Planet Networking & Communication SGSD-1022 User manual

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
1
User’s Manual
SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
Layer 2 Managed Switches

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
2
Trademarks
Copyright © PLANET Technology Corp. 2008.
Contents subject to which revision without prior notice.
PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners.
Disclaimer
PLANET Technology does not warrant that the hardware will work properly in all environments and applications, and makes no
warranty and representation, either implied or expressed, with respect to the quality, performance, merchantability, or fitness for
a particular purpose. PLANET has made every effort to ensure that this User's Manual is accurate; PLANET disclaims liability
for any inaccuracies or omissions that may have occurred.
Information in this User's Manual is subject to change without notice and does not represent a commitment on the part of
PLANET. PLANET assumes no responsibility for any inaccuracies that may be contained in this User's Manual. PLANET makes
no commitment to update or keep current the information in this User's Manual, and reserves the right to make improvements to
this User's Manual and/or to the products described in this User's Manual, at any time without notice.
If you find information in this manual that is incorrect, misleading, or incomplete, we would appreciate your comments and
suggestions.
FCC Warning
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC
Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated
in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and
used in accordance with the Instruction manual, may cause harmful interference to radio communications. Operation of this
equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the
interference at whose own expense.
CE Mark Warning
This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be
required to take adequate measures.
WEEE Warning
To avoid the potential effects on the environment and human health as a result of the presence of
hazardous substances in electrical and electronic equipment, end users of electrical and electronic
equipment should understand the meaning of the crossed-out wheeled bin symbol. Do not dispose of
WEEE as unsorted municipal waste and have to collect such WEEE separately.
Revision
PLANET 8 / 24-Port 10/100Mbps with 2 / 4 Gigabit TP / SFP Combo Managed Security Switch User's Manual
FOR MODELS: SGSD-1022 / SGSD-1022P / SGSW-2840 / SGSW-2840P
REVISION: 1.0 (AUGUEST.2008)
Part No: EM-SGSD-SGSW (2080-A34050-000)

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
3
TABLE OF CONETNTS
1. INTRODUTION ....................................................................................................................23
1.1 Packet Contents .........................................................................................................................................23
1.2 Product Description...................................................................................................................................23
1.3 How to Use This Manual............................................................................................................................25
1.4 Product Features........................................................................................................................................25
1.5 Product Specification ................................................................................................................................28
2. INSTALLATION ...................................................................................................................30
2.1 Hardware Description................................................................................................................................30
2.1.1 Switch Front Panel ..............................................................................................................................................30
2.1.2 LED Indications ...................................................................................................................................................31
2.1.3 Switch Rear Panel...............................................................................................................................................35
2.2 Install the Switch........................................................................................................................................38
2.2.1 Desktop Installation .............................................................................................................................................38
2.2.2 Rack Mounting.....................................................................................................................................................39
2.2.3 Installing the SFP transceiver..............................................................................................................................41
3. SWITCH MANAGEMENT....................................................................................................43
3.1 Requirements..............................................................................................................................................43
3.2 Management Access Overview.................................................................................................................44
3.3 Administration Console.............................................................................................................................44
3.4 Web Management.......................................................................................................................................46
3.5 SNMP-Based Network Management.........................................................................................................46
3.6 Protocols.....................................................................................................................................................47
3.6.1 Virtual Terminal Protocols....................................................................................................................................47
3.6.2 SNMP Protocol....................................................................................................................................................47
3.6.3 Management Architecture....................................................................................................................................47
4. WEB CONFIGURATION......................................................................................................48
4.1 Main WEB PAGE.........................................................................................................................................51

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
4
4.2 System.........................................................................................................................................................54
4.2.1 System Information..............................................................................................................................................55
4.2.2 Switch Information...............................................................................................................................................56
4.2.3 Bridge Extension Configuration...........................................................................................................................57
4.2.4 IP Configuration...................................................................................................................................................58
4.2.5 Jumbo Frames.....................................................................................................................................................60
4.2.6 File Management.................................................................................................................................................60
4.2.6.1 Copy Operation.......................................................................................................................................60
4.2.6.2 Delete .....................................................................................................................................................66
4.2.6.3 Set Startup..............................................................................................................................................66
4.2.7 Line......................................................................................................................................................................68
4.2.7.1 Console Port Settings................................................................................................................................68
4.2.7.2 Telnet Settings...........................................................................................................................................70
4.2.8 Log ......................................................................................................................................................................71
4.2.8.1 System Log Configuration.........................................................................................................................71
4.2.8.2 Remote Log Configuration.........................................................................................................................73
4.2.8.3 Displaying Log Messages..........................................................................................................................74
4.2.8.4 SMTP E-Mail Alert.....................................................................................................................................75
4.2.9 UPNP...................................................................................................................................................................77
UPnP Configuration...............................................................................................................................................77
4.2.10 Reset.................................................................................................................................................................78
4.2.11 SNTP.................................................................................................................................................................79
4.2.11.1 SNTP Configuration.................................................................................................................................79
4.2.11.2 Clock Time Zone......................................................................................................................................80
4.2.12 LLDP..................................................................................................................................................................81
4.2.12.1 LLDP Configuration .................................................................................................................................81
4.2.12.2 LLDP Port Configuration..........................................................................................................................83
4.2.12.3 LLDP Trunk Configuration .......................................................................................................................86
4.2.12.4 LLDP Local Device Information...............................................................................................................89
4.2.12.5 Remote Port Information .........................................................................................................................91
4.2.12.6 LLDP Remote Information Detail.............................................................................................................92
4.2.12.7 LLDP Device Statistics ............................................................................................................................94
4.2.12.8 LLDP Device Statistics Details.................................................................................................................95
4.3 Simple Network Management Protocol....................................................................................................96
4.3.1 SNMPAgent Status.............................................................................................................................................97
4.3.2 SNMP Configuration............................................................................................................................................97
4.3.2.1 SNMP Community.....................................................................................................................................97
4.3.2.2 SNMP Trap Management..........................................................................................................................98
4.3.3 SNMPv3 ............................................................................................................................................................101
4.3.3.1 SNMPv3 Engine ID..................................................................................................................................101

