EtherWAN EX26262 Programming manual





























Layer 2
Gigabit PoE
Ethernet Switch



Management Guide




































M ANAGEMENT G UIDE





















ABOUT THIS GUIDE
–
5
–





PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.


AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).


CONVENTIONS The following conventions are used throughout this guide to show
information:


NOTE: Emphasizes important information or calls your attention to related
features or instructions.



CAUTION: Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.



WARNING: Alerts you to a potential hazard that could cause personal injury.




RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.


REVISION HISTORY This section summarizes the changes in each revision of this guide.

AUGUST 2012REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.0.0.

–
6
–
A BOUT T HIS G UIDE




–
7
–
CONTENTS





ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 13
TABLES 19



SECTION IGETTING STARTED 21 

1  I NTRODUCTION  23 
Key Features
23 
Description of Software Features
24 
System Defaults
28 

2 INITIAL SWITCH CONFIGURATION 31 
SECTION II WEB CONFIGURATION
33 

3 USING THE WEB INTERFACE 35 

Navigating the Web Browser Interface 35 

Home Page 35 

Configuration Options 36 

Panel Display 36 

Main Menu 37 

4  C ONFIGURINGTHE S WITCH  47 

Configuring System Information 47 

Setting an IP Address 48 

Setting an IPv4 Address 48 

Setting an IPv6 Address 49 

Configuring NTP Service 52 

Configuring the Time Zone and Daylight Savings Time 53 

Configuring Remote Log Messages 55

–
8
–
C ONTENTS




Configuring Power Reduction 57
Reducing Power to Idle Queue Circuits 57
Configuring Port Connections 58
Configuring Security 60
Configuring User Accounts 61
Configuring User Privilege Levels 62
Configuring The Authentication Method For Management Access 64
Configuring SSH 67
Configuring HTTPS 68
Filtering IP Addresses for Management Access 69
Using Simple Network Management Protocol 70
Remote Monitoring 81
Configuring Port Limit Controls 86
Configuring Authentication Through Network Access Servers 89
Filtering Traffic with Access Control Lists 100
Configuring DHCP Snooping 111
Configuring DHCP Relay and Option 82 Information 114
Configuring IP Source Guard 115
Configuring ARP Inspection 119
Specifying Authentication Servers 122
Creating Trunk Groups 124
Configuring Static Trunks 125
Configuring LACP 127
Configuring Loop Protection 129
Configuring the Spanning Tree Algorithm 131
Configuring Global Settings for STA 133
Configuring Multiple Spanning Trees 137
Configuring Spanning Tree Bridge Priorities 139
Configuring
STP/RSTP/CIST Interfaces 140
Configuring MIST Interfaces 143
Multicast VLAN Registration 144
Configuring General MVR Settings 145
Configuring MVR Channel Settings 148
IGMP Snooping 149
Configuring Global and Port-Related Settings for IGMP Snooping 150
Configuring VLAN Settings for IGMP Snooping and Query 153

–
9
–
C ONTENTS


Configuring IGMP Filtering 155
MLD Snooping 156
Configuring Global and Port-Related Settings for MLD Snooping 156
Configuring VLAN Settings for MLD Snooping and Query 159
Configuring MLD Filtering 162
Link Layer Discovery Protocol 162
Configuring LLDP Timing and TLVs 163
Configuring LLDP-MED TLVs 166
Power over Ethernet 172
Configuring the MAC Address Table 175
IEEE 802.1Q VLANs 177
Assigning Ports to VLANs 178
Configuring VLAN Attributes for Port Members 179
Configuring Private VLANs 181
Using Port Isolation 182
Configuring MAC-based VLANs 183
Protocol VLANs 184
Configuring Protocol VLAN Groups 185
Mapping Protocol Groups to Ports 186
Configuring IP Subnet-based VLANs 187
Managing VoIP Traffic 189
Configuring VoIP Traffic 189
Configuring Telephony OUI 192
Quality of Service 193
Configuring Port Classification 193
Configuring Port Policiers 196
Configuring Egress Port Scheduler 197
Configuring Egress Port Shaper 199
Configuring Port Remarking Mode 200
Configuring Port DSCP Translation and Rewriting 203
Configuring DSCP-based QoS Ingress Classification 204
Configuring DSCP Translation 205
Configuring DSCP Classification 206
Configuring QoS Control Lists 207
Configuring Storm Control 211
Configuring Local Port Mirroring 212
Configuring Remote Port Mirroring 214

