FoxGate S6424-S2C2 series User manual

Content
2
Content
1. LOGGING IN ETHERNET SWITCH...........................................................16
1.1 Set up Configuration Environment via Console Port ................................................... 16
1.2 Set up Configuration Environment through Telnet....................................................... 18
1.2.1 Connect PC to Ethernet Switch through Telnet........................................................... 18
1.2.2 Telnet Ethernet Switch through Ethernet Switch ......................................................... 19
2. COMMAND LINE INTERFACE..................................................................21
2.1 Introduction of Command Line Interface....................................................................... 21
2.2 Command Line Configuration Mode .............................................................................. 21
2.3 Feature and Functions of Command Line ..................................................................... 24
2.3.1 Help of Command Line................................................................................................ 24
2.3.2 Displaying Characteristics of Command Line.............................................................. 25
2.4 Show History Command of Command Line .................................................................. 25
2.5 Common Command Line Error Messages..................................................................... 26
2.6 Symbols in Command...................................................................................................... 26
2.7 Parameter in Command................................................................................................... 27
3. MANAGE USERS ......................................................................................28
3.1 System Default User ........................................................................................................ 28
3.2 User’s Authentication ...................................................................................................... 29
3.3 Local Authentication Configuration ............................................................................... 29
3.3.1 Add Users.................................................................................................................... 29
3.3.2 Change Password ....................................................................................................... 30
3.3.3 Modify User's Privilege Level ...................................................................................... 30
3.3.4 Delete User.................................................................................................................. 31
3.3.5 Show Users ................................................................................................................. 31
3.4 Remote Authentication Configuration ........................................................................... 32
3.4.1 Configure RADIUS to Be Remote Authentication Server............................................ 32
3.4.2 Configure TACACS+ remote authentication................................................................ 32

Content
3
4. ETHERNET PORT CONFIGURATION ......................................................34
4.1 Ethernet Port Overview.................................................................................................... 34
4.1.1 Link Type of Ethernet Ports ......................................................................................... 34
4.1.2 Configuring Default VLAN ID for Ethernet Port ........................................................... 34
4.1.3 Handling packets......................................................................................................... 34
4.2 Configure Ethernet Port................................................................................................... 35
4.2.1 Basic Ethernet Port Configuration............................................................................... 35
4.3 Combo Port....................................................................................................................... 39
4.4 Enable/Disable Ingress Filtering..................................................................................... 39
4.5 Acceptable-Frame Type for Ethernet Port...................................................................... 40
4.6 Enable/Disable Flow Control for Ethernet Port............................................................. 41
4.7 Display and Debug Ethernet Port ................................................................................... 41
5. ETHERNET PORT MIRRORING CONFIGURATION.................................46
5.1 Configure Ethernet Port Mirroring.................................................................................. 46
5.1.1 Overview...................................................................................................................... 46
5.1.2 Mirroring....................................................................................................................... 46
5.1.3 Configuring port mirroring............................................................................................ 47
5.1.4 Mirroring Configuration................................................................................................ 47
6. CONFIGURING PORT UTILIZATION ALARM...........................................50
6.1 Brief Introduction to Device Utilization Alarm............................................................... 50
6.2 Configuring Device Utilization Alarm............................................................................. 50
6.2.1 Configuring Port Utilization Alarm................................................................................ 50
6.2.2 Configuring CPU Utilization Alarm............................................................................... 50
6.2.3 Displaying and Debugging Device Utilization Alarm.................................................... 51
7. LINK AGGREGATION CONFIGURATION.................................................52
7.1 Overview............................................................................................................................ 52
7.1.1 Introduction to Link Aggregation.................................................................................. 52
7.1.2 Introduction to LACP ................................................................................................... 53
7.1.3 Operation Key (O-Key)................................................................................................ 53
7.1.4 Static Aggregation Group............................................................................................. 53
7.1.5 Dynamic LACPAggregation Group............................................................................. 54