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
5
4.3.3.2 SNMPv3 Remote Engine ID....................................................................................................................102
4.3.3.3 SNMPv3 Users........................................................................................................................................103
4.3.3.4 SNMPv3 Remote Users ..........................................................................................................................106
4.3.3.5 SNMPv3 Groups......................................................................................................................................108
4.3.3.6 SNMPv3 View.......................................................................................................................................... 111
4.4 Port Management .....................................................................................................................................113
4.4.1 Port Information.................................................................................................................................................113
4.4.2 Port Configuration..............................................................................................................................................115
4.4.3 Port Broadcast Control ......................................................................................................................................117
4.4.4 Port Mirroring.....................................................................................................................................................119
4.4.4.1 Mirror Port Configuration.........................................................................................................................119
4.4.5 Rate Limit ..........................................................................................................................................................122
4.4.5.1 Input Rate Limit Port Configuration..........................................................................................................122
4.4.5.2 Output Rate Limit Port Configuration.......................................................................................................123
4.4.6 Port Statistics.....................................................................................................................................................124
4.5 Link Aggregation......................................................................................................................................129
4.5.1 Trunk Information...............................................................................................................................................130
4.5.2 Trunk Configuration ...........................................................................................................................................130
4.5.3 Trunk Broadcast Control....................................................................................................................................132
4.5.4 Trunk Membership.............................................................................................................................................133
4.5.5 LACP.................................................................................................................................................................136
4.5.5.1 LACP Configuration.................................................................................................................................137
4.5.5.2 LACPAggregation Port ...........................................................................................................................138
4.5.5.3 Displaying LACP Port Counters...............................................................................................................141
4.5.5.4 Displaying LACP Settings and Status for the Local Side.........................................................................141
4.5.5.5 Displaying LACP Status for the Remote Side..........................................................................................143
4.6 Address Table...........................................................................................................................................145
4.6.1 Static Addresses................................................................................................................................................145
4.6.2 Dynamic Addresses...........................................................................................................................................146
4.6.3 Address Aging....................................................................................................................................................148
4.7 Spanning Tree...........................................................................................................................................149
4.7.1 STA....................................................................................................................................................................157
4.7.1.1 Spanning Tree Information ......................................................................................................................157
4.7.1.2 STA Configuration....................................................................................................................................159
4.7.1.3 STA Port Information ...............................................................................................................................163
4.7.1.4 STA Port Configuration............................................................................................................................165
4.7.2 MSTP.................................................................................................................................................................168
4.7.2.1 Configuring Multiple Spanning Trees.......................................................................................................168

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
6
4.7.2.2 Displaying Interface Settings for MSTP...................................................................................................169
4.7.2.3 MSTP Port Configuration.........................................................................................................................170
4.8 VLAN Configuration.................................................................................................................................172
4.8.1 IEEE 802.1Q VLANs .........................................................................................................................................173
4.8.1.1 VLAN Basic Information ..........................................................................................................................177
4.8.1.2 GVRP Status ...........................................................................................................................................178
4.8.1.3 VLAN Current Table.................................................................................................................................179
4.8.1.4 VLAN Static List.......................................................................................................................................180
4.8.1.5 VLAN Static Table....................................................................................................................................181
4.8.1.6 Static Membership by Port.......................................................................................................................184
4.8.1.7 VLAN Port Configuration .........................................................................................................................185
4.8.2 Q-in-Q VLAN .....................................................................................................................................................188
4.8.2.1 802.1Q Tunnel Configuration...................................................................................................................191
4.8.2.2 802.1Q Tunnel Port Configuration...........................................................................................................192
4.8.3 Private VLAN.....................................................................................................................................................194
4.8.3.1 Private VLAN Information........................................................................................................................195
4.8.3.2 Private VLAN Configuration.....................................................................................................................196
4.8.3.3 Private VLAN Association........................................................................................................................197
4.8.3.4 Private VLAN Port Information ................................................................................................................198
4.8.3.5 Private VLAN Port Configuration.............................................................................................................199
4.8.4 Protocol VLAN...................................................................................................................................................201
4.8.4.1 Protocol VLAN Configuration...................................................................................................................202
4.8.4.2 Protocol VLAN Port Configuration...........................................................................................................203
4.9 Multicast....................................................................................................................................................205
4.9.1.1 IGMP Configuration.................................................................................................................................206
4.9.1.2 IGMP Immediate Leave...........................................................................................................................208
4.9.1.3 Multicast Router Port Information............................................................................................................209
4.9.1.4 Static Multicast Router Port Configuration...............................................................................................210
4.9.1.5 IP Multicast Registration Table ................................................................................................................211
4.9.1.6 IGMP Member Port Table........................................................................................................................212
4.9.2 IGMP Filter and Throttling..................................................................................................................................214
4.9.2.1 IGMP Filter Profile Configuration.............................................................................................................214
4.9.2.2 IGMP Filter Profile Configuration.............................................................................................................215
4.9.2.3 IGMP Filter / Throttling Port Configuration...............................................................................................216
4.9.3 Multicast VLAN Registration (MVR)...................................................................................................................218
4.9.3.1 MVR Configuration..................................................................................................................................219
4.9.3.2 MVR Port Configuration...........................................................................................................................220
4.9.3.3 MVR Port Information..............................................................................................................................222
4.9.3.4 MVR Group Member Configuration.........................................................................................................222

