MiLAN MIL-SM24T4DPA Programming manual

www.edge-core.com
MIL-SM24T4DPA
GIGABIT ETHERNET SWITCH
MANAGEMENT GUIDE

M ANAGEMENT G UIDE
MIL-SM24T4DPA GIGABIT ETHERNET SWITCH
Layer 2 Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)
MIL-SM24T4DPA
E102009/AP-R01
149100000057A

– 3 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
JULY 2009 REVISION
This is the first version of this guide. This guide is valid for software release
v1.12.

A BOUT T HIS G UIDE
– 4 –

– 5 –
CONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 17
TABLES 20
SECTION I GETTING STARTED 22
1INTRODUCTION 23
Key Features 23
Description of Software Features 24
Configuration Backup and Restore 24
Authentication 24
Access Control Lists 25
Port Configuration 25
Rate Limiting 25
Port Mirroring 25
Port Trunking 25
Storm Control 25
Static Addresses 25
IEEE 802.1D Bridge 26
Store-and-Forward Switching 26
Spanning Tree Algorithm 26
Virtual LANs 27
Traffic Prioritization 27
Quality of Service 28
Multicast Filtering 28
System Defaults 29
2INITIAL SWITCH CONFIGURATION 31
Connecting to the Switch 31
Configuration Options 31

C ONTENTS
– 6 –
Required Connections 32
Remote Connections 33
Basic Configuration 34
Setting Passwords 34
Setting an IP Address 34
Enabling SNMP Management Access 37
Managing System Files 41
Saving or Restoring Configuration Settings 41
SECTION II WEB CONFIGURATION 42
3USING THE WEB INTERFACE 43
Connecting to the Web Interface 43
Navigating the Web Browser Interface 44
Home Page 44
Configuration Options 44
Panel Display 45
Main Menu 45
4CONFIGURING THE SWITCH 49
Configuring System Information 49
Setting an IP Address 50
Setting an IPv4 Address 50
Setting an IPv6 Address 52
Setting the System Password 55
Filtering IP Addresses for Management Access 55
Configuring Port Connections 57
Configuring Authentication for Management Access and 802.1X 59
Creating Trunk Groups 63
Configuring Static Trunks 64
Configuring LACP 67
Configuring the Spanning Tree Algorithm 70
Configuring Global Settings for STA 71
Configuring Interface Settings for STA 72
Configuring 802.1X Port Authentication 75
Configuring HTTPS 80
Configuring SSH 82

C ONTENTS
– 7 –
IGMP Snooping 83
Configuring IGMP Snooping and Query 84
Configuring IGMP Filtering 87
Configuring Link Layer Discovery Protocol 88
Configuring the MAC Address Table 91
IEEE 802.1Q VLANs 93
Assigning Ports to VLANs 94
Configuring VLAN Attributes for Port Members 95
Configuring Private VLANs 97
Using Port Isolation 98
Quality of Service 99
Configuring Port-Level Queue Settings 100
Configuring DSCP Remarking 101
Configuring QoS Control Lists 103
Configuring Rate Limiting 106
Configuring Storm Control 108
Access Control Lists 109
Assigning ACL Policies and Responses 109
Configuring Rate Limiters 110
Configuring Access Control Lists 112
Configuring Port Mirroring 120
Simple Network Management Protocol 122
Configuring SNMP System and Trap Settings 123
Setting SNMPv3 Community Access Strings 128
Configuring SNMPv3 Users 129
Configuring SNMPv3 Groups 130
Configuring SNMPv3 Views 131
Configuring SNMPv3 Group Access Rights 132
Configuring UPnP 133
Configuring DHCP Relay and Option 82 Information 135
5MONITORING THE SWITCH 137
Displaying Basic Information About the System 137
Displaying System Information 137
Displaying Log Messages 138
Displaying Log Details 140
Displaying Access Management Statistics 140

