Digisol DG-FS4552 User manual

As our product undergoes continuous development the specifications are subject to change without prior notice
MUSTANG 4000 Managed Switch Series
DG-FS4528
DG-FS4552
L2/4 Fast Ethernet Switch
User Manual
V1.0.2
2012-01-03

COPYRIGHT
Copyright © 2010 by SNSL. All rights reserved. No part of this publication may be
reproduced, transmitted, transcribed, stored in a retrieval system, or translated
into any language or computer language, in any form or by any means, electronic,
mechanical, magnetic, optical, chemical, manual or otherwise, without the prior
written permission of SNSL.
SNSL makes no representations or warranties, either expressed or implied, with
respect to the contents hereof and specifically disclaims any warranties, mer-
chantability or fitness for any particular purpose. Any software described in this
manual is sold or licensed “as is”. Should the programs prove defective following
their purchase, the buyer (and not SNSL, its distributor, or its dealer) assumes the
entire cost of all necessary servicing, repair, and any incidental or consequential
damages resulting from any defect in the software. Further, SNSL reserves the
right to revise this publication and to make changes from time to time in the con-
tents thereof without obligation to notify any person of such revision or changes.
SNSL is the abbreviation name for Smartlink Network Systems Ltd.

User Manual
DG-FS4528/52 L2/4 Fast Ethernet Switch
Layer 2 Standalone Switch
with 24/48 10/100BASE-TX (RJ-45) Ports,
and 4 Combination Gigabit (RJ-45/SFP) Ports

DG-FS4528
DG-FS4552
E102010-CS-R01
F1.3.4.0
149100000106A

v
www.digisol.com
About This Guide
Purpose
This guide gives specific information on how to operate and use the management
functions of the switch.
Audience
The guide is intended for use by network administrators who are responsible for operating
and maintaining network equipment; consequently, it assumes a basic working
knowledge of general switch functions, the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
Conventions
The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features or
instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage the
system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Related Publications
The following publication details the hardware features of the switch, including the
physical and performance-related characteristics, and how to install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help that describes all
management related features.
Revision History
This section summarizes the changes in each revision of this guide.
January 2011Revision
This is the second revision of this guide. This guide is valid for software release v1.3.4.0.

About This Guide
vi www.digisol.com

vii
www.digisol.com
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Managing System Files 2-8
Saving Configuration Settings 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-13
Displaying System Information 3-13
Displaying Switch Hardware/Software Versions 3-15
Displaying Bridge Extension Capabilities 3-17
Setting the Switch’s IP Address 3-18
Manual Configuration 3-19
Using DHCP/BOOTP 3-20
Enabling Jumbo Frames 3-21
Managing Firmware 3-22
Automatic Operation Code Upgrade 3-22

Contents
viii
www.digisol.com
Downloading System Software from a Server 3-26
Saving or Restoring Configuration Settings 3-28
Downloading Configuration Settings from a Server 3-29
Uploading and Downloading Files Using HTTP 3-30
Console Port Settings 3-32
Telnet Settings 3-34
Configuring Event Logging 3-36
System Log Configuration 3-36
Remote Log Configuration 3-37
Displaying Log Messages 3-39
Sending Simple Mail Transfer Protocol Alerts 3-39
Resetting the System 3-41
Setting the System Clock 3-42
Setting the Time Manually 3-43
Configuring SNTP 3-43
Configuring NTP 3-44
Setting the Time Zone 3-46
Configuring Summer Time 3-47
Simple Network Management Protocol 3-49
Enabling the SNMP Agent 3-51
Setting Community Access Strings 3-51
Specifying Trap Managers and Trap Types 3-52
Configuring SNMPv3 Management Access 3-55
Setting the Local Engine ID 3-55
Specifying a Remote Engine ID 3-56
Configuring SNMPv3 Users 3-57
Configuring Remote SNMPv3 Users 3-59
Configuring SNMPv3 Groups 3-61
Setting SNMPv3 Views 3-64
Sampling Traffic Flows 3-65
Configuring sFlow Global Parameters 3-66
Configuring sFlow Port Parameters 3-68
User Authentication 3-70
Configuring User Accounts 3-70
Configuring Local/Remote Logon Authentication 3-72
Configuring Encryption Keys 3-75
AAA Authorization and Accounting 3-76
Configuring AAA RADIUS Group Settings 3-77
Configuring AAA TACACS+ Group Settings 3-78
Configuring AAA Accounting 3-78
AAA Accounting Update 3-80
AAA Accounting 802.1X Port Settings 3-81
AAA Accounting Exec Command Privileges 3-82
AAA Accounting Exec Settings 3-83
AAA Accounting Summary 3-83