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
7
4.9.3.5 MVR Group IP Information ......................................................................................................................224
4.10 Quality of Service...................................................................................................................................225
4.10.1 Priority .............................................................................................................................................................226
4.10.1.1 Port Priority Configuration .....................................................................................................................227
4.10.1.2 Traffic Classes.......................................................................................................................................228
4.10.1.3 Queue Mode..........................................................................................................................................230
4.10.1.4 Queue Scheduling.................................................................................................................................231
4.10.2 Layer 3/4 Priority Settings................................................................................................................................232
4.10.2.1 Mapping Layer 3/4 Priorities to CoS Values ..........................................................................................232
4.10.2.2 IP DSCP Priority Status.........................................................................................................................232
4.10.2.3 IP DSCP Priority....................................................................................................................................233
4.10.2.4 Mapping IP Precedence Priority............................................................................................................234
4.10.2.5 IP Precedence Priority Status................................................................................................................234
4.10.2.6 IP Precedence Priority...........................................................................................................................235
4.10.2.7 Mapping IP TOS Priority........................................................................................................................235
4.10.2.8 IP TOS Priority Status............................................................................................................................236
4.10.2.9 IP TOS Priority.......................................................................................................................................237
4.10.2.10 Mapping IP Port Priority.......................................................................................................................237
4.10.2.11 IP Port Priority Status...........................................................................................................................238
4.10.2.12 IP Port Priority .....................................................................................................................................239
4.10.2.13 Mapping CoS Values to ACLs..............................................................................................................239
4.10.2.14 ACL CoS Priority..................................................................................................................................240
4.10.3 DiffServ............................................................................................................................................................241
Configuring Quality of Service Parameters..........................................................................................................241
4.10.3.1 Configuring a DiffServ Class Map..........................................................................................................242
4.10.3.2 Policy Map.............................................................................................................................................245
4.10.3.3 Service Policy........................................................................................................................................249
4.10.4 Voice VLANs....................................................................................................................................................250
4.10.4.1 VoIP Traffic Configuration......................................................................................................................250
4.10.4.2 VoIP Port Configuration.........................................................................................................................251
4.10.4.3 Telephony OUI Configuration.................................................................................................................253
4.11 Security....................................................................................................................................................254
4.11.1 User Authentication..........................................................................................................................................254
4.11.1 Configuring User Accounts ..............................................................................................................................254
4.11.2 Configuring Local / Remote Logon Authentication...........................................................................................256
4.11.3 RADIUS Settings .............................................................................................................................................258
4.11.4 TACACS Settings.............................................................................................................................................259
4.11.5 AAAAuthorization and Accounting...................................................................................................................260
4.11.5.1 RADIUS Group Settings ........................................................................................................................261