C ONTENTS
– 8 –
Displaying Information About Ports 141
Displaying Port Status On the Front Panel 141
Displaying an Overview of Port Statistics 142
Displaying QoS Statistics 142
Displaying Detailed Port Statistics 143
Displaying Information on Authentication Servers 146
Displaying a List of Authentication Servers 146
Displaying Statistics for Configured Authentication Servers 147
Displaying Information on LACP 150
Displaying an Overview of LACP Groups 150
Displaying LACP Port Status 151
Displaying LACP Port Statistics 152
Displaying Information on the Spanning Tree 153
Displaying Bridge Status for STA 153
Displaying Port Status for STA 155
Displaying Port Statistics for STA 156
Displaying Port Security Information 157
Displaying Port Security Status 157
Displaying Port Security Statistics 158
Showing IGMP Snooping Information 161
Displaying LLDP Information 162
Displaying LLDP Neighbor Information 163
Displaying LLDP Port Statistics 164
Displaying DHCP Relay Statistics 165
Displaying the MAC Address Table 167
6PERFORMING BASIC DIAGNOSTICS 169
Pinging an IPv4 or IPv6 Address 169
Running Cable Diagnostics 170
7PERFORMING SYSTEM MAINTENANCE 172
Resetting the Switch 172
Restoring Factory Defaults 172
Upgrading Firmware 173
Registering the Product 174
Managing Configuration Files 174
Saving Configuration Settings 174
Restoring Configuration Settings 175

C ONTENTS
– 9 –
SECTION III COMMAND LINE INTERFACE 176
8USING THE COMMAND LINE INTERFACE 178
Accessing the CLI 178
Console Connection 178
Telnet Connection 179
Entering Commands 180
Keywords and Arguments 180
Minimum Abbreviation 181
Getting Help on Commands 181
Partial Keyword Lookup 182
Using Command History 183
Command Line Processing 183
CLI Command Groups 184
9SYSTEM COMMANDS 186
system configuration 187
system reboot 187
system restore default 188
system contact 188
system name 188
system location 189
system password 189
system timezone 190
system log 190
system access configuration 191
system access mode 191
system access add 192
system access ipv6 add 193
system access delete 194
system access lookup 194
system access clear 194
system access statistics 194
10 IP COMMANDS 196
ip configuration 196
ip dhcp 197
ip setup 198

C ONTENTS
– 10 –
ip ping 199
ip dns 200
ip dns_proxy 200
ip sntp 201
ip ipv6 autoconfig 201
ip ipv6 setup 202
ip ipv6 ping6 203
ip ipv6 sntp 204
11 AUTHENTICATION COMMANDS 206
auth configuration 206
auth timeout 207
auth deadtime 208
auth radius 208
auth acct_radius 209
auth tacacs+ 211
auth client 212
auth statistics 213
12 PORT COMMANDS 216
port configuration 216
port state 218
port mode 218
port flow control 219
port maxframe 220
port power 220
port excessive 221
port statistics 222
port veriphy 223
port numbers 224
13 LINK AGGREGATION COMMANDS 225
aggr configuration 226
aggr add 227
aggr delete 227
aggr lookup 228
aggr mode 228
14 LACP COMMANDS 230
lacp configuration 232

C ONTENTS
– 11 –
lacp mode 232
lacp key 233
lacp role 233
lacp status 234
lacp statistics 234
15 RSTP COMMANDS 236
rstp configuration 237
rstp sysprio 237
rstp age 238
rstp delay 238
rstp txhold 239
rstp version 239
rstp mode 240
rstp cost 240
rstp priority 242
rstp edge 242
rstp autoedge 243
rstp p2p 244
rstp status 244
rstp statistics 245
rstp mcheck 245
16 IEEE 802.1X COMMANDS 247
dot1x configuration 247
dot1x mode 249
dot1x state 249
dot1x authenticate 250
dot1x reauthentication 251
dot1x period 252
dot1x timeout 252
dot1x clients 252
dot1x agetime 253
dot1x holdtime 254
dot1x statistics 254
17 IGMP COMMANDS 256
igmp configuration 256
igmp mode 258

