LevelOne GEL-2670 User manual

GEL-2670
24 GE + 2 GE SFP L2 Managed Switch
User Manual
Ver. 1.0

M ANAGEMENT G UIDE
GEL-2670 L2 MANAGED SWITCH
Layer 2 Gigabit Ethernet Switch
with 24 10/100/1000BASE-T Ports (RJ-45)
and 2 Gigabit SFP Ports
E012013-KS-R01

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
JANUARY 2013 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.0.0.

A BOUT T HIS G UIDE
– 6 –

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 13
TABLES 19
SECTION I GETTING STARTED 21
1INTRODUCTION 23
Key Features 23
Description of Software Features 24
System Defaults 28
2INITIAL SWITCH CONFIGURATION 31
SECTION II
SECTION III WEB CONFIGURATION 33
3USING THE WEB INTERFACE 35
Navigating the Web Browser Interface 35
Home Page 35
Configuration Options 36
Panel Display 36
Main Menu 36
4CONFIGURING THE SWITCH 47
Configuring System Information 47
Setting an IP Address 48
Setting an IPv4 Address 48
Setting an IPv6 Address 49
Configuring NTP Service 52

C ONTENTS
– 8 –
Configuring the Time Zone and Daylight Savings Time 53
Configuring Remote Log Messages 56
Configuring Power Reduction 57
Reducing Power to Idle Queue Circuits 57
Configuring Port Connections 58
Configuring Security 61
Configuring User Accounts 62
Configuring User Privilege Levels 63
Configuring The Authentication Method For Management Access 65
Configuring SSH 67
Configuring HTTPS 68
Filtering IP Addresses for Management Access 70
Using Simple Network Management Protocol 71
Remote Monitoring 82
Configuring Port Limit Controls 87
Configuring Authentication Through Network Access Servers 90
Filtering Traffic with Access Control Lists 101
Configuring DHCP Snooping 112
Configuring DHCP Relay and Option 82 Information 115
Configuring IP Source Guard 116
Configuring ARP Inspection 120
Specifying Authentication Servers 123
Creating Trunk Groups 125
Configuring Static Trunks 126
Configuring LACP 128
Configuring Loop Protection 130
Configuring the Spanning Tree Algorithm 132
Configuring Global Settings for STA 134
Configuring Multiple Spanning Trees 138
Configuring Spanning Tree Bridge Priorities 140
Configuring
STP/RSTP/CIST Interfaces 141
Configuring MSTI Interfaces 144
Multicast VLAN Registration 145
Configuring General MVR Settings 146
Configuring MVR Channel Settings 149
IGMP Snooping 151

C ONTENTS
– 9 –
Configuring Global and Port-Related Settings for IGMP Snooping 151
Configuring VLAN Settings for IGMP Snooping and Query 154
Configuring IGMP Filtering 156
MLD Snooping 157
Configuring Global and Port-Related Settings for MLD Snooping 157
Configuring VLAN Settings for MLD Snooping and Query 160
Configuring MLD Filtering 162
Link Layer Discovery Protocol 163
Configuring LLDP Timing and TLVs 163
Configuring LLDP-MED TLVs 166
Configuring the MAC Address Table 172
IEEE 802.1Q VLANs 174
Assigning Ports to VLANs 175
Configuring VLAN Attributes for Port Members 176
Configuring Private VLANs 179
Using Port Isolation 181
Configuring MAC-based VLANs 181
Protocol VLANs 183
Configuring Protocol VLAN Groups 183
Mapping Protocol Groups to Ports 185
Configuring IP Subnet-based VLANs 186
Managing VoIP Traffic 187
Configuring VoIP Traffic 188
Configuring Telephony OUI 190
Quality of Service 191
Configuring Port Classification 192
Configuring Port Policiers 194
Configuring Egress Port Scheduler 196
Configuring Egress Port Shaper 198
Configuring Port Remarking Mode 199
Configuring Port DSCP Translation and Rewriting 202
Configuring DSCP-based QoS Ingress Classification 204
Configuring DSCP Translation 205
Configuring DSCP Classification 206
Configuring QoS Control Lists 207
Configuring Storm Control 211