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
8
4.11.5.2 AAA TACACS+ Group Settings..............................................................................................................261
4.11.5.3 AAAAccounting Settings .......................................................................................................................262
4.11.5.4 AAAAccounting Update.........................................................................................................................264
4.11.5.5 AAAAccounting 802.1X Port Settings....................................................................................................264
4.11.5.6 AAAAccounting Exec Command Privileges ..........................................................................................265
4.11.5.7 AAAAccounting EXEC Settings.............................................................................................................266
4.11.5.8 AAAAccounting Summary.....................................................................................................................267
4.11.5.9 AAAAccounting Summary.....................................................................................................................268
4.11.5.10 Authorization Settings..........................................................................................................................269
4.11.5.11 AAAAuthorization EXEC Settings........................................................................................................270
4.11.5.12 AAAAuthorization Summary................................................................................................................270
4.11.6 HTTPS Setting.................................................................................................................................................271
4.11.7 SSH .................................................................................................................................................................273
4.11.7.1 Configure Secure Shell..........................................................................................................................273
4.11.7.2 SSH Server Settings..............................................................................................................................275
4.11.7.3 SSH Host-Key Settings..........................................................................................................................276
4.11.8 802.1X Port Authentication ..............................................................................................................................279
4.11.8.1 Understanding IEEE 802.1X Port-Based Authentication........................................................................280
4.11.8.2 Displaying 802.1X Information...............................................................................................................283
4.11.8.3 802.1X Configuration.............................................................................................................................283
4.11.8.4 802.1X Port Configuration......................................................................................................................284
4.11.8.5 Displaying 802.1X Statistics...................................................................................................................286
4.11.8.6Windows Platform RADIUS Server Configuration..................................................................................287
4.11.8.7802.1X Client Configuration...................................................................................................................289
4.11.9 Client Security..................................................................................................................................................292
4.11.10 Port Security ..................................................................................................................................................293
4.11.11 Web Authentication ........................................................................................................................................296
4.11.11.1 Web Authentication Configuration........................................................................................................297
4.11.11.2 Web Authentication Port Configuration ................................................................................................298
4.11.11.3 Web Authentication Port Information....................................................................................................298
4.11.11.4 Re-Authentication ................................................................................................................................299
4.11.12 NetworkAccess (MAC Address Authentication).............................................................................................301
4.11.12.1 Network Access Configuration.............................................................................................................302
4.11.12.2 NetworkAccess Port Configuration .....................................................................................................302
4.11.12.3 NetworkAccess MAC Address Information..........................................................................................304
4.11.13 Access Control Lists.......................................................................................................................................306
4.11.13.1 ACL Configuration................................................................................................................................306
4.11.13.2 Configure a Standard ACL...................................................................................................................308
4.11.13.3 Extended ACL......................................................................................................................................309
4.11.13.4 MAC ACL.............................................................................................................................................311

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
9
4.11.13.5 ACL Port Binding..................................................................................................................................314
4.11.14 IP Filter ..........................................................................................................................................................316
4.11.14.1 Web IP Filter........................................................................................................................................316
4.11.14.2 SNMP IP Filter.....................................................................................................................................317
4.11.14.3 Telnet IP Filter......................................................................................................................................318
4.11.15 DHCP Snooping.............................................................................................................................................320
4.11.15.1 DHCP Snooping Configuration ............................................................................................................321
4.11.15.2 DHCP Snooping VLAN Configuration..................................................................................................321
4.11.15.3 Information Option Configuration.........................................................................................................322
4.11.15.4 DHCP Snooping Port Configuration.....................................................................................................324
4.11.16 IP Source Guard............................................................................................................................................325
4.11.16.1 Port Configuration................................................................................................................................325
4.11.16.2 Static Configuration..............................................................................................................................327
4.11.16.3 Dynamic Information............................................................................................................................328
4.12 Cluster.....................................................................................................................................................330
4.12.1 Cluster Configuration.......................................................................................................................................330
4.12.2 Cluster Member Configuration.........................................................................................................................332
4.12.3 Cluster Member Information............................................................................................................................332
4.12.4 Cluster Candidate Information.........................................................................................................................333
4.13 Power Over Ethernet (SGSD-1022P / SGSW-2840P)...........................................................................335
4.13.1 Power over Ethernet Powered Device.............................................................................................................335
4.13.2 Power Management: .......................................................................................................................................336
5. COMMAND LINE INTERFACE..........................................................................................339
5.1 Using the Command Line Interface........................................................................................................339
5.1.1 Accessing the CLI..............................................................................................................................................339
5.1.2 Console Connection ..........................................................................................................................................339
5.1.3 Telnet Connection..............................................................................................................................................339
5.2 Entering Commands................................................................................................................................341
5.2.1 Keywords and Arguments..................................................................................................................................341
5.2.2 Minimum Abbreviation .......................................................................................................................................341
5.2.3 Command Completion.......................................................................................................................................341
5.2.4 Getting Help on Commands ..............................................................................................................................341
5.2.5 Showing Commands .........................................................................................................................................342
5.2.6 Partial Keyword Lookup.....................................................................................................................................344
5.2.7 Negating the Effect of Commands.....................................................................................................................344
5.2.8 Using Command History....................................................................................................................................344
5.2.9 Understanding Command Modes......................................................................................................................344

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
10
5.2.10 Exec Commands.............................................................................................................................................345
5.2.11 Configuration Commands ................................................................................................................................346
5.2.12 Command Line Processing..............................................................................................................................347
5.3 Command Groups....................................................................................................................................348
5.4 General Commands .................................................................................................................................349
enable..................................................................................................................................................................349
disable.................................................................................................................................................................350
configure..............................................................................................................................................................351
show history ........................................................................................................................................................351
reload ..................................................................................................................................................................352
prompt.................................................................................................................................................................353
end ......................................................................................................................................................................353
exit.......................................................................................................................................................................353
quit ......................................................................................................................................................................354
5.5 System Management Commands...........................................................................................................355
5.5.1 Device Designation Commands ........................................................................................................................355
hostname.............................................................................................................................................................355
5.5.2 Banner Information Commands.........................................................................................................................356
banner configure .................................................................................................................................................356
banner configure company..................................................................................................................................358
banner configure dc-power-info...........................................................................................................................358
banner configure department ..............................................................................................................................359
banner configure equipment-info.........................................................................................................................359
banner configure equipment-location ..................................................................................................................360
banner configure ip-lan........................................................................................................................................361
banner configure lp-number ................................................................................................................................361
banner configure manager-info ...........................................................................................................................362
banner configure mux..........................................................................................................................................363
banner configure note .........................................................................................................................................363
show banner........................................................................................................................................................364
5.5.3 System Status Commands ................................................................................................................................365
show startup-config .............................................................................................................................................365
show running-config ............................................................................................................................................367
show system........................................................................................................................................................369
show users..........................................................................................................................................................370
show version .......................................................................................................................................................371
5.5.4 Frame Size Commands.....................................................................................................................................372
jumbo frame ........................................................................................................................................................372
5.5.5 File Management Commands............................................................................................................................373

