Digisol DG-GS4528SE Programming manual

Management Guide
MUSTANG 4000 SWITCH SERIES
DG-GS4500SE Series
28 Port Layer 2+Gigabit Ethernet Switch
MANAGEMENT GUIDE
V1.0
2013-10-01
As our products undergo continuous development the specifications are subject to change without prior notice

M ANAGEMENT G UIDE
DG-GS4528SE GIGABIT ETHERNET SWITCH
Layer 2+ Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
2 10-Gigabit SFP+ Ports,
and Optional Module with 2 10-Gigabit SFP+ Ports
DG-GS4528FSE GIGABIT ETHERNET FIBER SWITCH
Layer 2+ Gigabit Ethernet Fiber Switch
with 22 SFP Ports,
with 2 10/100/1000BASE-T (RJ-45/SFP) combo Ports,
2 10-Gigabit SFP+ Ports,
and Optional Module with 2 10-Gigabit SFP+ Ports
DG-GS4528SE
DG-GS4528SFSE
102013
R01

– 3 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY OCT 2013 REVISION
This is the first version of this guide.

– 5 –
CONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 41
TABLES 55
SECTION I GETTING STARTED 61
1INTRODUCTION 63
Key Features 63
Description of Software Features 64
IP Routing 68
Address Resolution Protocol 69
System Defaults 70
2INITIAL SWITCH CONFIGURATION 73
Connecting to the Switch 73
Configuration Options 73
Required Connections 74
Remote Connections 75
Basic Configuration 76
Console Connection 76
Setting Passwords 76
Setting an IP Address 77
Downloading a Configuration File Referenced by a DHCP Server 83
Enabling SNMP Management Access 85
Managing System Files 88
Saving or Restoring Configuration Settings 88
SECTION II WEB CONFIGURATION 91
3USING THE WEB INTERFACE 93

C ONTENTS
– 6 –
Connecting to the Web Interface 93
Navigating the Web Browser Interface 94
Home Page 94
Configuration Options 95
Panel Display 95
Main Menu 96
4BASIC MANAGEMENT TASKS 113
Displaying System Information 114
Displaying Hardware/Software Versions 115
Configuring Support for Jumbo Frames 116
Displaying Bridge Extension Capabilities 117
Managing System Files 119
Copying Files via FTP/TFTP or HTTP 119
Saving the Running Configuration to a Local File 121
Setting The Start-Up File 122
Showing System Files 123
Automatic Operation Code Upgrade 124
Setting the System Clock 128
Setting the Time Manually 128
Setting the SNTP Polling Interval 129
Configuring NTP 130
Configuring Time Servers 131
Setting the Time Zone 135
Configuring the Console Port 136
Configuring Telnet Settings 138
Displaying CPU Utilization 139
Displaying Memory Utilization 140
Resetting the System 141
5INTERFACE CONFIGURATION 145
Port Configuration 145
Configuring by Port List 145
Configuring by Port Range 148
Displaying Connection Status 149
Configuring Local Port Mirroring 150
Configuring Remote Port Mirroring 152
Showing Port or Trunk Statistics 156

C ONTENTS
– 7 –
Performing Cable Diagnostics 160
Trunk Configuration 162
Configuring a Static Trunk 163
Configuring a Dynamic Trunk 166
Displaying LACP Port Counters 172
Displaying LACP Settings and Status for the Local Side 173
Displaying LACP Settings and Status for the Remote Side 175
Saving Power 176
Sampling Traffic Flows 178
Configuring sFlow Global Settings 179
Configuring sFlow Interface Settings 179
Traffic Segmentation 181
Enabling Traffic Segmentation 181
Configuring Uplink and Downlink Ports 183
VLAN Trunking 185
6VLANCONFIGURATION 187
IEEE 802.1Q VLANs 187
Configuring VLAN Groups 190
Adding Static Members to VLANs 193
Configuring Dynamic VLAN Registration 197
IEEE 802.1Q Tunneling 200
Enabling QinQ Tunneling on the Switch 204
Creating CVLAN to SPVLAN Mapping Entries 205
Adding an Interface to a QinQ Tunnel 207
Protocol VLANs 209
Configuring Protocol VLAN Groups 209
Mapping Protocol Groups to Interfaces 211
Configuring IP Subnet VLANs 213
Configuring MAC-based VLANs 215
Configuring VLAN Mirroring 217
Configuring VLAN Translation 218
7ADDRESS TABLE SETTINGS 221
Setting Static Addresses 221
Changing the Aging Time 223
Displaying the Dynamic Address Table 224
Clearing the Dynamic Address Table 225

