LevelOne GEL-5261 User manual

GEL-5261
52-Port L2 Managed Gigabit Switch
User Manual
V1.0
Digital Data Communications Asia Co., Ltd.
http://www.level1.com

User Manual
GEL-5261
L2 Managed Gigabit Ethernet Switch with
48 10/100/1000BASE-T (RJ-45) Ports
and 4 Gigabit SFP Ports
E062017/ST-R01

How to Use This Guide
–3 –
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who ShouldRead
this Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How this Guide
is Organized
This guide provides detailed information about the switch’s key features. It also
describes the switch’s web browser interface. For information on the command line
interface refer to the CLI Reference Guide.
The guide includes these sections:
◆ Section I “Getting Started” —Includes an introduction to switch management,
and the basic settings required to access the management interface.
◆ Section II “Web Configuration” —Includes all management options available
through the web browser interface.
◆ Section III “Appendices” —Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the web browser.
For information on how to manage the switch through the command line interface,
see the following guide:
CLI Reference Guide
Note: For a description of how to initialize the switch for management access via
the CLI, web interface or SNMP, refer to “Initial Switch Configuration” in the CLI
Reference Guide.

How to Use ThisGuide
–4 –
For information on how to install the switch, see the following guide:
Quick Start Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Revision History This section summarizes the changes in each revision of this guide.
Revision
Date
Change Description
v1.1.10a.171
01/2017
Initial release

–5 –
Contents
How to Use This Guide
3
Contents
5
Figures
15
Tables
27
Section I
Getting Started
29
1
Introduction
31
Key Features
31
Description of Software Features
33
Address Resolution Protocol
37
System Defaults
38
Section II
Web Configuration
41
2
Using the Web Interface
43
Connecting to the Web Interface
43
Navigating the Web Browser Interface
44
Dashboard
44
Configuration Options
46
Panel Display
46
Main Menu
47
3
Basic Management Tasks
63
Displaying System Information
64
Displaying Hardware/Software Versions
65
Configuring Support for Jumbo Frames
66
Displaying Bridge Extension Capabilities
67

–6 –
Contents
Managing System Files 69
Copying Files via FTP/SFTP/TFTP or HTTP 69
Saving the Running Configuration to a Local File 71
Setting the Start-up File 72
Showing System Files 73
Automatic Operation Code Upgrade 73
Setting the System Clock 77
Setting the Time Manually 78
Setting the SNTP Polling Interval 79
Configuring NTP 79
Configuring Time Servers 80
Setting the Time Zone 84
Configuring Summer Time 85
Configuring the Console Port 87
Configuring Telnet Settings 89
Displaying CPU Utilization 90
Configuring CPU Guard 91
Displaying Memory Utilization 92
Resetting the System 93
4 Interface Configuration 97
Port Configuration 98
Configuring by Port List 98
Configuring by Port Range 100
Displaying Connection Status 101
Showing Port or Trunk Statistics 102
Displaying Statistical History 106
Displaying Transceiver Data 110
Configuring Transceiver Thresholds 111
Performing Cable Diagnostics 113
Trunk Configuration 115
Configuring a Static Trunk 116
Configuring a Dynamic Trunk 119
Displaying LACP Port Counters 125
Displaying LACP Settings and Status for the Local Side 126

–7 –
Contents
Displaying LACP Settings and Status for the Remote Side 128
Configuring Load Balancing 129
Saving Power 131
Configuring Local Port Mirroring 132
Configuring Remote Port Mirroring 134
Sampling Traffic Flows 138
Configuring sFlow Receiver Settings 139
Configuring an sFlow Polling Instance 141
Traffic Segmentation 143
Enabling Traffic Segmentation 143
Configuring Uplink and Downlink Ports 144
5 VLAN Configuration 147
IEEE 802.1Q VLANs 147
Configuring VLAN Groups 149
Adding Static Members to VLANs 152
IEEE 802.1Q Tunneling 156
Enabling QinQ Tunneling on the Switch 160
Creating CVLAN to SPVLAN Mapping Entries 161
Adding an Interface to a QinQ Tunnel 163
Protocol VLANs 164
Configuring Protocol VLAN Groups 165
Mapping Protocol Groups to Interfaces 166
Configuring MAC-based VLANs 168
6 Address Table Settings 171
Displaying the Dynamic Address Table 171
Clearing the Dynamic Address Table 172
Changing the Aging Time 173
Configuring MAC Address Learning 174
Setting Static Addresses 176
Issuing MAC Address Traps 178
7 Spanning Tree Algorithm 181
Overview 181
Configuring Loopback Detection 183