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
11
copy.....................................................................................................................................................................373
delete ..................................................................................................................................................................376
dir ........................................................................................................................................................................377
whichboot............................................................................................................................................................378
boot system.........................................................................................................................................................378
5.6 Line Commands .......................................................................................................................................379
line.......................................................................................................................................................................380
login.....................................................................................................................................................................380
password.............................................................................................................................................................381
timeout login response ........................................................................................................................................382
exec-timeout........................................................................................................................................................383
password-thresh..................................................................................................................................................383
silent-time............................................................................................................................................................384
databits................................................................................................................................................................384
parity....................................................................................................................................................................385
speed ..................................................................................................................................................................386
stopbits................................................................................................................................................................386
disconnect...........................................................................................................................................................387
show line .............................................................................................................................................................387
5.7 Event Logging Commands......................................................................................................................388
logging on............................................................................................................................................................388
logging history.....................................................................................................................................................389
logging host.........................................................................................................................................................390
logging facility......................................................................................................................................................391
logging trap..........................................................................................................................................................391
clear log...............................................................................................................................................................392
show logging .......................................................................................................................................................392
show log..............................................................................................................................................................394
5.8 SMTP Alert Commands............................................................................................................................395
logging sendmail host..........................................................................................................................................395
logging sendmail level.........................................................................................................................................396
logging sendmail source-email............................................................................................................................396
logging sendmail destination-email .....................................................................................................................397
logging sendmail .................................................................................................................................................397
show logging sendmail........................................................................................................................................398
5.9 Time Commands.......................................................................................................................................398
sntp client............................................................................................................................................................399
sntp server...........................................................................................................................................................400

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
12
sntp poll...............................................................................................................................................................400
show sntp............................................................................................................................................................401
clock timezone.....................................................................................................................................................401
calendar set.........................................................................................................................................................402
show calendar.....................................................................................................................................................403
5.10 Switch Cluster Commands....................................................................................................................403
cluster..................................................................................................................................................................404
cluster commander..............................................................................................................................................404
cluster ip-pool......................................................................................................................................................405
cluster member....................................................................................................................................................405
rcommand ...........................................................................................................................................................406
show cluster ........................................................................................................................................................406
show cluster members.........................................................................................................................................407
show cluster candidates......................................................................................................................................407
5.11 SNMP Commands...................................................................................................................................408
snmp-server ........................................................................................................................................................409
show snmp..........................................................................................................................................................409
snmp-server community......................................................................................................................................410
snmp-server contact............................................................................................................................................411
Related Commands.............................................................................................................................................411
snmp-server host.................................................................................................................................................412
snmp-server enable traps....................................................................................................................................414
snmp-server engine-id.........................................................................................................................................415
show snmp engine-id ..........................................................................................................................................415
snmp-server view................................................................................................................................................416
show snmp view..................................................................................................................................................417
snmp-server group..............................................................................................................................................418
show snmp group................................................................................................................................................419
snmp-server user ................................................................................................................................................420
show snmp user ..................................................................................................................................................422
5.12 Authentication Commands....................................................................................................................423
5.12.1 User Account Commands................................................................................................................................423
username ............................................................................................................................................................423
enable password.................................................................................................................................................424
5.12.2 Authentication Sequence.................................................................................................................................425
authentication login .............................................................................................................................................426
authentication enable ..........................................................................................................................................426
5.12.3 RADIUS Client.................................................................................................................................................427
radius-server host................................................................................................................................................428

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
13
radius-server auth-port........................................................................................................................................429
radius-server acct-port.........................................................................................................................................429
radius-server key.................................................................................................................................................429
radius-server retransmit.......................................................................................................................................430
radius-server timeout...........................................................................................................................................430
show radius-server..............................................................................................................................................431
5.13.4 TACACS+ Client..............................................................................................................................................432
tacacs-server host...............................................................................................................................................432
tacacs-server port................................................................................................................................................433
tacacs-server key................................................................................................................................................433
tacacs-server retransmit......................................................................................................................................434
tacacs-server timeout..........................................................................................................................................434
show tacacs-server..............................................................................................................................................435
5.12.5 AAA Commands ..............................................................................................................................................436
aaa group server .................................................................................................................................................436
server ..................................................................................................................................................................437
aaa accounting dot1x ..........................................................................................................................................437
aaa accounting exec ...........................................................................................................................................438
aaa accounting commands..................................................................................................................................439
aaa accounting update........................................................................................................................................440
accounting dot1x.................................................................................................................................................440
accounting exec ..................................................................................................................................................441
accounting commands ........................................................................................................................................441
aaa authorization exec ........................................................................................................................................442
authorization exec...............................................................................................................................................443
show accounting..................................................................................................................................................443
5.12.6 Web Server Commands ..................................................................................................................................445
ip http port ...........................................................................................................................................................445
ip http server........................................................................................................................................................445
ip http secure-server............................................................................................................................................446
ip http secure-port ...............................................................................................................................................447
5.12.7 Telnet Server Commands ................................................................................................................................448
ip telnet server.....................................................................................................................................................448
5.12.8 Secure Shell Commands.................................................................................................................................449
ip ssh server........................................................................................................................................................451
ip ssh timeout......................................................................................................................................................452
ip ssh authentication-retries.................................................................................................................................453
ip ssh server-key size..........................................................................................................................................453
delete public-key .................................................................................................................................................454
ip ssh crypto host-key generate...........................................................................................................................454

