SMC Networks 8126PL2-F Programming manual

MANAGEMENT GUIDE
ta
TigerSwitchTM 10/100/1000
L2-Lite SMB PoE Gigabit Switch
SMC8126PL2-F

20 Mason
Irvine, CA 92618
Phone: [phone]
TigerSwitch 10/100/1000
Management Guide
From SMC’s Tiger line of feature-rich workgroup LAN solutions
August 2009
Pub. # 149100000023A
E082009/MW-R01

Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and
reliable. However, no responsibility is assumed by SMC for its use, nor for any
infringements of patents or other rights of third parties which may result from its use. No
license is granted by implication or otherwise under any patent or patent rights of SMC.
SMC reserves the right to change specifications at any time without notice.
Copyright © 2009 by
SMC Networks, Inc.
20 Mason
Irvine, CA 92618
All rights reserved.
Trademarks:
SMC is a registered trademark; and EZ Switch, TigerStack and TigerSwitch are
trademarks of SMC Networks, Inc. Other product and company names are trademarks or
registered trademarks of their respective holders.

v
About This Guide
Purpose
This guide gives specific information on how to operate and use the management
functions of the switch.
Audience
The guide is intended for use by network administrators who are responsible for operating
and maintaining network equipment; consequently, it assumes a basic working
knowledge of general switch functions, the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
Conventions
The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features or
instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage the
system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Related Publications
The following publication details the hardware features of the switch, including the
physical and performance-related characteristics, and how to install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help that describes all
management related features.
Revision History
This section summarizes the changes in each revision of this guide.
August 2009 Revision
This is the first revision of this guide. This guide is valid for software release v1.0.0.10.

vi

vii
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Managing System Files 2-8
Saving Configuration Settings 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-11
Displaying System Information 3-11
Displaying Switch Hardware/Software Versions 3-13
Displaying Bridge Extension Capabilities 3-15
Setting the Switch’s IP Address 3-16
Manual Configuration 3-17
Using DHCP/BOOTP 3-18
Enabling Jumbo Frames 3-19
Managing Firmware 3-20
Downloading System Software from a Server 3-20

Contents
viii
Saving or Restoring Configuration Settings 3-22
Downloading Configuration Settings from a Server 3-23
Console Port Settings 3-24
Telnet Settings 3-26
Configuring Event Logging 3-28
System Log Configuration 3-28
Remote Log Configuration 3-29
Displaying Log Messages 3-31
Simple Mail Transfer Protocol 3-31
Renumbering the System 3-33
Resetting the System 3-34
Setting the System Clock 3-35
Setting the Time Manually 3-35
Configuring SNTP 3-35
Setting the Time Zone 3-36
Simple Network Management Protocol 3-37
Enabling the SNMP Agent 3-39
Setting Community Access Strings 3-39
Specifying Trap Managers and Trap Types 3-40
Configuring SNMPv3 Management Access 3-43
Setting the Local Engine ID 3-43
Specifying a Remote Engine ID 3-44
Configuring SNMPv3 Users 3-45
Configuring Remote SNMPv3 Users 3-47
Configuring SNMPv3 Groups 3-49
Setting SNMPv3 Views 3-52
User Authentication 3-54
Configuring User Accounts 3-54
Configuring Local/Remote Logon Authentication 3-56
Configuring Encryption Keys 3-59
AAA Authorization and Accounting 3-61
Configuring AAA RADIUS Group Settings 3-62
Configuring AAA TACACS+ Group Settings 3-63
Configuring AAA Accounting 3-63
AAA Accounting Update 3-65
AAA Accounting 802.1X Port Settings 3-66
AAA Accounting Exec Command Privileges 3-67
AAA Accounting Exec Settings 3-68
AAA Accounting Summary 3-68
Authorization Settings 3-70
Authorization EXEC Settings 3-71
Authorization Summary 3-72
Configuring HTTPS 3-73
Replacing the Default Secure-site Certificate 3-74
Configuring the Secure Shell 3-75

