Lancom ES-2126+ User manual

110533/0710
LANCOM Systems GmbH
Adenauerstr. 20/B2
52146 Würselen
Germany
E-Mail: [email protected]
Internet www.lancom.eu
LANCOM ES-2126+
LANCOM ES-2126P+
...connecting your business
110533_LC-ES2126-MANUAL_cover.in1 1110533_LC-ES2126-MANUAL_cover.in1 1 05.07.2010 12:47:3605.07.2010 12:47:36

LANCOM ES-2126+
LANCOM ES-2126P+

© 2010 LANCOM Systems GmbH, Wuerselen (Germany). All rights reserved.
While the information in this manual has been compiled with great care, it may not be deemed an assurance of product
characteristics. LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery.
The reproduction and distribution of the documentation and software supplied with this product and the use of its contents
is subject to written authorization from LANCOM Systems. We reserve the right to make any alterations that arise as the
result of technical development.
Windows®, Windows Vista™, Windows NT® and Microsoft® are registered trademarks of Microsoft, Corp.
The LANCOM Systems logo, LCOS and the name LANCOM are registered trademarks of LANCOM Systems GmbH. All other
names or descriptions used may be trademarks or registered trademarks of their owners.
Subject to change without notice. No liability for technical errors or omissions.
Products from LANCOM Systems include software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http:/
/www.openssl.org/).
Products from LANCOM Systems include cryptographic software written by Eric Young ([email protected]).
Products from LANCOM Systems include software developed by the NetBSD Foundation, Inc. and its contributors.
Products from LANCOM Systems contain the LZMA SDK developed by Igor Pavlov.
Products from LANCOM Systems contain open source software components which are available as source text and which
are subject to special licenses and the copyright of their authors. In particular the firmware components are subject to the
terms of the GNU General Public License, version 2 (GPL). The license agreement with the text of the GPL is available on
the LANCOM CD in the relevant product's directory. On request, you can obtain the source texts and licensing details elec-
tronically from the LANCOM Systems GmbH FTP server.
LANCOM Systems GmbH
Adenauerstr. 20/B2
52146 Wuerselen
Deutschland
www.lancom-systems.com
Wuerselen, August 2010

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Preface
3
EN
Preface
Thank you for your confidence in us!
The LANCOM switch models LANCOM ES-2126+ and LANCOM ES-2126P+
are ideally suited to small, medium-sized and performance networks in busi-
ness environments.
The LANCOM ES-2126+ switch features 24 Fast-Ethernet and two combo
ports (TP/SFP), it integrates perfectly into LANCOM's Advanced Routing und
Forwarding and it supports up to 256 active VLANs. It uses bandwidth control
to prioritize the data traffic according to predefined criteria (e.g. voice data or
certain ports).
Furthermore the LANCOM ES-2126P+ switch supports Power-over-Ethernet
for connected network devices. The overall power output of 185 Watts from
the PoE supply can be flexibly divided between the ports.
The LANCOM switch can be managed with the clearly structured Webconfig
and is supported by the LANCOM Management Tools (LANconfig and
LANmonitor).
Model variants
This documentation is intended for LANCOM switch users. The following
models are available:
쮿The LANCOM ES-2126+ without PoE support.
쮿The LANCOM ES-2126P+ with PoE support.
Model
restrictions
Passages applying only to certain models are identified either in the text itself
or by a comment in the margin.
Otherwise the documentation refers to all models collectively as the LANCOM
switch series.
This documentation was created by …
... several members of our staff from a variety of departments in order to
ensure you the best possible support when using your LANCOM product.
Should you find any errors, or if you would like to suggest improvements, ple-
ase do not hesitate to send an e-mail directly to:
[email protected]
Our online services www.lancom-systems.com are available to you
around the clock if you have any questions on the content in this

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Preface
4
EN
manual, or if you require any further support. The area 'Support' will
help you with many answers to frequently asked questions (FAQs).
Furthermore, the knowledgebase offers you a large reserve of infor-
mation. The latest drivers, firmware, utilities and documentation are
constantly available for download.
In addition, LANCOM Support is available. For telephone numbers
and contact addresses for LANCOM Support, please refer to the enc-
losed leaflet or the LANCOM Systems Web site.
Information symbols
Very important instructions. Failure to observe these may result in damage.
Important instruction that should be observed.
Additional information that may be helpful but is not essential.

