TRENDnet TEG-S2620i User manual



TABLEOFCONTENTS

TABLEOFCONTENTS...................................................................................................................................................................................2
1GETTINGSTARTED...............................................................................................................................................................................4
1.1CONNECTINGTOTHESWITCHCONSOLEPORT......................................................................................................................................4
1.2PCCOMPORTSETTING..................................................................................................................................................................4
1.3CONNECTINGTOTHESWITCHWEBPORT............................................................................................................................................4
1.4SWITCHFUNCTIONFEATURES ...........................................................................................................................................................5
2OPERATIONNOTICE ............................................................................................................................................................................6
2.1COMMANDLINEEDITING.................................................................................................................................................................6
2.2COMMANDHELP............................................................................................................................................................................7
2.3HOWTOUSELOADER .....................................................................................................................................................................8
2.3.1Connectswitch......................................................................................................................................................8
2.3.2Enterloader..........................................................................................................................................................8
2.3.3Commandsinloader .............................................................................................................................................8
3LOGIN ................................................................................................................................................................................................13
3.1POWER‐ONSELF‐TESTING .............................................................................................................................................................13
3.2CONSOLELOGIN...........................................................................................................................................................................13
3.3WEBLOGIN.................................................................................................................................................................................13
3.3.1SettingIPAddressbyConsolePort .....................................................................................................................13
3.3.2LoginwithaWebBrowser.................................................................................................................................13
4CONSOLEUSERINTERFACE...............................................................................................................................................................15
4.1SYSTEMCOMMANDS ....................................................................................................................................................................15
4.2SWITCHSTATICCONFIGURATION.....................................................................................................................................................16
4.2.1PortConfigurationandStatus ...........................................................................................................................16
4.2.2Trunk...............................................................................................................................................................18
4.2.3VLAN ...............................................................................................................................................................20
4.2.4MiscConfiguration ...........................................................................................................................................27
4.2.5Administration .................................................................................................................................................27
4.2.5Administration .................................................................................................................................................28
4.2.6PortMirroring ..................................................................................................................................................29
4.2.7QualityofService..............................................................................................................................................30
4.2.8MACAddressTable...........................................................................................................................................32
4.2.9MACLimit ........................................................................................................................................................33
4.3PROTOCOLRELATEDCONFIGURATION ..............................................................................................................................................34
4.3.1STP/RSTP .........................................................................................................................................................34
4.3.2MSTP...............................................................................................................................................................36
4.3.3SNMP ..............................................................................................................................................................39
4.3.4IGMP ...............................................................................................................................................................42
4.3.5802.1x .............................................................................................................................................................43
4.3.6DHCPRelay&Option82 ...................................................................................................................................45
4.3.7LLDP ................................................................................................................................................................47
4.4SYSLOG ......................................................................................................................................................................................49
4.5REBOOTSWITCH...........................................................................................................................................................................49
4.5.1ResettoDefault ...............................................................................................................................................49
4.5.2Restart.............................................................................................................................................................49
4.6TFTPFUNCTION ..........................................................................................................................................................................49
4.6.1TFTPFirmwareUpdate......................................................................................................................................49
4.6.2RestoreConfigureFile .......................................................................................................................................49
4.6.3BackupConfigureFile .......................................................................................................................................49
4.7ACCESSCONTROLLIST...................................................................................................................................................................50
4.7.1IPv4ACLcommands..........................................................................................................................................50
4.7.2Non‐IPv4ACLcommands...................................................................................................................................51

