To operate in conjunction with an SNMP manager, the SNMP agent must be configured.
To configure the SNMP agent, carry out the following procedures in "admin" Operation mode.
CommandTa sk
XG2600# configureSwitch to Configuration mode.
XG2600(config)# snmp service onEnable SNMP function.
XG2600(config)# snmp service onEnable SNMP function.
Set the swith's contact (SYSTEM-CONTACT).
Set the swith's location (SYSTEM-LOCATION).
address at trap transmission.
Make sure to set it when using the SNMP agent function
Set the IP address (host name) of the SNMP manager, the community name, sending SNMPv2 traps, and disabling writing. if the SNMP
trap notification is enabled.
58
Workflow for Initial Setup of the Device
Chapter 4
Switch
Functions and
their Configuration
This chapter describes the functions of the device and how to configure them.
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.1Basic Switch Functions
This section describes the basic switch functions.
4.1.1Switching Mode (XG2600)
XG2600 provides the following two switching modes.
XG0224 and XG0448 provide store-and-forward switching modes only.
•Store-and-forward switching mode
After the device finishes receiving a frame, it checks the FCS (Frame Check Sequence) and performs a validity check
(on packet size, etc.) before forwarding the frame. If the switch receives a frame with an error frame, it discards it.
•Cut-through switching mode
The device transmits the frame to the destination as soon as the first 64 bytes of the frame are received with no errors.
Since the device starts transmitting the frame before it receives the entire frame, this mode allows forwarding at low
latency.
To change the switching modes, carry out the following procedures in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# forwardingmode cut-throughSelect the (cut-through) for the switching mode.
XG2600(config)# forwardingmode store-and-forwardSelect the (store-and-forward) for the switching mode.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
61
Basic Switch Functions
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.1.2MAC Address Table Management
The MAC address table is a database used for managing the association between address information and destination ports.
XG0224 and XG2600 can learn up to 16000 entries of MAC addresses.
XG0448 can learn up to 32000 entries of MAC addresses.
•Dynamic MAC address learning
The device dynamically learns MAC addresses from received frames. If MAC addresses are not refreshed before the
aging time expires, they will be removed frame MAC address table.
To disable the dynamic learning, carry out the following procedures in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# mac learning offDisable the dynamic MAC address learning.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
To change aging time period of MAC address learning table, carry out the following procedures in "admin" Operation
mode..
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# mac age 1000Change aging time period of MAC address learning table.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
•Static unicast address
By registering a unicast MAC address with the MAC address table, unicast frames are forwarded to a specified port.
Static unicast addresses are not subject to MAC address removal controlled by the aging function.
To register, change or delete a static unicast address, carry out the following procedures in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# vlan <vid> forward <count>
<dst_addr> <port>
XG2600(config)# delete vlan <vid> forward
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
Register a static unicast address, destination port and vlan with
the MAC address table (or remove them from it).
62
Basic Switch Functions
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.1.3Jumbo Frame Support
The device can transmit jumbo frames of up to 9KB (9216 bytes). (XG0224,XG0448)
The device can transmit jumbo frames of up to 16KB (16128 bytes). (XG2600)
4.1.4Flow Control
Flow control is a function that prevents frame loss when the receive buffer in the switch overflows due to temporary traffic
overload by using a PAUSE frame.
When the device receives a PAUSE frame, it temporarily stops sending frames at the receive port. If the receive buffer
overflows, it is possible to restrict frame transmission from the connected device by sending a PAUSE frame.
For each port, it is possible to select whether or not to send a PAUSE frame. Select the mode depending on whether the
destination responds to a PAUSE frame or not.
To change the flow control mode, carry out the following procedures in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-3 flowctl off onSet the flow control mode disable send flow control packets and
enable receive flow control packets.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
4.1.5Storm Control
The device discards broadcast/multicast frames when the number of received broadcast frames are over a given threshold
to prevent unnecessary waste of bandwidth due to retained broadcast frames on the network. This function is called "Storm
Control".
For each port, it is possible to configure storm control.
When broadcast/multicast frames are discarded by storm control, system logs are output.
To configure storm control, carry out the following procedures in "admin" Operation mode.
•XG2600
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-5 mac storm 7000000k
8000000k discard
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
Enable storm control, set broadcast threshold 7000000k bps,
multicast threshold 8000000k bps, and set "discard" when
broadcast and multicast traffic exceeds the threshold.
63
Basic Switch Functions
XG Series User's GuideChapter 4 Switch Functions and their Configuration
•XG0224/XG0448
CommandTask
XG0224# configureSwitch to Configuration mode.
XG0224(config)# ether 1-5 mac storm 20000000
discard close
XG0224(config)# commitApply the configuration.
XG0224(config)# saveSave the configuration.
XG0224(config)# exitSwitch to Operation mode.
Enable storm control, set threshold 20000000 pps, set "discard"
when broadcast traffic exceeds the threshold, set "close" when
multicast traffic exceeds the threshold.
4.1.6Egress Rate Control (XG2600 Only)
It is possible to set an egress rate-limiting value for each port in approximately 40Mbps increments.
To set an egress rate-limiting value, carry out the following procedures in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-5 ratecontrol 8000mSpecify an egress rate limiting value by 8000M bps for port 1-5.
64
Basic Switch Functions
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.2Port Mirroring
It is possible to monitor the traffic by mirroring the frames sent or received by a port to another port.
Multiple ports may not be mirrored to one port. However, multiple ports may be mirrored.
To configure port mirroring, carry out the following procedure in "admin" Operation mode.
•XG2600
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 10 type mirror 0 1 rxConfigure the port 10 to be destination port and the receive
frames of the source port (port 1) are mirrored.