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Contents
5
EN
Contents
1 Introduction 9
1.1 Key Features in the Device 9
1.2 Just what can your LANCOM switch do? 12
2 Installation 14
2.1 Package content 14
2.2 System requirements 14
2.3 Status displays and interfaces 15
2.3.1 LEDs and buttons on the LANCOM ES-2126+ 15
2.3.2 LEDs and buttons on the LANCOM ES-2126P+ 16
2.3.3 Connectors on the LANCOM ES-2126+
and LANCOM ES-2126P+ 18
2.4 Mounting and connecting up the LANCOM switch 18
2.5 Software installation 19
2.5.1 Starting the software setup 19
2.5.2 Which software should I install? 20
3 Configuring and monitoring the LANCOM switch 21
3.1 Configuration options 21
3.1.1 Starting WEBconfig 21
3.1.2 Starting the Command Line Interface
over the network 23
3.1.3 Starting the Command Line Interface
over the serial connection 23
3.2 Which configuration does the device use? 24
3.2.1 Save/Restore 25
3.2.2 Config file 26
3.3 Monitoring the LANCOM switch with LANmonitor 27
3.3.1 Ethernet port status 27
3.3.2 Port PoE status 28

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Contents
6
EN
4 Operation of Web-based Management 30
4.1 Web Management Home Overview 31
4.2 System 33
4.2.1 System Information 33
4.2.2 IP Configuration 34
4.2.3 Time Configuration 36
4.2.4 Account Configuration 39
4.2.5 Management Security 40
4.2.6 Virtual Stack 43
4.2.7 Login Protect 44
4.3 Port 45
4.3.1 Status 45
4.3.2 Port Configuration 49
4.3.3 Description 50
4.3.4 Simple Counter 51
4.3.5 Detail Counter 52
4.3.6 PoE 54
4.4 Loop Detection 57
4.5 SNMP Configuration 57
4.6 DHCP Boot 59
4.7 IGMP Snooping 60
4.7.1 IGMP Snooping Status 61
4.7.2 Allowed Group 62
4.7.3 Static IP Multicast 63
4.7.4 Group Limit 63
4.7.5 Client Information 64
4.7.6 MVR Configuration 65
4.7.7 MVR Group Status 66
4.7.8 RADIUS IGMP 67
4.8 VLAN 68
4.8.1 VLAN Mode 68
4.8.2 Tag-based Group 70
4.8.3 PVID 72
4.8.4 Port-based Group 74
4.8.5 Management VLAN 75
4.9 MAC Table 76
4.9.1 MAC Table Information 76
4.9.2 MAC Table Maintenance 77

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Contents
7
EN
4.9.3 Static Setting 78
4.9.4 MAC Alias 79
4.9.5 Port Security 80
4.9.6 Port Static MAC 80
4.9.7 GVRP 82
4.9.8 Config 83
4.9.9 Counter 84
4.9.10 Group 86
4.10 STP 86
4.10.1 Status 86
4.10.2 Configuration 88
4.10.3 Port 90
4.11 Trunk 92
4.11.1 Port Setting/Status 94
4.11.2 Aggregator View 95
4.11.3 LACP System Configuration 96
4.12 802.1x Configuration 97
4.13 TACACS+ 107
4.13.1 Introduction 107
4.13.2 State 108
4.13.3 Authentication 109
4.13.4 Authorization 110
4.13.5 Accounting 112
4.14 Alarm Configuration 112
4.14.1 Events 112
4.14.2 E-Mail 113
4.15 Configuration 114
4.15.1 Save/Restore 114
4.15.2 Config file 114
4.16 Security 114
4.16.1 Mirror Configuration 114
4.16.2 Isolated Group 115
4.17 Bandwidth Management 117
4.17.1 Ingress Bandwidth Setting 117
4.17.2 Egress Bandwidth Setting 118
4.17.3 Storm Setting 118
4.18 QoS (Quality of Service) Configuration 119
4.18.1 QoS Global Setting 121

