LevelOne GEL-1061 User manual

GEL-1061
10-Port L2 Managed Gigabit Switch, 2 x SFP
GEP-1061
10-Port L2 Managed Gigabit PoE Switch, 2 x SFP,
802.3at PoE+, 125W
GEL-2861
28-Port L2 Managed Gigabit Switch, 4 x SFP
User Manual
V2.0
Digital Data Communications Asia Co., Ltd.

User Manual
GEL-1061
10-Port L2 Managed Gigabit Switch
with 8 10/100/1000BASE-T (RJ-45) Ports
and 2 Gigabit SFP Ports
GEP-1061
10-Port L2 Managed Gigabit PoE Switch
with 8 10/100/1000BASE-T (RJ-45) 802.3 af/at PoE Ports
and 2 Gigabit SFP Ports
(PoE Power Budget: 125 W)
GEL-2861 Managed Gigabit Switch
with 24 10/100/1000BASE-T (RJ-45) Ports
and 4 Gigabit SFP Ports
E052016/ST-R02
150200001416A

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read
this Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How this Guide
is Organized
This guide provides detailed information about the switch’s key features. It also
describes the switch’s web browser interface. For information on the command line
interface refer to the CLI Reference Guide.
The guide includes these sections:
◆ Section I “Getting Started” — Includes an introduction to switch management,
and the basic settings required to access the management interface.
◆ Section II “Web Configuration” — Includes all management options available
through the web browser interface.
◆ Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the web browser.
For information on how to manage the switch through the command line interface,
see the following guide:
CLI Reference Guide
Note: For a description of how to initialize the switch for management access via
the CLI, web interface or SNMP, refer to “Initial Switch Configuration” in the CLI
Reference Guide.

How to Use This Guide
– 4 –
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Revision History This section summarizes the changes in each revision of this guide.
May 2016 Revision
This is the second version of this guide. This guide is valid for software release
v1.1.2.0. It includes the following change:
◆ Added GEL-2861 model.
March 2016 Revision
This is the first version of this guide. This guide is valid for software release v1.1.2.0.

– 5 –
Contents
How to Use This Guide 3
Contents 5
Figures 15
Tables 25
Section I Getting Started 27
1 Introduction 29
Key Features 29
Description of Software Features 30
Address Resolution Protocol 34
System Defaults 35
Section II Web Configuration 39
2 Using the Web Interface 41
Connecting to the Web Interface 41
Navigating the Web Browser Interface 42
Dashboard 42
Home Page 44
Configuration Options 44
Panel Display 45
Main Menu 46
3BasicManagementTasks 61
Displaying System Information 62
Displaying Hardware/Software Versions 63
Configuring Support for Jumbo Frames 64

Contents
– 6 –
Displaying Bridge Extension Capabilities 65
Managing System Files 67
Copying Files via FTP/ TFTP or HTTP 67
Saving the Running Configuration to a Local File 69
Setting the Start-up File 70
Showing System Files 71
Automatic Operation Code Upgrade 71
Setting the System Clock 75
Setting the Time Manually 76
Setting the SNTP Polling Interval 77
Configuring NTP 77
Configuring Time Servers 78
Setting the Time Zone 82
Configuring Summer Time 83
Configuring the Console Port 85
Configuring Telnet Settings 87
Displaying CPU Utilization 88
Configuring CPU Guard 89
Displaying Memory Utilization 90
Resetting the System 91
4 Interface Configuration 95
Port Configuration 96
Configuring by Port List 96
Configuring by Port Range 98
Displaying Connection Status 99
Showing Port or Trunk Statistics 100
Displaying Statistical History 104
Displaying Transceiver Data 108
Configuring Transceiver Thresholds 109
Trunk Configuration 111
Configuring a Static Trunk 113
Configuring a Dynamic Trunk 115
Displaying LACP Port Counters 121
Displaying LACP Settings and Status for the Local Side 122

