Digisol DG-GS4528SE Programming manual

Management Guide
MUSTANG 4000 SWITCH SERIES
DG-GS4500SE Series
28 Port Layer 2+Gigabit Ethernet Switch
MANAGEMENT GUIDE
V1.0
2013-10-01
As our products undergo continuous development the specifications are subject to change without prior notice

M ANAGEMENT G UIDE
DG-GS4528SE GIGABIT ETHERNET SWITCH
Layer 2+ Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
2 10-Gigabit SFP+ Ports,
and Optional Module with 2 10-Gigabit SFP+ Ports
DG-GS4528FSE GIGABIT ETHERNET FIBER SWITCH
Layer 2+ Gigabit Ethernet Fiber Switch
with 22 SFP Ports,
with 2 10/100/1000BASE-T (RJ-45/SFP) combo Ports,
2 10-Gigabit SFP+ Ports,
and Optional Module with 2 10-Gigabit SFP+ Ports
DG-GS4528SE
DG-GS4528SFSE
102013
R01

– 3 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY OCT 2013 REVISION
This is the first version of this guide.

– 5 –
CONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 41
TABLES 55
SECTION I GETTING STARTED 61
1INTRODUCTION 63
Key Features 63
Description of Software Features 64
IP Routing 68
Address Resolution Protocol 69
System Defaults 70
2INITIAL SWITCH CONFIGURATION 73
Connecting to the Switch 73
Configuration Options 73
Required Connections 74
Remote Connections 75
Basic Configuration 76
Console Connection 76
Setting Passwords 76
Setting an IP Address 77
Downloading a Configuration File Referenced by a DHCP Server 83
Enabling SNMP Management Access 85
Managing System Files 88
Saving or Restoring Configuration Settings 88
SECTION II WEB CONFIGURATION 91
3USING THE WEB INTERFACE 93

C ONTENTS
– 6 –
Connecting to the Web Interface 93
Navigating the Web Browser Interface 94
Home Page 94
Configuration Options 95
Panel Display 95
Main Menu 96
4BASIC MANAGEMENT TASKS 113
Displaying System Information 114
Displaying Hardware/Software Versions 115
Configuring Support for Jumbo Frames 116
Displaying Bridge Extension Capabilities 117
Managing System Files 119
Copying Files via FTP/TFTP or HTTP 119
Saving the Running Configuration to a Local File 121
Setting The Start-Up File 122
Showing System Files 123
Automatic Operation Code Upgrade 124
Setting the System Clock 128
Setting the Time Manually 128
Setting the SNTP Polling Interval 129
Configuring NTP 130
Configuring Time Servers 131
Setting the Time Zone 135
Configuring the Console Port 136
Configuring Telnet Settings 138
Displaying CPU Utilization 139
Displaying Memory Utilization 140
Resetting the System 141
5INTERFACE CONFIGURATION 145
Port Configuration 145
Configuring by Port List 145
Configuring by Port Range 148
Displaying Connection Status 149
Configuring Local Port Mirroring 150
Configuring Remote Port Mirroring 152
Showing Port or Trunk Statistics 156

C ONTENTS
– 7 –
Performing Cable Diagnostics 160
Trunk Configuration 162
Configuring a Static Trunk 163
Configuring a Dynamic Trunk 166
Displaying LACP Port Counters 172
Displaying LACP Settings and Status for the Local Side 173
Displaying LACP Settings and Status for the Remote Side 175
Saving Power 176
Sampling Traffic Flows 178
Configuring sFlow Global Settings 179
Configuring sFlow Interface Settings 179
Traffic Segmentation 181
Enabling Traffic Segmentation 181
Configuring Uplink and Downlink Ports 183
VLAN Trunking 185
6VLANCONFIGURATION 187
IEEE 802.1Q VLANs 187
Configuring VLAN Groups 190
Adding Static Members to VLANs 193
Configuring Dynamic VLAN Registration 197
IEEE 802.1Q Tunneling 200
Enabling QinQ Tunneling on the Switch 204
Creating CVLAN to SPVLAN Mapping Entries 205
Adding an Interface to a QinQ Tunnel 207
Protocol VLANs 209
Configuring Protocol VLAN Groups 209
Mapping Protocol Groups to Interfaces 211
Configuring IP Subnet VLANs 213
Configuring MAC-based VLANs 215
Configuring VLAN Mirroring 217
Configuring VLAN Translation 218
7ADDRESS TABLE SETTINGS 221
Setting Static Addresses 221
Changing the Aging Time 223
Displaying the Dynamic Address Table 224
Clearing the Dynamic Address Table 225

