Level One GTP-5281 operation manual

GTL-2881

28-Port Stackable Layer 3 Lite Managed Gigabit Switch,

2 x 10GbE SFP+, 2 x 10GbE SFP+ (Optional Modules)

GTL-2882

28-Port Stackable Layer 3 Lite Managed Gigabit Fiber Switch,

2 x 10GbE SFP+, 2 x 10GbE SFP+ (Optional Modules)

GTP-5281

52-Port Stackable Layer 3 Lite Managed Gigabit PoE Switch,

48 PoE Outputs, 2 x 10GbE SFP+,

2 x 10GbE SFP+ (Optional Modules)

User Manual

V1.0

Digital Data Communications Asia Co., Ltd.

http://www.level1.com

User Manual

GTL-2881

Layer Layer 3 Lite Stackable Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports

GTL-2882

Layer Layer 3 Lite Stackable Gigabit Ethernet Fiber Switch
with 22 SFP Ports,
2 10/100/1000BASE-T (RJ-45/SFP) Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports

GTP-5281

Layer 3 Lite Stackable Gigabit Ethernet PoE Switch
with 48 10/100/1000BASE-T RJ-45 PoE Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports

E112017-KS-R02

How to Use This Guide

This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.

Who Should Read

this Guide?

How this Guide

is Organized

This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).

This guide provides detailed information about the switch’s key features. It also
describes the switch’s web browser interface. For information on the command line
interface refer to the CLI Reference Guide.

The guide includes these sections:

◆ Section I “Getting Started” — Includes an introduction to switch management,

and the basic settings required to access the management interface.

◆ Section II “Web Configuration” — Includes all management options available

through the web browser interface.

◆ Section III “Ap pe nd ices” — Includes information on troubleshooting switch

management access.

Related

Documentation

This guide focuses on switch software configuration through the web browser.

For information on how to manage the switch through the command line interface,
see the following guide:

CLI Reference Guide

Note:

For a description of how to initialize the switch for management access via
the CLI, web interface or SNMP, refer to “Initial Switch Configuration” in the CLI
Reference Guide.

– 3 –

How to Use This Guide

Conventions The following conventions are used throughout this guide to show information:

For information on how to install the switch, see the following guide:

Installation Guide

For all safety information and regulatory statements, see the following documents:

Quick Start Guide
Safety and Regulatory Information

Note:

Emphasizes important information or calls your attention to related features
or instructions.

Caution:

the system or equipment.

Alerts you to a potential hazard that could cause loss of data, or damage

Revision History This section summarizes the changes in each revision of this guide.

November 2017 Revision

This is the second version of this guide. This guide is valid for software release
v1.5.2.37. It includes the following changes:

◆ Added the GTP-5281 switch.

October 2016 Revision

This is the first version of this guide. This guide is valid for software release
v1.5.2.15.

