Amer.com SS2GR50i User manual

SS2GR50i / SS2GR26i /
SS2GR26ip
L2/L4 Managed Gigabit Ethernet Switch
With IP Stacking and PoE Support
Configuration Guide
(Ver 2.1)

Copyright
© Amer.com Corp., 1997-2009 All rights reserved. No part of this publication may be reproduced
in any form or by any means or used to make any derivative such as translation, transformation,
or adaptation without permission from Amer.com, as stipulated by the United States Copyright Act
of 1976.
Amer.com reserves the right to make changes to this document and the products which it
describes without notice. Amer.com shall not be liable for technical or editorial errors or omissions
made herein; nor for incidental or consequential damages resulting from the furnishing,
performance, or use of this material.
Amer.com is a registered trademark of Amer.com. All other trademarks and trade names are
properties of their owners.
Contact Information
Phone: [phone]
[e-mail]
[e-mail]
Online Shop

Switch Configuration SS2GR50i / SS2GR26i / SS2GR26ip
ii
Overview
SS2GR50i/26i/26ip series Layer 2/4 Gigabit Ethernet Switch is a high performance routing
switch released can be deployed as an aggregation device for enterprise and campus
networks.
The switch supports a variety of network interfaces from 100Mb, 1000Mb to 10 GB Ethernet.
We strongly recommend you to read through this manual before starting the installation
and configuration to avoid possible malfunction or damage to the switch.

Switch Configuration SS2GR50i / SS2GR26i / SS2GR26ip
iii
Table of Content
Chapter 1 Switch Management......................................................................................1
1.1 Management Options........................................................................................... 1
1.1.1 Out-of-band management ................................................................................ 1
1.1.2 In-band Management ....................................................................................... 4
1.2 CLI Interface ........................................................................................................9
1.2.1 Configuration Modes ...................................................................................... 10
1.2.2 Configuration Syntax ...................................................................................... 13
1.2.3 Shortcut Key Support ..................................................................................... 13
1.2.4 Help Function ................................................................................................. 14
1.2.5 Input Verification ............................................................................................. 15
1.2.6 Fuzzy Match Support...................................................................................... 15
Chapter 2 Basic Switch Configuration........................................................................ 16
2.1 Basic Switch Configuration Commands ............................................................. 16
2.2 Telnet Management............................................................................................ 17
2.2.1 Telnet.............................................................................................................. 17
2.2.2 SSH 18
2.3 Switch IP Addresses Configuration .................................................................... 20
2.3.1 Switch IP Addresses Configuration Task List.................................................. 20
2.4 SNMP Configuration .......................................................................................... 21
2.4.1 Introduction to SNMP ..................................................................................... 21
2.4.2 Introduction to MIB ......................................................................................... 22
2.4.3 Introduction to RMON..................................................................................... 24
2.4.4 SNMP Configuration....................................................................................... 24
2.4.5 Typical SNMP Configuration Examples .......................................................... 26
2.4.6 SNMP Troubleshooting................................................................................... 28
2.5 Switch Firmware Upgrade.................................................................................. 29
2.5.1 Switch System Files ....................................................................................... 29
2.5.2 BootROM Upgrade ......................................................................................... 29
2.5.3 FTP/TFTP Upgrade ........................................................................................ 32
Chapter 3 Cluster network management Configuration............................................ 42
3.1 Introduction to Cluster network management..................................................... 42
3.2 Cluster Network Management Configuration ..................................................... 43
3.3 Examples of Cluster Administration ................................................................... 45
3.4 Cluster Administrator Troubleshooting ............................................................... 46