4.7.3SIP/SMACBinding.............................................................................................................................................52
5WEBUSERINTERFACE.......................................................................................................................................................................53
5.1MAINMENU ...............................................................................................................................................................................53
5.2ADMINISTRATION .........................................................................................................................................................................53
5.2.1IPAddressSetting.............................................................................................................................................54
5.2.2SwitchSetting ..................................................................................................................................................54
5.2.3ConsolePortInformation ..................................................................................................................................56
5.2.4PortConfiguration ............................................................................................................................................57
5.2.5SNMPConfiguration .........................................................................................................................................61
5.2.6Syslog ..............................................................................................................................................................65
5.2.7FirmwareUpdate .............................................................................................................................................66
5.2.8ConfigurationBackup .......................................................................................................................................68
5.3L2FEATURES...............................................................................................................................................................................69
5.3.1VLANConfiguration ..........................................................................................................................................69
5.3.2Trunking ..........................................................................................................................................................77
5.3.3ForwardingandFiltering ...................................................................................................................................80
5.3.4SpanningTree ..................................................................................................................................................85
5.3.5DHCPRelayandOption82 ................................................................................................................................92
5.3.6LLDP ................................................................................................................................................................93
5.4ACCESSCONTROLLIST...................................................................................................................................................................95
5.4.1IPv4 .................................................................................................................................................................96
5.4.2Non‐IPv4..........................................................................................................................................................98
5.4.3Binding ............................................................................................................................................................99
5.4.4QoSVoIP........................................................................................................................................................100
5.5SECURITY ..................................................................................................................................................................................101
5.5.1SecurityManager ...........................................................................................................................................101
5.5.2MACLimit ......................................................................................................................................................102
5.5.3802.1xConfiguration ......................................................................................................................................103
5.6QOS........................................................................................................................................................................................105
5.6.1QoSConfiguration ..........................................................................................................................................105
5.6.2Per‐PortConfiguration ....................................................................................................................................106
5.7MONITORING ............................................................................................................................................................................107
5.7.1PortStatus .....................................................................................................................................................107
5.7.2PortStatistics .................................................................................................................................................108
5.8RESETSYSTEM ...........................................................................................................................................................................108
5.9REBOOT....................................................................................................................................................................................108




1GettingStarted
ThanksforusingthefirmwareforconfiguringEP‐5926.Thereistwowaystoaccesstheswitchmanagement.YoucanusetheConsole
modelocalmanagementandWeb‐basedinterfacemanagement.

1.1 ConnectingtotheSwitchConsolePort
yUserscanuseaRS‐232non‐crossoverserialcabletoconnectthePC’sCOMporttotheswitchconsoleport.
yTheswitchsystemprovidestheRS‐232interfacewithbaudrate115200‐8‐n‐1.
yUseterminalemulationprogram(e.g.WindowsHyperTerminal…)toconfiguretheswitchsystem.

RS-232 cable
PC System Switch System


1.2 PCCOMPortSetting
yBaudrate=115200
yDatabits=8
yParity=None
yStopbits=1
yFlowcontrol=None

1.3 ConnectingtotheSwitchWebPort
yUserscanuseaCAT‐5/6cabletoconnectthePC’sLANporttooneoftheswitchEthernetport.
yUsewebbrowserprogram(e.g.InternetExplorer,MozillaFirefox)toconfiguretheswitchsystem.
ySeesection3.3.Webloginforexhaustivelogininformation.

PC System Switch System
CAT-5/6 cable



1.4 SwitchFunctionFeatures
Thissystemprovidesthefollowingfunctionfeaturestofacilitatenetworkmanagement,securityandcontrols:
2410/100MbpsRJ‐45portsand210/100/1000Mbpsmoduleports
1serial(RS‐232)portforconsolemanagement
Supportupto9KBjumboframe
Commandlineinterface(CLI)andbrowse‐independent,securedweb‐basedmanagements(HTTPS)
Upto13‐groupand8‐memberpergroupofstaticandLACPlinkaggregation(trunk)
Upto512‐groupofport‐basedandtag‐based(802.1q)VLAN
GVRPfortag‐basedVLAN
Per‐portstormcontrolforfloodedunicast,multicast,IPmulticast,broadcastandcontrolpackets
Spanning‐treeprotocols:STP(802.1d),RSTP(802.1w),MSTP(802.1s)
IGMPSnooping&Query(IGMPv1/v2)
SNMPv1/v2c/v3managementandtrapfunction
SupportMIBtables:MIB‐II(RFC1213),BridgeMIBs(RFC1493),Ethernet‐likeMIB(RFC1643&RFC2665),private‐MIB,USM‐MIB
(RFC2574),VACM‐MIB(RFC2575)andRMON‐MIB1,2,3,9groups(RFC1757&RFC2819)
Telnet/SSHfunctionforremoteconsolemanagement(SSHwillbeavailablesoon)
TFTPandHTTPfirmwareupdateandconfigurationbackup/restore
RemoteSyslogfunction
StaticanddynamicMACtablemanagement
MACfilteringfunction
MAClimitfunction
Portsniffer(mirroring)
Forwardingscope(Protectedport)
Portstatus,control,securityandstatistics
StaticorDHCP(dynamic)IPaddresssetting
DHCPrelay&option82function
Ingressandegressratecontrolwith128Kbpsresolution
QoSwith8‐levelportpriorityto4‐levelqueuemappingandstrict/802.1p/WRRpriorityoptions
Userloginmanagement
802.1xportaccesscontrolsupportingEAP‐MD5,EAP‐TLSandEAP‐PEAPauthenticationtypes
Layer2/3/4accesscontrollist(ACL)with220ruleentries
SourceIP‐MACandportbindingaccesscontrol
Q‐in‐QVLANfunction
LLDPprotocol

