LevelOne GTL-2881 User manual

GTL-2881
28-Port Stackable Layer 3 Lite Managed Gigabit Switch,
2 x SFP+, 2 x SFP+ (Optional Modules)
GTL-2882
28-Port Stackable Layer 3 Lite Managed Gigabit Fiber Switch,
2 x SFP+, 2 x SFP+ (Optional Modules)
User Manual
V1.0
Digital Data Communications Asia Co., Ltd.
http://www.level1.com

User Manual
GTL-2881
Layer Layer 3 Lite Stackable Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports
GTL-2882
Layer Layer 3 Lite Stackable Gigabit Ethernet Fiber Switch
with 22 SFP Ports,
2 10/100/1000BASE-T (RJ-45/SFP) Ports,
2 10-Gigabit SFP+ Ports, and
Optional Module with 2 10-Gigabit SFP+ Ports
E112016/ST-R01

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read
this Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How this Guide
is Organized
This guide provides detailed information about the switch’s key features. It also
describes the switch’s web browser interface. For information on the command line
interface refer to the CLI Reference Guide.
The guide includes these sections:
◆ Section I “Getting Started” — Includes an introduction to switch management,
and the basic settings required to access the management interface.
◆ Section II “Web Configuration” — Includes all management options available
through the web browser interface.
◆ Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the web browser.
For information on how to manage the switch through the command line interface,
see the following guide:
CLI Reference Guide
Note: For a description of how to initialize the switch for management access via
the CLI, web interface or SNMP, refer to “Initial Switch Configuration” in the CLI
Reference Guide.

How to Use This Guide
– 4 –
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Revision History This section summarizes the changes in each revision of this guide.
November 2016 Revision
This is the first version of this guide. This guide is valid for software release
v1.5.2.15.

– 5 –
Contents
How to Use This Guide 3
Contents 5
Figures 17
Tables 31
Section I Getting Started 33
1 Introduction 35
Key Features 35
Description of Software Features 37
IP Routing 41
Equal-cost Multipath Load Balancing 42
Address Resolution Protocol 42
Operation, Administration, and Maintenance 42
System Defaults 43
Section II Web Configuration 47
2 Using the Web Interface 49
Connecting to the Web Interface 49
Navigating the Web Browser Interface 50
Home Page 50
Configuration Options 51
Panel Display 51
Main Menu 52
3BasicManagementTasks 71
Displaying System Information 72

Contents
– 6 –
Displaying Hardware/Software Versions 73
Configuring Support for Jumbo Frames 74
Displaying Bridge Extension Capabilities 75
Managing System Files 77
Copying Files via FTP/TFTP or HTTP 77
Saving the Running Configuration to a Local File 79
Setting the Start-Up File 80
Showing System Files 81
Automatic Operation Code Upgrade 81
Setting the System Clock 85
Setting the Time Manually 86
Setting the SNTP Polling Interval 87
Configuring NTP 87
Configuring Time Servers 88
Setting the Time Zone 92
Configuring Summer Time 93
Configuring the Console Port 95
Configuring Telnet Settings 97
Displaying CPU Utilization 98
Displaying Memory Utilization 99
Stacking 100
Setting the Master Unit 100
Enabling Stacking Ports 101
Renumbering the Stack 102
Resetting the System 103
4 Interface Configuration 107
Port Configuration 108
Configuring by Port List 108
Configuring by Port Range 111
Displaying Connection Status 111
Configuring Local Port Mirroring 112
Configuring Remote Port Mirroring 114
Showing Port or Trunk Statistics 119
Displaying Transceiver Data 123

