LevelOne GEL-2870 Programming manual

LevelOne
GEL-2870
24 GE + 4 GE Combo SFP
L2 SNMP Switch
Management Guide
version 1.0

M ANAGEMENT G UIDE
GEL-2870
Layer 2 SNMP Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)
GEL-2870
E112009/AP-R01
149100000054A

– 3 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
NOVEMBER 2009 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.1.

A BOUT T HIS G UIDE
– 4 –

– 5 –
CONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 17
TABLES 21
SECTION I GETTING STARTED 23
1INTRODUCTION 24
Key Features 24
Description of Software Features 25
Configuration Backup and Restore 25
Authentication 25
Access Control Lists 26
Port Configuration 26
Rate Limiting 26
Port Mirroring 26
Port Trunking 26
Storm Control 26
Static Addresses 26
IEEE 802.1D Bridge 27
Store-and-Forward Switching 27
Spanning Tree Algorithm 27
Virtual LANs 28
Traffic Prioritization 28
Quality of Service 29
Multicast Filtering 29
System Defaults 30
2INITIAL SWITCH CONFIGURATION 32
Connecting to the Switch 32
Configuration Options 32

C ONTENTS
– 6 –
Required Connections 33
Remote Connections 34
Basic Configuration 35
Setting Passwords 35
Setting an IP Address 35
Enabling SNMP Management Access 38
Managing System Files 42
Saving or Restoring Configuration Settings 42
SECTION II WEB CONFIGURATION 43
3USING THE WEB INTERFACE 44
Connecting to the Web Interface 44
Navigating the Web Browser Interface 45
Home Page 45
Configuration Options 45
Panel Display 46
Main Menu 46
4CONFIGURING THE SWITCH 50
Configuring System Information 50
Setting an IP Address 51
Setting an IPv4 Address 51
Setting an IPv6 Address 53
Setting the System Password 56
Filtering IP Addresses for Management Access 56
Configuring Port Connections 58
Configuring Authentication for Management Access and 802.1X 60
Creating Trunk Groups 64
Configuring Static Trunks 65
Configuring LACP 67
Configuring the Spanning Tree Algorithm 71
Configuring Global Settings for STA 72
Configuring Interface Settings for STA 73
Configuring 802.1X Port Authentication 76
Configuring HTTPS 81
Configuring SSH 83

C ONTENTS
– 7 –
IGMP Snooping 84
Configuring IGMP Snooping and Query 85
Configuring IGMP Filtering 88
Configuring Link Layer Discovery Protocol 89
Configuring the MAC Address Table 92
IEEE 802.1Q VLANs 94
Assigning Ports to VLANs 95
Configuring VLAN Attributes for Port Members 96
Configuring Private VLANs 98
Using Port Isolation 99
Quality of Service 100
Configuring Port-Level Queue Settings 101
Configuring DSCP Remarking 102
Configuring QoS Control Lists 104
Configuring Rate Limiting 107
Configuring Storm Control 109
Access Control Lists 110
Assigning ACL Policies and Responses 110
Configuring Rate Limiters 111
Configuring Access Control Lists 112
Configuring Port Mirroring 120
Simple Network Management Protocol 121
Configuring SNMP System and Trap Settings 123
Setting SNMPv3 Community Access Strings 126
Configuring SNMPv3 Users 127
Configuring SNMPv3 Groups 129
Configuring SNMPv3 Views 130
Configuring SNMPv3 Group Access Rights 131
Configuring UPnP 132
Configuring DHCP Relay and Option 82 Information 134
5MONITORING THE SWITCH 136
Displaying Basic Information About the System 136
Displaying System Information 136
Displaying Log Messages 137
Displaying Log Details 139
Displaying Access Management Statistics 139

C ONTENTS
– 8 –
Displaying Information About Ports 140
Displaying Port Status On the Front Panel 140
Displaying an Overview of Port Statistics 140
Displaying QoS Statistics 141
Displaying Detailed Port Statistics 142
Displaying Information on Authentication Servers 145
Displaying a List of Authentication Servers 145
Displaying Statistics for Configured Authentication Servers 146
Displaying Information on LACP 150
Displaying an Overview of LACP Groups 150
Displaying LACP Port Status 150
Displaying LACP Port Statistics 151
Displaying Information on the Spanning Tree 152
Displaying Bridge Status for STA 152
Displaying Port Status for STA 154
Displaying Port Statistics for STA 155
Displaying Port Security Information 156
Displaying Port Security Status 156
Displaying Port Security Statistics 157
Showing IGMP Snooping Information 160
Displaying LLDP Information 161
Displaying LLDP Neighbor Information 162
Displaying LLDP Port Statistics 163
Displaying DHCP Relay Statistics 164
Displaying the MAC Address Table 166
6PERFORMING BASIC DIAGNOSTICS 168
Pinging an IPv4 or IPv6 Address 168
Running Cable Diagnostics 169
7PERFORMING SYSTEM MAINTENANCE 171
Resetting the Switch 171
Restoring Factory Defaults 171
Upgrading Firmware 172
Registering the Product 173
Managing Configuration Files 173
Saving Configuration Settings 173
Restoring Configuration Settings 174