Contents
– 7 –
Displaying LACP Settings and Status for the Remote Side 124
Configuring Load Balancing 125
Saving Power 127
Configuring Local Port Mirroring 129
Configuring Remote Port Mirroring 130
Traffic Segmentation 135
Enabling Traffic Segmentation 135
Configuring Uplink and Downlink Ports 136
5 VLAN Configuration 139
IEEE 802.1Q VLANs 139
Configuring VLAN Groups 142
Adding Static Members to VLANs 144
Protocol VLANs 148
Configuring Protocol VLAN Groups 149
Mapping Protocol Groups to Interfaces 150
Configuring MAC-based VLANs 152
6 Address Table Settings 155
Configuring MAC Address Learning 155
Setting Static Addresses 157
Changing the Aging Time 159
Displaying the Dynamic Address Table 159
Clearing the Dynamic Address Table 161
Issuing MAC Address Traps 162
7 Spanning Tree Algorithm 165
Overview 165
Configuring Loopback Detection 167
Configuring Global Settings for STA 169
Displaying Global Settings for STA 174
Configuring Interface Settings for STA 175
Displaying Interface Settings for STA 180
Configuring Multiple Spanning Trees 183
Configuring Interface Settings for MSTP 187

Contents
– 8 –
8 Congestion Control 189
Rate Limiting 189
Storm Control 190
9 Class of Service 193
Layer 2 Queue Settings 193
Setting the Default Priority for Interfaces 193
Selecting the Queue Mode 194
Layer 3/4 Priority Settings 197
Setting Priority Processing to DSCP or CoS 198
Mapping Ingress DSCP Values to Internal DSCP Values 199
Mapping CoS Priorities to Internal DSCP Values 201
10 Quality of Service 205
Overview 205
Configuring a Class Map 206
Creating QoS Policies 210
Attaching a Policy Map to a Port 214
11 VoIP Traffic Configuration 217
Overview 217
Configuring VoIP Traffic 218
Configuring Telephony OUI 219
Configuring VoIP Traffic Ports 220
12 Security Measures 223
AAA (Authentication, Authorization and Accounting) 224
Configuring Local/Remote Logon Authentication 225
Configuring Remote Logon Authentication Servers 226
Configuring AAA Accounting 231
Configuring AAA Authorization 237
Configuring User Accounts 241
Network Access (MAC Address Authentication) 243
Configuring Global Settings for Network Access 245
Configuring Network Access for Ports 246
Configuring a MAC Address Filter 248
Displaying Secure MAC Address Information 249

Contents
– 9 –
Configuring HTTPS 251
Configuring Global Settings for HTTPS 251
Replacing the Default Secure-site Certificate 252
Configuring the Secure Shell 254
Configuring the SSH Server 256
Generating the Host Key Pair 258
Importing User Public Keys 259
Access Control Lists 261
Showing TCAM Utilization 262
Setting the ACL Name and Type 264
Configuring a Standard IPv4 ACL 266
Configuring an Extended IPv4 ACL 267
Configuring a Standard IPv6 ACL 269
Configuring an Extended IPv6 ACL 271
Configuring a MAC ACL 273
Configuring an ARP ACL 275
Binding a Port to an Access Control List 277
Showing ACL Hardware Counters 278
ARP Inspection 279
Configuring Global Settings for ARP Inspection 280
Configuring VLAN Settings for ARP Inspection 282
Configuring Interface Settings for ARP Inspection 284
Displaying ARP Inspection Statistics 285
Displaying the ARP Inspection Log 286
Filtering IP Addresses for Management Access 287
Configuring Port Security 289
Configuring 802.1X Port Authentication 291
Configuring 802.1X Global Settings 293
Configuring Port Authenticator Settings for 802.1X 294
Displaying 802.1X Statistics 298
DHCP Snooping 299
DHCP Snooping Global Configuration 302
DHCP Snooping VLAN Configuration 303
Configuring Ports for DHCP Snooping 304
Displaying DHCP Snooping Binding Information 306

