SMC Networks 6152PL2 FICHE Programming manual

Management Guide
SMC6128PL2
SMC6152PL2
TigerSwitchTM 10/100
24-Port 10/100 Switch with PoE,
IP Clustering and 4 Gigabit Ports

20 Mason
Irvine, CA 92618
Phone: [phone]
TigerSwitch 10/100
Management Guide
From SMC's Tiger line of feature-rich workgroup LAN solutions
May 2009
Pub. # 149100000007A
E052009-MW-R01

Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and
reliable. However, no responsibility is assumed by SMC for its use, nor for any
infringements of patents or other rights of third parties which may result from its use. No
license is granted by implication or otherwise under any patent or patent rights of SMC.
SMC reserves the right to change specifications at any time without notice.
Copyright © 2009 by
SMC Networks, Inc.
20 Mason
Irvine, CA 92618
All rights reserved.
Trademarks:
SMC is a registered trademark; and EZ Switch, TigerStack and TigerSwitch are
trademarks of SMC Networks, Inc. Other product and company names are trademarks or
registered trademarks of their respective holders.

v
Warranty and Product Registration
To register SMC products and to review the detailed warranty statement, please refer to
the Support Section of the SMC Website at http://www.smc.com.

vi

vii
About This Guide
Purpose
This guide gives specific information on how to operate and use the management
functions of the switch.
Audience
The guide is intended for use by network administrators who are responsible for operating
and maintaining network equipment; consequently, it assumes a basic working
knowledge of general switch functions, the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
Conventions
The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features or
instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage the
system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Related Publications
The following publication details the hardware features of the switch, including the
physical and performance-related characteristics, and how to install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help that describes all
management related features.
Revision History
This section summarizes the changes in each revision of this guide.
May 2009 Revision
This is the first revision of this guide. This guide is valid for software release v1.3.5.2.

viii

ix
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Managing System Files 2-8
Saving Configuration Settings 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-13
Displaying System Information 3-13
Displaying Switch Hardware/Software Versions 3-15
Displaying Bridge Extension Capabilities 3-17
Setting the Switch's IP Address 3-18
Manual Configuration 3-19
Using DHCP/BOOTP 3-20
Enabling Jumbo Frames 3-21
Managing Firmware 3-22
Automatic Operation Code Upgrade 3-22

Contents
x
Downloading System Software from a Server 3-26
Saving or Restoring Configuration Settings 3-28
Downloading Configuration Settings from a Server 3-29
Uploading and Downloading Files Using HTTP 3-30
Console Port Settings 3-32
Telnet Settings 3-34
Configuring Event Logging 3-36
System Log Configuration 3-36
Remote Log Configuration 3-37
Displaying Log Messages 3-39
Sending Simple Mail Transfer Protocol Alerts 3-39
Resetting the System 3-41
Setting the System Clock 3-42
Setting the Time Manually 3-43
Configuring SNTP 3-43
Configuring NTP 3-44
Setting the Time Zone 3-46
Configuring Summer Time 3-47
Simple Network Management Protocol 3-49
Enabling the SNMP Agent 3-51
Setting Community Access Strings 3-51
Specifying Trap Managers and Trap Types 3-52
Configuring SNMPv3 Management Access 3-55
Setting the Local Engine ID 3-55
Specifying a Remote Engine ID 3-56
Configuring SNMPv3 Users 3-57
Configuring Remote SNMPv3 Users 3-59
Configuring SNMPv3 Groups 3-61
Setting SNMPv3 Views 3-64
Sampling Traffic Flows 3-65
Configuring sFlow Global Parameters 3-66
Configuring sFlow Port Parameters 3-68
User Authentication 3-70
Configuring User Accounts 3-70
Configuring Local/Remote Logon Authentication 3-72
Configuring Encryption Keys 3-75
AAA Authorization and Accounting 3-76
Configuring AAA RADIUS Group Settings 3-77
Configuring AAA TACACS+ Group Settings 3-78
Configuring AAA Accounting 3-78
AAA Accounting Update 3-80
AAA Accounting 802.1X Port Settings 3-81
AAA Accounting Exec Command Privileges 3-82
AAA Accounting Exec Settings 3-83
AAA Accounting Summary 3-83

