Digisol DG-FS4526E Programming manual

MUSTANG 4000 SWITCH SERIES
DG-FS4526E
MANAGEMENT GUIDE
V1.0
2012-04-12
As our products undergo continuous development the specifications are subject to change without prior notice

M ANAGEMENT G UIDE
DG-FS4526E ENHANCED FAST ETHERNET SWITCH
Layer 2 Switch
with 24 10/100BASE-TX (RJ-45) Ports,
and 2 Gigabit Combination Ports (RJ-45/SFP)
DG-FS4526E
E032011/ST-R01
149100000142A

– 3 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
APRIL 2012 REVISION
This is the first version of this guide.

A BOUT T HIS G UIDE
– 4 –

– 5 –
CONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 35
TABLES 45
SECTION I GETTING STARTED 51
1INTRODUCTION 53
Key Features 53
Description of Software Features 54
System Defaults 59
2INITIAL SWITCH CONFIGURATION 63
Connecting to the Switch 63
Configuration Options 63
Required Connections 64
Remote Connections 65
Basic Configuration 66
Console Connection 66
Setting Passwords 66
Setting an IP Address 67
Downloading a Configuration File Referenced by a DHCP Server 73
Enabling SNMP Management Access 75
Managing System Files 77
Saving or Restoring Configuration Settings 78
SECTION II WEB CONFIGURATION 81
3USING THE WEB INTERFACE 83
Connecting to the Web Interface 83
Navigating the Web Browser Interface 84

C ONTENTS
– 6 –
Home Page 84
Configuration Options 85
Panel Display 85
Main Menu 86
4BASIC MANAGEMENT TASKS 101
Displaying System Information 101
Displaying Hardware/Software Versions 102
Configuring Support for Jumbo Frames 104
Displaying Bridge Extension Capabilities 105
Managing System Files 106
Copying Files via FTP/TFTP or HTTP 106
Saving the Running Configuration to a Local File 108
Setting The Start-Up File 109
Showing System Files 110
Automatic Operation Code Upgrade 111
Setting the System Clock 115
Setting the Time Manually 115
Setting the SNTP Polling Interval 116
Specifying SNTP Time Servers 117
Setting the Time Zone 118
Console Port Settings 119
Telnet Settings 121
Displaying CPU Utilization 122
Displaying Memory Utilization 123
Resetting the System 124
5INTERFACE CONFIGURATION 129
Port Configuration 129
Configuring by Port List 129
Configuring by Port Range 132
Displaying Connection Status 133
Configuring Local Port Mirroring 134
Configuring Remote Port Mirroring 136
Showing Port or Trunk Statistics 140
Performing Cable Diagnostics 144
Trunk Configuration 146
Configuring a Static Trunk 147

C ONTENTS
– 7 –
Configuring a Dynamic Trunk 149
Displaying LACP Port Counters 154
Displaying LACP Settings and Status for the Local Side 155
Displaying LACP Settings and Status for the Remote Side 157
Saving Power 158
Traffic Segmentation 160
Enabling Traffic Segmentation 160
Configuring Uplink and Downlink Ports 161
VLAN Trunking 164
6 VLAN CONFIGURATION 167
IEEE 802.1Q VLANs 167
Configuring VLAN Groups 170
Adding Static Members to VLANs 172
Configuring Dynamic VLAN Registration 177
IEEE 802.1Q Tunneling 181
Enabling QinQ Tunneling on the Switch 185
Adding an Interface to a QinQ Tunnel 186
Protocol VLANs 188
Configuring Protocol VLAN Groups 188
Mapping Protocol Groups to Interfaces 190
Configuring IP Subnet VLANs 192
Configuring MAC-based VLANs 194
Configuring VLAN Mirroring 196
7 ADDRESS TABLE SETTINGS 199
Setting Static Addresses 199
Changing the Aging Time 201
Displaying the Dynamic Address Table 202
Clearing the Dynamic Address Table 203
Configuring MAC Address Mirroring 204
8SPANNING TREE ALGORITHM 207
Overview 207
Configuring Loopback Detection 210
Configuring Global Settings for STA 211
Displaying Global Settings for STA 216
Configuring Interface Settings for STA 217
Displaying Interface Settings for STA 221