2OperationNotice
Toenterthe“configuration”mode,youneedtobeintheprivilegedmode,andthentypethecommandconfigure

Switch#configure
Switch(config)#

2.1 CommandLineEditing
Thefollowinggenericfunctionkeysprovidefunctionsinallofthemenus:

KeysFunction
<Ctrl>‐B;← Movesthecursorbackonecharacter.
<Ctrl>‐D Deletesthecharacteratthecursor.
<Ctrl>‐E Jumpstotheendofthecurrentcommandline.
<Ctrl>‐F;→ Movesthecursorforwardonecharacter.
<Ctrl>‐K Deletesfromthecursortotheendofthecommandline.
<Ctrl>‐N;↓ Entersthenextcommandlineinthecommandhistory.
<Ctrl>‐P;↑ Entersthepreviouscommandlineinthecommandhistory.
<Ctrl>‐U Deletesfromthecursortothebeginningofthecommandline.
<Ctrl>‐W Deletesthelastwordtyped.
<Esc>B Movesthecursorbackwardoneword.
<Esc>D Deletesfromthecursortotheendoftheword.
<Esc>F Movesthecursorforwardoneword.
<Backspace> Deletethecharacterbeforethecursor.
<Del> Deletethecharacteratthecursor.


2.2 CommandHelp
Youmayenter?atanycommandmode,andtheCLIwillreturnpossiblecommandsatthatpoint,alongwithsomedescriptionofthe
keywords:
Switch(config)#copytftp?
running‐config Runningconfigurations
flash  Flashconfigurations
firmware Downloadfirmware

Youmayusethe<Tab>keytodokeywordautocompletion:
Switch(config)#copytftpr<Tab>
Switch(config)#copytftprunning‐config

Youdonotneedtotypeintheentirecommands;youonlyneedtotypeinenoughcharactersfortheCLItorecognizethecommand
asunique.Thefollowingexampleshowsyouhowtoentertheshowrunning‐configcommand:
Switch(config)#shru


2.3 HowtoUseLoader
2.3.1Connectswitch
UsethefollowingsettingtoconnectPCtoSwitchwithRS‐232cable:
BaudRate115200
DataBits8
Parity None
Stopbits 1
FlowControl None
PCneedstoconnectoneoftheSwitchEthernetportwithaCAT‐5/5e/6cableifloaderorfirmwareimageneedstobeupdated
throughTFTPinloadermode.
2.3.2Enterloader
SettheHyperTerminalastoptableandopentheHyperTerminalfirst.PowerontheSwitchandpressanykeytoenterintotheloader
modewhencountdownmessageisshownup.Thenswitchentersintotheloadermodewhenthepromptisshown.


2.3.3Commandsinloader
?–aliasfor'help'.Tolistallavailablecommandsinloader

Forexample:


tftpupdate–toupdatefirmwareorloaderimagethroughTFTPnetworktransfer

Loader#tftpupdateImageFileNameTftpServerIPTargetBoardIP[loader]

UpdateimagevianetworkusingTFTPprotocolwithspecifiedparameters:
ImageFileName–thenewfirmware/loaderimagefileforupdate.
TftpServerIP–thePC’sIPwhohasTFTPserverservice.
TargetBoardIP–theswitch’sIPyoucansetit.
loader–ifupdateloaderitneeded,ifupdatefirmwareitnotneeded.

