Main
TigerSwitch 10/100
24-Port Layer 3 Switch
Managemen t Guide
Page
Page
Page
L
W
IMITED
v
ARRANTY
vi
vii
ONTENTS
1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-1
2 Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
3 Configuring the Switch . . . . . . . . . . . . . . . . . . . . . . . . 3-1
viii
ix
x
xi
4 Command Line Interface . . . . . . . . . . . . . . . . . . . . . . 4-1
xii
xiii
xiv
xv
xvi
xvii
xviii
xix
xx
Page
Page
1-1
NTRODUCTION
Key Features
1-2
Description of Software Features
F
S
1-3
1-4
F
S
1-5
1-6
F
S
1-7
1-8
System Defaults
D
1-9
1-10
D
1-11
Page
NITIAL
2-1
ONFIGURATION
Connecting to the Switch
Configuration Options
C
2-2
Required Connections
S
2-3
C
2-4
Remote Connections
Basic Configuration
C
2-6
Setting Passwords
Setting an IP Address
C
2-7
Manual Configuration
C
2-8
Dynamic Configuration
C
2-9
Enabling SNMP Management Access
Community Strings
C
2-10
C
2-11
Trap Receivers
Saving Configuration Settings
C
Managing System Files
Page
Page
3-1
3
S
THE
ONFIGURING
Page
Navigating the Web Browser Interface
Page
I
B
W
3-5
S
3-6
I
B
W
3-7
S
3-8
I
B
W
3-9
S
3-10
I
B
W
3-11
Basic Configuration
Displaying System Information
C
3-13
S
3-14
Displaying Switch Hardware/Software Versions
C
ASIC
ONFIGURATION
3-15
Web Click System, Switch Information.
S
3-16
Displaying Bridge Extension Capabilities
C
3-17
Setting the Switchs IP Address
S
3-18
Page
Page
C
3-21
S
3-22
Managing Firmware
Downloading System Software from a Server
C
3-23
Saving or Restoring Configuration Settings
Page
C
3-25
Setting the System Clock
S
3-26
Configuring SNTP
C
3-27
Setting the Time Zone
User Authentication
A
3-29
S
3-30
Configuring Local/Remote Logon Authentication
A
3-31
S
3-32
Configuring 802.1x Port Authentication
A
3-33
S
3-34
Displaying 802.1x Global Settings
A
3-35
S
3-36
Configuring 802.1x Global Settings
A
3-37
S
3-38
Configuring Port Authorization Mode
A
3-39
CLI This example sets the authentication mode to enable dot1x on port 2.
Displaying 802.1x Statistics
This switch can display statistics for dot1x protocol exchanges for any port. Statistical Values
S
CLI This example displays the dot1x statistics for port 4.
3-40
C
Access Control Lists
Configuring Access Control Lists
S
3-42
Setting the ACL Name and Type
C
L
3-43
Configuring a Standard IP ACL
S
3-44
Configuring an Extended IP ACL
C
L
3-45
Page
C
L
3-47
Configuring a MAC ACL
Page
Page
S
3-50
Simple Network Management Protocol
Setting Community Access Strings
Page
S
3-52
H
P
Dynamic Host Configuration Protocol
Configuring DHCP Relay Service
Page
H
P
C
3-55
Configuring the DHCP Server
S
3-56
Enabling the Server, Setting Excluded Addresses
H
P
C
3-57
Configuring Address Pools
S
3-58
Page
Page
Page
S
3-62
Displaying Address Bindings
C
Port Configuration
Displaying Connection Status
S
3-64
C
3-65
S
THE
ONFIGURING
WITCH
C
3-67
Configuring Interface Connections
S
3-68
C
3-69
Setting Broadcast Storm Thresholds
S
3-70
Configuring Port Mirroring
C
3-71
Showing Port Statistics
S
3-72
C
3-73
S
3-74
C
3-75
Page
C
3-77
Configuring Rate Limits
Page
C
3-79
Trunk Configuration
}
S
3-80
Dynamically Configuring a Trunk
}
Page
}
S
3-82
Statically Configuring a Trunk
C
RUNK
ONFIGURATION
3-83
Address Table Settings