Content
4
7.2 Redundancy of Interconnected Device.......................................................................... 56
7.3 Load-balancing Policy ..................................................................................................... 56
7.4 Link Aggregation Configuration ..................................................................................... 56
7.4.1 Configuring a Static Aggregation Group...................................................................... 56
7.5 Configuring a Dynamic LACP Aggregation Group ....................................................... 57
7.6 Displaying and Maintaining Link Aggregation Configuration ..................................... 58
7.7 LACP Configuration Example ......................................................................................... 59
8. PORT ISOLATION CONFIGURATION.......................................................64
8.1 Introduction to Port Isolation.......................................................................................... 64
8.2 Port Isolation Configuration............................................................................................ 64
8.2.1 Port Isolation Configuration ......................................................................................... 64
8.2.2 Port-isolation Monitor and Maintenance...................................................................... 65
8.3 Port-isolation Configuration Example............................................................................ 65
8.3.1 Port-isolation Configuration Example.......................................................................... 65
9. VLAN CONFIGURATION...........................................................................66
9.1 VLAN Overview................................................................................................................. 66
9.2 VLAN Principles................................................................................................................ 67
9.3 802.1Q VLAN..................................................................................................................... 68
9.3.1 VLAN Link Type of Ethernet Ports............................................................................... 68
9.3.2 Default VLAN............................................................................................................... 68
9.3.3 Handling Packets......................................................................................................... 68
10. VLAN CONFIGURATION.........................................................................69
10.1 Default VLAN Configuration.......................................................................................... 69
10.2 Create and Modify VLAN ............................................................................................... 69
10.3 Delete Port Members from VLAN.................................................................................. 70
10.4 Delete VLAN.................................................................................................................... 70
10.5 VLAN Configuration Example ....................................................................................... 70

Content
5
11. GVRP CONFIGURATION.........................................................................72
11.1 Brief Introduction to GVRP............................................................................................ 72
11.2 Configuring GVRP .......................................................................................................... 73
11.2.1 Brief Introduction to GVRP Configuration.................................................................. 73
11.2.2 Startup GVRP ............................................................................................................ 73
11.3 Configuring VLAN Forwarded by GVRP ...................................................................... 73
11.3.1 Displaying and Debugging......................................................................................... 74
11.3.2 GVRP Configuration Examples ................................................................................. 74
12. ARP CONFIGURATION ...........................................................................79
12.1 ARP Overview ................................................................................................................. 79
12.1.1 ARP Function............................................................................................................. 79
12.1.2 ARP Message Format ............................................................................................... 80
12.2 Configuring ARP Attack Spoofing ................................................................................ 81
12.2.1 Brief Introduction to ARP Spoofing ............................................................................ 81
12.2.2 ARP Anti-Spoofing Protection.................................................................................... 81
12.2.3 Configuring Anti-Spoofing.......................................................................................... 82
12.2.4 Configuring ARP Packet Source MAC Address Consistency Check ........................ 83
12.2.5 Configuring Default of Anti-Spoofing ......................................................................... 83
12.2.6 Displaying and Maintain Anti-Spoofing...................................................................... 83
12.3 Configuring against ARP Flood .................................................................................... 83
12.3.1 ARP Flood.................................................................................................................. 83
12.3.2 Configuring against ARP Flood ................................................................................. 84
12.3.3 Configuring against ARP Flood ................................................................................. 84
12.3.4 Displaying and Maintain against ARP Flood.............................................................. 85
13. IGMP SNOOPING ....................................................................................86
13.1 Brief Introduction to IGMP Snooping........................................................................... 86
13.2 IGMP Snooping Configuration...................................................................................... 86
13.2.1 Brief Configuration of IGMP Snooping ...................................................................... 86
13.2.2 Enable IGMP Snooping............................................................................................. 87
13.2.3 Configuring IGMP Snooping Timer............................................................................ 87
13.2.4 Configuring Port Fast-Leave...................................................................................... 87
13.2.5 Configuring Number of Multicast Group Allowed Learning ....................................... 88
13.2.6 Configuring IGMP Snooping Querier......................................................................... 88
13.2.7 Configuring IGMP Snooping Multicast Learning Strategy......................................... 89
13.2.8 Configuring IGMP Snooping Router-Port.................................................................. 89
13.2.9 Configuring IGMP Snooping Port Multicast VLAN .................................................... 90
13.2.10 Configuring Host Port Record MAC Functions........................................................ 90

