Korenix JetNet 5228G Series User manual

Korenix JetNet 5228G Series
Rackmount Managed Ethernet Switch
User Manual
Version 1.1, Apr., 2009
www.korenix.com

Korenix JetNet 5228G Series
Rackmount Managed Ethernet Switch
User’s Manual
Copyright Notice
Copyright ¤2006-2009 Korenix Technology Co., Ltd.
All rights reserved.
Reproduction in any form or by any means without permission is prohibited.

www.edge-core.com
2
24FE+4G
Layer 2/4
Ethernet Switch
Management Guide V1.1

Management Guide
24FE+4G Fast Ethernet Switch
Standalone Layer 2 Switch with
24 100BASE-TX (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)

i
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Managing System Files 2-8
Saving Configuration Settings 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Confisfguration 3-12
Displaying System Information 3-12
Displaying Switch Hardware/Software Versions 3-14
Displaying Bridge Extension Capabilities 3-16
Setting the Switch’s IP Address 3-17
Manual Configuration 3-18
Using DHCP/BOOTP 3-19
Enabling Jumbo Frames 3-20
Managing Firmware 3-21
Downloading System Software from a Server 3-22

Contents
ii
Saving or Restoring Configuration Settings 3-24
Downloading Configuration Settings from a Server 3-25
Console Port Settings 3-26
Telnet Settings 3-28
Configuring Event Logging 3-30
System Log Configuration 3-30
Remote Log Configuration 3-31
Displaying Log Messages 3-33
Sending Simple Mail Transfer Protocol Alerts 3-33
Resetting the System 3-35
Setting the System Clock 3-36
Configuring SNTP 3-36
Setting the Time Zone 3-37
Setting the Time Manually 3-38
Simple Network Management Protocol 3-39
Enabling the SNMP Agent 3-40
Setting Community Access Strings 3-41
Specifying Trap Managers and Trap Types 3-42
Configuring SNMPv3 Management Access 3-45
Setting the Local Engine ID 3-45
Specifying a Remote Engine ID 3-46
Configuring SNMPv3 Users 3-47
Configuring Remote SNMPv3 Users 3-49
Configuring SNMPv3 Groups 3-51
Setting SNMPv3 Views 3-54
Authentication 3-56
Configuring User Accounts 3-56
Configuring Local/Remote Logon Authentication 3-58
AAA Authorization and Accounting 3-62
AAA RADIUS Group Settings 3-63
AAA TACACS+ Group Settings 3-64
AAA Accounting 3-64
AAA Accounting Update 3-66
AAA Accounting 802.1X Port Settings 3-66
AAA Accounting Exec Command Privileges 3-67
AAA Accounting Exec Settings 3-69
AAA Accounting Summary 3-69
Authorization Settings 3-71
Authorization EXEC Settings 3-72
Authorization Summary 3-72
Configuring HTTPS 3-73
Replacing the Default Secure-site Certificate 3-74
Configuring Secure Shell 3-75
Generating the Host Key Pair 3-77
Configuring the SSH Server 3-79

Contents
iii
Configuring 802.1X Port Authentication 3-80
Displaying 802.1X Global Settings 3-81
Configuring 802.1X Global Settings 3-82
Configuring Port Settings for 802.1X 3-83
Displaying 802.1X Statistics 3-86
Filtering IP Addresses for Management Access 3-88
Client Security 3-90
Configuring Port Security 3-91
Web Authentication 3-93
Configuring Web Authentication 3-93
Configuring Web Authentication for Ports 3-94
Displaying Web Authentication Port Information 3-95
Re-authenticating Web Authenticated Ports 3-96
Network Access (MAC Address Authentication) 3-97
Configuring the MAC Authentication Reauthentication Time 3-98
Configuring MAC Authentication for Ports 3-99
Displaying Secure MAC Address Information 3-101
Access Control Lists 3-102
Setting the ACL Name and Type 3-103
Configuring a Standard IP ACL 3-104
Configuring an Extended IP ACL 3-105
Configuring a MAC ACL 3-107
Binding a Port to an Access Control List 3-108
DHCP Snooping 3-109
Configuring DHCP Snooping 3-111
Configuring VLANs for DHCP Snooping 3-111
Configuring the DHCP Snooping Information Option 3-112
Configuring Ports for DHCP Snooping 3-114
IP Source Guard 3-115
Configuring Ports for IP Source Guard 3-115
Configuring Static Binding for IP Source Guard 3-117
Displaying Information for Dynamic IP Source Guard Bindings 3-119
Port Configuration 3-120
Displaying Connection Status 3-120
Configuring Interface Connections 3-122
Creating Trunk Groups 3-124
Statically Configuring a Trunk 3-125
Enabling LACP on Selected Ports 3-126
Configuring LACP Parameters 3-128
Displaying LACP Port Counters 3-130
Displaying LACP Settings and Status for the Local Side 3-132
Displaying LACP Settings and Status for the Remote Side 3-134
Setting Broadcast Storm Thresholds 3-135
Configuring Port Mirroring 3-137
Configuring Rate Limits 3-138