– 4 –

Contents

How to Use This Guide 3

Contents 5

Figures 17

Tables 31

Section I Getting Started 33

1 Introduction 35

Key Features 35

Description of Software Features 37

IP Routing 41

Equal-cost Multipath Load Balancing 42

Address Resolution Protocol 42

Operation, Administration, and Maintenance 42

System Defaults 43

Section II Web Configuration 47

2 Using the Web Interface 49

Connecting to the Web Interface 49

Navigating the Web Browser Interface 50

Home Page 50

Configuration Options 51

Panel Display 51

Main Menu 52

3 Basic Management Tasks 71

Displaying System Information 72

– 5 –

Contents

Displaying Hardware/Software Versions 73

Configuring Support for Jumbo Frames 74

Displaying Bridge Extension Capabilities 75

Managing System Files 77

Copying Files via FTP/TFTP or HTTP 77

Saving the Running Configuration to a Local File 79

Setting the Start-Up File 80

Showing System Files 81

Automatic Operation Code Upgrade 81

Setting the System Clock 85

Setting the Time Manually 86

Setting the SNTP Polling Interval 87

Configuring NTP 87

Configuring Time Servers 88

Setting the Time Zone 92

Configuring Summer Time 93

Configuring the Console Port 95

Configuring Telnet Settings 97

Displaying CPU Utilization 98

Displaying Memory Utilization 99

Stacking 100

Setting the Master Unit 100

Enabling Stacking Ports 101

Renumbering the Stack 102

Resetting the System 103

4 Interface Configuration 107

Port Configuration 108

Configuring by Port List 108

Configuring by Port Range 111

Displaying Connection Status 111

Configuring Local Port Mirroring 112

Configuring Remote Port Mirroring 114

Showing Port or Trunk Statistics 119

Displaying Transceiver Data 123

– 6 –

Contents

Configuring Transceiver Thresholds 124

Performing Cable Diagnostics 126

Trunk Configuration 128

Configuring a Static Trunk 129

Configuring a Dynamic Trunk 132

Displaying LACP Port Counters 138

Displaying LACP Settings and Status for the Local Side 139

Displaying LACP Settings and Status for the Remote Side 141

Configuring Load Balancing 142

Saving Power 144

Traffic Segmentation 146

Enabling Traffic Segmentation 146

Configuring Uplink and Downlink Ports 147

VLAN Trunking 149

5 VLAN Configuration 153

IEEE 802.1Q VLANs 153

Configuring VLAN Groups 156

Adding Static Members to VLANs 159

Configuring Dynamic VLAN Registration 163

IEEE 802.1Q Tunneling 166

Enabling QinQ Tunneling on the Switch 170

Creating CVLAN to SPVLAN Mapping Entries 172

Adding an Interface to a QinQ Tunnel 173

Protocol VLANs 175

Configuring Protocol VLAN Groups 175

Mapping Protocol Groups to Interfaces 177

Configuring IP Subnet VLANs 179

Configuring MAC-based VLANs 181

Configuring VLAN Mirroring 183

Configuring VLAN Translation 185

6 Address Table Settings 187

Configuring MAC Address Learning 187

Setting Static Addresses 189

Changing the Aging Time 191

– 7 –

Contents

Displaying the Dynamic Address Table 191

Clearing the Dynamic Address Table 193

Configuring MAC Address Mirroring 194

Issuing MAC Address Traps 195

7 Spanning Tree Algorithm 197

Overview 197

Configuring Loopback Detection 199

Configuring Global Settings for STA 201

Displaying Global Settings for STA 206

Configuring Interface Settings for STA 207

Displaying Interface Settings for STA 212

Configuring Multiple Spanning Trees 214

Configuring Interface Settings for MSTP 219

8 Congestion Control 221

Rate Limiting 221

Storm Control 222

Automatic Traffic Control 224

Setting the ATC Timers 225

Configuring ATC Thresholds and Responses 227

9 Class of Service 231

Layer 2 Queue Settings 231

Setting the Default Priority for Interfaces 231

Selecting the Queue Mode 232

Mapping CoS Values to Egress Queues 235

Layer 3/4 Priority Settings 238

Setting Priority Processing to DSCP or CoS 238

Mapping Ingress DSCP Values to Internal DSCP Values 239

Mapping CoS Priorities to Internal DSCP Values 242

10 Quality of Service 245

Overview 245

Configuring a Class Map 246

Creating QoS Policies 250

Attaching a Policy Map to a Port 259

– 8 –

Contents

11 VoIP Traffic Configuration 261

Overview 261

Configuring VoIP Traffic 262

Configuring Telephony OUI 263

Configuring VoIP Traffic Ports 264

12 Security Measures 267

AAA (Authentication, Authorization and Accounting) 268

Configuring Local/Remote Logon Authentication 269

Configuring Remote Logon Authentication Servers 270

Configuring AAA Accounting 275

Configuring AAA Authorization 281

Configuring User Accounts 284

Web Authentication 286

Configuring Global Settings for Web Authentication 287

Configuring Interface Settings for Web Authentication 288

Network Access (MAC Address Authentication) 289

Configuring Global Settings for Network Access 291

Configuring Network Access for Ports 292

Configuring Port Link Detection 294

Configuring a MAC Address Filter 295

Displaying Secure MAC Address Information 297

Configuring HTTPS 299

Configuring Global Settings for HTTPS 299

Replacing the Default Secure-site Certificate 300

Configuring the Secure Shell 302

Configuring the SSH Server 304

Generating the Host Key Pair 306

Importing User Public Keys 307

Access Control Lists 309

Setting a Time Range 310

Showing TCAM Utilization 313

Setting the ACL Name and Type 314

Configuring a Standard IPv4 ACL 316

Configuring an Extended IPv4 ACL 317

– 9 –

Contents

Configuring a Standard IPv6 ACL 319

Configuring an Extended IPv6 ACL 321

Configuring a MAC ACL 323

Configuring an ARP ACL 325

Binding a Port to an Access Control List 326

Configuring ACL Mirroring 327

Showing ACL Hardware Counters 329

ARP Inspection 330

Configuring Global Settings for ARP Inspection 331

Configuring VLAN Settings for ARP Inspection 333

Configuring Interface Settings for ARP Inspection 335

Displaying ARP Inspection Statistics 336

Displaying the ARP Inspection Log 337

Filtering IP Addresses for Management Access 338

Configuring Port Security 340

Configuring 802.1X Port Authentication 342

Configuring 802.1X Global Settings 344

Configuring Port Authenticator Settings for 802.1X 345

Configuring Port Supplicant Settings for 802.1X 350

Displaying 802.1X Statistics 352

DoS Protection 354

IPv4 Source Guard 357

Configuring Ports for IPv4 Source Guard 357

Configuring Static Bindings for IPv4 Source Guard 359

Displaying Information for Dynamic IPv4 Source Guard Bindings 362

IPv6 Source Guard 363

Configuring Ports for IPv6 Source Guard 363

Configuring Static Bindings for IPv6 Source Guard 365

Displaying Information for Dynamic IPv6 Source Guard Bindings 368

DHCP Snooping 369

DHCP Snooping Global Configuration 371

DHCP Snooping VLAN Configuration 373

Configuring Ports for DHCP Snooping 374

Displaying DHCP Snooping Binding Information 375

– 10 –

Contents

13 Basic Administration Protocols 377

Configuring Event Logging 378

System Log Configuration 378

Remote Log Configuration 380

Sending Simple Mail Transfer Protocol Alerts 381

Link Layer Discovery Protocol 383

Setting LLDP Timing Attributes 383

Configuring LLDP Interface Attributes 385

Configuring LLDP Interface Civic-Address 389

Displaying LLDP Local Device Information 391

Displaying LLDP Remote Device Information 394

Displaying Device Statistics 403

Power over Ethernet 405

Setting the Port PoE Power Budget 406

Simple Network Management Protocol 408

Configuring Global Settings for SNMP 410

Setting the Local Engine ID 411

Specifying a Remote Engine ID 412

Setting SNMPv3 Views 413

Configuring SNMPv3 Groups 416

Setting Community Access Strings 421

Configuring Local SNMPv3 Users 422

Configuring Remote SNMPv3 Users 425

Specifying Trap Managers 428

Creating SNMP Notification Logs 432

Showing SNMP Statistics 434

Remote Monitoring 436

Configuring RMON Alarms 436

Configuring RMON Events 439

Configuring RMON History Samples 441

Configuring RMON Statistical Samples 444

Switch Clustering 446

Configuring General Settings for Clusters 447

Cluster Member Configuration 448

– 11 –

Contents

Managing Cluster Members 450

Ethernet Ring Protection Switching 451

ERPS Global Configuration 455

ERPS Ring Configuration 456

ERPS Forced and Manual Mode Operations 472

Connectivity Fault Management 476

Configuring Global Settings for CFM 480

Configuring Interfaces for CFM 483

Configuring CFM Maintenance Domains 483

Configuring CFM Maintenance Associations 488

Configuring Maintenance End Points 492

Configuring Remote Maintenance End Points 494

Transmitting Link Trace Messages 496

Transmitting Loop Back Messages 498

Transmitting Delay-Measure Requests 500

Displaying Local MEPs 502

Displaying Details for Local MEPs 503

Displaying Local MIPs 505

Displaying Remote MEPs 506

Displaying Details for Remote MEPs 507

Displaying the Link Trace Cache 509

Displaying Fault Notification Settings 510

Displaying Continuity Check Errors 511

OAM Configuration 512

Enabling OAM on Local Ports 512

Displaying Statistics for OAM Messages 515

Displaying the OAM Event Log 516

Displaying the Status of Remote Interfaces 517

Configuring a Remote Loopback Test 518

Displaying Results of Remote Loopback Testing 520

UDLD Configuration 521

Configuring UDLD Protocol Intervals 522

Configuring UDLD Interface Settings 523

Displaying UDLD Neighbor Information 525

– 12 –

Contents

14 Multicast Filtering 527

Overview 527

Layer 2 IGMP (Snooping and Query for IPv4) 528

Configuring IGMP Snooping and Query Parameters 530

Specifying Static Interfaces for a Multicast Router 534

Assigning Interfaces to Multicast Services 536

Setting IGMP Snooping Status per Interface 539

Filtering IGMP Query Packets and Multicast Data 545

Displaying Multicast Groups Discovered by IGMP Snooping 546

Displaying IGMP Snooping Statistics 547

Filtering and Throttling IGMP Groups 551

Enabling IGMP Filtering and Throttling 551

Configuring IGMP Filter Profiles 552

Configuring IGMP Filtering and Throttling for Interfaces 554

MLD Snooping (Snooping and Query for IPv6) 556

Configuring MLD Snooping and Query Parameters 556

Setting Immediate Leave Status for MLD Snooping per Interface 558

Specifying Static Interfaces for an IPv6 Multicast Router 559

Assigning Interfaces to IPv6 Multicast Services 561

Showing MLD Snooping Groups and Source List 563

Multicast VLAN Registration for IPv4 564

Configuring MVR Global Settings 566

Configuring MVR Domain Settings 568

Configuring MVR Group Address Profiles 569

Configuring MVR Interface Status 572

Assigning Static MVR Multicast Groups to Interfaces 574

Displaying MVR Receiver Groups 576

Displaying MVR Statistics 577

Multicast VLAN Registration for IPv6 581

Configuring MVR6 Global Settings 582

Configuring MVR6 Domain Settings 584

Configuring MVR6 Group Address Profiles 585

Configuring MVR6 Interface Status 588

Assigning Static MVR6 Multicast Groups to Interfaces 590

– 13 –

Contents

Displaying MVR6 Receiver Groups 592

Displaying MVR6 Statistics 593

15 IP Configuration 599

Setting the Switch’s IP Address (IP Version 4) 599

Setting the Switch’s IP Address (IP Version 6) 603

Configuring the IPv6 Default Gateway 604

Configuring IPv6 Interface Settings 605

Configuring an IPv6 Address 610

Showing IPv6 Addresses 613

Showing the IPv6 Neighbor Cache 614

Showing IPv6 Statistics 615

Showing the MTU for Responding Destinations 621

16 IP Services 623

Domain Name Service 623

Configuring General DNS Service Parameters 623

Configuring a List of Domain Names 624

Configuring a List of Name Servers 626

Configuring Static DNS Host to Address Entries 627

Displaying the DNS Cache 628

Dynamic Host Configuration Protocol 629

Specifying a DHCP Client Identifier 629

Configuring DHCP Relay Service 631

Configuring the PPPoE Intermediate Agent 632

Configuring PPPoE IA Global Settings 632

Configuring PPPoE IA Interface Settings 634

Showing PPPoE IA Statistics 635

17 General IP Routing 637

Overview 637

Initial Configuration 637

IP Routing and Switching 638

Routing Path Management 639

Routing Protocols 640

Configuring IP Routing Interfaces 640

– 14 –

Contents

Configuring Local and Remote Interfaces 640

Using the Ping Function 641

Using the Trace Route Function 642

Address Resolution Protocol 644

Basic ARP Configuration 644

Configuring Static ARP Addresses 646

Displaying Dynamic or Local ARP Entries 648

Displaying ARP Statistics 648

Configuring Static Routes 649

Displaying the Routing Table 651

18 Unicast Routing 653

Overview 653

Configuring the Routing Information Protocol 654

Configuring General Protocol Settings 655

Clearing Entries from the Routing Table 658

Specifying Network Interfaces 659

Specifying Passive Interfaces 661

Specifying Static Neighbors 662

Configuring Route Redistribution 663

Specifying an Administrative Distance 665

Configuring Network Interfaces for RIP 666

Displaying RIP Interface Settings 670

Displaying Peer Router Information 671

Resetting RIP Statistics 671

Section III Appendices 673

A Software Specifications 675

Software Features 675

Management Features 677

Standards 677

Management Information Bases 678

B Troubleshooting 681

– 15 –

Contents

Problems Accessing the Management Interface 681

Using System Logs 682

C License Statement / GPL Code Statement 683

Written Offer for GPL/LGPL Source Code 683

The GNU General Public License 683

How to Apply These Terms to Your New Programs 687

Notification of Compliance 688

Glossary 691

Index 699

– 16 –

Figures

Figure 1: Home Page 50

Figure 2: Front Panel Indicators 51

Figure 3: System Information 72

Figure 4: General Switch Information 74

Figure 5: Configuring Support for Jumbo Frames 75

Figure 6: Displaying Bridge Extension Configuration 76

Figure 7: Copy Firmware 79

Figure 8: Saving the Running Configuration 80

Figure 9: Setting Start-Up Files 80

Figure 10: Displaying System Files 81

Figure 11: Configuring Automatic Code Upgrade 85

Figure 12: Manually Setting the System Clock 86

Figure 13: Setting the Polling Interval for SNTP 87

Figure 14: Configuring NTP 88

Figure 15: Specifying SNTP Time Servers 89

Figure 16: Adding an NTP Time Server 90

Figure 17: Showing the NTP Time Server List 90

Figure 18: Adding an NTP Authentication Key 91

Figure 19: Showing the NTP Authentication Key List 92

Figure 20: Setting the Time Zone 93

Figure 21: Configuring Summer Time 95

Figure 22: Console Port Settings 96

Figure 23: Telnet Connection Settings 98

Figure 24: Displaying CPU Utilization 99

Figure 25: Displaying Memory Utilization 99

Figure 26: Setting the Stack Master 101

Figure 27: Enabling Stacking on 10G Ports 102

Figure 28: Renumbering the Stack 102

Figure 29: Restarting the Switch (Immediately) 105

– 17 –

Figures

Figure 30: Restarting the Switch (In) 105

Figure 31: Restarting the Switch (At) 106

Figure 32: Restarting the Switch (Regularly) 106

Figure 33: Configuring Connections by Port List 110

Figure 34: Configuring Connections by Port Range 111

Figure 35: Displaying Port Information 112

Figure 36: Configuring Local Port Mirroring 112

Figure 37: Configuring Local Port Mirroring 114

Figure 38: Displaying Local Port Mirror Sessions 114

Figure 39: Configuring Remote Port Mirroring 115

Figure 40: Configuring Remote Port Mirroring (Source) 118

Figure 41: Configuring Remote Port Mirroring (Intermediate) 118

Figure 42: Configuring Remote Port Mirroring (Destination) 118

Figure 43: Showing Port Statistics (Table) 122

Figure 44: Showing Port Statistics (Chart) 123

Figure 45: Displaying Transceiver Data 124

Figure 46: Configuring Transceiver Thresholds 126

Figure 47: Performing Cable Tests 128

Figure 48: Configuring Static Trunks 129

Figure 49: Creating Static Trunks 130

Figure 50: Adding Static Trunks Members 131

Figure 51: Configuring Connection Parameters for a Static Trunk 131

Figure 52: Showing Information for Static Trunks 132

Figure 53: Configuring Dynamic Trunks 132

Figure 54: Configuring the LACP Aggregator Admin Key 135

Figure 55: Enabling LACP on a Port 136

Figure 56: Configuring LACP Parameters on a Port 136

Figure 57: Showing Members of a Dynamic Trunk 137

Figure 58: Configuring Connection Settings for a Dynamic Trunk 137

Figure 59: Showing Connection Parameters for Dynamic Trunks 138

Figure 60: Displaying LACP Port Counters 139

Figure 61: Displaying LACP Port Internal Information 140

Figure 62: Displaying LACP Port Remote Information 142

Figure 63: Configuring Load Balancing 143

Figure 64: Enabling Power Savings 145

– 18 –

Figures

Figure 65: Enabling Traffic Segmentation 147

Figure 66: Configuring Members for Traffic Segmentation 148

Figure 67: Showing Traffic Segmentation Members 149

Figure 68: Configuring VLAN Trunking 149

Figure 69: Configuring VLAN Trunking 151

Figure 70: VLAN Compliant and VLAN Non-compliant Devices 155

Figure 71: Using GVRP 156

Figure 72: Creating Static VLANs 158

Figure 73: Modifying Settings for Static VLANs 158

Figure 74: Showing Static VLANs 159

Figure 75: Configuring Static Members by VLAN Index 162

Figure 76: Configuring Static VLAN Members by Interface 162

Figure 77: Configuring Static VLAN Members by Interface Range 163

Figure 78: Configuring Global Status of GVRP 165

Figure 79: Configuring GVRP for an Interface 165

Figure 80: Showing Dynamic VLANs Registered on the Switch 166

Figure 81: Showing the Members of a Dynamic VLAN 166

Figure 82: QinQ Operational Concept 167

Figure 83: Enabling QinQ Tunneling 171

Figure 84: Configuring CVLAN to SPVLAN Mapping Entries 173

Figure 85: Showing CVLAN to SPVLAN Mapping Entries 173

Figure 86: Adding an Interface to a QinQ Tunnel 174

Figure 87: Configuring Protocol VLANs 176

Figure 88: Displaying Protocol VLANs 177

Figure 89: Assigning Interfaces to Protocol VLANs 178

Figure 90: Showing the Interface to Protocol Group Mapping 179

Figure 91: Configuring IP Subnet VLANs 180

Figure 92: Showing IP Subnet VLANs 181

Figure 93: Configuring MAC-Based VLANs 182

Figure 94: Showing MAC-Based VLANs 183

Figure 95: Configuring VLAN Mirroring 184

Figure 96: Showing the VLANs to Mirror 184

Figure 97: Configuring VLAN Translation 185

Figure 98: Configuring VLAN Translation 186

Figure 99: Showing the Entries for VLAN Translation 186

– 19 –

Figures

Figure 100: Configuring MAC Address Learning 188

Figure 101: Configuring Static MAC Addresses 190

Figure 102: Displaying Static MAC Addresses 190

Figure 103: Setting the Address Aging Time 191

Figure 104: Displaying the Dynamic MAC Address Table 192

Figure 105: Clearing Entries in the Dynamic MAC Address Table 193

Figure 106: Mirroring Packets Based on the Source MAC Address 195

Figure 107: Showing the Source MAC Addresses to Mirror 195

Figure 108: Issuing MAC Address Traps (Global Configuration) 196

Figure 109: Issuing MAC Address Traps (Interface Configuration) 196

Figure 110: STP Root Ports and Designated Ports 198

Figure 111: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 198

Figure 112: Spanning Tree – Common Internal, Common, Internal 199

Figure 113: Configuring Port Loopback Detection 201

Figure 114: Configuring Global Settings for STA (STP) 205

Figure 115: Configuring Global Settings for STA (RSTP) 205

Figure 116: Configuring Global Settings for STA (MSTP) 206

Figure 117: Displaying Global Settings for STA 207

Figure 118: Determining the Root Port 209

Figure 119: Configuring Interface Settings for STA 211

Figure 120: STA Port Roles 213

Figure 121: Displaying Interface Settings for STA 214

Figure 122: Creating an MST Instance 216

Figure 123: Displaying MST Instances 216

Figure 124: Modifying the Priority for an MST Instance 217

Figure 125: Displaying Global Settings for an MST Instance 217

Figure 126: Adding a VLAN to an MST Instance 218

Figure 127: Displaying Members of an MST Instance 218

Figure 128: Configuring MSTP Interface Settings 220

Figure 129: Displaying MSTP Interface Settings 220

Figure 130: Configuring Rate Limits 222

Figure 131: Configuring Storm Control 224

Figure 132: Storm Control by Limiting the Traffic Rate 224

Figure 133: Storm Control by Shutting Down a Port 225

Figure 134: Configuring ATC Timers 226

– 20 –

Figures

Figure 135: Configuring ATC Interface Attributes 229

Figure 136: Setting the Default Port Priority 232

Figure 137: Setting the Queue Mode (Strict) 234

Figure 138: Setting the Queue Mode (WRR) 234

Figure 139: Setting the Queue Mode (Strict and WRR) 235

Figure 140: Mapping CoS Values to Egress Queues 237

Figure 141: Showing CoS Values to Egress Queue Mapping 237

Figure 142: Setting the Trust Mode 239

Figure 143: Configuring DSCP to DSCP Internal Mapping 241

Figure 144: Showing DSCP to DSCP Internal Mapping 241

Figure 145: Configuring CoS to DSCP Internal Mapping 243

Figure 146: Showing CoS to DSCP Internal Mapping 244

Figure 147: Configuring a Class Map 248

Figure 148: Showing Class Maps 248

Figure 149: Adding Rules to a Class Map 249

Figure 150: Showing the Rules for a Class Map 249

Figure 151: Configuring a Policy Map 257

Figure 152: Showing Policy Maps 257

Figure 153: Adding Rules to a Policy Map 258

Figure 154: Showing the Rules for a Policy Map 259

Figure 155: Attaching a Policy Map to a Port 260

Figure 156: Configuring a Voice VLAN 263

Figure 157: Configuring an OUI Telephony List 264

Figure 158: Showing an OUI Telephony List 264

Figure 159: Configuring Port Settings for a Voice VLAN 266

Figure 160: Configuring the Authentication Sequence 270

Figure 161: Authentication Server Operation 270

Figure 162: Configuring Remote Authentication Server (RADIUS) 273

Figure 163: Configuring Remote Authentication Server (TACACS+) 274

Figure 164: Configuring AAA Server Groups 274

Figure 165: Showing AAA Server Groups 275

Figure 166: Configuring Global Settings for AAA Accounting 277

Figure 167: Configuring AAA Accounting Methods 278

Figure 168: Showing AAA Accounting Methods 279

Figure 169: Configuring AAA Accounting Service for 802.1X Service 279

– 21 –

Figures

Figure 170: Configuring AAA Accounting Service for Command Service 280

Figure 171: Configuring AAA Accounting Service for Exec Service 280

Figure 172: Displaying a Summary of Applied AAA Accounting Methods 281

Figure 173: Displaying Statistics for AAA Accounting Sessions 281

Figure 174: Configuring AAA Authorization Methods 283

Figure 175: Showing AAA Authorization Methods 283

Figure 176: Configuring AAA Authorization Methods for Exec Service 284

Figure 177: Displaying the Applied AAA Authorization Method 284

Figure 178: Configuring User Accounts 286

Figure 179: Showing User Accounts 286

Figure 180: Configuring Global Settings for Web Authentication 288

Figure 181: Configuring Interface Settings for Web Authentication 289

Figure 182: Configuring Global Settings for Network Access 292

Figure 183: Configuring Interface Settings for Network Access 294

Figure 184: Configuring Link Detection for Network Access 295

Figure 185: Configuring a MAC Address Filter for Network Access 296

Figure 186: Showing the MAC Address Filter Table for Network Access 297

Figure 187: Showing Addresses Authenticated for Network Access 298

Figure 188: Configuring HTTPS 300

Figure 189: Downloading the Secure-Site Certificate 302

Figure 190: Configuring the SSH Server 305

Figure 191: Generating the SSH Host Key Pair 306

Figure 192: Showing the SSH Host Key Pair 307

Figure 193: Copying the SSH User’s Public Key 308

Figure 194: Showing the SSH User’s Public Key 309

Figure 195: Setting the Name of a Time Range 311

Figure 196: Showing a List of Time Ranges 312

Figure 197: Add a Rule to a Time Range 312

Figure 198: Showing the Rules Configured for a Time Range 313

Figure 199: Showing TCAM Utilization 314

Figure 200: Creating an ACL 315

Figure 201: Showing a List of ACLs 315

Figure 202: Configuring a Standard IPv4 ACL 317

Figure 203: Configuring an Extended IPv4 ACL 319

Figure 204: Configuring a Standard IPv6 ACL 320

– 22 –

Figures

Figure 205: Configuring an Extended IPv6 ACL 322

Figure 206: Configuring a MAC ACL 324

Figure 207: Configuring a ARP ACL 326

Figure 208: Binding a Port to an ACL 327

