Level One GTP-5281 operation manual
GTL-2881
28-Port Stackable Layer 3 Lite Managed Gigabit Switch,
2 x 10GbE SFP+, 2 x 10GbE SFP+ (Optional Modules)
GTL-2882
28-Port Stackable Layer 3 Lite Managed Gigabit Fiber Switch,
2 x 10GbE SFP+, 2 x 10GbE SFP+ (Optional Modules)
GTP-5281
52-Port Stackable Layer 3 Lite Managed Gigabit PoE Switch,
48 PoE Outputs, 2 x 10GbE SFP+,
2 x 10GbE SFP+ (Optional Modules)
User Manual
V1.0
Digital Data Communications Asia Co., Ltd.
http://www.level1.com
User Manual
GTL-2881
Layer Layer 3 Lite Stackable Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports
GTL-2882
Layer Layer 3 Lite Stackable Gigabit Ethernet Fiber Switch
with 22 SFP Ports,
2 10/100/1000BASE-T (RJ-45/SFP) Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports
GTP-5281
Layer 3 Lite Stackable Gigabit Ethernet PoE Switch
with 48 10/100/1000BASE-T RJ-45 PoE Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports
E112017-KS-R02
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read
this Guide?
How this Guide
is Organized
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
This guide provides detailed information about the switch’s key features. It also
describes the switch’s web browser interface. For information on the command line
interface refer to the CLI Reference Guide.
The guide includes these sections:
◆ Section I “Getting Started” — Includes an introduction to switch management,
and the basic settings required to access the management interface.
◆ Section II “Web Configuration” — Includes all management options available
through the web browser interface.
◆ Section III “Ap pe nd ices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the web browser.
For information on how to manage the switch through the command line interface,
see the following guide:
CLI Reference Guide
Note:
For a description of how to initialize the switch for management access via
the CLI, web interface or SNMP, refer to “Initial Switch Configuration” in the CLI
Reference Guide.
– 3 –
How to Use This Guide
Conventions The following conventions are used throughout this guide to show information:
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information
Note:
Emphasizes important information or calls your attention to related features
or instructions.
Caution:
the system or equipment.
Alerts you to a potential hazard that could cause loss of data, or damage
Revision History This section summarizes the changes in each revision of this guide.
November 2017 Revision
This is the second version of this guide. This guide is valid for software release
v1.5.2.37. It includes the following changes:
◆ Added the GTP-5281 switch.
October 2016 Revision
This is the first version of this guide. This guide is valid for software release
v1.5.2.15.
– 4 –
Contents
How to Use This Guide 3
Contents 5
Figures 17
Tables 31
Section I Getting Started 33
1 Introduction 35
Key Features 35
Description of Software Features 37
IP Routing 41
Equal-cost Multipath Load Balancing 42
Address Resolution Protocol 42
Operation, Administration, and Maintenance 42
System Defaults 43
Section II Web Configuration 47
2 Using the Web Interface 49
Connecting to the Web Interface 49
Navigating the Web Browser Interface 50
Home Page 50
Configuration Options 51
Panel Display 51
Main Menu 52
3 Basic Management Tasks 71
Displaying System Information 72
– 5 –
Contents
Displaying Hardware/Software Versions 73
Configuring Support for Jumbo Frames 74
Displaying Bridge Extension Capabilities 75
Managing System Files 77
Copying Files via FTP/TFTP or HTTP 77
Saving the Running Configuration to a Local File 79
Setting the Start-Up File 80
Showing System Files 81
Automatic Operation Code Upgrade 81
Setting the System Clock 85
Setting the Time Manually 86
Setting the SNTP Polling Interval 87
Configuring NTP 87
Configuring Time Servers 88
Setting the Time Zone 92
Configuring Summer Time 93
Configuring the Console Port 95
Configuring Telnet Settings 97
Displaying CPU Utilization 98
Displaying Memory Utilization 99
Stacking 100
Setting the Master Unit 100
Enabling Stacking Ports 101
Renumbering the Stack 102
Resetting the System 103
4 Interface Configuration 107
Port Configuration 108
Configuring by Port List 108
Configuring by Port Range 111
Displaying Connection Status 111
Configuring Local Port Mirroring 112
Configuring Remote Port Mirroring 114
Showing Port or Trunk Statistics 119
Displaying Transceiver Data 123
– 6 –
Contents
Configuring Transceiver Thresholds 124
Performing Cable Diagnostics 126
Trunk Configuration 128
Configuring a Static Trunk 129
Configuring a Dynamic Trunk 132
Displaying LACP Port Counters 138
Displaying LACP Settings and Status for the Local Side 139
Displaying LACP Settings and Status for the Remote Side 141
Configuring Load Balancing 142
Saving Power 144
Traffic Segmentation 146
Enabling Traffic Segmentation 146
Configuring Uplink and Downlink Ports 147
VLAN Trunking 149
5 VLAN Configuration 153
IEEE 802.1Q VLANs 153
