LevelOne GTL-2881 User manual

GTL-2881
28-Port Stackable Layer 3 Lite Managed Gigabit Switch,
2 x SFP+, 2 x SFP+ (Optional Modules)
GTL-2882
28-Port Stackable Layer 3 Lite Managed Gigabit Fiber Switch,
2 x SFP+, 2 x SFP+ (Optional Modules)
User Manual
V1.0
Digital Data Communications Asia Co., Ltd.
http://www.level1.com

User Manual
GTL-2881
Layer Layer 3 Lite Stackable Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports
GTL-2882
Layer Layer 3 Lite Stackable Gigabit Ethernet Fiber Switch
with 22 SFP Ports,
2 10/100/1000BASE-T (RJ-45/SFP) Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports
E112016/ST-R01

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read
this Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How this Guide
is Organized
This guide provides detailed information about the switch’s key features. It also
describes the switch’s web browser interface. For information on the command line
interface refer to the CLI Reference Guide.
The guide includes these sections:
◆ Section I “Getting Started” — Includes an introduction to switch management,
and the basic settings required to access the management interface.
◆ Section II “Web Configuration” — Includes all management options available
through the web browser interface.
◆ Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the web browser.
For information on how to manage the switch through the command line interface,
see the following guide:
CLI Reference Guide
Note: For a description of how to initialize the switch for management access via
the CLI, web interface or SNMP, refer to “Initial Switch Configuration” in the CLI
Reference Guide.

How to Use This Guide
– 4 –
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Revision History This section summarizes the changes in each revision of this guide.
November 2016 Revision
This is the first version of this guide. This guide is valid for software release
v1.5.2.15.

– 5 –
Contents
How to Use This Guide 3
Contents 5
Figures 17
Tables 31
Section I Getting Started 33
1 Introduction 35
Key Features 35
Description of Software Features 37
IP Routing 41
Equal-cost Multipath Load Balancing 42
Address Resolution Protocol 42
Operation, Administration, and Maintenance 42
System Defaults 43
Section II Web Configuration 47
2 Using the Web Interface 49
Connecting to the Web Interface 49
Navigating the Web Browser Interface 50
Home Page 50
Configuration Options 51
Panel Display 51
Main Menu 52
3BasicManagementTasks 71
Displaying System Information 72

Contents
– 6 –
Displaying Hardware/Software Versions 73
Configuring Support for Jumbo Frames 74
Displaying Bridge Extension Capabilities 75
Managing System Files 77
Copying Files via FTP/TFTP or HTTP 77
Saving the Running Configuration to a Local File 79
Setting the Start-Up File 80
Showing System Files 81
Automatic Operation Code Upgrade 81
Setting the System Clock 85
Setting the Time Manually 86
Setting the SNTP Polling Interval 87
Configuring NTP 87
Configuring Time Servers 88
Setting the Time Zone 92
Configuring Summer Time 93
Configuring the Console Port 95
Configuring Telnet Settings 97
Displaying CPU Utilization 98
Displaying Memory Utilization 99
Stacking 100
Setting the Master Unit 100
Enabling Stacking Ports 101
Renumbering the Stack 102
Resetting the System 103
4 Interface Configuration 107
Port Configuration 108
Configuring by Port List 108
Configuring by Port Range 111
Displaying Connection Status 111
Configuring Local Port Mirroring 112
Configuring Remote Port Mirroring 114
Showing Port or Trunk Statistics 119
Displaying Transceiver Data 123

Contents
– 7 –
Configuring Transceiver Thresholds 124
Performing Cable Diagnostics 126
Trunk Configuration 128
Configuring a Static Trunk 129
Configuring a Dynamic Trunk 132
Displaying LACP Port Counters 138
Displaying LACP Settings and Status for the Local Side 139
Displaying LACP Settings and Status for the Remote Side 141
Configuring Load Balancing 142
Saving Power 144
Traffic Segmentation 146
Enabling Traffic Segmentation 146
Configuring Uplink and Downlink Ports 147
VLAN Trunking 149
5 VLAN Configuration 153
IEEE 802.1Q VLANs 153
Configuring VLAN Groups 156
Adding Static Members to VLANs 159
Configuring Dynamic VLAN Registration 163
IEEE 802.1Q Tunneling 166
Enabling QinQ Tunneling on the Switch 170
Creating CVLAN to SPVLAN Mapping Entries 172
Adding an Interface to a QinQ Tunnel 173
Protocol VLANs 175
Configuring Protocol VLAN Groups 175
Mapping Protocol Groups to Interfaces 177
Configuring IP Subnet VLANs 179
Configuring MAC-based VLANs 181
Configuring VLAN Mirroring 183
Configuring VLAN Translation 185
6 Address Table Settings 187
Configuring MAC Address Learning 187
Setting Static Addresses 189
Changing the Aging Time 191