C ONTENTS
– 8 –
Configuring Multiple Spanning Trees 224
Configuring Interface Settings for MSTP 228
9RATE LIMIT CONFIGURATION 231
10 STORM CONTROL CONFIGURATION 233
11 CLASS OF SERVICE 235
Layer 2 Queue Settings 235
Setting the Default Priority for Interfaces 235
Selecting the Queue Mode 236
Mapping CoS Values to Egress Queues 239
Layer 3/4 Priority Settings 242
Mapping Layer 3/4 Priorities to CoS Values 242
Setting Priority Processing to DSCP or CoS 242
Mapping Ingress DSCP Values to Internal DSCP Values 243
Mapping CoS Priorities to Internal DSCP Values 246
12 QUALITY OF SERVICE 249
Overview 249
Configuring a Class Map 250
Creating QoS Policies 253
Attaching a Policy Map to a Port 263
13 VOIP TRAFFIC CONFIGURATION 265
Overview 265
Configuring VoIP Traffic 265
Configuring Telephony OUI 267
Configuring VoIP Traffic Ports 269
14 SECURITY MEASURES 271
AAA Authorization and Accounting 272
Configuring Local/Remote Logon Authentication 273
Configuring Remote Logon Authentication Servers 274
Configuring AAA Accounting 279
Configuring AAA Authorization 284
Configuring User Accounts 287
Web Authentication 289
Configuring Global Settings for Web Authentication 289
Configuring Interface Settings for Web Authentication 290
Network Access (MAC Address Authentication) 292
Configuring Global Settings for Network Access 294

C ONTENTS
– 9 –
Configuring Network Access for Ports 295
Configuring Port Link Detection 297
Configuring a MAC Address Filter 298
Displaying Secure MAC Address Information 300
Configuring HTTPS 301
Configuring Global Settings for HTTPS 301
Replacing the Default Secure-site Certificate 303
Configuring the Secure Shell 304
Configuring the SSH Server 307
Generating the Host Key Pair 308
Importing User Public Keys 310
Access Control Lists 312
Setting A Time Range 313
Showing TCAM Utilization 316
Setting the ACL Name and Type 317
Configuring a Standard IPv4 ACL 319
Configuring an Extended IPv4 ACL 320
Configuring a Standard IPv6 ACL 323
Configuring an Extended IPv6 ACL 325
Configuring a MAC ACL 326
Configuring an ARP ACL 329
Binding a Port to an Access Control List 331
ARP Inspection 332
Configuring Global Settings for ARP Inspection 333
Configuring VLAN Settings for ARP Inspection 335
Configuring Interface Settings for ARP Inspection 337
Displaying ARP Inspection Statistics 338
Displaying the ARP Inspection Log 339
Filtering IP Addresses for Management Access 340
Configuring Port Security 342
Configuring 802.1X Port Authentication 344
Configuring 802.1X Global Settings 346
Configuring Port Authenticator Settings for 802.1X 347
Configuring Port Supplicant Settings for 802.1X 351
Displaying 802.1X Statistics 353
IP Source Guard 356

C ONTENTS
– 10 –
Configuring Ports for IP Source Guard 356
Configuring Static Bindings for IP Source Guard 358
Displaying Information for Dynamic IP Source Guard Bindings 360
DHCP Snooping 362
DHCP Snooping Configuration 364
DHCP Snooping VLAN Configuration 365
Configuring Ports for DHCP Snooping 366
Displaying DHCP Snooping Binding Information 367
15 BASIC ADMINISTRATION PROTOCOLS 369
Configuring Event Logging 370
System Log Configuration 370
Remote Log Configuration 372
Sending Simple Mail Transfer Protocol Alerts 373
Link Layer Discovery Protocol 375
Setting LLDP Timing Attributes 375
Configuring LLDP Interface Attributes 377
Displaying LLDP Local Device Information 380
Displaying LLDP Remote Port Information 383
Displaying Device Statistics 388
Simple Network Management Protocol 389
Configuring Global Settings for SNMP 392
Setting the Local Engine ID 393
Specifying a Remote Engine ID 394
Setting SNMPv3 Views 395
Configuring SNMPv3 Groups 398
Setting Community Access Strings 401
Configuring Local SNMPv3 Users 403
Configuring Remote SNMPv3 Users 405
Specifying Trap Managers 408
Remote Monitoring 412
Configuring RMON Alarms 413
Configuring RMON Events 416
Configuring RMON History Samples 418
Configuring RMON Statistical Samples 421
Switch Clustering 424
Configuring General Settings for Clusters 424