Figure 209: Configuring ACL Mirroring 328

Figure 210: Showing the VLANs to Mirror 329

Figure 211: Showing ACL Statistics 330

Figure 212: Configuring Global Settings for ARP Inspection 333

Figure 213: Configuring VLAN Settings for ARP Inspection 334

Figure 214: Configuring Interface Settings for ARP Inspection 335

Figure 215: Displaying Statistics for ARP Inspection 337

Figure 216: Displaying the ARP Inspection Log 338

Figure 217: Creating an IP Address Filter for Management Access 339

Figure 218: Showing IP Addresses Authorized for Management Access 340

Figure 219: Configuring Port Security 342

Figure 220: Configuring Port Authentication 343

Figure 221: Configuring Global Settings for 802.1X Port Authentication 345

Figure 222: Configuring Interface Settings for 802.1X Port Authenticator 349

Figure 223: Configuring Interface Settings for 802.1X Port Supplicant 351

Figure 224: Showing Statistics for 802.1X Port Authenticator 353

Figure 225: Showing Statistics for 802.1X Port Supplicant 354

Figure 226: Protecting Against DoS Attacks 356

Figure 227: Setting the Filter Type for IPv4 Source Guard 359

Figure 228: Configuring Static Bindings for IPv4 Source Guard 361

Figure 229: Displaying Static Bindings for IPv4 Source Guard 361

Figure 230: Showing the IPv4 Source Guard Binding Table 363

Figure 231: Setting the Filter Type for IPv6 Source Guard 365

Figure 232: Configuring Static Bindings for IPv6 Source Guard 367

Figure 233: Displaying Static Bindings for IPv6 Source Guard 367

Figure 234: Showing the IPv6 Source Guard Binding Table 369

Figure 235: Configuring Global Settings for DHCP Snooping 373

Figure 236: Configuring DHCP Snooping on a VLAN 374

Figure 237: Configuring the Port Mode for DHCP Snooping 375

Figure 238: Displaying the Binding Table for DHCP Snooping 376

Figure 239: Configuring Settings for System Memory Logs 379

– 23 –

Figures

Figure 240: Showing Error Messages Logged to System Memory 380

Figure 241: Configuring Settings for Remote Logging of Error Messages 381

Figure 242: Configuring SMTP Alert Messages 382

Figure 243: Configuring LLDP Timing Attributes 385

Figure 244: Configuring LLDP Interface Attributes 388

Figure 245: Configuring the Civic Address for an LLDP Interface 390

Figure 246: Showing the Civic Address for an LLDP Interface 390

Figure 247: Displaying Local Device Information for LLDP (General) 393

Figure 248: Displaying Local Device Information for LLDP (Port) 394

Figure 249: Displaying Local Device Information for LLDP (Port Details) 394

Figure 250: Displaying Remote Device Information for LLDP (Port) 401

Figure 251: Displaying Remote Device Information for LLDP (Port Details) 402

Figure 252: Displaying Remote Device Information for LLDP (End Node) 403

Figure 253: Displaying LLDP Device Statistics (General) 405

Figure 254: Displaying LLDP Device Statistics (Port) 405

Figure 255: Setting a Port’s PoE Budget 408

Figure 256: Configuring Global Settings for SNMP 411

Figure 257: Configuring the Local Engine ID for SNMP 412

Figure 258: Configuring a Remote Engine ID for SNMP 413

Figure 259: Showing Remote Engine IDs for SNMP 413

Figure 260: Creating an SNMP View 414

Figure 261: Showing SNMP Views 415

Figure 262: Adding an OID Subtree to an SNMP View 415

Figure 263: Showing the OID Subtree Configured for SNMP Views 416

Figure 264: Creating an SNMP Group 420

Figure 265: Showing SNMP Groups 420

Figure 266: Setting Community Access Strings 421

Figure 267: Showing Community Access Strings 422

Figure 268: Configuring Local SNMPv3 Users 424

Figure 269: Showing Local SNMPv3 Users 424

Figure 270: Changing a Local SNMPv3 User Group 425

Figure 271: Configuring Remote SNMPv3 Users 427

Figure 272: Showing Remote SNMPv3 Users 427

Figure 273: Configuring Trap Managers (SNMPv1) 431

Figure 274: Configuring Trap Managers (SNMPv2c) 431

– 24 –

Figures

Figure 275: Configuring Trap Managers (SNMPv3) 431

Figure 276: Showing Trap Managers 432

Figure 277: Creating SNMP Notification Logs 433

Figure 278: Showing SNMP Notification Logs 434

Figure 279: Showing SNMP Statistics 435

Figure 280: Configuring an RMON Alarm 438

Figure 281: Showing Configured RMON Alarms 438

Figure 282: Configuring an RMON Event 440

Figure 283: Showing Configured RMON Events 441

Figure 284: Configuring an RMON History Sample 442

Figure 285: Showing Configured RMON History Samples 443

Figure 286: Showing Collected RMON History Samples 443

Figure 287: Configuring an RMON Statistical Sample 445

Figure 288: Showing Configured RMON Statistical Samples 445

Figure 289: Showing Collected RMON Statistical Samples 446

Figure 290: Configuring a Switch Cluster 448

Figure 291: Configuring a Cluster Members 449

Figure 292: Showing Cluster Members 449

Figure 293: Showing Cluster Candidates 450

Figure 294: Managing a Cluster Member 451

Figure 295: ERPS Ring Components 452

Figure 296: Ring Interconnection Architecture (Multi-ring/Ladder Network) 454

Figure 297: Setting ERPS Global Status 456

Figure 298: Sub-ring with Virtual Channel 465

Figure 299: Sub-ring without Virtual Channel 466

Figure 300: Non-ERPS Device Protection 467

Figure 301: Creating an ERPS Ring 470

Figure 302: Creating an ERPS Ring 471

Figure 303: Showing Configured ERPS Rings 471

Figure 304: Blocking an ERPS Ring Port 476

Figure 305: Single CFM Maintenance Domain 477

Figure 306: Multiple CFM Maintenance Domains 478

Figure 307: Configuring Global Settings for CFM 482

Figure 308: Configuring Interfaces for CFM 483

Figure 309: Configuring Maintenance Domains 487

– 25 –

Figures

Figure 310: Showing Maintenance Domains 487

Figure 311: Configuring Detailed Settings for Maintenance Domains 488

Figure 312: Creating Maintenance Associations 491

Figure 313: Showing Maintenance Associations 491

Figure 314: Configuring Detailed Settings for Maintenance Associations 492

Figure 315: Configuring Maintenance End Points 493

Figure 316: Showing Maintenance End Points 494

Figure 317: Configuring Remote Maintenance End Points 495

Figure 318: Showing Remote Maintenance End Points 496

Figure 319: Transmitting Link Trace Messages 498

Figure 320: Transmitting Loopback Messages 499

Figure 321: Transmitting Delay-Measure Messages 501

Figure 322: Showing Information on Local MEPs 502

Figure 323: Showing Detailed Information on Local MEPs 504

Figure 324: Showing Information on Local MIPs 505

Figure 325: Showing Information on Remote MEPs 506

Figure 326: Showing Detailed Information on Remote MEPs 508

Figure 327: Showing the Link Trace Cache 510

Figure 328: Showing Settings for the Fault Notification Generator 511

Figure 329: Showing Continuity Check Errors 512

Figure 330: Enabling OAM for Local Ports 515

Figure 331: Displaying Statistics for OAM Messages 516

Figure 332: Displaying the OAM Event Log 517

Figure 333: Displaying Status of Remote Interfaces 518

Figure 334: Running a Remote Loop Back Test 520

Figure 335: Displaying the Results of Remote Loop Back Testing 521

Figure 336: Configuring UDLD Protocol Intervals 523

Figure 337: Configuring UDLD Interface Settings 525

Figure 338: Displaying UDLD Neighbor Information 526

Figure 339: Multicast Filtering Concept 528

Figure 340: Configuring General Settings for IGMP Snooping 534

Figure 341: Configuring a Static Interface for a Multicast Router 535

Figure 342: Showing Static Interfaces Attached a Multicast Router 536

Figure 343: Showing Current Interfaces Attached a Multicast Router 536

Figure 344: Assigning an Interface to a Multicast Service 537

– 26 –

Figures

Figure 345: Showing Static Interfaces Assigned to a Multicast Service 538

Figure 346: Showing Current Interfaces Attached a Multicast Router 538

Figure 347: Configuring IGMP Snooping on a VLAN 544

Figure 348: Showing Interface Settings for IGMP Snooping 544

Figure 349: Dropping IGMP Query or Multicast Data Packets 545

Figure 350: Showing Multicast Groups Learned by IGMP Snooping 546

Figure 351: Displaying IGMP Snooping Statistics – Query 549

Figure 352: Displaying IGMP Snooping Statistics – VLAN 550

Figure 353: Displaying IGMP Snooping Statistics – Port 550

Figure 354: Enabling IGMP Filtering and Throttling 552

Figure 355: Creating an IGMP Filtering Profile 553

Figure 356: Showing the IGMP Filtering Profiles Created 553

Figure 357: Adding Multicast Groups to an IGMP Filtering Profile 554

Figure 358: Showing the Groups Assigned to an IGMP Filtering Profile 554

Figure 359: Configuring IGMP Filtering and Throttling Interface Settings 556

Figure 360: Configuring General Settings for MLD Snooping 558

Figure 361: Configuring Immediate Leave for MLD Snooping 559

Figure 362: Configuring a Static Interface for an IPv6 Multicast Router 560

Figure 363: Showing Static Interfaces Attached an IPv6 Multicast Router 560

Figure 364: Showing Current Interfaces Attached an IPv6 Multicast Router 560

Figure 365: Assigning an Interface to an IPv6 Multicast Service 562

Figure 366: Showing Static Interfaces Assigned to an IPv6 Multicast Service 562

Figure 367: Showing Current Interfaces Assigned to an IPv6 Multicast Service 563

Figure 368: Showing IPv6 Multicast Services and Corresponding Sources 564

Figure 369: MVR Concept 565

Figure 370: Configuring Global Settings for MVR 567

Figure 371: Configuring Domain Settings for MVR 569

Figure 372: Configuring an MVR Group Address Profile 570

Figure 373: Displaying MVR Group Address Profiles 570

Figure 374: Assigning an MVR Group Address Profile to a Domain 571

Figure 375: Showing the MVR Group Address Profiles Assigned to a Domain 571

Figure 376: Configuring Interface Settings for MVR 574

Figure 377: Assigning Static MVR Groups to an Interface 575

Figure 378: Showing the Static MVR Groups Assigned to a Port 576

Figure 379: Displaying MVR Receiver Groups 577

– 27 –

Figures

Figure 380: Displaying MVR Statistics – Query 579

Figure 381: Displaying MVR Statistics – VLAN 580

Figure 382: Displaying MVR Statistics – Port 581

Figure 383: Configuring Global Settings for MVR6 584

Figure 384: Configuring Domain Settings for MVR6 585

Figure 385: Configuring an MVR6 Group Address Profile 587

Figure 386: Displaying MVR6 Group Address Profiles 587

Figure 387: Assigning an MVR6 Group Address Profile to a Domain 588

Figure 388: Showing MVR6 Group Address Profiles Assigned to a Domain 588

Figure 389: Configuring Interface Settings for MVR6 590

Figure 390: Assigning Static MVR6 Groups to a Port 591

Figure 391: Showing the Static MVR6 Groups Assigned to a Port 592

Figure 392: Displaying MVR6 Receiver Groups 593

Figure 393: Displaying MVR6 Statistics – Query 595

Figure 394: Displaying MVR6 Statistics – VLAN 596

Figure 395: Displaying MVR6 Statistics – Port 597

Figure 396: Configuring a Static IPv4 Address 601

Figure 397: Configuring a Dynamic IPv4 Address 602

Figure 398: Showing the Configured IPv4 Address for an Interface 603

Figure 399: Configuring the IPv6 Default Gateway 604

Figure 400: Configuring General Settings for an IPv6 Interface 609

Figure 401: Configuring RA Guard for an IPv6 Interface 610

Figure 402: Configuring an IPv6 Address 612

Figure 403: Showing Configured IPv6 Addresses 614

Figure 404: Showing IPv6 Neighbors 615

Figure 405: Showing IPv6 Statistics (IPv6) 619

Figure 406: Showing IPv6 Statistics (ICMPv6) 620

Figure 407: Showing IPv6 Statistics (UDP) 620

Figure 408: Showing Reported MTU Values 621

Figure 409: Configuring General Settings for DNS 624

Figure 410: Configuring a List of Domain Names for DNS 625

Figure 411: Showing the List of Domain Names for DNS 625

Figure 412: Configuring a List of Name Servers for DNS 626

Figure 413: Showing the List of Name Servers for DNS 627

Figure 414: Configuring Static Entries in the DNS Table 627

– 28 –

Figures

Figure 415: Showing Static Entries in the DNS Table 628

Figure 416: Showing Entries in the DNS Cache 629

Figure 417: Specifying a DHCP Client Identifier 631

Figure 418: Layer 3 DHCP Relay Service 631

Figure 419: Configuring DHCP Relay Service 632

Figure 420: Configuring Global Settings for PPPoE Intermediate Agent 633

Figure 421: Configuring Interface Settings for PPPoE Intermediate Agent 635

Figure 422: Showing PPPoE Intermediate Agent Statistics 636

Figure 423: Virtual Interfaces and Layer 3 Routing 638

Figure 424: Pinging a Network Device 642

Figure 425: Tracing the Route to a Network Device 643

Figure 426: Proxy ARP 645

Figure 427: Configuring General Settings for ARP 646

Figure 428: Configuring Static ARP Entries 647

Figure 429: Displaying Static ARP Entries 647

Figure 430: Displaying ARP Entries 648

Figure 431: Displaying ARP Statistics 649

Figure 432: Configuring Static Routes 650

Figure 433: Displaying Static Routes 650

Figure 434: Displaying the Routing Table 652

Figure 435: Configuring RIP 654

Figure 436: Configuring General Settings for RIP 658

Figure 437: Clearing Entries from the Routing Table 659

Figure 438: Adding Network Interfaces to RIP 660

Figure 439: Showing Network Interfaces Using RIP 661

Figure 440: Specifying a Passive RIP Interface 662

Figure 441: Showing Passive RIP Interfaces 662

Figure 442: Specifying a Static RIP Neighbor 663

Figure 443: Showing Static RIP Neighbors 663

Figure 444: Redistributing External Routes into RIP 664

Figure 445: Showing External Routes Redistributed into RIP 665

Figure 446: Setting the Distance Assigned to External Routes 666

Figure 447: Showing the Distance Assigned to External Routes 666

Figure 448: Configuring a Network Interface for RIP 669

Figure 449: Showing RIP Network Interface Settings 670

– 29 –

Figures

Figure 450: Showing RIP Interface Settings 670

Figure 451: Showing RIP Peer Information 671

Figure 452: Resetting RIP Statistics 672

– 30 –

Tables

Table 1: Key Features 35

Table 2: System Defaults 43

Table 3: Web Page Configuration Buttons 51

Table 4: Switch Main Menu 52

Table 5: Predefined Summer-Time Parameters 94

Table 6: Port Statistics 119

Table 7: LACP Port Counters 138

Table 8: LACP Internal Configuration Information 139

Table 9: LACP Remote Device Configuration Information 141

Table 10: Traffic Segmentation Forwarding 147

Table 11: Recommended STA Path Cost Range 208

Table 12: Default STA Path Costs 209

Table 13: IEEE 802.1p Egress Queue Priority Mapping 235

Table 14: CoS Priority Levels 236

Table 15: Mapping Internal Per-hop Behavior to Hardware Queues 236

Table 16: Default Mapping of DSCP Values to Internal PHB/Drop Values 240

Table 17: Default Mapping of CoS/CFI to Internal PHB/Drop Precedence 242

Table 18: Dynamic QoS Profiles 290

Table 19: HTTPS System Support 299

Table 20: ARP Inspection Statistics 336

Table 21: ARP Inspection Log 337

Table 22: 802.1X Statistics 352

Table 23: Logging Levels 378

Table 24: LLDP MED Location CA Types 389

Table 25: Chassis ID Subtype 391

Table 26: System Capabilities 391

Table 27: Port ID Subtype 392

Table 28: Remote Port Auto-Negotiation Advertised Capability 396

Table 29: SNMPv3 Security Models and Levels 409

– 31 –

Tabl es

Table 30: Supported Notification Messages 417

Table 31: ERPS Request/State Priority 473

Table 32: Remote MEP Priority Levels 485

Table 33: MEP Defect Descriptions 485

Table 34: OAM Operation State 513

Table 35: Remote Loopback Status 519

Table 36: Show IPv6 Neighbors - display description 614

Table 37: Show IPv6 Statistics - display description 616

Table 38: Show MTU - display description 621

Table 39: Options 60, 66 and 67 Statements 629

Table 40: Options 55 and 124 Statements 630

Table 41: Address Resolution Protocol 644

Table 42: ARP Statistics 648

Table 43: Troubleshooting Chart 681

– 32 –

Section I

Getting Started

This section provides an overview of the switch, and introduces some basic
concepts about network switches. It also describes the basic settings required to
access the management interface.

This section includes these chapters:

◆ "Introduction" on page 35

– 33 –

Section I

| Getting Started

– 34 –

1 Introduction

This switch provides a broad range of features for Layer 2 switching and Layer 3

routing. It includes a management agent that allows you to configure the features
listed in this manual. The default configuration can be used for most of the features
provided by this switch. However, there are many options that you should
configure to maximize the switch’s performance for your particular network
environment.

Key Features

Table 1: Key Features

Feature Description

Configuration Backup and
Restore

Authentication Console, Telnet, web – user name/password, RADIUS, TACACS+

General Security Measures AAA

Access Control Lists Supports up to 512 ACLs, 2048 rules per ACL, and 2048 rules per system

DHCP/DHCPv6 Client, Relay, Relay Option 82

DNS Client and Proxy service

Port Configuration Speed, duplex mode, and flow control

Port Trunking Supports up to 16 trunks per switch (32 per stack) – static or dynamic

Using management station or FTP/TFTP server

Port – IEEE 802.1X, MAC address filtering
SNMP v1/2c - Community strings
SNMP version 3 – MD5 or SHA password
Telnet – SSH
Web – HTTPS

ARP Inspection
DHCP Snooping (with Option 82 relay information)
DoS Protection
IP Source Guard
PPPoE Intermediate Agent
Port Authentication – IEEE 802.1X
Port Security – MAC address filtering

trunking (LACP)

Port Mirroring 27 sessions, across switch or stack, one or more source ports to one

Congestion Control Rate Limiting

analysis port

Throttling for broadcast, multicast, unknown unicast storms

– 35 –

Chapter 1

Key Features

| Introduction

Table 1: Key Features (Continued)

Feature Description

Address Table 16K MAC addresses in the forwarding table,

IP Version 4 and 6 Supports IPv4 and IPv6 addressing and management

IEEE 802.1D Bridge Supports dynamic data switching and addresses learning

Store-and-Forward
Switching

Spanning Tree Algorithm Supports standard STP, Rapid Spanning Tree Protocol (RSTP), and

Virtual LANs Up to 4093 using IEEE 802.1Q, port-based, protocol-based, voice VLANs,

Traffic Prioritization Default port priority, traffic class map, queue scheduling, IP Precedence,

Qualify of Service Supports Differentiated Services (DiffServ)

Link Layer Discovery
Protocol

Switch Clustering Supports up to 36 member switches in a cluster

Connectivity Fault
Management

1K static MAC addresses;
1760 entries in the ARP cache, 256 static ARP entries;
256 static IP routes, 32 IP interfaces;
2K IPv4 entries in the host table;
1K IPv4 entries in routing table,
1K L2 multicast groups (shared with MAC table)

Supported to ensure wire-speed switching while eliminating bad
frames

Multiple Spanning Trees (MSTP)

and QinQ tunnel

or Differentiated Services Code Point (DSCP)

Used to discover basic information about neighboring devices

Connectivity monitoring using continuity check messages, fault
verification through loop back messages, and fault isolation by
examining end-to-end connections (IEEE 802.1ag)

ERPS Supports Ethernet Ring Protection Switching for increased availability

IP Routing Routing Information Protocol (RIP), and static routes

ARP Static and dynamic address configuration, proxy ARP

Multicast Filtering Supports IGMP snooping and query for Layer 2, and Multicast VLAN

Remote Device
Management

of Ethernet rings (G.8032)

Registration

Supports Ethernet OAM functions for attached CPEs
(IEEE 802.3ah, ITU-T Y.1731)

– 36 –

Description of Software Features

The switch provides a wide range of advanced performance enhancing features.
Flow control eliminates the loss of packets due to bottlenecks caused by port
saturation. Storm suppression prevents broadcast, multicast, and unknown unicast
traffic storms from engulfing the network. Untagged (port-based), tagged, and
protocol-based VLANs, plus support for automatic GVRP VLAN registration provide
traffic security and efficient use of network bandwidth. CoS priority queueing
ensures the minimum delay for moving real-time multimedia data across the
network. While multicast filtering and routing provides support for real-time
network applications.

Some of the management features are briefly described below.

Chapter 1

Description of Software Features

| Introduction

Configuration Backup

and Restore

Authentication This switch authenticates management access via the console port, Telnet, or a web

You can save the current configuration settings to a file on the management station
(using the web interface) or an FTP/TFTP server (using the web or console
interface), and later download this file to restore the switch configuration settings.

browser. User names and passwords can be configured locally or can be verified via
a remote authentication server (i.e., RADIUS or TACACS+). Port-based
authentication is also supported via the IEEE 802.1X protocol. This protocol uses
Extensible Authentication Protocol over LANs (EAPOL) to request user credentials
from the 802.1X client, and then uses the EAP between the switch and the
authentication server to verify the client’s right to access the network via an
authentication server (i.e., RADIUS or TACACS+ server).

Other authentication options include HTTPS for secure management access via the
web, SSH for secure management access over a Telnet-equivalent connection,
SNMP Version 3, IP address filtering for SNMP/Telnet/web management access.
MAC address filtering and IP source guard also provide authenticated port access.
While DHCP snooping is provided to prevent malicious attacks from insecure ports.
While PPPoE Intermediate Agent supports authentication of a client for a service
provider.

Access Control Lists ACLs provide packet filtering for IP frames (based on address, protocol, TCP/UDP

port number or TCP control code) or any frames (based on MAC address or Ethernet
type). ACLs can be used to improve performance by blocking unnecessary network
traffic or to implement security controls by restricting access to specific network
resources or protocols.

DHCP Relay DHCP Relay is supported to allow dynamic configuration of local clients from a

DHCP server located in a different network. And DHCP Relay Option 82 controls the
processing of Option 82 information in DHCP request packets relayed by this
device.

– 37 –

Chapter 1

Description of Software Features

| Introduction

Port Configuration You can manually configure the speed, duplex mode, and flow control used on

specific ports, or use auto-negotiation to detect the connection settings used by
the attached device. Use full-duplex mode on ports whenever possible to double
the throughput of switch connections. Flow control should also be enabled to
control network traffic during periods of congestion and prevent the loss of
packets when port buffer thresholds are exceeded. The switch supports flow
control based on the IEEE 802.3x standard (now incorporated in IEEE 802.3-2002).

Rate Limiting This feature controls the maximum rate for traffic transmitted or received on an

interface. Rate limiting is configured on interfaces at the edge of a network to limit
traffic into or out of the network. Packets that exceed the acceptable amount of
traffic are dropped.

Port Mirroring The switch can unobtrusively mirror traffic from any port to a monitor port. You can

then attach a protocol analyzer or RMON probe to this port to perform traffic
analysis and verify connection integrity.

Port Trunking Ports can be combined into an aggregate connection. Trunks can be manually set

up or dynamically configured using Link Aggregation Control Protocol (LACP – IEEE

802.3-2005). The additional ports dramatically increase the throughput across any
connection, and provide redundancy by taking over the load if a port in the trunk
should fail. The switch supports up to 16 trunks per switch and 32 per stack.

Storm Control Broadcast, multicast and unknown unicast storm suppression prevents traffic from

overwhelming the network.When enabled on a port, the level of traffic passing
through the port is restricted. If traffic rises above a pre-defined threshold, it will be
throttled until the level falls back beneath the threshold.