XG2600(config)# ether 11 type mirror 0 2 txConfigure the port 11 to be destination port and the send frames
of the source port (port 2) are mirrored.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
•XG0224/XG0448
CommandTask
XG0224# configureSwitch to Configuration mode.
XG0224(config)# ether 10 type mirror 0 1 bothConfigure the port 10 to be destination port and the receive/send
frames of the source port (port 1) are mirrored.
XG0224(config)# ether 10 type mirror 10 2 txConfigure the port 10 to be destination port and the send frames
of the source port (port 2) are mirrored.
XG0224(config)# commitApply the configuration.
XG0224(config)# saveSave the configuration.
XG0224(config)# exitSwitch to Operation mode.
65
Port Mirroring
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.3Link Down Relay
Link Down Relay is a function that monitors the status of a specified port link, if a link down detected the device notifies
the device force to link down the relay port.
(1)When Link Down Relay is not used
XG
(3)
(3)
Link Up
Link Up
(4)(4)
(1)(1)
Link Down
Link Down
XG
(2)
(2)
Link Up
Link Up
(2)When Link Down Relay is used
(3)
XG
XG
(3)
(3)
(3)
(4)(4)
(4)(4)
The other end becomes
The other end becomes
link down when a link
link downwhen a link
fault is detected.
fault is detected.
(1)(1)
Link Down
Link Down
(1)(1)
(2)
(2)
XG
The other end becomes
Link Down Relay
(2)
(2)
XG
Link Down RelayLink Down Relay
The other end becomes
link down when a link fault
link downwhen a link fault
is detected.
is detected.
Link Down Relay
To configure Link Down Relay, carry out the following procedure in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 10 downrelay port 11,12Set port 11,12 go linkdown when the port 10 linkdown.
XG2600(config)# ether 10 downrelay recovery mode
auto
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
Set port 11,12 go linkup when the port 10 linkup.
66
Link Down Relay
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.4Link Aggregation
Link aggregation is a function that combines multiple ports into a single logical link. A set of ports that comprise a logical
link are called an aggregation group.
Link aggregation provides:
•Increased bandwidth
By grouping multiple physical ports into a single logical link (an aggregation group), network traffic (data sent and
received) will be balanced across the physical ports, thereby providing increased bandwidth.
•Redundancy
Multiplexing ports allows uninterrupted network operations should one of the multiple links fail. Since the link status
of the logical aggregation groups remains unchanged, there are no fluctuations in network traffic, the effect of a fault
having been minimized.
Up to 10 ports can be used to create a single link aggregation group using link aggregation. Up to 10 aggregation groups
can be created.
Physical Port
Physical Port
Physical Port
Physical Port
Physical Port
Physical Port
XG
XG
Aggregation Group
Aggregation Group
Bandwidth is
expanded by
bundling the
physical port.
Link Aggregation
Physical Port
Physical Port
Physical Port
Physical Port
Physical
Physical
Port
Port
is down.
is down.
XG
XG
Aggregation Group
Aggregation Group
The communication
can be continued
even though one
physical port is
down.
67
Link Aggregation
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.4.1Configuring Link Aggregation
Either static or dynamic (also known as LACP) configuration can be selected for Link Aggregation.
•Static configuration
Configures aggregation groups statically.
•LACP
Configures link aggregation using Link Aggregation Control Protocol (LACP). The LACP is a switch-to-switch
control protocol that enables dynamic configuration of aggregation groups and is standardized by the IEEE802.3ad.
The LACP facilitates load balancing across the individual links aggregated between the devices connected.
Either "active" or "passive" LACP mode can be selected.
- active
The device starts LACP negotiation. Since the active mode allows the reception of LACP control frames, it is
possible to direct the device in "active" mode.
- passive
The device responds to LACP control frames but does not start LACP negotiation.
To configure static link aggregation, carry out the following procedure in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-8 type linkaggregation 1Set port 1-8 to be linkaggregation group 1.
XG2600(config)# linkaggregation 1 mode staticSet linkaggregation group 1 to be static.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
To configure LACP link aggregation, carry out the following procedure in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-8 type linkaggregation 1Set port 1-8 to be linkaggregation group 1.
XG2600(config)# ether 11-18 type linkaggregation 2Set port 11-18 to be linkaggregation group 2.
XG2600(config)# linkaggregation 1 mode activeSet linkaggregation group 1 to be active.
XG2600(config)# linkaggregation 2 mode passiveSet linkaggregation group 2 to be passive.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
68
Link Aggregation
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.4.2Frame Distribution Methods in Link Aggregation
How frames are distributed across physical ports that make up an aggregation group are determined by the contents of a
frame (source and destination MAC addresses).
There are 6 ways to specify how frames are distributed:
•Frame distribution based on destination MAC address (da-mac)
The destination port is determined based on the destination MAC address of the frames.
•Frame distribution based on source MAC address (sa-mac)
The destination port is determined based on the source MAC address of the frames.
•Frame distribution based on destination and source MAC addresses (both-mac)
The destination port is determined based on the destination and source MAC addresses of the frames.
•Frame distribution based on destination IP address (da-ip)
The destination port is determined based on the destination IP address of the frames.
•Frame distribution based on source IP address (sa-ip)
The destination port is determined based on the source IP address of the frames.
•Frame distribution based on destination and source IP addresses (both-ip)
The destination port is determined based on the destination and source IP addresses of the frames.
To set a distribution method, carry out the following procedure in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-8 type linkaggregation 1Set port 1-8 to be linkaggregation group 1.
