LevelOne GEL-1061 User manual

GEL-1061
10-Port L2 Managed Gigabit Switch, 2 x SFP
GEP-1061
10-Port L2 Managed Gigabit PoE Switch, 2 x SFP,
802.3at PoE+, 125W
GEL-2861
28-Port L2 Managed Gigabit Switch, 4 x SFP
User Manual
V2.0
Digital Data Communications Asia Co., Ltd.

User Manual
GEL-1061
10-Port L2 Managed Gigabit Switch
with 8 10/100/1000BASE-T (RJ-45) Ports
and 2 Gigabit SFP Ports
GEP-1061
10-Port L2 Managed Gigabit PoE Switch
with 8 10/100/1000BASE-T (RJ-45) 802.3 af/at PoE Ports
and 2 Gigabit SFP Ports
(PoE Power Budget: 125 W)
GEL-2861 Managed Gigabit Switch
with 24 10/100/1000BASE-T (RJ-45) Ports
and 4 Gigabit SFP Ports
E052016/ST-R02
150200001416A

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read
this Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How this Guide
is Organized
This guide provides detailed information about the switch’s key features. It also
describes the switch’s web browser interface. For information on the command line
interface refer to the CLI Reference Guide.
The guide includes these sections:
◆ Section I “Getting Started” — Includes an introduction to switch management,
and the basic settings required to access the management interface.
◆ Section II “Web Configuration” — Includes all management options available
through the web browser interface.
◆ Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the web browser.
For information on how to manage the switch through the command line interface,
see the following guide:
CLI Reference Guide
Note: For a description of how to initialize the switch for management access via
the CLI, web interface or SNMP, refer to “Initial Switch Configuration” in the CLI
Reference Guide.

How to Use This Guide
– 4 –
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Revision History This section summarizes the changes in each revision of this guide.
May 2016 Revision
This is the second version of this guide. This guide is valid for software release
v1.1.2.0. It includes the following change:
◆ Added GEL-2861 model.
March 2016 Revision
This is the first version of this guide. This guide is valid for software release v1.1.2.0.

– 5 –
Contents
How to Use This Guide 3
Contents 5
Figures 15
Tables 25
Section I Getting Started 27
1 Introduction 29
Key Features 29
Description of Software Features 30
Address Resolution Protocol 34
System Defaults 35
Section II Web Configuration 39
2 Using the Web Interface 41
Connecting to the Web Interface 41
Navigating the Web Browser Interface 42
Dashboard 42
Home Page 44
Configuration Options 44
Panel Display 45
Main Menu 46
3BasicManagementTasks 61
Displaying System Information 62
Displaying Hardware/Software Versions 63
Configuring Support for Jumbo Frames 64

Contents
– 6 –
Displaying Bridge Extension Capabilities 65
Managing System Files 67
Copying Files via FTP/ TFTP or HTTP 67
Saving the Running Configuration to a Local File 69
Setting the Start-up File 70
Showing System Files 71
Automatic Operation Code Upgrade 71
Setting the System Clock 75
Setting the Time Manually 76
Setting the SNTP Polling Interval 77
Configuring NTP 77
Configuring Time Servers 78
Setting the Time Zone 82
Configuring Summer Time 83
Configuring the Console Port 85
Configuring Telnet Settings 87
Displaying CPU Utilization 88
Configuring CPU Guard 89
Displaying Memory Utilization 90
Resetting the System 91
4 Interface Configuration 95
Port Configuration 96
Configuring by Port List 96
Configuring by Port Range 98
Displaying Connection Status 99
Showing Port or Trunk Statistics 100
Displaying Statistical History 104
Displaying Transceiver Data 108
Configuring Transceiver Thresholds 109
Trunk Configuration 111
Configuring a Static Trunk 113
Configuring a Dynamic Trunk 115
Displaying LACP Port Counters 121
Displaying LACP Settings and Status for the Local Side 122

Contents
– 7 –
Displaying LACP Settings and Status for the Remote Side 124
Configuring Load Balancing 125
Saving Power 127
Configuring Local Port Mirroring 129
Configuring Remote Port Mirroring 130
Traffic Segmentation 135
Enabling Traffic Segmentation 135
Configuring Uplink and Downlink Ports 136
5 VLAN Configuration 139
IEEE 802.1Q VLANs 139
Configuring VLAN Groups 142
Adding Static Members to VLANs 144
Protocol VLANs 148
Configuring Protocol VLAN Groups 149
Mapping Protocol Groups to Interfaces 150
Configuring MAC-based VLANs 152
6 Address Table Settings 155
Configuring MAC Address Learning 155
Setting Static Addresses 157
Changing the Aging Time 159
Displaying the Dynamic Address Table 159
Clearing the Dynamic Address Table 161
Issuing MAC Address Traps 162
7 Spanning Tree Algorithm 165
Overview 165
Configuring Loopback Detection 167
Configuring Global Settings for STA 169
Displaying Global Settings for STA 174
Configuring Interface Settings for STA 175
Displaying Interface Settings for STA 180
Configuring Multiple Spanning Trees 183
Configuring Interface Settings for MSTP 187

