LevelOne GEP-5070 User manual

GEP-5070
48 GE PoE-Plus + 2 GE SFP L2 Managed Switch
User Manual
V1.0

U SER M ANUAL
GEP-5070
Layer 2 Gigabit Ethernet Switch
with 48 10/100/1000BASE-T PoE-Plus Ports (RJ-45)
and 2 Gigabit Ethernet SFP Ports
GEP-5070
E042013/ST-R01

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
APRIL 2012 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.0.4.

A BOUT T HIS G UIDE
– 6 –

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 13
TABLES 19
SECTION I GETTING STARTED 21
1INTRODUCTION 23
Key Features 23
Description of Software Features 24
System Defaults 28
2INITIAL SWITCH CONFIGURATION 31
SECTION II WEB CONFIGURATION 33
3USING THE WEB INTERFACE 35
Navigating the Web Browser Interface 35
Home Page 35
Configuration Options 36
Panel Display 36
Main Menu 36
4CONFIGURING THE SWITCH 45
Configuring System Information 45
Setting an IP Address 46
Setting an IPv4 Address 46
Setting an IPv6 Address 48
Configuring NTP Service 50
Configuring the Time Zone and Daylight Savings Time 51
Configuring Remote Log Messages 53

C ONTENTS
– 8 –
Configuring Power Reduction 54
Reducing Power to Idle Queue Circuits 54
Configuring Port Connections 55
Configuring Security 57
Configuring User Accounts 58
Configuring User Privilege Levels 60
Configuring The Authentication Method For Management Access 61
Configuring SSH 64
Configuring HTTPS 65
Filtering IP Addresses for Management Access 66
Using Simple Network Management Protocol 67
Remote Monitoring 77
Configuring Port Limit Controls 83
Configuring Authentication Through Network Access Servers 85
Filtering Traffic with Access Control Lists 96
Configuring DHCP Snooping 107
Configuring DHCP Relay and Option 82 Information 109
Configuring IP Source Guard 111
Configuring ARP Inspection 114
Specifying Authentication Servers 117
Creating Trunk Groups 119
Configuring Static Trunks 120
Configuring LACP 123
Configuring Loop Protection 125
Configuring the Spanning Tree Algorithm 127
Configuring Global Settings for STA 129
Configuring Multiple Spanning Trees 132
Configuring Spanning Tree Bridge Priorities 134
Configuring
STP/RSTP/CIST Interfaces 135
Configuring MIST Interfaces 138
Multicast VLAN Registration 140
Configuring General MVR Settings 140
Configuring MVR Channel Settings 143
IGMP Snooping 145
Configuring Global and Port-Related Settings for IGMP Snooping 145
Configuring VLAN Settings for IGMP Snooping and Query 149

C ONTENTS
– 9 –
Configuring IGMP Filtering 151
MLD Snooping 152
Configuring Global and Port-Related Settings for MLD Snooping 152
Configuring VLAN Settings for MLD Snooping and Query 155
Configuring MLD Filtering 158
Link Layer Discovery Protocol 158
Configuring LLDP Timing and TLVs 159
Configuring LLDP-MED TLVs 162
Power over Ethernet 167
Configuring the MAC Address Table 170
IEEE 802.1Q VLANs 172
Assigning Ports to VLANs 173
Configuring VLAN Attributes for Port Members 174
Using Port Isolation 177
Configuring MAC-based VLANs 177
Protocol VLANs 179
Configuring Protocol VLAN Groups 179
Mapping Protocol Groups to Ports 181
Configuring IP Subnet-based VLANs 182
Managing VoIP Traffic 183
Configuring VoIP Traffic 184
Configuring Telephony OUI 186
Quality of Service 187
Configuring Port Classification 188
Configuring Port Policiers 188
Configuring Egress Port Scheduler 189
Configuring Egress Port Shaper 192
Configuring Port Remarking Mode 193
Configuring Port DSCP Translation and Rewriting 195
Configuring DSCP-based QoS Ingress Classification 196
Configuring DSCP Translation 198
Configuring DSCP Classification 199
Configuring QoS Control Lists 199
Configuring Storm Control 204
Configuring WRED 205
Configuring Congestion Management 206

