Lancom GS-2124 User manual

110634/0409
LANCOM Systems GmbH
Adenauerstr. 20/B2
52146 Würselen
Germany
E-Mail: [email protected]
Internet www.lancom.eu
LANCOM GS-2124
...connecting your business
110643_LC-GS2124-MANUAL_cover.in1 1110643_LC-GS2124-MANUAL_cover.in1 1 20.04.2009 11:09:3320.04.2009 11:09:33

LANCOM GS-2124

© 2009 LANCOM Systems GmbH, Wuerselen (Germany). All rights reserved.
While the information in this manual has been compiled with great care, it may not be deemed an assurance of product
characteristics. LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery.
The reproduction and distribution of the documentation and software supplied with this product and the use of its contents
is subject to written authorization from LANCOM Systems. We reserve the right to make any alterations that arise as the
result of technical development.
Windows®, Windows Vista™, Windows NT® and Microsoft® are registered trademarks of Microsoft, Corp.
The LANCOM Systems logo, LCOS and the name LANCOM are registered trademarks of LANCOM Systems GmbH. All other
names or descriptions used may be trademarks or registered trademarks of their owners.
Subject to change without notice. No liability for technical errors or omissions.
Products from LANCOM Systems include software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http:/
/www.openssl.org/).
Products from LANCOM Systems include cryptographic software written by Eric Young ([email protected]).
Products from LANCOM Systems include software developed by the NetBSD Foundation, Inc. and its contributors.
Products from LANCOM Systems contain the LZMA SDK developed by Igor Pavlov.
LANCOM Systems GmbH
Adenauerstr. 20/B2
52146 Wuerselen
Germany
www.lancom.eu
Wuerselen, April 2009
11
063
4/
0
4
09

LANCOM GS-2124
쮿Preface
3
EN
Preface
Thank you for your confidence in us!
LANCOM Switches are ideally suited to small, medium-sized and perfor-
mance networks in business environments.
The LANCOM GS-2124 switch features 20 Fast-Ethernet and four combo ports
(TP/SFP), it integrates perfectly into LANCOM's Advanced Routing und For-
warding and it supports up to 256 active VLANs. It uses bandwidth control to
prioritize the data traffic according to predefined criteria (e.g. voice data or
certain ports).
The LANCOM Switch can be managed with the clearly structured Webconfig
and is supported by the LANCOM Management Tools (LANconfig and
LANmonitor).
This documentation was created by …
... several members of our staff from a variety of departments in order to
ensure you the best possible support when using your LANCOM product.
Should you find any errors, or if you would like to suggest improvements, ple-
ase do not hesitate to send an e-mail directly to:
[email protected]
Our online services www.lancom.eu are available to you around the
clock if you have any questions on the content in this manual, or if you
require any further support. The area 'Support' will help you with
many answers to frequently asked questions (FAQs). Furthermore, the
knowledgebase offers you a large reserve of information. The latest
drivers, firmware, utilities and documentation are constantly available
for download.
In addition, LANCOM Support is available. For telephone numbers
and contact addresses for LANCOM Support, please refer to the enc-
losed leaflet or the LANCOM Systems Web site.

LANCOM GS-2124
쮿Preface
4
EN
Information symbols
Very important instructions. Failure to observe these may result in damage.
Important instruction that should be observed.
Additional information that may be helpful but is not essential.

LANCOM GS-2124
쮿Contents
5
EN
Contents
1 Introduction 9
1.1 Key Features in the Device 9
1.2 Just what can your LANCOM Switch do? 10
2 Installation 13
2.1 Package content 13
2.2 System requirements 13
2.3 Status displays and interfaces 14
2.3.1 Connectors, LEDs and buttons on the LANCOM GS-2124
14
2.3.2 Connectors on rear of the LANCOM GS-2124 15
2.4 Mounting and connecting up the LANCOM Switch 15
2.5 Software installation 16
2.5.1 Starting the software setup 16
2.5.2 Which software should I install? 17
3 Configuring and monitoring the LANCOM Switch 18
3.1 Configuration options 18
3.1.1 Starting WEBconfig 18
3.1.2 Starting the Command Line Interface over the network
20
3.1.3 Starting the Command Line Interface over the serial con-
nection 20
3.2 Which configuration does the device use? 21
3.3 Save/Restore 22
3.3.1 Factory Defaults 23
3.3.2 Save Start 23
3.3.3 Save User 24
3.3.4 Restore User 24
3.4 Export/ Import Configuration File 25
3.5 Monitoring the LANCOM Switch with LANmonitor 25
3.5.1 Ethernet port status 25

