Black Box LGB6026A Programming manual

BL A C K B OX®
Management Guide
This smart, stackable switch offers 10-Gbps uplinks plus full SNMP
and Web management.
Gigabit L3 Managed Switch with 10G Uplinks, 24-Port or 48-Port
LGB6026A
LGB6050A
Order toll-free in the U.S.: Call 877-877-BBOX (outside U.S. call 724-746-5500)
FREE technical support 24 hours a day, 7 days a week: Call 724-746-5500 or fax [phone]
Mailing address: Black Box Corporation, 1000 Park Drive, Lawrence, PA 15055-1018
Web site: www.blackbox.com • E-mail: [e-mail]
Customer
Support
Information

724-746-5500 | blackbox.com
724-746-5500 | blackbox.com
Trademarks Used in this Manual
Black Box and the Double Diamond logo are registered trademarks of BB Technologies, Inc.
Any other trademarks mentioned in this manual are acknowledged to be the property of the trademark owners.

724-746-5500 | blackbox.com
724-746-5500 | blackbox.com
LGB6026A GIGABIT ETHERNET SWITCH: LGB6050A GIGABIT ETHERNET SWITCH
Layer 3 Stackable Gigabit Ethernet Switch Layer 3 Stackable Gigabit Ethernet Switch
with 20 10/100/1000BASE-T (RJ-45) Ports, with 44 10/100/1000BASE-T (RJ-45) Ports,
4 Gigabit Combination Ports (RJ-45/SFP), 4 Gigabit Combination Ports (RJ-45/SFP),
2 10-Gigabit Extender Module Slots, 2 10-Gigabit Extender Module Slots,
and 2 Stacking Ports and 2 Stacking Ports
We‘re here to help! If you have any questions about your application
or our products, contact Black Box Tech Support at 724-746-5500
or go to blackbox.com and click on “Talk to Black Box.”
You’ll be live with one of our technical experts in less than 30 seconds.

M AN AGEMEN T G UI D E
LGB6026A GIGABIT ETHERNET S WITCH
Layer 3 Switch
with 20 10/100/1000BASE-T (RJ-45) Ports,
4 Gigabit Combination Ports (RJ-45/SFP),
2 10-Gigabit Extender Module Slots,
and 2 Stacking Ports
LGB6050A GIGABIT ETHERNET S WITCH
Layer 3 Switch
with 44 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP),
2 10-Gigabit Extender Module Slots,
and 2 Stacking Ports
LGB6026A
LGB6050A
E0 52010/ST -R0 1
149100000077A

ABOUT THIS G UIDE
– 3 –
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
NOTE: Emphasizes important information or callsyour attention to related
features or instructions.
CAUTION: Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
WARNING: Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
MAY 2010 RELEASE
This is the first release of this guide. This guide is valid for software release
v1.1.1.1.

ABOUT THIS GUIDE
– 4 –

– 5 –
C ONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 39
TABLES 51
SECTION I
GETTING S TARTED
57
1
I NTRODUCTION
59
Key Features
59
Description of Software Features
60
Configuration Backup and Restore
60
Authentication
60
Access Control Lists
61
DHCP
61
Port Configuration
61
Port Mirroring
61
Port Trunking
61
Rate Limiting
62
Broadcast Storm Control
62
Static Addresses
62
IEEE 802.1D Bridge
62
Store-and-Forward Switching
62
Spanning Tree Algorithm
62
Virtual LANs
63
IEEE 802.1Q Tunneling (QinQ)
63
Traffic Prioritization
64
Quality of Service
64
IP Routing
64
Equal-cost Multipath Load Balancing
65
Router Redundancy
65