C ONTENTS
– 10 –
Configuring Local Port Mirroring 207
Configuring Remote Port Mirroring 208
Configuring UPnP 213
Configuring sFlow 214
5MONITORING THE SWITCH 219
Displaying Basic Information About the System 219
Displaying System Information 219
Displaying CPU Utilization 220
Displaying Log Messages 221
Displaying Log Details 223
Displaying Information About Ports 223
Displaying Port Status On the Front Panel 223
Displaying an Overview of Port Statistics 224
Displaying QoS Statistics 224
Displaying QCL Status 225
Displaying Detailed Port Statistics 226
Displaying Information About Security Settings 229
Displaying Access Management Statistics 229
Displaying Information About Switch Settings for Port Security 230
Displaying Information About Learned MAC Addresses 231
Displaying Port Status for Authentication Services 232
Displaying Port Statistics for 802.1X or Remote Authentication
Service 233
Displaying ACL Status 237
Displaying Statistics for DHCP Snooping 239
Displaying DHCP Relay Statistics 240
Displaying MAC Address Bindings for ARP Packets 241
Displaying Entries in the IP Source Guard Table 242
Displaying Information on Authentication Servers 243
Displaying a List of Authentication Servers 243
Displaying Statistics for Configured Authentication Servers 244
Displaying Information on RMON 247
Displaying RMON Statistics 247
Displaying RMON Historical Samples 249
Displaying RMON Alarm Settings 250
Displaying RMON Event Settings 251

C ONTENTS
– 11 –
Displaying Information on LACP 252
Displaying an Overview of LACP Groups 252
Displaying LACP Port Status 252
Displaying LACP Port Statistics 253
Displaying Information on Loop Protection 254
Displaying Information on the Spanning Tree 255
Displaying Bridge Status for STA 255
Displaying Port Status for STA 257
Displaying Port Statistics for STA 258
Displaying MVR Information 259
Displaying MVR Statistics 259
Displaying MVR Group Information 260
Displaying MVR SFM Information 261
Showing IGMP Snooping Information 262
Showing IGMP Snooping Status 262
Showing IGMP Snooping Group Information 263
Showing IPv4 SFM Information 263
Showing MLD Snooping Information 264
Showing MLD Snooping Status 264
Showing MLD Snooping Group Information 266
Showing IPv6 SFM Information 266
Displaying LLDP Information 267
Displaying LLDP Neighbor Information 267
Displaying LLDP-MED Neighbor Information 268
Displaying LLDP Neighbor PoE Information 271
Displaying LLDP Neighbor EEE Information 272
Displaying LLDP Port Statistics 273
Displaying PoE Status 275
Displaying the MAC Address Table 276
Displaying Information About VLANs 277
VLAN Membership 277
VLAN Port Status 278
Displaying Information About MAC-based VLANs 279
Displaying Information About Flow Sampling 280
6PERFORMING BASIC DIAGNOSTICS 283
Pinging an IPv4 or IPv6 Address 283

C ONTENTS
– 12 –
Running Cable Diagnostics 285
7PERFORMING SYSTEM MAINTENANCE 287
Restarting the Switch 287
Restoring Factory Defaults 288
Upgrading Firmware 288
Activating the Alternate Image 289
Managing Configuration Files 290
Saving Configuration Settings 290
Restoring Configuration Settings 290
SECTION III APPENDICES 293
ASOFTWARE SPECIFICATIONS 295
Software Features 295
Management Features 296
Standards 297
Management Information Bases 298
BTROUBLESHOOTING 299
Problems Accessing the Management Interface 299
Using System Logs 300
CLICENSE INFORMATION 301
The GNU General Public License 301
GLOSSARY 305
INDEX 313