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Contents
8
EN
4.18.2 VIP Port Setting 122
4.18.3 802.1p Setting 123
4.18.4 D-Type TOS 123
4.18.5 T-Type TOS 124
4.18.6 R-Type TOS 125
4.18.7 M-Type TOS 126
4.18.8 DSCP Setting 127
4.19 Diagnostics 128
4.19.1 Diag 128
4.19.2 Loopback 129
4.19.3 Ping 130
4.19.4 Watchdog 130
4.20 TFTP Server 131
4.21 Log 132
4.22 Firmware Upgrade 133
4.23 Reboot 134
4.24 Logout 135
5 Operation of CLI Management (englisch) 136
5.1 CLI Management 136
5.1.1 Login 136
5.2 Commands of CLI 137
5.2.1 Global Commands of CLI 138
5.2.2 Local Commands of CLI 144
6 Appendix 267
6.1 Performance data and specifications 267
6.2 Connector wiring 269
6.2.1 Ethernet interface 10/100Base-TX 269
6.3 CE-declarations of conformity 269

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 1: Introduction
9
EN
1Introduction
The LANCOM switch models LANCOM ES-2126+ and LANCOM ES-2126P+
are managed layer-2 switches with 24 Fast Ethernet ports (for twisted pair
cable – TP) and two Gigabit dual media ports with TP/SFP, which meets the
IEEE 802.3/u/x/z Gigabit, Fast Ethernet and Ethernet specifications
The switch can be managed through RS-232 serial port via directly connec-
tion, or through Ethernet port using Telnet or WEBconfig. Additionally, the
switches can be managed via SSH (Secure Shell) or WEBconfig with SSL-
encryption. With the SNMP agent, the network administrator can logon the
switch to monitor, configure and control each port’s activity in a friendly way.
The overall network management is enhanced and the network efficiency is
also improved to accommodate high bandwidth applications. In addition, the
switch features comprehensive and useful function such as QoS (Quality of
Service), Spanning Tree, VLAN, Port Trunking, Bandwidth Control, Port Secu-
rity, SNMP/RMON and IGMP Snooping capability via the intelligent software.
It is suitable for both metro-LAN and office application.
Additionally, the switches support TACACS+, a protocol for authentication,
authorization and accounting (AAA). It thus provides access to the network for
certain authorized users only, it regulates the rights of those users, and it is a
logging mechanism to keep track of user actions.
This LANCOM ES-2126P+ switch also complies with IEEE 802.3af, its advan-
ced auto-sensing algorithm enables providing power devices (PD) discovery,
classification, current limit, and other necessary functions. It also supports
high safety with short circuit protection and power-out auto-detection to PD.
10/100/1000Mbps TP is a standard Ethernet port that meets all IEEE 802.3/u/
x/z Gigabit, Fast Ethernet specifications. 1000Mbps SFP Fiber transceiver is a
Gigabit Ethernet port that fully complies with all IEEE 802.3z and 1000Base-
SX/LX standards.
1000Mbps Single Fiber WDM (BiDi) transceiver is designed with an optic
Wavelength Division Multiplexing (WDM) technology that transports bi-direc-
tional full duplex signal over a single fiber simultaneously.
1.1 Key Features in the Device
쮿QoS:
Support Quality of Service by the IEEE 802.1P standard. There are two
priority queue and packet transmission schedule using Weighted Round