– 6 –
CONTENTS
Address Resolution Protocol 65
Multicast Filtering 65
Multicast Routing 65
Tunneling 66
System Defaults 66
2 INITIAL SWITCH CONFIGURATION 69
Connecting to the Switch 69
Configuration Options 69
Required Connections 70
Remote Connections 71
Basic Configuration 72
Console Connection 72
Setting Passwords 72
Setting an IP Address 73
Enabling SNMP Management Access 78
Managing System Files 80
Saving or Restoring Configuration Settings 81
SECTION II
WEB C ONFIGURATION
83
3
USING THE WEB I NTERFACE
85
Connecting to the Web Interface
85
Navigating the Web Browser Interface
86
Home Page
86
Configuration Options
87
Panel Display
87
Main Menu
88
4
BASIC MANAGEMENT T ASKS
105
Displaying System Information
105
Displaying Switch Hardware/Software Versions
107
Configuring Support for Jumbo Frames
108
Displaying Bridge Extension Capabilities
109
Managing System Files
110
Copying Files via FTP/TFTP or HTTP
110
Saving the Running Configuration to a Local File
113
Setting The Start-Up File
114

– 7 –
CONTENTS
Showing System Files
115
Setting the System Clock
115
Setting the Time Manually
116
Configuring SNTP
117
Specifying SNTP Time Servers
118
Setting the Time Zone
119
Console Port Settings
120
Telnet Settings
122
Displaying CPU Utilization
123
Displaying Memory Utilization
124
Resetting the System
125
5
INTERFACE C ONFIGURATION
129
Port Configuration
129
Configuring by Port List
129
Configuring by Port Range
132
Displaying Connection Status
133
Configuring Port Mirroring
134
Showing Port or Trunk Statistics
136
Trunk Configuration
140
Configuring a Static Trunk
141
Configuring a Dynamic Trunk
144
Displaying LACP Port Counters
149
Displaying LACP Settings and Status for the Local Side
150
Displaying LACP Settings and Status for the Remote Side
152
Sampling Traffic Flows
153
Configuring sFlow Parameters
154
Traffic Segmentation
156
Enabling Traffic Segmentation
156
Configuring Uplink and Downlink Ports
157
VLAN Trunking
158
6
VLAN C ONFIGURATION
161
IEEE 802.1Q VLANs
161
Configuring VLAN Groups
164
Adding Static Members to VLANs
166
Configuring Dynamic VLAN Registration
171

– 8 –
CONTENTS
Private VLANs 174
Creating Private VLANs 175
Associating Private VLANs 176
Configuring Private VLAN Interfaces 177
IEEE 802.1Q Tunneling 179
Enabling QinQ Tunneling on the Switch 183
Adding an Interface to a QinQ Tunnel 184
Protocol VLANs 185
Configuring Protocol VLAN Groups 186
Mapping Protocol Groups to Interfaces 188
Configuring IP Subnet VLANs 190
Configuring MAC-based VLANs 192
7 ADDRESS TABLE SETTINGS 195
Configuring MAC Address Learning 195
Setting Static Addresses 197
Changing the Aging Time 198
Displaying the Dynamic Address Table 199
Clearing the Dynamic Address Table 200
8 SPANNING TREE ALGORITHM 203
Overview 203
Configuring Loopback Detection 206
Configuring Global Settings for STA 207
Displaying Global Settings for STA 212
Configuring Interface Settings for STA 213
Displaying Interface Settings for STA 217
Configuring Multiple Spanning Trees 220
Configuring Interface Settings for MSTP 224
9 RATE LIMIT CONFIGURATION 227
10 STORM CONTROL CONFIGURATION 229
11 CLASS OF SERVICE 231
Layer 2 Queue Settings 231
Setting the Default Priority for Interfaces 231
Selecting the Queue Mode 232
12 QUALITY OF SERVICE 237
Overview 237
Configuring a Class Map 238