Contents
– 8 –
8 Congestion Control 189
Rate Limiting 189
Storm Control 190
9 Class of Service 193
Layer 2 Queue Settings 193
Setting the Default Priority for Interfaces 193
Selecting the Queue Mode 194
Layer 3/4 Priority Settings 197
Setting Priority Processing to DSCP or CoS 198
Mapping Ingress DSCP Values to Internal DSCP Values 199
Mapping CoS Priorities to Internal DSCP Values 201
10 Quality of Service 205
Overview 205
Configuring a Class Map 206
Creating QoS Policies 210
Attaching a Policy Map to a Port 214
11 VoIP Traffic Configuration 217
Overview 217
Configuring VoIP Traffic 218
Configuring Telephony OUI 219
Configuring VoIP Traffic Ports 220
12 Security Measures 223
AAA (Authentication, Authorization and Accounting) 224
Configuring Local/Remote Logon Authentication 225
Configuring Remote Logon Authentication Servers 226
Configuring AAA Accounting 231
Configuring AAA Authorization 237
Configuring User Accounts 241
Network Access (MAC Address Authentication) 243
Configuring Global Settings for Network Access 245
Configuring Network Access for Ports 246
Configuring a MAC Address Filter 248
Displaying Secure MAC Address Information 249

Contents
– 9 –
Configuring HTTPS 251
Configuring Global Settings for HTTPS 251
Replacing the Default Secure-site Certificate 252
Configuring the Secure Shell 254
Configuring the SSH Server 256
Generating the Host Key Pair 258
Importing User Public Keys 259
Access Control Lists 261
Showing TCAM Utilization 262
Setting the ACL Name and Type 264
Configuring a Standard IPv4 ACL 266
Configuring an Extended IPv4 ACL 267
Configuring a Standard IPv6 ACL 269
Configuring an Extended IPv6 ACL 271
Configuring a MAC ACL 273
Configuring an ARP ACL 275
Binding a Port to an Access Control List 277
Showing ACL Hardware Counters 278
ARP Inspection 279
Configuring Global Settings for ARP Inspection 280
Configuring VLAN Settings for ARP Inspection 282
Configuring Interface Settings for ARP Inspection 284
Displaying ARP Inspection Statistics 285
Displaying the ARP Inspection Log 286
Filtering IP Addresses for Management Access 287
Configuring Port Security 289
Configuring 802.1X Port Authentication 291
Configuring 802.1X Global Settings 293
Configuring Port Authenticator Settings for 802.1X 294
Displaying 802.1X Statistics 298
DHCP Snooping 299
DHCP Snooping Global Configuration 302
DHCP Snooping VLAN Configuration 303
Configuring Ports for DHCP Snooping 304
Displaying DHCP Snooping Binding Information 306

Contents
– 10 –
DoS Protection 307
IPv4 Source Guard 308
Configuring Ports for IPv4 Source Guard 308
Configuring Static Bindings for IPv4 Source Guard 311
Displaying Information for Dynamic IPv4 Source Guard Bindings 313
13 Basic Administration Protocols 315
Configuring Event Logging 316
System Log Configuration 316
Remote Log Configuration 318
Sending Simple Mail Transfer Protocol Alerts 319
Link Layer Discovery Protocol 321
Setting LLDP Timing Attributes 321
Configuring LLDP Interface Attributes 323
Configuring LLDP Interface Civic-Address 327
Displaying LLDP Local Device Information 329
Displaying LLDP Remote Device Information 333
Displaying Device Statistics 341
Power over Ethernet 343
Setting the Switch’s Overall PoE Power Budget 344
Setting the Port PoE Power Budget 345
Simple Network Management Protocol 347
Configuring Global Settings for SNMP 349
Setting the Local Engine ID 350
Specifying a Remote Engine ID 351
Setting SNMPv3 Views 353
Configuring SNMPv3 Groups 355
Setting Community Access Strings 362
Configuring Local SNMPv3 Users 363
Configuring Remote SNMPv3 Users 366
Specifying Trap Managers 368
Creating SNMP Notification Logs 372
Showing SNMP Statistics 374
Remote Monitoring 376
Configuring RMON Alarms 377