Static MAC Addresses A static address can be assigned to a specific interface on this switch. Static

addresses are bound to the assigned interface and will not be moved. When a static
address is seen on another interface, the address will be ignored and will not be
written to the address table. Static addresses can be used to provide network
security by restricting access for a known host to a specific port.

IP Address Filtering Access to insecure ports can be controlled using DHCP Snooping which filters

ingress traffic based on static IP addresses and addresses stored in the DHCP
Snooping table. Traffic can also be restricted to specific source IP addresses or
source IP/MAC address pairs based on static entries or entries stored in the DHCP
Snooping table.

– 38 –

Chapter 1

Description of Software Features

| Introduction

IEEE 802.1D Bridge The switch supports IEEE 802.1D transparent bridging. The address table facilitates

data switching by learning addresses, and then filtering or forwarding traffic based
on this information. The address table supports up to 16K addresses.

Store-and-Forward

Switching

Spanning Tree

Algorithm

The switch copies each frame into its memory before forwarding them to another
port. This ensures that all frames are a standard Ethernet size and have been
verified for accuracy with the cyclic redundancy check (CRC). This prevents bad
frames from entering the network and wasting bandwidth.

To avoid dropping frames on congested ports, the switch provides 12 Mbits for
frame buffering. This buffer can queue packets awaiting transmission on congested
networks.

The switch supports these spanning tree protocols:

◆ Spanning Tree Protocol (STP, IEEE 802.1D) – This protocol provides loop

detection. When there are multiple physical paths between segments, this
protocol will choose a single path and disable all others to ensure that only one
route exists between any two stations on the network. This prevents the
creation of network loops. However, if the chosen path should fail for any
reason, an alternate path will be activated to maintain the connection.

◆ Rapid Spanning Tree Protocol (RSTP, IEEE 802.1w) – This protocol reduces the

convergence time for network topology changes to about 3 to 5 seconds,
compared to 30 seconds or more for the older IEEE 802.1D STP standard. It is
intended as a complete replacement for STP, but can still interoperate with
switches running the older standard by automatically reconfiguring ports to
STP-compliant mode if they detect STP protocol messages from attached
devices.

◆ Multiple Spanning Tree Protocol (MSTP, IEEE 802.1s) – This protocol is a direct

extension of RSTP. It can provide an independent spanning tree for different
VLANs. It simplifies network management, provides for even faster
convergence than RSTP by limiting the size of each region, and prevents VLAN
members from being segmented from the rest of the group (as sometimes
occurs with IEEE 802.1D STP).

Connectivity Fault

Management

The switch provides connectivity fault monitoring for end-to-end connections
within a designated service area by using continuity check messages which can
detect faults in maintenance points, fault verification through loop back messages,
and fault isolation with link trace messages.

Virtual LANs The switch supports up to 4094 VLANs. A Virtual LAN is a collection of network

nodes that share the same collision domain regardless of their physical location or
connection point in the network. The switch supports tagged VLANs based on the
IEEE 802.1Q standard. Members of VLAN groups can be dynamically learned via

– 39 –

Chapter 1

Description of Software Features

| Introduction

GVRP, or ports can be manually assigned to a specific set of VLANs. This allows the
switch to restrict traffic to the VLAN groups to which a user has been assigned. By
segmenting your network into VLANs, you can:

◆ Eliminate broadcast storms which severely degrade performance in a flat

◆ Simplify network management for node changes/moves by remotely

◆ Provide data security by restricting all traffic to the originating VLAN, except

◆ Use private VLANs to restrict traffic to pass only between data ports and the

◆ Use protocol VLANs to restrict traffic to specified interfaces based on protocol

network.

configuring VLAN membership for any port, rather than having to manually
change the network connection.

where a connection is explicitly defined via the switch's routing service.

uplink ports, thereby isolating adjacent ports within the same VLAN, and
allowing you to limit the total number of VLANs that need to be configured.

type.

IEEE 802.1Q Tunneling

(QinQ)

This feature is designed for service providers carrying traffic for multiple customers
across their networks. QinQ tunneling is used to maintain customer-specific VLAN
and Layer 2 protocol configurations even when different customers use the same
internal VLAN IDs. This is accomplished by inserting Service Provider VLAN
(SPVLAN) tags into the customer’s frames when they enter the service provider’s
network, and then stripping the tags when the frames leave the network.

Traffic Prioritization This switch prioritizes each packet based on the required level of service, using

eight priority queues with strict priority, Weighted Round Robin (WRR) scheduling,
or a combination of strict and weighted queuing. It uses IEEE 802.1p and 802.1Q
tags to prioritize incoming traffic based on input from the end-station application.
These functions can
data and best-effort data.

be used to provide independent priorities for delay-sensitive

This switch also supports several common methods of prioritizing layer 3/4 traffic
to meet application requirements. Traffic can be prioritized based on the priority
bits in the IP frame’s Type of Service (ToS) octet using DSCP, or IP Precedence. When
these services are enabled, the priorities are mapped to a Class of Service value by
the switch, and the traffic then sent to the corresponding output queue.

Quality of Service Differentiated Services (DiffServ) provides policy-based management mechanisms

used for prioritizing network resources to meet the requirements of specific traffic
types on a per-hop basis. Each packet is classified upon entry into the network
based on access lists, IP Precedence or DSCP values, or VLAN lists. Using access lists

– 40 –

Chapter 1

Description of Software Features

allows you select traffic based on Layer 2, Layer 3, or Layer 4 information contained
in each packet. Based on network policies, different kinds of traffic can be marked
for different kinds of forwarding.

| Introduction

Ethernet Ring

Protection Switching

IP Routing The switch provides Layer 3 IP routing. To maintain a high rate of throughput, the

ERPS can be used to increase the availability and robustness of Ethernet rings, such
as those used in Metropolitan Area Networks (MAN). ERPS provides Layer 2 loop
avoidance and fast reconvergence in Layer 2 ring topologies, supporting up to 255
nodes in the ring structure. It can also function with IEEE 802.1ag to support link
monitoring when non-participating devices exist within the Ethernet ring.

switch forwards all traffic passing within the same segment, and routes only traffic
that passes between different subnetworks. The wire-speed routing provided by
this switch lets you easily link network segments or VLANs together without having
to deal with the bottlenecks or configuration hassles normally associated with
conventional routers.

Routing for unicast traffic is supported with static routing, and Routing Information
Protocol (RIP).

Static Routing – Traffic is automatically routed between any IP interfaces
configured on the switch. Routing to statically configured hosts or subnet
addresses is provided based on next-hop entries specified in the static routing
table.

RIP – This protocol uses a distance-vector approach to routing. Routes are
determined on the basis of minimizing the distance vector, or hop count, which
serves as a rough estimate of transmission cost.

OSPF – This approach uses a link state routing protocol to generate a shortest-path
tree, then builds up its routing table based on this tree. OSPF produces a more
stable network because the participating routers act on network changes
predictably and simultaneously, converging on the best route more quickly than
RIP.BGP – This protocol uses a path vector approach to connect autonomous
systems (AS) on the Internet. BGP maintains a table of IP network prefixes which
designate network reachability among autonomous systems based the path of ASs
to the destination, and next hop information. It makes routing decisions based on
path, network policies and/or rule sets. For this reason, it is more appropriately
termed a reachability protocol rather than a routing protocol.

Policy-based Routing for BGP – The next-hop behavior for ingress IP traffic can be
determined based on matching criteria.

– 41 –

Chapter 1

Description of Software Features

| Introduction

Equal-cost Multipath

Load Balancing

Address Resolution

Protocol

When multiple paths to the same destination and with the same path cost are
found in the routing table, the Equal-cost Multipath (ECMP) algorithm first checks if
the cost is lower than that of any other routing entries. If the cost is the lowest in
the table, the switch will use up to eight paths having the lowest path cost to
balance traffic forwarded to the destination. ECMP uses either equal-cost unicast
multipaths manually configured in the static routing table, or equal-cost multipaths
dynamically detected by the Open Shortest Path Algorithm (OSPF). In other words,
it uses either static or entries, not both.

Router RedundancyVirtual Router Redundancy Protocol (VRRP) uses a virtual IP

address to support a primary router and multiple backup routers. The backups can
be configured to take over the workload if the master fails or to load share the
traffic. The primary goal of this protocol is to allow a host device which has been
configured with a fixed gateway to maintain network connectivity in case the
primary gateway goes down.

The switch uses ARP and Proxy ARP to convert between IP addresses and MAC
(hardware) addresses. This switch supports conventional ARP, which locates the
MAC address corresponding to a given IP address. This allows the switch to use IP
addresses for routing decisions and the corresponding MAC addresses to forward
packets from one hop to the next. Either static or dynamic entries can be
configured in the ARP cache.

Proxy ARP allows hosts that do not support routing to determine the MAC address
of a device on another network or subnet. When a host sends an ARP request for a
remote network, the switch checks to see if it has the best route. If it does, it sends
its own MAC address to the host. The host then sends traffic for the remote
destination via the switch, which uses its own routing table to reach the destination
on the other network.

Operation,

Administration,

and Maintenance

The switch provides OAM remote management tools required to monitor and
maintain the links to subscriber CPEs (Customer Premise Equipment). This section
describes functions including enabling OAM for selected ports, loopback testing,
and displaying remote device information.

Multicast Filtering Specific multicast traffic can be assigned to its own VLAN to ensure that it does not

interfere with normal network traffic and to guarantee real-time delivery by setting
the required priority level for the designated VLAN. The switch uses IGMP Snooping
and Query for IPv4 and MLD Snooping and Query for IPv6 to manage multicast
group registration. It also supports Multicast VLAN Registration (MVR for IPv4 and
MVR6 for IPv6) which allows common multicast traffic, such as television channels,
to be transmitted across a single network-wide multicast VLAN shared by hosts
residing in other standard or private VLAN groups, while preserving security and
data isolation for normal traffic.

– 42 –

Chapter 1

| Introduction

System Defaults

Link Layer Discovery

Protocol

System Defaults

LLDP is used to discover basic information about neighboring devices within the
local broadcast domain. LLDP is a Layer 2 protocol that advertises information
about the sending device and collects information gathered from neighboring
network nodes it discovers.

Advertised information is represented in Type Length Value (TLV) format according
to the IEEE 802.1ab standard, and can include details such as device identification,
capabilities and configuration settings. Media Endpoint Discovery (LLDP-MED) is an
extension of LLDP intended for managing endpoint devices such as Voice over IP
phones and network switches. The LLDP-MED TLVs advertise information such as
network policy, power, inventory, and device location details. The LLDP and LLDP­MED information can be used by SNMP applications to simplify troubleshooting,
enhance network management, and maintain an accurate network topology.

The switch’s system defaults are provided in the configuration file
“Factory_Default_Config.cfg.” To reset the switch defaults, this file should be set as
the startup configuration file.

The following table lists some of the basic system defaults.

Table 2: System Defaults

Function Parameter Default

Console Port Connection Baud Rate 115200 bps

Data bits 8

Stop bits 1

Parity none

Local Console Timeout 600 seconds

– 43 –

Chapter 1

| Introduction

System Defaults

Table 2: System Defaults (Continued)

Function Parameter Default

Authentication and
Security Measures

Privileged Exec Level Username “admin”

Normal Exec Level Username “guest”

Enable Privileged Exec from
Normal Exec Level

RADIUS Authentication Disabled

TACACS+ Authentication Disabled

802.1X Port Authentication Disabled

Web Authentication Disabled

MAC Authentication Disabled

PPPoE Intermediate Agent Disabled

HTTPS Enabled

SSH Disabled

Port Security Disabled

IP Filtering Disabled

DHCP Snooping Disabled

IP Source Guard Disabled (all ports)

Password “admin”

Password “guest”

Password “super”

Web Management HTTP Server Enabled

HTTP Port Number 80

HTTP Secure Server Enabled

HTTP Secure Server Port 443

SNMP SNMP Agent Enabled

Community Strings “public” (read only)

Traps Authentication traps: enabled

SNMP V3 View: defaultview

Port Configuration Admin Status Enabled

Auto-negotiation Enabled

Flow Control Disabled

Por t Trunk ing Static Trunks None

LACP (all ports) Disabled

“private” (read/write)

Link-up-down events: enabled

Group: public (read only); private
(read/write)

– 44 –

Chapter 1

Table 2: System Defaults (Continued)

Function Parameter Default

Congestion Control Rate Limiting Disabled

| Introduction

System Defaults

Storm Control Broadcast: Enabled

Auto Traffic Control Disabled

Address Table Aging Time 300 seconds

Spanning Tree Algorithm Status Enabled, RSTP

Edge Ports Disabled

LLDP Status Enabled

ERPS Status Disabled

CFM Status Enabled

OAM Status Disabled

Virtual LANs Default VLAN 1

PVID 1

Acceptable Frame Type All

Ingress Filtering Disabled

Switchport Mode (Egress Mode) Hybrid

(64 kbits/sec)
Multicast: Disabled
Unknown Unicast: Disabled

(Defaults: RSTP standard)

GVRP (global) Disabled

GVRP (port interface) Disabled

QinQ Tunneling Disabled

Traffic Prioritization Ingress Port Priority 0

Queue Mode WRR

Queue Weight Queue: 0 1 2 3 4 5 6 7

Weight: 1 2 4 6 8 10 12 14

Class of Service Enabled

IP Precedence Priority Disabled

IP DSCP Priority Disabled

IP Settings Management. VLAN VLAN 1

IP Address DHCP assigned

Subnet Mask 255.255.255.0

Default Gateway Not configured

DHCP Client: Enabled

DNS Proxy service: Disabled

BOOTP Disabled

– 45 –

Chapter 1

| Introduction

System Defaults

Table 2: System Defaults (Continued)

Function Parameter Default

ARP Enabled

Cache Timeout: 20 minutes
Proxy: Disabled

Unicast Routing RIP Disabled

OSPF Disabled

Multicast Filtering IGMP Snooping (Layer 2) Snooping: Enabled

Querier: Disabled

MLD Snooping (Layer 2 IPv6) Snooping: Enabled

Querier: Disabled

Multicast VLAN Registration Disabled

IGMP Proxy Reporting Disabled

IGMP (Layer 3)
IGMP Proxy (Layer 3)

System Log Status Enabled

Messages Logged to RAM Levels 0-7 (all)

Messages Logged to Flash Levels 0-3

SMTP Email Alerts Event Handler Enabled (but no server defined)

SNTP Clock Synchronization Disabled

Switch Clustering Status Disabled

Commander Disabled

Disabled
Disabled

– 46 –

Section II

Web Configuration

This section describes the basic switch features, along with a detailed description of
how to configure each feature via a web browser.

This section includes these chapters:

◆ "Using the Web Interface" on page 49

◆ "Basic Management Tasks" on page 71

◆ "Interface Configuration" on page 107

◆ "VLAN Configuration" on page 153

◆ "Address Table Settings" on page 187

◆ "Spanning Tree Algorithm" on page 197

◆ "Congestion Control" on page 221

◆ "Class of Service" on page 231

◆ "Quality of Service" on page 245

◆ "VoIP Traffic Configuration" on page 261

◆ "Security Measures" on page 267

◆ "Basic Administration Protocols" on page 377

◆ "Multicast Filtering" on page 527

◆ "IP Configuration" on page 599

◆ "IP Services" on page 623

◆ "General IP Routing" on page 637

– 47 –

Section II

| Web Configuration

◆ "Unicast Routing" on page 653

– 48 –

2 Using the Web Interface

This switch provides an embedded HTTP web agent. Using a web browser you can
configure the switch and view statistics to monitor network activity. The web agent
can be accessed by any computer on the network using a standard web browser
(Internet Explorer 6, Mozilla Firefox 4, or Google Chrome 29, or more recent
versions).

Note:

You can also use the Command Line Interface (CLI) to manage the switch
over a serial connection to the console port or via Telnet. For more information on
using the CLI, refer to the CLI Reference Guide.

Connecting to the Web Interface

Prior to accessing the switch from a web browser, be sure you have first performed
the following tasks:

1. Configure the switch with a valid IP address, subnet mask, and default gateway

using an out-of-band serial connection, BOOTP or DHCP protocol. (See “Initial
Switch Configuration” in the CLI Reference Guide.)

2. Set user names and passwords using an out-of-band serial connection. Access

to the web agent is controlled by the same user names and passwords as the
onboard configuration program. (See “Configuring User Accounts” on

page 284.)

3. After you enter a user name and password, you will have access to the system

configuration program.

Note:

You are allowed three attempts to enter the correct password; on the third
failed attempt the current connection is terminated.

Note:

If you log into the web interface as guest (Normal Exec level), you can view
the configuration settings or change the guest password. If you log in as “admin”
(Privileged Exec level), you can change the settings on any page.

Note:

If the path between your management station and this switch does not pass
through any device that uses the Spanning Tree Algorithm, then you can set the
switch port attached to your management station to fast forwarding (i.e., enable
Admin Edge Port) to improve the switch’s response time to management

– 49 –

Chapter 2

Navigating the Web Browser Interface

| Using the Web Interface

commands issued through the web interface. See “Configuring Interface Settings

for STA” on page 207.

Note:

input is detected for 600 seconds.

Note:

link local address.

Users are automatically logged off of the HTTP server or HTTPS server if no

Connection to the web interface is not supported for HTTPS using an IPv6

Navigating the Web Browser Interface

To access the web-browser interface you must first enter a user name and
password. The administrator has Read/Write access to all configuration parameters
and statistics. The default user name and password for the administrator is “admin.”
The administrator has full access privileges to configure any parameters in the web
interface. The default user name and password for guest access is “guest.” The guest
only has read access for most configuration parameters. Refer to “Configuring User

Accounts” on page 284 for more details.