– 9 –
CONTENTS
Creating QoS Policies 241
Attaching a Policy Map to a Port 251
13 VOIP TRAFFIC CONFIGURATION 253
Overview 253
Configuring VoIP Traffic 253
Configuring Telephony OUI 255
Configuring VoIP Traffic Ports 256
14 SECURITY MEASURES 259
AAA Authorization and Accounting 260
Configuring Local/Remote Logon Authentication 261
Configuring Remote Logon Authentication Servers 262
Configuring AAA Accounting 267
Configuring AAA Authorization 272
Configuring User Accounts 275
Web Authentication 276
Configuring Global Settings for Web Authentication 277
Configuring Interface Settings for Web Authentication 278
Network Access (MAC Address Authentication) 279
Configuring Global Settings for Network Access 281
Configuring Network Access for Ports 282
Configuring Port Link Detection 284
Configuring a MAC Address Filter 285
Displaying Secure MAC Address Information 287
Configuring HTTPS 288
Configuring Global Settings for HTTPS 288
Replacing the Default Secure-site Certificate 290
Configuring the Secure Shell 292
Configuring the SSH Server 294
Generating the Host Key Pair 296
Importing User Public Keys 297
Access Control Lists 299
Setting A Time Range 300
Setting the ACL Name and Type 303
Configuring a Standard IPv4 ACL 304
Configuring an Extended IPv4 ACL 306
Configuring a Standard IPv6 ACL 308

– 10 –
CONTENTS
Configuring an Extended IPv6 ACL 310
Configuring a MAC ACL 312
Configuring an ARP ACL 314
Binding a Port to an Access Control List 316
ARP Inspection 317
Configuring Global Settings for ARP Inspection 318
Configuring VLAN Settings for ARP Inspection 320
Configuring Interface Settings for ARP Inspection 322
Displaying ARP Inspection Statistics 323
Displaying the ARP Inspection Log 324
Filtering IP Addresses for Management Access 325
Configuring Port Security 327
Configuring 802.1X Port Authentication 329
Configuring 802.1X Global Settings 330
Configuring Port Settings for 802.1X 332
Displaying 802.1X Statistics 336
IP Source Guard 337
Configuring Ports for IP Source Guard 337
Configuring Static Bindings for IP Source Guard 339
Displaying Information for Dynamic IP Source Guard Bindings 342
DHCP Snooping 343
DHCP Snooping Configuration 346
DHCP Snooping VLAN Configuration 347
Configuring Ports for DHCP Snooping 348
Displaying DHCP Snooping Binding Information 349
15 BASIC ADMINISTRATION PROTOCOLS 351
Configuring Event Logging 351
System Log Configuration 351
Remote Log Configuration 353
Sending Simple Mail Transfer Protocol Alerts 355
Link Layer Discovery Protocol 356
Setting LLDP Timing Attributes 356
Configuring LLDP Interface Attributes 358
Displaying LLDP Local Device Information 361
Displaying LLDP Remote Port Information 363
Displaying Device Statistics 368

– 11 –
CONTENTS
Simple Network Management Protocol 370
Configuring Global Settings for SNMP 372
Setting the Local Engine ID 373
Specifying a Remote Engine ID 374
Setting SNMPv3 Views 376
Configuring SNMPv3 Groups 379
Setting Community Access Strings 382
Configuring Local SNMPv3 Users 384
Configuring Remote SNMPv3 Users 386
Specifying Trap Managers 388
Remote Monitoring 392
Configuring RMON Alarms 393
Configuring RMON Events 396
Configuring RMON History Samples 398
Configuring RMON Statistical Samples 400
16 MULTICAST FILTERING 403
Overview 403
IGMP Protocol 404
Layer 2 IGMP (Snooping and Query) 405
Configuring IGMP Snooping and Query Parameters 407
Specifying Static Interfaces for a Multicast Router 411
Assigning Interfaces to Multicast Services 413
Setting IGMP Snooping Status per Interface 415
Displaying Multicast Groups Discovered by IGMP Snooping 420
Filtering and Throttling IGMP Groups 421
Enabling IGMP Filtering and Throttling 422
Configuring IGMP Filter Profiles 423
Configuring IGMP Filtering and Throttling for Interfaces 425
Layer 3 IGMP (Query used with Multicast Routing) 426
Configuring IGMP Proxy Routing 427
Configuring IGMP Interface Parameters 430
Configuring Static IGMP Group Membership 433
Displaying Multicast Group Information 435
Multicast VLAN Registration 437
Configuring Global MVR Settings 439
Configuring the MVR Group Range 440

