Planex FMG-24K User manual

FMG-24K
Gigabit Ethernet Switch

1SWITCHMANAGEMENT
1.ConnctingtotheSwitch・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・4
2.BasicConfiguration ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・8
3.ManagingSystemFiles ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・15
4. SystemDefaults ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・16
2CONFIGURINGTHESWITCH
1.UsingtheWebInterface ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・19
2.NavigatingtheWebBrowserInterface ・・・・・・・・・・・・・・・・・・・・・・・・・・・21
3.PanelDisplay ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・23
4.MainMenu・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・24
5.BasicConfiguration ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・26
6.Security ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・31
7.ManagingFirmware ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・34
8.PortConfiguration・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・43
9.AddressTableSettings ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・49
10.SpanningTreeProtocolConfiguration ・・・・・・・・・・・・・・・・・・・・・・・・・・52
11.VLANConfiguration ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・61
12.ClassofServiceConfiguration・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・73
13.PortTrunkConfiguration・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・83
14.ConfiguringSNMP ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・88
15.MulticastConfiguration ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・91
16.ShowingDeviceStatistics・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・100
3COMMANDLINEINTERFACE
1.UsingtheCommandLineInterface・・・・・・・・・・・・・・・・・・・・・・・・・・・・・102
2.EnteringCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・105
3.CommandGroups ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・111
4.GeneralCommands・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・113
5.Flash/FileCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・119
6.SystemManagementCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・126
7.RadiusClientCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・142
8.SNMPCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・147
CONTENTS
1

9.IPCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・154
10.LineCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・161
11.InterfaceCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・173
12.AddressTableCommands・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・185
13.SpanningTreeCommands・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・190
14.VLANCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・202
15.GVRPandBridgeExtensionCommands ・・・・・・・・・・・・・・・・・・・・・・213
16.IGMPSnoopingCommands・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・219
17.PriorityCommands・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・229
18.MirrorPortCommands ・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・241
19.PortTrunkingCommands・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・244
A.TROUBLESHOOTING
1.TroubleshootingChart・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・248
2.UpgradingFirmwareviatheSerialPort ・・・・・・・・・・・・・・・・・・・・・・・・・249
B.PINASSIGNMENTS
1.ConsolePortPinAssignments・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・252
GLOSSARY・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・・254
2

3
User’s Manual Ver.1.0
No.PCM-02-06-JF-FML-1200

1.Connecting to the Switch
Configuration Options
The FMG-24K PL NEX COMMUNIC TIONS INC includes a built-in network-
management agent. The agent offers a variety of management options,including
SNMP, RMON and a Web-based interface. PC may also be connected directly
to the switch for configuration and monitoring via a command line interface (CLI).
The IP address for this switch is assigned via 192.168.0.1 by default. To change this
address, see “Setting an IP Address” on page 1-6.
The switch’s HTTP Web agent allows you to configure switch parameters,moni-
tor port connections, and display statistics graphically using a standard Web
browser such as Netscape Navigator version 6.2 and higher or Microsoft IE ver-
sion 5.0 and higher. The switch’s Web management interface can be accessed
from any computer attached to the network.
The switch’s management agent is based on SNMP (Simple Network
Management Protocol). This SNMP agent permits the switch to be managed
from any system in the network using management software,such as such as
PL NEX COMMUNIC TIONS INC ’s free EliteView software.
The CLI program can be accessed by a direct connection to the RS-232serial
console port on the switch, or remotely by a Telnet connection over the network.
11..SSWWIITTCCHHMMAANNAAGGEEMMEENNTT
4

The switch’s CLI configuration program, Web interface, and SNMP agent
allow you to perform the following management functions:
> Set user names and passwords for up to 16 users
> Set an IP interface for a management VL N
> Configure SNMP parameters
> Enable/disable any port
> Set the speed/duplex mode for any port
> Configure up to 255 IEEE 802.1Q VL Ns
> Enable GVRP automatic VL N registration
> Configure IGMP multicast filtering
> TFTP upload and download of system firmware
> TFTP upload and download of switch configuration files
> Configure Spanning Tree parameters
>Configure Class of Service (CoS) priority queuing
> Configure up to six static or L CP trunks
> Enable jumbo frame support
> Enable port mirroring
> Set broadcast storm control on any port
> Display system information and statistics
5

