Digisol DG-FS4528P Programming manual

Management Guide
TM
DG-FS4528P
Layer 2 Fast Ethernet Managed POE Switch
Management Guide
V1.0
2011-12-12
MUSTANG 4000 Managed Switch Series
As our product undergoes continuous development the specifications are subject to change without prior notice

M ANAGEMENT G UIDE
FAST ETHERNET SWITCH
DG-FS4528P
Layer 2 Workgroup Switch
with Power over Ethernet,
24 10/100BASE-TX (RJ-45) Ports,
2 10/100/1000BASE-T (RJ-45) Ports
and 2 Gigabit Combination Ports (RJ-45/SFP)
DG-FS4528P

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
DECEMBER 2010 REVISION
This is the first revision of this guide.

– 6 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 6
FIGURES 34
TABLES 41
SECTION I GETTING STARTED 46
1INTRODUCTION 47
Key Features 47
Description of Software Features 48
System Defaults 53
2INITIAL SWITCH CONFIGURATION 56
Connecting to the Switch 56
Configuration Options 56
Required Connections 57
Remote Connections 58
Basic Configuration 59
Console Connection 59
Setting Passwords 59
Setting an IP Address 60
Manual Configuration 60
Dynamic Configuration 61
Downloading a Configuration File Referenced by a DHCP Server 62
Enabling SNMP Management Access 64
Community Strings (for SNMP version 1 and 2c clients) 65
Trap Receivers 65
Configuring Access for SNMP Version 3 Clients 66
Managing System Files 66
Saving or Restoring Configuration Settings 67
Configuring Power over Ethernet 68

C ONTENTS
– 7 –
SECTION II WEB CONFIGURATION 70
3USING THE WEB INTERFACE 71
Connecting to the Web Interface 71
Navigating the Web Browser Interface 72
Home Page 72
Configuration Options 73
Panel Display 73
Main Menu 74
4BASIC MANAGEMENT TASKS 83
Displaying System Information 84
Displaying Switch Hardware/Software Versions 85
Displaying Bridge Extension Capabilities 87
Setting the Switch’s IP Address 88
Configuring Support for Jumbo Frames 93
Displaying CPU Utilization 94
Displaying Memory Utilization 95
Managing System Files 96
Automatic Operation Code Upgrade 96
Copying Operation Code via FTP or TFTP 100
Saving or Restoring Configuration Settings 102
Copying Files Using HTTP 104
Deleting Files 106
Setting The Start-Up File 106
Console Port Settings 107
Telnet Settings 109
Configuring Event Logging 110
System Log Configuration 110
Remote Log Configuration 112
Sending Simple Mail Transfer Protocol Alerts 114
Resetting the System 115
Setting the System Clock 117
Setting the Time Manually 117
Configuring SNTP 118
Configuring NTP 119
Setting the Time Zone 121

C ONTENTS
– 8 –
Configuring Summer Time 122
UPnP 124
UPnP Configuration 125
Switch Clustering 126
Configuring General Settings for Clusters 127
Cluster Member Configuration 128
Displaying Information on Cluster Members 129
Cluster Candidate Information 130
5SIMPLE NETWORK MANAGEMENT PROTOCOL 131
Overview 131
Setting Community Access Strings 133
Specifying Trap Managers and Trap Types 135
Configuring MAC Notification Traps for Interfaces 138
Enabling the SNMP Agent 139
Setting the Local Engine ID 140
Specifying a Remote Engine ID 141
Configuring Local SNMPv3 Users 142
Configuring Remote SNMPv3 Users 143
Configuring SNMPv3 Groups 146
Setting SNMPv3 Views 149
6SAMPLING TRAFFIC FLOWS 151
Overview 151
Configuring sFlow Global Parameters 152
Configuring sFlow Port Parameters 153
7SECURITY MEASURES 155
Configuring User Accounts 156
Configuring Local/Remote Logon Authentication 157
Configuring Encryption Keys 161
AAA Authorization and Accounting 162
Configuring AAA RADIUS Group Settings 163
Configuring AAA TACACS+ Group Settings 164
Configuring AAA Accounting Settings 165
Configuring AAA Accounting Update Time 167
AAA Accounting 802.1X Port Settings 167
Configuring AAA Accounting Exec Command Privileges 168
Configuring AAA Accounting Exec Settings 169

C ONTENTS
– 9 –
Displaying the AAA Accounting Summary 170
Configuring Authorization Settings 171
Configuring Authorization EXEC Settings 172
Authorization Summary 173
Configuring HTTPS 174
Configuring Global Settings for HTTPS 174
Replacing the Default Secure-site Certificate 175
Configuring the Secure Shell 177
Configuring the SSH Server 180
Generating the Host Key Pair 181
Importing User Public Keys 183
Configuring Port Security 185
Configuring 802.1X Port Authentication 187
Displaying 802.1X Global Settings 188
Configuring 802.1X Global Settings 189
Configuring Authenticator Port Settings for 802.1X 190
Configuring Supplicant Port Settings for 802.1X 192
Displaying 802.1X Authenticator Statistics 194
Displaying 802.1X Supplicant Statistics 196
Web Authentication 197
Configuring Global Settings for Web Authentication 198
Configuring Interface Settings for Web Authentication 199
Displaying Web Authentication Port Information 199
Re-authenticating Web Authenticated Ports 200
Network Access (MAC Address Authentication) 201
Configuring Global Settings for Network Access 204
Configuring Network Access for Ports 205
Configuring Port Link Detection 206
Displaying Secure MAC Address Information 207
Configuring a MAC Address Filter 209
Access Control Lists 210
Setting the ACL Name and Type 211
Configuring a Standard IPv4 ACL 212
Configuring an Extended IPv4 ACL 213
Configuring a Standard IPv6 ACL 216
Configuring an Extended IPv6 ACL 217

C ONTENTS
– 10 –
Configuring a MAC ACL 218
Configuring an ARP ACL 220
Binding a Port to an Access Control List 222
Showing TCAM Utilization 223
ARP Inspection 224
Configuring Global Settings for ARP Inspection 225
Configuring VLAN Settings for ARP Inspection 227
Configuring Interface Settings for ARP Inspection 229
Displaying the ARP Inspection Log 230
Displaying ARP Inspection Statistics 231
Filtering IP Addresses for Management Access 232
DHCP Snooping 234
DHCP Snooping Configuration 236
DHCP Snooping VLAN Configuration 236
DHCP Snooping Information Option Configuration 237
Configuring Ports for DHCP Snooping 240
Displaying DHCP Snooping Binding Information 241
IP Source Guard 242
Configuring Ports for IP Source Guard 242
Configuring Static Bindings for IP Source Guard 244
Displaying Information for Dynamic IP Source Guard Bindings 246
8INTERFACE CONFIGURATION 248
Port Configuration 248
Displaying Connection Status 248
Configuring Interface Connections 249
Trunk Configuration 252
Configuring a Static Trunk 253
Enabling LACP on Selected Ports 255
Configuring Parameters for LACP Group Members 256
Configuring Parameters for LACP Groups 258
Displaying LACP Port Counters 259
Displaying LACP Settings and Status for the Local Side 260
Displaying LACP Settings and Status for the Remote Side 262
Storm Control Configuration 263
Setting Broadcast Storm Thresholds 264
Setting Multicast Storm Thresholds 265