XG2600(config)# linkaggregation 1 algorithm both-mac Set linkaggregation group 1 uses frame distribution based on
destination and source IP address.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
69
Link Aggregation
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.4.3The Number of Ports That Require Linkup
It is possible to specify the number of ports that enable a linkup state for an aggregation group. If the number of active
ports that make up an aggregation group in a linkup state is less than the specified number of ports, the aggregation group
changes to a linkdown state.
•For static link aggregation
If the number of ports that make up an aggregation group in a linkup state no longer satisfies the specified number of
ports, the aggregation group changes to a linkdown state.
•For LACP link aggregation
If the number of ports that make up an established LACP aggregation group changes, the aggregation group reverts to
a linkdown state.
To set the number of ports in the aggregation group, carry out the following procedure in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-8 type linkaggregation 1Set port 1-8 to be linkaggregation group 1.
XG2600(config)# linkaggregation 1 collecting minimum 3 Set the minimum number of member ports for aggregation group
1 to 3.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
4.4.4Notes on Link Aggregation
•No link aggregation can be used if the half-duplex link mode has been set by the "ether duplex" command.
•All ports in the link aggregation group must be set with the same link speed.
•All ports in the link aggregation group must be set to belong to the same VLAN.
•Specify the link aggregation group in sequential ports.
No link aggregation can be used for the non-sequentially numbered port configuration.
The member ports of a link aggregation group must be specified to have the sequentially numbered ports.
•If the Ethernet port type has been set as a link aggregation port and if the definition conflict as described above has
occurred, the relevant port is not linked up and it cannot be used. Change the settings by referring to the log messages.
70
Link Aggregation
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.5Spanning Tree Protocol (STP)
The Spanning Tree Protocol (STP) is a function that prevents loops from occurring on a network. It is also possible to
provide network redundancy by intentionally creating a loop.
STP exclusively uses only one active path between network devices, and shuts out other paths, to avoid network loops. An
active path is selected by comparing path costs defined on each path. After the comparison, the lowest cost path will be
selected. If the selected path becomes disabled, STP will activate the lowest cost path amongst the paths remaining.
The device supports IEEE802.1w RSTP (Rapid Spanning Tree Protocol). The RSTP is upward compatible with
IEEE802.1D STP (Spanning Tree Protocol) and serves as a STP if the destination device only supports STP.
Route Switch
Switch Priority = 10
Designated port
Route port
Blocking port
Forwarding pass
Blocking pass
Switch Priority = 30
Switch ASwitch B
Path Cost = 10
Path Cost =
20
Switch C
Pass Cost = 15
Path Cost = 10
Switch D
Physical Topology
Route Switch
Switch A
Path Cost = 20
Switch Priority = 20
Path Cost =
15
Switch Priority = 40
Switch B
Route
Path Cost = 10
Switch D
Route
Path Cost = 25
Path Cost = 10
Path Cost =
15
Logical Topology by STP
71
Switch C
Route
Path Cost = 20
Spanning Tree Protocol (STP)
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.5.1Port Roles Based on Spanning Tree
RSTP assigns one of these port roles to individual ports:
•Root port
Provides the best path (lowest cost) when the switch forwards packets to the root switch.
•Designated port
Connects to the designated switch toward the leaves of the spanning tree. The port specified connecting to the
designated port serves as a root port.
•Alternate Port
The alternative port with the second lowest path cost. In the event that the root port goes to a linkdown state, the
alternate port serves as the root port. It does not always send or receive frames while in the blocking state.
•Backup Port
Provides an alternative path to that specified. In the event that the specified port goes into a linkdown state, the backup
port serves as the new designated port. It does not always send or receive frames while it is in the blocking state.
•Disabled Port
Disabled port, it does not send or receive any frames.
4.5.2Spanning Tree Protocol Port States
The port states defined by the STP are:
•Discard
The port is in a "discarding state. BPDUs are only received.
•Learn
The port is in a "learning" state. A port in the learning state learns the destination MAC address of the received frames
but does not participate in frame forwarding.
•Forward
The port is ready to transmit data traffic.
The STP states "blocking" and "listening" have been merged into a unique RSTP "discarding" state. The correspondence
between STP port states and RSTP port states are shown below.
Display FormatSTP (IEEE802.1D)RSTP (IEEE802.1w)
DiscardBlockingDiscarding
DiscardListeningDiscarding
LearnLearningLearning
ForwardForwardingForwarding
72
Spanning Tree Protocol (STP)
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.5.3Configuring Spanning Tree
To configure the spanning tree protocol, carry out the following procedure in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# stp mode stpEnable Spanning Tree Protocol.
XG2600(config)# stp domain 0 priority (0-61440)
XG2600(config)# stp hello (1s-10s)
XG2600(config)# stp age (6s-40s)
XG2600(config)# stp delay (4s-30s)
XG2600(config)# ether 1-8 stp use onEnable Spanning Tree Protocol on port 1-8.
XG2600(config)# ether 9-20 stp use offDisable Spanning Tree Protocol on port 9-20.
Configure Spanning Tree Protocol parameters on the device.
• Switch priority
• Hello time
• Maximum aging time (max-age)
• Forward delay time (forward-time)
Configure the following parameters related to the spanning tree
topology:
• Port priority
• Path cost
73
Spanning Tree Protocol (STP)
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.6VLAN
VLAN (Virtual LAN) is a technology that divides a single network into virtually separated networks.
VLANs are separate logical networks within one physical network. A VLAN capable switch can change and define new
LAN network configurations without changing physical cable connections. This creates a flexible and extensible network
system.
The device provides for port-based or Tag-based (IEEE802.1Q) VLANs.
4.6.1Port-Based VLAN
Port-based VLAN is a method for configuring VLAN membership on a port basis. Forwarding is based on the destination
MAC addresses and related port.