– 12 –
CONTENTS
Configuring MVR Interface Status 441
Assigning Static Multicast Groups to Interfaces 444
Showing Multicast Groups Assigned to Interfaces 445
17 IP CONFIGURATION 447
Setting the Switch’s IP Address (IP Version 4) 447
Setting the Switch’s IP Address (IP Version 6) 451
Configuring the IPv6 Default Gateway 451
Configuring IPv6 Interface Settings 452
Configuring an IPv6 Address 455
Showing IPv6 Addresses 458
Showing the IPv6 Neighbor Cache 459
Showing IPv6 Statistics 461
Showing the MTU for Responding Destinations 466
18 GENERAL IP ROUTING 469
Overview 469
Initial Configuration 469
IP Routing and Switching 470
Routing Path Management 471
Routing Protocols 472
Configuring IP Routing Interfaces 472
Configuring Local and Remote Interfaces 472
Using the Ping Function 473
Using the Trace Route Function 474
Address Resolution Protocol 475
Basic ARP Configuration 476
Configuring Static ARP Addresses 478
Displaying Dynamic or Local ARP Entries 479
Displaying ARP Statistics 480
Configuring Static Routes 481
Displaying theRouting Table 483
Equal-cost Multipath Routing 484
19 CONFIGURING ROUTER REDUNDANCY 487
Configuring VRRP Groups 488
Displaying VRRP Global Statistics 494
Displaying VRRP Group Statistics 495

– 13 –
CONTENTS
20 IP SERVICES 497
Domain Name Service 497
Configuring General DNS Service Parameters 497
Configuring a List of Domain Names 498
Configuring a List of Name Servers 500
Configuring Static DNS Host to Address Entries 501
Displaying the DNS Cache 502
Dynamic Host Configuration Protocol 503
Configuring DHCP Relay Service 504
Configuring the DHCP Server 505
Forwarding UDP Service Requests 512
Enabling the UDP Helper 512
Specifying UDP Destination Ports 513
Specifying The Target Server or Subnet 514
21 UNICAST ROUTING 517
Overview 517
Configuring the Routing Information Protocol 518
Configuring General Protocol Settings 519
Clearing Entries from the Routing Table 522
Specifying Network Interfaces 523
Specifying Passive Interfaces 525
Specifying Static Neighbors 526
Configuring Route Redistribution 527
Specifying an Administrative Distance 529
Configuring Network Interfaces for RIP 530
Displaying RIP Interface Settings 534
Displaying Peer Router Information 535
Resetting RIP Statistics 536
Configuring the Open Shortest Path First Protocol (Version 2) 536
Defining Network Areas Based on Addresses 538
Configuring General Protocol Settings 541
Displaying Adminstrative Settings and Statistics 544
Adding an NSSA or Stub 546
Configuring NSSA Settings 547
Configuring Stub Settings 550
Displaying Information on NSSA and Stub Areas 552