Required Connections
The switch provides an RS-232 serial port that enables a connection to a PC or
terminal for monitoring and configuring the switch. null-modem console cable
is provided with the switch.
ttach a VT100-compatible terminal, or a PC running a terminal emulation pro-
gram to the switch. You can use the console cable provided with this package, or
use a null-modem cable that complies with the wiring assignments shown in .
To connect a terminal to the console port, complete the following steps:
1. Connect the console cable to the serial port on a terminal, or a PC running ter-
minal emulation software, and tighten the captive retaining screws on the DB-
9 connector.
2. Connect the other end of the cable to the RS-232 serial port on the switch.
3. Make sure the terminal emulation software is set as follows:
> Select the appropriate serial port (COM port 1 or COM port 2).
> Set the data rate to 9600 baud.
> Set the data format to 8 data bits, 1 stop bit, and no parity.
> Set flow control to none.
> Set the emulation mode to VT100.
> When using HyperTerminal, select Terminal keys, not Windows keys.
1. When using HyperTerminal with Microsoft ®Windows ®2000,make sure that you
have Windows 2000 Service Pack 2 or later installed. Windows 2000 Service Pack 2
fixes the problem of arrow keys not functioning in HyperTerminal’s VT100 emulation.
See www.microsoft.com for information on Windows 2000 service packs.
2. Refer to “Line Commands”on page 3-56 for a complete description of console con-
figuration options.
3. Once you have set up the terminal correctly, the console login screen will be dis-
played.
For a description of how to use the CLI, see “Using the Command Line
Interface” on page 3-1. For a list of all the CLI commands and detailed
information on using the CLI, refer to “Command Groups” on page 3-10.
6

Remote Connections
Prior to accessing the switch’s onboard agent via a network connection,you must
first configure it with a valid IP address, subnet mask, and default gateway using
a console connection, DHCP or BOOTP protocol.
The IP address for this switch is assigned via 192.168.0.1 by default. To manual-
ly configure this address or enable dynamic address assignment via DHCP or
BOOTP, see “Setting an IP ddress” on page 1-6.
This switch supports four concurrent Telnet sessions.
fter configuring the switch’s IP parameters, you can access the onboard config-
uration program from anywhere within the attached network. The onboard config-
uration program can be accessed using Telnet from any computer attached to
the network. The switch can also be managed by any computer using a Web
browser (Internet Explorer 5.0 or above, or Netscape Navigator 6.2 or above), or
from a network computer using network management software such as
EliteView.
The onboard program only provides access to basic configuration functions. To access
the full range of SNMP management functions, you must use SNMP-based network
management software, such as EliteView.
7

2.Basic Configuration
Console Connection
The CLI program provides two different command levels — normal access level
(Normal Exec) and privileged access level (Privileged Exec).The commands
available at the Normal Exec level are a limited subset of those available at the
Privileged Exec level and allow you to only display information and use basic util-
ities. To fully configure switch parameters,you must access the CLI at the
Privileged Exec level.
ccess to both CLI levels are controlled by user names and passwords.The
switch has a default username and password for each level. To log into the CLI
at the Privileged Exec level using the default user name and password, perform
these steps:
1. To initiate your console connection, press <Enter>. The “User ccess
Verification” procedure starts.
2. t the Username prompt, enter “admin.”
3. t the Password prompt, also enter “admin.” (The password characters are
not displayed on the console screen.)
4. The session is opened and the CLI displays the “Console#” prompt indicating
you have access at the Privileged Exec level.
Setting Passwords
If this is your first time to log into the CLI program, you should define new passwords
for both default user names using the “username”command, record them and put
them in a safe place.
Passwords can consist of up to 8 alphanumeric characters and are case sensi-
tive. To prevent unauthorized access to the switch, set the passwords as follows:
8