Configuring VLAN Groups 156
Adding Static Members to VLANs 159
Configuring Dynamic VLAN Registration 163
IEEE 802.1Q Tunneling 166
Enabling QinQ Tunneling on the Switch 170
Creating CVLAN to SPVLAN Mapping Entries 172
Adding an Interface to a QinQ Tunnel 173
Protocol VLANs 175
Configuring Protocol VLAN Groups 175
Mapping Protocol Groups to Interfaces 177
Configuring IP Subnet VLANs 179
Configuring MAC-based VLANs 181
Configuring VLAN Mirroring 183
Configuring VLAN Translation 185
6 Address Table Settings 187
Configuring MAC Address Learning 187
Setting Static Addresses 189
Changing the Aging Time 191
– 7 –
Contents
Displaying the Dynamic Address Table 191
Clearing the Dynamic Address Table 193
Configuring MAC Address Mirroring 194
Issuing MAC Address Traps 195
7 Spanning Tree Algorithm 197
Overview 197
Configuring Loopback Detection 199
Configuring Global Settings for STA 201
Displaying Global Settings for STA 206
Configuring Interface Settings for STA 207
Displaying Interface Settings for STA 212
Configuring Multiple Spanning Trees 214
Configuring Interface Settings for MSTP 219
8 Congestion Control 221
Rate Limiting 221
Storm Control 222
Automatic Traffic Control 224
Setting the ATC Timers 225
Configuring ATC Thresholds and Responses 227
9 Class of Service 231
Layer 2 Queue Settings 231
Setting the Default Priority for Interfaces 231
Selecting the Queue Mode 232
Mapping CoS Values to Egress Queues 235
Layer 3/4 Priority Settings 238
Setting Priority Processing to DSCP or CoS 238
Mapping Ingress DSCP Values to Internal DSCP Values 239
Mapping CoS Priorities to Internal DSCP Values 242
10 Quality of Service 245
Overview 245
Configuring a Class Map 246
Creating QoS Policies 250
Attaching a Policy Map to a Port 259
– 8 –
Contents
11 VoIP Traffic Configuration 261
Overview 261
Configuring VoIP Traffic 262
Configuring Telephony OUI 263
Configuring VoIP Traffic Ports 264
12 Security Measures 267
AAA (Authentication, Authorization and Accounting) 268
Configuring Local/Remote Logon Authentication 269
Configuring Remote Logon Authentication Servers 270
Configuring AAA Accounting 275
Configuring AAA Authorization 281
Configuring User Accounts 284
Web Authentication 286
Configuring Global Settings for Web Authentication 287
Configuring Interface Settings for Web Authentication 288
Network Access (MAC Address Authentication) 289
Configuring Global Settings for Network Access 291
Configuring Network Access for Ports 292
Configuring Port Link Detection 294
Configuring a MAC Address Filter 295
Displaying Secure MAC Address Information 297
Configuring HTTPS 299
Configuring Global Settings for HTTPS 299
Replacing the Default Secure-site Certificate 300
Configuring the Secure Shell 302
Configuring the SSH Server 304
Generating the Host Key Pair 306
Importing User Public Keys 307
Access Control Lists 309
Setting a Time Range 310
Showing TCAM Utilization 313
Setting the ACL Name and Type 314
Configuring a Standard IPv4 ACL 316
Configuring an Extended IPv4 ACL 317
– 9 –
Contents
Configuring a Standard IPv6 ACL 319
Configuring an Extended IPv6 ACL 321
Configuring a MAC ACL 323
Configuring an ARP ACL 325
Binding a Port to an Access Control List 326
Configuring ACL Mirroring 327
Showing ACL Hardware Counters 329
ARP Inspection 330
Configuring Global Settings for ARP Inspection 331
Configuring VLAN Settings for ARP Inspection 333
Configuring Interface Settings for ARP Inspection 335
Displaying ARP Inspection Statistics 336
Displaying the ARP Inspection Log 337
Filtering IP Addresses for Management Access 338
Configuring Port Security 340
Configuring 802.1X Port Authentication 342
Configuring 802.1X Global Settings 344
Configuring Port Authenticator Settings for 802.1X 345
Configuring Port Supplicant Settings for 802.1X 350
Displaying 802.1X Statistics 352
DoS Protection 354
IPv4 Source Guard 357
Configuring Ports for IPv4 Source Guard 357
Configuring Static Bindings for IPv4 Source Guard 359
Displaying Information for Dynamic IPv4 Source Guard Bindings 362
IPv6 Source Guard 363
Configuring Ports for IPv6 Source Guard 363
Configuring Static Bindings for IPv6 Source Guard 365
Displaying Information for Dynamic IPv6 Source Guard Bindings 368
DHCP Snooping 369
DHCP Snooping Global Configuration 371
DHCP Snooping VLAN Configuration 373
Configuring Ports for DHCP Snooping 374
Displaying DHCP Snooping Binding Information 375
– 10 –
Contents
13 Basic Administration Protocols 377
Configuring Event Logging 378
System Log Configuration 378
Remote Log Configuration 380
Sending Simple Mail Transfer Protocol Alerts 381
Link Layer Discovery Protocol 383
Setting LLDP Timing Attributes 383
Configuring LLDP Interface Attributes 385
Configuring LLDP Interface Civic-Address 389
Displaying LLDP Local Device Information 391
Displaying LLDP Remote Device Information 394
Displaying Device Statistics 403
Power over Ethernet 405
Setting the Port PoE Power Budget 406
Simple Network Management Protocol 408
Configuring Global Settings for SNMP 410
