Digisol DG-FS4526 Programming manual

As our product undergoes continuous development the specifications are subject to change without prior notice
DG-FS4526
MUSTANG 4000 SWITCH SERIES
=MANAGEMENT GUIDE
V1.1
2010-09-28

COPYRIGHT
Copyright © 2010 by SNSL. All rights reserved. No part of this publication may be
reproduced, transmitted, transcribed, stored in a retrieval system, or translated
into any language or computer language, in any form or by any means, electronic,
mechanical, magnetic, optical, chemical, manual or otherwise, without the prior
written permission of SNSL.
SNSL makes no representations or warranties, either expressed or implied, with
respect to the contents hereof and specifically disclaims any warranties, mer-
chantability or fitness for any particular purpose. Any software described in this
manual is sold or licensed “as is”. Should the programs prove defective following
their purchase, the buyer (and not SNSL, its distributor, or its dealer) assumes the
entire cost of all necessary servicing, repair, and any incidental or consequential
damages resulting from any defect in the software. Further, SNSL reserves the
right to revise this publication and to make changes from time to time in the con-
tents thereof without obligation to notify any person of such revision or changes.
SNSL an abbreviation of Smartlink Network Systems Ltd.
DG-FS4526 User Manual

User Manual
DG-FS4526 L2 Fast Ethernet Switch
Layer 2 Standalone Switch
with 24 10/100BASE-TX (RJ-45) Ports,
and 2 Combination Gigabit (RJ-45/SFP) Ports

DG-FS4526
E092010-CS-R01
F1.1.0.5
149xxxxxxxxxx

i
www.digisol.com
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Saving Configuration Settings 2-8
Managing System Files 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-11
Displaying System Information 3-11
Displaying Switch Hardware/Software Versions 3-12
Displaying Bridge Extension Capabilities 3-14
Setting the Switch’s IP Address 3-15
Manual Configuration 3-16
Using DHCP/BOOTP 3-17
Enabling Jumbo Frames 3-18
Managing Firmware 3-18
Downloading System Software from a Server 3-19

Contents
ii
www.digisol.com
Saving or Restoring Configuration Settings 3-20
Downloading Configuration Settings from a Server 3-21
Console Port Settings 3-22
Telnet Settings 3-25
Configuring Event Logging 3-27
Displaying Log Messages 3-27
System Log Configuration 3-27
Remote Log Configuration 3-29
Simple Mail Transfer Protocol 3-30
Resetting the System 3-32
Setting the System Clock 3-33
Configuring SNTP 3-33
Setting the Time Zone 3-34
Setting the Time Manually 3-34
Simple Network Management Protocol 3-35
Setting Community Access Strings 3-36
Specifying Trap Managers and Trap Types 3-37
Enabling SNMP Agent Status 3-38
Configuring SNMPv3 Management Access 3-39
Setting the Local Engine ID 3-39
Specifying a Remote Engine ID 3-41
Configuring SNMPv3 Users 3-41
Configuring Remote SNMPv3 Users 3-43
Configuring SNMPv3 Groups 3-44
Setting SNMPv3 Views 3-46
User Authentication 3-48
Configuring User Accounts 3-48
Configuring Local/Remote Logon Authentication 3-50
AAA Authorization and Accounting 3-54
Configuring AAA RADIUS Group Settings 3-55
Configuring AAA TACACS+ Group Settings 3-55
Configuring AAA Accounting 3-56
AAA Accounting Update 3-58
AAA Accounting 802.1X Port Settings 3-58
AAA Accounting Exec Command Privileges 3-59
AAA Accounting Exec Settings 3-61
AAA Accounting Summary 3-61
Authorization Settings 3-63
Authorization EXEC Settings 3-64
Authorization Summary 3-64
Configuring HTTPS 3-65
Replacing the Default Secure-site Certificate 3-66
Configuring the Secure Shell 3-67
Configuring the SSH Server 3-69
Generating the Host Key Pair 3-70

DG-FS4526 User Manual
iii
www.digisol.com
Configuring Port Security 3-72
Configuring 802.1X Port Authentication 3-73
Displaying 802.1X Global Settings 3-75
Configuring 802.1X Global Settings 3-75
Configuring Port Settings for 802.1X 3-76
Displaying 802.1X Statistics 3-79
Web Authentication 3-80
Configuring Web Authentication 3-81
Configuring Web Authentication for Ports 3-82
Displaying Web Authentication Port Information 3-83
Re-authenticating Web Authenticated Ports 3-84
Network Access – MAC Address Authentication 3-84
Configuring the MAC Authentication Reauthentication Time 3-85
Configuring MAC Authentication for Ports 3-86
Displaying Secure MAC Address Information 3-88
Access Control Lists 3-89
Configuring Access Control Lists 3-89
Setting the ACL Name and Type 3-90
Configuring a Standard IP ACL 3-90
Configuring an Extended IP ACL 3-91
Configuring a MAC ACL 3-94
Binding a Port to an Access Control List 3-95
Filtering IP Addresses for Management Access 3-96
Port Configuration 3-98
Displaying Connection Status 3-98
Configuring Interface Connections 3-100
Creating Trunk Groups 3-103
Statically Configuring a Trunk 3-104
Enabling LACP on Selected Ports 3-105
Configuring LACP Parameters 3-107
Displaying LACP Port Counters 3-109
Displaying LACP Settings and Status for the Local Side 3-110
Displaying LACP Settings and Status for the Remote Side 3-112
Setting Broadcast Storm Thresholds 3-113
Configuring Port Mirroring 3-115
Configuring Rate Limits 3-116
Rate Limit Configuration 3-116
Showing Port Statistics 3-117
Address Table Settings 3-122
Setting Static Addresses 3-122
Displaying the Address Table 3-123
Changing the Aging Time 3-125
Spanning Tree Algorithm Configuration 3-125
Displaying Global Settings 3-126
Configuring Global Settings 3-129