Home Page When your web browser connects with the switch’s web agent, the home page is

displayed as shown below. The home page displays the Main Menu on the left side
of the screen and System Information on the right side. The Main Menu links are
used to navigate to other menus, and display configuration parameters and
statistics.

Figure 1: Home Page

Note: This manual covers the GTL-2881 Gigabit Ethernet switch, GTL-2882 Gigabit

Ethernet Fiber switch, and GTP-5281Gigabit Ethernet PoE switch. Other than the
difference in port types, there are no significant differences (although the GTP-5281

– 50 –

Chapter 2

Navigating the Web Browser Interface

| Using the Web Interface

supports PoE). The panel graphics for both switch types are shown on the following
page.

Note:

You can open a connection to the vendor’s web site by clicking on the

LevelOne logo.

Configuration Options Configurable parameters have a dialog box or a drop-down list. Once a

configuration change has been made on a page, be sure to click on the Apply
button to confirm the new setting. The following table summarizes the web page
configuration buttons.

Table 3: Web Page Configuration Buttons

Button Action

Apply Sets specified values to the system.

Revert Cancels specified values and restores current

values prior to pressing “Apply.”

Displays help for the selected page.

Refreshes the current page.

Displays the site map.

Logs out of the management interface.

Sends mail to the vendor.

Links to the vendor’s web site.

Panel Display The web agent displays an image of the switch’s ports. The Mode can be set to

display different information for the ports, including Active (i.e., up or down),
Duplex (i.e., half or full duplex), or Flow Control (i.e., with or without flow control).

Figure 2: Front Panel Indicators

Note:

The panel graphic shown is for the GTL-2881 switch. The panel graphics for
the GTL-2882 and GTP-5281 switches are similar, only differing in the port layout.

Note:

If stacking is enabled, stacking ports 25/26 are not displayed on the panel
graphic.

– 51 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Main Menu Using the onboard web agent, you can define system parameters, manage and

control the switch, and all its ports, or monitor network conditions. The following
table briefly describes the selections available from this program.

Table 4: Switch Main Menu

Menu Description Page

System

General Provides basic system description, including contact information 72

Switch Shows the number of ports, hardware version, power status, and

firmware version numbers

Capability Enables support for jumbo frames;

shows the bridge extension parameters

File 77

Copy Allows the transfer and copying files 77

Set Startup Sets the startup file 80

Show Shows the files stored in flash memory; allows deletion of files 81

Automatic Operation Code Upgrade Automatically upgrades operation code if a newer version is

found on the server

Time 85

Configure General

Manual Manually sets the current time 86

SNTP Configures SNTP polling interval 87

NTP Configures NTP authentication parameters 87

Configure Time Server Configures a list of SNTP servers 88

Configure SNTP Server Sets the IP address for SNTP time servers 88

Add NTP Server Adds NTP time server and index of authentication key 89

73

74,
75

81

Show NTP Server Shows list of configured NTP time servers 89

Add NTP Authentication Key Adds key index and corresponding MD5 key 91

Show NTP Authentication Key Shows list of configured authentication keys 91

Configure Time Zone Sets the local time zone for the system clock 92

Configure Summer Time Configures summer time settings 93

Console Sets console port connection parameters 95

Telnet Sets Telnet connection parameters 97

CPU Utilization Displays information on CPU utilization 98

Memory Status Shows memory utilization parameters 99

Stacking Configure stacking functions 100

Configure Master Button Set Master unit for stack 100

Configure Stacking Button Enable stacking on 10G ports 101

– 52 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Renumber Reset stack identification numbers 102

Reset Restarts the switch immediately, at a specified time, after a specified

delay, or at a periodic interval

Interface 107

Port 108

General 108

Configure by Port List Configures connection settings per port 108

Configure by Port Range Configures connection settings for a range of ports 111

Show Information Displays port connection status 111

Mirror 112

Add Sets the source and target ports for mirroring 112

Show Shows the configured mirror sessions 112

Statistics Shows Interface, Etherlike, and RMON port statistics 119

Chart Shows Interface, Etherlike, and RMON port statistics 119

Transceiver Shows identifying information and operational parameters for optical

transceivers which support Digital Diagnostic Monitoring (DDM), and
configures thresholds for alarm and warning messages for optical
transceivers which support DDM

Cable Test Performs cable diagnostics for selected port to diagnose any cable

faults (short, open etc.) and report the cable length

103

123
124

126

Trunk 128

Static 129

Configure Trunk 129

Add Creates a trunk, along with the first port member 129

Show Shows the configured trunk identifiers 129

Add Member Specifies ports to group into static trunks 129

Show Member Shows the port members for the selected trunk 129

Configure General 129

Configure Configures trunk connection settings 129

Show Information Displays trunk connection settings 129

Dynamic 132

Configure Aggregator Configures administration key and timeout for specific LACP

groups

Configure Aggregation Port 129

Configure 129

General Allows ports to dynamically join trunks 132

132

– 53 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Actor Configures parameters for link aggregation group members on the

local side

Partner Configures parameters for link aggregation group members on the

remote side

Show Information 138

Counters Displays statistics for LACP protocol messages 138

Internal Displays configuration settings and operational state for the local side

of a link aggregation

Neighbors Displays configuration settings and operational state for the remote

side of a link aggregation

Configure Trunk 132

Configure Configures connection settings 132

Show Displays port connection status 132

Show Member Shows the active members in a trunk 132

Statistics Shows Interface, Etherlike, and RMON port statistics 119

Chart Shows Interface, Etherlike, and RMON port statistics 119

Load Balance Sets the load-distribution method among ports in aggregated links 142

Green Ethernet Adjusts the power provided to ports based on the length of the cable

used to connect to other devices

132

132

139

141

144

RSPAN Mirrors traffic from remote switches for analysis at a destination port on

the local switch

Traffic Segmentation 146

Configure Global Enables traffic segmentation globally 146

Configure Session Configures the uplink and down-link ports for a segmented group of

ports

VLAN Trunking Allows unknown VLAN groups to pass through the specified interface 149

VLAN Virtual LAN 153

Static

Add Creates VLAN groups 156

Show Displays configured VLAN groups 156

Modify Configures group name and administrative status 156

Edit Member by VLAN Specifies VLAN attributes per VLAN 159

Edit Member by Interface Specifies VLAN attributes per interface 159

Edit Member by Interface Range Specifies VLAN attributes per interface range 159

Dynamic

Configure General Enables GVRP VLAN registration protocol globally 163

Configure Interface Configures GVRP status and timers per interface 163

114

147

– 54 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Show Dynamic VLAN 163

Show VLAN Shows the VLANs this switch has joined through GVRP 163

Show VLAN Member Shows the interfaces assigned to a VLAN through GVRP 163

Tunnel IEEE 802.1Q (QinQ) Tunneling 166

Configure Global Sets tunnel mode for the switch 170

Configure Service Sets a CVLAN to SPVLAN mapping entry 172

Configure Interface Sets the tunnel mode for any participating interface 173

Protocol 175

Configure Protocol 175

Add Creates a protocol group, specifying supported protocols 175

Show Shows configured protocol groups 175

Configure Interface 177

Add Maps a protocol group to a VLAN 177

Show Shows the protocol groups mapped to each VLAN 177

IP Subnet 179

Add Maps IP subnet traffic to a VLAN 179

Show Shows IP subnet to VLAN mapping 179

MAC-Based 181

Add Maps traffic with specified source MAC address to a VLAN 181

Show Shows source MAC address to VLAN mapping 181

Mirror 183

Add Mirrors traffic from one or more source VLANs to a target port 183

Show Shows mirror list 183

Translati on 185

Add Maps VLAN IDs between the customer and service provider 185

Show Displays the configuration settings for VLAN translation 185

MAC Address 187

Learning Status Enables MAC address learning on selected interfaces 187

Static 189

Add Configures static entries in the address table 189

Show Displays static entries in the address table 189

Dynamic

Configure Aging Sets timeout for dynamically learned entries 191

Show Dynamic MAC Displays dynamic entries in the address table 191

– 55 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Clear Dynamic MAC Removes any learned entries from the forwarding database and clears

the transmit and receive counts for any static or system configured
entries

Mirror Mirrors traffic matching a specified source address from any port on the

switch to a target port

MAC Notification 195

Configure Global Issues a trap when a dynamic MAC address is added or removed. 195

Configure Interface Enables MAC authentication traps on the current interface. 195

Spanning Tree 197

Loopback Detection Configures Loopback Detection parameters 199

STA Spanning Tree Algorithm

Configure Global

Configure Configures global bridge settings for STP, RSTP and MSTP 201

Show Information Displays STA values used for the bridge 206

Configure Interface

Configure Configures interface settings for STA 207

Show Information Displays interface settings for STA 212

MSTP Multiple Spanning Tree Algorithm 214

193

194

Configure Global 214

Add Configures initial VLAN and priority for an MST instance 214

Modify Configures the priority or an MST instance 214

Show Configures global settings for an MST instance 214

Add Member Adds VLAN members for an MST instance 214

Show Member Adds or deletes VLAN members for an MST instance 214

Show Information Displays MSTP values used for the bridge

Configure Interface 219

Configure Configures interface settings for an MST instance 219

Show Information Displays interface settings for an MST instance 219

Tra ffic

Rate Limit Sets the input and output rate limits for a port 221

Storm Control Sets the broadcast storm threshold for each interface 222

Auto Traffic Control Sets thresholds for broadcast and multicast storms which can be used

to trigger configured rate limits or to shut down a port

Configure Global Sets the time to apply the control response after traffic has exceeded

the upper threshold, and the time to release the control response after
traffic has fallen beneath the lower threshold

224

225

– 56 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Configure Interface Sets the storm control mode (broadcast or multicast), the traffic

thresholds, the control response, to automatically release a response of
rate limiting, or to send related SNMP trap messages

Priority

Default Priority Sets the default priority for each port or trunk 231

Queue Sets queue mode for the switch; sets the service weight for each queue

that will use a weighted or hybrid mode

Trust Mode Selects DSCP or CoS priority processing 238

DSCP to DSCP 239

Add Maps DSCP values in incoming packets to per-hop behavior and drop

precedence values for internal priority processing

Show Shows the DSCP to DSCP mapping list 239

CoS to DSCP 242

Add Maps CoS/CFI values in incoming packets to per-hop behavior and drop

precedence values for priority processing

Show Shows the CoS to DSCP mapping list 242

PHB to Queue 235

Add Maps internal per-hop behavior values to hardware queues 235

Show Shows the PHB to Queue mapping list 235

227

232

239

242

DiffServ 245

Configure Class 246

Add Creates a class map for a type of traffic 246

Show Shows configured class maps 246

Modify Modifies the name of a class map 246

Add Rule Configures the criteria used to classify ingress traffic 246

Show Rule Shows the traffic classification rules for a class map 246

Configure Policy 250

Add Creates a policy map to apply to multiple interfaces 250

Show Shows configured policy maps 250

Modify Modifies the name of a policy map 250

Add Rule Sets the boundary parameters used for monitoring inbound traffic, and

the action to take for conforming and non-conforming traffic

Show Rule Shows the rules used to enforce bandwidth policing for a policy map 250

Configure Interface Applies a policy map to an ingress port 259

VoIP Voice over IP 261

Configure Global Configures auto-detection of VoIP traffic, sets the Voice VLAN, and VLAN

aging time

250

262

– 57 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Configure OUI 263

Add Maps the OUI in the source MAC address of ingress packets to the VoIP

device manufacturer

Show Shows the OUI telephony list 263

Configure Interface Configures VoIP traffic settings for ports, including the way in which a

port is added to the Voice VLAN, filtering of non-VoIP packets, the
method of detecting VoIP traffic, and the priority assigned to the voice
traffic

Security 267

AAA Authentication, Authorization and Accounting 268

System Authentication Configures authentication sequence – local, RADIUS, and TACACS 269

Server 270

Configure Server Configures RADIUS and TACACS server message exchange settings 270

Configure Group 270

Add Specifies a group of authentication servers and sets the priority

sequence

Show Shows the authentication server groups and priority sequence 270

Accounting Enables accounting of requested services for billing or security

purposes

Configure Global Specifies the interval at which the local accounting service updates

information to the accounting server

263

264

270

275

275

Configure Method 275

Add Configures accounting for various service types 275

Show Shows the accounting settings used for various service types 275

Configure Service Sets the accounting method applied to specific interfaces for 802.1X,

CLI command privilege levels for the console port, and for Telnet

Show Information 275

Summary Shows the configured accounting methods, and the methods applied

to specific interfaces

Statistics Shows basic accounting information recorded for user sessions 275

Authorization Enables authorization of requested services 281

Configure Method 281

Add Configures authorization for various service types 281

Show Shows the authorization settings used for various service types 281

Configure Service Sets the authorization method applied used for the console port, and

for Telnet

Show Information Shows the configured authorization methods, and the methods applied

to specific interfaces

User Accounts 284

Add Configures user names, passwords, and access levels 284

275

275

281

281

– 58 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Show Shows authorized users 284

Modify Modifies user attributes 284

Web Authentication Allows authentication and access to the network when 802.1X or

Network Access authentication are infeasible or impractical

Configure Global Configures general protocol settings 287

Configure Interface Enables Web Authentication for individual ports 288

Network Access MAC address-based network access authentication 289

Configure Global Enables aging for authenticated MAC addresses, and sets the time

period after which a connected MAC address must be reauthenticated

Configure Interface 292

General Enables MAC authentication on a port; sets the maximum number of

address that can be authenticated, the guest VLAN, dynamic VLAN and
dynamic QoS

Link Detection Configures detection of changes in link status, and the response (i.e.,

send trap or shut down port)

Configure MAC Filter 295

Add Specifies MAC addresses exempt from authentication 295

Show Shows the list of exempt MAC addresses 295

Show Information Shows the authenticated MAC address list 297

HTTPS Secure HTTP 299

Configure Global Enables HTTPs, and specifies the UDP port to use 299

286

291

292

294

Copy Certificate Replaces the default secure-site certificate 300

SSH Secure Shell 302

Configure Global Configures SSH server settings 304

Configure Host Key 306

Generate Generates the host key pair (public and private) 306

Show Displays RSA and DSA host keys; deletes host keys 306

Configure User Key 307

Copy Imports user public keys from TFTP server 307

Show Displays RSA and DSA user keys; deletes user keys 307

ACL Access Control Lists 309

Configure Time Range Configures the time to apply an ACL 310

Add Specifies the name of a time range 310

Show Shows the name of configured time ranges 310

Add Rule 310

Absolute Sets exact time or time range 310

Periodic Sets a recurrent time 310

– 59 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Show Rule Shows the time specified by a rule 310

Configure ACL 314

Show TCAM Shows utilization parameters for TCAM 313

Add Adds an ACL based on IP or MAC address filtering 314

Show Shows the name and type of configured ACLs 314

Add Rule Configures packet filtering based on IP or MAC addresses and other

packet attributes

Show Rule Shows the rules specified for an ACL 314

Configure Interface Binds a port to the specified ACL and time range

Configure Binds a port to the specified ACL and time range 326

Add Mirror MIrrors matching traffic to the specified port 327

Show Mirror Shows ACLs mirrored to specified port 327

Show Hardware Counters Shows statistics for ACL hardware counters 329

ARP Inspection 330

Configure General Enables inspection globally, configures validation of additional address

components, and sets the log rate for packet inspection

Configure VLAN Enables ARP inspection on specified VLANs 333

Configure Interface Sets the trust mode for ports, and sets the rate

limit for packet inspection

Show Information 336

Show Statistics Displays statistics on the inspection process 336

Show Log Shows the inspection log list 337

IP Filter 338

314

331

335

Add Sets IP addresses of clients allowed management access via the web,

SNMP, and Telnet

Show Shows the addresses to be allowed management access 338

Port Security Configures per port security, including status, response for security

breach, and maximum allowed MAC addresses

Port Authentication IEEE 802.1X 342

Configure Global Enables authentication and EAPOL pass-through 344

Configure Interface Sets authentication parameters for individual ports 345

Show Statistics Displays protocol statistics for the selected port 352

DoS Protection Protects against Denial-of-Service attacks 354

338

340

– 60 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

IP Source Guard Filters IP traffic based on static entries in the IP Source Guard table, or

dynamic entries in the DHCP Snooping table

Port Configuration Enables IP source guard and selects filter type per port 357

Static Binding 359

Configure ACL Table 359

Add Adds static addresses to the source guard ACL binding table 359

Show Shows static addresses in the source guard ACL binding table 359

Configure MAC Table 359

Add Adds static addresses to the source guard MAC address binding table 359

Show Shows static addresses in the source guard MAC address binding table 359

Dynamic Binding Displays the source-guard binding table for a selected interface 362

IPv6 Source Guard Filters IPv6 traffic based on static entries in the IP Source Guard table, or

dynamic entries in the DHCP Snooping table

Port Configuration Enables IPv6 source guard and selects filter type per port 363

Static Binding 365

Add Adds a static addresses to the source-guard binding table 365

Show Shows static addresses in the source-guard binding table 365

Dynamic Binding Displays the source-guard binding table for a selected interface 368

357

363

Administration 377

Log 378

System 378

Configure Global Stores error messages in local memory 378

Show System Logs Shows logged error messages 378

Remote Configures the logging of messages to a remote logging process 380

SMTP Sends an SMTP client message to a participating server 381

LLDP 383

Configure Global Configures global LLDP timing parameters 383

Configure Interface 385

Configure General Sets the message transmission mode; enables SNMP notification; and

sets the LLDP attributes to advertise

Add CA-Type Specifies the physical location of the device attached to an interface 389