DG-FS4552 User Manual
ix
www.digisol.com
Authorization Settings 3-85
Authorization EXEC Settings 3-86
Authorization Summary 3-87
Configuring HTTPS 3-88
Replacing the Default Secure-site Certificate 3-89
Configuring the Secure Shell 3-90
Generating the Host Key Pair 3-93
Importing User Public Keys 3-95
Configuring the SSH Server 3-97
Configuring 802.1X Port Authentication 3-99
Displaying 802.1X Global Settings 3-100
Configuring 802.1X Global Settings 3-101
Configuring Port Settings for 802.1X 3-101
Displaying 802.1X Statistics 3-105
Filtering IP Addresses for Management Access 3-107
General Security Measures 3-109
Configuring Port Security 3-110
Web Authentication 3-111
Configuring Web Authentication 3-112
Configuring Web Authentication for Ports 3-113
Displaying Web Authentication Port Information 3-114
Re-authenticating Web Authenticated Ports 3-114
Network Access (MAC Address Authentication) 3-115
Configuring the MAC Authentication Reauthentication Time 3-117
Configuring MAC Authentication for Ports 3-118
Configuring Port Link Detection 3-120
Displaying Secure MAC Address Information 3-121
MAC Filter Configuration 3-122
Access Control Lists 3-124
Setting the ACL Name and Type 3-125
Configuring a Standard IPv4 ACL 3-126
Configuring an Extended IPv4 ACL 3-127
Configuring a Standard IPv6 ACL 3-129
Configuring an Extended IPv6 ACL 3-130
Configuring a MAC ACL 3-131
Configuring an ARP ACL 3-133
Binding a Port to an Access Control List 3-135
ARP Inspection 3-136
Configuring ARP Inspection 3-136
Displaying ARP Inspection Port Information 3-141
DHCP Snooping 3-143
DHCP Snooping Configuration 3-144
DHCP Snooping VLAN Configuration 3-145
DHCP Snooping Information Option Configuration 3-146
Configuring Ports for DHCP Snooping 3-147

Contents
x
www.digisol.com
Displaying DHCP Snooping Binding Information 3-149
IP Source Guard 3-150
Configuring Ports for IP Source Guard 3-150
Configuring Static Binding for IP Source Guard 3-152
Displaying Information for Dynamic IP Source Guard Bindings 3-154
Port Configuration 3-155
Displaying Connection Status 3-155
Configuring Interface Connections 3-157
Creating Trunk Groups 3-160
Statically Configuring a Trunk 3-161
Enabling LACP on Selected Ports 3-162
Configuring Parameters for LACP Group Members 3-164
Configuring Parameters for LACP Groups 3-166
Displaying LACP Port Counters 3-167
Displaying LACP Settings and Status for the Local Side 3-168
Displaying LACP Settings and Status for the Remote Side 3-170
Setting Broadcast Storm Thresholds 3-172
Setting Multicast Storm Thresholds 3-174
Setting Unknown Unicast Storm Thresholds 3-175
Configuring Port Mirroring 3-177
Configuring MAC Address Mirroring 3-178
Configuring Rate Limits 3-179
Rate Limit Configuration 3-179
Showing Port Statistics 3-180
Address Table Settings 3-185
Setting Static Addresses 3-185
Displaying the Address Table 3-186
Changing the Aging Time 3-187
Spanning Tree Algorithm Configuration 3-188
Configuring Port and Trunk Loopback Detection 3-190
Displaying Global Settings for STA 3-191
Configuring Global Settings for STA 3-194
Displaying Interface Settings for STA 3-198
Configuring Interface Settings for STA 3-201
Spanning Tree Edge Port Configuration 3-204
Configuring Multiple Spanning Trees 3-206
Displaying Interface Settings for MSTP 3-209
Configuring Interface Settings for MSTP 3-211
VLAN Configuration 3-212
IEEE 802.1Q VLANs 3-212
Enabling or Disabling GVRP (Global Setting) 3-215
Displaying Basic VLAN Information 3-216
Displaying Current VLANs 3-217
Creating VLANs 3-218
Adding Static Members to VLANs (VLAN Index) 3-220