Setting the Local Engine ID 411
Specifying a Remote Engine ID 412
Setting SNMPv3 Views 413
Configuring SNMPv3 Groups 416
Setting Community Access Strings 421
Configuring Local SNMPv3 Users 422
Configuring Remote SNMPv3 Users 425
Specifying Trap Managers 428
Creating SNMP Notification Logs 432
Showing SNMP Statistics 434
Remote Monitoring 436
Configuring RMON Alarms 436
Configuring RMON Events 439
Configuring RMON History Samples 441
Configuring RMON Statistical Samples 444
Switch Clustering 446
Configuring General Settings for Clusters 447
Cluster Member Configuration 448
– 11 –
Contents
Managing Cluster Members 450
Ethernet Ring Protection Switching 451
ERPS Global Configuration 455
ERPS Ring Configuration 456
ERPS Forced and Manual Mode Operations 472
Connectivity Fault Management 476
Configuring Global Settings for CFM 480
Configuring Interfaces for CFM 483
Configuring CFM Maintenance Domains 483
Configuring CFM Maintenance Associations 488
Configuring Maintenance End Points 492
Configuring Remote Maintenance End Points 494
Transmitting Link Trace Messages 496
Transmitting Loop Back Messages 498
Transmitting Delay-Measure Requests 500
Displaying Local MEPs 502
Displaying Details for Local MEPs 503
Displaying Local MIPs 505
Displaying Remote MEPs 506
Displaying Details for Remote MEPs 507
Displaying the Link Trace Cache 509
Displaying Fault Notification Settings 510
Displaying Continuity Check Errors 511
OAM Configuration 512
Enabling OAM on Local Ports 512
Displaying Statistics for OAM Messages 515
Displaying the OAM Event Log 516
Displaying the Status of Remote Interfaces 517
Configuring a Remote Loopback Test 518
Displaying Results of Remote Loopback Testing 520
UDLD Configuration 521
Configuring UDLD Protocol Intervals 522
Configuring UDLD Interface Settings 523
Displaying UDLD Neighbor Information 525
– 12 –
Contents
14 Multicast Filtering 527
Overview 527
Layer 2 IGMP (Snooping and Query for IPv4) 528
Configuring IGMP Snooping and Query Parameters 530
Specifying Static Interfaces for a Multicast Router 534
Assigning Interfaces to Multicast Services 536
Setting IGMP Snooping Status per Interface 539
Filtering IGMP Query Packets and Multicast Data 545
Displaying Multicast Groups Discovered by IGMP Snooping 546
Displaying IGMP Snooping Statistics 547
Filtering and Throttling IGMP Groups 551
Enabling IGMP Filtering and Throttling 551
Configuring IGMP Filter Profiles 552
Configuring IGMP Filtering and Throttling for Interfaces 554
MLD Snooping (Snooping and Query for IPv6) 556
Configuring MLD Snooping and Query Parameters 556
Setting Immediate Leave Status for MLD Snooping per Interface 558
Specifying Static Interfaces for an IPv6 Multicast Router 559
Assigning Interfaces to IPv6 Multicast Services 561
Showing MLD Snooping Groups and Source List 563
Multicast VLAN Registration for IPv4 564
Configuring MVR Global Settings 566
Configuring MVR Domain Settings 568
Configuring MVR Group Address Profiles 569
Configuring MVR Interface Status 572
Assigning Static MVR Multicast Groups to Interfaces 574
Displaying MVR Receiver Groups 576
Displaying MVR Statistics 577
Multicast VLAN Registration for IPv6 581
Configuring MVR6 Global Settings 582
Configuring MVR6 Domain Settings 584
Configuring MVR6 Group Address Profiles 585
Configuring MVR6 Interface Status 588
Assigning Static MVR6 Multicast Groups to Interfaces 590
– 13 –
Contents
Displaying MVR6 Receiver Groups 592
Displaying MVR6 Statistics 593
15 IP Configuration 599
Setting the Switch’s IP Address (IP Version 4) 599
Setting the Switch’s IP Address (IP Version 6) 603
Configuring the IPv6 Default Gateway 604
Configuring IPv6 Interface Settings 605
Configuring an IPv6 Address 610
Showing IPv6 Addresses 613
Showing the IPv6 Neighbor Cache 614
Showing IPv6 Statistics 615
Showing the MTU for Responding Destinations 621
16 IP Services 623
Domain Name Service 623
Configuring General DNS Service Parameters 623
Configuring a List of Domain Names 624
Configuring a List of Name Servers 626
Configuring Static DNS Host to Address Entries 627
Displaying the DNS Cache 628
Dynamic Host Configuration Protocol 629
Specifying a DHCP Client Identifier 629
Configuring DHCP Relay Service 631
Configuring the PPPoE Intermediate Agent 632
Configuring PPPoE IA Global Settings 632
Configuring PPPoE IA Interface Settings 634
Showing PPPoE IA Statistics 635
17 General IP Routing 637
Overview 637
Initial Configuration 637
IP Routing and Switching 638
Routing Path Management 639
Routing Protocols 640
Configuring IP Routing Interfaces 640
– 14 –
Contents
Configuring Local and Remote Interfaces 640
Using the Ping Function 641
Using the Trace Route Function 642
Address Resolution Protocol 644
Basic ARP Configuration 644
Configuring Static ARP Addresses 646
Displaying Dynamic or Local ARP Entries 648
Displaying ARP Statistics 648
Configuring Static Routes 649
Displaying the Routing Table 651
18 Unicast Routing 653
Overview 653
Configuring the Routing Information Protocol 654