Forexample,toupdateloaderimagefilewithTFTP,PCshouldhaveTFTPserverandopenit.
Enterthecommand:
Loader#tftpupdateloader_v3.2.2.img192.168.223.119192.168.223.1loader



TFTPtransferisdone.Thenthenewimagewillbewrittenintotheflashifimagechecksumisverified.


Poweroffandontheswitchtoactivatethenewloader.

AnotherexampleistoupdatenewfirmwarefilewithTFTPinloader.PCshouldhaveTFTPserverandopenit.
Enterthecommand:
Loader#tftpupdateimage.2510.img192.168.223.119192.168.223.1


TFTPtransferisdone.Thenthenewimagewillbewrittenintotheflashifimagechecksumisverified.



Afterflashwritingiscompleted,systemwillbeautomaticallyrebootedtostartthenewfirmwareimage:


kermit–toupdatefirmwareorloaderimagethroughserial(RS‐232)linetransferinKermitmode

Loader#kermit[loader]‐updateimagefileoverserialline(kermitmode)
loader–ifupdateloaderitneeded,ifupdatefirmwareitnotneeded.

Hereisanexampletousetheseriallinetoupdatenewloader:
Loader#kermitloader


Selectsendfile:filenameselecttheloaderimage“armboot.bin.img”toupdate,Protocol“kermit”.



PressSendbutton


ThefollowingnextmessageswillbeshownwhenKermittransferiscompleted.


Successfullyupdatetheloader.Finallypoweroffandontoactivatethenewloader.

Forupdatingnewfirmwareimageoverserialline,usethefollowingcommand:



Justlikethedescriptionsofloaderimageupdating,sendtheselectedfirmwareimagefile“image.2510.img”thenwaitforthe
updatingprocedureisdoneandthesystemwillberebootedtoactivatethenewfirmwareservice.

version–printmonitorversion


help<command>–printmonitorversion
command–thecommandinloader

Forexample:



3Login
3.1 Power‐OnSelf‐Testing
Thepower‐onself‐testingisrunningimmediatelyaftertheswitchsystemispoweredup.Theself‐testingprogramdiagnosesthe
hardwarecomponentsofaswitchsystem.Afterhardwaretestsareallpassed,thesystemwilldetectanddisplaythemoduleslot
statusandstarttheinitializations.Thesystemwillbeinreadystatewhilethepromptisshowingup.










3.2 ConsoleLogin
Whenyouconnecttotheswitchwithaterminalemulationprogram,aloginscreenisdisplayed.Enterausernameandpasswordto
logintoaccesstheswitch.

ItemsOptionDefaultValue
UsernameMax:6,Min:1characters,casesensitiveadmin
PasswordMax:6,Min:1characters,casesensitive123






3.3 WebLogin
3.3.1 SettingIPAddressbyConsolePort
Whenyouaregoingtologinaswitchthroughthewebpage,youhavetoconfiguretheIPaddressfirst.ThedefaultIPaddress/
netmask/defaultgatewayofaswitchis192.168.223.100/255.255.255.0/192.168.223.254,withoutmakinganyconfiguration
changesinadvance,youcanloginaswitchwithdefaultIPaddressaslongasthedefaultIPaddresscanfunctionproperlyinyour
networkenvironment.Otherwise,youhavetore‐configuretheIPaddress,subnetmaskanddefaultgateway.Thefollowingshow
howtoconfiguretheIPaddressofaswitch.

First,loginwiththeconsoleport.


Second,youwillnowenterthe“IPAddress”,then,setuptheIPaddress,subnetmaskandgateway.





3.3.2 LoginwithaWebBrowser
Whenyouconnecttotheswitchthroughawebbrowser,aloginscreenisdisplayed.Enterausernameandpasswordtologinto
accesstheswitch.
Username: admin
Password:
Switch#
Switch(config)# ip address 192.168.1.1 255.255.255.0
Switch
(
confi
g)
# i
p
default-
g
atewa
y
192.168.1.254
=======================================
24 + 2 Switch Module Slot Information
=======================================
Slot 1 .... Yes
Slot 2 .... Yes
=======================================
Username:
Username: admin
Password:
Switch#


ItemsOptionDefaultValue
UsernameMax:6,Min:1characters,casesensitiveadmin
PasswordMax:6,Min:1characters,casesensitive123














Afteruserloginverification,thehomepageoftheswitchwillbeshownasbelow.



