Manuals / Planet Technology / Computer Equipment / Switch

Planet Technology WGSW-24040R, SGSW-24040R user manual ACL Lookup

Models: SGSW-24040R WGSW-24040R

1 308

Download 308 pages 62.4 Kb

Page 276

User’s Manual of WGSW-24040 / WGSW-24040R

SGSW-24040 / SGSW-24040R

ACL Lookup

Description:

Show ACE, default: All ACEs.

Syntax:

ACL Lookup [<ace_id>]

Parameters:

<ace_id>: ACE ID (1-1024)

ACL Lookup

Description:

Clear all ACL counters.

Syntax:

ACL Clear

276

Image 276

Planet Technology WGSW-24040R, SGSW-24040R user manual ACL Lookup

Contents

User’s Manual Trademarks DisclaimerFCC Warning CE Mark Warning Weee WarningTable of Conetnts 5.1 105 118132 140159 181185 187208 212229 237244 251 257265 272 277282 287290 293295 297Packet Contents Product DescriptionHigh Performance How to Use This Manual Product Features High-performance 5GbE Stacking interface ¾ Layer 2 Features¾ Physical Port 24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45¾ Multicast ¾ Security¾ Management ¾ StackingProduct Specification Hardware SpecificationTraffic classification based, Strict priority and WRR Switch Front Panel Hardware DescriptionGigabit TP interface Gigabit SFP slotsReset button About 1~3 secondStack ID Master LEDLED Indications 1000Base-SX/LX SFP interfaces Shared Port-21~Port-24 Speed 1000MbpsOff To indicate that the SFP port is link down Switch Rear Panel 5Rear panel of WGSW-24040AC Power Receptacle Stack portsCascade UP DC Power Connector 9SGSW-24040 / SGSW-24040R Stack PortsInstall the Switch Desktop InstallationSupply power to the Managed Switch Rack MountingInstalling the SFP transceiver 13Plug-in the SFP transceiver„ Approved Planet SFP Transceivers „ Connect the fiber cable„ Remove the transceiver module Page Connecting DC Power Supply WGSW-24040R / SGSW-24040R Power switch in the OFF position and the DC power is OFFStack Installation SGSW-24040 / SGSW-24040RConnecting Stacking cable Management StackingStack ID Master LED 21Separated Stack connection Requirements This chapter covers the following topicsManagement Access Overview Administration ConsoleMethod Advantages Disadvantages Direct Access „ 115200 bps „ 8 data bits „ No parity „ 1 stop bit4Web main screen of Managed Switch Web ManagementSNMP-Based Network Management ProtocolsVirtual Terminal Protocols Snmp Protocol Management ArchitectureWEB Configuration About Web-based Management„ Logging on the switch Http//192.168.0.100Page Main WEB Panel DisplayState RJ-45 Ports SFP Ports Stack Ports5WGSW/SGSW Managed Switch Main Funcrions Menu Main MenuIP Configuration SystemSystem Information Page IP Configuration User Authentication Old PasswordNew Password PasswordSntp Configuration WEB Firmware Upgrade Click System Web Firmware UpgradeTftp Firmware Upgrade Upgrade buttonClick System -TFTP Firmware Upgrade Tftp Server IP8TFTP Firmware upgrade pop-up message Configuration Save „ Configuration DownloadConfiguration Upload „ Configuration UploadPage Factory Default System Reboot „ Example 1 Save Current Configuration setting 18Set Start-up screenshot„ Example 2 Downloading System Software from a Server 19Download system software screenshot„ Example 3 Downloading Configuration Settings from a Server „ Example 4 Saving or Restoring Configuration Settings Snmp System Configuration Simple Network Management ProtocolSnmp Overview Snmp OperationsMode VersionRead Community Write CommunitySnmp System Information Configuration Snmp Trap ConfigurationSystem Contact System NameTrap Mode Trap VersionTrap Community Trap DestinationSNMPv3 Configuration SNMPv3 Accesses ConfigurationDelete Group NameSNMPv3 Communities Configuration Security ModelSecurity Level Read View NameSNMPv3 Groups Configuration Security NameSNMPv3 Users Configuration AuthenticationUser Name ProtocolSNMPv3 Views Configuration Privacy PasswordPrivacy Protocol View Name„ Example Add a new SNMPv3 user View TypeOID Subtree „ Example Add a new SNMPv3 Group 9SNMPv3 Users-NEW page screenshot11SNMPv3 Groups-NEW page screenshot Port Configuration Port ManagementPower Control PortLink Flow ControlPort Statistics Overview 2Port Statistics Overview page screenshotDetailed Port Statistics Receive Error Counters Receive Total and Transmit TotalReceive and Transmit Size Counters Receive and Transmit Queue CountersPort Mirroring Configuration Transmit Error CountersTx Drops Mirror Port Configuration Port to mirror to„ Sgsw Stackable Switch 6Port Mirror Configuration