MANAGEMENT GUIDE - SMC Networks

1 MANAGEMENT GUIDET igerSwitchTM 10/10024-Port 10/100 Managed switch withPoE, IP Clustering and 4 gigabit PortsSMC6128PL220 MasonIrvine, CA 92618 Phone: (949) 679-8000 TigerSwitch 10/100 MANAGEMENT GuideFrom SMC s Tiger line of feature-rich workgroup LAN solutionsMarch 2008 Pub. # 149100032800AE032008-EK-R04 Information furnished by SMC Networks , Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC. SMC reserves the right to change specifications at any time without 2008 bySMC Networks , MasonIrvine, CA 92618 All rights reserved. Printed in TaiwanTrademarks:SMC is a registered trademark; and EZ switch , TigerStack, TigerSwitch, and TigerAccess are trademarks of SMC Networks , Inc. Other product and company names are trademarks or registered trademarks of their respective WarrantyLimited Warranty Statement: SMC Networks , Inc.

2 ( SMC ) warrants its products to be free from defects in workmanship and materials, under normal use and service, for the applicable warranty term. All SMC products carry a standard 90-day limited warranty from the date of purchase from SMC or its Authorized Reseller. SMC may, at its own discretion, repair or replace any product not operating as warranted with a similar or functionally equivalent product, during the applicable warranty term. SMC will endeavor to repair or replace any product returned under warranty within 30 days of receipt of the product. The standard limited warranty can be upgraded to a Limited Lifetime* warranty by registering new products within 30 days of purchase from SMC or its Authorized Reseller. Registration can be accomplished via the enclosed product registration card or online via the SMC Web site. Failure to register will not affect the standard limited warranty. The Limited Lifetime warranty covers a product during the Life of that Product, which is defined as the period of time during which the product is an Active SMC product.

3 A product is considered to be Active while it is listed on the current SMC price list. As new technologies emerge, older technologies become obsolete and SMC will, at its discretion, replace an older product in its product line with one that incorporates these newer technologies. At that point, the obsolete product is discontinued and is no longer an Active SMC product. A list of discontinued products with their respective dates of discontinuance can be found at: products that are replaced become the property of SMC. Replacement products may be either new or reconditioned. Any replaced or repaired product carries either a 30-day limited warranty or the remainder of the initial warranty, whichever is longer. SMC is not responsible for any custom software or firmware, configuration information, or memory data of Customer contained in, stored on, or integrated with any products returned to SMC pursuant to any warranty. Products returned to SMC should have any customer-installed accessory or add-on components, such as expansion modules, removed prior to returning the product for replacement.

4 SMC is not responsible for these items if they are returned with the must contact SMC for a Return Material Authorization number prior to returning any product to SMC. Proof of purchase may be required. Any product returned to SMC without a valid Return Material Authorization (RMA) number clearly marked on the outside of the package will be returned to customer at customer s expense. For warranty claims within North America, please call our toll-free customer support number at (800) 762-4968. Customers are responsible for all shipping charges from their facility to SMC. SMC is responsible for return shipping charges from SMC to EXCLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE, CUSTOMER S SOLE REMEDY SHALL BE REPAIR OR REPLACEMENT OF THE PRODUCT IN QUESTION, AT SMC S OPTION. THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING WARRANTIES OR CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

5 SMC NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE OR USE OF ITS PRODUCTS. SMC SHALL viNOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER S OR ANY THIRD PERSON S MISUSE, NEGLECT, IMPROPER INSTALLATION OR TESTING, UNAUTHORIZED ATTEMPTS TO REPAIR, OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING, OR OTHER OF LIABILITY: IN NO EVENT, WHETHER BASED IN CONTRACT OR TORT (INCLUDING NEGLIGENCE), SHALL SMC BE LIABLE FOR INCIDENTAL, CONSEQUENTIAL, INDIRECT, SPECIAL, OR PUNITIVE DAMAGES OF ANY KIND, OR FOR LOSS OF REVENUE, LOSS OF BUSINESS, OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE, USE, PERFORMANCE, FAILURE, OR INTERRUPTION OF ITS PRODUCTS, EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