Switch Configuration SS2GR50i / SS2GR26i / SS2GR26ip
iv
Chapter 4 Port Configuration.......................................................................................47
4.1 Introduction to Port............................................................................................. 47
4.2 Network Port Configuration................................................................................ 47
4.3 Port Configuration Example ...............................................................................49
4.4 Port Troubleshooting.......................................................................................... 50
Chapter 5 Port Loopback Detection Function Configuration.................................... 51
5.1 Introduction to Port Loopback Detection Function ............................................. 51
5.2 Port Loopback Detection Function Configuration Task List ................................ 51
5.3 Port Loopback Detection Example..................................................................... 53
5.4 Port Loopback Detection Troubleshooting ......................................................... 53
Chapter 6 PoE Port Configuration...............................................................................54
6.1 PoE Configuration..............................................................................................54
6.1.1 Turn on or off POE in global ........................................................................... 54
6.1.2 Configure max output power in global ............................................................ 54
6.1.3 Configure power manage mode in global ....................................................... 54
6.1.4 Configure nonstandard PD detect mode in global .......................................... 55
6.1.5 Turn on or off POE by port ............................................................................. 55
6.1.6 Configure max out power in port..................................................................... 55
6.1.7 Configure power out priority for ports ............................................................. 55
6.2 PoE Application Example................................................................................... 55
6.2.1 Example ......................................................................................................... 55
6.2.2 Enable global POE settings............................................................................ 56
6.3 PoE Settings Through Web GUI ........................................................................ 57
6.4 PoE Troubleshooting.......................................................................................... 59
Chapter 7 Port Channel Configuration........................................................................ 60
7.1 Introduction to Port Channel ..............................................................................60
7.2 Port Channel Configuration Task List ................................................................. 61
7.3 Port Channel Example ....................................................................................... 62
7.4 Port Channel Troubleshooting............................................................................ 64
Chapter 8 JUMBO Configuration.................................................................................65
8.1 JUMBO Introduction........................................................................................... 65
8.2 JUMBO Configuration Task List .........................................................................65
Chapter 9 VLAN Configuration ....................................................................................66
9.1 VLAN Configuration ...........................................................................................66
9.1.1 Introduction to VLAN ...................................................................................... 66
9.1.2 VLAN Configuration Task List ......................................................................... 67

Switch Configuration SS2GR50i / SS2GR26i / SS2GR26ip
v
9.1.3 Typical VLAN Application................................................................................ 69
9.2 GVRP Configuration........................................................................................... 70
9.2.1 Introduction to GVRP...................................................................................... 70
9.2.2 GVRP Configuration Task List ........................................................................ 71
9.2.3 Typical GVRP Application ............................................................................... 72
9.2.4 VLAN Troubleshooting.................................................................................... 73
9.3 Dot1q-tunnel Configuration ................................................................................73
9.3.1 Dot1q-tunnel Introduction ............................................................................... 73
9.3.2 Dot1q-tunnel Configuration............................................................................. 74
9.3.3 Typical Applications Of The Dot1q-tunnel ....................................................... 75
9.3.4 Dot1q-tunnel Troubleshooting......................................................................... 76
9.4 Dynamic VLAN Configuration ............................................................................76
9.4.1 Dynamic VLAN Introduction............................................................................ 76
9.4.2 Dynamic VLAN Configuration......................................................................... 77
9.4.3 Typical Application of the Dynamic VLAN....................................................... 79
9.4.4 Dynamic VLAN Troubleshooting..................................................................... 79
9.5 Voice VLAN Configuration.................................................................................. 80
9.5.1 Voice VLAN Introduction................................................................................. 80
9.5.2 Voice VLAN Configuration .............................................................................. 81
9.5.3 Typical Applications of the Voice VLAN .......................................................... 81
9.5.4 Voice VLAN Troubleshooting.......................................................................... 82
Chapter 10 MAC Table Configuration..........................................................................83
10.1 Introduction to MAC Table................................................................................ 83
10.1.1 Obtaining MAC Table.................................................................................... 83
10.1.2 Forward or Filter ........................................................................................... 84
10.2 MAC address table configuration .....................................................................85
10.3 Typical Configuration Examples ....................................................................... 86
10.4 Troubleshooting ............................................................................................... 87
10.5 MAC Address Function Extension.................................................................... 87
10.5.1 MAC Address Binding................................................................................... 87
Chapter 11 MSTP Configuration .................................................................................. 90
11.1 MSTP Introduction............................................................................................ 90
11.1.1 MSTP Region ............................................................................................... 90
11.1.2 Port Roles..................................................................................................... 92
11.1.3 MSTP Load Balance..................................................................................... 92
a) MSTP Configuration ...................................................................................92

