LevelOne GSW-4876 User manual

LevelOne
User Manual
GSW-4876
48 GE + 2 GE SFP Web Smart Switch
Ver. 1.0

M ANAGEMENT G UIDE
GSW-4876 WEB SMART SWITCH
Layer 2 Gigabit Ethernet Switch
with 48 10/100/1000BASE-T Ports (RJ-45)
and 2 Gigabit Combination (RJ-45/SFP) Ports
GSW-4876
E082012/ST-R01

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
AUGUST 2012 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.0.1.

A BOUT T HIS G UIDE
– 6 –

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 13
TABLES 19
SECTION I GETTING STARTED 21
1INTRODUCTION 23
Key Features 23
Description of Software Features 24
System Defaults 28
2INITIAL SWITCH CONFIGURATION 31
SECTION II WEB CONFIGURATION 33
3USING THE WEB INTERFACE 35
Navigating the Web Browser Interface 35
Home Page 35
Configuration Options 36
Panel Display 36
Main Menu 36
4CONFIGURING THE SWITCH 45
Configuring System Information 45
Setting an IP Address 46
Setting an IPv4 Address 46
Setting an IPv6 Address 48
Configuring NTP Service 50
Configuring the Time Zone and Daylight Savings Time 51
Configuring Remote Log Messages 53

C ONTENTS
– 8 –
Configuring Power Reduction 55
Reducing Power to Idle Queue Circuits 55
Configuring Port Connections 56
Configuring Security 58
Configuring User Accounts 58
Configuring User Privilege Levels 60
Configuring The Authentication Method For Management Access 62
Configuring SSH 65
Configuring HTTPS 66
Filtering IP Addresses for Management Access 67
Using Simple Network Management Protocol 68
Remote Monitoring 79
Configuring Port Limit Controls 84
Configuring Authentication Through Network Access Servers 87
Filtering Traffic with Access Control Lists 98
Configuring DHCP Snooping 108
Configuring DHCP Relay and Option 82 Information 111
Configuring IP Source Guard 112
Configuring ARP Inspection 116
Specifying Authentication Servers 119
Creating Trunk Groups 121
Configuring Static Trunks 122
Configuring LACP 124
Configuring the Spanning Tree Algorithm 126
Configuring Global Settings for STA 128
Configuring Multiple Spanning Trees 132
Configuring Spanning Tree Bridge Priorities 134
Configuring
STP/RSTP/CIST Interfaces 135
Configuring MIST Interfaces 138
Multicast VLAN Registration 139
Configuring General MVR Settings 140
Configuring MVR Channel Settings 143
IGMP Snooping 144
Configuring Global and Port-Related Settings for IGMP Snooping 145
Configuring VLAN Settings for IGMP Snooping and Query 148
Configuring IGMP Filtering 150

C ONTENTS
– 9 –
MLD Snooping 151
Configuring Global and Port-Related Settings for MLD Snooping 151
Configuring VLAN Settings for MLD Snooping and Query 154
Configuring MLD Filtering 157
Link Layer Discovery Protocol 157
Configuring LLDP Timing and TLVs 158
Configuring LLDP-MED TLVs 161
Configuring the MAC Address Table 166
IEEE 802.1Q VLANs 168
Assigning Ports to VLANs 169
Configuring VLAN Attributes for Port Members 170
Using Port Isolation 173
Configuring MAC-based VLANs 173
Protocol VLANs 175
Configuring Protocol VLAN Groups 175
Mapping Protocol Groups to Ports 177
Configuring IP Subnet-based VLANs 178
Managing VoIP Traffic 179
Configuring VoIP Traffic 180
Configuring Telephony OUI 182
Quality of Service 183
Configuring Port Classification 184
Configuring Port Policiers 185
Configuring Egress Port Scheduler 186
Configuring Egress Port Shaper 188
Configuring Port Remarking Mode 189
Configuring Port DSCP Translation and Rewriting 192
Configuring DSCP-based QoS Ingress Classification 193
Configuring DSCP Translation 194
Configuring DSCP Classification 195
Configuring QoS Control Lists 196
Configuring Storm Control 200
Configuring Random Early Detection 201
Using Congestion Management 203
Configuring Local Port Mirroring 204
Configuring Remote Port Mirroring 205