Contents
– 10 –
DoS Protection 307
IPv4 Source Guard 308
Configuring Ports for IPv4 Source Guard 308
Configuring Static Bindings for IPv4 Source Guard 311
Displaying Information for Dynamic IPv4 Source Guard Bindings 313
13 Basic Administration Protocols 315
Configuring Event Logging 316
System Log Configuration 316
Remote Log Configuration 318
Sending Simple Mail Transfer Protocol Alerts 319
Link Layer Discovery Protocol 321
Setting LLDP Timing Attributes 321
Configuring LLDP Interface Attributes 323
Configuring LLDP Interface Civic-Address 327
Displaying LLDP Local Device Information 329
Displaying LLDP Remote Device Information 333
Displaying Device Statistics 341
Power over Ethernet 343
Setting the Switch’s Overall PoE Power Budget 344
Setting the Port PoE Power Budget 345
Simple Network Management Protocol 347
Configuring Global Settings for SNMP 349
Setting the Local Engine ID 350
Specifying a Remote Engine ID 351
Setting SNMPv3 Views 353
Configuring SNMPv3 Groups 355
Setting Community Access Strings 362
Configuring Local SNMPv3 Users 363
Configuring Remote SNMPv3 Users 366
Specifying Trap Managers 368
Creating SNMP Notification Logs 372
Showing SNMP Statistics 374
Remote Monitoring 376
Configuring RMON Alarms 377

Contents
– 11 –
Configuring RMON Events 379
Configuring RMON History Samples 381
Configuring RMON Statistical Samples 384
Setting a Time Range 387
LBD Configuration 389
Configuring Global Settings for LBD 390
Configuring Interface Settings for LBD 392
14 Multicast Filtering 393
Overview 393
Layer 2 IGMP (Snooping and Query for IPv4) 394
Configuring IGMP Snooping and Query Parameters 396
Specifying Static Interfaces for a Multicast Router 400
Assigning Interfaces to Multicast Services 402
Setting IGMP Snooping Status per Interface 404
Filtering IGMP Query Packets and Multicast Data 410
Displaying Multicast Groups Discovered by IGMP Snooping 411
Displaying IGMP Snooping Statistics 412
Filtering and Throttling IGMP Groups 416
Enabling IGMP Filtering and Throttling 416
Configuring IGMP Filter Profiles 417
Configuring IGMP Filtering and Throttling for Interfaces 419
MLD Snooping (Snooping and Query for IPv4) 421
Configuring MLD Snooping and Query Parameters 421
Setting Immediate Leave Status for MLD Snooping per Interface 423
Specifying Static Interfaces for an IPv6 Multicast Router 424
Assigning Interfaces to IPv6 Multicast Services 426
Showing MLD Snooping Groups and Source List 428
15 IP Tools 431
Using the Ping Function 431
Using the Trace Route Function 433
Address Resolution Protocol 434
Displaying Dynamic or Local ARP Entries 435

Contents
– 12 –
16 IP Services 437
Domain Name Service 437
Configuring General DNS Service Parameters 437
Configuring a List of Domain Names 438
Configuring a List of Name Servers 440
Configuring Static DNS Host to Address Entries 441
Displaying the DNS Cache 442
Dynamic Host Configuration Protocol 443
Specifying a DHCP Client Identifier 444
Configuring DHCP Relay Service 445
Enabling DHCP Dynamic Provision 449
17 IP Configuration 451
Setting the Switch’s IP Address (IP Version 4) 451
Configuring the IPv4 Default Gateway 451
Configuring IPv4 Interface Settings 452
Setting the Switch’s IP Address (IP Version 6) 455
Configuring the IPv6 Default Gateway 456
Configuring IPv6 Interface Settings 457
Configuring an IPv6 Address 461
Showing IPv6 Addresses 464
Showing the IPv6 Neighbor Cache 465
Showing IPv6 Statistics 466
Showing the MTU for Responding Destinations 472
Section III Appendices 473
A Software Specifications 475
Software Features 475
Management Features 476
Standards 477
Management Information Bases 477
B Troubleshooting 479
Problems Accessing the Management Interface 479