Segment 1 (VLAN10)
VLAN10 consists
of Port 1, 2, 3
1234
5 6 7 8
VLAN20 consists
of Port 5, 6, 7
Segment 2 (VLAN20)
Segment 3 (VLAN30)
VLAN30 consists
of port 4, 8
Port Base VLAN
To configure a port-based VLAN, carry out the following procedures in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-3 vlan untag 10Set the default port VLAN ID 10 for port 1-3.
XG2600(config)# ether 5-7 vlan untag 20Set the default port VLAN ID 20 for port 5-7.
XG2600(config)# ether 4,8 vlan untag 30Set the default port VLAN ID 30 for port 4,8.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
74
VLAN
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.6.2Tag-Based (IEEE802.1Q) VLAN
Tag-based VLAN is a method of configuring VLANs so that the frame forwarding decision is based on a tag in the MAC
header identifying the VLAN membership. 4 bytes of additional data in the header, called a VLAN tag, identifies the
VLAN frame ownership. Using a VLAN tag enables configuring a single physical link that shares multiple VLANs.
The device’s tag-based VLAN function is based on the IEEE 802.1Q standard.
The following figure shows an Ethernet frame format including a VLAN tag as specified by the IEEE 802.1Q standard.
TYPE
TCI
TCI
TYPE
LENGTH
LENGTH
(2)
(2)
Protocol data (IP Packet, etc.)/
Protocol data (IP Packet, etc.)/
LLC,SNAP
LLC,SNAP
DA
(6 )
SA
(6)
VLAN tag
(4)
2 bytes2 bytes
2 bytes2 bytes
TPID
TPID
0x8100
0x8100
User
Priority
3 bit
TPID (Tag Protocol Identifier) (0x8100)
TCI (Tag Control Information)
User Priority(3bit): Priority of Frames (Higher priority to larger number from 0 to 7)
CFI (Canonical Format Indicator)(1bit): ”1” when RIF field exists. Normally “0”.
VLAN ID(12bit):VLAN identifier (0 to 4095. 0 and 4095 are reserved ID)
CFIVLAN ID
1 bit
12 bit
Tag VLAN Frame Format
To configure a tag-based VLAN, carry out the following procedures in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-8 vlan tag 100-300Set the tag-based VLAN ID 100-300 for port 1-8.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
75
VLAN
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.7Quality of Service (QoS)
The device provides Quality of Service (QoS) that is based on the IEEE802.1p standard.
The device QoS determines the priority of frames at the ingress side using VLAN tag (including priority tag) or a port's
default priority. Their priorities are mapped to 8 output queues.
The queues are processed in the order of the QoS priority precedence.
The device priorities available are:
•Default priority
Set a default priority of 0 to 7 for each port.
For frames whose priority was not set (VLAN-untagged frames), the default priority is assigned according to the value
of the frame.
•Mapping to output queues
The device is equipped with 8 output queues with different levels (0 to 7). Frames are transmitted in order of output
queue priority.
Each priority is mapped to a specified output queue.
To set the default priority and output queue mapping, carry out the following procedure in "admin" Operation mode.
•XG2600
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# ether 1-8 qos priority (0-7)Set a default priority for frames whose priority was not set
(VLANuntagged frame) when received.
XG2600(config)# ether 1-8 qos prioritymap (0-7) (0-7)Set the level of output queue to map to each frame that has a
priority value.
XG2600(config)# saveSave the configuration.
XG2600(config)# resetReset the device.
•XG0224/XG0448
CommandTask
XG0224# configureSwitch to Configuration mode.
XG0224(config)# ether 1-8 qos priority (0-7)Set a default priority for frames whose priority was not set
(VLANuntagged frame) when received.
XG0224(config)# qos cosmap (0-7) (0-7)Set the level of output queue to map to each frame that has a
priority value.
XG0224(config)# saveSave the configuration.
XG2600(config)# resetReset the device.
76
Quality of Service (QoS)
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.8IGMP Snooping
IP multicast is often used to distribute multimedia data, including video and voice, over a network.
A layer 2 switch floods multicast frames, absorbing unnecessary network bandwidth. A layer 3 switch that supports
Internet Group Management Protocol (IGMP) manages multicast groups using IGMP packets. The device controls how IP
multicast packets are forwarded to required ports by monitoring IGMP packets generated by layer 3 switches, thereby
preventing unnecessary flooding. This function is called "IGMP Snooping".
The device supports IGMP snooping for IGMP v1/v2.
Flooding to all
Flooding to all
ports
ports
IGMP No Snooping
Multicast Server
Multicast Router
Layer 2
Switch
Terminal
IGMP Snooping
Transfer only to
Transfer only to
the required
the required
ports
ports
XG
IGMP Snooping
Multicast Server
Multicast Router
Layer 2
Switch
Terminal
77
IGMP Snooping
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.8.1Registering Group Members
On receiving an IGMP Report message, the device registers a multicast MAC address to the IGMP snooping control table
for the port that received the IGMP Report message and the connecting multicast router port.
• The device can register multicast groups up to a maximum value (Reference "1.2.3 System Maximum Values" (pg.34)).
Note
Multicast packets that cannot be registered are those flooding all ports belonging to the same VLAN.
• If "igmpsnoop unknown flooding off" command is set, Multicast packets that cannot be registered are those not flooding all
ports belonging to the same VLAN (XG0224, XG0448).
The following figure shows the relationship between the registered IP multicast address and the multicast MAC address.