–
10
–
C ONTENTS


Configuring UPnP 218
Configuring sFlow 220
5 MONITORING THE SWITCH 223
Displaying Basic Information About the System 223
Displaying System Information 223
Displaying CPU Utilization 224
Displaying Log Messages 225
Displaying Log Details 227
Displaying Information About Ports 227
Displaying Port Status On the Front Panel 227
Displaying an Overview of Port Statistics 228
Displaying QoS Statistics 228
Displaying QCL Status 229
Displaying Detailed Port Statistics 230
Displaying Information About Security Settings 233
Displaying Access Management Statistics 233
Displaying Information About Switch Settings for Port Security 234
Displaying Information About Learned MAC Addresses 236
Displaying Port Status for Authentication Services 237
Displaying Port Statistics for 802.1X or Remote Authentication Service
238
Displaying ACL Status 242
Displaying Statistics for DHCP Snooping 244
Displaying DHCP Relay Statistics 245
Displaying MAC Address Bindings for ARP Packets 246
Displaying Entries in the IP Source Guard Table 247
Displaying Information on Authentication Servers 248
Displaying a List of Authentication Servers 248
Displaying Statistics for Configured Authentication Servers 249
Displaying Information on RMON 253
Displaying RMON Statistics 253
Displaying RMON Historical Samples 254
Displaying RMON Alarm Settings 255
Displaying RMON Event Settings 256
Displaying Information on LACP 257
Displaying an Overview of LACP Groups 257
Displaying LACP Port Status 257
Displaying LACP Port Statistics 258

–
11
–
C ONTENTS


Displaying Information on Loop Protection 259
Displaying Information on the Spanning Tree 260
Displaying Bridge Status for STA 260
Displaying Port Status for STA 263
Displaying Port Statistics for STA 264
Displaying MVR Information 265
Displaying MVR Statistics 265
Displaying MVR Group Information 266
Displaying MVR SFM Information 267
Showing IGMP Snooping Information 268
Showing IGMP Snooping Status 268
Showing IGMP Snooping Group Information 269
Showing IPv4 SFM Information 270
Showing MLD Snooping Information 271
Showing MLD Snooping Status 271
Showing MLD Snooping Group Information 272
Showing IPv6 SFM Information 273
Displaying LLDP Information 274
Displaying LLDP Neighbor Information 274
Displaying LLDP-MED Neighbor Information 275
Displaying LLDP Neighbor PoE Information 278
Displaying LLDP Neighbor EEE Information 279
Displaying LLDP Port Statistics 280
Displaying PoE Status 282
Displaying the MAC Address Table 283
Displaying Information About VLANs 284
VLAN Membership 284
VLAN Port Status 285
Displaying Information About MAC-based VLANs 286
Displaying Information About Flow Sampling 287
6 PERFORMING BASIC DIAGNOSTICS 291
Pinging an IPv4 or IPv6 Address 291
Running Cable Diagnostics 293

–
12
–
C ONTENTS


7 PERFORMING SYSTEM MAINTENANCE 295
Restarting the Switch 295
Restoring Factory Defaults 296
Upgrading Firmware 296
Activating the Alternate Image 297
Managing Configuration Files 298
Saving Configuration Settings 298
Restoring Configuration Settings 298