Contents
– 13 –
Using System Logs 480
C License Information 481
The GNU General Public License 481
Glossary 485
Index 493

Contents
– 14 –

– 15 –
Figures
Figure 1: Dashboard 42
Figure 2: Home Page 44
Figure 3: Front Panel Indicators 45
Figure 4: System Information 62
Figure 5: General Switch Information 64
Figure 6: Configuring Support for Jumbo Frames 65
Figure 7: Displaying Bridge Extension Configuration 66
Figure 8: Copy Firmware 68
Figure 9: Saving the Running Configuration 70
Figure 10: Setting Start-Up Files 70
Figure 11: Displaying System Files 71
Figure 12: Configuring Automatic Code Upgrade 75
Figure 13: Manually Setting the System Clock 76
Figure 14: Setting the Polling Interval for SNTP 77
Figure 15: Configuring NTP 78
Figure 16: Specifying SNTP Time Servers 79
Figure 17: Adding an NTP Time Server 80
Figure 18: Showing the NTP Time Server List 80
Figure 19: Adding an NTP Authentication Key 81
Figure 20: Showing the NTP Authentication Key List 82
Figure 21: Setting the Time Zone 83
Figure 22: Configuring Summer Time 85
Figure 23: Console Port Settings 86
Figure 24: Telnet Connection Settings 88
Figure 25: Displaying CPU Utilization 89
Figure 26: Configuring CPU Guard 90
Figure 27: Displaying Memory Utilization 91
Figure 28: Restarting the Switch (Immediately) 93
Figure 29: Restarting the Switch (In) 93

Figures
– 16 –
Figure 30: Restarting the Switch (At) 94
Figure 31: Restarting the Switch (Regularly) 94
Figure 32: Configuring Connections by Port List 98
Figure 33: Configuring Connections by Port Range 99
Figure 34: Displaying Port Information 100
Figure 35: Showing Port Statistics (Table) 103
Figure 36: Showing Port Statistics (Chart) 104
Figure 37: Configuring a History Sample 106
Figure 38: Showing Entries for History Sampling 106
Figure 39: Showing Status of Statistical History Sample 107
Figure 40: Showing Current Statistics for a History Sample 107
Figure 41: Showing Ingress Statistics for a History Sample 108
Figure 42: Displaying Transceiver Data 109
Figure 43: Configuring Transceiver Thresholds 111
Figure 44: Configuring Static Trunks 113
Figure 45: Creating Static Trunks 114
Figure 46: Adding Static Trunks Members 114
Figure 47: Configuring Connection Parameters for a Static Trunk 115
Figure 48: Showing Information for Static Trunks 115
Figure 49: Configuring Dynamic Trunks 115
Figure 50: Configuring the LACP Aggregator Admin Key 118
Figure 51: Enabling LACP on a Port 119
Figure 52: Configuring LACP Parameters on a Port 120
Figure 53: Showing Members of a Dynamic Trunk 120
Figure 54: Configuring Connection Settings for a Dynamic Trunk 121
Figure 55: Showing Connection Parameters for Dynamic Trunks 121
Figure 56: Displaying LACP Port Counters 122
Figure 57: Displaying LACP Port Internal Information 124
Figure 58: Displaying LACP Port Remote Information 125
Figure 59: Configuring Load Balancing 127
Figure 60: Enabling Power Savings 128
Figure 61: Configuring Local Port Mirroring 129
Figure 62: Configuring Local Port Mirroring 130
Figure 63: Displaying Local Port Mirror Sessions 130
Figure 64: Configuring Remote Port Mirroring 131

