Digisol DG-GS1550 Programming manual

ta
Azteca 1000 Web Managed Switch Series
DG-GS1550
Layer 2 Gigabit Ethernet Web Managed Switch
MANAGEMENT GUIDE
v1.0
08-02-2012
As our products undergo continuous development the specifications are subject to change without prior notice

COPYRIGHT
Copyright © 2010 by SNSL. All rights reserved. No part of this publication may be
reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any
language or computer language, in any form or by any means, electronic, mechanical,
magnetic, optical, chemical, manual or otherwise, without the prior written permission
of SNSL.
SNSL makes no representations or warranties, either expressed or implied, with respect
to the contents hereof and specifically disclaims any warranties, merchantability or
fitness for any particular purpose. Any software described in this manual is sold or
licensed “as is”. Should the programs prove defective following their purchase, the
buyer (and not SNSL, its distributor, or its dealer) assumes the entire cost of all
necessary servicing, repair, and any incidental or consequential damages resulting from
any defect in the software. Further, SNSL reserves the right to revise this publication
and to make changes from time to time in the contents thereof without obligation to
notify any person of such revision or changes.
SNSL is an abbreviation of Smartlink Network Systems Ltd.

DG-GS1550 Gigabit Ethernet Switch
Layer 2 Workgroup Switch
with 46 10/100/1000BASE-T (RJ-45) Ports
and 4 Combination Gigabit (RJ-45/SFP) Ports
MANAGEMENT GUIDE

About This Guide
Purpose
This guide details the hardware features of the switch, including the physical and
performance-related characteristics, and how to install the switch.
Audience
The guide is intended for use by network administrators who are responsible for installing and setting
up network equipment; consequently, it assumes a basic working knowledge of LANs (Local Area
Networks).
Conventions
The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features or
instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage the
system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Related Publications
The following publication gives specific information on how to operate and use the
management functions of the switch:
Installation Guide
Also, as part of the switch’s software, there is an online web-based help that describes all
management related features.
Revision History
This section summarizes the changes in each revision of this guide.
February 2012 Revision
This is the first revision of this guide.

xi
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Managing System Files 2-8
Saving Configuration Settings 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-11
Displaying System Information 3-11
Displaying Switch Hardware/Software Versions 3-13
Displaying Bridge Extension Capabilities 3-15
Setting the Switch’s IP Address 3-16
Manual Configuration 3-17
Using DHCP/BOOTP 3-18
Enabling Jumbo Frames 3-19
Managing Firmware 3-20
Downloading System Software from a Server 3-20

Contents
xii
Saving or Restoring Configuration Settings 3-22
Downloading Configuration Settings from a Server 3-23
Console Port Settings 3-24
Telnet Settings 3-26
Configuring Event Logging 3-28
System Log Configuration 3-28
Remote Log Configuration 3-29
Displaying Log Messages 3-31
Simple Mail Transfer Protocol 3-31
Resetting the System 3-33
Setting the System Clock 3-34
Setting the Time Manually 3-34
Configuring SNTP 3-34
Setting the Time Zone 3-35
Simple Network Management Protocol 3-36
Enabling the SNMP Agent 3-38
Setting Community Access Strings 3-38
Specifying Trap Managers and Trap Types 3-39
Configuring SNMPv3 Management Access 3-42
Setting the Local Engine ID 3-42
Specifying a Remote Engine ID 3-43
Configuring SNMPv3 Users 3-44
Configuring Remote SNMPv3 Users 3-46
Configuring SNMPv3 Groups 3-48
Setting SNMPv3 Views 3-51
User Authentication 3-53
Configuring User Accounts 3-53
Configuring Local/Remote Logon Authentication 3-55
Configuring Encryption Keys 3-58
AAA Authorization and Accounting 3-60
Configuring AAA RADIUS Group Settings 3-61
Configuring AAA TACACS+ Group Settings 3-62
Configuring AAA Accounting 3-62
AAA Accounting Update 3-64
AAA Accounting 802.1X Port Settings 3-65
AAA Accounting Exec Command Privileges 3-66
AAA Accounting Exec Settings 3-67
AAA Accounting Summary 3-67
Authorization Settings 3-69
Authorization EXEC Settings 3-70
Authorization Summary 3-71
Configuring HTTPS 3-72
Replacing the Default Secure-site Certificate 3-73
Configuring the Secure Shell 3-74
Generating the Host Key Pair 3-76

Contents
xiii
Configuring the SSH Server 3-78
Configuring 802.1X Port Authentication 3-79
Displaying 802.1X Global Settings 3-80
Configuring 802.1X Global Settings 3-81
Configuring Port Settings for 802.1X 3-82
Displaying 802.1X Statistics 3-85
Filtering IP Addresses for Management Access 3-86
General Security Measures 3-88
Configuring Port Security 3-89
Network Access (MAC Address Authentication) 3-90
Configuring the MAC Authentication Reauthentication Time 3-91
Configuring MAC Authentication for Ports 3-92
Displaying Secure MAC Address Information 3-93
MAC Authentication 3-95
Configuring MAC Authentication Parameters for Ports 3-95
Access Control Lists 3-96
Setting the ACL Name and Type 3-96
Configuring a Standard IP ACL 3-98
Configuring an Extended IP ACL 3-99
Configuring a MAC ACL 3-101
Binding a Port to an Access Control List 3-103
DHCP Snooping 3-104
DHCP Snooping Configuration 3-105
DHCP Snooping VLAN Configuration 3-106
DHCP Snooping Information Option Configuration 3-107
DHCP Snooping Port Configuration 3-108
DHCP Snooping Binding Information 3-109
IP Source Guard 3-110
Configuring Ports for IP Source Guard 3-110
Configuring Static Binding for IP Source Guard 3-112
Displaying Information for Dynamic IP Source Guard Bindings 3-114
Port Configuration 3-115
Displaying Connection Status 3-115
Configuring Interface Connections 3-117
Creating Trunk Groups 3-119
Statically Configuring a Trunk 3-120
Enabling LACP on Selected Ports 3-122
Configuring Parameters for LACP Group Members 3-123
Displaying LACP Port Counters 3-125
Displaying LACP Settings and Status for the Local Side 3-127
Displaying LACP Settings and Status for the Remote Side 3-129
Setting Broadcast Storm Thresholds 3-130
Setting Multicast Storm Thresholds 3-132
Setting Unknown Unicast Storm Thresholds 3-133
Configuring Local Port Mirroring 3-134