– 14 –
CONTENTS
Configuring Area Ranges (Route Summarization for ABRs) 553
Redistributing External Routes 555
Configuring Summary Addresses (for External AS Routes) 557
Configuring OSPF Interfaces 559
Configuring Virtual Links 565
Displaying Link State Database Information 568
Displaying Information on Virtual Links 570
Displaying Information on Neighboring Routers 572
22 MULTICAST ROUTING 575
Overview 575
Configuring Global Settings for Multicast Routing 578
Enabling Multicast Routing Globally 578
Displaying the Multicast Routing Table 578
Configuring PIM for IPv4 582
Enabling PIM Globally 582
Configuring PIM Interface Settings 582
Displaying Neighbor Information 588
Configuring Global PIM-SM Settings 588
Configuring a BSR Candidate 590
Configuring a Static Rendezvous Point 591
Configuring an RP Candidate 593
Displaying the BSR Router 595
Displaying RP Mapping 597
Configuring PIMv6 for IPv6 598
Enabling PIM Globally 598
Configuring PIM Interface Settings 599
Displaying Neighbor Information 602
SECTION III
COMMAND LINE I NTERFACE
605
23
USING THE COMMAND LINE I NTERFACE
607
Accessing the CLI
607
Console Connection
607
Telnet Connection
608
Entering Commands
609
Keywords and Arguments
609

– 15 –
CONTENTS
Minimum Abbreviation 609
Command Completion 609
Getting Help on Commands 610
Partial Keyword Lookup 611
Negating the Effect of Commands 611
Using Command History 611
Understanding Command Modes 612
Exec Commands 612
Configuration Commands 613
Command Line Processing 615
CLI Command Groups 616
24 GENERAL COMMANDS 619
prompt 619
reload (Global Configuration) 620
enable 621
quit 622
show history 622
configure 623
disable 624
reload (Privileged Exec) 624
show reload 625
end 625
exit 625
25 SYSTEM MANAGEMENT COMMANDS 627
Device Designation 627
hostname 628
System Status 628
show memory 628
show process cpu 629
show running-config 629
show startup-config 631
show system 631
show users 632
show version 633
Frame Size 634
jumbo frame 634

– 16 –
CONTENTS
Fan Control 635
fan-speed force-full 635
File Management 635
boot system 636
copy 637
delete 640
dir 640
whichboot 641
Line 642
line 643
databits 643
exec-timeout 644
login 645
parity 646
password 646
password-thresh 647
silent-time 648
speed 648
stopbits 649
timeout login response 650
disconnect 650
show line 651
Event Logging 652
logging facility 652
logging history 653
logging host 654
logging on 654
logging trap 655
clear log 655
show log 656
show logging 657
SMTP Alerts 658
logging sendmail 659
logging sendmail host 659
logging sendmail level 660
logging sendmail destination-email 660

– 17 –
CONTENTS
logging sendmail source-email 661
show logging sendmail 661
Time 662
sntp client 662
sntp poll 663
sntp server 664
show sntp 664
clock timezone 665
calendar set 666
show calendar 666
Time Range 667
time-range 667
absolute 668
periodic 668
show time-range 669
26 SNMP COMMANDS 671
snmp-server 672
snmp-server community 672
snmp-server contact 673
snmp-server location 673
show snmp 674
snmp-server enable traps 675
snmp-server host 676
snmp-server engine-id 678
snmp-server group 679
snmp-server user 681
snmp-server view 682
show snmp engine-id 683
show snmp group 684
show snmp user 685
show snmp view 686
nlm 686
snmp-server notify-filter 687
show nlm oper-status 688
show snmp notify-filter 689

– 18 –
CONTENTS
27 REMOTE MONITORING COMMANDS 691
rmon alarm 692
rmon event 693
rmon collection history 694
rmon collection stats 695
show rmon alarm 696
show rmon event 696
show rmon history 696
show rmon statistics 697
28 FLOW SAMPLING COMMANDS 699
sflow destination 699
sflow max-datagram-size 700
sflow max-header-size 701
sflow owner 701
sflow sample 702
sflow source 702
sflow timeout 703
show sflow 703
29 AUTHENTICATION COMMANDS 705
User Accounts 705
enable password 706
username 707
Authentication Sequence 708
authentication enable 708
authentication login 709
RADIUS Client 710
radius-server acct-port 710
radius-server auth-port 711
radius-server host 711
radius-server key 712
radius-server retransmit 713
radius-server timeout 713
show radius-server 714
TACACS+ Client 714
tacacs-server 715
tacacs-server host 715