Contents
xi
Authorization Settings 3-85
Authorization EXEC Settings 3-86
Authorization Summary 3-87
Configuring HTTPS 3-88
Replacing the Default Secure-site Certificate 3-89
Configuring the Secure Shell 3-90
Generating the Host Key Pair 3-93
Importing User Public Keys 3-95
Configuring the SSH Server 3-97
Configuring 802.1X Port Authentication 3-99
Displaying 802.1X Global Settings 3-100
Configuring 802.1X Global Settings 3-101
Configuring Port Settings for 802.1X 3-101
Displaying 802.1X Statistics 3-104
Filtering IP Addresses for Management Access 3-106
General Security Measures 3-108
Configuring Port Security 3-109
Web Authentication 3-110
Configuring Web Authentication 3-111
Configuring Web Authentication for Ports 3-112
Displaying Web Authentication Port Information 3-113
Re-authenticating Web Authenticated Ports 3-113
Network Access (MAC Address Authentication) 3-114
Configuring the MAC Authentication Reauthentication Time 3-116
Configuring MAC Authentication for Ports 3-117
Configuring Port Link Detection 3-119
Displaying Secure MAC Address Information 3-120
MAC Filter Configuration 3-121
Access Control Lists 3-123
Setting the ACL Name and Type 3-124
Configuring a Standard IPv4 ACL 3-125
Configuring an Extended IPv4 ACL 3-125
Configuring a Standard IPv6 ACL 3-128
Configuring an Extended IPv6 ACL 3-129
Configuring a MAC ACL 3-131
Configuring an ARP ACL 3-133
Binding a Port to an Access Control List 3-135
ARP Inspection 3-136
Configuring ARP Inspection 3-136
Displaying ARP Inspection Port Information 3-141
DHCP Snooping 3-143
DHCP Snooping Configuration 3-144
DHCP Snooping VLAN Configuration 3-145
DHCP Snooping Information Option Configuration 3-146
Configuring Ports for DHCP Snooping 3-147

Contents
xii
Displaying DHCP Snooping Binding Information 3-149
IP Source Guard 3-150
Configuring Ports for IP Source Guard 3-150
Configuring Static Binding for IP Source Guard 3-152
Displaying Information for Dynamic IP Source Guard Bindings 3-154
Port Configuration 3-155
Displaying Connection Status 3-155
Configuring Interface Connections 3-157
Creating Trunk Groups 3-160
Statically Configuring a Trunk 3-161
Enabling LACP on Selected Ports 3-162
Configuring Parameters for LACP Group Members 3-164
Configuring Parameters for LACP Groups 3-166
Displaying LACP Port Counters 3-167
Displaying LACP Settings and Status for the Local Side 3-168
Displaying LACP Settings and Status for the Remote Side 3-170
Setting Broadcast Storm Thresholds 3-172
Setting Multicast Storm Thresholds 3-174
Setting Unknown Unicast Storm Thresholds 3-175
Configuring Port Mirroring 3-177
Configuring MAC Address Mirroring 3-178
Configuring Rate Limits 3-179
Rate Limit Configuration 3-179
Showing Port Statistics 3-180
Power Over Ethernet Settings 3-184
Switch Power Status 3-185
Setting a Switch Power Budget 3-186
Displaying Port Power Status 3-186
Configuring Port PoE Power 3-187
Address Table Settings 3-189
Setting Static Addresses 3-189
Displaying the Address Table 3-190
Changing the Aging Time 3-191
Spanning Tree Algorithm Configuration 3-192
Configuring Port and Trunk Loopback Detection 3-194
Displaying Global Settings for STA 3-195
Configuring Global Settings for STA 3-198
Displaying Interface Settings for STA 3-202
Configuring Interface Settings for STA 3-205
Spanning Tree Edge Port Configuration 3-208
Configuring Multiple Spanning Trees 3-210
Displaying Interface Settings for MSTP 3-213
Configuring Interface Settings for MSTP 3-215
VLAN Configuration 3-216
IEEE 802.1Q VLANs 3-216