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 1: Introduction
10
EN
Robin (WRR). User-defined weight classification of packet priority can be
based on either VLAN tag on packets or user-defined port priority.
쮿Spanning Tree:
Support IEEE 802.1D, IEEE 802.1w (RSTP: Rapid Spanning Tree Protocol)
standards.
쮿VLAN:
Support Port-based VLAN and IEEE802.1Q Tag VLAN. Support 256 active
VLANs and VLAN ID 1~4094.
쮿Port Trunking:
Support static port trunking and port trunking with IEEE 802.3ad LACP.
쮿Bandwidth Control:
Support ingress and egress per port bandwidth control.
쮿Port Security:
Support allowed, denied forwarding and port security with MAC address.
쮿SNMP/RMON:
SNMP agent and RMON MIB. In the device, SNMP agent is a client soft-
ware which is operating over SNMP protocol used to receive the command
from SNMP manager (server site) and echo the corresponded data, i.e.
MIB object. Besides, SNMP agent will actively issue TRAP information
when happened.
RMON is the abbreviation of Remote Network Monitoring and is a branch
of the SNMP MIB.
The device supports MIB-2 (RFC 1213), Bridge MIB (RFC 1493), RMON
MIB (RFC 1757)-statistics Group 1,2,3,9, Ethernet-like MIB (RFC 1643),
Ethernet MIB (RFC 1643) and so on.
쮿TACACS+
Tacacs+ (Terminal Access Controller Access-Control System) is a protocol
for authentication, authorization and accounting (AAA). It thus provides
access to the network for certain authorized users only, it regulates the
rights of those users, and it is a logging mechanism to keep track of user
actions. TACACS+ is an alternative to other AAA protocols such as
RADIUS.
쮿IGMP Snooping:
Support IGMP version 2 (RFC 2236): The function IGMP snooping is used
to establish the multicast groups to forward the multicast packet to the

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 1: Introduction
11
EN
member ports, and, in nature, avoid wasting the bandwidth while IP mul-
ticast packets are running over the network.

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 1: Introduction
12
EN
1.2 Just what can your LANCOM switch do?
LANCOM ES-
2126+
LANCOM ES-
2126P+
Hardware
Supports 24-port 10/100M TP ports with Nway and auto MDIX function ✔✔
2 Gigabit dual media ports(TP/SFP) ✔✔
On-line pluggable fiber transceiver modules ✔✔
256KB packet buffer and 128KB control memory ✔✔
Maximal packet length can be up to 1536 bytes ✔✔
Full-duplex flow control (IEEE802.3x) and half-duplex backpressure ✔✔
Ssatus LEDs
System: Power, CPURUN, ACT / FDX / SPD(LEDSET) ✔✔
TP Port 1-24: LINK/ACT, FDX, SPD ✔✔
SFP-Ports 25,26: LINK/ACT, FDX, SPD ✔✔
PoE support
PoE with 48VDC power through RJ-45 pin 1, 2, 3, 6. ✔
Powered Device(PD) auto detection and classification. ✔
PoE-PSE status and activity LED indicator. ✔
Management
Concisely the status of port and easily port configuration ✔✔
Per port traffic monitoring counters ✔✔
Port mirror function ✔✔
Static trunk function ✔✔
802.1Q VLAN with 256 entries. ✔✔
DHCP Broadcasting Suppression to avoid network suspended or
crashed
✔✔
Trap event while monitored events happened ✔✔
Default configuration which can be restored to overwrite the current
configuration which is working on via web browser and CLI
✔✔