Page
Page
Spanning Tree Algorithm Configuration
S
3-88
x x
T
C
A
3-89
Displaying Global Settings
S
3-90
T
C
A
3-91
S
3-92
Configuring Global Settings
T
C
A
3-93
Page
T
C
A
3-95
Displaying Interface Settings
x
T
x
C
A
3-97
Page
T
C
A
3-99
Configuring Interface Settings
S
3-100
T
C
A
3-101
VLAN Configuration
3-103
Assigning Ports to VLANs
S
3-104
3-105
S
3-106
Forwarding Tagged/Untagged Frames
Page
S
3-108
Displaying Current VLANs
3-109
S
3-110
Creating VLANs
3-111
Adding Static Members to VLANs (VLAN Index)
S
3-112
3-113
Adding Static Members to VLANs (Port Index)
Page
3-115
S
3-116
3-117
x
3-119
Configuring Uplink and Downlink Ports
S
3-120
Class of Service Configuration
Setting the Default Priority for Interfaces
Page
S
3-122
Mapping CoS Values to Egress Queues
Page
S
3-124
Setting the Service Weight for Traffic Classes
Page
Page
Page
S
3-128
C
S
3-129
Mapping DSCP Priority
S
THE
ONFIGURING
WITCH
Page
S
3-132
Page
S
3-134
Multicast Filtering
F
3-135
IGMP Protocol
S
3-136
Layer 2 IGMP (Snooping and Query)
F
3-137
Configuring IGMP Snooping Parameters
S
3-138
F
3-139
Displaying Interfaces Attached to a Multicast Router
S
3-140
Specifying Static Interfaces for a Multicast Router
Page
S
3-142
Displaying Port Members of Multicast Services
F
3-143
Assigning Ports to Multicast Services
S
(
3-144
Layer 3 IGMP (Query used with Multicast Routing)
F
3-145
Configuring IGMP Interface Parameters
S
3-146
Page
S
3-148
Displaying Multicast Group Information
3-149
IP Routing
Overview
S
3-150
Initial Configuration
3-151
IP Switching
S
3-152
Routing Path Management
Routing Protocols
3-153
S
3-154
Basic IP Interface Configuration
3-155
Configuring IP Routing Interfaces
S
3-156
3-157
Address Resolution Protocol
S
3-158
Proxy ARP
3-159
Basic ARP Configuration
S
3-160
Configuring Static ARP Addresses
3-161
Displaying Dynamically Learned ARP Entries
S
3-162
3-163
Displaying Local ARP Entries
Page
3-165
Displaying Statistics for IP Protocols
IP Statistics
S
3-166
3-167
Web - Click IP, Statistics, IP.
CLI - See the example on page 3-164.
S
3-168
ICMP Statistics
Page
S
3-170
UDP Statistics
3-171
TCP Statistics
Page
3-173
Displaying the Routing Table
Page
3-175
Configuring the Routing Information Protocol
S
3-176
Configuring General Protocol Settings
3-177
S
3-178
Specifying Network Interfaces for RIP
3-179
Configuring Network Interfaces for RIP
S
3-180
3-181
S
3-182
3-183
Displaying RIP Information and Statistics
S
3-184
RIP Information and Statistics
Page
S
3-186
Configuring the Open Shortest Path First Protocol
3-187
S
3-188
Configuring General Protocol Settings
3-189
S
3-190
3-191
S
3-192
Configuring OSPF Areas
3-193
S
3-194
3-195
S
3-196
Configuring Area Ranges (Route Summarization for ABRs)
3-197
S
3-198
Configuring OSPF Interfaces
3-199
S
3-200
3-201
Page
3-203
S
3-204
Configuring Virtual Links
Page
S
3-206
Configuring Network Area Addresses
3-207
S
3-208
Configuring Summary Addresses (for External AS Routes)
Page
S
3-210
Redistributing External Routes
3-211
S
3-212
Configuring NSSA Settings
3-213
Displaying Link State Database Information
S
3-214
Page
S
3-216
Displaying Information on Border Routers
3-217
Displaying Information on Neighbor Routers
S
3-218