1. Open the console interface with the default user name and password “admin”
to access the Privileged Exec level.
2. Type “configure” and press <Enter>.
3. Type “username guest password 0 password,” for the Normal Exec level,
where password is your new password. Press <Enter>.
4. Type “username admin password 0 password,” for the Privileged Exec level,
where password is your new password. Press <Enter>.
Username: admin
Password:
CLI session with the host is opened.
To end the CLI session, enter [Exit].
Console#configure
Console(config)#username guest password 0 [password]
Console(config)#username admin password 0 [password]
Console(config)#
Setting an IP Address
You must establish IP address information for the switch to obtain management
access through the network. This can be done in either of the following ways:
> Manual — You have to input the information, including IP address and subnet
mask. If your management station is not in the same IP subnet as the switch,
you will also need to specify the default gateway router.
> Dynamic — The switch sends IP configuration requests to BOOTP or DHCP
address allocation servers on the network.
Only one VLAN interface can be assigned an IP address (the default is VLAN 1). This
defines the management VLAN, the only VLAN through which you can gain manage-
ment access to the switch. If you assign an IP address to any other VLAN, the new IP
address overrides the original IP address and this becomes the new management
VLAN.
9

> Manual Configuration — You can manually assign an IP address to the
switch. You may also need to specify a default gateway that resides between
this device and management stations that exist on another network segment.
Valid IP addresses consist of four decimal numbers, 0 to 255, separated by
periods. nything outside this format will not be accepted by the CLI program.
The IP address for this switch is assigned via DHCP by default.
Before you can assign an IP address to the switch, you must obtain the following
information from your network administrator:
> IP address for the switch
> Default gateway for the network
> Network mask for this network
To assign an IP address to the switch, complete the following steps:
1. From the Privileged Exec level global configuration mode prompt, type “inter-
face vlan 1” to access the interface-configuration mode. Press <Enter>.
2. Type “ip address ip-address netmask,” where “ip-address” is the switch IP
address and “netmask” is the network mask for the network. Press <Enter>.
3. Type “exit” to return to the global configuration mode prompt. Press <Enter>.
4. To set the IP address of the default gateway for the network to which the
switch belongs, type “ip default-gateway gateway,” where “gateway” is the IP
address of the default gateway. Press <Enter>.
Console(config)#interface vlan 1
Console(config-if)#ip address 192.168.1.5 255.255.255.0
Console(config-if)#exit
Console(config)#ip default-gateway 192.168.1.254
Console(config)#
10

Dynamic Configuration
If you select the “bootp” or “dhcp” option, IP will be enabled but will not function
until a BOOTP or DHCP reply has been received. You therefore need to use the
“ip dhcp restart” command to start broadcasting service requests. Requests will
be sent periodically in an effort to obtain IP configuration information. (BOOTP
and DHCP values can include the IP address, subnet mask, and default gate-
way.)
If the “bootp” or “dhcp” option is saved to the startup-config file, then the switch
will start broadcasting service requests as soon as it is powered on.
To automatically configure the switch by communicating with BOOTP or DHCP
address allocation servers on the network, complete the following steps:
1. From the Privileged Exec level global configuration mode prompt,type “inter-
face vlan 1” to access the interface-configuration mode. Press <Enter>.
2. t the interface-configuration mode prompt, use one of the following com-
mands:
> To obtain IP settings through DHCP, type “ip address dhcp” and press
<Enter>.
> To obtain IP settings through BOOTP, type “ip address bootp” and press
<Enter>.
3. Type “exit” to return to the global configuration mode. Press <Enter>.
4. Type “ip dhcp restart” to begin broadcasting service requests. Press <Enter>.
5. Wait a few minutes, and then check the IP configuration settings, by typing the
“show ip interface” command. Press <Enter>.
6. Then save your configuration changes by typing “copy running-config startup-
config.” Enter the startup file name and press <Enter>.
11