C ONTENTS
– 8 –
Configuring MAC Address Mirroring 226
8SPANNING TREE ALGORITHM 229
Overview 229
Configuring Loopback Detection 232
Configuring Global Settings for STA 234
Displaying Global Settings for STA 239
Configuring Interface Settings for STA 240
Displaying Interface Settings for STA 244
Configuring Multiple Spanning Trees 247
Configuring Interface Settings for MSTP 251
9CONGESTION CONTROL 253
Rate Limiting 253
Storm Control 254
Automatic Traffic Control 257
Setting the ATC Timers 258
Configuring ATC Thresholds and Responses 259
10 CLASS OF SERVICE 263
Layer 2 Queue Settings 263
Setting the Default Priority for Interfaces 263
Selecting the Queue Mode 264
Mapping CoS Values to Egress Queues 267
Layer 3/4 Priority Settings 270
Setting Priority Processing to DSCP or CoS 270
Mapping Ingress DSCP Values to Internal DSCP Values 271
Mapping CoS Priorities to Internal DSCP Values 274
11 QUALITY OF SERVICE 277
Overview 277
Configuring a Class Map 278
Creating QoS Policies 281
Attaching a Policy Map to a Port 291
12 VOIP TRAFFIC CONFIGURATION 293
Overview 293
Configuring VoIP Traffic 293
Configuring Telephony OUI 295
Configuring VoIP Traffic Ports 296
13 SECURITY MEASURES 299

C ONTENTS
– 9 –
AAA (Authentication, Authorization and Accounting) 300
Configuring Local/Remote Logon Authentication 301
Configuring Remote Logon Authentication Servers 302
Configuring AAA Accounting 307
Configuring AAA Authorization 313
Configuring User Accounts 316
Web Authentication 318
Configuring Global Settings for Web Authentication 318
Configuring Interface Settings for Web Authentication 319
Network Access (MAC Address Authentication) 320
Configuring Global Settings for Network Access 323
Configuring Network Access for Ports 324
Configuring Port Link Detection 326
Configuring a MAC Address Filter 327
Displaying Secure MAC Address Information 329
Configuring HTTPS 330
Configuring Global Settings for HTTPS 330
Replacing the Default Secure-site Certificate 332
Configuring the Secure Shell 334
Configuring the SSH Server 336
Generating the Host Key Pair 338
Importing User Public Keys 339
Access Control Lists 341
Setting A Time Range 343
Showing TCAM Utilization 345
Setting the ACL Name and Type 346
Configuring a Standard IPv4 ACL 348
Configuring an Extended IPv4 ACL 350
Configuring a Standard IPv6 ACL 352
Configuring an Extended IPv6 ACL 354
Configuring a MAC ACL 356
Configuring an ARP ACL 358
Binding a Port to an Access Control List 360
Configuring ACL Mirroring 361
Showing ACL Hardware Counters 363
ARP Inspection 364

C ONTENTS
– 10 –
Configuring Global Settings for ARP Inspection 365
Configuring VLAN Settings for ARP Inspection 367
Configuring Interface Settings for ARP Inspection 369
Displaying ARP Inspection Statistics 370
Displaying the ARP Inspection Log 371
Filtering IP Addresses for Management Access 372
Configuring Port Security 374
Configuring 802.1X Port Authentication 376
Configuring 802.1X Global Settings 378
Configuring Port Authenticator Settings for 802.1X 379
Configuring Port Supplicant Settings for 802.1X 383
Displaying 802.1X Statistics 385
DoS Protection 388
IP Source Guard 390
Configuring Ports for IP Source Guard 391
Configuring Static Bindings for IP Source Guard 393
Displaying Information for Dynamic IP Source Guard Bindings 395
DHCP Snooping 396
DHCP Snooping Configuration 398
DHCP Snooping VLAN Configuration 400
Configuring Ports for DHCP Snooping 401
Displaying DHCP Snooping Binding Information 402
14 BASIC ADMINISTRATION PROTOCOLS 405
Configuring Event Logging 406
System Log Configuration 406
Remote Log Configuration 408
Sending Simple Mail Transfer Protocol Alerts 409
Link Layer Discovery Protocol 410
Setting LLDP Timing Attributes 411
Configuring LLDP Interface Attributes 413
Configuring LLDP Interface Civic-Address 416
Displaying LLDP Local Device Information 418
Displaying LLDP Remote Device Information 422
Displaying Device Statistics 430
Simple Network Management Protocol 432
Configuring Global Settings for SNMP 434