C ONTENTS
– 10 –
Configuring UPnP 210
Configuring sFlow 211
5MONITORING THE SWITCH 215
Displaying Basic Information About the System 215
Displaying System Information 215
Displaying CPU Utilization 216
Displaying Log Messages 217
Displaying Log Details 219
Displaying Information About Ports 219
Displaying Port Status On the Front Panel 219
Displaying an Overview of Port Statistics 220
Displaying QoS Statistics 220
Displaying QCL Status 221
Displaying Detailed Port Statistics 222
Displaying Information About Security Settings 225
Displaying Access Management Statistics 225
Displaying Information About Switch Settings for Port Security 226
Displaying Information About Learned MAC Addresses 228
Displaying Port Status for Authentication Services 229
Displaying Port Statistics for 802.1X or Remote Authentication Service
230
Displaying ACL Status 234
Displaying Statistics for DHCP Snooping 236
Displaying DHCP Relay Statistics 237
Displaying MAC Address Bindings for ARP Packets 238
Displaying Entries in the IP Source Guard Table 239
Displaying Information on Authentication Servers 240
Displaying a List of Authentication Servers 240
Displaying Statistics for Configured Authentication Servers 241
Displaying Information on RMON 245
Displaying RMON Statistics 245
Displaying RMON Historical Samples 246
Displaying RMON Alarm Settings 247
Displaying RMON Event Settings 248
Displaying Information on LACP 249
Displaying an Overview of LACP Groups 249
Displaying LACP Port Status 249

C ONTENTS
– 11 –
Displaying LACP Port Statistics 250
Displaying Information on the Spanning Tree 251
Displaying Bridge Status for STA 251
Displaying Port Status for STA 254
Displaying Port Statistics for STA 255
Displaying MVR Information 256
Displaying MVR Statistics 256
Displaying MVR Group Information 257
Displaying MVR SFM Information 258
Showing IGMP Snooping Information 259
Showing IGMP Snooping Status 259
Showing IGMP Snooping Group Information 260
Showing IPv4 SFM Information 261
Showing MLD Snooping Information 262
Showing MLD Snooping Status 262
Showing MLD Snooping Group Information 263
Showing IPv6 SFM Information 264
Displaying LLDP Information 265
Displaying LLDP Neighbor Information 265
Displaying LLDP-MED Neighbor Information 266
Displaying LLDP Neighbor EEE Information 268
Displaying LLDP Port Statistics 270
Displaying the MAC Address Table 271
Displaying Information About VLANs 272
VLAN Membership 272
VLAN Port Status 273
Displaying Information About MAC-based VLANs 275
Displaying Information About Flow Sampling 276
6PERFORMING BASIC DIAGNOSTICS 279
Pinging an IPv4 or IPv6 Address 279
Running Cable Diagnostics 281
7PERFORMING SYSTEM MAINTENANCE 283
Restarting the Switch 283
Restoring Factory Defaults 284
Upgrading Firmware 284
Activating the Alternate Image 285

C ONTENTS
– 12 –
Managing Configuration Files 286
Saving Configuration Settings 286
Restoring Configuration Settings 287
SECTION III APPENDICES 289
ASOFTWARE SPECIFICATIONS 291
Software Features 291
Management Features 292
Standards 293
Management Information Bases 293
BTROUBLESHOOTING 295
Problems Accessing the Management Interface 295
Using System Logs 296
CLICENSE INFORMATION 297
The GNU General Public License 297
GLOSSARY 301
INDEX 309