Show Local Device Information 391

General Displays general information about the local device 391

Port/Trunk Displays information about each interface 391

385

– 61 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Show Remote Device Information 394

Port/Trunk Displays information about a remote device connected to a port on this

switch

Port/Trunk Details Displays detailed information about a remote device connected to this

switch

Show Device Statistics 403

General Displays statistics for all connected remote devices 403

Port/Trunk Displays statistics for remote devices on a selected port or trunk 403

SNMP Simple Network Management Protocol 405

Configure Global Enables SNMP agent status, and sets related trap functions 410

Configure Engine 411

Set Engine ID Sets the SNMP v3 engine ID on this switch 411

Add Remote Engine Sets the SNMP v3 engine ID for a remote device 412

Show Remote Engine Shows configured engine ID for remote devices 412

Configure View 413

Add View Adds an SNMP v3 view of the OID MIB 413

Show View Shows configured SNMP v3 views 413

Add OID Subtree Specifies a part of the subtree for the selected view 413

Show OID Subtree Shows the subtrees assigned to each view 413

394

394

Configure Group 416

Add Adds a group with access policies for assigned users 416

Show Shows configured groups and access policies 416

Configure User

Add Community Configures community strings and access mode 421

Show Community Shows community strings and access mode 421

Add SNMPv3 Local User Configures SNMPv3 users on this switch 422

Show SNMPv3 Local User Shows SNMPv3 users configured on this switch 422

Change SNMPv3 Local User Group Assign a local user to a new group 422

Add SNMPv3 Remote User Configures SNMPv3 users from a remote device 425

Show SNMPv3 Remote User Shows SNMPv3 users set from a remote device 422

Configure Trap 428

Add Configures trap managers to receive messages on key events that occur

on this switch

Show Shows configured trap managers 428

Configure Notify Filter

Add Creates an SNMP notification log 432

428

– 62 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Show Shows the configured notification logs 432

Show Statistics Shows the status of SNMP communications 434

RMON Remote Monitoring 436

Configure Global

Add

Alarm Sets threshold bounds for a monitored variable 436

Event Creates a response event for an alarm 439

Show 436

Alarm Shows all configured alarms 436

Event Shows all configured events 439

Configure Interface

Add

History Periodically samples statistics on a physical interface 441

Statistics Enables collection of statistics on a physical interface 444

Show

History Shows sampling parameters for each entry in the history group 441

Statistics Shows sampling parameters for each entry in the statistics group 444

Show Details

History Shows sampled data for each entry in the history group 441

Statistics Shows sampled data for each entry in the history group 444

Cluster 446

Configure Global Globally enables clustering for the switch; sets Commander status 447

Configure Member Adds switch Members to the cluster 448

Show Member Shows cluster switch member; managed switch members 450

ERPS Ethernet Ring Protection Switching 451

Configure Global Activates ERPS globally 455

Configure Domain 456

Add Creates an ERPS ring 456

Show Shows list of configured ERPS rings, status, and settings 456

Configure Details Configures ring parameters 456

Configure Operation Blocks a ring port using Forced Switch or Manual Switch

commands

CFM Connectivity Fault Management 476

Configure Global Configures global settings, including administrative status, cross-check

start delay, link trace, and SNMP traps

472

480

– 63 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Configure Interface Configures administrative status on an interface 483

Configure MD Configure Maintenance Domains 483

Add Defines a portion of the network for which connectivity faults can

be managed, identified by an MD index, maintenance level, and the MIP
creation method

Configure Details Configures the archive hold time and fault notification settings 483

Show Shows list of configured maintenance domains 483

Configure MA Configure Maintenance Associations 488

Add Defines a unique CFM service instance, identified by its parent MD, the

MA index, the VLAN assigned to the MA, and the MIP creation method

Configure Details Configures detailed settings, including continuity check status and

interval level, cross-check status, and alarm indication signal
parameters

Show Shows list of configured maintenance associations 488

Configure MEP Configures Maintenance End Points 492

Add Configures MEPs at the domain boundary to provide management

access for each maintenance association

Show Shows list of configured maintenance end points 492

Configure Remote MEP Configures Remote Maintenance End Points 494

Add Configures a static list of remote MEPs for comparison against

the MEPs learned through continuity check messages

Show Shows list of configured remote maintenance end points 494

483

488

488

492

494

Transmit Link Trace Sends link trace messages to isolate connectivity faults by

tracing the path through a network to the designated target node

Transmit Loopback Sends loopback messages to isolate connectivity faults by requesting a

target node to echo the message back to the source

Transmit Delay Measure Sends periodic delay-measure requests to a specified MEP within a

maintenance association

Show Information

Show Local MEP Shows the MEPs configured on this device 502

Show Local MEP Details Displays detailed CFM information about a specified local MEP in the

continuity check database

Show Local MIP Shows the MIPs on this device discovered by the CFM protocol 505

Show Remote MEP Shows MEPs located on other devices which have been discovered

through continuity check messages, or statically configured in the MEP
database

Show Remote MEP Details Displays detailed CFM information about a specified remote MEP in the

continuity check database

Show Link Trace Cache Shows information about link trace operations launched from this

device

Show Fault Notification Generator Displays configuration settings for the fault notification generator 510

496

498

500

503

506

507

509

– 64 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Show Continuity Check Error Displays CFM continuity check errors logged on this device 511

OAM Operation, Administration, and Maintenance 512

Interface Enables OAM on specified port, sets the mode to active or passive, and

enables the reporting of critical events or errored frame events

Counters Displays statistics on OAM PDUs 515

Event Log Displays the log for recorded link events 516

Remote Interface Displays information about attached OAM-enabled devices 517

Remote Loopback Performs a loopback test on the specified port 518

UDLD UniDirectional Link Detection 521

Configure Global Configures the message probe interval, detection interval, and recovery

interval

Configure Interface Enables UDLD and aggressive mode which reduces the shut-down

delay after loss of bidirectional connectivity is detected

Show Information Displays UDLD neighbor information, including neighbor state,

expiration time, and protocol intervals

IP 599

General

Routing Interface

Add Address Configures an IP interface for a VLAN 599

Show Address Shows the IP interfaces assigned to a VLAN 599

Ping Sends ICMP echo request packets to another node on the network 641

512

522

523

525

Trace Route Shows the route packets take to the specified

destination

ARP Address Resolution Protocol 644

Configure General Sets the aging time for dynamic entries in the ARP cache 644

Configure Static Address 646

Add Statically maps a physical address to an IP address 646

Show Shows the MAC to IP address static table 646

Show Information Shows entries in the Address Resolution Protocol (ARP) cache

Dynamic Address Shows dynamically learned entries in the IP routing table 648

Other Address Shows internal addresses used by the switch 648

Statistics Shows statistics on ARP requests sent and received 648

Routing

Static Routes 649

Add Configures static routing entries 649

Show Shows static routing entries 649

642

– 65 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Routing Table

Show Information Shows all routing entries, including local, static and dynamic routes 651

IPv6 Configuration 603

Configure Global Sets an IPv6 default gateway for traffic with no known next hop 604

Configure Interface Configures IPv6 interface address using auto-configuration or link-local

address, and sets related protocol settings

Add IPv6 Address Adds an global unicast, EUI-64, or link-local IPv6 address to an interface 610

Show IPv6 Address Show the IPv6 addresses assigned to an interface 613

Show IPv6 Neighbor Cache Displays information in the IPv6 neighbor discovery cache 614

Show Statistics 615

IPv6 Shows statistics about IPv6 traffic 615

ICMPv6 Shows statistics about ICMPv6 messages 615

UDP Shows statistics about UDP messages 615

Show MTU Shows the maximum transmission unit (MTU) cache for destinations

that have returned an ICMP packet-too-big message along with an
acceptable MTU to this switch

IP Service 623

DNS Domain Name Service 623

General 623

Configure Global Enables DNS lookup; defines the default domain name appended to

incomplete host names

Add Domain Name Defines a list of domain names that can

be appended to incomplete host names

605

621

623

624

Show Domain Names Shows the configured domain name list 624

Add Name Server Specifies IP address of name servers for dynamic lookup 626

Show Name Servers Shows the name server address list 626

Static Host Table 627

Add Configures static entries for domain name to address mapping 627

Show Shows the list of static mapping entries 627

Modify Modifies the static address mapped to the selected host name 627

Cache Displays cache entries discovered by designated

name servers

DHCP Dynamic Host Configuration Protocol 629

Client Specifies the DHCP client identifier for an interface 629

Relay Specifies DHCP relay servers 631

628

– 66 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Snooping 369

Configure Global Enables DHCP snooping globally, MAC-address verification,

information option; and sets the information policy

Configure VLAN Enables DHCP snooping on a VLAN 373

Configure Interface Sets the trust mode for an interface 374

Show Information Displays the DHCP Snooping binding information 375

PPPoE Intermediate Agent Point-to-Point Protocol over Ethernet Intermediate Agent 632

Configure Global Enables PPPoE IA on the switch, sets access node identifier, sets generic

error message

Configure Interface Enables PPPoE IA on an interface, sets trust status, enables vendor tag

stripping, sets circuit ID and remote ID

Show Statistics Shows statistics on PPPoE IA protocol messages 635

Multicast 527

IGMP Snooping 528

General Enables multicast filtering; configures parameters for multicast

snooping

Multicast Router 534

Add Static Multicast Router Assigns ports that are attached to a neighboring multicast router 534

Show Static Multicast Router Displays ports statically configured as attached to a neighboring

multicast router

371

632

634

530

534

Show Current Multicast Router Displays ports attached to a neighboring multicast router, either

through static or dynamic configuration

IGMP Member 536

Add Static Member Statically assigns multicast addresses to the selected VLAN 536

Show Static Member Shows multicast addresses statically configured on the selected VLAN 536

Interface 539

Configure VLAN Configures IGMP snooping per VLAN interface 539

Show VLAN Information Shows IGMP snooping settings per VLAN interface 539

Configure Port Configures the interface to drop IGMP query packets or all multicast

data packets

Configure Trunk Configures the interface to drop IGMP query packets or all multicast

data packets

Forwarding Entry Displays the current multicast groups learned through IGMP Snooping 546

Filter 551

Configure General Enables IGMP filtering for the switch 551

Configure Profile 552

Add Adds IGMP filter profile; and sets access mode 552

Show Shows configured IGMP filter profiles 552

534

545

545

– 67 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Add Multicast Group Range Assigns multicast groups to selected profile 552

Show Multicast Group Range Shows multicast groups assigned to a profile 552

Configure Interface Assigns IGMP filter profiles to port interfaces and sets throttling action 554

Statistics 547

Show Query Statistics Shows statistics for query-related messages 547

Show VLAN Statistics Shows statistics for protocol messages, number of active groups 547

Show Port Statistics Shows statistics for protocol messages, number of active groups 547

Show Trunk Statistics Shows statistics for protocol messages, number of active groups 547

MLD Snooping 556

General Enables multicast filtering; configures parameters for IPv6 multicast

snooping

Interface Configures Immediate Leave status for a VLAN 558

Multicast Router 559

Add Static Multicast Router Assigns ports that are attached to a neighboring multicast router 559

Show Static Multicast Router Displays ports statically configured as attached to a neighboring

multicast router

Show Current Multicast Router Displays ports attached to a neighboring multicast router, either

through static or dynamic configuration

MLD Member 561

Add Static Member Statically assigns multicast addresses to the selected VLAN 561

Show Static Member Shows multicast addresses statically configured on the selected VLAN 561

Show Current Member Shows multicast addresses associated with the selected VLAN, either

through static or dynamic configuration

Group Information Displays known multicast groups, member ports, the means by which

each group was learned, and the corresponding source list

MVR Multicast VLAN Registration 564

Configure Global Configures proxy switching and robustness value 566

Configure Domain Enables MVR for a domain, sets the MVR VLAN, forwarding priority, and

upstream source IP

556

559

559

561

563

568

Configure Profile 569

Add Configures multicast stream addresses 569

Show Shows multicast stream addresses 569

Associate Profile 569

Add Maps an address profile to a domain 569

Show Shows addresses profile to domain mapping 569

Configure Inter face Configures MVR interface type and immediate leave mode; also displays

MVR operational and active status

572

– 68 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Configure Static Group Member 574

Add Statically assigns MVR multicast streams to an interface 574

Show Shows MVR multicast streams assigned to an interface 574

Show Member Shows the multicast groups assigned to an MVR VLAN, the source

address of the multicast services, and the interfaces with active
subscribers

Show Statistics 577

Show Query Statistics Shows statistics for query-related messages 577

Show VLAN Statistics Shows statistics for protocol messages and number of active groups 577

Show Port Statistics Shows statistics for protocol messages and number of active groups 577

Show Trunk Statistics Shows statistics for protocol messages and number of active groups 577

MVR6 Multicast VLAN Registration for IPv6 581

Configure Global Configures proxy switching and robustness value 582

Configure Domain Enables MVR for a domain, sets the MVR VLAN, forwarding priority, and

upstream source IP

Configure Profile 585

Add Configures multicast stream addresses 585

Show Shows multicast stream addresses 585

Associate Profile 585

Add Maps an address profile to a domain 585

Show Shows addresses profile to domain mapping 585

576

584

Configure Inter face Configures MVR interface type and immediate leave mode; also displays

MVR operational and active status

Configure Port Configures MVR attributes for a port 588

Configure Trunk Configures MVR attributes for a trunk 588

Configure Static Group Member 590

Add Statically assigns MVR multicast streams to an interface 590

Show Shows MVR multicast streams assigned to an interface 590

Show Member Shows the multicast groups assigned to an MVR VLAN, the source

address of the multicast services, and the interfaces with active
subscribers

Show Statistics 593

Show Query Statistics Shows statistics for query-related messages 593

Show VLAN Statistics Shows statistics for protocol messages, number of active groups 593

Show Port Statistics Shows statistics for protocol messages, number of active groups 593

Show Trunk Statistics Shows statistics for protocol messages, number of active groups 593

588

592

– 69 –

Chapter 2

| Using the Web Interface

Navigating the Web Browser Interface

Table 4: Switch Main Menu (Continued)

Menu Description Page

Routing Protocol

RIP 654

General 655

Configure Enables or disables RIP, sets the global RIP attributes and timer values 655

Clear Route Clears the specified route type or network interface from the routing

table

Network 659

Add Sets the network interfaces that will use RIP 659

Show Shows the network interfaces that will use RIP 659

Passive Interface 661

Add Stops RIP broadcast and multicast messages from being sent on

specified network interfaces

Show Shows the configured passive interfaces 661

Neighbor Address 662

Add Configures the router to directly exchange routing

information with a static neighbor

Show Shows adjacent hosts or interfaces configured as a neighboring router 662

Redistribute 663

Add Imports external routing information from other routing domains (that

is, protocols) into the autonomous system

Show Shows the external routing information to be imported from other

routing domains

Distance 665

658

661

662

663

663

Add Defines an administrative distance for external routes learned from

other routing protocols

Show Shows the administrative distances assigned to external routes learned

from other routing protocols

Interface 666

Add Configures RIP parameters for each interface, including send and

receive versions, authentication, and method of loopback prevention

Show Shows the RIP parameters set for each interface 666

Modify Modifies RIP parameters for an interface 666

Statistics

Show Interface Information Shows RIP settings, and statistics on RIP protocol messages 670

Show Peer Information Displays information on neighboring RIP routers 671

Reset Statistics Clears statistics for RIP protocol messages 671

665

665

666

– 70 –

3 Basic Management Tasks

This chapter describes the following topics:

◆ Displaying System Information – Provides basic system description, including

contact information.

◆ Displaying Hardware/Software Versions – Shows the hardware version, power

status, and firmware versions

◆ Configuring Support for Jumbo Frames – Enables support for jumbo frames.

◆ Displaying Bridge Extension Capabilities – Shows the bridge extension

parameters.

◆ Managing System Files – Describes how to upgrade operating software or

configuration files, and set the system start-up files.

◆ Setting the System Clock – Sets the current time manually or through specified

NTP or SNTP servers.

◆ Configuring the Console Port – Sets console port connection parameters.

◆ Configuring Telnet Settings – Sets Telnet connection parameters.

◆ Displaying CPU Utilization – Displays information on CPU utilization.

◆ Displaying Memory Utilization – Shows memory utilization parameters.

◆ Stacking – Sets master unit, enables stacking on 10G ports, renumbers the units

in the stack.

◆ Resetting the System – Restarts the switch immediately, at a specified time,

after a specified delay, or at a periodic interval.

– 71 –

Chapter 3

Displaying System Information

| Basic Management Tasks

Displaying System Information

Use the System > General page to identify the system by displaying information
such as the device name, location and contact information.

Parameters

These parameters are displayed:

◆ System Description – Brief description of device type.

◆ System Object ID – MIB II object ID for switch’s network management

subsystem.

◆ System Up Time – Length of time the management agent has been up.

◆ System Name – Name assigned to the switch system.

◆ System Location – Specifies the system location.

◆ System Contact – Administrator responsible for the system.

Web Interface

To configure general system information:

1. Click System, General.

2. Specify the system name, location, and contact information for the system

administrator.

3. Click Apply.

Figure 3: System Information

– 72 –

Displaying Hardware/Software Versions

Use the System > Switch page to display hardware/firmware version numbers for
the main board and management software, as well as the power status of the
system.