page screenshotLink Aggregation 1Link AggregationPage Static Aggregation Configuration Static Aggregation Group ConfigurationHash Code Contributors Destination MACLocality Group IDPort Members Lacp Configuration Lacp EnabledKey RoleLacp System Status Lacp Port StatusLacp Partner PortLacp statistics Lacp TransmittedLacp Received DiscardedVlan Vlan OverviewIeee 802.1Q Vlan Ieee 802.1Q Standard802.1Q Vlan Tags Port Vlan ID Vlan Classification ObjectDescription Vlan Mode Vlan Basic InformationSupported VLANs VLANs Vlan LearningVlan Port Configuration Understand nomenclature of the SwitchThis is the logical port number for this row PvidIn-Q Mode Link TypeEther type Port Vlan IDVlan Membership Configuration „ Adding Static Members to VLANs Vlan IndexVlan ID Private Vlan Configuration Overview„ Promiscuous ports „ Isolated portsPvlan Port Type IsolatedPromiscuous Rapid Spanning Tree Protocol Bridge Protocol Data UnitsCreating a Stable STP Topology STP Port StatesPort transitions from one state to another as follows Configurable Except by setting prioritySTP Parameters STP Operation Levels BelowMaximum Age Timer Forward Delay TimerVariable Description Default Value Port Priority Default Spanning-Tree Configuration Feature Default ValueIllustration of STP 110 Rstp System Configuration Forward DelaySystem Priority Max AgeRstp Bridge Status Rstp Port Configuration Rstp EnabledPath Cost Priority EdgePoint2Point Port Type Link Type Ieee 802.1w-2001 Ethernet Rstp Port Status Rstp Port Statistics RstpSTP TCNQuality of Service Understand QOSQoS Terminology QoS Control List Configuration QCL #QCE Type Frame.The following QCE types are supportedQoS Control Entry Configuration Type ValueTraffic Class Port QoS Configuration Default Class Queuing ModeQueue Weighted User PriorityQCL Configuration Wizard Set up Policy RulesApplication Rules Includes the folling fileds Object Description QCL IDFrames that hit this QCE are set to match this specific QCL Port in a QCL member, click the radio buttonSet up Typical Network Application Rules Audio and VideoGames User Definition ButtonsSelect the QCL ID to which these QCEs apply Set up ToS Precedence Mapping Set up Vlan Tag Priority Mapping QoS Statistics Bandwidth Control Storm Control Configuration Frame TypeStatus RateMulticast Igmp SnoopingAbout the Internet Group Management Protocol Igmp Snooping 133 Igmp Versions 1 0x170x12 Idle Member „ Igmp QuerierIgmp Snooping Configuration Flooding enabledEnabled Igmp Querier Igmp SnoopingIgmp Port Related Configuration Router PortFast Leave Igmp Snooping Status Object DescriptionVlan ID of the entry Multicast Address Table Ieee 802.1X Network Access Control Overview of 802.1X Port-Based AuthenticationOverview of MAC-Based Authentication Understanding Ieee 802.1X Port-Based Authentication „ Device Roles„ Authentication Initiation and Message Exchange 10-2EAP message exchange „ Ports in Authorized and Unauthorized States10.2 802.1X System Configuration Radius IPRadius Secret Reauthentication EnabledEAP Timeout Period10.3 802.1X and MAC-Based Authentication Port Configuration Port State Max ClientsRestart 10.4 802.1X Port Status StateLast Source Last ID10.5 802.1X and MAC-Based Authentication Statistics 10-6802.1X Statistics Port 1 page screenshotEapol Counters Direction Name Ieee Name DescriptionRadius Counters Direction Name Ieee Name Description Port-basedMAC-based Port- and MAC-based„ Last Supplicant/Client Info MAC-basedWindows Platform Radius Server Configuration 155 10.7 802.1X Client Configuration „ Configure Sample EAP-MD5 Authentication157 158 Access Control Lists Access Control List ConfigurationIngress Port Action Rate LimiterPort Copy LoggingACE Configuration Switch„ MAC Parameters „ Vlan ParametersSmac Filter Dmac Filter„ ARP Parameters ARP/ Rarp„ IP Parameters IP/Ethernet LengthEthernet IP Protocol FilterIP TTL „ Icmp Parameters „ TCP/UDP ParametersTCP FIN TCP SYNTCP PSH TCP ACKACL Configuration wizard „ Ethernet Type ParametersEtherType Filter Policy 5 for guest ports Internet access only 11-3Set up Policy Rules page screenshotSet up Port Policies Policy IDCommon Servers Instant MessagingMSN Messenger Google Talk Yahoo Messenger Ethernet TypeNetBIOS Ping Request Ping Reply OthersSnmp Traps 173 Set up Source MAC and Source IP Binding Binding EnabledSource IP Address Set up DoS Attack Detection Rules UDP DoS FraggleDeath Icmp DoS SmurfSwitch n Port nPolicy n DenyACL Rate Limiter