LANCOM GS-2124
쮿Contents
6
EN
4 Operation of Web-based Management 27
4.1 Web Management Home Overview 28
4.2 System: Basic Config 31
4.2.1 System Information 31
4.3 Account 33
4.3.1 Time 33
4.3.2 IP Configuration 36
4.3.3 Loop Detection 38
4.3.4 Management Policy 39
4.3.5 System Log 42
4.3.6 Virtual Stack 43
4.3.7 System: Port 45
4.3.8 Configuration 46
4.3.9 Port Status 48
4.3.10 Simple Counter 51
4.3.11 Detail Counter 52
4.4 Security: MAC 55
4.4.1 Mac Address Table 55
4.4.2 Static Filter 57
4.4.3 Static Forward 58
4.4.4 MAC Alias 59
4.4.5 MAC Table 60
4.5 Security: VLAN 61
4.5.1 VLAN Mode 61
4.5.2 Tag-based Group 62
4.5.3 Port-based Group 64
4.5.4 Ports 67
4.5.5 Port Isolation 68
4.5.6 Management VLAN 69
4.6 Security: ACL 69
4.6.1 Ports 70
4.6.2 Rate Limiters 71
4.6.3 Access Control List 72
4.6.4 Wizard 87
4.7 Security: IP MAC Binding 88
4.8 Security: DHCP Snooping 90
4.8.1 DHCP Snooping State 90
4.8.2 DHCP Snooping Entry 91

LANCOM GS-2124
쮿Contents
7
EN
4.8.3 DHCP Snooping Client 93
4.9 Security: 802.1x Configuration 94
4.9.1 Server 98
4.9.2 Port Configuration 100
4.9.3 Status 103
4.9.4 Statistics 104
4.10 Security: Mirror 105
4.11 Configuration: GVRP 106
4.11.1 Config 107
4.11.2 Counter 109
4.11.3 Group 111
4.12 Configuration: QoS (Quality of Service) Configuration 112
4.12.1 Ports 113
4.12.2 Qos Control List 114
4.12.3 Rate Limiters 117
4.12.4 Storm Control 118
4.12.5 Wizard 119
4.13 Configuration: Trunk 121
4.13.1 Port 123
4.13.2 Aggregator View 126
4.13.3 Hash Method 127
4.13.4 LACP System Priority 128
4.14 Configuration: STP 128
4.14.1 STP Status 129
4.14.2 Configuration 131
4.14.3 Port 133
4.15 Configuration: MSTP 135
4.15.1 Status 136
4.15.2 Region Config 136
4.15.3 Instance View 137
4.16 Configuration: Multicast 143
4.16.1 IGMP Mode 143
4.16.2 Proxy 144
4.16.3 Snooping 145
4.16.4 IGMP Group Membership 145
4.17 Management: Alarm Configuration 147
4.17.1 Events 147
4.17.2 Email 148

LANCOM GS-2124
쮿Contents
8
EN
4.18 Management: Diagnostics 149
4.18.1 Diag 149
4.18.2 Ping 150
4.19 Management: Maintenance 150
4.19.1 Reset device 150
4.19.2 Firmware upgrade 151
4.20 Management: SNMP 152
4.21 Logout 154
5 Operation of CLI Management 155
5.1 CLI Management 155
5.1.1 Login 155
5.2 Commands of CLI 156
5.2.1 Global Commands of CLI 156
5.2.2 4-2-2. Local Commands of CLI 162
6 Appendix 274
6.1 Performance data and specifications 274
6.2 Connector wiring 275
6.2.1 LAN interface 10/100Base-TX 275
6.3 Declaration of conformity 275