MAC addresses that are registered with IGMP snooping are between 0100.5E00.0000 and 0100.5E7F.FFFF. An IP
multicast address is 32 bits. The first 4 bits are always 1110 followed by 28 bits that represent the IP multicast address
information. Of these 28 bits, the lower order 23 bits are mapped to a MAC address and the data in the higher order 5 bits
is not used.
Therefore 32 IP multicast addresses are mapped to the same single MAC address.
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.8.2Removing Group Members
The group members registered by IGMP snooping are removed under the following status.
•If after receiving an IGMP Report message for group registration, the group member interval expires before the device
receives another IGMP Report message, the switch removes the host from the group member. The setting for the group
member interval is 260 seconds.
•If an IGMP Leave message is sent from a host, the multicast router sends out an IGMP Specific Query (GSQ) message
to determine whether that the host has left the group.
•If after receiving the IGMP Leave message, the last member interval expires before the device receives another IGMP
Report message, the switch removes the host from the group member. The setting for the last member interval is 2
seconds.
The registered Multicast Group IP is not detete form the IGMP snooping Control Table automatically.
Note
Please use "clear igmpsnoop group" command to delete it.
79
IGMP Snooping
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.8.3Managing Group Members
When network congestion causes Leave message loss or there is a host that uses IGMPv1, the multicast router does not
receive Leave messages. The multicast router sends out an IGMP General Query message to all hosts (IP address:
224.0.0.1) at intervals (query interval) to determine membership information.
Upon reception of an IGMP General Query message, the host, a member of the group, returns an IGMP Report message to
maintain membership in the group.
IGMP General Query
IGMP General Query
MAC : 0100.5E01.0001
MAC : 0100.5E01.0001
Destination IP : 224.0.0.1
Destination IP: 224.0.0.1
Group IP : 0.0.0.0
Group IP : 0.0.0.0
XG
VLAN 10
Port 8
Multicast Router
MAC Address Table
IGMP snooping Control Table
VLAN
VLAN(RouterPort)
0100.0501.0203
10 (8)
Port
1, 8
Group IP
239.1.2.3
(01:00:05:01:02:03)
Port(MAC address)
1
192.168.10.20
Reporter
Port 1Port 2Port 3
Terminal 1Terminal 2
Terminal 3
Managing Group Members
In consideration of General Query or Report message loss caused by network congestion, since RFC 2236 defines the
default query interval for multicast routers as 125 seconds, this device uses 126 seconds for the group member interval
when it works as a Querier.
80
IGMP Snooping
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.8.4IGMP Querier
In a typical network configuration, the multicast router periodically sends out an IGMP General Query message to
determine if any of the hosts on the network are members of any multicast groups. Receiving a response from a host
ascertains its membership in a multicast group.
IGMP Querier is a function that acts as a proxy for a multicast router when one is not available in a network segment to
send an IGMP General Query message to all hosts.
The Query interval is 126 seconds.
Multicast Server
XG
IGMP General Query
IGMP General Query
MAC : 0100.5E01.0001
MAC : 0100.5E01.0001
Destination IP : 224.0.0.1
Destination IP: 224.0.0.1
Group IP : 0.0.0.0
Group IP : 0.0.0.0
Port 1Port 2Port 3
Terminal 1
IGMP Querier
Terminal 2Terminal 3
IGMP Querier
Upon reception of an IGMP Leave message, the device sends an IGMP Specific Query (GSQ) message to determine that
the host is interested in leaving the group.
If an IGMP Specific Query message is sent 2 times and the host does not respond with an IGMP Report message, that host
is removed.
• Generally, IGMP Querier uses "0.0.0.0" for the source IP address when sending a Query message.
Note
Since some client software does not return a response for a Query message with the source IP address being set
to "0.0.0.0", it is recommended that an address other than "0.0.0.0" be used.
• If a multicast router exists on the network segment, the device does not send Query message even if IGMP
Querier is valid.
81
IGMP Snooping
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.8.5Configuring IGMP Snooping
To configure IGMP snooping, carry out the following procedure in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# igmpsnoop use onEnable global IGMP snooping on the device.
XG2600(config)# vlan 10 igmpsnoop router yes 15,16Specify the multicast router port statically with VLAN.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
To enable IGMP query, carry out the following procedure in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)# igmpsnoop use onEnable global IGMP snooping on the device.
XG2600(config)# vlan 20 igmpsnoop querier onSpecify the Querier operation mode if no multicast router exists.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
82
IGMP Snooping
XG Series User's GuideChapter 4 Switch Functions and their Configuration
4.9Network Management
4.9.1Traffic Statistics
The device can display traffic statistics to analyze network operations such as traffic bytes, errors, etc.
The following are the Traffic Statistics the device provides.
•Displays traffic information on outgoing and incoming frames for each port.
•Displays traffic information on incoming frames by frame size range for each port.
•Displays traffic information on incoming frames for each VLAN.
•Displays incoming traffic information by QoS priority for each port.
•Displays information related to data flow for each port.
•Displays information about errors that occur during transmission/reception for each port.
To display traffic statistics, monitor and show commands are provided.
•"show ether utilization" command
Display the usage ratio (or utilization) information of Ethernet physical ports.
•"show ether statistics" (show ether statistics detail) command
Display the statistics of Ethernet physical ports.
4.9.2SNMP Agent
SNMP (Simple Network Management Protocol) is a protocol that monitors and manages devices on a network.
The device supports the SNMP (v1/v2c/v3) function to collect management information blocks (MIBs) from a remote
network manager (SNMP manager).
For the MIBs supported, refer to Appendix B. The device can be configured for up to 16 SNMP managers and up to 16
SNMP trap destinations (8 for v1/v2c, 8 for v3).
To configure the SNMP agent, carry out the following procedures in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)#snmp service onEnable SNMP function.