Multicast Routing
R
3-219
Configuring Global Settings for Multicast Routing
Displaying the Multicast Routing Table
S
3-220
Page
S
3-222
Configuring DVMRP
R
3-223
Configuring Global DVMRP Settings
S
3-224
R
3-225
Page
R
3-227
Configuring DVMRP Interface Settings
S
3-228
R
3-229
Displaying Neighbor Information
S
3-230
Displaying the Routing Table
R
3-231
Configuring PIM-DM
S
3-232
Configuring Global PIM-DM Settings
R
3-233
Configuring PIM-DM Interface Settings
S
3-234
R
3-235
S
3-236
Displaying Interface Information
R
3-237
Displaying Neighbor Information
Page
4-1
CHAPTER 4 COMMAND LINE I
Using the Command Line Interface
Accessing the CLI
Console Connection
L
I
4-2
Telnet Connection
C
Entering Commands
Keywords and Arguments
Page
C
NTERING
The command show interfaces ? will display the following information:
OMMANDS
4-5
Page
C
4-7
Exec Commands
L
I
4-8
Configuration Commands
C
4-9
L
I
4-10
Command Line Processing
G
Command Groups
The system commands can be broken down into the functional groups shown below
L
I
4-12
C
4-13
Line Commands
L
I
4-14
line
C
4-15
login
L
I
4-16
password
C
4-17
exec-timeout
L
I
4-18
password-thresh
C
4-19
silent-time
L
I
4-20
databits
C
4-21
parity
Page
C
4-23
stopbits
show line
L
General Commands
I
4-24
Example To show all lines, enter this command:
C
4-25
enable
Page
C
4-27
configure
show history
L
I
4-28
reload
C
4-29
end
exit
Page
M
C
Device Designation Commands
4-31
System Management Commands
Page
M
C
4-33
username
L
I
4-34
enable password
M
C
4-35
Web Server Commands ip http port
L
I
4-36
ip http server
M
C
4-37
Event Logging Commands
logging on
L
I
4-38
logging history
M
C
4-39
clear logging
Page
M
C
4-41
Time Commands
L
I
4-42
sntp client
M
C
4-43
sntp server
L
I
4-44
sntp poll
Page
L
I
4-46
clock timezone
M
C
4-47
System Status Commands
show startup-config
L
I
4-48
M
C
4-49
show running-config
L
I
4-50
show startup-config (4-47)
M
C
4-51
show system
show users
L
I
4-52
show version
C
Flash/File Commands
copy
L
I
4-54
C
4-55
Page
C
4-57
dir
L
I
4-58
whichboot
C
4-59
boot system
L
I
Authentication Commands
Authentication Sequence authentication login
C
4-61
RADIUS Client
Page
C
4-63
radius-server port
radius-server key
Page
C
4-65
radius-server timeout
show radius-server
L
I
4-66
802.1x Port Authentication
Page
L
I
4-68
dot1x max-req
dot1x port-control
C
4-69
dot1x re-authenticate
dot1x re-authentication
Page
C
4-71
dot1x timeout tx-period
L
I
4-72
show dot1x
C
4-73
L
I
4-74
Access Control List Commands
C
L
4-75
L
I
4-76
IP ACLs
access-list ip
C
L
4-77
L
I
4-78
permit, deny (Standard ACL)
C
L
4-79
permit, deny (Extended ACL)
L
I
4-80
C
L
4-81
ip access-group
Page
Page
L
I
4-84
MAC ACLs
access-list mac
C
L
4-85
permit, deny (MAC ACL)
L
I
4-86
Page
Page
Page
L
I
4-90
SNMP Commands
snmp-server community
4-91
snmp-server contact
Page
4-93
snmp-server host
L
I
4-94
snmp-server enable traps
4-95
show snmp
L
I
4-96
4-97
DHCP Commands
DHCP Client ip dhcp client-identifier
L
I
4-98
ip dhcp restart client
4-99
DHCP Relay
ip dhcp restart relay
L
I
4-100
4-101
ip dhcp relay server
L
I
4-102
DHCP Server
4-103
service dhcp
Page
4-105
network
L
I
4-106
default-router
4-107
domain-name
Page
4-109
next-server
bootfile
L
I