SECTION III APPENDICES 301 
ASOFTWARE SPECIFICATIONS
303 

Software Features 303 

Management Features 304 

Standards 305 

Management Information Bases 305 
B
T ROUBLESHOOTING  307 

Problems Accessing the Management Interface 307 

Using System Logs 308 
CLICENSE INFORMATION
309 

The GNU General Public License 309 
GLOSSARY
313 

I NDEX  321

–
13
–


FIGURES








Figure 1: Home Page 35
Figure 2: Front Panel Indicators 36
Figure 3: System Information Configuration 47
Figure 4: IP Configuration 49
Figure 5: IPv6 Configuration 51
Figure 6: NTP Configuration 52
Figure 7: Time Zone and Daylight Savings Time Configuration 55
Figure 8: Configuring Settings for Remote Logging of Error Messages 56
Figure 9: Configuring EEE Power Reduction 58
Figure 10: Port Configuration 60
Figure 11: Showing User Accounts 62
Figure 12: Configuring User Accounts 62
Figure 13: Configuring Privilege Levels 64
Figure 14: Authentication Server Operation 65
Figure 15: Authentication Method for Management Access 66
Figure 16: SSH Configuration 67
Figure 17: HTTPS Configuration 69
Figure 18: Access Management Configuration 70
Figure 19: SNMP System Configuration 75
Figure 20: SNMPv3 Community Configuration 76
Figure 21: SNMPv3 User Configuration 78
Figure 22: SNMPv3 Group Configuration 79
Figure 23: SNMPv3 View Configuration 80
Figure 24: SNMPv3 Access Configuration 81
Figure 25: RMON Statistics Configuration 82
Figure 26: RMON History Configuration 83
Figure 27: RMON Alarm Configuration 85
Figure 28: RMON Event Configuration 86
Figure 29: Port Limit Control Configuration 89
Figure 30: Using Port Security 89
Figure 31: Network Access Server Configuration 100

–
14
–
F IGURES




Figure 32: ACL Port Configuration 102
Figure 33: ACL Rate Limiter Configuration 103
Figure 34: Access Control List Configuration 111
Figure 35: DHCP Snooping Configuration 113
Figure 36: DHCP Relay Configuration 115
Figure 37: Configuring Global and Port-based Settings for IP Source Guard 117
Figure 38: Configuring Static Bindings for IP Source Guard 118
Figure 39: Configuring Global and Port Settings for ARP Inspection 120
Figure 40: Configuring Static Bindings for ARP Inspection 121
Figure 41: Authentication Configuration 123
Figure 42: Static Trunk Configuration 127
Figure 43: LACP Port Configuration 129
Figure 44: Loop Protection Configuration 131
Figure 45: STP Root Ports and Designated Ports 132
Figure 46: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 132
Figure 47: Common Internal Spanning Tree, Common Spanning Tree, Internal
Spanning Tree

133
Figure 48: STA Bridge Configuration 136
Figure 49: Adding a VLAN to an MST Instance 138
Figure 50: Configuring STA Bridge Priorities 139
Figure 51: STP/RSTP/CIST Port Configuration 143
Figure 52: MSTI Port Configuration 144
Figure 53: MVR Concept 145
Figure 54: Configuring General MVR Settings 148
Figure 55: Configuring MVR Channel Settings 149
Figure 56: Configuring Global and Port-related Settings for IGMP Snooping 153
Figure 57: Configuring VLAN Settings for IGMP Snooping and Query 155
Figure 58: IGMP Snooping Port Group Filtering Configuration 156
Figure 59: Configuring Global and Port-related Settings for MLD Snooping 159
Figure 60: Configuring VLAN Settings for MLD Snooping and Query 161
Figure 61: MLD Snooping Port Group Filtering Configuration 162
Figure 62: LLDP Configuration 165
Figure 63: LLDP-MED Configuration 171
Figure 64: Configuring PoE Settings 174
Figure 65: MAC Address Table Configuration 176
Figure 66: VLAN Membership Configuration 178
Figure 67: VLAN Port Configuration 181

–
15
–
F IGURES




Figure 68: Private VLAN Membership Configuration
182
Figure 69: Port Isolation Configuration 183
Figure 70: Configuring MAC-Based VLANs 184
Figure 71: Configuring Protocol VLANs 186
Figure 72: Assigning Ports to Protocol VLANs 187
Figure 73: Assigning Ports to an IP Subnet-based VLAN 189
Figure 74: Configuring Global and Port Settings for a Voice VLAN 191
Figure 75: Configuring an OUI Telephony List 192
Figure 76: Configuring Ingress Port QoS Classification 195
Figure 77: Configuring Ingress Port Tag Classification 195
Figure 78: Configuring Ingress Port Policing 196
Figure 79: Displaying Egress Port Schedulers 198
Figure 80: Configuring Egress Port Schedulers and Shapers 199
Figure 81: Displaying Egress Port Shapers 200
Figure 82: Displaying Port Tag Remarking Mode 201
Figure 83: Configuring Port Tag Remarking Mode 202
Figure 84: Configuring Port DSCP Translation and Rewriting 204
Figure 85: Configuring DSCP-based QoS Ingress Classification 205
Figure 86: Configuring DSCP Translation and Re-mapping 206
Figure 87: Mapping DSCP to CoS/DPL Values 207
Figure 88: QoS Control List Configuration 211
Figure 89: Storm Control Configuration 212
Figure 90: Mirror Configuration 214
Figure 91: Configuring Remote Port Mirroring 214
Figure 92: Mirror Configuration (Source) 217
Figure 93: Mirror Configuration (Intermediate) 217
Figure 94: Mirror Configuration (Destination) 218
Figure 95: UPnP Configuration 219
Figure 96: sFlow Configuration 222
Figure 97: System Information 224
Figure 98: CPU Load 225
Figure 99: System Log Information 226
Figure 100: Detailed System Log Information 227
Figure 101: Port State Overview 227
Figure 102: Port Statistics Overview 228
Figure 103: Queueing Counters 229