LANCOM GS-2124
쮿Chapter 1: Introduction
9
EN
1Introduction
The LANCOM Switch models LANCOM GS-2124 are managed layer-2 switches
with 20 Gigabit ports (for twisted pair cable – TP) and four Gigabit dual media
ports with TP/SFP, which meets the IEEE 802.3/u/x/z Gigabit, Fast Ethernet and
Ethernet specifications
The switch can be managed through RS-232 serial port via directly connec-
tion, or through Ethernet port using Telnet or Web-based management unit,
associated with SNMP agent. With the SNMP agent, the network administra-
tor can logon the switch to monitor, configure and control each port’s activity
in a friendly way.
The overall network management is enhanced and the network efficiency is
also improved to accommodate high bandwidth applications. In addition, the
switch features comprehensive and useful function such as QoS (Quality of
Service), Spanning Tree, VLAN, Port Trunking, Bandwidth Control, Port Secu-
rity, SNMP/RMON and IGMP Snooping capability via the intelligent software.
It is suitable for both metro-LAN and office application.
10/100/1000 Mbps TP is a standard Ethernet port that meets all IEEE 802.3/
u/x/z Gigabit, Fast Ethernet specifications. 1000 Mbps SFP Fiber transceiver is
a Gigabit Ethernet port that fully complies with all IEEE 802.3z and 1000Base-
SX/LX standards.
1000 Mbps Single Fiber WDM (BiDi) transceiver is designed with an optic
Wavelength Division Multiplexing (WDM) technology that transports bi-direc-
tional full duplex signal over a single fiber simultaneously.
1.1 Key Features in the Device
쮿QoS:
Support Quality of Service by the IEEE 802.1P standard. There are two
priority queue and packet transmission schedule using Weighted Round
Robin (WRR). User-defined weight classification of packet priority can be
based on either VLAN tag on packets or user-defined port priority.
쮿Spanning Tree:
Support IEEE 802.1D, IEEE 802.1w (RSTP: Rapid Spanning Tree Protocol)
standards.
쮿VLAN:
Support Port-based VLAN and IEEE802.1Q Tag VLAN. Support 256 active
VLANs and VLAN ID 1~4094.

LANCOM GS-2124
쮿Chapter 1: Introduction
10
EN
쮿Port Trunking:
Support static port trunking and port trunking with IEEE 802.3ad LACP.
쮿Bandwidth Control:
Support ingress and egress per port bandwidth control.
쮿Port Security:
Support allowed, denied forwarding and port security with MAC address.
쮿SNMP/RMON:
SNMP agent and RMON MIB. In the device, SNMP agent is a client soft-
ware which is operating over SNMP protocol used to receive the command
from SNMP manager (server site) and echo the corresponded data, i.e.
MIB object. Besides, SNMP agent will actively issue TRAP information
when happened.
RMON is the abbreviation of Remote Network Monitoring and is a branch
of the SNMP MIB.
The device supports MIB-2 (RFC 1213), Bridge MIB (RFC 1493), RMON
MIB (RFC 1757)-statistics Group 1,2,3,9, Ethernet-like MIB (RFC 1643),
Ethernet MIB (RFC 1643) and so on.
쮿IGMP Snooping:
Support IGMP version 2 (RFC 2236): The function IGMP snooping is used
to establish the multicast groups to forward the multicast packet to the
member ports, and, in nature, avoid wasting the bandwidth while IP mul-
ticast packets are running over the network.
1.2 Just what can your LANCOM Switch do?
LANCOM GS-
2124
Hardware
Supports 20-port 10/100/1000 Mbps TP ports and auto MDIX function ✔
4 Gigabit dual media ports(TP/SFP) ✔
On-line pluggable fiber transceiver modules ✔
256KB packet buffer and 128KB control memory ✔
Maximal packet length can be up to 1536 bytes ✔

LANCOM GS-2124
쮿Chapter 1: Introduction
11
EN
Full-duplex flow control (IEEE802.3x) and half-duplex backpressure ✔
Ssatus LEDs
System: Power ✔
TP Port 1-24: LINK/ACT, SPD ✔
SFP-Ports 21,22,23,24: LINK/ACT, SPD, SFP ✔
PoE support
PoE with 48VDC power through RJ-45 pin 1, 2, 3, 6.
Powered Device(PD) auto detection and classification.
PoE-PSE status and activity LED indicator.
Management
Concisely the status of port and easily port configuration ✔
Per port traffic monitoring counters ✔
Port mirror function ✔
Static trunk function ✔
802.1Q VLAN with 256 entries. ✔
DHCP Broadcasting Suppression to avoid network suspended or
crashed
✔
Trap event while monitored events happened ✔
Default configuration which can be restored to overwrite the current
configuration which is working on via web browser and CLI
✔
5 kinds of QoS, are as follows, MAC Priority, 802.1p Priority, IP TOS
Priority, and DiffServ DSCP Priority.
✔
Built-in web-based management and CLI management, providing a
more convenient UI for the user
✔
Rapid Spanning Tree (802.1w RSTP) ✔
802.1x port security on a VLAN ✔
SNMP access can be disabled and prevent from illegal SNMP access ✔
Ingress, Non-unicast and Egress Bandwidth rating management ✔
The trap event and alarm message can be transferred via e-mail and
mobile phone short message
✔
LANCOM GS-
2124

