SMC Networks TigerStack II SMC8926EM Programming manual

MANAGEMENT GUIDE
ta
SMC8926EM
SMC8950EM
TigerStack II 10/100/1000
24/48-Port Stackable Layer 3 Gigabit
Switch

20 Mason
Irvine, CA 92618
Phone: [phone]
TigerStack II 10/100/1000
Management Guide
From SMC's Tiger line of feature-rich workgroup LAN solutions
August 2009
Pub. # 149100000035A
E082009-MW-R01

Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and
reliable. However, no responsibility is assumed by SMC for its use, nor for any
infringements of patents or other rights of third parties which may result from its use. No
license is granted by implication or otherwise under any patent or patent rights of SMC.
SMC reserves the right to change specifications at any time without notice.
Copyright © 2009 by
SMC Networks, Inc.
20 Mason
Irvine, CA 92618
All rights reserved. Printed in China
Trademarks:
SMC is a registered trademark; and EZ Switch, TigerStack and TigerSwitch are
trademarks of SMC Networks, Inc. Other product and company names are trademarks or
registered trademarks of their respective holders.

Warranty and Product Registration
To register SMC products and to review the detailed warranty statement, please refer to
the Support Section of the SMC Website at http://www.smc.com.

i
About This Guide
Purpose
This guide gives specific information on how to operate and use the management
functions of the switch.
Audience
The guide is intended for use by network administrators who are responsible for operating
and maintaining network equipment; consequently, it assumes a basic working
knowledge of general switch functions, the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
Conventions
The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features or
instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage the
system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Related Publications
The following publication details the hardware features of the switch, including the
physical and performance-related characteristics, and how to install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help that describes all
management related features.
Revision History
This section summarizes the changes in each revision of this guide.
August 2009 Revision
This is the first release of this guide.

ii

iii
Contents
Section I: Getting Started
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-7
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Stack Operations 2-3
Selecting the Stack Master 2-3
Selecting the Backup Unit 2-4
Recovering from Stack Failure or Topology Change 2-4
Broken Link for Line and Wrap-around Topologies 2-4
Resilient IP Interface for Management Access 2-5
Resilient Configuration 2-5
Renumbering the Stack 2-5
Ensuring Consistent Code is Used Across the Stack 2-5
Basic Configuration 2-6
Console Connection 2-6
Setting Passwords 2-7
Setting an IP Address 2-7
Manual Configuration 2-8
Dynamic Configuration 2-11
Enabling SNMP Management Access 2-13
Community Strings (for SNMP version 1 and 2c clients) 2-13
Trap Receivers 2-14
Configuring Access for SNMP Version 3 Clients 2-15
Managing System Files 2-15
Saving Configuration Settings 2-16
Section II: Switch Management
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3

Contents
iv
Main Menu 3-4
Chapter 4: Basic Management Tasks 4-1
Displaying System Information 4-1
Displaying Switch Hardware/Software Versions 4-3
Displaying Bridge Extension Capabilities 4-4
Setting the Switch’s IP Address (IP Version 4) 4-5
Manual Configuration 4-7
Using DHCP/BOOTP 4-8
Setting the Switch’s IP Address (IP Version 6) 4-9
Configuring an IPv6 Address 4-9
Configuring an IPv6 General Network Prefix 4-15
Configuring Neighbor Detection Protocol and Static Entries 4-17
Configuring Support for Jumbo Frames 4-21
Managing Firmware 4-21
Downloading System Software from a Server 4-22
Saving or Restoring Configuration Settings 4-24
Downloading Configuration Settings from a Server 4-25
Console Port Settings 4-26
Telnet Settings 4-28
Configuring Event Logging 4-30
System Log Configuration 4-30
Remote Log Configuration 4-31
Displaying Log Messages 4-33
Sending Simple Mail Transfer Protocol Alerts 4-33
Renumbering the Stack 4-35
Resetting the System 4-36
Setting the System Clock 4-36
Setting the Current Time 4-37
Configuring SNTP 4-37
Setting the Time Zone 4-39
Configuring Summer Time 4-40
Chapter 5: Simple Network Management Protocol 5-1
Enabling the SNMP Agent 5-2
Setting Community Access Strings 5-3
Specifying Trap Managers and Trap Types 5-4
Configuring SNMPv3 Management Access 5-7
Setting a Local Engine ID 5-7
Specifying a Remote Engine ID 5-8
Configuring SNMPv3 Users 5-9
Configuring Remote SNMPv3 Users 5-11
Configuring SNMPv3 Groups 5-13
Setting SNMPv3 Views 5-17