Configuring General Protocol Settings 655
Clearing Entries from the Routing Table 658
Specifying Network Interfaces 659
Specifying Passive Interfaces 661
Specifying Static Neighbors 662
Configuring Route Redistribution 663
Specifying an Administrative Distance 665
Configuring Network Interfaces for RIP 666
Displaying RIP Interface Settings 670
Displaying Peer Router Information 671
Resetting RIP Statistics 671
Section III Appendices 673
A Software Specifications 675
Software Features 675
Management Features 677
Standards 677
Management Information Bases 678
B Troubleshooting 681
– 15 –
Contents
Problems Accessing the Management Interface 681
Using System Logs 682
C License Statement / GPL Code Statement 683
Written Offer for GPL/LGPL Source Code 683
The GNU General Public License 683
How to Apply These Terms to Your New Programs 687
Notification of Compliance 688
Glossary 691
Index 699
– 16 –
Figures
Figure 1: Home Page 50
Figure 2: Front Panel Indicators 51
Figure 3: System Information 72
Figure 4: General Switch Information 74
Figure 5: Configuring Support for Jumbo Frames 75
Figure 6: Displaying Bridge Extension Configuration 76
Figure 7: Copy Firmware 79
Figure 8: Saving the Running Configuration 80
Figure 9: Setting Start-Up Files 80
Figure 10: Displaying System Files 81
Figure 11: Configuring Automatic Code Upgrade 85
Figure 12: Manually Setting the System Clock 86
Figure 13: Setting the Polling Interval for SNTP 87
Figure 14: Configuring NTP 88
Figure 15: Specifying SNTP Time Servers 89
Figure 16: Adding an NTP Time Server 90
Figure 17: Showing the NTP Time Server List 90
Figure 18: Adding an NTP Authentication Key 91
Figure 19: Showing the NTP Authentication Key List 92
Figure 20: Setting the Time Zone 93
Figure 21: Configuring Summer Time 95
Figure 22: Console Port Settings 96
Figure 23: Telnet Connection Settings 98
Figure 24: Displaying CPU Utilization 99
Figure 25: Displaying Memory Utilization 99
Figure 26: Setting the Stack Master 101
Figure 27: Enabling Stacking on 10G Ports 102
Figure 28: Renumbering the Stack 102
Figure 29: Restarting the Switch (Immediately) 105
– 17 –
Figures
Figure 30: Restarting the Switch (In) 105
Figure 31: Restarting the Switch (At) 106
Figure 32: Restarting the Switch (Regularly) 106
Figure 33: Configuring Connections by Port List 110
Figure 34: Configuring Connections by Port Range 111
Figure 35: Displaying Port Information 112
Figure 36: Configuring Local Port Mirroring 112
Figure 37: Configuring Local Port Mirroring 114
Figure 38: Displaying Local Port Mirror Sessions 114
Figure 39: Configuring Remote Port Mirroring 115
Figure 40: Configuring Remote Port Mirroring (Source) 118
Figure 41: Configuring Remote Port Mirroring (Intermediate) 118
Figure 42: Configuring Remote Port Mirroring (Destination) 118
Figure 43: Showing Port Statistics (Table) 122
Figure 44: Showing Port Statistics (Chart) 123
Figure 45: Displaying Transceiver Data 124
Figure 46: Configuring Transceiver Thresholds 126
Figure 47: Performing Cable Tests 128
Figure 48: Configuring Static Trunks 129
Figure 49: Creating Static Trunks 130
Figure 50: Adding Static Trunks Members 131
Figure 51: Configuring Connection Parameters for a Static Trunk 131
Figure 52: Showing Information for Static Trunks 132
Figure 53: Configuring Dynamic Trunks 132
Figure 54: Configuring the LACP Aggregator Admin Key 135
Figure 55: Enabling LACP on a Port 136
Figure 56: Configuring LACP Parameters on a Port 136
Figure 57: Showing Members of a Dynamic Trunk 137
Figure 58: Configuring Connection Settings for a Dynamic Trunk 137
Figure 59: Showing Connection Parameters for Dynamic Trunks 138
Figure 60: Displaying LACP Port Counters 139
Figure 61: Displaying LACP Port Internal Information 140
Figure 62: Displaying LACP Port Remote Information 142
Figure 63: Configuring Load Balancing 143
Figure 64: Enabling Power Savings 145
– 18 –
Figures
Figure 65: Enabling Traffic Segmentation 147
Figure 66: Configuring Members for Traffic Segmentation 148
Figure 67: Showing Traffic Segmentation Members 149
Figure 68: Configuring VLAN Trunking 149
Figure 69: Configuring VLAN Trunking 151
Figure 70: VLAN Compliant and VLAN Non-compliant Devices 155
Figure 71: Using GVRP 156
Figure 72: Creating Static VLANs 158
Figure 73: Modifying Settings for Static VLANs 158
Figure 74: Showing Static VLANs 159
Figure 75: Configuring Static Members by VLAN Index 162
Figure 76: Configuring Static VLAN Members by Interface 162
Figure 77: Configuring Static VLAN Members by Interface Range 163
Figure 78: Configuring Global Status of GVRP 165
Figure 79: Configuring GVRP for an Interface 165
Figure 80: Showing Dynamic VLANs Registered on the Switch 166
Figure 81: Showing the Members of a Dynamic VLAN 166
Figure 82: QinQ Operational Concept 167
Figure 83: Enabling QinQ Tunneling 171
Figure 84: Configuring CVLAN to SPVLAN Mapping Entries 173
Figure 85: Showing CVLAN to SPVLAN Mapping Entries 173
Figure 86: Adding an Interface to a QinQ Tunnel 174