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
14
ip ssh crypto zeroize............................................................................................................................................455
ip ssh save host-key............................................................................................................................................456
show ip ssh..........................................................................................................................................................456
show ssh .............................................................................................................................................................457
show public-key...................................................................................................................................................458
5.12.9 802.1X Port Authentication..............................................................................................................................459
dot1x system-auth-control...................................................................................................................................460
dot1x default........................................................................................................................................................460
dot1x max-req .....................................................................................................................................................460
dot1x port-control ................................................................................................................................................461
dot1x operation-mode .........................................................................................................................................461
dot1x re-authenticate...........................................................................................................................................462
dot1x re-authentication........................................................................................................................................463
dot1x timeout quiet-period...................................................................................................................................463
dot1x timeout re-authperiod.................................................................................................................................464
dot1x timeout tx-period........................................................................................................................................464
dot1x intrusion-action ..........................................................................................................................................465
show dot1x..........................................................................................................................................................466
5.12.10 Management IP Filter Commands.................................................................................................................468
management .......................................................................................................................................................468
show management..............................................................................................................................................469
5.13 Client Security Commands....................................................................................................................470
5.13.1 Port Security Commands.................................................................................................................................471
port security.........................................................................................................................................................471
5.13.2 Network Access (MAC Address Authentication) ..............................................................................................472
network-access mode .........................................................................................................................................473
network-access max-mac-count..........................................................................................................................474
mac-authentication intrusion-action.....................................................................................................................474
mac-authentication max-mac-count ....................................................................................................................475
network-access dynamic-vlan .............................................................................................................................475
network-access guest-vlan..................................................................................................................................476
mac-authentication reauth-time...........................................................................................................................477
clear network-access...........................................................................................................................................477
show network-access..........................................................................................................................................478
show network-access mac-address-table............................................................................................................479
5.13.3 Web Authentication..........................................................................................................................................480
web-auth login-attempts......................................................................................................................................480
web-auth quiet-period..........................................................................................................................................481
web-auth session-timeout....................................................................................................................................481
web-auth system-auth-control.............................................................................................................................482

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
15
web-auth..............................................................................................................................................................482
web-auth re-authenticate (Port)...........................................................................................................................483
web-auth re-authenticate (IP)..............................................................................................................................483
show web-auth....................................................................................................................................................484
show web-auth interface......................................................................................................................................484
show web-auth summary.....................................................................................................................................485
5.13.4 DHCP Snooping Commands...........................................................................................................................486
ip dhcp snooping.................................................................................................................................................486
ip dhcp snooping vlan..........................................................................................................................................488
ip dhcp snooping trust .........................................................................................................................................488
ip dhcp snooping verify mac-address..................................................................................................................489
ip dhcp snooping information option....................................................................................................................490
ip dhcp snooping information policy ....................................................................................................................491
show ip dhcp snooping........................................................................................................................................491
show ip dhcp snooping binding ...........................................................................................................................492
5.13.5 IP Source Guard Commands...........................................................................................................................492
ip source-guard ...................................................................................................................................................493
ip source-guard binding.......................................................................................................................................494
show ip source-guard..........................................................................................................................................495
show ip source-guard binding..............................................................................................................................496
5.14 Access Control List Commands...........................................................................................................496
5.14.1 IPACLs............................................................................................................................................................497
access-list ip........................................................................................................................................................497
permit, deny (Standard ACL)...............................................................................................................................498
permit, deny (Extended ACL) ..............................................................................................................................499
show ip access-list ..............................................................................................................................................501
ip access-group...................................................................................................................................................502
show ip access-group..........................................................................................................................................502
map access-list ip................................................................................................................................................503
show map access-list ip.......................................................................................................................................504
5.14.2 MAC ACLs.......................................................................................................................................................504
access-list mac....................................................................................................................................................505
permit, deny (MAC ACL)......................................................................................................................................505
show mac access-list ..........................................................................................................................................507
mac access-group...............................................................................................................................................507
show mac access-group......................................................................................................................................508
map access-list mac............................................................................................................................................508
show map access-list mac...................................................................................................................................509
5.14.3 ACL Information...............................................................................................................................................510
show access-list..................................................................................................................................................510