LANCOM GS-2124
쮿Chapter 1: Introduction
12
EN
Diagnostics to let administrator knowing the hardware status ✔
External loopback test to check if the link is ok ✔
HTTP for firmware upgrade, system log upload and config file import/
export
✔
Remote boot the device through user interface and SNMP ✔
Network time synchronization and daylight saving ✔
120 event log records in the main memory and display on the local
console
✔
Options
LANCOM SFP Transceiver:
Item no. 61556 LANCOM SFP-SX-LC1
Item no. 61557 LANCOM SFP-LX-LC1
✔
LANCOM GS-
2124

LANCOM GS-2124
쮿Chapter 2: Installation
13
EN
2 Installation
This chapter will assist you to quickly install hardware and software. First,
check the package contents and system requirements. The device can be
installed and configured quickly and easily if all prerequisites are fulfilled.
2.1 Package content
Before beginning with the installation, please check that nothing is missing
from your package. Along with the LANCOM Switch the box should contain
the following accessories:
Should anything be missing, please take up immediate contact to your dealer
or to the address on the delivery note supplied with your device.
2.2 System requirements
Computers that connect to a LANCOM must meet the following minimum
requirements:
쮿Operating system that supports TCP/IP, e.g. Windows Vista™,
Windows XP, Windows Millennium Edition (Me), Windows 2000, Win-
dows 98, Linux, BSD Unix, Apple Mac OS, OS/2.
쮿Access to the LAN via the TCP/IP protocol.
The LANtools also require a Windows operating system. A web brow-
ser under any operating system provides access to WEBconfig.
LANCOM
GS-2124
Power cord ✔
19’’ adapter (2 pieces) and mounting materials ✔
Serial configuration cable ✔
LANCOM CD ✔
Printed documentation ✔

LANCOM GS-2124
쮿Chapter 2: Installation
14
EN
2.3 Status displays and interfaces
Meanings of the LEDs
The following section describes the meaning of the LEDs.
Please be aware that LANmonitor shows far more information about
the status of the LANCOM Switch than the LEDs '→Monitoring the
LANCOM switch with LANmonitor'.
2.3.1 Connectors, LEDs and buttons on the LANCOM GS-2124
Located on the front of the device are connectors for different cabletypes,
light-emitting diodes (LEDs) that provide information on device status, and
also a button.
r
쐃TP connectors Connectors for twisted-pair cables.
쐇SFP connec-
tors
Connectors for small form-factor pluggable (SFP) cables.
쐋Serial connec-
tor
Connector for serial configuration cable.
쐏Reset Button to re-start the system.
쐄POWER LED Constant green when power is supplied to the device.
쐃쐇쐋
쐏쐊
쐂쐆

LANCOM GS-2124
쮿Chapter 2: Installation
15
EN
쐂LINK / ACT LED
Port 1 to 24
쮿Constant green when the network connection is established to the con-
nected device.
쮿Blinks during data transfer.
쮿Off if no network connection can be established to the connected device.
쐆10/100/1000
Mbps LED
쮿Constant green when the 1000 Mbps mode is active.
쮿Constant orange when the 100 Mbps mode is active.
쮿Off when the 10 Mbps is active.
쐊SFP(LINK/ACT)
LED
쮿Constant green when the network connection is established to the con-
nected device.
쮿Blinks during data transfer.
쮿Off if no network connection can be established to the connected device.
2.3.2 Connectors on rear of the LANCOM GS-2124
The following connectors are located on the rear of the device.
쐃Connector for the power supply cable.
2.4 Mounting and connecting up the LANCOM Switch
Installating the LANCOM Switch involves the following steps:
햲Mounting – The device is designed for mounting in an available 19” unit
in a server cabinet. If necessary fix the rubber pads to the underside of the
device to prevent any scratching to other equipment.
Ensure that the device has sufficient ventilation to prevent damage
from excessive heat build-up.
햳LAN connection – Connect the network devices to the ports of the LAN-
COM Switch by means of a suitable twisted-pair cable (TP cable). The con-
nectors automatically detect the avalable data transfer speeds and the pin
assignment (autosensing).
쐃
LANCOM GS-2124