Switch Configuration SS2GR50i / SS2GR26i / SS2GR26ip
vi
b) MSTP Example........................................................................................... 97
c) MSTP Troubleshooting ............................................................................. 101
Chapter 12 QoS Configuration...................................................................................102
12.1 QoS Introduction ............................................................................................ 102
12.1.1 QoS Terms.................................................................................................. 102
12.1.2 QoS Implementation................................................................................... 103
12.1.3 Basic QoS Model........................................................................................ 103
12.2 QoS Configuration ......................................................................................... 108
12.3 QoS Example..................................................................................................111
12.4 QoS Troubleshooting ..................................................................................... 114
Chapter 13 Flow-based Redirection .......................................................................... 115
13.1 Introduction to Flow-based Redirection.......................................................... 115
13.2 Flow-based Redirection Configuration Task List ............................................ 115
13.3 Flow-based Redirection Examples................................................................. 116
13.4 Flow-based Redirection Troubleshooting Help............................................... 116
Chapter 14 Layer 3 Management Configuration....................................................... 117
14.1 Layer 3 Interface ............................................................................................ 117
14.1.1 Introduction to Layer 3 Interface ..................................................................117
14.1.2 Layer 3 Interface Configuration Task List:....................................................117
14.2 IP Configuration ............................................................................................. 117
14.2.1 IPv4 Address Configuration .........................................................................118
14.2.2 IPv6 Configuration .......................................................................................118
14.2.3 IPv6 Troubleshooting.................................................................................. 121
14.3 ARP................................................................................................................ 121
14.3.1 Introduction to ARP..................................................................................... 121
14.3.2 ARP Configuration Task List: ...................................................................... 121
14.3.3 ARP Troubleshooting.................................................................................. 121
Chapter 15 ARP Scanning Prevention Function Configuration.............................. 122
15.1 Introduction to ARP Scanning Prevention Function ....................................... 122
15.2 ARP Scanning Prevention Configuration Task List......................................... 122
15.3 ARP Scanning Prevention Typical Examples ................................................. 125
15.4 ARP Scanning Prevention Troubleshooting Help ........................................... 125
Chapter 16 ARP GUARD Configuration.....................................................................127
16.1 ARP GUARD Introduction .............................................................................. 127
16.2 ARP GUARD Configuration Task List............................................................. 127
Chapter 17 DHCP Configuration................................................................................ 129

Switch Configuration SS2GR50i / SS2GR26i / SS2GR26ip
vii
17.1 Introduction to DHCP ..................................................................................... 129
17.2 DHCP Server Configuration ........................................................................... 130
17.3 DHCP Configuration Example........................................................................ 132
17.4 DHCP Troubleshooting .................................................................................. 134
Chapter 18 DHCP Snooping Configuration...............................................................135
18.1 DHCP Snooping Introduction ......................................................................... 135
18.2 DHCP Snooping Configuration Task List........................................................ 136
18.3 DHCP Snooping Typical Applications ............................................................ 139
18.4 DHCP Snooping Troubleshooting .................................................................. 140
18.4.1 Monitor and Debug ..................................................................................... 140
18.4.2 DHCP Snooping Troubleshooting............................................................... 140
Chapter 19 DHCP Option 82 Configuration............................................................... 141
19.1 Introduction to DHCP option 82 ..................................................................... 141
19.1.1 DHCP option 82 Message Structure........................................................... 141
19.1.2 DHCP Snooping option 82 working mechanism ......................................... 142
19.2 DHCP Snooping option 82 Configuration....................................................... 143
19.2.1 DHCP Snooping option 82 Configuration Task List..................................... 143
Chapter 20 IPv4 Multicast Protocol ........................................................................... 145
20.1 IPv4 Multicast Protocol Overview................................................................... 145
20.1.1 Introduction to Multicast.............................................................................. 145
20.1.2 Multicast Address ....................................................................................... 145
20.1.3 IP Multicast Packet Transmission............................................................... 147
20.1.4 IP Multicast Application .............................................................................. 147
20.2 DCSCM.......................................................................................................... 148
20.2.1 Introduction to DCSCM............................................................................... 148
20.2.2 DCSCM Configuration Task List ................................................................. 148
20.2.3 DCSCM Configuration Examples ............................................................... 151
20.2.4 DCSCM Troubleshooting............................................................................ 152
20.3 IGMP Snooping.............................................................................................. 153
20.3.1 Introduction to IGMP Snooping................................................................... 153
20.3.2 IGMP Snooping Configuration Task............................................................ 153
20.3.3 IGMP Snooping Example ........................................................................... 155
20.3.4 IGMP Snooping Troubleshooting................................................................ 158
Chapter 21 IPv6 Multicast Protocol ........................................................................... 159
21.1 MLD Snooping ............................................................................................... 159
21.1.1 MLD Snooping Introduction ........................................................................ 159