Contents
iv
www.digisol.com
Displaying Interface Settings 3-132
Configuring Interface Settings 3-135
Configuring Multiple Spanning Trees 3-137
Displaying Interface Settings for MSTP 3-139
Configuring Interface Settings for MSTP 3-141
VLAN Configuration 3-143
IEEE 802.1Q VLANs 3-143
Enabling or Disabling GVRP (Global Setting) 3-146
Displaying Basic VLAN Information 3-147
Displaying Current VLANs 3-147
Creating VLANs 3-149
Adding Static Members to VLANs (VLAN Index) 3-150
Adding Static Members to VLANs (Port Index) 3-152
Configuring VLAN Behavior for Interfaces 3-153
Configuring IEEE 802.1Q Tunneling 3-155
Enabling QinQ Tunneling on the Switch 3-158
Adding an Interface to a QinQ Tunnel 3-160
Private VLANs 3-162
Displaying Current Private VLANs 3-162
Configuring Private VLANs 3-163
Associating VLANs 3-164
Displaying Private VLAN Interface Information 3-165
Configuring Private VLAN Interfaces 3-166
Protocol VLANs 3-168
Protocol VLAN Group Configuration 3-168
Configuring Protocol VLAN Interfaces 3-169
Link Layer Discovery Protocol 3-170
Setting LLDP Timing Attributes 3-170
Configuring LLDP Interface Attributes 3-172
Displaying LLDP Local Device Information 3-175
Displaying LLDP Remote Port Information 3-176
Displaying LLDP Remote Information Details 3-177
Displaying Device Statistics 3-178
Displaying Detailed Device Statistics 3-180
Class of Service Configuration 3-180
Layer 2 Queue Settings 3-181
Setting the Default Priority for Interfaces 3-181
Mapping CoS Values to Egress Queues 3-182
Selecting the Queue Mode 3-184
Setting the Service Weight for Traffic Classes 3-184
Layer 3/4 Priority Settings 3-186
Mapping Layer 3/4 Priorities to CoS Values 3-186
Enabling IP DSCP Priority 3-186
Mapping DSCP Priority 3-187
Mapping IP Port Priority 3-188

DG-FS4526 User Manual
v
www.digisol.com
Mapping IP Precedence Priority 3-190
Mapping IP TOS Priority 3-192
Mapping CoS Values to ACLs 3-194
Quality of Service 3-195
Configuring Quality of Service Parameters 3-195
Configuring a Class Map 3-196
Creating QoS Policies 3-198
Attaching a Policy Map to Ingress Queues 3-201
VoIP Traffic Configuration 3-202
Configuring VoIP Traffic 3-202
Configuring VoIP Traffic Port 3-203
Configuring Telephony OUI 3-205
Multicast Filtering 3-207
Layer 2 IGMP (Snooping and Query) 3-207
Configuring IGMP Snooping and Query Parameters 3-208
Enabling IGMP Immediate Leave 3-210
Displaying Interfaces Attached to a Multicast Router 3-211
Specifying Static Interfaces for a Multicast Router 3-212
Displaying Port Members of Multicast Services 3-213
Assigning Ports to Multicast Services 3-214
IGMP Filtering and Throttling 3-215
Enabling IGMP Filtering and Throttling 3-216
Configuring IGMP Filter Profiles 3-216
Configuring IGMP Filtering and Throttling for Interfaces 3-218
Multicast VLAN Registration 3-220
Configuring Global MVR Settings 3-221
Displaying MVR Interface Status 3-222
Displaying Port Members of Multicast Groups 3-223
Configuring MVR Interface Status 3-224
Assigning Static Multicast Groups to Interfaces 3-226
DHCP Snooping 3-227
DHCP Snooping Configuration 3-228
DHCP Snooping VLAN Configuration 3-228
DHCP Snooping Information Option Configuration 3-229
DHCP Snooping Port Configuration 3-230
IP Source Guard 3-231
IP Source Guard Port Configuration 3-231
Static IP Source Guard Binding Configuration 3-232
Dynamic IP Source Guard Binding Information 3-233
Switch Clustering 3-234
Cluster Configuration 3-235
Cluster Member Configuration 3-236
Cluster Member Information 3-237
Cluster Candidate Information 3-238
UPnP 3-239

Contents
vi
www.digisol.com
UPnP Configuration 3-239
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-2
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-5
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-8
Command Groups 4-9
Line Commands 4-10
line 4-11
login 4-11
password 4-12
timeout login response 4-13
exec-timeout 4-13
password-thresh 4-14
silent-time 4-15
databits 4-15
parity 4-16
speed 4-17
stopbits 4-17
disconnect 4-18
show line 4-18
General Commands 4-19
enable 4-19
disable 4-20
configure 4-21
show history 4-21
reload 4-22
end 4-22
exit 4-23
quit 4-23