Digisol DG-FS4528P Programming manual

Management Guide
TM
DG-FS4528P
Layer 2 Fast Ethernet Managed POE Switch
Management Guide
V1.0
2011-12-12
MUSTANG 4000 Managed Switch Series
As our product undergoes continuous development the specifications are subject to change without prior notice

M ANAGEMENT G UIDE
FAST ETHERNET SWITCH
DG-FS4528P
Layer 2 Workgroup Switch
with Power over Ethernet,
24 10/100BASE-TX (RJ-45) Ports,
2 10/100/1000BASE-T (RJ-45) Ports
and 2 Gigabit Combination Ports (RJ-45/SFP)
DG-FS4528P

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
DECEMBER 2010 REVISION
This is the first revision of this guide.

– 6 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 6
FIGURES 34
TABLES 41
SECTION I GETTING STARTED 46
1INTRODUCTION 47
Key Features 47
Description of Software Features 48
System Defaults 53
2INITIAL SWITCH CONFIGURATION 56
Connecting to the Switch 56
Configuration Options 56
Required Connections 57
Remote Connections 58
Basic Configuration 59
Console Connection 59
Setting Passwords 59
Setting an IP Address 60
Manual Configuration 60
Dynamic Configuration 61
Downloading a Configuration File Referenced by a DHCP Server 62
Enabling SNMP Management Access 64
Community Strings (for SNMP version 1 and 2c clients) 65
Trap Receivers 65
Configuring Access for SNMP Version 3 Clients 66
Managing System Files 66
Saving or Restoring Configuration Settings 67
Configuring Power over Ethernet 68

C ONTENTS
– 7 –
SECTION II WEB CONFIGURATION 70
3USING THE WEB INTERFACE 71
Connecting to the Web Interface 71
Navigating the Web Browser Interface 72
Home Page 72
Configuration Options 73
Panel Display 73
Main Menu 74
4BASIC MANAGEMENT TASKS 83
Displaying System Information 84
Displaying Switch Hardware/Software Versions 85
Displaying Bridge Extension Capabilities 87
Setting the Switch’s IP Address 88
Configuring Support for Jumbo Frames 93
Displaying CPU Utilization 94
Displaying Memory Utilization 95
Managing System Files 96
Automatic Operation Code Upgrade 96
Copying Operation Code via FTP or TFTP 100
Saving or Restoring Configuration Settings 102
Copying Files Using HTTP 104
Deleting Files 106
Setting The Start-Up File 106
Console Port Settings 107
Telnet Settings 109
Configuring Event Logging 110
System Log Configuration 110
Remote Log Configuration 112
Sending Simple Mail Transfer Protocol Alerts 114
Resetting the System 115
Setting the System Clock 117
Setting the Time Manually 117
Configuring SNTP 118
Configuring NTP 119
Setting the Time Zone 121

C ONTENTS
– 8 –
Configuring Summer Time 122
UPnP 124
UPnP Configuration 125
Switch Clustering 126
Configuring General Settings for Clusters 127
Cluster Member Configuration 128
Displaying Information on Cluster Members 129
Cluster Candidate Information 130
5SIMPLE NETWORK MANAGEMENT PROTOCOL 131
Overview 131
Setting Community Access Strings 133
Specifying Trap Managers and Trap Types 135
Configuring MAC Notification Traps for Interfaces 138
Enabling the SNMP Agent 139
Setting the Local Engine ID 140
Specifying a Remote Engine ID 141
Configuring Local SNMPv3 Users 142
Configuring Remote SNMPv3 Users 143
Configuring SNMPv3 Groups 146
Setting SNMPv3 Views 149
6SAMPLING TRAFFIC FLOWS 151
Overview 151
Configuring sFlow Global Parameters 152
Configuring sFlow Port Parameters 153
7SECURITY MEASURES 155
Configuring User Accounts 156
Configuring Local/Remote Logon Authentication 157
Configuring Encryption Keys 161
AAA Authorization and Accounting 162
Configuring AAA RADIUS Group Settings 163
Configuring AAA TACACS+ Group Settings 164
Configuring AAA Accounting Settings 165
Configuring AAA Accounting Update Time 167
AAA Accounting 802.1X Port Settings 167
Configuring AAA Accounting Exec Command Privileges 168
Configuring AAA Accounting Exec Settings 169

