Digisol DG-FS4552 User manual

As our product undergoes continuous development the specifications are subject to change without prior notice
MUSTANG 4000 Managed Switch Series
DG-FS4528
DG-FS4552
L2/4 Fast Ethernet Switch
User Manual
V1.0.2
2012-01-03

COPYRIGHT
Copyright © 2010 by SNSL. All rights reserved. No part of this publication may be
reproduced, transmitted, transcribed, stored in a retrieval system, or translated
into any language or computer language, in any form or by any means, electronic,
mechanical, magnetic, optical, chemical, manual or otherwise, without the prior
written permission of SNSL.
SNSL makes no representations or warranties, either expressed or implied, with
respect to the contents hereof and specifically disclaims any warranties, mer-
chantability or fitness for any particular purpose. Any software described in this
manual is sold or licensed “as is”. Should the programs prove defective following
their purchase, the buyer (and not SNSL, its distributor, or its dealer) assumes the
entire cost of all necessary servicing, repair, and any incidental or consequential
damages resulting from any defect in the software. Further, SNSL reserves the
right to revise this publication and to make changes from time to time in the con-
tents thereof without obligation to notify any person of such revision or changes.
SNSL is the abbreviation name for Smartlink Network Systems Ltd.

User Manual
DG-FS4528/52 L2/4 Fast Ethernet Switch
Layer 2 Standalone Switch
with 24/48 10/100BASE-TX (RJ-45) Ports,
and 4 Combination Gigabit (RJ-45/SFP) Ports

DG-FS4528
DG-FS4552
E102010-CS-R01
F1.3.4.0
149100000106A

v
www.digisol.com
About This Guide
Purpose
This guide gives specific information on how to operate and use the management
functions of the switch.
Audience
The guide is intended for use by network administrators who are responsible for operating
and maintaining network equipment; consequently, it assumes a basic working
knowledge of general switch functions, the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
Conventions
The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features or
instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage the
system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Related Publications
The following publication details the hardware features of the switch, including the
physical and performance-related characteristics, and how to install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help that describes all
management related features.
Revision History
This section summarizes the changes in each revision of this guide.
January 2011Revision
This is the second revision of this guide. This guide is valid for software release v1.3.4.0.

About This Guide
vi www.digisol.com

vii
www.digisol.com
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Managing System Files 2-8
Saving Configuration Settings 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-13
Displaying System Information 3-13
Displaying Switch Hardware/Software Versions 3-15
Displaying Bridge Extension Capabilities 3-17
Setting the Switch’s IP Address 3-18
Manual Configuration 3-19
Using DHCP/BOOTP 3-20
Enabling Jumbo Frames 3-21
Managing Firmware 3-22
Automatic Operation Code Upgrade 3-22

Contents
viii
www.digisol.com
Downloading System Software from a Server 3-26
Saving or Restoring Configuration Settings 3-28
Downloading Configuration Settings from a Server 3-29
Uploading and Downloading Files Using HTTP 3-30
Console Port Settings 3-32
Telnet Settings 3-34
Configuring Event Logging 3-36
System Log Configuration 3-36
Remote Log Configuration 3-37
Displaying Log Messages 3-39
Sending Simple Mail Transfer Protocol Alerts 3-39
Resetting the System 3-41
Setting the System Clock 3-42
Setting the Time Manually 3-43
Configuring SNTP 3-43
Configuring NTP 3-44
Setting the Time Zone 3-46
Configuring Summer Time 3-47
Simple Network Management Protocol 3-49
Enabling the SNMP Agent 3-51
Setting Community Access Strings 3-51
Specifying Trap Managers and Trap Types 3-52
Configuring SNMPv3 Management Access 3-55
Setting the Local Engine ID 3-55
Specifying a Remote Engine ID 3-56
Configuring SNMPv3 Users 3-57
Configuring Remote SNMPv3 Users 3-59
Configuring SNMPv3 Groups 3-61
Setting SNMPv3 Views 3-64
Sampling Traffic Flows 3-65
Configuring sFlow Global Parameters 3-66
Configuring sFlow Port Parameters 3-68
User Authentication 3-70
Configuring User Accounts 3-70
Configuring Local/Remote Logon Authentication 3-72
Configuring Encryption Keys 3-75
AAA Authorization and Accounting 3-76
Configuring AAA RADIUS Group Settings 3-77
Configuring AAA TACACS+ Group Settings 3-78
Configuring AAA Accounting 3-78
AAA Accounting Update 3-80
AAA Accounting 802.1X Port Settings 3-81
AAA Accounting Exec Command Privileges 3-82
AAA Accounting Exec Settings 3-83
AAA Accounting Summary 3-83

