Digisol DG-GS4528S User manual

TM
As our product undergoes continuous development the specifications are subject to change without prior notice
DG-GS4528S
Gigabit Ethernet Managed Layer 2 Switch
User Manual
V1.0
2010-11-16

TM
COPYRIGHT
Copyright © 2010 by SNSL. All rights reserved. No part of this publication may be repro-
duced, transmitted, transcribed, stored in a retrieval system, or translated into any lan-
guage or computer language, in any form or by any means, electronic, mechanical,
magnetic, optical, chemical, manual or otherwise, without the prior written permission of
SNSL.
SNSL makes no representations or warranties, either expressed or implied, with respect to
the contents hereof and specifically disclaims any warranties, merchantability or fitness for
any particular purpose. Any software described in this manual is sold or licensed “as is”.
Should the programs prove defective following their purchase, the buyer (and not SNSL, its
distributor, or its dealer) assumes the entire cost of all necessary servicing, repair, and any
incidental or consequential damages resulting from any defect in the software. Further,
SNSL reserves the right to revise this publication and to make changes from time to time in
the contents thereof without obligation to notify any person of such revision or changes.
SNSL an abbreviation of Smartlink Network Systems Ltd.
DG-GS4528S User Manual

U SER M ANUAL
DG-GS4528S GIGABIT ETHERNET MANAGED LAYER 2 SWITCH
Layer 2 Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)
DG-GS4528S
E112010-CS-R01
149100000109A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
NOVEMBER 2010 REVISION
This is the first version of this guide. This guide is valid for software release
v1.1.0.3.

A BOUT T HIS G UIDE
– 6 –

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 23
TABLES 27
SECTION I GETTING STARTED 29
1INTRODUCTION 31
Key Features 31
Description of Software Features 32
Configuration Backup and Restore 32
Authentication 32
Access Control Lists 33
Port Configuration 33
Rate Limiting 33
Port Mirroring 33
Port Trunking 33
Storm Control 33
Static Addresses 33
IEEE 802.1D Bridge 34
Store-and-Forward Switching 34
Spanning Tree Algorithm 34
Virtual LANs 35
Traffic Prioritization 35
Quality of Service 35
Multicast Filtering 35
System Defaults 36
2INITIAL SWITCH CONFIGURATION 39
Connecting to the Switch 39

C ONTENTS
– 8 –
Configuration Options 39
Required Connections 40
Remote Connections 41
Logging into the CLI 41
Basic Configuration 42
Setting Passwords 42
Setting an IP Address 42
Manual Configuration 43
Dynamic Configuration 45
Enabling SNMP Management Access 46
Community Strings (for SNMP version 1 and 2c clients) 46
Trap Receivers 47
Configuring Access for SNMP Version 3 Clients 48
Managing System Files 49
Saving or Restoring Configuration Settings 49
SECTION II WEB CONFIGURATION 51
3USING THE WEB INTERFACE 53
Connecting to the Web Interface 53
Navigating the Web Browser Interface 54
Home Page 54
Configuration Options 54
Panel Display 55
Main Menu 55
4CONFIGURING THE SWITCH 61
Configuring System Information 61
Setting an IP Address 62
Setting an IPv4 Address 62
Setting an IPv6 Address 64
Configuring NTP Service 66
Configuring Port Connections 67
Configuring Security 70
Configuring User Accounts 70
Configuring User Privilege Levels 72
Configuring The Authentication Method For Management Access 74