C ONTENTS
– 9 –
SECTION III COMMAND LINE INTERFACE 175
8USING THE COMMAND LINE INTERFACE 177
Accessing the CLI 177
Console Connection 177
Telnet Connection 178
Entering Commands 179
Keywords and Arguments 179
Minimum Abbreviation 180
Getting Help on Commands 180
Partial Keyword Lookup 181
Using Command History 182
Command Line Processing 182
CLI Command Groups 183
9SYSTEM COMMANDS 185
system configuration 186
system reboot 186
system restore default 187
system contact 187
system name 187
system location 188
system password 188
system timezone 189
system log 189
system access configuration 190
system access mode 190
system access add 191
system access ipv6 add 192
system access delete 193
system access lookup 193
system access clear 193
system access statistics 193
10 IP COMMANDS 195
ip configuration 195
ip dhcp 196
ip setup 197

C ONTENTS
– 10 –
ip ping 198
ip dns 199
ip dns_proxy 199
ip sntp 200
ip ipv6 autoconfig 200
ip ipv6 setup 201
ip ipv6 ping6 202
ip ipv6 sntp 203
11 AUTHENTICATION COMMANDS 205
auth configuration 205
auth timeout 206
auth deadtime 207
auth radius 207
auth acct_radius 208
auth tacacs+ 210
auth client 211
auth statistics 212
12 PORT COMMANDS 215
port configuration 215
port state 217
port mode 217
port flow control 218
port maxframe 219
port power 219
port excessive 220
port statistics 221
port veriphy 222
port numbers 223
13 LINK AGGREGATION COMMANDS 224
aggr configuration 225
aggr add 226
aggr delete 226
aggr lookup 227
aggr mode 227
14 LACP COMMANDS 229
lacp configuration 231

C ONTENTS
– 11 –
lacp mode 231
lacp key 232
lacp role 232
lacp status 233
lacp statistics 233
15 RSTP COMMANDS 235
rstp configuration 236
rstp sysprio 236
rstp age 237
rstp delay 237
rstp txhold 238
rstp version 238
rstp mode 239
rstp cost 239
rstp priority 241
rstp edge 241
rstp autoedge 242
rstp p2p 243
rstp status 243
rstp statistics 244
rstp mcheck 244
16 IEEE 802.1X COMMANDS 246
dot1x configuration 246
dot1x mode 248
dot1x state 248
dot1x authenticate 249
dot1x reauthentication 250
dot1x period 251
dot1x timeout 251
dot1x clients 251
dot1x agetime 252
dot1x holdtime 253
dot1x statistics 253
17 IGMP COMMANDS 255
igmp configuration 255
igmp mode 257

C ONTENTS
– 12 –
igmp state 257
igmp querier 258
igmp fastleave 259
igmp leave proxy 260
igmp throttling 260
igmp filtering 261
igmp router 262
igmp flooding 262
igmp groups 263
igmp status 263
18 LLDP COMMANDS 264
lldp configuration 264
lldp mode 265
lldp optional_tlv 265
lldp interval 266
lldp hold 267
lldp delay 267
lldp reinit 268
lldp info 268
lldp statistics 269
lldp cdp_aware 270
19 MAC COMMANDS 271
mac configuration 271
mac add 272
mac delete 272
mac lookup 273
mac agetime 273
mac learning 273
mac dump 274
mac statistics 275
mac flush 275
20 VLAN COMMANDS 276
vlan configuration 276
vlan aware 277
vlan pvid 278
vlan frametype 278

C ONTENTS
– 13 –
vlan ingressfilter 279
vlan qinq 279
vlan add 280
vlan delete 280
vlan lookup 281
21 PVLAN COMMANDS 282
pvlan configuration 282
pvlan add 283
pvlan delete 283
pvlan lookup 284
pvlan isolate 284
22 QOS COMMANDS 285
qos configuration 286
qos default 286
qos tagprio 287
qos qcl port 287
qos qcl add 288
qos qcl delete 289
qos qcl lookup 290
qos mode 290
qos weight 291
qos rate limiter 291
qos shaper 292
qos storm unicast 293
qos storm multicast 293
qos storm broadcast 294
qos dscp remarking 294
qos dscp queue mapping 295
23 ACL COMMANDS 296
acl configuration 296
acl action 297
acl policy 298
acl rate 298
acl add 299
acl delete 302
acl lookup 302

C ONTENTS
– 14 –
acl clear 303
24 MIRROR COMMANDS 304
mirror configuration 304
mirror port 304
mirror mode 305
25 CONFIG COMMANDS 306
config save 306
config load 307
26 SNMP COMMANDS 308
snmp configuration 309
snmp mode 310
snmp version 311
snmp read community 311
snmp write community 312
snmp trap mode 312
snmp trap version 313
snmp trap community 313
snmp trap destination 314
snmp trap ipv6 destination 314
snmp trap authentication failure 314
snmp trap link-up 315
snmp trap inform mode 315
snmp trap inform timeout 316
snmp trap inform retry times 316
snmp trap probe security engine id 317
snmp trap security engine id 317
snmp trap security name 318
snmp engine id 318
snmp community add 319
snmp community delete 319
snmp community lookup 320
snmp user add 320
snmp user delete 321
snmp user changekey 322
snmp user lookup 322
snmp group add 323