XG2600(config)#snmp agent contact
SYSTEM-CONTAC
XG2600(config)#snmp agent location
SYSTEM-LOCATION
XG2600(config)#snmp agent address A.B.C.DSet the SNMP agent address. This setting is also used for the
XG2600(config)# snmp manager 0 A.B.C.D
COMMUNIT-YNAME v2c disable
XG2600(config)# snmp user 0 name USERNAME
XG2600(config)# snmp user 0 address 0 A.B.C.D
XG2600(config)# snmp user 0 notification 0 A.B.C.DSet a SNMP v3 trap notification host address.
XG2600(config)# snmp user 0 auth md5
auth_password
XG2600(config)# snmp user 0 priv des priv_passwordSet the encryption protocol and password for SNMP v3.
Set the swith's contact (SYSTEM-CONTACT).
Set the swith's location (SYSTEM-LOCATION).
local address at trap transmission.
Make sure to set it when using the SNMP agent function.
Set the IP address (host name) of the SNMP manager, the
community name, sending SNMPv2 traps, and disabling writing.
if the SNMP trap notification is enabled.
Set a SNMP v3 user name.
Set a SNMP v3 host address.
Set the authentication protocol and password for SNMP v3.
83
Network Management
XG Series User's GuideChapter 4 Switch Functions and their Configuration
CommandTask
XG2600(config)# snmp user 0 read view 0Set MIB read permission view for SNMP v3.
XG2600(config)# snmp user 0 notify view 0Set trap notification permission view for SNMP v3.
XG2600(config)# commitApply the configuration.
XG2600(config)# saveSave the configuration.
XG2600(config)# exitSwitch to Operation mode.
4.9.3RMON
Remote Monitoring (RMON) is a function provided to monitor communications over a network, such as traffic and errors.
RMON, used in conjunction with the SNMP agent, allows the remote monitoring of traffic on a LAN segment.
The device supports 2 RMON groups (Statistics, History).
•Statistics group
Collects traffic statistics for each port.
•History group
Records traffic statistics for each port at specified time intervals.
To configure RMON, carry out the following procedure in "admin" Operation mode.
CommandTask
XG2600# configureSwitch to Configuration mode.
XG2600(config)#snmp rmon <on|off>Specify whether to enable or disable the RMON function.
This section explains about port information settings.
Allowed range of port definition numbers
The Ethernet definition serial number (decimal value), which is to be specified in <number> ("ether" port definition
number) of the [Option] described in each command of this section, shall be within the range of each model as shown
below.
RangeModel
1 to 26XG0224
1 to 52XG0448
1 to 26XG02600
Configuration of port types for each model
The following provides the configuration of port types according to the "ether" port definition number.
Model
XG0224ether 1 to 20ether 21 to 24ether 25 to 26
XG0448ether 1 to 44ether 45 to 48ether 49 to 52
XG2600ether 1 to 26
1000BASE-X/SerDes
(downlink)
10/100/1000BASE-T
(uplink)
1000BASE-X/SerDes
(interlink)
Specifying the range of port numbers
A range of multiple ports can be specified in <number> ("ether" port definition number) shown in the [Options] of each
command in this section.
•Examples of multiple ports range specification for XG2600/XG0224/XG0448.
1 = port1
1-20 = port1 to port20
21-24 = port21 to port24
-4 = port1 to port4
89
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
5.1.1Ethernet Common Information
This section explains about the commands related to ethernet common information.
5.1.1.1forwardingmode
Functionforwardingmode <mode>
Available ModelXG2600
Syntaxforwardingmode <mode>
Options
<mode>
store-and-forward
•
store and forward mode is used
• cut-through
cut through mode (default) is used
Use ModeConfiguration mode (admin class)
ExplanationSet the switching mode of 10GbE ports.
Caution
In cut-through mode, 65 byte and over error frames and 16129 byte and over frames
•
are forwarded. 64 byte and below frames are not forwarded.
It is forwarded as FCS error frame at the frame relay of 16129 or more.
• In store and forward mode, Error frames and 16129 byte and over frames are not
forwarded.
• Statistics for 10GbE ports is cleared when you change the switching mode.
DefaultIt is assumed that cut through mode is used.
forwardingmode cut-through
90
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
5.1.1.2ether use
FunctionSet the port use.
Available ModelXG0224 / XG0448 / XG2600
Syntaxether <number> use <mode>
Options
<number>
ether port number
•
Set a port number to use with a decimal value.
When setting multiple port numbers, separate them with commas (,).
When setting sequential numbers, separate them with hyphens (-). (Example: "1-8")
<mode>
Specify a port operation mode.
• on
Use the Ethernet port.
• off
Do not use the Ethernet port.
Use ModeConfiguration mode (admin class)
ExplanationSet to use the Ethernet port.
DefaultIt is assumed that the Ethernet port is used.
ether <number> use on
91
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
5.1.1.3ether media
FunctionSets media type for Ethernet ports.
Available ModelXG0224 / XG0448
Syntaxether <number> media <type>
Options
<number>
Ethernet port number(s)
•
Configure Ethernet port number(s) to be used as base 10 value(s).
If configuring multiple port numbers, separate them with a comma.
Use hyphens to specify a range of port numbers. (ex: "1-8")
Refer to the beginning of this chapter for details on how to specify port numbers.
RangeModel
21 to 24XG0224
45 to 48XG0448
<type>
Media type.
• metal
Use 10/100/1000BASE-T ports (RJ45)
• fiber
Use SFP Ports.
*The 100BASE-FX module can be used by XG0224 / XG0448.
• auto
Automatically selects media type.
*However, if both Ethernet and SFP ports are connected the SFP ports are used.