C ONTENTS
– 10 –
Configuring Local Port Mirroring 213
Configuring Remote Port Mirroring 214
Configuring UPnP 220
Configuring sFlow 221
5MONITORING THE SWITCH 225
Displaying Basic Information About the System 225
Displaying System Information 225
Displaying CPU Utilization 226
Displaying Log Messages 227
Displaying Log Details 229
Displaying Information About Ports 229
Displaying Port Status On the Front Panel 229
Displaying an Overview of Port Statistics 230
Displaying QoS Statistics 231
Displaying QCL Status 231
Displaying Detailed Port Statistics 233
Displaying Information About Security Settings 236
Displaying Access Management Statistics 236
Displaying Information About Switch Settings for Port Security 237
Displaying Information About Learned MAC Addresses 239
Displaying Port Status for Authentication Services 240
Displaying Port State for 802.1X /Remote Authentication Service 241
Displaying ACL Status 242
Displaying Statistics for DHCP Snooping 243
Displaying DHCP Relay Statistics 245
Displaying MAC Address Bindings for ARP Packets 246
Displaying Entries in the IP Source Guard Table 247
Displaying Information on Authentication Servers 248
Displaying a List of Authentication Servers 248
Displaying Statistics for Configured Authentication Servers 249
Displaying Information on RMON 253
Displaying RMON Statistics 253
Displaying RMON Historical Samples 254
Displaying RMON Alarm Settings 255
Displaying RMON Event Settings 256
Displaying Information on LACP 257

C ONTENTS
– 11 –
Displaying an Overview of LACP Groups 257
Displaying LACP Port Status 257
Displaying LACP Port Statistics 258
Displaying Information on Loop Protection 259
Displaying Information on the Spanning Tree 260
Displaying Bridge Status for STA 260
Displaying Port Status for STA 263
Displaying Port Statistics for STA 263
Displaying MVR Information 264
Displaying MVR Statistics 264
Displaying MVR Group Information 265
Displaying MVR SFM Information 266
Showing IGMP Snooping Information 267
Showing IGMP Snooping Status 267
Showing IGMP Snooping Group Information 268
Showing IPv4 SFM Information 269
Showing MLD Snooping Information 270
Showing MLD Snooping Status 270
Showing MLD Snooping Group Information 271
Showing IPv6 SFM Information 272
Displaying LLDP Information 273
Displaying LLDP Neighbor Information 273
Displaying LLDP-MED Neighbor Information 274
Displaying LLDP Neighbor EEE Information 277
Displaying LLDP Port Statistics 278
Displaying the MAC Address Table 280
Displaying Information About VLANs 281
VLAN Membership 281
VLAN Port Status 282
Displaying Information About MAC-based VLANs 283
Displaying Information About Flow Sampling 284
6PERFORMING BASIC DIAGNOSTICS 287
Pinging an IPv4 or IPv6 Address 287
7PERFORMING SYSTEM MAINTENANCE 289
Restarting the Switch 289
Restoring Factory Defaults 290

C ONTENTS
– 12 –
Upgrading Firmware 290
Activating the Alternate Image 291
Managing Configuration Files 292
Saving Configuration Settings 292
Restoring Configuration Settings 292
SECTION IV APPENDICES 295
ASOFTWARE SPECIFICATIONS 297
Software Features 297
Management Features 298
Standards 299
Management Information Bases 300
BTROUBLESHOOTING 301
Problems Accessing the Management Interface 301
Using System Logs 302
CLICENSE INFORMATION 303
The GNU General Public License 303
GLOSSARY 307
INDEX 315