Parameters

The following parameters are displayed:

Main Board Information

◆ Serial Number – The serial number of the switch.

◆ Number of Ports – Number of built-in ports.

◆ Hardware Version – Hardware version of the main board.

◆ Main Power Status – Displays the status of the internal power supply.

Chapter 3

Displaying Hardware/Software Versions

| Basic Management Tasks

◆ Redundant Power Status – Displays the status of the redundant power supply.

Management Software Information

◆ Role – Shows that this switch is operating as Master or Slave.

◆ EPLD Version – Version number of EEPROM Programmable Logic Device.

◆ Loader Version – Version number of loader code.

◆ Diagnostics Code Version – Version of Power-On Self-Test (POST) and boot

code.

◆ Operation Code Version – Version number of runtime code.

◆ Thermal Detector – The detector is near the back of the unit.

◆ Te mp e ra t u re – Temperature at specified thermal detection point.

– 73 –

Chapter 3

Configuring Support for Jumbo Frames

| Basic Management Tasks

Web Interface

To view hardware and software version information.

1. Click System, then Switch.

Figure 4: General Switch Information

Configuring Support for Jumbo Frames

Use the System > Capability page to configure support for layer 2 jumbo frames.
The switch provides more efficient throughput for large sequential data transfers
by supporting jumbo frames up to 10240 bytes for Gigabit Ethernet and 10 Gigabit
Ethernet ports or trunks. Compared to standard Ethernet frames that run only up to

1.5 KB, using jumbo frames significantly reduces the per-packet overhead required
to process protocol encapsulation fields.

Usage Guidelines

To use jumbo frames, both the source and destination end nodes (such as a
computer or server) must support this feature. Also, when the connection is
operating at full duplex, all switches in the network between the two end nodes
must be able to accept the extended frame size. And for half-duplex connections,
all devices in the collision domain would need to support jumbo frames.

Parameters

The following parameters are displayed:

◆ Jumbo Frame – Configures support for jumbo frames. (Default: Disabled)

– 74 –

Chapter 3

Displaying Bridge Extension Capabilities

Web Interface

To configure support for jumbo frames:

1. Click System, then Capability.

2. Enable or disable support for jumbo frames.

3. Click Apply.

Figure 5: Configuring Support for Jumbo Frames

| Basic Management Tasks

Displaying Bridge Extension Capabilities

Use the System > Capability page to display settings based on the Bridge MIB. The
Bridge MIB includes extensions for managed devices that support Multicast
Filtering, Traffic Classes, and Virtual LANs. You can access these extensions to
display default settings for the key variables.

Parameters

The following parameters are displayed:

◆ Extended Multicast Filtering Services – This switch does not support the

filtering of individual multicast addresses based on GMRP (GARP Multicast
Registration Protocol).

◆ Traffic Classes – This switch provides mapping of user priorities to multiple

traffic classes. (Refer to “Class of Service” on page 231.)

◆ Static Entry Individual Port – This switch allows static filtering for unicast and

multicast addresses. (Refer to “Setting Static Addresses” on page 189.)

◆ VLAN Version Number – Based on IEEE 802.1Q, “1” indicates Bridges that

support only single spanning tree (SST) operation, and “2” indicates Bridges
that support multiple spanning tree (MST) operation.

◆ VLAN Learning – This switch uses Independent VLAN Learning (IVL), where

each port maintains its own filtering database.

◆ Local VLAN Capable – This switch does not support multiple local bridges

outside of the scope of 802.1Q defined VLANs.

– 75 –

Chapter 3

Displaying Bridge Extension Capabilities

| Basic Management Tasks

◆ Configurable PVID Tagging – This switch allows you to override the default

Port VLAN ID (PVID used in frame tags) and egress status (VLAN-Tagged or
Untagged) on each port. (Refer to “VLAN Configuration” on page 153.)

◆ Max Supported VLAN Numbers – The maximum number of VLANs supported

on this switch.

◆ Max Supported VLAN ID – The maximum configurable VLAN identifier

supported on this switch.

◆ GMRP – GARP Multicast Registration Protocol (GMRP) allows network devices

to register end stations with multicast groups. This switch does not support
GMRP; it uses the Internet Group Management Protocol (IGMP) to provide
automatic multicast filtering.

Web Interface

To view Bridge Extension information:

1. Click System, then Capability.

Figure 6: Displaying Bridge Extension Configuration

– 76 –

Managing System Files

This section describes how to upgrade the switch operating software or
configuration files, and set the system start-up files.

Chapter 3

| Basic Management Tasks

Managing System Files

Copying Files via FTP/

TFTP or HTTP

Use the System > File (Copy) page to upload/download firmware or configuration
settings using FTP, TFTP or HTTP. By backing up a file to an FTP/TFTP server or
management station, that file can later be downloaded to the switch to restore
operation. Specify the method of file transfer, along with the file type and file
names as required.

You can also set the switch to use new firmware or configuration settings without
overwriting the current version. Just download the file using a different name from
the current version, and then set the new file as the startup file.

Command Usage

◆ When logging into an FTP server, the interface prompts for a user name and

password configured on the remote server. Note that “Anonymous” is set as the
default user name.

◆ The reset command will not be accepted during copy operations to flash

memory.

Parameters

The following parameters are displayed:

◆ Copy Type – The firmware copy operation includes these options:

■

FTP Upload – Copies a file from an FTP server to the switch.

■

FTP Download – Copies a file from the switch to an FTP server.

■

HTTP Upload – Copies a file from a management station to the switch.

■

HTTP Download – Copies a file from the switch to a management station

■

TFTP Upload – Copies a file from a TFTP server to the switch.

■

TFTP Download – Copies a file from the switch to a TFTP server.

◆ FTP/TFTP Server IP Address – The IP address of an FTP/TFTP server.

◆ User Name – The user name for FTP server access.

◆ Password – The password for FTP server access.

◆ File Type – Specify Operation Code to copy firmware.

– 77 –

Chapter 3

Managing System Files

| Basic Management Tasks

◆ File Name –

of the file name should not be a period (.),
names is 32 characters for files on the switch or 127 characters for files on the
server. (Valid characters: A-Z, a-z, 0-9, “.”, “-”, “_”)

Note:

Up to two copies of the system software (i.e., the runtime firmware) can be
stored in the file directory on the switch.

Note:

The maximum number of user-defined configuration files is limited only by
available flash memory space.

Note:

The file “Factory_Default_Config.cfg” can be copied to a file server or
management station, but cannot be used as the destination file name on the
switch.

Web Interface

To copy firmware files:

The file name should not contain slashes (\ or /), the leading letter

and the maximum length for file

1. Click System, then File.

2. Select Copy from the Action list.

3. Select FTP Upload, HTTP Upload or TFTP Upload as the file transfer method.

4. If FTP or TFTP Upload is used, enter the IP address of the file server.

5. If FTP Upload is used, enter the user name and password for your account on

the FTP server.

6. Set the file type to Operation Code.

7. Enter the name of the file to download.

8. Select a file on the switch to overwrite or specify a new file name.

9. Then click Apply.

– 78 –

Chapter 3

| Basic Management Tasks

Managing System Files

Figure 7: Copy Firmware

If you replaced a file currently used for startup and want to start using the new file,
reboot the system via the System > Reset menu.

Saving the Running

Configuration to a

Local File

Use the System > File (Copy) page to save the current configuration settings to a
local file on the switch. The configuration settings are not automatically saved by
the system for subsequent use when the switch is rebooted. You must save these
settings to the current startup file, or to another file which can be subsequently set
as the startup file.

Parameters

The following parameters are displayed:

◆ Copy Type – The copy operation includes this option:

■

Running-Config – Copies the current configuration settings to a local file on
the switch.

◆ Destination File Name – Copy to the currently designated startup file, or to a

new file.

The file name should not contain slashes (\ or /),

the leading letter of
the file name should not be a period (.), and the maximum length for file names
is 32 characters. (Valid characters: A-Z, a-z, 0-9, “.”, “-”, “_”)

Note:

The maximum number of user-defined configuration files is limited only by

available flash memory space.

Web Interface

To save the running configuration file:

1. Click System, then File.

2. Select Copy from the Action list.

3. Select Running-Config from the Copy Type list.

– 79 –

Chapter 3

Managing System Files

| Basic Management Tasks

4. Select the current startup file on the switch to overwrite or specify a new file

name.

5. Then click Apply.

Figure 8: Saving the Running Configuration

If you replaced a file currently used for startup and want to start using the new file,
reboot the system via the System > Reset menu.

Setting the

Start-Up File

Use the System > File (Set Start-Up) page to specify the firmware or configuration
file to use for system initialization.

Web Interface

To set a file to use for system initialization:

1. Click System, then File.

2. Select Set Start-Up from the Action list.

3. Mark the operation code or configuration file to be used at startup

4. Then click Apply.

Figure 9: Setting Start-Up Files

To start using the new firmware or configuration settings, reboot the system via the
System > Reset menu.

– 80 –

Chapter 3

| Basic Management Tasks

Managing System Files

Showing System Files Use the System > File (Show) page to show the files in the system directory, or to

delete a file.

Note:

Files designated for start-up, and the Factory_Default_Config.cfg file, cannot

be deleted.

Web Interface

To show the system files:

1. Click System, then File.

2. Select Show from the Action list.

3. To delete a file, mark it in the File List and click Delete.

Figure 10: Displaying System Files

Automatic Operation

Code Upgrade

Use the System > File (Automatic Operation Code Upgrade) page to automatically
download an operation code file when a file newer than the currently installed one
is discovered on the file server. After the file is transferred from the server and
successfully written to the file system, it is automatically set as the startup file, and
the switch is rebooted.

Usage Guidelines

◆ If this feature is enabled, the switch searches the defined URL once during the

bootup sequence.

◆ FTP (port 21) and TFTP (port 69) are both supported. Note that the TCP/UDP

port bindings cannot be modified to support servers listening on non-standard
ports.

◆ The host portion of the upgrade file location URL must be a valid IPv4 IP

address. DNS host names are not recognized. Valid IP addresses consist of four
numbers, 0 to 255, separated by periods.

– 81 –

Chapter 3

Managing System Files

| Basic Management Tasks

◆ The path to the directory must also be defined. If the file is stored in the root

directory for the FTP/TFTP service, then use the “/” to indicate this (e.g., ftp://

192.168.0.1/).

◆ The file name must not be included in the upgrade file location URL. The file

name of the code stored on the remote server must be Level1-L3lite.bix (using
upper case and lower case letters exactly as indicated here). Enter the file name
for other switches described in this manual exactly as shown on the web
interface.

◆ The FTP connection is made with PASV mode enabled. PASV mode is needed to

traverse some fire walls, even if FTP traffic is not blocked. PASV mode cannot be
disabled.

◆ The switch-based search function is case-insensitive in that it will accept a file

name in upper or lower case (i.e., the switch will accept Level1-L3lite.BIX from
the server even though Level1-L3lite.bix was requested). However, keep in mind
that the file systems of many operating systems such as Unix and most Unix­like systems (FreeBSD, NetBSD, OpenBSD, and most Linux distributions, etc.) are
case-sensitive, meaning that two files in the same directory, level1-L3lite.bix and
Level1-L3lite.bix are considered to be unique files. Thus, if the upgrade file is
stored as Level1-L3lite.bix (or even level1-L3lite.bix) on a case-sensitive server,
then the switch (requesting level1-L3lite.bix) will not be upgraded because the
server does not recognize the requested file name and the stored file name as
being equal. A notable exception in the list of case-sensitive Unix-like operating
systems is Mac OS X, which by default is case-insensitive. Please check the
documentation for your server’s operating system if you are unsure of its file
system’s behavior.

◆ Note that the switch itself does not distinguish between upper and lower-case

file names, and only checks to see if the file stored on the server is more recent
than the current runtime image.

◆ If two operation code image files are already stored on the switch’s file system,

then the non-startup image is deleted before the upgrade image is transferred.

◆ The automatic upgrade process will take place in the background without

impeding normal operations (data switching, etc.) of the switch.

◆ During the automatic search and transfer process, the administrator cannot

transfer or update another operation code image, configuration file, public key,
or HTTPS certificate (i.e., no other concurrent file management operations are
possible).

◆ The upgrade operation code image is set as the startup image after it has been

successfully written to the file system.

◆ The switch will send an SNMP trap and make a log entry upon all upgrade

successes and failures.

– 82 –

Chapter 3

| Basic Management Tasks

Managing System Files

◆ The switch will immediately restart after the upgrade file is successfully written

to the file system and set as the startup image.

Parameters

The following parameters are displayed:

◆ Automatic Opcode Upgrade – Enables the switch to search for an upgraded

operation code file during the switch bootup process. (Default: Disabled)

◆ Automatic Upgrade Location URL – Defines where the switch should search

for the operation code upgrade file. The last character of this URL must be a
forward slash (“/”). The Level1-L3lite.bix filename must not be included since it is
automatically appended by the switch. (Options: ftp, tftp)

The following syntax must be observed:

tftp://host[/filedir]/

■

tftp:// – Defines TFTP protocol for the server connection.

■

host – Defines the IP address of the TFTP server. Valid IP addresses consist of
four numbers, 0 to 255, separated by periods. DNS host names are not
recognized.

■

filedir – Defines the directory, relative to the TFTP server root, where the
upgrade file can be found. Nested directory structures are accepted. The
directory name must be separated from the host, and in nested directory
structures, from the parent directory, with a prepended forward slash “/”.

■

/ – The forward slash must be the last character of the URL.

ftp://[username[:password@]]host[/filedir]/

■

ftp:// – Defines FTP protocol for the server connection.

■

username – Defines the user name for the FTP connection. If the user name
is omitted, then “anonymous” is the assumed user name for the
connection.

■

password – Defines the password for the FTP connection. To differentiate
the password from the user name and host portions of the URL, a colon (:)
must precede the password, and an “at” symbol (@), must follow the
password. If the password is omitted, then “” (an empty string) is the
assumed password for the connection.

■

host – Defines the IP address of the FTP server. Valid IP addresses consist of
four numbers, 0 to 255, separated by periods. DNS host names are not
recognized.

■

filedir – Defines the directory, relative to the FTP server root, where the
upgrade file can be found. Nested directory structures are accepted. The
directory name must be separated from the host, and in nested directory
structures, from the parent directory, with a prepended forward slash “/”.

■

/ – The forward slash must be the last character of the URL.

– 83 –

Chapter 3

Managing System Files

| Basic Management Tasks

Examples

The following examples demonstrate the URL syntax for a TFTP server at IP
address 192.168.0.1 with the operation code image stored in various locations:

■

tftp://192.168.0.1/

The image file is in the TFTP root directory.

■

tftp://192.168.0.1/switch-opcode/

The image file is in the “switch-opcode” directory, relative to the TFTP root.

■

tftp://192.168.0.1/switches/opcode/

The image file is in the “opcode” directory, which is within the “switches”
parent directory, relative to the TFTP root.

The following examples demonstrate the URL syntax for an FTP server at IP
address 192.168.0.1 with various user name, password and file location options
presented:

■

ftp://192.168.0.1/

The user name and password are empty, so “anonymous” will be the user
name and the password will be blank. The image file is in the FTP root
directory.

■

ftp://switches:upgrade@192.168.0.1/

The user name is “switches” and the password is “upgrade”. The image file is
in the FTP root.

■

ftp://switches:upgrade@192.168.0.1/switches/opcode/

The user name is “switches” and the password is “upgrade”. The image file is
in the “opcode” directory, which is within the “switches” parent directory,
relative to the FTP root.

Web Interface

To configure automatic code upgrade:

1. Click System, then File.

2. Select Automatic Operation Code Upgrade from the Action list.

3. Mark the check box to enable Automatic Opcode Upgrade.

4. Enter the URL of the FTP or TFTP server, and the path and directory containing

the operation code.

5. Click Apply.

– 84 –

Chapter 3

Figure 11: Configuring Automatic Code Upgrade

| Basic Management Tasks

Setting the System Clock

If a new image is found at the specified location, the following type of messages
will be displayed during bootup.

.
.
.

Automatic Upgrade is looking for a new image
New image detected: current version 1.5.2.15; new version 1.5.2.16
Image upgrade in progress
The switch will restart after upgrade succeeds
Downloading new image

Flash programming started
Flash programming completed
The switch will now restart
.

.
.

Setting the System Clock

Simple Network Time Protocol (SNTP) allows the switch to set its internal clock
based on periodic updates from a time server (SNTP or NTP). Maintaining an
accurate time on the switch enables the system log to record meaningful dates and
times for event entries. You can also manually set the clock. If the clock is not set
manually or via SNTP, the switch will only record the time from the factory default
set at the last bootup.

When the SNTP client is enabled, the switch periodically sends a request for a time
update to a configured time server. You can configure up to three time server IP
addresses. The switch will attempt to poll each server in the configured sequence.

– 85 –

Chapter 3

Setting the System Clock

| Basic Management Tasks

Setting the Time

Manually

Use the System > Time (Configure General - Manual) page to set the system time on
the switch manually without using SNTP.

Parameters

The following parameters are displayed:

◆ Current Time – Shows the current time set on the switch.

◆ Hours – Sets the hour. (Range: 0-23)

◆ Minutes – Sets the minute value. (Range: 0-59)

◆ Seconds – Sets the second value. (Range: 0-59)

◆ Month – Sets the month. (Range: 1-12)

◆ Day – Sets the day of the month. (Range: 1-31)

◆ Year – Sets the year. (Range: 1970-2037)

Web Interface

To manually set the system clock:

1. Click System, then Time.

2. Select Configure General from the Step list.

3. Select Manual from the Maintain Type list.

4. Enter the time and date in the appropriate fields.

5. Click Apply

Figure 12: Manually Setting the System Clock

– 86 –

Chapter 3

| Basic Management Tasks

Setting the System Clock

Setting the SNTP

Polling Interval

Use the System > Time (Configure General - SNTP) page to set the polling interval at
which the switch will query the specified time servers.