C ONTENTS
– 9 –
Displaying the AAA Accounting Summary 170
Configuring Authorization Settings 171
Configuring Authorization EXEC Settings 172
Authorization Summary 173
Configuring HTTPS 174
Configuring Global Settings for HTTPS 174
Replacing the Default Secure-site Certificate 175
Configuring the Secure Shell 177
Configuring the SSH Server 180
Generating the Host Key Pair 181
Importing User Public Keys 183
Configuring Port Security 185
Configuring 802.1X Port Authentication 187
Displaying 802.1X Global Settings 188
Configuring 802.1X Global Settings 189
Configuring Authenticator Port Settings for 802.1X 190
Configuring Supplicant Port Settings for 802.1X 192
Displaying 802.1X Authenticator Statistics 194
Displaying 802.1X Supplicant Statistics 196
Web Authentication 197
Configuring Global Settings for Web Authentication 198
Configuring Interface Settings for Web Authentication 199
Displaying Web Authentication Port Information 199
Re-authenticating Web Authenticated Ports 200
Network Access (MAC Address Authentication) 201
Configuring Global Settings for Network Access 204
Configuring Network Access for Ports 205
Configuring Port Link Detection 206
Displaying Secure MAC Address Information 207
Configuring a MAC Address Filter 209
Access Control Lists 210
Setting the ACL Name and Type 211
Configuring a Standard IPv4 ACL 212
Configuring an Extended IPv4 ACL 213
Configuring a Standard IPv6 ACL 216
Configuring an Extended IPv6 ACL 217

C ONTENTS
– 10 –
Configuring a MAC ACL 218
Configuring an ARP ACL 220
Binding a Port to an Access Control List 222
Showing TCAM Utilization 223
ARP Inspection 224
Configuring Global Settings for ARP Inspection 225
Configuring VLAN Settings for ARP Inspection 227
Configuring Interface Settings for ARP Inspection 229
Displaying the ARP Inspection Log 230
Displaying ARP Inspection Statistics 231
Filtering IP Addresses for Management Access 232
DHCP Snooping 234
DHCP Snooping Configuration 236
DHCP Snooping VLAN Configuration 236
DHCP Snooping Information Option Configuration 237
Configuring Ports for DHCP Snooping 240
Displaying DHCP Snooping Binding Information 241
IP Source Guard 242
Configuring Ports for IP Source Guard 242
Configuring Static Bindings for IP Source Guard 244
Displaying Information for Dynamic IP Source Guard Bindings 246
8INTERFACE CONFIGURATION 248
Port Configuration 248
Displaying Connection Status 248
Configuring Interface Connections 249
Trunk Configuration 252
Configuring a Static Trunk 253
Enabling LACP on Selected Ports 255
Configuring Parameters for LACP Group Members 256
Configuring Parameters for LACP Groups 258
Displaying LACP Port Counters 259
Displaying LACP Settings and Status for the Local Side 260
Displaying LACP Settings and Status for the Remote Side 262
Storm Control Configuration 263
Setting Broadcast Storm Thresholds 264
Setting Multicast Storm Thresholds 265

C ONTENTS
– 11 –
Setting Unknown Unicast Storm Thresholds 266
Mirror Configuration 268
Configuring Port Mirroring 268
Configuring MAC Address Mirroring 269
Configuring Rate Limits 271
VLAN Trunking 272
Performing Cable Diagnostics 274
Showing Port or Trunk Statistics 275
9POWER OVER ETHERNET SETTINGS 280
Overview 280
Switch Power Status 281
Setting a Switch Power Budget 281
Displaying Port Power Status 282
Configuring Port PoE Power 283
10 ADDRESS TABLE SETTINGS 285
Setting Static Addresses 285
Displaying the Dynamic Address Table 287
Changing the Aging Time 288
11 SPANNING TREE ALGORITHM 290
Overview 290
Configuring Loopback Detection 293
Displaying Global Settings for STA 294
Configuring Global Settings for STA 296
Displaying Interface Settings for STA 300
Configuring Interface Settings for STA 303
Spanning Tree Edge Port Configuration 306
Configuring Multiple Spanning Trees 308
Displaying Interface Settings for MSTP 310
Configuring Interface Settings for MSTP 311
12 LAYER 2 PROTOCOL TUNNELING 313
Overview 313
Configuring the Tunnel Address for Uplink Traffic 313
Enabling Tunneling for Interfaces 314
13 VLAN CONFIGURATION 318
IEEE 802.1Q VLANs 318
Configuring Global Settings for Dynamic VLAN Registration 322