Figures
– 17 –
Figure 65: Configuring Remote Port Mirroring (Source) 134
Figure 66: Configuring Remote Port Mirroring (Intermediate) 134
Figure 67: Configuring Remote Port Mirroring (Destination) 134
Figure 68: Enabling Traffic Segmentation 136
Figure 69: Configuring Members for Traffic Segmentation 137
Figure 70: Showing Traffic Segmentation Members 138
Figure 71: VLAN Compliant and VLAN Non-compliant Devices 140
Figure 72: Creating Static VLANs 143
Figure 73: Modifying Settings for Static VLANs 143
Figure 74: Showing Static VLANs 144
Figure 75: Configuring Static Members by VLAN Index 146
Figure 76: Configuring Static VLAN Members by Interface 147
Figure 77: Configuring Static VLAN Members by Interface Range 148
Figure 78: Configuring Protocol VLANs 150
Figure 79: Displaying Protocol VLANs 150
Figure 80: Assigning Interfaces to Protocol VLANs 152
Figure 81: Showing the Interface to Protocol Group Mapping 152
Figure 82: Configuring MAC-Based VLANs 154
Figure 83: Showing MAC-Based VLANs 154
Figure 84: Configuring MAC Address Learning 156
Figure 85: Configuring Static MAC Addresses 158
Figure 86: Displaying Static MAC Addresses 158
Figure 87: Setting the Address Aging Time 159
Figure 88: Displaying the Dynamic MAC Address Table 160
Figure 89: Clearing Entries in the Dynamic MAC Address Table 161
Figure 90: Issuing MAC Address Traps (Global Configuration) 162
Figure 91: Issuing MAC Address Traps (Interface Configuration) 163
Figure 92: STP Root Ports and Designated Ports 166
Figure 93: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 166
Figure 94: Spanning Tree – Common Internal, Common, Internal 167
Figure 95: Configuring Port Loopback Detection 169
Figure 96: Configuring Global Settings for STA (STP) 173
Figure 97: Configuring Global Settings for STA (RSTP) 173
Figure 98: Configuring Global Settings for STA (MSTP) 174
Figure 99: Displaying Global Settings for STA 175

Figures
– 18 –
Figure 100: Determining the Root Port 177
Figure 101: Configuring Interface Settings for STA 180
Figure 102: STA Port Roles 181
Figure 103: Displaying Interface Settings for STA 182
Figure 104: Creating an MST Instance 184
Figure 105: Displaying MST Instances 184
Figure 106: Modifying the Priority for an MST Instance 185
Figure 107: Displaying Global Settings for an MST Instance 185
Figure 108: Adding a VLAN to an MST Instance 186
Figure 109: Displaying Members of an MST Instance 186
Figure 110: Configuring MSTP Interface Settings 188
Figure 111: Displaying MSTP Interface Settings 188
Figure 112: Configuring Rate Limits 190
Figure 113: Configuring Storm Control 191
Figure 114: Setting the Default Port Priority 194
Figure 115: Setting the Queue Mode (Strict) 196
Figure 116: Setting the Queue Mode (WRR) 196
Figure 117: Setting the Queue Mode (Strict and WRR) 197
Figure 118: Setting the Trust Mode 199
Figure 119: Configuring DSCP to DSCP Internal Mapping 200
Figure 120: Showing DSCP to DSCP Internal Mapping 201
Figure 121: Configuring CoS to DSCP Internal Mapping 202
Figure 122: Showing CoS to DSCP Internal Mapping 203
Figure 123: Configuring a Class Map 207
Figure 124: Showing Class Maps 208
Figure 125: Adding Rules to a Class Map 209
Figure 126: Showing the Rules for a Class Map 209
Figure 127: Configuring a Policy Map 212
Figure 128: Showing Policy Maps 212
Figure 129: Adding Rules to a Policy Map 213
Figure 130: Showing the Rules for a Policy Map 214
Figure 131: Attaching a Policy Map to a Port 215
Figure 132: Configuring a Voice VLAN 219
Figure 133: Configuring an OUI Telephony List 220
Figure 134: Showing an OUI Telephony List 220