– 13 –
FIGURES
Figure 1: Home Page 35
Figure 2: Front Panel Indicators 36
Figure 3: System Information Configuration 45
Figure 4: IP Configuration 47
Figure 5: IPv6 Configuration 49
Figure 6: NTP Configuration 50
Figure 7: Time Zone and Daylight Savings Time Configuration 53
Figure 8: Configuring Settings for Remote Logging of Error Messages 54
Figure 9: Configuring EEE Power Reduction 56
Figure 10: Port Configuration 58
Figure 11: Showing User Accounts 60
Figure 12: Configuring User Accounts 60
Figure 13: Configuring Privilege Levels 62
Figure 14: Authentication Server Operation 63
Figure 15: Authentication Method for Management Access 64
Figure 16: SSH Configuration 65
Figure 17: HTTPS Configuration 67
Figure 18: Access Management Configuration 68
Figure 19: SNMP System Configuration 73
Figure 20: SNMPv3 Community Configuration 74
Figure 21: SNMPv3 User Configuration 76
Figure 22: SNMPv3 Group Configuration 77
Figure 23: SNMPv3 View Configuration 78
Figure 24: SNMPv3 Access Configuration 79
Figure 25: RMON Statistics Configuration 80
Figure 26: RMON History Configuration 81
Figure 27: RMON Alarm Configuration 83
Figure 28: RMON Event Configuration 84
Figure 29: Port Security Limit Control Configuration 87
Figure 30: Using Port Security 87
Figure 31: Network Access Server Configuration 98

F IGURES
– 14 –
Figure 32: ACL Port Configuration 100
Figure 33: ACL Rate Limiter Configuration 101
Figure 34: Access Control List Configuration 108
Figure 35: DHCP Snooping Configuration 110
Figure 36: DHCP Relay Configuration 112
Figure 37: Configuring Global and Port-based Settings for IP Source Guard 114
Figure 38: Configuring Static Bindings for IP Source Guard 115
Figure 39: Configuring Global and Port Settings for ARP Inspection 117
Figure 40: Configuring Static Bindings for ARP Inspection 118
Figure 41: Authentication Configuration 120
Figure 42: Static Trunk Configuration 124
Figure 43: LACP Port Configuration 126
Figure 44: STP Root Ports and Designated Ports 127
Figure 45: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 127
Figure 46: Common Internal Spanning Tree, Common Spanning Tree, Internal
Spanning Tree 128
Figure 47: STA Bridge Configuration 131
Figure 48: Adding a VLAN to an MST Instance 133
Figure 49: Configuring STA Bridge Priorities 134
Figure 50: STP/RSTP/CIST Port Configuration 138
Figure 51: MSTI Port Configuration 139
Figure 52: MVR Concept 140
Figure 53: Configuring General MVR Settings 143
Figure 54: Configuring MVR Channel Settings 144
Figure 55: Configuring Global and Port-related Settings for IGMP Snooping 148
Figure 56: Configuring VLAN Settings for IGMP Snooping and Query 150
Figure 57: IGMP Snooping Port Group Filtering Configuration 151
Figure 58: Configuring Global and Port-related Settings for MLD Snooping 154
Figure 59: Configuring VLAN Settings for MLD Snooping and Query 156
Figure 60: MLD Snooping Port Group Filtering Configuration 157
Figure 61: LLDP Configuration 160
Figure 62: LLDP-MED Configuration 166
Figure 63: MAC Address Table Configuration 168
Figure 64: VLAN Membership Configuration 170
Figure 65: VLAN Port Configuration 172
Figure 66: Port Isolation Configuration 173
Figure 67: Configuring MAC-Based VLANs 174