C ONTENTS
– 11 –
Setting the Local Engine ID 435
Specifying a Remote Engine ID 436
Setting SNMPv3 Views 438
Configuring SNMPv3 Groups 441
Setting Community Access Strings 444
Configuring Local SNMPv3 Users 445
Configuring Remote SNMPv3 Users 447
Specifying Trap Managers 450
Creating SNMP Notification Logs 454
Showing SNMP Statistics 456
Remote Monitoring 458
Configuring RMON Alarms 459
Configuring RMON Events 461
Configuring RMON History Samples 463
Configuring RMON Statistical Samples 466
Switch Clustering 469
Configuring General Settings for Clusters 469
Cluster Member Configuration 471
Managing Cluster Members 472
Ethernet Ring Protection Switching 473
ERPS Global Configuration 477
ERPS Ring Configuration 478
ERPS Forced and Manual Mode Operations 494
Connectivity Fault Management 498
Configuring Global Settings for CFM 501
Configuring Interfaces for CFM 505
Configuring CFM Maintenance Domains 505
Configuring CFM Maintenance Associations 510
Configuring Maintenance End Points 515
Configuring Remote Maintenance End Points 516
Transmitting Link Trace Messages 518
Transmitting Loop Back Messages 520
Transmitting Delay-Measure Requests 522
Displaying Local MEPs 524
Displaying Details for Local MEPs 525
Displaying Local MIPs 527

C ONTENTS
– 12 –
Displaying Remote MEPs 528
Displaying Details for Remote MEPs 529
Displaying the Link Trace Cache 531
Displaying Fault Notification Settings 532
Displaying Continuity Check Errors 533
OAM Configuration 535
Enabling OAM on Local Ports 535
Displaying Statistics for OAM Messages 537
Displaying the OAM Event Log 538
Displaying the Status of Remote Interfaces 539
Configuring a Remote Loop Back Test 540
Displaying Results of Remote Loop Back Testing 542
15 MULTICAST FILTERING 545
Overview 545
Layer 2 IGMP (Snooping and Query) 546
Configuring IGMP Snooping and Query Parameters 548
Specifying Static Interfaces for a Multicast Router 552
Assigning Interfaces to Multicast Services 554
Setting IGMP Snooping Status per Interface 556
Filtering IGMP Query Packets and Multicast Data 561
Displaying Multicast Groups Discovered by IGMP Snooping 562
Displaying IGMP Snooping Statistics 563
Filtering and Throttling IGMP Groups 567
Enabling IGMP Filtering and Throttling 567
Configuring IGMP Filter Profiles 568
Configuring IGMP Filtering and Throttling for Interfaces 570
Multicast VLAN Registration for IPv4 572
Configuring MVR Global Settings 573
Configuring MVR Domain Settings 575
Configuring MVR Group Address Profiles 577
Configuring MVR Interface Status 580
Assigning Static MVR Multicast Groups to Interfaces 582
Displaying MVR Receiver Groups 584
Displaying MVR Statistics 585
Multicast VLAN Registration for IPv6 589
Configuring MVR6 Global Settings 590