Contents
– 8 –
Displaying the Dynamic Address Table 191
Clearing the Dynamic Address Table 193
Configuring MAC Address Mirroring 194
Issuing MAC Address Traps 195
7 Spanning Tree Algorithm 197
Overview 197
Configuring Loopback Detection 199
Configuring Global Settings for STA 201
Displaying Global Settings for STA 206
Configuring Interface Settings for STA 207
Displaying Interface Settings for STA 212
Configuring Multiple Spanning Trees 214
Configuring Interface Settings for MSTP 219
8 Congestion Control 221
Rate Limiting 221
Storm Control 222
Automatic Traffic Control 224
Setting the ATC Timers 225
Configuring ATC Thresholds and Responses 227
9 Class of Service 231
Layer 2 Queue Settings 231
Setting the Default Priority for Interfaces 231
Selecting the Queue Mode 232
Mapping CoS Values to Egress Queues 235
Layer 3/4 Priority Settings 238
Setting Priority Processing to DSCP or CoS 238
Mapping Ingress DSCP Values to Internal DSCP Values 239
Mapping CoS Priorities to Internal DSCP Values 242
10 Quality of Service 245
Overview 245
Configuring a Class Map 246
Creating QoS Policies 250
Attaching a Policy Map to a Port 259

Contents
– 9 –
11 VoIP Traffic Configuration 261
Overview 261
Configuring VoIP Traffic 262
Configuring Telephony OUI 263
Configuring VoIP Traffic Ports 264
12 Security Measures 267
AAA (Authentication, Authorization and Accounting) 268
Configuring Local/Remote Logon Authentication 269
Configuring Remote Logon Authentication Servers 270
Configuring AAA Accounting 275
Configuring AAA Authorization 281
Configuring User Accounts 284
Web Authentication 286
Configuring Global Settings for Web Authentication 287
Configuring Interface Settings for Web Authentication 288
Network Access (MAC Address Authentication) 289
Configuring Global Settings for Network Access 291
Configuring Network Access for Ports 292
Configuring Port Link Detection 294
Configuring a MAC Address Filter 295
Displaying Secure MAC Address Information 297
Configuring HTTPS 299
Configuring Global Settings for HTTPS 299
Replacing the Default Secure-site Certificate 300
Configuring the Secure Shell 302
Configuring the SSH Server 304
Generating the Host Key Pair 306
Importing User Public Keys 307
Access Control Lists 309
Setting a Time Range 310
Showing TCAM Utilization 313
Setting the ACL Name and Type 314
Configuring a Standard IPv4 ACL 316
Configuring an Extended IPv4 ACL 317

Contents
– 10 –
Configuring a Standard IPv6 ACL 319
Configuring an Extended IPv6 ACL 321
Configuring a MAC ACL 323
Configuring an ARP ACL 325
Binding a Port to an Access Control List 326
Configuring ACL Mirroring 327
Showing ACL Hardware Counters 329
ARP Inspection 330
Configuring Global Settings for ARP Inspection 331
Configuring VLAN Settings for ARP Inspection 333
Configuring Interface Settings for ARP Inspection 335
Displaying ARP Inspection Statistics 336
Displaying the ARP Inspection Log 337
Filtering IP Addresses for Management Access 338
Configuring Port Security 340
Configuring 802.1X Port Authentication 342
Configuring 802.1X Global Settings 344
Configuring Port Authenticator Settings for 802.1X 345
Configuring Port Supplicant Settings for 802.1X 350
Displaying 802.1X Statistics 352
DoS Protection 354
IPv4 Source Guard 357
Configuring Ports for IPv4 Source Guard 357
Configuring Static Bindings for IPv4 Source Guard 359
Displaying Information for Dynamic IPv4 Source Guard Bindings 362
IPv6 Source Guard 363
Configuring Ports for IPv6 Source Guard 363
Configuring Static Bindings for IPv6 Source Guard 365
Displaying Information for Dynamic IPv6 Source Guard Bindings 368
DHCP Snooping 369
DHCP Snooping Global Configuration 371
DHCP Snooping VLAN Configuration 373
Configuring Ports for DHCP Snooping 374
Displaying DHCP Snooping Binding Information 375