C ONTENTS
– 12 –
Displaying Basic VLAN Information 322
Displaying Current VLANs 323
Configuring VLAN Groups 324
Adding Static Members to VLANs 325
Adding VLAN Groups to Interfaces 327
Configuring VLAN Attributes for Interfaces 328
IEEE 802.1Q Tunneling 330
Enabling QinQ Tunneling on the Switch 334
Adding an Interface to a QinQ Tunnel 335
Traffic Segmentation 336
Configuring Global Settings 336
Configuring Uplink and Downlink Ports 337
Private VLANs 338
Displaying Private VLANs 339
Creating Private VLANs 340
Associating Private VLANs 341
Displaying Private VLAN Interface Information 341
Configuring Private VLAN Interfaces 343
Protocol VLANs 344
Configuring Protocol VLAN Groups 345
Mapping Protocol Groups to VLANs 346
Configuring VLAN Mirroring 347
Configuring IP Subnet VLANs 349
Configuring MAC-based VLANs 350
14 LINK LAYER DISCOVERY PROTOCOL 352
Overview 352
Setting LLDP Timing Attributes 353
Configuring LLDP Interface Attributes 355
Displaying LLDP Local Device Information 358
Displaying LLDP Remote Port Information 360
Displaying LLDP Remote Information Details 361
Displaying Device Statistics 363
Displaying Detailed Device Statistics 364
15 CLASS OF SERVICE 366
Layer 2 Queue Settings 366
Setting the Default Priority for Interfaces 366

C ONTENTS
– 13 –
Mapping CoS Values to Egress Queues 367
Selecting the Queue Mode 369
Displaying the Service Weight for Traffic Classes 370
Layer 3/4 Priority Settings 371
Enabling IP DSCP Priority 371
Mapping DSCP Priority 372
16 QUALITY OF SERVICE 374
Overview 374
Configuring a Class Map 375
Creating QoS Policies 378
Attaching a Policy Map to a Port 382
17 VOIP TRAFFIC CONFIGURATION 384
Overview 384
Configuring VoIP Traffic 385
Configuring VoIP Traffic Ports 386
Configuring Telephony OUI 388
18 MULTICAST FILTERING 390
Overview 390
Layer 2 IGMP (Snooping and Query) 391
Configuring IGMP Snooping and Query Parameters 392
Enabling IGMP Immediate Leave 394
Displaying Interfaces Attached to a Multicast Router 396
Specifying Static Interfaces for a Multicast Router 396
Displaying Port Members of Multicast Services 397
Assigning Interfaces to Multicast Services 398
Filtering and Throttling IGMP Groups 399
Enabling IGMP Filtering and Throttling 400
Configuring IGMP Filter Profiles 401
Configuring IGMP Filtering and Throttling for Interfaces 402
Multicast VLAN Registration 404
Configuring Global MVR Settings 405
Displaying MVR Interface Status 406
Displaying Port Members of Multicast Groups 407
Configuring MVR Interface Status 408
Assigning Static Multicast Groups to Interfaces 410
Configuring MVR Receiver VLAN and Group Addresses 411

C ONTENTS
– 14 –
Displaying MVR Receiver Groups 412
Configuring Static MVR Receiver Group Members 413
19 DOMAIN NAME SERVICE 415
Configuring General DNS Service Parameters 415
Configuring Static DNS Host to Address Entries 417
Displaying the DNS Cache 418
SECTION III COMMAND LINE INTERFACE 420
20 USING THE COMMAND LINE INTERFACE 422
Accessing the CLI 422
Console Connection 422
Telnet Connection 423
Entering Commands 424
Keywords and Arguments 424
Minimum Abbreviation 424
Command Completion 424
Getting Help on Commands 425
Showing Commands 425
Partial Keyword Lookup 426
Negating the Effect of Commands 427
Using Command History 427
Understanding Command Modes 427
Exec Commands 427
Configuration Commands 428
Command Line Processing 430
Output Modifiers and Redirection 431
CLI Command Groups 431
21 GENERAL COMMANDS 434
prompt 434
reload (Global Configuration) 435
enable 436
quit 437
show history 437
configure 438
disable 439

C ONTENTS
– 15 –
reload (Privileged Exec) 439
show reload 440
end 440
exit 440
22 SYSTEM MANAGEMENT COMMANDS 442
Device Designation 442
hostname 443
Banner Information 443
banner configure 444
banner configure company 445
banner configure dc-power-info 446
banner configure department 446
banner configure equipment-info 447
banner configure equipment-location 448
banner configure ip-lan 448
banner configure lp-number 449
banner configure manager-info 450
banner configure mux 450
banner configure note 451
show banner 452
System Status 452
show access-list tcam-utilization 453
show memory 453
show process cpu 453
show running-config 454
show startup-config 455
show system 456
show tech-support 457
show users 457
show version 458
Frame Size 459
jumbo frame 459
File Management 460
boot system 461
copy 462
delete 465