Figure 87: Configuring Protocol VLANs 176
Figure 88: Displaying Protocol VLANs 177
Figure 89: Assigning Interfaces to Protocol VLANs 178
Figure 90: Showing the Interface to Protocol Group Mapping 179
Figure 91: Configuring IP Subnet VLANs 180
Figure 92: Showing IP Subnet VLANs 181
Figure 93: Configuring MAC-Based VLANs 182
Figure 94: Showing MAC-Based VLANs 183
Figure 95: Configuring VLAN Mirroring 184
Figure 96: Showing the VLANs to Mirror 184
Figure 97: Configuring VLAN Translation 185
Figure 98: Configuring VLAN Translation 186
Figure 99: Showing the Entries for VLAN Translation 186
– 19 –
Figures
Figure 100: Configuring MAC Address Learning 188
Figure 101: Configuring Static MAC Addresses 190
Figure 102: Displaying Static MAC Addresses 190
Figure 103: Setting the Address Aging Time 191
Figure 104: Displaying the Dynamic MAC Address Table 192
Figure 105: Clearing Entries in the Dynamic MAC Address Table 193
Figure 106: Mirroring Packets Based on the Source MAC Address 195
Figure 107: Showing the Source MAC Addresses to Mirror 195
Figure 108: Issuing MAC Address Traps (Global Configuration) 196
Figure 109: Issuing MAC Address Traps (Interface Configuration) 196
Figure 110: STP Root Ports and Designated Ports 198
Figure 111: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 198
Figure 112: Spanning Tree – Common Internal, Common, Internal 199
Figure 113: Configuring Port Loopback Detection 201
Figure 114: Configuring Global Settings for STA (STP) 205
Figure 115: Configuring Global Settings for STA (RSTP) 205
Figure 116: Configuring Global Settings for STA (MSTP) 206
Figure 117: Displaying Global Settings for STA 207
Figure 118: Determining the Root Port 209
Figure 119: Configuring Interface Settings for STA 211
Figure 120: STA Port Roles 213
Figure 121: Displaying Interface Settings for STA 214
Figure 122: Creating an MST Instance 216
Figure 123: Displaying MST Instances 216
Figure 124: Modifying the Priority for an MST Instance 217
Figure 125: Displaying Global Settings for an MST Instance 217
Figure 126: Adding a VLAN to an MST Instance 218
Figure 127: Displaying Members of an MST Instance 218
Figure 128: Configuring MSTP Interface Settings 220
Figure 129: Displaying MSTP Interface Settings 220
Figure 130: Configuring Rate Limits 222
Figure 131: Configuring Storm Control 224
Figure 132: Storm Control by Limiting the Traffic Rate 224
Figure 133: Storm Control by Shutting Down a Port 225
Figure 134: Configuring ATC Timers 226
– 20 –
Figures
Figure 135: Configuring ATC Interface Attributes 229
Figure 136: Setting the Default Port Priority 232
Figure 137: Setting the Queue Mode (Strict) 234
Figure 138: Setting the Queue Mode (WRR) 234
Figure 139: Setting the Queue Mode (Strict and WRR) 235
Figure 140: Mapping CoS Values to Egress Queues 237
Figure 141: Showing CoS Values to Egress Queue Mapping 237
Figure 142: Setting the Trust Mode 239
Figure 143: Configuring DSCP to DSCP Internal Mapping 241
Figure 144: Showing DSCP to DSCP Internal Mapping 241
Figure 145: Configuring CoS to DSCP Internal Mapping 243
Figure 146: Showing CoS to DSCP Internal Mapping 244
Figure 147: Configuring a Class Map 248
Figure 148: Showing Class Maps 248
Figure 149: Adding Rules to a Class Map 249
Figure 150: Showing the Rules for a Class Map 249
Figure 151: Configuring a Policy Map 257
Figure 152: Showing Policy Maps 257
Figure 153: Adding Rules to a Policy Map 258
Figure 154: Showing the Rules for a Policy Map 259
Figure 155: Attaching a Policy Map to a Port 260
Figure 156: Configuring a Voice VLAN 263
Figure 157: Configuring an OUI Telephony List 264
Figure 158: Showing an OUI Telephony List 264
Figure 159: Configuring Port Settings for a Voice VLAN 266
Figure 160: Configuring the Authentication Sequence 270
Figure 161: Authentication Server Operation 270
Figure 162: Configuring Remote Authentication Server (RADIUS) 273
Figure 163: Configuring Remote Authentication Server (TACACS+) 274
Figure 164: Configuring AAA Server Groups 274
Figure 165: Showing AAA Server Groups 275
Figure 166: Configuring Global Settings for AAA Accounting 277
Figure 167: Configuring AAA Accounting Methods 278
Figure 168: Showing AAA Accounting Methods 279
Figure 169: Configuring AAA Accounting Service for 802.1X Service 279
– 21 –
Figures
Figure 170: Configuring AAA Accounting Service for Command Service 280
Figure 171: Configuring AAA Accounting Service for Exec Service 280
Figure 172: Displaying a Summary of Applied AAA Accounting Methods 281
Figure 173: Displaying Statistics for AAA Accounting Sessions 281
Figure 174: Configuring AAA Authorization Methods 283
Figure 175: Showing AAA Authorization Methods 283
Figure 176: Configuring AAA Authorization Methods for Exec Service 284
Figure 177: Displaying the Applied AAA Authorization Method 284
Figure 178: Configuring User Accounts 286
Figure 179: Showing User Accounts 286
Figure 180: Configuring Global Settings for Web Authentication 288