Contents
– 7 –
Configuring Transceiver Thresholds 124
Performing Cable Diagnostics 126
Trunk Configuration 128
Configuring a Static Trunk 129
Configuring a Dynamic Trunk 132
Displaying LACP Port Counters 138
Displaying LACP Settings and Status for the Local Side 139
Displaying LACP Settings and Status for the Remote Side 141
Configuring Load Balancing 142
Saving Power 144
Traffic Segmentation 146
Enabling Traffic Segmentation 146
Configuring Uplink and Downlink Ports 147
VLAN Trunking 149
5 VLAN Configuration 153
IEEE 802.1Q VLANs 153
Configuring VLAN Groups 156
Adding Static Members to VLANs 159
Configuring Dynamic VLAN Registration 163
IEEE 802.1Q Tunneling 166
Enabling QinQ Tunneling on the Switch 170
Creating CVLAN to SPVLAN Mapping Entries 172
Adding an Interface to a QinQ Tunnel 173
Protocol VLANs 175
Configuring Protocol VLAN Groups 175
Mapping Protocol Groups to Interfaces 177
Configuring IP Subnet VLANs 179
Configuring MAC-based VLANs 181
Configuring VLAN Mirroring 183
Configuring VLAN Translation 185
6 Address Table Settings 187
Configuring MAC Address Learning 187
Setting Static Addresses 189
Changing the Aging Time 191

Contents
– 8 –
Displaying the Dynamic Address Table 191
Clearing the Dynamic Address Table 193
Configuring MAC Address Mirroring 194
Issuing MAC Address Traps 195
7 Spanning Tree Algorithm 197
Overview 197
Configuring Loopback Detection 199
Configuring Global Settings for STA 201
Displaying Global Settings for STA 206
Configuring Interface Settings for STA 207
Displaying Interface Settings for STA 212
Configuring Multiple Spanning Trees 214
Configuring Interface Settings for MSTP 219
8 Congestion Control 221
Rate Limiting 221
Storm Control 222
Automatic Traffic Control 224
Setting the ATC Timers 225
Configuring ATC Thresholds and Responses 227
9 Class of Service 231
Layer 2 Queue Settings 231
Setting the Default Priority for Interfaces 231
Selecting the Queue Mode 232
Mapping CoS Values to Egress Queues 235
Layer 3/4 Priority Settings 238
Setting Priority Processing to DSCP or CoS 238
Mapping Ingress DSCP Values to Internal DSCP Values 239
Mapping CoS Priorities to Internal DSCP Values 242
10 Quality of Service 245
Overview 245
Configuring a Class Map 246
Creating QoS Policies 250
Attaching a Policy Map to a Port 259

Contents
– 9 –
11 VoIP Traffic Configuration 261
Overview 261
Configuring VoIP Traffic 262
Configuring Telephony OUI 263
Configuring VoIP Traffic Ports 264
12 Security Measures 267
AAA (Authentication, Authorization and Accounting) 268
Configuring Local/Remote Logon Authentication 269
Configuring Remote Logon Authentication Servers 270
Configuring AAA Accounting 275
Configuring AAA Authorization 281
Configuring User Accounts 284
Web Authentication 286
Configuring Global Settings for Web Authentication 287
Configuring Interface Settings for Web Authentication 288
Network Access (MAC Address Authentication) 289
Configuring Global Settings for Network Access 291
Configuring Network Access for Ports 292
Configuring Port Link Detection 294
Configuring a MAC Address Filter 295
Displaying Secure MAC Address Information 297
Configuring HTTPS 299
Configuring Global Settings for HTTPS 299
Replacing the Default Secure-site Certificate 300
Configuring the Secure Shell 302
Configuring the SSH Server 304
Generating the Host Key Pair 306
Importing User Public Keys 307
Access Control Lists 309
Setting a Time Range 310
Showing TCAM Utilization 313
Setting the ACL Name and Type 314
Configuring a Standard IPv4 ACL 316
Configuring an Extended IPv4 ACL 317