DG-FS4552 User Manual
ix
www.digisol.com
Authorization Settings 3-85
Authorization EXEC Settings 3-86
Authorization Summary 3-87
Configuring HTTPS 3-88
Replacing the Default Secure-site Certificate 3-89
Configuring the Secure Shell 3-90
Generating the Host Key Pair 3-93
Importing User Public Keys 3-95
Configuring the SSH Server 3-97
Configuring 802.1X Port Authentication 3-99
Displaying 802.1X Global Settings 3-100
Configuring 802.1X Global Settings 3-101
Configuring Port Settings for 802.1X 3-101
Displaying 802.1X Statistics 3-105
Filtering IP Addresses for Management Access 3-107
General Security Measures 3-109
Configuring Port Security 3-110
Web Authentication 3-111
Configuring Web Authentication 3-112
Configuring Web Authentication for Ports 3-113
Displaying Web Authentication Port Information 3-114
Re-authenticating Web Authenticated Ports 3-114
Network Access (MAC Address Authentication) 3-115
Configuring the MAC Authentication Reauthentication Time 3-117
Configuring MAC Authentication for Ports 3-118
Configuring Port Link Detection 3-120
Displaying Secure MAC Address Information 3-121
MAC Filter Configuration 3-122
Access Control Lists 3-124
Setting the ACL Name and Type 3-125
Configuring a Standard IPv4 ACL 3-126
Configuring an Extended IPv4 ACL 3-127
Configuring a Standard IPv6 ACL 3-129
Configuring an Extended IPv6 ACL 3-130
Configuring a MAC ACL 3-131
Configuring an ARP ACL 3-133
Binding a Port to an Access Control List 3-135
ARP Inspection 3-136
Configuring ARP Inspection 3-136
Displaying ARP Inspection Port Information 3-141
DHCP Snooping 3-143
DHCP Snooping Configuration 3-144
DHCP Snooping VLAN Configuration 3-145
DHCP Snooping Information Option Configuration 3-146
Configuring Ports for DHCP Snooping 3-147

Contents
x
www.digisol.com
Displaying DHCP Snooping Binding Information 3-149
IP Source Guard 3-150
Configuring Ports for IP Source Guard 3-150
Configuring Static Binding for IP Source Guard 3-152
Displaying Information for Dynamic IP Source Guard Bindings 3-154
Port Configuration 3-155
Displaying Connection Status 3-155
Configuring Interface Connections 3-157
Creating Trunk Groups 3-160
Statically Configuring a Trunk 3-161
Enabling LACP on Selected Ports 3-162
Configuring Parameters for LACP Group Members 3-164
Configuring Parameters for LACP Groups 3-166
Displaying LACP Port Counters 3-167
Displaying LACP Settings and Status for the Local Side 3-168
Displaying LACP Settings and Status for the Remote Side 3-170
Setting Broadcast Storm Thresholds 3-172
Setting Multicast Storm Thresholds 3-174
Setting Unknown Unicast Storm Thresholds 3-175
Configuring Port Mirroring 3-177
Configuring MAC Address Mirroring 3-178
Configuring Rate Limits 3-179
Rate Limit Configuration 3-179
Showing Port Statistics 3-180
Address Table Settings 3-185
Setting Static Addresses 3-185
Displaying the Address Table 3-186
Changing the Aging Time 3-187
Spanning Tree Algorithm Configuration 3-188
Configuring Port and Trunk Loopback Detection 3-190
Displaying Global Settings for STA 3-191
Configuring Global Settings for STA 3-194
Displaying Interface Settings for STA 3-198
Configuring Interface Settings for STA 3-201
Spanning Tree Edge Port Configuration 3-204
Configuring Multiple Spanning Trees 3-206
Displaying Interface Settings for MSTP 3-209
Configuring Interface Settings for MSTP 3-211
VLAN Configuration 3-212
IEEE 802.1Q VLANs 3-212
Enabling or Disabling GVRP (Global Setting) 3-215
Displaying Basic VLAN Information 3-216
Displaying Current VLANs 3-217
Creating VLANs 3-218
Adding Static Members to VLANs (VLAN Index) 3-220