Configuration Rate Limiter ID16K 32K 64K 128K 512KACL Ports Configuration 180 MAC Address Table Configuration Aging ConfigurationRange 10-10000000 seconds Default 300 seconds Address TableStatic MAC Table Configuration MAC Address Table Status Dynamic MAC TableNavigating the MAC Table MAC Table Columns184 Disable MAC Table LearningAuto Secure186 Lldp Link Layer Discovery ProtocolLldp Configuration „ Lldp ParametersTx Interval „ 4.14.2.2 Lldp Port Configuration Tx DelayTx Hold Tx ReinitPort Descr Sys NameSys Descr Sys CapaLldp Neighbor Lldp Statistics „ Global CountersLocal Counters Cable Diagnostics Network DiagnasticsCable Status Ping Destination IP AddressPing Size Stacking SGSW-24040 / SGSW-24040R „ Ring topology „ Chain topology same as a disconnected ring197 Switch IDs „ Assigning and Swapping Switch IDs„ Removing a Switch From the Stack „ Replacing a Switch„ General Switch ID Assignment Rules Master ElectionStack Redundancy Shortest Path Forwarding Utilize all stack links in the ringStack Configuration Master Switch Stack Information„ Stack Topology „ Stack List„ Master Forwarding Table Stack Port State Ovewview 16-10Port State Overview page screenshot„ Identify the Master Switch Stack Example206 207 Accessing the CLI Logon to the ConsoleConfigure IP address „ Configure IP addressSwitch/ ip setup 192.168.1.100 255.255.255.0 Subnet Mask GatewayTelnet login System Command Command GroupsSystem Configuration SyntaxSystem Reboot System Restore DefaultExample Default Setting System NameSystem Prompt System Password System SntpSystem Timezone System Firmware Load217 IP Configuration SyntaxParameters IP Setup IP Ping220 Port Management Command Port ConfigurationPort State Port Mode Port Flow ControlPort Maximum Frame Port Power Port ExcessivePort Statistics Port VeriPHYPort Numbers Mirror Configuration Mirror PortMirror SID Mirror Mode Link Aggregation Command Aggregation ConfigurationAggregation Add Parameters portlist Port listAggregation Delete Aggregation LookupAggregation Mode Lacp Configuration Lacp Mode Lacp KeyLacp Role Lacp StatusLacp Statistics 236 Vlan Configuration Command Vlan ConfigurationVlan Mode Vlan Frame Type AllTagged Allow tagged frames only Vlan Ingress Filter Vlan Link TypeVlan Q-in-Q Mode Vlan Ethernet TypeMan Set out layer Vlan tag ether type MAN Vlan Add Vlan DeleteVlan Lookup Pvlan Configuration Pvlan IsolateSpanning Tree Protocol Command Rstp ConfigurationRstp SysPrio Rstp Delay Rstp AgeRstp Mode Normal Rstp Default SettingRstp Version Rstp Cost Rstp PriorityRstp Edge Rstp P2PRstp Status Rstp Statistics Rstp mCheckMulticast Configuration Command Igmp ConfigurationIgmp Mode Igmp State Igmp Querier Igmp Fast LeaveIgmp Router Igmp Flooding Igmp GroupsIgmp Status 256 Quality of Service Command QoS ConfigurationQoS Default QoS ClassesQoS Tag Priority QoS QCL PortQclid QCL ID Default Setting QoS QCL AddParameters Qclid QceidQoS QCL Delete QoS QCL LookupQoS Mode QoS WeightQoS Rate Limiter QoS Shaper QoS Unicast QoS MulticastQoS Broadcast 802.1x Port Access Control Command Dot1x ConfigurationDotx1 Mode Dot1x Status Dot1x ServerDot1x Authenticate Dot1x SecretDot1x Re-authentication Dot1x PeriodDot1x Timeout Dot1x StatisticsDot1x Clients Dot1x AgetimeParameters Portlist Dot1x Holdtime Access Control List Command ACL ConfigurationACL Action ACL Policy ACL RateACL Add ACL Delete ACL Lookup MAC Address Table Command MAC ConfigurationMac Add MAC Delete MAC LookupMAC Age Time MAC LearningMAC Dump MAC StatisticsMAC Flash Lldp Command Lldp ConfigurationLldp Mode Lldp Optional TLV Lldp IntervalLldp Delay Lldp HoldLldp Reinit Lldp InformationLldp Statistics Stack Management Command Stack ListStack Master Reelect Stack Select Stack SID SwapStack SID Delect Stack SID Asign Learning Forwarding & FilteringStore-and-Forward Auto-Negotiation If attached device is 100Base-TX port will set to292 Link LED is not lit Solution Performance is bad SolutionWhy the Switch doesnt connect to the network Solution Switch does not power up SolutionStacking not functioning Solution „ While IP Address be changed or forgotten admin passwordSwitchs RJ-45 Pin Assignments RJ-45 Connector pin assignment Contact10/100Mbps, 10/100Base-TX Straight Cable = Brown Straight Cable= Brown ACE ACLAggregation ARPDES DhcpDNS DoSDscp Ethernet TypeFTP HttpIcmp IeeeIgmp ImapIpmc LldpMAC Table NetBIOS MD5Mirroring NFSPing PolicerPOP3 Private VlanQCL QoSRarp SambaSHA SmtpSnmp SntpTCP TelnetTftp ToSUDP 308