Contents
– 10 –
Configuring a Standard IPv6 ACL 319
Configuring an Extended IPv6 ACL 321
Configuring a MAC ACL 323
Configuring an ARP ACL 325
Binding a Port to an Access Control List 326
Configuring ACL Mirroring 327
Showing ACL Hardware Counters 329
ARP Inspection 330
Configuring Global Settings for ARP Inspection 331
Configuring VLAN Settings for ARP Inspection 333
Configuring Interface Settings for ARP Inspection 335
Displaying ARP Inspection Statistics 336
Displaying the ARP Inspection Log 337
Filtering IP Addresses for Management Access 338
Configuring Port Security 340
Configuring 802.1X Port Authentication 342
Configuring 802.1X Global Settings 344
Configuring Port Authenticator Settings for 802.1X 345
Configuring Port Supplicant Settings for 802.1X 350
Displaying 802.1X Statistics 352
DoS Protection 354
IPv4 Source Guard 357
Configuring Ports for IPv4 Source Guard 357
Configuring Static Bindings for IPv4 Source Guard 359
Displaying Information for Dynamic IPv4 Source Guard Bindings 362
IPv6 Source Guard 363
Configuring Ports for IPv6 Source Guard 363
Configuring Static Bindings for IPv6 Source Guard 365
Displaying Information for Dynamic IPv6 Source Guard Bindings 368
DHCP Snooping 369
DHCP Snooping Global Configuration 371
DHCP Snooping VLAN Configuration 373
Configuring Ports for DHCP Snooping 374
Displaying DHCP Snooping Binding Information 375

Contents
– 11 –
13 Basic Administration Protocols 377
Configuring Event Logging 378
System Log Configuration 378
Remote Log Configuration 380
Sending Simple Mail Transfer Protocol Alerts 381
Link Layer Discovery Protocol 383
Setting LLDP Timing Attributes 383
Configuring LLDP Interface Attributes 385
Configuring LLDP Interface Civic-Address 389
Displaying LLDP Local Device Information 391
Displaying LLDP Remote Device Information 394
Displaying Device Statistics 403
Simple Network Management Protocol 405
Configuring Global Settings for SNMP 407
Setting the Local Engine ID 408
Specifying a Remote Engine ID 409
Setting SNMPv3 Views 411
Configuring SNMPv3 Groups 413
Setting Community Access Strings 419
Configuring Local SNMPv3 Users 420
Configuring Remote SNMPv3 Users 423
Specifying Trap Managers 426
Creating SNMP Notification Logs 430
Showing SNMP Statistics 432
Remote Monitoring 434
Configuring RMON Alarms 434
Configuring RMON Events 437
Configuring RMON History Samples 439
Configuring RMON Statistical Samples 442
Switch Clustering 444
Configuring General Settings for Clusters 445
Cluster Member Configuration 446
Managing Cluster Members 448

Contents
– 12 –
Ethernet Ring Protection Switching 449
ERPS Global Configuration 453
ERPS Ring Configuration 454
ERPS Forced and Manual Mode Operations 470
Connectivity Fault Management 474
Configuring Global Settings for CFM 478
Configuring Interfaces for CFM 481
Configuring CFM Maintenance Domains 481
Configuring CFM Maintenance Associations 486
Configuring Maintenance End Points 490
Configuring Remote Maintenance End Points 492
Transmitting Link Trace Messages 494
Transmitting Loop Back Messages 496
Transmitting Delay-Measure Requests 498
Displaying Local MEPs 500
Displaying Details for Local MEPs 501
Displaying Local MIPs 503
Displaying Remote MEPs 504
Displaying Details for Remote MEPs 505
Displaying the Link Trace Cache 507
Displaying Fault Notification Settings 508
Displaying Continuity Check Errors 509
OAM Configuration 510
Enabling OAM on Local Ports 510
Displaying Statistics for OAM Messages 513
Displaying the OAM Event Log 514
Displaying the Status of Remote Interfaces 515
Configuring a Remote Loopback Test 516
Displaying Results of Remote Loopback Testing 518
UDLD Configuration 519
Configuring UDLD Protocol Intervals 520
Configuring UDLD Interface Settings 521
Displaying UDLD Neighbor Information 523