– 13 –
FIGURES
Figure 1: Home Page 35
Figure 2: Front Panel Indicators 36
Figure 3: System Information Configuration 45
Figure 4: IP Configuration 47
Figure 5: IPv6 Configuration 49
Figure 6: NTP Configuration 50
Figure 7: Time Zone and Daylight Savings Time Configuration 52
Figure 8: Configuring Settings for Remote Logging of Error Messages 53
Figure 9: Configuring EEE Power Reduction 55
Figure 10: Port Configuration 57
Figure 11: Showing User Accounts 59
Figure 12: Configuring User Accounts 59
Figure 13: Configuring Privilege Levels 61
Figure 14: Authentication Server Operation 62
Figure 15: Authentication Method for Management Access 63
Figure 16: SSH Configuration 64
Figure 17: HTTPS Configuration 66
Figure 18: Access Management Configuration 67
Figure 19: SNMP System Configuration 71
Figure 20: SNMPv3 Community Configuration 72
Figure 21: SNMPv3 User Configuration 74
Figure 22: SNMPv3 Group Configuration 75
Figure 23: SNMPv3 View Configuration 76
Figure 24: SNMPv3 Access Configuration 77
Figure 25: RMON Statistics Configuration 78
Figure 26: RMON History Configuration 79
Figure 27: RMON Alarm Configuration 81
Figure 28: RMON Event Configuration 83
Figure 29: Port Limit Control Configuration 85
Figure 30: Using Port Security 86
Figure 31: Network Access Server Configuration 96

F IGURES
– 14 –
Figure 32: ACL Port Configuration 98
Figure 33: ACL Rate Limiter Configuration 99
Figure 34: Access Control List Configuration 106
Figure 35: DHCP Snooping Configuration 109
Figure 36: DHCP Relay Configuration 110
Figure 37: Configuring Global and Port-based Settings for IP Source Guard 113
Figure 38: Configuring Static Bindings for IP Source Guard 114
Figure 39: Configuring Global and Port Settings for ARP Inspection 116
Figure 40: Configuring Static Bindings for ARP Inspection 117
Figure 41: Authentication Configuration 119
Figure 42: Static Trunk Configuration 122
Figure 43: LACP Port Configuration 125
Figure 44: Loop Protection Configuration 126
Figure 45: STP Root Ports and Designated Ports 127
Figure 46: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 128
Figure 47: Common Internal Spanning Tree, Common Spanning Tree, Internal
Spanning Tree 128
Figure 48: STA Bridge Configuration 132
Figure 49: Adding a VLAN to an MST Instance 134
Figure 50: Configuring STA Bridge Priorities 135
Figure 51: STP/RSTP/CIST Port Configuration 138
Figure 52: MSTI Port Configuration 139
Figure 53: MVR Concept 140
Figure 54: Configuring General MVR Settings 143
Figure 55: Configuring MVR Channel Settings 145
Figure 56: Configuring Global and Port-related Settings for IGMP Snooping 149
Figure 57: Configuring VLAN Settings for IGMP Snooping and Query 151
Figure 58: IGMP Snooping Port Group Filtering Configuration 152
Figure 59: Configuring Global and Port-related Settings for MLD Snooping 155
Figure 60: Configuring VLAN Settings for MLD Snooping and Query 157
Figure 61: MLD Snooping Port Group Filtering Configuration 158
Figure 62: LLDP Configuration 161
Figure 63: LLDP-MED Configuration 167
Figure 64: Configuring PoE Settings 170
Figure 65: MAC Address Table Configuration 172
Figure 66: VLAN Membership Configuration 174
Figure 67: VLAN Port Configuration 176

F IGURES
– 15 –
Figure 68: Port Isolation Configuration 177
Figure 69: Configuring MAC-Based VLANs 178
Figure 70: Configuring Protocol VLANs 180
Figure 71: Assigning Ports to Protocol VLANs 182
Figure 72: Assigning Ports to an IP Subnet-based VLAN 183
Figure 73: Configuring Global and Port Settings for a Voice VLAN 186
Figure 74: Configuring an OUI Telephony List 187
Figure 75: Configuring Ingress Port QoS Classification 188
Figure 76: Configuring Ingress Port Policing 189
Figure 77: Displaying Egress Port Schedulers 191
Figure 78: Configuring Egress Port Schedulers and Shapers 192
Figure 79: Displaying Egress Port Shapers 193
Figure 80: Displaying Port Tag Remarking Mode 194
Figure 81: Configuring Port Tag Remarking Mode 195
Figure 82: Configuring Port DSCP Translation and Rewriting 196
Figure 83: Configuring DSCP-based QoS Ingress Classification 197
Figure 84: Configuring DSCP Translation and Re-mapping 198
Figure 85: Mapping DSCP to QoS 199
Figure 86: QoS Control List Configuration 203
Figure 87: Storm Control Configuration 204
Figure 88: WRED Configuration 206
Figure 89: Congestion Management Configuration 207
Figure 90: Mirror Configuration 208
Figure 91: Configuring Remote Port Mirroring 209
Figure 92: Mirror Configuration (Source) 211
Figure 93: Mirror Configuration (Intermediate) 212
Figure 94: Mirror Configuration (Destination) 213
Figure 95: UPnP Configuration 214
Figure 96: sFlow Configuration 217
Figure 97: System Information 220
Figure 98: CPU Load 221
Figure 99: System Log Information 222
Figure 100: Detailed System Log Information 223
Figure 101: Port State Overview 223
Figure 102: Port Statistics Overview 224
Figure 103: Queueing Counters 225