6 SOME STATES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES OR THE LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES FOR CONSUMER PRODUCTS, SO THE ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU. THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS, WHICH MAY VARY FROM STATE TO STATE. NOTHING IN THIS WARRANTY SHALL BE TAKEN TO AFFECT YOUR STATUTORY RIGHTS.* SMC will provide warranty service for one year following discontinuance from the active SMC price list. Under the limited lifetime warranty, internal and external power supplies, fans, and cables are covered by a standard one-year warranty from date of Networks , MasonIrvine, CA 92618viiAbout This GuidePurposeThis GUIDE gives specific information on how to operate and use the MANAGEMENT functions of the GUIDE is intended for use by network administrators who are responsible for operating and maintaining network equipment; consequently, it assumes a basic working knowledge of general switch functions, the Internet Protocol (IP), and Simple Network MANAGEMENT Protocol (SNMP).

7 ConventionsThe following conventions are used throughout this GUIDE to show information:Note:Emphasizes important information or calls your attention to related features or :Alerts you to a potential hazard that could cause loss of data, or damage the system or :Alerts you to a potential hazard that could cause personal PublicationsThe following publication details the hardware features of the switch , including the physical and performance-related characteristics, and how to install the switch :The Installation GuideAlso, as part of the switch s software, there is an online web-based help that describes all MANAGEMENT related HistoryThis section summarizes the changes in each revision of this 2008 RevisionThis is the fourth revision of this GUIDE . This GUIDE is valid for software release Chapter 1: Introduction 1-1 Key Features 1-1 Description of Software Features 1-2 System Defaults 1-6 Chapter 2: Initial Configuration 2-1 Connecting to the switch 2-1 Configuration Options 2-1 Required Connections 2-2 Remote Connections 2-3 Basic Configuration 2-3 Console Connection 2-3 Setting Passwords 2-4 Setting an IP Address 2-4 Manual Configuration 2-4 Dynamic Configuration 2-5 Enabling SNMP MANAGEMENT Access 2-6 Community Strings (for SNMP version 1 and 2c clients) 2-6 Trap Receivers 2-7 Configuring Access for SNMP Version 3 Clients 2-8 Saving Configuration Settings 2-8 Managing System Files 2-9 Chapter 3.

8 Configuring the switch 3-1 Using the Web Interface 3-1 Navigating the Web Browser Interface 3-2 Home Page 3-2 Configuration Options 3-3 Panel Display 3-3 Main Menu 3-4 Basic Configuration 3-12 Displaying System Information 3-12 Displaying switch Hardware/Software Versions 3-13 Displaying Bridge Extension Capabilities 3-15 Setting the switch s IP Address 3-16 Manual Configuration 3-17 Using DHCP/BOOTP 3-18 Enabling Jumbo Frames 3-19 Managing Firmware 3-19 Downloading System Software from a Server 3-20 ContentsiiSaving or Restoring Configuration Settings 3-21 Downloading Configuration Settings from a Server 3-22 Console Port Settings 3-23 Telnet Settings 3-25 Configuring Event Logging 3-28 Displaying Log Messages 3-28 System Log Configuration 3-28 Remote Log Configuration 3-30 Simple Mail Transfer Protocol 3-32 Resetting the System 3-34 Setting the System Clock 3-35 Setting the Time Manually 3-35 Configuring SNTP 3-35 Configuring NTP 3-36 Setting the Time Zone 3-38 Simple Network MANAGEMENT Protocol 3-39 Setting Community Access Strings 3-40 Specifying Trap Managers and Trap Types 3-41 Enabling SNMP Agent Status 3-42 Configuring SNMPv3 MANAGEMENT Access 3-43 Setting the Local Engine ID 3-43 Specifying a Remote Engine ID 3-44 Configuring SNMPv3 Users 3-44 Configuring Remote SNMPv3 Users 3-46 Configuring SNMPv3 Groups 3-47 Setting SNMPv3 Views 3-50 User Authentication 3-52 Configuring User Accounts 3-52 Configuring Local/Remote Logon Authentication 3-54 Configuring Encryption Keys 3-58 AAA Authorization and Accounting 3-60 Configuring AAA RADIUS Group Settings 3-61 Configuring AAA TACACS+ Group Settings 3-61 Configuring AAA Accounting 3-62 AAA Accounting Update 3-64 AAA Accounting Port Settings 3-65 AAA Accounting Exec Command Privileges 3-66 AAA Accounting Exec Settings 3-67 AAA Accounting Summary 3-67 Authorization Settings 3-69 Authorization EXEC Settings 3-70