– 13 –
FIGURES
Figure 1: Home Page 35
Figure 2: Front Panel Indicators 36
Figure 3: System Information Configuration 47
Figure 4: IP Configuration 49
Figure 5: IPv6 Configuration 51
Figure 6: NTP Configuration 52
Figure 7: Time Zone and Daylight Savings Time Configuration 55
Figure 8: Configuring Settings for Remote Logging of Error Messages 56
Figure 9: Configuring EEE Power Reduction 58
Figure 10: Port Configuration 61
Figure 11: Showing User Accounts 63
Figure 12: Configuring User Accounts 63
Figure 13: Configuring Privilege Levels 65
Figure 14: Authentication Server Operation 66
Figure 15: Authentication Method for Management Access 67
Figure 16: SSH Configuration 68
Figure 17: HTTPS Configuration 70
Figure 18: Access Management Configuration 71
Figure 19: SNMP System Configuration 76
Figure 20: SNMPv3 Community Configuration 77
Figure 21: SNMPv3 User Configuration 79
Figure 22: SNMPv3 Group Configuration 80
Figure 23: SNMPv3 View Configuration 81
Figure 24: SNMPv3 Access Configuration 82
Figure 25: RMON Statistics Configuration 83
Figure 26: RMON History Configuration 84
Figure 27: RMON Alarm Configuration 86
Figure 28: RMON Event Configuration 87
Figure 29: Port Limit Control Configuration 90
Figure 30: Using Port Security 91
Figure 31: Network Access Server Configuration 101

F IGURES
– 14 –
Figure 32: ACL Port Configuration 103
Figure 33: ACL Rate Limiter Configuration 104
Figure 34: Access Control List Configuration 112
Figure 35: DHCP Snooping Configuration 114
Figure 36: DHCP Relay Configuration 116
Figure 37: Configuring Global and Port-based Settings for IP Source Guard 118
Figure 38: Configuring Static Bindings for IP Source Guard 119
Figure 39: Configuring Global and Port Settings for ARP Inspection 121
Figure 40: Configuring Static Bindings for ARP Inspection 122
Figure 41: Authentication Configuration 124
Figure 42: Static Trunk Configuration 128
Figure 43: LACP Port Configuration 130
Figure 44: Loop Protection Configuration 132
Figure 45: STP Root Ports and Designated Ports 133
Figure 46: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 133
Figure 47: CIST, CST. and IST Spanning Trees 134
Figure 48: STA Bridge Configuration 137
Figure 49: Adding a VLAN to an MST Instance 139
Figure 50: Configuring STA Bridge Priorities 140
Figure 51: STP/RSTP/CIST Port Configuration 144
Figure 52: MSTI Port Configuration 145
Figure 53: MVR Concept 146
Figure 54: Configuring General MVR Settings 149
Figure 55: Configuring MVR Channel Settings 150
Figure 56: Configuring Global and Port-related Settings for IGMP Snooping 154
Figure 57: Configuring VLAN Settings for IGMP Snooping and Query 156
Figure 58: IGMP Snooping Port Group Filtering Configuration 157
Figure 59: Configuring Global and Port-related Settings for MLD Snooping 160
Figure 60: Configuring VLAN Settings for MLD Snooping and Query 162
Figure 61: MLD Snooping Port Group Filtering Configuration 163
Figure 62: LLDP Configuration 166
Figure 63: LLDP-MED Configuration 172
Figure 64: MAC Address Table Configuration 174
Figure 65: VLAN Membership Configuration 176
Figure 66: VLAN Port Configuration 179
Figure 67: Private VLAN Membership Configuration 180

F IGURES
– 15 –
Figure 68: Port Isolation Configuration 181
Figure 69: Configuring MAC-Based VLANs 182
Figure 70: Configuring Protocol VLANs 184
Figure 71: Assigning Ports to Protocol VLANs 186
Figure 72: Assigning Ports to an IP Subnet-based VLAN 187
Figure 73: Configuring Global and Port Settings for a Voice VLAN 190
Figure 74: Configuring an OUI Telephony List 191
Figure 75: Configuring Ingress Port QoS Classification 193
Figure 76: Configuring Ingress Port Tag Classification 194
Figure 77: Configuring Ingress Port Policing 195
Figure 78: Displaying Egress Port Schedulers 197
Figure 79: Configuring Egress Port Schedulers and Shapers 198
Figure 80: Displaying Egress Port Shapers 199
Figure 81: Displaying Port Tag Remarking Mode 201
Figure 82: Configuring Port Tag Remarking Mode 202
Figure 83: Configuring Port DSCP Translation and Rewriting 203
Figure 84: Configuring DSCP-based QoS Ingress Classification 205
Figure 85: Configuring DSCP Translation and Re-mapping 206
Figure 86: Mapping DSCP to CoS/DPL Values 207
Figure 87: QoS Control List Configuration 211
Figure 88: Storm Control Configuration 212
Figure 89: Mirror Configuration 214
Figure 90: Configuring Remote Port Mirroring 215
Figure 91: Mirror Configuration (Source) 217
Figure 92: Mirror Configuration (Intermediate) 218
Figure 93: Mirror Configuration (Destination) 219
Figure 94: UPnP Configuration 221
Figure 95: sFlow Configuration 224
Figure 96: System Information 226
Figure 97: CPU Load 227
Figure 98: System Log Information 228
Figure 99: Detailed System Log Information 229
Figure 100: Port State Overview 229
Figure 101: Port Statistics Overview 230
Figure 102: Queueing Counters 231
Figure 103: QoS Control List Status 232