Figure 181: Configuring Interface Settings for Web Authentication 289
Figure 182: Configuring Global Settings for Network Access 292
Figure 183: Configuring Interface Settings for Network Access 294
Figure 184: Configuring Link Detection for Network Access 295
Figure 185: Configuring a MAC Address Filter for Network Access 296
Figure 186: Showing the MAC Address Filter Table for Network Access 297
Figure 187: Showing Addresses Authenticated for Network Access 298
Figure 188: Configuring HTTPS 300
Figure 189: Downloading the Secure-Site Certificate 302
Figure 190: Configuring the SSH Server 305
Figure 191: Generating the SSH Host Key Pair 306
Figure 192: Showing the SSH Host Key Pair 307
Figure 193: Copying the SSH User’s Public Key 308
Figure 194: Showing the SSH User’s Public Key 309
Figure 195: Setting the Name of a Time Range 311
Figure 196: Showing a List of Time Ranges 312
Figure 197: Add a Rule to a Time Range 312
Figure 198: Showing the Rules Configured for a Time Range 313
Figure 199: Showing TCAM Utilization 314
Figure 200: Creating an ACL 315
Figure 201: Showing a List of ACLs 315
Figure 202: Configuring a Standard IPv4 ACL 317
Figure 203: Configuring an Extended IPv4 ACL 319
Figure 204: Configuring a Standard IPv6 ACL 320
– 22 –
Figures
Figure 205: Configuring an Extended IPv6 ACL 322
Figure 206: Configuring a MAC ACL 324
Figure 207: Configuring a ARP ACL 326
Figure 208: Binding a Port to an ACL 327
Figure 209: Configuring ACL Mirroring 328
Figure 210: Showing the VLANs to Mirror 329
Figure 211: Showing ACL Statistics 330
Figure 212: Configuring Global Settings for ARP Inspection 333
Figure 213: Configuring VLAN Settings for ARP Inspection 334
Figure 214: Configuring Interface Settings for ARP Inspection 335
Figure 215: Displaying Statistics for ARP Inspection 337
Figure 216: Displaying the ARP Inspection Log 338
Figure 217: Creating an IP Address Filter for Management Access 339
Figure 218: Showing IP Addresses Authorized for Management Access 340
Figure 219: Configuring Port Security 342
Figure 220: Configuring Port Authentication 343
Figure 221: Configuring Global Settings for 802.1X Port Authentication 345
Figure 222: Configuring Interface Settings for 802.1X Port Authenticator 349
Figure 223: Configuring Interface Settings for 802.1X Port Supplicant 351
Figure 224: Showing Statistics for 802.1X Port Authenticator 353
Figure 225: Showing Statistics for 802.1X Port Supplicant 354
Figure 226: Protecting Against DoS Attacks 356
Figure 227: Setting the Filter Type for IPv4 Source Guard 359
Figure 228: Configuring Static Bindings for IPv4 Source Guard 361
Figure 229: Displaying Static Bindings for IPv4 Source Guard 361
Figure 230: Showing the IPv4 Source Guard Binding Table 363
Figure 231: Setting the Filter Type for IPv6 Source Guard 365
Figure 232: Configuring Static Bindings for IPv6 Source Guard 367
Figure 233: Displaying Static Bindings for IPv6 Source Guard 367
Figure 234: Showing the IPv6 Source Guard Binding Table 369
Figure 235: Configuring Global Settings for DHCP Snooping 373
Figure 236: Configuring DHCP Snooping on a VLAN 374
Figure 237: Configuring the Port Mode for DHCP Snooping 375
Figure 238: Displaying the Binding Table for DHCP Snooping 376
Figure 239: Configuring Settings for System Memory Logs 379
– 23 –
Figures
Figure 240: Showing Error Messages Logged to System Memory 380
Figure 241: Configuring Settings for Remote Logging of Error Messages 381
Figure 242: Configuring SMTP Alert Messages 382
Figure 243: Configuring LLDP Timing Attributes 385
Figure 244: Configuring LLDP Interface Attributes 388
Figure 245: Configuring the Civic Address for an LLDP Interface 390
Figure 246: Showing the Civic Address for an LLDP Interface 390
Figure 247: Displaying Local Device Information for LLDP (General) 393
Figure 248: Displaying Local Device Information for LLDP (Port) 394
Figure 249: Displaying Local Device Information for LLDP (Port Details) 394
Figure 250: Displaying Remote Device Information for LLDP (Port) 401
Figure 251: Displaying Remote Device Information for LLDP (Port Details) 402
Figure 252: Displaying Remote Device Information for LLDP (End Node) 403
Figure 253: Displaying LLDP Device Statistics (General) 405
Figure 254: Displaying LLDP Device Statistics (Port) 405
Figure 255: Setting a Port’s PoE Budget 408
Figure 256: Configuring Global Settings for SNMP 411
Figure 257: Configuring the Local Engine ID for SNMP 412
Figure 258: Configuring a Remote Engine ID for SNMP 413
Figure 259: Showing Remote Engine IDs for SNMP 413
Figure 260: Creating an SNMP View 414
Figure 261: Showing SNMP Views 415
Figure 262: Adding an OID Subtree to an SNMP View 415
Figure 263: Showing the OID Subtree Configured for SNMP Views 416
Figure 264: Creating an SNMP Group 420
Figure 265: Showing SNMP Groups 420
Figure 266: Setting Community Access Strings 421
Figure 267: Showing Community Access Strings 422
Figure 268: Configuring Local SNMPv3 Users 424
Figure 269: Showing Local SNMPv3 Users 424