DG-FS4552 User Manual
xi
www.digisol.com
Adding Static Members to VLANs (Port Index) 3-222
Configuring VLAN Behavior for Interfaces 3-223
Configuring IEEE 802.1Q Tunneling 3-225
Enabling QinQ Tunneling on the Switch 3-229
Adding an Interface to a QinQ Tunnel 3-230
Traffic Segmentation 3-232
Configuring Global Settings for Traffic Segmentation 3-232
Configuring Traffic Segmentation Sessions 3-233
Private VLANs 3-234
Displaying Current Private VLANs 3-234
Configuring Private VLANs 3-235
Associating VLANs 3-236
Displaying Private VLAN Interface Information 3-237
Configuring Private VLAN Interfaces 3-238
Protocol VLANs 3-239
Configuring Protocol VLAN Groups 3-240
Mapping Protocols to VLANs 3-241
Configuring VLAN Mirroring 3-242
Configuring IP Subnet VLANs 3-243
Configuring MAC-based VLANs 3-244
Link Layer Discovery Protocol 3-245
Setting LLDP Timing Attributes 3-245
Configuring LLDP Interface Attributes 3-247
Displaying LLDP Local Device Information 3-250
Displaying LLDP Remote Port Information 3-253
Displaying LLDP Remote Information Details 3-254
Displaying Device Statistics 3-256
Displaying Detailed Device Statistics 3-257
Class of Service Configuration 3-259
Layer 2 Queue Settings 3-259
Setting the Default Priority for Interfaces 3-259
Mapping CoS Values to Egress Queues 3-261
Selecting the Queue Mode 3-262
Displaying the Service Weight for Traffic Classes 3-263
Layer 3/4 Priority Settings 3-265
Mapping Layer 3/4 Priorities to CoS Values 3-265
Enabling IP DSCP Priority 3-265
Mapping DSCP Priority 3-266
Quality of Service 3-268
Configuring Quality of Service Parameters 3-268
Configuring a Class Map 3-269
Creating QoS Policies 3-271
Attaching a Policy Map to Ingress Queues 3-274
VoIP Traffic Configuration 3-275
Configuring VoIP Traffic 3-275

Contents
xii
www.digisol.com
Configuring VoIP Traffic Ports 3-276
Configuring Telephony OUI 3-278
Multicast Filtering 3-280
Layer 2 IGMP (Snooping and Query) 3-281
Configuring IGMP Snooping and Query Parameters 3-282
Enabling IGMP Immediate Leave 3-284
Displaying Interfaces Attached to a Multicast Router 3-286
Specifying Static Interfaces for a Multicast Router 3-287
Displaying Port Members of Multicast Services 3-288
Assigning Ports to Multicast Services 3-289
IGMP Filtering and Throttling 3-290
Enabling IGMP Filtering and Throttling 3-290
Configuring IGMP Filter Profiles 3-291
Configuring IGMP Filtering and Throttling for Interfaces 3-293
Multicast VLAN Registration 3-295
Configuring Global MVR Settings 3-296
Displaying MVR Interface Status 3-298
Displaying Port Members of Multicast Groups 3-299
Configuring MVR Interface Status 3-300
Assigning Static Multicast Groups to Interfaces 3-302
Configuring MVR Receiver VLAN and Group Addresses 3-303
Displaying MVR Receiver Groups 3-304
Configuring Static MVR Receiver Group Members 3-305
Domain Name Service 3-306
Configuring General DNS Service Parameters 3-306
Configuring Static DNS Host to Address Entries 3-308
Displaying the DNS Cache 3-310
Switch Clustering 3-311
Configuring General Settings for Clusters 3-311
Cluster Member Configuration 3-313
Displaying Information on Cluster Members 3-314
Cluster Candidate Information 3-315
UPnP 3-316
UPnP Configuration 3-317
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-2
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3