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 1: Introduction
13
EN
5 kinds of QoS, are as follows, MAC Priority, 802.1p Priority, IP TOS Pri-
ority, and DiffServ DSCP Priority.
✔✔
WEBconfig and CLI management over telnet ✔✔
WEBconfig with optional SSL-encryption and CLI management over SSH ✔✔
Rapid Spanning Tree (802.1w RSTP) ✔✔
802.1x port security on a VLAN ✔✔
SNMP access can be disabled and prevent from illegal SNMP access ✔✔
Ingress, Non-unicast and Egress Bandwidth rating management ✔✔
The trap event and alarm message can be transferred via e-mail and
mobile phone short message
✔✔
Diagnostics to let administrator knowing the hardware status ✔✔
External loopback test to check if the link is ok ✔✔
TFTP for firmware upgrade, system log upload and config file import/
export
✔✔
Remote boot the device through user interface and SNMP ✔✔
Network time synchronization and daylight saving ✔✔
TACACS+ for authorization, authentication and accounting (AAA) ✔✔
120 event log records in the main memory and display on the local con-
sole
✔✔
Options
LANCOM SFP Transceiver:
Item no. 61556 LANCOM SFP-SX-LC1
Item no. 61557 LANCOM SFP-LX-LC1
✔✔
LANCOM ES-
2126+
LANCOM ES-
2126P+

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 2: Installation
14
EN
2 Installation
This chapter will assist you to quickly install hardware and software. First,
check the package contents and system requirements. The device can be
installed and configured quickly and easily if all prerequisites are fulfilled.
2.1 Package content
Before beginning with the installation, please check that nothing is missing
from your package. Along with the LANCOM switch the box should contain
the following accessories:
Should anything be missing, please take up immediate contact to your dealer
or to the address on the delivery note supplied with your device.
2.2 System requirements
Computers that connect to a LANCOM must meet the following minimum
requirements:
쮿Operating system with TCP/IP support, such as Windows, Linux, BSD Unix,
Apple Mac OS, OS/2.
쮿Access to the LAN via the TCP/IP protocol.
쮿Browser for Web-based configuration.
The LANtools also require a Windows operating system. A web brow-
ser under any operating system provides access to WEBconfig.
LANCOM
ES-2126+
LANCOM
ES-2126P+
Power cord ✔✔
19’’ adapter (2 pieces) and mounting materials ✔✔
Serial configuration cable ✔✔
LANCOM CD ✔✔
Printed documentation ✔✔

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 2: Installation
15
EN
2.3 Status displays and interfaces
Meanings of the LEDs
The following section describes the meaning of the LEDs.
Please be aware that LANmonitor shows far more information about
the status of the LANCOM switch than the LEDs '→Monitoring the
LANCOM switch with LANmonitor'.
2.3.1 LEDs and buttons on the LANCOM ES-2126+
Located on the front of the device are light-emitting diodes (LEDs) that pro-
vide information on device status, and also two buttons.
쐃Reset Button to re-start the system.
쐇CPU RUN Blinks green if the CPU is running without problem.
+
쐃쐇
쐋
쐏

쐊
쐎
쐅
쐈
쐉

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 2: Installation
16
EN
쐋PWR Power LED: Constant green when power is supplied to the device.
쐏ACT Constant green when the LED mode is set to "Active".
쐄FDX Constant green when the LED mode is set to "Full-Duplex".
쐂SPD Constant green when the LED mode is set to "Speed".
쐆LEDSET Button to switch the LEDmode between -“Active”, “Full-Duplex” and “Speed”.
쐊LINK
Port 1 to 24
Constant green when the network connection is established to the connected
device. Off if no network connection can be established to the connected
device.
쐎ACT/FDX/SPD
Port 1 to 24
This LED displays the following information depending on the selected LED
status:
쮿LED mode “Active”: Blinks yellow during data transfer.
쮿LED mode “Full-Duplex”: Constant green when full-duplex mode is active
for this port; blinks yellow in case of collisions.
쮿LED mode “Speed”: Constant yellow when the 100 Mbps mode is active.
Off when the 10 Mbps mode is active.
쐅Link
Port 25 and 26
Constant green when the network connection is established to the connected
device. Off if no network connection can be established to the connected
device.
쐈FB
Port 25 and 26
Constant green when the optical port is active. Off when the TP port is active
쐉ACT
Port 25 and 26
This LED displays the following information depending on the selected LED
status:
쮿LED mode “Active”: Blinks yellow during data transfer.
쮿LED mode “Full-Duplex”: Constant green when full-duplex mode is active
for this port; blinks yellow in case of collisions.
쮿LED mode “Speed”: Constant green when the Gbps mode is active. Off
when the 10 Mbps or 100 Mbps mode is active.
2.3.2 LEDs and buttons on the LANCOM ES-2126P+
Located on the front of the device are light-emitting diodes (LEDs) that pro-
vide information on device status, and also two buttons.
+