–
16
–
F IGURES




Figure 104: QoS Control List Status
230
Figure 105: Detailed Port Statistics 232
Figure 106: Access Management Statistics 233
Figure 107: Port Security Switch Status 235
Figure 108: Port Security Port Status 236
Figure 109: Network Access Server Switch Status 238
Figure 110: NAS Statistics for Specified Port 242
Figure 111: ACL Status 243
Figure 112: DHCP Snooping Statistics 245
Figure 113: DHCP Relay Statistics 246
Figure 114: Dynamic ARP Inspection Table 247
Figure 115: Dynamic IP Source Guard Table 247
Figure 116: RADIUS Overview 248
Figure 117: RADIUS Details 252
Figure 118: RMON Statistics 254
Figure 119: RMON History Overview 255
Figure 120: RMON Alarm Overview 256
Figure 121: RMON Event Overview 256
Figure 122: LACP System Status 257
Figure 123: LACP Port Status 258
Figure 124: LACP Port Statistics 259
Figure 125: Loop Protection Status 260
Figure 126: Spanning Tree Bridge Status 262
Figure 127: Spanning Tree Detailed Bridge Status 263
Figure 128: Spanning Tree Port Status 264
Figure 129: Spanning Tree Port Statistics 265
Figure 130: MVR Statistics 266
Figure 131: MVR Group Information 267
Figure 132: MVR SFM Information 268
Figure 133: IGMP Snooping Status 269
Figure 134: IGMP Snooping Group Information 270
Figure 135: IPv4 SFM Information 271
Figure 136: MLD Snooping Status 272
Figure 137: MLD Snooping Group Information 273
Figure 138: IPv6 SFM Information 274
Figure 139: LLDP Neighbor Information 275

–
17
–
F IGURES




Figure 140: LLDP-MED Neighbor Information
278
Figure 141: LLDP Neighbor PoE Information 279
Figure 142: LLDP Neighbor EEE Information 280
Figure 143: LLDP Port Statistics 281
Figure 144: Power over Ethernet Status 282
Figure 145: MAC Address Table 283
Figure 146: Showing VLAN Members 285
Figure 147: Showing VLAN Port Status 286
Figure 148: Showing MAC-based VLAN Membership Status 287
Figure 149: Showing sFlow Statistics 289
Figure 150: ICMP Ping 292
Figure 151: VeriPHY Cable Diagnostics 293
Figure 152: Restart Device 295
Figure 153: Factory Defaults 296
Figure 154: Software Upload 297
Figure 155: Software Image Selection 297
Figure 156: Configuration Save 298
Figure 157: Configuration Upload 299

–
18
–
F IGURES




–
19
–


TABLES








Table 1: Key Features
23
Table 2: System Defaults
28
Table 3: Web Page Configuration Buttons
36
Table 4: Main Menu
37
Table 5: HTTPS System Support
68
Table 6: SNMP Security Models and Levels
71
Table 7: Dynamic QoS Profiles
93
Table 8: QCE Modification Buttons 105
Table 9: Recommended STA Path Cost Range 140
Table 10: Recommended STA Path Costs 141
Table 11: Default STA Path Costs 141
Table 12: QCE Modification Buttons 208
Table 13: System Capabilities 275
Table 14: Troubleshooting Chart 307

–
20
–
T ABLES