DG-FS4552 User Manual
xiii
www.digisol.com
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-9
Command Groups 4-10
General Commands 4-11
enable 4-12
disable 4-12
configure 4-13
show history 4-13
reload (Privileged Exec) 4-14
reload (Global Configuration) 4-14
show reload 4-16
prompt 4-16
end 4-16
exit 4-17
quit 4-17
System Management Commands 4-18
Device Designation Commands 4-18
hostname 4-18
Banner Information Commands 4-19
banner configure 4-20
banner configure company 4-21
banner configure dc-power-info 4-22
banner configure department 4-22
banner configure equipment-info 4-23
banner configure equipment-location 4-24
banner configure ip-lan 4-24
banner configure lp-number 4-25
banner configure manager-info 4-26
banner configure mux 4-26
banner configure note 4-27
show banner 4-28
System Status Commands 4-29
show startup-config 4-29
show running-config 4-30
show system 4-33
show users 4-33
show version 4-34

Contents
xiv
www.digisol.com
Frame Size Commands 4-35
jumbo frame 4-35
File Management Commands 4-36
copy 4-37
delete 4-40
dir 4-40
whichboot 4-41
boot system 4-42
upgrade opcode auto 4-42
upgrade opcode path 4-43
Line Commands 4-44
line 4-45
login 4-46
password 4-47
timeout login response 4-48
exec-timeout 4-48
password-thresh 4-49
silent-time 4-50
databits 4-50
parity 4-51
speed 4-52
stopbits 4-52
terminal length 4-53
terminal width 4-53
terminal escape-character 4-54
terminal terminal-type 4-54
terminal history 4-55
disconnect 4-55
show line 4-56
Event Logging Commands 4-57
logging on 4-57
logging history 4-58
logging host 4-59
logging facility 4-59
logging trap 4-60
clear log 4-60
show logging 4-61
show log 4-62
SMTP Alert Commands 4-63
logging sendmail host 4-63
logging sendmail level 4-64
logging sendmail source-email 4-64
logging sendmail destination-email 4-65
logging sendmail 4-65
show logging sendmail 4-65

DG-FS4552 User Manual
xv
www.digisol.com
Time Commands 4-67
sntp client 4-68
sntp server 4-69
sntp poll 4-69
show sntp 4-70
ntp client 4-70
ntp server 4-71
ntp authenticate 4-72
ntp authentication-key 4-73
show ntp 4-74
clock timezone-predefined 4-74
clock timezone 4-75
clock summer-time (date) 4-76
clock summer-time (predefined) 4-77
clock summer-time (recurring) 4-78
calendar set 4-79
show calendar 4-80
Switch Cluster Commands 4-80
cluster 4-81
cluster commander 4-81
cluster ip-pool 4-82
cluster member 4-83
rcommand 4-83
show cluster 4-84
show cluster members 4-84
show cluster candidates 4-84
UPnP Commands 4-84
upnp device 4-85
upnp device ttl 4-85
upnp device advertise duration 4-86
show upnp 4-86
SNMP Commands 4-87
snmp-server 4-88
show snmp 4-89
snmp-server community 4-90
snmp-server contact 4-90
snmp-server location 4-91
snmp-server host 4-92
snmp-server enable traps 4-94
snmp-server engine-id 4-95
show snmp engine-id 4-96
snmp-server view 4-96
show snmp view 4-97
snmp-server group 4-98
show snmp group 4-99