9 Authorization Summary 3-70 Configuring HTTPS 3-71 Replacing the Default Secure-site Certificate 3-72 Configuring the Secure Shell 3-74 ContentsiiiConfiguring the SSH Server 3-76 Generating the Host Key Pair 3-77 Importing User Public Keys 3-79 Configuring Port Security 3-82 Configuring Port Authentication 3-83 Displaying Global Settings 3-85 Configuring Global Settings 3-86 Configuring Port Settings for 3-86 Displaying Statistics 3-89 Web Authentication 3-90 Configuring Web Authentication 3-91 Configuring Web Authentication for ports 3-92 Displaying Web Authentication Port Information 3-93Re-authenticating Web Authenticated ports 3-94 Network Access MAC Address Authentication 3-95 Configuring the MAC Authentication Reauthentication Time 3-96 Configuring MAC Authentication for ports 3-97 Configuring Port Link Detection 3-98 Displaying Secure MAC Address Information 3-99 MAC Authentication 3-101 Configuring MAC authentication parameters for ports 3-101 Access Control Lists 3-102 Configuring Access Control Lists 3-102 Setting the ACL Name and Type 3-102 Configuring a Standard IP ACL 3-103 Configuring an Extended IP ACL 3-104 Configuring a MAC ACL 3-107 Binding a Port to an Access Control List 3-109 Filtering IP Addresses for MANAGEMENT Access 3-110 Port Configuration 3-112 Displaying Connection Status 3-112 Configuring Interface Connections 3-114 Creating Trunk Groups 3-116 Statically Configuring a Trunk 3-117 Enabling LACP on Selected ports 3-118 Configuring LACP Parameters 3-120 Displaying LACP Port Counters 3-122 Displaying LACP Settings and Status for the Local Side 3-124 Displaying LACP Settings and Status for the Remote Side 3-126 Setting Broadcast Storm Thresholds 3-127 Configuring Port Mirroring 3-129 Configuring Rate Limits 3-130 Rate Limit Configuration 3-130 Showing Port Statistics 3-131 Power Over Ethernet Settings 3-135 ContentsivSwitch Power Status 3-136

10 Setting a switch Power Budget 3-137 Displaying Port Power Status 3-137 Configuring Port PoE Power 3-138 Address Table Settings 3-140 Setting Static Addresses 3-140 Displaying the Address Table 3-141 Changing the Aging Time 3-142 Spanning Tree Algorithm Configuration 3-143 Configuring Port and Trunk Loopback Detection 3-145 Displaying Global Settings 3-146 Configuring Global Settings 3-148 Displaying Interface Settings 3-152 Configuring Interface Settings 3-155 Configuring Multiple Spanning Trees 3-157 Displaying Interface Settings for MSTP 3-160 Configuring Interface Settings for MSTP 3-162 VLAN Configuration 3-163 IEEE VLANs 3-163 Enabling or Disabling GVRP (Global Setting) 3-166 Displaying Basic VLAN Information 3-167 Displaying Current VLANs 3-168 Creating VLANs 3-169 Adding Static Members to VLANs (VLAN Index) 3-170 Adding Static Members to VLANs (Port Index) 3-172 Configuring VLAN Behavior for Interfaces 3-173 Configuring IEEE Tunneling 3-175 Enabling QinQ Tunneling on the switch 3-178 Adding an Interface to a QinQ Tunnel 3-180 Private VLANs 3-181 Displaying Current Private VLANs 3-182 Configuring Private VLANs 3-183 Associating VLANs 3-184 Displaying Private VLAN Interface Information 3-184 Configuring Private VLAN Interfaces 3-185 Protocol VLANs 3-187 Protocol VLAN Group Configuration 3-187 Protocol VLAN System Configuration 3-188 Link Layer Discovery Protocol 3-189 Setting LLDP Timing Attributes 3-189 Configuring LLDP Interface Attributes 3-191 Displaying LLDP Local Device Information 3-194 Displaying LLDP Remote Port Information 3-195 Displaying LLDP Remote Information Details 3-196 Displaying Device Statistics 3-197 ContentsvDisplaying Detailed Device Statistics 3-198 Class of Service Configuration 3-199 Layer 2 Queue Settings 3-199 Setting the Default Priority for Interfaces 3-199 Mapping