Use ModeConfiguration mode (admin class)
ExplanationSets the type of media to be used by the Ethernet port.
Caution
If auto is selected and cables are connected to 10/100/1000BASE-T ports as well as to
•
SFP ports, the SFP ports will be selected.
• Similarly, with the auto setting, if 10/100/1000BASE-T port(s) are in a link up state and
SFP slot(s) are put into a link up state by connecting a cable to them, operation
changes to the SFP slot(s) and the 10/100/1000BASE-T port(s) change to a link down
state.
• Use the fiber setting if using the 100BASE-FX module.
(The 100BASE-FX module cannot be used with the auto setting.)
DefaultIf unset, automatic selection of media type will be the default.
ether <number> media auto
92
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
5.1.1.4ether mode
FunctionSet the link speed.
Available ModelXG0224 / XG0448
Syntaxether <number> mode <speed>
Options
<number>
ether port number
•
Set a port number to use with a decimal value. When setting multiple port numbers,
separate them with commas (,). When setting sequential numbers, separate them with
hyphens (-). (Example: "11-16")
RangeModel
1 to 24XG0224
1 to 48XG0448
<speed>
Link speed
• auto
Determine the link speed through auto negotiation.
• 1000
Set the 1Gbps fixed link speed.
• 100
Set the 100Mbps fixed link speed.
• 10
Set the 10Mbps fixed link speed.
Use ModeConfiguration mode (admin class)
ExplanationSet the link speed at the Ethernet port.
CautionUse the 100Mbps fixed link speed setting if using the 100BASE-FX module.
DefaultIt is assumed that Auto Negotiation mode has been specified.
ether <number> mode auto
93
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
5.1.1.5ether duplex
FunctionSet the full-duplex or half-duplex link mode.
Available ModelXG0224 / XG0448
Syntaxether <number> duplex <duplex>
Options
<number>
ether port number
•
Set a port number to use with a decimal value. When setting multiple port numbers,
separate them with commas (,). When setting sequential numbers, separate them with
hyphens (-). (Example: "11-16")
RangeModel
1 to 24XG0224
1 to 48XG0448
<duplex>
Full-duplex or half-duplex link mode.
• full
Operates in full-duplex fixed link mode.
• half
Operates in half-duplex fixed link mode.
This option can be specified only when a fixed link speed has been specified by the
"ether mode" command. (This option setting is made invalid if the link speed has been
set to "auto".)
Use ModeConfiguration mode (admin class)
ExplanationSet the full-duplex or half-duplex link mode on the Ethernet port.
Caution
If "1000" is specified in the "ether mode" command, this command setting is disabled
•
and the system operates in full-duplex link mode.
• If "auto" is specified in the "ether mode" command, this command setting is disabled
and the system operates depending on the result autonegotiated with the connected
device.
DefaultIt is assumed that full-duplex link mode has been specified.
ether <number> duplex full
94
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
5.1.1.6ether mdi
FunctionSet the MDI.
Available ModelXG0224 / XG0448
Syntaxether <number> mdi <mode>
Options
<number>
ether port number
•
Set a port number to use with a decimal value. When setting multiple port numbers,
separate them with commas (,). When setting sequential numbers, separate them with
hyphens (-). (Example: "11-16")
RangeModel
1 to 24XG0224
1 to 48XG0448
<mode>
Specify the MDI mode.
• auto
Set the MDI or MDI-X auto detection mode.
• mdi
Set the fixed MDI mode.
• mdix
Set the fixed MDI-X mode.
Use ModeConfiguration mode (admin class)
ExplanationSet the MDI mode for the Ethernet port.
Caution
The auto mode is enabled only when "auto" or "1000M fixed" is specified in the "ether
•
mode" command.
If anything other than "auto" is specified in the "ether mode" command, the port operates
as MDI-X port.
• If "1000M" is set in the "ether mode" command, the MDI-X fixed mode or the Auto
Detect mode setting is disabled. The port operates as MDI port.
• If "auto" is set in the "ether mode" command for the 10/100/1000BASE-T port, the MDI-
X fixed mode setting is disabled. The port always operates as MDI port.
DefaultIt is assumed that MDI/MDI-X Auto Detect mode has been specified.
ether <number> mdi auto
95
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
5.1.1.7ether flowctl
FunctionSet the flow control function.
Available ModelXG0224 / XG0448 / XG2600
Syntaxether <number> flowctl <send> <receive>
Options
<number>
ether port number
•
Set a port number to use with a decimal value.
When setting multiple port numbers, separate them with commas (,).
When setting sequential numbers, separate them with hyphens (-). (Example: "1-8")
<send>
on
•
Send flow control packets.
• off
Do not send flow control packets.
<receive>
on
•
Controls the flow when flow control packets are received.
• off
Do not control the flow even when flow control packets are received.
Use ModeConfiguration mode (admin class)
ExplanationSet the operation of flow control function on the Ethernet port using the transmission and
reception functions. The backpressure function is enabled in half-duplex link mode.
The flow control function is enabled independently of the link speed being set by the
"ether mode" command.
DefaultIt is assumed to have been specified to take the flow control only when a flow control
packet is received.
ether <number> flowctl off on
96
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
5.1.1.8ether type
FunctionSet a port type.
Available ModelXG0224 / XG0448 / XG2600
Syntaxether <number> type normal
ether <number> type mirror <count> <source> <mode>
ether <number> type linkaggregation <group>
ether <number> type backup <group> <priority>
Options
<number>
ether port number
•
Set a port number to use with a decimal value. When setting multiple port numbers,
separate them with commas (,). When setting sequential numbers, separate them with
hyphens (-). (Example: "11-16")
normal: Normal port
mirror: Target mirroring port
linkaggregation : Link aggregation port
backup: Backup port
<count>
Definition number
•
Specify the source port number with a decimal number.