Contents
xiii
Enabling or Disabling GVRP (Global Setting) 3-219
Displaying Basic VLAN Information 3-220
Displaying Current VLANs 3-221
Creating VLANs 3-222
Adding Static Members to VLANs (VLAN Index) 3-224
Adding Static Members to VLANs (Port Index) 3-226
Configuring VLAN Behavior for Interfaces 3-227
Configuring IEEE 802.1Q Tunneling 3-229
Enabling QinQ Tunneling on the Switch 3-233
Adding an Interface to a QinQ Tunnel 3-234
Traffic Segmentation 3-236
Configuring Global Settings for Traffic Segmentation 3-236
Configuring Traffic Segmentation Sessions 3-237
Private VLANs 3-238
Displaying Current Private VLANs 3-238
Configuring Private VLANs 3-239
Associating VLANs 3-240
Displaying Private VLAN Interface Information 3-241
Configuring Private VLAN Interfaces 3-242
Protocol VLANs 3-243
Configuring Protocol VLAN Groups 3-244
Mapping Protocols to VLANs 3-245
Configuring VLAN Mirroring 3-246
Configuring IP Subnet VLANs 3-247
Configuring MAC-based VLANs 3-248
Link Layer Discovery Protocol 3-249
Setting LLDP Timing Attributes 3-249
Configuring LLDP Interface Attributes 3-251
Displaying LLDP Local Device Information 3-254
Displaying LLDP Remote Port Information 3-257
Displaying LLDP Remote Information Details 3-258
Displaying Device Statistics 3-260
Displaying Detailed Device Statistics 3-261
Class of Service Configuration 3-263
Layer 2 Queue Settings 3-263
Setting the Default Priority for Interfaces 3-263
Mapping CoS Values to Egress Queues 3-265
Selecting the Queue Mode 3-266
Displaying the Service Weight for Traffic Classes 3-267
Layer 3/4 Priority Settings 3-269
Mapping Layer 3/4 Priorities to CoS Values 3-269
Enabling IP DSCP Priority 3-269
Mapping DSCP Priority 3-270
Quality of Service 3-272
Configuring Quality of Service Parameters 3-272

Contents
xiv
Configuring a Class Map 3-273
Creating QoS Policies 3-275
Attaching a Policy Map to Ingress Queues 3-278
VoIP Traffic Configuration 3-279
Configuring VoIP Traffic 3-279
Configuring VoIP Traffic Ports 3-280
Configuring Telephony OUI 3-282
Multicast Filtering 3-284
Layer 2 IGMP (Snooping and Query) 3-285
Configuring IGMP Snooping and Query Parameters 3-286
Enabling IGMP Immediate Leave 3-288
Displaying Interfaces Attached to a Multicast Router 3-290
Specifying Static Interfaces for a Multicast Router 3-291
Displaying Port Members of Multicast Services 3-292
Assigning Ports to Multicast Services 3-293
IGMP Filtering and Throttling 3-294
Enabling IGMP Filtering and Throttling 3-294
Configuring IGMP Filter Profiles 3-295
Configuring IGMP Filtering and Throttling for Interfaces 3-297
Multicast VLAN Registration 3-299
Configuring Global MVR Settings 3-300
Displaying MVR Interface Status 3-302
Displaying Port Members of Multicast Groups 3-303
Configuring MVR Interface Status 3-304
Assigning Static Multicast Groups to Interfaces 3-306
Configuring MVR Receiver VLAN and Group Addresses 3-307
Displaying MVR Receiver Groups 3-308
Configuring Static MVR Receiver Group Members 3-309
Domain Name Service 3-310
Configuring General DNS Service Parameters 3-310
Configuring Static DNS Host to Address Entries 3-312
Displaying the DNS Cache 3-314
Switch Clustering 3-315
Configuring General Settings for Clusters 3-315
Cluster Member Configuration 3-317
Displaying Information on Cluster Members 3-318
Cluster Candidate Information 3-319
UPnP 3-320
UPnP Configuration 3-320
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1