C ONTENTS
– 12 –
igmp state 258
igmp querier 259
igmp fastleave 260
igmp leave proxy 261
igmp throttling 261
igmp filtering 262
igmp router 263
igmp flooding 263
igmp groups 264
igmp status 264
18 LLDP COMMANDS 265
lldp configuration 265
lldp mode 266
lldp optional_tlv 266
lldp interval 267
lldp hold 268
lldp delay 268
lldp reinit 269
lldp info 269
lldp statistics 270
lldp cdp_aware 271
19 MAC COMMANDS 272
mac configuration 272
mac add 273
mac delete 273
mac lookup 274
mac agetime 274
mac learning 274
mac dump 275
mac statistics 276
mac flush 276
20 VLAN COMMANDS 277
vlan configuration 277
vlan aware 278
vlan pvid 279
vlan frametype 279

C ONTENTS
– 13 –
vlan ingressfilter 280
vlan qinq 280
vlan add 281
vlan delete 281
vlan lookup 282
21 PVLAN COMMANDS 283
pvlan configuration 283
pvlan add 284
pvlan delete 284
pvlan lookup 285
pvlan isolate 285
22 QOS COMMANDS 286
qos configuration 287
qos default 287
qos tagprio 288
qos qcl port 288
qos qcl add 289
qos qcl delete 290
qos qcl lookup 291
qos mode 291
qos weight 292
qos rate limiter 292
qos shaper 293
qos storm unicast 294
qos storm multicast 294
qos storm broadcast 295
qos dscp remarking 295
qos dscp queue mapping 296
23 ACL COMMANDS 297
acl configuration 297
acl action 298
acl policy 299
acl rate 299
acl add 300
acl delete 303
acl lookup 303

C ONTENTS
– 14 –
acl clear 304
24 MIRROR COMMANDS 305
mirror configuration 305
mirror port 305
mirror mode 306
25 CONFIG COMMANDS 307
config save 307
config load 308
26 SNMP COMMANDS 309
snmp configuration 310
snmp mode 311
snmp version 312
snmp read community 312
snmp write community 313
snmp trap mode 313
snmp trap version 314
snmp trap community 314
snmp trap destination 315
snmp trap ipv6 destination 315
snmp trap authentication failure 315
snmp trap link-up 316
snmp trap inform mode 316
snmp trap inform timeout 317
snmp trap inform retry times 317
snmp trap probe security engine id 318
snmp trap security engine id 318
snmp trap security name 319
snmp engine id 319
snmp community add 320
snmp community delete 320
snmp community lookup 321
snmp user add 321
snmp user delete 322
snmp user changekey 323
snmp user lookup 323
snmp group add 324

C ONTENTS
– 15 –
snmp group delete 325
snmp group lookup 325
snmp view add 326
snmp view delete 326
snmp view lookup 327
snmp access add 327
snmp access delete 328
snmp access lookup 328
27 HTTPS COMMANDS 330
https configuration 330
https mode 330
https redirect 331
28 SSH COMMANDS 333
ssh configuration 333
ssh mode 333
29 UPNP COMMANDS 335
upnp configuration 335
upnp mode 335
upnp ttl 336
upnp advertising duration 337
30 DHCP COMMANDS 338
dhcp relay configuration 338
dhcp relay mode 338
dhcp relay server 339
dhcp relay information mode 339
dhcp relay information policy 340
dhcp relay statistics 340
31 FIRMWARE COMMANDS 342
firmware load 342
firmware ipv6 load 343
SECTION IV APPENDICES 345
ASOFTWARE SPECIFICATIONS 346
Software Features 346
Management Features 347

C ONTENTS
– 16 –
Standards 348
Management Information Bases 348
BTROUBLESHOOTING 350
Problems Accessing the Management Interface 350
Using System Logs 351
GLOSSARY 352
INDEX 359