C ONTENTS
– 9 –
Configuring SSH 77
Configuring HTTPS 78
Filtering IP Addresses for Management Access 79
Using Simple Network Management Protocol 81
Configuring SNMP System and Trap Settings 82
Setting SNMPv3 Community Access Strings 86
Configuring SNMPv3 Users 87
Configuring SNMPv3 Groups 88
Configuring SNMPv3 Views 90
Configuring SNMPv3 Group Access Rights 91
Configuring Port Limit Controls 92
Configuring Authentication Through Network Access Servers 94
Filtering Traffic with Access Control Lists 105
Assigning ACL Policies and Responses 105
Configuring Rate Limiters 107
Configuring Access Control Lists 108
Configuring DHCP Snooping 115
Configuring DHCP Relay and Option 82 Information 118
Configuring IP Source Guard 119
Configuring Global and Port Settings for IP Source Guard 119
Configuring Static Bindings for IP Source Guard 121
Configuring ARP Inspection 123
Configuring Global and Port Settings for ARP Inspection 124
Configuring Static Bindings for ARP Inspection 125
Specifying Authentication Servers 126
Creating Trunk Groups 128
Configuring Static Trunks 129
Configuring LACP 132
Configuring the Spanning Tree Algorithm 135
Configuring Global Settings for STA 137
Configuring Multiple Spanning Trees 140
Configuring Spanning Tree Bridge Priorities 142
Configuring
STP/RSTP/CIST Interfaces 143
Configuring MIST Interfaces 147
IGMP Snooping 149
Configuring Global and Port-Related Settings for IGMP Snooping 149

C ONTENTS
– 10 –
Configuring VLAN Settings for IGMP Snooping and Query 152
Configuring IGMP Filtering 153
MLD Snooping 154
Configuring Global and Port-Related Settings for MLD Snooping 155
Configuring VLAN Settings for MLD Snooping and Query 158
Configuring MLD Filtering 159
Multicast VLAN Registration 160
Link Layer Discovery Protocol 163
Configuring LLDP Timing and TLVs 163
Configuring LLDP-MED TLVs 166
Configuring the MAC Address Table 172
IEEE 802.1Q VLANs 174
Assigning Ports to VLANs 175
Configuring VLAN Attributes for Port Members 176
Configuring Private VLANs 178
Using Port Isolation 180
Managing VoIP Traffic 181
Configuring VoIP Traffic 181
Configuring Telephony OUI 183
Quality of Service 185
Configuring Port-Level Queue Settings 185
Configuring DSCP Remarking 187
Configuring QoS Control Lists 189
Configuring Rate Limiting 191
Configuring Storm Control 193
Configuring Port Mirroring 194
Configuring UPnP 195
5MONITORING THE SWITCH 197
Displaying Basic Information About the System 197
Displaying System Information 197
Displaying CPU Utilization 198
Displaying Log Messages 199
Displaying Log Details 200
Displaying Information About Ports 201
Displaying Port Status On the Front Panel 201
Displaying an Overview of Port Statistics 201

C ONTENTS
– 11 –
Displaying QoS Statistics 202
Displaying Detailed Port Statistics 203
Displaying Information About Security Settings 205
Displaying Access Management Statistics 205
Displaying Information About Switch Settings for Port Security 206
Displaying Information About Learned MAC Addresses 208
Displaying Port Status for Authentication Services 209
Displaying Port Statistics for 802.1X or Remote Authentication Service
210
Displaying ACL Status 214
Displaying Statistics for DHCP Snooping 215
Displaying DHCP Relay Statistics 217
Displaying MAC Address Bindings for ARP Packets 219
Displaying Entries in the IP Source Guard Table 219
Displaying Information on Authentication Servers 220
Displaying a List of Authentication Servers 220
Displaying Statistics for Configured Authentication Servers 221
Displaying Information on LACP 225
Displaying an Overview of LACP Groups 225
Displaying LACP Port Status 226
Displaying LACP Port Statistics 227
Displaying Information on the Spanning Tree 228
Displaying Bridge Status for STA 228
Displaying Port Status for STA 230
Displaying Port Statistics for STA 231
Showing IGMP Snooping Information 232
Showing MLD Snooping Information 234
Displaying MVR Information 235
Displaying LLDP Information 237
Displaying LLDP Neighbor Information 237
Displaying LLDP-MED Neighbor Information 238
Displaying LLDP Port Statistics 241
Displaying the MAC Address Table 242
Displaying Information About VLANs 243
VLAN Membership 243
VLAN Port Status 244