Contents
– 13 –
14 Multicast Filtering 525
Overview 525
Layer 2 IGMP (Snooping and Query for IPv4) 526
Configuring IGMP Snooping and Query Parameters 528
Specifying Static Interfaces for a Multicast Router 532
Assigning Interfaces to Multicast Services 534
Setting IGMP Snooping Status per Interface 537
Filtering IGMP Query Packets and Multicast Data 543
Displaying Multicast Groups Discovered by IGMP Snooping 544
Displaying IGMP Snooping Statistics 545
Filtering and Throttling IGMP Groups 549
Enabling IGMP Filtering and Throttling 549
Configuring IGMP Filter Profiles 550
Configuring IGMP Filtering and Throttling for Interfaces 552
MLD Snooping (Snooping and Query for IPv6) 554
Configuring MLD Snooping and Query Parameters 554
Setting Immediate Leave Status for MLD Snooping per Interface 556
Specifying Static Interfaces for an IPv6 Multicast Router 557
Assigning Interfaces to IPv6 Multicast Services 559
Showing MLD Snooping Groups and Source List 561
Multicast VLAN Registration for IPv4 562
Configuring MVR Global Settings 564
Configuring MVR Domain Settings 566
Configuring MVR Group Address Profiles 567
Configuring MVR Interface Status 570
Assigning Static MVR Multicast Groups to Interfaces 572
Displaying MVR Receiver Groups 574
Displaying MVR Statistics 575
Multicast VLAN Registration for IPv6 579
Configuring MVR6 Global Settings 580
Configuring MVR6 Domain Settings 582
Configuring MVR6 Group Address Profiles 583
Configuring MVR6 Interface Status 586
Assigning Static MVR6 Multicast Groups to Interfaces 588

Contents
– 14 –
Displaying MVR6 Receiver Groups 590
Displaying MVR6 Statistics 591
15 IP Configuration 597
Setting the Switch’s IP Address (IP Version 4) 597
Setting the Switch’s IP Address (IP Version 6) 601
Configuring the IPv6 Default Gateway 602
Configuring IPv6 Interface Settings 603
Configuring an IPv6 Address 608
Showing IPv6 Addresses 611
Showing the IPv6 Neighbor Cache 612
Showing IPv6 Statistics 613
Showing the MTU for Responding Destinations 619
16 IP Services 621
Domain Name Service 621
Configuring General DNS Service Parameters 621
Configuring a List of Domain Names 622
Configuring a List of Name Servers 624
Configuring Static DNS Host to Address Entries 625
Displaying the DNS Cache 626
Dynamic Host Configuration Protocol 627
Specifying a DHCP Client Identifier 627
Configuring DHCP Relay Service 629
Configuring the PPPoE Intermediate Agent 630
Configuring PPPoE IA Global Settings 630
Configuring PPPoE IA Interface Settings 632
Showing PPPoE IA Statistics 633
17 General IP Routing 635
Overview 635
Initial Configuration 635
IP Routing and Switching 636
Routing Path Management 637
Routing Protocols 638

Contents
– 15 –
Configuring IP Routing Interfaces 638
Configuring Local and Remote Interfaces 638
Using the Ping Function 639
Using the Trace Route Function 640
Address Resolution Protocol 642
Basic ARP Configuration 642
Configuring Static ARP Addresses 644
Displaying Dynamic or Local ARP Entries 646
Displaying ARP Statistics 646
Configuring Static Routes 647
Displaying the Routing Table 649
18 Unicast Routing 651
Overview 651
Configuring the Routing Information Protocol 652
Configuring General Protocol Settings 653
Clearing Entries from the Routing Table 656
Specifying Network Interfaces 657
Specifying Passive Interfaces 659
Specifying Static Neighbors 660
Configuring Route Redistribution 661
Specifying an Administrative Distance 663
Configuring Network Interfaces for RIP 664
Displaying RIP Interface Settings 668
Displaying Peer Router Information 669
Resetting RIP Statistics 669
Section III Appendices 671
A Software Specifications 673
Software Features 673
Management Features 675
Standards 675
Management Information Bases 676