Contents
v
Chapter 6: User Authentication 6-1
Configuring User Accounts 6-1
Configuring Local/Remote Logon Authentication 6-2
Configuring HTTPS 6-5
Replacing the Default Secure-site Certificate 6-7
Configuring the Secure Shell 6-8
Generating the Host Key Pair 6-10
Importing User Public Keys 6-12
Configuring the SSH Server 6-14
Configuring Port Security 6-16
Configuring 802.1X Port Authentication 6-18
Displaying 802.1X Global Settings 6-19
Configuring 802.1X Global Settings 6-20
Configuring Port Settings for 802.1X 6-20
Displaying 802.1X Statistics 6-24
Filtering IP Addresses for Management Access 6-26
Chapter 7: Access Control Lists 7-1
Configuring Access Control Lists 7-1
Setting the ACL Name and Type 7-1
Configuring a Standard IPv4 ACL 7-2
Configuring an Extended IPv4 ACL 7-3
Configuring a MAC ACL 7-6
Configuring a Standard IPv6 ACL 7-7
Configuring an Extended IPv6 ACL 7-8
Binding a Port to an Access Control List 7-11
Chapter 8: Port Configuration 8-1
Displaying Connection Status 8-1
Configuring Interface Connections 8-3
Creating Trunk Groups 8-6
Statically Configuring a Trunk 8-7
Enabling LACP on Selected Ports 8-8
Configuring LACP Parameters 8-10
Displaying LACP Port Counters 8-13
Displaying LACP Settings and Status for the Local Side 8-14
Displaying LACP Settings and Status for the Remote Side 8-16
Setting Broadcast Storm Thresholds 8-17
Configuring Port Mirroring 8-19
Configuring Rate Limits 8-20
Showing Port Statistics 8-22
Chapter 9: Address Table Settings 9-1
Setting Static Addresses 9-1
Displaying the Address Table 9-2
Changing the Aging Time 9-4

Contents
vi
Chapter 10: Spanning Tree Algorithm 10-1
Displaying Global Settings 10-3
Configuring Global Settings 10-6
Displaying Interface Settings 10-10
Configuring Interface Settings 10-13
Configuring Multiple Spanning Trees 10-16
Displaying Interface Settings for MSTP 10-19
Configuring Interface Settings for MSTP 10-20
Chapter 11: VLAN Configuration 11-1
IEEE 802.1Q VLANs 11-1
Enabling or Disabling GVRP (Global Setting) 11-4
Displaying Basic VLAN Information 11-4
Displaying Current VLANs 11-5
Creating VLANs 11-6
Adding Static Members to VLANs (VLAN Index) 11-7
Adding Static Members to VLANs (Port Index) 11-9
Configuring VLAN Behavior for Interfaces 11-10
Configuring IEEE 802.1Q Tunneling 11-12
Enabling QinQ Tunneling on the Switch 11-16
Adding an Interface to a QinQ Tunnel 11-17
Configuring Private VLANs 11-18
Enabling Private VLANs 11-19
Configuring Uplink and Downlink Ports 11-19
Configuring Protocol-Based VLANs 11-20
Configuring Protocol Groups 11-20
Mapping Protocols to VLANs 11-21
Chapter 12: Link Layer Discovery Protocol 12-1
Setting Basic LLDP Timing Attributes 12-1
Configuring LLDP Interface Attributes 12-3
Displaying LLDP Local Device Information 12-5
Displaying LLDP Remote Port Information 12-8
Displaying LLDP Remote Information Details 12-9
Displaying Device Statistics 12-11
Displaying Detailed Device Statistics 12-13
Chapter 13: Class of Service 13-1
Layer 2 Queue Settings 13-1
Setting the Default Priority for Interfaces 13-1
Mapping CoS Values to Egress Queues 13-3
Selecting the Queue Mode 13-5
Setting the Service Weight for Traffic Classes 13-6
Layer 3/4 Priority Settings 13-7
Mapping Layer 3/4 Priorities to CoS Values 13-7
Selecting IP Precedence/DSCP Priority 13-7