LANCOM GS-2124
쮿Chapter 2: Installation
16
EN
Use only standard TP cables of category CAT 5 or better with a maxi-
mum length of 100 m to ensure the best possible transfer of data.
Cross-over cables can be used thanks to the auto-sensing function.
If optical connections are to be used, additional modules can be
purchased as accessories.
햴Configuration via serial ports – In order to configure the LANCOM
Switch directly, connect the serial configuration cable (supplied) to the
COM port of the device. Connect the other end of this cable to an avai-
lable COM port (RS 232) on a PC. Instructions on carrying out a configu-
ration via the serial interface and on enterning relevant parameters via a
terminal program are available under →'Starting the Command Line
Interface via serial connection' in the following chapter.
햵Supply power and switch on – Supply power to the device by means of
the IEC power cable.
햶Ready for operation? – After a brief self-test, the power LED lights up
continuously. Green LAN-LINK LEDs show which LAN connectors are
being used for a connection.
2.5 Software installation
The following section describes the installation of the Windows-compatible
system software LANtools, as supplied.
You may skip this section if you use your LANCOM Switch exclusively
with computers running operating systems other than Windows.
2.5.1 Starting the software setup
Place the product CD into your drive. The setup program will start automati-
cally.
If the setup does not start automatically, run AUTORUN.EXE in the
root directory of the LANCOM CD.

LANCOM GS-2124
쮿Chapter 2: Installation
17
EN
In Setup, select Install software. The following selection menus will appear
on screen:
2.5.2 Which software should I install?
쮿LANconfig is the Windows configuration program for all LANCOM
devices. LANconfig searches for all LANCOM devices in your network.
You can use this to start the Web-based configuration of a LANCOM
Switch.
쮿With LANmonitor you can use a Windows computer to monitor all of
your LANCOM devices. This program displays all important status infor-
mation for a LANCOM Switch, such as link status or port PoE state.
쮿With Documentation you copy the documentation files onto your PC.
Select the appropriate software options and confirm your choice with Next.
The software is installed automatically.

LANCOM GS-2124
쮿Chapter 3: Configuring and monitoring the LANCOM Switch
18
EN
3 Configuring and monitoring the LANCOM
Switch
3.1 Configuration options
There are two different methods of configuring the device.
쮿By means of a graphical user interface or via a browser (WEBconfig). This
option is only available if you have network access to the device's IP
address from your computer.
Instructions for configuring the device with WEBconfig are available in the
chapter "Web-based configuration".
쮿Text-orientated configuration via a console (Command Line Interface –
CLI): This method of configuration, which requires a program such as Tel-
net, Hyperterminal, or similar, can be conducted over a network connec-
tion or with a direct connection via serial interface (RS-232).
Instructions for configuring the device with CLI are available in the chap-
ter "Command line interface".
3.1.1 Starting WEBconfig
There are two ways of starting the configuration by browser:
쮿If you know the device's IP address, simply enter this into the address line
in the browser. The factory settings for accessing the device are: User
name "admin", password "admin".

LANCOM GS-2124
쮿Chapter 3: Configuring and monitoring the LANCOM Switch
19
EN
쮿If you do not have the device's IP number, LANconfig can be used to
search for it. To start LANconfig click on Start 왘Programs 왘LANCOM
왘LANconfig.
LANconfig automatically searches for all available devices in your net-
work. Any available LANCOM devices will be displayed in the list, inclu-
ding the LANCOM Switch. Double-click on this entry to start the browser
automatically with the correct IP address.
What is the IP address of my LANCOM Switch?
The current IP address of the LANCOM Switch after being switched on depends on the network
constellation.
Networks with DHCP server – In its factory settings, the LANCOM Switch is set for auto DHCP
mode, meaning that it searches for a DHCP server to assign it an IP address, subnet mask and
gateway address. The assigned IP address can only be determined by using the appropriate
tools or via the DHCP server. If the DHCP server is a LANCOM device, the IP address of the LAN-
COM Switch can be read out from the DHCP table. If this is the case, the LANCOM Switch can
be accessed from any network computer that receives its IP address from the same DHCP server.
Network without a DHCP server – If no DHCP server is present in the network, the LANCOM
Switch automatically adopts the address "172.23.56.250".
If this is the case, the LANCOM Switch can be accessed from any network computer with its IP
address set to the address range "172.23.56.x".