Contents
– 16 –
B Troubleshooting 679
Problems Accessing the Management Interface 679
Using System Logs 680
C License Statement / GPL Code Statement 681
Written Offer for GPL/LGPL Source Code 681
The GNU General Public License 681
How to Apply These Terms to Your New Programs 685
Notification of Compliance 686
Glossary 689
Index 697

– 17 –
Figures
Figure 1: Home Page 50
Figure 2: Front Panel Indicators 51
Figure 3: System Information 72
Figure 4: General Switch Information 74
Figure 5: Configuring Support for Jumbo Frames 75
Figure 6: Displaying Bridge Extension Configuration 76
Figure 7: Copy Firmware 79
Figure 8: Saving the Running Configuration 80
Figure 9: Setting Start-Up Files 80
Figure 10: Displaying System Files 81
Figure 11: Configuring Automatic Code Upgrade 85
Figure 12: Manually Setting the System Clock 86
Figure 13: Setting the Polling Interval for SNTP 87
Figure 14: Configuring NTP 88
Figure 15: Specifying SNTP Time Servers 89
Figure 16: Adding an NTP Time Server 90
Figure 17: Showing the NTP Time Server List 90
Figure 18: Adding an NTP Authentication Key 91
Figure 19: Showing the NTP Authentication Key List 92
Figure 20: Setting the Time Zone 93
Figure 21: Configuring Summer Time 95
Figure 22: Console Port Settings 96
Figure 23: Telnet Connection Settings 98
Figure 24: Displaying CPU Utilization 99
Figure 25: Displaying Memory Utilization 99
Figure 26: Setting the Stack Master 101
Figure 27: Enabling Stacking on 10G Ports 102
Figure 28: Renumbering the Stack 102
Figure 29: Restarting the Switch (Immediately) 105

Figures
– 18 –
Figure 30: Restarting the Switch (In) 105
Figure 31: Restarting the Switch (At) 106
Figure 32: Restarting the Switch (Regularly) 106
Figure 33: Configuring Connections by Port List 110
Figure 34: Configuring Connections by Port Range 111
Figure 35: Displaying Port Information 112
Figure 36: Configuring Local Port Mirroring 112
Figure 37: Configuring Local Port Mirroring 114
Figure 38: Displaying Local Port Mirror Sessions 114
Figure 39: Configuring Remote Port Mirroring 115
Figure 40: Configuring Remote Port Mirroring (Source) 118
Figure 41: Configuring Remote Port Mirroring (Intermediate) 118
Figure 42: Configuring Remote Port Mirroring (Destination) 118
Figure 43: Showing Port Statistics (Table) 122
Figure 44: Showing Port Statistics (Chart) 123
Figure 45: Displaying Transceiver Data 124
Figure 46: Configuring Transceiver Thresholds 126
Figure 47: Performing Cable Tests 128
Figure 48: Configuring Static Trunks 129
Figure 49: Creating Static Trunks 130
Figure 50: Adding Static Trunks Members 131
Figure 51: Configuring Connection Parameters for a Static Trunk 131
Figure 52: Showing Information for Static Trunks 132
Figure 53: Configuring Dynamic Trunks 132
Figure 54: Configuring the LACP Aggregator Admin Key 135
Figure 55: Enabling LACP on a Port 136
Figure 56: Configuring LACP Parameters on a Port 136
Figure 57: Showing Members of a Dynamic Trunk 137
Figure 58: Configuring Connection Settings for a Dynamic Trunk 137
Figure 59: Showing Connection Parameters for Dynamic Trunks 138
Figure 60: Displaying LACP Port Counters 139
Figure 61: Displaying LACP Port Internal Information 140
Figure 62: Displaying LACP Port Remote Information 142
Figure 63: Configuring Load Balancing 143
Figure 64: Enabling Power Savings 145