Figures
– 19 –
Figure 135: Configuring Port Settings for a Voice VLAN 222
Figure 136: Configuring the Authentication Sequence 226
Figure 137: Authentication Server Operation 226
Figure 138: Configuring Remote Authentication Server (RADIUS) 229
Figure 139: Configuring Remote Authentication Server (TACACS+) 230
Figure 140: Configuring AAA Server Groups 230
Figure 141: Showing AAA Server Groups 231
Figure 142: Configuring Global Settings for AAA Accounting 233
Figure 143: Configuring AAA Accounting Methods 234
Figure 144: Showing AAA Accounting Methods 235
Figure 145: Configuring AAA Accounting Service for 802.1X Service 235
Figure 146: Configuring AAA Accounting Service for Command Service 236
Figure 147: Configuring AAA Accounting Service for Exec Service 236
Figure 148: Displaying a Summary of Applied AAA Accounting Methods 237
Figure 149: Displaying Statistics for AAA Accounting Sessions 237
Figure 150: Configuring AAA Authorization Methods 239
Figure 151: Showing AAA Authorization Methods 239
Figure 152: Configuring AAA Authorization Methods for Exec Service 240
Figure 153: Displaying the Applied AAA Authorization Method 240
Figure 154: Configuring User Accounts 242
Figure 155: Showing User Accounts 243
Figure 156: Configuring Global Settings for Network Access 246
Figure 157: Configuring Interface Settings for Network Access 247
Figure 158: Configuring a MAC Address Filter for Network Access 248
Figure 159: Showing the MAC Address Filter Table for Network Access 249
Figure 160: Showing Addresses Authenticated for Network Access 250
Figure 161: Configuring HTTPS 252
Figure 162: Downloading the Secure-Site Certificate 254
Figure 163: Configuring the SSH Server 257
Figure 164: Generating the SSH Host Key Pair 258
Figure 165: Showing the SSH Host Key Pair 259
Figure 166: Copying the SSH User’s Public Key 260
Figure 167: Showing the SSH User’s Public Key 261
Figure 168: Showing TCAM Utilization 264
Figure 169: Creating an ACL 265

Figures
– 20 –
Figure 170: Showing a List of ACLs 265
Figure 171: Configuring a Standard IPv4 ACL 267
Figure 172: Configuring an Extended IPv4 ACL 269
Figure 173: Configuring a Standard IPv6 ACL 270
Figure 174: Configuring an Extended IPv6 ACL 273
Figure 175: Configuring a MAC ACL 275
Figure 176: Configuring a ARP ACL 277
Figure 177: Binding a Port to an ACL 278
Figure 178: Showing ACL Statistics 279
Figure 179: Configuring Global Settings for ARP Inspection 282
Figure 180: Configuring VLAN Settings for ARP Inspection 283
Figure 181: Configuring Interface Settings for ARP Inspection 284
Figure 182: Displaying Statistics for ARP Inspection 286
Figure 183: Displaying the ARP Inspection Log 287
Figure 184: Creating an IP Address Filter for Management Access 288
Figure 185: Showing IP Addresses Authorized for Management Access 289
Figure 186: Configuring Port Security 291
Figure 187: Configuring Port Authentication 292
Figure 188: Configuring Global Settings for 802.1X Port Authentication 293
Figure 189: Configuring Interface Settings for 802.1X Port Authenticator 297
Figure 190: Showing Statistics for 802.1X Port Authenticator 299
Figure 191: Configuring Global Settings for DHCP Snooping 303
Figure 192: Configuring DHCP Snooping on a VLAN 304
Figure 193: Configuring the Port Mode for DHCP Snooping 305
Figure 194: Displaying the Binding Table for DHCP Snooping 307
Figure 195: Protecting Against DoS Attacks 308
Figure 196: Setting the Filter Type for IPv4 Source Guard 310
Figure 197: Configuring Static Bindings for IPv4 Source Guard 313
Figure 198: Configuring Static Bindings for IPv4 Source Guard 313
Figure 199: Showing the IPv4 Source Guard Binding Table 314
Figure 200: Configuring Settings for System Memory Logs 317
Figure 201: Showing Error Messages Logged to System Memory 318
Figure 202: Configuring Settings for Remote Logging of Error Messages 319
Figure 203: Configuring SMTP Alert Messages 320
Figure 204: Configuring LLDP Timing Attributes 323