C ONTENTS
– 12 –
6PERFORMING BASIC DIAGNOSTICS 247
Pinging an IPv4 or IPv6 Address 247
Running Cable Diagnostics 248
7PERFORMING SYSTEM MAINTENANCE 251
Restarting the Switch 251
Restoring Factory Defaults 252
Upgrading Firmware 252
Managing Configuration Files 253
Saving Configuration Settings 253
Restoring Configuration Settings 254
SECTION III COMMAND LINE INTERFACE 255
8USING THE COMMAND LINE INTERFACE 257
Accessing the CLI 257
Console Connection 257
Telnet Connection 258
Entering Commands 259
Keywords and Arguments 259
Minimum Abbreviation 259
Getting Help on Commands 259
Showing Commands 260
Partial Keyword Lookup 261
Using Command History 261
Command Line Processing 262
CLI Command Groups 263
9SYSTEM COMMANDS 265
system configuration 265
system name 266
system contact 266
system location 267
system timezone 267
system reboot 268
system restore default 268
system load 268

C ONTENTS
– 13 –
system log 269
10 IP COMMANDS 271
ip configuration 271
ip dhcp 272
ip setup 273
ip ping 275
ip dns 276
ip dns_proxy 276
ip ipv6 autoconfig 277
ip ipv6 setup 278
ip ipv6 ping6 279
ip ntp configuration 280
ip ntp mode 280
ip ntp server add 281
ip ntp server ipv6 add 281
ip ntp server delete 282
11 PORT COMMANDS 283
port configuration 283
port mode 285
port flow control 285
port state 286
port maxframe 287
port power 287
port excessive 288
port statistics 289
port veriphy 290
12 MAC COMMANDS 293
mac configuration 293
mac add 294
mac delete 294
mac lookup 295
mac agetime 295
mac learning 295
mac dump 296
mac statistics 297

C ONTENTS
– 14 –
mac flush 297
13 VLAN COMMANDS 299
vlan configuration 299
vlan aware 300
vlan pvid 301
vlan frametype 301
vlan ingressfilter 302
vlan stag 302
vlan add 303
vlan delete 303
vlan lookup 304
vlan status 304
14 PVLAN COMMANDS 307
pvlan configuration 307
pvlan add 308
pvlan delete 308
pvlan lookup 309
pvlan isolate 309
15 SECURITY COMMANDS 311
User Configuration 312
security switch users configuration 312
security switch users add 312
security switch users delete 313
Privilege Level Configuration 313
security switch privilege level configuration 313
security switch privilege level group 314
security switch privilege level current 316
Protocol Authentication Commands 316
security switch auth configuration 316
security switch auth method 317
SSH Commands 318
security switch ssh configuration 318
security switch ssh mode 318
HTTPS Commands 319
security switch https configuration 320

C ONTENTS
– 15 –
security switch https mode 320
security switch https redirect 321
Management Access Commands 322
security switch access configuration 322
security switch access mode 323
security switch access add 323
security switch access ipv6 add 324
security switch access delete 325
security switch access lookup 325
security switch access clear 325
security switch access statistics 326
SNMP Commands 326
security switch snmp configuration 328
security switch snmp mode 329
security switch snmp version 330
security switch snmp read community 330
security switch snmp write community 331
security switch snmp trap mode 331
security switch snmp trap version 332
security switch snmp trap community 332
security switch snmp trap destination 332
security switch snmp trap ipv6 destination 333
security switch snmp trap authentication failure 333
security switch snmp trap link-up 334
security switch snmp trap inform mode 334
security switch snmp trap inform timeout 335
security switch snmp trap inform retry times 335
security switch snmp trap probe security engine id 336
security switch snmp trap security engine id 336
security switch snmp trap security name 337
security switch snmp engine id 337
security switch snmp community add 338
security switch snmp community delete 339
security switch snmp community lookup 339
security switch snmp user add 340
security switch snmp user delete 341

C ONTENTS
– 16 –
security switch snmp user changekey 341
security switch snmp user lookup 342
security switch snmp group add 342
security switch snmp group delete 343
security switch snmp group lookup 343
security switch snmp view add 344
security switch snmp view delete 345
security switch snmp view lookup 345
security switch snmp access add 346
security switch snmp access delete 346
security switch snmp access lookup 347
Port Security Status 347
security network psec switch 348
security network psec port 348
Port Security Limit Control 349
security network limit configuration 350
security network limit mode 350
security network limit aging 351
security network limit agetime 351
security network limit port 352
security network limit limit 352
security network limit action 353
security network limit reopen 354
Network Access Server Commands 354
security network nas configuration 355
security network nas mode 356
security network nas state 356
security network nas reauthentication 359
security network nas reauthperiod 359
security network nas eapoltimeout 360
security network nas agetime 360
security network nas holdtime 361
security network nas radius_qos 361
security network nas radius_vlan 362
security network nas guest_vlan 364
security network nas authenticate 365