F IGURES
– 16 –
Figure 104: Detailed Port Statistics 235
Figure 105: Access Management Statistics 236
Figure 106: Port Security Switch Status 238
Figure 107: Port Security Port Status 239
Figure 108: Network Access Server Switch Status 241
Figure 109: NAS Statistics for Specified Port 242
Figure 110: ACL Status 243
Figure 111: DHCP Snooping Statistics 245
Figure 112: DHCP Relay Statistics 246
Figure 113: Dynamic ARP Inspection Table 247
Figure 114: Dynamic IP Source Guard Table 247
Figure 115: RADIUS Overview 249
Figure 116: RADIUS Details 252
Figure 117: RMON Statistics 254
Figure 118: RMON History Overview 255
Figure 119: RMON Alarm Overview 256
Figure 120: RMON Event Overview 256
Figure 121: LACP System Status 257
Figure 122: LACP Port Status 258
Figure 123: LACP Port Statistics 259
Figure 124: Loop Protection Status 260
Figure 125: Spanning Tree Bridge Status 262
Figure 126: Spanning Tree Detailed Bridge Status 262
Figure 127: Spanning Tree Port Status 263
Figure 128: Spanning Tree Port Statistics 264
Figure 129: MVR Statistics 265
Figure 130: MVR Group Information 266
Figure 131: MVR SFM Information 267
Figure 132: IGMP Snooping Status 268
Figure 133: IGMP Snooping Group Information 269
Figure 134: IPv4 SFM Information 270
Figure 135: MLD Snooping Status 271
Figure 136: MLD Snooping Group Information 272
Figure 137: IPv6 SFM Information 273
Figure 138: LLDP Neighbor Information 274
Figure 139: LLDP-MED Neighbor Information 277

F IGURES
– 17 –
Figure 140: LLDP Neighbor EEE Information 278
Figure 141: LLDP Port Statistics 279
Figure 142: MAC Address Table 280
Figure 143: Showing VLAN Members 282
Figure 144: Showing VLAN Port Status 283
Figure 145: Showing MAC-based VLAN Membership Status 284
Figure 146: Showing sFlow Statistics 286
Figure 147: ICMP Ping 288
Figure 148: ICMP Ping Results 288
Figure 149: ICMP V6 Ping 288
Figure 150: ICMP V6 Results 288
Figure 151: Restart Device 289
Figure 152: Factory Defaults 290
Figure 153: Software Upload 291
Figure 154: Software Image Selection 291
Figure 155: Configuration Save 292
Figure 156: Configuration Upload 293

F IGURES
– 18 –

– 19 –
TABLES
Table 1: Key Features 23
Table 2: System Defaults 28
Table 3: Web Page Configuration Buttons 36
Table 4: Main Menu 36
Table 5: HTTPS System Support 69
Table 6: SNMP Security Models and Levels 72
Table 7: Dynamic QoS Profiles 94
Table 8: QCE Modification Buttons 106
Table 9: Recommended STA Path Cost Range 141
Table 10: Recommended STA Path Costs 142
Table 11: Default STA Path Costs 142
Table 12: QCE Modification Buttons 208
Table 13: System Capabilities 273
Table 14: Troubleshooting Chart 301

T ABLES
– 20 –