Parameters

The following parameters are displayed:

◆ Current Time – Shows the current time set on the switch.

◆ SNTP Polling Interval – Sets the interval between sending requests for a time

update from a time server. (Range: 16-16384 seconds; Default: 16 seconds)

Web Interface

To set the polling interval for SNTP:

1. Click System, then Time.

2. Select Configure General from the Step list.

3. Select SNTP from the Maintain Type list.

4. Modify the polling interval if required.

5. Click Apply

Figure 13: Setting the Polling Interval for SNTP

Configuring NTP Use the System > Time (Configure General - NTP) page to configure NTP

authentication and show the polling interval at which the switch will query the
specified time servers.

Parameters

The following parameters are displayed:

◆ Current Time – Shows the current time set on the switch.

◆ Authentication Status – Enables authentication for time requests and updates

between the switch and NTP servers. (Default: Disabled)

– 87 –

Chapter 3

Setting the System Clock

| Basic Management Tasks

You can enable NTP authentication to ensure that reliable updates are received
from only authorized NTP servers. The authentication keys and their associated
key number must be centrally managed and manually distributed to NTP
servers and clients. The key numbers and key values must match on both the
server and client.

◆ Polling Interval – Shows the interval between sending requests for a time

update from NTP servers. (Fixed: 1024 seconds)

Web Interface

To set the clock maintenance type to NTP:

1. Click System, then Time.

2. Select Configure General from the Step list.

3. Select NTP from the Maintain Type list.

4. Enable authentication if required.

Configuring

Time Servers

5. Click Apply

Figure 14: Configuring NTP

Use the System > Time (Configure Time Server) pages to specify the IP address for
NTP/SNTP time servers, or to set the authentication key for NTP time servers.

Specifying SNTP Time Servers

Use the System > Time (Configure Time Server – Configure SNTP Server) page to
specify the IP address for up to three SNTP time servers.

– 88 –

Chapter 3

Parameters

The following parameters are displayed:

◆ SNTP Server IP Address – Sets the IPv4 or IPv6 address for up to three time

servers. The switch attempts to update the time from the first server, if this fails
it attempts an update from the next server in the sequence.

Web Interface

To set the SNTP time servers:

| Basic Management Tasks

Setting the System Clock

1. Click System, then Time.

2. Select Configure Time Server from the Step list.

3. Select Configure SNTP Server from the Action list.

4. Enter the IP address of up to three time servers.

5. Click Apply.

Figure 15: Specifying SNTP Time Servers

Specifying NTP Time Servers

Use the System > Time (Configure Time Server – Add NTP Server) page to add the IP
address for up to 50 NTP time servers.

Parameters

The following parameters are displayed:

◆ NTP Server IP Address – Adds the IPv4 or IPv6 address for up to 50 time

servers. The switch will poll the specified time servers for updates when the
clock maintenance type is set to NTP on the System > Time (Configure General)
page. It issues time synchronization requests at a fixed interval of 1024 seconds.
The switch will poll all the time servers configured, the responses received are
filtered and compared to determine the most reliable and accurate time update
for the switch.

◆ Versi on – Specifies the NTP version supported by the server. (Fixed: Version 3)

– 89 –

Chapter 3

Setting the System Clock

| Basic Management Tasks

◆ Authentication Key – Specifies the number of the key in the NTP

Authentication Key List to use for authentication with the configured server.
NTP authentication is optional. If enabled on the System > Time (Configure
General) page, you must also configure at least one key on the System > Time
(Add NTP Authentication Key) page. (Range: 1-65535)

Web Interface

To add an NTP time server to the server list:

1. Click System, then Time.

2. Select Configure Time Server from the Step list.

3. Select Add NTP Server from the Action list.

4. Enter the IP address of an NTP time server, and specify the index of the

authentication key if authentication is required.

5. Click Apply.

Figure 16: Adding an NTP Time Server

To show the list of configured NTP time servers:

1. Click System, then Time.

2. Select Configure Time Server from the Step list.

3. Select Show NTP Server from the Action list.

Figure 17: Showing the NTP Time Server List

– 90 –

Chapter 3

| Basic Management Tasks

Setting the System Clock

Specifying NTP Authentication Keys

Use the System > Time (Configure Time Server – Add NTP Authentication Key) page
to add an entry to the authentication key list.

Parameters

The following parameters are displayed:

◆ Authentication Key – Specifies the number of the key in the NTP

Authentication Key List to use for authentication with a configured server. NTP
authentication is optional. When enabled on the System > Time (Configure
General) page, you must also configure at least one key on this page. Up to 255
keys can be configured on the switch. (Range: 1-65535)

◆ Key Context – An MD5 authentication key string. The key string can be up to

32 case-sensitive printable ASCII characters (no spaces).

NTP authentication key numbers and values must match on both the server
and client.

Web Interface

To add an entry to NTP authentication key list:

1. Click System, then Time.

2. Select Configure Time Server from the Step list.

3. Select Add NTP Authentication Key from the Action list.

4. Enter the index number and MD5 authentication key string.

5. Click Apply.

Figure 18: Adding an NTP Authentication Key

To show the list of configured NTP authentication keys:

1. Click System, then Time.

2. Select Configure Time Server from the Step list.

3. Select Show NTP Authentication Key from the Action list.

– 91 –

Chapter 3

Setting the System Clock

| Basic Management Tasks

Figure 19: Showing the NTP Authentication Key List

Setting the Time Zone Use the System > Time (Configure Time Zone) page to set the time zone. SNTP uses

Coordinated Universal Time (or UTC, formerly Greenwich Mean Time, or GMT)
based on the time at the Earth’s prime meridian, zero degrees longitude, which
passes through Greenwich, England. To display a time corresponding to your local
time, you must indicate the number of hours and minutes your time zone is east
(before) or west (after) of UTC. You can choose one of the 80 predefined time zone
definitions, or your can manually configure the parameters for your local time zone.

Parameters

The following parameters are displayed:

◆ Predefined Configuration – A drop-down box provides access to the 80

predefined time zone configurations. Each choice indicates it’s offset from UTC
and lists at least one major city or location covered by the time zone.

◆ User-defined Configuration – Allows the user to define all parameters of the

local time zone.

■

Direction – Configures the time zone to be before (east of) or after (west
of) UTC.

■

Name – Assigns a name to the time zone. (Range: 1-30 characters)

■

Hours (0-13) – The number of hours before or after UTC. The maximum
value before UTC is 12. The maximum value after UTC is 13.

■

Minutes (0-59) – The number of minutes before/after UTC.

Web Interface

To set your local time zone:

1. Click System, then Time.

2. Select Configure Time Zone from the Step list.

3. Set the offset for your time zone relative to the UTC in hours and minutes.

4. Click Apply.

– 92 –

Figure 20: Setting the Time Zone

Chapter 3

| Basic Management Tasks

Setting the System Clock

Configuring

Summer Time

Use the Summer Time page to set the system clock forward during the summer
months (also known as daylight savings time).

In some countries or regions, clocks are adjusted through the summer months so
that afternoons have more daylight and mornings have less. This is known as
Summer Time, or Daylight Savings Time (DST). Typically, clocks are adjusted
forward one hour at the start of spring and then adjusted backward in autumn.

Parameters

The following parameters are displayed in the web interface:

General Configuration

◆ Summer Time in Effect – Shows if the system time has been adjusted.

◆ Status – Shows if summer time is set to take effect during the specified period.

◆ Name – Name of the time zone while summer time is in effect, usually an

acronym. (Range: 1-30 characters)

◆ Mode – Selects one of the following configuration modes. (The Mode option

can only be managed when the Summer Time Status option has been set to
enabled for the switch.)

Predefined Mode – Configures the summer time status and settings for the switch
using predefined configurations for several major regions of the world. To specify
the time corresponding to your local time when summer time is in effect, select the
predefined summer-time zone appropriate for your location.

– 93 –

Chapter 3

Setting the System Clock

| Basic Management Tasks

Table 5: Predefined Summer-Time Parameters

Region Start Time, Day, Week, & Month End Time, Day, Week, & Month Rel.

Australia 00:00:00, Sunday, Week 5 of October 23:59:59, Sunday, Week 5 of March 60 min

Europe 00:00:00, Sunday, Week 5 of March 23:59:59, Sunday, Week 5 of October 60 min

New Zealand 00:00:00, Sunday, Week 1 of October 23:59:59, Sunday, Week 3 of March 60 min

USA 02:00:00, Sunday, Week 2 of March 02:00:00, Sunday, Week 1 of November 60 min

Offset

Date Mode – Sets the start, end, and offset times of summer time for the switch on a
one-time basis. This mode sets the summer-time zone relative to the currently
configured time zone. To specify a time corresponding to your local time when
summer time is in effect, you must indicate the number of minutes your summer­time zone deviates from your regular time zone.

◆ Offset – Summer-time offset from the regular time zone, in minutes.

(Range: 1-120 minutes)

◆ From – Start time for summer-time offset.

◆ To – End time for summer-time offset.

Recurring Mode – Sets the start, end, and offset times of summer time for the switch
on a recurring basis. This mode sets the summer-time zone relative to the currently
configured time zone. To specify a time corresponding to your local time when
summer time is in effect, you must indicate the number of minutes your summer­time zone deviates from your regular time zone.

◆ Offset – Summer-time offset from the regular time zone, in minutes.

(Range: 1-120 minutes)

◆ From – Start time for summer-time offset.

◆ To – End time for summer-time offset.

Web Interface

To specify summer time settings:

1. Click SNTP, Summer Time.

2. Select one of the configuration modes, configure the relevant attributes,

enable summer time status.

3. Click Apply.

– 94 –

Figure 21: Configuring Summer Time

Configuring the Console Port

Use the System > Console menu to configure connection parameters for the
switch’s console port. You can access the onboard configuration program by
attaching a VT100 compatible device to the switch’s serial console port.
Management access through the console port is controlled by various parameters,
including a password (only configurable through the CLI), time outs, and basic
communication settings. Note that these parameters can be configured via the
web or CLI interface.

Chapter 3

| Basic Management Tasks

Configuring the Console Port

Parameters

The following parameters are displayed:

◆ Login Timeout – Sets the interval that the system waits for a user to log into

the CLI. If a login attempt is not detected within the timeout interval, the
connection is terminated for the session. (Range: 10-300 seconds; Default: 300
seconds)

◆ Exec Timeout – Sets the interval that the system waits until user input is

detected. If user input is not detected within the timeout interval, the current
session is terminated. (Range: 60-65535 seconds; Default: 600 seconds)

◆ Password Threshold – Sets the password intrusion threshold, which limits the

number of failed logon attempts. When the logon attempt threshold is
reached, the system interface becomes silent for a specified amount of time
(set by the Silent Time parameter) before allowing the next logon attempt.
(Range:1-120;Default:3attempts)

◆ Silent Time – Sets the amount of time the management console is inaccessible

after the number of unsuccessful logon attempts has been exceeded.
(Range: 1-65535 seconds; Default: Disabled)

◆ Data Bits – Sets the number of data bits per character that are interpreted and

generated by the console port. If parity is being generated, specify 7 data bits

– 95 –

Chapter 3

Configuring the Console Port

| Basic Management Tasks

per character. If no parity is required, specify 8 data bits per character.
(Default: 8 bits)

◆ Stop Bits – Sets the number of the stop bits transmitted per byte.

(Range: 1-2; Default: 1 stop bit)

◆ Parity – Defines the generation of a parity bit. Communication protocols

provided by some terminals can require a specific parity bit setting. Specify
Even, Odd, or None. (Default: None)

◆ Speed – Sets the terminal line’s baud rate for transmit (to terminal) and receive

(from terminal). Set the speed to match the baud rate of the device connected
to the serial port. (Range: 9600, 19200, 38400, 57600, or 115200 baud;
Default: 115200 baud)

Note:

The password for the console connection can only be configured through

the CLI (see the “password” command in the CLI Reference Guide).

Note:

Password checking can be enabled or disabled for logging in to the console
connection (see the “login” command in the CLI Reference Guide). You can select
authentication by a single global password as configured for the password
command, or by passwords set up for specific user-name accounts. The default is
for local passwords configured on the switch.

Web Interface

To configure parameters for the console port:

1. Click System, then Console.

2. Specify the connection parameters as required.

3. Click Apply

Figure 22: Console Port Settings

– 96 –

Configuring Telnet Settings

Use the System > Telnet menu to configure parameters for accessing the CLI over a
Telnet connection. You can access the onboard configuration program over the
network using Telnet (i.e., a virtual terminal). Management access via Telnet can be
enabled/disabled and other parameters set, including the TCP port number, time
outs, and a password. Note that the password is only configurable through the CLI.)
These parameters can be configured via the web or CLI interface.

Parameters

The following parameters are displayed:

◆ Teln et St at us – Enables or disables Telnet access to the switch.

(Default: Enabled)

◆ TCP Port – Sets the TCP port number for Telnet on the switch. (Range: 1-65535;

Default: 23)

Chapter 3

| Basic Management Tasks

Configuring Telnet Settings

◆ Max Sessions – Sets the maximum number of Telnet sessions that can

simultaneously connect to this system. (Range: 0-8; Default: 8)

A maximum of eight sessions can be concurrently opened for Telnet and
Secure Shell (i.e., both Telnet and SSH share a maximum number of eight
sessions).

◆ Login Timeout – Sets the interval that the system waits for a user to log into

the CLI. If a login attempt is not detected within the timeout interval, the
connection is terminated for the session. (Range: 10-300 seconds; Default: 300
seconds)

◆ Exec Timeout – Sets the interval that the system waits until user input is

detected. If user input is not detected within the timeout interval, the current
session is terminated. (Range: 60-65535 seconds; Default: 600 seconds)

◆ Password Threshold – Sets the password intrusion threshold, which limits the

number of failed logon attempts. When the logon attempt threshold is
reached, the system interface becomes silent for a specified amount of time
(set by the Silent Time parameter) before allowing the next logon attempt.
(Range:1-120;Default:3attempts)

◆ Silent Time – Sets the amount of time the management interface is

inaccessible after the number of unsuccessful logon attempts has been
exceeded. (Range: 1-65535 seconds; Default: Disabled)

Note:

The password for the Telnet connection can only be configured through the
CLI (see the “password” command in the CLI Reference Guide).

Note:

Password checking can be enabled or disabled for login to the console
connection (see the “login” command in the CLI Reference Guide). You can select

– 97 –

Chapter 3

Displaying CPU Utilization

| Basic Management Tasks

authentication by a single global password as configured for the password
command, or by passwords set up for specific user-name accounts. The default is
for local passwords configured on the switch.

Web Interface

To configure parameters for the console port:

1. Click System, then Telnet.

2. Specify the connection parameters as required.

3. Click Apply

Figure 23: Telnet Connection Settings

Displaying CPU Utilization

Use the System > CPU Utilization page to display information on CPU utilization.

Parameters

The following parameters are displayed:

◆ Time Interval – The interval at which to update the displayed utilization rate.

(Options: 1, 5, 10, 30, 60 seconds; Default: 1 second)

◆ CPU Utilization – CPU utilization over specified interval.

Web Interface

To display CPU utilization:

1. Click System, then CPU Utilization.

2. Change the update interval if required. Note that the interval is changed as

soon as a new setting is selected.

– 98 –

Figure 24: Displaying CPU Utilization

Chapter 3

Displaying Memory Utilization

| Basic Management Tasks

Displaying Memory Utilization

Use the System > Memory Status page to display memory utilization parameters.

Parameters

The following parameters are displayed:

◆ Free Size – The amount of memory currently free for use.

◆ Used Size – The amount of memory allocated to active processes.

◆ To ta l – The total amount of system memory.

Web Interface

To display memory utilization:

1. Click System, then Memory Status.

Figure 25: Displaying Memory Utilization

– 99 –

Chapter 3

Stacking

Stacking

| Basic Management Tasks

This section describes the basic functions which enable a properly connected set of
switches to function as a single logical entity for management purposes. For
information on how to physically connect units into a stack, see the Hardware
Installation Guide. For detailed information on how stacking is implemented for this
type of switch, refer to “Stack Operations” in the CLI Reference Guide.

Setting the

Master Unit

Use the System > Stacking (Configure Master Button) page to configure a unit as
the stack master.

Command Usage

◆ The switch must be rebooted to activate this command. Note that the

configured setting is not affected by changes to the start-up configuration file.

◆ Set the front panel 10G ports to stacking mode with the Configure Stacking

Button page prior to rebooting the switch.

◆ If the stack has not been initialized, the master button must be disabled on all

other units in the stack, and those units rebooted.

◆ If the stack has been initialized, and this page is used to configure a new stack

master, then the master button on the old master unit must be disabled before
rebooting the stack.

◆ After the newly configured stack master has been rebooted, the front panel

unit identifier will the updated on each unit in the stack.

◆ The bootup messages on all slave units will be halted when the master unit is

rebooted, and configuration through the CLI will be restricted to the master
unit.

Parameters

The following parameters are displayed:

◆ Unit – Shows the stack members according to assigned identifiers.

◆ Master Button – Enables the specified unit as the stack master.

(Default: Disabled)

Web Interface

To set the stack master:

1. Click System, Stacking.

2. Select Configure Master Button from the Action list.

3. Select one of the stack members as the master unit.

– 100 –