C ONTENTS
– 15 –
snmp group delete 324
snmp group lookup 324
snmp view add 325
snmp view delete 325
snmp view lookup 326
snmp access add 326
snmp access delete 327
snmp access lookup 327
27 HTTPS COMMANDS 329
https configuration 329
https mode 329
https redirect 330
28 SSH COMMANDS 332
ssh configuration 332
ssh mode 332
29 UPNP COMMANDS 334
upnp configuration 334
upnp mode 334
upnp ttl 335
upnp advertising duration 336
30 DHCP COMMANDS 337
dhcp relay configuration 337
dhcp relay mode 337
dhcp relay server 338
dhcp relay information mode 338
dhcp relay information policy 339
dhcp relay statistics 339
31 FIRMWARE COMMANDS 341
firmware load 341
firmware ipv6 load 342
SECTION IV APPENDICES 344
ASOFTWARE SPECIFICATIONS 345
Software Features 345
Management Features 346

C ONTENTS
– 16 –
Standards 347
Management Information Bases 347
BTROUBLESHOOTING 349
Problems Accessing the Management Interface 349
Using System Logs 350
GLOSSARY 351
INDEX 358

– 17 –
FIGURES
Figure 1: Home Page 45
Figure 2: Front Panel Indicators 46
Figure 3: System Information Configuration 51
Figure 4: IP & Time Configuration 53
Figure 5: IPv6 & Time Configuration 55
Figure 6: System Password 56
Figure 7: Access Management Configuration 57
Figure 8: Port Configuration 59
Figure 9: Authentication Configuration 63
Figure 10: Static Trunk Configuration 67
Figure 11: LACP Port Configuration 70
Figure 12: RSTP System Configuration 73
Figure 13: RSTP Port Configuration 75
Figure 14: Port Security Configuration 81
Figure 15: HTTPS Configuration 82
Figure 16: SSH Configuration 84
Figure 17: IGMP Snooping Configuration 88
Figure 18: IGMP Snooping Port Group Filtering Configuration 89
Figure 19: LLDP Configuration 92
Figure 20: MAC Address Table Configuration 94
Figure 21: VLAN Membership Configuration 96
Figure 22: VLAN Port Configuration 98
Figure 23: Private VLAN Membership Configuration 99
Figure 24: Port Isolation Configuration 100
Figure 25: Port QoS Configuration 102
Figure 26: DSCP Remarking Configuration 104
Figure 27: QoS Control List Configuration 106
Figure 28: Rate Limit Configuration 108
Figure 29: Storm Control Configuration 110
Figure 30: ACL Port Configuration 111
Figure 31: ACL Rate Limiter Configuration 112

F IGURES
– 18 –
Figure 32: Access Control List Configuration 120
Figure 33: Mirror Configuration 121
Figure 34: SNMP System Configuration 126
Figure 35: SNMPv3 Communities Configuration 127
Figure 36: SNMPv3 Users Configuration 129
Figure 37: SNMPv3 Group Configuration 130
Figure 38: SNMPv3 View Configuration 131
Figure 39: SNMPv3 Access Configuration 132
Figure 40: UPnP Configuration 134
Figure 41: DHCP Relay Configuration 135
Figure 42: System Information 137
Figure 43: System Log Information 138
Figure 44: Detailed System Log Information 139
Figure 45: Access Management Statistics 140
Figure 46: Port State Overview 140
Figure 47: Port Statistics Overview 141
Figure 48: Queuing Counters 142
Figure 49: Detailed Port Statistics 144
Figure 50: RADIUS Overview 145
Figure 51: RADIUS Details 149
Figure 52: LACP System Status 150
Figure 53: LACP Port Status 151
Figure 54: LACP Port Statistics 152
Figure 55: Spanning Tree Bridge Status 154
Figure 56: Spanning Tree Port Status 155
Figure 57: Spanning Tree Port Statistics 156
Figure 58: Port Security Status 157
Figure 59: Port Security Statistics 160
Figure 60: IGMP Snooping Status 161
Figure 61: LLDP Neighbor Information 163
Figure 62: LLDP Port Statistics 164
Figure 63: DHCP Relay Statistics 166
Figure 64: MAC Address Table 167
Figure 65: ICMP Ping 169
Figure 66: VeriPHY Cable Diagnostics 170
Figure 67: Reset Device 171

F IGURES
– 19 –
Figure 68: Factory Defaults 172
Figure 69: Software Upload 172
Figure 70: Register Product 173
Figure 71: Configuration Save 174
Figure 72: Configuration Upload 174

F IGURES
– 20 –