Digisol DG-FS4526E Programming manual

MUSTANG 4000 SWITCH SERIES
DG-FS4526E
MANAGEMENT GUIDE
V1.0
2012-04-12
As our products undergo continuous development the specifications are subject to change without prior notice

M ANAGEMENT G UIDE
DG-FS4526E ENHANCED FAST ETHERNET SWITCH
Layer 2 Switch
with 24 10/100BASE-TX (RJ-45) Ports,
and 2 Gigabit Combination Ports (RJ-45/SFP)
DG-FS4526E
E032011/ST-R01
149100000142A

– 3 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
APRIL 2012 REVISION
This is the first version of this guide.

A BOUT T HIS G UIDE
– 4 –

– 5 –
CONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 35
TABLES 45
SECTION I GETTING STARTED 51
1INTRODUCTION 53
Key Features 53
Description of Software Features 54
System Defaults 59
2INITIAL SWITCH CONFIGURATION 63
Connecting to the Switch 63
Configuration Options 63
Required Connections 64
Remote Connections 65
Basic Configuration 66
Console Connection 66
Setting Passwords 66
Setting an IP Address 67
Downloading a Configuration File Referenced by a DHCP Server 73
Enabling SNMP Management Access 75
Managing System Files 77
Saving or Restoring Configuration Settings 78
SECTION II WEB CONFIGURATION 81
3USING THE WEB INTERFACE 83
Connecting to the Web Interface 83
Navigating the Web Browser Interface 84

C ONTENTS
– 6 –
Home Page 84
Configuration Options 85
Panel Display 85
Main Menu 86
4BASIC MANAGEMENT TASKS 101
Displaying System Information 101
Displaying Hardware/Software Versions 102
Configuring Support for Jumbo Frames 104
Displaying Bridge Extension Capabilities 105
Managing System Files 106
Copying Files via FTP/TFTP or HTTP 106
Saving the Running Configuration to a Local File 108
Setting The Start-Up File 109
Showing System Files 110
Automatic Operation Code Upgrade 111
Setting the System Clock 115
Setting the Time Manually 115
Setting the SNTP Polling Interval 116
Specifying SNTP Time Servers 117
Setting the Time Zone 118
Console Port Settings 119
Telnet Settings 121
Displaying CPU Utilization 122
Displaying Memory Utilization 123
Resetting the System 124
5INTERFACE CONFIGURATION 129
Port Configuration 129
Configuring by Port List 129
Configuring by Port Range 132
Displaying Connection Status 133
Configuring Local Port Mirroring 134
Configuring Remote Port Mirroring 136
Showing Port or Trunk Statistics 140
Performing Cable Diagnostics 144
Trunk Configuration 146
Configuring a Static Trunk 147

C ONTENTS
– 7 –
Configuring a Dynamic Trunk 149
Displaying LACP Port Counters 154
Displaying LACP Settings and Status for the Local Side 155
Displaying LACP Settings and Status for the Remote Side 157
Saving Power 158
Traffic Segmentation 160
Enabling Traffic Segmentation 160
Configuring Uplink and Downlink Ports 161
VLAN Trunking 164
6 VLAN CONFIGURATION 167
IEEE 802.1Q VLANs 167
Configuring VLAN Groups 170
Adding Static Members to VLANs 172
Configuring Dynamic VLAN Registration 177
IEEE 802.1Q Tunneling 181
Enabling QinQ Tunneling on the Switch 185
Adding an Interface to a QinQ Tunnel 186
Protocol VLANs 188
Configuring Protocol VLAN Groups 188
Mapping Protocol Groups to Interfaces 190
Configuring IP Subnet VLANs 192
Configuring MAC-based VLANs 194
Configuring VLAN Mirroring 196
7 ADDRESS TABLE SETTINGS 199
Setting Static Addresses 199
Changing the Aging Time 201
Displaying the Dynamic Address Table 202
Clearing the Dynamic Address Table 203
Configuring MAC Address Mirroring 204
8SPANNING TREE ALGORITHM 207
Overview 207
Configuring Loopback Detection 210
Configuring Global Settings for STA 211
Displaying Global Settings for STA 216
Configuring Interface Settings for STA 217
Displaying Interface Settings for STA 221