Content
6
13.2.11 Configuring Port of Dropped Query Packets or Not ................................................ 91
13.2.12 Configuring Port of Discarded Packets Report or Not............................................. 91
13.2.13 Configuring Multicast Preview................................................................................. 91
13.2.14 Configuring Profile of Black and White List ............................................................. 92
13.2.15 Displaying and Maintenance of IGMP Snooping..................................................... 92
13.3 IGMP Snooping Configuration Examples .................................................................... 93
14. GMRP CONFIGURATION........................................................................98
14.1 Brief Introduction to GMRP........................................................................................... 98
14.2 GMRP Configuration ...................................................................................................... 98
14.2.1 Enabling GMRP......................................................................................................... 98
14.2.2 Add Requisite Static Route Forwarded by GMRP..................................................... 98
14.2.3 Displaying and Maintaining GMRP............................................................................ 99
14.2.4 GMRP Configuring Examples.................................................................................... 99
15. DHCP CONFIGURATION.......................................................................105
15.1 DHCP Overview ............................................................................................................ 105
15.2 DHCP IP Address Assignment .................................................................................... 105
15.2.1 IPAddress Assignment Policy................................................................................. 105
15.2.2 Obtaining IP Addresses Dynamically....................................................................... 106
15.2.3 DHCP Packet Format.............................................................................................. 107
15.3 DHCP Relay................................................................................................................... 108
15.3.1 Usage of DHCP Relay............................................................................................. 108
15.3.2 DHCP Relay Fundamentals .................................................................................... 109
15.4 Configure DHCP Relay..................................................................................................110
16. DHCP SNOOPING .................................................................................111
16.1 Introduction to DHCP Snooping ..................................................................................111
16.2 DHCP Snooping Configuration....................................................................................111
16.3 DHCP-Snooping Security Configuration ....................................................................112
16.3.1 Configure max clients number..................................................................................112
16.3.2 Configure IP-Source-Guard......................................................................................112
16.4 Displaying and Debugging DHCP-Snooping..............................................................113
16.5 DHCP-Snooping Configuration Example....................................................................113

Content
7
17. DHCP OPTION 82..................................................................................115
17.1 Introduction to option 82 supporting ..........................................................................115
17.2 DHCP Option82 Configuration.....................................................................................115
17.2.1 Enable DHCP Option82............................................................................................115
17.2.2 Displaying and Debugging DHCP Option82.............................................................116
18. ACL CONFIGURING..............................................................................117
18.1 Brief Introduction to ACL..............................................................................................117
18.1.1 Configuring Match Order ..........................................................................................117
18.1.2 Switch Support ACL..................................................................................................118
18.2 Configuring Time Range...............................................................................................118
18.2.1 Configuration Procedure...........................................................................................119
18.2.2 Configuration Examples .......................................................................................... 120
18.3 Configuring Basic ACL ................................................................................................ 120
18.3.1 Configuration Procedure.......................................................................................... 121
18.3.2 Configuration Examples .......................................................................................... 121
18.4 Define Extended ACL................................................................................................... 121
18.4.1 Configuration Procedure.......................................................................................... 122
18.4.2 Configuration Procedure.......................................................................................... 123
18.5 Define Layer 2 ACL....................................................................................................... 124
18.5.1 Configuring Layer 2 ACL ......................................................................................... 124
18.5.2 Configuration Examples .......................................................................................... 125
18.6 Activate ACL ................................................................................................................. 125
18.6.1 Configuration Examples .......................................................................................... 125
18.6.2 Activate ACL Successfully .Active ACL Binding....................................................... 126
18.7 Displaying and Debugging ACL.................................................................................. 126
19. STORM-CONTROL CONFIGURATION.................................................127
19.1 Storm-Control Overview .............................................................................................. 127
19.2 Storm-Control Configuration ...................................................................................... 127
19.2.1 Configure Storm-Control.......................................................................................... 127
19.2.2 Storm-Control Monitor and Maintenance................................................................. 127