Console(config)#interface vlan 1
Console(config-if)#ip address dhcp
Console(config-if)#exit
Console#ip dhcp restart
Console#show ip interface
IP interface vlan
IP address and netmask: 10.1.0.54 255.255.255.0 on VL N 1,
and address mode: User specified.
Console#copy running-config startup-config
Startup configuration file name []: startup
Console#
Enabling SNMP Management Access
The switch can be configured to accept management commands from Simple
Network Management Protocol (SNMP) applications such as EliteView. You can
configure the switch to (1) respond to SNMP requests or (2) generate SNMP
traps.
When SNMP management stations send requests to the switch (either to return
information or to set a parameter), the switch provides the requested data or sets
the specified parameter. The switch can also be configured to send information
to SNMP managers (without being requested by the managers) through trap
messages, which inform the manager that certain events have occurred.
> Community Strings — Community strings are used to control management
access to SNMP stations, as well as to authorize SNMP stations to receive
trap messages from the switch. You therefore need to assign community
strings to specified users or user groups, and set the access level.
The default strings are:
> public - with read-only access. uthorized management stations are only able
to retrieve MIB objects.
> private - with read-write access. uthorized management stations are able to
both retrieve and modify MIB objects.
12

If you do not intend to utilize SNMP, it is recommended that you delete both of the
default community strings. If there are no community strings, then SNMP management
access to the switch is disabled.
To prevent unauthorized access to the switch via SNMP, it is recommended that
you change the default community strings.
To configure a community string, complete the following steps:
1. From the Privileged Exec level global configuration mode prompt,type “snmp-
server community string mode,” where “string” is the community access string
and “mode” is rw (read/write) or ro (read only). Press <Enter>.
2. To remove an existing string, simply type “no snmp-server community string,”
where “string” is the community access string to remove. Press <Enter>.
Console(config)#snmp-server community PL NEX COMMUNIC TIONS INC rw
Console(config)#snmp-server community private
Console(config)#
> Trap Receivers — You can also specify SNMP stations that are to receive
traps from the switch.
To configure a trap receiver, complete the following steps:
1. From the Privileged Exec level global configuration mode prompt, type “snmp-
server host host-address community-string,” where “host-address” is the IP
address for the trap receiver and “community-string” is the string associated
with that host. Press <Enter>.
2. In order to configure the switch to send SNMP notifications, you must enter at
least one snmp-server enable traps command. Type “snmp-server enable
traps type,” where “type” is either authentication or link-up-down. Press
<Enter>.
Console(config)#snmp-server enable traps link-up-down
Console(config)#
13

Saving Configuration Settings
Configuration commands only modify the running configuration file and are not
saved when the switch is rebooted. To save all your configuration changes in
nonvolatile storage, you must copy the running configuration file to the start-up
configuration file using the “copy” command.
To save the current configuration settings, enter the following command:
1. From the Privileged Exec mode prompt, type “copy running-config startup-con-
fig” and press <Enter>.
2. Enter the name of the start-up file. Press <Enter>.
Console#copy running-config startup-config
Startup configuration file name []: startup
Console#
14

.Managing System Files
The switch’s flash memory supports three types of system files that can be man-
aged by the CLI program, Web interface, or SNMP. The switch’s file system
allows files to be uploaded and downloaded, copied, deleted, and set as a start-
up file.
The three types of files are:
> Configuration — These files store system configuration information and are
created when configuration settings are saved. Saved configuration files can
be selected as a system start-up file or can be uploaded via TFTP to a server
for backup. file named “Factory_Default_Config.cfg” contains all the system
default settings and cannot be deleted from the system. See “Saving or
Restoring Configuration Settings” on page 2-17 for more information.
> Operation Code — System software that is executed after boot-up, also
known as run-time code. This code runs the switch operation and provides the
CLI, Web and SNMP management interfaces. See “Managing Firmware” on
page 2-15 for more information.
> Diagnostic Code — Software that is run during system boot-up, also known
as POST (Power On Self-Test). This code also provides a facility to upload
firmware files to the system directly through the console port (see “Upgrading
Firmware via the Serial Port” on page -2).
Due to the size limit of the flash memory, the switch supports only two operation
code files, and two diagnostic code files. However, you can have as many con-
figuration files as available flash memory space allows.
In the system flash memory, one file of each type must be set as the start-up file.
During a system boot, the diagnostic and operation code files set as the start-up
file are run, and then the start-up configuration file is loaded. Configuration files
can also be loaded while the system is running, without rebooting the system.
15