Contents
ix
Generating the Host Key Pair 3-77
Configuring the SSH Server 3-79
Configuring 802.1X Port Authentication 3-80
Displaying 802.1X Global Settings 3-81
Configuring 802.1X Global Settings 3-82
Configuring Port Settings for 802.1X 3-83
Displaying 802.1X Statistics 3-86
Filtering IP Addresses for Management Access 3-87
General Security Measures 3-89
Configuring Port Security 3-90
Access Control Lists 3-91
Configuring Access Control Lists 3-91
Setting the ACL Name and Type 3-92
Configuring a Standard IP ACL 3-93
Configuring an Extended IP ACL 3-94
Configuring a MAC ACL 3-96
Binding a Port to an Access Control List 3-98
Filtering IP Addresses for Management Access 3-99
DHCP Snooping 3-101
DHCP Snooping Configuration 3-102
DHCP Snooping VLAN Configuration 3-103
DHCP Snooping Information Option Configuration 3-103
DHCP Snooping Port Configuration 3-105
DHCP Snooping Binding Information 3-106
IP Source Guard 3-107
Configuring Ports for IP Source Guard 3-107
Configuring Static Binding for IP Source Guard 3-109
Displaying Information for Dynamic IP Source Guard Bindings 3-111
Port Configuration 3-112
Displaying Connection Status 3-112
Configuring Interface Connections 3-114
Creating Trunk Groups 3-116
Statically Configuring a Trunk 3-117
Enabling LACP on Selected Ports 3-118
Configuring Parameters for LACP Group Members 3-120
Displaying LACP Port Counters 3-122
Displaying LACP Settings and Status for the Local Side 3-124
Displaying LACP Settings and Status for the Remote Side 3-126
Setting Broadcast Storm Thresholds 3-127
Configuring Local Port Mirroring 3-128
Configuring Rate Limits 3-129
Rate Limit Configuration 3-129
Showing Port Statistics 3-130
Power Over Ethernet Settings 3-134
Switch Power Status 3-135

Contents
x
Setting a Switch Power Budget 3-136
Displaying Port Power Status 3-136
Configuring Port PoE Power 3-137
Address Table Settings 3-139
Setting Static Addresses 3-139
Displaying the Address Table 3-140
Changing the Aging Time 3-141
Spanning Tree Algorithm Configuration 3-142
Displaying Global Settings for STA 3-144
Configuring Global Settings for STA 3-147
Displaying Interface Settings for STA 3-151
Configuring Interface Settings for STA 3-154
Configuring Multiple Spanning Trees 3-158
Displaying Interface Settings for MSTP 3-161
Configuring Interface Settings for MSTP 3-163
VLAN Configuration 3-164
IEEE 802.1Q VLANs 3-164
Enabling or Disabling GVRP (Global Setting) 3-167
Displaying Basic VLAN Information 3-168
Displaying Current VLANs 3-169
Creating VLANs 3-170
Adding Static Members to VLANs (VLAN Index) 3-173
Adding Static Members to VLANs (Port Index) 3-175
Configuring VLAN Behavior for Interfaces 3-176
Configuring IEEE 802.1Q Tunneling 3-178
Enabling QinQ Tunneling on the Switch 3-181
Adding an Interface to a QinQ Tunnel 3-182
Configuring Private VLANs 3-184
Enabling Private VLANs 3-184
Configuring Uplink and Downlink Ports 3-185
Protocol VLANs 3-185
Configuring Protocol VLAN Groups 3-186
Mapping Protocols to VLANs 3-187
Class of Service Configuration 3-189
Layer 2 Queue Settings 3-189
Setting the Default Priority for Interfaces 3-189
Mapping CoS Values to Egress Queues 3-191
Selecting the Queue Mode 3-193
Setting the Service Weight for Traffic Classes 3-194
Layer 3/4 Priority Settings 3-195
Mapping Layer 3/4 Priorities to CoS Values 3-195
Selecting IP Precedence/DSCP Priority 3-195
Mapping IP Precedence 3-196
Mapping DSCP Priority 3-197
Mapping IP Port Priority 3-199