Content
8
20. QOS CONFIGURATION.........................................................................129
20.1 Brief Introduction to QoS ............................................................................................ 129
20.1.1 Traffic....................................................................................................................... 129
20.1.2 Traffic Classification................................................................................................. 129
20.1.3 Priority...................................................................................................................... 130
20.1.4 Access Control List.................................................................................................. 132
20.1.5 Packet Filtration....................................................................................................... 132
20.1.6 Flow Monitor............................................................................................................ 132
20.1.7 Interface Speed Limitation....................................................................................... 132
20.1.8 Redirection............................................................................................................... 133
20.1.9 Priority Mark............................................................................................................. 133
20.1.10 Choose Interface Outputting Queue for Packet .................................................... 133
20.1.11 Queue scheduler.................................................................................................... 133
20.1.12 Cos-map Relationship of Hardware Priority Queue and Priority of IEEE802.1p
Protocol.................................................................................................................................... 134
20.1.13 Slow Mirror............................................................................................................. 134
20.1.14 Statistics Based on Flow........................................................................................ 134
20.1.15 Copy Packet to CPU.............................................................................................. 134
20.2 QOS Configuration....................................................................................................... 134
20.2.1 Configuring Flow Monitor......................................................................................... 134
20.2.2 Configure Two Rate Three Color Marker................................................................. 135
20.2.3 Configuring Interface Line Rate............................................................................... 135
20.2.4 Configuring Packet Redirection............................................................................... 136
20.2.5 Configuring Traffic Copy to CPU ............................................................................. 136
20.2.6 Configuring Traffic Priority....................................................................................... 136
20.2.7 Configuring Queue-Scheduler................................................................................. 136
20.2.8 Configuring Cos-map Relationship of Hardware Priority Queue and Priority of
IEEE802.1p Protocol ............................................................................................................... 137
20.2.9 Configuring Mapping Relationship between DSCP and 8 Priority in IEEE 802.1p . 138
20.2.10 Configuring Flow Statistic ...................................................................................... 138
20.2.11 Configuring Flow Mirror ......................................................................................... 139
20.2.12 Displaying and Maintain QoS ................................................................................ 139
21. STP CONFIGURATION..........................................................................140
21.1 STP Overview................................................................................................................ 140
21.1.1 Function of STP....................................................................................................... 140
21.1.2 Protocol Packets of STP.......................................................................................... 140
21.1.3 Basic concepts in STP............................................................................................. 140
21.1.4 Spanning-Tree Interface States............................................................................... 141
21.2 How STP Works............................................................................................................ 142
21.3 Implement RSTP on Ethernet Switch ......................................................................... 148
21.4 Configure RSTP............................................................................................................ 149