4ConsoleUserInterface
4.1 SystemCommands
showrunning‐config
Displaytherunningconfigurationoftheswitch.

copyrunning‐configstartup‐config
Backuptheswitchconfigurations.

erasestartup‐config
Resettodefaultfactorysettingsatnextboottime.

cleararp[<ip‐addr>]ClearentriesintheARPcache.
Parameters:
[<ip‐addr>]specifiestheIPaddresstobecleared.IfnoIPaddressisentered,theentireARPcacheiscleared.

showarp
ShowtheIPARPtranslationtable.

pingip‐addr[<1..999>]SendICMPECHO_REQUESTtonetworkhosts.
Parameters:
[<1..999>]specifiesthenumberofrepetitions.Ifnotentered,itwillcontinuetopinguntilyoupress<Ctrl>‐Ctostop.

[no]per‐vlan‐flooding‐portmaskEnableordisableperVLANdefaultfloodingportmask.

per‐vlan‐flooding‐portmask<unicast|multicast><vlan‐id><port‐list>SetunicastormulticastperVLANdefaultfloodingportmask.

showper‐vlan‐flooding‐portmask
DisplayunicastandmulticastperVLANdefaultfloodingportmasktable.

4.2 SwitchStaticConfiguration
4.2.1 PortConfigurationandStatus
portstate<on|off>[<port‐list>]
Turntheportstateonoroff.
Parameters:
<port‐list>specifiestheportstobeturnonoroff.Ifnotentered,allportsareturnonoroff.

portnego<force|auto|nway‐force>[<port‐list>]
Setportnegotiation.
Parameters:
<port‐list>specifiestheportstobeset.Ifnotentered,allportsareset.

portspeed<10|100|1000><full|half>[<port‐list>]
Setportspeed(inmbps)andduplex.
Parameters:
<port‐list>specifiestheportstobeset.Ifnotentered,allportsareset.

portflow<enable|disable><enable|disable>[<port‐list>]
Enableordisableportflowcontrol.
Parameters:
1st<enable|disable>enablesordisablesflowcontrolinfullduplexmode.
2nd<enable|disable>enablesordisablesflowcontrolinhalfduplexmode.
<port‐list>specifiestheportstobeset.Ifnotentered,allportsareset.

portrate<ingress|egress><0..8000>[<port‐list>]
Setporteffectiveingressoregressrate.
Parameters:
<0..8000>specifiestheingressoregressrate.<0..8000>
<port‐list>specifiestheportstobeset.Ifnotentered,allportsareset.

portsecurity<on|off>[<port‐list>]
Setportpriority.Whenportsecurityison,theportwillstopMACaddresslearning,andforwardonlypacketswithMACaddressin
thestaticMACaddresstable.
Parameters:
<port‐list>specifiestheportstobeset.Ifnotentered,allportsareset.

portprotectedgroup<1‐2><port‐list>
Setprotectedportgroupmember.
Parameters:
<port‐list>specifiesthegroupmemberports.

portprotected<port‐list>
Setprotectedportlist.
Parameters:
<port‐list>specifiestheprotectedportlist.

portpriority<disable|low|high>[<port‐list>]
Setportpriority.
Parameters:
<port‐list>specifiestheportstobeset.Ifnotentered,allportsareset.

portjumboframe<enable|disable>[<port‐list>]
Setportjumboframe.Whenportjumboframeisenable,theportforwardjumboframepacket
Parameters:
<port‐list>specifiestheportstobeset.Ifnotentered,allportsareset.

showportstatus

Showportstatus,includingportState,Link,Trunking,VLAN,Negotiation,Speed,Duplex,Flowcontrol,Ratecontrol,Priority,Security,BSF
control.

showportstatistics<port‐id>
Showportstatistics,includingTxGoodPkt,TxBadPkt,RxGoodPkt,RxBadPkt,TxAbort,Collision,andDropPkt.
Parameters:
<port‐id>specifiestheporttobeshown.

showportprotection
Showprotectedportinformation.

4.2.2 Trunk
Trunkallowstheswitchtocombineportssothattheyfunctionlikeasinglehigh‐speedlink.Itcanbeusedtoincreasethebandwidth
tosomedevicestoprovideahigh‐speedlink.Forexample,trunkisusefulwhenmakingconnectionsbetweenswitchesorconnecting
serverstotheswitch.Trunkcanalsoprovidearedundantlinkforfaulttolerance.Ifonelinkinthetrunkfailed,theswitchcanbalance
thetrafficamongtheremaininglinks.