Contents
iv
Rate Limit Configuration 3-138
Showing Port Statistics 3-139
Address Table Settings 3-143
Setting Static Addresses 3-143
Displaying the Address Table 3-144
Changing the Aging Time 3-146
Spanning Tree Algorithm Configuration 3-147
Displaying Global Settings 3-149
Configuring Global Settings 3-152
Displaying Interface Settings 3-156
Configuring Interface Settings 3-159
Configuring Multiple Spanning Trees 3-162
Displaying Interface Settings for MSTP 3-165
Configuring Interface Settings for MSTP 3-167
VLAN Configuration 3-168
IEEE 802.1Q VLANs 3-168
Enabling GVRP (Global Setting) 3-171
Displaying Basic VLAN Information 3-172
Displaying Current VLANs 3-173
Creating VLANs 3-174
Adding Static Members to VLANs (VLAN Index) 3-176
Adding Static Members to VLANs (Port Index) 3-178
Configuring VLAN Behavior for Interfaces 3-179
IEEE 802.1Q Tunneling 3-181
Enabling QinQ Tunneling on the Switch 3-185
Adding an Interface to a QinQ Tunnel 3-185
Private VLANs 3-187
Displaying Current Private VLANs 3-188
Configuring Private VLANs 3-189
Associating VLANs 3-190
Displaying Private VLAN Interface Information 3-190
Configuring Private VLAN Interfaces 3-192
Protocol VLANs 3-193
Configuring Protocol VLAN Groups 3-194
Configuring Protocol VLAN Interfaces 3-196
Voice VLANs 3-197
Configuring VoIP Traffic 3-197
Configuring VoIP Traffic Ports 3-198
Configuring Telephony OUI 3-200
Link Layer Discovery Protocol 3-201
Setting LLDP Timing Attributes 3-202
Configuring LLDP Interface Attributes 3-204
Displaying LLDP Local Device Information 3-207
Displaying LLDP Remote Port Information 3-209
Displaying LLDP Remote Information Details 3-210

Contents
v
Displaying LLDP Device Statistics 3-212
Displaying Detailed LLDP Device Statistics 3-214
Class of Service Configuration 3-215
Layer 2 Queue Settings 3-215
Setting the Default Priority for Interfaces 3-215
Mapping CoS Values to Egress Queues 3-217
Selecting the Queue Mode 3-219
Setting the Service Weight for Traffic Classes 3-220
Layer 3/4 Priority Settings 3-221
Mapping Layer 3/4 Priorities to CoS Values 3-221
Mapping DSCP Priority 3-221
Mapping IP Port Priority 3-223
Mapping IP Precedence Priority 3-225
Mapping IP TOS Priority 3-227
Mapping CoS Values to ACLs 3-229
Quality of Service 3-230
Configuring Quality of Service Parameters 3-230
Configuring a Class Map 3-231
Creating QoS Policies 3-233
Attaching a Policy Map to Ingress Queues 3-236
Multicast Filtering 3-237
Layer 2 IGMP (Snooping and Query) 3-238
Configuring IGMP Snooping and Query Parameters 3-239
Enabling IGMP Immediate Leave 3-241
Displaying Interfaces Attached to a Multicast Router 3-242
Specifying Static Interfaces for a Multicast Router 3-243
Displaying Port Members of Multicast Services 3-244
Assigning Ports to Multicast Services 3-245
IGMP Filtering and Throttling 3-246
Enabling IGMP Filtering and Throttling 3-247
Configuring IGMP Filter Profiles 3-248
Configuring IGMP Filtering and Throttling for Interfaces 3-249
Multicast VLAN Registration 3-251
Configuring Global MVR Settings 3-252
Displaying MVR Interface Status 3-254
Displaying Port Members of Multicast Groups 3-255
Configuring MVR Interface Status 3-256
Assigning Static Multicast Groups to Interfaces 3-257
Switch Clustering 3-259
Configuring General Settings for Clusters 3-260
Configuring Cluster Members 3-261
Displaying Information on Cluster Members 3-262
Displaying Information on Cluster Candidates 3-263

Contents
vi
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-2
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-8
Command Groups 4-9
General Commands 4-10
enable 4-10
disable 4-11
configure 4-12
show history 4-12
reload 4-13
prompt 4-13
end 4-14
exit 4-14
quit 4-14
System Management Commands 4-15
Device Designation Commands 4-16
hostname 4-16
Banner Information Commands 4-16
banner configure 4-17
banner configure company 4-18
banner configure dc-power-info 4-19
banner configure department 4-19
banner configure equipment-info 4-20
banner configure equipment-location 4-21
banner configure ip-lan 4-21
banner configure lp-number 4-22
banner configure manager-info 4-23
banner configure mux 4-23
banner configure note 4-24