Figure 270: Changing a Local SNMPv3 User Group 425
Figure 271: Configuring Remote SNMPv3 Users 427
Figure 272: Showing Remote SNMPv3 Users 427
Figure 273: Configuring Trap Managers (SNMPv1) 431
Figure 274: Configuring Trap Managers (SNMPv2c) 431
– 24 –
Figures
Figure 275: Configuring Trap Managers (SNMPv3) 431
Figure 276: Showing Trap Managers 432
Figure 277: Creating SNMP Notification Logs 433
Figure 278: Showing SNMP Notification Logs 434
Figure 279: Showing SNMP Statistics 435
Figure 280: Configuring an RMON Alarm 438
Figure 281: Showing Configured RMON Alarms 438
Figure 282: Configuring an RMON Event 440
Figure 283: Showing Configured RMON Events 441
Figure 284: Configuring an RMON History Sample 442
Figure 285: Showing Configured RMON History Samples 443
Figure 286: Showing Collected RMON History Samples 443
Figure 287: Configuring an RMON Statistical Sample 445
Figure 288: Showing Configured RMON Statistical Samples 445
Figure 289: Showing Collected RMON Statistical Samples 446
Figure 290: Configuring a Switch Cluster 448
Figure 291: Configuring a Cluster Members 449
Figure 292: Showing Cluster Members 449
Figure 293: Showing Cluster Candidates 450
Figure 294: Managing a Cluster Member 451
Figure 295: ERPS Ring Components 452
Figure 296: Ring Interconnection Architecture (Multi-ring/Ladder Network) 454
Figure 297: Setting ERPS Global Status 456
Figure 298: Sub-ring with Virtual Channel 465
Figure 299: Sub-ring without Virtual Channel 466
Figure 300: Non-ERPS Device Protection 467
Figure 301: Creating an ERPS Ring 470
Figure 302: Creating an ERPS Ring 471
Figure 303: Showing Configured ERPS Rings 471
Figure 304: Blocking an ERPS Ring Port 476
Figure 305: Single CFM Maintenance Domain 477
Figure 306: Multiple CFM Maintenance Domains 478
Figure 307: Configuring Global Settings for CFM 482
Figure 308: Configuring Interfaces for CFM 483
Figure 309: Configuring Maintenance Domains 487
– 25 –
Figures
Figure 310: Showing Maintenance Domains 487
Figure 311: Configuring Detailed Settings for Maintenance Domains 488
Figure 312: Creating Maintenance Associations 491
Figure 313: Showing Maintenance Associations 491
Figure 314: Configuring Detailed Settings for Maintenance Associations 492
Figure 315: Configuring Maintenance End Points 493
Figure 316: Showing Maintenance End Points 494
Figure 317: Configuring Remote Maintenance End Points 495
Figure 318: Showing Remote Maintenance End Points 496
Figure 319: Transmitting Link Trace Messages 498
Figure 320: Transmitting Loopback Messages 499
Figure 321: Transmitting Delay-Measure Messages 501
Figure 322: Showing Information on Local MEPs 502
Figure 323: Showing Detailed Information on Local MEPs 504
Figure 324: Showing Information on Local MIPs 505
Figure 325: Showing Information on Remote MEPs 506
Figure 326: Showing Detailed Information on Remote MEPs 508
Figure 327: Showing the Link Trace Cache 510
Figure 328: Showing Settings for the Fault Notification Generator 511
Figure 329: Showing Continuity Check Errors 512
Figure 330: Enabling OAM for Local Ports 515
Figure 331: Displaying Statistics for OAM Messages 516
Figure 332: Displaying the OAM Event Log 517
Figure 333: Displaying Status of Remote Interfaces 518
Figure 334: Running a Remote Loop Back Test 520
Figure 335: Displaying the Results of Remote Loop Back Testing 521
Figure 336: Configuring UDLD Protocol Intervals 523
Figure 337: Configuring UDLD Interface Settings 525
Figure 338: Displaying UDLD Neighbor Information 526
Figure 339: Multicast Filtering Concept 528
Figure 340: Configuring General Settings for IGMP Snooping 534
Figure 341: Configuring a Static Interface for a Multicast Router 535
Figure 342: Showing Static Interfaces Attached a Multicast Router 536
Figure 343: Showing Current Interfaces Attached a Multicast Router 536
Figure 344: Assigning an Interface to a Multicast Service 537
– 26 –
Figures
Figure 345: Showing Static Interfaces Assigned to a Multicast Service 538
Figure 346: Showing Current Interfaces Attached a Multicast Router 538
Figure 347: Configuring IGMP Snooping on a VLAN 544
Figure 348: Showing Interface Settings for IGMP Snooping 544
Figure 349: Dropping IGMP Query or Multicast Data Packets 545
Figure 350: Showing Multicast Groups Learned by IGMP Snooping 546
Figure 351: Displaying IGMP Snooping Statistics – Query 549
Figure 352: Displaying IGMP Snooping Statistics – VLAN 550
Figure 353: Displaying IGMP Snooping Statistics – Port 550
Figure 354: Enabling IGMP Filtering and Throttling 552
Figure 355: Creating an IGMP Filtering Profile 553
Figure 356: Showing the IGMP Filtering Profiles Created 553
Figure 357: Adding Multicast Groups to an IGMP Filtering Profile 554
Figure 358: Showing the Groups Assigned to an IGMP Filtering Profile 554
Figure 359: Configuring IGMP Filtering and Throttling Interface Settings 556
Figure 360: Configuring General Settings for MLD Snooping 558
Figure 361: Configuring Immediate Leave for MLD Snooping 559
Figure 362: Configuring a Static Interface for an IPv6 Multicast Router 560