C ONTENTS
– 8 –
Configuring Multiple Spanning Trees 224
Configuring Interface Settings for MSTP 228
9RATE LIMIT CONFIGURATION 231
10 STORM CONTROL CONFIGURATION 233
11 CLASS OF SERVICE 235
Layer 2 Queue Settings 235
Setting the Default Priority for Interfaces 235
Selecting the Queue Mode 236
Mapping CoS Values to Egress Queues 239
Layer 3/4 Priority Settings 242
Mapping Layer 3/4 Priorities to CoS Values 242
Setting Priority Processing to DSCP or CoS 242
Mapping Ingress DSCP Values to Internal DSCP Values 243
Mapping CoS Priorities to Internal DSCP Values 246
12 QUALITY OF SERVICE 249
Overview 249
Configuring a Class Map 250
Creating QoS Policies 253
Attaching a Policy Map to a Port 263
13 VOIP TRAFFIC CONFIGURATION 265
Overview 265
Configuring VoIP Traffic 265
Configuring Telephony OUI 267
Configuring VoIP Traffic Ports 269
14 SECURITY MEASURES 271
AAA Authorization and Accounting 272
Configuring Local/Remote Logon Authentication 273
Configuring Remote Logon Authentication Servers 274
Configuring AAA Accounting 279
Configuring AAA Authorization 284
Configuring User Accounts 287
Web Authentication 289
Configuring Global Settings for Web Authentication 289
Configuring Interface Settings for Web Authentication 290
Network Access (MAC Address Authentication) 292
Configuring Global Settings for Network Access 294

C ONTENTS
– 9 –
Configuring Network Access for Ports 295
Configuring Port Link Detection 297
Configuring a MAC Address Filter 298
Displaying Secure MAC Address Information 300
Configuring HTTPS 301
Configuring Global Settings for HTTPS 301
Replacing the Default Secure-site Certificate 303
Configuring the Secure Shell 304
Configuring the SSH Server 307
Generating the Host Key Pair 308
Importing User Public Keys 310
Access Control Lists 312
Setting A Time Range 313
Showing TCAM Utilization 316
Setting the ACL Name and Type 317
Configuring a Standard IPv4 ACL 319
Configuring an Extended IPv4 ACL 320
Configuring a Standard IPv6 ACL 323
Configuring an Extended IPv6 ACL 325
Configuring a MAC ACL 326
Configuring an ARP ACL 329
Binding a Port to an Access Control List 331
ARP Inspection 332
Configuring Global Settings for ARP Inspection 333
Configuring VLAN Settings for ARP Inspection 335
Configuring Interface Settings for ARP Inspection 337
Displaying ARP Inspection Statistics 338
Displaying the ARP Inspection Log 339
Filtering IP Addresses for Management Access 340
Configuring Port Security 342
Configuring 802.1X Port Authentication 344
Configuring 802.1X Global Settings 346
Configuring Port Authenticator Settings for 802.1X 347
Configuring Port Supplicant Settings for 802.1X 351
Displaying 802.1X Statistics 353
IP Source Guard 356

C ONTENTS
– 10 –
Configuring Ports for IP Source Guard 356
Configuring Static Bindings for IP Source Guard 358
Displaying Information for Dynamic IP Source Guard Bindings 360
DHCP Snooping 362
DHCP Snooping Configuration 364
DHCP Snooping VLAN Configuration 365
Configuring Ports for DHCP Snooping 366
Displaying DHCP Snooping Binding Information 367
15 BASIC ADMINISTRATION PROTOCOLS 369
Configuring Event Logging 370
System Log Configuration 370
Remote Log Configuration 372
Sending Simple Mail Transfer Protocol Alerts 373
Link Layer Discovery Protocol 375
Setting LLDP Timing Attributes 375
Configuring LLDP Interface Attributes 377
Displaying LLDP Local Device Information 380
Displaying LLDP Remote Port Information 383
Displaying Device Statistics 388
Simple Network Management Protocol 389
Configuring Global Settings for SNMP 392
Setting the Local Engine ID 393
Specifying a Remote Engine ID 394
Setting SNMPv3 Views 395
Configuring SNMPv3 Groups 398
Setting Community Access Strings 401
Configuring Local SNMPv3 Users 403
Configuring Remote SNMPv3 Users 405
Specifying Trap Managers 408
Remote Monitoring 412
Configuring RMON Alarms 413
Configuring RMON Events 416
Configuring RMON History Samples 418
Configuring RMON Statistical Samples 421
Switch Clustering 424
Configuring General Settings for Clusters 424

C ONTENTS
– 11 –
Cluster Member Configuration 426
Managing Cluster Members 427
Ethernet Ring Protection Switching 428
ERPS Configuration 431
ERPS Ring Configuration 432
Connectivity Fault Management 437
Configuring Global Settings for CFM 440
Configuring Interfaces for CFM 444
Configuring CFM Maintenance Domains 444
Configuring CFM Maintenance Associations 449
Configuring Maintenance End Points 454
Configuring Remote Maintenance End Points 456
Transmitting Link Trace Messages 458
Transmitting Loop Back Messages 460
Transmitting Delay-Measure Requests 462
Displaying Local MEPs 464
Displaying Details for Local MEPs 465
Displaying Local MIPs 467
Displaying Remote MEPs 468
Displaying Details for Remote MEPs 469
Displaying the Link Trace Cache 471
Displaying Fault Notification Settings 473
Displaying Continuity Check Errors 474
OAM Configuration 475
Enabling OAM on Local Ports 475
Displaying Statistics for OAM Messages 478
Displaying the OAM Event Log 479
Displaying the Status of Remote Interfaces 480
Configuring a Remote Loop Back Test 481
Displaying Results of Remote Loop Back Testing 483
16 IP CONFIGURATION 485
Using the Ping Function 485
Address Resolution Protocol 486
Setting the ARP Timeout 487
Displaying ARP Entries 488
Setting the Switch’s IP Address (IP Version 4) 489