Content
9
21.4.1 RSTP Configuration Task List.................................................................................. 149
21.4.2 Enable RSTP........................................................................................................... 150
21.4.3 Configure STP Bridge Priority ................................................................................. 150
21.4.4 Configure Time Parameter ...................................................................................... 150
21.4.5 Configure STP Path Cost ........................................................................................ 151
21.4.6 Configure STP Port Priority ..................................................................................... 151
21.4.7 Configure STP Mcheck............................................................................................ 152
21.4.8 Configure STP Point-to-Point Mode........................................................................ 152
21.4.9 Configure STP Portfast............................................................................................ 152
21.4.10 Configure STP Transit Limit................................................................................... 153
21.4.11 RSTP Monitor and Maintenance............................................................................ 153
21.5 STP Configuration Example........................................................................................ 153
22. CONFIGURING 802.1X..........................................................................160
22.1 Brief Introduction to 802.1X Configuration................................................................ 160
22.1.1 Architecture of 802.1X ............................................................................................. 160
22.1.2 Rule of 802.1x.......................................................................................................... 162
22.2 Configuring AAA .......................................................................................................... 163
22.2.1 Configuring RADIUS Server.................................................................................... 163
22.2.2 Configuring Local User............................................................................................ 163
22.2.3 Configuring Domain................................................................................................. 164
22.2.4 Configuring RADIUS Features ................................................................................ 164
22.3 Configuring 802.1X....................................................................................................... 166
22.3.1 Configuring EAP...................................................................................................... 166
22.3.2 Enable 802.1x.......................................................................................................... 166
22.3.3 Configuring 802.1x Parameters for Port.................................................................. 167
22.3.4 Configuring Re-authentication................................................................................. 167
22.3.5 Configuring Watch Feature...................................................................................... 167
22.3.6 Configuring User Features ...................................................................................... 168
23. CONFIGURING MSTP ...........................................................................169
23.1 Brief Introduction to MSTP.......................................................................................... 169
23.2 BPDU ............................................................................................................................. 169
23.2.1 Basic Concepts in MSTP......................................................................................... 170
23.2.2 Roles of Ports.......................................................................................................... 172
23.3 Algorithm Implementation........................................................................................... 175
23.3.1 MSTP Protocol......................................................................................................... 175
23.3.2 Determining CIST Priority Vectors........................................................................... 177
23.3.3 Determining MSTI Priority Vectors .......................................................................... 177
23.3.4 Determining MSTP .................................................................................................. 178

Content
10
23.3.5 Active Topology........................................................................................................ 182
23.3.6 A topology Change .................................................................................................. 182
23.3.7 MST and SST Compatibility..................................................................................... 183
23.4 Configuring MSTP........................................................................................................ 183
23.4.1 Configuring MSTP Task........................................................................................... 183
23.4.2 Enabling MSTP........................................................................................................ 184
23.4.3 Configuring MSTP Timer Parameter Values............................................................ 184
23.4.4 Configuring MSTP Identifier .................................................................................... 185
23.4.5 Configuring MSTP Bridge Priority............................................................................ 186
23.4.6 Configuring Port Boundary Port Status ................................................................... 186
23.4.7 Configuring Port Link Type ...................................................................................... 187
23.4.8 Configuring Path Cost ............................................................................................. 187
23.4.9 Configuring Port Priority .......................................................................................... 188
23.4.10 Configuring Root Port Protection........................................................................... 188
23.4.11 Configuring Digest Snooping Port ......................................................................... 189
23.4.12 Configuring Port mCheck Function ....................................................................... 189
23.4.13 Configuring MSTP Instance Is Enabled................................................................. 190
23.4.14 Displaying and Maintain MSTP ............................................................................. 190
24. CONFIGURING SNTP............................................................................191
24.1 Brief introduction of SNTP .......................................................................................... 191
24.1.1 SNTP Operation Mechanism................................................................................... 191
24.2 Configuring SNTP client.............................................................................................. 191
24.2.1 List of SNTP Client Configuration............................................................................ 191
24.2.2 Enabling SNTP Client.............................................................................................. 192
24.2.3 Modifying SNTP Client Operating Mode.................................................................. 192
24.2.4 Configuring SNTP Sever Address ........................................................................... 192
24.2.5 Modifying Broadcast Transfer Delay ....................................................................... 193
24.2.6 Configuring Multicast TTL........................................................................................ 193
24.2.7 Configuring Interval Polling...................................................................................... 193
24.2.8 Configuring Overtime Retransmist .......................................................................... 194
24.2.9 Configuring Valid Servers........................................................................................ 194
24.2.10 Configuring MD5 Authentication............................................................................ 194
24.2.11 Displaying and Maintain SNTP Client.................................................................... 195
25. SSH TERMINAL SERVICES..................................................................196
25.1 Introduction to SSH...................................................................................................... 196
25.2 SSH Server Configuration ........................................................................................... 197
25.3 Log in Switch from SSH Client.................................................................................... 197
25.4 SSH Server Configuration Example ........................................................................... 198