C ONTENTS
– 13 –
Configuring MVR6 Domain Settings 592
Configuring MVR6 Group Address Profiles 593
Configuring MVR6 Interface Status 596
Assigning Static MVR6 Multicast Groups to Interfaces 598
Displaying MVR6 Receiver Groups 600
Displaying MVR6 Statistics 601
16 IP CONFIGURATION 605
Setting the Switch’s IP Address (IP Version 4) 605
Setting the Switch’s IP Address (IP Version 6) 609
Configuring the IPv6 Default Gateway 609
Configuring IPv6 Interface Settings 610
Configuring an IPv6 Address 615
Showing IPv6 Addresses 618
Showing the IPv6 Neighbor Cache 619
Showing IPv6 Statistics 621
Showing the MTU for Responding Destinations 626
17 IP SERVICES 627
Domain Name Service 627
Configuring General DNS Service Parameters 627
Configuring a List of Domain Names 628
Configuring a List of Name Servers 630
Configuring Static DNS Host to Address Entries 631
Displaying the DNS Cache 632
Dynamic Host Configuration Protocol 633
Specifying A DHCP Client Identifier 633
Configuring DHCP Relay Service 635
Configuring the PPPoE Intermediate Agent 636
Configuring PPPoE IA Global Settings 636
Configuring PPPoE IA Interface Settings 638
Showing PPPoE IA Statistics 640
18 GENERAL IP ROUTING 643
Overview 643
Initial Configuration 643
IP Routing and Switching 644
Routing Path Management 645
Routing Protocols 646

C ONTENTS
– 14 –
Configuring IP Routing Interfaces 646
Configuring Local and Remote Interfaces 646
Using the Ping Function 647
Using the Trace Route Function 648
Address Resolution Protocol 649
Basic ARP Configuration 650
Configuring Static ARP Addresses 652
Displaying Dynamic or Local ARP Entries 653
Displaying ARP Statistics 654
Configuring Static Routes 655
Displaying the Routing Table 657
19 UNICAST ROUTING 659
Overview 659
Configuring the Routing Information Protocol 660
Configuring General Protocol Settings 661
Clearing Entries from the Routing Table 664
Specifying Network Interfaces 665
Specifying Passive Interfaces 667
Specifying Static Neighbors 668
Configuring Route Redistribution 669
Specifying an Administrative Distance 671
Configuring Network Interfaces for RIP 673
Displaying RIP Interface Settings 677
Displaying Peer Router Information 677
Resetting RIP Statistics 678
SECTION III COMMAND LINE INTERFACE 679
20 USING THE COMMAND LINE INTERFACE 681
Accessing the CLI 681
Console Connection 681
Telnet Connection 682
Entering Commands 683
Keywords and Arguments 683
Minimum Abbreviation 683
Command Completion 683

C ONTENTS
– 15 –
Getting Help on Commands 684
Partial Keyword Lookup 686
Negating the Effect of Commands 686
Using Command History 686
Understanding Command Modes 686
Exec Commands 687
Configuration Commands 688
Command Line Processing 690
Showing Status Information 690
CLI Command Groups 691
21 GENERAL COMMANDS 695
prompt 695
reload (Global Configuration) 696
enable 697
quit 698
show history 698
configure 699
disable 700
reload (Privileged Exec) 700
show reload 701
end 701
exit 701
22 SYSTEM MANAGEMENT COMMANDS 703
Device Designation 703
hostname 704
Banner Information 704
banner configure 705
banner configure company 706
banner configure dc-power-info 707
banner configure department 707
banner configure equipment-info 708
banner configure equipment-location 709
banner configure ip-lan 709
banner configure lp-number 710
banner configure manager-info 711
banner configure mux 711

C ONTENTS
– 16 –
banner configure note 712
show banner 713
System Status 713
show access-list tcam-utilization 714
show memory 714
show process cpu 715
show running-config 715
show startup-config 717
show system 717
show tech-support 718
show users 719
show version 720
show watchdog 720
watchdog software 720
Frame Size 721
jumbo frame 721
File Management 722
General Commands 723
boot system 723
copy 724
delete 727
dir 727
whichboot 728
Automatic Code Upgrade Commands 729
upgrade opcode auto 729
upgrade opcode path 730
upgrade opcode reload 731
show upgrade 732
TFTP Configuration Commands 732
ip tftp retry 732
ip tftp timeout 733
show ip tftp 733
Line 734
line 735
databits 735
exec-timeout 736