Contents
xiv
Configuring Remote Port Mirroring 3-136
Configuring Rate Limits 3-140
Rate Limit Configuration 3-140
Showing Port Statistics 3-141
Address Table Settings 3-146
Setting Static Addresses 3-146
Displaying the Address Table 3-147
Changing the Aging Time 3-148
Spanning Tree Algorithm Configuration 3-149
Displaying Global Settings for STA 3-151
Configuring Global Settings for STA 3-154
Displaying Interface Settings for STA 3-158
Configuring Interface Settings for STA 3-161
Configuring Multiple Spanning Trees 3-165
Displaying Interface Settings for MSTP 3-168
Configuring Interface Settings for MSTP 3-170
VLAN Configuration 3-171
IEEE 802.1Q VLANs 3-171
Enabling or Disabling GVRP (Global Setting) 3-174
Displaying Basic VLAN Information 3-175
Displaying Current VLANs 3-176
Creating VLANs 3-177
Adding Static Members to VLANs (VLAN Index) 3-180
Adding Static Members to VLANs (Port Index) 3-182
Configuring VLAN Behavior for Interfaces 3-183
Configuring IEEE 802.1Q Tunneling 3-185
Enabling QinQ Tunneling on the Switch 3-188
Adding an Interface to a QinQ Tunnel 3-189
Traffic Segmentation 3-192
Configuring Global Settings for Traffic Segmentation 3-192
Configuring Traffic Segmentation Uplinks and Downlinks 3-193
Private VLANs 3-194
Displaying Current Private VLANs 3-194
Configuring Private VLANs 3-195
Associating VLANs 3-196
Displaying Private VLAN Interface Information 3-197
Configuring Private VLAN Interfaces 3-198
Protocol VLANs 3-199
Configuring Protocol VLAN Groups 3-200
Mapping Protocols to VLANs 3-201
Class of Service Configuration 3-203
Layer 2 Queue Settings 3-203
Setting the Default Priority for Interfaces 3-203
Mapping CoS Values to Egress Queues 3-205
Selecting the Queue Mode 3-207

Contents
xv
Setting the Service Weight for Traffic Classes 3-208
Layer 3/4 Priority Settings 3-209
Mapping Layer 3/4 Priorities to CoS Values 3-209
Selecting IP Precedence/DSCP Priority 3-209
Mapping IP Precedence 3-210
Mapping DSCP Priority 3-211
Mapping IP Port Priority 3-213
Quality of Service 3-214
Configuring Quality of Service Parameters 3-215
Configuring a Class Map 3-215
Creating QoS Policies 3-218
Attaching a Policy Map to Ingress Queues 3-221
Multicast Filtering 3-222
Layer 2 IGMP (Snooping and Query) 3-223
Configuring IGMP Snooping and Query Parameters 3-224
Enabling IGMP Immediate Leave 3-226
Displaying Interfaces Attached to a Multicast Router 3-228
Specifying Static Interfaces for a Multicast Router 3-229
Displaying Port Members of Multicast Services 3-230
Assigning Ports to Multicast Services 3-231
IGMP Filtering and Throttling 3-232
Enabling IGMP Filtering and Throttling 3-232
Configuring IGMP Filter Profiles 3-233
Configuring IGMP Filtering and Throttling for Interfaces 3-235
Multicast VLAN Registration 3-237
Configuring Global MVR Settings 3-238
Displaying MVR Interface Status 3-240
Displaying Port Members of Multicast Groups 3-241
Configuring MVR Interface Status 3-242
Assigning Static Multicast Groups to Interfaces 3-244
Configuring Domain Name Service 3-245
Configuring General DNS Service Parameters 3-245
Configuring Static DNS Host to Address Entries 3-247
Displaying the DNS Cache 3-249
Switch Clustering 3-250
Cluster Configuration 3-250
Cluster Member Configuration 3-252
Displaying Information on Cluster Members 3-253
Cluster Candidate Information 3-254
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1

Contents
xvi
Telnet Connection 4-2
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-9
Command Groups 4-10
General Commands 4-11
enable 4-12
disable 4-12
configure 4-13
show history 4-13
reload (Privileged Exec) 4-14
reload (Global Configuration) 4-14
show reload 4-16
prompt 4-16
end 4-16
exit 4-17
quit 4-17
System Management Commands 4-18
Device Designation Commands 4-18
hostname 4-18
Banner Information Commands 4-19
banner configure 4-20
banner configure company 4-21
banner configure dc-power-info 4-21
banner configure department 4-22
banner configure equipment-info 4-23
banner configure equipment-location 4-23
banner configure ip-lan 4-24
banner configure lp-number 4-25
banner configure manager-info 4-25
banner configure mux 4-26
banner configure note 4-27
show banner 4-27
System Status Commands 4-28
show startup-config 4-28