Figures
– 19 –
Figure 65: Enabling Traffic Segmentation 147
Figure 66: Configuring Members for Traffic Segmentation 148
Figure 67: Showing Traffic Segmentation Members 149
Figure 68: Configuring VLAN Trunking 149
Figure 69: Configuring VLAN Trunking 151
Figure 70: VLAN Compliant and VLAN Non-compliant Devices 155
Figure 71: Using GVRP 156
Figure 72: Creating Static VLANs 158
Figure 73: Modifying Settings for Static VLANs 158
Figure 74: Showing Static VLANs 159
Figure 75: Configuring Static Members by VLAN Index 162
Figure 76: Configuring Static VLAN Members by Interface 162
Figure 77: Configuring Static VLAN Members by Interface Range 163
Figure 78: Configuring Global Status of GVRP 165
Figure 79: Configuring GVRP for an Interface 165
Figure 80: Showing Dynamic VLANs Registered on the Switch 166
Figure 81: Showing the Members of a Dynamic VLAN 166
Figure 82: QinQ Operational Concept 167
Figure 83: Enabling QinQ Tunneling 171
Figure 84: Configuring CVLAN to SPVLAN Mapping Entries 173
Figure 85: Showing CVLAN to SPVLAN Mapping Entries 173
Figure 86: Adding an Interface to a QinQ Tunnel 174
Figure 87: Configuring Protocol VLANs 176
Figure 88: Displaying Protocol VLANs 177
Figure 89: Assigning Interfaces to Protocol VLANs 178
Figure 90: Showing the Interface to Protocol Group Mapping 179
Figure 91: Configuring IP Subnet VLANs 180
Figure 92: Showing IP Subnet VLANs 181
Figure 93: Configuring MAC-Based VLANs 182
Figure 94: Showing MAC-Based VLANs 183
Figure 95: Configuring VLAN Mirroring 184
Figure 96: Showing the VLANs to Mirror 184
Figure 97: Configuring VLAN Translation 185
Figure 98: Configuring VLAN Translation 186
Figure 99: Showing the Entries for VLAN Translation 186

Figures
– 20 –
Figure 100: Configuring MAC Address Learning 188
Figure 101: Configuring Static MAC Addresses 190
Figure 102: Displaying Static MAC Addresses 190
Figure 103: Setting the Address Aging Time 191
Figure 104: Displaying the Dynamic MAC Address Table 192
Figure 105: Clearing Entries in the Dynamic MAC Address Table 193
Figure 106: Mirroring Packets Based on the Source MAC Address 195
Figure 107: Showing the Source MAC Addresses to Mirror 195
Figure 108: Issuing MAC Address Traps (Global Configuration) 196
Figure 109: Issuing MAC Address Traps (Interface Configuration) 196
Figure 110: STP Root Ports and Designated Ports 198
Figure 111: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 198
Figure 112: Spanning Tree – Common Internal, Common, Internal 199
Figure 113: Configuring Port Loopback Detection 201
Figure 114: Configuring Global Settings for STA (STP) 205
Figure 115: Configuring Global Settings for STA (RSTP) 205
Figure 116: Configuring Global Settings for STA (MSTP) 206
Figure 117: Displaying Global Settings for STA 207
Figure 118: Determining the Root Port 209
Figure 119: Configuring Interface Settings for STA 211
Figure 120: STA Port Roles 213
Figure 121: Displaying Interface Settings for STA 214
Figure 122: Creating an MST Instance 216
Figure 123: Displaying MST Instances 216
Figure 124: Modifying the Priority for an MST Instance 217
Figure 125: Displaying Global Settings for an MST Instance 217
Figure 126: Adding a VLAN to an MST Instance 218
Figure 127: Displaying Members of an MST Instance 218
Figure 128: Configuring MSTP Interface Settings 220
Figure 129: Displaying MSTP Interface Settings 220
Figure 130: Configuring Rate Limits 222
Figure 131: Configuring Storm Control 224
Figure 132: Storm Control by Limiting the Traffic Rate 224
Figure 133: Storm Control by Shutting Down a Port 225
Figure 134: Configuring ATC Timers 226