Contents
xv
Telnet Connection 4-2
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-9
Command Groups 4-10
General Commands 4-11
enable 4-12
disable 4-12
configure 4-13
show history 4-13
reload (Privileged Exec) 4-14
reload (Global Configuration) 4-14
show reload 4-16
prompt 4-16
end 4-16
exit 4-17
quit 4-17
System Management Commands 4-18
Device Designation Commands 4-18
hostname 4-18
Banner Information Commands 4-19
banner configure 4-20
banner configure company 4-21
banner configure dc-power-info 4-22
banner configure department 4-22
banner configure equipment-info 4-23
banner configure equipment-location 4-24
banner configure ip-lan 4-24
banner configure lp-number 4-25
banner configure manager-info 4-26
banner configure mux 4-26
banner configure note 4-27
show banner 4-28
System Status Commands 4-29
show startup-config 4-29

Contents
xvi
show running-config 4-30
show system 4-33
show users 4-33
show version 4-34
Frame Size Commands 4-35
jumbo frame 4-35
File Management Commands 4-36
copy 4-37
delete 4-40
dir 4-40
whichboot 4-41
boot system 4-42
upgrade opcode auto 4-42
upgrade opcode path 4-43
Line Commands 4-44
line 4-45
login 4-46
password 4-47
timeout login response 4-48
exec-timeout 4-48
password-thresh 4-49
silent-time 4-50
databits 4-50
parity 4-51
speed 4-52
stopbits 4-52
terminal length 4-53
terminal width 4-53
terminal escape-character 4-54
terminal terminal-type 4-54
terminal history 4-55
disconnect 4-55
show line 4-56
Event Logging Commands 4-57
logging on 4-57
logging history 4-58
logging host 4-59
logging facility 4-59
logging trap 4-60
clear log 4-60
show logging 4-61
show log 4-62
SMTP Alert Commands 4-63
logging sendmail host 4-63
logging sendmail level 4-64

Contents
xvii
logging sendmail source-email 4-64
logging sendmail destination-email 4-65
logging sendmail 4-65
show logging sendmail 4-65
Time Commands 4-67
sntp client 4-68
sntp server 4-69
sntp poll 4-69
show sntp 4-70
ntp client 4-70
ntp server 4-71
ntp poll 4-72
ntp authenticate 4-72
ntp authentication-key 4-73
show ntp 4-74
clock timezone-predefined 4-75
clock timezone 4-75
clock summer-time (date) 4-76
clock summer-time (predefined) 4-77
clock summer-time (recurring) 4-78
calendar set 4-80
show calendar 4-80
Switch Cluster Commands 4-81
cluster 4-81
cluster commander 4-82
cluster ip-pool 4-83
cluster member 4-83
rcommand 4-84
show cluster 4-84
show cluster members 4-85
show cluster candidates 4-85
UPnP Commands 4-85
upnp device 4-86
upnp device ttl 4-86
upnp device advertise duration 4-87
show upnp 4-87
SNMP Commands 4-88
snmp-server 4-89
show snmp 4-90
snmp-server community 4-91
snmp-server contact 4-91
snmp-server location 4-92
snmp-server host 4-93
snmp-server enable traps 4-95
snmp-server engine-id 4-96