C ONTENTS
– 8 –
Configuring MAC Address Mirroring 226
8SPANNING TREE ALGORITHM 229
Overview 229
Configuring Loopback Detection 232
Configuring Global Settings for STA 234
Displaying Global Settings for STA 239
Configuring Interface Settings for STA 240
Displaying Interface Settings for STA 244
Configuring Multiple Spanning Trees 247
Configuring Interface Settings for MSTP 251
9CONGESTION CONTROL 253
Rate Limiting 253
Storm Control 254
Automatic Traffic Control 257
Setting the ATC Timers 258
Configuring ATC Thresholds and Responses 259
10 CLASS OF SERVICE 263
Layer 2 Queue Settings 263
Setting the Default Priority for Interfaces 263
Selecting the Queue Mode 264
Mapping CoS Values to Egress Queues 267
Layer 3/4 Priority Settings 270
Setting Priority Processing to DSCP or CoS 270
Mapping Ingress DSCP Values to Internal DSCP Values 271
Mapping CoS Priorities to Internal DSCP Values 274
11 QUALITY OF SERVICE 277
Overview 277
Configuring a Class Map 278
Creating QoS Policies 281
Attaching a Policy Map to a Port 291
12 VOIP TRAFFIC CONFIGURATION 293
Overview 293
Configuring VoIP Traffic 293
Configuring Telephony OUI 295
Configuring VoIP Traffic Ports 296
13 SECURITY MEASURES 299

C ONTENTS
– 9 –
AAA (Authentication, Authorization and Accounting) 300
Configuring Local/Remote Logon Authentication 301
Configuring Remote Logon Authentication Servers 302
Configuring AAA Accounting 307
Configuring AAA Authorization 313
Configuring User Accounts 316
Web Authentication 318
Configuring Global Settings for Web Authentication 318
Configuring Interface Settings for Web Authentication 319
Network Access (MAC Address Authentication) 320
Configuring Global Settings for Network Access 323
Configuring Network Access for Ports 324
Configuring Port Link Detection 326
Configuring a MAC Address Filter 327
Displaying Secure MAC Address Information 329
Configuring HTTPS 330
Configuring Global Settings for HTTPS 330
Replacing the Default Secure-site Certificate 332
Configuring the Secure Shell 334
Configuring the SSH Server 336
Generating the Host Key Pair 338
Importing User Public Keys 339
Access Control Lists 341
Setting A Time Range 343
Showing TCAM Utilization 345
Setting the ACL Name and Type 346
Configuring a Standard IPv4 ACL 348
Configuring an Extended IPv4 ACL 350
Configuring a Standard IPv6 ACL 352
Configuring an Extended IPv6 ACL 354
Configuring a MAC ACL 356
Configuring an ARP ACL 358
Binding a Port to an Access Control List 360
Configuring ACL Mirroring 361
Showing ACL Hardware Counters 363
ARP Inspection 364

C ONTENTS
– 10 –
Configuring Global Settings for ARP Inspection 365
Configuring VLAN Settings for ARP Inspection 367
Configuring Interface Settings for ARP Inspection 369
Displaying ARP Inspection Statistics 370
Displaying the ARP Inspection Log 371
Filtering IP Addresses for Management Access 372
Configuring Port Security 374
Configuring 802.1X Port Authentication 376
Configuring 802.1X Global Settings 378
Configuring Port Authenticator Settings for 802.1X 379
Configuring Port Supplicant Settings for 802.1X 383
Displaying 802.1X Statistics 385
DoS Protection 388
IP Source Guard 390
Configuring Ports for IP Source Guard 391
Configuring Static Bindings for IP Source Guard 393
Displaying Information for Dynamic IP Source Guard Bindings 395
DHCP Snooping 396
DHCP Snooping Configuration 398
DHCP Snooping VLAN Configuration 400
Configuring Ports for DHCP Snooping 401
Displaying DHCP Snooping Binding Information 402
14 BASIC ADMINISTRATION PROTOCOLS 405
Configuring Event Logging 406
System Log Configuration 406
Remote Log Configuration 408
Sending Simple Mail Transfer Protocol Alerts 409
Link Layer Discovery Protocol 410
Setting LLDP Timing Attributes 411
Configuring LLDP Interface Attributes 413
Configuring LLDP Interface Civic-Address 416
Displaying LLDP Local Device Information 418
Displaying LLDP Remote Device Information 422
Displaying Device Statistics 430
Simple Network Management Protocol 432
Configuring Global Settings for SNMP 434

C ONTENTS
– 11 –
Setting the Local Engine ID 435
Specifying a Remote Engine ID 436
Setting SNMPv3 Views 438
Configuring SNMPv3 Groups 441
Setting Community Access Strings 444
Configuring Local SNMPv3 Users 445
Configuring Remote SNMPv3 Users 447
Specifying Trap Managers 450
Creating SNMP Notification Logs 454
Showing SNMP Statistics 456
Remote Monitoring 458
Configuring RMON Alarms 459
Configuring RMON Events 461
Configuring RMON History Samples 463
Configuring RMON Statistical Samples 466
Switch Clustering 469
Configuring General Settings for Clusters 469
Cluster Member Configuration 471
Managing Cluster Members 472
Ethernet Ring Protection Switching 473
ERPS Global Configuration 477
ERPS Ring Configuration 478
ERPS Forced and Manual Mode Operations 494
Connectivity Fault Management 498
Configuring Global Settings for CFM 501
Configuring Interfaces for CFM 505
Configuring CFM Maintenance Domains 505
Configuring CFM Maintenance Associations 510
Configuring Maintenance End Points 515
Configuring Remote Maintenance End Points 516
Transmitting Link Trace Messages 518
Transmitting Loop Back Messages 520
Transmitting Delay-Measure Requests 522
Displaying Local MEPs 524
Displaying Details for Local MEPs 525
Displaying Local MIPs 527