RangeModel
0 to 25XG0224
0 to 51XG0448
0 to 25XG2600
<source>
Source port number
•
Set the source port number with a decimal number if mirroring has been specified.
RangeModel
1 to 26XG0224
0 to 52XG0448
0 to 26XG2600
<mode>
Mirroring mode
•
Set one of the following operation modes if mirroring has been specified.
rx: The receive frames of the source port are mirrored.
tx: The send frames of the source port are mirrored.
both : Both the send and receive frames of the source port are mirrored. [XG0224/XG0448]
97
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
<group>
Group number
•
Set a link aggregation group number with a decimal number.
RangeModel
1 to 13XG0224
1 to 26XG0448
1 to 10XG2600
Set a backup group number with a decimal number.
RangeModel
1 to 13XG0224
1 to 26XG0448
1 to 13XG2600
<priority>
Priority of port
•
Set the master port or backup port if "type backup" has been specified.
master: Master port
backup: Backup port
Use ModeConfiguration mode (admin class)
ExplanationSet an Ethernet port type.
Select the normal port, the mirror port, the link aggregation port, or the backup port.
CautionCautions on linkaggregation settings
• All ports in the link aggregation group must be set to belong to the same VLAN.
• No link aggregation can be used for the non-sequentially numbered port configuration.
The member ports of a link aggregation group must be specified to have the
sequentially numbered ports.
• No link aggregation can be used if the half-duplex link mode has been set by the "ether
duplex" command.
Cautions on mirror setting
[XG2600]
Only one target port can be configured for tx and rx respectively.
•
• Target ports for tx and rx can not be configured to a same port.
• Target port is the dedicated port for the mirror of source port.
• When target ports are used for tx and rx, the specified source ports are applied to both
target ports.
e.c.
#ether 1 type mirror 0 10 tx
#ether 2 type mirror 0 11 rx
In above configuration, Tx frames of source port ether10 and ether11 are mirrored to
target port ether1.
Rx frames of source port ether10 and ether11 are mirrored to the target port ether2.
• The port which has been configured to target port can not be configured to source port.
• The packet to exceed the band of the target port when there are two or more source
ports of the mirror for the target port is abandoned.
• The storm control to the port set as a mirror target port becomes invalid.
98
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
• The mirror traffic is as follows according to the state of STP/RSTP/MSTP of the source
port.
When the mirror of two or more sources is possible, traffic corresponding to each state
is mirror.
STP, RSTP, state of MSTP, and mirror frame
Source port
(in object VLAN in case of MSTP)
disableExcluding
Blocking and listening
(Discarding in RSTP/MSTP )
LearningExcludingIt is not forwarded
ForwardingExcludingIt is forwarded
Frame kindTarget port forwarding
It is not forwarded
BPDU
BPDUIt is not forwarded
Excluding
BPDU
BPDUIt is forwarded
BPDUIt is forwarded
BPDUIt is forwarded
It is not forwarded
• The presence of the VLAN tag of the packet output to the target port: about the
mirroring of the transmission frame.
It agrees to the tagging setting of the address source port of the packet. The VLAN tag
attaches to the packet output to the target port only when there is the one of the setting
with the VLAN tag in the address source port when there are two or more addresses of
the packet like the multicast, the broadcast, and the flooding, etc., and the packet is
output from two or more source ports. The content of tag becomes tag that should be
applied to the destination.
• As for the mirroring of the reception frame, presence and the content of the VLAN tag
of the packet output to the target port are corresponding to the packet when inputting it.
• When the reception frame mirroring is done rewriting DSCP and ip precedence, the
frame not the reception frame but after it changes is mirror.
• When STP and LLDP are defined in the target port of the mirror, the port cannot be
used.
• The storm control to the same port where the mirror target port was set becomes
invalid.
[XG0224/XG0448]
Only a single port can be set as the mirrored target port on the device.
•
• The port which is set to be target port, can be used for forwarding.
• The destination MAC address, the source MAC address, and the presence or absence
of VLAN tag together with its contents sent to the target port may differ from those of
the packet actually sent from or received at the source port.
Cautions on backup setting
• If multiple ports defined as master or backup exist in the same backup group, the port with a
smaller number is enabled, and the port with a larger number is not linked up and it cannot be
used.
• If the master or backup port is undefined in the same backup group, the relevant port is not
linked up and it cannot be used.
DefaultIt is assumed that the normal port has been specified.
ether <number> type normal
99
Port Information Settings
XG Series User's GuideChapter 5 Command Reference
5.1.1.9ether vlan tag
FunctionSet the tagged VLAN.
Available ModelXG0224 / XG0448 / XG2600
Syntaxether <number> vlan tag <tagged_vidlist>
Options
<number>
ether port number
•
Set a port number to use with a decimal value.
When setting multiple port numbers, separate them with commas (,).
When setting sequential numbers, separate them with hyphens (-). (Example: "1-8")
<tagged_vidlist>
Tagged VLAN ID list
•
Set a tagged VLAN ID.
When setting multiple IDs, separate them with commas (,).
Use ModeConfiguration mode (admin class)
ExplanationSet a tagged VLAN ID.
CautionTo add a VLAN, specify the VLAN ID list including already registered VLANs.
The M1 port internally uses maximum VLAN ID in unused.
Therefore, the communication of the M1 port is temporarily interrupted when VLAN ID
allocated in the M1 port is specified by the vlan tag command, and the TCP session is
cut. (Only XG2600)
DefaultN/A
100
Port Information Settings
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.