C ONTENTS
– 17 –
login 737
parity 738
password 738
password-thresh 739
silent-time 740
speed 740
stopbits 741
timeout login response 742
disconnect 742
terminal 743
show line 744
Event Logging 745
logging facility 745
logging history 746
logging host 747
logging on 747
logging trap 748
clear log 748
show log 749
show logging 750
SMTP Alerts 751
logging sendmail 752
logging sendmail host 752
logging sendmail level 753
logging sendmail destination-email 753
logging sendmail source-email 754
show logging sendmail 754
Time 755
SNTP Commands 756
sntp client 756
sntp poll 757
sntp server 757
show sntp 758
NTP Commands 758
ntp authenticate 758
ntp authentication-key 759

C ONTENTS
– 18 –
ntp client 760
ntp server 761
show ntp 762
Manual Configuration Commands 762
clock timezone 762
calendar set 763
show calendar 764
Time Range 764
time-range 764
absolute 765
periodic 766
show time-range 767
Switch Clustering 767
cluster 768
cluster commander 769
cluster ip-pool 769
cluster member 770
rcommand 771
show cluster 771
show cluster members 772
show cluster candidates 772
23 SNMP COMMANDS 773
General SNMP Commands 775
snmp-server 775
snmp-server community 775
snmp-server contact 776
snmp-server location 776
show snmp 777
SNMP Target Host Commands 778
snmp-server enable traps 778
snmp-server host 779
SNMPv3 Commands 781
snmp-server engine-id 781
snmp-server group 782
snmp-server user 783
snmp-server view 785

C ONTENTS
– 19 –
show snmp engine-id 786
show snmp group 786
show snmp user 787
show snmp view 788
Notification Log Commands 789
nlm 789
snmp-server notify-filter 789
show nlm oper-status 791
show snmp notify-filter 791
Additional Trap Commands 791
memory 791
process cpu 792
24 REMOTE MONITORING COMMANDS 795
rmon alarm 796
rmon event 797
rmon collection history 798
rmon collection rmon1 799
show rmon alarms 800
show rmon events 800
show rmon history 800
show rmon statistics 801
25 FLOW SAMPLING COMMANDS 803
sflow 803
sflow destination 804
sflow max-datagram-size 805
sflow max-header-size 805
sflow owner 806
sflow polling-interval 806
sflow sample 807
sflow source 807
sflow timeout 808
show sflow 808
26 AUTHENTICATION COMMANDS 811
User Accounts and Privilege Levels 812
enable password 812
username 813

C ONTENTS
– 20 –
privilege 814
show privilege 815
Authentication Sequence 815
authentication enable 816
authentication login 817
RADIUS Client 818
radius-server acct-port 818
radius-server auth-port 819
radius-server host 819
radius-server key 820
radius-server retransmit 820
radius-server timeout 821
show radius-server 821
TACACS+ Client 822
tacacs-server host 822
tacacs-server key 823
tacacs-server port 824
tacacs-server retransmit 824
tacacs-server timeout 825
show tacacs-server 825
AAA 826
aaa accounting commands 826
aaa accounting dot1x 827
aaa accounting exec 828
aaa accounting update 829
aaa authorization exec 830
aaa group server 831
server 831
accounting dot1x 832
accounting commands 832
accounting exec 833
authorization exec 833
show accounting 834
Web Server 835
ip http port 835
ip http server 836

C ONTENTS
– 21 –
ip http secure-port 836
ip http secure-server 837
Telnet Server 838
ip telnet max-sessions 839
ip telnet port 839
ip telnet server 840
show ip telnet 840
Secure Shell 840
ip ssh authentication-retries 843
ip ssh server 844
ip ssh server-key size 845
ip ssh timeout 845
delete public-key 846
ip ssh crypto host-key generate 846
ip ssh crypto zeroize 847
ip ssh save host-key 848
show ip ssh 848
show public-key 848
show ssh 849
802.1X Port Authentication 850
General Commands 851
dot1x default 851
dot1x eapol-pass-through 851
dot1x system-auth-control 852
Authenticator Commands 852
dot1x intrusion-action 852
dot1x max-reauth-req 853
dot1x max-req 853
dot1x operation-mode 854
dot1x port-control 855
dot1x re-authentication 855
dot1x timeout quiet-period 856
dot1x timeout re-authperiod 856
dot1x timeout supp-timeout 857
dot1x timeout tx-period 858
dot1x re-authenticate 858