– 17 –
FIGURES
Figure 1: Home Page 44
Figure 2: Front Panel Indicators 45
Figure 3: System Information Configuration 50
Figure 4: IP & Time Configuration 52
Figure 5: IPv6 & Time Configuration 54
Figure 6: System Password 55
Figure 7: Access Management Configuration 56
Figure 8: Port Configuration 58
Figure 9: Authentication Configuration 62
Figure 10: Static Trunk Configuration 66
Figure 11: LACP Port Configuration 69
Figure 12: RSTP System Configuration 72
Figure 13: RSTP Port Configuration 74
Figure 14: Port Security Configuration 80
Figure 15: HTTPS Configuration 81
Figure 16: SSH Configuration 83
Figure 17: IGMP Snooping Configuration 87
Figure 18: IGMP Snooping Port Group Filtering Configuration 88
Figure 19: LLDP Configuration 91
Figure 20: MAC Address Table Configuration 93
Figure 21: VLAN Membership Configuration 95
Figure 22: VLAN Port Configuration 97
Figure 23: Private VLAN Membership Configuration 98
Figure 24: Port Isolation Configuration 99
Figure 25: Port QoS Configuration 101
Figure 26: DSCP Remarking Configuration 103
Figure 27: QoS Control List Configuration 105
Figure 28: Rate Limit Configuration 107
Figure 29: Storm Control Configuration 109
Figure 30: ACL Port Configuration 110
Figure 31: ACL Rate Limiter Configuration 111

F IGURES
– 18 –
Figure 32: Access Control List Configuration 119
Figure 33: Mirror Configuration 121
Figure 34: SNMP System Configuration 127
Figure 35: SNMPv3 Communities Configuration 128
Figure 36: SNMPv3 Users Configuration 130
Figure 37: SNMPv3 Group Configuration 131
Figure 38: SNMPv3 View Configuration 132
Figure 39: SNMPv3 Access Configuration 133
Figure 40: UPnP Configuration 135
Figure 41: DHCP Relay Configuration 136
Figure 42: System Information 138
Figure 43: System Log Information 139
Figure 44: Detailed System Log Information 140
Figure 45: Access Management Statistics 141
Figure 46: Port State Overview 141
Figure 47: Port Statistics Overview 142
Figure 48: Queuing Counters 143
Figure 49: Detailed Port Statistics 145
Figure 50: RADIUS Overview 146
Figure 51: RADIUS Details 150
Figure 52: LACP System Status 151
Figure 53: LACP Port Status 152
Figure 54: LACP Port Statistics 153
Figure 55: Spanning Tree Bridge Status 155
Figure 56: Spanning Tree Port Status 156
Figure 57: Spanning Tree Port Statistics 157
Figure 58: Port Security Status 158
Figure 59: Port Security Statistics 161
Figure 60: IGMP Snooping Status 162
Figure 61: LLDP Neighbor Information 164
Figure 62: LLDP Port Statistics 165
Figure 63: DHCP Relay Statistics 167
Figure 64: MAC Address Table 168
Figure 65: ICMP Ping 170
Figure 66: VeriPHY Cable Diagnostics 171
Figure 67: Reset Device 172

F IGURES
– 19 –
Figure 68: Factory Defaults 173
Figure 69: Software Upload 173
Figure 70: Register Product 174
Figure 71: Configuration Save 175
Figure 72: Configuration Upload 175

– 20 –
TABLES
Table 1: Key Features 23
Table 2: System Defaults 29
Table 3: Web Page Configuration Buttons 44
Table 4: Main Menu 45
Table 5: Recommended STA Path Cost Range 73
Table 6: Recommended STA Path Costs 73
Table 7: Default STA Path Costs 73
Table 8: HTTPS System Support 81
Table 9: QCE Modification Buttons 104
Table 10: Mapping CoS Values to Egress Queues 104
Table 11: QCE Modification Buttons 113
Table 12: SNMP Security Models and Levels 123
Table 13: System Capabilities 163
Table 14: Keystroke Commands 183
Table 15: Command Group Index 184
Table 16: System Commands 186
Table 17: IP Commands 196
Table 18: Authentication Commands 206
Table 19: Port Commands 216
Table 20: Port Configuration 216
Table 21: Link Aggregation Commands 225
Table 22: LACP Commands 230
Table 23: RSTP Commands 236
Table 24: Recommended STA Path Cost Range 241
Table 25: Recommended STA Path Costs 241
Table 26: Default STA Path Costs 241
Table 27: IEEE 802.1X Commands 247
Table 28: 802.1X Configuration 248
Table 29: IGMP Commands 256
Table 30: IGMP Configuration 257
Table 31: LLDP Commands 265