C ONTENTS
– 12 –
Configuring the IPv4 Default Gateway 489
Configuring IPv4 Interface Settings 490
Setting the Switch’s IP Address (IP Version 6) 493
Configuring the IPv6 Default Gateway 493
Configuring IPv6 Interface Settings 494
Configuring an IPv6 Address 497
Showing IPv6 Addresses 500
Showing the IPv6 Neighbor Cache 501
Showing IPv6 Statistics 503
Showing the MTU for Responding Destinations 508
17 IP SERVICES 509
Configuring General DNS Service Parameters 509
Configuring a List of Domain Names 510
Configuring a List of Name Servers 512
Configuring Static DNS Host to Address Entries 513
Displaying the DNS Cache 514
18 MULTICAST FILTERING 517
Overview 517
Layer 2 IGMP (Snooping and Query) 518
Configuring IGMP Snooping and Query Parameters 520
Specifying Static Interfaces for a Multicast Router 524
Assigning Interfaces to Multicast Services 525
Setting IGMP Snooping Status per Interface 528
Displaying Multicast Groups Discovered by IGMP Snooping 533
Filtering and Throttling IGMP Groups 534
Enabling IGMP Filtering and Throttling 534
Configuring IGMP Filter Profiles 535
Configuring IGMP Filtering and Throttling for Interfaces 537
Multicast VLAN Registration 539
Configuring Global MVR Settings 541
Configuring MVR Group Address Ranges 542
Configuring MVR Interface Status 543
Assigning Static Multicast Groups to Interfaces 546
Displaying MVR Receiver Groups 547

C ONTENTS
– 13 –
SECTION III COMMAND LINE INTERFACE 549
19 USING THE COMMAND LINE INTERFACE 551
Accessing the CLI 551
Console Connection 551
Telnet Connection 552
Entering Commands 553
Keywords and Arguments 553
Minimum Abbreviation 553
Command Completion 553
Getting Help on Commands 554
Partial Keyword Lookup 555
Negating the Effect of Commands 556
Using Command History 556
Understanding Command Modes 556
Exec Commands 556
Configuration Commands 557
Command Line Processing 559
CLI Command Groups 560
20 GENERAL COMMANDS 563
prompt 563
reload (Global Configuration) 564
enable 565
quit 566
show history 566
configure 567
disable 568
reload (Privileged Exec) 568
show reload 569
end 569
exit 569
21 SYSTEM MANAGEMENT COMMANDS 571
Device Designation 571
hostname 572
Banner Information 572
banner configure 573

C ONTENTS
– 14 –
banner configure company 574
banner configure dc-power-info 575
banner configure department 575
banner configure equipment-info 576
banner configure equipment-location 577
banner configure ip-lan 577
banner configure lp-number 578
banner configure manager-info 579
banner configure mux 579
banner configure note 580
show banner 581
System Status 581
show access-list tcam-utilization 582
show memory 582
show process cpu 583
show running-config 583
show startup-config 584
show system 585
show tech-support 586
show users 586
show version 587
Frame Size 588
jumbo frame 588
File Management 589
boot system 590
copy 591
delete 594
dir 594
whichboot 595
upgrade opcode auto 596
upgrade opcode path 597
Line 599
line 599
databits 600
exec-timeout 601
login 601

C ONTENTS
– 15 –
parity 602
password 603
password-thresh 604
silent-time 605
speed 605
stopbits 606
timeout login response 606
disconnect 607
show line 608
Event Logging 608
logging facility 609
logging history 610
logging host 611
logging on 611
logging trap 612
clear log 612
show log 613
show logging 614
SMTP Alerts 615
logging sendmail 616
logging sendmail host 616
logging sendmail level 617
logging sendmail destination-email 617
logging sendmail source-email 618
show logging sendmail 618
Time 619
sntp client 619
sntp poll 620
sntp server 621
show sntp 621
clock timezone 622
calendar set 623
show calendar 623
Time Range 624
time-range 624
absolute 625