Contents
xvi
www.digisol.com
snmp-server user 4-100
show snmp user 4-101
Flow Sampling Commands 4-102
sflow 4-103
sflow source 4-103
sflow sample 4-104
sflow polling-interval 4-104
sflow owner 4-105
sflow timeout 4-105
sflow destination 4-106
sflow max-header-size 4-106
sflow max-datagram-size 4-107
show sflow 4-107
Authentication Commands 4-108
User Account and Privilege Level Commands 4-109
username 4-109
enable password 4-110
privilege 4-111
privilege rerun 4-112
show privilege 4-112
Authentication Sequence 4-113
authentication login 4-113
authentication enable 4-114
RADIUS Client 4-115
radius-server host 4-115
radius-server acct-port 4-116
radius-server auth-port 4-116
radius-server key 4-117
radius-server retransmit 4-117
radius-server timeout 4-118
show radius-server 4-119
TACACS+ Client 4-119
tacacs-server host 4-120
tacacs-server port 4-120
tacacs-server key 4-121
tacacs-server retransmit 4-121
tacacs-server timeout 4-122
show tacacs-server 4-122
AAA Commands 4-123
aaa group server 4-123
server 4-124
aaa accounting dot1x 4-125
aaa accounting exec 4-126
aaa accounting commands 4-127
aaa accounting update 4-128

DG-FS4552 User Manual
xvii
www.digisol.com
accounting dot1x 4-128
accounting exec 4-129
accounting commands 4-129
aaa authorization exec 4-130
authorization exec 4-131
show accounting 4-131
Web Server Commands 4-132
ip http port 4-132
ip http server 4-133
ip http secure-server 4-133
ip http secure-port 4-134
Telnet Server Commands 4-135
ip telnet server 4-135
Secure Shell Commands 4-136
ip ssh server 4-138
ip ssh timeout 4-139
ip ssh authentication-retries 4-139
ip ssh server-key size 4-140
delete public-key 4-140
ip ssh crypto host-key generate 4-141
ip ssh crypto zeroize 4-141
ip ssh save host-key 4-142
show ip ssh 4-142
show ssh 4-143
show public-key 4-144
802.1X Port Authentication 4-145
dot1x system-auth-control 4-145
dot1x default 4-146
dot1x max-req 4-146
dot1x port-control 4-146
dot1x operation-mode 4-147
dot1x re-authenticate 4-148
dot1x re-authentication 4-149
dot1x timeout quiet-period 4-149
dot1x timeout re-authperiod 4-150
dot1x timeout tx-period 4-150
dot1x timeout supp-timeout 4-151
dot1x intrusion-action 4-151
show dot1x 4-152
Management IP Filter Commands 4-155
management 4-155
show management 4-156
General Security Measures 4-157
Port Security Commands 4-158
port security 4-158

Contents
xviii
www.digisol.com
Network Access (MAC Address Authentication) 4-160
network-access aging 4-161
network-access mac-filter 4-161
network-access port-mac-filter 4-162
network-access max-mac-count 4-162
network-access mode 4-163
mac-authentication reauth-time 4-164
mac-authentication intrusion-action 4-165
mac-authentication max-mac-count 4-165
network-access dynamic-vlan 4-166
network-access guest-vlan 4-166
network-access dynamic-qos 4-167
network-access link-detection 4-168
network-access link-detection link-down 4-168
network-access link-detection link-up 4-169
network-access link-detection link-up-down 4-169
clear network-access 4-170
show network-access 4-170
show network-access mac-address-table 4-171
show network-access mac-filter 4-172
Web Authentication 4-173
web-auth login-attempts 4-173
web-auth quiet-period 4-174
web-auth session-timeout 4-174
web-auth system-auth-control 4-175
web-auth 4-175
web-auth re-authenticate (Port) 4-176
web-auth re-authenticate (IP) 4-176
show web-auth 4-177
show web-auth interface 4-177
show web-auth summary 4-178
DHCP Snooping Commands 4-178
ip dhcp snooping 4-179
ip dhcp snooping vlan 4-180
ip dhcp snooping trust 4-181
ip dhcp snooping verify mac-address 4-182
ip dhcp snooping information option 4-183
ip dhcp snooping information policy 4-184
ip dhcp snooping database flash 4-184
clear ip dhcp snooping database flash 4-185
show ip dhcp snooping 4-185
show ip dhcp snooping binding 4-185
IP Source Guard Commands 4-186
ip source-guard 4-186
ip source-guard binding 4-188