–8 –
Contents
Configuring Global Settings for STA 185
Displaying Global Settings for STA 190
Configuring Interface Settings for STA 191
Displaying Interface Settings for STA 196
Configuring Multiple Spanning Trees 199
Configuring Interface Settings for MSTP 203
8 Congestion Control 205
Rate Limiting 205
Storm Control 206
9 Class of Service 209
Layer 2 Queue Settings 209
Setting the Default Priority for Interfaces 209
Selecting the Queue Mode 210
Layer 3/4 Priority Settings 213
Setting Priority Processing to DSCP or CoS 214
Mapping CoS Priorities to Per-hop Behavior 215
Mapping DSCP Priorities to Per-hop Behavior 216
10 Quality of Service 219
Overview 219
Configuring a Class Map 220
Creating QoS Policies 223
Attaching a Policy Map to a Port 226
11 VoIP Traffic Configuration 229
Overview 229
Configuring VoIP Traffic 230
Configuring Telephony OUI 231
Configuring VoIP Traffic Ports 232
12 Security Measures 235
AAA (Authentication, Authorization and Accounting) 236
Configuring Local/Remote Logon Authentication 237
Configuring Remote Logon Authentication Servers 238
Configuring AAA Accounting 243

–9 –
Contents
Configuring AAA Authorization 249
Configuring User Accounts 253
Web Authentication 255
Configuring Global Settings for Web Authentication 255
Configuring Interface Settings for Web Authentication 256
Network Access (MAC Address Authentication) 257
Configuring Global Settings forNetwork Access 260
Configuring Network Access for Ports 261
Configuring a MAC Address Filter 263
Displaying Secure MAC Address Information 264
Configuring HTTPS 266
Configuring Global Settings for HTTPS 266
Replacing the Default Secure-site Certificate 268
Configuring the Secure Shell 270
Configuring the SSH Server 272
Generating the Host Key Pair 273
Importing User Public Keys 275
Access Control Lists 277
Showing TCAM Utilization 278
Setting the ACL Name and Type 280
Configuring a Standard IPv4 ACL 282
Configuring an Extended IPv4 ACL 283
Configuring a Standard IPv6 ACL 286
Configuring an Extended IPv6 ACL 287
Configuring a MAC ACL 290
Configuring an ARP ACL 292
Binding a Port to an Access Control List 293
Showing ACL Hardware Counters 294
Filtering IP Addresses for Management Access 296
Configuring Port Security 298
Configuring 802.1X Port Authentication 300
Configuring 802.1X Global Settings 302
Configuring Port Authenticator Settings for 802.1X 302
Displaying 802.1X Statistics 306
DoS Protection 308

–10 –
Contents
DHCP Snooping 310
DHCP Snooping Global Configuration 313
DHCP Snooping VLAN Configuration 315
Configuring Ports for DHCP Snooping 316
Displaying DHCP Snooping Binding Information 317
IPv4 Source Guard 318
Configuring Ports for IPv4 Source Guard 318
Configuring Static Bindings for IPv4 Source Guard 320
Displaying Information for Dynamic IPv4 Source Guard Bindings 323
ARP Inspection 324
Configuring Global Settings for ARP Inspection 325
Configuring VLAN Settings for ARP Inspection 327
Configuring Interface Settings for ARP Inspection 329
Displaying ARP Inspection Statistics 330
Displaying the ARP Inspection Log 331
13 Basic Administration Protocols 333
Configuring Event Logging 334
System Log Configuration 334
Remote Log Configuration 336
Sending Simple Mail Transfer Protocol Alerts 337
Link Layer Discovery Protocol 339
Setting LLDP Timing Attributes 339
Configuring LLDP Interface Attributes 341
Configuring LLDP Interface Civic-Address 345
Displaying LLDP Local Device Information 347
Displaying LLDP Remote Device Information 351
Displaying Device Statistics 359
Simple Network Management Protocol 362
Configuring Global Settings for SNMP 364
Setting the Local Engine ID 365
Specifying a Remote Engine ID 366
Setting SNMPv3 Views 367
Configuring SNMPv3 Groups 370
Setting Community Access Strings 375