F IGURES
– 15 –
Figure 68: Configuring Protocol VLANs 176
Figure 69: Assigning Ports to Protocol VLANs 178
Figure 70: Assigning Ports to an IP Subnet-based VLAN 179
Figure 71: Configuring Global and Port Settings for a Voice VLAN 182
Figure 72: Configuring an OUI Telephony List 183
Figure 73: Configuring Ingress Port QoS Classification 184
Figure 74: Configuring Ingress Port Policing 185
Figure 75: Displaying Egress Port Schedulers 187
Figure 76: Configuring Egress Port Schedulers and Shapers 188
Figure 77: Displaying Egress Port Shapers 189
Figure 78: Displaying Port Tag Remarking Mode 190
Figure 79: Configuring Port Tag Remarking Mode 191
Figure 80: Configuring Port DSCP Translation and Rewriting 193
Figure 81: Configuring DSCP-based QoS Ingress Classification 194
Figure 82: Configuring DSCP Translation and Re-mapping 195
Figure 83: Mapping DSCP to CoS Values 196
Figure 84: QoS Control List Configuration 200
Figure 85: Storm Control Configuration 201
Figure 86: WRED Drop Probability 202
Figure 87: Weighted Random Early Detection Configuration 203
Figure 88: Congestion Management 204
Figure 89: Mirror Configuration 205
Figure 90: Configuring Remote Port Mirroring 206
Figure 91: Mirror Configuration (Source) 208
Figure 92: Mirror Configuration (Intermediate) 209
Figure 93: Mirror Configuration (Destination) 209
Figure 94: UPnP Configuration 211
Figure 95: sFlow Configuration 214
Figure 96: System Information 216
Figure 97: CPU Load 217
Figure 98: System Log Information 218
Figure 99: Detailed System Log Information 219
Figure 100: Port State Overview 219
Figure 101: Port Statistics Overview 220
Figure 102: Queueing Counters 221
Figure 103: QoS Control List Status 222

F IGURES
– 16 –
Figure 104: Detailed Port Statistics 224
Figure 105: Access Management Statistics 225
Figure 106: Port Security Switch Status 227
Figure 107: Port Security Port Status 228
Figure 108: Network Access Server Switch Status 230
Figure 109: NAS Statistics for Specified Port 234
Figure 110: ACL Status 235
Figure 111: DHCP Snooping Statistics 237
Figure 112: DHCP Relay Statistics 238
Figure 113: Dynamic ARP Inspection Table 239
Figure 114: Dynamic IP Source Guard Table 239
Figure 115: RADIUS Overview 240
Figure 116: RADIUS Details 244
Figure 117: RMON Statistics 246
Figure 118: RMON History Overview 247
Figure 119: RMON Alarm Overview 248
Figure 120: RMON Event Overview 248
Figure 121: LACP System Status 249
Figure 122: LACP Port Status 250
Figure 123: LACP Port Statistics 251
Figure 124: Spanning Tree Bridge Status 253
Figure 125: Spanning Tree Detailed Bridge Status 254
Figure 126: Spanning Tree Port Status 255
Figure 127: Spanning Tree Port Statistics 256
Figure 128: MVR Statistics 257
Figure 129: MVR Group Information 258
Figure 130: MVR SFM Information 258
Figure 131: IGMP Snooping Status 260
Figure 132: IGMP Snooping Group Information 260
Figure 133: IPv4 SFM Information 261
Figure 134: MLD Snooping Status 263
Figure 135: MLD Snooping Group Information 263
Figure 136: IPv6 SFM Information 264
Figure 137: LLDP Neighbor Information 266
Figure 138: LLDP-MED Neighbor Information 268
Figure 139: LLDP Neighbor EEE Information 269

F IGURES
– 17 –
Figure 140: LLDP Port Statistics (no header) 271
Figure 141: MAC Address Table 272
Figure 142: Showing VLAN Members 273
Figure 143: Showing VLAN Port Status 274
Figure 144: Showing MAC-based VLAN Membership Status 275
Figure 145: Showing sFlow Statistics 277
Figure 146: ICMP Ping 280
Figure 147: VeriPHY Cable Diagnostics 281
Figure 148: Restart Device 283
Figure 149: Factory Defaults 284
Figure 150: Software Upload 285
Figure 151: Software Image Selection 285
Figure 152: Configuration Save 286
Figure 153: Configuration Upload 287

F IGURES
– 18 –

– 19 –
TABLES
Table 1: Key Features 23
Table 2: System Defaults 28
Table 3: Web Page Configuration Buttons 36
Table 4: Main Menu 36
Table 5: HTTPS System Support 66
Table 6: SNMP Security Models and Levels 69
Table 7: Dynamic QoS Profiles 91
Table 8: QCE Modification Buttons 102
Table 9: Recommended STA Path Cost Range 135
Table 10: Recommended STA Path Costs 136
Table 11: Default STA Path Costs 136
Table 12: QCE Modification Buttons 197
Table 13: System Capabilities 265
Table 14: Troubleshooting Chart 295

T ABLES
– 20 –