4-110
netbios-name-server
4-111
netbios-node-type
L
I
4-112
lease
4-113
host
L
I
4-114
client-identifier
4-115
hardware-address
L
I
4-116
clear ip dhcp binding
4-117
show ip dhcp binding
L
I
4-118
Interface Commands
C
4-119
interface
description
L
I
4-120
speed-duplex
C
4-121
negotiation
L
I
4-122
capabilities
C
4-123
L
I
4-124
flowcontrol
C
4-125
shutdown
L
I
4-126
switchport broadcast packet-rate
C
4-127
clear counters
Page
C
4-129
show interfaces counters
L
I
4-130
C
4-131
show interfaces switchport
L
I
4-132
P
C
Mirror Port Commands
port monitor
L
I
4-134
show port monitor
L
Rate Limit Commands
L
I
4-136
rate-limit
A
Link Aggregation Commands
L
I
4-138
channel-group
Page
L
I
4-140
T
C
Address Table Commands
mac-address-table static
L
I
4-142
clear mac-address-table dynamic
T
C
4-143
show mac-address-table
L
I
4-144
mac-address-table aging-time
Page
L
I
4-146
Spanning Tree Commands
T
C
4-147
spanning-tree
L
I
4-148
spanning-tree mode
T
C
4-149
spanning-tree forward-time
Page
T
C
4-151
spanning-tree priority
L
I
4-152
spanning-tree pathcost method
Page
L
I
4-154
spanning-tree cost
T
C
4-155
spanning-tree port-priority
L
I
4-156
spanning-tree edge-port
T
C
4-157
spanning-tree portfast
L
I
4-158
spanning-tree link-type
T
C
4-159
spanning-tree protocol-migration
L
I
4-160
show spanning-tree
T
C
REE
PANNING
OMMANDS
VLAN Commands
Editing VLAN Groups
vlan database
4-163
vlan
L
I
Configuring VLAN Interfaces
4-164
4-165
interface vlan
L
I
4-166
switchport mode
4-167
switchport acceptable-frame-types
L
I
4-168
switchport ingress-filtering
4-169
switchport native vlan
L
I
4-170
switchport allowed vlan
4-171
switchport forbidden vlan
L
I
4-172
Displaying VLAN Information
show vlan
4-173
Configuring Private VLANs
pvlan
L
I
4-174
show pvlan
GVRP
GVRP and Bridge Extension Commands
bridge-ext gvrp
Page
GVRP
C
E
B
4-177
L
I
4-178
show gvrp configuration
garp timer
GVRP
C
E
B
4-179
Page
C
4-181
Priority Commands
Priority Commands (Layer 2)
L
I
4-182
switchport priority default
C
4-183
queue bandwidth
L
I
4-184
queue cos-map
C
4-185
show queue bandwidth
L
I
4-186
show queue cos-map
C
4-187
Priority Commands (Layer 3 and 4)
map ip port (Global Configuration)
L
I
4-188
map ip port (Interface Configuration)
C
4-189
map ip precedence (Global Configuration)
map ip precedence (Interface Configuration)
L
I
4-190
C
4-191
map ip dscp (Global Configuration)
map ip dscp (Interface Configuration)
L
I
4-192
C
4-193
show map ip port
L
I
4-194
show map ip precedence
C
4-195
show map ip dscp
L
I
Multicast Filtering Commands
Page
L
I
4-198
ip igmp snooping version
F
C
4-199
show ip igmp snooping
L
I
4-200
show mac-address-table multicast
F
C
4-201
IGMP Query Commands (Layer 2)
ip igmp snooping querier
L
I
4-202
ip igmp snooping query-count
Page
L
I
4-204
ip igmp snooping router-port-expire-time
F
C
IGMP Commands (Layer 3)
4-205
L
I
4-206
ip igmp
F
C
4-207
ip igmp robustval
ip igmp query-interval
L
I
4-208
ip igmp max-resp-interval
F
C
4-209
ip igmp last-memb-query-interval
L
I
4-210
ip igmp version
Page
L
I
4-212
clear ip igmp group
F
C
4-213
show ip igmp groups
L
I
4-214
Example The following shows the IGMP groups currently active on VLAN 1:
C
IP Interface Commands