DG-FS4552 User Manual
xix
www.digisol.com
show ip source-guard 4-189
show ip source-guard binding 4-189
ARP Inspection Commands 4-190
ip arp inspection 4-190
ip arp inspection vlan 4-191
ip arp inspection filter 4-192
ip arp inspection validate 4-193
ip arp inspection log-buffer logs 4-194
ip arp inspection trust 4-195
ip arp inspection limit 4-195
show ip arp inspection configuration 4-196
show ip arp inspection interface 4-196
show ip arp inspection vlan 4-197
show ip arp inspection log 4-197
show ip arp inspection statistics 4-198
Access Control List Commands 4-198
IPv4 ACLs 4-199
access-list rule-mode 4-199
access-list ip 4-200
permit, deny (Standard IPv4 ACL) 4-201
permit, deny (Extended IPv4 ACL) 4-202
show ip access-list 4-204
ip access-group 4-204
show ip access-group 4-205
IPv6 ACLs 4-205
access-list ipv6 4-206
permit, deny (Standard IPv6 ACL) 4-207
permit, deny (Extended IPv6 ACL) 4-208
show ipv6 access-list 4-209
ipv6 access-group 4-209
show ipv6 access-group 4-210
ARP ACLs 4-210
access-list arp 4-211
permit, deny (ARP ACL) 4-212
show arp access-list 4-213
MAC ACLs 4-214
access-list mac 4-214
permit, deny (MAC ACL) 4-215
show mac access-list 4-216
mac access-group 4-217
show mac access-group 4-217
ACL Information 4-218
show access-list 4-218
show access-group 4-218

Contents
xx
www.digisol.com
Interface Commands 4-219
interface 4-220
description 4-220
speed-duplex 4-221
negotiation 4-222
capabilities 4-223
flowcontrol 4-224
media-type 4-225
giga-phy-mode 4-225
shutdown 4-226
switchport packet-rate 4-227
clear counters 4-228
show interfaces brief 4-228
show interfaces status 4-229
show interfaces counters 4-230
show interfaces switchport 4-231
Automatic Traffic Control Commands 4-233
auto-traffic-control apply-timer 4-236
auto-traffic-control release-timer 4-237
auto-traffic-control 4-238
auto-traffic-control alarm-fire-threshold 4-238
auto-traffic-control alarm-clear-threshold 4-239
auto-traffic-control action 4-240
auto-traffic-control control-release 4-241
auto-traffic-control auto-control-release 4-242
snmp-server enable port-traps atc broadcast-alarm-fire 4-242
snmp-server enable port-traps atc multicast-alarm-fire 4-243
snmp-server enable port-traps atc broadcast-alarm-clear 4-243
snmp-server enable port-traps atc multicast-alarm-clear 4-244
snmp-server enable port-traps atc broadcast-control-apply 4-244
snmp-server enable port-traps atc multicast-control-apply 4-245
snmp-server enable port-traps atc broadcast-control-release 4-245
snmp-server enable port-traps atc multicast-control-release 4-246
show auto-traffic-control 4-246
show auto-traffic-control interface 4-247
Link Aggregation Commands 4-248
channel-group 4-249
lacp 4-250
lacp system-priority 4-251
lacp admin-key (Ethernet Interface) 4-252
lacp admin-key (Port Channel) 4-253
lacp port-priority 4-254
lacp active/passive 4-255
show lacp 4-255