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 2: Installation
17
EN
쐃CPU RUN Blinks green if the CPU is running without problem.
쐇PWR Power LED: Constant green when power is supplied to the device.
쐋PoE-ACT Constant green when the device connected to this port is powered via PoE.
쐏LINK
Port 1 to 24
Constant green when the network connection is established to the connected
device. Off if no network connection can be established to the connected
device.
쐄ACT/FDX/SPD
Port 1 to 24
This LED displays the following information depending on the selected LED
status:
쮿LED mode “Active”: Blinks yellow during data transfer.
쮿LED mode “Full-Duplex”: Constant green when full-duplex mode is active
for this port; blinks yellow in case of collisions.
쮿LED mode “Speed”: Constant yellow when the 100 Mbps mode is active.
Off when the 10 Mbps mode is active.
쐂ACT Constant green when the LED mode is set to "Active".
+
쐃
쐇
쐋쐏



쐊
쐎쐅
쐈쐈

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 2: Installation
18
EN
쐆FDX Constant green when the LED mode is set to "Full-Duplex".
쐊SPD Constant green when the LED mode is set to "Speed".
쐎LEDSET Button to switch the LEDmode between -“Active”, “Full-Duplex” and “Speed”.
쐅Reset Button to re-start the system.
쐈FX
Port 25 and 26
Constant green when the optical port is active. Off when the TP port is active.
2.3.3 Connectors on the LANCOM ES-2126+ and LANCOM ES-2126P+
The following connectors are located on the rear of the device.
쐃Connector for serial configuration cable for direct configuration.
쐇Connector for IEC power cable for power supply.
2.4 Mounting and connecting up the LANCOM switch
Installating the LANCOM switch involves the following steps:
햲Mounting – The device is designed for mounting in an available 19” unit
in a server cabinet. If necessary fix the rubber pads to the underside of the
device to prevent any scratching to other equipment.
Ensure that the device has sufficient ventilation to prevent damage
from excessive heat build-up.
햳LAN connection – Connect the network devices to the ports of the LAN-
COM switch by means of a suitable twisted-pair cable (TP cable). The con-
nectors automatically detect the avalable data transfer speeds and the pin
assignment (autosensing).
Use only standard TP cables of category CAT 5e or better with a maxi-
mum length of 100 m to ensure the best possible transfer of data.
Cross-over cables can be used thanks to the auto-sensing function.
쐃쐇

LANCOM ES-2126+ and LANCOM ES-2126P+
쮿Chapter 2: Installation
19
EN
If optical connections are to be used, additional modules can be
purchased as accessories.
햴Configuration via serial ports – In order to configure the LANCOM
switch directly, connect the serial configuration cable (supplied) to the
COM port of the device. Connect the other end of this cable to an avai-
lable COM port (RS 232) on a PC. Instructions on carrying out a configu-
ration via the serial interface and on enterning relevant parameters via a
terminal program are available under →'Starting the Command Line
Interface via serial connection' in the following chapter.
햵Supply power and switch on – Supply power to the device by means of
the IEC power cable.
햶Ready for operation? – After a brief self-test, the power LED lights up
continuously. Green LAN-LINK LEDs show which LAN connectors are
being used for a connection.
2.5 Software installation
The following section describes the installation of the Windows-compatible
system software LANtools, as supplied.
You may skip this section if you use your LANCOM switch exclusively
with computers running operating systems other than Windows.
2.5.1 Starting the software setup
Place the product CD into your drive. The setup program will start automati-
cally.
If the setup does not start automatically, run AUTORUN.EXE in the
root directory of the LANCOM CD.