Contents
xviii
show snmp engine-id 4-97
snmp-server view 4-97
show snmp view 4-98
snmp-server group 4-99
show snmp group 4-100
snmp-server user 4-101
show snmp user 4-102
Flow Sampling Commands 4-103
sflow 4-104
sflow source 4-104
sflow sample 4-105
sflow polling-interval 4-105
sflow owner 4-106
sflow timeout 4-106
sflow destination 4-107
sflow max-header-size 4-107
sflow max-datagram-size 4-108
show sflow 4-108
Authentication Commands 4-109
User Account and Privilege Level Commands 4-110
username 4-110
enable password 4-111
privilege 4-112
privilege rerun 4-113
show privilege 4-113
Authentication Sequence 4-114
authentication login 4-114
authentication enable 4-115
RADIUS Client 4-116
radius-server host 4-116
radius-server acct-port 4-117
radius-server auth-port 4-117
radius-server key 4-118
radius-server retransmit 4-118
radius-server timeout 4-119
show radius-server 4-120
TACACS+ Client 4-120
tacacs-server host 4-121
tacacs-server port 4-121
tacacs-server key 4-122
tacacs-server retransmit 4-122
tacacs-server timeout 4-123
show tacacs-server 4-123
AAA Commands 4-124
aaa group server 4-124

Contents
xix
server 4-125
aaa accounting dot1x 4-126
aaa accounting exec 4-127
aaa accounting commands 4-128
aaa accounting update 4-129
accounting dot1x 4-129
accounting exec 4-130
accounting commands 4-130
aaa authorization exec 4-131
authorization exec 4-132
show accounting 4-132
Web Server Commands 4-133
ip http port 4-133
ip http server 4-134
ip http secure-server 4-134
ip http secure-port 4-135
Telnet Server Commands 4-136
ip telnet server 4-136
Secure Shell Commands 4-137
ip ssh server 4-139
ip ssh timeout 4-140
ip ssh authentication-retries 4-140
ip ssh server-key size 4-141
delete public-key 4-141
ip ssh crypto host-key generate 4-142
ip ssh crypto zeroize 4-142
ip ssh save host-key 4-143
show ip ssh 4-143
show ssh 4-144
show public-key 4-145
802.1X Port Authentication 4-146
dot1x system-auth-control 4-146
dot1x default 4-147
dot1x max-req 4-147
dot1x port-control 4-147
dot1x operation-mode 4-148
dot1x re-authenticate 4-149
dot1x re-authentication 4-149
dot1x timeout quiet-period 4-150
dot1x timeout re-authperiod 4-150
dot1x timeout tx-period 4-151
dot1x timeout supp-timeout 4-151
dot1x intrusion-action 4-152
show dot1x 4-153
Management IP Filter Commands 4-156

Contents
xx
management 4-156
show management 4-157
General Security Measures 4-158
Port Security Commands 4-159
port security 4-159
Network Access (MAC Address Authentication) 4-161
network-access aging 4-162
network-access mac-filter 4-162
network-access port-mac-filter 4-163
network-access max-mac-count 4-163
network-access mode 4-164
mac-authentication reauth-time 4-165
mac-authentication intrusion-action 4-166
mac-authentication max-mac-count 4-166
network-access dynamic-vlan 4-167
network-access guest-vlan 4-167
network-access dynamic-qos 4-168
network-access link-detection 4-169
network-access link-detection link-down 4-169
network-access link-detection link-up 4-170
network-access link-detection link-up-down 4-170
clear network-access 4-171
show network-access 4-171
show network-access mac-address-table 4-172
show network-access mac-filter 4-173
Web Authentication 4-174
web-auth login-attempts 4-174
web-auth quiet-period 4-175
web-auth session-timeout 4-175
web-auth system-auth-control 4-176
web-auth 4-176
web-auth re-authenticate (Port) 4-177
web-auth re-authenticate (IP) 4-177
show web-auth 4-178
show web-auth interface 4-178
show web-auth summary 4-179
DHCP Snooping Commands 4-179
ip dhcp snooping 4-180
ip dhcp snooping vlan 4-181
ip dhcp snooping trust 4-182
ip dhcp snooping verify mac-address 4-183
ip dhcp snooping information option 4-184
ip dhcp snooping information policy 4-185
ip dhcp snooping database flash 4-185
clear ip dhcp snooping database flash 4-186