C ONTENTS
– 16 –
periodic 625
show time-range 626
Switch Clustering 627
cluster 628
cluster commander 628
cluster ip-pool 629
cluster member 630
rcommand 630
show cluster 631
show cluster members 631
show cluster candidates 632
22 SNMP COMMANDS 633
snmp-server 634
snmp-server community 635
snmp-server contact 635
snmp-server location 636
show snmp 636
snmp-server enable traps 637
snmp-server host 638
snmp-server engine-id 641
snmp-server group 642
snmp-server user 643
snmp-server view 644
show snmp engine-id 645
show snmp group 646
show snmp user 647
show snmp view 648
nlm 648
snmp-server notify-filter 649
show nlm oper-status 650
show snmp notify-filter 651
23 REMOTE MONITORING COMMANDS 653
rmon alarm 654
rmon event 655
rmon collection history 656
rmon collection rmon1 657

C ONTENTS
– 17 –
show rmon alarms 658
show rmon events 658
show rmon history 658
show rmon statistics 659
24 AUTHENTICATION COMMANDS 661
User Accounts 661
enable password 662
username 663
Authentication Sequence 664
authentication enable 664
authentication login 665
RADIUS Client 666
radius-server acct-port 666
radius-server auth-port 667
radius-server host 667
radius-server key 668
radius-server retransmit 668
radius-server timeout 669
show radius-server 669
TACACS+ Client 670
tacacs-server host 670
tacacs-server key 671
tacacs-server port 672
show tacacs-server 672
AAA 673
aaa accounting commands 673
aaa accounting dot1x 674
aaa accounting exec 675
aaa accounting update 676
aaa authorization exec 677
aaa group server 678
server 678
accounting dot1x 679
accounting exec 679
authorization exec 680
show accounting 680

C ONTENTS
– 18 –
Web Server 681
ip http port 682
ip http server 682
ip http secure-server 683
ip http secure-port 684
Telnet Server 685
ip telnet max-sessions 685
ip telnet port 686
ip telnet server 686
show ip telnet 687
Secure Shell 687
ip ssh authentication-retries 690
ip ssh server 690
ip ssh server-key size 691
ip ssh timeout 692
delete public-key 692
ip ssh crypto host-key generate 693
ip ssh crypto zeroize 694
ip ssh save host-key 694
show ip ssh 695
show public-key 695
show ssh 696
802.1X Port Authentication 697
dot1x default 698
dot1x eapol-pass-through 698
dot1x system-auth-control 699
dot1x intrusion-action 699
dot1x max-req 700
dot1x operation-mode 700
dot1x port-control 701
dot1x re-authentication 702
dot1x timeout quiet-period 702
dot1x timeout re-authperiod 703
dot1x timeout supp-timeout 703
dot1x timeout tx-period 704
dot1x re-authenticate 704

C ONTENTS
– 19 –
dot1x identity profile 705
dot1x max-start 706
dot1x pae supplicant 706
dot1x timeout auth-period 707
dot1x timeout held-period 707
dot1x timeout start-period 708
show dot1x 708
Management IP Filter 711
management 711
show management 712
25 GENERAL SECURITY MEASURES 715
Port Security 716
port security 716
Network Access (MAC Address Authentication) 718
network-access aging 719
network-access mac-filter 719
mac-authentication reauth-time 720
network-access dynamic-qos 721
network-access dynamic-vlan 722
network-access guest-vlan 723
network-access link-detection 723
network-access link-detection link-down 724
network-access link-detection link-up 724
network-access link-detection link-up-down 725
network-access max-mac-count 725
network-access mode mac-authentication 726
network-access port-mac-filter 727
mac-authentication intrusion-action 728
mac-authentication max-mac-count 728
clear network-access 729
show network-access 729
show network-access mac-address-table 730
show network-access mac-filter 731
Web Authentication 731
web-auth login-attempts 732
web-auth quiet-period 733

C ONTENTS
– 20 –
web-auth session-timeout 733
web-auth system-auth-control 734
web-auth 734
web-auth re-authenticate (Port) 735
web-auth re-authenticate (IP) 735
show web-auth 736
show web-auth interface 736
show web-auth summary 737
DHCP Snooping 737
ip dhcp snooping 738
ip dhcp snooping database flash 740
ip dhcp snooping information option 740
ip dhcp snooping information policy 742
ip dhcp snooping verify mac-address 742
ip dhcp snooping vlan 743
ip dhcp snooping trust 744
clear ip dhcp snooping database flash 745
show ip dhcp snooping 745
show ip dhcp snooping binding 745
IP Source Guard 746
ip source-guard binding 746
ip source-guard 748
ip source-guard max-binding 749
show ip source-guard 750
show ip source-guard binding 750
ARP Inspection 751
ip arp inspection 752
ip arp inspection filter 753
ip arp inspection log-buffer logs 754
ip arp inspection validate 755
ip arp inspection vlan 755
ip arp inspection limit 756
ip arp inspection trust 757
show ip arp inspection configuration 758
show ip arp inspection interface 758
show ip arp inspection log 759