C ONTENTS
– 16 –
delete non-active 465
dir 466
whichboot 467
upgrade opcode auto 467
upgrade opcode path 469
show upgrade 470
Line 470
line 471
databits 472
exec-timeout 472
login 473
parity 474
password 475
password-thresh 476
silent-time 476
speed 477
stopbits 478
timeout login response 478
disconnect 479
show line 479
Event Logging 480
logging facility 481
logging history 481
logging host 482
logging on 483
logging trap 483
clear log 484
show log 485
show logging 485
SMTP Alerts 487
logging sendmail 487
logging sendmail destination-email 487
logging sendmail host 488
logging sendmail level 489
logging sendmail source-email 489
show logging sendmail 490

C ONTENTS
– 17 –
Time 490
sntp client 491
sntp poll 492
sntp server 492
show sntp 493
ntp authenticate 494
ntp authentication-key 494
ntp client 495
ntp server 496
show ntp 497
clock summer-time (date) 498
clock summer-time (predefined) 499
clock summer-time (recurring) 500
clock timezone 502
clock timezone-predefined 502
calendar set 503
show calendar 504
Time Range 504
time-range 504
absolute 505
periodic 506
show time-range 507
Switch Clustering 507
cluster 508
cluster commander 509
cluster ip-pool 509
cluster member 510
rcommand 511
show cluster 511
show cluster members 512
show cluster candidates 512
UPnP 512
upnp device 513
upnp device ttl 513
upnp device advertise duration 514
show upnp 514

C ONTENTS
– 18 –
23 SNMP COMMANDS 516
snmp-server 517
snmp-server community 518
snmp-server contact 518
snmp-server location 519
show snmp 519
snmp-server engine-id 520
snmp-server group 522
snmp-server user 523
snmp-server view 524
show snmp engine-id 525
show snmp group 526
show snmp user 527
show snmp view 528
snmp-server enable traps 528
snmp-server host 530
snmp-server enable traps mac-notification 532
snmp-server enable port-traps mac-notification 533
show snmp-server enable port-traps interface 534
24 FLOW SAMPLING COMMANDS 535
sflow 535
sflow source 536
sflow sample 537
sflow polling-interval 537
sflow owner 538
sflow timeout 538
sflow destination 539
sflow max-header-size 539
sflow max-datagram-size 540
show sflow 540
25 AUTHENTICATION COMMANDS 542
User Accounts 543
enable password 543
username 544
Authentication Sequence 545
authentication enable 545

C ONTENTS
– 19 –
authentication login 546
RADIUS Client 547
radius-server acct-port 547
radius-server auth-port 548
radius-server host 548
radius-server key 549
radius-server retransmit 550
radius-server timeout 550
show radius-server 551
TACACS+ Client 551
tacacs-server 552
tacacs-server host 552
tacacs-server key 553
tacacs-server port 553
tacacs-server retransmit 554
tacacs-server timeout 554
show tacacs-server 555
AAA 555
aaa accounting commands 556
aaa accounting dot1x 557
aaa accounting exec 558
aaa accounting update 559
aaa authorization exec 559
aaa group server 560
server 561
accounting dot1x 561
accounting commands 562
accounting exec 562
authorization exec 563
show accounting 564
Web Server 565
ip http port 565
ip http secure-port 566
ip http secure-server 566
ip http server 568
Telnet Server 568

C ONTENTS
– 20 –
ip telnet server 569
Secure Shell 569
ip ssh authentication-retries 572
ip ssh server 573
ip ssh server-key size 573
ip ssh timeout 574
delete public-key 575
ip ssh crypto host-key generate 575
ip ssh crypto zeroize 576
ip ssh save host-key 577
show ip ssh 577
show public-key 577
show ssh 578
802.1X Port Authentication 579
dot1x default 580
dot1x eapol-pass-through 580
dot1x system-auth-control 581
dot1x intrusion-action 581
dot1x max-req 582
dot1x operation-mode 582
dot1x port-control 583
dot1x re-authentication 584
dot1x timeout quiet-period 584
dot1x timeout re-authperiod 585
dot1x timeout supp-timeout 585
dot1x timeout tx-period 586
dot1x re-authenticate 586
dot1x identity profile 587
dot1x max-start 588
dot1x pae supplicant 588
dot1x timeout auth-period 589
dot1x timeout held-period 589
dot1x timeout start-period 590
show dot1x 590
Management IP Filter 593
management 593