4.System Defaults
The switch’s system defaults are provided in the configuration file
“Factory_Default_Config.cfg.” To reset the switch defaults, this file should be set
as the startup configuration file (see “Setting the Startup Configuration File” on
page 2-18).
The following table lists some of the basic system defaults.
Function Parameter Default
IP Settings Management. VL N 1
DHCP Disable
BOOTP Disabled
User Specified Disabled
IP ddress 192.168.0.1
Subnet Mask 255.0.0.0
Default Gateway 0.0.0.0
Web Management HTTP Server Enabled
HTTP Port Number 80
SNMP Community Strings “public” (read only)
“private” (read/write)
uthentication Failure Enabled
Traps
Link-up-Down Traps Enabled
Security Privileged Exec Level Username “admin”
Password “admin”
Normal Exec Level Username “guest”
Password “guest”
Enable Privileged Exec Password “super”
from Normal Exec Level
R DIUS uthentication DisabledConsole Port
16

Function Parameter Default
Console Port Baud Rate 9600
Connection Data bits 8
Stop bits 1
Parity none
Local Console Timeout 0 (disabled)
Port Status dmin Status Enabled
uto-negotiation Enabled
Flow Control Disabled
10/100/1000 Mbps Port 10 Mbps half duplex
Capability 10 Mbps full duplex
100 Mbps half duplex
100 Mbps full duplex
1000 Mbps full duplex
Full-duplex flow control disabled
Symmetric flow control disabled
Link Aggregation Static Trunks none
L CP (all ports) Disabled
Spanning Tree Status Enabled
Protocol (Defaults: ll parameters based
on IEEE 802.1D)
Fast Forwarding Disabled
Address Table ging Time 300 seconds
Virtual LANs Default VL N 1
PVID 1
cceptable Frame Type ll
Ingress Filtering Disabled
GVRP (global) Disabled
GVRP (port interface) Disabled
17

Function Parameter Default
Class of Service Ingress Port Priority 0
Weighted Round Robin Class 0: 16
Class 1: 64
Class 2: 128
Class 3: 240
IP Precedence Priority Disabled
IP DSCP Priority Disabled
IP Port Priority Disabled
Multicast Filtering IGMP Snooping Enabled
ct as Querier Enabled
Broadcast Storm Status Enabled (all ports)
Protection Broadcast Limit Rate 256 packets per second
System Log Status Enabled
Messages Logged Levels 0-7 (all)
Messages Logged to Flash Levels 0-3
Jumbo Frames Status Disabled
18

19
1.Using the Web Interface
This switch provides an embedded HTTP Web agent. Using a Web browser you
can configure the switch and view statistics to monitor network activity. The Web
agent can be accessed by any computer on the network using a standard Web
browser (Internet Explorer 5.0 or above, or Netscape Navigator 6.2 or above).
You can also use the Command Line Interface (CLI) to manage
the switch over a serial connection to the console port or via
Telnet. For more information on using the CLI, refer to Chapter 3
“Command Line Interface.”
Prior to accessing the switch from a Web browser, be sure you have first per-
formed the following tasks:
1. Configure the switch with a valid IP address, subnet mask, and default gate-
way using an out-of-band serial connection, BOOTP or DHCP protocol (see
“Setting the IP ddress” on page 2-9).
2. Set user names and passwords using an out-of-band serial connection.
ccess to the Web agent is controlled by the same user names and pass-
words as the onboard configuration program. (See “Configuring the Logon
Password” on page 2-12.)
If you log into the Web interface as guest (Normal Exec level), you
can view page information but only change the guest password. If
you log in as admin (Privileged Exec level), you can apply changes
on all pages.
2.CONFIGURING THE SWITCH