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
16
show access-group .............................................................................................................................................511
5.15 Interface Commands..............................................................................................................................511
interface...............................................................................................................................................................512
description...........................................................................................................................................................512
speed-duplex.......................................................................................................................................................513
negotiation...........................................................................................................................................................514
capabilities...........................................................................................................................................................515
flowcontrol...........................................................................................................................................................516
shutdown.............................................................................................................................................................517
broadcast byte-rate .............................................................................................................................................517
switchport broadcast ...........................................................................................................................................518
clear counters......................................................................................................................................................519
show interfaces status.........................................................................................................................................519
show interfaces counters.....................................................................................................................................520
show interfaces switchport ..................................................................................................................................522
5.16 Link Aggregation Commands...............................................................................................................524
channel-group .....................................................................................................................................................525
lacp......................................................................................................................................................................525
lacp system-priority .............................................................................................................................................527
lacp admin-key (Ethernet Interface) ....................................................................................................................528
lacp admin-key (Port Channel)............................................................................................................................529
lacp port-priority...................................................................................................................................................529
show lacp ............................................................................................................................................................530
5.17 Mirror Port Commands..........................................................................................................................535
port monitor.........................................................................................................................................................535
show port monitor................................................................................................................................................536
5.18 Rate Limit Commands ...........................................................................................................................536
rate-limit...............................................................................................................................................................537
5.19 Address Table Commands ....................................................................................................................537
mac-address-table static .....................................................................................................................................538
clear mac-address-table dynamic........................................................................................................................539
show mac-address-table .....................................................................................................................................539
mac-address-table aging-time.............................................................................................................................540
show mac-address-table aging-time....................................................................................................................541
5.20 Spanning Tree Commands....................................................................................................................541
spanning-tree ......................................................................................................................................................542
spanning-tree mode.............................................................................................................................................543

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
17
spanning-tree forward-time..................................................................................................................................544
spanning-tree hello-time......................................................................................................................................544
spanning-tree max-age........................................................................................................................................545
spanning-tree priority...........................................................................................................................................546
spanning-tree pathcost method...........................................................................................................................546
spanning-tree transmission-limit..........................................................................................................................547
spanning-tree mst-configuration..........................................................................................................................547
mst vlan...............................................................................................................................................................548
mst priority...........................................................................................................................................................549
name ...................................................................................................................................................................549
revision................................................................................................................................................................550
max-hops.............................................................................................................................................................551
spanning-tree spanning-disabled.........................................................................................................................551
spanning-tree cost...............................................................................................................................................552
spanning-tree port-priority ...................................................................................................................................553
spanning-tree edge-port......................................................................................................................................554
spanning-tree portfast..........................................................................................................................................554
spanning-tree link-type........................................................................................................................................555
spanning-tree mst cost........................................................................................................................................556
spanning-tree mst port-priority.............................................................................................................................557
spanning-tree protocol-migration.........................................................................................................................558
show spanning-tree.............................................................................................................................................558
show spanning-tree mst configuration.................................................................................................................560
5.21 VLAN Commands...................................................................................................................................562
5.21.1 GVRP and Bridge Extension Commands........................................................................................................562
bridge-ext gvrp ....................................................................................................................................................563
show bridge-ext...................................................................................................................................................563
switchport gvrp....................................................................................................................................................564
show gvrp configuration.......................................................................................................................................564
garp timer............................................................................................................................................................565
show garp timer...................................................................................................................................................566
5.21.2 Editing VLAN Groups.......................................................................................................................................567
vlan database......................................................................................................................................................567
vlan......................................................................................................................................................................567
5.21.3 Configuring VLAN Interfaces...........................................................................................................................568
interface vlan.......................................................................................................................................................569
switchport mode..................................................................................................................................................569
switchport acceptable-frame-types......................................................................................................................570
switchport ingress-filtering...................................................................................................................................571
switchport native vlan..........................................................................................................................................572

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
18
switchport allowed vlan........................................................................................................................................572
switchport forbidden vlan.....................................................................................................................................573
5.21.4 Displaying VLAN Information...........................................................................................................................574
show vlan ............................................................................................................................................................574
5.21.5 Configuring IEEE 802.1Q Tunneling................................................................................................................576
dot1q-tunnel system-tunnel-control.....................................................................................................................577
switchport dot1q-tunnel mode .............................................................................................................................577
switchport dot1q-tunnel tpid.................................................................................................................................578
show dot1q-tunnel...............................................................................................................................................579
5.21.6 Configuring Private VLANs..............................................................................................................................580
private-vlan..........................................................................................................................................................581
private vlan association.......................................................................................................................................582
switchport mode private-vlan...............................................................................................................................582
switchport private-vlan host-association..............................................................................................................583
switchport private-vlan isolated ...........................................................................................................................584
switchport private-vlan mapping..........................................................................................................................584
show private-vlan ................................................................................................................................................585
5.21.7 Configuring Protocol-based VLANs.................................................................................................................586
protocol-vlan protocol-group (Configuring Groups) .............................................................................................586
protocol-vlan protocol-group (Configuring Interfaces) .........................................................................................587
show protocol-vlan protocol-group ......................................................................................................................588
show interfaces protocol-group ...........................................................................................................................589
5.21.8 Configuring Voice VLANs ................................................................................................................................590
voice vlan ............................................................................................................................................................590
voice vlan aging...................................................................................................................................................591
voice vlan mac-address.......................................................................................................................................591
switchport voice vlan ...........................................................................................................................................592
switchport voice vlan rule ....................................................................................................................................593
switchport voice vlan security..............................................................................................................................594
switchport voice vlan priority................................................................................................................................594
show voice vlan...................................................................................................................................................595
5.22 LLDP Commands....................................................................................................................................596
lldp.......................................................................................................................................................................598
lldp holdtime-multiplier.........................................................................................................................................598
lldp medFastStartCount.......................................................................................................................................599
lldp notification-interval........................................................................................................................................599
lldp refresh-interval..............................................................................................................................................600
lldp reinit-delay....................................................................................................................................................600
lldp tx-delay.........................................................................................................................................................601
lldp admin-status .................................................................................................................................................602