Figure 363: Showing Static Interfaces Attached an IPv6 Multicast Router 560
Figure 364: Showing Current Interfaces Attached an IPv6 Multicast Router 560
Figure 365: Assigning an Interface to an IPv6 Multicast Service 562
Figure 366: Showing Static Interfaces Assigned to an IPv6 Multicast Service 562
Figure 367: Showing Current Interfaces Assigned to an IPv6 Multicast Service 563
Figure 368: Showing IPv6 Multicast Services and Corresponding Sources 564
Figure 369: MVR Concept 565
Figure 370: Configuring Global Settings for MVR 567
Figure 371: Configuring Domain Settings for MVR 569
Figure 372: Configuring an MVR Group Address Profile 570
Figure 373: Displaying MVR Group Address Profiles 570
Figure 374: Assigning an MVR Group Address Profile to a Domain 571
Figure 375: Showing the MVR Group Address Profiles Assigned to a Domain 571
Figure 376: Configuring Interface Settings for MVR 574
Figure 377: Assigning Static MVR Groups to an Interface 575
Figure 378: Showing the Static MVR Groups Assigned to a Port 576
Figure 379: Displaying MVR Receiver Groups 577
– 27 –
Figures
Figure 380: Displaying MVR Statistics – Query 579
Figure 381: Displaying MVR Statistics – VLAN 580
Figure 382: Displaying MVR Statistics – Port 581
Figure 383: Configuring Global Settings for MVR6 584
Figure 384: Configuring Domain Settings for MVR6 585
Figure 385: Configuring an MVR6 Group Address Profile 587
Figure 386: Displaying MVR6 Group Address Profiles 587
Figure 387: Assigning an MVR6 Group Address Profile to a Domain 588
Figure 388: Showing MVR6 Group Address Profiles Assigned to a Domain 588
Figure 389: Configuring Interface Settings for MVR6 590
Figure 390: Assigning Static MVR6 Groups to a Port 591
Figure 391: Showing the Static MVR6 Groups Assigned to a Port 592
Figure 392: Displaying MVR6 Receiver Groups 593
Figure 393: Displaying MVR6 Statistics – Query 595
Figure 394: Displaying MVR6 Statistics – VLAN 596
Figure 395: Displaying MVR6 Statistics – Port 597
Figure 396: Configuring a Static IPv4 Address 601
Figure 397: Configuring a Dynamic IPv4 Address 602
Figure 398: Showing the Configured IPv4 Address for an Interface 603
Figure 399: Configuring the IPv6 Default Gateway 604
Figure 400: Configuring General Settings for an IPv6 Interface 609
Figure 401: Configuring RA Guard for an IPv6 Interface 610
Figure 402: Configuring an IPv6 Address 612
Figure 403: Showing Configured IPv6 Addresses 614
Figure 404: Showing IPv6 Neighbors 615
Figure 405: Showing IPv6 Statistics (IPv6) 619
Figure 406: Showing IPv6 Statistics (ICMPv6) 620
Figure 407: Showing IPv6 Statistics (UDP) 620
Figure 408: Showing Reported MTU Values 621
Figure 409: Configuring General Settings for DNS 624
Figure 410: Configuring a List of Domain Names for DNS 625
Figure 411: Showing the List of Domain Names for DNS 625
Figure 412: Configuring a List of Name Servers for DNS 626
Figure 413: Showing the List of Name Servers for DNS 627
Figure 414: Configuring Static Entries in the DNS Table 627
– 28 –
Figures
Figure 415: Showing Static Entries in the DNS Table 628
Figure 416: Showing Entries in the DNS Cache 629
Figure 417: Specifying a DHCP Client Identifier 631
Figure 418: Layer 3 DHCP Relay Service 631
Figure 419: Configuring DHCP Relay Service 632
Figure 420: Configuring Global Settings for PPPoE Intermediate Agent 633
Figure 421: Configuring Interface Settings for PPPoE Intermediate Agent 635
Figure 422: Showing PPPoE Intermediate Agent Statistics 636
Figure 423: Virtual Interfaces and Layer 3 Routing 638
Figure 424: Pinging a Network Device 642
Figure 425: Tracing the Route to a Network Device 643
Figure 426: Proxy ARP 645
Figure 427: Configuring General Settings for ARP 646
Figure 428: Configuring Static ARP Entries 647
Figure 429: Displaying Static ARP Entries 647
Figure 430: Displaying ARP Entries 648
Figure 431: Displaying ARP Statistics 649
Figure 432: Configuring Static Routes 650
Figure 433: Displaying Static Routes 650
Figure 434: Displaying the Routing Table 652
Figure 435: Configuring RIP 654
Figure 436: Configuring General Settings for RIP 658
Figure 437: Clearing Entries from the Routing Table 659
Figure 438: Adding Network Interfaces to RIP 660
Figure 439: Showing Network Interfaces Using RIP 661
Figure 440: Specifying a Passive RIP Interface 662
Figure 441: Showing Passive RIP Interfaces 662
Figure 442: Specifying a Static RIP Neighbor 663
Figure 443: Showing Static RIP Neighbors 663
Figure 444: Redistributing External Routes into RIP 664
Figure 445: Showing External Routes Redistributed into RIP 665
Figure 446: Setting the Distance Assigned to External Routes 666
Figure 447: Showing the Distance Assigned to External Routes 666
Figure 448: Configuring a Network Interface for RIP 669
Figure 449: Showing RIP Network Interface Settings 670
– 29 –
Figures
Figure 450: Showing RIP Interface Settings 670
Figure 451: Showing RIP Peer Information 671
Figure 452: Resetting RIP Statistics 672
– 30 –
Loading...