F IGURES
– 16 –
Figure 104: QoS Control List Status 226
Figure 105: Detailed Port Statistics 228
Figure 106: Access Management Statistics 229
Figure 107: Port Security Switch Status 231
Figure 108: Port Security Port Status 232
Figure 109: Network Access Server Switch Status 233
Figure 110: NAS Statistics for Specified Port 237
Figure 111: ACL Status 238
Figure 112: DHCP Snooping Statistics 240
Figure 113: DHCP Relay Statistics 241
Figure 114: Dynamic ARP Inspection Table 242
Figure 115: Dynamic IP Source Guard Table 242
Figure 116: RADIUS Overview 243
Figure 117: RADIUS Details 247
Figure 118: RMON Statistics 249
Figure 119: RMON History Overview 250
Figure 120: RMON Alarm Overview 251
Figure 121: RMON Event Overview 251
Figure 122: LACP System Status 252
Figure 123: LACP Port Status 253
Figure 124: LACP Port Statistics 254
Figure 125: Loop Protection Status 254
Figure 126: Spanning Tree Bridge Status 257
Figure 127: Spanning Tree Detailed Bridge Status 257
Figure 128: Spanning Tree Port Status 258
Figure 129: Spanning Tree Port Statistics 259
Figure 130: MVR Statistics 260
Figure 131: MVR Group Information 261
Figure 132: MVR SFM Information 261
Figure 133: IGMP Snooping Status 263
Figure 134: IGMP Snooping Group Information 263
Figure 135: IPv4 SFM Information 264
Figure 136: MLD Snooping Status 265
Figure 137: MLD Snooping Group Information 266
Figure 138: IPv6 SFM Information 267
Figure 139: LLDP Neighbor Information 268

F IGURES
– 17 –
Figure 140: LLDP-MED Neighbor Information 271
Figure 141: LLDP Neighbor PoE Information 272
Figure 142: LLDP Neighbor EEE Information 273
Figure 143: LLDP Port Statistics 275
Figure 144: Power over Ethernet Status 276
Figure 145: MAC Address Table 277
Figure 146: Showing VLAN Members 278
Figure 147: Showing VLAN Port Status 279
Figure 148: Showing MAC-based VLAN Membership Status 280
Figure 149: Showing sFlow Statistics 282
Figure 150: ICMP Ping 284
Figure 151: VeriPHY Cable Diagnostics 285
Figure 152: Restart Device 287
Figure 153: Factory Defaults 288
Figure 154: Software Upload 289
Figure 155: Software Image Selection 289
Figure 156: Configuration Save 290
Figure 157: Configuration Upload 291

F IGURES
– 18 –

– 19 –
TABLES
Table 1: Key Features 23
Table 2: System Defaults 28
Table 3: Web Page Configuration Buttons 36
Table 4: Main Menu 36
Table 5: HTTPS System Support 65
Table 6: SNMP Security Models and Levels 68
Table 7: Dynamic QoS Profiles 89
Table 8: QCE Modification Buttons 100
Table 9: Recommended STA Path Cost Range 136
Table 10: Recommended STA Path Costs 136
Table 11: Default STA Path Costs 136
Table 12: QCE Modification Buttons 200
Table 13: System Capabilities 268
Table 14: Troubleshooting Chart 299

T ABLES
– 20 –