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
19
lldp notification.....................................................................................................................................................602
lldp mednotification..............................................................................................................................................603
lldp basic-tlv management-ip-address.................................................................................................................603
lldp basic-tlv port-description...............................................................................................................................604
lldp basic-tlv system-capabilities..........................................................................................................................605
lldp basic-tlv system-description..........................................................................................................................605
lldp basic-tlv system-name..................................................................................................................................606
lldp dot1-tlv proto-ident........................................................................................................................................606
lldp dot1-tlv proto-vid...........................................................................................................................................607
lldp dot1-tlv pvid ..................................................................................................................................................607
lldp dot1-tlv vlan-name ........................................................................................................................................608
lldp dot3-tlv link-agg.............................................................................................................................................608
lldp dot3-tlv mac-phy ...........................................................................................................................................609
lldp dot3-tlv max-frame........................................................................................................................................609
lldp dot3-tlv poe...................................................................................................................................................610
lldp medtlv extpoe................................................................................................................................................610
lldp medtlv inventory............................................................................................................................................611
lldp medtlv location..............................................................................................................................................611
lldp medtlv med-cap ............................................................................................................................................612
lldp medtlv network-policy ...................................................................................................................................613
show lldp config...................................................................................................................................................613
show lldp info local-device...................................................................................................................................615
show lldp info remote-device...............................................................................................................................616
show lldp info statistics........................................................................................................................................616
5.23 Class of Service Commands.................................................................................................................618
5.23.1 Priority Commands (Layer 2)...........................................................................................................................618
queue mode ........................................................................................................................................................618
switchport priority default.....................................................................................................................................619
queue bandwidth.................................................................................................................................................620
queue cos-map....................................................................................................................................................621
show queue mode...............................................................................................................................................622
show queue bandwidth........................................................................................................................................622
show queue cos-map ..........................................................................................................................................623
5.23.2 Priority Commands (Layer 3 and 4).................................................................................................................624
map ip dscp.........................................................................................................................................................624
map ip port ..........................................................................................................................................................625
map ip precedence..............................................................................................................................................626
map ip tos............................................................................................................................................................627
map access-list ip................................................................................................................................................628
map access-list mac............................................................................................................................................628

User’s Manual of SGSD-1022 / SGSD-1022P
SGSW-2840 / SGSW-2840P
20
show map ip dscp................................................................................................................................................629
show map ip port.................................................................................................................................................629
show map ip precedence.....................................................................................................................................630
show map ip tos ..................................................................................................................................................631
show map access-list ..........................................................................................................................................632
5.24 Quality of Service Commands ..............................................................................................................632
class-map............................................................................................................................................................633
match...................................................................................................................................................................634
policy-map...........................................................................................................................................................635
class....................................................................................................................................................................635
set .......................................................................................................................................................................636
police...................................................................................................................................................................637
service-policy.......................................................................................................................................................638
show class-map...................................................................................................................................................639
show policy-map..................................................................................................................................................639
show policy-map interface...................................................................................................................................640
5.25 Multicast Filtering Commands..............................................................................................................641
5.25.1 IGMP Snooping Commands............................................................................................................................641
ip igmp snooping .................................................................................................................................................641
ip igmp snooping vlan static ................................................................................................................................642
ip igmp snooping version.....................................................................................................................................642
ip igmp snooping leave-proxy..............................................................................................................................643
ip igmp snooping immediate-leave......................................................................................................................644
show ip igmp snooping........................................................................................................................................644
show mac-address-table multicast ......................................................................................................................645
5.25.2 IGMP Query Commands (Layer 2)..................................................................................................................646
ip igmp snooping querier.....................................................................................................................................646
ip igmp snooping query-count .............................................................................................................................647
ip igmp snooping query-interval...........................................................................................................................647
ip igmp snooping query-max-response-time........................................................................................................648
5.25.3 Static Multicast Routing Commands................................................................................................................649
ip igmp snooping vlan mrouter ............................................................................................................................649
show ip igmp snooping mrouter...........................................................................................................................650
5.25.4 IGMP Filtering and Throttling Commands........................................................................................................651
ip igmp filter (Global Configuration).....................................................................................................................651
ip igmp profile......................................................................................................................................................652
permit, deny.........................................................................................................................................................652
range...................................................................................................................................................................653
ip igmp filter (Interface Configuration) .................................................................................................................653