NOTE:
1:The10/100Mbpsportcannotbetrunkedwithgigabitport(port25~26).
2:Allportsinthesametrunkgroupwillbetreatedasasingleport.Ifatrunkgroupexists,theportsbelongingtothattrunkwillbe
replacedby“TRUNK#”intheVLANconfigurationscreen.Thefollowingexampleconfiguresport25~26as“TRUNK1.”


4.2.2.1 TrunkingCommands
showtrunk
Showtrunkinginformation.

trunkadd<trunk‐id><lacp|no‐lacp><port‐list><active‐port‐list>
Addanewtrunkgroup.
Parameters:
<trunk‐id>specifiesthetrunkgrouptobeadded.
<lacp>specifiestheaddedtrunkgrouptobeLACPenabled.
<no‐lacp>specifiestheaddedtrunkgrouptobeLACPdisabled.
<port‐list>specifiestheportstobeset.
<active‐port‐list>specifiestheportstobesettoLACPactive.

notrunk<trunk‐id>
Deleteanexistingtrunkgroup.
Parameters:
<trunk‐id>specifiesthetrunkgrouptobedeleted.


4.2.2.2 LACPCommands
[no]lacp
Enable/disableLACP.

lacpsystem‐priority<1..65535>
SetLACPsystempriority.
Parameters:
<1..65535>specifiestheLACPsystempriority.

nolacpsystem‐priority
SetLACPsystemprioritytothedefaultvalue32768.

showlacpstatus
ShowLACPenable/disablestatusandsystempriority.

showlacp
ShowLACPinformation.

showlacpagg<trunk‐id>
ShowLACPaggregatorinformation.
Parameters:
<trunk‐id>specifiesthetrunkgrouptobeshown.

showlacpport<port‐id>
ShowLACPinformationbyport.
Parameters:
<port‐id>specifiestheporttobeshown.

NOTE:IfVLANgroupexist,allofthemembersofstatictrunkgroupmustbeinsameVLANgroup.

4.2.3 VLAN
4.2.3.1 VirtualLANs
AVirtualLAN(VLAN)isalogicalnetworkgroupthatlimitsthebroadcastdomain.Itallowsyoutoisolatenetworktrafficsoonly
membersoftheVLANreceivetrafficfromthesameVLANmembers.Basically,creatingaVLANwithinaswitchislogicallyequivalent
ofreconnectingagroupofnetworkdevicestoanotherLayer2switch.However,allthenetworkdevicesarestillpluggedintothe
sameswitchphysically.AstationcanbelongtomorethanoneVLANgroup.VLANpreventsusersfromaccessingnetworkresources
ofanotheronthesameLAN,thustheuserscannotseetheharddisksandprintersofanotheruserinthesamebuilding.VLANcan
alsoincreasethenetworkperformancebyreducingthebroadcasttrafficandenhancethesecurityofthenetworkbyisolatinggroups.

ThisSwitchsupportstwotypesofVLANs:
•Port‐based
•IEEE802.1Q(tag)‐based
OnlyoneofthetwoVLANtypescanbeenabledatonetime.

Port‐basedVLANsareVLANswherethepacketforwardingdecisionismadebasedonthedestinationMACaddressanditsassociated
port.Youmustdefinetheoutgoingportsallowedforeachportwhenyouuseport‐basedVLANs.Inport‐basedVLANs,thepackets
receivedfromoneportcanonlybesenttotheportswhichareconfiguredtothesameVLAN.Asshowninthefollowingfigure,the
switchadministratorconfiguredport1~2asVLAN1andport3~4asVLAN2.Thepacketsreceivedfromport1canonlybeforwarded
toport2.Thepacketsreceivedfromport2canonlybeforwardedtoport1.ThatmeansthecomputerAcansendpacketsto
computerB,andviceversa.ThesamesituationalsooccurredinVLAN2.ThecomputerCandDcancommunicatewitheachother.
However,thecomputersinVLAN1cannotseethecomputersinVLAN2sincetheybelongedtodifferentVLANs.