Basic IP Configuration
L
I
4-216
ip address
C
4-217
L
I
4-218
ip default-gateway
C
4-219
show ip interface
show ip redirects
L
I
4-220
ping
C
4-221
Example
Address Resolution Protocol (ARP)
Related Commands interface (4-119)
L
I
4-222
arp
C
4-223
arp-timeout
clear arp-cache
L
I
4-224
show arp
ip proxy-arp
IP Routing Commands
L
I
4-226
Global Routing Configuration
ip routing
C
4-227
ip route
L
I
4-228
clear ip route
show ip route
C
4-229
show ip traffic
L
I
4-230
C
4-231
Routing Information Protocol (RIP)
router rip
L
I
4-232
timers basic
C
4-233
network
L
I
4-234
neighbor
C
4-235
version
L
I
4-236
ip rip receive version
C
4-237
ip rip send version
L
I
4-238
C
4-239
ip split-horizon
L
I
4-240
ip rip authentication key
C
4-241
ip rip authentication mode
L
I
4-242
show rip globals
show ip rip
C
4-243
L
I
Open Shortest Path First (OSPF)
4-244
C
4-245
L
I
4-246
router ospf
C
4-247
router-id
L
I
4-248
compatible rfc1583
default-information originate
C
4-249
Page
C
4-251
area range
L
I
4-252
area default-cost
C
4-253
summary-address
L
I
4-254
redistribute
C
4-255
network area
L
I
4-256
C
4-257
area stub
L
I
4-258
area nssa
C
4-259
L
I
4-260
area virtual-link
C
4-261
L
I
4-262
C
4-263
ip ospf authentication
L
I
4-264
ip ospf authentication-key
C
4-265
ip ospf message-digest-key
Page
C
4-267
ip ospf dead-interval
L
I
4-268
ip ospf hello-interval
ip ospf priority
C
4-269
ip ospf retransmit-interval
L
I
4-270
ip ospf transmit-delay
C
4-271
show ip ospf
Use this command to show basic information about the routing configuration. Command Mode
Page
C
4-273
show ip ospf database
L
I
4-274
C
4-275
The following shows output when using the asbr-summary keyword.
L
I
The following shows output when using the external keyword.
4-276
The following shows output when using the database-summary keyword.
C
4-277
L
I
4-278
The following shows output when using the network keyword.
C
4-279
The following shows output when using the router keyword.
L
I
The following shows output when using the summary keyword.
4-280
C
4-281
show ip ospf interface
L
I
4-282
show ip ospf neighbor
C
4-283
show ip ospf summary-address
L
I
4-284
show ip ospf virtual-links
R
Multicast Routing Commands
L
I
4-286
ip igmp snooping vlan mrouter
Page
L
I
4-288
ip multicast-routing
show ip mroute
R
C
4-289
L
I
DVMRP Multicast Routing Commands
4-290
This example lists all entries in the multicast table in summary form:
R
C
4-291
router dvmrp
Page
Page
Page
R
C
4-295
default-gateway
L
I
4-296
ip dvmrp
R
C
4-297
ip dvmrp metric
L
I
4-298
clear ip dvmrp route
show router dvmrp
R
C
DMVRP routes are shown in the following example:
4-299
The default settings are shown in the following example:
L
I
Example
4-300
show ip dvmrp neighbor
R
C
PIM-DM Multicast Routing Commands
4-301
show ip dvmrp interface
L
I
4-302
router pim
R
C
4-303
ip pim dense-mode
L
I
4-304
ip pim hello-interval
Page
L
I
4-306
ip pim join-prune-holdtime
R
C
4-307
ip pim graft-retry-interval
Page
R
C
4-309
show ip pim interface
show ip pim neighbor
Page
A
PPENDIX
A-1
A T
ROUBLESHOOTING
Page
Page
F
P
S
B-2
B-3
Page
G
Glossary-1
LOSSARY
Glossary-2
Glossary-3
Glossary-4
Glossary-5
Glossary-6
Glossary-7
Page
NDEX
A
B
C
D
F
G
H
I
L
O
P
Q
R
S
T
U
V