Switch Configuration SS2GR50i / SS2GR26i / SS2GR26ip
viii
21.1.2 MLD Snooping Configuration Task ............................................................. 159
21.1.3 MLD Snooping Examples ........................................................................... 161
21.1.4 MLD Snooping Troubleshooting ................................................................. 164
Chapter 22 Multicast VLAN Configuration................................................................ 165
22.1 Introductions to Multicast VLAN ..................................................................... 165
22.2 Multicast VLAN Configuration Task List ......................................................... 165
22.3 Examples Of Multicast VLAN ......................................................................... 166
Chapter 23 ACL Configuration................................................................................... 168
23.1 Introduction to ACL ........................................................................................ 168
23.1.1 Access-list................................................................................................... 168
23.1.2 Access-group.............................................................................................. 168
23.1.3 Access-list Action and Global Default Action............................................... 168
23.2 ACL Configuration .......................................................................................... 169
23.3 ACL Example ................................................................................................. 183
23.4 ACL Troubleshooting...................................................................................... 185
Chapter 24 802.1x Configuration............................................................................... 187
24.1 Introduction to 802.1x .................................................................................... 187
24.1.1 The Authentication Structure of 802.1x....................................................... 187
24.1.2 The Work Mechanism of 802.1x ................................................................. 189
24.1.3 The Encapsulation of EAPOL Messages .................................................... 189
24.1.4 The Encapsulation of EAP Attributes .......................................................... 191
24.1.5 Web Authentication Proxy based on 802.1x ............................................... 192
24.1.6 The Authentication Methods of 802.1x........................................................ 193
24.1.7 The Extension and Optimization of 802.1x ................................................. 198
24.1.8 The Features of VLAN Allocation................................................................ 199
24.2 802.1x Configuration Task List ....................................................................... 200
24.3 802.1x Application Example ........................................................................... 206
24.3.1 Examples of Guest Vlan Applications ......................................................... 206
24.3.2 Examples of IPv4 Radius Applications ....................................................... 209
24.3.3 IPv6 Radius Application.............................................................................. 210
24.3.4 802.1x Web Proxy Authentication Sample Application ................................211
24.4 802.1x Troubleshooting.................................................................................. 212
Chapter 25 Port/MAC Address Limiation in VLAN Configuratoin........................... 213
25.1 Introduction to the Number Limitation Function of Port, MAC in VLAN .......... 213
25.2 The Number Limitation Function of Port, MAC in VLAN Configuration Task
Sequence...............................................................................................................214

Switch Configuration SS2GR50i / SS2GR26i / SS2GR26ip
ix
25.3 The Number Limitation Function of Port, MAC in VLAN Typical Examples.... 215
25.4 The Number Limitation Function Of Port, MAC in VLAN Troubleshooting ..... 216
Chapter 26 Operational Configuration of AM Function ........................................... 217
26.1 Introduction to AM Function ........................................................................... 217
26.2 AM Function Configuration Task List .............................................................. 217
26.3 Example of AM Function ................................................................................ 219
26.4 AM Function Troubleshooting......................................................................... 219
Chapter 27 Security Feature Configuration.............................................................. 220
27.1 Security Feature Introduction ......................................................................... 220
27.2 Security Feature Configuration ...................................................................... 220
27.2.1 Prevent IP Spoofing Function Configuration Task List ................................ 220
27.2.2 Prevent TCP Unauthorized Label Attack Function Configuration Task List. 220
27.2.3 Anti Port Cheat Function Configuration Task List........................................ 221
27.2.4 Prevent TCP Fragment Attack Function Configuration Task List ................ 221
27.2.5 Prevent ICMP Fragment Attack Function Configuration Task List............... 221
27.3 Security Feature Example.............................................................................. 222
Chapter 28 TACACS+ Configuration ......................................................................... 223
28.1 TACACS+ Introduction ................................................................................... 223
28.2 TACACS+ Configuration ................................................................................ 223
28.3 Typical TACACS+ Scenarios.......................................................................... 224
28.4 TACACS+ Troubleshooting ............................................................................ 224
Chapter 29 MRPP Configuration................................................................................ 225
29.1 MRPP introduction ......................................................................................... 225
29.1.1 Conception Introduction.............................................................................. 226
29.1.2 MRPP Protocol Packet Types..................................................................... 227
29.1.3 MRPP Protocol Operation System ............................................................. 227
29.2 MRPP Configuration Task List........................................................................ 228
29.3 MRPP typical scenario ................................................................................... 229
29.4 MRPP troubleshooting ................................................................................... 231
Chapter 30 Mirroring Configuration ..........................................................................232
30.1 Introduction to Mirroring ................................................................................. 232
30.2 Mirroring Configuration Task List.................................................................... 232
30.3 Mirroring Examples ........................................................................................ 233
30.4 Mirroring Troubleshooting .............................................................................. 234
Chapter 31 SFlow Configuration................................................................................235
31.1 sFlow introduction .......................................................................................... 235