C ONTENTS
– 17 –
security network nas statistics 366
ACL Commands 367
security network acl configuration 367
security network acl action 368
security network acl policy 369
security network acl rate 369
security network acl add 370
security network acl delete 373
security network acl lookup 373
security network acl clear 374
security network acl status 374
DHCP Relay Commands 375
security network dhcp relay configuration 375
security network dhcp relay mode 376
security network dhcp relay server 376
security network dhcp relay information mode 377
security network dhcp relay information policy 378
security network dhcp relay statistics 378
DHCP Snooping Commands 379
security network dhcp snooping configuration 379
security network dhcp snooping mode 380
security network dhcp snooping port mode 381
security network dhcp snooping statistics 381
IP Source Guard Commands 382
security network ip source guard configuration 382
security network ip source guard mode 383
security network ip source guard port mode 384
security network ip source guard limit 384
security network ip source guard entry 385
security network ip source guard status 386
ARP Inspection Commands 386
security network arp inspection configuration 387
security network arp inspection mode 388
security network arp inspection port mode 388
security network arp inspection entry 389
security network arp inspection status 389

C ONTENTS
– 18 –
AAA Commands 390
security aaa auth configuration 390
security aaa auth timeout 391
security aaa auth deadtime 392
security aaa auth radius 392
security aaa auth acct_radius 394
security aaa auth tacacs+ 395
security aaa statistics 396
16 STP COMMANDS 399
stp configuration 400
stp version 400
stp txhold 401
stp maxhops 402
stp maxage 402
stp fwddelay 403
stp cname 403
stp bpdufilter 404
stp bpduguard 404
stp recovery 405
stp status 406
stp msti priority 406
stp msti map 407
stp msti add 407
stp port configuration 408
stp port mode 409
stp port edge 409
stp port autoedge 410
stp port p2p 410
stp port restrictedrole 411
stp port restrictedtcn 412
stp port bpduguard 412
stp port bpdutransparency 413
stp port statistics 414
stp port mcheck 414
stp msti port configuration 415
stp msti port cost 415

C ONTENTS
– 19 –
stp msti port priority 417
17 IGMP COMMANDS 419
igmp configuration 419
igmp mode 421
igmp leave proxy 421
igmp state 422
igmp querier 423
igmp fastleave 423
igmp throttling 424
igmp filtering 425
igmp router 425
igmp flooding 426
igmp groups 426
igmp status 427
18 LINK AGGREGATION COMMANDS 429
aggr configuration 430
aggr add 430
aggr delete 431
aggr lookup 431
aggr mode 432
19 LACP COMMANDS 435
lacp configuration 437
lacp mode 437
lacp key 438
lacp role 438
lacp status 439
lacp statistics 439
20 LLDP COMMANDS 441
lldp configuration 441
lldp mode 442
lldp optional_tlv 442
lldp interval 443
lldp hold 444
lldp delay 444
lldp reinit 445

C ONTENTS
– 20 –
lldp statistics 445
lldp info 446
lldp cdp_aware 447
21 LLDP-MED COMMANDS 449
lldpmed configuration 449
lldpmed civic 450
lldpmed ecs 451
lldpmed policy delete 452
lldpmed policy add 452
lldpmed port policies 454
lldpmed coordinates 455
lldpmed datum 456
lldpmed fast 456
lldpmed info 457
lldpmed debug_med_transmit_var 458
22 QOS COMMANDS 459
qos configuration 460
qos default 460
qos tagprio 461
qos qcl port 461
qos qcl add 462
qos qcl delete 463
qos qcl lookup 464
qos mode 464
qos weight 465
qos rate limiter 465
qos shaper 466
qos storm unicast 467
qos storm multicast 467
qos storm broadcast 468
qos dscp remarking 468
qos dscp queue mapping 469
23 MIRROR COMMANDS 471
mirror configuration 471
mirror port 472